Guest Account Activity Help!...

Guest Account Activity Help!...
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Guest Account Activity Help!... VcDeveloper 12-25-2007
Posted by VcDeveloper on December 25, 2007, 2:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have been disabling the Guest account serveral times, and I can't figure
out whats enabling it.

I am assuming its Virtual PC 2007, but I can't duplicate the action. Seems
like its random.

I have Clearwire as my ISP. There a wireless ISP company. There wireless
hub is connect to my Dynex Router and I have no ports open (I tested my
ports through GRC with a Stealth rating).

I have a Desktop and Labtop connect to my Router. My Desktop has the NVidia
Active Armor internet card. It's active and set to medium.

Can anyone give me some idea's on what is changing my Guest account. Also,
I changed the Guest name and set a password to it using the Local Security
Policy, and it was still enabled.

Thanks for your help!...



Posted by Paul Adare on December 25, 2007, 2:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Tue, 25 Dec 2007 11:43:50 -0800, VcDeveloper wrote:

> I have been disabling the Guest account serveral times, and I can't figure
> out whats enabling it.
>
> I am assuming its Virtual PC 2007

Virtual PC does not use the guest account and is definitely not responsible
for enabling it.

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
APL is a write-only language. -- Roy Keir

Posted by VcDeveloper on December 25, 2007, 3:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Can I use MS Network Monitor 3.1 to find out how this is being done?

> On Tue, 25 Dec 2007 11:43:50 -0800, VcDeveloper wrote:
>
>> I have been disabling the Guest account serveral times, and I can't
>> figure
>> out whats enabling it.
>>
>> I am assuming its Virtual PC 2007
>
> Virtual PC does not use the guest account and is definitely not
> responsible
> for enabling it.
>
> --
> Paul Adare
> MVP - Virtual Machines
> http://www.identit.ca
> APL is a write-only language. -- Roy Keir



Posted by VcDeveloper on December 25, 2007, 5:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I installed MS Network Monitor and someone sending datagrams through my
virtual pc to my host using the Netbios ports.

My Window Live Messenger activates, and it never done this until today.

>I have been disabling the Guest account serveral times, and I can't figure
>out whats enabling it.
>
> I am assuming its Virtual PC 2007, but I can't duplicate the action.
> Seems like its random.
>
> I have Clearwire as my ISP. There a wireless ISP company. There wireless
> hub is connect to my Dynex Router and I have no ports open (I tested my
> ports through GRC with a Stealth rating).
>
> I have a Desktop and Labtop connect to my Router. My Desktop has the
> NVidia Active Armor internet card. It's active and set to medium.
>
> Can anyone give me some idea's on what is changing my Guest account.
> Also, I changed the Guest name and set a password to it using the Local
> Security Policy, and it was still enabled.
>
> Thanks for your help!...
>



Posted by VcDeveloper on December 25, 2007, 5:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
This is bizare, when I restart my vpc I get a request like this:

5 0.010742 DMZ 192.168.0.1 DNS DNS: QueryId = 0x9711, QUERY
(Standard query), Query for www.krypt36.com of type Host Addr on class
Internet

Who in the heck is this? And, the website of this address doesn't show in my
browser.


>I have been disabling the Guest account serveral times, and I can't figure
>out whats enabling it.
>
> I am assuming its Virtual PC 2007, but I can't duplicate the action.
> Seems like its random.
>
> I have Clearwire as my ISP. There a wireless ISP company. There wireless
> hub is connect to my Dynex Router and I have no ports open (I tested my
> ports through GRC with a Stealth rating).
>
> I have a Desktop and Labtop connect to my Router. My Desktop has the
> NVidia Active Armor internet card. It's active and set to medium.
>
> Can anyone give me some idea's on what is changing my Guest account.
> Also, I changed the Guest name and set a password to it using the Local
> Security Policy, and it was still enabled.
>
> Thanks for your help!...
>



Similar ThreadsPosted
Attached files to a Hotmail free email account can't be opened in a wxp guest account January 20, 2007, 7:47 pm
Guest account access July 27, 2005, 6:32 pm
Event ID 576/538 - Guest Logon October 27, 2007, 8:38 pm
Deny access to d drive by the guest February 24, 2007, 4:51 pm
Event Viewer Security shows Guest logon? May 11, 2006, 8:54 pm
Pipe & DDE activity March 24, 2006, 12:43 pm
Renamed Local Administrator Account Name Reverts to Old Account Name November 30, 2005, 4:39 am
Monitoring user activity November 25, 2005, 4:33 pm
Need Opinion on the Following Suspicious Activity August 17, 2006, 6:23 pm
Logging activity on client PCs August 25, 2006, 10:53 am

The site map in XML format XML site map

Contact Us | Privacy Policy