Help : Win95 securuty hole (one more)

[Michel Applaincourt]

Rob Naccarato <rob.naccarato at sheridanc.on.ca> wrote :

> Actually, can't it be done via the policies?  In poledit.exe, I think
> the entry is in Computer->Network->Logon (or something like that).
> In there is a selection for "Require validation by NT server before
> access to Win95".
 
yep that's what i have done. 
But here the problem is that authentication prevents you to run
applications without some server told that you have the right, but so
genious Microsoft programmers have decided to permit to run a task manager
even if you have not logged on and that task manager permits to run any
application that is installed locally. For example explorer that give you
e session on the machine.
Very clever, no?


 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    Michel  APPLAINCOURT     | E-mail : michel.applaincourt at umh.ac.be
 Computer Sciences Assistant | Phone  : 32 65 373498 
 Universite de Mons-Hainaut  | Fax    : 32 65 373318
                         
                          [Sad...But True]
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-