Unusual security vulnerability reported [message #146764] |
Tue, 08 October 2019 17:24  |
estinson
Messages: 3 Registered: February 2019
|
|
|
|
One laptop suddenly had a report of medium security vulnerabilities for the security and system event logs.
The suggested fix was to create a DWORD key named "RestrictGuestAccess".
I checked this manually, and found that Guest has no access to the file, the directory, or reg key(s) at all.
So is this alert just checking for the presence of that reg key? If so, this is not a standard way to restrict guest access as far as I know.
In fact, the guest account sjould never have access unless explicitly allowed to;
I can't post links so: docs.microsoft.com/en-us/windows/win32/eventlog/event-loggin g-security
So why the security vulnerability alert?
|
|
|
|
|
|
|
|