NULL session restrictions: registry values and security options (1/2)

• RestrictAnonymous (Windows NT 4.0 and >)

  • Windows NT 4.0: 0 or 1
  • Windows 2000: 0, 1 or 2 (disable NULL sessions)
    • Additional restrictions for anonymous connections security option
  • Windows XP and Windows 2003: 0 or 1
    • Network access: Do not allow anonymous enumeration of SAM accounts and shares security option

• EveryoneIncludesAnonymous (Windows XP, Windows 2003)

  • Network access: Let Everyone permissions apply to anonymous users
  • Disabled by default (EVERYONE does not include ANONYMOUS LOGON)