Disable Guest Acct?......or not.

[mcb]

I have been toying around with the idea of disabling the Guest Account. I have heard that it might have ramifications that go beyond the scope of what i am doing. So:

What would happen if i disabled the guest account?

I run a network where all users are assumed, even the DHCP ones. I also run a NAT/Proxy hybrid, with no WGIC.

The reason i am thinking about disabling the guest account is that I have been hacked several times. And once the attacker is in the Network they can do anything that the guest can do. Which in these cases has been to set up Sex Dialers, etc.

Here is the thread for when i first proposed this to give some backround. http://forums.qbik.com/viewtopic.php?t=3462&highlight=guest

Thanks,

Matt

[jamesc]

gtg, but this may give a bit of insight.

http://forums.qbik.com/viewtopic.php?t= ... st+account

Anyone else?

[mcb]

Thanks for the post. That was a good thread, I apologize i didn't see it before.

So, i have the assumed user db built up to accomodate all of our users. I use a separate Mail server that only utilizes port forwarding through Wingate.

In light of this, would disabling the guest account cause any further problems?

Thanks,

Matt

[adrien]

I Think even port forwarding will break if you disable guest, since the ENS policies will still be applied, and external connections inbound will still be deemed guest.

I would recommend if you want to disable the OS Guest account, that you leave the Guest account in WinGate enabled.

Cheers

Adrien