asked on

Impact of changing these registry settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa?

I am trying to lock down security on my server 2003 running IIS 6.0 and SQL 2005. The recommendation is to restrict anonymous access to the registry. If I change this setting will there be any impact on my IIS 6.0 web site, SQL 2005 databases or the Server 2003 OS. I hate to make registry changes since I am not sure if something may stop or cause a problem for me administering this.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
restrictanonymoussam is set to 0
restrictanonymous is set to 0
currently set to '0' would have to change to '1' to restrict the access according to what i have read.

NT_thyrth

There is a good tool from Sysinternals "REGMON" you can run this to be sure - IIS is not using these Registry settings

kdschool

ASKER

I found this program and installed it but it won't execute. Says it is already installed on the system. How do I find it. Don't see it on any of the menus?

NT_thyrth

It's an executible - only one file you can download it from the microsoft website

kdschool

ASKER

Do I execute it from the run command?

NT_thyrth

no search for regmon.exe and just double click it to launch - you need to be admin on the machine

kdschool

ASKER

Downloaded from Micrsoft Site to desktop. Unzipped to defaul location MyDocuments/Unzipped/Regmon. exe file is there. Click on this and error comes up that say Regmon is already running on this system. Did a search and can't find it anywhere on C drive except that diretory I put it in. Is is possible this is part of the McCaffee Virus Program?

NT_thyrth

not a chance - open task manager and check if it's realy running

kdschool

ASKER

Check task manager and not running. Click on the exe and then it shows up in applications task manager. No interface or anything comes up. Still get error message Regmon is already running on this system right after starting it. Must be something wrong here OR how do I see the output?

kdschool

ASKER

Also once I click on the error box and close it then the appication entry on task manager also closes. It's seeing the error message run but not the application. Does this have to be at the root of C to run?

ASKER CERTIFIED SOLUTION

AnthonyP9618

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

AnthonyP9618

I should add... I've made these changes on many, many servers and have not seen 1 where these settings have caused any problems on the server.