Solved

Remote Registry control

Posted on 2009-07-03
6
262 Views
Last Modified: 2013-12-04
Hello!
Today I discovered that by default in XP Pro remote registry control is enabled.It doesn't make any sense...According to my personal common sense,it's crazy to allow that and it must be turned off.
So how come MS people can't understand that...or there's something I don't know?
0
Comment
Question by:abrodski
  • 4
  • 2
6 Comments
 

Author Comment

by:abrodski
Comment Utility
I think I found the reason...MS Windows Update...
0
 
LVL 4

Expert Comment

by:TurboBorland
Comment Utility
You have the ability to turn it off, but it's enabled by default for functionality with other programs.  It's something like why is the server service turned on?  Because some programs may need it, whether or not you use them or not.  Anyway, the remote registry service is dangerous, but it does require a user/pass to access it, and if that is compromised and they have remote access to your box, they can make registry changes just as easily as without it.  Have there been exploits for it?  Of course, but which service that gives remote access to you hasn't been exploited?
0
 
LVL 4

Expert Comment

by:TurboBorland
Comment Utility
We can look at the spooler service as well when you're working with printers over a network.  If connecting to a printer through the network, this service relies on remote registry to make those registry entries for you.  We also have remote assistance in where the person assisting you needs to make configuration changes that would write to a registry.  If he makes those changes, the remote assistance service will stop as it requires that remote registry service for it.  The network diagnostics tool, that's offered in Windows servers 200+, requires this as well.  There are several things, however a lot of them incorrectly do not list remote registry as a dependency.
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:abrodski
Comment Utility
so it's better leave it on then?
0
 
LVL 4

Expert Comment

by:TurboBorland
Comment Utility
Well it all depends on what you're using the computer for.  If you're a simple home user, yeah turn it off.  If you plan on using remote services on your computer, then you'll want to turn it off as there's no use for it.  Just remember if you need remote access to your computer, to turn the service back on.
0
 
LVL 4

Accepted Solution

by:
TurboBorland earned 500 total points
Comment Utility
********Well it all depends on what you're using the computer for.  If you're a simple home user, yeah turn it off because you have no use for it.  If you plan on using remote services on your computer, then you'll want to keep the service enabled (do not turn have it set to manual as most things that use it will not turn it on for you like it should when this is set).  Just remember if you need remote access to your computer, to turn the service back on.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now