Remote Registry control

Hello!
Today I discovered that by default in XP Pro remote registry control is enabled.It doesn't make any sense...According to my personal common sense,it's crazy to allow that and it must be turned off.
So how come MS people can't understand that...or there's something I don't know?
abrodskiAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

abrodskiAuthor Commented:
I think I found the reason...MS Windows Update...
0
TurboBorlandCommented:
You have the ability to turn it off, but it's enabled by default for functionality with other programs.  It's something like why is the server service turned on?  Because some programs may need it, whether or not you use them or not.  Anyway, the remote registry service is dangerous, but it does require a user/pass to access it, and if that is compromised and they have remote access to your box, they can make registry changes just as easily as without it.  Have there been exploits for it?  Of course, but which service that gives remote access to you hasn't been exploited?
0
TurboBorlandCommented:
We can look at the spooler service as well when you're working with printers over a network.  If connecting to a printer through the network, this service relies on remote registry to make those registry entries for you.  We also have remote assistance in where the person assisting you needs to make configuration changes that would write to a registry.  If he makes those changes, the remote assistance service will stop as it requires that remote registry service for it.  The network diagnostics tool, that's offered in Windows servers 200+, requires this as well.  There are several things, however a lot of them incorrectly do not list remote registry as a dependency.
0
Challenges in Government Cyber Security

Has cyber security been a challenge in your government organization? Are you looking to improve your government's network security? Learn more about how to improve your government organization's security by viewing our on-demand webinar!

abrodskiAuthor Commented:
so it's better leave it on then?
0
TurboBorlandCommented:
Well it all depends on what you're using the computer for.  If you're a simple home user, yeah turn it off.  If you plan on using remote services on your computer, then you'll want to turn it off as there's no use for it.  Just remember if you need remote access to your computer, to turn the service back on.
0
TurboBorlandCommented:
********Well it all depends on what you're using the computer for.  If you're a simple home user, yeah turn it off because you have no use for it.  If you plan on using remote services on your computer, then you'll want to keep the service enabled (do not turn have it set to manual as most things that use it will not turn it on for you like it should when this is set).  Just remember if you need remote access to your computer, to turn the service back on.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.