Solved

File Security Risk

Posted on 2011-02-28
1
523 Views
Last Modified: 2012-06-21
I've found a server on our network that I can access remotely just by browsing in Windows Explorer (starting from My Network Places and drilling down).

I can drill all the way down until I find, for instance, the following file:

\\server-here\SYSVOL\domain-here.domain.org\Policies\{9AF8586C-819F-truncated}\MACHINE\Microsoft\Windows NT\SecEdit\GptTmpl.inf

First of all, what is this file? Secondly, is access to this path and file a security risk, and if so, what are the risks?

Thanks guys.
0
Comment
Question by:isaacr25
1 Comment
 
LVL 3

Accepted Solution

by:
mnation1 earned 500 total points
ID: 35004042
You've found the network share that serves out your domain's Group Policy settings to the computers on the domain.  That file contains your default security policy settings.  Everyone on the network should have read-only permissions to the folder you found, but not modify or write permissions.  Each machine and user needs to be able to read those settings so they can be downloaded and applied to each computer/user.
0

Featured Post

New! My Passport Wireless Pro Wi-Fi Mobile Storage

Portable wireless storage to offload, edit, and stream anywhere.

High-capacity, wireless mobile storage designed to accompany professional photographers and videographers in the field to easily offload, edit and stream captured photos and high-definition videos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
print logs windows 7 3 71
Unknown security group 2 59
opensource email gateway 9 58
Dashlane password manager suddenly won't accept my master password 16 13
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
These days, all we hear about hacktivists took down so and so websites and retrieved thousands of user’s data. One of the techniques to get unauthorized access to database is by performing SQL injection. This article is quite lengthy which gives bas…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now