Solved

File Security Risk

Posted on 2011-02-28
1
526 Views
Last Modified: 2012-06-21
I've found a server on our network that I can access remotely just by browsing in Windows Explorer (starting from My Network Places and drilling down).

I can drill all the way down until I find, for instance, the following file:

\\server-here\SYSVOL\domain-here.domain.org\Policies\{9AF8586C-819F-truncated}\MACHINE\Microsoft\Windows NT\SecEdit\GptTmpl.inf

First of all, what is this file? Secondly, is access to this path and file a security risk, and if so, what are the risks?

Thanks guys.
0
Comment
Question by:isaacr25
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 3

Accepted Solution

by:
mnation1 earned 500 total points
ID: 35004042
You've found the network share that serves out your domain's Group Policy settings to the computers on the domain.  That file contains your default security policy settings.  Everyone on the network should have read-only permissions to the folder you found, but not modify or write permissions.  Each machine and user needs to be able to read those settings so they can be downloaded and applied to each computer/user.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The related questions "How do I recover the passwords for my Q-See DVR" and "How can I reset my Q-See DVR to eliminate a password" are seen several times a week.  Here we discuss the grim reality of the situation.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question