IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
If Windows for Workgroups or Windows 95 is installed on the PC, the threats
that can be posed by the use of Peer-to-Peer functions must also be considered
(see chapter 6.3 Peer-to-Peer Network). The particular problem of stored
passwords must be emphasised. Passwords are stored in files with the name
[log-on name].pwl. They are stored encrypted but can still be read with
various programmes. It is absolutely necessary that a user logging on to a
Windows NT system from WfW or Windows 95, observes the notes in
safeguard S 4.46 Use of the log-on password under WfW and Windows 95. In
any case, administrators must ensure that a list of passwords is not created.
Additional controls:
- Have shared directories been provided with too many permissions?
- Are network access points sufficiently protected (organisationally or
technically)?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000