IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
concerned, it is recommended that at least the guest-account be restricted by
using SYS:PUBLIC\SYSCON.EXE (User Information - Time Restrictions).
Additional changes to "Default Time Restrictions" when setting up or
maintaining user accounts have no effect on the access times of users already
defined. Differing access times for individual users must be set up with the
help of SYS:\PUBLIC\SYSCON.EXE (User Information - Time Restrictions).
Edit System AUTOEXEC File
The parameters of a Novell Netware server are configured in the start file
AUTOEXEC.NCF (e.g. volumes, NLMs, additional protocols etc.).
Furthermore, additional security settings can be carried out in the
AUTOEXEC.NCF file.
The Novell Netware console command SECURE CONSOLE which should be
included in the AUTOEXEC.NCF, ensures that NLMs can only be started
from the server directory SYS:SYSTEM. The same applies for the deactivation
of Novell Netware Debuggers. Via SECURE CONSOLE, DOS will be
removed from the main memory of the Novell Netware server and the defined
search paths will be deactivated and cannot be redefined.
File Server Console Operators
It is possible to have restricted control of a Novell Netware server from a
workstation with the help of the menu utilities
SYS:\PUBLIC\FCONSOLE.EXE.
The File Server Operator requiring no further privileges besides explicit
entitlement to use SYS:\PUBLIC\FCONSOLE.EXE, can send messages to the
user, change the Novell Netware server, or shut the server down. Also, the
status of the Novell Netware server can be observed and changed (date, time,
etc.) and information regarding current connections may be observed. The
program SYS:\PUBLIC\FCONSOLE.EXE can be activated as standard by a
supervisor or supervisor-equivalent account. Other users should not have
access to these files
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000