Guest account has no password |
---|
Risk Level: | Medium | Check or Attack Name: guestnopw |
---|---|---|
Platforms: | Windows NT | |
Description: | A Guest account with no password has been detected. An attacker could use this account to gain access to sensitive information. |
|
Remedy: | Set the guest password to a minimum length of seven characters and change the password. To set the minimum password length, follow these steps:
—AND— To change the password, follow these steps:
—AND— For maximum password security, apply the passfilt.dll password filter to reduce guessable passwords. |
|
References: | Microsoft Knowledge Base Article Q161990, How to Enable Strong Password Functionality in Windows NT, http://support.microsoft.com/support/kb/articles/q161/9/90.asp |
Know Your Risks |