Windows 2K, XP
Review: NetBIOS name resolution. SMB - Shared Message Block - uses TCP port 139, and NBT - NetBIOS over TCP/IP - uses UDP port 137., if only port 139 responds, probably is Win 9x, but if port 445 responds, then is Win 2k,XP. See also this paper on C IFS – Common Internet File System and SMB vulnerabilities. Close these ports!
2K, XP basic security: Net logon, no bypass of BIOS (HAL), No remote access to console (default), requires admin privileges for interactive login (Server), and has object-based security model:
- a security object can be any resource in the system: files, devices, processes, users, etc.
- server processes impersonate the client's security context (key for file servers)
- Win2k,XP are windows NT updated, with more security tools and patches .
Consolidation of power, and