holy moley! 9935 views!

[Dr. Avery]

My article on Win XP security has been viewed nearly 10000 times. Hot Damn!

[tiremonkey2000]

Well i thought it was a great article and learned a few things also
Thanks Doc

[technobeast]

w00t! Doc Congrats

[FrYGuY]

'grats!

By the way,

Adjust memory quotas for a process: "Determines which accounts can use a process with 'Write Property' access to another process to increase the processor quota assigned to the other process."

WOW! If you know what this means, let me know.

Basically, it allows a user with that privilege to run a process which will adjust the memory quotas for other processes. It's for, say, a server admin who might need to give an installed application more/less access to memory remotely.

A home user? Heh. No. No no. No. Noooo. No. No. Uh uh. No. Nope. No.

It's an unlikely method of attack (Seriously, how many people are going to assume they have the ability, once logged in, to modify the memory quota of other programs, AND have a method of attack which can benefit it?), but it's still a method of attack.

Says me, the man who logs in with Admin privs knowing full well he should be running limited user... so take my paranoia with a grain of salt

[Dr. Avery]

10000+ views.

I tried to keep it as simple as possible in order to highlight the most important aspects. The basic concept was you didn't need to know everything in there to make some useful changes.

There is at least one error I've found, though (not counting a few miscapitalizations).


"Interactive logon: Do not display last user name: Determines whether the name of the last user to log on to the computer is displayed in the Windows logon screen.

This only applies if you are using the florid, happy welcome screen logon method. And again only applies if the username has a last name. "

This entire entry is erroneous. The sentence in red should be removed. It relates to the previous username, not the surname of the user. Also, this setting only applies if you are not using the florid, happy welcome screen logon method.

I'll be riding the short bus to school now.

[greffov]

Reducing the amount of memory a process can claim, likely causes it to crash on a out of memory condition. Thus it can be used in a DoS attack.

so, Doc what should the whole thing become in the end?

[Dr. Avery]

One moment - I'll revise.

[Dr. Avery]

When using the windows 2000 style logon screen, This setting determines whether the previously logged in username will be automatically typed in for you, or if the user field will instead be left blank. This requires the user to know a valid username in order to successfully log in to windows.

This setting, in conjunction with a non-standard username, could be useful for the purposes of adding an additional barrier to your files in the event of a stolen (or siezed) computer.

[Dr. Avery]

replace the blue portion of the "Interactive logon: Do not display last user name:" entry with the contents of the previous post. To maintain consistant formatting, it should be entered in blue, as shown.