We are trying to disable Null Sessions and Anonymous logons in Server 2008. We have all the registry keys configured the way we are told to yet the Anonymous logon is still enumerating local accounts, groups and the password policy. The following is what we have set: HKEY\SYSTEM\CurrentControlSet\Control\Lsa: RestrictAnonymous = 1 Restrict AnonymousSAM = 1 EveryoneIncludesAnonymous = 0 HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters: RestrictNullSessAccess = 1 In the past, these settings worked fine for us and we were not able to get data back. It seems as though in the last month or so, all the sudden these settings are not working for us and we are able to get data back with a Null Session/Anonymous Logon. Does anyone have any idea as to what we might be missing?

Hi Rainforest, There are 6 policies listed below that controls what information can be accessed anonymously. These policies are located in local group policy editor under Computer Configuration\Windows Settings\SecuritySettings\Local Policies\SecurityOptions. 1. Network access: Allow anonymous SID/Name translation 2. Network access: Do not allow anonymous enumeration of SAM accounts 3. Network access: Do not allow anonymous enumeration of SAM accounts and shares 4. Network access: Let Everyone permissions apply to anonymous users 5. Network access: Named Pipes that can be accessed anonymously 6. Network access: Shares that can be accessed anonymously In order to completely disable anonymous logons, you can disable policy 1 and 4, enable policy 2 and 3, and specifying empty lists for policy 5 and 6. Regards, Karen JiThis posting is provided "AS IS" with no warranties, and confers no rights.

Hi Karen, if this is the domain controller, do I have to set or edit that in the Default Domain Controllers Policy ?/* Server Support Specialist */

Did this correct your problem without any issues?