legassembly Tue, 10/20/2009 - 11:35
User Badges:

incoming udp/445 and tcp/445. of course that will block access to all shares on the machine.

daneilhudson Tue, 10/20/2009 - 12:01
User Badges:

I thought I was blockikng those ports, and users cannot map to the c$ share, but they still can access it via the Start-run or IE explorer.

legassembly Wed, 10/21/2009 - 12:24
User Badges:

Might not be able to help you. I started using CSA at version 5.1 and am now running 6.0.

With those versions, I would just create a Network Access Control rule to Priority Deny any application from acting as a server for $Microsoft-DS on any network interface. This would stop anything from connecting to any share on the computer.


This Discussion