NT Versions Affected:

3.5, 3.51, 4.0


Problem:

Everyone has remote access to an NT systems' registry by default.

NT 4.0 has a new registry key:

<HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg>

If this key does not exist, remote access is not restricted, and only the underlying security on the individual keys control access.


Verification:

http://www.microsoft.com/kb/articles/q155/3/63.htm