Securely Allow Remote Registry Access

[tyanni]

In order to be able to run MBSA to scan our machines and also use a program we have to change local account passwords, we need to have File and Print Sharing, Remote Registry, and the Server Service Running. Ideally, we'd like to restrict the connection to any of these services using the Firewall. For File and Print Sharing, we've set the scope so that only our IP can connect. However, I can't figure out how to do this for Remote Registry via the built in firewall in XP SP2?

Any suggestions?

Thanks,
Tim

 

[stash]

Remote registry requires administrative access. You can limit the scope by limiting who has administrator rights on your machines.

 

[tyanni]

True, but our network admins are rather crazy and we like to avoid annoying them by locking things down even further than usual. I am thinking of using IPSEC to only allow connections from a certain IP now.

 

[nweaver]

yes you can, it's called a router and access lists, or a true firewall (not just a NAT firewall)