Originally posted here by wassup
a null admin pass in itself is NOT a security risk if the users cant do anything with it.
True, but turning off the default shares does NOT prevent that risk.

In order to prevent having a null admin pass being a risk, you must not run any services which use NT authentication. This means turning off the "Server" service and ensuring that it remains off. Also, SQL server, IIS and any other network services which use NT authentication need to be disabled.

Slarty