enum

Make sure you block tcp/139 tcp/445 at all ingress/egress points to your network and you will be largely protected from the internet (at least until one of your users catches worms). You should be able to set your policy up to where a user can not create a share, I can look up how to do it if you need, but it is not normally something I have to mess with, I just yell at the NT admins to do it

Make sure you have null logon/anonymous login turned off. Check out my tut on hardening Win2k, it does have how to turn off anonymous login...

I will post the link as soon as I find it...

http://www.antionline.com/showthread...hreadid=234577

/nebulus