Comments: Use the McAfee Policy to prevent intruders from creating users + Deleting Users + changing passwords. We strongly recommend that you use mcafee Anti-Virus Software in win2003. Preventing intruders from creating users + Deleting Users + changing passwords
1. Open console-access protection-user-defined rules-New-select registry blocking rules
Process to be included :*
The registry key or registry to be protected: [select the following value, not the key] HKLM-/SAM /*/*
Registry operation to be blocked: select all
Note: if an item is selected, the administrator cannot log on to the system and the system must be redone ..
2 processes to be included :*
Choose Console> access protection> User-defined rules> New> file/folder access protection rules.
The file or file name to block. Wildcard: C: \ Windows \ System32 \ config \ SAM
File Operations to be prohibited:
Select: New file being created + write access to file + file being deleted