How to turn off the remote IPC

I want to curse. Never know again! Lao Tzu uses QQ to ask and so on...

Remote connection. ipc$(internet

process

connection) is shared"Name the pipeline"(as everyone calls it), it's a named pipe that is open for inter-process communication, and can be done by verifying the username.

and passwords to gain the appropriate permissions, which can be used when remotely managing computers and viewing shared resources for computers.

With IPC$, the connector can even establish an empty connection with the target host without a username and password (of course, the other machine must have IPC$ sharing enabled, otherwise you can't connect), and with this empty connection, the connector can also get a list of users on the target host (although the responsible administrator will prohibit the export of the user list).

We always talk about ipc$ vulnerabilityipc$ vulnerability, in fact, ipc$ is not a real vulnerability, it is a remote network login function that is opened to facilitate the remote management of administrators, and it also opens the default sharing, that is, all logical disks (c$, d$, e$......and the system directory winnt or windows (admin$).

All of these are intended to facilitate the management of administrators, but good intentions do not necessarily have good results. I don't know, pronoun one) will use ipc$, access to shared resources, export user lists, and use some dictionary tools to do password probing, hoping to get higher privileges and thus achieve ulterior purposes.

Puzzle: 1) The IPC connection is Windows

The remote network login function unique to NT and above systems is equivalent to Telnet in UNIX, which requires Windows due to the IPC$ function

There are a lot of dll functions in NT, so not in Windows

. That is to say, only NT 2000 XP can establish an IPC$ connection, and 98 ME cannot establish an IPC$ connection (but some friends say that an empty connection can be established under 98, I don't know if it's true or not, but now it's 2003, and it is recommended that the comrades of 98 change the system, and 98 is not happy with the reputation of slipping).

2) Even an empty connection is not 100% successful, and if the other party turns off IPC$ sharing, you still can't establish a Gyeongpaira connection.

3) It does not mean that an ipc$ connection can be used to view the list of users of the other party, because the administrator can prohibit the export of the user list.