Unverified Commit a1e68622 authored by Kroese's avatar Kroese Committed by GitHub
Browse files

fix: Disallow RDP login with blank password (#1202)

parent fda0d7fb

assets/win10x64-enterprise-eval.xml

+0 −5
Original line number Diff line number Diff line
@@ -323,11 +323,6 @@ 
          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Allow guest access to network shares</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

assets/win10x64-enterprise.xml

+0 −5
Original line number Diff line number Diff line
@@ -326,11 +326,6 @@ 
          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Allow guest access to network shares</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

assets/win10x64-iot.xml

+0 −5
Original line number Diff line number Diff line
@@ -332,11 +332,6 @@ 
          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Allow guest access to network shares</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

assets/win10x64-ltsc.xml

+0 −5
Original line number Diff line number Diff line
@@ -329,11 +329,6 @@ 
          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Allow guest access to network shares</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

assets/win10x64.xml

+0 −5
Original line number Diff line number Diff line
@@ -326,11 +326,6 @@ 
          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Allow guest access to network shares</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>