Skip to content

Commit a1e6862

Browse files
kroesekroese
authored
fix: Disallow RDP login with blank password (#1202)
1 parent fda0d7f commit a1e6862

40 files changed

+0
-198
lines changed

‎assets/win10x64-enterprise-eval.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -323,11 +323,6 @@
323323
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
324324
<Description>Allow guest access to network shares</Description>
325325
</SynchronousCommand>
326-
<SynchronousCommand wcm:action="add">
327-
<Order>2</Order>
328-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
329-
<Description>Allow RDP login with blank password</Description>
330-
</SynchronousCommand>
331326
<SynchronousCommand wcm:action="add">
332327
<Order>3</Order>
333328
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win10x64-enterprise.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -326,11 +326,6 @@
326326
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
327327
<Description>Allow guest access to network shares</Description>
328328
</SynchronousCommand>
329-
<SynchronousCommand wcm:action="add">
330-
<Order>2</Order>
331-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
332-
<Description>Allow RDP login with blank password</Description>
333-
</SynchronousCommand>
334329
<SynchronousCommand wcm:action="add">
335330
<Order>3</Order>
336331
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win10x64-iot.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -332,11 +332,6 @@
332332
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
333333
<Description>Allow guest access to network shares</Description>
334334
</SynchronousCommand>
335-
<SynchronousCommand wcm:action="add">
336-
<Order>2</Order>
337-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
338-
<Description>Allow RDP login with blank password</Description>
339-
</SynchronousCommand>
340335
<SynchronousCommand wcm:action="add">
341336
<Order>3</Order>
342337
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win10x64-ltsc.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -329,11 +329,6 @@
329329
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
330330
<Description>Allow guest access to network shares</Description>
331331
</SynchronousCommand>
332-
<SynchronousCommand wcm:action="add">
333-
<Order>2</Order>
334-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
335-
<Description>Allow RDP login with blank password</Description>
336-
</SynchronousCommand>
337332
<SynchronousCommand wcm:action="add">
338333
<Order>3</Order>
339334
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win10x64.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -326,11 +326,6 @@
326326
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
327327
<Description>Allow guest access to network shares</Description>
328328
</SynchronousCommand>
329-
<SynchronousCommand wcm:action="add">
330-
<Order>2</Order>
331-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
332-
<Description>Allow RDP login with blank password</Description>
333-
</SynchronousCommand>
334329
<SynchronousCommand wcm:action="add">
335330
<Order>3</Order>
336331
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win11x64-enterprise-eval.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -351,11 +351,6 @@
351351
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>
352352
<Description>Disable SMB signing requirement</Description>
353353
</SynchronousCommand>
354-
<SynchronousCommand wcm:action="add">
355-
<Order>3</Order>
356-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
357-
<Description>Allow RDP login with blank password</Description>
358-
</SynchronousCommand>
359354
<SynchronousCommand wcm:action="add">
360355
<Order>4</Order>
361356
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win11x64-enterprise.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -354,11 +354,6 @@
354354
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>
355355
<Description>Disable SMB signing requirement</Description>
356356
</SynchronousCommand>
357-
<SynchronousCommand wcm:action="add">
358-
<Order>3</Order>
359-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
360-
<Description>Allow RDP login with blank password</Description>
361-
</SynchronousCommand>
362357
<SynchronousCommand wcm:action="add">
363358
<Order>4</Order>
364359
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win11x64-iot.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -354,11 +354,6 @@
354354
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>
355355
<Description>Disable SMB signing requirement</Description>
356356
</SynchronousCommand>
357-
<SynchronousCommand wcm:action="add">
358-
<Order>3</Order>
359-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
360-
<Description>Allow RDP login with blank password</Description>
361-
</SynchronousCommand>
362357
<SynchronousCommand wcm:action="add">
363358
<Order>4</Order>
364359
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win11x64-ltsc.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -354,11 +354,6 @@
354354
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>
355355
<Description>Disable SMB signing requirement</Description>
356356
</SynchronousCommand>
357-
<SynchronousCommand wcm:action="add">
358-
<Order>3</Order>
359-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
360-
<Description>Allow RDP login with blank password</Description>
361-
</SynchronousCommand>
362357
<SynchronousCommand wcm:action="add">
363358
<Order>4</Order>
364359
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

‎assets/win11x64.xml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -354,11 +354,6 @@
354354
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>
355355
<Description>Disable SMB signing requirement</Description>
356356
</SynchronousCommand>
357-
<SynchronousCommand wcm:action="add">
358-
<Order>3</Order>
359-
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
360-
<Description>Allow RDP login with blank password</Description>
361-
</SynchronousCommand>
362357
<SynchronousCommand wcm:action="add">
363358
<Order>4</Order>
364359
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

0 commit comments

Comments
 (0)