[rescue] Fair Warning RPC Worm

[Roger Walkup]

On Tuesday, August 12, 2003, at 12:42 PM, Kevin wrote:
> <snip>
> Does anyone know if this worm would affect machines that are being 
> used by users lacking administrative privileges?  Not having your 
> users in the local admin group helps with some viri but i'm not so 
> sure about this one.
>
> <snip>
That depends what you mean; it's common practice at my university to 
make the primary user of a W2000 box a member of the admin group for 
that box, but not the domain.  We had plenty of boxes hacked.  It 
pushed us into installing our firewall earlier than originally planned.

Roger