Securing Windows NT/2000 Servers for the Internet
by Stefan Norberg 


Unconfirmed error reports are from readers. They have not yet been 
approved or disproved by the author or editor and represent solely
the opinion of the reader.

If you have technical questions or error reports, you can send them to 
booktech@oreilly.com. (Please specify the printing date of your copy.)


This page was updated January 29, 2002 


Here's a key to the markup:

        [page-number]: serious technical mistake
        {page-number}: minor technical mistake
        <page-number>: important language/formatting problem
        (page-number): language change or minor formatting problem
        ?page-number?: reader question or request for clarification


UNCONFIRMED errors and comments from readers:


[Chapter 3]  Chapter 3;
Chapter 3 says it will explain the differences between a Windows NT4 and a Windows 2000 Server. The registry settings in Chapter 2 
do not exist (or are located in a place) on Windows 2000. Chapter 3 does not have anything about these registry keys.



{55}  Table of registry keys;
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\Optional

is identified as REG_BINARY but should instead be identified as REG_MULTI_SZ 

REG_BINARY would be the output from regedit while regedt32
sees it correctly as REG_MULTI_SZ

(note that on page 43 Stefan indicates you should use regedt32
instead of regedit!) Apparently the used the wrong tool to verify the types!

More importantly than this....
There should be a Warning just prior to this
table of registry settings that you should only use regedt32 to
modify these settings. (In particular the optional key)

If you use regedit instead, changing the optional key will result in a STOP:c000021a {Fatal System Error}after a reboot!
This occurs on both Win NT and in Windows 2000. It is very important for you to have a note/warning indicating this as it will save many people a lot of headaches!


[76] Table 2-8:
What about ftp.exe Hacker downloading tools netsh.exe reconfiguring IP adress,
...nbtstat.exe finding out netbios info?


?110?  All three Value Name Blocks;
My book was printed in January 2001.

I am using pcAnywhere 9.2.1 Build 258 on Windows 2000 with Service Pack 
2.  The registry settings under 
HKLM\Software\Symantec\pcAnywhere\CurrentVersion\System do not exist in my 
registry.

I cannot figure out what changes to make to my registry based on your 
description.  Any help you can offer would be appreciated.  Thank you.


(135)  Last paragraph, last sentence;
I believe this sentence should read:

"In this particular case, set the second tunnel's local endpoint to 
tcp/5901, and connect to 127.0.0.1:5900 with the VNC viewer to access the 
second computer's console:"