[Q] CIFS Access Log

[Hiroki Kashiwazaki]

$BGp:j!wKL3$F;$G$9!#(B

Windows XP$B$G$N6&M-%U%)%k%@$K$I$N%f!<%6$,$$$D%"%/%;%9$7$F$-$?$+(B
$B$H$$$&%m%0$,!"(BOS$B$NI8=`5!G=$G:N<h2DG=$HJ9$$$?$N$G$9$,(B[*1]$B!"$3$N(B
$B%"%/%;%9%m%0$O$I$3$KB8:_$7!"$I$N$h$&$J<jCJ$r;H$C$F1\Mw$9$k;v$,(B
$B2DG=$J$N$G$7$g$&$+!#%]%$%s%?$J$I<($7$FD:$1$l$P9,$$$G$9!#(B

[*1] http://www.forest.impress.co.jp/article/2002/01/10/ptchecker.html

[Kenji Yamamoto [Security MVP]]

$B;3K\$G$9!#(B

$B$3$l(B NT $B$J(B OS $B$G$O!"(BNT3.1 $B$N;~Be$+$i!"(BNTFS $B%U%!%$%k%7%9%F%`$N4F(B
$B::$GBP1~$G$-$^$9$h$M!#!c(B ALL

$B>/$J$/$H$b!"(B NT3.51 $B0J9_$***@_Dj9`L\$OJQ$o$i$J$$$O$:!#(B

|Subject: [Q] CIFS Access Log
|From: Hiroki Kashiwazaki <***@cc.hokudai.ac.jp>
|Date: Mon, 05 Jan 2004 21:34:02 +0900
|Message-Id: <***@xh6.cc.hokudai.ac.jp>

| Windows XP$B$G$N6&M-%U%)%k%@$K$I$N%f!<%6$,$$$D%"%/%;%9$7$F$-$?$+(B
| $B$H$$$&%m%0$,!"(BOS$B$NI8=`5!G=$G:N<h2DG=(B

NTFS $B%U%!%$%k%7%9%F%`$($*MxMQ$7$F$$$k$H$7$?$i!"0J2<$NN.$l$***@_Dj(B
$B$G$-$^$;$s$G$7$g$&$+!#(B

$B>\:Y$J<j=g$d;qNA$O!"0J2<$r$4;2>H$/$@$5$$!#(B

[HOW TO] Windows XP $B$G%U%!%$%k!"%U%)%k%@!"$*$h$S%W%j%s%?$X$N%f!<(B
$B%6!<(B $B%"%/%;%9$r4F::$9$kJ}K!(B
http://support.microsoft.com/?id=310399

$B$=$N$[$+!"(BPort139 $B0K86$5$s$,0J2<$N$h$&$J;29M;qNA$rE;$a$F$$$^$9!#(B
http://www.port139.co.jp/ntsec_kb.htm

$B0J>e(B

$B;3K\8,<!(B [MVP]

[Hiroki Kashiwazaki]

$BGp:j!wKL3$F;$G$9!#(B

$B$"$j$,$H$&$4$6$$$^$9!#BgJQ;29M$K$J$j$^$7$?!#(B

At Mon, 05 Jan 2004 13:48:39 GMT,

Post by Kenji Yamamoto [Security MVP]
$B$G$-$^$;$s$G$7$g$&$+!#(B
$B%6!<(B $B%"%/%;%9$r4F::$9$kJ}K!(B
http://support.microsoft.com/?id=310399
$B$=$N$[$+!"(BPort139 $B0K86$5$s$,0J2<$N$h$&$J;29M;qNA$rE;$a$F$$$^$9!#(B
http://www.port139.co.jp/ntsec_kb.htm

$B;H$o$;$F$b$i$C$?(BKB$B$O(B

http://support.microsoft.com/default.aspx?scid=kb;ja;JP171148
http://support.microsoft.com/default.aspx?scid=kb;ja;JP175062
http://support.microsoft.com/default.aspx?scid=kb;ja;JP300549
http://support.microsoft.com/default.aspx?scid=kb;ja;JP301640
http://support.microsoft.com/default.aspx?scid=kb;ja;JP310399

$B$"$?$j$G$9!#<B:]$K6&M-$K%"%/%;%9$5$l$?;~$K$I$3$r$I$&$9$l$P%m%0$r(B
$BFI$a$k$N$+$,$J$s$+$"$d$U$d$K5-=R$5$l$F$$$k$h$&$J0u>]$G!"7k9=6lO+(B
$B$7$F$7$^$$$^$7$?$,!D!#(B

$B:#2s$N$*OC$H$$$&$N$,!"<B$O8&5f<<Fb$G<+J,$N%^%7%s$X$N(B Windows$B6&M-(B
$B$,L5@)8B$G9T$J$o$l$F$$$?$H$$$&$b$N$G!"860x$O(B Guest$B%"%+%&%s%H$,M-(B
$B8z$K$J$C$F$$$?$?$a!#$G$b(B Guest$B%"%+%&%s%H$J$s$FM-8z$K$7$?3P$($J$I(B
$B$J$$$N$K!D$H;W$C$F$$$?$i!"$=$N860x$O$3$s$J$3$H$K$h$k$b$N$G$7$?!#(B

http://www.monyo.com/technical/windows/36.html

$B$R$I$$$h(BMicrosoft$B!#$$$d$b$&K\Ev$K(B OS X$B$K0\9T$7$A$c$*$&$+$H2h:vCf!#(B

[Shinji KONO]

Post by Hiroki Kashiwazaki
http://www.monyo.com/technical/windows/36.html
$B$R$I$$$h(BMicrosoft$B!#$$$d$b$&K\Ev$K(B OS X$B$K0\9T$7$A$c$*$&$+$H2h:vCf!#(B

OS $B<+BN$O(B NT base $B$K$J$C$F7k9=$^$H$b$K$J$C$?$s$@$H;W$&$s$@$1$I!"(B
$B$3$N$"$?$j$N!"(B

Win95 $B$N$@$a$@$***@_Dj$r$R$-$:$C$?%G%U%)%k%H(B

$B$C$F$N$,:GDc$J$s$G$9$h$M!#$=$&$$$&$N$,!"$=$3$3$KB8:_$9$k$+$i!#(B
$B$G!"$A$g$C$HF'$_9~$b$&$H$9$k$H!"L/$K:Y$+$$@_Dj$KFMF~$;$6$k$r(B
$BF@$J$$$7(B...

OS X $B$@$C$F!"$R$I$$@_Dj$r$9$l$P$R$I$/$J$k$o$1$J$s$@$1$I(B...

---
Shinji KONO @ Information Engineering, University of the Ryukyus,
$B2OLn??<#(B @ $BN05eBg3X9)3XIt>pJs9)3X2J(B,

[Kenji Yamamoto [Security MVP]]

$B;3K\$G$9!#(B

|Subject: Re: [Q] CIFS Access Log
|From: Hiroki Kashiwazaki <***@cc.hokudai.ac.jp>
|Date: Tue, 06 Jan 2004 12:04:15 +0900
|Message-Id: <***@xh6.cc.hokudai.ac.jp>
|User-Agent: Wanderlust/2.10.1 (Watching The Wheels) SEMI/1.14.5 (Awara-Onsen) FLIM/1.14.5 (Demachiyanagi) APEL/10.6 Emacs/21.3 (i386--freebsd) MULE/5.0 (SAKAKI)

| $B:#2s$N$*OC$H$$$&$N$,!"<B$O8&5f<<Fb$G<+J,$N%^%7%s$X$N(B Windows$B6&M-(B
| $B$,L5@)8B$G9T$J$o$l$F$$$?$H$$$&$b$N$G!"860x$O(B Guest$B%"%+%&%s%H$,M-(B
| $B8z$K$J$C$F$$$?$?$a!#$G$b(B Guest$B%"%+%&%s%H$J$s$FM-8z$K$7$?3P$($J$I(B
| $B$J$$$N$K!D$H;W$C$F$$$?$i!"$=$N860x$O$3$s$J$3$H$K$h$k$b$N$G$7$?!#(B
|
| http://www.monyo.com/technical/windows/36.html

$B$"$"!"$3$l$G$9$+!#$3$lM-8z$K$7$F$k$H(B NTFS $B%U%!%$%k%7%9%F%`>e$N(B
ACL $B8+$($J$$$N$G!";d$O$$$D$***@Z$C$F$+$i;D$j$***@_Dj$7$F$^$9!#(B

Windows 9x $B$N7OIh$O(B Me $B$G=*;_Id$rBG$C$?$o$1$G$9$,!"$=$3$i$X$s$N(B
$B<BAu$d!"(B no "administrator" $B$rL\;X$7$?(B UI $B$O$=$NJU$N%l%$%d$K$$$k!"(B
$B<l$K%[!<%`%f!<%6$,0\9T$9$k:]$K$bDq9346$,$J$$$h$&$K$9$k$H$$$&0U?^(B
$B$J$N$8$c$J$$$G$7$g$&$+$M!#(B($B;d$O(B 9x $B$r?($C$?;v$O$[$H$s$I$"$j$^$;$s(B
$B$,!#>/$J$/$H$b=>Mh$N(B NT $B$N9M$(J}$8$c$J$$$G$9$M!#(B)

$B0J>e(B

$B;3K\8,<!(B [MVP]