DOOR account on Citrix Server???? I don't think so!!

[rocketlauncher]

Hello Everyone,

I'm new with citrix, so I hope someone can help me out on this one.

We recently setup a Citrix server. W2K SP2 Citrix XPE.

Everything is been working fine. but I was going thru the users in computer management on the server and I realize that there is some anynomous accounts ont he server, I guess Citrix creates them automatically, but also there is another account called door, which is the one that is puzzling to me. I want to know is this a valid a account created by Citrix or is someone hacking my system?? If so, what securey measures should we take in to cosideration. And how can I audit who is loggin in to the systems and what are they doing

Thanks in advanced.

Rocket

 

[CitrixEngineer]

Metaframe creates 15 anonymous users, and Microsoft create an Anministrator, Guest and Service account (SUPPORT_xxxxxxxx). Those are the only accounts created by either of these two systems - I would speculate that DOOR was created by something/someone else.

If you're the Admin, then remove all users that you did not create - even the Citrix Anonymous users, if you do not plan on allowing anonymous access - except Admin. Rename Administrator to something of your choosing, ensure that only you and your backup admin know it, and change it every 3 months.

You can audit logons via Local Security Settings - and there's a raft of other things in there which affect security, but read up carefully on each one, as some have unpredictable side-effects.

You could write a book (and people have!) on Windows 2000 Security - the best one I've read is "Hacking Windows 2000 Exposed", and I also like the O'Reilly book "Securing Windows NT-2000 servers". Sign up to

http://www.securityfocus.com

for a good news source.

Hope this helps CitrixEngineer@yahoo.co.uk

 

[rocketlauncher]

Thanks for your response citrixengineer, I will delete those accounts right away and star reading those books you requested it.

Regards,
Rocket