[Full-disclosure] Need some help with management

[Daniel Sichel]

My management here wants to put a server on our LAN, not administered by
us (the IT department) and use a share on it to serve files and data to
our workstations.  They do not understand why having a server with a
file share that is NOT part of our secure infrastructure represents a
threat to the computers accessing it. Keep in mind this is an all
Windows network. Sooo, if you guys can succinctly explain why having a
trusted computer trust an untrusted computer is a problem, that would be
helpful. Keep in mind we are talking to management here. It's kind of
like trying to explain why, when you are in the United States, it's a
bad idea to drive on the left hand side of the road. It's just so basic
it's not documented anywhere. So, please help me explain why netbios and
file shares on machines not within your network are bad ideas.

 

Thanks,

 

Daniel Sichel, CCNP, MCSE,MCSA,MCTS (Windows 2008)

Network Engineer

Ponderosa Telephone (559) 868-6367

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20080522/e9aeaef5/attachment.html