How to Change the RestrictAnonymous Value

The RestrictAnonymous value is an internal component of the Microsoft Windows 2000 Server that determines the restrictions for users who log in anonymously to the server. As an administrator of the server, you can easily change the current RestrictAnonymous value by using the Microsoft Registry Editor. By default, the value is set at one, but you can set it to two to exclude the Everyone group on the server for non-authenticated users by removing the permissions from the access token.

Things You'll Need

• Windows 2000 Server

Instructions

1. Click on the "Start" button from your Windows 2000 desktop and then click on the "Run" option.

2. Type "regedit" into the "Open" field and then click on the "OK" button. The Microsoft Registry Editor will appear.

3. Click on the "HKEY_LOCAL_MACHINE" option to bring up a list of more folders and then click on the "SYSTEM" option.

4. Click on the "CurrentControlSet" option and then click on the "Control" option. Click on the "LSA" option and then click on the "Edit" option.

5. Click on the "Add Value" option and enter the new value that you want into the "Value" field. Close out of the Registry Editor and restart your computer.

References

• Microsoft Support: How to Use the RestrictAnonymous Registry Value in Windows 2000
• Microsoft Support: Restricting Information Available to Anonymous Logon Users
• Microsoft: Using Regedit.exe