|
Allow power users to "Show Processes From All Users" in Task Manager
Hello,
Time now for my next goofy question.
Can anyone tell me how to allow Power Users to be able to see processes from
all users via Task Manager on a 2003 Server?
I found an article specific to Terminal Services and tested it on my test
box but it did not do the trick. Besides, I would prefer to aviod reg-hacks
if possible.
Thanks
Charles
...
|
1 |
25.05.2007 22:38:56 |
|
Trouble Following KB Article 325349
This is probably the stupidest question in the world, but here goes.
I am attempting to follow KB Article 325349
http://support.microsoft.com/kb/325349 to allow some users to manage a few
services on a 2003 Server. You know, stop / start / change the startup type
those types of things.
Hopefully someone has done this before and will follow what I am trying to
do and be able to assis...
|
3 |
25.05.2007 22:35:08 |
|
Stack smashing/buffer overflow research
Hi, let me start by apologising if these are the wrong groups to post
these kinds of messages to (I've cross-posted) but after searching the
web and not finding any good material I thought there might be someone
here who know.
I'm a student and I'm currently working on a small project dealing
with stack smashing/buffer overflows and protection mechanisms in
modern OSes, the idea is to make...
|
4 |
25.05.2007 21:34:12 |
|
LimitLogon utility
I am trying to setup the LimitLogon utility and have all the AD
portion setup and ready -
I am running in to a problem though - when I go to do the
limitloginclientsetup.exe on the end client - it is telling me that I
need version 1.1.4322 of the .net framework installed.
I have already installed the 2.0 version of the .net framework yet -
it will not allow me to proceed.
Any ideas ?
...
|
2 |
25.05.2007 14:11:56 |
|
Deny Right to Local Admin Group to Log On Via Terminal Services?
Any harm in denying log on via TS to the local Administrator Group?
Since our domain's TS is available from outside networks I thought this may
provide some security benefit.
Thanks.
...
|
3 |
25.05.2007 13:29:17 |
|
Security Hardening
Would like to know
1) how to hide the computer from network browse list -
Prevent a potential attacker inside the firewall from generating a list of
available network resources
2) Disable Autorun- Prevent a malicious program from starting when media is
inserted
on windows 2003 server and DC
...
|
15 |
25.05.2007 07:09:00 |
|
Allow non-admin to create/edit scheduled tasks
Can anyone tell me what I need to do to allow a person that is not an
administrator (they are a power user I believe) on a 2003 Standard Server to
create and edit scheduled tasks? Currently when a Power User double clicks
on Scheduled Tasks within Control Panel they get an Access Denied message.
I tried adding Power Users to the Security Tab of the SchTasks.exe with
modify rights but th...
|
3 |
24.05.2007 20:47:07 |
|
Are we sending DDOS?
We got an email from our ISP saying we are sending out a Ddos attack.
How would one go about tracing this?
All our outbound connections are going through an ISA 2000 server.
Any suggestions for a newb?
...
|
2 |
24.05.2007 10:07:54 |
|
Windows 2003 Pre-authentication failed
Hi
I have a domain controller that has ALOT (read 4 times / minute) of
"Failure Audit" entries in the Security log.
The entries are of ID 675, Category Account Logon. The message is
"Pre-authentication failed:"
Failure Code: 0x19
If I demote the server to just be a member server it is fine. But if i
repromote the server the errors return.
Regards
Andrew Tee...
|
17 |
23.05.2007 21:14:30 |
|
Re: Disallowing console login
Are the users who you wish to deny members of Box1\Administrators?
On May 20, 9:41 pm, style...@gmail.com wrote:
> Is it possible to disallow console login for certain users/groups?
>
> By console login in mean using RD like so:
>
> mstsc /v:box1 -console
>
> The scenario is that I would like for only one user on the box to be
> allowed to login to the console (s...
|
1 |
23.05.2007 12:47:00 |
|
Disallowing console login on w2k3
Is it possible to disallow console login for certain users/groups?
By console login in mean using RD like so:
mstsc /v:box1 -console
The scenario is that I would like for only one user on the box to be
allowed to login to the console (session 0). This is because the box
is running an application that unfortunately cannot be run as a
service, thus we need to preserve the console login a...
|
2 |
23.05.2007 12:25:46 |
|
IEEE 802.1x authentication for domain user accounts only
Hi all,
I've just started working with the 802.1x authentication and it's
brilliant.
The scenario I'm looking into implementing is to enable the 802.1x
authentication for specific domain accounts on a number of mobile
computers.
The laptop computers contain a number of accounts, some being domain
and local accounts. I'd like the 802.1x authentication to be enabled
only when the user ...
|
2 |
22.05.2007 09:07:33 |
|
which ip scheme i have to prefer?
I have 1 gateway pc for all networks - 192.168.0.254
( that i can change any way)
now i want Hierarchy like -- 1 gateway
/ \
1 company 2 company
/ / / /
1 dept 2 dept 1 dept 2 dept
...
|
2 |
22.05.2007 00:47:37 |
|
PKI User certificate auto-enrollment for XP clients not logging onto domain computer
Hello,
I am currently in the process of researching the features of user
certificate autoenrollment for a proof of concept using Outlook Web
Access to an Exchange 2007 environment.
I would like to implement a scenario where a user provisioned with an
exchange email box and address would be able to automatically obtain a
user certificate from the CA by accessing a secure portal or OWA.
...
|
2 |
19.05.2007 19:56:48 |
|
Enterprise file auditing
Hi guys,
I am hoping anyone that is doing enterprise auditing can help out with this
one. We have a new project and it can really be broken down into 3 objectives
First - Use auditing to monitor the modification and deletion of files on
workstations/servers
Second - Try to keep security logs as clean as possible by auditing only
cetain folders we and only the create/write data succes...
|
4 |
18.05.2007 20:33:59 |
|
Application security issue
On Windows 2k3 SP1 Server I have an FTP server with a Notification service
capable of triggering conditional activity. i.e. sending emails or run a
program when a condition is satisfied. eg. run an unzip script when *.zip is
uploaded.
1. The FTP server log shows it is triggering the script - but nothing
happens. I then had a test file of a .bat which echoed some text and then
paused.
...
|
4 |
18.05.2007 13:42:31 |
|
printing security
My servers are Server2003, SP1 using AD, volumes are NTFS. We have data
that is subject to HIPAA as well as good business practice .
I have a folder called Clients. Under this there are about 15 child
folders. Different staff and groups of staff have different needs, read
only, read/write, or no access. Under these 15 many of these have
additional layers of child folders, again with...
|
2 |
17.05.2007 21:49:03 |
|
Service control manager
Have spent 2 days trying to enable a standard user to stop and start a
service on a server, have done the sddl stuff on the services and can stop
and start remotely, but want the users (dba's) to be able to use an mmc or
computer management, but keep getting..service control manager access denied
stuff!, does anyone out there know how to permission the service control
manager in 2003 r2?...
|
3 |
17.05.2007 19:19:06 |
|
HIPPA and SOX compliance
I am looking for a good, quality 3rd party software that will monitor our
primary files servers. We have 4 file servers, averageing about 25TB of data
on each. We have roughly 6000 users. All servers are Win2K3 R2, all
workstations are Windows XP Pro. We need to be able to audit when files and
folders have been created, modified, deleted, restored and by who at any
given time. Also need...
|
9 |
16.05.2007 16:43:10 |
|
Unattended install
Hi,
I'm trying to install a standalone root CA on Microsoft Certificate
Services, with SYSOCMGR but I cannot configure the distinguished name
of my certificate.
Not matter how I do, the DN is equal to CN="name of the ca"
I tried the parameter CADistinguishedName which appear in the logfile
"C:\Windows\Certocm.log"
Is it somehow possible to configure the DN in a silent installation?
...
|
1 |
15.05.2007 13:59:02 |
|
Domain Controller Certificates and moving to a new server or removing them?
I need to demote & remove a DC from the domain. However, it has
certificate services loaded on it, and it's the cert server for the
Domain Controllers. I've never seen a domain controller need a
certificate before! The server was Windows SBS that was upgraded to
Windows
SBS R2 and then used the transition pack to go to Windows 2003
Standard server.
My questions are
1. What happens to our...
|
2 |
15.05.2007 12:13:08 |
|
Issuing of server/client authentication certs from an Ent. CA running on W2k3 Standard Edition
Hi all,
Just a quick question: Our Enterprise Root CA in our AD forest is running on
a DC on a Win2003 Standard Edition box. I read that a standard edition W2k3
can only issue "Version 1" of security templates?
Not sure if its any issue but if we want to obtain Windows Computer
Certificates for client/server authentication (OID: 1.3.6.1.5.5.7.3.1 and
.....3.2) purposes from this CA, is...
|
4 |
14.05.2007 18:43:10 |
|
Free PKI Smart Cards & CSP for Microsoft Newsgroup Participants
Hello
In response to the growing interest in Smart Cards & PKI in Windows,
the company I work for, SCsquare Ltd. is willing to ship FREE-OF-CHARGE
CSP Sample kits, each including 3 PKI Smart Cards and 1 CSP Installation CD.
To obtain the package, send your precise shipment & company details to
support@scsquare.com
Please note in the body of the message that you are responding to th...
|
1 |
14.05.2007 11:21:02 |
|
Smartcard / NTFS Encryption
Hi,
I am trying to store the certificates for NTFS Encryption on the smartcards
of my user. It took me quite long to find a CSP which is capable of doing
so. So far it is working now but now I have some questions regarding NTFS
encryption.
Im am still experimenting around. First I create an encrypted folder, then I
export the encryption certificate and import it into the smartcard and
d...
|
3 |
14.05.2007 08:13:35 |
|
How Do Release Numbers and Service Packs Relate?
Foolish question, I suppose but I am confused and have been unable to find
an authoritative answer. If one takes straight 2003 server and applies all
upadates including Service packs currently available, how (if at all) would
that differ from 2003 Server R2 fully patched with the same Service Packs
applied?
...
|
4 |
14.05.2007 06:59:45 |