|
[Q] Kerberos DES encryption
Most integration guides recommend using DES encryption for Kerberos tickets
in UNIX/Linux interoperability scenarios.
I wonder what is the risk. It can be brute forced; probably even in the
lifetime of the ticket. But I'm not familiar with Kerberos specification
good enough to identify what the potential exposure will be.
Opinions appreciated.
--
Svyatoslav Pidgorny, MS MVP - Secu...
|
8 |
24.04.2007 10:31:33 |
|
|
how can I make money off my ultimate security solution for servers
I want to sell a security solution that I have designed, it makes a server
completely immune to viruses, security vulnerabilities, hackers and it fixes
100% percent of the current security problems with windows operating systems.
I fully expect that in a few years every important server in the world will
be using some variation of my design.
This is not just my opinion, I have shared...
|
14 |
23.04.2007 01:22:14 |
|
|
NTFS permissions quandary
Whenever I try to do really really special permissions, I always get
confused.
I have a list of files in a particular folder. However one of the
files, I don't even want a particular user to see when they open up
the folder
I create a group, and I give that group the List Folder contents right
on the folder containing the files.
On that particular file, I set deny permissions for...
|
4 |
22.04.2007 17:16:48 |
|
|
Error issuing certificates from WS03 cert svc
Hi,
I'm having trouble with issuing certificates from a Windows Server 2003
enterprise (subordinate) issuing CA. The CA rejects requests with a warning
in the Windows Application Log (Event ID: 53, Source: CerSvc): "Certificate
Services denied request 932 because: The revocation function was unable to
check revocation because the revocation server was offline. 0x80092013
(-2146885613)...
|
4 |
20.04.2007 05:01:16 |
|
|
KB 925902 causes SceCli 1202 warning events every 5 minutes
I started getting Application warnings shortly after I installed the
critical hotfix KB 925902 on my SBS 2000 server on 4/9 at 12:27AM and
restarted. They stopped
after I uninstalled the hotfix. The SBS 2000 Server is running Exchange and
SQL. All are on current service packs.
Is anyone else seeing this behavior?
Any ideas?
Is this the right newsgroup?
Thanks,
Joe M
--------...
|
1 |
19.04.2007 16:31:24 |
|
|
"Network Service" account is UNABLE to write to a network shared folder
Hi,
A small WORKGROUP has two Windows Server 2003 servers - server A & server B.
I have installed an application on server A and by default it runs under the
account "Network Service".
This application writes files to a local directory without problems but when
I map a folder from server A to server B and use that mapped network folder,
it fails.
Note that on server B I have also g...
|
3 |
19.04.2007 15:35:03 |
|
|
Local Administrator Account
I have a Windows 2003 Active Directory environment. I have XP workstations
and member servers with the local administrator account password set the
same. I logged into the XP workstation as the local administrator. Then I
was able to access all the administrative shares of the other workstations
and member servers that have the same password. I would be able to unc path
to \\server\c...
|
6 |
19.04.2007 15:31:09 |
|
|
Installing IIS after CA installation?
We have installed an offline root CA and an online subordinate issuing CA.
In addition, we did not install IIS on either CA, but used an existing IIS
server. We created a DNS Alias to point the CRL and AIA to the website on
the remote IIS server.
I have found out now that one of the applications that needs a certificate
can only acquire one by using the certificate website -
http://s...
|
2 |
18.04.2007 20:36:26 |
|
|
local security policy on windows 2003 server
We have a windows 2003 server that is a member server on a windows
2000 domain. I am attempting to add a local account from the win2k3
server to the log on as a service however i am unable to modify that
setting on my win2k3 server. I can adjust it on windows 2000 servers
in the domain. Is there a setting I am missing to make this
adjustment.
Thanks
...
|
3 |
18.04.2007 14:23:34 |
|
|
Domain name required?
I'm running Server 2003 w/ SP1 in a single domain. I have an issue when
trying to access recourses from outside the domain. For example, if I try to
access a folder while on a laptop that is not joined I will have to specify
domain\username. This is becoming a hassle since we're adding more users.
How can I specify ONLY the username?
Thank You,
...
|
6 |
18.04.2007 13:33:01 |
|
|
Security on DFS Links?
I have inherited a domain since the administrator who built it has
left. Some how, on certain DFS shares/link he has got them secured to
where CAN map a drive to them, but you CAN NOT create a network place
to them? This is odd to me, but I slightly remember the admin saying
they did this for security reasons. I just want to figure out what
they did and how they did it, and I'm not sure I'...
|
1 |
17.04.2007 15:13:08 |
|
|
Security Problem...
Hi;
With Windows Server 2003 Enterprise Edition Service Pack 2, I have next trouble...
I lost a user's profile, and delete it for rebuild it. But after this can´t open files .zip from
network sites or download this files type from internet. Show the message
---------------------------
Security Alert
---------------------------
Your current security settings do not allow this file to ...
|
2 |
16.04.2007 23:46:01 |