Group:  English: Windows Server » microsoft.public.windows.server.security

DotNetBag
.NET Development Newsgroups

HTVi
TV Discussion Newsgroups

Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
Rising Antivirus 2006

Threads Replies Last Post
7 Pages: 1  2  3  4  5  6  7  
Missing PC - Want to know who last logged on
We have a PC that is missing. It is a domain-based PC on a Win 2003 domain. I have all security event logs from all domain controllers, but no access to the missing PC's event logs. I also have access to SMS. In the event logs, I have found several entries for the PC, but can't figure out how to determine who last logged on. Is it possible without the PC's event logs? Or with SMS? ...
7 06.07.2007 03:24:01
Where to run the Certificate Services to be an Enterprise CA
Hi, We have Windows 2000 Domain controllers, file servers, and a Web server. a couple Windows 2003 Network Appliances, a Windows 2003 Web server running Windows Sharepoint Services and Project Server, a Windows 2003 ISA Server. I'm running into an issue where https:// to http:// bridging is not totally working with ISA sharepoint site publishing. The failure I believe is in the PDS (Proj...
1 05.07.2007 18:43:45
Where to run the Certificate Services to be an Enterprise CA
Hi, We have Windows 2000 Domain controllers, file servers, and a Web server. a couple Windows 2003 Network Appliances, a Windows 2003 Web server running Windows Sharepoint Services and Project Server, a Windows 2003 ISA Server. I'm running into an issue where https:// to http:// bridging is not totally working with ISA sharepoint site publishing. The failure I believe is in the the PDS (...
1 05.07.2007 18:24:12
Is it possible to .PFX file when creating/issuing a certificate
Hello all, I'm trying to figure out if there is a way to create a .PFX file whenever a new certificate is issued? What I'm trying to accomplish, using the Windows Server 2003 based Certificate Server Services, is to issue a public/private key pair that the end-user can then import into any web browser of their choosing. What I have been able to do is use either IE or Firefox to access...
1 05.07.2007 16:04:17
Two versions of IE6?
I just noticed that on my servers I have a version of IE6 that under the Intranet Security Zone, when you open Sites you can select three check boxes related to the LAN, but on other XP and servers IE6 just has a box to enter the site names.... When I setup GPO to push out the zone settings from IE, only the machines with a matching IE6 take the policy for the Intranet Zone, but they ...
1 02.07.2007 23:25:26
Windows Media Player Remote Code Execution (923689)
Hello! We recently self-audited our servers and found that one of them has this high-risk vulnerability. To reference the vulnerability description, "Multiple vulnerabilities in Windows Media Player could allow remote code execution. One vulnerability relates to ASX file processing. WMVCORE.DLL contains an exploitable heap buffer overflow in its handling of "REF HREF" URLs within ASX fil...
19 02.07.2007 21:09:10
HELP: sorts out & cleans up NTFS security permissions
I used SysInternal's AccessEnum and found it quite useful for Windows 2003 Server admin work, but laborious. I have 2 HDs, C:\ & D:\. What if another admin played about with the NTFS security permissions of C:\? Is there a "revert back to system defaults" option? Currently the only way I see is to install Windows 2003 Server on another PC and compare NTFS security permissions on all fil...
3 30.06.2007 04:07:26
do not prompt for change password
how can I make our citrix and terminal servers not prompt users to change their password or delay it to the last day or something alike? thnx ...
2 29.06.2007 17:06:02
Local admins
Good morning. I have about 400 clietns in a domain-based network. Some users have local admin rights so don't. Does anyone have any suggestions about how I easily find those users with local administrator rights? Regards Per-Torben Sørensen ...
6 27.06.2007 20:23:43
how to modify Enterprise RootCA + CertificateTemplates for "EV"-security/green-bar
Hi, since "extended verification" (EV) and resulting green-bar in IE7 is just a matter of proper RootCA and ServerCert attributes I'm wondering how to enable EV-features for a W2K3 EnterpriseRootCA to display green-bar even for intranet SSL sites. Anybody got a clue how to? thanks! -- CU Thorsten Rood...
1 27.06.2007 19:10:56
Two Enterprise CAs?
Hello All, I upgraded our Enterprise CA from Windows 2000 CA to Windows 2003 Standard and it now refuses to issue certificates. Is it possible to set up another CA on a 2003 Enterprise box and have them online at the same time? While I can't find documentation that recommends having two CAs, I can't find anywhere that warns against it either. Ideally, the new CA would start issuing cer...
1 27.06.2007 15:18:19
Cannot install DPM agent on Windows server 2003 (Exchange and IIS)
I was able to install DPM agent on all W2K3 servers except on Exchange2000 and IIS 6.0 servers. The error: --------------------------- Microsoft System Center Data Protection Manager v2 Beta2 --------------------------- The user administrator does not have administrator access to the following nodes: exchangeserver.mydomain.com (ID: 271) Remove the servers from the "Select Servers" page ...
2 26.06.2007 16:27:14
sid mapping
hello all, I had no luck in the AD group, so I'll try here. Moved shares from several NTFS Volumes to other NTFS volumes. One share has a sid listed as S-1-5-21-********* How do I find out what security group or local group that is? thanks in advance ...
3 26.06.2007 14:17:05
KB929123 W2003
OK, I don't believe the above update is installing.... I run the update and here is my log: ====================== 0.750: ================================================================================ 0.750: 2007/06/26 10:04:35.090 (local) 0.750: d:\26893aea8dec1e71d3f543635e56af\update\update.exe (version 6.3.4.1) 0.750: Hotfix started with following command line: /log:c:\kb.log 0.7...
1 26.06.2007 14:10:28
"access denied" for members of Administrators, stand-alone server
Hello, I have a stand-alone Windows Server 2003 server where I get a access denied even for members of Administrators on a folder the moment I deny "Users" access to it. This is from the server itself - not via a share. The directory is c:\data\paydir. The c:\data directory is shared and "Users" have access to it. For paydir, I deny all access to "Users," but not for "Administrato...
8 26.06.2007 06:45:05
How to prevent exploits
There was a question regarding exploit code reliability on Windows a few days ago. You can view a short example movie by following the link below: http://www.skilltube.com/media/freemovies/Exploiting_SW_Vulnerabilities/ index.html The exploited vulnerability is an old one, but it might give a better understanding of the problem. Skilltube Team...
1 23.06.2007 12:26:04
Administrative privileges
My network currently has Windows Server and Exchange 2003. What I'd like to do is have administrators that can manage user and computer accounts without them being domain administrators. The one problem that I run into is the user can't create/delete/modify the Exchange account, but I want them to be able to. If I set them as a domain administrator, they can manage the Exchange account. ...
2 23.06.2007 05:05:21
WINS Error - 4260 and 4261
Hi, Wondering if anyone can help with this at all. Cross posted to a few places as sure most people have had experience of WINS here. I've got 2 WINS servers (very old). On one I keep getting system event errors all day long which are event id 4260 and 4261. I've googled and googled but can't find anything that fixes it. Below are the errors. If anyone could help/offer suggestions i...
5 21.06.2007 18:29:09
File Access Audit on File Server
Hi, due to regulations we have to monitor any access to the files stored on our file server. At the first glance i thought no problem - use windows tools and every thing is ok. But the problem is now that there are too much log messages. So the server performance is going down in case of activated windows logging. Are there possiblities in windows (or some external tools) to set up a high...
2 21.06.2007 18:12:33
Reading Directory Access Flags from Filemon
Hello group, Microsoft Sysinternals Filemon gives a good bit of information on what executables are doing with files and folders. Most of it makes sense, but one thing has me guessing. Can someone point me to a reference on the 8-bit access flags? For example, one entry might read "Options: Open Directory Access: 00100001". I would like to know how to translate 00100001. Thanks in adv...
1 21.06.2007 15:18:43
certificateauthority.view issues-automating cert revokecation
I am trying to write a vbscript to revoke certs from our 2003 cert server(certs are not stored in AD) when people leave the company, but not having much luck at it. We have over 30k of certs so using the gui is slow and painful. I have tried every example I can find and always get the same error. Here is the simplest script that gives the error: Dim objView ' Instantiate the vi...
1 21.06.2007 14:41:41
The server denied the (URL). (12202)
Hi! I am on a W2k3 SBS server. It is a test server. I am trying to publish a website. http://www.neoideas.com/home.htm I get this error... a.. Error Code: 403 Forbidden. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202) I think the ISA server is causing the problem. Am I right? How do I fix this problem? BB ...
4 21.06.2007 12:29:01
solution required; Someone accidentally or intentionally deleted some files and folders from network resource.
Hi, Someone accidentally or intentionally deleted some files and folders from network resource. Is there a alternate way to find out or log event on windows 2003 other than event viewer for : In case : There is no auditing enabled Resource is a network drive Earliest help would be appreciated. Thank you ...
2 21.06.2007 06:06:27
CA Authority Error
the Certificate Services service fails to start on our Windows Server 2003 box. The event being written to the system log is: Event ID: 7024 Source: Service Control Manager Description: The Certificate Services service terminated with service-specific error 2148073494. I have confirmed that the local administrators group has full control access to %System Drive%\Documents and Settings\...
1 20.06.2007 21:36:42
Security Event ID 560
Hi, Below is a copy & paste from a Windows Server 2003 Security Event. This is triggered by a Scheduled Task which runs a BAT file with a single call to: "C:\Program Files\Java\jre1.5.0_06\bin\java.exe" <long_parameter_list> My inclination is to give <machine_name>\<local_user> rights to READ and EXECUTE C:\WINNT\system32\java.exe When I attempt to do so, I am war...
1 20.06.2007 20:07:56
7 Pages: 1  2  3  4  5  6  7  

Home | Search | Terms | Imprint | Contact
Newsgroups Reader - provided by WiredBox.Net