Threads Replies Last Post 11 Pages: 1  2  3  4  5  6  7  8  9  10  11   what is the 's - synchronize' permission available in icacls.exe? using icacls.exe to automated setting some NTFS permissions... I'm wondering and the 'synchronize' option listed because If I set the permission I'm after in the windows gui and then run icacls.exe to view how icacls displays it, it includes the 's'... which I assume has no gui representation. eg. running this: icacls.exe d: /grant users:(CI)(IO)(WD) grants the 'write data / add f... 2 12/30/2008 2:34:33 PM Accounts:Administrator account status is "Not Applicable" Hello, Have a problem with the administrator and guest accounts. In the Local Security Policy management dialog, I get the following odd entries: Accounts: Administrator account status Not Applicable Accounts: Guest account status Not Applicable Network access: Allow anonymous SID/Name translation Not Applicable When I right click on any of these, the enable/disable radio buttons a... 3 12/30/2008 3:07:45 AM renew certificate Hi everyone: My question is the following. I've hundreds of macros signed with a certificate from my own Microsoft CA. The certificate is just valid till next January 14th. I would like to renew the certificate so I had not to sign all macros again. What do I have to do so I can renew the certificate without having to sign all macros again?? It's very important for me because it's a ... 1 12/29/2008 3:10:42 PM Why did this IPSec Filter stop DNS? I have a Windows 2003 server that serves as an AD Domain Controller and a DNS server for our small office network. The server sits on a private network that connects to the Internet by a NAT / Firewall box. The internal network is 192.168.1.0/24. I configured a IPSec ACL on the 2003 Server that did the following things: * Allowed any traffic (all protocols) to the server from the lo... 1 12/27/2008 11:20:00 PM Failed to apply User Policy from GPO on Windows XP. Event ID 1086 I have a following problem. My DC is running Windows 2008 Server with domain and forest function level native 2008. I have some client computers running Windows 2000 and some running windows XP. On Windows 2000 everything seemed to be OK with GPO. But on XP machines i've got following error while applying User Policies from GPO: Event Type: Information Event Source: Userenv Event Cate... 3 12/26/2008 2:33:23 AM RDP over VPN to Windows Server 2008 Hello, I work in a small office (11 people) where many of us do several different jobs. I myself generally do most of the IT type stuff as well os my "real" job. Because of that we often need to do things when we aren't in the office, so a couple years ago I installed a NetGear VPN router (FVS338). I had a devil of a time getting the VPN Client software to give me a usable connection... 8 12/23/2008 7:44:50 PM Lots of 529 failed logon attempts I found them on a TS in security log. There are lots of them. I wouldn't suspect the users forgetting their passwords so often. Coming from different processes which I can't see in Task Manager. Also different ports. They all have the same caller ID. Any idea what can be causing them? yaro Logon Failure: Reason: Unknown user name or bad password User Name: Martin Domain: DOMAIN ... 3 12/22/2008 12:47:54 PM Run As without log on locally permission? Hi As part of a new project, I have 16 Windows Servers. I was planning to set up basic generic login accounts to the servers and have the users run an application using "Run As" feature. (They need to use their normal desktop active directory accounts to log into the application.) The problem is, my company security policy does not allow desktop logins to be used to login to servers, s... 3 12/20/2008 3:17:01 PM How to detect if the Windows XP firewall is enabled on my LAN computers ? Hi, a lot of users in our LAN have admin rights (I know it's bad but please it is like that, so please dont blame me about that ;-)). Some of them have the Windows XP firewall enabled and not configured correctly. By the way, I am not able to detect those computers on the network through a ping and I cannot force a group policy because the firewall is blocking the trafic too; neither... 10 12/19/2008 6:37:56 PM CIFS and RPC security Hello: I'm trying to find some information on CIFS and RPC security. From what I've been able to find, it looks like the implementation of CIFS in a Windows XP/Windows Server 2003 network does encrypt the user authentication process by default. Would the default settings for those two OSes also encrypt the entire CIFS session? My concern is that the data transferred from a fi... 3 12/19/2008 1:30:53 PM copy root folder preserving permissions Hi all, I have a Windows 2003 server that has a file share that is being used for My Documents redirection. Due to disk space issues I need to move this file share to another newly installed disk. How can I easily copy all the folder contents including all the child folders and its contents to this new disk and preserve all the ntfs & share permissions of all the child folders and its... 5 12/17/2008 8:52:51 PM CRLOverlap Question Hi, Windows 2003 Certificate Services on Windows Server 2003 R2 SP2 Enterprise Edition: I want to publish a new CRL once an hour. The CRL should be valid for 1 week. The CRL publication interval is set to 1 hour. CRLPeriod = Hours CRLPeriodUnits = 1 The CRLOverlap interval is set to 1 week. CRLOverlapPeriod = Weeks CRLOverlapUnits = 1 However, the "CRL Next publish" setting... 5 12/17/2008 8:37:01 AM MS08-067 locked up my servers After installing MS08-067 (last weeks emergency RPC patch) none of my domain controllers could talk to each other. When I uninstalled this patch, everything started working again. My DCs are Windows Server 2003 R2 SP2 running on VMWare Server 1.05. Has anyone else seen this behavior or have any ideas on how to avoid it? The errors indicated that RPC failed to allow new connections. ... 10 12/16/2008 3:21:35 AM Preventing inter office printing accidents We are a multi site organization running 2003 Standard domain controllers at each site. All DCs are in the same domain and therefore sharing the AD. Each office has its own networked printers and I haven't had to worry too much about printing issues before. But one has arised that hopefully I can get some suggestions for. Our accounting systems is running through terminal services from head... 5 12/15/2008 5:19:34 PM server 2008 - option to stop ntfs perm inheritance disabled? I went to change some NTFS permissions on a folder as I have done many times on 2k/2k3 servers but the "include inheritable permissions from this object's parent" checkbox is checked and disabled on this server 2008 box? whats the deal? I'm logged on via TS session to this server as the domain administrator... it is a domain controller. ?? ... 3 12/15/2008 12:28:54 PM Computer certificate renewal Hi, I'm running a Win2K3 Enterprise CA. I have a number of computer certifcates that were manually issued to handheld devices. The handhelds are not part of the domain. The certs are about to expire. I don't see a way to renew them from the CA mmc or using certutil. Is there a way to renew them or do I have to issue brand new certs? Thanks for your help.... 3 12/12/2008 8:04:26 PM Large Number of Security Event ID 537 I'm getting the following in one of my customer's SBS 2003 server: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 537 Date: 12/09/2008 Time: 5:35:18 AM User: NT AUTHORITY\SYSTEM Computer: SERVER1 Description: Logon Failure: Reason: An error occurred during logon User Name: Domain: Logon Type: 3 Logon Process: Èùö Authentic... 2 12/11/2008 11:16:11 PM AES 256 support hotfix for Server 2003 I'm having a little difficulty with Hotfix 192447 mentioned in this article: http://support.microsoft.com/kb/948963. After I've applied the update and restarted the server, all mail being forced to use TLS through routing groups in Exchange 2003 gets queued and just sits there. I just setup the routing groups for the first time a couple weeks ago so I'm not sure if I'm just missing som... 5 12/10/2008 7:49:29 PM iis: monitoring cert authorization Hi, We have non-domain IIS 6. Users are using client certificates to access IIS server (setting: require client certificates, auth:anonymous), and if the cert is OK, they log on to web app using user/pass. Is it possible to log/monitor serial numbers of certs used? Thank you ... 1 12/9/2008 2:31:38 PM Global Groups and What Resources they Give access to Hey folks, newbie here.. Are there any utilities within Windows Server 2003 or Active Directory that will tell me all of the resources which a particular Global Group grants access to? So for example, User A is a member of the Global group G_TEST_Resources. But no one seems to know what this group gives access to. I'm looking for a tool\utility that can tell me if the group gives acc... 5 12/8/2008 1:03:50 PM Need a good Graphical tool for viewing File Security Options There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic. There was an error processing your request. Please try again. Standard view View as tree Proportional text Fixed text Hi, Dose anyone know a good tool for viewing file security in XP Pro. I tried to use MMC with Security Configuration and Analysis and I have to say it not good at all!. I would like to apply a filter over the "File Tree" telling me what files and folders for ex. has write access for a particular user/group. If a item has write access that path from the root of the filesystem should b... 3 12/7/2008 8:56:32 PM Has Microsoft recently introduced "Loopback check" functionality in Windows 2000? Hi Folks, I think the answer to my question is "Yes", but hopefully someone can confirm and/or point me to the particular security patch that introduced it. Recently - on the 14th of November when we rolled out a number of Microsoft patches, a number of our Windows 2000 servers had problems where applications running on these servers were no longer able to map to local shares using a... 2 12/4/2008 10:22:11 PM MS08-026 event 534 and "incorrect printer drivers" related problem I have having terrible troubles with this situation. After applying MS patch MS08-026 we are getting the following error when trying to add a printer. "The server for "printer" printer does not have the correct printer driver installed." When I uninstall this patch, the problem clears up. In addition, and I believe this to be related - we are getting in the security event log the fo... 3 12/4/2008 3:53:01 PM Open File - Security Warning on BGInfo.exe We want to use GPO to run BGInfo with a standard .bgi from %USERDNSDOMAIN% or %LOGONSERVER%\NETLOGON on all servers. We're getting the Open File - Security Warning. We do not want to have to manually set "include all network paths", nor do we want to manually add the DCs to Trusted Sites. We want to manage this from AD, with as little overhead as possible, since we are likely to adopt th... 1 12/3/2008 8:15:05 PM Files without security informations Have big big problem!!! There is an Access db file and that is shared by a few users. But! Sometimes happends, that one user opens file in shared mode, but another user cannot acces it. When I check the ldb file created by first user, it says, that I cannot view or edit security informations of the file, because I havent permissions. Thats weird, because Im the administrator. I cannot take o... 1 12/2/2008 7:07:37 PM 11 Pages: 1  2  3  4  5  6  7  8  9  10  11