Threads Replies Last Post 11 Pages: 1  2  3  4  5  6  7  8  9  10  11   Are we sending DDOS? We got an email from our ISP saying we are sending out a Ddos attack. How would one go about tracing this? All our outbound connections are going through an ISA 2000 server. Any suggestions for a newb? ... 2 5/24/2007 10:07:54 AM Windows 2003 Pre-authentication failed Hi I have a domain controller that has ALOT (read 4 times / minute) of "Failure Audit" entries in the Security log. The entries are of ID 675, Category Account Logon. The message is "Pre-authentication failed:" Failure Code: 0x19 If I demote the server to just be a member server it is fine. But if i repromote the server the errors return. Regards Andrew Tee... 17 5/23/2007 9:14:30 PM Re: Disallowing console login Are the users who you wish to deny members of Box1\Administrators? On May 20, 9:41 pm, style...@gmail.com wrote: > Is it possible to disallow console login for certain users/groups? > > By console login in mean using RD like so: > > mstsc /v:box1 -console > > The scenario is that I would like for only one user on the box to be > allowed to login to the console (s... 1 5/23/2007 12:47:00 PM Disallowing console login on w2k3 Is it possible to disallow console login for certain users/groups? By console login in mean using RD like so: mstsc /v:box1 -console The scenario is that I would like for only one user on the box to be allowed to login to the console (session 0). This is because the box is running an application that unfortunately cannot be run as a service, thus we need to preserve the console login a... 2 5/23/2007 12:25:46 PM IEEE 802.1x authentication for domain user accounts only Hi all, I've just started working with the 802.1x authentication and it's brilliant. The scenario I'm looking into implementing is to enable the 802.1x authentication for specific domain accounts on a number of mobile computers. The laptop computers contain a number of accounts, some being domain and local accounts. I'd like the 802.1x authentication to be enabled only when the user ... 2 5/22/2007 9:07:33 AM which ip scheme i have to prefer? I have 1 gateway pc for all networks - 192.168.0.254 ( that i can change any way) now i want Hierarchy like -- 1 gateway / \ 1 company 2 company / / / / 1 dept 2 dept 1 dept 2 dept ... 2 5/22/2007 12:47:37 AM PKI User certificate auto-enrollment for XP clients not logging onto domain computer Hello, I am currently in the process of researching the features of user certificate autoenrollment for a proof of concept using Outlook Web Access to an Exchange 2007 environment. I would like to implement a scenario where a user provisioned with an exchange email box and address would be able to automatically obtain a user certificate from the CA by accessing a secure portal or OWA. ... 2 5/19/2007 7:56:48 PM Enterprise file auditing Hi guys, I am hoping anyone that is doing enterprise auditing can help out with this one. We have a new project and it can really be broken down into 3 objectives First - Use auditing to monitor the modification and deletion of files on workstations/servers Second - Try to keep security logs as clean as possible by auditing only cetain folders we and only the create/write data succes... 4 5/18/2007 8:33:59 PM Application security issue On Windows 2k3 SP1 Server I have an FTP server with a Notification service capable of triggering conditional activity. i.e. sending emails or run a program when a condition is satisfied. eg. run an unzip script when *.zip is uploaded. 1. The FTP server log shows it is triggering the script - but nothing happens. I then had a test file of a .bat which echoed some text and then paused. ... 4 5/18/2007 1:42:31 PM printing security My servers are Server2003, SP1 using AD, volumes are NTFS. We have data that is subject to HIPAA as well as good business practice . I have a folder called Clients. Under this there are about 15 child folders. Different staff and groups of staff have different needs, read only, read/write, or no access. Under these 15 many of these have additional layers of child folders, again with... 2 5/17/2007 9:49:03 PM Service control manager Have spent 2 days trying to enable a standard user to stop and start a service on a server, have done the sddl stuff on the services and can stop and start remotely, but want the users (dba's) to be able to use an mmc or computer management, but keep getting..service control manager access denied stuff!, does anyone out there know how to permission the service control manager in 2003 r2?... 3 5/17/2007 7:19:06 PM HIPPA and SOX compliance I am looking for a good, quality 3rd party software that will monitor our primary files servers. We have 4 file servers, averageing about 25TB of data on each. We have roughly 6000 users. All servers are Win2K3 R2, all workstations are Windows XP Pro. We need to be able to audit when files and folders have been created, modified, deleted, restored and by who at any given time. Also need... 9 5/16/2007 4:43:10 PM Unattended install Hi, I'm trying to install a standalone root CA on Microsoft Certificate Services, with SYSOCMGR but I cannot configure the distinguished name of my certificate. Not matter how I do, the DN is equal to CN="name of the ca" I tried the parameter CADistinguishedName which appear in the logfile "C:\Windows\Certocm.log" Is it somehow possible to configure the DN in a silent installation? ... 1 5/15/2007 1:59:02 PM Domain Controller Certificates and moving to a new server or removing them? I need to demote & remove a DC from the domain. However, it has certificate services loaded on it, and it's the cert server for the Domain Controllers. I've never seen a domain controller need a certificate before! The server was Windows SBS that was upgraded to Windows SBS R2 and then used the transition pack to go to Windows 2003 Standard server. My questions are 1. What happens to our... 2 5/15/2007 12:13:08 PM Issuing of server/client authentication certs from an Ent. CA running on W2k3 Standard Edition Hi all, Just a quick question: Our Enterprise Root CA in our AD forest is running on a DC on a Win2003 Standard Edition box. I read that a standard edition W2k3 can only issue "Version 1" of security templates? Not sure if its any issue but if we want to obtain Windows Computer Certificates for client/server authentication (OID: 1.3.6.1.5.5.7.3.1 and .....3.2) purposes from this CA, is... 4 5/14/2007 6:43:10 PM Free PKI Smart Cards & CSP for Microsoft Newsgroup Participants Hello In response to the growing interest in Smart Cards & PKI in Windows, the company I work for, SCsquare Ltd. is willing to ship FREE-OF-CHARGE CSP Sample kits, each including 3 PKI Smart Cards and 1 CSP Installation CD. To obtain the package, send your precise shipment & company details to support@scsquare.com Please note in the body of the message that you are responding to th... 1 5/14/2007 11:21:02 AM Smartcard / NTFS Encryption Hi, I am trying to store the certificates for NTFS Encryption on the smartcards of my user. It took me quite long to find a CSP which is capable of doing so. So far it is working now but now I have some questions regarding NTFS encryption. Im am still experimenting around. First I create an encrypted folder, then I export the encryption certificate and import it into the smartcard and d... 3 5/14/2007 8:13:35 AM How Do Release Numbers and Service Packs Relate? Foolish question, I suppose but I am confused and have been unable to find an authoritative answer. If one takes straight 2003 server and applies all upadates including Service packs currently available, how (if at all) would that differ from 2003 Server R2 fully patched with the same Service Packs applied? ... 4 5/14/2007 6:59:45 AM Auditing Security Events Hey guys is there a way for a simplified interpretation of security events in windows 2003. -- Message posted via WinServerKB.com http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-security/200705/1 ... 2 5/13/2007 7:27:02 PM Windows Vista Group Policies in a Server 2003 SP1 Domain environment OK, so we run a Windows Server 2003 domain (Thats the functional level) with servers all being at Server 2003 SP1. We are about to begin looking at using Vista in our domain and I'm trying to figure out how to Manage the additional group policies that are now available with Vista. I just finished reading the following article in TechNet (http://technet2.microsoft.com/WindowsVista/en/library... 1 5/11/2007 1:21:24 PM do allowed perrmisions override denyed permissions? If a user on my Windows Server 2003 SBS domain is a member of 2 different security groups that have overlapping permissions, would the allowed permissions of one security group override the denied permissions of the other security group? Or would the denied permissions override the allowed permissions? Though it may not be as cut and dry as that. Does the scope of the security group... 18 5/10/2007 11:06:59 PM Location of SFPCOPY.EXE Utility? This is in regard to the issue I posted here: http://groups.google.com/group/microsoft.public.windows.server.security/browse_thread/thread/5445d002a051a96f/35ed79bc6950f4ec?lnk=st&q=%22windows+media+player+remote+code+execution%22&rnum=2#35ed79bc6950f4ec Microsoft is telling me that a workaround for this issue would be to rename, delete or move the un-patched version of WMP6.4 binary (dxmasf... 2 5/10/2007 3:37:29 PM using policy modules with Enterprise CA Why MS doesn't allow to use your oun policy module? > An enterprise certification authority should use only the Microsoft-provided enterprise policy module. Enterprise CA gives us ability to use different authentication algorithms, but why there are so strong restrictions on policy modules? Can we implement some steps and from Standart CA with my custom policy module get all the features ... 1 5/10/2007 1:34:36 PM Windows service denied access to mapped drive Hi I have a windows service that monitors files on windows and unix servers. Reflections NFS is installed and the UNIX paths are mapped to drives. On my developer machine (XP) the service runs as expected and can see the mapped unix drives. After installing the service on Windows 2003 server SP1, the service can no longer see the mapped drives, the error message returned is: Could not... 5 5/10/2007 2:16:34 AM Tracking changes in ISS Hello everyone. I am new to this site. I'm trying to find out how we can track changes in ISS such as as when the changes were made and who made the changes. Can anyone please help? thanks ... 1 5/9/2007 8:13:22 PM 11 Pages: 1  2  3  4  5  6  7  8  9  10  11