Access to Shares by Right Click on the Start menu

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Certificate Enrollment on behalf of others on a W2003 Standard Server Hello. I want to request a certificate on behalf of others on a W2k3 Standard Server (via the Web Frontend and via the Crypto API in C#). As far as i know the only way to do so is with an enrollment agent. All my tries so far were not successful. Anyone has experience with this topic ? I would be glad about help. Best regards -- Dipl. Inform. Christian Valentin FlexSecure GmbH Darmstadt Tel: 06151 5012318 Fax: 06151 5012319 Web: www.flexsecure.de Tag: Access to Shares by Right Click on the Start menu Tag: 98023
  - 2
    - Windows firewall udp traceroute blocking There is a problem with Windows firewall. If you try to make traceroute from unix box to windows box it fails because it uses UDP protocol (Windows use ICMP protocol). Only solution so far is to disable Windows firewall. If I put rule to allow any to any and protocol any for both inside and outside it fails too. Is there any solution for this problem because disabling Windows firewall is not an option? Tag: Access to Shares by Right Click on the Start menu Tag: 98017
  - 3
    - Windows 2003 SP1 and SP2 Security Event 567 Hi, My understanding of the history of security event ID 567 (Object Access Attempt) is that it was introduced into Windows 2003 and XP, but a bug caused it to not log for remote file changes via a share, it only logs when a file change occurred from local. This was then fixed in SP1 and I can confirm this as I have tested a Windows 2003 R2 Ent SP1 32bit server and it seems to work ok. File changes, via remote and local, cause Event 560, 567 and 562 as expected. However, on a Windows 2003 R2 Ent SP2 32bit server, remote file changes only cause event 560 and 562. No event 567 is generated! A event 567 is only generated when local file changes occur! Both the Windows 2003 SP1 and SP2 have the same policy config, set via GPO, and auditing flags set on all files and directories. Is this a bug that was broken, pre SP1, fixed SP1 and then broke again SP2? Or do I need to do something different? Thanks for any input Regards Tony of MBD Tag: Access to Shares by Right Click on the Start menu Tag: 98014
  - 4
    - win defender + AntiVirus compatibility? can win defender be simultaniously used with another antivirus utility safely without causing errors in either ones running? Tag: Access to Shares by Right Click on the Start menu Tag: 98003
  - 5
    - What accounts/groups in Local Admin group Dear all, For an audit I need to know (for a large number a servers) what accounts/groups are member of the local administrator group. Is there a simple way to create this list (a script for example)? If so, how? Any help would be highly appreciated. O. Tag: Access to Shares by Right Click on the Start menu Tag: 97989
  - 6
    - Install certificate for all users Hello, on our webmail server ( imp ) we generated a certificate. At the moment the user has to donload the certificate and install it manualy. Is there a way to install it as admin for all users ? Thanks Andreas Tag: Access to Shares by Right Click on the Start menu Tag: 97975
  - 7
    - Cut Security Costs - Access Control Financial Access Controls Are your daily business operations protecting you against fraud, theft and unfavorable audits? ExpenseWatch offers online solutions for your business' financial controls. http://a.uuload.com/Access-Control.htm Cut Security Costs - Access Control Why pay more, when you can have quality products for less? At Badge Express, we're committed to passing low prices along to you. Casi- Rusco, Indala, Northern, HID and Many More. http://a.uuload.com/Access-Control.htm Access Control From Hayward Turnstiles Hayward Turnstiles is a manufacturer of fine quality access control turnstiles and equipment. http://a.uuload.com/Access-Control.htm Cellular Based Access Control System CellGate, small and affordable, cellular based remote access control. Open gates, doors, etc. using a regular/cellular phone (no charge for call). Worldwide distributors and partners needed. http://a.uuload.com/Access-Control.htm Web-based Software for Gated Communities GateSure provides access control to gated communities for residents and visitors. Manage incidents, autos, phone numbers and much more. Web-based software allows secure access from any PC. http://a.uuload.com/Access-Control.htm Access Control at SecurityBase.com Electronic, battery operated, weatherproof, digital locks. No software or programming modules needed. Includes scheduling, time clocks and audit trails. Wholesale pricing. http://a.uuload.com/Access-Control.htm Citrix Access Control Management Reduce cost and increase agility. Integrated, secure, robust and resilient. Learn more today. http://a.uuload.com/Access-Control.htm Endpoint Security Software Control the entry and exit of data via USB sticks, iPods, PDAs and other devices with GFI EndPointSecurity. Download for free today. http://a.uuload.com/Access-Control.htm TEMPbadge Visitor Access Control TEMPbadge visitor access control self-expiring badges change color in a day or week to prevent reuse. No need to collect used badges. Compatible with any lobby software. http://a.uuload.com/Access-Control.htm Access Control High end security systems loaded with features for building and parking access control. http://a.uuload.com/Access-Control.htm Web-Based Access Control System - iCast iCast harnesses the power of the Internet to redefine access control, allowing you to securely manage all locations from any computer, anytime. No dedicated computers or software required. http://a.uuload.com/Access-Control.htm Inter-Pacific: Access Control Discount distributor of brand name CCTV/video surveillance, access control, and IP-based products. Excellent support and prices guaranteed. http://a.uuload.com/Access-Control.htm King Architectural Metal: Access Control One of the leading selection of architectural and decorative metals: Hand forged steel or aluminum balusters, newel posts, railing panel, fence, gate decor, hardware, nails, hinges and more. http://a.uuload.com/Access-Control.htm Maglocks.com - Facility Access Control Proximity card access control, powerful software and premium electronic locks. Optional dealer installation. Engineered, cost- effective systems. http://a.uuload.com/Access-Control.htm Data Access Security Tool Comprehensive database auditing. Reduce the risk of data breach. http://a.uuload.com/Access-Control.htm Identity and Access Management Control Library of case studies, Web-casts and white papers - visit RSA today. http://a.uuload.com/Access-Control.htm Home Access Control Systems Single-door access control systems and apartment access control systems. Proximity readers and keypads. http://a.uuload.com/Access-Control.htm Access Control Systems - Free Quotes Free quotes from multiple dealers - compare prices and features. Complete a simple request form and get matched with multiple access control system dealers in your area. http://a.uuload.com/Access-Control.htm Access Control Equipment Shop for access control equipment at Bass Burglar Alarms. We specialize in home theater, access control, fire and burglar alarms, metal detection and other security electronics. http://a.uuload.com/Access-Control.htm Access Control Systems from Cansec Access control systems from Cansec, access control products including Biometrics, proximity readers, ATM access control systems, stand-alone and PC-based access control systems. http://a.uuload.com/Access-Control.htm Tag: Access to Shares by Right Click on the Start menu Tag: 97968
  - 8
    - User Access to exchange mailbox and network drives I have users on a Windows 2003 SBS server all running Vista Business. Once a day they seem to lose access rights to all network drives and there outlook is asking for a password. I don't see any errors in the event logs and I have rebooted the PC's and server and still I get these security warnings on there PC's. I have them logout of there PC's and then log back in and they seem to resume access to the drives and email starts coming into there outlook. Any ideas why they keep losing network access rights to the network shares and there exchange 2003 mailbox? Tag: Access to Shares by Right Click on the Start menu Tag: 97962
  - 9
    - Certificate Purpose Hello, I have a personal email signing certificate from Thawte. The certificate is issued in my name. The certificate is installed in the system. If I look at the certificate from Internet Explorer Options/Content/Certificates, or from MMC, I see two purposes of the certificate: "proves your identity to a remote computer" and "Protects email messages". But if I send an email signed with this certificate, and then look at the certificate already in the email (sent or received - same thing), I see only purpose "Protects email messages". Same in Outlook and in Outlook Express. Why I don't see "proves your identity" purpose in the certificate in email? -- Vadim Rapp Polyscience www.polyscience.com Tag: Access to Shares by Right Click on the Start menu Tag: 97960
  - 10
    - Auditing the deletion of files Hi, I am trying to audit when a user deletes a file on a Windows 2003 server. I have setup the auditing so that it records the Successful and Failed attempts of 'Delete Subfolder and Files' and 'Delete'. According to the Event log it now records the deletion of files but also the deletion of the contents of the file e.g. delete the contents of an Excel spreadsheet cell. This is too much detail and I only want the deletion of files or directories recorded. When I select 'Delete Subfolder and Files' only, it doesn't record any deletions. Is there a solution to this or alternative software that can be used. Any help much appreciated. Garry Tag: Access to Shares by Right Click on the Start menu Tag: 97958
  - 11
    - Digital certs I currently use a digital certificate generated from my domain server to authenticate connections to ISA Server and encrypt traffic between site-to-site VPNs. Now I need an SSL cert to use for a website. Can I generate that from my domain server also? If so, how does this compare to an SSL cert that you purchase from a third party vendor? Thank you, stullhe104 -- stullhe104 Tag: Access to Shares by Right Click on the Start menu Tag: 97957
  - 12
    - the credentials cannot be verified Hello, i have the following problem.. i have an activecliente agent in win xp sp2, in some computers when user tries to log on, he recieve the message "error: the credentials cannot be verified". We made some tests to solve the problem, but we couldn't do it. We need help. Thanks -- YPF-Martin ------------------------------------------------------------------------ YPF-Martin's Profile: http://forums.techarena.in/member.php?userid=51474 View this thread: http://forums.techarena.in/showthread.php?t=985080 http://forums.techarena.in Tag: Access to Shares by Right Click on the Start menu Tag: 97949
  - 13
    - Why am I deleting these files Hello, I was told that the security regulations at my organization require me to delete the following files. I was curious if anyone could tell me why and possible consequences. Thanks for any help. Delete: ir* : c:\winnt\inf c:\winnt\inf\system32\drivers c:\winnt\inf\system32\drivers\dllcache netir* : all directories nscirda*: all directories Posix: all directories os2*.exe: all directories *.ex_ : all directories Tag: Access to Shares by Right Click on the Start menu Tag: 97948
  - 14
    - Unplugged Cable/Media Disconnected I have a Dell laptop. At office I connect to the network through a cable, while at home I connect through the wireless option (Linksys). It's been working fine for over a year. I am now at a new location. The router here is ProNet. I have no problems connecting through wireless, however when I plug in the cable I get a message saying "a network cable is unplugged". I've checked the cables, they are ok. I've even plugged the cable from the laptop to the modem directly but continue to get the same error. I did an :ipconfig /all" and it showed me both the wireless card and the regular NIC. It says "media disconnected" for the regular NIC. Any sugestions on how I could resolve this problem. Thank you. Tag: Access to Shares by Right Click on the Start menu Tag: 97944
  - 15
    - CACLS to remove security Hi, Assuming the security group DARN\MIS exists in a Server 2003 AD domain, why isn't the following working: cacls *.* /e /r /g darn\mis /c /t Tag: Access to Shares by Right Click on the Start menu Tag: 97939
  - 16
    - Dangers of... Installing Vista, Office 2007 and NIS on the same computer. (Well, I reckon that's what it must have been) http://www.theregister.co.uk/2008/06/06/office_rampage/ Tag: Access to Shares by Right Click on the Start menu Tag: 97936
  - 17
    - Email Security Email Security Solutions Secure your company's E-mail and be regulatory compliant. http://a.uuload.com/Email-Security.htm Outlook Spam Software - Only $29.95 Buy Qurb now for Microsoft Outlook & Outlook Express for just $29.95. Download it and instantly stop spam, phishing scams, and email fraud. Award winning email security software. Buy it now. http://a.uuload.com/Email-Security.htm Ensure E-mail Security Now a simple, easy-to-use desktop solution that enables you to encrypt, decrypt, and send private and secure, digitally signed e-mail and attachments to anyone. Zixcorp. http://a.uuload.com/Email-Security.htm Low-Cost E-Mail Security: Free Eval Barracuda Spam Firewall handles up to 25,000 active e-mail users and 25 million e-mail messages per day. A powerful, easy to use and affordable enterprise-class solution. Free evaluation. http://a.uuload.com/Email-Security.htm Business E-Mail Backup Solution Outsourced security for your business e-mail network. Recover e-mails lost to disaster or human error allowing for interruption-free business continuity. http://a.uuload.com/Email-Security.htm Email Security Software Pinion SecureMail gives you continuous and complete control over information that you have distributed via email through its entire lifecycle. Protect and share information with confidence. http://a.uuload.com/Email-Security.htm E-Mail Security Find out what to do if you???ve been a victim of identity theft. Visa provides access to assistance to the consumer support group, Call for Action. Learn more. http://a.uuload.com/Email-Security.htm Secure Your Network from Spam and Virus VeriSign?? Email Security Service blocks spam and viruses before they reach your network. All with no hardware or software to install. Limited time Competitive Upgrade with up to 40% off. http://a.uuload.com/Email-Security.htm Microsoft Small Business Server 2003 Security-enhanced messaging tools by Microsoft. Connect from anywhere. http://a.uuload.com/Email-Security.htm E-mail Security for Business Over 25 users? 10 minute quote. Free off-site e-mail security trial today. http://a.uuload.com/Email-Security.htm RSA BSAFE?? Encryption - E-Mail Security Secure business transactions. Download white papers and data sheets. http://a.uuload.com/Email-Security.htm Stop E-Mail Viruses MSN Hotmail scans and cleans email for free. Sign up and protect yourself. http://a.uuload.com/Email-Security.htm E-Mail Security for Mail Servers Protect your network users from e-mail viruses and attacks with GFI MailSecurity - an e-mail content checking, anti virus and e-mail exploit detection solution for exchange and SMTP servers. http://a.uuload.com/Email-Security.htm Email Security Get a business or personal email address at Dotster.com. http://a.uuload.com/Email-Security.htm Fix Outlook Express Only Mirosoft certified tool that repairs Outlook Express problems. Get your e-mail back. http://a.uuload.com/Email-Security.htm Looking for Email Security Software? Search and compare multiple products and vendors for email security software in our business directory, Business.com. http://a.uuload.com/Email-Security.htm Spam Shield - E-Mail Security Top rated anti-spam software for Outlook and Outlook Express. Instant download. http://a.uuload.com/Email-Security.htm Email Encryption Search our comprehensive B2B directory for Email Encryption Vendors and Suppliers. Find and Compare. http://a.uuload.com/Email-Security.htm Ensure Secure Email with SpotLock Industrial strength security to protect any type of Wi-Fi hotspot. http://a.uuload.com/Email-Security.htm Email Security - Yahoo! Shopping Search, compare, and save. Visit Yahoo! Shopping to compare products and prices from thousands of your favorite stores. Consumer reviews, store ratings and more. http://a.uuload.com/Email-Security.htm Tag: Access to Shares by Right Click on the Start menu Tag: 97934
  - 18
    - jucheck.exe Avast detected "c:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe". This is also a legitimate file, but googling shows a worm also masquerades with that name. How can one tell whether it is the legitimate one or worm? Tag: Access to Shares by Right Click on the Start menu Tag: 97932
  - 19
    - Open Access to Shares Hopefully a quick question, I have just moved to a new organisation, which is having a problem with staff bringing laptops and attaching then to the network. Accessing the file shares directly without joining the domain, the shared permissions are currently set to full control, with NTFS allowing only authenticated users access to the shares. So Jo Blogs comes along with his laptop, plug into the network, copies the network settings from a legitimate client and then logâ??s on with his username & password to the file share. How can I ensure that only domain clients can have access to network shared recources? Many thanks in advance. -- Paul Tag: Access to Shares by Right Click on the Start menu Tag: 97922
  - 20
    - Spyware - blue screen of death problem Hello there , I have a a slight problem in that my Laptop is not even loading and going straight to the blue screen of death . Here's the details : Message from windows saying I'd been infected with spyware. Ran adaware - it found a trojan of some kind butwas unable to delete the file. Would not let me connect to the internet to update adaware files or windows Restarted and it blue screened with the following message. PAGE_FAULT_IN_NONPAGED_AREA ***STOP: 0X0000008E(0XC0000005,0X00000000,0XF818CC9C,0X00000000) Also tried starting in safe mode but same happened Also tried 'last known working configuration' it lasted a few seconds then crashed. Thanks in anticiaption for you time and help. Julia18 Thank you. ----------------------------------------------------------------------------------------------------------------------------------------------------- all about spyware site : http://syubrawi.com/spyware-blockers http://fantastic-galleries.net/spyware Tag: Access to Shares by Right Click on the Start menu Tag: 97916
  - 21
    - Problem with Group policy settings. When I have used GPEDIT.msc to examine Group Policy settings I recieved the following warning :- ' The Group Policy secuity settings that apply to this machine could not be determined. The error returned was trying to retrieve these settings from the local security policy database. (%windir%\security\database\secedit.sdb) was: The parameter is incorrect. All local security dettings will be displayed, but no indication will be given to as to whether or not a given security setting is defined by Group policy. Any local security setting modified through this User Interface may be subsequently be overriden by domain-level policies. ' - Is this a problem that I should be concerned with or is it not a reqirement to have Group Policy settings defined? Tag: Access to Shares by Right Click on the Start menu Tag: 97914
  - 22
    - Incorrect Login Attempts Software Does anyone know any software out there that will record all incorrect login attempts? My business doesn't have the resources available to properly manage the account lock out policy so I need to know if there are suspicious multiple incorrect login attempts? Thanks Tag: Access to Shares by Right Click on the Start menu Tag: 97912
  - 23
    - JUNE 2008 ADVANCE NOTIFICATION WEBSITE DOWN The url http://go.microsoft.com/fwlink/?LinkId=83730 is being redirected to http://www.microsoft.com/technet/security/bulletin/ms08-jun.mspx then http://www.microsoft.com/err/technet/security/bulletin/2008/ms08-jun since at least ~ 17:30 2008-06-04 MST, it may have been down earlier than this. Please fix ASAP, I have tried multiple browsers and ISP's so I doubt it is a client problem! Tag: Access to Shares by Right Click on the Start menu Tag: 97910
  - 24
    - Password-protected email attachments Hi everyone, Does anyone really know what the best practices are in dealing with password-protected attachments received via email? I'm referring to the email content filtering level, not the user level. We've always blocked them and manually reviewed/released. But I'm curious to know what other companies do and/or what the best practices are. Ive tried searching the net to no avail. Do most companies block them? Do they just let them through? Do they get manually reviewed/released? Thanks for any info you may have Tag: Access to Shares by Right Click on the Start menu Tag: 97907
  - 25
    - AVG 8 I've just upgraded to AVG 8[from 7.5] and I'm absolutely amazed at the amount of viruses, threats, warnings that it found. 14 trojans and a truck load of adware. What has 7.5 been doing all this time? Are the threat databases completely reliable. On more than one occasion AVG has'found' a threat that's been on my comp for some time and suddenly decides it's a virus. Tag: Access to Shares by Right Click on the Start menu Tag: 97899
- Next
  - 1
    - Windows Defender - unable to remove items from the 'allowed list' I wonder if anyone can assist. I wish to remove some items from the Windows Defender 'Allowed items' - but it will not allow me to do this under my sign in, or that of admins. Indeed the 'allowed items' list doesn't even show any items that have previously been permitted. I have also tried to effect 'sysem restore', but it would appear that there is no safe restore point. Your assistance would be greatly appreciated. Kind regards. -- Jeff Tag: Access to Shares by Right Click on the Start menu Tag: 97896
  - 2
    - Securing Windows services Is there a way natively with Windows to secure a specific service such that a non-admin user can start/stop it but not any others (or have other admin access on the system)? I thought perhaps you could set an ACL on a service but the Control Panel UI doesn't seem to provide for that. If this is not doable by default, are there any open source or commercial products that provide something like this? Thanks in advance. Tag: Access to Shares by Right Click on the Start menu Tag: 97895
  - 3
    - Server 2008 NPS with wireless 802.1x authentication errors I've setup Server 2008 NPS (which is also functioning as a DC) to authenticate wireless clients through a Cisco 2106 wireless lan controller. The computer certs are auto installed through Group Policy. However, when it attempts to authenticate I recieve the following error: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 6/2/2008 12:24:38 PM Event ID: 6273 Task Category: Network Policy Server Level: Information Keywords: Audit Failure User: N/A Computer: DC1.coaccess.com Description: Network Policy Server denied access to a user. Contact the Network Policy Server administrator for more information. User: Security ID: NULL SID Account Name: 99C4R41.coaccess.com Account Domain: COACCESS Fully Qualified Account Name: COACCESS\99C4R41.coaccess.com Client Machine: Security ID: NULL SID Account Name: - Fully Qualified Account Name: - OS-Version: - Called Station Identifier: 00-1F-CA-82-A1-80:coa Calling Station Identifier: 00-90-96-A3-E4-1F NAS: NAS IPv4 Address: 10.10.230.6 NAS IPv6 Address: - NAS Identifier: COAWLC-2106 NAS Port-Type: Wireless - IEEE 802.11 NAS Port: 1 RADIUS Client: Client Friendly Name: COAWLC Client IP Address: 10.10.230.6 Authentication Details: Proxy Policy Name: Secure Wireless Connections Request Network Policy Name: - Authentication Provider: Windows Authentication Server: DC1.coaccess.com Authentication Type: EAP EAP Type: - Account Session Identifier: - Reason Code: 8 Reason: The specified user account does not exist. I haven't been able to come up with any good reason for the error. I do recall having similar issues in a previous deployment and the solution was to modify the computer name, but that has not worked in this case. Any ideas what is causing this error? Thanks Tag: Access to Shares by Right Click on the Start menu Tag: 97891
  - 4
    - IAS dropping off I am having a funny problem with IAS. Every once in a while the wireless wont work and comes up with the "The user attempted to use an authentication method that is not enabled on the matching remote access policy." User error 66 in the system log. When I go into the Remote Access Policy everything looks ok but everything will only come back if I remove and readd PEAP from EAP Methods under the Authentication tab. What is going on with this? Do I need to enable some other authentication methods(have MSCHAP and MSCHAP v2 enabled)? I appreciate any insight you might be able to give. Tag: Access to Shares by Right Click on the Start menu Tag: 97890
  - 5
    - Need a way to remove a certificate from domain computers Hi, We've installed a local Entreprise Root Certificate Authority in our Windows 2000 Domain last year in preparation for the implementation of the 802.1x protocol. I had to reinstall the DC hosting the Certificate Authority last weekend and I had no backup of the CA, unfortunately. Now, 802.1x isn't working properly on our computers because they have a certificate from the old CA which needs to be deleted before 802.1x can work again. Is there any way I can script the certificate removal so I don't have to remove it manually from each computer? I've seen CAPICOM for vbs and while it's working very nicely, I would have to install the package on every computer in my organization before even thinking of removing the certificate. So is there any other solutions? Also, I know my situation is less than ideal, there should have been a recovery scenario for the CA. Could any one of you suggest me a good way of getting a backup of the CA and how to restore it? Thanks a lot in advance. Mario Lavigne Tag: Access to Shares by Right Click on the Start menu Tag: 97889
  - 6
    - Access to local machine store Hi, I have payment system where my web server receives credit card numbers securely (via HTTPS) from customers. In order to settle the amount that the customer owes I have to make an SSL connection to a payment gateway. That second SSL connection needs to be two-way authenticated (the remote server needs to know my identity). I'm using the following C# code to do that: X509Store store = new X509Store(StoreLocation.LocalMachine); store.Open(OpenFlags.OpenExistingOnly); X509Certificate2Collection validCerts = store.Certificates.Find(X509FindType.FindBySubjectName, "mycertname", true); //ssl is my SslStream object ssl.AuthenticateAsClient("server-cert-name", validCerts, System.Security.Authentication.SslProtocols.Ssl3, true); This seems to work just fine when I test it under my (admin) account. However, it doesn't work when I run the code under IIS. The error I'm getting is "The credentials supplied to the package were not recognized". I guess the reason is that one needs admin rights to access the local machine store where my SSL certificate is stored. I don't want to run IIS under an admin account so the best solution would probably be to allow the "Network Service" account access to the certificate. I have found two ways of doing that: I can use the winhttpcertcfg tool OR I can find the certificate file in the file system and grant read access to "network service". I can't install winhttpcertcfg on the system for regulatory reasons and messing with the (undocumented?) file structure seems like a major hack. In short, what is the best way of allowing my code to authenticate itself as coming from my machine while running under the "network service" account ? Best regards, Niels Tag: Access to Shares by Right Click on the Start menu Tag: 97888
  - 7
    - Limiting an application's directory access... Hello, I teach a C/C++ programming course and students submit their source code to me by email. I currently have an automated program that compiles their files into an executable, checks their files with PC-lint, then does a bunch of style checking on them. I would like to be able to also run the executables but I'm somewhat afraid to lest they inadvertently (or intentionally) do something like system("DEL /S C:\\*.*"). I'm not much of a Windows system type but I understand that there is a way to run an application with limited privileges or maybe to run it as another user with limited privileges. The executables do need to be able to create and delete files but I need to limit this to a specific set of directories rather than the entire computer. I know how to setup multiple users manually but I've always had to simply switch between them from the Start button. Obviously I don't know what I'm talking about here so any information would be appreciated, the more specific the better. Thanks, Ray Mitchell Tag: Access to Shares by Right Click on the Start menu Tag: 97887
  - 8
    - corrupted profiles and much more I have huge issues and I cannot seem to get the right assistance from HP. Maybe this community can assist me. The below is what I posted on HP forums for assistance describing all the issues I am facing. If any one here can assist or advise, I would greatly appreciate. thanks -- regards Joris HP PT corrupted - <ISP> solution - programs blocked business support forums > Mobile products > notebook - HP Compaq, Armada, EVO, LTE, Tablet PC http://forums12.itrc.hp.com/service/forums/bizsupport/questionanswer.do?threadId=1236310 http://forums12.itrc.hp.com/service/forums/bizsupport/questionanswer.do?threadId=1087710 20080530 Dear forum, I'm having a very strange issue with my HP6910p 32-bit running VISTAsp1. It all started after an automatic download/install from WU/MU (1 Windows Defender update and 1 Vista update - KB 915597 and KB 947562). System was running in perfect conditions till before that time after I had completely rebuild the notebook 4 weeks ago (crashed because of employment of VISTAsp1 while running Norton360). Funny enough I had Norton360 only reinstalled 2 days earlier and thought the problem might be again with Norton, howeveer, I think this time Norton is not the one making the mess (but I would not be surprised if it is part of the root cause as Norton settings are so difficult to manipulate and may contradict with Vista's security settings and HP Protect Tools). Anyway, one thing I noticed again after trying to recover (actually break into my PC) and noticed on the event viewer first, was that all my restore points where deleted but one. so I could not go to a point of several days earlier for restoring my PC. I still don't know why this is happening. Again this might be an issue between the different security systems which conflict... Now, after the 2 updates where installed, my computer prompted to be shut down for restart to apply the updates. All ok, it did 2 of the 3 steps when shutting down. Then when restarting (automatic) it first did the final step of the update and then continued to the automated embedded sign-in (I am using single sign-on). While in that process the following message appeared in a window (thought it was a virus, but Norton could not trace anything on my PC). The message: HEADING: <ISP> solution BODY: The installation is corrupt. Repair by running setup. OK I hit OK as the only choice and windows continues to open as apparently normal. After a couple of start-up programs initiated, the message appears again, then the following message: HEADING: WINDOWS DEFENDER BODY: application failed to initialize error code: 0X80010005 Then I notice that all further start-up programs fail to start and computer becomes unaccessible: no program or process can be started, not even as simple as the Task Manager or Windows Explorer. I can't access anything, can't even shut down but the hard way. I try to restart but same issue. I did a restore to before the 2 updates (the only one available), but still the same issues. Then I tried in safe mode but also there seemed to be a lot corrupted or not working as one would expect, including the MMC tools. Then I manage to sign into my alternative administrator profile - actually breaking in (unbelievable with all these security tools that that is possible). Result: Vista lets me in but creates under the administrator profile a temporary profile (deletes all settings when exited). Though the same <ISP> error occures, the system starts further normal. I run Norton scan, I can access all programs, I access Windows Defender and notice that all is active and run also a scan from here. Nothing bad reported after the scans. I check the event viewer and notice that some errors occured but not critical - no mention about the ISP solution message. I notice in the eventviewer that shadow copy service did not function, but that still doesn't explain why it erases all my restore points!!! I also notice that for the time from installing the update to restart there is no event logging or I am at least sure things are missing here. Events where logged from the applications that did not start properly and then I noticed security auditing issues in the logging. So I tried to access HP Protect Tools and then I noticed that each of the different modules where all corrupted. It let me pass through telling me that each of the DLL files have not been approved by HP - VERY STRANGE indeed!!!! for each error message it says that installation is corrupt and repair can be done by running setup (almost simular as the <ISP> solution error message, but at least some more detail of what was going on. So is the <ISP>solution error message part of the HP Protect Tools (no clue, but very strange for HP to show an error message like that). After I run through all these error messages, the system opens an EVALUATION copy of HP PT. When surfing around I notice that all settings are there - nothing abnormal, but I can't change anything as it will say with the wizards that the installation is corrupt. I am now downloading SP37721 (I believe that is the most recent version) which I will reinstall. I'm not even sure whether this will install as a repair or whether I have to uninstall first. In the latter case will I loose all my settings and certifications? Again HP is letting me in the dark here. By the way in my temporary profile settings I cannot properly access the HP support tools, I even had a blue screen crash by enforcing it after it was running in circles but no diagnostics were run. This may have to do with the IE settings, the firewall settings and HP PT and all the conflicts this creates. Is there anyone or maybe HP technicians who can shoot in here and tell me what is going on. Was this caused by the Microsft Vista and Windows Defender updates, and why????? Thanks everyone to shed me some light in this darkness. regards Joris Claeys 20080531 HI, I need URGENT help on this. Whatever I try, nothing gets resolved. Re-installed the HP PT suite (2 programs of which the Credential Manager did not install properly, all the rest ok). Restarted the PC, but still the same problems. It seems that the profiles (administrator profiles) are all corrupt. HP PT still opens up only as an evaluation version with all the error messages as before. I went through all the possible administrative tools to see whether anything at my level of understanding goes wrong. The only thing I could notice is that in the Event Viewer a lot of security errors/warnings about - I think - the root registration files have been reported for the last several weeks (so not just since the 2 last updates from WU/MU: MS AUDIT FAILURE (example): Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error. And then there are the new errors/warnings, like: - DistributedCOM: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID - LSaSrv: The Security System has received an authentication request that could not be decoded. The request has failed. - SCM: The Windows Update service hung on starting. - And this error is already appearing for a month (when reinstalled the whole system) and also seem to have a relation with HP and HP PT (service: HP PT Device Locking/Auditing ). I could not resolve this problem or occurance (not on MS and not on HP - no resolutions): FlcdLock service: An error occurred getting the local computer access settings. Another one which I have not been able to trace: LMS: LMS Service cannot connect to HECI driver Last night I tried to get into my normally used profile (also administrator role) but same issues still exists there - NOTHING WORKS> I managed to see in very slow mode some activities on the Task Manager and noticed the following: - no user assigned to the processes (all says UNKNOWN user) so definitely the profile is corrupted (who, what and what to do????) - Checking the <ISP> solution error message on the task manager it is clearly related to HP PT as it relates to the process: PSDruntime Application (PSDrt.exe). funny enough all other HP PT processes and services seem to be running normal in the Task Manager. Then I did a search on "Ã?SP" and got: - 4 reg.isp files (related to MS windows licensing in \WINSXS) - ISPmres.dll (related to HP Update service in \swsetup) isPWDxxx.sys/dll/sig/grd/spn files - 1 reg.ISP being an ISP file (??) related also to Windows registration/licensing) - several ISProBExxx files being TLB-files (???) Anyway, I notice failures and errors/warnings everywhere and only gets worse. I cannot connect to the HP on-line diagnostic system and my system crashes when I try to go to on-line support.... I need help from the forum. THANKS so much Joris Tag: Access to Shares by Right Click on the Start menu Tag: 97881
  - 9
    - Shared folders within same PC XP Home with SP2. I have 3 admin users on my PC. When I instal a new product using one windows user, the other users can't access it. Can you tell me how to configure my PC so any product installed is accessible by all local windows users. This happened when I installed a BT Voyager 105 ADSL modem - only the installing user could use the modem software! Tag: Access to Shares by Right Click on the Start menu Tag: 97878
  - 10
    - WinAntivirusPro Hi I was wondering if there was any information on how to get rid of this Malware. It won't allow me to turn on the automatic updates so I can't load any programs for trying to get rid of this from the microsoft site. Is there anything I can do to get rid of this malware in my system. Tag: Access to Shares by Right Click on the Start menu Tag: 97877
  - 11
    - File auditing for MOVED files. We have a Windows 2003 domain controller and have enabled auditing on our public shares to track when (and who) has deleted any files. It works great and logs it accordingly on the DC security events. The problem is that if someone were to just MOVE the files (because they have the applicable persmissions) it does not log anything. This seems like a giant loophole to me and I am assuming I am missing something. Is there any way I can use security/file auditing to track when someone has moved a file? I do not see that as one of the listed options from the security/advanced/auditing tab. Any help or suggestions welcome... thank you in advance. Tag: Access to Shares by Right Click on the Start menu Tag: 97876
  - 12
    - HELP! What's going on here? A few days ago I started getting strange entries in the security log on my Primary Domain Controller. The entries are Event ID 674, which is Service Ticket Renewal. That in itself is not strange, what is strange is that they are recurring every 9hrs 50mins, for every machine and any User account in my Active Directory that has authenticated with this server. Another strange aspect is the fact that in the event description, while the user name is the particular Machine or User, the client address is 127.0.0.1 not the actual ip address of that machine or whatever machine the user would be logged into. I restarted the server and they went away, until machines and users logged on again the next morning, then they started showing up again 9hrs 50mins later. I understand the concept of the service ticket renewal, but why the proper username but 127.0.0.1 client address? Is this a sign of my server being compromised?! Addiditonal info: server is 2k3 sp2, fully patched workstaions are logged off and shut down at the close of business. Thanks in advance for any help you can give!! Tag: Access to Shares by Right Click on the Start menu Tag: 97875
  - 13
    - Windows 2003 NIC Firewall Settings - How to add port ranges I have a question regarding the Windows 2003 firewall settings. When I click on the Exceptions tab, I see a list of some of the services. When I click on File and Print Sharing and select Edit, I get a list of tcp & udp ports for this service. How can I create a new service item and add multiple ports under that item (just like File & Print Sharing)? Right now I click Add Port, give it a name and specify the port number. When I have to allow a port range, or multiple ports that aren't in the same range, I create a new port entry. Thanks in advance for any help given. Tag: Access to Shares by Right Click on the Start menu Tag: 97872
  - 14
    - Task manager is disabled When I try to access the task manager, a dialog box will pop up and tell me that the task manager has been disabled by the system administrator. Since I own my computer, I'm guessing that sys admin is me! The task manager has worked in the past, just recently (within the last two weeks) has it started occuring. I have tried the msconfig/startup route to attempt to rectify the problem, but no dice, problem persists. Help, Bob Shy Tag: Access to Shares by Right Click on the Start menu Tag: 97865
  - 15
    - GPO blocks proxy settings off network Good Morning. Very strange thing is occurring with my laptop users. Some of them are stating that when they go off the network at night, their proxy settings are still greyed out from the GPO on the domain, yet some users are not having this issue. I need to fix it for all of them, and need to remove the ability for them to change it while on the network, but once off, they need the option to be able to change it. We are running .pac files to control internet access from a webserver in the domain. But this webserver is not accessible from the outside. Thoughts? TIA. Mike Tag: Access to Shares by Right Click on the Start menu Tag: 97858
  - 16
    - MS CA 2003 ENT SubjectTemplate Hi all, I am looking for a way to use a field uid in certificate's subject name. Referring to http://technet2.microsoft.com/windowsserver/en/library/526b1a33-1088-4432-9a86-edcd732e38a11033.mspx?mfr=true it is possible to have some kind of filter in CA. If I am just doing a certutil -setreg ca\SubjectTemplate +UID the certsvc service will not start any more. Does anyone know if it is possible (maybe not support by MS) to allow UID? Regards, Lutz Tag: Access to Shares by Right Click on the Start menu Tag: 97857
  - 17
    - Give a user rights to change other user's password I need to build a user that is enabled to change other users password for use of a custom applicazion we are writing. Obviously, i would like these user the have very little privileges besides the required one. We have a Windows Server 2003 Active Directory enviroment. Any suggestions? thx Tag: Access to Shares by Right Click on the Start menu Tag: 97856
  - 18
    - WM5 and 802.1X Hello, I have a private CA used for WLAN authentication. My network has the following: a.. There is an existing Wireless infrastructure with several access points. a.. A Windows PKI infrastructure is already in place. a.. The certificate Authority does not use standard templates. a.. XP Notebooks are already running on WEP, EAP-TLS for authentication to the Wireless network. a.. They enroll the certificates through Windows group policy. a.. Microsoft's IAS is used for the Radius authentication, and is connected to the AD with the user accounts. Along with our Windows XP and 2000 systems we have several Windows Mobile 5 barcode scanners. I'd like to get these devices using the 802.1x WLAN security. I understand that I will have to manually install the certificate using a third party installer. What are some examples of good third party installers for this step? I would like AD to use a machine or computer certificate to authenticate a barcode scanner. Is this possible? If I must use personal certificates and authenticate to AD via the RADIUS server what is the best way to setup the user accounts? Several users will be using the barcode scanners and I do not want to assign scanners to users...they will just grab one from a pool that is available. I do want to be able to track connections and network changes back to a particular device/user. What is a good way to accomplish this? If anyone has any documentation or web links that could help with any of these questions it would be a huge help. Thanks in advance! Randy Tag: Access to Shares by Right Click on the Start menu Tag: 97847
  - 19
    - Certificate Services - Web Enrollment Error Hi all, I have a problem configuring my lab with this scenario: - Domain A - Domain AA as child of Domain A - Domain AB as child of Domain A - The users are in the domain AB - The computer, service accout, CA are in the domain AA - The CA is an Enterprise CA - The Web Enrollment server is not installed on the same CA server (web enrollment server is in the domain AA) - The Web Enrollment server is configured to use "Windows Integrated Authentication" I followed all the steps described in this link http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx (configuring the web enrollment proxy for delegation). The users are the priviliges to read/enroll/autoenroll the certificate template. When I try to (auto)enroll a certificate using certsrv page from the Web Enrollment server I have this error: The RPC Server is unavailable. 0x800706ba Any kind of help will be greatly appreciated. Thanks. Sektor Tag: Access to Shares by Right Click on the Start menu Tag: 97843
  - 20
    - Error with Microsoft ForeFront Client Security Hi, I have this error when I try to deploy policy on Microsoft ForeFront Client Security: Microsoft Forefront Client Security: ========================= The policy cannont be deployed. Futher details: Unable to create new group policy object. The specified domain either does not exist or could not be contacted. (Exeption from HRESULT: 0x8007054B) Could you help me? Tag: Access to Shares by Right Click on the Start menu Tag: 97842
  - 21
    - Please help us with a fraud situation Please help us with a fraud situation We had some identity thefts situations with our credit cards and Bank accounts. People using our credit cards and writing checks against our account. How can I set up a really secure internet connection in my home ? I use a Windows XP - wireless laptop to access the internet I have in my home. We use Comcast cable. We have a WPA secure internet. We use a Netgear Rangemax MIMO and the Comcast modem. Somehow some people have managed to get both our credit card numbers and bank account numbers and even driving license number. I use this internet to access all our bank accounts etc. Because of the fraud that occurred, we want to make sure that we have a really secure internet connection. What additional hardware, software etc do I need, if any ? Since I am not a techie, pls help me with as much detail as possible. Thanks in advance for your help, Irfan Smith Tag: Access to Shares by Right Click on the Start menu Tag: 97840
  - 22
    - h4150 ipaq wireless card to a netgear router I'm unable to connect using the ipaq wireless card to a netgear router running wpa-psk encrytion. If I take encrytion off the ipaq and the router and can connect wireless to the internet. Any Help would be appreciated. Tag: Access to Shares by Right Click on the Start menu Tag: 97839
  - 23
    - trojan horse I hope you can help. My laptop has been operating slowly recently, freezing ofgten. Even though my virus protection is up to date, I ran an on-line scan from another virus protection company. Their scan showed I had a trojan horse is the file "vgraph.dll". Is this a necessary file? Can I just delete it? I don't know if this is responsible for the problems but when its acting up, and I open up task manager, the CPU usage is almost 100% with the highest amount in "iexplore.exe". Any help would be appreciated, thanks! Tag: Access to Shares by Right Click on the Start menu Tag: 97835
  - 24
    - Moving newly issued Certificate Hello: I am testing certificates download from a standalone CA Win2k3 server. When the certificate is downloaded and installed on the local client machine (when the certificate was requested, did submit the request for storing the certificate under Computer Account/store), it installs the Trusted Root certificate by default at Certificates (Local Computer)-->Intermediate Certificate Authority-->Certificates since the certificates are issued by a subordinate CA. I will have to manually move the Trusted Root Certificate over to Certificates (Local Computer)-->Trusted Root Certification Authority-->Certificates bin to restore the certificate chain (Root-->Intermediate CA-->the local machine). I am wondering whether I can automate this using one of the command line utitilities? If so, please let me know. Thanks. Regards, Victor Tag: Access to Shares by Right Click on the Start menu Tag: 97834
  - 25
    - "Microsoft Update" offers 898461 for XP SP3 Hi @ll, "Microsoft Update" just offered the update 898461 for my (german) XP SP3 system. According to MSKB 946480 this update has been included in SP3; but apparently this is wrong! Unfortunately this patch REALLY gets installed and writes OUTDATED files to my system: | C:\>dir %windir%\System32\Preinstall\WinSE\wxp_x86_0407_v1 | Datenträger in Laufwerk C: ist WINDOWS | Volumeseriennummer: 2C36-0AF4 | | Verzeichnis von C:\WINDOWS\System32\Preinstall\WinSE\wxp_x86_0407_v1 | | 27.05.2008 20:38 <DIR> . | 27.05.2008 20:38 <DIR> .. | 25.02.2005 05:34 15.584 spmsg.dll.ref | 25.02.2005 05:34 213.216 spuninst.exe.ref | 25.02.2005 05:34 22.752 spupdsvc.exe.ref | 25.02.2005 05:34 22.240 spcustom.dll.ref | 25.02.2005 05:34 727.776 update.exe.ref | 25.02.2005 05:34 378.080 updspapi.dll.ref | 6 Datei(en) 1.379.648 Bytes | 2 Verzeichnis(se), 10.514.202.624 Bytes frei | | C:\>filever %windir%\System32\Preinstall\WinSE\wxp_x86_0407_v1 | c:\windows\system32\preinstall\winse\wxp_x86_0407_v1\*.* | ----- W32i DLL DEU 6.1.22.4 shp 15,584 02-25-2005 spmsg.dll.ref | ----- W32i APP DEU 6.1.22.4 shp 213,216 02-25-2005 spuninst.exe.ref | ----- W32i APP ENU 6.1.22.4 shp 22,752 02-25-2005 spupdsvc.exe.ref | ----- W32i APP ENU 6.1.22.4 shp 22,240 02-25-2005 spcustom.dll.ref | ----- W32i APP DEU 6.1.22.4 shp 727,776 02-25-2005 update.exe.ref | ----- W32i DLL DEU 6.1.22.4 shp 378,080 02-25-2005 updspapi.dll.ref The current version of all these files, as delivered with XP SP3 for example, are but 6.3.13.0, their timestamps are 2007-08-10 20:4[45]! WHEN WILL MICROSOFT START TO LIVE TRUSTWORTHY COMPUTING? not amused Stefan Kanthak Tag: Access to Shares by Right Click on the Start menu Tag: 97833

How do I control the Right click on the Start menu.
I need to disable some link in the menu.
I have a "User" profile, Whoâ??s profile have to be protected/safe, a right
click on the "Start" menu gives the user access to areas, I don't want for
this profile.

I say Thanks, if anyone can help.
Mitza

Top

Re: Access to Shares by Right Click on the Start menu by Daniel

Daniel
Thu Jun 19 05:26:25 CDT 2008

You can always simply disable the context menu in Windows Explorer. That
should deal with the UI part. However, in order to really prevent someone
from doing stuff that you don't want them to do, you need to carefully plan
and implement security settings.

--
Sincerely,

Daniel Petri
MVP, Senior IT consultant, trainer
www.petri.co.il

"Mitza" <Mitza@discussions.microsoft.com> wrote in message
news:FCFF3EF3-80C6-4AA7-8F59-5A819B1FA3EA@microsoft.com...
> How do I control the Right click on the Start menu.
> I need to disable some link in the menu.
> I have a "User" profile, Whoâ??s profile have to be protected/safe, a right
> click on the "Start" menu gives the user access to areas, I don't want for
> this profile.
>
> I say Thanks, if anyone can help.
> Mitza
>

Top

Re: Access to Shares by Right Click on the Start menu by Mitza

Mitza
Fri Jun 20 06:06:00 CDT 2008

Yes, thanks Daniel Petri.

But I have hoped for some possibility in the â??regeditâ?? settings.

I have disabled the KontrolPanel, editing of the desktop and some other
things that way, but the right click on the â??Start button is the last thing I
need to disable.

But I think I also have to do it you way, because the â??SaveASâ?? and â??Openâ??
menu gives the user some back-doors to the file system.

Sincerely,
Mitza

Top

Re: Access to Shares by Right Click on the Start menu by bob78044

bob78044
Mon Jun 23 06:35:00 CDT 2008

You didn't mention what OS you are working with. You must be careful of what
you do. In XP, you can take a look at gpedit.msc. This can be started
clicking on start and select run. Type gpedit.msc in there. I don't
remember if this was available in Windows 2000. In XP, a new window will
open up. Look in the User configration section as shown below.

User Configuration
Administrative Templates
start menu and taskbar.

Hope this helps.
"Mitza" wrote:

> Yes, thanks Daniel Petri.
>
> But I have hoped for some possibility in the â??regeditâ?? settings.
>
> I have disabled the KontrolPanel, editing of the desktop and some other
> things that way, but the right click on the â??Start button is the last thing I
> need to disable.
>
> But I think I also have to do it you way, because the â??SaveASâ?? and â??Openâ??
> menu gives the user some back-doors to the file system.
>
> Sincerely,
> Mitza

Top