Can't use cached credentials on non-domain member workstations

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - changing Administrator password I'm running an NT4 based domain. I'd like to change the built-in Administrator account password. My boss tried changing it before I worked here, and he says everything stopped working and he had to call a guy to come change it back. That was kind of vague to me, but I know at least Exchange stopped working, as well as a Visual Foxpro based database application that users access via a file share. I know I need to take appropriate steps for changing the Service Account in Exchange, and I'll deal with BackupExec as well. I did a query on the services on both servers, and it appears that everything else is using the LocalSystem account. Is there anything else I should check for, to be certain that there are no more dependencies on the Administrator account? Thanks, Dave Tag: Can't use cached credentials on non-domain member workstations Tag: 68958
  - 2
    - Desktop Icon I had removed the security setting from my pc ans ened up with a chat icon with a user name. I didn't install anything but got it??????? Tag: Can't use cached credentials on non-domain member workstations Tag: 68954
  - 3
    - OpenSSH on Windows Server 2003 Hi, all. I'm not sure if this is the right forum for this topic, but I'm having a problem with an OpenSSH for Windows 3.8.1p1-1 installation on Windows Server 2003. I installed the software a couple of times before in various environments. I had some diffficulties while trying to install it in high security environments (that suffered some hardening procedures), but in time learned how to set it up correctly. All of those platforms were Windows 2000 Server. Now I'm trying to make it run on 2k3. I'm pretty sure that I've set all NTFS permissions correctly, meaning RW allowed on working folders and RX allowed on programme folders for specifically allowed SSH users (at least those proved to be sufficient). But when trying to connect to that SFTP server using some known SFTP clients (like FileZilla or PSFTP), it doesn't let me get there. I've enabled DEBUG logging level and can clearly see in Application Log that it recognizes the user and authenticates it (at least to itself, meaning it confirmes the password), but suddenly says that the login attempt failed. I'm very much puzzled. I had similar problems on 2k and solved them by editing Local Security Policy where I added those SSH users to "Access this computer from the network" and "Allow log on locally". So I've added the same policy entries to this server, but with no improvements. Anyone? Many thanks in advance. Bye. Tag: Can't use cached credentials on non-domain member workstations Tag: 68953
  - 4
    - 24-7-search.com browser hijacker I have tried most varieties of trying to remidy this on one of my stand alone PC's to no avail. even restoring to another point has failed. (adnoware used, hijackthis used norton used, even regedit). So I am obviously missing some deep dark whole that it has attached itself. Any help grateful. -- Dave Tag: Can't use cached credentials on non-domain member workstations Tag: 68952
  - 5
    - Passwords When I log onto a site and have to enter a user name and password, as soon as I start the first letter of the user name the full user name pops up along with the password already there. I must have asked windows to remember my user name and password. I really don't remember. This is a personal account and I would like to be able to change the "remember user name and password" so that anyone that might go to the site on my computer won't be able to just click and be signed on. My question is "How do I delete or remove the user name and password from being remembered by windows and make me manually sign in?" Thank you. Tag: Can't use cached credentials on non-domain member workstations Tag: 68945
  - 6
    - updates Using Windows XP Home, SP2 Getting message updates are available for download. How do I know if they are "critical updates" or just updates that are available. How do I know if they are needed if they are not "critical"? Thanks in advance. Tag: Can't use cached credentials on non-domain member workstations Tag: 68937
  - 7
    - Interesting Spyware report from US FTC Here is an interesting report from the US Federal Trade Commission (www.ftc.gov) on Spyware http://www.ftc.gov/os/2005/03/050307spywarerpt.pdf I thought this quote was an eye opener! "According to this panelist, there are 800 million computers in use worldwide, of which 50% do not have even basic protections against virus attacks, despite years of consumer education about viruses. However, the other 50% - or 400 million computer users - have installed anti-virus protection, and industry can build on that base in addressing spyware. Consumer education may be particularly useful with teens, because it is often the teens in a household who are engaging in the online activities that lead to installation of spyware." BB Tag: Can't use cached credentials on non-domain member workstations Tag: 68929
  - 8
    - Download updates for Windows before adding to network? How can I download all the updates for a particular type of Windows? I want to download them on a safe pc and apply them via sneakernet BEFORE I put another pc on the network. Right now, I am interested in Windows Server 2003 Std & XPP. Thanks Tag: Can't use cached credentials on non-domain member workstations Tag: 68925
  - 9
    - MSN How to blok MSN which ports I need to block Tag: Can't use cached credentials on non-domain member workstations Tag: 68921
  - 10
    - Norton AntiVirus 2005 Program Update (English)/583.3 KB RE: Norton AntiVirus 2005 Program Update (English)/583.3 KB Is this NECESSARY to install from the AV 2005 package? What IS it...and what does it actually do? Thanks - Infnet Tag: Can't use cached credentials on non-domain member workstations Tag: 68918
  - 11
    - Security Center Will Not Find My CA Antivirus Windows XP Security Center will not find my CA antivirus software. At first it was working just fine, said "on" for all three settings, now, within the past few days it's saying not found. Anyone know any issues going on with this?? Any fixes? Tag: Can't use cached credentials on non-domain member workstations Tag: 68911
  - 12
    - MS04-028 /MS05-FEBScan Hi, I'm using SMS 2003 and was wondering if these 2 new tools replaces the former Update Scan Tool or are they all used together so that you actually needs 3 tools to distribute security updates with SMS. Dennis Tag: Can't use cached credentials on non-domain member workstations Tag: 68910
  - 13
    - Best freeware available? My computer is not working properly and is running extremely slow and does not access the internet using the quick keys. I have to access them from my favorites! I'm in need of some desperate help....... Not only that,when I try to install Winfax pro the computer won't download it all the way and is stuck somewhere in the middle. I try to uninstall it but it's not listed,and when I try to reload it, the prompt says there is a previous version already installed. I've spent all day trying to fix this thing! ( please HELP ) Thank you, Rick Tag: Can't use cached credentials on non-domain member workstations Tag: 68878
  - 14
    - Is it safe to open a text file in Internet Explorer? My question is in the title. -- Jim Carlock Please post replies to newsgroup. Tag: Can't use cached credentials on non-domain member workstations Tag: 68875
  - 15
    - Spyware Blaster 3.3 Spyware Blaster 3.3 has been issued and is now available for download at: http://www.javacoolsoftware.com/sbupdate.html Tom Tag: Can't use cached credentials on non-domain member workstations Tag: 68873
  - 16
    - Patch deployment files issue When you install Microsoft patches the files that are created are stored under a directory. I assume it is this is to allow the patches to be uninstalled. My question is: Is there a way of removing these files without jeopardizing the system? We currently have space issues (C drive) on some servers and the more patches that are issued will cause more problems. Thanks very much. Tag: Can't use cached credentials on non-domain member workstations Tag: 68832
  - 17
    - is the _vti_pvt folder safe? i just found that this site http://www.broken-ice.com/hack_site/lessons/ has a link to a webpage on my site ( http://mysite/_vti_pvt/ ) (go to the bottom of first webpage and you will see a list of website addresses all ending with with _vti_pvt/ and my site is one of them. the problem is i don't understand why it is there (the site is in arabic !). i am guessing from the website adress that it has something to do with hacking (and i also figured out it has soemthing to do with frontpage) actually, the page in question belongs to my team mate. and the server is running on my computer. i am running Apache/2.0.52 (Win32) Server on win xp pro sp2 according to the control panel, i have both Microsoft Professional Edition 2003 as well as Microsoft XP Professional with FrontPage installed (i just found that out !) i have been using office 2003 though for the last one year. and i had just assumed that office 2003 installed OVER the previous install of office XP. is my system vulnerable becuase of this page ? if so, what should i do to protect it? if this is not the right newsgroup, pls let me know where i should go with this question. appreciate any help... thank you, julian. Tag: Can't use cached credentials on non-domain member workstations Tag: 68825
  - 18
    - IPMSG.EXE Some of the users on our compnay network have been found to be using IP based network messeging program ipmsg.exe downloaded from some site.I have couple of queries: 1. Is it unsafe to permit such prorams to be there on network? 2. what are the issues? 3. Can this be stopped , say , by disabling Windows Messenger Service on individaul computers. 4.How to disable it from firewall? Regards Sanjeev Tag: Can't use cached credentials on non-domain member workstations Tag: 68822
  - 19
    - problems with hotmail I sent a mail to a contact, but when the succesful delivery message appeared, the adress of my contact had been changed to "******@hotmail.cc" instead of "******@hotmail.com". That person never received the mail and I never received a delivery notification failure message. Where did that mail go? Why did it change if i had wroten ".com"? May I have any virus? Tag: Can't use cached credentials on non-domain member workstations Tag: 68820
  - 20
    - Dream Pack? Need to get into PC w/PW from fired employee I'm trying to help a former client of mine who is somewhat elderly but still runs a small public accounting firm. He has fired his longtime trusted assistant after, you guessed it, she embezzled funds. She knew much more about computers than him and she was the network (small network) administrator. I think he has most problems under control but she placed a PW on her PC and it has important company files on it (in addition to evidence). I've heard of something called "Dream Pack" that is open source and cheap, and which will allow him to get into the PC and just change the password to whatever he wants and gain access to it. I do not have time to travel to his little office but I really want to help this old guy. He is like a grandfather type guy and I just want to point him in the direction of something that will open that computer and perhaps I can walk him through the steps over the phone. Has anybody heard of this software and can anybody give me any leads on this? I'm an Excel/Access/Word programmer but I don't know operating system or security stuff. Thanks for any help. -- RMC,CPA Tag: Can't use cached credentials on non-domain member workstations Tag: 68804
  - 21
    - Permission Problem/RPC function failure I am having a permission problem with my Windows Server 2003 System. I am attempting to access a HP StorageWorks optical 220mx via QStar software. Qstar has troubleshot the issue to a permission problem. *Please note that I also have problems accessing folders/files on a fat partition of my drive as well and I believe this may be directly related to this same permissions problem. The following is an email explaining their (QStar) findings: Yahoo! Mail - wcdep@yahoo.com Print - Close Window From:"Corey Mayer" <cmayer@qstar.com> To:"'rae frainco'" <wcdep@yahoo.com>, kworkman@qstar.com Subject:RE: White County Sheriff Office Date:Thu, 3 Mar 2005 08:37:25 -0600 Hi Ray, Here is more detail of what is happening. When a user accesses any remote SMB server, Explorer opens srvcvs on share IPC$ and communicates thru srvcvs with NetShareEnum (which is Windows RPC function). If this fails (i.e. remote SMB server replies â??not supportedâ??) Explorer will then call SMB_TRANSACT with function LM_SHARE_ENUM_API, which is a regular request in SMB documentation. The NetShareEnum is Windows specific RPC call and Microsoft has never documented this function, therefore we cannot use this function. So, Explorer will first attempt to use Microsoft RPC function and then if this fails it will use standard SMB function. For your 2 users when they try to connect to QStar the regular Microsoft RPC function fails with â??not supportedâ?? and instead of calling SMB function the user attempts 10 times before giving up on Microsoft RPC function and using SMB function instead. From the debug logs we could see the user that has no issues did not attempt as many times. I am investigating this issue and trying to find a configuration parameter within Windows that will stop the users from attempting 10 times before giving up. If it is as you say "not a QStar issue", than please explain to me why these two personnel never previously had problems accessing the folder/files before it was copied to the jukebox and governed by the QStar system? I am making the assumption that prior to QStar you were using a share on a Windows machine. If so, then the reason is because a Windows server can accept the NetShareEnum connection. Hope this helps explain the situation we are seeing. Thanks Corey ------------------------------------ QStar Technologies, Inc. Corey Mayer Technical Support Engineer cmayer@qstar.com 99 Eglin Pkwy #37 Ft. Walton Beach, FL 32548 tel: 850-243-0900 ext. 209 fax: 850-243-4234 www.qstar.com ------------------------------------ From: rae frainco [mailto:wcdep@yahoo.com] Sent: Thursday, March 03, 2005 7:19 AM To: Corey Mayer; kworkman@qstar.com Subject: RE: White County Sheriff Office If it is as you say "not a QStar issue", than please explain to me why these two personnel never previously had problems accessing the folder/files before it was copied to the jukebox and governed by the QStar system? Corey Mayer <cmayer@qstar.com> wrote: Ray, I just wanted to give you an update. I have discussed the issue in more detail with my development team; they have concluded that this is not a QStar issue but Windows. I will do some investigation to see if we can find some configuration parameters within Windows to solve the issue with the 2 users. Thanks Corey ------------------------------------ QStar Technologies, Inc. Corey Mayer Technical Support Engineer cmayer@qstar.com 99 Eglin Pkwy #37 Ft. Walton Beach, FL 32548 tel: 850-243-0900 ext. 209 fax: 850-243-4234 www.qstar.com ------------------------------------ From: rae frainco [mailto:wcdep@yahoo.com] Sent: Tuesday, March 01, 2005 3:02 PM To: Corey Mayer Subject: RE: White County Sheriff Office And the fix is... Corey Mayer <cmayer@qstar.com> wrote: Ray, Looks like we found what the problem is. Authentication server responds up to 3 seconds. There are 2 types of SMB requests which can be sent to a SMB server from a SMB client b_ a regular and enhanced. Microsoft SMB server supports both, however QStar supports just the regular request. The reason why QStar only supports the regular request is because the enhanced request uses undocumented Microsoft RPC calls. So what happens is the client first sends enhanced request, QStar responds b_ not supported, then client sends regular request, QStar serves the request. Looking at the logs we found that one client performs this procedure just once, but the other client repeats it 10 times before using regular request and each time it also has to get authentication from the server. The behavior depends on client only. My development team feels that there must be some configuration for client communication properties, probably on the server. Also, my development team felt that 3 second response time from the authentication server was a bit slow the normal speed should be 0.5 seconds. Tag: Can't use cached credentials on non-domain member workstations Tag: 68801
  - 22
    - Active Directory Does anyone know how to automatically join a predetermined OU in the active directory when you join a domain? Thank in advance. Mike Tag: Can't use cached credentials on non-domain member workstations Tag: 68799
  - 23
    - CLSID_CCertView Hi all, I am using CoCreateInstance(CLSID_CCertView,...) I get the error "Undeclared identifier. --- CLSID_CCertView." I am using all the libs and dlls and headers.. eg . Certidl.lib, certadm.dll, Certsrv.h. Somebody please enlighten me... Is this a version conflict... I am using visual studio 6 on windows server 2003. i registered certadm.dll thanks in advance chan Tag: Can't use cached credentials on non-domain member workstations Tag: 68792
  - 24
    - Security Audit Does anyone know if the Security Audit Log logs and entry when a user or user group is added to the Security Setting or a Network Share? Tag: Can't use cached credentials on non-domain member workstations Tag: 68781
  - 25
    - Security Audit Does anyone know if the Security Audit Log logs an audit when a user or user group was added to the security setting of a Share or Hard Drive? Tag: Can't use cached credentials on non-domain member workstations Tag: 68779
- Next
  - 1
    - Spyware Beta 1 Has anyone else encountered the problem of thier system rebooting or hanging from standbye mode after installing and running the Spyware Beta? Thanks Elaine Beaurauxgart-Weiderhoff Tag: Can't use cached credentials on non-domain member workstations Tag: 68777
  - 2
    - Monitoring Servers Hey guys, I have a network with about 14 windows 2003 servers, Exchange 2003, and we also host our two website in house. We have a PIX firewall and an IDS System on the outside of the PIX. But I really need a good solution for securing and monitoring our servers and network. right now I really have no way of telling if someone has gotten in to our network. I've looked around a lot and havent really found anythign that will do what I need. Can someone give me some ideas? thats for all the help Jason Tag: Can't use cached credentials on non-domain member workstations Tag: 68753
  - 3
    - Spyware assistance required!! I recently came across an app on my machine which I am told is a Spyware app with a threat capability described as 'guarded'. Meanwhile my virus update provider has told me that Microsoft provide a free Anti-Spyware app that can be downloaded from the M'Soft website which will guard and protect against such threats in future. Is this so? And if so can someone point me to the appropriate link? I use my PC for alot of security sensitive transactions and the idea of a Spyware app sitting on my PC is not particularly appealing? Can such apps compromise security by recording passwords etc ...?? Any help would be greatly appreciated, Don- Tag: Can't use cached credentials on non-domain member workstations Tag: 68750
  - 4
    - security word hi, There is a word box on some websites that asks you to type what you see in it.I would like to know what is that and how dos it work. thanks Tag: Can't use cached credentials on non-domain member workstations Tag: 68742
  - 5
    - Kelvir.B worm My PC infected by this Kelvir.B worm because I click on a URL in a message reading: "lol! see it! u'll like it" Any1 can help me.... HELLPPP !!! Thanks a bunch. Tag: Can't use cached credentials on non-domain member workstations Tag: 68730
  - 6
    - Security Summit Downloads... Hi there, I have twice tried downloading the "Introduction to Programming with SQL Server 2005" materials from the Security Summit recently held in capital cities around OZ (the link is provided below). Unfortunately the file appears to be corrupt as it gives the following error when attempting to open it after d/load: "Powerpoint can't read this file. The file you tried to open does not appear to be a PowerPoint file (.ppt). Check the original file to find out the real file type; you may be able to edit it in another program designed for that file type." Can someone refer this to the appropriate MS personnel? Thanks, Kim. http://download.microsoft.com/documents/australia/security/summit/presentations/Introduction_To_Programming_With_SQL_Server_2005.ppt Tag: Can't use cached credentials on non-domain member workstations Tag: 68728
  - 7
    - How to keep kids off of computer I have four girls between 8-13 years old and I don't want them to use the computer when I am at work... How can I password protect the computer to keep them off? Putting a password on the screen safer doesn't work, they will just reset the computer... Thanks for any help! Tag: Can't use cached credentials on non-domain member workstations Tag: 68726
  - 8
    - Time and date lock I am running Windows 2003 Server with 15 client Windows XP workstations. It is configured as one domain with 15 users as part of an Active Directory. The users are not local users of the workstations, but log on to their XP workstations as users within the domain. What can I configure so that the users cannot change the time and/or date of the Windows XP workstations? Thanks. Tag: Can't use cached credentials on non-domain member workstations Tag: 68723
  - 9
    - Microsoft Security Bulletins for March 2005 March 8, 2005 Today, no new security bulletins were released. Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summary: For March 2005 there are no new security bulletins being release so there will not be a summary bulletin. Revised Bulletins: Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711) http://www.microsoft.com/technet/security/Bulletin/ms05-002.mspx Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113) http://www.microsoft.com/technet/security/Bulletin/ms05-015.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Can't use cached credentials on non-domain member workstations Tag: 68713
  - 10
    - Password Hello: One of my colleagues has forgotten the administrator password for the server. What can be done about this? Do we have to format the drive? Thanks, TJ Tag: Can't use cached credentials on non-domain member workstations Tag: 68707
  - 11
    - Obtaining permissions from recursive directories I want to say first that the new Security scripting site is great. Now, I have takent the security script for finding the permissions on folders and set it up as a function that recurses through folders and returns permissions for each folder. Tha problem I am having is that the script only retrieves the 4 basic groups with permissions after the recurse to a second level folder. The root of my path returns correctly, but folders under it do not. I have included the function below. Can any one help with why this doesn't work. Second, what would be the variable to add for inherited permissions? I would like to not have every folder reported back, only folders where the permissions change. Thanks.... Script Below *************************************************** strFolderName = "W:\Apps" row = 2 SE_DACL_PRESENT = &h4 ACCESS_ALLOWED_ACE_TYPE = &h0 ACCESS_DENIED_ACE_TYPE = &h1 FILE_ALL_ACCESS = &h1f01ff FOLDER_ADD_SUBDIRECTORY = &h000004 FILE_DELETE = &h010000 FILE_DELETE_CHILD = &h000040 FOLDER_TRAVERSE = &h000020 FILE_READ_ATTRIBUTES = &h000080 FILE_READ_CONTROL = &h020000 FOLDER_LIST_DIRECTORY = &h000001 FILE_READ_EA = &h000008 FILE_SYNCHRONIZE = &h100000 FILE_WRITE_ATTRIBUTES = &h000100 FILE_WRITE_DAC = &h040000 FOLDER_ADD_FILE = &h000002 FILE_WRITE_EA = &h000010 FILE_WRITE_OWNER = &h080000 ' Bind to Excel object. On Error Resume Next Set objExcel = CreateObject("Excel.Application") If Err.Number <> 0 Then On Error GoTo 0 MyVar = MsgBox ("Excel Application Not Found", 16, "Excel Application") Wscript.Quit End If On Error GoTo 0 strRightsPath = "H:\Groups & File Rights\RightsList.xls" objExcel.Workbooks.Add objExcel.Visible = "True" Set objSheet = objExcel.ActiveWorkbook.Worksheets(1) objSheet.Name = "Permission Listings" row = 2 ' Format the spreadsheet. objExcel.ActiveWindow.FreezePanes = False objExcel.Columns(1).ColumnWidth = 35 objExcel.Columns(2).ColumnWidth = 110 objExcel.Columns(3).ColumnWidth = 45 objExcel.Columns(4).ColumnWidth = 255 objExcel.Columns(5).ColumnWidth = 110 objSheet.Cells(1,1).value = "Folder Path" objSheet.Cells(1,2).Value = "Group Name" objSheet.Cells(1,3).value = "Permissions Allowed" Set objShell = WScript.CreateObject("WScript.Shell") Set FSO = CreateObject("Scripting.FileSystemObject") Subfolder FSO.GetFolder(strFolderName) objExcel.ActiveWorkbook.SaveAs strRightsPath objExcel.ActiveWorkbook.Close objExcel.Application.Quit MyVar = MsgBox (""&location&" "& "Permission List Successfully generated", 65, "PERMISSION LIST STATUS") Function Subfolder(Folder) For Each objFolder In Folder.Subfolders Set objWMIService = GetObject("winmgmts:") Set objFolderSecuritySettings = _ objWMIService.Get("Win32_LogicalFileSecuritySetting='" & strFolderName & "'") intRetVal = objFolderSecuritySettings.GetSecurityDescriptor(objSD) intControlFlags = objSD.ControlFlags If intControlFlags AND SE_DACL_PRESENT Then arrACEs = objSD.DACL For Each objACE in arrACEs ' If objACE.AceType = ACCESS_ALLOWED_ACE_TYPE Then ' WScript.Echo vbTab & "Allowed:" ' Elseif objACE.AceType = ACCESS_DENIED_ACE_TYPE Then ' WScript.Echo vbTab & "Denied:" ' End If If objACE.AccessMask AND FILE_ALL_ACCESS Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_ALL_ACCESS" row = row + 1 End If If objACE.AccessMask AND FOLDER_ADD_SUBDIRECTORY Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_ADD_SUBDIRECTORY" row = row + 1 End If If objACE.AccessMask AND FILE_DELETE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_DELETE" row = row + 1 End If If objACE.AccessMask AND FILE_DELETE_CHILD Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_DELETE_CHILD" row = row + 1 End If If objACE.AccessMask AND FOLDER_TRAVERSE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_TRAVERSE" row = row + 1 End If If objACE.AccessMask AND FILE_READ_ATTRIBUTES Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_ATTRIBUTES" row = row + 1 End If If objACE.AccessMask AND FILE_READ_CONTROL Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_CONTROL" row = row + 1 End If If objACE.AccessMask AND FOLDER_LIST_DIRECTORY Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_LIST_DIRECTORY" row = row + 1 End If If objACE.AccessMask AND FILE_READ_EA Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_EA" row = row + 1 End If If objACE.AccessMask AND FILE_SYNCHRONIZE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_SYNCHRONIZE" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_ATTRIBUTES Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_ATTRIBUTES" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_DAC Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_DAC" row = row + 1 End If If objACE.AccessMask AND FOLDER_ADD_FILE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_ADD_FILE" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_EA Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_EA" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_OWNER Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_OWNER" row = row + 1 End If Next Else WScript.Echo "No DACL present in security descriptor" End If Subfolder objFolder Next End Function *************************************************** Tag: Can't use cached credentials on non-domain member workstations Tag: 68695
  - 12
    - Microsoft Anti-Spyware Software Auto Scan I want to have Microsoft Anti-Spyware run at night on my Win2K network when everyone is logged off. I tried scheduling the scan in the software but this requires you to be logged in, or may not run because of lack of rights when someone is logged off. I also tried putting it in the task scheduler with no results. Let me know how I can run this scan whenever I want with no one logged in. Tag: Can't use cached credentials on non-domain member workstations Tag: 68694
  - 13
    - Problems with Virtual Server 2005 Installation Hello all, I am trying to run Virtual Server 2005 on a Windows 2003 Server system. I initially had trouble getting the installation program to realize that I was running IIS 6.0 and it kept denying creation of virtual site. I got the latest build and this was bypassed. Now after installation, when I browse to the website, it pops up user credentials. I gave it a local administrative account (and tried many other accounts too) - but it keeps throwing back a HTTP 401 error message. Things I tried already: 1. I checked out the posts that mentioned the Launch permissions to be given to the Virtual Server DCOM object. Did that. In fact, my screen looked a little different that most of those in the posts - not sure why. I don't get a Remote Activation checkbox at all. 2. I tried allowing all unrecognized ISAPI and CGI applications in IIS. Didn't help. 3. I tried changing to Anonymous Access, Basic Authentication, etc. Didn't work. I guess there is some problem with IIS being able to launch .exe (vswebapp.exe is the CGI application that is to be run). Any pointers? -- blog: pandurang.thinkingMS.com Tag: Can't use cached credentials on non-domain member workstations Tag: 68690
  - 14
    - Can I customise standardWindows lockot message? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. Can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Charles Tag: Can't use cached credentials on non-domain member workstations Tag: 68677
  - 15
    - Can a standard windows lockout message customize? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. Can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Charles Tag: Can't use cached credentials on non-domain member workstations Tag: 68676
  - 16
    - Task Manager permissions. Is there a way to allow non-administrators to permission to "Show processes for all users" in task manager? I have some people who can benefit from this information but giving them administrative rights is inappropriate. The platform is Windows Server 2003. Thank you. Tag: Can't use cached credentials on non-domain member workstations Tag: 68668
  - 17
    - Is there a way to track/log policy changes? Hello, Beofre I start, this question is not about auditing files or folders (and my searching thus far seems to always lead me down that road)... what I'd like to know is if there is a way/setting which will log when someone changes a group policy. For example, if someone (yes, I understand that they'd have to do permission to do this) goes into the domain security settings and disables the prevent users from installing print drivers setting, how can I get that in the log? Thanks! Tag: Can't use cached credentials on non-domain member workstations Tag: 68663
  - 18
    - Virtual Server 2005 not running on Windows 2003 Hello all, I am trying to run Virtual Server 2005 on a Windows 2003 Server system. I initially had trouble getting the installation program to realize that I was running IIS 6.0 and it kept denying creation of virtual site. I got the latest build and this was bypassed. Now after installation, when I browse to the website, it pops up user credentials. I gave it a local administrative account (and tried many other accounts too) - but it keeps throwing back a HTTP 401 error message. Things I tried already: 1. I checked out the posts that mentioned the Launch permissions to be given to the Virtual Server DCOM object. Did that. In fact, my screen looked a little different that most of those in the posts - not sure why. I don't get a Remote Activation checkbox at all. 2. I tried allowing all unrecognized ISAPI and CGI applications in IIS. Didn't help. 3. I tried changing to Anonymous Access, Basic Authentication, etc. Didn't work. I guess there is some problem with IIS being able to launch .exe (vswebapp.exe is the CGI application that is to be run). Any pointers? -- blog: pandurang.thinkingMS.com Tag: Can't use cached credentials on non-domain member workstations Tag: 68662
  - 19
    - SMS Client Installation & Microsoft Anti-Spyware Program Sorry if this has been asked already (if so, can someone point me to the answer! I was told to post here instead of the SMS forums) When I push new clients to PC's on the network, it will not install on machines that have the Microsoft Anti-spyware software installed because it asks the user if they wish to make the dll change and of course, if you haven't warned them ahead of time or they have forgotten they usually press no which stops the client. Is there a way around this issue? Thx Dave Tag: Can't use cached credentials on non-domain member workstations Tag: 68661
  - 20
    - windows xp changes We have an application that worked fine in Windows 2000, but now fails in Windows XP. It fails both when the initial installer is running when it asks for the Regkey and if I manually install the app it fails when it tries to retrieve the Regkey from the registry and validate the # of allowable users, which components to load, etc. The error message just says "Cryptography Error". I have tried unsuccessfully to contact the app's developers. My question is this: Can anyone think of any changes from Win2000 to WinXP that would account for this? Tag: Can't use cached credentials on non-domain member workstations Tag: 68659
  - 21
    - XP/2003 vulnerable to LAND attack? from http://www.securityfocus.com/archive/1/392354 - Windows Server 2003 and XP SP2 (with Windows Firewall turned off) are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition. Tools used: IP Sorcery for creating malicious packet, Ethereal for sniffing it and tcpreplay for replaying. Results: Sending single LAND packet to file server causes Windows explorer freezing on all workstations currently connected to the server. CPU on server goes 100%. Network monitor on the victim server sometimes can not even sniff malicious packet. Using tcpreplay to script this attack results in total collapse of the network. Vulnerable operating systems: Windows 2003 XP SP2 - Can anyone confirm / deny this ? Steve Tag: Can't use cached credentials on non-domain member workstations Tag: 68657
  - 22
    - Auto Logon? I set up my user name and password. Someone wanted to use my computer and just put in my user name(no password) then slicked the cancel button. It sogged them on. How do I stop this? I want it so that you HAVE to put in the password. Tag: Can't use cached credentials on non-domain member workstations Tag: 68656
  - 23
    - Script file denied permission to run with Spyware I have a dos program that I need to run that is blocked by the Spyware. It does not allow me to accept this program. Is there a way to suspend the Spyware program so I can run my program? Tag: Can't use cached credentials on non-domain member workstations Tag: 68652
  - 24
    - Grant access to share Hello, I try to grant access to shared folder in witch, the users can create and modify files and directories, but not to delete them. I do this: I grant access to the directori "modify" and in details "deny delete" and "deny delete files and folders". The result is that the users can modify and copy new files and directories, but it is some problem with create new files and direcotry - if I create the file with WordPad, there is a message like "The file exist, do you want to replace it?". Click on "yes" and the file is created. But when I try to create the file with MS Word or MS Excel the same message pop-up and after my confirmation there is message that the directory is protected. But there is a file with the selectet file name, created with lenght "0" bytes. Can somebody help me with this? Thank you in advance. Tag: Can't use cached credentials on non-domain member workstations Tag: 68641
  - 25
    - Club Shepherd 2005 v1.00 WILL Re-solve ALL Derivatives of A CHEATE I am having A Time with being CHEATED UPON, ON-LINE The Zone, so I thought HARD AND Worked an Estimated 225++ hrs, I honestly WORKED 700 Hours, I estimate to RE-Solve cheaters! Because, They are Sooooooo Rampant on-line the Zone! To Solve Cheaters and TO Add many features Specialized to the Zone, I created, Club Shepherd 2005 v1.00 which U can Re-view under ZoneSysops.com! THX! Tag: Can't use cached credentials on non-domain member workstations Tag: 68625

I have users whose machines are not memebers of the domain, and I want them
to be able to access resouces (Exch 2003, web folders, ftp folders, etc...)
using cached credential from their workstation logins. Even when selecting
"Remember My Password," they have to supply credentials at least once per
session. They work exclusively remotely via the Internet, without VPN.

How can I get W2K3 & Exch2K3 to accept non-domain member machine login
cached credentials?

Thanks.

Top