Best Anonymous Proxy for Winxp ??
Hey guys
I am searching for a Free Anonymous Proxy for Windows Xp .....Send me Links
Thanx Tag: One Care Public Beta Where's the Group(s)? Tag: 74475
xp firewall help
I just purchased a new laptop bundled with xp-sp2, Norton AV (90 day), I
activated the Norton AV but disabled the Norton personal firewall, ran the
network wizard to configure the laptop wireless adaptor to one I installed in
my home pc, (xp-sp2, dial up), enabled file, print, ICS sharing, updated
Norton definitions and xp updates.
The problem is everytime I turn on the laptop the windows firewall is
disabled along with two of the three alert options located in the Security
Center. So I literally have to open the security Center Window to see that it
is off and then manually set it to on. I have to do this each time I restart.
I checked the services tab under computer management and the text says its on
auto, I also ran a scan with Norton and it came up clean. Anyone know how to
keep the windows firewall on as a default or is this a byproduct of having
Norton?
Hihar in Thanks, Tag: One Care Public Beta Where's the Group(s)? Tag: 74474
cdp publish
hi all
i installed a new CA infrastructure in my organization.
i have root CA server and subordinate CA and 5 machines as CDP'S.
on the subordinate CA server at the server properties in the certificate
main consule, when going to the extensions tab, and typing a path to any of
my CDP'S using DNS CNAME for the CDP, im getting an error trying to publish
to that cdp. its like the server cant find that cdp.
when i type the netbios name or the dns name for the cdp path its working.
why is that, i need to use cname's for my cdp's for redundecy.
thanks for the help Tag: One Care Public Beta Where's the Group(s)? Tag: 74470
Mapping Drives in Windows Server 2003 HELP!
I want to map a XP Pro pc to a share I created on a 2003 server. When I go to
map the drive from my PC...it prompts me for a username and password. I try
to log into the share and it keeps saying bad username or password. I created
at least 2-3 test users to try this with and changed passwords but it still
wont except my logins...I am stumped! Please Help!! Tag: One Care Public Beta Where's the Group(s)? Tag: 74463
spyware
Possible spyware installed but I can not detect it. I have zonealarm
antivirus/firewall with popup blocker enabled. Ad-Aware pro/ad-watch popup
blocker enabled. I've run scans with all including the multi av-cls several
times. Popups are occuring regardless if I'm browsing the web or not. Soon as
I boot the system if you just wait a while they start to appear. Any thoughts
or suggestions? Tag: One Care Public Beta Where's the Group(s)? Tag: 74462
Certificate Services Performance ---
Back in December of 2004 we deployed a large CA based on Microsoft
Certificate Services (MSCA) on Windows 2003.
The MSCA is advertised to reach 2 million certificates a day - which is
about +/- 1388 certs per minute. I recently ran some tests and I was lucky to
get 16 certs per minute. This was running on a 4 processor HP DL580, 4 GB
memory with nCipher HSM hardware assist ---
So, I have two questions for the group ---
1. Has anyone else tested their certificate generation performance; what did
you find?
2. If you did test your performance, what tools did you use to test the
performance? I used a vbs script running for other networked nodes in a
scheduled batch job.
Thank you.
Daya
--
Daya Puls, CISSP
IT Security, Sigma Systems, Marlborough, MA Tag: One Care Public Beta Where's the Group(s)? Tag: 74455
Nessus report is not correct ?
Using nessus to scan my website, the report contains follwing messages.
=============================
Vulnerability http (80/tcp)
At least one of these CGI scripts is installed :
hello.bat
echo.bat
They allow any attacker to execute commands with the privileges of the web
server process.
Solution : Delete all the *.bat files from your cgi-bin/ directory
Risk factor : High
CVE : CAN-2000-0213
BID : 1002
Nessus ID : 10246
=============================
Vulnerability http (80/tcp)
The CGI 'args.bat' (and/or 'args.cmd') is installed. This CGI has
a well known security flaw that lets an attacker upload
arbitrary files on the remote web server.
Solution : remove it from /cgi-dos.
Risk factor : High
CVE : CAN-1999-1180
Nessus ID : 11465
============================
But I can't locate file hello.bat,echo.bat,args.bat or args.cmd in my
computer.
What should I do ? Ignore these messages? Where can I find more information ?
By the way, my computer's configuration is:
OS: WIndows 2003 Server
IIS: IIS 6.0
language: Active Server Page (ASP) Tag: One Care Public Beta Where's the Group(s)? Tag: 74450
"message service" pop up window
I have recieved a "Message Service" pop up window. The message tells me to
go >www.ms-repair.com<. Is this a legitimate site?
The message also tells me that my system has 72 errors, need to install
registry repair, run registry repair, and reboot the computer.
Thank you in advance for anyone who can help, Tag: One Care Public Beta Where's the Group(s)? Tag: 74358
Ports 6346 and 1434 TCP and UDP
HI,
Is anyone else getting a lot of hits on 6346 and 1434 in both TCP and UDP ?
1434 is ms_sql-m but what use is 6346 for ?
Kevin Tag: One Care Public Beta Where's the Group(s)? Tag: 74355
Antivirus on server or client?
What is recommended: install an antivirus program on the server or on each
client individually?
Setup: W2K Server, XP clients, MS Exchange. Tag: One Care Public Beta Where's the Group(s)? Tag: 74346
pop uos
i keep recieving pop ups from the same address(69.28.210.175/media/773379)
every 5 minutes on the nose 24/7.I'm using stopzilla to block these but they
still splash on my screen and are logged and momentarily slow my computer.I
use adaware and spybot searcch and destroy as well as delete my cookies but
it has no effect.
1. is it legal for these to be sent? if it is something needs to be done.
2.is it possible to stop these from reaching my computer? Tag: One Care Public Beta Where's the Group(s)? Tag: 74339
MS04-011 LSASS virus
My laptop runs under XP(sp2). Since I installed Trend-Micro PC-cillin 2005
(AntiVirus,Firewall,AntiSpyware combined), I'm getting "MS04-011 LSASS"
attack warnings. Microsoft XP-SP2 supposed to have the fix for this virus,
but the the warning never goes away. "Microsoft Bulletin MS04-011(835732)"
offers the fix for all other operating systems except for XP.
Anyone knows how to get rid of this problem? Thanks. Ken Tag: One Care Public Beta Where's the Group(s)? Tag: 74332
AOL Servers Probing ???
Hello,
I've been getting a number of hits on Port 80 from AOL Servers and
Proxies even without a Browser open.
Since they are not tied to an App Rule they are Blocked and they hit
some other Ports too, sometimes as high as 60,000.
Why are they Banging my Http Ports (80 and 1080) and ramdom Ports from
5000-80,000????
Since I'm Dial-up I'm not the Target but this IP Block must be.
The one's between 5000-60,000 are rare and I don't worry about them but
it seems they are AOL Servers or Proxie Servers most of the time and not
Users.
And I'm not talking about when I first go online with Dial-up where
someone else could have had the IP and I'm getting their Returns.
This example is not from a server but I had cleared my Log yesterday
after some Security Scans to check my Firewall so it's all I have right now.
Rule "Default Block HTTP Port 80" blocked (compaq,http). Details:
Inbound TCP connection
Local address,service is (compaq,http)
Remote address,service is (172.165.17.222,2122)
Process name is "N/A"
In Local Address; compaq is another way this computer lists localhost,
127.0.0.1. Tag: One Care Public Beta Where's the Group(s)? Tag: 74330
spyware - windupdates
Hi,
Adaware keeps finding something called windupdates. I keep deleting it and
it keeps coming back! Help! How do I get it to go away permanently? Tag: One Care Public Beta Where's the Group(s)? Tag: 74326
Restrict users to only connect to our wireless network
Hi, I have a wireless network and want to make sure the users only connect to
this wireless network and no others at all. Can this be done? Tag: One Care Public Beta Where's the Group(s)? Tag: 74324
unable to connect to windows firewall ant-virus wont auto protect
I am having dificulties with the windows security centre i keep recieving the
warning about the firewall connection and also now my norton anti-virus will
not enable autoprotection.. can anybody help. i ahve tried to recconect my
windows firewall but it wont do it, a message come sup sayin it cannot
connect to windows firewall!! what can i do?
Also i have norton anti virus and up untill 2 days ago it was working fine
doing a full computer scan every week but now thiswont work, on th eoptions
itis not set on auto protect and it will nto allow me to select this option!!
help me my compute ris at graet risk what can i go..
i was adviced to download the updates but this has not fixed the problem help Tag: One Care Public Beta Where's the Group(s)? Tag: 74323
Local Caching
Where is the user's password cached when you have a GPO setting on
Interactive logon: Number of previous logons to cache (in case domain
controller is not available)? Is it store in LSASS secrets?
If we set our server to not store local cache of user's password what
application or other things will break? I u nderstand that if you turn that
off and there is no domain controller available that you will be unable to
logon to that server in that domain...But what other hidden gotchas are out
there that I might not be thinking of? Tag: One Care Public Beta Where's the Group(s)? Tag: 74306
Fake Add Message
Well hey, i started to hear this from many friends, a contact that adds them
then they loose their password and wont be able to sign again to their
account.!
that's so weird, any one heard about that ?? Tag: One Care Public Beta Where's the Group(s)? Tag: 74305
How to set up pass-through authentication on W2K server
Hi Experts,
How do I configure passthrough authentication on the server, so the
following task will work. Here is the situation.
There is currently a spreadsheet on the network which is being used to
capture the date and do whatever calculations are necessary. The location of
the spreadsheet is in a shared location and we should recreate permissions so
only the necessary people have access. Since the prime purpose of the Tablet
is data collection using this speadsheet, I want to have a common logon for
anyone who uses this and it should not be part of the domain. The new account
needs to be created locally and on the domain so I can map a drive to the
spreadsheet location using pass-through authentication. I don't want people
logging on using their domain ID because they have roaming profiles and this
will mess-up everything.
THX in advance Tag: One Care Public Beta Where's the Group(s)? Tag: 74304
Locked out of Hotmail Account
Can't get into my Hotmail account. Locked out. Seems like someone got in
and changed my login info. Need some sort of technical support. MSN will
not answer emails. I cannot find any support phone numbers. Any and all
help is appreciated!!
Thanks!! Tag: One Care Public Beta Where's the Group(s)? Tag: 74303
File access tracking software
Anyone know of a product/solution that can track domain users' access to
files on a shared drive and be able to run reports on the data? Tag: One Care Public Beta Where's the Group(s)? Tag: 74301
IPsec Implementation
I'm trying to implement IPsec on the work network just for the LAN. After
reading about planning and setting up policies. I'm still not 100% sure what
it is that I need to do.
We're using Windows Server 2003 Enterprise edition and I checked that IPsec
service is running.
Do I only need to setup IPsec policies (request security) on the server and
the workstations will use IPsec automatically? All the workstations are
running XP SP2.
If I right-click on an IPsec policy, "Assign" is shown on the menu. If after
I selected Assign, would I be able to simply unassign it? Would there be any
complications?
Do I need to create some sort of certificates for IPsec? server and
workstations? Tag: One Care Public Beta Where's the Group(s)? Tag: 74299
Desktop.ini auditing filling event logs
I have enabled auditing on a directory and all of its subdirectories
and files, for a location where users My Documents have been
redirected. I have set auditing for Change Permissions, Take
Ownership, Write Attributes, and Write Extended Attributes. However,
my security log on that machine is being filled with "Object Access"
entries referring to Accesses of ReadAttributes and WriteAttributes.
For the normal user, this is happening for only their redirected
folder. For the few in the domain admins group, there is an Accesses
entry with READ_CONTROL, ReadData (or ListDirectory) and ReadEA in
addition to the previoius two, for everyone's desktop.ini file in their
redirected users. This is really filling up the log files, making
auditing very difficult. Any ideas or help would be greatly
appreciated.
Rich C. Tag: One Care Public Beta Where's the Group(s)? Tag: 74293
Viruses and hijackthis
Hi.
If computer is infected will i see this in hijackthis program or not? Tag: One Care Public Beta Where's the Group(s)? Tag: 74286
safe mode antivirus
hi, I use AVG free version in regular mode. I can NOT use it in safe mode. I
also have the sysclean from trend micro that I have used in the past because
one can use it in safe mode. But, the scan usually takes more than an hour,
though if it does the job, I wouldn't mind.
Still, I would like to see if anyone out there has another (free perferably)
AV program that they recommend to use in safe mode. that way, if I am short
on time and can't use Sysclean, I can use that one.
Note: I have stinger too. but, would like to get another one that I can
enable only in safe mode. WIll use AVG all the other times. thanx Tag: One Care Public Beta Where's the Group(s)? Tag: 74285
HELP can't logon to my computer
I need help fast...i can't logon to my computer, im using windows XP
professional... i was trying to create a workgroup and it said i belonged to
a domain already and it had to be changed before i could create the
workgroup...so i change my domain to workgroup and then restarted like it
said...however now i can't logon to my computer...no user name or password
that i can think of will work..i need to know of a way i can get around the
logon so i can access my files..please help!
--
Jill Tag: One Care Public Beta Where's the Group(s)? Tag: 74274
Security token design question
There is a smartcard chip embedded in a PnP device of completely irrelevant
class. It is not exposed as independent hardware function.
The chip can be accessed only thru the driver of this device.
How I can make this chip visible to CryptoAPI from user mode?
Can this be done with a user mode module that sends custom ioctls to the
driver?
Or I need a root enumerated driver that emulates a Smartcard reader?
Can such "virtual" smartcard readers pass HCT?
Regards,
--PA Tag: One Care Public Beta Where's the Group(s)? Tag: 74269
dsclient - ntlm v2
I need to know how make win 9x work with ntlm v2.
I´ve installed dsclient, changed the registry like described in some
websites, but isn´t work.
It don´t autenticate. The only way to this work is changing the registry to
level 0, but with this the ntlm v2 don´t work.
> Locate and click the following key in the registry:
> HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control
>
> Create an LSA registry key in the registry key listed above
>
> On the Edit menu, click Add Value, and then add the following registry
> value:
> Value Name: LMCompatibilityLevel
> Data Type: REG_DWORD
> Value: 3
> Valid Range: 0,3
> Description: This parameter specifies the mode of authentication and
> session
> security to be used for network logons. It does not affect interactive
> logons.
> . Level 0 - Send LM and NTLM response; never use NTLM 2 session security.
> Clients will use LM and NTLM authentication, and never use NTLM 2 session
> security; domain controllers accept LM, NTLM, and NTLM 2 authentication.
> . Level 3 - Send NTLM 2 response only. Clients will use NTLM 2
> authentication and use NTLM 2 session security if the server supports it;
> domain controllers accept LM, NTLM, and NTLM 2 authentication.
>
Thanks,
Leonardo Tag: One Care Public Beta Where's the Group(s)? Tag: 74267
086eb794e.html -Desktop Background
Can anoyone help.
I have found this file on my computer under all users. It is linked to a
'Free Track Remover' program and is locaeted in C:\Documentsand settings then
under the user's local settings in a folder called Temp. The file is causing
a red background on desktop with the advert for this free track
remover-trying to get you to buy it. This background comes up no matter what
I do. I have tried deleting this file which is removed until you next log on.
The file is then back in the same place. I have also tried delting the folder
but an error message appears explaining that some of the folders are used by
other programs and can not be deleted. I originally found the file under
Control Panel\Display\Desktop\CustomiseDesktop then on the web tab. The file
is there under the web pages. I can delte it from there but the same thing
occurs where it returns. I have tried using Norton to remove it but it still
returns. Please can someone help me with this-email me on Saxonh@Hotmail.com
and enter 086eb794e in the subject box. All help appreciated Tag: One Care Public Beta Where's the Group(s)? Tag: 74266
BMP Processor overflow
I'm getting the following alert from my firewall's IPS:
WEB-CLIENT Internet Explorer BMP Processing Overflow.
I spoke to the user and told them to stop going to what ever site they are,
but I keep getting the alert. should I be worried about this person's
workstation? My IPS is blocking the threat, but the 100 alerts I'm getting a
day are starting to bother me.
Thanks. Tag: One Care Public Beta Where's the Group(s)? Tag: 74265
Kerberos User Ticket Lifetime
Hi,
In Windows 2000 Server and Windows Server 2003, is it possible to set
Maximum User Ticket Lifetime at a userid level, or only at the domain level
with the Maximum User Ticket Lifetime parm? I would like to have a domain
setting that would cover most of the users, and set a shorter ticket lifetime
on the users who are in the Administrators groups, but didn't see a way that
a shorter lifetime could be set on those individual userids to achieve that.
Anyone know if that's possible, and if so, how you'd do that?
Thanks in advance!
- Kit Tag: One Care Public Beta Where's the Group(s)? Tag: 74263
Permissions on created folder
If I create a folder called public on a windows 2003 server, is it ok to
remove creator owner and system and leave only administrator and
authenticated users. Tag: One Care Public Beta Where's the Group(s)? Tag: 74260
remote access logons in Event Viewer
I need to find out if someone is logging on to our sever via remote access
desktop. Is there an Event Log entry to indicate access via RAD? Tag: One Care Public Beta Where's the Group(s)? Tag: 74258
Firewall
If I enable the Windows firewall on my new 2003 Server Std x64 SP1 network
server (Domain Controller, DNS, File and Print Server, WINS) the loads and
saves of files across the network are very slow. I opened a port exception
for my network but still very slow loads and saves. When I turn the firewall
off I get normal loads and saves again. Do I even need a firewall on this
server if I don't have the IP address for my ISP gateway configured in my
network settings? Tag: One Care Public Beta Where's the Group(s)? Tag: 74256
MAJOR Hacking
Hi - have a big problem and unsure how to correct despite best efforts with
router, personal firewalls, etc. Brand new computer worked well for 2 weeks
until one day norton reported many programs (AIM, internet expplorer,
svchost.exe etc) accessing the internet through unknown Modules. Since that
point, it doesnt matter if i completely wipe out the system or not (which I
have done x number of times now) it reverts back to accessing the internet
through unknown modules. I am fairly confident that whatever is happening,
it is forcing my internet information to be filtered through some other
server whose IP seems to be masked to my firewall logs. My logs are filled
with entries of only my internal ip address. Anyone have ANY ideas?: Tag: One Care Public Beta Where's the Group(s)? Tag: 74249
Searching tool for FULL disc encryption (not only volume files)
I am searching a tool which allows to encrypt a whole harddisc and not only
a volume file as the most of the offered tools.
Yes, I know TrueCrypt. But this tool has problems with large external USB drives.
I got permanent errors from the TrueCrypt driver in big operations like
copying 20000 files onto a TC encrypted harddisc (Doing the same with
the same USB hatrddisc unencrypted show no error).
Yes, I know also PGPdisk. But this tool can only exist with a running PGP installation.
I need a tool which can be launched easily on demand (when I plugged in the external USB drive)
BestCrypt, DriveCrypt offer only encryption of volume files.
Which tools exist otherwise?
Thomas Tag: One Care Public Beta Where's the Group(s)? Tag: 74248
Bug in Kerberos SSP within SSPI??
We have been trying to gain a detailed understanding of what SSPI does when
authentication fails. Unfortunately while much documentation exists for how
ti works when it all works, the documentation on what happens when things go
wrong is almost non-existent!
For example, take the scenario where the client initializes a context for a
service with the SPN of "userA@domain.com". However the service is actually
running as
"userB@domain.com".
On the first call to AcceptSecurityContext, when the client's first blob is
passed in, SSPI returns SEC_I_CONTINUE_NEEDED. Shouldn't it return a failure
code since the ticket embedded in the security blob (token) is not encrypted
with a key it can understand?
We've also noticed the behaviour differs between an initial logon and once
the workstation has been locked and unlocked.
On an initial login:
AcquireCredentialsHandle (client side) - SEC_E_OK
AcquireCredentialsHandle (server side) - SEC_E_OK
InitializeSecurityContext - SEC_I_CONTINUE_NEEDED -> Send token to server
AcceptSecurityContext - SEC_I_CONTINUE_NEEDED -> Send token to client
InitializeSecurityContext - SEC_I_CONTINUE_NEEDED -> Send token to server
AcceptSecurityContext - SEC_I_CONTINUE_NEEDED -> Send token to client
InitializeSecurityContext - SEC_E_WRONG_PRINCIPAL
After locking/unlocking the workstation:
AcquireCredentialsHandle (client side) - SEC_E_OK
AcquireCredentialsHandle (server side) - SEC_E_OK
InitializeSecurityContext - SEC_I_CONTINUE_NEEDED -> Send token to server
AcceptSecurityContext - SEC_I_CONTINUE_NEEDED -> Send token to client
InitializeSecurityContext - SEC_E_LOGON_DENIED
Where is the behaviour different after the lock/unlock and why the extra
roundtrip in the initial logon case?
Any enlightment would be greatly appreciated given the black-box nature of
SSPI :)
We are running a W2K3 with SP1 running in W2K+ mode for the Domain
controller and WinXP with SP2 for the workstations. Tag: One Care Public Beta Where's the Group(s)? Tag: 74247
Eractic Behaviour from Win2k Server
Hi
I hope someone can help me.
I have three domains in my network environment - Network A, Network B and
Network C. Two domains are running Windows 2000 Server and the last is
Windows 2003 Server. Each domain has its own Domain Controller. Domain C
has two domain controllers. DNS is running within each domain and the Dns
server for each network is itself. Each domain communicates with the other
via a trust relationship. There is one DHCP server in the network allocating
IP addresses to the client machines running Windows XP.
My problem is as follows-
I have a 256/512Kbps wireless internet connection and I noticed that our
internet bandwidth has reduced significantly over the last couple of days. I
used Ethereal to pinpoint which machine was hogging the bandwith. Ethereal
results showed that the computer is querying www.cheaptickets.com for DNS
information along with some other wierd sites. It is one of the Domain
Controllers in Network C.
I installed Microsft Antispyware to scan the machine for spyware but nothing
was found. The Norton Virus defintions are up to date and it found no
viruses when a scan was done. When I take this machine off the network the
internet bandwidth returns to its normail behaviour. This machine is
currently running Norton, Exchange 5.5 and Print services.
What should be my next course of action to rectify this problem. The task
manager does not show any unregular behavour within the Processes nor
Performance tab.
What could be causing my problem and what should I do to rectify the issue.
PLEASE HELP.
Regards Tag: One Care Public Beta Where's the Group(s)? Tag: 74241
Windows XP/2000: Working without administrator rights
Hoping some people can offer some advice.
We have recently taken all users out of the Local Administrators group
on their PCs (not our choice but the powers that be). All users are now
either Users or Power Users.
This has become a nightmare in that we now need to log users of and on
in order to make any changes. I am after some tips to help make this
easier.
Here is what I am utilizing so far:
- Remote Assistance (XP Only)
- "Run As" from installing some programs
Is there any way to do the following without having to log on as an
administrator on their PC?
- Modify the registry
- Run System Tools (eg Disk Defragmenter)
- Install programs
- Modify the hosts file
We have limited access to a single group policy for our OU but at this
stage no rights to create additional ones.
Happy to hear any scripting solutions as well. Tag: One Care Public Beta Where's the Group(s)? Tag: 74239
Guest account access
Hello everyone,
Please help
Im getting the following application error message when logged on as a guest;
could not create entry(""+speedtouch connection+"" )
I want my friends to access my PC using the guest account. With this error i
can't connect to the internet. I think its something to do with guest access
control permissions.
How can i solve this?
Many thanx Tag: One Care Public Beta Where's the Group(s)? Tag: 74232
Alternative for Norton Antivirus?
I'm experiencing quite a lot of problems with Norton Antivirus and I was
just wondering what virus scanner the members of this group were using (if
any)? I used to be pretty happy with Norton but not anymore. Tag: One Care Public Beta Where's the Group(s)? Tag: 74231
Display users rights for auditors
Hi, for our IT auditors we need to show them what user permissions everyone
has got within AD 2003. Especially the Admins. We just showed them
(auditors) the built in Admin groups, but they are not happy with this and
asked for a report on all users and what control they have. It and admin
accidently adds a user to a admin group how would we know?
I just hope you guys know of a solution we can put in place from now on.
Thanks
S Tag: One Care Public Beta Where's the Group(s)? Tag: 74228
Patching Alpha NT Server Systems
Hello,
I have an old Alpha NT 4 Server box that is currently requiring patching.
Will there be an issue installing the same patches for the Intel platform on
this server? Do the exploits affect Alpha systems the same way as Intel
systems? Finally, were there prior released updates for these Alpha NT
systems before MS declared NT no longer supported?
Thanks much,
Paul Tag: One Care Public Beta Where's the Group(s)? Tag: 74225
LsaSrv Event 6033
I started getting the following error error message on my Windows 2003
Domain server:
An anonymous session connected from LOCALMACHINENAME has attempted to
open an LSA policy handle on this machine. The attempt was rejected
with STATUS_ACCESS_DENIED to prevent leaking security sensitive
information to the anonymous caller.
The application that made this attempt needs to be fixed. Please
contact the application vendor. As a temporary workaround, this
security measure can be disabled by setting the
\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\TurnOffAnonymousBlock
DWORD value to 1.
Can somebody suggest a way of figuring out what application/service is
trying to access the LSA policy anonymously?
Thanks,
Irina Tag: One Care Public Beta Where's the Group(s)? Tag: 74224
Nessus vs MBSA
My environment has 200 servers, in which 95% are MS Win2000/2003 OS's. We
have few Unix boxes and clients are primarily WinXP.
Do you think it makes more sense using Nessus or MBSA to scan our network
for vulnerability detection ? I have experience no experience with Nessus,
but if the goal is getting the Windows servers scanned, it seems to me that
MBSA is a better approach. Please advise. Tag: One Care Public Beta Where's the Group(s)? Tag: 74217
Is Browser using Localhost OK ?
Hello,
I see Netscape Browser trying to use Localhost in my Firewall Log that I
usually Block, so I made Rule to Block it that I can change to Allow
later if it is not a problem:
Everything seems to work fine with it Blocked.
Rule "Localhost NETSCP.EXE TCP-UDP" blocked (localhost,http). Details:
Outbound TCP connection
Local address,service is (0.0.0.0,1053)
Remote address,service is (localhost,http)
Process name is "E:\PROGRAM FILES\NETSCAPE\NETSCAPE\NETSCP.EXE"
Everything else using Localhost is Blocked (I don't like being used as a
server, Zombie or otherwise) but should I allow this one?
Thank you for your help
Kevin Tag: One Care Public Beta Where's the Group(s)? Tag: 74216
TsInternetUser issues
I am having events logged in Event Viewer and I am trying to figure this one
out.
Event Viewer shows -
Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 12294
Date: 7/25/2005
Time: 5:31:41 PM
Computer: MAIL1
Description:
The SAM database was unable to lockout the account of ã? due to a resource
error, such as a hard disk write failure (the specific error code is in the
error data) . Accounts are locked after a certain number of bad passwords are
provided so please consider resetting the password of the account mentioned
above.
Data:
0000: a5 02 00 c0 ¥..�
C:\WINNT\Debug\PASSWD.LOG shows -
07/27 01:49:52 Attempting password change server/domain HERITAGE for user
TsInternetUser
07/27 01:49:55 SamChangePasswordUser2 on machine \\GFFS1 for user
TsInternetUser returned 0xc000006a
And these errors and events happen every 24 hours. I know Windows changes
this password automatically every day to prevent hacking, but it appears to
have forgotten the password.
BTW - Users are able to use Citrix and I am able to use termianl services.
I just want to keep my event viewer clean.
--
Do NOT email replies as they do not benefit the community as a whole. Tag: One Care Public Beta Where's the Group(s)? Tag: 74214
Disabling Shutdown and Restart
Is there a way to disable shutdown but keep restart for the general user
population through GP. Administrators will need the ability to shutdown
while they are logged on to users computers. The computers will also have to
have shutdown disabled at the login prompt but not restart. We have several
tasks running throughout the night and some people just don't listen when
told to leave their computers on. Tag: One Care Public Beta Where's the Group(s)? Tag: 74213
One Care is in Public Beta. Usually that would mean a group or groups. Does
anyone know where they might be?