Certutil

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Administering a microsoft enterprise ca 2003: filtering certificates Hello, Does anybody know a tool or a script to filter certificates on a issuing certification authority in a more comfortable way as the ca microsoft management console is able to? There is no way to fast and easy find all certificates of a certain user. Every time you want to know the certificates of a certain user you must manually add a new filter or search manually for the username. Thanks for every hint, Christoph Tag: Certutil Tag: 63980
  - 2
    - Spoof Billing From MSN I found two emails in my bulk mail inbox regarding my MSN account saying that my credit card number had been turned down and I could resolve the problem by contacting "MSN Suport" via the (spoof) link provided. I wanted to forward the two spoof billing emails to MSN as there are probably people out there who have received this and think it's legit, but does MSN care? Tag: Certutil Tag: 63977
  - 3
    - Microsoft Security Bulletin Advance Notification Announcement is Hi, Microsoft Security Bulletin Advance Notification Announcement http://www.microsoft.com/technet/security/news/bulletinadvance.mspx Microsoft Security Bulletin Advance Notification for November http://www.microsoft.com/technet/security/bulletin/advance.mspx -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter/default.mspx Tag: Certutil Tag: 63959
  - 4
    - Administration password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: Certutil Tag: 63956
  - 5
    - Administrator password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: Certutil Tag: 63955
  - 6
    - Administrator password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: Certutil Tag: 63954
  - 7
    - MSN MESSENGER ON WINDOWS XP How do you disable automatic sign on - ie. it automatically allows others to click on '4444@hotmail.com' and the password is already entered. I don't want others to use my computer to have access to my email. Also, how do I remove the older version of MSN messenger when I've updated to 6.2 version? Thanks. Tag: Certutil Tag: 63953
  - 8
    - cyber stalking A person can watch another persons computer monitor through the internet. They can also track another persons events by remote. What countermeasures are available? I have a spyware removal program and can install a firewall. What else? Tag: Certutil Tag: 63952
  - 9
    - jerry I have children who can access the computer at any time. I've used the AOL parental controls but since I have broad band as my provider, I have no way to limit my children's use. I would like to find a way to shut down my system at a certain time each day, so the computer is locked off. Is there any software or windows appication that would allow me to do this ? Thanks for any information you may have. Tag: Certutil Tag: 63951
  - 10
    - W2K/WXP and USB Memory Sticks Is it possible to force ALL types of USB Memory sticks to use a specific drive letter regardless of which PC they're plugged into? E.x. At the moment we've had to permit users read/write access to drives D/E/F as some PCs have CD-Roms, some have CD-RW+CD-Rom and some have neither, meaning the USB memory stick takes the next available drive letter, can we force it to use drive G: for example regardless of what brand of memory stick is installed and what USB port it's installed into? (Assuming of course that drive G: does not already exist) We use Windows 2000 SP4 and Windows XP SP1a on an Active Directory 2003 Domain. Tag: Certutil Tag: 63950
  - 11
    - Hotmail Corruption Beginning yesterday (11/3) afternoon, after signing into my hotmail account, the system is not loading properly. Intermittently the system says it's "done" and there is no data on the screen (white screen), while at other times the "Today" and "In-box" will only partially load. Please help. Thx. Tag: Certutil Tag: 63942
  - 12
    - Restrict Folder Creation but not files How do i restrict users from creating more folders on a share where they have write access to. I have tried this solution but have no luck. "To open the Registry Editor, go to Start | Run, enter regedt32 in the Open text box, and click OK. Navigate to HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Shares. Select Shares and all of the folder's subkeys. Go to Security | Permissions. For the Shares folder and each of its subkeys, grant the Read permissions (at a maximum) to the Everyone group and all untrusted domains, and click OK." Please assit Tag: Certutil Tag: 63938
  - 13
    - Ad-Aware new update broken Ad-Aware, Win2000 and Win ME, AVG Free, Sygate Personal Firewall. Beginning a couple of days ago, Ad-Aware would no longer update. It downloads 5% of the new update and then says "update complete." This is the ref file dated 26-10-2002. That's right, 2002. Is anyone else experiencing this and are there any solutions? Tag: Certutil Tag: 63934
  - 14
    - XP client security I have a question concerning client security. We have a demo copier that can send scanned documents in a PDF format to a shared folder destination on a workstation in our local domain by means of either SMB or FTP. With SMB, the copier uses an older method of authentication (NTLM v. 0.12) so it is incapable of accessing a folder on our Windows Small Business Server 2003 which requires the digital signing. In order for this copier to send to a folder on our server we would have to disable the digital signing on the server. That is not an option. We need to keep the server secure. Since this device can access a folder on a workstation via SMB by the method described, my question is - will this scenario compromise the overall security of our network? Will the separation from the server by scanning to a workstation allow for greater security considering the logon limitations of the copier? The ultimate goal is to place scans in a common folder on the Windows Small Business Server 2003 that can be accessed only by authorized network clients - either locally or remotely. As I also mentioned, there is a possibility of using FTP to put scans on the workstation. Only the workstation will have to have an FTP server running to accept the scans from the copier. I had heard that we should not run FTP server software on our Windows Small Business Server 2003. How will this affect our network's security to run an FTP Server on the workstation? I know that our security is only as strong as the weakest link. I am curious about the implications of either method and the effect on our secure environment. Thank you for your answers. Marvin Tag: Certutil Tag: 63928
  - 15
    - Terminal Service encryption What type of encryption is Terminal Services sessions protected by, by default ? Assume launching a remote desktop session from a WinXP machine and connecting to a Win2000 and Win2003 Server. Tag: Certutil Tag: 63920
  - 16
    - SPAM from "myself" to myself I've recently been getting (via AOL only) SPAM messages for pills and such that have my own email address as the sender and recipient. Does anyone have any insights into this before I struggle with the AOL people. Is it possible to stop the real sender from imitating me in this way? Thanks ian Tag: Certutil Tag: 63915
  - 17
    - Security Event Messages Hello, Does anyone know of a good reference (web or book) that gives the meaning/definition of security event messages? I referenced Microsoftâ??s web site but does not provide what I need. Example: Event ID 618 â??Encrypted Data Recovery policy changed.â?? What does this mean? How was this generated? Event ID 612 â??An audit policy was changed.â?? I see quite a bit of these entries but no changes were made in the policy; this was generated by system account. I need a reference that explains why this happens and what it does? Any thoughts on a good reference for what I am looking for? Thanks Tag: Certutil Tag: 63911
  - 18
    - VIDEO STREAMING DOES NOT WORK The video streaming on" foxnews" no longer work on my computer.It comes on with a black screen. I had no problem untill a few weeks ago. we have tried everything, but to no avail. HELP!!! I received an e-mail that had freaky virus.Norton found and fixed it. Could there be a connection? I have windows xp Tag: Certutil Tag: 63909
  - 19
    - "A program is trying to automatically send e-mail..." workaround I have just installed SpamAssassin on my mail server. If it misses a Spam, I need to resend the spam to a particular mailbox to "Re Learn" the message as spam. Using Outlook, I have to Open the message (sometimes they are offensive), click Actions/Resend answer the "You didn't send this originally" warning, change the TO to "spam", click Send, Close the original message, and finally delete it. I wrote a macro For Each objMailItem In objExplorer.Selection objMailItem.To = "spam@visioncomm.net" objMailItem.Send Next objMailItem so I could just select a bunch of False Negatives and click one toolbar button. I guess I don't really mind the "A program is trying to automatically send e-mail..." dialog (although I'd prefer not to see it) but the 5 second delay before you can click YES is particularly annoying. I wrote a rule that does this, but it can't be called automatically. I have to move all the FN spams to a particular folder, click Rules Wizard, Run Now, confirm the correct folder is selected, select the Spam rule, and Ok, then Cancel. Also way too much work. Anyone have any ideas on working around this silly 5-second wait? Sending/Deleting a selected few messages another way? Tag: Certutil Tag: 63905
  - 20
    - security: 4 Millions Domains data with Category Successfull Internet and Direct Marketing products on www.promotionsite.net * NEW * DOMUS Domains Toolkit Fall 2004 - Unique on the Net 4 Millions "Whois" Domains data with Expiration Date and Category*. Ultimate Version (October 2004) - Our best rate starts from US *$149*. A wonderful tool for Internet and Direct Marketing. Available in Basic, Advanced and Full Editions. It contains a domain database with 4 millions *FRESH* October 2004 New records .com, .net, .org. 4 Gigabytes MS Excel data zipped on CD-Roms/Dvd. Compression 3:1. MS Excel or Text tab delimited data files Available! Each record include the full "whois" fields info and homepage info: Domain Name, Registrant Company, Contact, Address, City, Tel, Fax, Email, Administrative Company, Contact, Address, City, Tel, Fax, Email, Technical Company, Contact, Address, City, Tel, Fax, Email, Billing Company, Contact, Address, City, Tel, Fax, Email, Zone Company, Contact, Address, City, Tel, Fax, Email, Name Servers until 6 name servers with IP addresses Record Created on Date, Record Updated on Date, Record *Expires* on Date Domain Title, Domain Description, Domain Keywords (*Category*), First 300 Words in the Domain Website Homepage. Download Free Demo, Screenshot, see Products Details or Order On-Line at www.promotionsite.net. Available On-Line many other Promotion Products. Instant Shipment or Download On-Line Registered Versions available! Best Regards, www.promotionsite.net The Best place where to find Internet Marketing Resources on the Net. --- This is a one-time only information. The enrolled (final) text of S. 877 as it was passed by the Senate on November 25, 2003, and agreed to by the House of Representatives on December 8, 2003, allows e-marketers to send UCE as long as the message contains an opt-out mechanism, a functioning return e-mail address and the legitimate physical address of the mailer. The bill was signed by the President on December 16, 2003, and takes effect on January 1, 2004. Your address isn't in any of our archives, however for Can Spam Act 2003 Compliance, you can remove at http://www.promotionsite.net/remove.html Tag: Certutil Tag: 63904
  - 21
    - User profiles /SID Problem Description: My Windows 2000 Server had a hardware failure. I had to contact dell to send replacement parts. I had to reinstall the server OS. Then I connected my XP workstations to the server. I changed to a workgroup and then re-attached to the server. Now my User profile can not be accessed. \my computer\properties\advanced\user profile indicates the "Account unkrown" I have reattached to the server and can not get to the profile. My Backup software does not read my tapes even though they verified after every backup. I need my profile and My Documents back. What can I do. My network has been down for over a week. I am writing this email from my laptop. It too was affected. I have five computers (XP Pro) that are affected. Has anyone used regedit to change the user profile? What are my options? -- thanks Tag: Certutil Tag: 63897
  - 22
    - Excessive Outgoing Packets Sent When I click on my Network Connection i see excessive packets sent. It always seems to be in increments of 4 Gig. For example, in one day, with minimal to no computer use, my computer will have 1 K packets received and 24 Gig sent. I am running Windows XP Home Edition w/ SP2. I have a cable broadband connection with a Linksys Firewall. I have always used Norton Securtity, and it never detects a virus or such. Anybody have any ideas of what might be going on? I have also used Spybot to try and troubleshoot, but haven't found much. Thanks Tag: Certutil Tag: 63890
  - 23
    - LuComServer_2_5.exe After getting Norton Internet Securuity update yesterday, my computer to day first "says": ccApp.exe is attempting to access the internett and later: LuComServer_2_5.exe is attempting to access the internett. Both times asking What do you want to do? permitt or block. What's up? Knut-Frode Lid Tag: Certutil Tag: 63888
  - 24
    - Outlook have a Whitelisting Policy? I see MSN/Hotmail use IronPort's Bonded Sender Program. What about Outlook? How do legitimate publishers of solicited bulk email apply for similar whitelist status with Outlook? Thanks. Tag: Certutil Tag: 63886
  - 25
    - Revoking ability to set default printer? Is there any (commonly used) way to revoke a user's ability to set their default printer, such as security policies, etc. Thanks in advance Tag: Certutil Tag: 63881
- Next
  - 1
    - spyware nuker I have tried several spyware programs and use online scanners as well-use ad-aware as my main one. I downloaded spyware nuker 3 days ago and it found 213 things in the registry- 2 were hot bar and the many others were web game channels (it did not specify wild tangent but I used to have that til I got rid of it...or think I did) Those of u who know about spyware nuker know that you have to register and pay to have the items removed.Same with bazooka scanner (which only found hotbar)- Of course I could manually remove them. They are ALL in the registry. WHy is it that adaware,ss&d,pest patrol,Hijack this, cwshredder, etc did not find the same ones that spyware nuker did?? 213 objects is alot. Are they an honest spyware company??Opinions please will be appreciated,thanks Tag: Certutil Tag: 63878
  - 2
    - malignant process I get a window labeled process scanner that says "the program has detected 1 malignant process. It is recommended that you remove these proceses before proceeding. " I click yes to preceed and the window disappears and nothing happens. It points out that "realsched.exe" is the issue. I have ran a search and deleted it but it still comes up as the problem. How can I resolve this problem? I have also run Spybot/spybloc and spyware doctor. These do not seem to improve the situation. -- Paul Tag: Certutil Tag: 63876
  - 3
    - MBSA shows two administrator accounts not listed in users&groups control panel BACKGROUND: I have a new XP system that I just recieved from my corporate IT department. While the hardware is new, there are signs in the registry that their "gold image" that they used to ghost my computer was infected with a backdoor virus about a month ago (I know you don't need to tell me!). Our INTRAnet is under daily virus attack, and they seem quite content to spend all day cleaning up user systems. But I would like mine to be secure... I have added all the security patches that they refuse to put on their gold image, and have run microsoft baseline security analyzer (MBSA) to check. SO ANYWAY - HERE IS THE QUESTION... When MBSA runs it claims that there are four administrator accounts on my system. 1) local machine\administrator 2) corporate domain\"me" 3) corporate domain\EST 4) corporate domain\"1300 it" Should I be worried? Tag: Certutil Tag: 63871
  - 4
    - What could be on 25 and 110? Hi! There is one Windows Server 2003 machine with system firewall running. However while scanning this machine (using GFI LANguard N.S.S., Shadow Security Scanner and Angry IP Scanner) it shows that also ports 25 and 110 are opened. There were never neither SMTP nor POP3 service installed, netstat -ano shows no process listening on them and when I try to telnet to these ports it's also unsuccessful. So what could be a reason of such strange result? Regards Silmar Tag: Certutil Tag: 63864
  - 5
    - rasmans.exe I found rasmans.exe in system32. It has been identified as trojan, maybe. So I don't know what to do, it seems there is no information about it on the Internet. I use windows xp home edition Thank in advance. Beppe Tag: Certutil Tag: 63863
  - 6
    - Win XP I am using win XP. I cant see my program windows which are supposed to be on task bar, they are kinda hidden. IF I do Alt + Tab I do see them... Can anyone tell me what is my problem. Thanks Salim Tag: Certutil Tag: 63862
  - 7
    - What is this batch file missing (for privacy cleaning of a windows PC) I started writing a batch file for quick cleanup of an WinXP PC. My batch file is below. I'm no expert so I am sure stuff is missing (what is missing)? The goal is a decent batch file which removes most privacy concerns. Let's say the PC should be clean enough to hand to your boss or mom. How can we improve this cleanpc.bat script? Is another cleanpc.bat script out there that is better for starters? How can we add variables (eg for the username & mozzilla directory)? Orak Listalavostok echo off erase /s/q/f "c:\temp" erase /s/q/f "c:\documents and settings\administrator\recent" erase /s/q/f "c:\documents and settings\administrator\my recent documents" erase /s/q/f "c:\documents and settings\administrator\local settings\my recent documents" rmdir /s/q "c:\quarantine" erase /s/q/f "c:\windows\downloaded program files" erase /s/q/f "c:\windows\temp" erase /s/q/f "c:\windows\cookies" erase /s/q/f "c:\windows\history" erase /s/q/f "c:\windows\tempor~1\content.ie5" erase /s/q/f "c:\windows\recent" erase /s/q/f "c:\windows\applog" erase /s/q/f "c:\windows\desktop\*.tmp" erase /s/q/f "c:\windows\prefetch\*.*" erase /s/q/f "c:\documents and settings\administrator\cookies" erase /s/q/f "c:\documents and settings\administrator\local settings\history" erase /s/q/f "c:\documents and settings\administrator\local settings\temp" erase /s/q/f "c:\documents and settings\administrator\local settings\temporary internet files" erase /s/q/f "c:\documents and settings\administrator\local settings\application data" erase /s/q/f "c:\documents and settings\administrator\userdata" erase /s/q/f "c:\documents and settings\administrator\my recent documents" erase /s/q/f "c:\windows\system32\catroot2\*.log" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\cache" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\\mhy0feee.slt\cache.Trash" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\cookies.txt" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\downloads.rdf" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\history.dat" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\bookmarks.html" erase /s/q/f "c:\windows\debug\usermode\userenv.log" erase /s/q/f "c:\windows\debug\usermode\userenv.bak" Tag: Certutil Tag: 63861
  - 8
    - spyware/cannot uninstall I have installed several progs from a win xp mag cd and when I run yahoo antispy it tells me that I have gator/claria, trouble is I cannot get rid of it how do I do this without having to uninstall all of the progs Tag: Certutil Tag: 63856
  - 9
    - Offer any Help for XP When I double click to open anything, my computer automatically opens Search, for searching files on my computer.... anyone know how to fix this? The only way I can open files or click icons is by right clicking and chosing open from the menu that appears... I am using XP Tag: Certutil Tag: 63852
  - 10
    - MP3W.EXE This program is displayed on my Windows 2000 Professional Task Manager Processes using 95-98% CPU time. Is this a system file? Is it a virus? Norton doesn't recognize it. AdWare SE doesn't recognize it. Explorer Find can't find it on any of my hard drives. Does anyone know what this is? Tag: Certutil Tag: 63850
  - 11
    - Lost Property Window and MP3W.EXE I have noticed a process in the Task Manager called MP3W.EXE running up to 95-98% of my CPU cycles almost constantly. I have run AdWare and Norton's Antivirus to detemine if this was a foreign file to no avail. To further investigate, I tried to isolate the program through the Services folder by changing through the properties most services running as "Automatic" to "Manual" and then stopping them. With most of my services now "Stopped" and the MP3W file still running, I have found I can't change the properties from Manual to Automate because the property window will not display. I have tried to reload Windows 2000 Prof to resolve my dilemna but Windows installer says there is another installation in process and terminates. I have searched all hard drives for MP3W.EXE using Explorer Find but to no avail. I fear I have compounded the problem and now can't tell if this MP3W is a virus or a system file. Is there anything I can do to resolve this situation? Tag: Certutil Tag: 63849
  - 12
    - Applications that require Internet access I am running an application that must connect to the Internet. I can configure proxy settings. However, if the firewall is configured to prompt that an external connection is being made, the application cannot complete its Internet access procedure. How should the firewall policies be configured so that the application can access the Internet without intervention. Tag: Certutil Tag: 63840
  - 13
    - Are credentials sent via a client browser->IIS6.0 if using 'integrated authentication' protected by Kerberos? Imagine I am not using SSL or a certificate.I go to IE and launch http:\\ MyServerSite The authentication in use is "Windows integrated authentication". Since I am not using SSL, if somebody uses a packet decoder to grab data from that connection, what type of information would be retrievable ? Is the login information/password protected by Kerberos in this scenario ? Tag: Certutil Tag: 63839
  - 14
    - enhancemysearch browser hijack? I have a friend how has a Windows Media Edition XP. He goes to use the Internet and gets pop-ups until IE fails. All the sites say enhancemysearch.com. I have ran 3 different virus scans I have ran 3 different "spyware" fixing tools Can someone help me please? Thank you, Craig Tag: Certutil Tag: 63838
  - 15
    - win2k3 and isa2k vulnerability scan I ran a nessus (free open source vulnerability scanner) scan on my 'public-ip/web server'. It was able to identify the version of ISA and IIS that i was running. It also reported a MS Predictable TCP sequence vulnerability, i dont know if it was referring to Win2k3/IIS 6.0 or ISA2K. The recommendation for the tcp sequence vulnerability was to get a patch from the vendor? It also recommended to use URLSCAN to hide the identity of IIS 6.0? Does anyone know how i can get that patch from MS for the tcp sequence vulnerability, and how to configure urlscan to hide the IIS version im using? Tag: Certutil Tag: 63837
  - 16
    - L2TP over IPsec VPN and nat-t I am having problems making a L2TP over IPsec VPN work when the remote client is behind a NAT device. The VPN uses IPsec certificates and this all works good if the remote user is directly connected to the internet (i.e. the machine has a public IP address assigned), but as soon as the computer is behind a device and receives a private IP address, the VPN tunnel times out. (The IPsec creates successfully, but the L2TP connection fails...error 682). These remote clients are connecting a Netscreen 25 for their VPN tunnels. This device supports nat-t. The L2TP connections for this device only work in "transport mode". One other thing, this process works just fine if I have the remote clients connect just using an L2TP tunnel (no IPsec). Then there seems to be no problem with NAT and the remote clients. I have tested this VPN setup using windows 2000, windows XP pro, and windows XP home edition. All three OSs respond the same. I am wondering if there is some type of setting I need to modify in windows that will allow IPsec to function in "transport mode" or at least apply nat-t to the L2TP connection. Thanks in advance, Adam Tag: Certutil Tag: 63823
  - 17
    - PKI I don't know if this is the right forum to post this qestion, but I couldn't find a specific PKI Newsgroup...so here goes. To make a long post short, we have deployed a enterprise sub ca server that is issuing certificates to our test clients. Our application develpor created logic that connects to the certificate database when a user enrolls for a certificate to see if a certificate has been issued for this particular user. It seems that after 20 connections to the certificate database, you get the following error message: "Server was unable to process request. And attempt was made to open a Certification Authority database session, but there are already too many active sessions. The server may need to be configured to allow additional sessions." After about 1 minute, you can make valid connection attempts again. Does anyone know of a concurrent connection limitation when connecting to a certificate database? If so, is there a way you can expand this connection limit? I can't seem to find anything on the web that lists anything about his issue for PKI is not as well documented as most of the technologies out there. Thanks! Tag: Certutil Tag: 63822
  - 18
    - Local Area Quarantine System Hello All, I am looking for a system that would quarantine users, run some sort of checking rountine before allowing them full access to internal systems. The Network Quarantine Control in RRAS does this for remote VPN connections but I am looking for an internal network system. Does Microsoft have this functionality for internal AD logon authentication? Tag: Certutil Tag: 63821
  - 19
    - Password must meet complexity requirements on Domain Controllers Hi there, Can anyone help me to retrieve the value of â??Password must meet complexity requirementsâ?? on Domain Controllers? The location for this setting is: Start->Program->Administrative Tools->Local Security Policy-> Security Settings->Account Policies-> Password Policy->Password must meet complexity requirements. This has two settings â??Local Settingsâ?? and â??Effective Settingsâ??. The â??Effective Settingsâ?? has higher priority then â??Local Settingsâ??. One can enable the â??Effective settingsâ?? by following the path: Start->Program->Administrative Tools->Domain Security Policy-> Windows Settings->Security Settings->Account Policies-> Password Policy->Password must meet complexity requirements. I need to retrieve the value of â??Password must meet complexity requirementsâ?? for both â??Local Settingsâ?? and â??Effective settingsâ??. Any help in this regard would be appreciated. Thanks. Suchitra Gupta. Tag: Certutil Tag: 63818
  - 20
    - MS04-038 cumulative patch for IE5.5 SP2 on WinNT4.0 server ? The MS04-038 mentioned that WinNT4 SP6a will be affected and when i ran the hfnetchk on my system, it had requested for the cumulative updates. But the problem is i cou'lnd find the cumulative updates release by MS for IE5.5 SP2 (WinNT Server) nor one for WinNT server. Is MS going to release the updates later or i have miss out the download someone? Tag: Certutil Tag: 63817
  - 21
    - Run As for Internet Protocol How do I open and configure Internet Protocol (TCP/IP) logged on as a regular user? Is there a way to do a â??run asâ?? with administrative privileges to some folder that contains Internet Protocol (TCP/IP)? Tag: Certutil Tag: 63808
  - 22
    - crashes & freezes I ran Ad-Aware and got 9 Alexa critical objects tac 5 - and 164 tracking cookies tac 3. What do I do now. Should I delete them? Quarantine them? Will that affect the running of any programs? I am clueless. ...and this is just the first of a list of things I am told to do because I am having 6 to 9 crashes and freezes every day Anyway - one step at a time. what should I do with these things. They are under Critical objects but they all say "low risk" Windows 98se, IE6, Dell xpst450 5 y.o., McAfee VS & Firewall. Ginny Tag: Certutil Tag: 63801
  - 23
    - Unwanted files downloaded Whenever I navigate links on MSN.com, I get a file called pxchyhf.exe downloaded into system32, Run - in Registry and in my processes. The properties onf the file say: intallation file for http://www.callinghome.biz. Can anyone tell me how and why I get this file everytime I open a web page and how to stop it? I even had the MSN pop up blocker installed. Thanks for any and all help. Tag: Certutil Tag: 63798
  - 24
    - crashes and freezes I ran Ad-Aware and got 9 Alexa critical objects tac 5 - and 164 tracking cookies tac 3. What do I do now. Should I delete them? Quarantine them? Will that affect the running of any programs? I am clueless. ...and this is just the first of a list of things I am told to do because I am having 6 to 9 crashes and freezes every day Anyway - one step at a time. what should I do with these things. They are under Critical objects but they all say "low risk" Windows 98se, IE6, Dell xpst450 5 y.o., McAfee VS & Firewall. Ginny Tag: Certutil Tag: 63796
  - 25
    - Comparing how effective is a PKI vs. Certificate Authority implementation I understand the definition that PKI provides authentication, confidentiality, nonrepudiation and integrity of messages exchanged. I understand PKI requires a digital certificate, issued by a third party or a Cerficate Authority. Besides the CA, PKI have other components as well. The Certificate Authority is an 'entity' that issues the digital certificates. My questions are: a) Imagine I setup only a CA (server) in my internal network (Win2000 AD) to issue digital certificates around. For example, that way people can launch browsers via HTTPS and have data encryption protection when using our Intranet resources. Is that an effective solution by itself, or should I have to setup a complete PKI solution to take advantage of publick keys ? What do I exactly have to gain by implementing a PKI solution instead of only implementing a CA server in my internal network ? (the latter seems pretty straightforward to implement) b) Does a Certificate Authority setup in my internal network would be a countermeasure against "spoofing" ? (in this case, imagine somebody manages to setup a rogue server with an IP that is not the actual production server). Tag: Certutil Tag: 63790

Hello

Does anybody know if it is possible to list all user certificates of
all user profiles who exists on an windows xp professional client
machine?

Is it possible with certutil.exe or does there exist an other tool or
command?
Does anybody know a complete documentation about certutil in one (1)
document?

I could imagine that there is no way to get all certificates because
of security reasons --> private key configured exportable, e.g. But
anyway, maybe someone knows a solution.

Thanks a lot

Christoph

Top

Re: Certutil by David

David
Sat Nov 06 08:12:35 CST 2004

The problem you will encounter is that each profile is ACL'd for the
specific user as well as the private keys DPAPI protected, and you will not
have permissions, even as admin to enumerate each of those profiles. So,
no, I don't know of a tool to do this at it would require changing to
security of the user profiles to enable it.

--

David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"Christoph Buchser" <ch.buchser@gmx.ch> wrote in message
news:5791a602.0411050025.45bdd85e@posting.google.com...
> Hello
>
> Does anybody know if it is possible to list all user certificates of
> all user profiles who exists on an windows xp professional client
> machine?
>
> Is it possible with certutil.exe or does there exist an other tool or
> command?
> Does anybody know a complete documentation about certutil in one (1)
> document?
>
> I could imagine that there is no way to get all certificates because
> of security reasons --> private key configured exportable, e.g. But
> anyway, maybe someone knows a solution.
>
>
> Thanks a lot
>
> Christoph

Top