Computer Access

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - User account lockout connecting to Exchange Hello, We have the following scenario: XPSP2 home PC not on domain Cisco VPN Exchange 2000 Outlook 2007 User logs on locally to home machine, then connects through VPN, opens Outlook which prompts for domain credentials, which he has indicated he is sure he has typed correctly (and webmail works no problem). Account then locks out. Account is enabled and not expired. Does anyone have any suggestions, Google didn't turn up much. Tag: Computer Access Tag: 94476
  - 2
    - OneCare forums This web site for OneCare forums does not seem to exist on my IE7 browser for XP2. I have accessed it many time before July, but not recently. What happened. http://forums.microsoft.com/windowsonecare/default.aspx?siteid=2 -- Robert Tag: Computer Access Tag: 94471
  - 3
    - ms capi to openssl Hello , I am having RSA Public & Private keys & encrypted data on windows machine. Both generated with Ms Capi. I want to decrypt the data on linux using openssl. [1] So how do I move the private key from capi to openssl ? Do I need to change endian ness for private key ? What do u exactly mean by changing endian-ness ? It is complete reversal of bytes or just swapping of bytes within word. [2] Before decrypting a data , do I need to reverse the bytes ? What should I do , I am badly stuck . Currently its a nightmare for me to get this working. Thanks, - Bhaskar. Tag: Computer Access Tag: 94468
  - 4
    - KB937143 has killed my server side ActiveX controls... Why? Hello, I have an old ASP application that uses server side ActiveX controls called from serverside javascript. MS Update KB937143 has made it so these no longer work. Does anyone know why, or have any idea how to correct this (other than un-installing KB937143)? Uninstalling does resolve the problem, by the way. I just want to know what this update changed so I can fix my problem. Thanks! Tag: Computer Access Tag: 94440
  - 5
    - Account should be locked out.....but isn't! Hi I am security auditor for a Windows 2003/2000 mixed-mode domain. Client workstations are XP SP2, and all domain controllers are 2003 server. The default domain group policy defines the account lockout policy at a threshold of 6 failed logons. Recently I have noticed a large number of failed logons for a user who has Domain Admins membership. With 1154 failures in 2 days, I would have expected the account to have been locked out but it isn't. The failures are all 529/Type 3. I have checked for settings that block inheritance of the default domain policy but there are none. How can the account have failed logon so many times and not triggered the lockout? Tag: Computer Access Tag: 94438
  - 6
    - Which Registry Values store these Windows Firewall GPO settings...... In PolicySettings.xls - a spreadsheet that lists all GPO settings , some settings have multiple registry value paths associated with them. In GPO Editor , when enabling these settings , a user must specify more than whether the setting is Enabled/Disabled . Are all these registry paths required to store 1 Windows Firewall GPO Setting ? For instance:: 1.For the policy setting - Windows Firewall: Allow remote administration exception; there are 2 registry values associated : HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile \RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft \WindowsFirewall\DomainProfile\RemoteAdminSettings!RemoteAddresses Are both neccessary for the GPO setting to be Enabled. To determine if the setting is Enabled, isn't the first 1 sufficient? Similar case for : Windows Firewall: Allow file and printer sharing exception Its 2 registry values are: 1] HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile \Services\FileAndPrint!Enabled, 2] HKLM\SOFTWARE\Policies\Microsoft \WindowsFirewall\DomainProfile\Services\FileAndPrint!RemoteAddresses If the 1st Registry value is set to enabled, is it neccessary to check for the Address List.What will the behaviour be , if only the 1stregistry value is present? 2. On enabling the Logging setting in gpedit.msc , 2 registry values get created - LogFileSize & LogFilePath & on disabling the setting, both registry values get deleted If 1 registry value say LogFileSize is deleted, is Logging enabled/ disabled effectively? In GPO Editor, the setting before the value was deleted is maintained.i.e. To check if logging is enabled using a script, are the values of both registry values[LogFileSize & LogFilePath] required? Tag: Computer Access Tag: 94415
  - 7
    - Updated critical patches and rebooted server (server did not reboo Hi, I applied couple of critical patches from April till now as the previous admins did not install any of these patches. But, one of my domain controller (which holds the Global Catalog) was rebooted after the patch install. Reboot command got issued, but it did not time out when I tried pinging with a -t for almost 30 minutes. So, I thought something is wrong. I tried RDP in again and could not. I have noticed this RDP problem cropping up from sometime in October of last year, when I applied patches and after that I could not RDP onto the server. I will have to reboot the server twice to get in through RDP again. Well this is not my main concern, but my main concern is the above problem. I am not physically at the site to look at the server what is going on with my Domain Controller, which I might go in tomorrow to work or on Monday morning if nobody calls in with login issues, I might reboot the server again. If anybody could let me know why all the domain controllers rebooted and this one did not. I have couple of event logs which I can throw it in here, if needed. thanks in advance Tag: Computer Access Tag: 94411
  - 8
    - Security risk when going on line to reinstall antivirus prog. McAfee antivirus has blocked a program from sending emails from my computer because of activity which might indicate a worm is on my computer. To remedy this problem McAfee have asked me to uninstall and then reinstall McAfee from my on line account and not from the installation CD. I pointed out to McAfee that I was concerned that if there is a worm on my computer it could run riot after I uninstall the the McAfee Security center and then go online unprotected in order to carry out the reinstallation. The reply I got From McAfee was: "I would suggest you to please uninstall McAfee with the help of removal tool and reinstall from your online account and not from the CD." That reply has not allayed my concern. I have scanned my computer with McAfee AntiVirus which (although the block in Windows Mail is still in place) is currently reporting only 6 Potentionally unwanted Programs and adds that no action is required. Also Spybot gives a clean bill of health. AD-Aware reports a couple of MRU objects which I have quarantined on a number of occasions but they keep returning. The only program that has caused me a little concern is a-Squared Free which reports: Trace.directory.ebay 1 traces - med. risk (trace C:\program files\ebay\ebay toolbar 2) and Trace.file.ebay 2 traces--med risk (Trace:C:\program files\ebay\ebay toolbar 2\ebaytb.dll) McAfee has asked me to remove all the third party programs from my computer. My McAfee account is paid up to May 2010. Is it safe for me to proceed with the instructions I have been given by McAfee? Thank you Tag: Computer Access Tag: 94409
  - 9
    - How to get rid of an unwanted homepage? Somehow or other, while browsing, my wife accepted some kind of download from a site called websecurity.com. Apparently, their ad came up as a pop up, saying that our computer was under some kind of virus threat. As a result, settings have been changed, making this site our homepage and we are unableto change it. Tried going to internet options but cannot change homepageand or get rid of their icon on our toolbar Can anyone help? Thanks Alana Tag: Computer Access Tag: 94406
  - 10
    - Wex Tech Answerworks - How can I deinstall it? Found this one too and it won't let me to a remove from the control panel. Help ! Tag: Computer Access Tag: 94391
  - 11
    - How can one tell if MRT is legitament or not ? I found MRT*.* in folder titled "bdd19dcc3d813ebf6013b85177b8" Searching Goggle says it is a Virus/Malware. Others say its part of MS program. Which is correct ? And if it's a Virus/Malware how to I get rid of it? Tag: Computer Access Tag: 94390
  - 12
    - fingerprint scanner with multiple users I just got a microsoft keyboard wtih fingerprint scanner but multiple people use it. Is there any way to store information for multiple people or just one person per computer/scanner. Tag: Computer Access Tag: 94387
  - 13
    - Windows Firewall I can't turn my "Windows Firewall" on, the check boxes so i can turn it on are faded and so are the words right next to the boxes or circles. There is a check next to Off (not recommended) though. But i want to turn it on but i can't. Tag: Computer Access Tag: 94386
  - 14
    - Protecting e-mails I work for a church that often deals with sensitive/personal issues that could have a great deal of liability involved if such messages are not handled properly. I thought this used to fall under the category of DRM, but this seems to have been comendeered to pertain to mostly music. I have never dealt with these issues before, so I am unaware of how to set this up. First, is DRM the appropriate terminology? More importantly, how do they begin makinging e-mail flagged as non-printable, non-forwardable, etc.,? They are running Windows SBS 2003 with all service packs applied, Exchange 2003 Server, and run Outlook 2003 on our workstations. Does the process begin on the server, or does it begin at each worstation? Is/are there (a) white paper(s) that discuss how to set this up? Anyone want to express their opinion or describe their experience in working with this? -- Gerald A. Wooten Phaser Computers Tag: Computer Access Tag: 94385
  - 15
    - An NTE_BAD_DATA error returned by CryptDecrypt() Hi, May I ask a question about an NTE_BAD_DATA error returned by CryptDecrypt()? I am working on an application of SSL client/server connection using Microsoft Certificates and Crypto API. I'm running Windows XP. Currently the SSL connection between my client and server works, but when I use IE 6.0 (SSL 3.0/TLS 1.0) to connect to the server, the server failed with an NTE_BAD_DATA error at CryptDecrypt(). This is the step where the server tries to decrypt the pre-master secret encrypted by IE. In my own client code, I use CryptEncrypt() to encrypt the pre-master secret with the server's public key. Not sure if IE uses the same functions.. Below I've included all the functions I called to decrypt the encrypted message in the server side: (1) CryptAcquireContext(&hProv, mcskp->szKeyContainerName, mcskp->szProvName, PROV_RSA_FULL, 0); (2) CryptGetUserKey (hProv, AT_KEYEXCHANGE, &hKey); (3) CryptDecrypt(hKey, 0, TRUE, 0, (BYTE *)tempbuffer, &tempbufferlength); <--- FALSE was returned here, and NTE_BAD_DATA (80090005) was reported by GetLastError(). * I've tried four CSPs, but I got the same error in all of them: "Microsoft Enhanced Cryptographic Provider v1.0", "Microsoft Strong Cryptographic Provider", "Microsoft RSA Schannel Cryptographic Provider", and "Microsoft Base Cryptographic Provider v1.0". * The pre-master secret is supposed to be of size 48 bytes, so setting the Final flag as TRUE should be correct. Because NTE_BAD_DATA indicates that the data to be decrypted is invalid, I logged the value in 'tempbuffer' as below. ('tempbufferlength'==128) 5F EB 8C 0B D7 C2 7C C0 94 8F F9 0F 85 33 30 86 73 B6 DA BA 11 E3 93 AE 3C 02 28 56 E5 06 B4 49 83 2F 44 1B C5 CF C0 21 95 BC 53 0B 03 1C 49 C9 49 0F A6 69 B8 E1 22 9F 04 A2 08 68 43 63 9D 69 53 57 79 C9 FE 5C 02 72 BB 4F 1B 7D EF EB 16 53 E3 62 1A C0 83 D4 71 C5 89 52 E9 1D FE 65 DB C4 CE 33 75 F1 D0 54 E0 87 59 14 43 E5 5E 1C C6 49 62 A7 D4 EC 67 D4 73 7C BB 5F F5 FB 08 EA AC 62 I intended to check why it's invalid using the server's private key, but I don't know how to print the value of a HCRYPTKEY variable or how to learn it from the certificate. I created the user certificate and its trust point, a self-signed certificate, by the following commands: * makecert -pe -n "CN=Trusted" -r -b 08/01/2007 -e 12/31/2010 -sp "Microsoft Strong Cryptographic Provider" -sky exchange -ss ca * makecert -pe -is ca -in "Trusted" -n "CN=User" -b 08/01/2007 -e 12/31/2010 -sp "Microsoft Strong Cryptographic Provider" -sky exchange -eku 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2 -ss my May someone kindly advise what could be the problem in my case? Your help would be much appreciated. Thanks, Sean Tag: Computer Access Tag: 94383
  - 16
    - ActiveX controlls blocked on IE Windows XP Home SP2 AVG antivirus, Windows firewall. When browsing pages with ActiveX controlls the IE information bar reads: "Your security settings do not allow Web sites to use ActiveX controls installed on your computer. This page may not display correctly. Click here for options." Clicking on the bar, the ONLY option available is Help. The option to install or allow ActiveX controlls is not there. I have tried everything I could find here and on the net to fix this problem and nothing works. Reinstalling XP is NOT an option. The PC is 100% free of malware and completely up to date (WindowsUpdate works just fine as you may notice). Creating a new user account does not fix the problem, the blockage is machine-wide. Help is needed ASAP! Thank you for your reply. -- "There are no shortcuts to a job well done" A+, Network+, MCDST Certified Technician. Tag: Computer Access Tag: 94376
  - 17
    - Password protect files that can be edited As a security measure, I placed all of my financial files in a zipped compressed folder and protected the folder with a password. Now I find the files have been changed to Read-Only and, as such, they cannot be brought up to date, or edited. I have not been able to change the file properties, and do not know of any procedure to follow to edit a file other than remove the password protection, edit a file, and then go through the procedure of compressing and password protecting the file again. Does anyone have a more realistic solution to protecting the privacy of sensitive files while maintaining an easy method of editing? -- Robert Tag: Computer Access Tag: 94374
  - 18
    - Assign USB ports to user's session Windows XP I need to know, if is possible assign one USB port to user's session Windows XP. I have this question because need restrict some user's account for use webcam. If this is possible, how I do it? I REAFFIRM, I don't like to restrict or disable access the ports (http://support.microsoft.com/default.aspx/kb/555324), I need only ASSIGN "X" USB port to user's session windows xp Any help is highly appreciated. thanks in advance. Bladimir Gambin Santa Marta - Colombia Tag: Computer Access Tag: 94372
  - 19
    - Phishing We just received new laptop with Vista Home Premium. It also had Norton Internet Security 2007 installed. Now get two pop-ups. The one from NIS reads: Norton Internet Security is not currently your default phishing filter. Would you like to make it your default phishing filter? YES NO (Don't ask me again.) ======= I've also received a pop-up from MS stating something to the effect: "Turn ON automatic Phishing Filter Turn OFF automatic Phishing Filter" I just close (X) the box. Which one should I choose? The MS or NIS filter to click "YES" to? Does anyone know? Tag: Computer Access Tag: 94371
  - 20
    - Fingerprint Reader Not Recognizing Log In Pages. I really like this gaget (Microsoft/Biometric Reader), but I find it does not recognize certain sites' log in pages. On these sites, there are no other screens to log in on. Is there any way to work around this problem? Thanks Tag: Computer Access Tag: 94368
  - 21
    - tracking copy transaction Hi Is there a way to track "copy" transaction (copying of files) from one folder to another folder. I'm trying to trace who had copied files from a shared folder (only 1 user was granted read/write access to this folder) to a public folder in Win2003 server. This user who had been granted access to the shared folder advised that he did not copy it to the public folder, thus someone had illegally access his folder and copied those confidential files. we tried viewing the app/system/security logs from event viewer but it doesn;t help much. Thanks for any advice. -- asterisks~ Tag: Computer Access Tag: 94362
  - 22
    - using WSUSSCN2.CAB Hello, I am trying to find a way to obtain the list of patches and security updates that should be installed for specific Microsoft operating systems and applications. It has to be some sort of list, which depending on the operating system or application given, it brings the list of patches or updates that should be installed. I would like to know if this information can be obtained from the WSUSSCN2.CAB file and how. The KB article 927745 brings some information on this issue, but I find it quite cryptic and incomplete. Using MBSA and MBSACLI are not an option, because they both require administrator rights. Thank you for your attention! Tag: Computer Access Tag: 94361
  - 23
    - mrt.exe I just did autoupdates along with the Malicious Tool thing. I found an mrt.exe on my C drive but it's dated 8/2/07. Is that normal? Tag: Computer Access Tag: 94355
  - 24
    - Malicious Software Removal Tool - signs that it was running I just did autoupdate and included the removal tool for the first time. Did it run while loading all the other updates? It's supposed to, but I expected it to take longer, since it scans the whole disk, doesn't it? But the whole update took, as usual, only 5-10 minutes. Tag: Computer Access Tag: 94354
  - 25
    - System Crash and Data Recovery Anyone here knows how to recover data from a backup NTFS drive? I use the drive to back up my data. However, after system is crashed and reinstalled, some files is not accessible anymore. I found some file saved a few months ago is ok. Those saved recently are not accessible. I am not sure what setttings have been modified. Appreciate the help to let me know how to recove the data. Tag: Computer Access Tag: 94353
- Next
  - 1
    - Unable to log on - Unknown Admin Password Hi To explain the situation, we currently have a Windows Storage Server 2003 R2 which has been reporting errors of â??Windows cannot determine the user or computer nameâ??. This has been experienced previously and overcome by adding the server to a Workgroup, rebooting, logging on to the server locally, then reconnecting the server to the domain. However, unfortunately the particular server in question was configured by a contractor who, predictably, never gave us the local password. Therefore I currently have a Storage Server which is no longer on our Windows 2000 domain and which I am unable to log onto to reconnect to the domain. As i'm sure you will agree it is a bit of a problem! So my questions are: a) is there any way to reconnect the server to the domain without logging on locally? b) if the answer to the above is no, what is the best way to recover the local administrator password? c) Any other suggestions? I would be very grateful for any advice anyone could give me with this. Many thanks James Tag: Computer Access Tag: 94350
  - 2
    - Microsoft PKI problem with domain controllers (autoenrollment) Hello everybody, I have the following problem on my AD-Domain (3 Domain Controllers with MS-PKI): all the domain controllers have recurrent errors in the Application Event Viewer that say: "Automatic Certificate Enrollment for local system could not find a valid certificate templete to match DomainControlleras specified in the group policy automatic enrollment object. Enrollment will not be performed." The "DomainController" template is the standard template, which I have removed from the "Certificta templates to issue" container. Besides, I have created a new personnalized DomainController template, called MyDomainController, which is accepted by all the CDs, i.e. all the 3 of them have been issued a valid certificate. Nevertheless, all domain controllers still ask for a "DomainController" Certificate, although there is no entry at all in the Default Domain Controller Policy (--> Computer Settings --> Windows Settings --> Security Settings --> Public Key Policies --> Automatic Certificate Request Settings). If I try to reintegrate the "DomainController" template on the CA to -- > Certificate Authority --> My CA --> Certificate Templates: New Cert Template to issue, I get the following error: "The template information on the CA cannot be modified at this time. This is most likely because the CA service is not running or these are replication delays. One or more certificate templates to be enables on this certificate authority could not be found. The changes can be saved to Active Directory and retrieved by the CA next time it is started. Do you want to save the changes to Active Directory?". Clicking "Yes" and restarting the CA does not solve the problem... Did anyone have the same problem? Any ides? Thanks in advance, Grovnasch Tag: Computer Access Tag: 94349
  - 3
    - To prohibit creation or access of a particular file type? Hi all, Is there any way in Windows XP to prohibit user from creating and accessing a particular file type like ".mp3"? if not, is there any third party tool to do it? Thank you, Samuel Tag: Computer Access Tag: 94346
  - 4
    - Malicious Software Tool - is it worth it? I've never downloaded or used the Windows Malicious Software Removal Tool. I download the patches every time and I use AVP antivirus and Spybot (I use XP SP2). Should I bother with the Removal Tool? Tag: Computer Access Tag: 94334
  - 5
    - Cannot Uninstall Windows Defender I go into add/remove programs and try to unistall windows defender and it say it cannot find windowsdefender.msi and asks me for an install disc. I searched my machine and the file does not exist. This is a real problem because I am trying to install Norton 360 and it says I must uninstall windows defender first. I only briefly used the beta version and somehow after beta expired some files were deleted or corrupted. I also tried to install new version of windows defender but I get the same error message about file not found and I need to use install disc. Tag: Computer Access Tag: 94332
  - 6
    - Removing viruses from another hard drive. Hi I have spent days and days trying to find an answer to the following. I have run antivirus/malware programs for years on my machine and most of the time keep it reasonably clean of bugs, so I know all about removing stuff from a live, connected to the internet computer. What I would like to know is, how does one remove viruses from a second computer which has no internet, or an ineffective antivirus/malware. Is it possible to slave the hard drive to an up to date computer and scan from there without collecting all the bugs from the slave drive? Or does one have to setup antivirus programs on the infected computer and update manually. However what happens if it is dead, and cannot start due to the infection. I know this is probably basic stuff but any help would be appreciated. Wombat -- Eats, roots and leaves. Tag: Computer Access Tag: 94330
  - 7
    - log off script that prevents loggoff if user has app open Users are logging off in terminal server without shutting down a certain msaccess application . My solution which I haven't implement yet, is run a logoff script that checks whether the LDB is present in the local directory and prevent logoff if it exists. Problem is, users could close the batch file and bypass shutting down the application correctly. Is there another better approach?? cheers Astro Tag: Computer Access Tag: 94329
  - 8
    - Test This is just a test Tag: Computer Access Tag: 94327
  - 9
    - invalid certificate Hi, I have just installed windows certificate service and selected an enterprisse root ca. I then issued a certificate to the default website for enabling OWA over HTTPS. All seemed OK, but when users connect to the OWA site the certificate cannot be installed into the trusted root CA. When viewing the certificate, it says "This certificate cannot be verified up to a trusted certificate authority". Is this normal for windows CA? or there is something wrong in installing the CA and creating the certificate? Thanks in advance, Tag: Computer Access Tag: 94324
  - 10
    - SSL VPN:Poor performance & memory resources I notice that I connect via SSL VPN to my organization. Then I launch RDP (Remote Desktop) and connect to my machine at work. In the first 15 minutes or so, response time is great. Then gradually I notice that things slow down;graphics in documents do not appear as promptly anymore, I attempt to reply to e-mails and it takes seconds untill I see the window to let me type, etc. I am using Vista with 1GB RAM memory. I have a co-worker using XPSP2 from a machine with 1GB RAM and he reports same behavior when using the SSL VPN. I notice that if I reboot my machine, I connect again to the same RDP session and response time is good. Then I start using my machine at work via RDP, and things slow down again. My question is: How sensitive is a client machine if SSL (in this case, SSL VPN) process is in place? I know SSL is intense on the server side and I do have an SSL acceleration card on the VPN gateway, but I would like a confirmation on whether an SSL connection like this would also make memory a more sensitive resource. My user experience with my machine is fine other than this, and therefore I am trying to determine whether limited memory in the client side could be the cause of this. Tag: Computer Access Tag: 94313
  - 11
    - Find SID for the Windows 2000 domain user remotly Hi, I want to find the SID of Windows 2000 domain user. I tried psgetsid.exe and it works for Windows 2003 not for windows 2000. Can you please anyone help me? Brahmaji Tag: Computer Access Tag: 94309
  - 12
    - VPN with User Certificates on TPM Hello World ! Does anyone has done allready a project with Windows Server 2003 PKI and user certificates stored in TPM (Trusted Platform Module) on Windows XP SP2 clients ? Searching for White Papers... booster -- ~~~~~~~~~~~~~~~~~~~~ ..is an MCSE 2003 and MCDBA ~~~~~~~~~~~~~~~~~~~~ Tag: Computer Access Tag: 94307
  - 13
    - CRL Distribution Point on http://pki.companyname.com/certdata Hello Just installed a 2 tier PKI with Offline Root CA and 1 online issuing CA with the WebComponents. Everything works, PKI View ist all Green. But, what if a new CRL is published ? LDAP publishing works, the new CRL is published. The http location is not updated, it's a manually created directory and available on the IIS as virtual directory. the *.crl's are not updated there, do i have to copy the new published crls from c:\windows\system32\certsrv\certenroll ??? Or did i miss something ? Regards. booster -- ~~~~~~~~~~~~~~~~~~~~ ..is an MCSE 2003 and MCDBA ~~~~~~~~~~~~~~~~~~~~ Tag: Computer Access Tag: 94302
  - 14
    - No credentials being passed across network with Windows Authentica I cannot remotely access SQL Server 2005 with Windows Authentication with a specific login (I get the error 18452 "this user is not associated with a trusted login.."). I ran a trace with the profiler and it shows that no values are being passed for the login/credentials. I can login to the server locally just fine with the login. Windows Authentication works with the same login work against another SQL Server machine. What could be specific to the login or the server that would cause the credentials not to be passed. -- John Shahan Tag: Computer Access Tag: 94301
  - 15
    - Need help with CAPICOM Security APIs Not sure if this is the right newsgroup for this question. I have a simple task that I need to perform. I want to be able to pragmatically verify that an EXE file contains my signed certificate. I was looking at the CAPICOM classes and it appears that there are class APIs that I can use. However, I am not sure exactly what I need to do. I created a SignedCodeClass and set the SignCode.Filename member equal to the EXE file that I want to check. Then, SignCode.Verify function is called to verify the validity of the certificate. However, I want to go one step further and verify that the certificate is my certificate. Could someone please offer some information on how I can do this? -- --------------------------------------------- Ken Varn Senior Software Engineer Diebold Inc. MailID = varnk Domain = diebold.com --------------------------------------------- Tag: Computer Access Tag: 94300
  - 16
    - [SOFT TOOL EXE DLL ISO C PHP NIX WIN CISCO] search & download === www.GEGEREKA.com Project of the year: Incredible unique search machine like nothing on earth. any kind of useful data: WIN,NIX,CISCO,MAC,DLL,PHP,EXE,ISO, ...and much more Millions files for everyone. Also music, movies and other media. http://www.GEGEREKA.com : THE LORD OF DOWNLOADS. Tag: Computer Access Tag: 94299
  - 17
    - Prevent Unauthorized PCs to connect on the LAN Is there any way that I can prevent any "rogue" PCs to connect on the company's domain? I'd like to avoid people bringing their laptops or Pocket PCs and connecting on the LAN. Thank you! Tag: Computer Access Tag: 94279
  - 18
    - Domain Controller Security Please guide me, How to ensure the level of security of the domain controller on Win2003 Server Platform, and also detail how the security can be tighten. Shanthi Tag: Computer Access Tag: 94278
  - 19
    - User Profile on Windows 2003 Server I found some user profiles are being created in our Win2003 server (DC). I am sure nobody can logon to the server unless the user is administrator or equivalent. Please detail how this is getting created. Shanthi Tag: Computer Access Tag: 94277
  - 20
    - Windows Server Builtin Firewall I am running my domain controller on Win2003 server platform. By default the windows firewall was on. I turned off, hence the users are not able to login to the domain. I just want to turn on the firewall and give an exception for the same. Please guide us how to do the same. Shanthi Tag: Computer Access Tag: 94276
  - 21
    - File Replication My Domain Controller is in Win2003 Server platform and having some shared folders. I want to replicate the files on the shared folders to another member server which is also in Win2003 Server platform to avoid the inconvenience of the daily backup. Hence the backup process is taking a long time everyday. I would like to plan the replication of the shared folder files to replication server on schedule basis. Please do let me know is there any solution available in windows for the same. Shanthi Tag: Computer Access Tag: 94275
  - 22
    - Computer cert/User cert 802.x Authentication query Hi there, My question is this: we have our wireless setup pretty much identical to the description in this white paper: http://download.microsoft.com/download/f/d/d/fdd4d246-eabe-4a3e-a935-358532b5c168/StepSecureWirelessAcc.doc#_Toc100984847 We have a working, established PKI infrastructure and all Cisco 1100 ap's globally. We are using microsoft IAS with both a user and computer RAP. both of these appear to work fine and the network is firmly in production. It seems to work very well on the whole, machines are connected whilst users arent logged on so they receive gpo updates etc, when a user logs on they authenticate fine, providing they have previously been on the computer whilst it is connected to a wired network. If they havent been on the machine via a wired connection before there first log on on that machine then the machine does not have a local copy of their certificate, neither can it auto-enrol their certificate as it has no connectivity once they are logged on. Consequently the wireless sticks on authenticating or "no certificate" in these circumstances. What i'd like is to somehow allow people to request/enrol a certificate when logging onto the machine for the first time over wireless (rather than having to first put them on the wired network), is it possible to specify limited access during logon so the users account is able to connect to the pki box and enrol a new user certificate? maybe with an additional remote access policy? We have absolutely no problems with the distribution of computer certificates. I acknowledge that its fully possible that my implementation is at fault here! As i cant find any indication that the behaviour i'm experiencing has been a problem for anyone else! Any advice/pointers greatly appreciated. Jim Tag: Computer Access Tag: 94270
  - 23
    - How do I create a service account? I want to create a service account that has administrator permissions on servers but I do not want this account to be able to log in to the console of any server, is this possible? Thanks Ray Tag: Computer Access Tag: 94263
  - 24
    - Unified vs Federated Authentication questions I'm a student learning about computer security and am having difficulty finding out exactly what Unified Authentication is and how does it differ from Federated Authentication. Can anyone explain it to me? Tag: Computer Access Tag: 94260
  - 25
    - Encrypting VBA code behind Excel File Hi, All. I hope this is the right discussion group - if not, please point me in the right direction. I've written code in VBA 6 for Excel 2000. I need to be able to share the file with others while encrypting the underlying code using an asymmetric algorithm. Any thoughts? Thanks in advance. Jim Tag: Computer Access Tag: 94259

As an intermediate user I have a question on accessing my computer. Is there
a log I can check somewhere on my pc which will show when it was switched on,
accessed etc? I know my internet history was cleared by someone else but I
can't confirm when it was used. Any ideas?

Top

Re: Computer Access by siljaline

siljaline
Thu Aug 23 17:27:01 CDT 2007

"tmgbhoy" wrote:
> As an intermediate user I have a question on accessing my computer. Is there
> a log I can check somewhere on my pc which will show when it was switched on,
> accessed etc? I know my internet history was cleared by someone else but I
> can't confirm when it was used. Any ideas?

Your Windows version is...

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Windows Security, AH-VSOP

Security Tools Updates:
http://aumha.net/viewforum.php?f=31

Please reply to group, as return address is invalid that, we may all benefit.

Top

RE: Computer Access by Anteaus

Anteaus
Fri Aug 24 15:56:33 CDT 2007

IF NT/XP yes, look for Event Viewer inside compmgmt.msc (type this into a Run
box) There are three main logs, for system, security and apps.

Top

Re: Computer Access by Michael

Michael
Sat Aug 25 06:45:00 CDT 2007

On Thu, 23 Aug 2007 10:48:02 -0700, tmgbhoy wrote in
microsoft.public.security:

>As an intermediate user I have a question on accessing my computer. Is there
>a log I can check somewhere on my pc which will show when it was switched on,
>accessed etc? I know my internet history was cleared by someone else but I
>can't confirm when it was used. Any ideas?

Under any NT-class OS (NT4, W2K, XP, Vista), inspect the content of the
Event Viewer (Run: eventvwr.exe).

--
Michael Bednarek http://mbednarek.com/ "POST NO BILLS"

Top