DeltaType AddOrChangeUser

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Missing Firewall in XP In 2003 I purchased a computer with XP Home Ed already installed. Therefore, Miscrosoft won't answer my question. My question is, everything I have been reading lately says that a firewall comes with XP. However, when I access the Internet Connection in the Control Panel, there is no indication that there is a firewall. Should one be there? I have not loaded SP2. I did once but I had so many problems that I just removed it. How can I get the Windows firewall? thank you. -- Dee Tag: DeltaType AddOrChangeUser Tag: 67015
  - 2
    - Hacked Printer? How? To whoever may be interested While browsing on the internet an advertisement printed out on my printer without me requesting it or in any way giving permission to do so. If they deliberately set a web-page to force your printer to print their adds, is it illegal? I am unsure as to who may be interested in perhaps investigating the company. The ad was as follows minus the graphics; VONAGE - The Broadband Phone Company, $24.99 a month CALL ANYWHERE in the US and Canada with your broadband connection I have the most up-to-date security software running on my machine. They start using your printer without your knowledge and all of a sudden you don't feel like you own your computer anymore. Thank you for your time. Tag: DeltaType AddOrChangeUser Tag: 67013
  - 3
    - How do I programmatically set *inheritable* permissions on registry I'm struggling to find a way to programmatically set inheritable permissions on registry keys. The only examples I've seen set them on a specified key and advise one to apply it recursively. This is fine if that part of the registry is static... but useless if new keys are to be created in the future as they won't inherit the new permissions. I've cobbled together two code examples that do what I describe. How would I modify them to make them inheritable? I read somewhere about CONTAINER_INHERIT, but I don't know it's value, and nor where I should apply it. BOOL setPermissionsExample1() { // Resets permissions on a key so that they are Full Access to special // group INTERACTIVE. Appears to only set permissions for the specified // key and not for subkeys as well. HKEY hKey = NULL; TCHAR szSubkeyName[] = _T("SOFTWARE\\MyKey"); if (ERROR_SUCCESS != ::RegOpenKeyEx(HKEY_LOCAL_MACHINE, szSubkeyName, 0, WRITE_DAC, &hKey)) { return FALSE; } SID_IDENTIFIER_AUTHORITY SecIA = SECURITY_NT_AUTHORITY; PSID pSid = NULL; if (FALSE == ::AllocateAndInitializeSid(&SecIA, 1, SECURITY_INTERACTIVE_RID, 0, 0, 0, 0, 0, 0, 0, &pSid)) { return FALSE; } BOOL bSuccess = FALSE; DWORD dwAclSize = sizeof(ACL) + sizeof(ACCESS_ALLOWED_ACE) + ::GetLengthSid(pSid) - sizeof(DWORD); PACL pDacl = (PACL) new BYTE[dwAclSize]; if (TRUE == ::InitializeAcl(pDacl, dwAclSize, ACL_REVISION)) { if (TRUE == ::AddAccessAllowedAce(pDacl, ACL_REVISION, KEY_ALL_ACCESS, pSid)) { SECURITY_DESCRIPTOR SecDesc; if (TRUE == ::InitializeSecurityDescriptor(&SecDesc, SECURITY_DESCRIPTOR_REVISION)) { if (TRUE == ::SetSecurityDescriptorDacl(&SecDesc, TRUE, pDacl, FALSE)) { bSuccess = (ERROR_SUCCESS == ::RegSetKeySecurity(hKey, (SECURITY_INFORMATION)DACL_SECURITY_INFORMATION, &SecDesc)); } } } } ::RegCloseKey(hKey); delete[] (BYTE*) pDacl; if (pSid != NULL) { ::FreeSid(pSid); } return bSuccess; } void setPermissionsExample2() { // Resets permissions on a key so that they are Full Access to special // group EVERYONE. Appears to only set permissions for the specified // key and not for subkeys as well. TCHAR szSubkeyName[] = _T("SOFTWARE\\MyKey"); HKEY myKey; unsigned char *p = new unsigned char[9000]; PSECURITY_DESCRIPTOR psecdesc = (PSECURITY_DESCRIPTOR)p; DWORD sts = ::RegOpenKeyEx(HKEY_LOCAL_MACHINE, szSubkeyName, 0, KEY_ALL_ACCESS, &myKey); if (sts == ERROR_SUCCESS) { sts = InitializeSecurityDescriptor(psecdesc, SECURITY_DESCRIPTOR_REVISION); sts = SetSecurityDescriptorDacl(psecdesc, TRUE, NULL, TRUE); sts = ::RegSetKeySecurity(myKey, DACL_SECURITY_INFORMATION, psecdesc); sts = ::RegCloseKey(myKey); } delete [] p; } Tag: DeltaType AddOrChangeUser Tag: 67012
  - 4
    - HP t 5700 Thin client I am having a problem patching the thinclient. I receive packets on port 445 and packets of 177 bytes. This is flooding my network. Any Ideas? I do have a patch kb 828741_1.00-1_a1.exe. 828741_1.00-2_a1.exe But having trouble installing it on those machines. It is running Windows Xp Embeded. Is there a way to get them on the devices.Some machines is not on a Domain. Will SUS work? Tag: DeltaType AddOrChangeUser Tag: 67007
  - 5
    - Perhaps the most OBVIOUS question you will ever see. Dear Colleagues: For the life of me I don't know why I have to ask this question since the answer is so obvious, however, I need to have others tell me that I am not completely insane. I work at a place where we have a myriad of wireless access points and NO, I am not writing from there at present. NONE of the wireless access points has any form of security on them whatsoever. No WEP, no CHAP. . . no nothing. Everything is open so you could walk into our joint, grab an IP address and surf the web to your heart's content. Here is the problem. My boss insists that its "no big deal" and that since the servers are on the inside and protected, we really don't have a thing to worry about. Furthermore, my boss is under the impression that since we are situated in a wide area, that nobody would be able to get into our network because of this distance. Needless to say, my boss does not consider somebody sneaking into a parking lot with a laptop, a good network card and a directional bazooka antenna a possibility. So here is what I have to explain to my boss' boss and, perhaps, the board of directors. . . and here is where I can't help but laugh. I hope that I will be able to keep a straight face come Monday when I have to explain myself to people why its important. Okay, so I know the analogies. For example, I understand that not having a secure wireless network with many Waps and high gain transmission antennas is the same as putting cables out to anybody within 'x' amount of yards with a sign that says "free internet access", but since I am going to be asked these obvious questions, just what type of damage could somebody do? Yeah, I know about denial of service attacks, yeah I also know about enumeration and password guessing, but considering that we have an SQL server on the inside of our network (no, the sa account password is not null) what are we talking about. I can envision so many things. Like somebody just sitting there caputring packets to get things like usernames, passwords and the like, but come on. . . what else could they do. I have read my boss the riot act many times, but this is now going to go in front of somebody over my boss' head, so, aside from giving them worst case scenarios, end of the world analogies, etc., how else could people break in. Creative responses are appreciated and will be rewarded with much praise. I can't believe that I have to actually explain this to people, and this entire thing would last about two seconds when it comes to talking with a computer professional, but you see, my boss is under the impression that they are a computer professional because they received a Master's degree in Comp Sci back in the 80's. I know that this line of thinking is dangerous, but I really want some creative answers to put my point across strongly, and yet professionally. Although I realize that this post will likely be the butt of many jokes (which I will appreciate immensely) I never the less would appreciate a bit of useful information in your responses. I am going to have a serious drink now, and then bang my head against the wall. Thanks in advance, CC Tag: DeltaType AddOrChangeUser Tag: 66989
  - 6
    - One computer on network blocking attempts I have 4 pcs networked using a router. I also run Zone Alarm, mostly for outbound monitoring. My machine, running win2K has NO logs in Zone Alarm about blocking inbound attempts. However, my daughter who has Winxp does indeed show in ZA, x number of blocked attempts. I checked the ip's on those to ensure they weren't from the home network, and sure enought some are from outside. Could this be from her running AIM or one of the P2P file programs? I just find it odd that I have none and she has several. (NOT as many as my mom at her house running Cable Internet, no router (I did load her ZA, who as of Christmas had over 16,000 attempts!) Tag: DeltaType AddOrChangeUser Tag: 66984
  - 7
    - Microsoft Anitspyware Beta I have a Windows XP Home PC Service Pack 2 with all the latest updates Norton Antivirus, Spybot Search & Destroy, Ad-Aware and MS Antispyware all with the latest updates. After running both Spybot and Ad-Aware the system was running well. I installed the MS Antispyware and ran the first scan and clean. It removed 18 severe to moderate threats. It required a reboot after which the Service Pack 2 Firewall would not activate automatically or manually. I restored Windows prior to the scan and systematically eliminated the threats down to one. CouponDeals (Adware) located C:\Windows\System32\cdlsp.dll If this one is removed the Firewall will not start so I have set it to ignore allways. Is this file infected or has it been mis-identified by MS Antispyware ? Anyone have a clue? Tag: DeltaType AddOrChangeUser Tag: 66979
  - 8
    - recommended anti-spyware progs? any recomendations would be appreciated. preferably free, but if there are known excellent ones i'd be willing to pay. thank you. Tag: DeltaType AddOrChangeUser Tag: 66976
  - 9
    - Script and ActiveX Blocked Hi all, My friend is a designer. He installed service pack 2 for xp. But when he preview his web pages after making changes using dreamweaver, IE always prevents the javascripts from running. Is there anyway to allow it to run by default? I can't seem to find the settings Regards, Kit Kai Tag: DeltaType AddOrChangeUser Tag: 66973
  - 10
    - Clearing URLs in IE the problem may be simple.... but i have certain restrictions!! Well i would like to clear the URLs that come up when I type the URL or view the drop down list in the IE. The problem that I face is that my clear history and days to keep pages in history are disabled by or administrator. I can delete cookies and delete the temporary internet files. However, I cannot clear the list of URLs that I visited. The security level is also disabled. Is there a file or any other way that helps me in clearing the visited links? Thanking you Jojy K Kuriakose Tag: DeltaType AddOrChangeUser Tag: 66954
  - 11
    - Problem with my Hosts File I'm using the Hosts file and the RenHosts.bat file (for toggling on and off) from this site below http://www.mvps.org/winhelp2002/hosts.htm Since downloading the Hosts file a few days ago I've always had it on but today I've tried to turn the hosts file off for the first time and if wont de-activate. Along the top of the prompt screen I get a message saying, "duplicate file name exists, or the file cannot be found". Can somebody shed some light as to what this means? Tag: DeltaType AddOrChangeUser Tag: 66953
  - 12
    - patch info for advapi32.dll in win2k sp4 I am installing cspdk in window 2000 sp4. I signed the sample csp. However, when I run testcsp.exe, I got "Calling CryptAcquireContext - CryptAcquireConext returned error 80090006 (NTE Bad signature)Failed" error. I know the problem is due to incorrect patch version of advapi32.dll. I got a advapi32.dll version of 5.0.2195.6876, Can someone provide me the patch info for this version of the advapi32.dll? I know there are many postings regarding this information. But I can't find the patch info via searching "advapi32" in this forum. Your help is much appreciated. Phoebe Tag: DeltaType AddOrChangeUser Tag: 66942
  - 13
    - virus I have a virus[ TROJ_BDI.A] how can I get it off my compurter? thanks meaginn -- do it right the first time and you wont have to di it over Tag: DeltaType AddOrChangeUser Tag: 66941
  - 14
    - Port management , closing ports from intrusion I read that one can prevent port scans by 'closing off' all ports , while maintaining an open port 80 for surfing. Is there a method to block port scans? Tag: DeltaType AddOrChangeUser Tag: 66940
  - 15
    - DHCP and VLANs I'm currently in college and we are setting up a network to experiment with. I was wondering if there was a way to set DHCP on our server so that it either corrosponds with a port number on the switch or the VLAN number. So I have the 10.3.x.x /16 network and I want to make all the clients on VLAN 2 to use 10.3.2.x scope, clients on VLAN 3 to use 10.3.3.x scope and so on. I have all my scopes setup and now I'm to the point where I either have to go in and figure out how to set the switch up to handle this or set up Server 2003 to handle this. The problem is I'm not real sure on how to accomplish this. I'm going to graduate this spring and I've had Cisco classes 1-6 and a Microsoft Server 2003 class. Sadly my Server 2003 class had a teacher that really didn't know much other then the basic set up users, the AD, and basic DHCP, DNS. I've read some other posts that people are trying to do similar things but it's just not the same. I'm sure I have the resources to accomplish this I just need a push in the right direction. I'm want to do it like this way so that when we setup ACLs and put up the firewall, that it will be easier to monitor and restrict access. Also if anyone out there has just some basic tips on security (I'm in the middle of my security class now and haven't learned all that much) I'd appreciate it. Thank you for your time!!!! Josh Tag: DeltaType AddOrChangeUser Tag: 66926
  - 16
    - Multiple Accounts Being Locked Out - HELP Please!! I am running a Windows NT 4.0 Domain with a PDC and BDC. We have about 800 users. What I noticed today is that each account is being alphabetically locked out because there are a lot of unsuccessful logon attempts (approx. 100 attempts per account). I noticed that the attacks were coming from 3 PCs. I removed the PCs from the network and checked to verify that the eventlogs on the PDC/BDC had stopped locking out accounts. About 30 minutes later, the problem started again from a different PC. The PCs I had removed were checked for spyware and viruses. One had the Bat.Noshare.v virus, the other was clean. The 4th PC that started causing the problem was also checked for viruses and spyware. It was also updated with critical patches, yet the problem persists. Please help!! I can't determine what is causing this and therefore, I can't find a fix for it. Sincerely, Jerry (At My Witts End) Tag: DeltaType AddOrChangeUser Tag: 66920
  - 17
    - Which regulation governs data backup retention ? I work for a 5,000 public institution and I would like to confirm whether there are regulations that dictates data backup should be performed on tapes and stored off-site ? How often back-up should be performed ? The discussion here is that a co-worker would like to adopt disk-to-disk backups in the data center (what I agree) and perform only backups on remote locations connected via fiber for DR purposes. My point is that backing up to remote locations don't cover threats against cyberattack or virus outbreaks. I mean, in my view in addition to a data backup in disk, there are still reasons to perform a data backup in a portable medium such as tape to assure that such data is clean and out of range of virus or cyber-attack events. In addition, if it is determined that a data backup to tape is necessary, such co-worker would like to perform a tape backup only once a month. Does Sarb-Oxley handles such data backup requirementss ? Please advise. Let me know what you think. Tag: DeltaType AddOrChangeUser Tag: 66918
  - 18
    - can't delete virus - Java Bytevera.A This virus/Trojan was not detected by my NAV but It was detected when I did an online scan. I did everything that it said to remove it but I am unable to access it in normal or safe mode....any help would be appreciated. MGD Tag: DeltaType AddOrChangeUser Tag: 66915
  - 19
    - 1 Tier PKI We are a small Company with 25 employees and 50 machines. We want to deploy PKI for authentication, encryption and at a later time Secure VPN and Wireless. I was thinking of a 1 Tier Architecture. Where can I find a good example of how to implement a single tier PKI infrastructure? Thanks - Sean Tag: DeltaType AddOrChangeUser Tag: 66910
  - 20
    - Security hole in file sharing (bug?) I don't know if this has already been reported. I have a Windows XP SP2 computer, fully up-to-date with patches, which connects to the Internet through a dial-up connection. In the network settings for the dial-up connection, I have disabled the "client for Microsoft networks" and "file and print sharing" components, and I've also disabled NetBIOS on the TCP/IP settings. With this configuration, I was quite sure my shares wouldn't have been exposed to Internet users... but I found, instead, that they are. Altough disabled, the file sharing services are fully accessible, and I was able to connect to them and also use them (by supplying my username/password). What's happening here? Are not the connection-specific settings valid anymore? This seems to me quite a serious bug! Massimo P.S. I know I can activate the built-in firewall, or stop the server service, or fully remove the file sharing network component, and so on... but I want to know why I'm settings things right and they're behaving wrong! Tag: DeltaType AddOrChangeUser Tag: 66909
  - 21
    - Getting Pounded by failed logon attempts I am getting hundreds of failed logon attempts from device names that don't seem to exist either in DNS or WINS. Here on of the event viewer error messages: Event Type: Audit Failure Event Source: Security Event Category: Account Logon Event ID: 680 Date: 1/26/2005 Time: 7:22:29 AM User: SYSTEM Computer: COM1 Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: uucp Source Workstation: \\ENDO Error Code: 0xC0000064 Data: How can I find the source IP of these? Thanks, Brian Tag: DeltaType AddOrChangeUser Tag: 66906
  - 22
    - Hot Mail Staff I received an email from "Customers Support" stating that an audit had reveiled a problem with my acvcount and that if I did not go to the enclosed link within 48 hours my email service would be come limited. Is this an issue that I need to follow up on or is it some kind of scam or illegal attempt to obtain personal information? Tag: DeltaType AddOrChangeUser Tag: 66905
  - 23
    - trojan or not i cant remove it recently my nortons has detected a so called trojan called mmviewer_101.Is it a false positive or is it a real one.i cant seem to deleate it at all.ive serched thru everything looking for it.any help would be appreciated. Thanks zero Tag: DeltaType AddOrChangeUser Tag: 66897
  - 24
    - Mysterious Stranger - Unknown "Program Running" When I start to switch users (WinXP home - Fast User Switching), the logon screen often indicates that the User Account I have exited has One More Program running than I think it should have. I can re-enter the User Account and run Task Manager only to find no applications running. Yet I can close Task Manager, fast switch to the logon and there is the message "1 program running". I'm not sure but I think this started appearing at about the same time as I installed MS AntiSpyware Beta1 and intalled the recent updates. Could a "process" or "service" be falsely identified as a "Program Running"? Any thoughts are appreciated. I tried looking at processes with "services.msc" and found much more than I expected (is all this really necessary?!?!?). I have also become more aware (sleepily so) of scanner reports indicating that 700+ processes have been scanned, etc. My brain hurts... Thanks for help, CT Tag: DeltaType AddOrChangeUser Tag: 66896
  - 25
    - Mysterious Stranger - Unknown "Program Running" When I start to switch users (WinXP home - Fast User Switching), the logon screen often indicates that the User Account I have exited has One More Program running than I think it should have. I can re-enter the User Account and run Task Manager only to find no applications running. Yet I can close Task Manager, fast switch to the logon and there is the message "1 program running". I'm not sure but I think this started appearing at about the same time as I installed MS AntiSpyware Beta1 and intalled the recent updates. Could a "process" or "service" be falsely identified as a "Program Running"? Any thoughts are appreciated. I tried looking at processes with "services.msc" and found much more than I expected (is all this really necessary?!?!?). I have also become more aware (sleepily so) of scanner reports indicating that 700+ processes have been scanned, etc. My brain hurts... Thanks for help, CT Tag: DeltaType AddOrChangeUser Tag: 66895
- Next
  - 1
    - Future of DUN connection Windows updates? Just read the MSNBC article "Pirated Windows copies to get fewer fixes: Microsoft plans severe restrictions on security updates" from http://www.msnbc.msn.com/id/6868504/ BTW - All my PC's contain valid Windows XP Pro software. What I hope this does NOT mean - that updates must be download and applied ONLY from the computer the updates apply to. In other words, will I be still be able to download updates from my broadband connection at work for my home computer with a slow rural 24Kbps dial-up modem connection? If not, then my home computer is screwed. Updates larger than 2MB, on my DUN, are rarely successfull, so, try to imagine doing a 15+MB update! A solution would be to have an option where Windows Update creates a file of the updates for my HOME PC that I could take to work, download the updates from work, take them home and apply them. All of this could be managed through Windows Update to verify the validity of the OS at each location, i.e. HOME and WORK. Of course, this all applies to Office updates too. Any thoughts people? Tag: DeltaType AddOrChangeUser Tag: 66888
  - 2
    - Antispyware won't run at lunchtime How can I schedule Microsoft Antispyware to run at lunchtime? I can specify just about any time of the day with no problems, but if I enter 12 noon, it automatically changes it to midnight. If I enter 12:30, it changes it to 00:30. Tag: DeltaType AddOrChangeUser Tag: 66879
  - 3
    - Unable to open excel sheet in Protected mode from VB 6.0 Hi, I am working on a project in VB6.0 and SQL Server. We use MS Excel for our reports. We also use server side COM+ components. We have a situation where we are not able to open some of the reports in 'protected' mode (i.e, to prevent the users from making changes to the excel report). When we try to open these in protected mode, the application is crashing, giving a Dr. Watson error. When we change the VB code to open the excel reports in 'Unprotected' mode, the applcation works alright. But in this case, the users would be able to change the reports as they like. Why am I not able to open these excel reports in protected mode from my VB6.0 exe? Is there a way, where we can prevent the users from making changes to the excel report, even if we open it in 'unprotected' mode? We tried using the 'Read Only Recommended' option but that allows the users to make changes and save changes as some other file name (although the users are prevented from making changes to the same file) and this cannot be allowed in our application. Any help in this regard is greatly appreciated. Thanks in advance ourspt Tag: DeltaType AddOrChangeUser Tag: 66876
  - 4
    - Screen Saver and Media Player I have my screen saver configured to activate after 5 minutes of inactivity. It works great as long as I am not listening to music with Windows Media Player. My OS Media Player Version Windows 2000 Pro SP 3 9 Windows XP SP2 10 Have any of you seen this? Do you know of a fix? Thanks, Tag: DeltaType AddOrChangeUser Tag: 66861
  - 5
    - Custom PASSFILT.DLL and Complexity in GP I have developed my own passfilt.dll file. I copied it to all four of my Win2K3 DC's and added the registry entry under the LSA key Notification Packages. My problem is that I only enabled password complexity on a single group policy (not the default domain policy or default domain controller policy) that I applied to a test OU. I also further limited the policy to a single user for testing in the GPMC. However any user that now tries to change their password has the new password go through the passfilt.dll even though complexity is not enabled on any policy that applies to them. What gives? From what I have read, you have to add the reg value to the Notification Packages key AND enable complexity on a group policy. Why would it apply the password filter to users from whom it is not enabled? Tag: DeltaType AddOrChangeUser Tag: 66855
  - 6
    - PKI newsgroup? Is this the right news group for PKI related questions? Sean Tag: DeltaType AddOrChangeUser Tag: 66853
  - 7
    - E-mail threatening to DEACTIVATE my MSN service An E-mail dated January 24th threatened to deactivate my service unless I provide identifying information. Is this request authentic? Tag: DeltaType AddOrChangeUser Tag: 66849
  - 8
    - event log-logging in/out How/what do I use from the event viewer to see when a users logs in/out of their XP/2000 workstation? I have auditing turned on in my group policy but there are several events showing in the event log. I'm not sure which ones are actually the user loggin in/out -- Joel Young Tag: DeltaType AddOrChangeUser Tag: 66848
  - 9
    - Browser Highjacker I have a Browser Highjacker on my Internet Explorer home page ( about:blank ) Microsoft Antyspyware Beta 1 will not remove it. I have completed 11 scans and it is still on there. Infact it has put itself on the default page of the antyspyware programme. I have also got Norton System works 2005 and that will not touch it either. Has anyone else had this and do you know how to get rid of the pest. Andy Tag: DeltaType AddOrChangeUser Tag: 66842
  - 10
    - serious severe problems i am running xp home with sp2 and all of a sudden all the text everywhere can only be seen partially and when i try to do anything an error message comes up but i cant read it then after i do anything it freezes also when loading my personal settings it takes a long time. i deleted my user profile and created new one but it didnt help. it runs just fine in safe modes and also i scanned for viruses and spyware etc and it is clean. please help me Tag: DeltaType AddOrChangeUser Tag: 66841
  - 11
    - Can ISA Server 2004 handle two different links to the internet? Hi there, I hope this question hasnâ??t been asked before, but I couldnâ??t find it. I would like to know if ISA 2004 can deal with two different links to the Internet. Suppose I have a link via Frame Relay and a Radio link, for example. Can one server with ISA 2004 in my network handle both? Traffic will come from two different networks using two different links. I hope Iâ??ve made myself clear enough. Thank you! -- Carlos Figueiredo. Tag: DeltaType AddOrChangeUser Tag: 66837
  - 12
    - Breach in security I got directed to a site that was offering to do a security check, when it ran the check it gave my ip address and showed a message that I had posted on the newsgroups under my newsgroup profile. How the hell did it do this? I ran MBSA and it said that I was protected full strength security so how did this site get these details? Tag: DeltaType AddOrChangeUser Tag: 66835
  - 13
    - OWA Security In OWA when you open an attachment its gets downloaded to the Temp internet folder. Then when you logoff OWA that attachment still stays in the temp folder. The problem is when you are viewing your attachments at a Kiosk (unsecured machine) or Customer site the attachment will still be on that machine. I know in IE there is a checkbox to clear Temp internet folder but I can control that on my secured machines. Ijust don't want this to be on machines that I have no contyrol over. Is there any way to control attachment handling on the server side with OWA? or is there a way to clean the temp internet folders from the server in OWA? If there is no solution Can I control attachment handling through ISA2k4? I would be looking for solutions for Exchange 2k and 2k3 Thanks for your help Tag: DeltaType AddOrChangeUser Tag: 66822
  - 14
    - Weird session names I did a netstat on my Windows 2000 Pro machine and saw some connections that are probably legit from other machines on our company internal network. However those machines are appearing with weird names. When we look at sessions using our Windows 2003 server, the weird names appear on lots of our machines. The machine name is ok, but the session name is strange. The session names are all in the form of an Internet domain. Here are a couple of examples: play.battle.game.idle.rpgtechnologies.com kau.tinggalkan.aku.setelah.semuanya.ku.serahkan.info (kau tinggalkan aku is a song title) Is this "normal" or do we have some kind of bug? Thanks in advance, Kevin Tag: DeltaType AddOrChangeUser Tag: 66801
  - 15
    - Anyone seen this? http://www.theregister.co.uk/security/security_report_windows_vs_linux/#myth2 at least it was not sponsored by one of the products being looked at--unlike some previous studies publicized on the web by a certain corporation. I use both products and I'm finding myself using XP less and less and enjoying computing more and more. Why are we locked into a cetain OS again? Mainly PR and false advertising, try it you'll like it.(less filling, tastes great : ) ) -- Use Linux and WinXp Tag: DeltaType AddOrChangeUser Tag: 66800
  - 16
    - Installing Fonts Hello, I am responsible for about 40 computers on a Windows 2000 Server, which some of them have XP Pro. Do not want users to be able to install software, so I have them set up as a User. Although, I have one user who needs to be able to install fonts as he needs them, but no other software or hardware. With User rights, we get a message "The ERASER.TTF is currently being used and cannot be replaced. Wait until Windows is finished using the file, and then try again." It doesn't say you don't have permissions to do this. When I give this individual Power User rights, he is able to install fonts with no error message. I don't want to give him Power User rights. If I give him Power User rights, he'll be able to install other software and hardware. Is there a work around to accomplish this? Any suggestions would be helpful. Thank You, -- Minione Tag: DeltaType AddOrChangeUser Tag: 66799
  - 17
    - File that manages login details Is there a file that manages the login details. Details of the users who has loged in, how long they logged in, time they loged out, if they chose shut down or hybernate ... etc is there a file that the administrator can view o see which all users have loged in Tag: DeltaType AddOrChangeUser Tag: 66791
  - 18
    - Event 533: User not allowed to logon at this computer I am the system administrator of 400 windows 2000 professional in a windows 2000 AD. From time to time, 1 or 2, may be 10 computers suddenly shows this error message "User not allowed to logon at this computer" or something like that, when a normal domain user tries to log on. The same user is able to log into other workstations that are in the same OU. Reboot does not solve the problem. Reset the computer account does not solve the problem. Leave the workstation for a few days does not solve the problem. Disjoin the workstation from domain and rejoin it back solve the problem. Users belong to the local administrators group are able to log onto the computer. I used the domain admin to logon and checked the local security settings. I found nothing wrong. I checked the local groups and found nothing wrong too. When I checked the event log, there were 533 events generated everytime a denied logon was attempted. Other than that there was nothing suspicious. I used "netdom" to verify the security channel and it returned an ok to me. I had turned off the workstation maintenance policy ages ago. That did not help. Any idea? Jeremy Tag: DeltaType AddOrChangeUser Tag: 66789
  - 19
    - Global.msads.net Login Screen Hi, I am getting a popup window requesting my userid and psw. The title on the MS website is "global.msads.net" and on some others it is ad.doubleclick.net. That is to say it is a request to log into either of the above depending on which website I am at. Strangely also occurs using netscape. I ran 1. pest patrol 2.web root spysweeper, 3.A Squared (anti trojan program) 4. The Cleaner Anti-Trojan Programs plus 5. NAV 2005. My system has Windows XP Prof SP2. Recently ran the windows update and it downloaded a MS Spyware program which I cannot find the way to access. Why am I getting these requests from Global.msads.net to login with my Passport and from ad.doubleclick.net to login which I assume is also my passport? Is this due to the download of MS AntiSpyware program? Brian Tag: DeltaType AddOrChangeUser Tag: 66788
  - 20
    - Unauthorized Access to WEBCAMS What about webcam hooks? is there such a thing? how does it work? Sometimes hackers can access other people's webcam's without their approval or consent and sometimes even without them knowing that the webcam is on at all... what can be done to prevent this type of privacy invasion?? please help...Any information will do...thanks... Tag: DeltaType AddOrChangeUser Tag: 66785
  - 21
    - Unauthorized Access to WEBCAMS Tag: DeltaType AddOrChangeUser Tag: 66784
  - 22
    - Norton antivirus 2003/Norton Internet security I installed NAV2003/Norton Internet security as a package. I can uninstall Norton Internet security but I cannot uninstall Norton antivirus 2003 even using Symantec's Rnav2003.exe. How do I uninstall NAV2003 and get it out clean? Tag: DeltaType AddOrChangeUser Tag: 66778
  - 23
    - Norton Live Update I have Windows XP. I removed SP2 becasue of these same problems, here. Recently, I installed an upgrade of Norton System Works 2005. Live Update will not run. I get "LU1860, one or more entries for Symantec LiveUpdate servers exist in your Windows Host files. Generally, Symantec LiveUpdate server entries should not appear in your Windows Host files." Then, it lists five IP address items. What should I do? If I delete them, will Live Update run? I don't know how to delete them. I looked them up, but cannot determine which ones they are. Help, please! I used to have a "System 32, Bloodhound virus. But, Norton removed it (?). The files are located in Windows/system32/drivers/etc location. -- Cherokee Tag: DeltaType AddOrChangeUser Tag: 66776
  - 24
    - secure file deletion I am using a file shredder called tuneup utilities 2004, can anyone explain to me what i am doing wrong. firstly I use the undelete/file recovery tool and restore all of the files that I want to securely delete to a folder on my desktop. I then open up the secure file deletion shredder and drop the folder into the shredder, I select secure deletion with a seven pass overwrite and deletion of free space. All of the files that were in the folder disappear, however when I run the undelete again they all come back???? why??? I thought that they were deleted beyond recovery. Please explain to me what I should be doing Tag: DeltaType AddOrChangeUser Tag: 66767
  - 25
    - a simple question Hi malke my OS is Windows Xp and I have a LAN Connection for local network and Internet . in the LAN Setting i set proxy and port:8080.i can connected to the internet with Dial-up and brows internet but with the LAN my received is 0 I think that the 8080 port of my computer is protected. I want to view what happened for this port Thanks Tag: DeltaType AddOrChangeUser Tag: 66764

Hi,

In NetLogon.log, what's the significations of the following line:

<time stamp> [CHANGELOG] DeltaType AddOrChangeUser (5) SerialNumber: 560
2e927 Rid: 0x1035 Name: 'Some_user_name'

Google doesn't provide me with anything relevant.

Thanks in advance.

Top