Forefront Managed Newsgroup

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - help-Security Update for SQL Server 2005 Service Pack 2 (KB948109) when i try to install this upade i get error code - Error Code: 0x91B please help -- July Tag: Forefront Managed Newsgroup Tag: 98497
  - 2
    - Use of Kerberos unreliable, can I force it? Hi! I had to learn that it is easily possible for clients in our network to work without Kerberos (tickets). Mostly because they boot their computer without a network connection. Those users have no Kerberos tickets (of course) but they don=92t get Kerberos tickets even after connection to our network (bug or feature?). There are also some other scenarios in which Windows relinquishes Kerberos. The problem is that we have some web applications that require a Kerberos ticket. My question: How can I switch on Kerberos as soon as they connect to the network? Or how can I force Kerberos authentication in a web application (SharePoint). Integrated Windows Authentication means NTLM or Kerberos=85 Tips would be highly appreciated. Thanks in advance! Best regards, Noel Tag: Forefront Managed Newsgroup Tag: 98476
  - 3
    - Utility to Summarize User File Access Is there a utility that can scan the eventviewer security log on a file server and present management summary reports of all files a specific user accessed in a given time period? Seeing which files were accessed read only and which ones were opened for write would be very helpful as well. -- Will Tag: Forefront Managed Newsgroup Tag: 98475
  - 4
    - SCEP implementation We have developed our Microsoft Server 2003 R2 PKI to issue certificates to Windows devices and to Cisco routers. The current configuration is a single Standalone Root CA which has been used to authenticate an Enterprise Subordinate CA and a Standalone Subordinate CA with SCEP. The Standalone root CA has then been taken off-line. Our Windows devices are issued certificates from the Enterprise Subordinate CA and our Cisco routers are issued certificates from the Standalone CA with SCEP. We have a backup site configured with Enterprise Subordinates and Standalone subordinates also. We are looking at consolidating this deployment by removing the standalone CA with SCEP and installing SCEP on our Enterprise Subordinate CA? This will result in all windows devices and Cisco devices being issued certificates from the one Enterprise subordinate CA. My question is: Are there any known problems, security, maintenance or operational issues with this approach? Tag: Forefront Managed Newsgroup Tag: 98469
  - 5
    - Renew Subordinate CA certificate I have an Enterprise CA root server and a subordinate CA server in my domain (single domain). Both of these servers are running on Windows 2003 Enterprise edition. I was able to obtain a subordinate CA certificate when i originally set it up (this original sub CA certificate will expire on 2/2009). Now i would like to renew my subordinate CA's so the expiration date will be further out (e.g. to year 2012) so all client certificates issued by this subordinate CA will have a longer expiration date. According to this MS article, i should be able to renew it by right clicking on the sub CA server and select renew. http://technet2.microsoft.com/windowsserver/en/library/4fbf053c-c0ae-4fad-a29d-1d17f04cd5fc1033.mspx?mfr=true After the renewal request, the subordinate CA didn't get a renewed certificate. The root CA server on the other hand did show that the new certificate has been issued. But the subordinate server just didn't get it no matter how many times i restarted the server. I need help!! Tag: Forefront Managed Newsgroup Tag: 98463
  - 6
    - vista anti virus vista antivirus keeps popping up on screen wanting you to sign up and pay can not delete says access not permitted how do i get rid of Tag: Forefront Managed Newsgroup Tag: 98461
  - 7
    - MBSA safe against remote computers, no crashes? What are the risks of running MBSA against remote computers? I can't find enough details on how it works to feel 100% safe it won't reboot or blue screen any computer I scan. I normally do WMI queries against QFE, is that what MBSA does to check security fix levels? Tag: Forefront Managed Newsgroup Tag: 98447
  - 8
    - 15401 - NT user or group not found Hi, I have just set up a domain controller and a separate database server, both running copies of 2K8 joined to the same domain. Whenever I attempt to add a domain user / group to the database server as a new login, I get the 15401 error stating that the NT user or group cannot be found. However, I can browse on the "Search..." link for the Domain account, I can ping my domain controller correctly, I have gone through all of these steps, http://support.microsoft.com/kb/324321/en-us, there are no existing users by the same name. I am suspicious that it may not have anything to do with SQL itself, but I am neither a DB Admin or a Infrastructure Admin, so I am at a loss. Any ideas?? Thanks. Tag: Forefront Managed Newsgroup Tag: 98434
  - 9
    - spam problem Our isp called and said that one of our computers is sending out spam mail. What would be the best way to go about this in finding the rouge computer that's sending out spam. Thanks Tag: Forefront Managed Newsgroup Tag: 98430
  - 10
    - Administrator account and lockout policy I have account lockout policy applied to the domain. I created an account (not a default administrator account) which is member of domain admin, is there a way to have this admin account exempt from this lockout policy? Thanks! Tag: Forefront Managed Newsgroup Tag: 98428
  - 11
    - File/Folder permissions Hello, Is it possible to give access to view/change permissions (on files and folders)without giving access to open and read documents but while being able to traverse the entire folder structure? any help is appreciated. Thanks Tag: Forefront Managed Newsgroup Tag: 98423
  - 12
    - Folder permissions and take ownership Hi, I have a need to put an Active Directory group into the Administrators group on a number of machines for various reasons which cannot be stopped. The problem is there is an application on these machines that I do no want them to be able to access and the aaplication has no ability to request crednetials etc. It's just a dumb application. I considered using FOlder permissions to lock out the local administrator group from the folder. This stopped them from running the application until I when in as one of the users and simple took ownership of the folder and gave myself access. Then I tried adding a deny take ownership of the folder to the local admin group. Again it just allowed me to take ownership assuming becuase local admins can do that regardless of the deny rule I just created. Can anyone suggest how to stop them taking ownsership and from being able to run the application? Tag: Forefront Managed Newsgroup Tag: 98414
  - 13
    - Change password complexity Hi... I need to disable the password complexity in a Windows 2008. The problem is that the password complexity in my server is enable and not give me the posibility to change. Thanks a lot. Javier Valverde Tag: Forefront Managed Newsgroup Tag: 98413
  - 14
    - EFS All, I am attempting to get EFS file sharing working in a 2K3 AD Environment with XP Machines. I have successfulyl installed a DRA and disabled self-signed certificates with the Windows hotfix and Group Policy option as specified in the Windows KB Article. However I still can't get EFS to work over the network. In fact since installing the above, another user can't create a new encrypted file wthin an encrypted folder. They get access denied. Another user had told me that I should enable credential roaming or roaming profiles. This was to solve multiple certificates from being issued in AD (via Enterprise CA). Would this also prevent me from sharing encrypted files? I am with an understanding that everytime a user logs on to a machine on teh network a new certificate is generated by the CA (thus roaming is needed). If this is hte case, which one do I want to use, credential roaming or roaming profiles? Thanks, -- Steve Tag: Forefront Managed Newsgroup Tag: 98410
  - 15
    - Antigen slow performance Hi I recently had to test Microsoft Antigen 9 with SP1 against McAfee groupshield. Although Antigen and Groupshield were more or less the same although Antigen had 2 engines and not 1 i have a major difference. For my customer to move to Antigen they need to see that Antigen performes better. the problem is that a Manual scan is 5 times slower than groupshields manual scan. Testing in a lab with identical hardware and identical tests the Antigen machine took an hour and a half comparted to Groupshield that took only 22 minutes. Can someone help me with tweaking or configuring Antigen so that it competes with Groupshield? Tag: Forefront Managed Newsgroup Tag: 98404
  - 16
    - Time Travel!! Just had my computer auto update and it has somehow time travelled into the future!? Anyone else seen the same thing? Windows Defender Definition Update for Windows Defender - KB915597 (Definition 1.31.9443.0) 05 August 2008 Other Source Windows Defender Definition Update for Windows Defender - KB915597 (Definition 1.31.9351.0) 01 August 2008 Automatic Updates Windows Defender Definition Update for Windows Defender - KB915597 (Definition 1.31.9205.0) 24 July 2008 Automatic Updates Windows XP Security Update for Windows XP (KB951748) 14 July 2008 Automatic Updates Windows Defender Definition Update for Windows Defender - KB915597 (Definition 1.37.579.0) 14 July 2008 Automatic Updates Tag: Forefront Managed Newsgroup Tag: 98396
  - 17
    - scans can not complete I use Windows Defender and spybot. Everytime I try to do a scan my computer shuts down before the scan is complete... often within a few minutes of starting scan. I need to be able to do a complete scan. I have noticed my curser jumping to some bizzare spot while I am typing, but nothing else unusual. Tag: Forefront Managed Newsgroup Tag: 98383
  - 18
    - My Space I support several volunteer library PC's running Win2000. Each are configured separately but run through a common router to the Internet - they do NOT run through a server. Security is set up so I have the typical Win Admin security and users have the typical "guest" security. This means guest cannot add or delete programs. But... I notice some of users will be able have the "My Space" interface on them. The only way I can remove the My Space interface is by going to Add/Delete programs in the control pannel - and I can do this logged in as guest! Why is guest allowed to add/delete myspace? Is there a flaw in the way I set up security? Thanks for a response. Tag: Forefront Managed Newsgroup Tag: 98382
  - 19
    - Router firewall settings Hi, i need to know something about router firewall rules. What should i type in the this fields? Source LAN start ip address end ip address Dest WAN start ip address end ip address protocol port range What is start ip and end ip address? I know something about tcp and udp protocols. Also i need to know what is port range? Tag: Forefront Managed Newsgroup Tag: 98374
  - 20
    - Patched Flaw Could Have Broken Internet Backbone A flaw in the Internet domain name system could have allowed hackers unprecedented ability to redirect traffic had it not been kept secret while vendors developed patches for it. Microsoft and others released the patches Thursday. Details in this article:- http://www.technewsworld.com/rsstory/63738.html Dave Tag: Forefront Managed Newsgroup Tag: 98339
  - 21
    - Biometrics How secure and safe is biometric technology? The reason I bring this up is because I was able to log in using my finger with a band-aid attached and this definitely makes me question the security and safety of biometric technology at least as far as laptops go. I imagine there probably is lots of articles on this already but I wanted the opinions of this newsgroup. Thanks in advance for the replies. Tag: Forefront Managed Newsgroup Tag: 98325
  - 22
    - cant access internet when my security cntre (zone alarm) is turned Hello, i cannot access internet nor go on msn when my security centre is turned on. when i shut down my security centre (which i think is not safe to do so) then internet and msn all works. i think it maybe an update i need to allow me to work the internet while my security centre is turned on. i even re installed my security centre (zone alarm) and did not change any settings on there afterwards. what ever it is i need to do, please can sombody help me. thank you Tag: Forefront Managed Newsgroup Tag: 98322
  - 23
    - Unwrapping security on a 2003 server Hi Everybody/Anybody I have inherited a small network (2 x 2K servers & 2 x 2003 servers). DC1 is a 2K machine and DC2 is a 2003 machine. My Microsoft experience stopped in the year 2000 so I was good up to NT 3.51. The previous IT did not leave any information on how anything is/was setup. DC2 has been locked down/hardened (what ever terminology you are happy with) or hacked (the previous IT was a Linux geek). Our main administrator (could have been renamed?) account cannot access DC2 (only DC2, I have full acces to any other machine on the network) and I have tried all active directory accounts but nothing lets me into DC2. For example, there is no service pack installed on DC2 but after I install the network cards are disabled and they cannot be accessed until the service pack is removed. If I try and push Backup Exec remote agents - it asks for an account with administrator rights and that is us stuck. I wonder is somebody could point me in the right direction - on the later versions of server is this a domain controller policy issue (although I have had a look at all the configured values and cannot see anything that would lock me out) or is it local to DC2. Another factor that may be in the equation is that I believe that DC2 was built using small business server version of Windows 2003 (although it states standard but may have been hacked) and I believe SBS has unique security features. Hopefully somebody will have a laugh at my predicament and point me to areas that I should be looking at? Tag: Forefront Managed Newsgroup Tag: 98315
  - 24
    - How to show Windows Credentials Prompt Simple question, already searched but really nothing found. When I try to access a network resource - of a server I not yet have authenticated against - I get a Windows Credentials Prompt. I'm developing an .net application that needs to access a network share. Is there a .net or WinAPI call I can make that shows this Windows Credentials Prompt and gives me back a token so that I can Impersonate that User to access the network resource? Without this i get security exceptions and can not access files. Impersonation by using a Token through calling LogonUser API (with user password given) works. But i would prefer showing the Windows Prompt instead of doing a own user/pass prompt. And, is there an API to check if a token exists to access a server? (checking if it is necessary to show the prompt.) thanks a lot! Tag: Forefront Managed Newsgroup Tag: 98313
  - 25
    - In the group 'microsoft.public.test' I said to Peter Foldes ......... "perhaps you can help me understand why there are hundreds of posts here entitled 'ClusterSentinelNNTPPostTest' with the 'poster' being user@domain" PF usually knows the answer to most things, but this obviously has him stumped (or he's been busy elsewhere). Can anyone here explain matters? If so, I'd appreciate your view. TIA. Dave Tag: Forefront Managed Newsgroup Tag: 98307
- Next
  - 1
    - Generic Host Process for Win32 Services is active in ZoneAlarm I found that two Generic Host Process for Win32 Services showed in the programs and one is active program, when I disabled it before, the updates for windows wouldn't work, is it essential to update the system? and it should be an active program when system runs? Tag: Forefront Managed Newsgroup Tag: 98303
  - 2
    - Windows Updates make internet inaccesible with Zonealarm When will Zone labs/microsoft fix this problem?? Tag: Forefront Managed Newsgroup Tag: 98302
  - 3
    - How to enumerate dictories where auditing is enabled? Hi! We are in the process of enabling auditing on some files servers, but it seem somebody already did it in the past, since as soon as we are enabling it in the local security policy, we got a lot of events about directory being acceded successfully/failed in the security log. Now the question is : how we could enumerate all directories where Auditing have been already enabled? Thanks. Claude Lachapelle Systems Administrator, MCSE Tag: Forefront Managed Newsgroup Tag: 98297
  - 4
    - Permissions -- Unique Issue Re: XP-Pro. Only one user Account -- Admin. I have an Application("exe") which contains a DLL that is registered in :\windows\system32". The DLL provides a link to an Enterprise server and was NOT written by me. My Application ("exe") is in "c::\myprograms\test". Is there anyway to set directory permissions to make sure any unknown functions within the DLL cannot get outside of the directory? If so, how, and which directories? In other words I want to make sure the Enterprise server CANNOT use any functions within the DLL to access anything on the client other than providing the read/write data link. Tag: Forefront Managed Newsgroup Tag: 98281
  - 5
    - Workgroup clients can access domain shares I have a sbs 2003 running DHCP. The Guest account has been disabled. I verified this by the net user guest command. All share permissions seem to be working fine within the Domain and the Everyone group is not listed. I have one NT machine that is on a Workgroup and gets its IP from the sbs server. It has access to all shares with no apparent restrictions. Any ideas or direction would be great. Tag: Forefront Managed Newsgroup Tag: 98280
  - 6
    - FIX for ZoneAlarm & KB951748 issue released [Crossposted to Windows Update, WinXP General, IE General, Security, Security Home Users newsgroups] Resolution [was Workaround] for Sudden Loss of Internet Access Problem http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html (revised multiple times since release on 08 July 2008) NB: Do NOT use Option #2 if at all possible! The vulnerability addressed by KB951748 *is* a big deal! See http://blog.washingtonpost.com/securityfix/2008/07/patch_the_entire_internet_tues_1.html Want to consider other, more highly-rated firewalls? http://www.matousec.com/projects/firewall-challenge/results.php -- ~Robear Dyer (PA Bear) MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002 AumHa VSOP & Admin http://aumha.net DTS-L http://dts-l.net/ Tag: Forefront Managed Newsgroup Tag: 98276
  - 7
    - Cannot access internet after Windows update My pc (running Windows XP) was running fine when I shut down last night. This morning after powering up my PC, there is an Automatic Windows Update balloon in the icon tray that prompted me to install the latest Windows update, which I did. Afterward, i can no longer connect to the net unless I disable my Zonelabs with Anti-Virus firewall. It never given me any prob until the latest Windows updates. I'm posting this message with my Zonelabs firewall disabled. What is wrong? Thanx in advance. Francis Tag: Forefront Managed Newsgroup Tag: 98270
  - 8
    - Auto Updates from July 8, 2008 I have XP sp2 and yesterday Auto Updates did not give me a patch from the list of four that were released yesterday. I only received was only one other one, which I believe was released 7/7/08, and the usual malicious removal program. Shouldn't all XP sp2 users receive the patch below? http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx When I said the list of four patches, I mean: http://www.microsoft.com/technet/security/bulletin/ms08-jul.mspx Tag: Forefront Managed Newsgroup Tag: 98264
  - 9
    - Deleting Archived Certificates from Users' My store on Workstations Hi, We have a piece of software that only checks for the existence of a certificate not whether it has been revoked or not. For this reason we would like to remove all of the archived certificates from the user My Store on workstations in the environment. The certs all had encryption set as a purpose so they have been archived and not deleted. I know that I can use a "certutil -delstore -user MY 999999999999999" command to remove individual certificates but I'm looking for a way to manage this across 5000 workstations. Is there an easy way that I am missing? Thanks, Bill Tag: Forefront Managed Newsgroup Tag: 98253
  - 10
    - Live Communications Server 2005 - Web Access Having some problems with LCS 2005 web access whilst trialing it for production use. I'm getting an error 1 when logging on, and various websites have pointed towards a problem with the certificate. Now I'm not a big fan of certificates, and will admit to not knowing much about the implementation with Certificate Services in Svr 2003. I've requested a certificate from the CA with the name of the FQDN machine with web access installed on it. Could anyone give me some advice or a resource that has step-by-step guides on how to implement both Web Access and LCS 2005. Tag: Forefront Managed Newsgroup Tag: 98252
  - 11
    - Local disk security What is best practice for security permissions on a 2003 web server's C drive? Here are my current security permissions after setting up a new web server and joined to domain Local Admin group - FC Creator Owner - FC Everyone - Special (default permissions) System - FC Users group - default permissions I have a D drive were inetpub has been configured with websites and the permissions are the same for this drive. Shouldn't everyone and creator owner be removed for tighter security? Tag: Forefront Managed Newsgroup Tag: 98250
  - 12
    - Microsoft Active Directory Certificate Services - Error Messages Two issues: 1. Under Enterprise PKI, the server shows "DeltaCRL Location #2" and "CDP Location #2" as Expired. All other locations show OK. Is there any way I can manually force the PKI to update/renew these CRLs? 2. After installing ADCS Online Responder, I receive the following error message: "Bad signing certificate on Array controller" Operating System Windows Server 2008 SP1 (64-bit) Roles Active Directory Certificate Services Active Directory Domain Services DNS DHCP IIS This server is an Enterprise Root CA and also runs the Online Responder. --------Reply Note-------- Please reply either directly to this post or to it-tier3@visionnet.us Tag: Forefront Managed Newsgroup Tag: 98249
  - 13
    - EFS/DRA All, I could really use some help with this EFS/DRA stuff. One thing at a time I suppose. I have successfully published a DRA via Group Policy (Win2k3/AD). I created an encrypted file on an XP2 machine. When I click details of the encrypted file, I can see the DRA. Associated with the user is a Cert Thumbprint. I am logged onto a DC with the DRA user and when I open the Certificates snap-in for mmc, the under Personal --> Certificates, the cert is there (with the same Thumbprint). Likewise the same cert is listed under Active Directory User Object --> Certificates. However when I try to access the files on the XP machine from the DC (file share) it says access is denied. I am trying to test the data recovery agent before implementing EFS on my network. Did I miss a step? Possibly related or unrelated, I am also havinga problem with DC issued certs vs. self-signed certs. I was testing with QA and found that I needed to add his self-signed cert to the encrypted file so that he could view it. He has been autoenrolled for a efs cert (duplicate of Basic EFS) but it doesn't appear to be working. What did I miss here? Also, I have noticed that many users have been autoenrolled for the efs cert multiple times (viewing the Certification Authority --> Issued Certificates). Any and all help would be greatly appreciated. -- Steve Tag: Forefront Managed Newsgroup Tag: 98239
  - 14
    - Data File - lock issue I am an IT administrator for a company and we have issues with one of our Domain Controllers. It is a Dell Poweredge Serve - Windows Server 2003 Enterprise SP1- We have a Data Drive (5 hard drives - raid 1 and 5 array's) - with data for all our departments - with file permissions. There are certain file(s) within a folder structure that we are unable to delete. It happens from time-to-time - Every few weeks I come accross a file/folder that we are unable to Delete, Rename or Cut. Does not seem to be a file permission issue as I have removed permissions on the file we are currently having problems with and put in Domain admin and administrator to full permissions and went to advance and made sure the admin is the owner as well. The message we are getting is as follows: Cannot Delete (Filename): It is being used by another person or program - I have already went to Manage and clicked on Open Files and Sessions to make sure it was not in use and it is not. I also went to McAfee 8.0 Console and exluded the whole directory its in and that did not help. There is really nothing else that I know of that is locking this file down - its really just a data server also being used as a DC. Any information as of why we would be getting this problem would be great. Thanks, Steve Cummings MIS Coordinator. Tag: Forefront Managed Newsgroup Tag: 98237
  - 15
    - Ed Hardy shoes EDS080124 - www.luxury-gift.org Ed Hardy shoes EDS080124 - www.luxury-gift.org Luxury Gift : http://www.luxury-gift.org Ed Hardy shoes : http://www.luxury-gift.org/Shoes/Ed-Hardy-shoes.html Ed Hardy shoes EDS080124 Link : http://www.luxury-gift.org/Shoes/Ed_Hardy_Shoes_EDS080124.html Ed Hardy shoes EDS080124 Information : Brand : Ed Hardy shoes Code : EDS080124 Description : Luxury Ed Hardy shoes SAME AS PICTURE2008 hotsalenew arrival Ed Hardy brands shoes Legendary tattoo artist Don Ed Hardy and fashion whiz Christian Audigier have teamed up to bring vintage inspired tattoo artwork to a fantastic apparel line called Ed Hardy. Ed Hardy shoes Link : http://www.luxury-gift.org/Watches/Ed_Hardy_Shoes_EDS080124.html Tag: Forefront Managed Newsgroup Tag: 98234
  - 16
    - Corum Sugar Cube 10140.501810, Best Luxury Watch - Corum Sugar Cube 10140.501810, Best Luxury Watch - www.luxury-gift.org Luxury Gift : http://www.luxury-gift.org Corum Watches : http://www.luxury-gift.org//corum-watches.html Corum Sugar Cube 10140.501810 Link : http://www.luxury-gift.org/Watches/corum-watch-697.html Corum Sugar Cube 10140.501810 Information : Brand : Corum Watches Series : Sugar Cube Code : 10140.501810 Gender : Small Case Material : Stainless Steel Dial Color : Red Bracelet Strap : Leather - Red Movement : Quartz Clasp Type : Tang Buckle Bezel : Fixed Crystal : Scratch Resistant Sapphire Case Back : Solid Case Diameter : 16mm x16mm Case Thickness : Water Resistant : Stainless Steel Case, Red Lizard strap, Red dial, Diamond bezel (Total weight 0.33ct). Corum Sugar Cube 10140.501810 Link : http://www.luxury-gift.org/Watches/corum-watch-697.html Tag: Forefront Managed Newsgroup Tag: 98233
  - 17
    - Omega Co-Axial Automatic Chronometer 4581.31, Best Luxury Watch - Omega Co-Axial Automatic Chronometer 4581.31, Best Luxury Watch - www.luxury-gift.org Luxury Gift : http://www.luxury-gift.org Omgea Watches : http://www.luxury-gift.org//omgea-watches.html Omega Co-Axial Automatic Chronometer 4581.31 Link : http://www.luxury-gift.org/Watches/omega-watch-1842.html Omega Co-Axial Automatic Chronometer 4581.31 Information : Brand : Omgea Watches Series : Co-Axial Automatic Chronometer Code : 4581.31 Gender : Ladies Case Material : Dial Color : Silver Bracelet Strap : Stainless Steel Movement : Automatic Chronometer Clasp Type : Bezel : Crystal : Case Back : Case Diameter : Case Thickness : Water Resistant : Stainless steel Case & Bracelet , Silver dial, Date between 4 & 5, Sapphire Crystal with multiple Anti-Reflective coatings, COSC Certified Chronometer, Water Resistant to 100m/330ft. 32.5mm diameter. Omega Co-Axial Automatic Chronometer 4581.31 Link : http://www.luxury-gift.org/Watches/omega-watch-1842.html Tag: Forefront Managed Newsgroup Tag: 98232
  - 18
    - Verifying an account password without modyfying the last logon Is there a method of checking that a Windows Local or Domain account password matches a given password, without the account last logon date being modified? E.g: if I check the password based on a successfull $IPC share, then the Last Logon date of the user changes, i would like to avoid this date changing. thanks, B Tag: Forefront Managed Newsgroup Tag: 98227
  - 19
    - FYI - Windows Update agent (client) infrastructure update coming soon Crossposted to Windows Update, Security, and Security HomeUsers newsgroups. Follow-up set to Windows Update newsgroup. ================================= Microsoft Update Product Team Blog: Upcoming Update to Windows Update [I'd like to let you know that, beginning at the end of this month and continuing over the next few months, we?ll be rolling out an infrastructure update to the Windows Update agent (client). I wanted to take this opportunity to provide some background on the update and discuss the value these updates bring to you...] http://blogs.technet.com/mu/archive/2008/07/03/upcoming-update-to-windows-update.aspx -- ~Robear Dyer (PA Bear) MS MVP-IE, Mail, Security, Windows Desktop Experience Tag: Forefront Managed Newsgroup Tag: 98216
  - 20
    - preventing information theft Hi, I want to make sure I don't miss something. Here is what I want to do; - Prevent any domain users to be able to copy any documents (or information) from the server (from mapped drive) to a removable disk, usb key, floppy, etc.... I know that even though it is doable they can still send by e-mail but I'm not there yet. For now we are in the process of disabling the burning feature of xp and software restrictions policies but to be able to prevent information theft the best way possible would be nice. I think there is a microsoft product that does that but can't remember which one. Any ideas would be appreciated. note ; sbs 2003 server with all workstations at XP sp2 or sp3. Thanks Tag: Forefront Managed Newsgroup Tag: 98213
  - 21
    - Hosting security At present we host our own web servers in a hosting centre. The web servers are on a workgroup with a Cisco firewall between them and the back-end database servers (SQL). Obivously only the database ports are open on this firewall. We are in the process of changing all our equipment and I was just wondering if anyone had any opinions on 'best practise' for this sort of environment? From an admin sort of view, it would be easier if all on same domain and SCOM would work better that way but this would open up our SQL servers to possible attack. Thanks Tag: Forefront Managed Newsgroup Tag: 98212
  - 22
    - Templates not showing in Web enrollment I have a problem where I seem to add a template into the Certificate Templates folder on my Root CA but it doesnt show up on the web enrollment server. I have a theory that this might be becuase the Root CA is an Enterprise CA and the issuing server running web enrollment is a standalone CA. Setup this way for "security" reasons and i was lucky to inherit. Is this the reason? if so how do i get those templates copied over to the web enrollment server? Tag: Forefront Managed Newsgroup Tag: 98210
  - 23
    - setting password for wireless base station Setting up wireless in my home. Instructions call for using admin as the the basic password, but the system rejects it. Any idea where to go from here? I am not a techie, so please be patient with me. Tag: Forefront Managed Newsgroup Tag: 98207
  - 24
    - Data Protection Is there a way to block users from copying data from shared network drives to external drives or CD's? Would even settle for monitoring to log files to track those users that attempt to take data off site. Or both would be great. Tag: Forefront Managed Newsgroup Tag: 98205
  - 25
    - Control time limit of cached credentials Hello, We have a few laptop users with logins to our AD domain. They are sometimes offsite for quite a while. Eventually, they can no longer log in with their domain credentials. Our help desk then has to walk them through setting up a local profile so they can work. Is there a way to set this so the credentials don't timeout? Or is there a way for them to be able to authenticate remotely to our domain? I already went down the route of using our VPN client but that is not supported. Any help would be appreciated. We'd prefer not to have to give these people local machine accounts. Thanks, Mike H Tag: Forefront Managed Newsgroup Tag: 98201

Hi,

I'm trying to find the above but couldn't find one.

Could somebody help, cos I need to do some troubleshooting in there.

Thanks.

Rgds,
Straw

Top

Re: Forefront Managed Newsgroup by PA

PA
Fri Jul 18 16:49:31 CDT 2008

Forwarded to microsoft.public.security.forefront newsgroup via crosspost.

On the web:
http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?dg=microsoft.public.security.forefront

In your newsreader:
news://msnews.microsoft.com/microsoft.public.security.forefront

============

Also see...

Forefront Forums
http://forums.microsoft.com/forefront/
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

strawberry wrote:
> I'm trying to find the above but couldn't find one.
>
> Could somebody help, cos I need to do some troubleshooting in there.

Top