Interoperability between Window 2000 and 2003 Enterprise CAs

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - ? ccApp With Windows XP Home Edition on shut down on some occasions the window ccApp appears. What is this? Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89631
  - 2
    - requesting cert from local CA: "no trusted certificate authorities I'm playing around with AD, certificates, and smart cards on a test server separated from the rest of our network. I'm currently going by http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/howto/mapcerts.mspx, trying to get a certificate that I can place on my smart card to log in with. I have a certificate authority installed on this domain controller (as a stand-alone root CA), and I can see its cert in "Trusted Root Certificate Authorities". If I try to launch the "Request New Certificate" wizard for any account, I get an error message saying the wizard could not be started because "there are no trusted certificate authorities available", or permission is denied. Is there something special I have to do to get the local machine to "trust" this CA, or some other way I should go about this? Thanks Bean Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89628
  - 3
    - Services - Windows Server 2003 R2 hi, i have a code line that want to open an exsiting html file //Init ShellExecuteInfo : shlExInfo.cbSize = sizeof (SHELLEXECUTEINFO); shlExInfo.lpFile = strFileName.GetBuffer(); shlExInfo.lpParameters = NULL; //Set flags and verb shlExInfo.fMask = SEE_MASK_NOCLOSEPROCESS; shlExInfo.lpVerb = _T("open"); shlExInfo.lpDirectory = strDirName.GetBuffer(); shlExInfo.nShow = SW_SHOWNORMAL; int iRet= (int)ShellExecuteEx (&shlExInfo); it work fine on XP, and open IE with the file, but on Windows Server 2003 R2 it doesn't open the IE but return a success return value. This is a service code, yes i check that the service allow to interact with desktop. another thing is that this server not display message box. do you know any configuration seting to allow service to do so in Windows Server 2003 R2 Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89625
  - 4
    - Good book for PKI implementation Hi, I was told that there is very good book on PKI implementation (related on how to avoid mistakes during the PKI implementation based on the Microsoft deployment experience). If you know the title for such book, please let me know which one it is. Thanks. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89624
  - 5
    - Role-based security from Windows Server 2003 Security Guide gives problems Hello I have an Ad-environment with 2 Windows 2003 SP1 eng server and some Windows 2003 SP1 eng member server. I have applied some EC-server policy from Microsoft document from april 2006. On Domain root I have applied EC-Domain.inf On Domain Controller OU I have applied EC-Domain Controller.inf On Member Server OU I have applied EC-Member Server Baseline.inf On sub OU Web OU I have applied EC-IIS server.inf I joined 2 new web-servers to the domain and put them in the default Computer OU. Lets call them lt104 and lt135 as servername. Now my problems starts If I from DC run My Computer > Manage > Connect to another computer, select server104 see errors in word file. If I from a member server that lies in Web OU run MBSA against all server in the domain I get errors from scanning lt104 se word file If I move the server lt104 to Web OU, none of the above errors occur. But the server lt104 needs to connect to a standalone server to get picture and I cant connect to that standalone server if lt104 is in the Web OU but it works if it lies in Computer OU. Any ideers whats causing this problem Regards Mikael Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89615
  - 6
    - Scaperl: send handcrafted packets and sniff Hi, Scaperl is a portable, customizable packet creation and sending/sniffing tool written in Perl. It is based on PCAP and libdnet (and their respective Perl wrappers). It was tested on Windows XP, Linux and NetBSD. The goal is to have a minimal, portable, efficient implementation of Scapy concepts (written in Python, see Philippe Biondi's page at http://www.secdev.org/projects/scapy/), with readable, well commented code and good documentation. This is the first public release, only a few fields and dissectors have been implemented. People interested can have a look at my web page at http://sylvainsarmejeanne.free.fr/projects/scaperl for more information and for the documentation. Sylvain SARMEJEANNE Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89607
  - 7
    - Is it secure to Automatic Login to users accounts in XP? Hi, I know a solution that can make users to automatic logon to their accounts in XP. Please refer to: http://kgiii.info/windows/XP/general/auto_login.html I am wondering whether the automatic login is secure or not. Does it make the OS more vulnerable for being hacked? -- Thank you for your help! Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89605
  - 8
    - Generic Host process for win32 services listening to port: tcp: 135 Hi, all. My Zonealarm Firewall suggests that Generic Host process for win32 services listening to port: tcp: 135. Does it secure for my system? -- Thank you for your help! Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89604
  - 9
    - My firewall asks if I can let NTVDM.EXE access the Internet Every now and then NTVDM.EXE tries to access internet and my firewall asks if that can be allowed. I kone NTVDM.EXE is used to run old 16-bit programs but I don't know why it tries to access Internet. Is that safe? thanks, Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89601
  - 10
    - Spyware I recently have a couple adds ( antispyware adds) telling me I have serious viruses. Windows defender sees nothing and so did my recent earthlink protection. These items also have persistent pop-ups associated with them. Are they telling me the truth or are they the real spyware? somebody please help me with this. Thanks, Barney. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89600
  - 11
    - Is it necessary to update Realplayer, and attain all security updates for all software installed? Hi, all. Is it necessary to attain all security updates for all software installed on the system? Do I need to update Realplayer frequently? -- Thank you for your help! Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89591
  - 12
    - Have I been Hacked? I had to do a clean install of my XP home edition recently ( 3 months ago ) and registered it in my own name! I have been having major problems in the past month resulting to my pc switching of randomly ( sometimes will stay on for a day without switching off and then other days every half hour or whateva ). Today I went to check My computer, properties and now see that my pc is now registered in another name ( clueless now ) I was using blueyonder firewall but decided to remove and just used the built in XP 1. Since finding the new name I have installed Free Zone Alarm and scared to let any programe in at all now. Is it posible that I have been hacked and if so, how can I change the registry information back to my own name? Any help would be really appreciated! Ty in advance to anyone who can help me! Sylviaa Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89586
  - 13
    - users and local Admins As you might know, We have a domain setup where it was migrated from Windows 2000 to Windows 2003. A security review (Audit) was done by third party and their report has number of issues. One of the issues is as follows: Each user account in the domain is member of the Local Administrators on his/her respective machines. Their recommendation is to remove user accounts from Local Admins in desktops and laptops. We tested removing the users from the local admin group for a small number of test users and we faced different symptoms after that (One user canâ??t open his PST file from inside Outlook, another User canâ??t open Adobe Acrobat PDFs, another user who was able to install application was not able to uninstall them, another user was not able to enable the wireless network connection while at home). We need an official advice from Microsoft in such scenario, is it better to keep the users as members of Local Admins on their laptops and avoid creating a lot of different problems or its recommended to remove them from the Local Admin Group and point out expected problems that might arias and how to solve them. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89583
  - 14
    - Restrict Anonymous access Recently we have done a security Audit, As per their recommendation we need to change RestricAnonymous Registry settings to HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA set to 1, to prevent access to systems null credentials Currently it is HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA set to 0 What will be the impact if we changed to 1, any application will have issues ?(IIS,Exchnage,OWA,etc...), Please help...... Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89582
  - 15
    - How to make the downloaded files scanned by Symantec Antivirus? Hi,all. I am using Symantec Antivirus. Sometimes I will add some files onto the hard disk, and I use Flashget(software for fast downloading) to download them. There is an option for installed antivirus software that can make these downloaded files scanned for virus.I chose where the AT software located and "Rtvscan.exe". But it does not work. After files downloaded, the AT software does not start scanning them, but there is a window of command line flashing for a second. I wonder if the Symantec Antivirus has scanned the files just downloaded. Please help me. -- My reply is on the top of yours. Thanks for your help! Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89568
  - 16
    - locking files I have a flash drive, and i would like to put a passwork lock on it... does anyone know how. or how about locking a file? -- John Stanley Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89567
  - 17
    - change client password my client are not able to change their domain password. error unable to change password They exist in a windows 2000 ad domain, as far as i can see there is no policy preventing the clients from changing their domain logon password can anyone point me in the right direction, thanks in advance Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89564
  - 18
    - Built-in SID accounts??? There are built in security identifiers for windows server 2003. You can specfiy different ones to launch the services. What I don't know is if there are diffierent permissions based on the one you use. SID: S-1-5-18 Name; Local System SID: S-1-5-19 Name: NT Authority\Local Service SID: S-1-5-20 Name: NT Authority\Network Service Applied a high security template that impacted the SQL2005Express service starting up as a service. It was using the Logon as Network Service. If I change the logon to use Local System, then it starts with no errors. But concerned that there may be something else broke that I haven't discovered. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89563
  - 19
    - GPO for restricting Internet sites? Is there a way to set up a Group Policy that will allow me to block all internet sites, but give me the flexibility to add certain sites for access as deemed necessary? While I would prefer this to be done on a user basis, I am willing to apply to computers instead. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89560
  - 20
    - Looking for a IDS/Sniffer Hi All, I'm not sure if this is the forumn for this question or not but I'll throw it out there. I'm working at a client where the manager wants to implement a IDS and network sniffer solution. Basically we want to 1) monitor and block intrusions into our nework from outside 2) track and block internet abuses 3) track and manage network performance (packets, http, etc..) All of this is to enhance the Cisco firewally we already have in place. Our network is Windows 2003 AD and what we're really starting to do is build an enterprise network that will provide the stability and protection we're looking for in the long run. We have 2 other branch offices that will need to be protected by this solution as well and I'm sure in the future we will be adding other branches to the scheme of things. Can anyone recommend any good security products that they've worked with that provides these functionalities? Thanks, Cooley Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89559
  - 21
    - help in locking down Start button, Task bar, desktop and clock I am not sure where to post this but for now I will put it here. I have two computer running XP PRO Ser pack 2, the end users that will run the computers only need to see the desk top Icons ( this part I got ), and on the start button to see only the logoff and shutdown buttons ( this part I got ) I now need help in locking down the Clock, the start button, Desktop and the task bar how do I turn off the right click on these items I know it can be done I have seen a computer with this setup before please help or let me know witch area to post this. -- Al Dzina Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89557
  - 22
    - Pop-Ups Whenever I go onto the internet I am bombarded with pop-ups, especially ones where you cannot get rid of them no matter how many times you click the 'X', gambling ones seem to be the worst. Can anyone give me advice on how to solve this problem? Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89551
  - 23
    - PKI - Intermediate CA Hello, We can read on several papers that intermediate CA introduces a flexibility and policy layer into PKI design but I don t understand how we can achieve this. What customization is better at intermediate CA (standalone CA) level than at issuer CA level (Enterprise CA)? May be something like application policy and issuance policy restrictions? At issuer level we can restrict what certificates can be issued and to who they are issued. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89550
  - 24
    - help!! hi... i'm wondering if anyone can help me? i have serveral annoying virus', which are stopping me do day to day tasks, interfere with my internet connection and drivers. i cant seem to get rid of them via the delete button or via norton antivirus, i'm wondering if there is anyway i can clear my c: drive in dos/command prompt and re-install windows xp in dos/command prompt if i need to but...... i dont know any commands.. can someone please help... i've been trying to learn but cant find any simple websites... i would like to know how to wipe the c: drive clean(my primary hard-drive) and re-install xp without an operating system?? can anybody help this lost soul??? pleaseeeee x x Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89546
  - 25
    - Defender AV/Spyware scan OK no problems But computer acting like v I have run Microsoft Defender, Trend Micro IS 2007 (Def's up to date) No problems found. But my computer continues to act like it has a virus or other infection. Spam has increased, cursor jumps about, Firefox locks up inexplicably, can't scan with AV yesterday ~ but OK today. Yesterday AV software keeps asking for password (no passworkd set). Just acting like something is wrong. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89545
- Next
  - 1
    - Kerberos key table file Hi All, We are using SSPI/GSSAPI for coding an application consisting of server and client. We know that the service keytab is stored in a key table file on the system where the server program is running and this keytab is extracted using the ktpass utility. We don't want to use key table file for storing service keytab as this is not that secure enough. I want to know the following : 1. Is there any other way (not key table file) of storing the service keytab on the system where the server program is running. for eg: the host service keytab (host/<host-fqdn>@REALM) is stored somewhere maybe a keystore on that host and not in a key table file. 2. Can we use the same store where the host keytab is stored. If so, can you please point me to the sample code or functions which does this. Thanks in Advance, Srini Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89542
  - 2
    - EFS Recovery Agent Creation Question. All, I am in the final steps of implementing EFS into Active directory. I have created my CA server, configured my EFS recover template, but that leaves me with one question. When I request an EFS recovery certificate, the computer name is displayed in the summary page during the certificate request wizard. Does it matter which computer I create the recovery agentâ??s certificate upon as long as the computer is a member of the domain? Or does it need to be a certain computer in the domain such as a DC? Thanks for your help in this. Mark Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89536
  - 3
    - CA Autoenrollment I have an Ent. Root CA that has a Cert. Template that I want autoenrolled for specific users in AD. The CA works fine with manually requesting the certificate but I cannot seem to get the users autoenrolled. The certificate was created and the group added in the security tab of the certificate and read, write, enroll and autoenroll are checked. But the users still do not get the cert unless they pull it down through the web. I have run out of ideas. Any help would be appreciated. Thanks bob - new york Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89534
  - 4
    - NTService & ShellExecute Hello all, I'm trying opening a GUI application from an NT Service using the ShellExecute or CreateProcess API's. The execution succeeded, but the problem is that the GUI runs in the SYSTEM environment, so no GUI displayed. Can anybody help me in this? NOTE: I'm using VC++ with MFC 7 and the target OS's are 2K and later. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89530
  - 5
    - Electronic Signatures in MS Word Hello, Does anyone know where I can get information on how to set up electronic signaturesin word?? What I am trying to do is set up users to email there approvel off insted of have to print off the sign them. Please let me know if anyone can help Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89529
  - 6
    - 802.1x, roaming profile, VLAN change Hi all, I have problem with roaming profile when the 802.1x authentication is configured and where there are 2 or more VLANs. If the machine authentication succesful, IAS will instruct the switch to configure the port to VLAN x. Then when a user logs on, IAS will instruct the switch to move the port to VLAN y. For other group of users, we set to VLAN z. The problem: the user won't be able to download (after logging in) and upload (after logging off). I notice that this is due to changing of VLAN on the switch: once the user logs on, the switch will quickly move the port to VLAN y, while the IP address of the PC still belongs to subnet of VLAN x. It means the PC cannot contact the server until it gets a new valid IP address (in the VLAN x). My setting: AuthMode --> 1 SupplicantMode --> 3 (based on http://technet2.microsoft.com/WindowsServer/en/Library/8e74974f-c951-48ce-8235-02f4ed8e74921033.mspx?mfr=true) I tried to create: GpNetworkStartPolicyTimeoutValue --> 60 (seconds) (under HKLM\SOFTWARE\Microsoft\Windows NT\Current Version\Winlogon, based on http://support.microsoft.com/default.aspx?scid=kb;en-us;840669) but no success. Is there any way to delay the downloading/uploading the profile? So that the PC will have time to change the valid IP address before downloading/uploading the user profile. Thank you in advance. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89525
  - 7
    - My email address appears through search engine Although this may not be an appropriate forum for my question/concern, I am pleading for someone's suggestion or help to resolve my dilemma. Back in 2002 when I was a novice to on-line newsgroups, I posted several questions on the MS Newsgroup forum showing my actual email address. Several weeks ago I googled my email address and to my surprise it appeared several times on the following site. http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-ms/ I am not familiar with that site but it appears to contain both active and archived newsgroups. Since about 2003 it appears that the email addresses are being encrypted (if thats the correct term?) to possibly prevent mining of addresses. However, prior to that time the posters' actual email address appeared, including mine. There could possibly be thousands of actual email addresses appearing on the site which are being mined and used to spam unsuspecting victims, of which I may be one. I have sent the web site several emails in recent weeks requesting that my postings and email address be removed from the site, however, it has only been removed in one instance and still appears in two other instances. Recent emails to the site requesting further deletions have gone unanswered and my postings and address still appear for the world to see. Can anyone advise how I can get this matter attended to. Sorry for the long post. Thanks. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89524
  - 8
    - very strane problem with a mandatory profile i create mandatory profile with this steps: 1- create the profile I'll use as a mandatory profile 2-Save the mandatory profile in folder in local partation 3-change the Ntuser.dat to Ntuser.man 4-i configure the user accounts i want to use the mandatory profile 5-and when i log on with one of this users this error message appear : "Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator" i don't know what wrong i make .... plz plz plz plz help me thanx ta2ta2 Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89523
  - 9
    - Dialui Hello all, After scanning my system with Windows Defender a dialer called Dialui was found but when Defender tried to remove it error OX80501001 was encountered and the removal could not be completed, how can I remove this software and why Windows Defender could not complete the removal? Thank you in advance for your help. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89519
  - 10
    - Eventlog Warning !!! WinXP SP2 Pro. Event Log Warning for both limited user, and priviliged user too. Windows saved user's xxxxx registry while an application or service was still using the registry. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as user account, try configuring the services to run in either LocalService or NetworkService account. Now I know where Services are, and how to go to properties-general tab-log on tab, but I do not know which service to click on in the first place in order to configure services. I also do not see a Select User dialog box to specify a user account under the Log on tab. I hope someone can give me a detailed lead in this one. Thank you so much.. >>worried<< Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89509
  - 11
    - Event log Systems we have 100+ servers, and would like to implement a syslog type of server. does anyone love/hate theirs that they would please share. We would like to get a eventlog system that will tell us when certian critera are met, like multiple failed log in attmepts, and critical system errors. a one stop shop per say for monitoring event logs. Something that will make reading the event logs easier, and easier to spot the important stuff. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89500
  - 12
    - Kerberos with "Selective Authentication" over forest Trust Hello When we use "selective authentication" on the one-way forest trust, kerberos is not working, only NTLM. When we deselect "selective authentication" on the forest trust, kerberos works fine to access ressources in the ressouce domain. For security reasons we need "selective authentication" on the trust and we want kerberos as the authentication protocol. (The Domains are in W2K3 mode, serviceprincipalnames for the accounts are created) With "selective authentication" enabled we receive the following error from a DC in the resource Domain: No. Time Source Destination Protocol Info 53 3.896470 159.29.17.56 159.29.193.212 KRB5 KRB Error: KRB5KDC_ERR_POLICY Frame 53 (196 bytes on wire, 196 bytes captured) Ethernet II, Src: Cisco_f2:6c:f0 (00:d0:bc:f2:6c:f0), Dst: CompaqCo_dc:b2:4b (00:08:02:dc:b2:4b) Internet Protocol, Src: XXX.29.17.56 (159.29.17.56), Dst: XXX.29.193.212 (XXX.29.193.212) Transmission Control Protocol, Src Port: kerberos (88), Dst Port: 1853 (1853), Seq: 1, Ack: 1740, Len: 142 Kerberos KRB-ERROR Record Mark: 138 bytes Pvno: 5 MSG Type: KRB-ERROR (30) stime: 2006-10-27 09:54:51 (Z) susec: 940079 error_code: KRB5KDC_ERR_POLICY (12) Realm: SERVICES.XXX.YY Server Name (Service and Instance): HTTP/personal.services.XXX.YY Name-type: Service and Instance (2) Name: HTTP Name: personal.services.XXX.YY e-data PA-PW-SALT Type: PA-PW-SALT (3) Value: 130400C00000000003000000 NT Status: Unknown (0xc0000413) Unknown: 0x00000000 Unknown: 0x00000003 Does anyone have an idea? Greetings Roger Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89494
  - 13
    - Disable CD ROM for Certain User Account Hello, I am on Windows XP SP2. Is there a way to completely disable CD ROM (stop user from being able to use CD ROM, thus prevent use of bad, or virus infected CDs) for certain user account? I heard it is possible to do it via Group Policy or Local Security Settings, but I might be wrong. Thank you everyone. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89489
  - 14
    - Beautiful women, aged clones, and Ultimate Fighting Championship Friend, I'm always looking for good and intelligent individuals like you to visit my website, www.ChezBrandon.com , and it has pictures of beautiful women, information about aged clones, and a link to Ultimate Fighting Championship, a very good show. My name is Brandon, and I'm in my 20s, am a college student, and as lie detectors, both conventional and unconventional would show, I've never been sexually penetrated. Moreover, I could be shown pictures of X, Y, and Z, and it would show that I'm only sexually attracted to women. The Murders of Our Leaders in Government were Stopped. I, Brandon, can take lie detector and psychological tests, and I can go before a panel of truth detecting experts. I tell the truth. A mini-psychological test: 8 times 2 = 16, the world is round, not flat, and the year is 2006. Feel free to call me, my cellphone number is 503.740.0272 (United States based) and feel free to utilize a GK-1 voice truth detecting device too: >From Congressmen Bill Frist to John Kerry to Dennis Hastert to Hillary Clinton to John Warner to Ron Wyden to Gordon Smith to John McCain to Joseph Lieberman to Nancy Pelosi to Diane Feinstein to Ted Kennedy to anyone else who happened to be in the Congressional chambers during either a joint session of Congress or a State of the Union address from Masons to Skull and Bones members to Secret Service agents to pages to visitors to other good individuals, they all would have been murdered, all of their accomplishments stripped away, their earned wealth stripped away, their homes stripped away, their family and friends stripped away. Moreover, someone else would have been sleeping with their spouses. Elements of the Mossad, who wanted to bathe in the blood of our Congressmen as well as bathe in the blood of leaders around the world, and when they seized power they would, as confirmed by psychic vision and confirmed auditorially, "he's right; he's psychic," would outlaw most if not all organizations, including the Masons, and these elements as Victor Ostrovsky writes about in his #1 New York Times bestseller By Way of Deception are out of control, notoriously lie, and have a disregard for life -- I was able, thank God, to thwart the conquest of the USA and the world, and was able to thwart the murder of United States and world leaders, via a psychic vision of Senator John Warner and other Congressmen being choked to death by gas, which was confirmed auditorially from both ears, such as "He saved Congress," who they were going to kill "all of them,""how did he know that?" and "he's psychic" -- murdered my biological Aunt Gloria Atkinson, whom I loved very much, as she did of me, and there is a tribute to her on my website. Please, friend, be sure to barricade your bedroom door at night. I'm not afraid of aged clones or the attempted chopping off of my appendages (elements of the Mossad talked about chopping off my right middle finger and right ear, and 10 out of 10 of my toes, like my right middle finger have unique steeple designs). I'm not afraid of anything. I'll defend myself to the best of my ability, and I commit my life to saving the lives of men, women, and children and strengthening good organizations. I will always remember my biological Aunt Gloria Atkinson. Sincerely, Brandon Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89488
  - 15
    - Event ID: 537 Hi, sorry if it post it before ( can't find a good solution ) On my DC win2003 i have manny security events Can anyone tell me what to do. Regards, Addy Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89487
  - 16
    - If I have created recovery image in a hidden partition, should I creat bootable rescue media in addition? Hi, all. I am using Acronis True Image to backup the partitions. I have created Acronis recovery manager in a hidden partition. If there is serious problem in the system, I can restore the chosen partitions just by pressing only one key a few seconds after system starts. Then should I creat bootable rescue media using CD-R in addition? Can't the recovery image function when the system can not be booted? Thanks. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89485
  - 17
    - in defender: why is ther no 'always allow' status i have an old program that is not recognized by Defender. every time i start my computer Defender reports that it doens't recognize the program, then i can only choose between 'allow' and block. There should be a 'Always allow' but I can't find that option. Joepie. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89482
  - 18
    - Trojan? Computer security issues Recently I was browsing the internet, and (I have Mcafee security programs) a window popped up saying a trojan was found, and blocked. I tried to close Internet Explorer when I saw this, but it wouldn't close for the next minute or so. I ran a virus and adware scan afterwards, but found nothing but the usual adware here and there, which I deleted. The computer has been running rather slowly since then, and so I opened up Windows Task manager recently. It showed the Processes menu, and didn't show the rest of the menu. All I could look at were the changing graphs of the computer's usage of space. When I examined these graphs, they showed the CPU usage going from 65-100% usage. I've tried many things to look at the rest of the menu of it, but to no avail. So, any suggestions as to what to do to find out what is causing this much space to be used on the computer? Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89479
  - 19
    - Google Powered Search Engine for Security/eSecurity Community I am building a Search Engine exclusively for the Security and eSecurity Community using Google's Coop program. I would like to NOT include any vendor sites, but just index sites that are vendor neutral. Would this is be a good strategy or not? The URL for the search engine is http://www.xml-dev.com Here are my current guidelines for site inclusion 1) I will NOT include any vendor site (e.g. Cisco, Microsoft, Bluecoat etc) 2) I will check the Netcraft ranking for each suggested URL that I receive. The site has to rank in <50K to be included in the index. (e.g. http://toolbar.netcraft.com/site_report?url=http://www.securityfocus.com) 3) I will also make sure that the site doesn't excessive amount of Ads. For e.g. I will not include http://www.securitynewsportal.com/index.shtml As far the inclusion of vendor sites in concerned, I think if one is searching for some specific information (e.g. install guide) for a particular product they should probably go to the vendor website or google it. However if you researching about a technology, lets says IDS, you really don't need to see the vendor sites. They will, off course, say that their product is the best in the world. For e.g. search for "Full Disk Encryption" on Google, and you will see that DriveCrypt and WinMagic show up in the first 3 results. And they both claim to be "best in the world" :) And I have tried both, and they are not the best (to say the least)! ;-) Instead I would like to see what other sites are saying about these products or "full disk encryption" in general Note: I am looking for few other people to help me filtering out the website, and updating the index. Please let me know if anyone is interested. As always please keep sending your favorite URLs. I have tons of URLs in my email box, and I will catch up with them (and reply to the sender) over the weekend :) Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89475
  - 20
    - EMAIL Scanning Error/Turned Off in Norton Internet Security (NIS) The following problem seemed to start about 3 weeks ago. The Anti Virus status window in NIS shows the status of email scanning as ERROR. It is turned off with no way to turn it back on. Uninstalling and reinstalling have not helped. A lengthy discussion with Norton tech support, not surprisingly, was useless as well. I just cleaned my Registry (WIN 2000), but that too made no difference either. The only other security product I am running is SPYWARE DOCTOR, but uninstalling that did not help either. I am now suspecting a conflict someplace, or perhaps even some as yet unidentified malware. Any ideas of a possible cause, or an approach I can take? Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89462
  - 21
    - Found an unknown keylogger/ spyware named "MrvGINA.dll" Anyone heard of this? Found it while trying to correct my computer starting in "Administator" user mode, as opposed to my normal user profile. A log in window appears, which I believe is created by the spyware to try and phish passwords. When I tried to change the settings a warning stating "Windows Security and Fast User turned off. Uninstall program to correct. Finding MrvGINA.dll may help determine the responible program". MrvGINA.dll is in the sytem32 folder. Neither Spybot Search & Destroy nor Norton Internet Security have identified the file leading me to believe it is a new spyware/malware. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89453
  - 22
    - Parental Internet-access Control Software Title says it - any advice on which products are good? A free one would be ideal if it works reasonably well. Basic requirements are to lock-down which websites three children can visit. or at least to reduce the chances of them accidentally landing on disturbing porn material. Must work with Firefox. (or Opera/NS/Mozilla would be OK, but not IE for security reasons) Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89447
  - 23
    - IE7 final and SpySweeper Ver 5.2.3 build 2120 There are numerous incompatibilities with the latest version of SpySweeper and Internet Explorer 7.0 final. These incompatibilities have finally forced me to uninstall the latest version and go back to SpySweeper Ver 5.0.7 build 1608. Here is a list of the most troublesome interactions: 1. Opening a second tab in IE7 takes about 5-7 seconds just for the tab to appear. I had previously said 3-5 seconds but it got worse. 2. After the 2nd tab opens it takes about another 5 seconds for "anything" to even begin to appear in the new tab. 3. When holding the ctrl key and clicking on a link, in most cases, the desired link would appear in the original tab. 4. If I had multiple tabs open, and I wanted to close the active tab, I would press CTRL & W, which should close the active tab only. Many times when I did this Internet Explorer would close down. 5. Outlook Express would take ages to open and make a connection to my ISP's mail server. 6. Many other programs just seemed to be taking a lot longer to initialize. All of these problems have gone away after going back to SpySweeper Ver 5.0.7 build 1608. The 2nd (and additional) tabs open instantaneously. The web information begins to immediately paint the page. CTRL & click on web links open a new tab every single time. CTRL & W closes the active tab "every single time". Internet Explorer 7.0 final has stopped crashing. I think I will wait until the next SpySweeper program update until I try again. The present version just has too many problems! BTW, Firefox has not been affected with the SpySweeper update. -- Regards, Richard Urban Microsoft MVP Windows Shell/User (For email, remove the obvious from my address) Quote from George Ankner: If you knew as much as you think you know, You would realize that you don't know what you thought you knew! Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89444
  - 24
    - e-mail problems When I try to sign in to my hotmail account a window opens that informs me that I am about to view pages over a secure connection as I click on sign in to open my account another window opens informing me this time that I am about to leave a secure internet connection it will be possible for others to view information you send, if I do not wish to continue I can not access my messages. I am extremely concerned about this problem, I have been reading and looking for reasons and solutions on windows newsgroups but found nothing, I am almost computer illiterate and I am afraid that by having tried to solve the problem without the right knowledge I have check and uncheked, enable and disable and made a right mess out of my PC . I had enabled automatic updates but I feel that this problem started after I installed SP2, I have now uninstalled SP2 but the problem has not gone away, my homepage has also been changed to MSM Homepage and when I try to change it again it always reverts back to MSMHomepage, is it possible that my PC has been hijacked? Please, please help, thanks a million. Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89442
  - 25
    - Should I enable TLS 1.0? Should I enable TLS 1.0? If I do, will the encryption be stronger. So far, all I get when I am on a secure site is 128 mb encryption or less. If I do enable TLS 1.0, will anything happen? Tag: Interoperability between Window 2000 and 2003 Enterprise CAs Tag: 89439

I have a win2k enterprise root and subordinate CA I would like to introduce
another subordinate CA on our DR site. Can I introduce an enterprise win2k3
CA into the existing heirarchy (In a nutshell are they compatible)?

Top