Monitoring downloads

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Generic Host Process for Win32 Hi when i allow this programe to run, when online i keep getting security warnings from Norton, MS RPCSS ATTACK(3), MS RPC NETWORK DDE BO, and some others like this and a Trojan horse attack, all blocked through Norton but constant one after the other, they don't stop, If i block this programe through Norton all is fine no attacks at all and computer works fine,when online or not, the only problem is using windows updates that will not work unless i enable this programe as soon as i do the attacks start almost instantly, I have scanned my whole computer for viruses and this programe no infections found. HELP Tag: Monitoring downloads Tag: 76117
  - 2
    - event id 4306 I get this error on my DC. I can't find anything useful on line. Any ideas what it is or how I can fix it? The only item I found was that I might have a Denial Of Service. The length of the message sent by another WINS indicates a very big message. There may have been corruption of the data. WINS will ignore this message, terminate the connection with the remote WINS, and continue. Also: The message '-1073671982' for application 'Wins' could not be formatted using library(ies): ''. The log entry contains the following replacement strings: Tag: Monitoring downloads Tag: 76109
  - 3
    - Can access secure site from dial-up but not from LAN network I cannot access a secure site for which I have installed a certificate from my LAN internet connection (DSL), but I CAN access the site if I connect to the internet through dial-up connection. At one time I was able to connect via LAN, but it quit working. I've tried re-installing the certificate, turning off my firewall and NAV, all with no result. Any ideas? Tag: Monitoring downloads Tag: 76108
  - 4
    - Internet Security software make the internet connectivity sluggish I have tried Mcafee Internet Security 2006 and Norton Internet Security 2006 in my machine before, and both have a common problem that makes the internet connectivity very sluggish. It causes the CPU usage becomes 100% sometimes. It also make the outlook express very slow too, and some other software applications. I have no idea what's going on. The interent is so slow, and when I check the allowed programs in the firewall, the router is in the list, so it shouldn't block the internet traffic. After I uninstall the software, there is no problem at all, but of course I need security software to protect the machine. anyone has similar problems before? any suggestions?? Please advise. thanks!! Tag: Monitoring downloads Tag: 76105
  - 5
    - Advice - solution for a company server Hello, I need to estabiilish a new solution for my company (rather small). We now need a company server that should handle 10 workstations - to provide users with opportuninty of sharing their project files and to set their own e-mail accounts on it. We already have a proper machine (as I was told), but I don't know which software will be good enough for this task, and of course it shall be not expensive - we are only interested in the genuine software. My colleagues told me about some Linux OS, but we don't want to pay for the server administration right now, and no-one in my team knows this systems. Can you help me to choose a right software? Shall Windows Small Business Server 2003 be a good solution (can a common computer user operate it?), or do we really need an adminitrator to handle one of the Unix systems? Thanks in advance, Hailie Tag: Monitoring downloads Tag: 76099
  - 6
    - when installing av my internet stops running hi i m trying to install symantec av on my windows xp but after i install it my internet stops working (no page display message) when i remove the av everything works as usuall, i tried installing other av and the outcome was the same, what do i have to do? thanks Tag: Monitoring downloads Tag: 76097
  - 7
    - Check access to file/directory Hi, I'm trying to check whether a user has access to certain files/directories and which class of access he has. As I've read in other posts, it is not adviced to use the "high-level access control API". So I've tried to get my information using the following code (simplified): ACE_HEADER hdr; SECURITY_DESCRIPTOR secDesc[15]; DWORD size; size = BUF_SIZE; DWORD secDescSize = sizeof(secDesc); ZeroMemory((void *)secDesc, secDescSize); result = GetFileSecurity("d:\\rehm\\fluss\\f2d_1031.dll", DACL_SECURITY_INFORMATION, secDesc, secDescSize, &size); result = GetSecurityDescriptorDacl(secDesc, &present, &pDACL, &defaulted); GetAce(pDACL, 0, (void **)&hdr); PACCESS_ALLOWED_ACE pAllowedAce; pAllowedAce = (PACCESS_ALLOWED_ACE)&hdr; GetAce() yields strange values for hdr.AceType (something like 0xD4) instead of ACCESS_ALLOWED_ACE_TYPE which should be returned. Anybody has made similar experiences? I also found the function AccessCheck(). Anybody used it? Some sample code would be great. Thanks in advance! Hannes Tag: Monitoring downloads Tag: 76096
  - 8
    - Check access to file/directory Hi, I'm trying to check whether a user has access to certain files/directories and which class of access he has. As I've read in other posts, it is not adviced to use the "high-level access control API". So I've tried to get my information using the following code (simplified): ACE_HEADER hdr; SECURITY_DESCRIPTOR secDesc[15]; DWORD size; size = BUF_SIZE; DWORD secDescSize = sizeof(secDesc); ZeroMemory((void *)secDesc, secDescSize); result = GetFileSecurity("d:\\rehm\\fluss\\f2d_1031.dll", DACL_SECURITY_INFORMATION, secDesc, secDescSize, &size); result = GetSecurityDescriptorDacl(secDesc, &present, &pDACL, &defaulted); GetAce(pDACL, 0, (void **)&hdr); PACCESS_ALLOWED_ACE pAllowedAce; pAllowedAce = (PACCESS_ALLOWED_ACE)&hdr; GetAce() yields strange values for hdr.AceType (something like 0xD4) instead of ACCESS_ALLOWED_ACE_TYPE which should be returned. Anybody has made similar experiences? I also found the function AccessCheck(). Anybody used it? Some sample code would be great. Thanks in advance! Hannes Tag: Monitoring downloads Tag: 76095
  - 9
    - Firewall Security I am using the Zone Alarm firewall software because I have heard that the Microsoft firewall with sp2 is weak. Am I misinformed or has it been improved? I am not happy with problems I am having with ZA and their support leaves a lot to be desired. -- Jim Salyer Area Supervisor Home: 505-474-4863 Cell: 505-670-4138 Fax: 505-474-4540 Email: jims01@comcast.net Tag: Monitoring downloads Tag: 76085
  - 10
    - Norton Anti-Virus Problem! I just downloaded the 2005 version of Norton Anti-Virus and after restarting my computer it will not allow me to open it up. I get an error box that says "A required .DLL file, CCTRUST.DLL, was not found" I have Windows ME. how do i fix this? Tag: Monitoring downloads Tag: 76082
  - 11
    - "Root" users to My Documents folder Hello, Is it possible in Windows 2003 to "root" users to their My Documents folder? Basicly, I want them to start in My Documents when they open Windows Explorer, and I don't want them to be able to press the folder up button. Thanks if you can point me in the right direction. Roland Tag: Monitoring downloads Tag: 76076
  - 12
    - Access Control to Drives My HD has two partitions: C: (operating system and programs) and D: (data). The Operating System is Windows 2000 Pro. While checking the PROPERTIES --> SECURITY settings, I found that: For Drive C, User â??EVERYONEâ?? has â??FULL ACCESS CONTROLâ??. For Drive D, there are three users with â??FULL ACCESS CONTROLâ??: Administrator, UserA (that me), S-1-5-21-121â?¦(long string) Since there is no network, both drives are set to â??Donâ??t shareâ??. Questions: 1. What is the proper security setting for Drive C and Drive D? 2. What is the third mysterious user that has control of Drive D? Should I remove it? 3. Should I change the security setting if I install an external hard drive for back-up? Thank you for your help. Tag: Monitoring downloads Tag: 76071
  - 13
    - Dumb question from me I am computer illiterate-totally. I used to be able to go to favorite websites with message boards and not have to retype my user name and password every time I post. Then we downloaded this stupid online security center and now I have to continually retype it all evey time Is it erasing the cookie or what? I want it back to the way it was. Any suggestions? Tag: Monitoring downloads Tag: 76069
  - 14
    - Very weird ping problem I have a few networks here. EXT FW&WAP -> SBS2003 w/ ISA2004 -> Internal LAN -> LAN GW&WAP -> Internal LAN DSL -> 192.168.1.x -> 192.168.16.x SBS is 192.168.1.200 LAN GW&WAP is 192.168.1.2 EXT FW&WAP is 192.168.1.1 SBS Internal is 192.168.16.4 LAN GW&WAP is 192.168.16.1 LAN/DHCP (on SBS) Default Gateway is 192.168.16.1 SBS Defautl GW in on Ext NIC and is 192.168.1.1 No GW defined on SBS internal NIC Problem.... Everytime I try to ping or tracert from my SBS Server to the internet my External Network Interface goes offline and reports "unplugged" and I get a "Hardware Error" in my CMD windows. A few minutes later the interface re-initializes and goes online. This server publishes content to the internet frequently every day, and serves as a Web, FTP, SMTP and other services server, all day long. Nothing else causes this, it only happens if I try to Ping or Tracert. Any ideas? It's a home server, that is very much not critical, and merely there for my ability to learn about things and keep in touch with other avenues of the industry while not managing my corporate network at the office. In addition to that, everything else works. It is serving web/ftp/smtp requests all day long, without error. So... it is my preference not to just "fix" a problem by removing hardware and registry settings for something like this that is of rare concern to me. I'd rather try to identify with the support of others, cause clearly I have reached my threshold here, the root cause of the situation to which I am experiencing. I would be honored if anyone would be kind enough to humor my idealism in this situation, and would furthermore be thrilled to actually identify something, whether resolution/root cause is ever found or not. Tag: Monitoring downloads Tag: 76067
  - 15
    - implications of disabling SMB/CIFS While designing a secure standard base image for WinSvr2003std the issue of weather non-file servers need SMB enabled came up. I proposed the alternative of OpenSsh which will allow file transfer and remote execution over a secure and encrypted session. Question: if we disable SMB what will stop working? SMS, AD software distribution, Manage another computer? Tag: Monitoring downloads Tag: 76060
  - 16
    - Auditing Account Management I have successfully configured auditing for Account Management. However, it does not generate an event for when an email address is changed/deleted/modified? Is there a way extend the attributes that are tracked within Account Management in AD? Thank you for any help that you may provide. Jamie Tag: Monitoring downloads Tag: 76059
  - 17
    - Effects of Disabling USB storage... Hi all, I was looking for a method to disable USB storage devices through GP and came across the KB article 555324. One question does pop to mind before I implement this: I'm wondering if setting this would affect other USB devices such as keyboards and mice, and if so is there a workaround? Thank you. -- Bill Tag: Monitoring downloads Tag: 76046
  - 18
    - Can't run MBSA. Insufficient services enabled? I am having trouble running MBSA. I run XP Pro + SP1 on a standalone PC connected via ethernet to broadband. If I provide the computer name then I get a message saying: "Unable to scan all computers" my-home\my-pc (Unknown IP) Computer not found." If I provide the IP address I get a message saying: "Unable to scan all computers xxx.xxx.xxx.xxx : Computer not found." where the xxx's have the correct value for my IP address. The MBSA help text says: ---------------- START ------------------ The following are the requirements for a computer to be scanned remotely by the tool: ... The following services must be enabled: Server service, Remote Registry service, and File & Print Sharing. Please see article 303215 for more information on these services. ---------------- END ------------------ Unfortunately article 303215 does not seem to exist any longer. What are the names of the services in the services menu that corespond to these: Server service Remote Registry service File & Print Sharing. Tag: Monitoring downloads Tag: 76044
  - 19
    - How to prevent stealing password Hi.I have free mail accounts in Hotmail and in Yahoo. They both offer security logging so the informations sent would be encrypted. Most public PCs are infected with spyware and viruses and I wonder if I access my mail account (in Hotmail for example) from an infected public PC , will some hacker be able to access my mail later because the keyloggers has saved my password.I have heard that if the info is encrypted ,like in Yahoo and in Hotmail,no spyware ,keylogger or hacker,noone would be able to see(save) my password. Is that true? :) Tag: Monitoring downloads Tag: 76043
  - 20
    - ccEmFlSv.exe On a Win XP SP2 Pro box. I have never seen ccEmFlSv.exe show up as a process but it has started to and is taking about 6272 K CPU. When I google or teoma search it it comes up as a low grade Trojan and I don't see any info about it as a normal process. I can't find info at www.norton.com/search . I can't end the process at TM. Can someone context this for me and if I need to remove it does anyone know of a removal tool? Best, Chad Harris Tag: Monitoring downloads Tag: 76040
  - 21
    - Force reboot in WSUS We've used SUS for quite some time now to distribute updates. I am in the process of moving to WSUS and for the most part things seem to be working well. One nice feature is the ability to see if a user has taken on the patches. I know for a fact that currently many users blow past the install and/or reboot prompts that they receive when SUS is trying to do its thing. Ultimately I believe that we end up with machines that are not properly patched. In WSUS it's nice to be able to get a report on the status of those machines, but is there a way to force that PC to reboot remotely so that all the patches are properly done? Tag: Monitoring downloads Tag: 76029
  - 22
    - Internal Audit question I am an IT auditor for an internal audit department. Our company uses Active Directory with Winows 2000 and 2003 servers and XP Pro workstations. Currently our IT support personnel have admin access to servers and workstations. My question is: Is there a way to allow the IT support personnel to do their job while restricting access to user data? The IT support people need to apply upgrades, install software, etc. We want to allow them to do this but restrict their access to user data in the Docs & Settings folder on the workstations, user directories on the servers, etc. Currently the IT support people have admin rights on the workstations. Can they do their job as a Limited user with proper permissions? I know this is a long post but i would appreciate any help. Thanks. -- wweldin -- wweldin Tag: Monitoring downloads Tag: 76022
  - 23
    - Computer and User Certificates Issues Hello, I have setup a Windows Server 2003 box in a test environment as a RADIUS Server using IAS to familiarise with Wireless Networking Authentication (we are intending to deploy some Windows 2003 systems as RADIUS Servers in the near future). The authentication method that I am hoping to use is EAP-TLS, which I understand requires User and Computer Certificates. Hence, I installed a CA on the Server, and duplicated the User and Computer Certificate Templates, changing only the Expiration Times. Both Templates have Authenticated Users with Read Access, Domain Admins with Full Access. The new User Template has Domain Users with Enroll and AutoEnroll Access and the same for Computer Template except for Domain Computers group. We have configured the Domain Level GPO to grant Automatic Certificate Enrollment. However, when computers in the test environment update Group Policy they all contain the following events: Event Type: Error Event Source: AutoEnrollment Event Category: None Event ID: 13 Date: 22/09/2005 Time: 9:54:16 PM User: N/A Computer: EPT-101 Description: Automatic certificate enrollment for local system failed to enroll for one LFN Computer certificate (0x80070005). Access is denied. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: AutoEnrollment Event Category: None Event ID: 13 Date: 22/09/2005 Time: 10:09:49 PM User: N/A Computer: EPT-201 Description: Automatic certificate enrollment for local system failed to enroll for one LFN Computer certificate (0x80070005). Access is denied. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Where have I gone wrong? These are XP SP2 clients, I previously tried enabling detailed Enrollment Logging but the additional events provided no extra information. Thank-you in advance for all corresspondence, William Teller Tag: Monitoring downloads Tag: 76011
  - 24
    - Mobile Messanger Is the following link safe, I want to access hotmail from my PSP (Playstation Portable). This link is posted several places but it doesnt seem to be a microsoft website and I just dont trust it. Is there a microsoft equivalent? http://mob.e-messenger.net/mobile/ Tag: Monitoring downloads Tag: 76004
  - 25
    - What creates these files? I originally posted this on an Outlook discussion group, but have since realised Security might have been more appropriate, so am copying it here with minor additions. For less than one full day, both NAV and AVG indicated that files that are constantly created in "C:/Documents and settings/<user>/Local settings/Temp" with names "CC*.tmp" (they appear to be named using hexadecimal notation of a byte) have the Netsky.P or .Q worms. Is this NAV/NIS creating these files as a result of using MS Outlook, and why would the files have an old worm? Investigating how these worms work shows that the system does not appear to be infected with these worms. But the "CC*.tmp" files are always being recreated. Any suggestions how to eliminate the problem? For further information, warning messages from AVG and NAV only now appear when I access that folder/files to try to solve the problem. Maybe there's no real problem after all. But if NAV/NIS is creating those files, then why would it be creating them with an apparent security flaw? Kevin Tag: Monitoring downloads Tag: 76002
- Next
  - 1
    - Rest password emails I have received at least 10 emails recently from Microsoft Customer Support saying I have requested via email to reset my hotmail password. Enter this link to reset, or if you did not request enter this link. I have never once asked to reset my password, so i always click the 2nd link, but why am I receiving these? Tag: Monitoring downloads Tag: 76001
  - 2
    - Where to send fraud e-mails? Hi Does anybody know what government agency to send a fraud e-mail? I just received one from the Nigerian crew. Thanks. Tag: Monitoring downloads Tag: 75999
  - 3
    - Serial/Thumbprint of Certificate attached to CA? Hello all, I was wondering if anyone could tell me if it is possible to find out the Serial # and/or thumbprint of the certificate that is associated with a Certification Authority. The problem is we have multiple certificates with the same name, and since there is a problem with the certificate I get an "access denied" when I attempt to access it through the CA properties. I have tried to back up the CA but always get an error, perhaps associated with the "acess denied" to the certificate itself. If anyone could adivse on this I would be most appreciative. Thanks! Tag: Monitoring downloads Tag: 75994
  - 4
    - Spyware doctor. Is it free? I installed 1 month ago spyware doctor ver. 3.2.1.359 on one pc; supposedly, free. Well, i want to install it at my home pc too. But, at a few known sites, like tucows, download.com and majorgeeks, this program is says shareware for $29.95. I remember reading something about this on the other pc. but, my work pc still has this program installed and its not a registered version nor a dime has been paid for it. Can I safetly download it at home. And assume that I wont get charged later on? is it a trial with a time limit?? If something says it needs or if I want to register it, does that mean $$$$$ time?? Tag: Monitoring downloads Tag: 75985
  - 5
    - Administrator's Account Name Reverts to Original Name I have one of our Network gurus' telling me that after they have renamed the Administrator's name on some of our network systems, that the systems are reverting back to the original name...Administrator I have never seen or heard of this. Any Truth to this orideas? Thanks -- Jerry Tag: Monitoring downloads Tag: 75984
  - 6
    - hotbar trying to install Hi- I have been using the ms antispy program at home for about 2 months now. when I log on to my user account, all is ok. But lately, when my daughter logs into her user account, after a few seconds, the red box from Microsoft antispy program says that this threat wants to install; and if I want to remove it. I click yes. it says it removes it. I scan right away, and the next time we turn off/on the pc and go into her acc't, this warning comes back. scans done= ad-ware, spybot S & D, spyware doctor, Ewido, MS antispy. Did them in safe mode. Only thing found, this last time, was with MS-antispy; and it was some searchbar threat and a tracking cookie. I went to Majorgeeks and dloaded a program specifically for this threat and it come up clean. will try it again as well as any others suggested here. hope you can help. PS, i also have HJT if I need to post a log at those forums. Thanks -- Tag: Monitoring downloads Tag: 75982
  - 7
    - SSL Padlock shows then disappears when viewing a site (asp.net) that I created the browser (ie 6, XP SP2) address shows https: but the padlock only shows when the site loads then disappears, any help would be appreciated... Thanks, Rico Tag: Monitoring downloads Tag: 75979
  - 8
    - How can you compromise a SQL Server via Front-End Server ? Imagine this: I have a Sharepoint Front-End web server in the "Forest-Perimeter" network (some call it DMZ). Imagine the SQL server such Sharepoint server uses continues to be housed in the "Internal" network. Therefore I would need to open a hole in the ISA firewall to allow communication between the Sharepoint Front-End<----> SQL Server (internal) network. Can you tell me the mechanism and likelyhood of getting such SQL server compromised via this Front-End web server ? I know you can hit a SQL server pretty hard if you can explore SQL server injections, but let's assume you use store procedures to avoid SQL server injections. Tag: Monitoring downloads Tag: 75978
  - 9
    - LU1806 Re : Live update problem. I am constantly receiving LU1806 error when trying to run live update. I have read all the information from Symantec. Attemtped to reload Norton Antivirus however the errors still occur. This problem has only been happening since I loaded Windows Internet Security. Any ideas how to get around the problem? Tag: Monitoring downloads Tag: 75970
  - 10
    - Reasons TO use full HHD encryption vs File/Folder (non-EFS) Hello - if anyone has any good argumements regarding why to USE Full Hard Disk Encryption -vs- just Folder (& file) Encryption, please post some comments. My boss wants to just do Folder, but I am leaning toward encrypting the full HHD to cover all the bases - thinking of using something like SafeGuard Easy 4.11. Please note: we are not considering EFS (sorry MS). Thank you all in advance! -- Take care! Mark -- Take care! Mark Tag: Monitoring downloads Tag: 75964
  - 11
    - how to delete a contact from the block list in privacy tab please let me know if there is a way to delete a contact from the block list in privacy tab. Tag: Monitoring downloads Tag: 75959
  - 12
    - ICMP Hardware Error Help. I have a few networks here. EXT FW&WAP -> SBS2003 w/ ISA2004 -> Internal LAN -> LAN GW&WAP -> Internal LAN DSL -> 192.168.1.x -> 192.168.16.x SBS is 192.168.1.200 LAN GW&WAP is 192.168.1.2 EXT FW&WAP is 192.168.1.1 SBS Internal is 192.168.16.4 LAN GW&WAP is 192.168.16.1 LAN/DHCP (on SBS) Default Gateway is 192.168.16.1 SBS Defautl GW in on Ext NIC and is 192.168.1.1 No GW defined on SBS internal NIC Problem.... Everytime I try to ping or tracert from my SBS Server to the internet my External Network Interface goes offline and reports "unplugged" and I get a "Hardware Error" in my CMD windows. A few minutes later the interface re-initializes and goes online. This server publishes content to the internet frequently every day, and serves as a Web, FTP, SMTP and other services server, all day long. Nothing else causes this, it only happens if I try to Ping or Tracert. Any ideas? Tag: Monitoring downloads Tag: 75954
  - 13
    - How prevent data steal thru pen drives? Tag: Monitoring downloads Tag: 75946
  - 14
    - How blocking some attachments helps protect your computer How the hell can i turn that thing off? i don't want windows to block an mp3 file when somebody sends me one through msn. And deblocking don't help either, cuz help and support says that i should just look for the file on my computer and deblock it, but it ain't even on my computer. It didn't save the file. I can judge myself whether or not a file can be trusted, i don't need windows doing that for me and what bugs me the most is that i can't seem to find a way to turn it off.....somebody? Tag: Monitoring downloads Tag: 75943
  - 15
    - IE Send Mail When I'm on MSNBC and I try to send a page via email to a friend, I receive: The current document type can not be sent as mail. Would you like to send a shortcut instead? I was able to do this before. Why not now? Tag: Monitoring downloads Tag: 75942
  - 16
    - Monitoring file usage I would like to know if there is a way to monitor when a user copy or move a file to an usb memory device. Our network have 200 + advanced clients with a domain controller and Systems Managment Server 2003 SP1. Thanks for your response. Tag: Monitoring downloads Tag: 75929
  - 17
    - smscfg.ini, 7 copies, won't defragment Hello, I've just defragmented my sony laptop, 5th time in 2 yrs, not too bad, because it seemed to be slowing down. My D drive went fine. My C drive had a failure to defragment smscfg(2).ini so I looked it up and I actually have 7 copies of this. I am not networked, I don't SMS, I internet via wifi. Is this anything I should be concerned about? Tag: Monitoring downloads Tag: 75924
  - 18
    - Can i run more then one session on the computer? Multiple sessions is pretty feature of XP. In domain environment its not working by default. How can i use this feature in domain environment? May be Vista can help me? Tag: Monitoring downloads Tag: 75918
  - 19
    - nigerian scams lately, i ve been getting a lot of mail from nigerians saying i can make millions if i give them my account number so they can deposit money from folks over there who died and left me in thier wills., and other such crap. is there somewhere i can report these to. i imagine some folks get this stuff and beleive it. -- xp-pro,sp2,ff1.0.6,40gb,380mb vig mobo,900gz, computer newbie Tag: Monitoring downloads Tag: 75917
  - 20
    - Infected from Google Virus from maxfiles.com It seems i am infected from some virus from Google toolbar, everytime am clicking search on google.com or googletoolbar my internet explore hangs/freezes the system for few mins . It also opens a pop-up on right-side of internexplorer screen. I think it is from maxfiles.com ? Please hel -- jigu90200 ----------------------------------------------------------------------- jigu902003's Profile: http://forums.techarena.in/member.php?userid=884 View this thread: http://forums.techarena.in/showthread.php?t=36450 Visit - http://www.techarena.in | http://forums.techarena.in | http://forums.techarena.in/archive/index.ph Tag: Monitoring downloads Tag: 75914
  - 21
    - FTP Server HELP!!! An unknown user used a program to try to script through about 8 different usernames, and like 300 passwords each in attempts to hack my FTP Server on my SBS 2003 Premium Server. Dilema, I hadn't ever created a "just in case" backup admin account. I try to never use admin privledges on the server, and with the negative implications of following the recommendations to rename Administrator, I have hesitated to do so, however after 300 failed login attempts, the Administrator account was locked out. Now I've recovered my access to my system, but I have some "obscurity" goals I'd like to try. I have found the following and implemented it: http://support.microsoft.com/default.aspx?scid=kb;en-us;826270 Now I would like my FTP SVC to at the least broadcast external.domain.com rather than server.domain.local on the "Connected to:" line. Any other recommendation on securing my "Read Only" FTP server would be greatly appreciated. Thanks, Tag: Monitoring downloads Tag: 75906
  - 22
    - accounts in two groups - Administrators and Power Users - who wins Does one group take precedence over the other. I had a situation where the user's accoutn was in both groups but when trying to install software, it appeared as if he did not have enough privileges. One of my technicians signed in as administrator and was able to install the software without a problem. When he signed in as the user who was in both Power Users and Admins, he said the install did not work. So the general question is how does Windows decide how to apply group membership roles. Tag: Monitoring downloads Tag: 75905
  - 23
    - Forest/Domain in the "DMZ" to accomodate web, front-end servers Imagine I have an IT guru in my organization and (political forces behind him) that don't let me put ANY front-end server in the internal network. I mean, I have Exchange 2003 OWA and Sharepoint servers that, to this date, have been published via ISA 2004 and in my view that was provided adequate security. Now imagine that I must put all servers that reside in the "internal" network in the "DMZ". Do you think it makes sense if I setup a "Domain-DMZ" and put all such front-end servers there and allow a one-way trust relantioship where my existing "domain-dmz" trusts the "corporate domain" ? Then I would put the Sharepoint Servers (front-end) and Exchange (front-end) and such DMZ-DOMAIN ? Do you really believe this would be a good security implementation for a mid size organization ? (5,000 AD accounts). Tag: Monitoring downloads Tag: 75902
  - 24
    - What Server Roles are OK to Share with a VPN? Hello-- We are going to be implementing a VPN for one of our remote offices. We have to be aware of costs, so we would like to share some of our network server roles on the same box. What server roles are safe to share on a VPN server? Security is our main concern, just ahead of cost. Many thanks, Stephen Tag: Monitoring downloads Tag: 75897
  - 25
    - MSN HOTMAIL SIGN IN PROBLEMS Whenever I try to sign in to my MSN e-mail account I get the following messages: "We cannot sign you in because we cannot verify the status of your subscription. Please verify that you are connected to the Internet before trying to sign in again." "MSN cannot verify that the MS.NET passport that you signed in with has an MSN billing account. You can still work offline...." Tag: Monitoring downloads Tag: 75896

I was wondering is it possible to see what employees download onto their
machines when they go through a proxy server without any additional software?

Top

Re: Monitoring downloads by Steven

Steven
Tue Sep 27 18:54:26 CDT 2005

I don't believe that the proxy server logs will record that level of detail,
at least by default. I know ISA 2004 can do some pretty nifty http content
filtering and that it may be possible to log that but I don't believe it is
enabled by default. Of course users can download via other avenues than
http. You might consider restricting what software users can install on
their computer [if you have not already] and assuming they can use only IE
as their web browser you can use Group Policy to configure Web Content Zones
so that users can download from only authorized websites that you add to the
trusted Web Content Zone. --- Steve

"Rasma" <Rasma@discussions.microsoft.com> wrote in message
news:BF1A703B-094E-4641-9D67-3B1950813DCD@microsoft.com...
>I was wondering is it possible to see what employees download onto their
> machines when they go through a proxy server without any additional
> software?

Top