Win 2k Password Security

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Firewall Problem Hi, I have CA EZ Firewall. Today it was the last day of the trial period. (only 15 days?) It asked for the key. I entered the key. But it still says "you have 0 days left." Then "New Network Wizard" comes up and says it detected a new network. There is no network on this computer except the internet. I checked the DNS, it does not match the DNS entries in the Connection Properties (DSL). Although the "subnet mask" number is the same. Can anyone explain what's going on? Why did it detect a new network after 2 weeks of using the internet? Why is the DNS different than mine? I am getting no response from the CA support. I would appreciate any help. I am using XP. Thanks Tag: Win 2k Password Security Tag: 65443
  - 2
    - virus? Hi, This morning I received a mail that had an attachment im_shocked.doc.zip and detail in the subject field, the body contained this message I was surprised, too! Who_could_suspect_something_like_that? shityiiiii First question is, is this a virus? How did it get past my AV? In the header it says that X-apparently sent to >>>my address, how does it get sent to me? Tag: Win 2k Password Security Tag: 65439
  - 3
    - Is it possible to "disable" Internet Explorer in this case? Is it possible to "disable" Internet Explorer in this case? I run a franchise-like business. I am an independent contractor, and I have three employees. I sell services for a major national company. In order to maintain quality control and security, the company I work for provides the PC's, the software, and the internet access to do our work. We use Windows 2000 OS, Microsoft Office, and Internet Explorer. In order to quality control and security of the PC's, we cannot load or delete any software from the PC's. In fact, there is no Add/ Remove Programs option in the control panel. It's been removed. Here's my problem: I have an employee who simply cannot stay off the internet during work. I have done all the routine actions required by an employer: I have talked to him, provided written company policy, written office policy, given a written reprimand, and talked to him again and again. About a year ago, I even wrote an agreement that if he surfed the internet during work hours, I could deduct $20 per website. He agreed to it and he signed it. But he continues to surf when I am not in the office. I did not have the heart to enforce it. I don't want to withhold his money. I want his full attention to give 100% excellent customer service! That's what my customers deserve! And he is not getting all his work done. I am noticing an increase in errors and his customer service has suffered. He has been with me three years, and is important to my business, so I have not fired him (but I am getting really close). I am seeking a better "win-win" solution. Months ago I contacted our corporate office and asked, "can I please have IE removed from one PC?". They said no. They simply don't want to do it. I don't fully understand why. My guess is that since they are responsible for thousands of PC's in the US (configured just like mine), I think they don't want to be bothered with an individual request to customize a PC. It might create a precedent that could create more work for them, and more headaches. From their perspective, I guess that makes sense. I spoke to my employee last week about the continued problem, and he admitted that he is basically addicted to the internet. (His main passion is cars - not porn or gambling. He just loves cars. And Ebay.). I told that I had inquired about removing IE from his PC. He said he would be in favor of that and that he thought it would be a good idea. Most of his work does not require internet access. And every PC in my office has IE and broadband access, so it's available elsewhere when needed to do his work. And there are other PC's with IE that are readily available for use. Again, yes I could easily fire him. I have volumes of documentation. I have even found one instance where what he was viewing was adult oriented, is NOT family friendly or workplace safe. But he wants me to work with him and I am trying to find a creative solution (yes, I have fired people before. Firing people, IMO, is a last resort and not very creative). Here's where I am seeking help: can you suggest a way that I can go to his PC and disable IE? Remember, I can't add or remove any programs, and I don't own the PC. And, since I don't have the company blessing, I don't want to create any technical problems that would impede any other operation of the PC. I am fairly PC literate. If I can disable IE, I will explain it to him before I do it. Can you give me a suggestion to disable IE? I have run out of ideas. Got any ideas for me? If you think there is a more appropriate forum for this question, pls let me know. (sorry to write so much....just trying to anticipate questions). Thanks. Ralph Tag: Win 2k Password Security Tag: 65416
  - 4
    - virus Has microsoft issued a warning about THE WORST VIRUS EVER,dated dec.4? This virus is said to destroy Sector Zero from the hard drive if a card is received "A Card for You" is opened. It is said that when it is opened the computer will "freeze" and when it's tried to be rebooted and the "alt, ctrl and another key (can't remember the third) is pushed this Sector zero will be destroyed. Please advise. ofaloon Tag: Win 2k Password Security Tag: 65415
  - 5
    - NIS 2005 compatibility with MS 2003 I have just installed NIS 2005 and now get an error message every time a MS office application starts "Norton Anti Virus 2005 does not support the Repair feature, please uninstall & reinstall" What is the problem? Is it a common problem and what needs uninstalling, Office or NIS 2005. Will reinstalling make any difference. Live update says NIS is fully up to date. Tag: Win 2k Password Security Tag: 65411
  - 6
    - sp2 SP2 is not displaying pictures when I surf the net. I had no problem before but now I have to click the stupid yellow bare each time. Is there a way to get rid of this. Tag: Win 2k Password Security Tag: 65407
  - 7
    - Are current personal firewall available in the market 100% foolpro I uses broadband and often there is attempted hacking via port 443, many times such attempts were twarted by installed firewall e.g. Spynet and zone alarm. Are there other potential ways that a hacker could break through a home pc? Briefly what are they. Tag: Win 2k Password Security Tag: 65406
  - 8
    - Disabling domain password requirements How do I disable the function of my win2k3 domain server requiring a complex password for my users? I check the default domain security policy and the passord policys are all set to not defined. Tag: Win 2k Password Security Tag: 65405
  - 9
    - Cumulative Update for Outlook Express (887797) Outlook Express for Windows update available http://support.microsoft.com/?kbid=887797 APPLIES TO . Microsoft Outlook Express 5.5 Service Pack 2 . Microsoft Outlook Express 5.5 . Microsoft Outlook Express 6.0 If you choose 'Custom Install' at Windows Update, 887797 will be available via 'Select optional software updates' in left pane. Before this update is made available to you on the Windows Update Web site, you must install MS04-018: Cumulative security update for Outlook Express (823353). -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE/OE) Tag: Win 2k Password Security Tag: 65393
  - 10
    - Dynamic DNS advice/recommendations http://dmoz.org/Computers/Software/Internet/Servers/Address_Management/Dynamic_DNS_Services/ I am researching dynamic DNS providers and was quickly overwhelmed by the number of options. (see above link) I would appreciate any feedback or recommendations that anyone may be able to offer. I'm not adverse to spending some money. I am primarily interested in being able to VPN or RDP to various machines in the Midwest. Static IP's are not an option for them, at least not for the foreseeable future. Thanks in advance. Pete Tag: Win 2k Password Security Tag: 65391
  - 11
    - virus, trojan horses, worm I have a computer that is running Windows 98. I had a challenge recently with the machine rebooting by itself after shutdown. I was able to fix it with a tool from the symantec site. The problem is back and I cannot remember the name of the worm or virus.... Please Help Tag: Win 2k Password Security Tag: 65390
  - 12
    - noadware - friend or foe? I recently downloaded a program called 'noadware'. Now, Spybot is flagging it as malware. Is noadware legit or should I deinstall it? Thanks, Bryan Tag: Win 2k Password Security Tag: 65381
  - 13
    - 4 security updates on 15th Dec to WinXP SP2 seem to have screwed McAfees 8.0 Hi On 15th-December-2004 I updated Windows XP Professional, SP2 with 4 security updates. Since then the update procedure (via Internet Explorer) of McAfees VirusScan 8.0 gets so far but the windows it opens remain blank. McAfees: Version 8.0, Build 8.0.41, Engine Version: 4.3.20 I notice also that in the bottom right corner of IE is "Unknown Zone". Anything I can do to put it right? Cheers Stephen Howe Tag: Win 2k Password Security Tag: 65378
  - 14
    - virus? At who's end? One contact occasionally gets my mail with an attachment. This attachment is her MY Documents directory and it contains all her personal files. What causes this? My virus defs are updated and complete scans find nothing. My updated spybot and several other spy apps find nothing. I have current ver of Zone Alarm. It must be at the other end, but I find nothing in web searches about this threat. If I could find some info, then I could send it to her, Otherwise it is just me saying "its not me". She has never gotten this form anyone else. help. tks, Paul Tag: Win 2k Password Security Tag: 65370
  - 15
    - Mail merge sntil recently I was able to merge 500 plus client specific documents through word and fax them via outlook to customers. A security update had resulted in my confirming that each fax should be sent to the receiver. Is there a way of switching off these security confirmation questions or changing my user profile in outlook or on the exchange server to stop this tedious task? Tag: Win 2k Password Security Tag: 65369
  - 16
    - Norton Internet Security A few months ago I upgaded my Norton A/V by installing Internet Security, which has the firewall. A couple of times a medium sized window pops up alerting me to...I'm not sure to what, Norton's booklet doesn't explain it. But it looks like some sort of hacking attempt. The warning had something to do with a specific virus's, trojans, but they had different names. One was Netbus something and the other was some sort of backdoor trojan. But what exactly are these warnings? Are they really hacking attempts? Since I have the firewall, can I assume they couldn't get in? Anyway, I don't download much of anything, I update Norton weekly and in fact scanned for virus's after the last warning. Found nothing. I tried it again in Safe Mode, and it also found nothing (and looked through 60 more files). So I don't think I have these virus's. But I don't understand, do these warnings mean I have the virus's (then why isn't Norton picking them up?) or are the warnings telling me that someone is USING these virus's to try and hack in? These warnings don't happen often, maybe 5 times the last 3 or 4 months. And each time I get them, I disconnect from the internet - I'm on dial-up - and sign on again. I'm just wondering what these warnings are warning me to. Thanks. Tag: Win 2k Password Security Tag: 65366
  - 17
    - Group Question Is there a newsgroup specifically for discussions of the patches that microsoft releases.. Thanks.. Tag: Win 2k Password Security Tag: 65360
  - 18
    - Access Blocked Virus warning I currently can only access websites from help and support centre if a try manually entering any url i see a poorly miss-spelt page obviously trying to look like a microsoft warning of some kind. It will only let me use one search engine which changes in appearence each time but is the same site i believe. All websites it allowes me to view have hsdoclc.dll in the title which appears to be a file on my hard drive in windows/system32 if i remove it the next time explorer is run it replaces itself. The search site it allows me to use is Fast-seek or something and it only has ads for porn pharmocuticals and other useless rubbish. I have never registered with any site such as this and this attack is obviuosly intentional by them. I have tried removing and installing internet explorer, disabling all ie add ons and no strange processes are running. This happened wthout my knowledge and not at the same time as any software upddate or install so i dont understand how? Can anyone help cos im aout of ideas and this is the only site i can get to. i have xp pro service pack 2 and all updates Dan, Tag: Win 2k Password Security Tag: 65359
  - 19
    - File version check built-in Microsoft security patches/Service Pac We are planning to deploy SP 4 for windows 2000 to our clients. What will happen with the post-sp4 security patches that have been deployed this last year? Will they be overwritten by sp4 or is there an intelligent file version check built-in, so that the newest files are left untouched by sp4 installation? Or do we have to reinstall all post-sp4 sec patches after installing sp4? Tag: Win 2k Password Security Tag: 65357
  - 20
    - Third Party PopUp Blockers vs. IE6 PopUp Blocker I have been using a third party PopUp Blocker (PopUpCop) in addition to the more recent native Popup Blocker in Windows XP SP2. I am trying to determine if having the third party blocker working at the same time as the Windows blocker is helping or hurting my chances of keeping out the popups. Any thoughts on that ? Thanks. -- John Hanley <><><><><><><><> To send return email: jphanley @ ix. netcom. com ----- Tag: Win 2k Password Security Tag: 65350
  - 21
    - strange process I've been seeing a process running called "navsse.exe" - it's stored in the \system32 folder and is marked read-only. It shows up in the usual places in the registry (run key, run services key, etc.). It can be deleted from the registry and re-installs itself there prior to being able to rename the file, which I was able to do by starting in safe mode. File also seems to be network-aware. Tough file to get rid of, and none of the anti-virus sites or google have anything on it. Has anybody heard of this file, and better, how to kill it? Thanks very much. Tag: Win 2k Password Security Tag: 65346
  - 22
    - web folder in "my computer" system folder we had a trojan detected a few weeks ago. appears to be removed now, but it caused an icon named "web folders" to be present in "my computer". if i right click on it the list is explore,open, or create shortcut. how can i get rid of this. it has spread to 3 of our for machines. thanks, -- bw Tag: Win 2k Password Security Tag: 65344
  - 23
    - SNMP Patch MIB Is there or will there be a SNMP MIB that contains the ability to query patches installed on the OS for Windows XP, 2000, 2003? Thanks Tag: Win 2k Password Security Tag: 65341
  - 24
    - Audit Logon Events Is it possible to audit successful logon event for a single group of users or computers? Our default domain controller policy currently only audits failure events. We'd like to know if people are successfully logging into a specific set of computers in the domain (they are all in the same OU). Thanks. Tag: Win 2k Password Security Tag: 65339
  - 25
    - Is there a bug with CertAdminLib.RevokeCertificate() method ? I handle certificates in a certificates store thanks to XEnroll, CertClientLib and CertAdminLib. Almost all methods works fine... but I encountered a problem with CertAdminLib.RevokeCertificate() method. Actually, certificate revokation works without any problem, but I aim at unrevoking certificate by using RevokeCertificate method, as explained on MSDN : "If a currently revoked certificate has CRL_REASON_CERTIFICATE_HOLD as its reason code, you can reinstate the certificate by calling RevokeCertificate with MAXDWORD (defined in Winnt.h) as the value for its reason code (the Reason parameter). After it is reinstated, the certificate will not appear in future CRLs" winnt.h defines MAXDWORD as follow : #define MAXDWORD 0xffffffff Althoug, with dotNet, RevokeCertificate method reason code waits for an int. So I can't use MAXDWORD. RevokeCertificate crash when reason code is int.maxvalue. System.Convert.ToInt32 crash when its parameter is 0xffffffff... and compiler doesn't run if I use directly 0xffffffff or System.Convert.ToInt64(0xffffffff)... Is there a way to unrevoke a certificate in dotNet ? -- C# developper Tag: Win 2k Password Security Tag: 65334
- Next
  - 1
    - Is there a bug with CertAdminLib.RevokeCertificate() method ? I handle certificates in a certificates store thanks to XEnroll, CertClientLib and CertAdminLib. Almost all methods works fine... but I encountered a problem with CertAdminLib.RevokeCertificate() method. Actually, certificate revokation works without any problem, but I aim at unrevoking certificate by using RevokeCertificate method, as explained on MSDN : "If a currently revoked certificate has CRL_REASON_CERTIFICATE_HOLD as its reason code, you can reinstate the certificate by calling RevokeCertificate with MAXDWORD (defined in Winnt.h) as the value for its reason code (the Reason parameter). After it is reinstated, the certificate will not appear in future CRLs" winnt.h defines MAXDWORD as follow : #define MAXDWORD 0xffffffff Althoug, with dotNet, RevokeCertificate method reason code waits for an int. So I can't use MAXDWORD. RevokeCertificate crash when reason code is int.maxvalue. System.Convert.ToInt32 crash when its parameter is 0xffffffff... and compiler doesn't run if I use directly 0xffffffff or System.Convert.ToInt64(0xffffffff)... Is there a way to unrevoke a certificate in dotNet ? -- C# developper Tag: Win 2k Password Security Tag: 65333
  - 2
    - best of awards too... coolwebsearch I suggest this group acknowledge the best in class. It's time to salute the most devious. I cast my vote for coolwebsearch - an creative piece of shit that took out our entire IT dept (nerds and uS ceritified combined), Norton Corp, Microsoft, and all of about a half dozen tools collected on the net. Someone needs to hire these guys or put them in jail. Tag: Win 2k Password Security Tag: 65332
  - 3
    - Key Distribution Center Service Account When I try to enable the krbtgt(KDC)account I get the message Windows cannot enable object krbtgt because its a built-in account. How can I enable this account? Tag: Win 2k Password Security Tag: 65331
  - 4
    - CA Issues 2 Year cert I created a template, from the web server template, on my enterprise CA. I set it for 6 Years, so it can be used for my Cisco ACS server. The root is good for 20 years. When I request the certificate, it shows up as a 2 year certificate! Whats wrong? Tag: Win 2k Password Security Tag: 65320
  - 5
    - Does expired digital certificates causes text to be sent in clear text ?? OWA server's digital certificate expired. Besides the yellow icon that indicates it is expired, does the text is sent unencrypted by any chance ? I don't think it is unencrypted, but a co-worker claims that's what happens with expired certificates... Tag: Win 2k Password Security Tag: 65312
  - 6
    - More before-the-fact advice for 2K and XP? I'm consulting for several firms who are using Win2K and XP Pro as limited users, which so far is keeping the current crop of viruses and other garbage off the machines. Hardware firewalls do the rest. I believe future exploits will be deliberately designed to run as a limited user. That means a trojan, or virus or what-have-you will work only while a specific user's logged on to the machine. But it will still run. It wouldn't need to take advantage of raw sockets, UPnP or other "supposedly dangerous" technologies to do its dirty work. So the question I ask is, how to prevent unauthorized software from running even as the limited user? Here are the things I've ruled out so far: * Signed programs are difficult to maintain. A lot of sites use old apps that can work as a limited user, but aren't digitally signed. And nothing stops a disreputable company with a code certificate from writing a bad program that happens to be signed. * "Outbound firewalls" are an annoyance to the average user, because they warn you about every single little applet that wants network access. That includes the Windows Firewall when you enable outbound connection monitoring. Besides, it's one more thing that runs in the background using up CPU time that a useful app can use instead. And they don't stop bad programs that use file system APIs instead of network APIs to spread. * I would love to see "ZIP file type restrictions" in the Compressed Folders shell extension for Windows XP. Like the attachment restrictions built into Outlook 2002 and later, I could disallow opening certain file types from within ZIP and other archive files. There's no such functionality yet, so I've had to block ZIPs as "level 1" and allow "level 2" access only to people I've trained in handling ZIP archives safely. This sucks because even a trained user can make mistakes. * I already change the security ACLs for the root of Drive C to read-only for limited users, and apply special ACLs to the "RECYCLER" folder so limited users can still create and use Recycle Bins. I borrowed the same ACL for "Shared Documents" to accomplish this. The only folders that need to be on the root of Drive C are "Documents and Settings," "Program Files," "Windows," and "RECYCLER." And these folders (except for RECYCLER) have default ACLs that are perfect for before-the-fact security. I also create a separate volume exclusively for the paging file and make that unreadable to limited users entirely. Which comes to my latest idea which I have no clue how to implement: Deny (or remove) Execute permissions by default to Documents and Settings for limited users. I don't know how to implement this because I don't know where the default ACL for a user's profile is stored. Whatever it is, it's normally "Full Control" for the user. There's also the matter of setting up the same or similar ACL for whatever the user's Home directory is (on an Active Directory network) or their Profile directory (also on AD). Even if there were an ACL template I could change, I'd have to change it in three places: for the user's local profile, the user's roving profile (if any) and the user's home directory (if any). If this were possible, it would eliminate last remaining problem I can figure out: How to keep limited users from running unauthorized programs for good. A privilege elevation exploit won't work if it can't run in the first place. -- PGP key (0x0AFA039E): <http://www.pan-am.ca/consulting@pan-am.ca.asc> What's a PGP Key? See <http://www.pan-am.ca/free.html> GOD BLESS AMER, er, THE INTERNET. <http://vmyths.com/rant.cfm?id=401&page=4> Tag: Win 2k Password Security Tag: 65310
  - 7
    - Mouse Movie by itself! If you mouse moves by itself, UP & Down or Left - Right! system only dose it when you are not moving the mouse! Will not lock the system! & you can take back controll of the mouse without any problem! Ball or Optical Microsoft or Ligitec brand! If anyone else has had this problem, please let me know! new installs with XPpro and SP2 with 8 diffrent known MBs -- Thank you, I hope this Infomation is Helpfull! Tag: Win 2k Password Security Tag: 65297
  - 8
    - YWRIVR Trojan Seeing a process running as a subprocess of Explorer.exe. This process appears to be opening internet explorer windows. Google knows nothing (amazing!) Winternals makes reference to Qoolaid.v.2.7.1, but all info on that leads to blind alleys. Anybody else seeing this. Tag: Win 2k Password Security Tag: 65296
  - 9
    - YWRIVR Trojan Seeing a process running as a subprocess of Explorer.exe. This process appears to be opening internet explorer windows. Google knows nothing (amazing!) Winternals makes reference to Qoolaid.v.2.7.1, but all info on that leads to blind alleys. Anybody else seeing this. Tag: Win 2k Password Security Tag: 65295
  - 10
    - Will file permissions need to be changed? Curently i'm creating a new domain for a small company and migrating users and resources over from their old domain and I have a question about file permissions. First off, the environment is all WIndows 2003 DC's and file servers. I used ADMT v2 to migrate users and groups over and I did migrate SID's and passwords. Now during testing, users can login to the new domain but don't have permission to their roaming profiles or shared folders that reside on servers still on the old domain. From my understanding, migrating the SID's would allow users access to resources on the old domain. I do have a two way trust between the domains and can validate them with no issues. Should I go ahead and bring the servers into the new domain? And if so, would I need to reset permissions on their folders and profiles? And if you're going to say "Use the domain renaming tool". The company has a lot of major issues with their current AD DB and I believe it would be more stable if we just started from scratch. Thank you for your time and help! Chris Tag: Win 2k Password Security Tag: 65294
  - 11
    - Easy Question: Determining CA Server Role OS: Windows 2003 Server Standard Edition How does one determine the CA type that a server is running? I have tried working with certutil and looking at the Certificates MMC console and can't figure out if this server is installed as an Enterprise CA or a Stand-Alone CA. I'm probably missing a very simple step somewhere. Thanks in advance, Bob Tag: Win 2k Password Security Tag: 65293
  - 12
    - Installing Hotfixes via a VBS Script Does anyone know or have examples on how to install hotfixes via a vbs script. Thanks for any help, Johnnyweb Tag: Win 2k Password Security Tag: 65291
  - 13
    - Microsoft Security Bulletins for 12/14/04 December 14, 2004 Today Microsoft released the following Security Bulletin(s). Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summary: http://www.microsoft.com/technet/security/Bulletin/ms04-dec.mspx Important Bulletins: Vulnerability in WordPad Could Allow Code Execution (885836) http://www.microsoft.com/technet/security/Bulletin/ms04-041.mspx Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service (885249) http://www.microsoft.com/technet/security/Bulletin/ms04-042.mspx Vulnerability in HyperTerminal Could Allow Code Execution (873339) http://www.microsoft.com/technet/security/Bulletin/ms04-043.mspx Vulnerabilities in Windows Kernel and LSASS Could Allow Elevation of Privilege (885835) http://www.microsoft.com/technet/security/Bulletin/ms04-044.mspx Vulnerability in WINS Could Allow Remote Code Execution (870763) http://www.microsoft.com/technet/security/Bulletin/ms04-045.mspx Re-released Bulletins: Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) http://www.microsoft.com/technet/security/Bulletin/ms04-028.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Win 2k Password Security Tag: 65288
  - 14
    - New MSSecure.XML Version 2004.12.14.0 Now Available MSSECURE.XML Data Version 2004.12.14.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, December 1, 2004, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 5 new bulletins - which are fully supported for MBSA detection and SMS deployment. There are NO unsupported products or Note Messages in today's release. This does not include the re-release of MS04-028 (GDI+) that is not supported for MBSA detection. This release fully supports the following new bulletins: MS04-041 (Wordpad) - 885836 MS04-042 (DHCP) - 885249 MS04-043 (HyperTerminal) - 873339 MS04-044 (LSASRV and Kernel) - 885835 MS04-045 (WINS) - 870736 This release also includes a critical bug fix for MS04-040 to provided SUS Mapping information. This affected customers who used MBSA in conjunction with a SUS server to limit the reported patches to only those items approved on the Microsoft SUS Server. This problem has been corrected in this release. -- Doug Neal [MSFT] dugn@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for the Microsoft Baseline Security Analyzer (MBSA) at the following link: http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: Win 2k Password Security Tag: 65287
  - 15
    - hijack 69.20... coolwebsearch 2 Just an update. Anyone who gets this may want to consider just blowing away the box. I posted yesterday, got a few suggestions, tried the latest, and nothing worked. THe most interesting read I got here http://cwshredder.net/cwshredder/cwschronicles.html What ever it is I am now of the opin that it can't be removed by any normal uS certified IT guy. You need special skills - a phd in nerd. Thanks for the help - going to reinstall. Tag: Win 2k Password Security Tag: 65286
  - 16
    - hijack 69.20... coolwebsearch 2 Just an update. Anyone who gets this may want to consider just blowing away the box. I posted yesterday, got a few suggestions, tried the latest, and nothing worked. THe most interesting read I got here http://cwshredder.net/cwshredder/cwschronicles.html What ever it is I am now of the opin that it can't be removed by any normal uS certified IT guy. You need special skills - a phd in nerd. Thanks for the help - going to reinstall. Tag: Win 2k Password Security Tag: 65285
  - 17
    - LCS requires a certificate that has a key Hello, I'm trying to create a Connection for my Live Communication Server 2005. But if I choose TLS and not TCP, LCS requires a certificate that has a key My own certificate is a duplicate from the computer-certificate (Windows 2003 Server Standard) I've create the Certificate like the description in Microsoft Deployment Guide "Microsoft Office Live Communications Server 2005 Certificate Configuration" Tag: Win 2k Password Security Tag: 65283
  - 18
    - Publishing a Certifictae Template in AD Hi, I want to publish a Certficate Template in AD but on the template/General Tab the check box is greyed out. This applies to all templates so I can't unpublish existing published certificates. The server is a Domain Controller and I am logging on with e Domain Admin Account. The server is running 2003 Server Standard Edition. Any Ideas would be much appreciated"! Thanks Chris Tag: Win 2k Password Security Tag: 65281
  - 19
    - Strange CA error I managed to produce the first certificate fine through web enrollment. The next one however, complained with this: No certificate templates could be found. You do not have permission to request a certificate from this CA, or an error occurred while accessing the Active Directory. What does this mean? I've already tried the info at this site with no luck: http://support.microsoft.com/?id=811418 Tag: Win 2k Password Security Tag: 65278
  - 20
    - MS Debuts Desktop Search Tool - Reuters Microsoft Debuts Desktop Search Tool Mon Dec 13, 2004 06:40 PM ET http://www.reuters.com/newsArticle.jhtml?type=technologyNews&storyID=7080615&src=rss/technologyNews or http://tinyurl.com/5br6d SEATTLE (Reuters) - Microsoft Corp. (MSFT.O: Quote, Profile, Research) on Monday unveiled a new, preliminary version of its search tool for finding documents, e-mail and other files stored on personal computer hard drives. <snip> Honest, I really like Windows. I started with MSDOS 3.1 and have been upgrading ever since. But with MS's past history with IE & OE and today's internet environment, there is no way I could even think of sticking this thing in my computer. Lance ***** Tag: Win 2k Password Security Tag: 65271
  - 21
    - hijack browser 69.20... Virus/spyware tools seem to have met their match. I've run a dozen tools, have Symantec corp installation, it "pros" to help and nobody can fix it. Has anyone actually ever fixed this without 2 pages of instructions on how to do so? (which don't work). 2k, ie6, all sp's. This is one that hijacks the hosts file. Browser suddenly opens to wherever and so on. Popups too! Very neat. Can anyone tell me how the infection is spread? (You wouldn't believe what my company spends with Symantec!) Tag: Win 2k Password Security Tag: 65268
  - 22
    - CAPICOM and ASP.NET I am developing an ASP.NET application using VB.NET, and need to access a users certificate. I have successfully issued a certificate from our own CA and this can be seen through IE. So far, using CAPICOM 2, I am only returning certificates that are associated with the Web server (W2K3). I have tried setting the <identity impersonate="true"/> in the web.config file as was suggested in another post but this hasn't made a difference. Is there anyway to access the client-side "My" store in order to retrieve the certificate or am I barking up the wrong tree? Any help greatfully received. S Tag: Win 2k Password Security Tag: 65264
  - 23
    - File permissions I have a very old software package that is to be used on 30 lab machines. This is an old authorware 2.1 presentation. When the package is run it creates a directory APW_DATA in the c:\windows directory. not only does this directory have to be there the user running the application must have read and write permissions to this directory. Becuase users only get read permissions by default I have to manually change the permissions on this folder for users to be able to use the software. I want to know if there is a way that I can automate this process. What I have in mind is writing a script that will 1) add a shortcut to the start menu 2) create the APW_DATA folder with read write permissions for all users. I have been unable to figure out how to create or copy APW_DATA with the correct permissions. Is this possable and how can I do it. Thanks in advance. Tag: Win 2k Password Security Tag: 65262
  - 24
    - Inconsistent scan results? Hello! I have a puzzling situation here. Whenever I run Spy Bouncer, I get the following four items: HKEY_LOCAL_MACHINE\Software\Microsoft\Window\CurrentVersion\InternetSettings\P3P\History â??gator.comâ? HKEY_CURRENT_USER\Software\Microsoft\Window\CurrentVersion\InternetSettings\P3P\Hstory â??gator.comâ? HKEY_CURRENT_USER\\Software\Microsoft\Window\CurrentVersion\InternetSettings\ZoneMap\Domain â??gator.comâ? HKEY_CURRENT_USER\\Software\Microsoft\Window\CurrentVersion\InternetSettings\ZoneMap\Domain â??kazaa-lite.comâ?? I am running up to date W2K with SpywareBlaster and Spywareguard running in the background, also up to date. When I scan with Hijack This, Spybot S&D or Ad-Aware, they come up clean, but I always get these four when scanned with Spy Bouncer. My questions are: Are these a threat? Why wonâ??t the other three programs find them? Should I just delete them manually, or ignore them? I have never knowingly installed either Gator or Kazaa. Any input would be greatly appreciated! Tag: Win 2k Password Security Tag: 65261
  - 25
    - Cannot find server / Still have a trojan horse I've posted about this Dell 2400 (XP) before (Dec 9); I've been working on it to remove viruses, adware, etc 'cuz it was loaded with junk and had no AV program installed. I finally got Grisoft's AVG to load. When I first tried to update the definitions, it started then popped up "Virus found!". I ran the scan - it had 28 viruses (removed 27). When I tried to go online after that, I could connect (dial-up), but I couldn't get to a page. A box popped up saying the Internet connection failed. The address showed "res:shdoclc.dll/dnserror.htm" on the Cannot find server page. How can I fix this??? -- Also, the one remaining that couldn't be fixed (deleted) was a Trojan horse - Downloader.VB.S. After searching on Symantec's website, I couldn'd find a fix or reference to it. It was in the file C:\WINDOWS\SYSTEM32\Cip9g.exe. Is this a valid file or just trash?? Is this affecting the Internet? Please help!! Barb Zakrzewski -- Barb Zakrzewski Tag: Win 2k Password Security Tag: 65259

I Use Win2k for my own use (nobody else uses it) and I'm Getting a password
will expire in (#of days) do I want to change it? Is There A Way To Bypass
it?

Thanks In ADvanced

Top

Re: Win 2k Password Security by Bob

Bob
Sun Dec 19 23:57:55 CST 2004

You can set your password to never expire. Start...Run... compmgmt.msc
Look for the Local Users, find your account, open it, and set the password
to never expire.

I assume that this is Win2k Pro or Server, but not a domain controller?
Bob
"Tim Burns" <Tim Burns@discussions.microsoft.com> wrote in message
news:9D3A0609-1E69-45DB-A2F0-30F85440C21A@microsoft.com...
> I Use Win2k for my own use (nobody else uses it) and I'm Getting a
password
> will expire in (#of days) do I want to change it? Is There A Way To
Bypass
> it?
>
>
> Thanks In ADvanced

Top