Publishing a Certificate Authority Enrollment site using SSL + ISA 2004

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - NO_CLIENT_SITE I recently started having problems with one of my servers. It keeps recording the error message NO_CLIENT_SITE in netlogon.log. The funny thing is the IP address is the machine's PUBLIC IP address, not it's private address. The machine itself has been assigned a private IP address (NAT is done in the router). The machine is on a seperate subnet from my DCs, but the subnets are routed appropriately. I can ping my internal servers IP and I can trace directly to my internal servers. Any ideas? Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84610
  - 2
    - Windows Defender (Beta 2): Definitions Update Problem Hi, I am using Windows Defender (Beta 2) and when I open it I see following message on home screen. â??Your definitions havenâ??t been updated in 16 days. Definitions allow Windows Defender to detect the latest harmful or unwanted software and prevent it from running on your computer.â?? There is a button in front of message â??Check Nowâ?? and I always click it. The software connects to Microsoft site and after some time displays that the definitions are updated. But I keep getting the same message. I am facing this for last 3 days and the day count started with 14. Kindly suggest a solution Thanks and Regards Vishal Kaushik Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84609
  - 3
    - Failure Audits in Security Log I'm getting the following warning every 2 minutes in the security log on my W2000 DC. I'm pretty sure the warning is being generated by a connection on of my users is making to a remote server to access email for another company he works for. How can I get this warning to stop? I currently have GP set to audit account logon events pass/failure and audit logon events pass/failure (I'd like to keep these settings if possible). Here is the warning message being generated: Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 676 Date: 5/18/2006 Time: 11:04:25 AM User: NT AUTHORITY\SYSTEM Computer: (SERVER NAME) Description: Authentication Ticket Request Failed: User Name: username@remotedomain.com Supplied Realm Name: OUR DOMAIN.COM Service Name: krbtgt/OUR DOMAIN.COM Ticket Options: 0x40810010 Failure Code: 0x6 Client Address: 192.168.221.17 Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84601
  - 4
    - Remote User "Quarantine" and access control I was at a Microsoft seminar a year or two ago that covered laptop or remote user access security and how Windows Server and other Micorosoft technologies could be used to control remote user access to business LAN. They talked about being able to set up VPN access to LAN and being able to scan remote user laptop/desktop to verify whether it's patches and updates were up to date and if they were the remote user was allowed into LAN if if they were not up to date then the remote user was "quarantined" and not allowed access to the LAN until it was updated and then allowed into LAN. What is required to do this and is there any documentation on how to set this up? Thanks, Jose Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84600
  - 5
    - Set DCOM Permissions via Command Line Hi all ... I'm wonderring if anyone has any idea about how to (or if possible) set DCOM permissions via command line? I'm trying to script some permissions set up for new server Win 2003 OS installs and haven't had much luck finding a possible solution. Any help would be greatly appreciated. Thanks. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84598
  - 6
    - "Run AS" but with restrictions Hi there, I am playing around with the "Run As" option for allowing my "limited users" access to applications that require privileges of an admin. Instead of giving them the actual Administrator password, ive created another admin "BF2" user so they can use those credentials. What I am trying to do is: Restrict the local user down to a couple applications that he can use the "run as" command on as the "BF2" user, but I can still be able to use the run as option on all applications as the "administrator" user (for when I need to run admin programs) Ill give you an example... Local User (with limited privs) called JoeBlog Administrator User used for running programs called BF2 And local administrator is Administrator. Ok, so JoeBlog wants to play Battlefield2 (for instance) but punkbuster requires the program be run with admin provileges, so Ive created a BF2 user and added it to the administrator group, and they can now run BattleField 2 as the BF2 user and all is good. I have disabled the ability to log in (to the desktop) on the BF2 user, but I would like to restrict the "Run As BF2 user" down to just the Battlefield executable and nothing else. But still be able to "Run As Administrator" on everything else (for my management). Does anyone know of a way to lock this down? Would it be something that needs to be set on JoeBlog's account or the BF2 account? I can disable the Run As command all together but then I lose the option to run Battlefield as an admin user... Cheers :) Spyro Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84589
  - 7
    - Flaws In XP Hi, can any one tell me why business or comapnies dnt use(or not that much) Windows XP as part of their server. Is there is any security issues, or are there some other flaws ? Thanks Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84576
  - 8
    - Cable ISP Hi, I'm getting cable internet access for one home computer. Will the XP Firewall be sufficient? Do i need a router for security purposes? I currently have random IP with dial-up. Is the IP static with cable? What other security issues should i be concerned about? Thanks in advance :) Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84575
  - 9
    - IPsec Over Tunnel I am trying to encrypt my wireless traffic with IPsec. My configuration is as follows: OpenBSD 3.8 gateway (192.168.100.20) connected to Linksys accesspoint via crossover cable. Macintosh OS X 10.4 (192.168.100.200) AirPort Windows XP SP2 (192.168.100.120) Intel PRO/Wireless 2200BG I am using isakmpd on the OpenBSD computer, racoon on OS X and ipseccmd on Windows. If I configure transport policies the setup works correctly. However, if I use tunnel, the Macintosh works correctly, but the Windows computer does not. Below are the ipseccmd commands I am using for Windows. Transport mode: ipseccmd -u ipseccmd -f 192.168.100.120=192.168.100.0/255.255.255.0 -n ESP[3DES,MD5]1800s -a cert:"C=US, S=Missouri, L=Saint Louis, O=Home LAN" -1s 3DES-SHA-2 -1k 1800s ipseccmd -f 192.168.100.0/255.255.255.0=192.168.100.120 -n ESP[3DES,MD5]1800s -a cert:"C=US, S=Missouri, L=Saint Louis, O=Home LAN" -1s 3DES-SHA-2 -1k 1800s After executing these commands, I can ping 192.168.100.20. After several "Negotiating IP Security" messages, I receive replies from the remote computer. I can ping from the OpenBSD computer to the Windows computer as well. Tunnel mode: ipseccmd -u ipseccmd -f 192.168.100.120=0.0.0.0/0.0.0.0 -t 192.168.100.20 -n ESP[3DES,SHA]1800s -a cert:"C=US, S=Missouri, L=Saint Louis, O=Home LAN" -1s 3DES-SHA-2 -1k 1800s ipseccmd -f 0.0.0.0/0.0.0.0=192.168.100.120 -t 192.168.100.120 -n ESP[3DES,SHA]1800s -a cert:"C=US, S=Missouri, L=Saint Louis, O=Home LAN" -1s 3DES-SHA-2 -1k 1800s After executing these commands and pinging 192.168.100.20 I receive several "Negotiating IP Security" messages again. However, instead of receiving replies, I now get "Request timed out". If I examine the Oakley.log file, I can see that SA is successfuly netotiated. I would expect that if firewalls or some other ICMP block was in place, that it would affect both transport and tunnel mode. Any suggestions? thanks, Michael Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84562
  - 10
    - Printers dont assign after GPO Security changes... Hi guys, Got a bit of a complicated one so put your thinking caps on. We've gone through recently and tightened down our Win2k3 domain (with only WinXP clients) using Group Policy. Since we have made some changes, most of which are recommended or required, clients are no longer having their printers mapped via logon script. These are the Security GPO changes made: - Domain controller: LDAP server signing requirements (Require signing ) - Domain member: Digitally encrypt or sign secure channel data (always) (Enabled) - Domain member: Require strong (Windows 2000 or later) session key (Enabled) - Network access: Allow anonymous SID/Name translation (Disabled) - Network access: Do not allow anonymous enumeration of SAM accounts (Enabled) - Network access: Do not allow anonymous enumeration of SAM accounts and shares (Enabled) - Network access: Let Everyone permissions apply to anonymous users (Disabled) As for the printers users were getting their access via the EVERYONE group. I have confirmed that as far as the Printer groups go, everyone is a member of their associated groups. The logon script says that if you are a member of that group, then map that specific printer. Since the groups arent assigned to the printers, they were naturally getting their access (previously) via the EVERYONE group. Since the above security changes, users seem to have lost their access to the EVERYONE group and the logon script is no longer installing the printers for them. I can confirm that the logon script has not changed since no one here knows VB :o) It was definitely one of the above changes. Can anyone think of which one? Thankyou Hutchy Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84561
  - 11
    - Backup utility I would like to use the Backup Utility in Windows XP Home. It is not preinstalled and does not appear to be included in the Installation Disc provided by Dell along with my computer. I have tried emailing Dell but each reply sends me round in circles from one "support" site to another. Can anyone tell me how I can download Backup............please? Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84557
  - 12
    - Microsoft Certification Authority Hi All, Just curious about something in the Microsoft Certification authority; I have a number of issued certificates that are expired or are nearing expiration, is it possible to renew the issued certificates (and how do i go about doing this? Any good articles/walkthroughs?). What I want to avoid is having to reissue the certificates to each of the clients. Is this possible? or will I have to generate new certificates and distribute them to my end users again? TIA J Brown Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84552
  - 13
    - Networking problem I have set up a home network between my main comp and my laptop but my laptop is saying I do not have permission to view my network path...anyone know how to alter this? -- CJB Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84537
  - 14
    - systemprocess locks port 21 Hi, everyone, I have to following problem: After starting the remotedesktopserver on an win2000-system the port 21 ist locked by process System:8 (found with tcpview.) The IIS runs on that machine, but the FTP-component is not installed. There is no suspicious process (other then windows) running, there is no traffic on port 21 and a telnet-login on port 21 is not possible. Any idea? Thanks in progress. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84535
  - 15
    - Security feature in Microsoft's new Windows (Vista) could drive users nuts "SEATTLE - An annoying surprise awaits 2 million consumers expected to enthusiastically step forward in the next few weeks to help Microsoft test its new Windows Vista PC operating system. Volunteers will test Vista Beta 2, a near-final version of the much-hyped upgrade of Windows. The testing is the last step leading up to Vista's broad consumer release, scheduled for January. Beta 2 testers can expect to encounter an obtrusive security feature, called User Account Control (UAC). Designed to prevent intruders from performing harmful tasks, the feature grays out the computer screen, then prods you to confirm that you really want to do certain functions. In early test versions, the queries crop up so often that they interrupt routine tasks, such as changing the time clock or deleting shortcuts. And UAC sometimes triggers an endless loop of dialogue boxes that can be curtailed only by rebooting, says Paul Thurrott, news editor of Windows IT Pro magazine." http://www.usatoday.com/tech/products/2006-05-15-vista-security_x.htm?csp=34 -- Imhotep Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84526
  - 16
    - SBS FTP service getting slammed. We have a low IT budget. I am using FTP to backup remote computers. Someone discovered my FTP service was opened and has been hitting me with 10's of thousands break-in attempts. Usually trying the administrator user. They will probably not figure out the user name, because I have changed the admin username, but it is almost everyday. Yesterday they tried the username of "Julian" Go figure. The police here won't do anything. Neither will my ISP. Any ideas? Thanks! Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84512
  - 17
    - server 2000 i think some one is connecting...help..please thanks. Hi, every one, thanks for any help in advance, I have windows 2000 server, with a Juniper hardware firewall, for some reason on the last 2 weeks very strange thing has been happening, some user passwords has been changed, some new user has been created, I would like to know what kind of software I can use to protect and monitor my server for this kind of attacks. Thanks for any help here. R.M> Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84506
  - 18
    - Cannot login to Administrative Shares but can enumerate Hi: wk3 with xp2 clients. I can enumerate the administrative shares on all machines by giving my admin credentials. But when I try to login through \\machinename\c$, my password is not accepted. What might be the issue here? Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84504
  - 19
    - File permissions screwed up Hello all, I copied a data structure from folder on my server to another, using the xcopy /t command. Example "xcopy /t c:\data c:\share". Now it seems that whenever I try to assign permissions to those folders (c:\share), it tells me "access is denied". I'm trying to assign 3 different user groups access to the folder. 2 user groups need Full Access, the last group is read-only. As long as I'm the administrator on the server, I can create a file within the folder. Once I go to the workstation, no joy. Even if I sign on as Administrator, I can't create a file on that directory. It's like it killed all network access to the folder. Any ideas would be greatly appreciated... Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84502
  - 20
    - Remote Windows User List Disclosure Vulnerability Hi everybody, We use a tool that audit our servers in order to avoid vulnerabilities.I=B4ve a DC w2003 with the following vulnerability: Remote Windows User List Disclosure Vulnerability. That means that a null session connection to the IPC$ share was successful and NetBIOS access can be obtained with any authenticated account on that host. Therefore unauthorized users can steal the remote user list. This kind of attack is commonly exploited by users with weak passwords, such as the GUEST account. Microsoft has published this article: http://support.microsoft.com/default.aspx?scid=3Dkb;en-us;246261 The values for w2000 and w2003 are different. I=B4ve read that in w2003 in order to restrict anonymous you can only use 0 for disable and 1 for enable it. Meanwhile, in windows 2000 you have one more possible value, 2. Anyway, I=B4ve try to set it to 1 or 2 without success. I=B4ve also disabled the posibility of enumerate sam accounts and shares trought the domain controller security policy. After restarting the server I obtain again the vulnerability in that server. Any idea about this issue? Your help would be much appreciated, Regards. Victor Fdez-Pe=F1aranda Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84501
  - 21
    - Assign PID can i assign a PID to a process? Thank you Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84499
  - 22
    - signcode via proxy is there a way to get signcode go thru a proxy ? Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84495
  - 23
    - Wield the Shield: How Trustworthy Is Your OS? "Trusted operating systems have been used for some time to lock down the most sensitive of information in the most sensitive of organizations. But with security concerns rising and changing by the hour, it's now a matter of trust for any organization looking to tighten its computing ship." http://www.eweek.com/article2/0,1895,1961947,00.asp Im Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84490
  - 24
    - Use of CCleaner - I was recommended the use of CCleaner as a fine way to clean my computer. This is clearly a thorough tool - in fact so throrough that my bank account portal has erased all links to my other banks accounts. (I have a prgram supplied by my Credit card co which allows me to link to all my other bank accounts (i.e. retails the passwords etc.)). Which option on CCleaner do I disapply to allow my computer to retain these deatils on my PC? I don't really want to insert multiple details every time I wish to view my finances. Can anyone assist please? Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84481
  - 25
    - netstat showing too many connections LISTENING When I run "netstat -a" on my server, it shows lots of open connections (like EM_SVR1.co_name.com:0) in the LISTENING state. These connections seem to stay open, and keeps increasing over time, and the application soon fails because it cannot get any more ports! After a couple of days, I have pages and pages of this listing. Just typing netstat or using gui tools such as tcpview does not show all these connections. I need to figure out how to make sure these connections eventually go away, and the application does not fail. The PID of these connections show that it is my application that owns/initiated the connections. Any help or pointers is greatly appreciated. Thanks. ----------- netstat -a output --------------------- Active Connections Proto Local Address Foreign Address State TCP EM_SVR1:ftp EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:smtp EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:http EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:epmap EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:https EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:microsoft-ds EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:1025 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:1027 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:1044 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:1047 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:1051 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:1098 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:1099 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:2967 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:3389 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:3528 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:4444 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:4445 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:5800 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:5900 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:6050 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:8009 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:8083 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:41523 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:netbios-ssn EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:3528 EM_SVR1.co_name.com:4120 ESTABLISHED TCP EM_SVR1:4120 EM_SVR1.co_name.com:3528 ESTABLISHED TCP EM_SVR1:netbios-ssn EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:3389 10.10.200.1:63571 ESTABLISHED TCP EM_SVR1:4326 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4369 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4515 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4516 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4517 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4518 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4519 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4537 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4552 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4553 phxemwddev001.co_name.com:ms-sql-s ESTABLISHED TCP EM_SVR1:4561 phxemwiprod001.co_name.com:epmap ESTABLISHED TCP EM_SVR1:4562 phxemwiprod001.co_name.com:1025 ESTABLISHED TCP EM_SVR1:14147 EM_SVR1.co_name.com:0 LISTENING TCP EM_SVR1:http EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:epmap EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:https EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:microsoft-ds EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:1025 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:1027 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:1044 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:1047 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:1051 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:1098 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:1099 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:3528 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4120 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4121 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4122 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4128 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4132 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4137 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4140 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4141 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4142 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4143 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4144 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4145 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4146 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4147 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4148 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4152 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4160 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4167 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4177 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4191 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4192 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4193 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4196 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4199 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4200 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4202 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4203 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4204 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4205 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4208 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4220 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4246 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4247 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4291 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4296 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4297 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4298 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4299 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4301 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4302 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4303 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4306 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4313 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4326 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4327 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4341 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4344 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4346 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4348 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4352 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4354 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4364 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4365 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4366 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4367 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4368 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4369 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4370 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4380 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4404 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4433 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4434 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4435 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4438 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4441 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4442 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4443 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4444 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4445 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4446 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4447 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4450 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4484 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4485 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4491 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4492 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4493 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4502 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4515 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4516 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4517 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4518 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4519 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4520 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4523 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4524 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4526 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4528 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4537 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4540 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4552 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4553 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4554 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:4673 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:8009 EM_SVR1.co_name.com:0 LISTENING 0 TCP EM_SVR1:8083 EM_SVR1.co_name.com:0 LISTENING 0 UDP EM_SVR1:isakmp *:* UDP EM_SVR1:1035 *:* UDP EM_SVR1:2148 *:* UDP EM_SVR1:2799 *:* UDP EM_SVR1:3105 *:* UDP EM_SVR1:3456 *:* UDP EM_SVR1:3550 *:* UDP EM_SVR1:4500 *:* UDP EM_SVR1:6050 *:* UDP EM_SVR1:41524 *:* UDP EM_SVR1:ntp *:* UDP EM_SVR1:netbios-ns *:* UDP EM_SVR1:netbios-dgm *:* UDP EM_SVR1:ntp *:* UDP EM_SVR1:netbios-ns *:* UDP EM_SVR1:netbios-dgm *:* UDP EM_SVR1:ntp *:* UDP EM_SVR1:1028 *:* UDP EM_SVR1:1062 *:* UDP EM_SVR1:3456 *:* UDP EM_SVR1:4072 *:* UDP EM_SVR1:ntp *:* UDP EM_SVR1:ntp *:* Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84474
- Next
  - 1
    - Take Ownership of Multiple files at once Hello- We just installed a new server and on the old server we had a directory of photos that only two users had access to, myself (admin) and our lab tech. These permissions were assigned via NTFS. Now that I have put the drive in the new server it is not allowing me to do anything with the files as no one on this local computer has any security permissions for it. I can manually take ownership of folders and files with the admin rights I have on the server but there are over 450 photos in there and it would seem rediculous to have to do them individually. I have gone into the security/advanced tab of the parent folder and trield clicking the check box to "Replace permissions entries on all child objercts with entries shown here that apply to child objects" but it wont let me because there are no rights to the photos so it says access is denied. Is there any way I can take ownership of all of those files all at once in order to reassign proper permissions? I tried the obvious of selecting them all and going to the security tab but that is not available for muliple selected objects it states. Thanks in advance for any assistance! Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84472
  - 2
    - IPSec client for Windows Mobile 2003 Hi all, seems a silly question, but I can't find the answer inside microsoft.com site : does a IPSec client exists for Windows Mobile 2003 ?? Any URL pointing to information on it will be welcome !! Thanks in advance Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84470
  - 3
    - Windows Defender When running the install after the defender download I get the following message - path c:\\windows\downloaded installations\(0F5BF410-4D79-4DBE-AF54-C3271D47D4BD)\microsoft antispyware.msi cannot be found. Verify you have access to the location and try again or try to find the installation package microsoft antispyware.mist in a folder from which you can install the product. I posted the download on my desk top and ran the installation. Got the above message. Downloaded the program into temporary folder and got the same message. Help. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84467
  - 4
    - searching in cells I was trying to search for a number (200310005 - formated as text) in a cell in an Excel spreadsheet. I do this from "My Computer" (searching content) but the search fails to produce the correct document even when the search string is in the excel sheet. I've checked the formating of the cell (text). I've exported the excel sheet to text and imported it to a new file - doing the search again. It fails again. Formated as text or not. Any suggestions on what's going on here? (Excel 2000) Martin S Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84457
  - 5
    - MS CryptoAPI: HMAC using PLAINTEXTKEYBLOB Hi, all! I want to create a program using CryptoAPI which calculates HMAC-SHA1 using a key specified by PLAINTEXTKEYBLOB. I have a 20-byte key for HMAC-SHA1 and want to use it. How should I do? Should I import the key by CryptImportKey()? But I have to specify an encryption key algorithm and I donno which algorithm I should use. Your kind help is welcomed. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84456
  - 6
    - Windows firewall Can anyone tell me why when i connect to the net my windows firewall switches off? i switch it on but afer a while it will switch itself off again? i have done a anti-virus scan and windows defender scan not bugs found, help please Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84440
  - 7
    - Exchange/Cisco VPN client failing I have a WinXP Pro w/Outlook 2003 laptop trying to connect through a Cisco VPN 4.0.5 to the Exchange server. This connection is initiated via a D-link wireless access point. I seem to be having trouble resolving DNS, getting through the firewall, or authenticating to the Exchange server. Outlook gets stuck in "trying to connect". It only seems to be problematic from this one location, so perhaps it's a firewall port I'm missing...although I've followed all D-link instructions for enabling this Cisco client at http://support.dlink.com/SupportFAQ/default.asp?model=DI%2D624 Closest I've come to solving this is using the following KB article tells me that MS04-11 update may create this problem, but I can't uninstall it as it appears to have come with SP2 or another roll-up. I've tried the uninstall switch, before and after trying to reinstall it alone: http://support.microsoft.com/kb/891559 Here are my log entries: Event Type: Warning Event Source: LSASRV Event Category: SPNEGO (Negotiator) Event ID: 40960 Date: 5/13/2006 Time: 8:10:50 PM User: N/A Computer: FNL-001 Description: The Security System detected an attempted downgrade attack for server exchangeAB/HQ-MAIL-VS2.company.net. The failure code from authentication protocol Kerberos was "No authority could be contacted for authentication. (0x80090311)". For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: DnsApi Event Category: None Event ID: 11197 Date: 5/13/2006 Time: 8:10:50 PM User: N/A Computer: FNL-001 Description: The system failed to update and remove host (A) resource records (RRs) for network adapter with settings: Adapter Name : {C8886BF1-FC23-4B35-93B8-C435EADD2B02} Host Name : fnl-001 Primary Domain Suffix : company.net DNS server list : 10.0.0.15, 10.0.0.13 Sent update to server : 10.1.1.1 IP Address(es) : 10.0.30.120 The reason the update request failed was because of a system problem. For specific error code, see the record data displayed below. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 1e 25 00 00 .%.. Event Type: Warning Event Source: LSASRV Event Category: SPNEGO (Negotiator) Event ID: 40961 Date: 5/13/2006 Time: 8:10:50 PM User: N/A Computer: FNL-001 Description: The Security System could not establish a secured connection with the server exchangeAB/hq-MAIL-VS2.company.net. No authentication protocol was available. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: LSASRV Event Category: SPNEGO (Negotiator) Event ID: 40960 Date: 5/13/2006 Time: 8:10:54 PM User: N/A Computer: FNL-001 Description: The Security System detected an attempted downgrade attack for server exchangeMDB/hq-MAIL-VS2.company.net. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request. (0xc000005e)". For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: LSASRV Event Category: SPNEGO (Negotiator) Event ID: 40961 Date: 5/13/2006 Time: 8:10:54 PM User: N/A Computer: FNL-001 Description: The Security System could not establish a secured connection with the server exchangeMDB/hq-MAIL-VS2.company.net. No authentication protocol was available. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84430
  - 8
    - Internet filter I want to implement some sort of a filter based on the domain name. I am looking for some sample code that allows me to access the request of the user so I can initially record the domain name accessed, the actual blocking is not important at this point Thank you Sam Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84423
  - 9
    - WINDOWS DEFENDER in the last 2 months i've been hit by the spyfalcon virus twice, after running norton antivrus software - which did nothing to eradicate the virus, i turned to microsofts security advise section, downloaded the "windows defender" and ran the scan. it didnt even detect any virus/ spyware on my pc. i then tried microsofts free online pc scanning tool for viruses and spyware, and still it didnt detect spy falcon. i have to say that microsofts security products are just not up to the task!? all in all i find both microsoft and norton useless in keeping up to date with the latest fixes to well known issues that have been around for quite some time. anyone else suffered from the spy falcon virus ? -- aberdeenpirate Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84392
  - 10
    - How many characters to make Winzip AES 256 unbreakable? Winzip offers 256 bit AES. So do other apps. If I use a password made up of ordinary characters (A-Z, a-z, 0-9) with no specials then how many characters do I need to use to make AES 256 uncrackable by a brute force attack? The info out there talks mainly of key length but I am not familiar with this field and I can sense they are not talking about the length of the password I am using. There is a little bit here but it seems out of date: <http://www.dekart.com/howto/howto_disk_encryption/howto_recover_lost_pa ssword/> Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84369
  - 11
    - books on internet security What is considered to be THE book on internet security? Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84363
  - 12
    - Msn gaming I have a folder on my computer "C:\Program Files\msn gaming zone" why is it that everytime i del the games in there they come back 2 sec later my recycle bin had 10 copys of each game I deleted why can't i delete these games???? Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84356
  - 13
    - Are We Addressing Cyber Crime Backwards Maybe that is why it continues to grow despite all the hard work to stop it: http://fraudwar.blogspot.com/2006/05/are-we-addressing-cyber-crime-from.html Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84348
  - 14
    - Are We Addressing Cyber Crime Backwards Maybe that is why it continues to grow despite all the hard work to stop it: http://fraudwar.blogspot.com/2006/05/are-we-addressing-cyber-crime-from.html Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84347
  - 15
    - Are We Addressing Cyber Crime Backwards Maybe that is why it continues to grow despite all the hard work to stop it: http://fraudwar.blogspot.com/2006/05/are-we-addressing-cyber-crime-from.html Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84346
  - 16
    - NORTON UPDATES WHEN I RUN NORTON LIVE UPDATE I RECEIVE ERROR"LU1875 THIS UPDATE FAILED DURING IT'S PREPROCESSING TEXT PHASE" I HAVE DONE EVERYTHING RECOMMENDED TO CORRECT THE PROBLEM BUT WHEN I RUN THE LIVE UPDATE AGAIN I STILL RECEIVE THE ERROR AND ALSO THE VIRUS DEFINITIONS WILL NOT UPDATE. I AM NEW WITH THIS COMPUTER STUFF SO PLEASE BE GENTLE WITH ME. THANKS Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84343
  - 17
    - Password is passed Multiple times per thread? Hello, I was presented an MS article that stated that when a person submits their password/credentials in conjunction with an executable, that the passing of the credentials is multiplied by the threads underneath the executable process. Is this so? We have had quite a few accounts that have locked out from a single bad password entry and our limit is set to 5 If anyone has any ideas or could point out an article or white paper which discusses this issue, I would be most appreciative. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84338
  - 18
    - Third-Party Root CA The company I work for is interested in implementing a third-party Root CA infrastructure. Can anyone recommend a third-paty that issues Subordinate CA certificates? I checked with verisign and they don't. Third-Part Root CA http://technet2.microsoft.com/WindowsServer/en/Library/07d3c7fa-9ab2-496b-b01f-ad0944fd97541033.mspx?mfr=true Thank you. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84327
  - 19
    - Enabling the administrator to have access to redirected folders I'm having trouble with Article ID: 288991 "Enabling the administrator to have access to redirected folders" The directions work just fine for users that have never had their folders redirected, but the process generally fails for users that have had their folders previously redirected. For existing redirected folders, I change the GPO to send the folders back to the users local profile (and Remote User Profile). I then take ownership (as an Administrator) of the old redirected folder and delete it at the %username% folder. I then change the users GPO back to folder redirection and the folders do move as I would expect. The problem however still remains in that I as an Administrator still can't access the redirected folders. On a rare occasion, this process does work for prior redirected folders but I still have several users that it does not work on. When it does work, it usually requires a few days between sending the folders back to the local and then redirecting them back to the redirected folder. I've tried gpudate on the server and workstation and even shut everything down several times, but I still have the same problem. Any ideas what might be wrong? I have Windows Server 2003 SP1 Standard & XP Pro clients. -- Thanks, Bob -- Bob Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84323
  - 20
    - Help me Please!!!!!!! Bypass traverse checking I have to edit Everyone to the security policy "Bypass traverse checking" But I cannot add anyone because the button is grayed out. I am logged on as administrator There is a domain controller policy but the administrators is in it and the eveyone group. Can someone please help me so that I can edit the Bypass traverse checking. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84318
  - 21
    - replication of stored emails Help. I have a dell pc windows xp, pc cillin, everything updated. On email, using msn dialup, my stored messages, even 2 year old messages, are multiplying like rabbits. They will not delete. The folder will not empty. They now number 20-30 thousand. What bug do I have and how do I clean it out? PC Cillin scans find nothing. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84317
  - 22
    - MS06-018 need help Hello I install this patch on a Win2k SP4 server running Exchange 5.5 sp4. After the reboot it will not let users access their mailbox's. I have remove the patch via add/remove w/reboot but still no luck. If I move the mail box to a different server it works fine. If its moved back no joy. I have too many users and too few servers to move everyone. I need some help with this please. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84302
  - 23
    - Event Viewer Security shows Guest logon? Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 538 Date: 5/11/2006 Time: 1:19:23 PM User: MOMS\Guest Computer: MOMS Description: User Logoff: User Name: Guest Domain: MOMS Logon ID: (0x0,0x3FFDBD) Logon Type: 3 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Having multiple entries as shown above. Is someone logging on my system as guest? Running XP Home, DSL with wireless router. Thanks in advance, Patrick. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84294
  - 24
    - Microsoft patches Windows, Exchange flaws... "Microsoft released fixes on Tuesday for two sets of flaws in its Windows operating system and another two vulnerabilities in the software giant's Exchange mail server, security issues which could allow a worm to propagate between vulnerable systems, security experts warned. A critically-ranked patch addresses two flaws in Windows that affect the Macromedia Flash player from Adobe, a plugin that ships with Microsoft's Internet Explorer 6 browser, and could allow remote code execution, the software giant said in its bulletin. The other patch, which is rated moderate for severity, fixes two flaws in the Microsoft Distributed Transaction Coordinator (MSDTC) that could be used to cause a denial-of-service, the software giant stated." http://www.securityfocus.com/brief/207?ref=rss Imhotep Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84293
  - 25
    - McAfee Firewall and network Hi. Configuration: wall socket from cable company, from wall socket to modem a connection by cable. From modem cable to router, in the same room. Receiving computer with wireless adapter is in different room. No other PC's or networked devices are connected. I was advised by McAfee that I should choose for the firewall for the option: "trust home network". (ok, not perfect translation, because the software is in Dutch). But if I do that, will that not make me less safe ? I should also add that the router has a built-in firewall, but an imperfect one. Not port everything is stealthed (as recommended on www.grc.com, Zonealarm firewall is recommended on that site for it's unique stealth capabilities (as opposed to just keep a port open or closed)). But I can't use Zonealarm because it affects my wireless connection in a bad way and because basically the hardware and/or software of my ISP doesn't like Zonealarm. I'd also like to add that I use WPA-PSK for communication between my router and my PC. Also, I have given the router a non-standard login and and complicated passport. But my main question is: should I have the McAfee firewall trust the "home network" or am I better off not doing that. An explanation why would help :) Thanks. Tag: Publishing a Certificate Authority Enrollment site using SSL + ISA 2004 Tag: 84292

Hi.

I am trying to publish a CA enrollment web site to external users using
SSL and ISA 2004. I know that my site can be access through the
internet if I just use HTTP, but I need to secure my site. Is there
something I can look at to help me in this?

TIA

Top