Purchase of a certificate

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Silent certificate installation Hi guys, does anybody know how to install a certificate on the client machine silently? I already set up the CA authority and it is issuing certificates automatically. When I click to install the certificate I receive 2 messages warning me about the installation of the certificate. Is there any way to install the certificate without user intervention? I mean, a script that I can do, a .NET app, what ever works .... I'll appreciate any clue, cause I don't know where to start. Thanks, Nelson Tag: Purchase of a certificate Tag: 91581
  - 2
    - CERTSRV_DCOM_ACCESS Group missing - suggested KB fix not working 4 Dear all, Have just implemented a W2003 pki for our 3 domain forest, the issuing CA is a w2003 enterprise box, not a dc but installed as part of one of the child domains in the forest under an enterprise admins account. pkiview tells me everything is fine, and domain controllers are auto-enrolling just fine within the child domain hosting the CA, outside in the other child domains they aren't but thats an issue with Cert Publishers membership that i am confident i can resolve by changing the scope of the groups. The problem i have is referenced in http://support.microsoft.com/kb/927066 but the fix does not work in our situation. The fix i am referring to is to run certutil -setreg SetupStatus -SETUP_DCOM_SECURITY_UPDATED_FLAG if the CERTSRV_DCOM_ACCESS group is missing from the users container in the ad. Which it is. Running this generates no errors, but does not create the group.... I feel i should also mention that our root domain within the forest was upgraded from w2000 to 2003, but due to an administrative oversight, the schema was updated to R2 before sp1 was applied to the schema master. Not sure if this is related. Essentially i need to have the group so i can add the relevant groups so my users are able to request certificates, at the moment only ent admins can, everyone else receives the following message The wizard cannot be started because of one or more of the following conditions: - There are no trusted certification authorities (CAs) available. - You do not have the permissions to request certificates from the available CAs. - The available CAs issue certificates for which you do not have permissions. Any ideas? Any advice welcomed! Best, Jim Bullock Tag: Purchase of a certificate Tag: 91576
  - 3
    - Client Wireless Set To PEAP But Need Access To Public AP's Also Hi, I have setup a lab using MS IAS and PEAP autnentication for wireless users. This all works great. But the clients that have the group policy assigned for the WIFI policy cant connect to public AP's. Is there any thing I need to do to allow clients to access our secure PEAP wireless network but also be able to connect to public or home AP's. Thanks for any help. Tag: Purchase of a certificate Tag: 91574
  - 4
    - SLL Certificate hi, Does anybody know a URL, where I can buy a secure SSL-certificate for our Windows-Webserver, which one can buy for a low price? The important thing is, that IE7 and other browsers shouldn't prompt the certificate warnings anymore. Thanks for your hint. regards Patrick Tag: Purchase of a certificate Tag: 91570
  - 5
    - Browser Hijack? When I select the Homepage on my internet explorer browser I am immediately taken to the security centre with the following address http://asafetynotice.com/ It advertises a number of security programs you can download (at cost). Though I already have McAffee antivirus/firewall installed which has not detected any problems. It is annoying but it only happens when trying to open the 'Homepage' Would appreciate any ideas. Thanks Tag: Purchase of a certificate Tag: 91567
  - 6
    - "file audit" Hello, We have a Windows 2003 Server which has some folders shared. I have to find a way to know what are doing users whith those files. Most of this files are generated by MS Word, Excel. I tryed to audit those folders but the information is not helping me too much. I would like to know the follwing: - if the files are copied from server to local station and from this to USB flash memory , flopy disk or send by email and so on. - when the user is opening, changing, deleting or closing a file. Can you please tell me if is there a way to do this only with the option from Windows 2003 or do I have to use another software ( is possible please tell me what software should I use)? Tag: Purchase of a certificate Tag: 91565
  - 7
    - Require Info on EAP extension development for windows mobile Hi, We are developing an EAP module for the Windows Mobile 5.0 as per the documentation provided at the MSDN site for the EAP extension development. http://msdn2.microsoft.com/en-gb/library/aa363504.aspx We succeeded in writing the whole EAP module. The whole EAP authentication goes through well with the AAA server(RADIUS) with the extension dll we wrote and we finally receive the outer EAP success, sent as part of the Access-Accept from RADIUS, which indicates the EAP authentication has succeeded. Now as per the documentation in MSDN, we are supposed to pass the MPPE-Send key and MPPE-Recv Key from the RasEapMakeMessage function using the pUserAttributes member of the pEapOutput structure in the final step. These keys are supposed to be used in the EAPOL module in the 4way handshake for the WPA MSK derivation. But its not much clear on how the pUserAttributes is to be filled with these keys. We filled in the pUserAttributes pointer from what we can make out from the following MSDN link in the Remarks section at http://msdn2.microsoft.com/en-gb/library/aa363518.aspx . and another section that appears in the EAP Host documentation for Windows Vista and XP on how MPPE keys are to be handled at http://msdn2.microsoft.com/en-us/library/aa363636.aspx, which we think might also be relevant for the EAP extension development. But they don't seem to work. We tried a lot of combinations but nothing seems to work. When we sniffed/traced on Access Point's logs the supplicant doesn't seem to respond to the EAPOL key request at all as part of the 4 way handshake for the WPA key(MSK) generation. There isin't much help at the MSDN apart from the above. The following is the code piece on how we filled in the fields, can anyone check if the code and tell what is wrong with this and the correct way of doing it The excerpts from the code is as follows: typedef unsigned char u8; struct vsa { u8 attr_type; u8 length; u8 salt[2]; u8 lenofkey; u8 value[32]; u8 padding[15]; }; struct vsa mppe_send_key, mppe_recv_key; char *pos = NULL; // 1-MPPE-Send Key, 1-MPPE-Recv Key, 1-raatMinimum(for termination) lenofuserattr = 3 * sizeof(RAS_AUTH_ATTRIBUTE); pEapOutput->pUserAttributes = (RAS_AUTH_ATTRIBUTE *) malloc(lenofuserattr); pos = (u8 *) pEapOutput->pUserAttributes; memset(pos, 0, lenofuserattr); /* As per MSDN 52 for the sub-attribute AVP which would hold the MPPE keys 4 for Vendor-Id(311 for Microsoft) */ lenofvalue = 52 + 4; //MPPE-RECV-KEY pEapOutput->pUserAttributes[0].raaType = (raatVendorSpecific); //ras auth attribute type (VSA) pEapOutput->pUserAttributes[0].dwLength = (lenofvalue); pEapOutput->pUserAttributes[0].Value = (u8 *) malloc( sizeof(u8) * (lenofvalue) ); pos = (u8 *) pEapOutput->pUserAttributes[0].Value; memset(pos, 0, lenofvalue); vid= ntohl(311); memcpy(pos, &vid, 4); pos += 4; mppe_recv_key.attr_type = 17;//Type MPPE-Recv-Key mppe_recv_key.length = 52; //Total AVP length mppe_recv_key.salt[0] = 0x00; mppe_recv_key.salt[1] = 0x00; mppe_recv_key.lenofkey = 32; // Key length only // The second 32 bits of the buffer 'mppe_keys' is the MPPE-Recv key memcpy(mppe_recv_key.value, mppe_keys + 32, 32);//MPPE-Recv Key memset(mppe_recv_key.padding, 0, 15); //padding memcpy(pos, &mppe_recv_key, sizeof(struct vsa)); //sizeof(struct vsa) is equal to 52 //MPPE-SEND-KEY pEapOutput->pUserAttributes[1].raaType = (raatVendorSpecific); //ras auth attribute type (VSA) pEapOutput->pUserAttributes[1].dwLength = (lenofvalue);//4 - Vendor- Id pEapOutput->pUserAttributes[1].Value = (u8 *) malloc( sizeof(u8) * (lenofvalue)); pos = (u8 *) pEapOutput->pUserAttributes[1].Value; memset(pos, 0, lenofvalue); vid= ntohl(311); memcpy(pos, &vid, 4); pos += 4; mppe_send_key.attr_type = 16; //Type MPPE-Send-Key mppe_send_key.length = 52; //Total AVP length mppe_send_key.salt[0] = 0x00; mppe_send_key.salt[1] = 0x00; mppe_send_key.lenofkey = 32; // Key length only // The first 32 bits of the buffer 'mppe_keys' is the MPPE-Send key memcpy(mppe_send_key.value, mppe_keys, 32); //MPPE-Send-Key memset(mppe_send_key.padding, 0, 15); // Padding memcpy(pos, &mppe_send_key, 52); //Terminate with raat Minimum pEapOutput->pUserAttributes[2].raaType = (raatMinimum); pEapOutput->pUserAttributes[2].dwLength = (0); pEapOutput->pUserAttributes[2].Value = NULL; Thanks, Vijay Tag: Purchase of a certificate Tag: 91564
  - 8
    - Browser being hijacked? After reading some book reviews I I thought I'd make a few purchases at www.amazon.com. But every time I type in amazon.com into my browser I get sent to this http://www.amazon.com/gp/aw/h.html/103-0672385-5251043 It happens on both of my PCs and with firefox and explorer. I am running Windows XP SP2, with spyware doctor and antivir and they don't see to find any problem. Does anyone else have this problem? Best, Rob Tag: Purchase of a certificate Tag: 91563
  - 9
    - Windows XP Home Edition Password My friends daughter set a password on there home pc and nopw can't remember it. Anyway to unlock it? Tag: Purchase of a certificate Tag: 91558
  - 10
    - Annoying "Restricted Sites" behavior, IE 7 From a certainServer, I attempt to go to www.microsoft.com/security. I get there just fine, but when I click on "Windows Update" I notice a 'prohibited' signal on the top of the IE 7 page. From there I can't access Windows Update. What it is strange is that under "Security" settings I added the complete http://update.microsoft.com/windowsupdate/v6/default.aspx and also http://.update.microsoft.com* However the problem persists. What am I missing? How can I browse to the security update sites without restrictions? Tag: Purchase of a certificate Tag: 91556
  - 11
    - A twist to "Logon to domain" Hi all, just scanned the postings and i'm a little suprised. There seams to be no way, to make a user logon/authenticate at a domain WITHOUT the user making his username AND PASSWORD available to the application initiating the logon/ authentication process.... Is that right? I'm refering to CredUIPromptForCredentials function which "publishes" the password of the application the invoking it. Any hint how to initiate the authentication process in a way which does not make the password readable to the invoking application? I really hope i'm just missing something, and it's not by design.... TIA br Radek Tag: Purchase of a certificate Tag: 91555
  - 12
    - Password policie Hello, Is it possible that we have two password policies in one domain. Â¿Can I configure this GPO at site level? Thank you. Tag: Purchase of a certificate Tag: 91549
  - 13
    - public xp media edition I maintain several laptops at our local library. With the Media Center XP 2005 I can't seem to set up limited user accounts. I just want an admin account for me and the librarians and a limited account that doesn't allow any programs to be added or altered. I am pretty computer savvy but not a programmer or expert. I also need to do this on two XP Home laptops. Thank you, Carol M Tag: Purchase of a certificate Tag: 91547
  - 14
    - Group policy to prevent users to safe password Is there a group policy setting to prevent users to check the options for windows to safe passwords? Tag: Purchase of a certificate Tag: 91545
  - 15
    - Waking up from hibernate If my computer hibernates, I move the mouse, or if that doesn't wake it up, I hit the power button. The "User Screen" opens to allow me to chose which user (me or my wife). It also lists the number of programs running, AND also states that i have XXX new mail messages. I have to assume that this is refering to mail in hotmail and not my actual e-mail account. Either way, this must mean that Windows is going to Hotmail with out my permission and checking for mail even though I didn't request this. To me this is an invasion. If I want to check for mail on Hotmail, I'll log in and look. Microsoft has no business checking to see if I have mail. It was quite a while back that I opened the hotmail account, but I don't recall giving permission for this invasion. I am forced to sign up for hotmail to allow access to this site, where does Microsoft get off checking my mail when I'm away from my computer? Maybe I did agree somewhere, we all know how they hide things in their terms of service/ privacy policies, and you have to accept to allow you to continue, just like this page, accept or Poat is grayed out. But this still isn't right. Tag: Purchase of a certificate Tag: 91541
  - 16
    - shared files not accessible I have two computers on the network and they are both running Windows XP. The problem is with one of the computers on the network. I can access shared files on one computer. When I try to access any of the shared files and connect to the other computer I get the following error: PC#1 is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions. please help!!! Tag: Purchase of a certificate Tag: 91539
  - 17
    - How to disable The Plug-and-play for new USB storage devises ? I manage to disable old USB storage devices and new devices. When there is a new storage devices connected the PnP open the options That enables the operation to browse the HD to locate the drivers. Is there any option to disable all these dialogs? My application does not allow the user to access the HD in any way. Thanks Tag: Purchase of a certificate Tag: 91538
  - 18
    - Blocking all not necessary ports for servers on Firewall Blocking all not necessary ports for servers on Firewall (CISCO ASA) The Problem looks as follows: We have Servers in different network segment, between users and servers there is an Firewall. It is necessary on Firewall (CISCO ASA) to block all not needed incoming ports for following servers and services and to leave only those which are necessary for normal work with the client 1) Domain Controller (Windows Server 2003 SP1) - All Clients is Windows XP/2000 I try to create table for some ports 88 UDP Kreberus 88 TCP Kreberus 123 UDP NTP 135 TCP RPC end.map/DCOM 137 UDP NetBIOS 137 TCP NetBIOS 138 UDP NetBIOS datagram 139 TCP NetBIOS session 389 UDP LDAP Discovery 389 TCP LDAP 445 TCP SMB 464 UDP Kerberus Password Change 464 TCP Kerberus Password Change 639 TCP LDAP over SSL 3268 TCP Global Catalog 3269 TCP Global Catalog over SSL That's all necessary incoming ports for normal Active Directory functionality witch clients? 2) Exchange Server (Back) (2003 SP2) - All Clients is Outlook XP/2003/2007 (MAPI, some users POP3/SMTP) 25 TCP SMTP 25 UDP SMTP 110 TCP POP3 How about MAPI Clients? Outllok 2003/XP/2007 what ports they need? 3) Exchange Server (Front) (2003 SP2) ActiveSync, Outlook RPC 443 TCP SSL (as I understand is only one needed port.) 4) Fileservers (Windows Server 2003 R2) 445 TCP (SMB) only one? Or I need also some netbios ports? 5) Database (SQL Server 2000 SP4) some users need access to sql db 1433 TCP Someone or somewhere can I get that information what INCOMING ports do I need to open on Firewall for normal client-server communication for listed servers and service? Of course I can Use Windows Security Configuration Wizard and do all it in few minutes, but its must done on firewall :-( Arman O. Thanks Tag: Purchase of a certificate Tag: 91537
  - 19
    - SSL & renegotiation in IE 6.0 SP1 Dear All, Is there any known problems in IE 6.0 SP1 in SSL session renegotiation scenarios initiated by a SSL aware server. I have been facing 'Page cannot be displayed' problems on submitting form data (POST method). Actually the SSL session renegotiation is initiated by the server on receiving the POST request. On checking with the ethereal dump, i found that the negotiation process fails at the last hurdle. That is, after the client sends its Change Cipher Spec and Send Finished (both in encrypted form, Change Cipher Spec with the previous key while the Send Finished with the newly negotiated key), the server is promptly sending its Change cipher spec and send finished in encrypted fashion using appropriate keys. The server also follows up the send finished with the response application data encrypted with the lastly negotiated key. However IE closes the connection on receiving the application data. I have manually checked the SSL packets recieved on the client side using ethereal and found all of them to be proper (even decrypted them with the appropriate keys(viz, server private key) and found the application data to be proper).. The whole problem is, this behaviour of IE is not consistent and happens once in a while. So for i have encountered this problem in the following machine configurations. 1) Win 2000 5.00.2195 Professional SP4 with IE 6.0.2800.1106 Update Versions:SP1,Q833989,Q823353 2) Win 2003 Enterprise Edition SP1 with IE 6.0.3790.1830 Update Versions: SP1; 3) Win 98 SE 4.10.2222A with IE 6.0.2600 Any pointers on this problem is appreciated. Tag: Purchase of a certificate Tag: 91535
  - 20
    - Enabling Anti-Virus Scan I have Norton Anti-Virus and am unable to perform a virus scan because there is a document in my computer that causes the scan to stop. It is a Microsoft Word document that I cannot delete. When I try, my computer says, "Cannot delete. The parameter is incorrect." How do I correct the parameter so that the document will delete and the scan can be performed? -- Thanks for helping me: Laura in MT Tag: Purchase of a certificate Tag: 91531
  - 21
    - WARNING: Winfixer and Errorsafe [AKA Vundo] being distributed via WL/MSN Messenger banner ads WARNING: Winfixer and Errorsafe [AKA Vundo] being distributed via MSN Messenger banner advertisements http://msmvps.com/blogs/spywaresucks/archive/2007/02/18/591493.aspx <QP> I strongly recommend that all users of MSN Messenger ensure that their anti-virus and anti-spyware applications are up to date. Do not click on any buttons in pop-up windows that you may see, and do not believe Web sites that report that they have found a problem on your computer - seriously, how the hell would they be able to tell? Do not click on OK or Cancel buttons in the pop-up windows. Close the window using the red x close button. I also strongly recommend that MSN Messenger users download and install Mike Burgess's HOSTS file to help block winfixer and other bad guys. You can find Mike's famous HOSTS file here: http://www.mvps.org/winhelp2002/hosts.htm </QP> How To Remove Winfixer (Vundo) variants http://www.bleepingcomputer.com/forums/topic18610.html When all else fails, HijackThis v1.99.1 (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware with assistance from an expert. **Post your log to http://forums.spybot.info/forumdisplay.php?f=22, http://castlecops.com/forum67.html, http://forums.subratam.org/index.php?showforum=7, http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert analysis, not here.** -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE, OE, Security, Shell/User) Tag: Purchase of a certificate Tag: 91522
  - 22
    - ActiveX Control To Read Certificate (ASP.Net app) I need to be able to read a certificate from the currently logged on user's PC and then check its validity against our certificate server. C Ford Tag: Purchase of a certificate Tag: 91506
  - 23
    - MAC address Any way to conceal it? Tag: Purchase of a certificate Tag: 91503
  - 24
    - Change 2003 Domain Password over Internet (No outlook, no vpn)... Is there a way short of using Outlook (rpc over http) or VPN to change a users password via the internet? IE: Perhaps a 3rd party web app which would allow this etc. Thanks for any tips Tag: Purchase of a certificate Tag: 91496
  - 25
    - Ohad plotnik (?) Is anybody knows this guy? something with microsoft security project's... Tag: Purchase of a certificate Tag: 91495
- Next
  - 1
    - Live One Care How is the Live One Care program comparing as to what it does to the other big programs like McAfee and Norton? Also, second question: Does it works well with Vista? Tag: Purchase of a certificate Tag: 91492
  - 2
    - centralized event logging? centralized syslog... dumping event log? I've read through a few whitepapers from SANS about centralizing log files. One way was to install a syslog agent and forward it to a centralized syslog server. Another was to dump the event log to a file, and download it to a central box. Both those papers are not ancient, but also not very recent. Has anyone used splunk? I figure that would be a big time saver so i don't have to create my own frontend. Tag: Purchase of a certificate Tag: 91490
  - 3
    - open port 4567 When I run the online Symantec Security Check it shows an open port. It says, "Security Status: At Risk! You are vulnerable to at least one form of security threat." The details show all ports Stealth except for Port 4567. It shows that one open. How do I close this port? Tag: Purchase of a certificate Tag: 91489
  - 4
    - Where's my private key? Hi, 1) I used makecert -n CN=AADI_SERVER -sk AADI_PK_CONT -sr LocalMachine -ss AADI_TEST_STORE D:/aadi_cert1.cer to create a certificate. Now in the console root, i can see the AADI_TEST_STORE containing certificate. But i cant seem to locate the private key or the AADI_PK_CONT container. Where can i find it. 2) Also, can you give me some idea as to how to load a private key from a .pvk file? Tag: Purchase of a certificate Tag: 91486
  - 5
    - ppcleandeleteatreboot??? i found this in my program files and was wondering if this is a program from microsoft or from one of the many anti viras/spyware i downloaded and if it is is it safe and is it going to remove spyware???? Tag: Purchase of a certificate Tag: 91482
  - 6
    - File Checksum Integrity Verifier (FCIV) utility - Exceptions List I'm trying to create an exceptions list when using the fciv utility but it's not working. I have 3 directories on my d drive - A, B, C and I want to exclude C from the file check. My initial command looks like this: fciv d:\ -r -exc exceptions.txt -md5 -xml test.xml My exception list (exceptions.txt) is in the same directory as my fciv utility and contains 1 line: d:\C I run the following command to verify: fciv -v -xml test.xml > testResult.txt The testResult.txt file includes all 3 directories but should exclude changes to the C directory based on my exceptions.txt. Thanks for any help you can provide. Tag: Purchase of a certificate Tag: 91477
  - 7
    - =?Utf-8?Q?User=E2=80=99s_rights_and_Daylight_savin?= Microsoft documents recommend using a login script to apply the Day Light Saving time patches. I have not found any notes on the userâ??s inability to make changes to the registry. If anyone can be of help on this I would be appreciative. I need to update NT4, W2K and XP workstations. Thanks DonP Tag: Purchase of a certificate Tag: 91476
  - 8
    - Uninstalling McAfee Privacy HELP!!! I previously had McAfee Privacy and McAfee Security on my computer. Cancelled it. Now, I am trying to download Norton Virus, and it will not download. I get communication error messages. I have gone into my Control Panel, add/remove programs, and tried to delete McAfee Privacy first. I get a message that says that the uninstallation failed! INF file missing. I have contacted McAfee Support, and Dell Support. No one knows what to do. Any suggestions? Thanks!! Tag: Purchase of a certificate Tag: 91470
  - 9
    - window defender/date setting I have windows defender. My date seems to be showing 3/8/07 for the last scan and does not change now with each scan like it used to. What is wrong? Tag: Purchase of a certificate Tag: 91467
  - 10
    - How Change Router Password? I have a Linksys BEFSR41 Router. I need a step-by-step procedure for changing its password. Tag: Purchase of a certificate Tag: 91465
  - 11
    - What port does IKE use? What port does IKE use? -- Spin Tag: Purchase of a certificate Tag: 91462
  - 12
    - Adware I recently switched isp mand they have a free antivirus andspyware software (e-trust pest patrol) well it came up with a adawre in ma microsoft folder. the pest was " bookmark express " is this really a adware and can i let the software delete it because the removal tool alerted that this could have an adverse affect on software in the same directory that the "adware was in??????? Tag: Purchase of a certificate Tag: 91456
  - 13
    - smart cards - two readers Hi ! I'm trying to create enrollment station and designate one administrator as enrollment agent. A typical enrollment station is a computer that has two smart card readers attached - so I did it. I use one smart card to log on to the enrollment station. I open the Web page for certificate services (http://server/certsrv/) --> request certificate --> advanced request --> request for smart card. Then I use SmartCard User template, my CA, "Advanced Setec SetCSP", enrolment agent certificate. I choose user from AD and I put second (fresh-empty) smart card. When I try to enroll smart card I get error like !!! : "Too many smart cards the same type. Plug only one smart card for user and try again". I have GPO that is locking station when I remove my (administrator) smart card from the reader. When I change GPO I can remove card (also then I can login using username and password) and then I can enroll new cards on both my readers but that's not the point. I must use very restricted policy even for myself. If anyone know something about it - HELP, pleassssseee. Best Regards Dominik. -- Dominik WÄ?glarz domibik@o2.pl Tag: Purchase of a certificate Tag: 91449
  - 14
    - Searching aescipher.exe or similar command line tool with AES encryption I am searching for a command line (!) tool which en- and decrypts files and folders with the well known AES algorithm. I should be able either to pass the password as parameter resp. the program should ask the user for a password at the command line. Can someone recommend me such a tool for WinXP ? Again, it should not (only) be a GUI based encryption utility but a small, ressource friendly command line based tool. Marcus Tag: Purchase of a certificate Tag: 91448
  - 15
    - Service Accounts & Account Lock out Policy Hi, I want to enable an account lock-out policy to restrict up to 5 bad logons. I don't want to this policy to apply to the Service accounts used by the applications as it will lock-out the service account and will stop it. Is there is any way to accomplish this?? Note: the Policy I am trying to use is the Default Domain policy as I want the same policy to be applied to all users across the domain. Tag: Purchase of a certificate Tag: 91446
  - 16
    - error message "Unable to display the user selection dialog" Hi On a Windows Server 2003 I'm having the problem where if I go to the properties of any folder on any local drive and then go to the security tab, and then select "add" I get the following error message appear with only the option to select ok. "Unable to display the user selection dialog - (null)" The server has sp1 installed and is acting as a terminal server. The server is connected to a local small business server which is looking after the domain and active directory, etc. At first I thought the problem maybe active directory on the small business server but the sbs box is not having the same problem. All users can log in fine to the terminal server and there are no errors in the event log related to this. How I discovered this problem is that I need to change the permissions of a folder on the terminal server to get a program working but just by clicking on add I get the error and can't get any futher. I've found a few ms kb articles but nothing that end up being the same situation. I've also found alot of people posting on forms the exct same problem but they haven't been on servers and/or with a domain. Any help anyone can provide would be great thanks in advance Matt Tag: Purchase of a certificate Tag: 91445
  - 17
    - error message "Unable to display the user selection dialog" Hi On a Windows Server 2003 I'm having the problem where if I go to the properties of any folder on any local drive and then go to the security tab, and then select "add" I get the following error message appear with only the option to select ok. "Unable to display the user selection dialog - (null)" The server has sp1 installed and is acting as a terminal server. The server is connected to a local small business server which is looking after the domain and active directory, etc. At first I thought the problem maybe active directory on the small business server but the sbs box is not having the same problem. All users can log in fine to the terminal server and there are no errors in the event log related to this. How I discovered this problem is that I need to change the permissions of a folder on the terminal server to get a program working but just by clicking on add I get the error and can't get any futher. I've found a few ms kb articles but nothing that end up being the same situation. I've also found alot of people posting on forms the exct same problem but they haven't been on servers and/or with a domain. Any help anyone can provide would be great thanks in advance Matt Tag: Purchase of a certificate Tag: 91444
  - 18
    - Freeware (on-access) antivirus scanner... Hi, i am working in a youth center (honorary) as a administrator and we are higly dependent on donations. Now we have seven pc's running with windows 2000 and open office, but the best is, that we have a internet connection. But as i said, we are dependent on donations and this is why we cant buy (expensive) antivirus software licenses.Who has experience with scanners that are free for commercial use? because we are considered "commercial", but in fact we are not. Thanks in advance... Best Regards Joe Tag: Purchase of a certificate Tag: 91441
  - 19
    - windowsupdate.microsoft.com doesn't offer KB913446 - MS06-007 I am trying to secure a Windows Server 2003 machine. I have been told to make sure KB913446 is installed. It is not currently installed on this machine. I went to windowsupdate.microsoft.com to get updates but was not offered KB913446. I can download it manually, but I expected that windows update would give it to me. Does anyone know if it has been superseded by something, or the reason it is not offered? KB913446 is also called MS06-007. Thank you very much. Tag: Purchase of a certificate Tag: 91433
  - 20
    - Password Storage in Windows 2003 hi there, I was hoping someone could clarify a few questions for me regarding Windows 2003, NTLMv2, and Kerberos. 1) What hash is used in Windows2003 Server to store passwords in the SAM file? > My understanding is that each password will be stored by default using both a LM Hash (for older compatibility) and using a MD5 hash for NTLMv2. Is this correct? 2) Win2003 uses Kerberos as the default authentication protocol. Now does using Kerberos store the password differently than the answer above? or is Kerberos only the authentication protocol and it uses the NTLMv2 password hash to authenticate a user before it kicks in to do authentication between servers. 3) Does Kerberos completely replace NTLMv2? Thank you Tag: Purchase of a certificate Tag: 91429
  - 21
    - tracking cookies spy ware??? i filled a form online one day i gave my name and address and now every time i got to the wrong site it has an advertisment with a location near my house i was told it was a tracking cookie and that it it a type of spy ware and i ran a few anti spyware programs (adaware ashampoo and i tryer tweak now the regestry cleaner and nothing seems to work my homepage will change on its own and popups come up when im not an line anyone got any thing for me to try??? please help...lol Tag: Purchase of a certificate Tag: 91418
  - 22
    - New MSSECURE.XML/EST Version 2007.02.13 Available MSSECURE.XML Data Version 2007.02.13.0 for use with MBSA 1.2.1 (SMS 2.0 or 2003 with Software Update Inventory Tool (SUIT)) was last modified today, January 9th, 2007, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 12 new bulletins, 8 of which are supported by MBSA 1.2.1, 2 of which are partially supported by MBSA 1.2.1, 1 fully supported by EST, 2 partially supported by EST and 1 not supported by EST or MBSA 1.2.1 scan tools (see bulletins for further details). The standalone EST tool is required to support detection for MS07-005, MS07-009, and MS07-012. More information on each of the bulletins listed below can be found at http://www.microsoft.com/technet/security/bulletin/ms07-feb.mspx Critical Updates: Microsoft Security Bulletin MS07-008 Supported by MBSA 1.2.1 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843) Microsoft Security Bulletin MS07-009 Supported by MBSA 1.2.1 and EST Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779) Microsoft Security Bulletin MS07-010 (Content release not supported by EST or MBSA) Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135) Microsoft Security Bulletin MS07-014 Supported by MBSA 1.2.1 (ODT local scans only) Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434) Microsoft Security Bulletin MS07-015 Supported by MBSA 1.2.1 (ODT local scans only) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554) Microsoft Security Bulletin MS07-016 Supported by MBSA 1.2.1 Cumulative Security Update for Internet Explorer (928090) Important Updates: Microsoft Security Bulletin MS07-005 Supported by EST Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723) Microsoft Security Bulletin MS07-006 Supported by MBSA 1.2.1 Vulnerability in Windows Shell Could Allow Elevation of Privilege (928255) Microsoft Security Bulletin MS07-007 Supported by MBSA 1.2.1 Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802) Microsoft Security Bulletin MS07-011 Supported by MBSA 1.2.1 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436) Microsoft Security Bulletin MS07-012 Supported by MBSA 1.2.1 and EST Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667) Microsoft Security Bulletin MS07-013 Supported by MBSA 1.2.1 Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118) What is the Enterprise Update Scanning Tool (EST)? As part of an ongoing commitment to provide detection tools for complex updates for bulletin-class issues that are not supported by MBSA 1.2, a stand-alone tool may be provided for certain bulletins. Microsoft will evaluate the detection and deployment complexity of each bulletin, and provide detection support based on the specifics of each release. When a detection tool is created for a specific bulletin, customers will be able to script running the tool from a command line interface, and process the results using an XML output file. Detailed documentation will be provided with the tool to ensure customers can leverage it quickly. See the following link for details http://support.microsoft.com/default.aspx?id=894193 NOTE: The EST tool is only for use with MBSA 1.2 to support limitations in the MBSA 1.2 scan tool to ensure complete security update detection support for all bulletins released this month. Note: This is announcement is not for MBSA 2.0/MBSA 2.0.1 since it is based on Microsoft Update technology and has the same product and platform support as Microsoft Update and WSUS Server (see TechNet for details). Charles Weidner [MSFT] cweidner@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for support on the Microsoft Baseline Security Analyzer (MBSA). Information is available at the following link: http://support.microsoft.com/default.aspx This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: Purchase of a certificate Tag: 91414
  - 23
    - PC Security Device Is it possible to configure a Win XP Pro PC with leading antivirus and antispyware products, configure it as a router and have any expectation it will stop a reasonable percentage of viruses or spyware from entering the network? Best Regards, John Kraus Tag: Purchase of a certificate Tag: 91412
  - 24
    - CRL Checking.... I am working in a Windows 2003 server environment with Windows XP SP2 clients. We are using Smart Card Login (or trying to) and we keep getting an error that states: "The revocation function was unable to check revocation for the certificate" Now the root CA is offline. We have loaded all the CRL's on the Domain Controller and the client. However we continue to get this error. Is there a way to disable CRL checking for Smart Card logon so that we can verify that all other settings are correct? Thanks for any pointers. Tag: Purchase of a certificate Tag: 91409
  - 25
    - Event ID 537 - Windows Server 2003 Hi there, We have Domain Controller (Windows Server 2003 SP1). In the event log we have many many events 537: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 537 Date: 12-2-2007 Time: 17:32:58 User: NT AUTHORITY\SYSTEM Computer: ###### Description: Logon Failure: Reason: An error occurred during logon User Name: XP-WS-38$ Domain: ########.LOCAL Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: - Status code: 0xC0000133 Substatus code: 0x0 Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 192.1.1.179 Source Port: 0 The events are comming from several workstations. Does anyone have a idea? Best Regards, Ferdi Tag: Purchase of a certificate Tag: 91401

I am new at setting up security using a certificate.
Running 2003 server with exchange2003 on top. I want the Web access to be
secure so I am asssuming that I need a cerificate. If I do, is this a one
time purchase, or is it an annual thing?

Regards

Top

Re: Purchase of a certificate by Brian

Brian
Thu Feb 22 09:19:41 CST 2007

In article <FDD601D8-32D6-421C-B06C-BA571A0A10A9@microsoft.com>, Owen7
@discussions.microsoft.com says...
> I am new at setting up security using a certificate.
> Running 2003 server with exchange2003 on top. I want the Web access to be
> secure so I am asssuming that I need a cerificate. If I do, is this a one
> time purchase, or is it an annual thing?
>
> Regards
>
Typically annual. Depends on who you purchase the certificate from, but
almost all are 1 year lifetime
Brian

Top

RE: Purchase of a certificate by DanTimko

DanTimko
Mon Feb 26 09:58:35 CST 2007

You also have the option of using the Certificate Authority that comes with
Windows. It depends on whether you require an externally trusted cert -
usually depends on who your users are. If they are your own users using OWA,
then a self-signed cert may be sufficient (and free).

--
Dan Timko, CISSP, CCSP, MCSE
Senior InfoSec/Network Engineer
BlueWave Computing, LLC

"Owen@7" wrote:

> I am new at setting up security using a certificate.
> Running 2003 server with exchange2003 on top. I want the Web access to be
> secure so I am asssuming that I need a cerificate. If I do, is this a one
> time purchase, or is it an annual thing?
>
> Regards

Top