Audit Logon Events
Is it possible to audit successful logon event for a single group of users or
computers? Our default domain controller policy currently only audits
failure events. We'd like to know if people are successfully logging into a
specific set of computers in the domain (they are all in the same OU).
Thanks. Tag: SNMP Patch MIB Tag: 65339
Is there a bug with CertAdminLib.RevokeCertificate() method ?
I handle certificates in a certificates store thanks to XEnroll,
CertClientLib and CertAdminLib. Almost all methods works fine... but I
encountered a problem with CertAdminLib.RevokeCertificate() method. Actually,
certificate revokation works without any problem, but I aim at unrevoking
certificate by using RevokeCertificate method, as explained on MSDN :
"If a currently revoked certificate has CRL_REASON_CERTIFICATE_HOLD as its
reason code, you can reinstate the certificate by calling RevokeCertificate
with MAXDWORD (defined in Winnt.h) as the value for its reason code (the
Reason parameter). After it is reinstated, the certificate will not appear in
future CRLs"
winnt.h defines MAXDWORD as follow : #define MAXDWORD 0xffffffff
Althoug, with dotNet, RevokeCertificate method reason code waits for an int.
So I can't use MAXDWORD. RevokeCertificate crash when reason code is
int.maxvalue. System.Convert.ToInt32 crash when its parameter is
0xffffffff... and compiler doesn't run if I use directly 0xffffffff or
System.Convert.ToInt64(0xffffffff)...
Is there a way to unrevoke a certificate in dotNet ?
--
C# developper Tag: SNMP Patch MIB Tag: 65334
Is there a bug with CertAdminLib.RevokeCertificate() method ?
I handle certificates in a certificates store thanks to XEnroll,
CertClientLib and CertAdminLib. Almost all methods works fine... but I
encountered a problem with CertAdminLib.RevokeCertificate() method. Actually,
certificate revokation works without any problem, but I aim at unrevoking
certificate by using RevokeCertificate method, as explained on MSDN :
"If a currently revoked certificate has CRL_REASON_CERTIFICATE_HOLD as its
reason code, you can reinstate the certificate by calling RevokeCertificate
with MAXDWORD (defined in Winnt.h) as the value for its reason code (the
Reason parameter). After it is reinstated, the certificate will not appear in
future CRLs"
winnt.h defines MAXDWORD as follow : #define MAXDWORD 0xffffffff
Althoug, with dotNet, RevokeCertificate method reason code waits for an int.
So I can't use MAXDWORD. RevokeCertificate crash when reason code is
int.maxvalue. System.Convert.ToInt32 crash when its parameter is
0xffffffff... and compiler doesn't run if I use directly 0xffffffff or
System.Convert.ToInt64(0xffffffff)...
Is there a way to unrevoke a certificate in dotNet ?
--
C# developper Tag: SNMP Patch MIB Tag: 65333
best of awards too... coolwebsearch
I suggest this group acknowledge the best in class. It's
time to salute the most devious. I cast my vote for
coolwebsearch - an creative piece of shit that took out
our entire IT dept (nerds and uS ceritified combined),
Norton Corp, Microsoft, and all of about a half dozen tools
collected on the net.
Someone needs to hire these guys or put them in jail. Tag: SNMP Patch MIB Tag: 65332
Key Distribution Center Service Account
When I try to enable the krbtgt(KDC)account I get the message Windows cannot
enable object krbtgt because its a built-in account. How can I enable this
account? Tag: SNMP Patch MIB Tag: 65331
CA Issues 2 Year cert
I created a template, from the web server template, on my enterprise CA.
I set it for 6 Years, so it can be used for my Cisco ACS server.
The root is good for 20 years.
When I request the certificate, it shows up as a 2 year certificate!
Whats wrong? Tag: SNMP Patch MIB Tag: 65320
Does expired digital certificates causes text to be sent in clear text ??
OWA server's digital certificate expired.
Besides the yellow icon that indicates it is expired, does the text is sent
unencrypted by any chance ? I don't think it is unencrypted, but a co-worker
claims that's what happens with expired certificates... Tag: SNMP Patch MIB Tag: 65312
More before-the-fact advice for 2K and XP?
I'm consulting for several firms who are using Win2K and XP Pro as limited
users, which so far is keeping the current crop of viruses and other garbage
off the machines. Hardware firewalls do the rest.
I believe future exploits will be deliberately designed to run as a limited
user. That means a trojan, or virus or what-have-you will work only while a
specific user's logged on to the machine. But it will still run. It
wouldn't need to take advantage of raw sockets, UPnP or other "supposedly
dangerous" technologies to do its dirty work.
So the question I ask is, how to prevent unauthorized software from running
even as the limited user? Here are the things I've ruled out so far:
* Signed programs are difficult to maintain. A lot of sites use old apps
that can work as a limited user, but aren't digitally signed. And nothing
stops a disreputable company with a code certificate from writing a bad
program that happens to be signed.
* "Outbound firewalls" are an annoyance to the average user, because they
warn you about every single little applet that wants network access. That
includes the Windows Firewall when you enable outbound connection
monitoring. Besides, it's one more thing that runs in the background using
up CPU time that a useful app can use instead. And they don't stop bad
programs that use file system APIs instead of network APIs to spread.
* I would love to see "ZIP file type restrictions" in the Compressed Folders
shell extension for Windows XP. Like the attachment restrictions built into
Outlook 2002 and later, I could disallow opening certain file types from
within ZIP and other archive files. There's no such functionality yet, so
I've had to block ZIPs as "level 1" and allow "level 2" access only to
people I've trained in handling ZIP archives safely. This sucks because
even a trained user can make mistakes.
* I already change the security ACLs for the root of Drive C to read-only
for limited users, and apply special ACLs to the "RECYCLER" folder so
limited users can still create and use Recycle Bins. I borrowed the same
ACL for "Shared Documents" to accomplish this. The only folders that need
to be on the root of Drive C are "Documents and Settings," "Program Files,"
"Windows," and "RECYCLER." And these folders (except for RECYCLER) have
default ACLs that are perfect for before-the-fact security. I also create a
separate volume exclusively for the paging file and make that unreadable to
limited users entirely.
Which comes to my latest idea which I have no clue how to implement: Deny
(or remove) Execute permissions by default to Documents and Settings for
limited users. I don't know how to implement this because I don't know
where the default ACL for a user's profile is stored. Whatever it is, it's
normally "Full Control" for the user. There's also the matter of setting up
the same or similar ACL for whatever the user's Home directory is (on an
Active Directory network) or their Profile directory (also on AD).
Even if there were an ACL template I could change, I'd have to change it in
three places: for the user's local profile, the user's roving profile (if
any) and the user's home directory (if any).
If this were possible, it would eliminate last remaining problem I can
figure out: How to keep limited users from running unauthorized programs
for good. A privilege elevation exploit won't work if it can't run in the
first place.
--
PGP key (0x0AFA039E): <http://www.pan-am.ca/consulting@pan-am.ca.asc>
What's a PGP Key? See <http://www.pan-am.ca/free.html>
GOD BLESS AMER, er, THE INTERNET. <http://vmyths.com/rant.cfm?id=401&page=4> Tag: SNMP Patch MIB Tag: 65310
Mouse Movie by itself!
If you mouse moves by itself,
UP & Down or Left - Right!
system only dose it when you are not moving the mouse!
Will not lock the system!
& you can take back controll of the mouse without any problem!
Ball or Optical
Microsoft or Ligitec brand!
If anyone else has had this problem, please let me know!
new installs with XPpro and SP2 with 8 diffrent known MBs
--
Thank you, I hope this Infomation is Helpfull! Tag: SNMP Patch MIB Tag: 65297
YWRIVR Trojan
Seeing a process running as a subprocess of Explorer.exe. This process
appears to be opening internet explorer windows.
Google knows nothing (amazing!)
Winternals makes reference to Qoolaid.v.2.7.1, but all info on that leads to
blind alleys. Anybody else seeing this. Tag: SNMP Patch MIB Tag: 65296
YWRIVR Trojan
Seeing a process running as a subprocess of Explorer.exe. This process
appears to be opening internet explorer windows.
Google knows nothing (amazing!)
Winternals makes reference to Qoolaid.v.2.7.1, but all info on that leads to
blind alleys. Anybody else seeing this. Tag: SNMP Patch MIB Tag: 65295
Will file permissions need to be changed?
Curently i'm creating a new domain for a small company and migrating users
and resources over from their old domain and I have a question about file
permissions. First off, the environment is all WIndows 2003 DC's and file
servers. I used ADMT v2 to migrate users and groups over and I did migrate
SID's and passwords. Now during testing, users can login to the new domain
but don't have permission to their roaming profiles or shared folders that
reside on servers still on the old domain. From my understanding, migrating
the SID's would allow users access to resources on the old domain. I do have
a two way trust between the domains and can validate them with no issues.
Should I go ahead and bring the servers into the new domain? And if so, would
I need to reset permissions on their folders and profiles? And if you're
going to say "Use the domain renaming tool". The company has a lot of major
issues with their current AD DB and I believe it would be more stable if we
just started from scratch.
Thank you for your time and help!
Chris Tag: SNMP Patch MIB Tag: 65294
Easy Question: Determining CA Server Role
OS: Windows 2003 Server Standard Edition
How does one determine the CA type that a server is running?
I have tried working with certutil and looking at the Certificates MMC
console and can't figure out if this server is installed as an Enterprise CA
or a Stand-Alone CA. I'm probably missing a very simple step somewhere.
Thanks in advance,
Bob Tag: SNMP Patch MIB Tag: 65293
Installing Hotfixes via a VBS Script
Does anyone know or have examples on how to install hotfixes via a vbs script.
Thanks for any help,
Johnnyweb Tag: SNMP Patch MIB Tag: 65291
Microsoft Security Bulletins for 12/14/04
December 14, 2004
Today Microsoft released the following Security Bulletin(s).
Note: www.microsoft.com/technet/security and www.microsoft.com/security are
authoritative in all matters concerning Microsoft Security Bulletins! ANY
e-mail, web board or newsgroup posting (including this one) should be
verified by visiting these sites for official information. Microsoft never
sends security or other updates as attachments. These updates must be
downloaded from the microsoft.com download center or Windows Update. See the
individual bulletins for details.
Because some malicious messages attempt to masquerade as official Microsoft
security notices, it is recommended that you physically type the URLs into
your web browser and not click on the hyperlinks provided.
Bulletin Summary:
http://www.microsoft.com/technet/security/Bulletin/ms04-dec.mspx
Important Bulletins:
Vulnerability in WordPad Could Allow Code Execution (885836)
http://www.microsoft.com/technet/security/Bulletin/ms04-041.mspx
Vulnerability in DHCP Could Allow Remote Code Execution and Denial of
Service (885249)
http://www.microsoft.com/technet/security/Bulletin/ms04-042.mspx
Vulnerability in HyperTerminal Could Allow Code Execution (873339)
http://www.microsoft.com/technet/security/Bulletin/ms04-043.mspx
Vulnerabilities in Windows Kernel and LSASS Could Allow Elevation of
Privilege (885835)
http://www.microsoft.com/technet/security/Bulletin/ms04-044.mspx
Vulnerability in WINS Could Allow Remote Code Execution (870763)
http://www.microsoft.com/technet/security/Bulletin/ms04-045.mspx
Re-released Bulletins:
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)
http://www.microsoft.com/technet/security/Bulletin/ms04-028.mspx
This represents our regularly scheduled monthly bulletin release (second
Tuesday of each month). Please note that Microsoft may release bulletins out
side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after
reading the above listed bulletin you should contact Product Support
Services in the United States at 1-866-PCSafety (1-866-727-2338).
International customers should contact their local subsidiary.
--
Regards,
Jerry Bryant - MCSE, MCDBA
Microsoft IT Communities
Get Secure! www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights. Tag: SNMP Patch MIB Tag: 65288
New MSSecure.XML Version 2004.12.14.0 Now Available
MSSECURE.XML Data Version 2004.12.14.0 (for use by MBSA 1.2 and SMS SUS
Feature Pack) was last modified today, December 1, 2004, and is now
available for all supported languages (English, French, German and
Japanese). Today's release contains 5 new bulletins - which are fully
supported for MBSA detection and SMS deployment. There are NO unsupported
products or Note Messages in today's release. This does not include the
re-release of MS04-028 (GDI+) that is not supported for MBSA detection.
This release fully supports the following new bulletins:
MS04-041 (Wordpad) - 885836
MS04-042 (DHCP) - 885249
MS04-043 (HyperTerminal) - 873339
MS04-044 (LSASRV and Kernel) - 885835
MS04-045 (WINS) - 870736
This release also includes a critical bug fix for MS04-040 to provided SUS
Mapping information. This affected customers who used MBSA in conjunction
with a SUS server to limit the reported patches to only those items approved
on the Microsoft SUS Server. This problem has been corrected in this
release.
--
Doug Neal [MSFT]
dugn@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights.
If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for the Microsoft Baseline
Security Analyzer (MBSA) at the following link:
http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a
This e-mail address does not receive e-mail, but is used for newsgroup
postings only. Tag: SNMP Patch MIB Tag: 65287
hijack 69.20... coolwebsearch 2
Just an update. Anyone who gets this may want to
consider just blowing away the box. I posted yesterday,
got a few suggestions, tried the latest, and nothing
worked. THe most interesting read I got here
http://cwshredder.net/cwshredder/cwschronicles.html
What ever it is I am now of the opin that it can't
be removed by any normal uS certified IT guy.
You need special skills - a phd in nerd. Thanks for
the help - going to reinstall. Tag: SNMP Patch MIB Tag: 65286
hijack 69.20... coolwebsearch 2
Just an update. Anyone who gets this may want to
consider just blowing away the box. I posted yesterday,
got a few suggestions, tried the latest, and nothing
worked. THe most interesting read I got here
http://cwshredder.net/cwshredder/cwschronicles.html
What ever it is I am now of the opin that it can't
be removed by any normal uS certified IT guy.
You need special skills - a phd in nerd. Thanks for
the help - going to reinstall. Tag: SNMP Patch MIB Tag: 65285
LCS requires a certificate that has a key
Hello,
I'm trying to create a Connection for my Live Communication Server
2005. But if I choose TLS and not TCP, LCS requires a certificate that
has a key
My own certificate is a duplicate from the computer-certificate
(Windows 2003 Server Standard)
I've create the Certificate like the description in Microsoft
Deployment Guide
"Microsoft Office Live Communications Server 2005 Certificate
Configuration" Tag: SNMP Patch MIB Tag: 65283
Publishing a Certifictae Template in AD
Hi,
I want to publish a Certficate Template in AD but on the template/General
Tab the check box is greyed out. This applies to all templates so I can't
unpublish existing published certificates. The server is a Domain Controller
and I am logging on with e Domain Admin Account. The server is running 2003
Server Standard Edition.
Any Ideas would be much appreciated"!
Thanks
Chris Tag: SNMP Patch MIB Tag: 65281
Strange CA error
I managed to produce the first certificate fine through web enrollment. The
next one however, complained with this:
No certificate templates could be found. You do not have permission to
request a certificate from this CA, or an error occurred while accessing the
Active Directory.
What does this mean?
I've already tried the info at this site with no luck:
http://support.microsoft.com/?id=811418 Tag: SNMP Patch MIB Tag: 65278
MS Debuts Desktop Search Tool - Reuters
Microsoft Debuts Desktop Search Tool
Mon Dec 13, 2004 06:40 PM ET
http://www.reuters.com/newsArticle.jhtml?type=technologyNews&storyID=7080615&src=rss/technologyNews
or
http://tinyurl.com/5br6d
SEATTLE (Reuters) - Microsoft Corp. (MSFT.O: Quote, Profile, Research)
on Monday unveiled a new, preliminary version of its search tool for
finding documents, e-mail and other files stored on personal computer
hard drives.
<snip>
Honest, I really like Windows. I started with MSDOS 3.1 and have been
upgrading ever since.
But with MS's past history with IE & OE and today's internet
environment, there is no way I could even think of sticking this thing
in my computer.
Lance
***** Tag: SNMP Patch MIB Tag: 65271
hijack browser 69.20...
Virus/spyware tools seem to have met their match.
I've run a dozen tools, have Symantec corp installation,
it "pros" to help and nobody can fix it. Has anyone
actually ever fixed
this without 2 pages of instructions on how to do so?
(which don't work). 2k, ie6, all sp's.
This is one that hijacks the hosts file. Browser suddenly opens
to wherever and so on. Popups too! Very neat.
Can anyone tell me how the infection is spread?
(You wouldn't believe what my company spends with Symantec!) Tag: SNMP Patch MIB Tag: 65268
CAPICOM and ASP.NET
I am developing an ASP.NET application using VB.NET, and need to
access a users certificate. I have successfully issued a certificate
from our own CA and this can be seen through IE.
So far, using CAPICOM 2, I am only returning certificates that are
associated with the Web server (W2K3). I have tried setting the
<identity impersonate="true"/> in the web.config file as was suggested
in another post but this hasn't made a difference.
Is there anyway to access the client-side "My" store in order to
retrieve the certificate or am I barking up the wrong tree?
Any help greatfully received.
S Tag: SNMP Patch MIB Tag: 65264
File permissions
I have a very old software package that is to be used on 30 lab machines.
This is an old authorware 2.1 presentation. When the package is run it
creates a directory APW_DATA in the c:\windows directory. not only does this
directory have to be there the user running the application must have read
and write permissions to this directory. Becuase users only get read
permissions by default I have to manually change the permissions on this
folder for users to be able to use the software. I want to know if there is
a way that I can automate this process. What I have in mind is writing a
script that will 1) add a shortcut to the start menu 2) create the APW_DATA
folder with read write permissions for all users. I have been unable to
figure out how to create or copy APW_DATA with the correct permissions. Is
this possable and how can I do it. Thanks in advance. Tag: SNMP Patch MIB Tag: 65262
Inconsistent scan results?
Hello! I have a puzzling situation here. Whenever I run Spy Bouncer, I get
the following four items:
HKEY_LOCAL_MACHINE\Software\Microsoft\Window\CurrentVersion\InternetSettings\P3P\History â??gator.comâ?
HKEY_CURRENT_USER\Software\Microsoft\Window\CurrentVersion\InternetSettings\P3P\Hstory â??gator.comâ?
HKEY_CURRENT_USER\\Software\Microsoft\Window\CurrentVersion\InternetSettings\ZoneMap\Domain â??gator.comâ?
HKEY_CURRENT_USER\\Software\Microsoft\Window\CurrentVersion\InternetSettings\ZoneMap\Domain â??kazaa-lite.comâ??
I am running up to date W2K with SpywareBlaster and Spywareguard running in
the background, also up to date. When I scan with Hijack This, Spybot S&D or
Ad-Aware, they come up clean, but I always get these four when scanned with
Spy Bouncer. My questions are: Are these a threat? Why wonâ??t the other
three programs find them? Should I just delete them manually, or ignore them?
I have never knowingly installed either Gator or Kazaa. Any input would be
greatly appreciated! Tag: SNMP Patch MIB Tag: 65261
Cannot find server / Still have a trojan horse
I've posted about this Dell 2400 (XP) before (Dec 9); I've been working on it
to remove viruses, adware, etc 'cuz it was loaded with junk and had no AV
program installed. I finally got Grisoft's AVG to load. When I first tried to
update the definitions, it started then popped up "Virus found!". I ran the
scan - it had 28 viruses (removed 27). When I tried to go online after that,
I could connect (dial-up), but I couldn't get to a page. A box popped up
saying the Internet connection failed. The address showed
"res:shdoclc.dll/dnserror.htm" on the Cannot find server page. How can I fix
this???
-- Also, the one remaining that couldn't be fixed (deleted) was a Trojan
horse - Downloader.VB.S. After searching on Symantec's website, I couldn'd
find a fix or reference to it. It was in the file
C:\WINDOWS\SYSTEM32\Cip9g.exe. Is this a valid file or just trash?? Is this
affecting the Internet? Please help!!
Barb Zakrzewski
--
Barb Zakrzewski Tag: SNMP Patch MIB Tag: 65259
How to query a dns server?
Hi,
with nslookup command I want to see that my name is registered with an Ip
address as the contact person.
what is the command to do this ?
thanks !!!! Tag: SNMP Patch MIB Tag: 65253
McAfee self-disables
I have Windows XP home edition and Verizon internet with MSN(, which includes
McAfee anti-virus. I've had this system for more than 6 months, but just
recently, McAfee has taken to dusabling itself with no warning and for no
apparent reason. I tried getting help from Verizon/MSN, but they were
totally useless. And since it is all bundled together, I can't access any
McAfee help directly, it always goes back to Verizon. Can anybody help with
the McAfee problem? Why is it doing this and how can I fix it?
Thanks. Tag: SNMP Patch MIB Tag: 65244
Reasons and examples for security
I am looking for examples to support my case for tighter security. I am
looking in the area of having to renew passwords at set time period which is
not currently being done. I am also looking to find any supporting arguments
for not having all home folders of everyone on the network available to
everyone else on the network.
Any stories and or arguments that would help my case for stronger security
would be appreciated.
Thanks, Tag: SNMP Patch MIB Tag: 65241
Decoding Internet headers in email
Is any way to translate the SMPT-id or message-id codes to show the real
sender, date or time in a faked email? Tag: SNMP Patch MIB Tag: 65228
Smartsecurity Desktop Backgound and Spyware
My desktop background is now a big warning sign that goes to the
smartsecurity website when clicked on. I have tried everything to get rid of
this but it won't work. Adware, spybot etc etc. seems to have removed the
spyware but not this. What can I do? Tag: SNMP Patch MIB Tag: 65227
stopping a user from copying files
I've been looking for more information on the "full control" permissions
option when setting up share permissions on a specific directory or file. I
have setup all my users to read/write/modify, but i want to make sure that
they cannot copy or move any of their files to another location. Is there
anything else i should be configuring to restrict this access. Any help
would be most appreciated.
Graham Tag: SNMP Patch MIB Tag: 65219
Email content
Can't read email content from some senders,for example when I recieve a bill
I can't read it,it looks like its encrypted.Even my emails from my personal
trainer seem encrypted.Tried to adjust my options but doesn't work. Tag: SNMP Patch MIB Tag: 65215
DHCP issues Subnet IP to computer on another domain
For the past year our firewall has been managed by a third party, our ISP.
About 2 weeks ago, I looked at the DHCP clients that were being issued IP
addresses and noticed for a computer that is not on our domain and was in
fact on another domain. I deleted it and the next day found that the lease
had been renewed. Over the weekend I disconnected the third party firewall
and installed an ISA 2004 Server and deleted the computer from the the scope.
It has again renewed it's lease. We have several users that use RDP to
access our terminal server and we have an Exchange 2003 server with POP3. I
have checked and none of our users are logging in from a computer with this
particular name or from that domain. Have we been HACKED or is there another
explanation?
--
Many thanks,
Bill Tag: SNMP Patch MIB Tag: 65209
Looking for information
I have been looking and looking for information about what are the laws on
recovering lost passwords at Microsoft. I know there are tools and techniques
are available but in a public forum that I moderate we don't allow these
tools to be discussed for security reasons.
I am just trying to come up and find a policy that Microsoft lists in
general for all versions of Windows and not specific to an operating system
so we don't get into anything illegal. If I can find this list and follow it
then it will be a big help.
I have even tried visiting http://www.microsoft.com/security/default.mspx
but cannot seem to find any information.
Any suggestions? Tag: SNMP Patch MIB Tag: 65208
Best Practice for User Accounts
Afternoon all,
I'm having a debate with a friend regarding best practices for old user
accounts. He's insisting that old user accounts should be deleted ASAP and
that there is MS documentation to that effect. If anyone knows of this
documentation, could you please point it out to me?
In my opinion, the user account should be just disabled and not deleted. If
the account is deleted then all audit trails will be deleted also, and if the
the data is required to be retained for any number of years, it will also be
lost. Sure the account cna be re-enabled, but if someone has access to do
that, then they also have access to recreate an account also.
Thanks in advance for any input (and location of the MS document that talks
about this, if there is one) Tag: SNMP Patch MIB Tag: 65206
Can't access secure websites...
I have an IBM PC. My subscription to Norton ran out. So I uninstalled it
and bought Anti-Virus 2005 and installed that. Now, when I try to access any
secure website I get the message that that page cannot be displayed...cannot
find server.
Do you guys think this is an XP thing? or a Norton thing? I've tried
changing the security settings to no avail. I have a guy coming out tomorrow
to the house @ $55 per 1/2 to try to help. Can you guys help?? Please!!
Thank you. Amy Tag: SNMP Patch MIB Tag: 65197
PEAP Radius steps with user and machine authetication
Environment:
Supplicant: XP SP2,
Authenticator: Ethernet 10/100 switch
Aujthetication Server: IAS
Protocol: PEAPv0
I would to understand if in that environment when MACHINE AUTH is enabled
either
in 802.1X client and in the Radius server, the RADIUS ACCESS ACCEPT message
happens only after the USER is authenticated, that means that in the first
phase of the process when the MACHINE AUTH finish, the server doesn't send
this RADIUS message until the USER is authenticated.
This is what is happening and I would like to understand if it is normal
because I have seen other Radius implementations that send RADIUS ACCESS
ACCEPT message either after the MACHINE AUTH as the USER AUTH Tag: SNMP Patch MIB Tag: 65196
Difference in authentication between using IP address and DNS name
Can anyone point me in the right direction to understand this problem.
What is the difference between accessing a web-site, POP /smtp email
account, or network share using the IP address (10.1.1.1) vs it's DNS name
site.domain.com.
We have a web site that if you browse to it using 10.1.1.1 it will ask you
for a username and password. If you browse to site.domain.com, you get access
without being prompted for username.
Another problem, In outlook if you put your smtp and pop3 addresses as IP
addresses, you get access everytime with no problem (username & password
saved). If you use the fully qualified name, it does not let you access. And
this is different pc to pc.
There is probably a white paper somewhere that explains it all.
Thanks, Tag: SNMP Patch MIB Tag: 65190
PRINCE A FAMILY VIRUS
My Computer reported a virus thread today after scanning entire system with
CA etrust antivirus.
All effort to deploy cleaning utilities failed.
your immediate response will be highly appreciated.
musa Tag: SNMP Patch MIB Tag: 65188
.dll won't register
I'm trying to use the following fix: regsvr32.exe C;\WINNT\msjtes40.dll
BUT, when I put in the string I get this Message:
"LoadLibrary(C:\WINNT\system32\msjtes40.dll) failed. The specified Module
can not be found."
How can this be fixed ? Thanks. Tag: SNMP Patch MIB Tag: 65185
local policy of this system does not permit you to logon interacti
I just installed a win 2k3 server as domain controller. Had no problem
joining the workstations to the domain, but when they try to logon as a user
i get"The local policy of this system does not permit you to logon
interactively" these are just regular domain user I don't belive they need to
logon interactivly. I can logon as administrator but when I give the user
admin rights they still can not logon. there are no group, policies defined
that can explain this. Anybody have any Ideas. Thanks in advance Tag: SNMP Patch MIB Tag: 65183
XPsp2 and web-enrollment-pages
I've just installed the windowsXP servicepack2
I connect to my certification authority's web-enrollment-pages to download
an authentication certificate. So i select a CSP for smartcards and push the
button, but after that the page returned me this error:
"the operation requires a smart card, but no smart card is currently in the
device" (error 0x8010000C - SCARD_E_NO_SMARTCARD)".
Of course the smart card is inside its reader and the reader is correctly
connected to my PC.
Before i installed the SP2 everything worked correctly.
Help me!
Mariano Tag: SNMP Patch MIB Tag: 65175
SPAM test
Hi all,
I´m testing a ANTI-SPAM software and want to receive some SPAM to fine tune
it. Is there some SPAM test software to gererate SPAM to my email?
Thanks Tag: SNMP Patch MIB Tag: 65174
Mysterious Activity>
Okay I am losing it-
C:\ drive on my Windows 2003 Server is partioned to 8.5GB with approx 8.15GB
usable disk space, This server runs just about every application Exchange
2003, SQL2000, Veritas 9.0, IIS program files and data files are installed
on the D:\ drive of the server.
When I highlight all the folders and files located on the C:\ drive the OS
calculates it to be under 4GB, however when I look at Free space I only see
649MB !! When the entire drive is 8.5GB
The pagesys file resides on the D:\ drive. Folders are setup to view all
files including system and hidden files. I have used just about every third
party application to view the directory size I cant seem to find where the
other 3.5GB is hidden
Any comments/suggestions greatly appriciated-
-- Tag: SNMP Patch MIB Tag: 65164
Running Programs from remote shares
I have a windows 2003 active directory that stores factulty files. We also
have some very old software (pre 95) that I want to make available via a
share on the server. The software is simply a very old authorware
presentation with many associated video files. My problem is that I am only
able to run these programs from the share from an administrator account. Is
it possible to allow users to run these files from the shares without haveing
to map a drive to the share??? Thank you in advance. Tag: SNMP Patch MIB Tag: 65157
Personal Laptops on the network - need reason why not
Have a couple of Executives that want to bring in their personal laptops and
hook it up to our network. Do not want to allow personal laptops at work,
looking for ideas to persuade upper management that this is not a good idea.
Any thoughts would be appreciated.
Thanks,
Keith Tag: SNMP Patch MIB Tag: 65156
Search The Web
I've been informed that this is spyware. I can't get rid of it. I have
up-to-date Norton Antivirus, updated SP2 and have run fully updated versions
of Ad-Aware, Spybot, SpywareBlaster and CWShredder, but still Search The Web
persists. I've used System Restore to go back as far as I can and have then
turned it off and rerun the anti-spyware programmes - all to no avail. I
really don't know what to try next. Any ideas, please? Tag: SNMP Patch MIB Tag: 65151
Incredimail
Can't get rid of this. When I try to uninstall, I get a message saying
invalid uninstall file. I've been told to install it again and then try
uninstalling it, but how would I do that and won't I still be left with the
first one installed?? I have updated Norton, SP2 installed and fully updated
and I have run Ad-Aware, Spybot, SpywareBlaster and CWShredder, but still
can't get rid of Incredimail. Any other suggestions, please? Tag: SNMP Patch MIB Tag: 65150
Is there or will there be a SNMP MIB that contains the ability to query
patches installed on the OS for Windows XP, 2000, 2003?