Security Audit

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Security Audit Does anyone know if the Security Audit Log logs an audit when a user or user group was added to the security setting of a Share or Hard Drive? Tag: Security Audit Tag: 68779
  - 2
    - Spyware Beta 1 Has anyone else encountered the problem of thier system rebooting or hanging from standbye mode after installing and running the Spyware Beta? Thanks Elaine Beaurauxgart-Weiderhoff Tag: Security Audit Tag: 68777
  - 3
    - Monitoring Servers Hey guys, I have a network with about 14 windows 2003 servers, Exchange 2003, and we also host our two website in house. We have a PIX firewall and an IDS System on the outside of the PIX. But I really need a good solution for securing and monitoring our servers and network. right now I really have no way of telling if someone has gotten in to our network. I've looked around a lot and havent really found anythign that will do what I need. Can someone give me some ideas? thats for all the help Jason Tag: Security Audit Tag: 68753
  - 4
    - Spyware assistance required!! I recently came across an app on my machine which I am told is a Spyware app with a threat capability described as 'guarded'. Meanwhile my virus update provider has told me that Microsoft provide a free Anti-Spyware app that can be downloaded from the M'Soft website which will guard and protect against such threats in future. Is this so? And if so can someone point me to the appropriate link? I use my PC for alot of security sensitive transactions and the idea of a Spyware app sitting on my PC is not particularly appealing? Can such apps compromise security by recording passwords etc ...?? Any help would be greatly appreciated, Don- Tag: Security Audit Tag: 68750
  - 5
    - security word hi, There is a word box on some websites that asks you to type what you see in it.I would like to know what is that and how dos it work. thanks Tag: Security Audit Tag: 68742
  - 6
    - Kelvir.B worm My PC infected by this Kelvir.B worm because I click on a URL in a message reading: "lol! see it! u'll like it" Any1 can help me.... HELLPPP !!! Thanks a bunch. Tag: Security Audit Tag: 68730
  - 7
    - Security Summit Downloads... Hi there, I have twice tried downloading the "Introduction to Programming with SQL Server 2005" materials from the Security Summit recently held in capital cities around OZ (the link is provided below). Unfortunately the file appears to be corrupt as it gives the following error when attempting to open it after d/load: "Powerpoint can't read this file. The file you tried to open does not appear to be a PowerPoint file (.ppt). Check the original file to find out the real file type; you may be able to edit it in another program designed for that file type." Can someone refer this to the appropriate MS personnel? Thanks, Kim. http://download.microsoft.com/documents/australia/security/summit/presentations/Introduction_To_Programming_With_SQL_Server_2005.ppt Tag: Security Audit Tag: 68728
  - 8
    - How to keep kids off of computer I have four girls between 8-13 years old and I don't want them to use the computer when I am at work... How can I password protect the computer to keep them off? Putting a password on the screen safer doesn't work, they will just reset the computer... Thanks for any help! Tag: Security Audit Tag: 68726
  - 9
    - Time and date lock I am running Windows 2003 Server with 15 client Windows XP workstations. It is configured as one domain with 15 users as part of an Active Directory. The users are not local users of the workstations, but log on to their XP workstations as users within the domain. What can I configure so that the users cannot change the time and/or date of the Windows XP workstations? Thanks. Tag: Security Audit Tag: 68723
  - 10
    - Microsoft Security Bulletins for March 2005 March 8, 2005 Today, no new security bulletins were released. Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summary: For March 2005 there are no new security bulletins being release so there will not be a summary bulletin. Revised Bulletins: Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711) http://www.microsoft.com/technet/security/Bulletin/ms05-002.mspx Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113) http://www.microsoft.com/technet/security/Bulletin/ms05-015.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Security Audit Tag: 68713
  - 11
    - Password Hello: One of my colleagues has forgotten the administrator password for the server. What can be done about this? Do we have to format the drive? Thanks, TJ Tag: Security Audit Tag: 68707
  - 12
    - Obtaining permissions from recursive directories I want to say first that the new Security scripting site is great. Now, I have takent the security script for finding the permissions on folders and set it up as a function that recurses through folders and returns permissions for each folder. Tha problem I am having is that the script only retrieves the 4 basic groups with permissions after the recurse to a second level folder. The root of my path returns correctly, but folders under it do not. I have included the function below. Can any one help with why this doesn't work. Second, what would be the variable to add for inherited permissions? I would like to not have every folder reported back, only folders where the permissions change. Thanks.... Script Below *************************************************** strFolderName = "W:\Apps" row = 2 SE_DACL_PRESENT = &h4 ACCESS_ALLOWED_ACE_TYPE = &h0 ACCESS_DENIED_ACE_TYPE = &h1 FILE_ALL_ACCESS = &h1f01ff FOLDER_ADD_SUBDIRECTORY = &h000004 FILE_DELETE = &h010000 FILE_DELETE_CHILD = &h000040 FOLDER_TRAVERSE = &h000020 FILE_READ_ATTRIBUTES = &h000080 FILE_READ_CONTROL = &h020000 FOLDER_LIST_DIRECTORY = &h000001 FILE_READ_EA = &h000008 FILE_SYNCHRONIZE = &h100000 FILE_WRITE_ATTRIBUTES = &h000100 FILE_WRITE_DAC = &h040000 FOLDER_ADD_FILE = &h000002 FILE_WRITE_EA = &h000010 FILE_WRITE_OWNER = &h080000 ' Bind to Excel object. On Error Resume Next Set objExcel = CreateObject("Excel.Application") If Err.Number <> 0 Then On Error GoTo 0 MyVar = MsgBox ("Excel Application Not Found", 16, "Excel Application") Wscript.Quit End If On Error GoTo 0 strRightsPath = "H:\Groups & File Rights\RightsList.xls" objExcel.Workbooks.Add objExcel.Visible = "True" Set objSheet = objExcel.ActiveWorkbook.Worksheets(1) objSheet.Name = "Permission Listings" row = 2 ' Format the spreadsheet. objExcel.ActiveWindow.FreezePanes = False objExcel.Columns(1).ColumnWidth = 35 objExcel.Columns(2).ColumnWidth = 110 objExcel.Columns(3).ColumnWidth = 45 objExcel.Columns(4).ColumnWidth = 255 objExcel.Columns(5).ColumnWidth = 110 objSheet.Cells(1,1).value = "Folder Path" objSheet.Cells(1,2).Value = "Group Name" objSheet.Cells(1,3).value = "Permissions Allowed" Set objShell = WScript.CreateObject("WScript.Shell") Set FSO = CreateObject("Scripting.FileSystemObject") Subfolder FSO.GetFolder(strFolderName) objExcel.ActiveWorkbook.SaveAs strRightsPath objExcel.ActiveWorkbook.Close objExcel.Application.Quit MyVar = MsgBox (""&location&" "& "Permission List Successfully generated", 65, "PERMISSION LIST STATUS") Function Subfolder(Folder) For Each objFolder In Folder.Subfolders Set objWMIService = GetObject("winmgmts:") Set objFolderSecuritySettings = _ objWMIService.Get("Win32_LogicalFileSecuritySetting='" & strFolderName & "'") intRetVal = objFolderSecuritySettings.GetSecurityDescriptor(objSD) intControlFlags = objSD.ControlFlags If intControlFlags AND SE_DACL_PRESENT Then arrACEs = objSD.DACL For Each objACE in arrACEs ' If objACE.AceType = ACCESS_ALLOWED_ACE_TYPE Then ' WScript.Echo vbTab & "Allowed:" ' Elseif objACE.AceType = ACCESS_DENIED_ACE_TYPE Then ' WScript.Echo vbTab & "Denied:" ' End If If objACE.AccessMask AND FILE_ALL_ACCESS Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_ALL_ACCESS" row = row + 1 End If If objACE.AccessMask AND FOLDER_ADD_SUBDIRECTORY Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_ADD_SUBDIRECTORY" row = row + 1 End If If objACE.AccessMask AND FILE_DELETE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_DELETE" row = row + 1 End If If objACE.AccessMask AND FILE_DELETE_CHILD Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_DELETE_CHILD" row = row + 1 End If If objACE.AccessMask AND FOLDER_TRAVERSE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_TRAVERSE" row = row + 1 End If If objACE.AccessMask AND FILE_READ_ATTRIBUTES Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_ATTRIBUTES" row = row + 1 End If If objACE.AccessMask AND FILE_READ_CONTROL Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_CONTROL" row = row + 1 End If If objACE.AccessMask AND FOLDER_LIST_DIRECTORY Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_LIST_DIRECTORY" row = row + 1 End If If objACE.AccessMask AND FILE_READ_EA Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_EA" row = row + 1 End If If objACE.AccessMask AND FILE_SYNCHRONIZE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_SYNCHRONIZE" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_ATTRIBUTES Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_ATTRIBUTES" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_DAC Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_DAC" row = row + 1 End If If objACE.AccessMask AND FOLDER_ADD_FILE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_ADD_FILE" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_EA Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_EA" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_OWNER Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_OWNER" row = row + 1 End If Next Else WScript.Echo "No DACL present in security descriptor" End If Subfolder objFolder Next End Function *************************************************** Tag: Security Audit Tag: 68695
  - 13
    - Microsoft Anti-Spyware Software Auto Scan I want to have Microsoft Anti-Spyware run at night on my Win2K network when everyone is logged off. I tried scheduling the scan in the software but this requires you to be logged in, or may not run because of lack of rights when someone is logged off. I also tried putting it in the task scheduler with no results. Let me know how I can run this scan whenever I want with no one logged in. Tag: Security Audit Tag: 68694
  - 14
    - Problems with Virtual Server 2005 Installation Hello all, I am trying to run Virtual Server 2005 on a Windows 2003 Server system. I initially had trouble getting the installation program to realize that I was running IIS 6.0 and it kept denying creation of virtual site. I got the latest build and this was bypassed. Now after installation, when I browse to the website, it pops up user credentials. I gave it a local administrative account (and tried many other accounts too) - but it keeps throwing back a HTTP 401 error message. Things I tried already: 1. I checked out the posts that mentioned the Launch permissions to be given to the Virtual Server DCOM object. Did that. In fact, my screen looked a little different that most of those in the posts - not sure why. I don't get a Remote Activation checkbox at all. 2. I tried allowing all unrecognized ISAPI and CGI applications in IIS. Didn't help. 3. I tried changing to Anonymous Access, Basic Authentication, etc. Didn't work. I guess there is some problem with IIS being able to launch .exe (vswebapp.exe is the CGI application that is to be run). Any pointers? -- blog: pandurang.thinkingMS.com Tag: Security Audit Tag: 68690
  - 15
    - Can I customise standardWindows lockot message? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. Can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Charles Tag: Security Audit Tag: 68677
  - 16
    - Can a standard windows lockout message customize? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. Can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Charles Tag: Security Audit Tag: 68676
  - 17
    - Task Manager permissions. Is there a way to allow non-administrators to permission to "Show processes for all users" in task manager? I have some people who can benefit from this information but giving them administrative rights is inappropriate. The platform is Windows Server 2003. Thank you. Tag: Security Audit Tag: 68668
  - 18
    - Is there a way to track/log policy changes? Hello, Beofre I start, this question is not about auditing files or folders (and my searching thus far seems to always lead me down that road)... what I'd like to know is if there is a way/setting which will log when someone changes a group policy. For example, if someone (yes, I understand that they'd have to do permission to do this) goes into the domain security settings and disables the prevent users from installing print drivers setting, how can I get that in the log? Thanks! Tag: Security Audit Tag: 68663
  - 19
    - Virtual Server 2005 not running on Windows 2003 Hello all, I am trying to run Virtual Server 2005 on a Windows 2003 Server system. I initially had trouble getting the installation program to realize that I was running IIS 6.0 and it kept denying creation of virtual site. I got the latest build and this was bypassed. Now after installation, when I browse to the website, it pops up user credentials. I gave it a local administrative account (and tried many other accounts too) - but it keeps throwing back a HTTP 401 error message. Things I tried already: 1. I checked out the posts that mentioned the Launch permissions to be given to the Virtual Server DCOM object. Did that. In fact, my screen looked a little different that most of those in the posts - not sure why. I don't get a Remote Activation checkbox at all. 2. I tried allowing all unrecognized ISAPI and CGI applications in IIS. Didn't help. 3. I tried changing to Anonymous Access, Basic Authentication, etc. Didn't work. I guess there is some problem with IIS being able to launch .exe (vswebapp.exe is the CGI application that is to be run). Any pointers? -- blog: pandurang.thinkingMS.com Tag: Security Audit Tag: 68662
  - 20
    - SMS Client Installation & Microsoft Anti-Spyware Program Sorry if this has been asked already (if so, can someone point me to the answer! I was told to post here instead of the SMS forums) When I push new clients to PC's on the network, it will not install on machines that have the Microsoft Anti-spyware software installed because it asks the user if they wish to make the dll change and of course, if you haven't warned them ahead of time or they have forgotten they usually press no which stops the client. Is there a way around this issue? Thx Dave Tag: Security Audit Tag: 68661
  - 21
    - windows xp changes We have an application that worked fine in Windows 2000, but now fails in Windows XP. It fails both when the initial installer is running when it asks for the Regkey and if I manually install the app it fails when it tries to retrieve the Regkey from the registry and validate the # of allowable users, which components to load, etc. The error message just says "Cryptography Error". I have tried unsuccessfully to contact the app's developers. My question is this: Can anyone think of any changes from Win2000 to WinXP that would account for this? Tag: Security Audit Tag: 68659
  - 22
    - XP/2003 vulnerable to LAND attack? from http://www.securityfocus.com/archive/1/392354 - Windows Server 2003 and XP SP2 (with Windows Firewall turned off) are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition. Tools used: IP Sorcery for creating malicious packet, Ethereal for sniffing it and tcpreplay for replaying. Results: Sending single LAND packet to file server causes Windows explorer freezing on all workstations currently connected to the server. CPU on server goes 100%. Network monitor on the victim server sometimes can not even sniff malicious packet. Using tcpreplay to script this attack results in total collapse of the network. Vulnerable operating systems: Windows 2003 XP SP2 - Can anyone confirm / deny this ? Steve Tag: Security Audit Tag: 68657
  - 23
    - Auto Logon? I set up my user name and password. Someone wanted to use my computer and just put in my user name(no password) then slicked the cancel button. It sogged them on. How do I stop this? I want it so that you HAVE to put in the password. Tag: Security Audit Tag: 68656
  - 24
    - Script file denied permission to run with Spyware I have a dos program that I need to run that is blocked by the Spyware. It does not allow me to accept this program. Is there a way to suspend the Spyware program so I can run my program? Tag: Security Audit Tag: 68652
  - 25
    - Grant access to share Hello, I try to grant access to shared folder in witch, the users can create and modify files and directories, but not to delete them. I do this: I grant access to the directori "modify" and in details "deny delete" and "deny delete files and folders". The result is that the users can modify and copy new files and directories, but it is some problem with create new files and direcotry - if I create the file with WordPad, there is a message like "The file exist, do you want to replace it?". Click on "yes" and the file is created. But when I try to create the file with MS Word or MS Excel the same message pop-up and after my confirmation there is message that the directory is protected. But there is a file with the selectet file name, created with lenght "0" bytes. Can somebody help me with this? Thank you in advance. Tag: Security Audit Tag: 68641
- Next
  - 1
    - Club Shepherd 2005 v1.00 WILL Re-solve ALL Derivatives of A CHEATE I am having A Time with being CHEATED UPON, ON-LINE The Zone, so I thought HARD AND Worked an Estimated 225++ hrs, I honestly WORKED 700 Hours, I estimate to RE-Solve cheaters! Because, They are Sooooooo Rampant on-line the Zone! To Solve Cheaters and TO Add many features Specialized to the Zone, I created, Club Shepherd 2005 v1.00 which U can Re-view under ZoneSysops.com! THX! Tag: Security Audit Tag: 68625
  - 2
    - Home networking I have two desktops. One I wish to make very secure (Nortions IS, Virus scanner, no file sharing, Win XP prof). The other one is old for internet use only. It is running Win 95 with a copy of opera and no security software. Both are connected to a linksys router. both have file/printer sharing turned off. I have no concern for anything getting on the old pc, but I just dont want to jeopordize the new one. If I go to a website that has some malicious code or intentions, is there a hazard for my good PC? Thank you !!! Tag: Security Audit Tag: 68608
  - 3
    - xp pro / xp home / profiles I have just bought a laptop w/ homeXP. I created an account on the local machine. A week later I upgraded to XPpro. I then made my laptop join a domain. When I did this, it created an entirely new profile. I don't want a new profile, I spent the entire week setting up the profile I have for the local machine. Also, it might have been a waste of money to upgrade to pro, as I can log in and use the resources in the domain with no problems. If a user wants to use their own laptop for work at the office (this user is a partner at a brokerage). Do they need to have pro? Since I was able to use the network freely with a local machine login, what is the point of a domain from security perspective? I hope I haven't been too scattered with my question, I'm having trouble defining what I don't know. (which seems quite a bit). Thanks in advance. Tag: Security Audit Tag: 68599
  - 4
    - Patch2.exe Every time I run AVG it finds a virus in Patch2.exe. Can I safely remove this file? Thakyou. Tag: Security Audit Tag: 68590
  - 5
    - How do i customise an account lockout message? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. How can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Tag: Security Audit Tag: 68583
  - 6
    - IE vs. Netscape in security I've been downloading the patches for a year and have Norton AV. Is Netscape still safer than IE? I prefer to use IE because I'm used to it. I read the Wired cover story on the Firefox creator and he said he got a nasty virus thing (through IE) that made his computer send tons of spam but it didn't mention the details and it didn't say if Netscape wouldn't have done the same thing. Tag: Security Audit Tag: 68565
  - 7
    - Huge security hole in Kerio 2.1.5 I've just been told that Kerio 2.1.5, which was considered to be the (or one of the) best choice, doesn't "see" (and doesn't intercept...) fragmented packets, and thus wouldn't be efficient toward an attack based on fragmented packets (see below) In these conditions, which FW can be suggested, which would be simultaneously - free - parameterizable - controlling both IN and OUT (thus, not Win WP FW...) - efficient (thus, not kerio 2.1.5...) Thanks for advice About Kerio issue, this is the very simple test I've been suggested to do... and whose result is a little bit frightening : - Create a Kerio rule denying all Input ICMP (anwsers to ping request), and put this rule in 1st position - ping whoever_you_want : no answer. OK. - ping -l 5000 whoever_you_want : damned, you get answer ! (-l parameter, setting a packet size above MTU obliged ping to fragment) Even more serious : don't even add any rule, but with systray icon, have the choice "Stop traffic" (or something like that, my own Kerio is in french, and I don't know the exact label in english) Even in this case, "simple" ping doesn't work, but "fragmented" ping does... -- Laurent GRENET Tag: Security Audit Tag: 68564
  - 8
    - Lockout policy Hi I applied lockou pocily at domain level. So, i moved a computer account to OU where the Block inheritance was ENABLE, so i though that the domain policy, will not applying on this OU, but always that i tried to logon, the policies it was applied. So, what am i doing wrong ??? Thanks Tag: Security Audit Tag: 68561
  - 9
    - backing up Is it possible to completely save the settings that I have now and move them to a partition on my hard drive so that I can wipe clean the C partition and reinstall xp? I have a 30 gb NTFS HD which is split into 3 partitions. Can anyone take me through the process and recommend a way of totally wiping clean the c partition. TIA Tag: Security Audit Tag: 68557
  - 10
    - Homepage Hijacking Help!! i'm new to the computer stuff...downloaded the beta progm. now, my homepage is kronge.com...not my preferred. tried changing by tools, and in the spyware program...not working. still kronge.com. how do i allow my roadrunner.com page via internet provid. be default. please be simple...still learning tech stuff. also, i've gotten notices that the hijacking has been blocked by beta...but it's NOT being prevented. Thanks. Tag: Security Audit Tag: 68547
  - 11
    - Question about GPO Hi 1) If applied the policies about Password expiration and so on and the user has the option of Password never expires, the policies wouldn't be effective on it ??? 2) If the user is connecting throug RAS, the policies will be apply in the home machine or whatever??? Many thanks Tag: Security Audit Tag: 68532
  - 12
    - Power Users Local Group Access I have noticed that after created a new local user account and added this local account to the local Power Users Group it does not have the ability to write to the root of C: unlink any other version of windows e.g. Win2000. Is this by design. If so could you direct me to some MS Documentation. Thanks John Tag: Security Audit Tag: 68529
  - 13
    - Fact or Fiction? Hello, is it true that if you do an online transaction involving personal information (ie, checking acct., credit card, etc...) that you should restart your computer immediately after completing the transaction? I once read that the hackers don't have access to the info. if you shut down your computer afterwards ????? And one more question, how do I know that my computer is safe? Please advise and thank you for your time! -- TJ Tag: Security Audit Tag: 68527
  - 14
    - Howto export ipsec polices with ipseccmd ? Hi, later it was quite simple : netsh ipsec static exportpolicy ... but in Windows XP SP2 it cannot be done in this way. So, what is the key to export ipsec policy from local machine to file and after then import it to another machine ? Is it possible ? Thanks for Your attention, Robert Tag: Security Audit Tag: 68526
  - 15
    - How to change the password in multiple Schedule Task at the same t I have many servers running schedule task and I need to change the password in all the task at the same time. Is there a way to do this. Thanks. Tag: Security Audit Tag: 68525
  - 16
    - There's no reason to forget (or remember) most passwords! I'm puzzled by the number of people who don't take basic precautions to backup critical passwords. I think some of this is due to ignorance of available software. There are great freeware programs like "Password Corral" that put an end to the stories of forgetting one's password. This presumes you have the software installed on all your machines and update the master file thereon. It's not that difficult. http://www.cygnusproductions.com/freeware/pc.asp (Password Corral) The master password (to run Password Corral, etc.), should be at least 10 digits long and totally unrelated to your birthday or personal data, but unforgettable. Remember just that one password and you can unlock all the others when needed. It allows you to have dozens of different passwords with no fear of remembering them. My general tactic is to use a different password (usually gibberish) with every website I make purchases from. If some hacker or site employee abuses one they won't know my others and the damage will be limited. I also have 2 or 3 that are easy to remember for less critical sites. And I never write them on paper (security risks aside) because I never _use_ them on paper. JT Tag: Security Audit Tag: 68511
  - 17
    - Securing a file from being copied HI, Is there a way I can ensure that a user can do all entry operations but cannot copy an access file or steal the data into any media by any means? Thanks Ramesh Tag: Security Audit Tag: 68510
  - 18
    - Password Reset Disk I am self studying for my MCDST. I am following a lab to create a Password Reset Disk. I do not see the option to "prevent a forgotten password" either after selecting a User Account while logged in with administrators privileges nor do I have it when I log on under an account with Limited Access. I know where the option should be (Under Related Tasks or on Main Page of the user account.) Any help is so very appreciated. Thanks. Tag: Security Audit Tag: 68500
  - 19
    - Wired 802.1x Greetings. I have been researching this for some time and have not come up with a solution. Basically, I would like to configure the interface Authentication settings across all clients to use PEAP, along with some other related adjustments. After downloading and installing Windows 2003 SP1, it appears that Microsoft has really missed the boat on this. WHY would they include new GPO-based features for wireless but not wired interfaces??? Does anyone know of a tool/script that configures Authentication settings of an interface? Thanks - Lee Tag: Security Audit Tag: 68499
  - 20
    - Adaware Back again! I keep running adaware SE and keep getting the Regkey Data Miner HKEy......MACHINE software\altnet. I delete it and it keeps on being found again. Any ideas please. Regards. S Tag: Security Audit Tag: 68494
  - 21
    - Multipule exchange servers, trusted mail hello, We are migrating to 2003 exchange server from a 2000 exchange server with Groupshield. Groupshield is installed on both severs, 2000 and 2003. The 2000 server is a bridgehead Server. It seems that 2003 server is processing mail and placing email in the 2000 exchange server mailbox with out being processed through groupsheild. Could it be because of the trust relationship between the two servers? Thanks you, Koz Tag: Security Audit Tag: 68493
  - 22
    - McAfee and Security Patches Hi All, Really hope someone can help me with this question. we deploy the latest Microsoft Security Patches using SUS. we have McAfee running on all the workstations we have, and everytime the SUS job starts (s_scan.exe) McAfee on access scan start scanning the c:\winnt\temp I don't want to exclude this folder from the on Access scan. However, clients are complaining of low performance during the times this is happening.. Any Idea how to stop that.... Thanks, Tag: Security Audit Tag: 68492
  - 23
    - AntiSpyWare and Messenger What are the security concerns with using MSN Messenger and does the NEW Microsoft AntiSpyWare program address them? Steve Tag: Security Audit Tag: 68491
  - 24
    - Password Policy in OU Hi I applied maximum, minimun and so on policies password on OU and other policies at level of Computer and User. All policies works fine, but the policies about Password it's not working. So what could be the problem ? Many thanks Tag: Security Audit Tag: 68487
  - 25
    - Effect of "reversible encryption..." on Windows XP. Hello, I was wondering what effect the policy setting "Store password using reversible encryption for all users in the domain" has on Windows XP since it does not support Active Directory and hence cannot contain any domain users. I enabled it on my XP box using gpedit.msc and verfied using rsop.msc that in the effective settings it is enabled. However, I fond that the password hash present in registry is same irrespective of this setting. I also tried creating new users after enabling/disabling the policy to check if the effect is only on new users. I found that it has no effect what so ever on the way passwords are stored internally in registry. Would some one help me understand, what this setting is meant for on Windows XP? Kindly let me know if I am misinterpreting something. Thanks in advance. Regards, Datta. Tag: Security Audit Tag: 68484

Does anyone know if the Security Audit Log logs and entry when a user or user
group is added to the Security Setting or a Network Share?

Top

RE: Security Audit by curtisko

curtisko
Mon Mar 14 12:56:39 CST 2005

Only if you have enabled auditing for that purpose. This would be a change
to an object or privelage use that you could log for but you will probably
also get lots of "noise" that you will have to search through to find what
your are looking for.
--
Curtis Koenig
Security Support Engineer
Product Support Services, Security Team
MCSE, MCSES, CISSP

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!

--------------------
>From: "=?Utf-8?B?VG9ueSBQLg==?=" <Tony P.@discussions.microsoft.com>
>Subject: Security Audit
>Date: Wed, 9 Mar 2005 15:21:03 -0800
>
>Does anyone know if the Security Audit Log logs and entry when a user or
user
>group is added to the Security Setting or a Network Share?
>

Top