WinXP SP1 Internet Connection Firewall Deployment

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Endless Buffer Overruns I see yet another update (JPEG) involving the same type of ongoing buffer overrun vulnerability. Could someone please help me understand why this situation has not been corrected? I'm approaching this from a programmer point of view. I have made mistakes and overlooked errors in my code. However, when I am made aware of a type of error, I go back and fix ALL of those types of errors. At least as many as I know about. Why doesn't Microsoft? If they don't know about all the buffer overrun areas, shouldn't they have a team that verifies the code? Maybe I don't understand what buffer overrun is/does. I would think it is when some programmer makes a mistake in address pointers and his program writes outside of allocated memory. Since this is a big (there's endless updates on such) and repeating security issue, why not at the very minimum check, double check, and triple check all areas where there could even be a potential of buffer overrun? Or, even better, design the system so that programs cannot even possibly write outside of their allocated memory? Or, if there is some reason that's necessary under such-and-such circumstances, I would think Microsoft's programs shouldn't do that and therefore should have a flag that prohibits them from writing outside allocated memory. Maybe someone can explain why this is an ongoing issue that cannot be corrected, but otherwise I see no excuse for it. Duane Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61435
  - 2
    - Unknown microsoft page I have a w2k machine with IE 6.0 that has been hijacked with a home page "http://microsoft.OEM101.bz" address. I have used Hijack this, spybot and Ad aware to remove this page. It keeps comming back and I cannot locate the source for it. I have found nothing on the Internet. It stores the connection in HKCU and HKLM under Software, Microsoft, IE, Main. I have overlooked something and need assistance HELP. Jim Holman Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61432
  - 3
    - Conflicting numbers for Security Bulletin MS04-028 I did steps 1 & 2 at the page - "September 2004 Security Update for JPEG Processing (GDI+) at http://www.microsoft.com/security/bulletins/200409_jpeg.msp x. Step 4 - Update Developer Tools took me to a page where I could do a Security Update for IE 6 SP1 (KB833989), which I did. In a columned box below Step 4, there are update numbers for various programs. For IE6 SP1, the Update # is 830348. I don't have the latter update in my add/remove programs. Is this part of the JPEG processing issue that this security issue is about? I'm confused because it's a different number than the one in Step 4 for IE 6 SP1. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61428
  - 4
    - Upcoming ISA Server Chat 09/22: Enabling Remote Client (VPN) Access with ISA Server 2004 Title: Enabling Remote Client (VPN) Access with ISA Server 2004 Description: With ISA Server 2004 Standard Edition, you can easily configure separate policies for roaming clients, set quarantine options, and finely control how these clients access the corporate network. We invite you to meet the developers, testers, program managers, and writers who developed the VPN features of ISA Server. Date: 9/22 Time: 10am Chat Room: http://communities2.microsoft.com/home/chatroom.aspx?siteid=34000081 Add to your calendar: http://www.microsoft.com/technet/downloads/vcs/04_ISA_VPN_Sep22.ics Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61425
  - 5
    - windowspatch.com I keep getting a pop up that wants me to go to windowspatch.com b/c my comp. has been affected by something or another. Is this a legitimate website for Microsoft or a virus? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61419
  - 6
    - identifying antivirus in security center I cannot seem to get the xp security center to identify norton as the antivirus program. I have had to security to manual. I am running Norton 2005. Any help would be appreciated Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61417
  - 7
    - Microsoft.net framework 1.0 SP3 Eng As advised by Microsoft Update, I downloaded SP3 but it will not install. Goes thru all the preliminaries, then when its time to install, it stops and says it can not. Can any on help? When I try on line help, the system refuses to recognize my passport no. (serial no.?) Thanks. jpk Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61416
  - 8
    - SUS - Missing KB873374 (GDI+ Detection Tool)?? We use the latest version of SUS. I approved the KB873374 update yesterday. I was receiving many complaints from users about the dialog ("The software tool did not detect any Microsoft Office, Microsoft Picture It!, or Microsoft .NET framework software on your computer that is vulnerable to the GDI+ Graphics Component security vulnerability") so I went into SUS to unapprove it. Unfortunately I cannot find the update listed anywhere! Has anyone else had this problem? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61410
  - 9
    - What is the best anti virus Program What is the best anti virus Program for Windows XP sp2. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61408
  - 10
    - MS04-028 Clarification needed Hi, I need a clarification concerning the affected products. If the following is true: Affected are all products that use Gdiplus.dll prior to version 5.1.3102.1355, Mso.dll prior to version 10.0.6714.0 or Vgx.dll prior to version 6.0.2800.1411. Then IE 5 is affected too, in contradiction to the bulletin. I used my SMS software inventory and found vgx.dll version 5.00.3014.1003 on the IE 5 systems. I found a gdiplus.dll version 5.1.3102.1229 in a Microsoft Works folder. Does that mean Works must be patched, too? What I'd need is a clear statement as to which dlls are affected in which versions. Thank you Henrik Zawischa Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61403
  - 11
    - Virus Dear Sir / Madam, Recently I always receive an error message : This compute is infected with a spyware called " Online Dialer / MaConnect ". Security Scan Report show : A broweser parasite called " My Search " has infected this computer . I need your advise. Thank you. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61393
  - 12
    - accessing user files without logging in I have had problems with WinXP home, so I upgraded to WinXP pro. For fear it would delete my files, I created a new folder for pro to be installed in (same drive). Pro works fine. However, home doesn't work at all. My files are in my old home user account that has a password to logon. When I try to open the folder of my home user account files all it says is that I don't have access rights-it doesn't even give me a prompt for the password. If there was no password I would be able to access it (i.e.:all my files are still there). If I could merely enter the password when trying to open the folder, that would very nice. Also, if many of you are 100% sure it won't delete my files in an upgrade I might take that path instead. Thank you, ninjascyther@juno.com Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61392
  - 13
    - Friend logging onto my comp I have a roomate who continually logs onto my comp. He doesn't know my passwords (at least I don't think he does). I saw him starting it under safe mode once, then when I returned to the room I opened the laptop to find out that he had somehow managed to log into my account. Please help me block this opening and stop this from happening again. Thanks. Sean Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61390
  - 14
    - password I have my own computer and I have put a password, and I have installed an anti virus (Norton System Works)but I don't understand how someone else can be logged onto my computer when I installed it? It means that my computer is not protected although I have a password and anti virus.I am person who is bound for the computer and it is my job and I have bought the computer for myself and at the same time I am disappointed how can it happen? It means that your personnel do it. Please , explain it to me. Thank you sonja_917@msn.com Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61389
  - 15
    - MS Proxy Server 2: Hide IP in LAN Hi! I don't have much experiece with networking, but i heard there's a way to setup a proxy on your own computer to mask your IP or something similar. I want to do this because I dont want others on my LAN to see my private IP. How do i get started? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61386
  - 16
    - All updates fail Hi I'm running xpI can not get any updates to install they all fail at that point any Ideas. Thank You, Dave Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61383
  - 17
    - Forced autodownload reboots - NOT LEGAL! This is a very unhappy IT consultant, who has had several Servers I am responsible for have a forced reboot of them occur at 3:00am after downloading a security update. the following is from the EVENT VIEWER: Restart Required: To complete the installation of the following updates, the computer will be restarted within five minutes. Until this computer has been restarted, Windows cannot search for or download new updates. - Security Update for Windows Server 2003 (KB833987) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. I am dismayed at the apparent lack of concern for sites operating 24/7 and forcing a reboot of critical server systems after an autodownload! I got paged by two sites in the middle of the night wanting to know why their Servers just crashed! These reboots should ONLY be done after fair warning and be planned. When has this policy changed? -it cost one of my engineering sites a huge loss in productivity and $$$ due to steel pattern cutting robot control files having to be reloaded! NOT HAPPY! This shouldnt be allowed to happen! Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61372
  - 18
    - What are these?? Whilst running a virus scan I noticed these files appearing but they were not flagged by my AV (Panda Titanium 2004). I checked through Explorer and found the folloeing (empty) folders. I Googled some of the names but the websites on Google were all foreign. Is it OK to delete them? PUTA!!.EXE HACKE!.EXE ALEVIR.EXE MSTASK.EXE SCRSVR.EXE SRV32.EXE INSTIT.BAT Any help would be very welcome Colin. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61371
  - 19
    - Publisher Hi Guys, I have run into a slight snag. I am runningXP, SP2, when I go to Hoyles games to play some backgammon, I get a pop-up that says Microsoft cannot verify the publisher,,any way around this?,,firewall turned off. "Help",,Thank You, Dennis M. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61370
  - 20
    - AuthzReportSecurityEvent Does anyone know the format/content of the ... portion at the end of the AuthzReportSecurityEvent API call. The documentation says a "List of AuditParamFlag type/value pairs that provide additional information about the event." When I try passing an array of type AUDIT_PARAM I get error 87 (The parameter is incorrect). I have not been able to find an example of code that actually calls this method yet. Any help would be greatly appraciated. Thanks, Chris Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61369
  - 21
    - XP SP2 IE6 vulnerability Background information ====================== Windows XP Service Pack 2 has introduced new features that improve browsing security in Internet Explorer. Most of them are additional messages that force the user to validate everything that is done by the browser. Most of these messages are displayed in the new Information Bar. For example if you try to open a web page that contains Javascript code or ActiveX objects, it is likely that they will be blocked, the Information Bar will appear and offer you to reload the page with the untrustworthy components enabled. More information can be found at: http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2brows.mspx The side effect of these features is that some web sites can't be used as easily as before because the user has to respond to an increasing number of notifications and questions. Vulnerability Explained ======================= As an example I created a simple XHTML document containing MathML and installed the MathPlayer ActiveX plugin from DesignScience (http://www.dessci.com/en). This type of document used to render correctly in IE6 but since SP2 was installed the new features interfere with the loading of the component : the page is first loaded without MathPlayer which has to be enabled via the Information Bar. But there seems to be a vulnerability in Internet Explorer that allows this protection to be bypassed. All that needs to be done is to add a fake comment between the DOCTYPE declaration and the <html> tag that mimics those added by IE when a page is saved to disk. The "fake" comments must be formatted as follows :  where URL is to be replaced by an URL (for instance http://www.example.com/) and XXXX by a 4 digit integer that represents the number of characters in the URL (for instance 0023). System Affected =============== Windows XP Pro and Home editions with SP2 IE 6.0 (SP2) How to reproduce ================ Install the plugin from DesignScience. Paste the following text in a file with an .xml extension. Open it with IE with and without the comment on line 4. <?xml version="1.0" encoding="ISO-8859-1"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0//EN" "http://www.w3.org/TR/MathML2/dtd/xhtml-math11-f.dtd">  <html xmlns="http://www.w3.org/1999/xhtml"> <HEAD> <TITLE>IE Vulnerability example</TITLE> <BODY> <math displaystyle="true" xmlns="&mathml;"> <mfrac> <mn>27</mn> <mn>12</mn> </mfrac> </math> </BODY></HTML> Remarks ======= This also works with pages containing Javascript code. -- Cyrille SZYMANSKI Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61367
  - 22
    - Windows Security I have Norton Virus Protection installed.On start up a balloon comes up on taskbar,> Your virus protection status is unknown < If I click on this Balloon I am told, > Norton A/Virus reports that it is installed, but its status is unknown, click recommendations for suggested actions you can take < When I do that it takes me to, > Windows Security Center < but from here I am lost,can you help an old one please? Kind Regards, Ken. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61357
  - 23
    - Windows messenger Every time I open the internet I am bombarded with pop ups about windows messenger. There is a new version and do I want to download it now. Yes or No. I am fed up saying no 3 or 4 times a session. How do I get rid of these popups.Has anyone else got this problem?Thanks Gerry Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61348
  - 24
    - Windows Server 2003 I have a client who is running Windows Server 2003 and Windows XP workstations. Three of the stations log on around 6:30am and lock up every day around 4:30pm. I feel that this has something to do with SECURITY settings. None of the other stations (logon around 8:30am) have this problem. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61344
  - 25
    - My MS04-028 FAQ The instructional text in this latest MS04-028 Security Bulletin seems totally ridiculous for anyone trying to effect patch management on more than 3 PC's. Their FAQ is just blowing me away. I'm not sure whether to laugh or to cry. Here's my FAQ. Let's see them answer THESE! Feel free to play along and either answer or add to the list. It won't likely accomplish much, but it will be more fun (and probably more productive) than sitting in a meeting with a bunch of other confused IT's trying to figure out "how to deploy this one." 1. Are you *%^ing kidding me! OK, I just had to get that out. Moving on... 2. What is this "vulnerable component"? "Windows XP, Window XP Service Pack 1, and Windows Server 2003 are the only operating systems that contain the *vulnerable component* by default. By default, Windows 98, Windows 98 SE, Windows Me, Windows NT 4.0, and Windows 2000 are not. However, the *vulnerable component* will be installed by any of the programs listed in the affected software section of this bulletin on these operating systems and you should install the appropriate security update for those programs." 3. Is it "GDI+"? (Then say so!) 4. If it is GDI+ and Windows is such a shared resource OS, why can't the GDI+ component be patched at the OS level without requiring a patch for each individual app? 5. "Typically, when these programs are installed on Windows XP, Windows XP Service Pack 1, or Windows Server 2003 they only use the version that is provided by the operating system, even if they install a copy of the vulnerable component." Oh, really? (Trying to find a nice way of asking #1 again.) 6. Can the "vulnerable component" be removed/uninstalled? 7. Would removing it disable viewing/using JPEG files and/or disable some other desired functionality? 8. Would removing the .Net Framework help the situation? 9. Does this prove my original fears that installing the .Net Framework is merely an act of inviting *yet another MS security nightmare*? 10. If the recent .Net Framework 1.0 & 1.1 SP's contained such critical patches as this one, why didn't MS issue a Security Bulletin for them? 11. Why DOESN'T the "GDI+ Detection Tool" do all the things that MS tells us it doesn't do? (Basically: why doesn't it detect ALL affected sw AND tell us whether that sw is patched?) 12. If the existing GDI+ detector says I'm clean, and then I install something vulnerable, am I "SOL"? Will the detector say, "I've already run," and ignore my new app? 13. Can MS provide us with a detector that works? 14. Will someone else make one that works? 15. If so, can we buy *their* OS and/or sw? 16. Does this vulnerability affect only MS sw? 17. Are any other sw companies saying, going to say, or have they already said anything about this vulnerability in regards to their sw? 18. If so, is it only because they're using MS SDK's to write their sw? 19. Is it time to jump the MS ship? 20. How many more MS apps are going to get their own patches for this same vulnerability a month or two down the road? 21. How many vulnerable apps won't get patches because MS doesn't "support" them anymore? (implies they "supported" these apps previously) 22. Should I simply use the GDI Detection Tool to find the vulnerable apps and just remove those apps rather than wait for a follow-up patch that "fixes" the same vulnerability and/or a totally new and scarier one? 23. Which Linux distro should I start with if I'm a newbie to it, but have been in IT for 15+ years? 24. How do I know what hardware to put this Linux distro with if I'm building a new system? 25. How do I build a completely MS-free, Linux-based system that even my technophobe wife (who may freak if it doesn't look exactly like our old MS system) can use? 26. Is Linux any better, since I'll have to depend on several distros and/or word of mouth to get bug/security fixes for it, as opposed to one company like MS? 27. Last but far from least, the associated WindowsUpdate entry for MS04-028 doesn't update anything. So, why is it listed as a Critical Update? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61343
- Next
  - 1
    - Should this be reported I've been receiving several messages a day similar to the one below. Luckily McAfee catches them, but I was wondering if I should report them by forwarding them to somewhere on Microsoft. If yes, WHERE? Thank you, Orville Microsoft All Products | Support | Search | Microsoft.com Guide Microsoft Home Microsoft Partner this is the latest version of security update, the "September 2004, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express. Install now to protect your computer from these vulnerabilities, the most serious of which could allow an attacker to run executable on your system. This update includes the functionality of all previously released patches. System requirements Windows 95/98/Me/2000/NT/XP This update applies to MS Internet Explorer, version 4.01 and later MS Outlook, version 8.00 and later MS Outlook Express, version 4.01 and later Recommendation Customers should install the patch at the earliest opportunity. How to install Run attached file. Choose Yes on displayed dialog box. How to use You don't need to do anything after installing this item. Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site. For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site, or Contact Us. Thank you for using Microsoft products. Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable to respond to any replies. -------------------------------------------------------------------------- The names of the actual companies and products mentioned herein are the trademarks of their respective owners. Contact Us | Legal | TRUSTe ©2004 Microsoft Corporation. All rights reserved. Terms of Use | Privacy Statement | Accessibility Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61341
  - 2
    - MS04-028 - .NET Framework Does anyone know if an ASP.NET web application that uses GDI+ can be exploited by the vulnerability described in MS04-028? And, if so, how? thanks Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61332
  - 3
    - Certificate Template The validity period from the user certificate template in win2k certificate authority is only one year if it is a enterprise ca. How can I change validity period to a longer value? Exists other templates for w2k enterprise ca? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61329
  - 4
    - Spybot Search & Destroy recovery? Hello, Does anyone here know antything about Spybot Search & Destroy? I have used Spybot to remove some of the spyware on my computer but when I open Spybot and go to Recovery there is nothing listed there. Aren't all the "fixed problems" supposed to show up so that I can undo them if I need too? Sorry if this is the wrong newsgroup to ask this but I didn't know where else to go! Thanks, Val Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61326
  - 5
    - HOWTO: Enable/Disable USB interface and/or USB storage devices using Group Policy in Windows XP Hello from Istanbul/Turkey, In Windows 2000 or 2003 Active Directory and Windows XP workstation environment, you can enable or disable all the USB interface or just USB storage devices using group policy. Just follow: 1. Create a custom adm file, you can name it usb.adm with the following content: ; Beginning of the file ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CLASS MACHINE ;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CATEGORY !!USB POLICY !!REstrictUSB KEYNAME "System\CurrentControlSet\Services\usbuhci" PART !!RestrictionValue NUMERIC VALUENAME Start END PART END POLICY POLICY !!REstrictUSBStorage KEYNAME "System\CurrentControlSet\Services\USBSTOR" PART !!RestrictionValueStorage NUMERIC VALUENAME Start END PART END POLICY END CATEGORY #endif [strings] USB="Restrict USB Access" RestrictUSB="USB Interface Restriction" RestrictionValue="Enter 4 to restrict USB interface, 3 to enable" RestrictUSBStorage="USB Storage Restriction" RestrictionValueStorage="Enter 4 to restrict USB storage, 3 to enable" ; End of the file 2. Put this file in C:\Windows\Inf in one of your Domain Controllers (DC). 3. On this DC, run AD Users and Computers, select the Organizational Unit (OU) you want to enable or disable USB. Open Group Policy (GP) for this OU. 4. Select Administrative Templates under Computer Configuration. Right click and select Add/Remove Templates, click add and select usb.adm and click open, then close Add Remove Templates window. 5. Now you can see "Restrict USB Access" category under Administrative Templates. To see its contents, you should click Administrative Templates and on View menu clik Filtering. Clear "Only show policy settings that can be fully manages" option. Click OK. 6. Click Restrict USB Access. There are two policies here, USB Interface Restriction (UIR) and USB Storage Restriction (USR). 7. If you want to fully enable full USB, enable two of the policies and enter the value of 3. If you want to enable USB interface but disable USB storages, enter 3 for UIR, 4 for USR. If you want to disable USB all, enter 4 for both values. PS: Because this registry setting is considered as a preference, even if you remove the policy, the setting remains there. So you should enable this settings in all your organizational units. I've tried this in Windows 2003 and Windows XP environments and saw it works. I didn't try in Windows 2000, but i guess it works there too. I hope this helps you too. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61325
  - 6
    - Can webmail be attached with digital signature? Is it only allowed to attached with plain text signature? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61321
  - 7
    - Questions about digital signature I have installed a digital certificate into my OS. How can I know whether an email address is with a digital certificate? If the person whom I will send email to holds a certificate which didn't come from the CA wich issueed mine, Can I send him a secured email? If my OS is hacked by someone, Is my certificate secure( because the secure level I set is medium without passwords)? Thank you very much. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61320
  - 8
    - computer protiction Help, can anyone give me some insight as to which Anti- Virus protiction to use? I was going to use Vcom SystemSuite5, but I don't think it works good with WindowsXP. I was using McAfee, but got a virus anyway. I just don't know what to pick, help me if you can. Thanks meme Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61313
  - 9
    - Front page extensions If I enable front page extensions, is there any security risks? thanks Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61305
  - 10
    - kernell files Hello i just have a question about the kernell files on windows xp pro.Like i use my pc for studying and i copy my cds so i can listen to them . I dont access pornography or any crap like that and all my softwares bought from shops Nothing pirate on it .yet in the kernell files loads of bad things are turning up like hack hotmail files and that and all they do is regenerate. Theres only one program in the folder and thats msconfig so i cant delete that because its a program i know nought about. virus's that also appear in my registry keep regenerating only the same two envolo and autoupdate.exe. So can anyone help me eradicate these cracks,serials,viruses because i fear for my pc health Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61301
  - 11
    - Unsupported Extension (SMTP) Outllook Express 6 McAfee says I need to disable an unsupported extension on outgoing e-mail otherwise clean outgoing mail cannot be assured. Does anyone know anything about this? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61298
  - 12
    - Crash with SP2 Any ideas? I've crashed 10 times today. Own a DeskBook from XOpen America. P3 processor, 1GB RAM STOP: 0x0000009C (0x00000004, 0x00000000, 0xb2000000, 0x00020151) Susan Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61297
  - 13
    - Confused about latest patches I read on microsoft.com/technet about (critical update) "Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)" and (important update) "Vulnerability in WordPerfect Converter Could Allow Code Execution (884933)". If I visit Microsoft Office Downloads Home Page (http://office.microsoft.com/en- us/officeupdate/default.aspx) and also www.windowsupdate.com, will these two sites tell me if I need to install these two updates? I have Windows 2000 (not XP) but I do have Office XP. Why won't office.microsoft.com (updates) or windowsupdate.com tell me? Do I have to read down the list of affected software and update manually. So confused, Jimmy Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61291
  - 14
    - Disabled Viewing of PDF files I cannot view pdf files since I installed a spyware programme. I think an 'add on' has been disabled. Some add ons I can't enable since a message says this is under the control of the administrator. Can anybody help me solve this problem. Thanks. Malcolm Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61284
  - 15
    - making a folder truly private and unsearchable I need to know how to make a folder truly private. Of course I can hide the folder but anyone who knows how to use windows knows how to find it. I thought I heard once that if I put the $ symbol before and after the file name it would hide it but that didn't work. Can anyone out there help me out? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61282
  - 16
    - Search? Can I see someone's search history (ie with Yahoo or Google) when the HISTORY and TEMP internet files are cleaned out? Thanks Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61281
  - 17
    - New MSSecure.XML Version 2004.09.14.0 Now Available MSSECURE.XML Data Version 2004.09.14.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, September 14, 2004, and is now available for all supported languages (English, French, German and Japanese). Public download locations for these updated versions - pending worldwide replication and local proxy and caching issues - are listed below. If there are delays obtaining the latest, updated XML files, be sure you review KB842432 to troubleshoot potential local proxy and caching issues. ENU: http://go.microsoft.com/fwlink/?LinkId=18922 DEU: http://go.microsoft.com/fwlink/?LinkId=18121 FRN: http://go.microsoft.com/fwlink/?LinkId=18122 JPN: http://go.microsoft.com/fwlink/?LinkId=18120 This release supports the following new bulletins (with only limited support as detailed below and in today's web cast): a.. MS04-027 (WordPerfect Converter) - 884933. This bulletin is not supported for detection in MBSA. See KB306460 for more details on supported products. b.. MS04-028 (GDI+) - 833987. This bulletin will generate a Note message on the applicable platforms indicated in the MS04-028 bulletin. This is critical to understand since even though some operating systems may be affected by having a vulnerable Microsoft product installed on an otherwise unaffected operating system, the only platforms that will show a Note message are the Affected Operating Systems (Windows Server 2003 and Windows XP RTM and SP1) and Affected Components (Internet Explorer 6 SP1) as called out in the MSRC bulletin. See KB306460 for more details on supported products. This XML is fully supported for use with MBSA 1.2, MBSA 1.2.1 and the SMS SUS Feature Pack. To get the latest updates, features and Windows XP SP2 compatibility, be sure to upgrade to MBSA 1.2.1. SMS SUS Feature Pack users do NOT need to upgrade since all of the features are already provided by SMS. Details of the added and improved features in MBSA 1.2.1 can be found on the MBSA home page (http://www.microsoft.com/mbsa). This release does not include any other fixes, updates or improvements beyond the items stated above. -- Doug Neal [MSFT] dugn@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for the Microsoft Baseline Security Analyzer (MBSA) at the following link: http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61278
  - 18
    - Microsoft Security Bulletins for September 2004 September 14, 2004 Today Microsoft released the following Security Bulletins. Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summaries: September Summary http://www.microsoft.com/technet/security/Bulletin/ms04-sep.mspx Critical Bulletins: MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) http://www.microsoft.com/technet/security/Bulletin/MS04-028.mspx Important Bulletins: MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933) http://www.microsoft.com/technet/security/Bulletin/MS04-027.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61277
  - 19
    - has hotmail been hacked? anybody out there notice something is wrong with msn's hotmail.........anybody??? Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61267
  - 20
    - HLLW.Anig worm - what a pain Hello - Does anyone have any good ways to trap the Anig worm in a large-scale environment? (30,000+ users)? Apparently it's snagged one of our Domain Admin credentials, and it's spreading like mad cow disease in the UK. :) Thanks in advance. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61264
  - 21
    - Monitoring machine usage Hi, Part of the great Sarbanes Oxley audit requires that we monitor our third party application providor when they are in the program changing stuff. They usually dial in and then run the program as a terminal service client. My requirements are to capture everything they do. Is this possible? Any products out there? HELP!!!! Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61262
  - 22
    - Scheduled backups password probs I have yet to successfully run a scheduled M/S backup due to password problems. M/S help suggests running under administrator, this failed also. Why the hell do we need passwords just to run backups? Surely backups take priority over security, it certainly does in the real computer world. Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61250
  - 23
    - How safe/unsafe is it to use winxp w/o built in firewall? As the subject says, thanx! Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61249
  - 24
    - users password i set up an individual user & password from the control panel. i no longer need this setting & was looking to delete it & couldn't figure it out? p.s. i have 98!plus Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61247
  - 25
    - hackers conference malaysian bigest hackers conference to be held on Oct 04-07 2004 http://conference.hackinthebox.org Tag: WinXP SP1 Internet Connection Firewall Deployment Tag: 61246

I am using a specialized set of additional open ports in Internet =
Connection Firewall and would like to configure a number of computers =
this way but do not want to have to step through this repetitive task on =
each PC. Is there any way with Windows XP SP1 to quickly duplicate the =
settings of the Internet Connection Firewall on one computer to the next?

Re: WinXP SP1 Internet Connection Firewall Deployment by PA

PA
Thu Sep 16 21:04:34 CDT 2004

WinXP Professional Resource Kit (available through resellers such as Barnes
& Noble and Amazon.com)
http://www.microsoft.com/resources/documentation/windows/xp/all/reskit/en-us/default.asp
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Are You Ready for WinXP SP2?
http://support.microsoft.com/default.aspx?pr=windowsxpsp2

What You Should Know About Spyware
http://www.microsoft.com/athome/security/spyware/devioussoftware.mspx

AumHa Forums
http://forum.aumha.org

anonymous wrote:
> I am using a specialized set of additional open ports in Internet
> Connection Firewall and would like to configure a number of computers
> this way but do not want to have to step through this repetitive task on
> each PC. Is there any way with Windows XP SP1 to quickly duplicate the
> settings of the Internet Connection Firewall on one computer to the next?

Re: WinXP SP1 Internet Connection Firewall Deployment by Roger

Roger
Thu Sep 16 21:56:24 CDT 2004

If you have a domain environment you might want to look
at getting these XPs to SP2 and then using the group policy
settings that deal with ICF.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4
"anonymous" <anonymous@discussions.microsoft.com> wrote in message
news:29c301c49c55$a374f1c0$a601280a@phx.gbl...
I am using a specialized set of additional open ports in Internet Connection
Firewall and would like to configure a number of computers this way but do
not want to have to step through this repetitive task on each PC. Is there
any way with Windows XP SP1 to quickly duplicate the settings of the
Internet Connection Firewall on one computer to the next?