Windows 2003 server SP1

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Suspicious processes!!!! hi all, after researching processes running in my task manager i came across this process, wuauclt.exe - This is used by the automatic update tool in Windows ME to check the Windows Update site every so often to see if any updates need to be installed. it also said, The original wuauclt.exe from Microsoft gets placed in the Located at C:\WINDOWS\System32\wuauclt.exe . If you find it anywhere else then you should be suspicious for sure. So i did a file search on my c:\ and found 4 files, here they are, WUAUCLT, in, c:\1386, 137kb, application, date modified 8/29/2002 WUAUCLT.exe-1360D60A, in, c:\WINDOWS\prefetch, 25kb, pf file, date modified 9/15/2005 wuauclt, in, c:\WINDOWS\SYSTEM32, 122kb, application, date modified 5/26/2005 wuauclt, in, c:\WINDOWS\servicepackfiles\i386, 109kb, application, date modified 8/4/2004. could one of these be a virus/trojan? if so, how do i determine which one? I also have 5 svchost.exe using 51,000k between them, this cant be right surely!I have scanned with AVG, spybot s&d and ad-aware (all updated) and found nothing. please help, thank you. lee. xp sp2 Tag: Windows 2003 server SP1 Tag: 75800
  - 2
    - IPSEC with non-domain Server Hi All I am trying to add some additional security to a IIS server not in our Domain (Stand alone). I would like to use IPSEC to control who has access to this box and have been successful with IPSEC using the Preshared Key on the Server and Client. Microsoft does not recommend Pre Shared Keys, but what else is available with a non domain server and no PKI infrastructure? Thanks Mike Tag: Windows 2003 server SP1 Tag: 75794
  - 3
    - Malicious software removal tool I want to know if it is possible for some systems to experience negative effects as a result of the malicious software removal tool. I play on the MSN gaming zone fairly regularly. Tuesday night for no apparent reason an assortment of MSN zone pages are corrupt. They appear to be not downloading correctly/completely. I have XP Pro, Asus K8V SE deluxe with an Athlon 64 processor. The web pages are the same this morning. Other than this removal tool I can't think of anything else. Sept 13 would be the first download of the tool for me since I have only had this system for a short time. Tag: Windows 2003 server SP1 Tag: 75783
  - 4
    - restricting admin access to network I need to figure out a way to prevent the network admins from promoting themselves to enterprise/schema admins. I have already set up the restricted group, but they can still add themselves to these groups to bypass this. Questions: -1) How can I set the permissions so only enterprise admin can edit all GPOâ??s? I will then delegate specific policies to specific people. 2) Can I modify the default domain GPO ACL to only have enterprise admin edit it? I see in the GPMC that I can remove the delegation to domain admins. Is this how I go about this? 3) MOST IMPORTANTLY: I have tried removing domain admin permissions from my guys, but then it gets really hard for them to do their work on client PCâ??s since they have to log in as local admin. What can I do to ease this pain and remove domain admin for a few more guys? I have added them to the administrators group in AD but that did not seem to help. 4) Right now the group â??domain adminsâ?? is added to the remote tab of the system tab. Should I replace this with the â??Remote Desktop Usersâ?? group? I am also considering customizing this per server, is this safe? I realize that I am not doing things the right way and that none of use should log onto every/any PC as a domain admin, but I do not have a more efficient method yet. TIA Tag: Windows 2003 server SP1 Tag: 75781
  - 5
    - Meta data and showaccs.exe Would like to know what the following permission set is after using showaccs. exe. Following folders (+XWRD[f]{d]), files (+xwrd) for Everyone, Global Group. -- Message posted via WinServerKB.com http://www.winserverkb.com/Uwe/Forums.aspx/windows-security/200509/1 Tag: Windows 2003 server SP1 Tag: 75775
  - 6
    - How to tell if a firewall alert is suspicious or not How can I tell if a Sygate firewall alert is suspicious or not? For example, I received this message from Sygate just now: Sygate Personal Firewall: Firefox (firefox.exe) is being contacted from a remote machine [206.13.28.12] using local port 1258 (OPENNL - Open Network Library). Do you want to allow this program to access the network? How can I tell if this is suspicious or not? Tag: Windows 2003 server SP1 Tag: 75769
  - 7
    - could not upgrade file %1 from %2 %1: %2 kb896727 I run ME. It automatically downloads this fix, but it will not load at startup. It gives me the above message. Any suggestions? -- thanks, Steve Tag: Windows 2003 server SP1 Tag: 75764
  - 8
    - Need logon and Logoff data for 30 days Hi, I have about 600 remote users that logon through 10 Citrix servers. Upon request, I need to be able to provide when a perticular user logged on and off for the last 30 days. I curently have set our default domain policy to "audit account logon events" but it is logging a ton of stuff and constantly fills our security log before 30 days is up. Anyway, any suggestions would be greatly appreciated. 2003 AD TIA, Shay Tag: Windows 2003 server SP1 Tag: 75755
  - 9
    - anti-spyware vs antivirus vs firewall I know what all three are used for ( anti-spyware, antivirus, firewall), but I would like an explanation of the grey areas where they overlap. For example, I think a firewall will stop a worm from infecting a computer, but will a real-time antivirus also do this? Is there any overlap in the pests an antivirus and antispyware will take care of? Is there a website on the latest trends of security software? Tag: Windows 2003 server SP1 Tag: 75748
  - 10
    - Spybot and ISA SERVER Hi I am having an issue with spybot - it will not update whatever I do. We are running an ISA server using authentication. Therefore u can't browse or even get to the web without your username being authenticated. This is done between the browser and ISA but it seems Spybot can not deal with this. Can anyone help me ????? I've entered the login details into spybot but still not luck..... Please help. Tag: Windows 2003 server SP1 Tag: 75745
  - 11
    - MSN Contacts Recently when i try to block and delete a contact i am getting an error message 'gggg@hotmail.com can not be blocked. Please try again later' I have uninstalled and the reinstalled verstion7.0 Any suggestions Tag: Windows 2003 server SP1 Tag: 75744
  - 12
    - Active X files blocked Active X files are blocked on my computer making it impossible to use the MS Update Site or to download McAfee anti-virus and firewall. The suggested fixes from Microsoft and McAfee have done nothing. Any ideas? Tag: Windows 2003 server SP1 Tag: 75743
  - 13
    - Server Client not Talking to WSUS Dear all My environment is a Windows 2003/2000 server environment with around 40 Workstations: - - WSUS server is a Windows 2003 server - Test Client Server is a Windows 2000 server I have around 40 Workstations and they are all talking to the WSUS Server and updates are being downloaded to each workstation fine. I have read the WSUS documentation and understand that Windows Server 2000 OS is supported by WSUS. I have moved the server to a OU with the WSUS Policy enabled. I have executed the wuauclt.exe /detectnow command I have also executed a 'gpresult' command to see whether the Server has inherited the WSUS policy, it has fine. Any Recommendations or Advice Would be much appreciated. Regards Bruno Tag: Windows 2003 server SP1 Tag: 75741
  - 14
    - IPSEC VPN I have an IPSEC tunnel created between 2 Servgate firewalls. Everything was working fine until I recently installed updates on my Windows Server 2003, these updates included SP1. Since then I have been experiencing access difficulties. The headquarters can access the remote network but the remote PC's can no longer access headquarters. They can ping PC's on the network, but they can not access the network drives or remote desktop into the server. I can see at the firewall that the tunnel has been created and is running. Does anyone know of any new secutiry settings on Win2k3 that could be preventing access. Thanks. Tag: Windows 2003 server SP1 Tag: 75740
  - 15
    - Microsoft windows update Hello I have application and critical servers, I Want to stop all traffic Internet for these servers and keep only microsoft windows update to automatically receive updates. It is implemented into pix, hardware firewall with ACL like this: stop all internet traffic ans keep only for Windows update site IP address. firewall administratos said that microsoft update site has a lot of random adress IP is it true?, if no what is the exact address ip ? if yes how can implement this security? -- Salutations Tag: Windows 2003 server SP1 Tag: 75738
  - 16
    - telling which security groups are on which folder Hi there, I have a question. In Our organisation we have a lot of junk from our old servers and with that junk came a lot of security groups. Does anybody know a good (free) application that can tell which security group is used on which folder? I hope somebody knows such a programm Thank you all :) Maarten Tag: Windows 2003 server SP1 Tag: 75734
  - 17
    - No entries in Security Event Log I run XP Pro + all patches (except SP2). I do not use ICF. I have never seen an entry in the Security Event Log. Do I need to set something to enable logging? Tag: Windows 2003 server SP1 Tag: 75730
  - 18
    - min rights for access Hello. I must published an mmc for the support team with the snapin for the shares and open files for an win2003 server. now i search the minimal right for the support team group to used this mmc. itÂ´s not the solution to make the group member of the power user. has anyone an idea? thx marko Tag: Windows 2003 server SP1 Tag: 75729
  - 19
    - using ICF on 2003 server in domain? Dear, all. Is someone using ICF on 2003 server in domain envierenmnet? Is all functions, for example, ad replication, works well? Thanks. Frank Tag: Windows 2003 server SP1 Tag: 75727
  - 20
    - Blocking Downloads Is there a program that will allow me to block my kids from downloading programs and or music from the web. I don't want them to be able to download or install anything without some type of authorization process. Thanks ! Tag: Windows 2003 server SP1 Tag: 75714
  - 21
    - Directory access Hi, Here is my problem. I'm working on the Group Policy in Windows 2003. All users on my domain (excepts Administrator) have a restricted access to their "C:"-->read only on their XP computer(I didn't do anything for that). There is a user groupe that needs to write in a subfolder of "C:\Program files". Is there a way to change the access of that specific folder without having to modify the access on each XP computer? Thanks Mathieu Tag: Windows 2003 server SP1 Tag: 75713
  - 22
    - MRU Hi- I use ad-aware. After each scan, it lists MRU (& other spwares if found)- Can I safely place a check each time to remove these MRU's as well. what are these MRU's. thank you ! Tag: Windows 2003 server SP1 Tag: 75708
  - 23
    - Account lockouts help We have a few users in our org that continually get locked out. Every 5 minutes, their accounts go into the lockout state. They are locked down by a GPO but only for folder redirection. Any ideas??? Thx. Jon Tag: Windows 2003 server SP1 Tag: 75706
  - 24
    - How to resrict administrative access Hi everybody, Here is a classic situation. A Windows 2003 domain with 10000+ users. We need to restrict administrative logons to one particular source IP subnet or some specific workstations. The goal is to mitigate the risk of stolen administrator credentials'. Does anyone have an elegant solution for that problem? Tag: Windows 2003 server SP1 Tag: 75704
  - 25
    - Standalone Root- Standalone Sub I am trying to determing what advantage I will get by implementing a Standalone Subordinate CA to issue certificates to clients. I do not have an AD domain and I just need to issue certificates to a few hundred external vendors. Would it be necessary to have a subordinate CA or would I be just as well off with a Stand Alone Root CA issuing the client certs? It would also save me the cost of another server. >From what I can tell, I don't get any extra redundancy by having the sub CA, so what is its intended purpose. Can anyone give an example of how a sub ca could make sense in my environment? Thanks! Travis Tag: Windows 2003 server SP1 Tag: 75703
- Next
  - 1
    - Maximum Users allowed in a Share This is the problem I have been having. We have shares setup on a Windows 2000 server. We have the share mapped as a netwrok drive. I have users who complain that their drive is disconnecting and that they lose connection with their email pst's. I tried increasing the time for the server autodisconnect. It did not work. I turned off the autodisconnect, and we still have a problem. I tried deactivating the license server in case it might not be configured properly, we still had the problem. Does anyone know what the maximum amount of users is for a share? We are trying to increase the number of people who have access to the share (set the limit vs. taking the default which is maximum). Please let me know so we can get this problem taken care of. Thanks, Tag: Windows 2003 server SP1 Tag: 75701
  - 2
    - System Quarantining Does anyone know of any products that will quarantine systems that do not have the most updated MS Critical Patches? We have LANDesk and looking into that. I know Cisco has MARS and another security package. Basically, we have workstations we deploy patches to that we control. However, we have many laptops that we do not control, but want to ensure they have updated patches. Thanks for you assistance. P Tag: Windows 2003 server SP1 Tag: 75698
  - 3
    - OK Here's The Situation.... I am locking down my network. I am moving to a windows 2003 server domain. I am moving all machines into the domain. At the time of moving into domain I am disabling file downloads in internet security settings. I have the security tab disabled to the user via group policy. I am enabling downloads to Trusted sites. I have to manually at each pc add the trusted sites because from what i gather the group policy site to zone assignment list only works post xp sp2 and 2003 sp1 I am running all windows 2000 desktops. Say i miss a site that the users need to download from i dont want to have to go back to every machine and add that site ... is there a way to script the adding of trusted sites via logon or something? Any help would be greatly appriciated. Tag: Windows 2003 server SP1 Tag: 75692
  - 4
    - McAfee popup ad My McAfee software kept popping up an ad trying to get me to buy something, so when McAfee expired I got rid of it through the delete process and installed Norton. But the ad still keeps showing up, especially when I am not connected to the internet. Where is it on my computer and how can I get rid of it? -- Pharcellus Tag: Windows 2003 server SP1 Tag: 75689
  - 5
    - Router and Firewall I have a router that does NAT so why would I need to install an additional firewall? Tag: Windows 2003 server SP1 Tag: 75688
  - 6
    - winantispyware and winfixer popups grrrrrr i keep getting winantispyware and winfixer popups. i know nothing about programing and my adaware and microsoft anti spy ware wont stop it. how do i stop them ,or should i use them? Tag: Windows 2003 server SP1 Tag: 75682
  - 7
    - Virus Dectection What do I do when my virus scanner shows such a message? But it is unable to provide a description of the virus. I tried to quarantine but the next time I boot up I receive a message telling me the system is unable to locate the system file. Please help. WinXP Pro 2002 SP1 C:\WINDOWS\system32\kernels32.exe Trojan horse Downloader.Generic.EOI Tag: Windows 2003 server SP1 Tag: 75681
  - 8
    - Password I am trying to change my password and it will not let me do it. WHy? The reason I need to change it is because it was recommended by Ebay. Someone tried to use my ebay account and Ebay emailed me to let me know they also suggested I change my email password and if I had problems to contact msn. What can I do. Tag: Windows 2003 server SP1 Tag: 75675
  - 9
    - Password Protected Screensavers Trying to save myself from having to visit 90 desktops.... Is there a way to set all the computers in our network to meet the "Enable Password Protected Screensaver" criteria VIA a GPO or Domain Controller Security setting? Thx. Jon Tag: Windows 2003 server SP1 Tag: 75672
  - 10
    - MS backs out of releasing a security patch.... "Other than saying it planned to release a solitary fix in last week's advanced bulletin, Microsoft is yet to disclose any details of the security bug other than to describe it as "critical". " http://www.securityfocus.com/news/11310 Could this be the patch for outlook and IE? If so, the World already knows about it. Reference the original article here. "The bug affects default installations of Outlook, Outlook Express and Internet Explorer on Windows 2000 and XP Service Pack 1. EEye said that additional versions of Windows may also be affected." http://www.vnunet.com/vnunet/news/2142042/unpatched-bugs-ms-outlook Imhotep Tag: Windows 2003 server SP1 Tag: 75666
  - 11
    - Can We Monitor Websites Visited that Are Not Ours? Hello-- I've read the TN articles about using IIS to generate logs on hits to your own websites, but our management wants to monitor what websites our staff/clients are viewing that they shouldn't be viewing. Is there a way to generate a report that will show which websites our staff are visiting? Thanks, Stephen Tag: Windows 2003 server SP1 Tag: 75661
  - 12
    - Password complexity in W2K Pro/Serv network I am trying to figure out a way to enable customized password complexity in W2K Server on the Domain Level Policies. By default, W2K Srvr sets p/w complexity to 3 caps, 3 numbers, and 3 special characters. Is there a way to create your own template for password complexity? I know in NT 4.0 SP2, a passfilt.dll file was included and you could supply your own guidlines for complexity. Nothing like this exists as far as I can tell on W2K. Any ideas? Thanks. Tag: Windows 2003 server SP1 Tag: 75657
  - 13
    - NTFS Permissions We are running a windows 2000 Active Directory environment. I am trying to give a security group read permissions to a folder, but they don't have any permissions in the parent. They have rights to: \\server\share1 The have NO rights to: \\server\share1\sub1 I want them to be able to browse and have read rights to: \\server\share1\sub1\sub2 Is this possible? Thanks, Andrew Tag: Windows 2003 server SP1 Tag: 75644
  - 14
    - Username Vulnerability??? We have recently experienced massive account lockouts . The event logs reveal repeated login failures with most of our accounts. These attempts are coming from external addresses and are obviously unauthorized. I know that in NT 4.0 there was a vulnerability that allowed hackers with freely available tools to expose your usernames and use a brute force or dictionay attack to attempt to log in. Is there a similar vulnerability in Server 2003? This appears to be what is happening. The DC in question is running Server 2003 w/SP2 and is complettely current with all patches and fixes. Somone obviously has a list of our usernames and is using them to try and log in. I will pursue that with the ISP in question, but where is this hole, and how do I plug it??? Tag: Windows 2003 server SP1 Tag: 75643
  - 15
    - Help please security on emals A relation of mine cannot receive any word attachmnest that I send them. They always get this response.... "OE removed acccess to the following unsafe attachments in your mail (filename.doc)" The doc is perfectly safe so what could be causing this. Any advice welcome Many thanks Kevin -- Kevin Tag: Windows 2003 server SP1 Tag: 75641
  - 16
    - Failed to open the Group Policy Object Hello, i'm using windows server 2000/SP3 and if i try to open the dompol.msc i got the following error: Failed to open the Group Policy Object. You may not have appropriate rights. Details: The system cannot find the path specified. Thanks for helping. Martin Tag: Windows 2003 server SP1 Tag: 75640
  - 17
    - Web service as an intranet security layer Hello. I'm creating our company's intranet and the first thing that I'm tackling is the security layer. We will authenticate against Active Directory. I was thinking about implementing this security layer as an internal web service, this way our apps (and eventual internet apps) will have one place to go for authentication. This web service will be behind our firewall, and not accessible from the internet. What are some thoughts out there about this implementation? Thanks in advance, Mike Tag: Windows 2003 server SP1 Tag: 75639
  - 18
    - windows 2003 with sp1 ICF Dear, all. Is anyone have some experience on using ICF /w windows 2003 sp1? Or use ICF in domain server is not recommended at all? I set ICF on dc, exch2003, and application server, dc replications seems all right, exch seems could be accessed normally. When i check ICF deny log, it shows some packages have been blocked, this is distict when a server is restart. For example, in ICF, 53tcp& udp both open, but in a few minutes after server could be logon, 53 udp packages have been blocked. another example, when one of dc restart, some packages from other dc try to access some strange ports of this starting dc. How to solve that, or it can be ignored safely? Thank. Frank Tag: Windows 2003 server SP1 Tag: 75637
  - 19
    - Security settings on the Terminal Server prevent automatic logon Security settings on the Terminal Server prevent automatic logon from working properly. I am running remote shell server (rshsvc.exe) in an XP and rsh command from Windows Server 2003 Terminal Server. This rsh run remote desktop connection file(.RDP) on XP. The system works fine except that a password is asked when connecting. If I run the same RDP directly from XP using same local user, it will login automatically. Password is saved in RDP file. What setting will allow automatic logon to Terminal Server, when running RDP file from rsh like this ? I saw some advise on article ID=260711, but it was only for NT and 2000 Terminal Services. Tag: Windows 2003 server SP1 Tag: 75636
  - 20
    - Public Key Infrastructure I am going down the path of designing a PKI. Initially it will be used to provide SSL for OWA and Citrix but will be used for secure logon to AD in the future. The architecture I have come up with after some reading is to install a Stand-Alone Root CA, publish the CRL and Root Certificate to AD, then install an Enterprise Subordinate Issuing CA to provide the secure AD function for the internal users. The Stand-Alone Root would then be secured off the network. I would then have another Stand-Alone CA in the DMZ to provide the certificates for SSL and any future VPN requirements from external parties. Does this sound reasonable to the CA knowledgeables out there? Also I had intended for the DMZ CA to be another Stand-Alone Root but have read articles stating that this could also be a subordinate Stand-Alone CA. TIA, R. Tag: Windows 2003 server SP1 Tag: 75635
  - 21
    - Internet Security I wish to know whether is it possible for some one to enter into my mail box without my password.If so how it is?.How can I protect this Tag: Windows 2003 server SP1 Tag: 75633
  - 22
    - downloading. when trying to download symantec internet security 2004 from the official site ,i click on download and i get a page come up saying error cant find page on the left side of my sreen, why? and how can i fix this problem.thanks......... Tag: Windows 2003 server SP1 Tag: 75628
  - 23
    - My msn hotmail account has been stolen My msn (alejoquintero@msn.com) has been stolen. They have changed my password and secret question. When I choose send to an alternative email, the password is sent to the same account. I have no idea what to do... they are using it to insult my friends on messenger... is there anything i can do??? Tag: Windows 2003 server SP1 Tag: 75622
  - 24
    - Smeared screen = spyware? Hi, One column about 1-inch thick runs top to bottom on my screen and makes the print look blurry. Is this spyware? I have McAfee and Windows Update, but they haven't picked up anything. I've heard about Spybot-is it compatible with McAfee or Norton, along with Windows Update? Do I even need it or is there a screen setting I can fix? Thanks! Tag: Windows 2003 server SP1 Tag: 75609
  - 25
    - Hidden-code flaw in Windows renews worries over stealthly malware "We have seen indications that someone is trying this technique out," Liston said. "Basically, we have seen code that is stuffing a key in the registry with a huge length. Yet, the author still doesn't have it working." http://www.securityfocus.com/news/11300 Imhotep Tag: Windows 2003 server SP1 Tag: 75600

Hello,

I have installed windows 2003 enterprise edition on standalone system, i
installed SP1 also, but found that system became a bit slower and also MY CD
burning application stopped working after SP1 installation. I had to unistall
SP1 to make nero work. What applications get affected after installing SP1 on
windows 2003 server. how to rectify it.
Pls Advise

Top

RE: Windows 2003 server SP1 by IWSEC

IWSEC
Tue Sep 20 13:37:04 CDT 2005

Hi,
Try this technet article:

http://support.microsoft.com/kb/896367

Cheers
IWSEC
www.iwsec.co.uk

"javed" wrote:

> Hello,
>
> I have installed windows 2003 enterprise edition on standalone system, i
> installed SP1 also, but found that system became a bit slower and also MY CD
> burning application stopped working after SP1 installation. I had to unistall
> SP1 to make nero work. What applications get affected after installing SP1 on
> windows 2003 server. how to rectify it.
> Pls Advise

Top