backup security event viewer

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Deleting messenger How do I disable MSGR 4.7 from my system at work? I try to in the 'control panel' - delete 'windows programs'; however, it seems to not work. I try to delete the actual file program icon; but it won't let me delete the file there either? I have a feeling that it is connected to another program - possibly outlook? I'm not sure. My concern is this: I will be leaving from the office soon, and want to ensure that nobody will have access to msgr/my inbox. when I open messenger, someone can click '___@hotmail.com' - 'click here to sign in' and anyone can have access to my email. Tag: backup security event viewer Tag: 64068
  - 2
    - Warning: flawed security on webhostin server ehosting.ca (same as mecca.ca) Hi NG, Anybody of users having a web site on ehosting.ca (mecca.ca) server can read anybody else's source code, asp files, connectionstrings and all. I could. I tried to warn the administration of this flaw but they not only don't understand their problem but belligerently defend their incompetence. No wonder they don't warn their customers about it. Because, first, they didn't even realize it and, when I told them about it, they blamed me for having tried to hack. They think security means only preventing script execution rights on user account folders and have been giving "Read" access to "Everyone" in order that their system could get directory listings!! Later on they said that they have made a typo, and that they're giving read rights not to "Everyone" but to "IIS-User" system user-account. It doesn't change the fact that the users can read each others' files. After my warnings, they might have improved the security level on the host, but from their record, you can't be very secure. So be warned. After all I felt forced to cancel my membership (on Nov 06, 2004 see below). When I created the FSO page back in 2000 the idea looked pretty new to me; you write down the virtual path to a dummy folder on my site and can read the directory listings. Then you double-click on a subfolder and get its listings. Double-click on a filename and (if ASCII) it opens in another page, where you can edit and save (in theory). And I put it on my free site at brinkster.com as a demo (www11.brinkster.cm/Nersessian/, registration is needed to see some files and their sources; only English part is more or less functional. I'm trying to set up a new site). Now this type of application is being used on many servers. Brinkster.com gives the warning that the free sites are insecure, so does 1asphost.com where the FSO doesn't exist at all on free sites. All is done to encourage paid membership. Here, on ehosting.ca, with paid membership, users have same or less security as on brinkster.com for free hosting. So when I uploaded this file, I was 100% sure it would not allow me to go above my own folder, but it did, successfully. Below I include my response to one of the administrator's message to me (after I also got a "Hello there" message from the biling@mecca.ca informing me that full refund in that company means less than 40% of the membership fee!!): //*********************************************************** What you're doing endangers your clients' and their users' private information. I suggest you to read Microsoft's public web server security guidelines again. Your interpretation of those guidelines is very peculiar, to say the least. 1. Absolutely non-important that other users cannot execute scripts in my account. If "Everyone" can read in my account, the real hackers will be "executing" my users' identities and their credit card numbers on their bank accounts, not scripts on my account. I hope you can figure out how they get that information, once they can read in your clients' files 2. Even if the system has to read in account folders, there is a user called SYSTEM. You could give it read rights. Not to Everyone. 3. I don't think that you even have a 'Clients' (or whatever) user group for clients, or know how and for what to apply it, if you give Everyone read rights. 4. You are not warning your clients about the security hazards their and their users subject themselves accepting your hosting services. Although this email will efficiently help you improve security on your hosting server, I don't expect to receive apologies or gratitude from you. But I will think it over, if I will warn your clients about your incompetence regarding their accounts' security and if to take further action. Regards, AN Mecca Administration <admin@mecca.ca> wrote: Hello, Well "Everyone" write access is disabled on c:\clients folder and you cannot use a web based script to write data to other clients' folders. We must enable "Everyone" read access so that other server components can read the directories and files listng. Keep in mind that we had followed Microsoft's public web server security guideline closely when we implemented the security structure few years ago. If you want to have a very secured server environement, please consider our dedicated server hosting. Also keep in mind that according to TOS, no subscribers are not allowed to hack into our systems: 3.1 The Subscriber will not hack, break into, access or use or attempt to hack, break into, access or use any part of the Services, its content and/or any data areas on Mecca's server(s) for which the Subscriber has not been authorized by Mecca. However, should you decide to call off our hosting service, please confirm your decision before November 08, 2004 (Note that you can only request the refund within 14 days of purchase). Cancellation request submitted after this day will not be counted within our 14 day money back guarantee period and thus, no full refund MINUS $15 administration fee (plus any applicable cheque handling charge) will be issued. Best regards, Systems Operations /*************************************************************************** ***** Tag: backup security event viewer Tag: 64067
  - 3
    - US - CERT Vulnerability Note VU#842160 Microsoft has not responded to this potential issue. Does anyone know the status or if Microsoft has responded in any way. TIA Tag: backup security event viewer Tag: 64064
  - 4
    - Twain Tech removal I finally got rid of one instance of Twain Tech on an XP machine after days of fighting it. 1. I deleted everything in \documents & settings\*username*\local settings\temp folder. 2. I deleted the key: HKLM\software\microsoft\windows NT\currentversion\winlogon\notify\WPAEvents. It was pointing to the "2ldsrch.dll" file in system32 folder that kept coming back. 3. I ran the Giant software that finds and deletes the "2dlsrch.dll" file that shows up as 'TwainTech'. 4. Reboot If you update to Windows XP service pack 2 and run the "critical updates" for XP, you can prevent programs like this one from coming back. I just wanted to see if I could get rid of this one manually before updating to SP2. Hope this helps someone! - Jim http://www.wwwdothttpdotdotcom.com Tag: backup security event viewer Tag: 64062
  - 5
    - spyweeper keeps popping up asking to keep/remove startup items Hi On my windows XP Professional PC I have spysweeper installed. While I am working away it keeps popping up asking to keep or remove various startup items. Its a different startup item name each time. These are the details of the item: Startup Item: egFHY9Ex (This name changes each time) inetkw CommonName Location: C:\PROGRA~1\vowpuqt\qpwostw.exe Registry or startup Folder: HKLM:Run Any ideas of what it can be? Ive turned off spysweeper for the monent. Tag: backup security event viewer Tag: 64060
  - 6
    - svhost.exe and bgthye.exe I had had problems with a users notebook using up all the bandwith when it was connected to the LAN in the office. Ending Process "bgthye.exe" in Task Manager fixed the problem. After installing XP SP2 on the machine, Windows asked me if I wanted to block svhost.exe and bgthye.exe from accessing the Internet. I found some user group chats that highlighted svhost.exe as a virus and described how to get rid of it. Fine! My problem is that I can find nothing about "bgthye.exe". Does anyone know if this is a virus too? And should I be following the same sort of process to getrid of it as I did with svhost? Tag: backup security event viewer Tag: 64059
  - 7
    - XP doesn't recognize VCOM virus protection Is this common? It's definitely in there... The computer in question had a virus, so put in a larger hard drive, reloaded everything and installed VCOM Fix-It Utilities. After doing all that, a little cartoon bubble popped up that said it didn't see any virus protection software. I figured out how to stop it from continually asking about it and sent the computer on its way. *that is the question I have* NOW for a little background and longer story... Here it is, one week later, and they've got a virus again. They have MSN and have many attachments in their hotmail email inboxes. I am thinking that there is a virus in one of them, and when launched it infects the PC. I have the same VCOM Fix-It Utilities on my PC with Windows98 and use Outlook Express for email. If I am sent a virus, I get an alert as soon as it shows up in the inbox. Using MSN Hotmail, it seems to me that the virus wouldn't be detected by VCOM Fix-It Utilities until it was too late - AFTER the infected file has been launched. Am I thinking wrong? I read that MSN Hotmail accounts are supposed to protected by McAfee, but if I find my theory about this to be true (I'm picking up the diseased PC tomorrow to check it out), Hotmail's going to be hearing from me. Thanks for listening, and if you have any ideas or random thoughts feel free to reply, Bill Tag: backup security event viewer Tag: 64055
  - 8
    - SUS Problem The SUS 2.0 SP1 administration screen on Windows 2003 Server comes up blank using http://<servername>/SUSAdmin I found no knowledgebase articles on this. What can I do to fix this? Thank you! Tag: backup security event viewer Tag: 64054
  - 9
    - SUS problem The SUS SP1 administration screen on Windows 2003 server comes up blank using http://<servername>/SUSAdmin I found nothing in the Knowledgebase about this. What can I do to fix this? Thank you! Tag: backup security event viewer Tag: 64053
  - 10
    - svchost and awm removal Please advise if you know how to remove svchost and awm .exe files from a server using win 2000 server Tag: backup security event viewer Tag: 64051
  - 11
    - svchost and awm .exe file removal Please advise if you know how to remove svchost and awm from a server using win2000 server Tag: backup security event viewer Tag: 64050
  - 12
    - W32/Mydoom.ag@MM - Heads Up! From: http://forums.mcafeehelp.com/viewtopic.php?t=34893 <quote> This brand new version of MyDoom is HTML based and does not contain attachments. It also exploits a critical IE vulnerability, so AV protection plus best practices are needed -- as this one has some potential. W32/Mydoom.ag@MM - Zero Day IE I-FRAME Attack http://secunia.com/virus_information/13213/mydoom.ag/ http://vil.nai.com/vil/content/v_129630.htm This W32/Mydoom@MM variant makes use of a zero day attack targeting a Microsoft Internet Explorer IFRAME buffer overflow vulnerability. The virus spreads by sending email messages to addresses found on the local system. The message appears as follows: From: Spoofed address Subject: may vary * funny photos :) * hello * hey! * blank There is no attachment to the message. The homepage hyperlink points to the infected system which sent the email message. Clicking on the link, accesses a web server running on the compromised system. The web server serves HTML that contains IFRAME buffer overflow code to automatically execute the virus. </quote> -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE/OE) Tag: backup security event viewer Tag: 64045
  - 13
    - Free adware removal products for Win95 Does anyone know of any free adware removal products for Win95? (I know, I know...but we are a non-profit agency, and every penny counts!) We have a computer that is badly infected, but I can only get Spyware Blaster to work in it. Adaware doesn't even load, and Spybot S&D states on the website that you need at least Win98. Thanks for any help! Tag: backup security event viewer Tag: 64043
  - 14
    - IPSec experience in internal networks I have been reading documentation on enabling IPSec on AD environment via group policies (client-to-client, server-to-client, server-to-server). In general, for a 3,500+ PCs environment, with 120 Win2000/Win2003 servers, what would be the maintenance involved when enabling IPSec ? Do you think that encrypting data internally with IPSec is that something organizations are really doing successfully these days ? Tag: backup security event viewer Tag: 64040
  - 15
    - Accessing resources on a Domain from a Workgroup on a different su Our PDC is an NT Server with an IP of x.x.x.* We have remote PC's not joined to this domain, but are just in their own peer to peer workgroup, and the have a different subnet of x.x.y.* Through the "search for computers" option, and entering the IP of the PDC, I can see all the shared resources within the domain from a PC in the workgroup, but cannot access any folders. All the remote PC's are Windows 2000. Is there ANY way to access the shares that exist within the domain from a non-domain PC without joining the domain and/or changing the subnet to match the PDC? Thanks. Tag: backup security event viewer Tag: 64039
  - 16
    - problem with e-mail when i open my e-mail i want to open another window from my e-mail and nothing will open. this happens all the time and some e-mails are important to me.When i get personal mail i can open up pics and stuff, but when a group of mine mails me i cant even go to the home page from my mail. I hope you can help me with this. I have Norton 2004 firewall and antivirus Thxs -- randyman Tag: backup security event viewer Tag: 64031
  - 17
    - hack tools detected I occasionaly use my laptop and only have AVG antivirus loaded. Everytime that I use the laptop I update the AV and then run a full scan. On my last scan nothing was detected, I used the laptop for a few hours and then shut it down. This morning I loaded Panda Titianium AV and then ran a full scan and it told me that it had found three Hacker tools which seemed to be installed in the system restore files. They had the word PSkill attached to them, Can anybody tell me what these are and how they could affect me. They are now deleted. I have run Adaware, Spybot and Panda and seem to have a clean system. Could any damage have been done. Tag: backup security event viewer Tag: 64028
  - 18
    - Restricting Users from Installing Application I have been trying to figure out a way to keep users from installing applications from cd or through the web to a workstation. Everything I have tried restricts administrators as well. Most of the tips i have tried have come from winguides.com. It has some helpful informatio but not exactly what i am looking for. Tag: backup security event viewer Tag: 64023
  - 19
    - MS Update incorrectly warns of virus My MS Update subscription is incorrectly telling me I probably have or have had a virus, offering me the Mydoom, Zindos, and Doomjuice Worm Removal Tool (KB836528) The only reason I can think it might flag the "virus" is that I have MS Taskmon.exe in the windows folder. NOT the one in the %system% folder that is a symptom of Mydoom. I don't have and have never had a virus. I currenlty run 98se, Zonealarm and Nod32, practise safe sex, wear sunglasses and manually check the registry, ini files, autoexec.bat, startup etc. I used the Syphos and McAfee descriptions of the infection and went through all the things the virus could have done, and none of them were on the PC. I'm not promiscuous with the PC (e-promiscuous??) so there's no real chance I've caught a virus recently. How can I stop MS offering me this update that I don't need? Thanks in advance Jon Tag: backup security event viewer Tag: 64020
  - 20
    - XP Pro "search" feature seems to ignore file permissions Hi Guys, I'm messing with settings in my brand new machine, as was wondering why it seems that XP Pro's "search" feature ignores folder permissions. For example, I have a user named "user1." If I create a folder and give him full control of it and deny full control to all other users on the machine, I'm still able to "search" and see file names and directory structures that should be off limits. It just occured to me that maybe this is because I'm checking with my administrator account, but I explicitly denied administrator permissions as well. As a sidenote: I'm running Windows XP Professional, SP2 w/ the latest, greatest hotfixes (as of November 7th). Any ideas? Tag: backup security event viewer Tag: 64018
  - 21
    - blocking ip address only one I use Windows XP Pro, and I have a stay-alive-connection, and some idiot keeps getting in to my computer he doesn't do anything to hurt my system but I'm tired of pulling the power cable to keep him out for a day or 2 . I know his Ip address only. I have contacted my Isp, but they suck and don't do anything. I can not unplug my network cable, I have people that I know downloading and uploading stuff to my computer/server for there backups and stuff like that, so that is an option i can not take. My question is: Is there a program that I can block his Ip from entering my computer, that is free? Please help me! Tag: backup security event viewer Tag: 64001
  - 22
    - Blocking a domain from computer Is there ANY way that a specific domain can be blocked from accessing my computer? I have a firewall, but they still get thru. Right now they have 10 popunders that have invaded my computer, and the only way I can get rid of them is to shut down. They do not pop up when clicked. This is driving me CRAZY! HELP please. Tag: backup security event viewer Tag: 63997
  - 23
    - Hotmail and Comcast - rejections? Hi, I should have received two payment notifications from Paypal sent to my Hotmail account, but neither have arrived. Payment notifications, although sent by Paypal, always have the email address of the person who made the payment in the From: field. Both of the ppl sending me money had @comcast.net email addresses...which leads me to believe that Hotmail is rejecting them without my knowledge... I know that the payments have been received - they are in my Paypal account.... Anyone have any knowledge of whether there's a problem with Hotmail and Comcast? Si. Tag: backup security event viewer Tag: 63992
  - 24
    - spyware outcome my computer just messed up a couple of days ago and then as soon as i knew that it had spyware, i downloaded from AOL the spyware blocking thing but now is not letting me go into my documents, It says that "an error...bla,bla,bla" and the thing is that i cannot get rid of the folders that have all the spam, Why is this happening? Do i need to buy a program? and would my computer become normal again? what do i need to do in the first place? Tag: backup security event viewer Tag: 63990
  - 25
    - Give user acces to regkeys Hello, Is there a way to give a user write access to a LOCAL_MACHINE regkey without making him local administrator? And if Yes, how could it be done? -- Jean Paul ------------------------------------------------------------------------------------- C# is Second finger high on the A Tag: backup security event viewer Tag: 63988
- Next
  - 1
    - Solution to browsing to a Windows 2000 machine from a 98 machine I have found a workaround to that old age problem of browsing WIN2k from 98. I was running w2k as a ICS gateway with a 98 (first edition) client. Forget the internet, it is not important, the trouble I was having was getting Windows 98 to be able to browse through network beighbourhood. First I tried forcing 2k to be master browser through registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\MaintainServerList (can be True, False or Auto) no joy then I started messing about with guest user, still no joy. Setting local security policy to allow enumeration without explicit access (or whatever it is called). This also did not help. I already had common users and passwords on both machines, so this also was not the problem. In the end I found that if you go on WIN98, networking properties, client for MS networks, and the advanced (or something) you can set Browse Master = True. I also went in to w2k above reg, and set it to FALSE. This way the 98 is master computer browser whatever and was able to browse! This also meant my gateway is not the master computer browser which is a bonus. Forget Stupid guest account. Lock down the enumeration setting in local security policy, and you can STILL browse and access your network HOOORAY! anyways, here is your basic checklist to this age old problem. 1 - Put common usernames and passwords for network access on both machines. 2 - Ensure that client for MS networks is there on both machines. (on Win98 make sure this is your default log on in the pull down list). (But please untick this on any connections that are directly on the internet like dial ups or Adsl Modems - you dont want to share out your files on the net (which is done by default on almost every connection I have ever seen - DUH MSFT)). 3 - On win98, go into the file and print sharing setting and tick both boxes to enable File and Print Sharing on that box, (this is not necessary to veiw shares on other pcs). 4 - On 98 machine go into advanced for client for MS networks and set Master Computer Broswer = True. 5 - Go onto w2k machine and set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\MaintainServerList = False. I think that is all you need. Any comments suggestions please post follow ups. Regards James Buttle ADDITIONAL NOTE *************** BTW for security... 1 always have a firewall on your internet connection 2 rename administrator account and have long passwords for all users 3 disable NetBIOS over IP under particular device in advanced, TCP/IP properties, advanced, WINS. 4 have an up to date antivirus package 5 run lavasoft adaware regularly 6 get all microsoft critical updates 7 Restrict anonymous access / enumeration under local policies, security options in local security policy. 8 Untick client for MSFT networks and File and print sharing for any internet connections such as ADSL modems, and dial ups. 9 Disable / kill / remove all guests and other useless accounts 10 If possible leave your computer off and sit in an underground bunker the rest of your days. Tag: backup security event viewer Tag: 63986
  - 2
    - Can't use Exchange OWA form based authentication with Smartcard Hi, I run a pilot using Exchange OWA form based authentication and I have encountered the folowing problem; When I enable the "Require Smart card for interactive logon" setings for my domain users , I can no longer authenticate to Exchange OWA in form based authetication since ,obvoiusly, the password is now randomly set. The problem is that remote users may find themselves in Kiosks which do not have the option to use a smartcard. Please advice on workaround, solution , alternatives. TIA Gil Tag: backup security event viewer Tag: 63985
  - 3
    - Certutil Hello Does anybody know if it is possible to list all user certificates of all user profiles who exists on an windows xp professional client machine? Is it possible with certutil.exe or does there exist an other tool or command? Does anybody know a complete documentation about certutil in one (1) document? I could imagine that there is no way to get all certificates because of security reasons --> private key configured exportable, e.g. But anyway, maybe someone knows a solution. Thanks a lot Christoph Tag: backup security event viewer Tag: 63981
  - 4
    - Administering a microsoft enterprise ca 2003: filtering certificates Hello, Does anybody know a tool or a script to filter certificates on a issuing certification authority in a more comfortable way as the ca microsoft management console is able to? There is no way to fast and easy find all certificates of a certain user. Every time you want to know the certificates of a certain user you must manually add a new filter or search manually for the username. Thanks for every hint, Christoph Tag: backup security event viewer Tag: 63980
  - 5
    - Spoof Billing From MSN I found two emails in my bulk mail inbox regarding my MSN account saying that my credit card number had been turned down and I could resolve the problem by contacting "MSN Suport" via the (spoof) link provided. I wanted to forward the two spoof billing emails to MSN as there are probably people out there who have received this and think it's legit, but does MSN care? Tag: backup security event viewer Tag: 63977
  - 6
    - Microsoft Security Bulletin Advance Notification Announcement is Hi, Microsoft Security Bulletin Advance Notification Announcement http://www.microsoft.com/technet/security/news/bulletinadvance.mspx Microsoft Security Bulletin Advance Notification for November http://www.microsoft.com/technet/security/bulletin/advance.mspx -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter/default.mspx Tag: backup security event viewer Tag: 63959
  - 7
    - Administration password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: backup security event viewer Tag: 63956
  - 8
    - Administrator password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: backup security event viewer Tag: 63955
  - 9
    - Administrator password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: backup security event viewer Tag: 63954
  - 10
    - MSN MESSENGER ON WINDOWS XP How do you disable automatic sign on - ie. it automatically allows others to click on '4444@hotmail.com' and the password is already entered. I don't want others to use my computer to have access to my email. Also, how do I remove the older version of MSN messenger when I've updated to 6.2 version? Thanks. Tag: backup security event viewer Tag: 63953
  - 11
    - cyber stalking A person can watch another persons computer monitor through the internet. They can also track another persons events by remote. What countermeasures are available? I have a spyware removal program and can install a firewall. What else? Tag: backup security event viewer Tag: 63952
  - 12
    - jerry I have children who can access the computer at any time. I've used the AOL parental controls but since I have broad band as my provider, I have no way to limit my children's use. I would like to find a way to shut down my system at a certain time each day, so the computer is locked off. Is there any software or windows appication that would allow me to do this ? Thanks for any information you may have. Tag: backup security event viewer Tag: 63951
  - 13
    - W2K/WXP and USB Memory Sticks Is it possible to force ALL types of USB Memory sticks to use a specific drive letter regardless of which PC they're plugged into? E.x. At the moment we've had to permit users read/write access to drives D/E/F as some PCs have CD-Roms, some have CD-RW+CD-Rom and some have neither, meaning the USB memory stick takes the next available drive letter, can we force it to use drive G: for example regardless of what brand of memory stick is installed and what USB port it's installed into? (Assuming of course that drive G: does not already exist) We use Windows 2000 SP4 and Windows XP SP1a on an Active Directory 2003 Domain. Tag: backup security event viewer Tag: 63950
  - 14
    - Hotmail Corruption Beginning yesterday (11/3) afternoon, after signing into my hotmail account, the system is not loading properly. Intermittently the system says it's "done" and there is no data on the screen (white screen), while at other times the "Today" and "In-box" will only partially load. Please help. Thx. Tag: backup security event viewer Tag: 63942
  - 15
    - Restrict Folder Creation but not files How do i restrict users from creating more folders on a share where they have write access to. I have tried this solution but have no luck. "To open the Registry Editor, go to Start | Run, enter regedt32 in the Open text box, and click OK. Navigate to HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Shares. Select Shares and all of the folder's subkeys. Go to Security | Permissions. For the Shares folder and each of its subkeys, grant the Read permissions (at a maximum) to the Everyone group and all untrusted domains, and click OK." Please assit Tag: backup security event viewer Tag: 63938
  - 16
    - Ad-Aware new update broken Ad-Aware, Win2000 and Win ME, AVG Free, Sygate Personal Firewall. Beginning a couple of days ago, Ad-Aware would no longer update. It downloads 5% of the new update and then says "update complete." This is the ref file dated 26-10-2002. That's right, 2002. Is anyone else experiencing this and are there any solutions? Tag: backup security event viewer Tag: 63934
  - 17
    - XP client security I have a question concerning client security. We have a demo copier that can send scanned documents in a PDF format to a shared folder destination on a workstation in our local domain by means of either SMB or FTP. With SMB, the copier uses an older method of authentication (NTLM v. 0.12) so it is incapable of accessing a folder on our Windows Small Business Server 2003 which requires the digital signing. In order for this copier to send to a folder on our server we would have to disable the digital signing on the server. That is not an option. We need to keep the server secure. Since this device can access a folder on a workstation via SMB by the method described, my question is - will this scenario compromise the overall security of our network? Will the separation from the server by scanning to a workstation allow for greater security considering the logon limitations of the copier? The ultimate goal is to place scans in a common folder on the Windows Small Business Server 2003 that can be accessed only by authorized network clients - either locally or remotely. As I also mentioned, there is a possibility of using FTP to put scans on the workstation. Only the workstation will have to have an FTP server running to accept the scans from the copier. I had heard that we should not run FTP server software on our Windows Small Business Server 2003. How will this affect our network's security to run an FTP Server on the workstation? I know that our security is only as strong as the weakest link. I am curious about the implications of either method and the effect on our secure environment. Thank you for your answers. Marvin Tag: backup security event viewer Tag: 63928
  - 18
    - Terminal Service encryption What type of encryption is Terminal Services sessions protected by, by default ? Assume launching a remote desktop session from a WinXP machine and connecting to a Win2000 and Win2003 Server. Tag: backup security event viewer Tag: 63920
  - 19
    - SPAM from "myself" to myself I've recently been getting (via AOL only) SPAM messages for pills and such that have my own email address as the sender and recipient. Does anyone have any insights into this before I struggle with the AOL people. Is it possible to stop the real sender from imitating me in this way? Thanks ian Tag: backup security event viewer Tag: 63915
  - 20
    - Security Event Messages Hello, Does anyone know of a good reference (web or book) that gives the meaning/definition of security event messages? I referenced Microsoftâ??s web site but does not provide what I need. Example: Event ID 618 â??Encrypted Data Recovery policy changed.â?? What does this mean? How was this generated? Event ID 612 â??An audit policy was changed.â?? I see quite a bit of these entries but no changes were made in the policy; this was generated by system account. I need a reference that explains why this happens and what it does? Any thoughts on a good reference for what I am looking for? Thanks Tag: backup security event viewer Tag: 63911
  - 21
    - VIDEO STREAMING DOES NOT WORK The video streaming on" foxnews" no longer work on my computer.It comes on with a black screen. I had no problem untill a few weeks ago. we have tried everything, but to no avail. HELP!!! I received an e-mail that had freaky virus.Norton found and fixed it. Could there be a connection? I have windows xp Tag: backup security event viewer Tag: 63909
  - 22
    - "A program is trying to automatically send e-mail..." workaround I have just installed SpamAssassin on my mail server. If it misses a Spam, I need to resend the spam to a particular mailbox to "Re Learn" the message as spam. Using Outlook, I have to Open the message (sometimes they are offensive), click Actions/Resend answer the "You didn't send this originally" warning, change the TO to "spam", click Send, Close the original message, and finally delete it. I wrote a macro For Each objMailItem In objExplorer.Selection objMailItem.To = "spam@visioncomm.net" objMailItem.Send Next objMailItem so I could just select a bunch of False Negatives and click one toolbar button. I guess I don't really mind the "A program is trying to automatically send e-mail..." dialog (although I'd prefer not to see it) but the 5 second delay before you can click YES is particularly annoying. I wrote a rule that does this, but it can't be called automatically. I have to move all the FN spams to a particular folder, click Rules Wizard, Run Now, confirm the correct folder is selected, select the Spam rule, and Ok, then Cancel. Also way too much work. Anyone have any ideas on working around this silly 5-second wait? Sending/Deleting a selected few messages another way? Tag: backup security event viewer Tag: 63905
  - 23
    - security: 4 Millions Domains data with Category Successfull Internet and Direct Marketing products on www.promotionsite.net * NEW * DOMUS Domains Toolkit Fall 2004 - Unique on the Net 4 Millions "Whois" Domains data with Expiration Date and Category*. Ultimate Version (October 2004) - Our best rate starts from US *$149*. A wonderful tool for Internet and Direct Marketing. Available in Basic, Advanced and Full Editions. It contains a domain database with 4 millions *FRESH* October 2004 New records .com, .net, .org. 4 Gigabytes MS Excel data zipped on CD-Roms/Dvd. Compression 3:1. MS Excel or Text tab delimited data files Available! Each record include the full "whois" fields info and homepage info: Domain Name, Registrant Company, Contact, Address, City, Tel, Fax, Email, Administrative Company, Contact, Address, City, Tel, Fax, Email, Technical Company, Contact, Address, City, Tel, Fax, Email, Billing Company, Contact, Address, City, Tel, Fax, Email, Zone Company, Contact, Address, City, Tel, Fax, Email, Name Servers until 6 name servers with IP addresses Record Created on Date, Record Updated on Date, Record *Expires* on Date Domain Title, Domain Description, Domain Keywords (*Category*), First 300 Words in the Domain Website Homepage. Download Free Demo, Screenshot, see Products Details or Order On-Line at www.promotionsite.net. Available On-Line many other Promotion Products. Instant Shipment or Download On-Line Registered Versions available! Best Regards, www.promotionsite.net The Best place where to find Internet Marketing Resources on the Net. --- This is a one-time only information. The enrolled (final) text of S. 877 as it was passed by the Senate on November 25, 2003, and agreed to by the House of Representatives on December 8, 2003, allows e-marketers to send UCE as long as the message contains an opt-out mechanism, a functioning return e-mail address and the legitimate physical address of the mailer. The bill was signed by the President on December 16, 2003, and takes effect on January 1, 2004. Your address isn't in any of our archives, however for Can Spam Act 2003 Compliance, you can remove at http://www.promotionsite.net/remove.html Tag: backup security event viewer Tag: 63904
  - 24
    - User profiles /SID Problem Description: My Windows 2000 Server had a hardware failure. I had to contact dell to send replacement parts. I had to reinstall the server OS. Then I connected my XP workstations to the server. I changed to a workgroup and then re-attached to the server. Now my User profile can not be accessed. \my computer\properties\advanced\user profile indicates the "Account unkrown" I have reattached to the server and can not get to the profile. My Backup software does not read my tapes even though they verified after every backup. I need my profile and My Documents back. What can I do. My network has been down for over a week. I am writing this email from my laptop. It too was affected. I have five computers (XP Pro) that are affected. Has anyone used regedit to change the user profile? What are my options? -- thanks Tag: backup security event viewer Tag: 63897
  - 25
    - Excessive Outgoing Packets Sent When I click on my Network Connection i see excessive packets sent. It always seems to be in increments of 4 Gig. For example, in one day, with minimal to no computer use, my computer will have 1 K packets received and 24 Gig sent. I am running Windows XP Home Edition w/ SP2. I have a cable broadband connection with a Linksys Firewall. I have always used Norton Securtity, and it never detects a virus or such. Anybody have any ideas of what might be going on? I have also used Spybot to try and troubleshoot, but haven't found much. Thanks Tag: backup security event viewer Tag: 63890

I want backup my security event log on event viewer on a Dc (windows 2003).
If I use a script I obtain a evt file. But If I open that evt file on a pc
that isn't in domain, I see the SID no the Users name of the users.
So if I want made a good backup on my dc how Have I do?

Thanks

Top