jerry

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - W2K/WXP and USB Memory Sticks Is it possible to force ALL types of USB Memory sticks to use a specific drive letter regardless of which PC they're plugged into? E.x. At the moment we've had to permit users read/write access to drives D/E/F as some PCs have CD-Roms, some have CD-RW+CD-Rom and some have neither, meaning the USB memory stick takes the next available drive letter, can we force it to use drive G: for example regardless of what brand of memory stick is installed and what USB port it's installed into? (Assuming of course that drive G: does not already exist) We use Windows 2000 SP4 and Windows XP SP1a on an Active Directory 2003 Domain. Tag: jerry Tag: 63950
  - 2
    - Hotmail Corruption Beginning yesterday (11/3) afternoon, after signing into my hotmail account, the system is not loading properly. Intermittently the system says it's "done" and there is no data on the screen (white screen), while at other times the "Today" and "In-box" will only partially load. Please help. Thx. Tag: jerry Tag: 63942
  - 3
    - Restrict Folder Creation but not files How do i restrict users from creating more folders on a share where they have write access to. I have tried this solution but have no luck. "To open the Registry Editor, go to Start | Run, enter regedt32 in the Open text box, and click OK. Navigate to HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Shares. Select Shares and all of the folder's subkeys. Go to Security | Permissions. For the Shares folder and each of its subkeys, grant the Read permissions (at a maximum) to the Everyone group and all untrusted domains, and click OK." Please assit Tag: jerry Tag: 63938
  - 4
    - Ad-Aware new update broken Ad-Aware, Win2000 and Win ME, AVG Free, Sygate Personal Firewall. Beginning a couple of days ago, Ad-Aware would no longer update. It downloads 5% of the new update and then says "update complete." This is the ref file dated 26-10-2002. That's right, 2002. Is anyone else experiencing this and are there any solutions? Tag: jerry Tag: 63934
  - 5
    - XP client security I have a question concerning client security. We have a demo copier that can send scanned documents in a PDF format to a shared folder destination on a workstation in our local domain by means of either SMB or FTP. With SMB, the copier uses an older method of authentication (NTLM v. 0.12) so it is incapable of accessing a folder on our Windows Small Business Server 2003 which requires the digital signing. In order for this copier to send to a folder on our server we would have to disable the digital signing on the server. That is not an option. We need to keep the server secure. Since this device can access a folder on a workstation via SMB by the method described, my question is - will this scenario compromise the overall security of our network? Will the separation from the server by scanning to a workstation allow for greater security considering the logon limitations of the copier? The ultimate goal is to place scans in a common folder on the Windows Small Business Server 2003 that can be accessed only by authorized network clients - either locally or remotely. As I also mentioned, there is a possibility of using FTP to put scans on the workstation. Only the workstation will have to have an FTP server running to accept the scans from the copier. I had heard that we should not run FTP server software on our Windows Small Business Server 2003. How will this affect our network's security to run an FTP Server on the workstation? I know that our security is only as strong as the weakest link. I am curious about the implications of either method and the effect on our secure environment. Thank you for your answers. Marvin Tag: jerry Tag: 63928
  - 6
    - Terminal Service encryption What type of encryption is Terminal Services sessions protected by, by default ? Assume launching a remote desktop session from a WinXP machine and connecting to a Win2000 and Win2003 Server. Tag: jerry Tag: 63920
  - 7
    - SPAM from "myself" to myself I've recently been getting (via AOL only) SPAM messages for pills and such that have my own email address as the sender and recipient. Does anyone have any insights into this before I struggle with the AOL people. Is it possible to stop the real sender from imitating me in this way? Thanks ian Tag: jerry Tag: 63915
  - 8
    - Security Event Messages Hello, Does anyone know of a good reference (web or book) that gives the meaning/definition of security event messages? I referenced Microsoftâ??s web site but does not provide what I need. Example: Event ID 618 â??Encrypted Data Recovery policy changed.â?? What does this mean? How was this generated? Event ID 612 â??An audit policy was changed.â?? I see quite a bit of these entries but no changes were made in the policy; this was generated by system account. I need a reference that explains why this happens and what it does? Any thoughts on a good reference for what I am looking for? Thanks Tag: jerry Tag: 63911
  - 9
    - VIDEO STREAMING DOES NOT WORK The video streaming on" foxnews" no longer work on my computer.It comes on with a black screen. I had no problem untill a few weeks ago. we have tried everything, but to no avail. HELP!!! I received an e-mail that had freaky virus.Norton found and fixed it. Could there be a connection? I have windows xp Tag: jerry Tag: 63909
  - 10
    - "A program is trying to automatically send e-mail..." workaround I have just installed SpamAssassin on my mail server. If it misses a Spam, I need to resend the spam to a particular mailbox to "Re Learn" the message as spam. Using Outlook, I have to Open the message (sometimes they are offensive), click Actions/Resend answer the "You didn't send this originally" warning, change the TO to "spam", click Send, Close the original message, and finally delete it. I wrote a macro For Each objMailItem In objExplorer.Selection objMailItem.To = "spam@visioncomm.net" objMailItem.Send Next objMailItem so I could just select a bunch of False Negatives and click one toolbar button. I guess I don't really mind the "A program is trying to automatically send e-mail..." dialog (although I'd prefer not to see it) but the 5 second delay before you can click YES is particularly annoying. I wrote a rule that does this, but it can't be called automatically. I have to move all the FN spams to a particular folder, click Rules Wizard, Run Now, confirm the correct folder is selected, select the Spam rule, and Ok, then Cancel. Also way too much work. Anyone have any ideas on working around this silly 5-second wait? Sending/Deleting a selected few messages another way? Tag: jerry Tag: 63905
  - 11
    - security: 4 Millions Domains data with Category Successfull Internet and Direct Marketing products on www.promotionsite.net * NEW * DOMUS Domains Toolkit Fall 2004 - Unique on the Net 4 Millions "Whois" Domains data with Expiration Date and Category*. Ultimate Version (October 2004) - Our best rate starts from US *$149*. A wonderful tool for Internet and Direct Marketing. Available in Basic, Advanced and Full Editions. It contains a domain database with 4 millions *FRESH* October 2004 New records .com, .net, .org. 4 Gigabytes MS Excel data zipped on CD-Roms/Dvd. Compression 3:1. MS Excel or Text tab delimited data files Available! Each record include the full "whois" fields info and homepage info: Domain Name, Registrant Company, Contact, Address, City, Tel, Fax, Email, Administrative Company, Contact, Address, City, Tel, Fax, Email, Technical Company, Contact, Address, City, Tel, Fax, Email, Billing Company, Contact, Address, City, Tel, Fax, Email, Zone Company, Contact, Address, City, Tel, Fax, Email, Name Servers until 6 name servers with IP addresses Record Created on Date, Record Updated on Date, Record *Expires* on Date Domain Title, Domain Description, Domain Keywords (*Category*), First 300 Words in the Domain Website Homepage. Download Free Demo, Screenshot, see Products Details or Order On-Line at www.promotionsite.net. Available On-Line many other Promotion Products. Instant Shipment or Download On-Line Registered Versions available! Best Regards, www.promotionsite.net The Best place where to find Internet Marketing Resources on the Net. --- This is a one-time only information. The enrolled (final) text of S. 877 as it was passed by the Senate on November 25, 2003, and agreed to by the House of Representatives on December 8, 2003, allows e-marketers to send UCE as long as the message contains an opt-out mechanism, a functioning return e-mail address and the legitimate physical address of the mailer. The bill was signed by the President on December 16, 2003, and takes effect on January 1, 2004. Your address isn't in any of our archives, however for Can Spam Act 2003 Compliance, you can remove at http://www.promotionsite.net/remove.html Tag: jerry Tag: 63904
  - 12
    - User profiles /SID Problem Description: My Windows 2000 Server had a hardware failure. I had to contact dell to send replacement parts. I had to reinstall the server OS. Then I connected my XP workstations to the server. I changed to a workgroup and then re-attached to the server. Now my User profile can not be accessed. \my computer\properties\advanced\user profile indicates the "Account unkrown" I have reattached to the server and can not get to the profile. My Backup software does not read my tapes even though they verified after every backup. I need my profile and My Documents back. What can I do. My network has been down for over a week. I am writing this email from my laptop. It too was affected. I have five computers (XP Pro) that are affected. Has anyone used regedit to change the user profile? What are my options? -- thanks Tag: jerry Tag: 63897
  - 13
    - Excessive Outgoing Packets Sent When I click on my Network Connection i see excessive packets sent. It always seems to be in increments of 4 Gig. For example, in one day, with minimal to no computer use, my computer will have 1 K packets received and 24 Gig sent. I am running Windows XP Home Edition w/ SP2. I have a cable broadband connection with a Linksys Firewall. I have always used Norton Securtity, and it never detects a virus or such. Anybody have any ideas of what might be going on? I have also used Spybot to try and troubleshoot, but haven't found much. Thanks Tag: jerry Tag: 63890
  - 14
    - LuComServer_2_5.exe After getting Norton Internet Securuity update yesterday, my computer to day first "says": ccApp.exe is attempting to access the internett and later: LuComServer_2_5.exe is attempting to access the internett. Both times asking What do you want to do? permitt or block. What's up? Knut-Frode Lid Tag: jerry Tag: 63888
  - 15
    - Outlook have a Whitelisting Policy? I see MSN/Hotmail use IronPort's Bonded Sender Program. What about Outlook? How do legitimate publishers of solicited bulk email apply for similar whitelist status with Outlook? Thanks. Tag: jerry Tag: 63886
  - 16
    - Revoking ability to set default printer? Is there any (commonly used) way to revoke a user's ability to set their default printer, such as security policies, etc. Thanks in advance Tag: jerry Tag: 63881
  - 17
    - spyware nuker I have tried several spyware programs and use online scanners as well-use ad-aware as my main one. I downloaded spyware nuker 3 days ago and it found 213 things in the registry- 2 were hot bar and the many others were web game channels (it did not specify wild tangent but I used to have that til I got rid of it...or think I did) Those of u who know about spyware nuker know that you have to register and pay to have the items removed.Same with bazooka scanner (which only found hotbar)- Of course I could manually remove them. They are ALL in the registry. WHy is it that adaware,ss&d,pest patrol,Hijack this, cwshredder, etc did not find the same ones that spyware nuker did?? 213 objects is alot. Are they an honest spyware company??Opinions please will be appreciated,thanks Tag: jerry Tag: 63878
  - 18
    - malignant process I get a window labeled process scanner that says "the program has detected 1 malignant process. It is recommended that you remove these proceses before proceeding. " I click yes to preceed and the window disappears and nothing happens. It points out that "realsched.exe" is the issue. I have ran a search and deleted it but it still comes up as the problem. How can I resolve this problem? I have also run Spybot/spybloc and spyware doctor. These do not seem to improve the situation. -- Paul Tag: jerry Tag: 63876
  - 19
    - MBSA shows two administrator accounts not listed in users&groups control panel BACKGROUND: I have a new XP system that I just recieved from my corporate IT department. While the hardware is new, there are signs in the registry that their "gold image" that they used to ghost my computer was infected with a backdoor virus about a month ago (I know you don't need to tell me!). Our INTRAnet is under daily virus attack, and they seem quite content to spend all day cleaning up user systems. But I would like mine to be secure... I have added all the security patches that they refuse to put on their gold image, and have run microsoft baseline security analyzer (MBSA) to check. SO ANYWAY - HERE IS THE QUESTION... When MBSA runs it claims that there are four administrator accounts on my system. 1) local machine\administrator 2) corporate domain\"me" 3) corporate domain\EST 4) corporate domain\"1300 it" Should I be worried? Tag: jerry Tag: 63871
  - 20
    - What could be on 25 and 110? Hi! There is one Windows Server 2003 machine with system firewall running. However while scanning this machine (using GFI LANguard N.S.S., Shadow Security Scanner and Angry IP Scanner) it shows that also ports 25 and 110 are opened. There were never neither SMTP nor POP3 service installed, netstat -ano shows no process listening on them and when I try to telnet to these ports it's also unsuccessful. So what could be a reason of such strange result? Regards Silmar Tag: jerry Tag: 63864
  - 21
    - rasmans.exe I found rasmans.exe in system32. It has been identified as trojan, maybe. So I don't know what to do, it seems there is no information about it on the Internet. I use windows xp home edition Thank in advance. Beppe Tag: jerry Tag: 63863
  - 22
    - Win XP I am using win XP. I cant see my program windows which are supposed to be on task bar, they are kinda hidden. IF I do Alt + Tab I do see them... Can anyone tell me what is my problem. Thanks Salim Tag: jerry Tag: 63862
  - 23
    - What is this batch file missing (for privacy cleaning of a windows PC) I started writing a batch file for quick cleanup of an WinXP PC. My batch file is below. I'm no expert so I am sure stuff is missing (what is missing)? The goal is a decent batch file which removes most privacy concerns. Let's say the PC should be clean enough to hand to your boss or mom. How can we improve this cleanpc.bat script? Is another cleanpc.bat script out there that is better for starters? How can we add variables (eg for the username & mozzilla directory)? Orak Listalavostok echo off erase /s/q/f "c:\temp" erase /s/q/f "c:\documents and settings\administrator\recent" erase /s/q/f "c:\documents and settings\administrator\my recent documents" erase /s/q/f "c:\documents and settings\administrator\local settings\my recent documents" rmdir /s/q "c:\quarantine" erase /s/q/f "c:\windows\downloaded program files" erase /s/q/f "c:\windows\temp" erase /s/q/f "c:\windows\cookies" erase /s/q/f "c:\windows\history" erase /s/q/f "c:\windows\tempor~1\content.ie5" erase /s/q/f "c:\windows\recent" erase /s/q/f "c:\windows\applog" erase /s/q/f "c:\windows\desktop\*.tmp" erase /s/q/f "c:\windows\prefetch\*.*" erase /s/q/f "c:\documents and settings\administrator\cookies" erase /s/q/f "c:\documents and settings\administrator\local settings\history" erase /s/q/f "c:\documents and settings\administrator\local settings\temp" erase /s/q/f "c:\documents and settings\administrator\local settings\temporary internet files" erase /s/q/f "c:\documents and settings\administrator\local settings\application data" erase /s/q/f "c:\documents and settings\administrator\userdata" erase /s/q/f "c:\documents and settings\administrator\my recent documents" erase /s/q/f "c:\windows\system32\catroot2\*.log" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\cache" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\\mhy0feee.slt\cache.Trash" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\cookies.txt" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\downloads.rdf" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\history.dat" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\bookmarks.html" erase /s/q/f "c:\windows\debug\usermode\userenv.log" erase /s/q/f "c:\windows\debug\usermode\userenv.bak" Tag: jerry Tag: 63861
  - 24
    - spyware/cannot uninstall I have installed several progs from a win xp mag cd and when I run yahoo antispy it tells me that I have gator/claria, trouble is I cannot get rid of it how do I do this without having to uninstall all of the progs Tag: jerry Tag: 63856
  - 25
    - Offer any Help for XP When I double click to open anything, my computer automatically opens Search, for searching files on my computer.... anyone know how to fix this? The only way I can open files or click icons is by right clicking and chosing open from the menu that appears... I am using XP Tag: jerry Tag: 63852
- Next
  - 1
    - MP3W.EXE This program is displayed on my Windows 2000 Professional Task Manager Processes using 95-98% CPU time. Is this a system file? Is it a virus? Norton doesn't recognize it. AdWare SE doesn't recognize it. Explorer Find can't find it on any of my hard drives. Does anyone know what this is? Tag: jerry Tag: 63850
  - 2
    - Lost Property Window and MP3W.EXE I have noticed a process in the Task Manager called MP3W.EXE running up to 95-98% of my CPU cycles almost constantly. I have run AdWare and Norton's Antivirus to detemine if this was a foreign file to no avail. To further investigate, I tried to isolate the program through the Services folder by changing through the properties most services running as "Automatic" to "Manual" and then stopping them. With most of my services now "Stopped" and the MP3W file still running, I have found I can't change the properties from Manual to Automate because the property window will not display. I have tried to reload Windows 2000 Prof to resolve my dilemna but Windows installer says there is another installation in process and terminates. I have searched all hard drives for MP3W.EXE using Explorer Find but to no avail. I fear I have compounded the problem and now can't tell if this MP3W is a virus or a system file. Is there anything I can do to resolve this situation? Tag: jerry Tag: 63849
  - 3
    - Applications that require Internet access I am running an application that must connect to the Internet. I can configure proxy settings. However, if the firewall is configured to prompt that an external connection is being made, the application cannot complete its Internet access procedure. How should the firewall policies be configured so that the application can access the Internet without intervention. Tag: jerry Tag: 63840
  - 4
    - Are credentials sent via a client browser->IIS6.0 if using 'integrated authentication' protected by Kerberos? Imagine I am not using SSL or a certificate.I go to IE and launch http:\\ MyServerSite The authentication in use is "Windows integrated authentication". Since I am not using SSL, if somebody uses a packet decoder to grab data from that connection, what type of information would be retrievable ? Is the login information/password protected by Kerberos in this scenario ? Tag: jerry Tag: 63839
  - 5
    - enhancemysearch browser hijack? I have a friend how has a Windows Media Edition XP. He goes to use the Internet and gets pop-ups until IE fails. All the sites say enhancemysearch.com. I have ran 3 different virus scans I have ran 3 different "spyware" fixing tools Can someone help me please? Thank you, Craig Tag: jerry Tag: 63838
  - 6
    - win2k3 and isa2k vulnerability scan I ran a nessus (free open source vulnerability scanner) scan on my 'public-ip/web server'. It was able to identify the version of ISA and IIS that i was running. It also reported a MS Predictable TCP sequence vulnerability, i dont know if it was referring to Win2k3/IIS 6.0 or ISA2K. The recommendation for the tcp sequence vulnerability was to get a patch from the vendor? It also recommended to use URLSCAN to hide the identity of IIS 6.0? Does anyone know how i can get that patch from MS for the tcp sequence vulnerability, and how to configure urlscan to hide the IIS version im using? Tag: jerry Tag: 63837
  - 7
    - L2TP over IPsec VPN and nat-t I am having problems making a L2TP over IPsec VPN work when the remote client is behind a NAT device. The VPN uses IPsec certificates and this all works good if the remote user is directly connected to the internet (i.e. the machine has a public IP address assigned), but as soon as the computer is behind a device and receives a private IP address, the VPN tunnel times out. (The IPsec creates successfully, but the L2TP connection fails...error 682). These remote clients are connecting a Netscreen 25 for their VPN tunnels. This device supports nat-t. The L2TP connections for this device only work in "transport mode". One other thing, this process works just fine if I have the remote clients connect just using an L2TP tunnel (no IPsec). Then there seems to be no problem with NAT and the remote clients. I have tested this VPN setup using windows 2000, windows XP pro, and windows XP home edition. All three OSs respond the same. I am wondering if there is some type of setting I need to modify in windows that will allow IPsec to function in "transport mode" or at least apply nat-t to the L2TP connection. Thanks in advance, Adam Tag: jerry Tag: 63823
  - 8
    - PKI I don't know if this is the right forum to post this qestion, but I couldn't find a specific PKI Newsgroup...so here goes. To make a long post short, we have deployed a enterprise sub ca server that is issuing certificates to our test clients. Our application develpor created logic that connects to the certificate database when a user enrolls for a certificate to see if a certificate has been issued for this particular user. It seems that after 20 connections to the certificate database, you get the following error message: "Server was unable to process request. And attempt was made to open a Certification Authority database session, but there are already too many active sessions. The server may need to be configured to allow additional sessions." After about 1 minute, you can make valid connection attempts again. Does anyone know of a concurrent connection limitation when connecting to a certificate database? If so, is there a way you can expand this connection limit? I can't seem to find anything on the web that lists anything about his issue for PKI is not as well documented as most of the technologies out there. Thanks! Tag: jerry Tag: 63822
  - 9
    - Local Area Quarantine System Hello All, I am looking for a system that would quarantine users, run some sort of checking rountine before allowing them full access to internal systems. The Network Quarantine Control in RRAS does this for remote VPN connections but I am looking for an internal network system. Does Microsoft have this functionality for internal AD logon authentication? Tag: jerry Tag: 63821
  - 10
    - Password must meet complexity requirements on Domain Controllers Hi there, Can anyone help me to retrieve the value of â??Password must meet complexity requirementsâ?? on Domain Controllers? The location for this setting is: Start->Program->Administrative Tools->Local Security Policy-> Security Settings->Account Policies-> Password Policy->Password must meet complexity requirements. This has two settings â??Local Settingsâ?? and â??Effective Settingsâ??. The â??Effective Settingsâ?? has higher priority then â??Local Settingsâ??. One can enable the â??Effective settingsâ?? by following the path: Start->Program->Administrative Tools->Domain Security Policy-> Windows Settings->Security Settings->Account Policies-> Password Policy->Password must meet complexity requirements. I need to retrieve the value of â??Password must meet complexity requirementsâ?? for both â??Local Settingsâ?? and â??Effective settingsâ??. Any help in this regard would be appreciated. Thanks. Suchitra Gupta. Tag: jerry Tag: 63818
  - 11
    - MS04-038 cumulative patch for IE5.5 SP2 on WinNT4.0 server ? The MS04-038 mentioned that WinNT4 SP6a will be affected and when i ran the hfnetchk on my system, it had requested for the cumulative updates. But the problem is i cou'lnd find the cumulative updates release by MS for IE5.5 SP2 (WinNT Server) nor one for WinNT server. Is MS going to release the updates later or i have miss out the download someone? Tag: jerry Tag: 63817
  - 12
    - Run As for Internet Protocol How do I open and configure Internet Protocol (TCP/IP) logged on as a regular user? Is there a way to do a â??run asâ?? with administrative privileges to some folder that contains Internet Protocol (TCP/IP)? Tag: jerry Tag: 63808
  - 13
    - crashes & freezes I ran Ad-Aware and got 9 Alexa critical objects tac 5 - and 164 tracking cookies tac 3. What do I do now. Should I delete them? Quarantine them? Will that affect the running of any programs? I am clueless. ...and this is just the first of a list of things I am told to do because I am having 6 to 9 crashes and freezes every day Anyway - one step at a time. what should I do with these things. They are under Critical objects but they all say "low risk" Windows 98se, IE6, Dell xpst450 5 y.o., McAfee VS & Firewall. Ginny Tag: jerry Tag: 63801
  - 14
    - Unwanted files downloaded Whenever I navigate links on MSN.com, I get a file called pxchyhf.exe downloaded into system32, Run - in Registry and in my processes. The properties onf the file say: intallation file for http://www.callinghome.biz. Can anyone tell me how and why I get this file everytime I open a web page and how to stop it? I even had the MSN pop up blocker installed. Thanks for any and all help. Tag: jerry Tag: 63798
  - 15
    - crashes and freezes I ran Ad-Aware and got 9 Alexa critical objects tac 5 - and 164 tracking cookies tac 3. What do I do now. Should I delete them? Quarantine them? Will that affect the running of any programs? I am clueless. ...and this is just the first of a list of things I am told to do because I am having 6 to 9 crashes and freezes every day Anyway - one step at a time. what should I do with these things. They are under Critical objects but they all say "low risk" Windows 98se, IE6, Dell xpst450 5 y.o., McAfee VS & Firewall. Ginny Tag: jerry Tag: 63796
  - 16
    - Comparing how effective is a PKI vs. Certificate Authority implementation I understand the definition that PKI provides authentication, confidentiality, nonrepudiation and integrity of messages exchanged. I understand PKI requires a digital certificate, issued by a third party or a Cerficate Authority. Besides the CA, PKI have other components as well. The Certificate Authority is an 'entity' that issues the digital certificates. My questions are: a) Imagine I setup only a CA (server) in my internal network (Win2000 AD) to issue digital certificates around. For example, that way people can launch browsers via HTTPS and have data encryption protection when using our Intranet resources. Is that an effective solution by itself, or should I have to setup a complete PKI solution to take advantage of publick keys ? What do I exactly have to gain by implementing a PKI solution instead of only implementing a CA server in my internal network ? (the latter seems pretty straightforward to implement) b) Does a Certificate Authority setup in my internal network would be a countermeasure against "spoofing" ? (in this case, imagine somebody manages to setup a rogue server with an IP that is not the actual production server). Tag: jerry Tag: 63790
  - 17
    - I am getting coolsearch.biz everytime, I am cleaning my PC with free antivirus prog, is this OK? Everytime I bringup IE, it is occupyinh 99% CPU time coolsearch.biz website is opening and I installed this free anti virus prog (AntiVir) and scanning my harddisk, is this is good antivirus prog?. Is there any disadvantages in this? http://www.free-av.com/ Tag: jerry Tag: 63789
  - 18
    - imesh Re:- "imesh" I posted recently having found imesh on my computer. Is there someone out there who could explain what this program does and how and more importantly whether it can allow "outsiders" to access any other part of my computer and cause any problems. Steve Tag: jerry Tag: 63770
  - 19
    - MBSA Can anyone tell me if you can run the MBS analyzer on other servers and then look at the results on a base server? I copied all the docs generated to my thumb drive and placed them in the SecurityScans folder but all I see when I launch a file is the HTML/XML code. I want to look at a customer's site without having to print the whole report. Thanks in Advance. Tag: jerry Tag: 63752
  - 20
    - DNS Resolver question. Hi all, Thanks Karl for your previous reply but I was not clear in my previous posts. I am running a windows service that is monitoring the requests made on DNS (port 53) when the request comes in. (service running on DNS server...) Suppose a Web browser from a local machine (source is port: abcd IP: m.n.o.p) trying to connect to someplace (maybe google) whose ip: (f.g.h.i) and the request is going through port "53" at your local DNS server (w.x.y.z) can the DNS Server eventhough it can find ip: (f.g.h.i) in its table send a response back to the local machine on (source port: "abcd" IP: m.n.o.p) saying "no--- you are always redirected to a.b.c.d which is an internal (LAN) machine" So the machines involved here are: DNS server : port 53, ip (w.x.y.z) Requesting machine: port abcd, ip (m.n.o.p) Redirected machine: port 80, ip (a.b.c.d) can this be done using the windows service or does it require someother process? Hope I am making sense this time. Thanks, Stephen. Tag: jerry Tag: 63746
  - 21
    - Advise me: Replacement for Pest Patrol? Hi spywaters, I use AVG, Spybot S&D, Popup Stopper, Adaware SE, Hijack This, CWShredder, & Stinger.. I update AVG daily, and update the rest weekly. I have set my IE options to prompt for cookies and controls that are unsigned. I use a hosts file. I keep Spybot S&D's "Tea Timer" on. I recently uninstalled Pest Patrol, Free edition, as I can no longer update it and it seemed to be conflicting with Spybot S&D. Is there any other FREE malware protection program that I should install? Caveat: I'm unemployed, gone back to school, older than dust, and real tight with money. Spending money freaks me out, so suggestions for Free programs are preferred. <*((((><{ Fishy@Ocean.Net Tag: jerry Tag: 63742
  - 22
    - Attn: PA Bear My dear dear PA Bear, I have come to the conclusion that there's no malware on my computer. Have you seen my messages about that? Do you approve of my conclusion? Awaiting your response, with baited bubbles, I remain, yours truly, <*((((><{ Fishy@Ocean.Net Tag: jerry Tag: 63738
  - 23
    - Curious IT employe "sniffing" around the network! Hi everyone, i got real reason to think that the IT at my office is looking where he should not! Reading confidential documents etc... How can i catch this guy, he does that from is office computer, not from home. I could attach a hardware keyboard sniffer to is machine, but i'm afraid he will eventually see it in the back of is computer. Any suggestions, solutions are welcome... Thank's Luc Tag: jerry Tag: 63735
  - 24
    - CD problems I have windows XP and my computer is 2 years old. For the past 3 months my D Drive is not responding. I cannot write anything to a CD or play any CDs on my PC for that matter. I ckecked the system tools and is sees it as being there but it does not do anything. Is it time that i bought a new CD drive or can is it software mulfancution? I used to use Kazaa frequently and i am wondering if that had anything to do with it. Thank you. Tag: jerry Tag: 63734
  - 25
    - e-mail spoofing Hello, I know that many mass mailing viruses today forge the sender address to someone found on the infected computer. But what about the sending server's ip address? Can this be forged? Are there viruses that can forge the sender ip address? I want to know because it's easy to see that the sender address is forged if you can rely on the sender ip address in the message header and trace back to that ip address. Thanks Tag: jerry Tag: 63729

I have children who can access the computer at any time. I've used the AOL
parental controls but since I have broad band as my provider, I have no way
to limit my children's use. I would like to find a way to shut down my
system at a certain time each day, so the computer is locked off. Is there
any software or windows appication that would allow me to do this ? Thanks
for any information you may have.

Top

Re: jerry by Torgeir

Torgeir
Thu Nov 04 14:59:27 CST 2004

jerry wrote:

> I have children who can access the computer at any time. I've used the AOL
> parental controls but since I have broad band as my provider, I have no way
> to limit my children's use. I would like to find a way to shut down my
> system at a certain time each day, so the computer is locked off. Is there
> any software or windows appication that would allow me to do this ? Thanks
> for any information you may have.
Hi

E.g. the program "1st Security Center" is able to do that:

http://www.1securitycenter.com/

<quote>
The powerful feature "User Working Time" allows you to limit working
time for your children , office colleagues , students and so on. You
can define several time intervals and time durations to manage users
working time very easy.
</quote>

The application in the link below is a lot more limited, but it can
e.g. force a logoff/shutdown at a set time or after a time duration
(but it looks like this is computer based and not user based):

Aye Shutdown
http://www.ayesoftware.com/asd/

--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Top