NT 4 trust with Windows 2003 GPOs

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Passwords When i turn on my sons computer it request a password and he does not remember it. How do I fix this problem. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69257
  - 2
    - Set Win XP Firewall rules via login script? Does anyone know if this can be done? If so is there some reading yo can point me at that tells how Thank TB -- thebigdog0 ----------------------------------------------------------------------- thebigdog00's Profile: http://www.iamnotageek.com/member.php?userid=1106 View this thread: http://www.iamnotageek.com/showthread.php?t=181905260 Tag: NT 4 trust with Windows 2003 GPOs Tag: 69252
  - 3
    - QuickBooks and its users QuickBooks and its users. We have users in the office that require the use of quick books. I have been instructed to install it on workstations etc. What I have come to find is that in order to even run QuickBooks you need to be a power users (this is the lowest membership) or Administrator of the machine you're using. This all being said poses a problem. Typically users of the system aren't granted any rights in the domain other than Domain User. A few exceptions have been made for some of the "SUITS" and "Programmers / Developers" whom need full admin rights over the machine they use. This isn't the case for every user, and I now seem to have to grant more rights to the user over the workstation that they are using. I know. If I was the one reading this I would reply with an answer like: "If you can't trust your users to have elevated rights on your computer(s), then why the hell would you trust them with data inside of QuickBooks. The only answer I can get from the support at QuickBooks is that this is the way the software works due to all the many background process that run pertaining to their software. So. now does any one have a suggestion for me as to how I can protect my workstations and let users use software they need to do their job with? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69249
  - 4
    - Tracking user login times Is there a way to track the date/time users log into the network? I tried turning on auditing for the directory access feature for the DC and when I checked the event viewer its not what I expected. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69247
  - 5
    - Error : queue is not registered within ds I am using .Net C# to send and recieve MSMQ messages on XP Pro from a Service. I get error "queue is not registered within ds" when I try to send a message in debug mode. It works when compiled. I have set security settings, i.e. Service Logon account and anonymous but still get the same error. Does DS mean Directory Service within Active Directory? I am a developer and may not always be connected to an Active Directory server. Can somebody please explain what is raising/causing the error ? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69242
  - 6
    - File Auditing properties issue A fellow IT worker at another organization also working on HIPAA is having the following issue while trying to enable file auditing: "Folder"/Properties/Security/Advanced/Auditing/"Object settings" The "Apply onto:" box (second selection down) is greyed out. How can this be enabled? I have no problem on any of the workstations in my organization, I have tried this under admin and user accounts, but the box is always available. Any ideas? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69241
  - 7
    - Anti-Phishing Toolbar Available http://toolbar.netcraft.com/ Lecter "Trust No One!" Tag: NT 4 trust with Windows 2003 GPOs Tag: 69239
  - 8
    - LC2003 - certificate is not valid Live communications Server 2003 does not stop. Any help is apreciated Event Type: Error Event Source: Live Communications Server Event Category: (1001) Event ID: 14347 Date: 3/23/2005 Time: 8:26:21 AM User: N/A Computer: FMA001 Description: Unable to listen for Transport:TLS, IP address:0.0.0.0, Port:5061. Error:0x800b0101 (A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. ). For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69237
  - 9
    - Minimum rights for VB code signing What are the minimum rights needed on a workstation (XPSP2) to request and use a code-signing certificate from a domain-local CA? As Administrator I can request and use a code signing certificate, as a user I cannot. Since I do not want to work as admin all the time I would like to know what rights I need to have (machine or domain) to sign code as I develop it. Carol Chisholm Tag: NT 4 trust with Windows 2003 GPOs Tag: 69233
  - 10
    - Spyware & Registry changes I use Spybot S & D and it gets rid of syware well. I recently formatted my hard drive and all is well, but....Having downloaded S & D (updated version) onto my laptop after formatting HD,it is now identifying spyware it can't remove, all of which is embedded in the Registry. Examples are: ISearchTech.PowerScan entry HKEY_USERS\S-1-5-18\Software\PowerScan DyFuCA.InternetOptimizer entry HKEY_USERS\.DEFAULT\Software\Policies\Avenue Media I can delete them manually from regedit I imagine, but if S & D can't, should I? I am having some irritating but harmless events such as Dial up prompt and a web page (blank when on or off line) called sixty six appearing shortly after I switch on. Can anyone help? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69231
  - 11
    - Delete File A spyware program deleted all the files in the VCom directory except 5 files which have spyware attached These 5 files I need to delete but can not find a way. The VCom was for my Firewall and Virus detection Tag: NT 4 trust with Windows 2003 GPOs Tag: 69219
  - 12
    - Follow up to tracking permission changes thread. I posted earlier about tracking whenever someone changes the permissions of a given object. Here's what I've done so far. I verified in the Local Security Settings that Successful and Failed is set on Local Policies | Audit Policies | Audit Policy Change and Audit Provilege Use. For a given object, in Properties | Security | Advanced | Auditing, I have the Everyone group configured for Full Control and every Successful and Failed check box is checked Yes, I know what I did generates a lot of log entries. I've opened it up because I've never seen a log entry for a permission change work before. So to test I go to c:\temp and verify the above settings are propagated to that folder. Inside c:\temp there is a file called test.txt. I verified the settings have propagated to that file. I then logoff, logon as a different user, and then change permissions, change ownership, modify existing permissions, add and remove groups and users, and then logoff. When I log back on as an administrator to read the security log, there is not one log entry that says anywhere in the description that something associated with c:\temp\test.txt got changed. Any suggestions/help is greatly appreciated!!! Tag: NT 4 trust with Windows 2003 GPOs Tag: 69215
  - 13
    - Track Remote Desktop Connections? We have Windows 2000 servers that can be accessed with proper admin password through Win XP Remote Desktop Connection on client computers. Only users that have the password can log in remotely, however is there anyway to track or tell if a remote connection is made? Does the server (Windows 2000) log this type of connection in the Event Viewer anywhere, or anywhere else? Thanks for your help! -Joe Tag: NT 4 trust with Windows 2003 GPOs Tag: 69211
  - 14
    - i have been hacked Hi im from colombia, i have a very bgi problem , my count was hacked..i think that they did it trough a keylogger i need the information that i have in my count, someone can help me? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69208
  - 15
    - i have been hacked Hi im from colombia, i have a very bgi problem , my count was hacked..i think that they did it trough a keylogger i need the information that i have in my count, someone can help me? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69207
  - 16
    - Creating a registration authority for Windows Server 2003 How do you create an RA in a DMZ on a non domain computer to send certificate requests to an internal issuing enterprise CA? Thanks, RJ Tag: NT 4 trust with Windows 2003 GPOs Tag: 69205
  - 17
    - [?]Secpol.msc How do I use Secpol.msc IP Security Policies To Deny Bad Blocks which I specify As well as filter/forward/deny certian ports? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69203
  - 18
    - change password every 90 days How do you create a setting to change user passwords every 90 days on certain Organizational groups? Can someone tell me where to click on a Windows 2003 Server Standard. I am looking for step by step instructions. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69195
  - 19
    - Are Multi-Function Printers a Security Risk? Some of my users work as veteranâ??s advocates within Veterans Administration offices across the country. As such they are guests on the VA's network subject to there rules and guidelines. Recently I was informed that they are not allowed to use Multi-Function Printers due to a security risk. They are saying that someone can dial into the MFP Fax, access the attached PC through the printer interface and thus gain access to the network. This sounds a bit far fetched to me. Is this a real possibility? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69194
  - 20
    - VSS Project Security Is there any way to get a report from vss showing access by project and download it into an external file. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69193
  - 21
    - Encrypt UsernameToken using WS-Policy (WSE 2.0) Hi , How to Encrypt a UsernameToken using WS-Policy. I was able to do that using Code as : SecurityToken token = new UsernameToken(t_username.Text, > t_password.Text, > PasswordOption.SendPlainText); > > > SecurityToken issuerToken = GetServerTokenForEncryption(); > > > // Sign the security token request. > client.RequestSoapContext.Security.Elements.Add( new EncryptedData( > issuerToken, string.Format("#{0}",token.Id )) ); > But how to do the same using Policy. Thanks in Adv. Ravi Dasari Tag: NT 4 trust with Windows 2003 GPOs Tag: 69189
  - 22
    - Startup Accounts Using NIS 2004 in XP/SP2. Does creating a restricted account and designating it the startup account provide any internet security or is it simply to deal with multiple users ? I am the only user on the computer. TIA. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69183
  - 23
    - Service Pack 2 I am being told by my Service Provider not to install SP2. I am told that it has a lot of problems. From reading about it I think that it has some good features but I'm concerned that if I install it I wont be able to connect to the net. Any comments, I appreciated any experienced in this matter. sam Tag: NT 4 trust with Windows 2003 GPOs Tag: 69174
  - 24
    - perfect keylogger bkp.exe this program have the posibility of inserted in any program, sending via smpt information. search this files : bkp.exe bpk.dat norton don`t detect this keylooger ms antispyware beta1 dont detect solucion this problem Tag: NT 4 trust with Windows 2003 GPOs Tag: 69171
  - 25
    - FTP access, Userlogin access denied We have an FTP server that users can no longer login to. Also, users within the network are not able to login to the computer with the local policy. The errors give are: "Local policy of sysem does not permit you to login interactively" trying to login to the server with a username and "Could not login to the FTP server with the username and password specified". What is causing this login problem? Local Policy Setting? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69166
- Next
  - 1
    - OWA Exploit http://www.securiteam.com/windowsntfocus/5EP0E20F6C.html Anyone have a fix for this? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69165
  - 2
    - Uninstall z-ball 1 I don't really know where to turn for help on this...I've "googled" but to no avail! One of our (former!!) staff downloaded a lot of "junk" onto his PC, which I have spent a lot of time trying to get rid of. I'm down to one item...apparently a game called z-ball 1.80f. I tried to uninstall it using the add/remove programs in control panel, but it says I don't have access to z-ball\unins000.exe. I can't find such an item on either his hard drive or his network folder. Has anyone ever heard of this and have any idea as to how to get rid of it? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69153
  - 3
    - How to disable BHO under winxp sp2? I remember that somebody here said that SP2 will allow us to disable BHOs (although not directly remove them). Does someone know how(where) to acomplish this? Trust No One! Tag: NT 4 trust with Windows 2003 GPOs Tag: 69146
  - 4
    - virus i dont know how but i think i have a virus on my p.c. i found the file and also found that if i change what program the file ran on i could open the programs i wanted 2 where before i couldnt open anything...then i used bit defender to delete it now i cant open anything except explorer, IE, microsoft office, connect 2 the internet and thats all i know so far. i cant open anything through explorer or on the desktop except explorer and IE but nothing else at all opens. messenger, and of my anti-viruses nothing so if anyone can help or suggest a way to get rid of the virus would be helpful...thanks Tag: NT 4 trust with Windows 2003 GPOs Tag: 69145
  - 5
    - How to avoid router broadcast to windows clients? Hi all, Last week we had somebody at our LAN plugging an ADSL router configured with Ip address 192.168.1.1 and RIP v1 , of course the router started to broadcast it's presence ... Most if not all Workstations accepted the broadcast and took 192.168.1.1 as their GW instead of the DHCP supplied one even the one with SP2 FW .. Needless to say that it was a chaos . Is this a normal behaviour ? ( 192.168.1.1 is Not in the subnet of the Lan interface of the PC !) what can I do to avoid that in the future ? Thanks in advance for any ideas / feedbacks. Best regards, Berni Tag: NT 4 trust with Windows 2003 GPOs Tag: 69144
  - 6
    - Windows Update vs. SUS This should be an easy one. I currently use SUS for applying updates with the Severity of 'Critical'...this seems to be working fine. However, after SUS has updated the machines (and they have successfully rebooted) and I have verified that the updates have been applied by using the MBSA (identifying the SUS server as the source); if I have the machine go out to the Windows Update site, it is identifying that there are still critical updates that need to be applied. When I look at the technical aspects of one of the "missing" critical updates - the severity is "important" not critical. Example:MS04-041 (885836) The technical site for this update shows that it has a Maximum Severity Rating of "Important".....But, when Windows Update performs a scan for updates - the 885836 is showing as "critical". Can someone clairify this for me please? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69138
  - 7
    - Logon Scripts with Windows Firewall I have just installed 10 new Windows XP Workstations with Service Pack 2 replacing older ones running Windows 98 Second Edition. The Server is running Windows Server 2000. When logging onto the Domain with the new workstations, the logon script (defined in the users profile) do not execute. After doing some initial troubleshooting, I discovered if the Windows Firewall was disable the logon script worked. The logon script is a batch file. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69125
  - 8
    - Network security. I am part of a smaller network (25 or so). It is my understanding that i am not supposed to give out my log-on password to anyone. This keeps my PC secure. This is why the password tab on the server for me comes up with astricks. If they want into my PC they (the administrator of the network) should have the local password for my PC. Is this right or should I give up my password? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69117
  - 9
    - windows explorer runs spontaniuosly in backround killing my memory Hi all Is any one familiar with this phenomena?? On windows start up (windowsXP professional sp1), windows explorer exe (explorer.exe) start's up as well. It run's on the back ground consuming growing amount of memory. After killing it's process through task manager task bar is immediatly gone... but i am able to continue working with applications that were already runing. Any idea what's going on or how shell i handle this? Thanks in advance Rea Tag: NT 4 trust with Windows 2003 GPOs Tag: 69111
  - 10
    - Anti virus software? I keep hearing on the radio and other places that without anti-virus software (PC-cillin, Norton, or some other) a PC computer connected to the internet will get a virus within a couple minutes. I've been using the internet for several years now with no virus protection and haven't detected any viruses on my Windows 95 system. Is it possible the new viruses today will not run on an old Win 95 setup and I don't have to worry about it, or should I install a firewall and anti-virus software for added protection. How would I know if a virus is on my system? Everything seems to work ok. -Bill Tag: NT 4 trust with Windows 2003 GPOs Tag: 69105
  - 11
    - smileycentral spyware via 'good luck' email? I recently forwarded a 'funny' email from a relative. When I opened it, I was hit with the MSIE notification I was about to visit a secure website. Since there is no way to say "NO!" to this notification, I forced Outlook to close via Task Manager. I later saved the message as a msg file and inspected the HTML part. It was a 'pass it on and have good luck' message filled with references to smileycentral.com, both to web pages and .gif files. But none of these addresses were HTTPS. The only thing I can figure is that one of the image files was being redirected to a secure site. What would be the purpose of this? Is there a vulnerability in Outlook 2000/MSIE that would allow smileycentral to install spyware via such an email? thanks, nf Tag: NT 4 trust with Windows 2003 GPOs Tag: 69102
  - 12
    - software to remove IE toolbar or BHO? My IE have too many toolbars installed. It's slowdown my system and IE, there is any way to get rid of this toolbars or BHOs? Thanks in advance! Tag: NT 4 trust with Windows 2003 GPOs Tag: 69101
  - 13
    - Avast 4 Home Anti-virus Hi, I de-installed my Norton 2003 and installed Avast 4 Home instead, however, it messed up my settings for emails and internet. I could no longer get my messages and when I was trying to open Internet explorer, I was getting that page where it says that the page is missing. I received the keys from Avast and have 60 days to register Avast. My question is if I register it and get updates, is it going to mess up my emails and internet settings? I had to call my ISP to help me in solving the problem and spent over 45 minutes. So I don't feel like going through this again. Let me know your comments. I have the following software installed: Windows 98 Outlook Express Internet Explorer Avast 4 Zone Alarm Ad-aware Spybot- Search & Destroy Thanks, Christie Tag: NT 4 trust with Windows 2003 GPOs Tag: 69096
  - 14
    - Remote Desktop secure I have to administer my bussines servers from home. I always use a vpn for it. My question is: is remote desktop only (without vpn) as secure provided that high secure policy is used? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69094
  - 15
    - antispyware hi, i need an antispyware prog. wich is the best, most effective, freeware aswell? thanks senti Tag: NT 4 trust with Windows 2003 GPOs Tag: 69087
  - 16
    - outlook user/password in clear I notice that when I use my outlook 2000 sp1 with XP I can see the user name and password in the clear as it goes to the SBC sever they say it is a M/S problem or I have a password cracker allowing it to go out that way. Well I know I have no cracker sw. fresh install. Is this the way outlook normally sends out user/password or maybe Iam missing a setting. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69082
  - 17
    - Repeatedly rcvg update KB837009 Outlook Express 6 Over the past several months, I'v received the Cumulative Security Update for Outlook Express 6 Service Pack KB837009 over and over. I've apparently downloaded it successfully numerous times, but it keeps coming every few days. I'm running Window 98 SE on a Pentium II. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69080
  - 18
    - explorer redirects to google and eventually disconnects from inter Using Windows XP. Anti-spyware does not detect any problems, nor does virus software, yet internet explorer 6 consistently attempts to redirect to google or other web sites, and eventually terminates connection to the internet (cable connection). I have to reboot the computer every time to get back to the internet. 15 or 20 minutes later, it happens again. Any suggestions? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69067
  - 19
    - connecting to another server Hi, I've recently taken over the network at our business and I'm flying by the seat of my pants on how to do some of the networking tasks and such. We connect remotely to an afp server to upload files for printing. For some reason that I can't determine, the service is not working properly. I recently (within the last month) ran windows update on one of our two servers (both of which are runing windows server 2003 standard edition). Is this affecting a firewall somehow? If so, where are the firewall settings located so at the very least I can turn it off long enough to transfer, then turn it back on? Additionally, if there is a way to list set locations on a safe list, I would like to be able to do that so in the future we do not have this problem If it makes any difference, the computer I'm trying to transfer from is a Mac. Something else I noticed that I'm not sure may or may not affect the operation of our system is that one server shows updates on automatic updates and the other doesn't. Should the two be running on the same service pack updates for the optimum compatibility? Any help would be appreciated. Thanks, Jessica Tag: NT 4 trust with Windows 2003 GPOs Tag: 69059
  - 20
    - Deleting Unwanted Programs HELP...Please. When I go to the add or remove area of my Control Panel to remove three unwanted programs that are listed there (Shopping Wizard, Search Extender, and Home Search Assistent), I am directed to a website with mis-spelled words and it will not un-install these programs. Please help! I don't know how to get these off of my computer. Thanks in advance! -- Star Tag: NT 4 trust with Windows 2003 GPOs Tag: 69053
  - 21
    - Complex Password policy doesn't set under the CP Applet..works fine from MMC has anyone else come across this? Standalone W2k Pro computer. Local Policy is set to ENFORCE STRONG PASSWORDS. It will restrict blank passwords in the MMC, but if you use the user and password applet under the control panel it doesn't restrict it. Any ideas? Thanks awonders-at-aharinc.-dot-.com Tag: NT 4 trust with Windows 2003 GPOs Tag: 69052
  - 22
    - Requesting a Certificate with Mutilple Common Names How do I request a certificate with multiple CNs using IIS certificate request wizard? The CA is a sub-ordinate root CA running Microsoft Certificate Server which is bundled with Server 2003 Std. Edition Tag: NT 4 trust with Windows 2003 GPOs Tag: 69048
  - 23
    - File access auditing fills security log too fast I am attempting to enable file and application auditing to meet HIPAA compliance. The issue I am having is the security log fills up way to fast, eventually locking out all but administrators from logging on. I know I can disable this, but I would rather just audit when the file or app was accessed and by whom. I have been experimenting with the auditing settings, but no matter what I do, even opening one folder creates 10 security items in the event log. Does anyone have any tips on how to narrow down what is entered into the event log? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69047
  - 24
    - CRL is unavailable or expired on any VALID S/MIME Signature is there any solution out there? I still get this error message on outlook XP on W2k (clicking S/MIME Signature Propeties)... something like ... http://support.microsoft.com/?kbid=284977 any idea how to fix this ? configuration error? Tag: NT 4 trust with Windows 2003 GPOs Tag: 69044
  - 25
    - EFS -- Encrypting File System -- File recovery on another computer I cannot find a web page that shows how to recover EFS encrypted files on another computer. Tag: NT 4 trust with Windows 2003 GPOs Tag: 69040

I am trying to lock down a 2003 domain with Microsoftâ??s High Security or
Enterprise Client templates. The domain needs to support a trust to a legacy
NT4 domain and Exchange 2003. I canâ??t seem to find any documentation
anywhere that informs me what are the â??MUST HAVEâ?? settings to support the NT4
trust and/or Exchange 2003. On the Exchange side I had problems with LDAP
authentication with the System Attendant starting services on the Exchange
server. If anyone has any suggestions I would love to hear them.

Re: NT 4 trust with Windows 2003 GPOs by S

S
Thu Mar 24 18:35:25 CST 2005

There's no documentation that covers specifics of 2003-NT trust
relationship, but the utilities like Netdom and Nltest (from the Windows
200/2003 Support Tools) support NTLM trusts - you can verify and reset the
trust, enable debugging etc.

Also, it would be good to enable logon audit and take a look at the event
logs for events that may be relevant to the problem. As for the System
Attendant problem - the service most certainly logs sufficient amount of
information. You may wish to post description of the problm and events to
Exchange grous.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"JCGGRAF" <JCGGRAF@discussions.microsoft.com> wrote in message
news:58778C09-1A9C-4ECE-8A6E-88A6BB65C2AE@microsoft.com...
> I am trying to lock down a 2003 domain with Microsoft's High Security or
> Enterprise Client templates. The domain needs to support a trust to a
legacy
> NT4 domain and Exchange 2003. I can't seem to find any documentation
> anywhere that informs me what are the "MUST HAVE" settings to support the
NT4
> trust and/or Exchange 2003. On the Exchange side I had problems with LDAP
> authentication with the System Attendant starting services on the Exchange
> server. If anyone has any suggestions I would love to hear them.
>
>