802.1x wired , and logon script

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Norton Antivirus & Windows Security Center Open NAV2007. On the norton protection center window above Basic PC Security click OPTIONS. On the Norton Protection Center Options window select General Settings Under Windows Security Center alert settings check the box. Show messages from Windows Security Center. Click ok. Close NAV Then open Security Center it should be working as normal. Hope This was helpful Kev136 Tag: 802.1x wired , and logon script Tag: 96613
  - 2
    - part II how to start stop service without the password sorry that a simliar queustion may have answered before. this has a new twist. :) I have a domain user account started a service. For reason unknown, Local admin can't restart it, or starting it after it was stopped. only one domain user have to start it using the password of the domain user. how can I have it so all users belonging to the group local admin can start stop the service without the password of that domain user. here is the currently output from accesschk. thanks. C:\>accesschk "DomainName\user1" -vc MSSQLSERVER AccessChk v4.02 - Check access of files, keys, objects, processes or services Copyright (C) 2006-2007 Mark Russinovich Sysinternals - www.sysinternals.com RW MSSQLSERVER SERVICE_ALL_ACCESS -- ps: the reply button on my browser doesn't work. Tag: 802.1x wired , and logon script Tag: 96612
  - 3
    - Creating Certificate for a wireless projector I am trying to deploy wireless projectors using certificates. I currently have 2K3 R2 servers using PKI and Radius. I currently use AD to autoenroll computers so that they can connect via our Cisco Aironet 1100 series AP's. I am wondering if there is a specific certificate template I need to modify so that I can use the web request to generate and then install via a thumb drive? Any help is greatly appreciated! Tag: 802.1x wired , and logon script Tag: 96611
  - 4
    - revoring data Hello frnds, my os corrupted so I some steps to recover but cant . But finally when I installed Xp I found that my 40gb harddisk (3 partition )have combined to one C partition itself and all my data has been deleted . Is there any way that I can recover my data pls help . Tag: 802.1x wired , and logon script Tag: 96608
  - 5
    - Modifying permissions with XCACLS.vbs Hello, I have a question about running XCACLS.vbs. I'm trying to change folder permissions but I'm not using the built-in security groups - I want to use domain groups; specifically domain admins and domain users. I read online that if one uses SID# in place if a group name then that should work. I call XCACLS. from a batch file. A sample of my existing (and currently working as expected) file looks like this: cscript xcacls.vbs "C:\WINDOWS\regedit.exe" /G Administrators:F cscript xcacls.vbs "C:\WINDOWS\regedit.exe" /E /G SYSTEM:F Additionally, I read that the domain SID can be found in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \ProfileList. I also read the SIDs for domain admins and domain users are: SID: S-1-5-domain-512 Name: Domain Admins SID: S-1-5-domain-513 Name: Domain Users So, armed with this information I took the two lines above and tried to do this: cscript xcacls.vbs "C:\Temp" /G SID#S-1-5-21-131504274-120818031-269197707-1108-512:F cscript xcacls.vbs "C:\Temp" /E /G SID#S-1-5-21-131504274-120818031-269197707-1108-513:F It didn't work. While I didn't get a script engine error or anything, when I checked the permissions on that folder, all the entries were gone - it was a blank display. How can I modify the permissions to use domain admins and users? Suggestions are greatly appreciated. Thanks! Tag: 802.1x wired , and logon script Tag: 96604
  - 6
    - Trojan.Mailskinner.C ??? Hi all, I have just finished a scan of my system with bitdefender security suite 2008 and the results were that i have a Trojan.Mailskinner.C and also 2 Adware.NaviPromo.BYC, bitdefender can't get rid of them because it says they are part of an archive. The only thing i know that might have got rid of them was to scan in safe mode and delete from there but defender won't let me do that. I don't know how to delete manually so if anyone can give me step by step instructions i would be so very thankfull, many thanks in advance Tag: 802.1x wired , and logon script Tag: 96600
  - 7
    - i think ive been hacked maybe ???? -- yep its me Tag: 802.1x wired , and logon script Tag: 96596
  - 8
    - MSI vs Windows Vista Home Hello everyone! I try to install an application (Windows Installer), the wizard Installation opens smoothly, but when you start copying Files to disk bypasses the following error: "The system administrator has set policies to prevent this installation" What could be the problem? I have Windows Vista Home Edition and i'm the 'Administrator'! Since already many thanks! Gustavo Arriola Tag: 802.1x wired , and logon script Tag: 96595
  - 9
    - PLEASE help me determine if I've got issues; I've done everything I know how to do! This is long, but I want to give as much info and what I've done to try and tackle this myself as possible. I really need some help at this point, so I hope someone out there has the time and can provide some much needed and much appreciated assistance/advice, etc. I work at a pretty low-tech place with 8 PC's, all running XP, using comcast's cable internet service, with file sharing set up so all users can access a shared folder on one of the PC's. No user or group policies are set up. All PC's use TrendMicro's pay service, we havy a Linksys router, and I periodically run Spybot and a few other favorite virus/trojan/bad stuff finders on all the PCS' (but TrenMicro is the only thing running 24/7). There's also one NetGear wireless access point for an in-office laptop (it requires a web key to log into the network) We use a webmail software located on our dedicated server at a hosting company (where our website is) to do email; the web server at the hosting company is also the email server. Currently it's using SmarterMail (which is apprently a pretty popular partnered email software with hosting companies). So users use a web browser to log into their email, which is housed on the dedicated server. We've had some emails sent to yahoo email addreses come back with a rejection notice due to yahoo user complaints about spam (not the users the email was sent to, just users in general, apparnetly), and we've also had undeliverable mail come back looking as if we sent it but we know we didn't (there's spammy stuff in it). Also, Comcast recently disallowed all outgoing traffic from our public IP (the router) that was looking for port 25, because they said they saw a lot of spammy-looking traffic leaving our router as well. Since it seemed like we had a real issue going on, I followed all the directions SmarterMail has to make sure SMTP requires authentication, etc., all the steps to minimize possible hijacking and whatever. I used a few of these online websites where you put in the IP address of the mail server and it sees if it looks like an open relay, and they all reported negative. I had everyone change their passwords to relatively strong ones for logging in t our mail server. The problem seemed to remain. Then I turned on the outgoing log on the Linksys router. About every ten seconds I see a couple outgoing packets going to the same IP but with a different last number, then after about ten of those it goes to another series of IP's with differnet last number. For instance, I'd see outgoing to: 64.86.95.6 64.86.95.7 64.86.95.8 64.86.95.27 64.86.95.27 64.86.95.10 64.86.95.26 64.86.95.10 64.86.95.10 then there are bunch that are ("myserver" used instead of my actual web server) smtp.myserver.com smtp.myserver.com smtp.myserver.com Some of these come from my own box's internal local IP, some come from the other internal local IP's. So, unless these are legitimate (like Windows update doing checks, trend micro doing checks, etc.), it appears I actually DO have something sending out IP traffic from inside. I looked up some of these IP's, and the most numerous batch of outging IP's (starting with 64.86.95) show up as belonging to: Teleglobe Inc. TELEGLOBE (NET-64-86-0-0-1) 64.86.0.0 - 64.86.255.255 Akamai Technologies AKAMAI-TGB (NET-64-86-95-0-1) 64.86.95.0 - 64.86.95.255 I found one (and one only) reference to this IP and this company on the web, where someone else was wondering about it, and it seemed like the assumption was it was a place doing stuff for Microsoft's Windows update. But when I turn off update, I still these outgoing traffic items in the Linksys log. I feel as if I've done everyhting I can and/or know how to do, so can anyone out there tell me a good solid way to see if I have some kind of SpamBot on our side of the router, or if someone has hacked our email server externally? The problem's getting worse, it seems, and I don't know what I can do when none of the popular security softwares find anything, but comcast and yahoo and our inbox full of undeliverablre messages looking like they were sent by us are pointing to us having a serious issue. Please help, we rely on our ability to send emails to subscribers, and they're getting rejected due to "user complaints", and we can't afford to be blacklisted (and yes, we only send to subscribers, we follow all te opt-in and opt-out stuff, and are very consciensious about keeping our mailing list clean. Please help! Your time and assitance would be GREATLY appreciated. And thanks for reading. Tag: 802.1x wired , and logon script Tag: 96594
  - 10
    - requesting a certificate in Vista. Hi there, When requesting a certificate in Vista, if you choose to create a custom request (not going to use a template) and go to the "details" area, there are different areas to go through. The first is Subject. For subject name and alternative name, there are alot of choices. Is what you pick influenced by what the policy and CPS of the receiving CA says it needs from you? Meaning, the CA's policies dictate what you should pick in order to get a certificate from that CA. And all CAs can differ? Same thing for the Extensions tab? Thanks! Kristin Tag: 802.1x wired , and logon script Tag: 96591
  - 11
    - Script to list member of Local Admin Group I am looking for a VB Script to list member of local admin group for my servers in my domain. Example Domain=contoso Server OU=Servers ServerA, Server B ...................... I want to list member of local admin for all the servers. Thx, MA Tag: 802.1x wired , and logon script Tag: 96590
  - 12
    - icacls misreports BUILTIN\Users:(RX) on C:\ On a number of W2003 servers here, if I do icacls C:\ I get... C:\ BUILTIN\Administrators:(F) BUILTIN\Administrators:(OI)(CI)(IO)(F) NT AUTHORITY\SYSTEM:(F) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) CREATOR OWNER:(OI)(CI)(IO)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) BUILTIN\Users:(CI)(AD) BUILTIN\Users:(CI)(IO)(WD) Everyone:(RX) The ACE BUILTIN\Users:(RX) is wrong! It *behaves* and indeed appears in the graphical DACL editing tool in Explorer (Properties -> Security-> Advanced) as if it were BUILTIN\Users:(CI)(OI)(RX) (That is to say it does get inherited by objects and containers). If I edit that ACE in Explorer - but save it without making any *visible* change then it subsequently appears correctly in ICACLS. Tag: 802.1x wired , and logon script Tag: 96587
  - 13
    - certificate import Wizard on Vista not working: I have Vista client PCs in a workgroup. I am logged into them as Administrator. When I try to import a certificate by doubleclicking on the CA certificate I want to import (I put it on the desktop or the C drive or whereever) and using the import Wizard, the import says it is successful but does not actually do anything. The same thing happens if I try to import any certificate from the web enrollment website of the CA (CA is standalone). I have noticed that when this does NOT work, in the "Completing the Certificate Import Wizard" window, it shows the Certificate Store Specified, the Content, and the File Name. THE FILENAME IS BLANK. The only time this does work is if I go to the certificate store, right click and start the Import Wizard from there. Then the import really does work and the File Name area actually shows the certificate file location (c:\users...\certifcate.cer) Anyone else run into this? Is there something I need to do in Vista to make this work right? Thanks! Kristin Tag: 802.1x wired , and logon script Tag: 96577
  - 14
    - CMAK and certificate. Hello! I have a big problem with CMAK and my personal certificate. One month ago my certificate named xxx expired. I used it to make VPN connection with server. No I have yyy certificate. When i try to use CMAK to make connection, after five blinding windows with "Accessing SmartCard" I'm getting "Key does not exist." error message. In CMAK log i see, that CMAK is trying to use xxx certificate! I don't have it in any container. I looked in user certificates, local machine certificates.... Without result.... I have my certificate installed in personal/certificates container under current user. Under local computer personal/certificates i have my machine certificate. Trusted root certification contains my CA cert. 1) Why CMAK see certificate, that does not exist? 2) How to force CMAK to work correctly with my certificate? Regards Leszek Tag: 802.1x wired , and logon script Tag: 96575
  - 15
    - info on the National Information Security Group (NAISG) + an invitation To all, I am pleased to announce the opening of three new chapters of the National Information Security Group (NAISG, http://www.naisg.org). These include the New York City, Silicon Valley and Washington, DC chapters, which will complement the founding New England chapter (Boston, MA). NAISG membership is open to anyone that is interested in IT/security administration, including pros, consumers, managers/executives, law enforcement personnel (local police and FBI regularly attend the meetings), educators, students and more. We never charge for membership; you only need to sign up at our Web site to become a member. We currently have more than 1,000 members in our ranks. In addition to our monthly chapter meetings, we have an email-based Security TechTips list that includes members from around the world. You can sign up for this at http://www.naisg.org. If any of you are in the New York City area this coming Monday (February 11), please check out the meeting details at http://nyc.naisg.org. The topic will be "Cyber Surveillance and Employee Monitoring - What Techniques Are Available, Should We Even Use Them and What Are Employer/Employee Rights?" The meeting will be held at the Microsoft office in midtown Manhattan. Yours, Brad ___________________________________________________________________ Bradley J. Dinerman, MVP - Identity & Access (Enterprise Security) President, National Information Security Group http://www.naisg.org Tag: 802.1x wired , and logon script Tag: 96571
  - 16
    - Removing Delux Communications Spy Wear Need help. Trying to get a good reference to remove Deluxe Communications ADware from my Windows Xp system. Thanks Tag: 802.1x wired , and logon script Tag: 96567
  - 17
    - exporting certifcates from Certificate services in PEM format Can anyone direct me to an article etc that confirms that I cannot export a certifcate from Certificate services in PEM format? Thanks. Tag: 802.1x wired , and logon script Tag: 96566
  - 18
    - Certificate store question Hi Folks, Does anyone know the earliest versions of windows client and server OS that had a certificate store? Thanks! Kristin Tag: 802.1x wired , and logon script Tag: 96565
  - 19
    - ACL To Create and Modify Only New Files? What ACL on NTFS will give a group Read-Only access to files currently in the folder, but the ability to create and modify and delete new files in the folder? I have a badly behaved program that wants to write its TEMP files into its program installation folder. I would like to avoid the more permission Modify permission to the users of the application on all files in the folder including the application's binaries. One solution appears to be to give files currently in the folder the desired ACL and then break inheritance. Then give Modify access to the folder and all children. That isn't my first choice since later updates to the application will probably install new binaries, and this approach leaves those installed with Modify access inherited from the folder. -- Will Tag: 802.1x wired , and logon script Tag: 96561
  - 20
    - Computer Info Compromised? Hi: I have a friend who had some old letters of one of his kin in a .doc file in his My Documents folder in his computer. The letters were enough to have formed a book about the 1800's written by this kin. He Googled the letters info and found some data applicable these letters which he has never shared with anyone. Also the .doc file string is exactly as that in his computer. In fact, he has found a copy of these letters for sale on the internet and the seller appears to be from the same area of the state where he lives if not the same city. His name is referenced in as the author of these letters. So my question is how did someone acquire this data from his computer, as apparently his computer has been compromised. It would appear to me that it had to happen in one or two scenario's. First someone somehow accessed his computer through the internet or second when he had taken his computer to a shop for repair. Since it appears that the seller is from the same area of state as he is, then my first inclination would be that this info was taken from his computer during a repair. I just really have don't have the expertise in this area to try and make a good determination. If anyone has any comments, suggestions, and/or recommendations as to how all this could have happened I would be most appreciative to read them. I apologize if I have posted this in the wrong newsgroups. Thanks Tag: 802.1x wired , and logon script Tag: 96528
  - 21
    - standalone CA - cannot use browser to install certs Hi there. I have a test lab running - it looks like this: IPSECCA1 = the Root CA, standalone, in a workgroup called WORKGROUP IPSECCPC1 and IPSECPC2 vista clients, in WORKGROUP IPSECCA1 is a root CA, running 2008 AD CS, standalone, with web enrollment installed. I can request certs, and then go to the cert authority on IPSECCA1, and issue the certs. Then my clients go to the website, and download the certs, and click the install button. They say they get installed but they do not. I have to download them to the local machine and double click them to install them. I have noticed that the file location is missing when it does not work using the web site to install the cert. Anyone have an idea on why this is not working quite right? Thanks! Kristin Tag: 802.1x wired , and logon script Tag: 96525
  - 22
    - 2008 Trend Micro Internet Security is NOT is compatible with Windows 2008 Trend Micro Internet Security is NOT is compatible with Windows Vista SP1 and Windows XP SP3 I have deleted all of the old 2007 and new 2008 Trend Micro Internet Security virus software from my computer, because of the multiple alert messages, that I was having with their new 2008 upgraded software. If the Trend Micro Personal Firewall and the Unauthorized Changes Prevention features main components do not work with the new service packs from Microsoft, why are they still selling this non-working software to the public? Also, I don't want to wait until sometime in February 2008, for them to released a "working" version of their Trend Micro Internet Security, that is compatible with Windows Vista SP1 and Windows XP SP3. I don't want to remove any new Microsoft service packs, or uninstall the 2008 Trend Micro program installed in my computer and re-install the PC-cillin Internet Security 2007 back into my computer, and wait again.... until the release of their new 2008 working version. I was receiving these error messages: Trend Micro Internet Security Message: Your Unauthorized Change Prevention Service has shut down. Try restarting Trend Micro Internet Security to restore Your Unauthorized Change Prevention Service. If the problem persists, please restart your computer. If you continue to receive this warning, please contact Technical Support. I keep getting this "Alert" message: "Alert Message: Trend Micro Internet Security. Unable to recognize the software configuration. Restart your computer to restore the missing information. If the problem persists, please contact technical support." I have been working on their error alert messages and replies, since 12/24/07. After eight or more emails back and forth....and multiple number of lines of their instructions, that's it!! I do not want to screw up my computer, I do not want more messages, screen shots, replies, deletes, uninstalls and then reinstalling any more files...in my computer, hard drive or registry. I asked Trend Micro, that I want a refund ($40.45) for this subscription. They replied: I am sorry to inform you, but we can no longer refund the Trend Micro program that you have purchased from us. Refund application should be requested within 30 days from the date of purchase. Refunds after 30 days are given in a case to case basis. This is after the all attempts to fix the issue failed and the case has been forwarded to the Level 2 support. Please provide us with the following so that we can forward this to the Level 2 support In order for us to have a detailed picture of the problem, please include in your reply, screen shot(s) of the message(s)/ notification(s). Continued.....more@#$%^& ---------------------------------------------------------------------------------------------------------------- Product: Trend Micro Internet Security - 2008, Trend Micro Internet Security Pro - 2008, Trend Micro AntiVirus plus AntiSpyware - 2008 Operating System: Windows XP - SP2, Windows Vista Published:12/20/07 1:38 PM Solution: This error will appear if you have installed the 16.05 version of Trend Micro Internet Security Pro, Trend Micro Internet Security and Trend Micro AntiVirus plus AntiSpyware 2008 on a computer running Windows Vista with Service Pack 1 or Window XP with Service Pack 3. The Trend Micro Personal Firewall and the Unauthorized Changes Prevention features main components do not work with the new service packs from Microsoft. A working version of Trend Micro Internet Security Pro, Trend Micro Internet Security and Trend Micro AntiVirus plus AntiSpyware 2008 with Windows Vista SP1 and Windows XP SP3 would be released sometime in February 2008. The release would be timed before Microsoft uploads the new service packs in their automatic update servers for Windows. To prevent this message from appearing, follow the steps indicated below: a.Check the program version of the Trend Micro program installed on your computer. b.If you are using version 16.05 and you want to continue using this latest version of the Trend Micro program, you must uninstall the non- working service pack from Microsoft. c.If you do not want to remove the new Microsoft service packs, Trend Micro suggests that you uninstall the Trend Micro program installed in your computer and install PC-cillin Internet Security 2007 until the release of the working version. source: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1036680&id=EN-1036680 -------------------------------------------------------------------------------------------------------------------- Tag: 802.1x wired , and logon script Tag: 96522
  - 23
    - Permissions on XP Security tab grayed out I have a department share, where the director is suppose to have Full access to the share and subfolders. The share is on a Windows server 2003 SP2. The computer the uses is XP Pro with SP2. Share rights are set at Change. NTFS rights for the director are set to Full Control . the problem Iâ??m having is this: When the director whishes to change permissions on subfolders or documents, both the add and remove button are grayed out. The director canâ??t change any of the permissions for the existing users. -- Thank You! Tag: 802.1x wired , and logon script Tag: 96519
  - 24
    - AD CS 08 - Installation UI question: Hi, Whe I go to install a stand-alone CA, before you get to the screen where you pick standalone or enterprise CA, the screen before it give you choices to install CA, Web Enrollment, Online Responder, or NDES. Iknow that web enrollment works with a standalone CA, and NDES cannot be installed (it wont let you), but what about Online Responder? Is it ok to put an Online Responder on a standalone CA? How would the two work together? Thanks, Kristin Tag: 802.1x wired , and logon script Tag: 96517
  - 25
    - who does a PKI audit? Who deems the need for a PKI audit and who would actually do this audit? Is this enforced by law? Thanks, Kristin Tag: 802.1x wired , and logon script Tag: 96515
- Next
  - 1
    - Access computer from the network Windows Server 2003 standalone, no AD. Two local accounts in use: Administrator and Lab. Both are members of Administrators group, both have passwords. Can log in with either user at the server console. Using an application that requires shared directory. Shared the directory from the server end, applied appropriate permissions for both users: Allow | Full Control. Try to browse to server, get error message: your user does not have rights to log in (I'm paraphrasing - it's error 1385, I believe). Went to Administrative Tools | Local Security Settings | Access this computer from the network. Sure enough: zero entries in the list. So I "add user or group" and add Administrator and Lab to the list. Click ok, go to a student workstation, no problem, I can browse to the shared folder. I run the install, go to the next workstation, get the same error. Go back to the server console, Administrative Tools | Local Security Settings | Access this computer from the network, no entries in the list. Very sure that I have already done this, I add Administrator and Lab to the list. This goes back and forth. Access from the network lasts anywhere from a few minutes to as much as a day. This makes no sense to me and I'm not finding anything in the KB...any help? Thanks, tony Tag: 802.1x wired , and logon script Tag: 96514
  - 2
    - What is the file rbsolnUpdate.exe for? Hi, I had a firewall alert on 2 files: rbSolnUpdate.exe and rbSolnUpdateENU.2.5.0.exe. I haven't been able to find out anything on these files. They were located in the ...\Local Settings\Temp folder. Now they are gone but I have a file named RBSOLNUPDATEENU.2.5.0.EXE-3648439D.pf in the Windows\Prefetch folder. Does anyone know what these files are for and if they are safe files? thanks TP Tag: 802.1x wired , and logon script Tag: 96511
  - 3
    - Can smartcard for logon be disabled? Does anyone know how to disable the requirement for logging on with a smartcard? When the computer is outside of a domain, a user can lock the computer and a smartcard placed on an attached reader is ignored. If the machine joins a domain, when a user locks the computer, a smartcard placed on the smartcard reader will initiate an attempt to logon with that smartcard. I dont want that to happen. I dont want to use the smartcard for logging on. The problem occurs even if the user is logging on with a local username. I want to be able to access the smartcard from my software while the machine is locked. When I attempt to program the card with the logon message displayed, I cant get access to the smartcard and it appears to break the logon procedure as well. The machine constantly displays "The card supplied requires drivers that are not present on the system. Try another card". Once in this condition where I attempted to access the card from my software, removing the card does nothing, the message is constantly re-displayed, there appears to be no out for this problem other than shutting down the computer. I've changed the local policy to not require a smartcard. That did not help. There is no defintion within the group policy for this option, so my local policy should still be in effect. The current platform is WinXP be must also function on Win 2000 and Win 2003. Do I have to write a custom gina??? -- Steve G Tag: 802.1x wired , and logon script Tag: 96508
  - 4
    - Verisign Security Digital IDs for Office Although not listed on the Microsoft website as a provider of digital ID certificates for Office 2007 on this page: https://digitalid.verisign.com/enrollment/MS_pcmp.htm Verisign is indeed a provider. Special instructions have to be followed when requesting a certificate with Vista/IE7 which are listed on the top of the certificate enrollment page. https://digitalid.verisign.com/client/class1MS.htm Also special instructions for installing a certificate in various version of Outlook including Outlook 2007 are here: http://www.verisign.com/support/digital-id-support/page_dev029379.html Certificate costs are $20/year but you can get a 60 day free trial to try it out. The certificate allows for both: 1. Digital signing. 2. Encrypted email (the receipient of the email must have a certificate as well). The encrypted email is very important for sending secure information including credit care numbers, social security numbers, and patient medical information. Some people send secure information such as this without encryption but they should not. Tag: 802.1x wired , and logon script Tag: 96505
  - 5
    - XML Notepad silently contacting RIPE I have nVidia Active Armor firewall NIC. I am using XML 2007 to edit xml files and I was notified by the firewall it was connecting to the internet to this location: OrgName: RIPE Network Coordination Centre OrgID: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL ReferralServer: whois://whois.ripe.net:43 NetRange: 84.0.0.0 - 84.255.255.255 CIDR: 84.0.0.0/8 NetName: 84-RIPE NetHandle: NET-84-0-0-0-1 Parent: NetType: Allocated to RIPE NCC NameServer: NS-PRI.RIPE.NET NameServer: SEC1.APNIC.NET NameServer: SEC3.APNIC.NET NameServer: SUNIC.SUNET.SE NameServer: TINNIE.ARIN.NET NameServer: NS3.NIC.FR Comment: These addresses have been further assigned to users in Comment: the RIPE NCC region. Contact information can be found in Comment: the RIPE database at http://www.ripe.net/whois RegDate: 2003-11-17 Updated: 2004-03-16 Who are this people and why is XML 2007 contacting them? Tag: 802.1x wired , and logon script Tag: 96500
  - 6
    - Policy CAs: I am still not completely sure as to the functions of a Policy CA. I understand that it is an intermediate CA. And I understand the definition found on Technet (below). What I am not clear on is HOW it describes these policies and how it forces other CAs below it to abide by the rules. I have added specific questions in line below: Thanks! Kristin Policy CA definition on Technet: The role of a policy CA is to describe the policies and procedures that an organization implements to secure its PKI, the processes that validate the identity of certificate holders, and the processes that enforce the procedures that manage certificates. ---> how does it decribe the procedures? I know about the website URL for policy statements, but how does it describe the processes and procedures? What form do they take? A website with text? A template? A policy CA issues certificates only to other CAs. The CAs that receive these certificates must uphold and enforce the policies that the policy CA defined. ----> How are the chiild CAs forced to uphold and enforce the policies? It is not mandatory to use policy CAs unless different divisions, sectors, or locations of your organization require different issuance policies and procedures. However, if your organization requires different issuance policies and procedures, you must add policy CAs to the hierarchy to define each unique policy. ---> How are the policies defined? Are they done in the .inf files? What makes up the policy exactly? For example, an organization can implement one policy CA for all certificates that it issues internally to employees and another policy CA for all certificates that it issues to non-employees. Thanks, Kristin Tag: 802.1x wired , and logon script Tag: 96496
  - 7
    - Windows XP Home firewall IP Addresds exceptions list I have already asked this question on windows Help and Support forum but got very little response. I repat the question below. I wish to allow a certain scanning IP address to have access to my computer . I made various adjustments to Windows XP home firewall in the exceptions list. The scanning computer was then able to scan my computer but only once. Since then the scanning computer has unable to gain access to my computer. I have recentlly received the following from the scanning organisation. "Try looking to see if your cache contains our IP address . Also , attempt checking the logs to see on what level our IP is being blocked." What cache and what log do they mean ? I have sent an e - mail to the site concerned 7 days ago but have had no reply. -- FLYNNE Tag: 802.1x wired , and logon script Tag: 96495
  - 8
    - No firewall turned on. OS: Windows XP Media Center Edition 2005. Every time I boot my computer I get the following: "Your computer might be at risk. No firewall is turned on. Click this balloon to fix the problem". If I click on the balloon, I find out that the firewall is running. If I do not click on the Balloon, it desappears on its own accord after a few seconds. If I click on Control Panel/Windows Firewall, I find out the Firewall is running. What do I have to do to get rid of this balloon? My firewall must get activated immediately after the balloon appears. How do I fix it? Serge Tag: 802.1x wired , and logon script Tag: 96493
  - 9
    - Boycott China Olympic- Comeon! So many dogs and cats being killed and ate in China, why you still support olympic? Tag: 802.1x wired , and logon script Tag: 96492
  - 10
    - Boycott China Olympic- Comeon! So many dogs and cats being killed and ate in China, why you still support olympic? Tag: 802.1x wired , and logon script Tag: 96491
  - 11
    - Maximizing wireless security I have a Netgear WGR614 v6 wireless router which I have recently begun to use wirelessly for my wife's work laptop. There is also a desktop connected to the router via cat 6. Both machines are running XP SP2 with all updates. I have the router set as follows & want to be sure I'm doing all I can to maximize security on the network: - File sharing is OFF on both PC's - Router setup password has been changed to 14 random characters - Router updated with most recent firmware - SSID set to 13 random characters - SSID broadcast is OFF - WPA-PSK activated w/10 random character passphrase (tried a longer passphrase, but Windows Networking seemed to have trouble with it, kept defaulting to a shorter phrase). Key lifetime is the default 60 minutes. - Access control is ON with the MAC addresses for the 2 PC's being the only ones entered. We live in a fairly remote suburban area, so I don't think the threat of "wardriving" is what it might be in a more populated area, but I still want to be sure I'm doing all I can in terms of security. TIA Dan Tag: 802.1x wired , and logon script Tag: 96476
  - 12
    - Looking for feedback on public website security config In my work environment we have a vendor provided solution running on our internal network. The solution is in its own domain and there are no trust relationships to our domain. The vendor has a web application that they want to publish on the internet for a limited number of users. The web application uses IIS and is installed on their domain controller, which also hosts their application. Some of our confidential customer information is stored on this system. The vendor is trying to tell us that all we need to do to make this system secure is to install an SSL certificate and open up 80 and 443 on the firewall. The system sits inside our network and is not in a DMZ or otherwise isolated from other internal systems. The domain controller is not hardened in any way and is running IIS and SQL. Basically they want to make a domain controller into a web server and they are saying that an SSL certificate will make this a secure solution. Someone tell me if I am wrong in thinking that this sound like a bad idea. Tag: 802.1x wired , and logon script Tag: 96470
  - 13
    - Live One Care anti virus I have been having issues with my computer thinking that someones has access to my computer due to wierd actions, on and off programs without me doing anything to them. So I decided to purchase this Live One Care to fix the problems. My question is that I have uploaded to my computer and another computer with this program but My computer status bar is FAIR but the other is GOOD . why is this so? I have done evrything that the other computer has done. Is their a web site that checks for threats and easy acces to my computer. please help! Tag: 802.1x wired , and logon script Tag: 96468
  - 14
    - MS08-001 and Windows 2003 x64 R2 I know that by default that Windows Server 2003 doesn't have the Vulnerabilities in Windows TCP/IP that Could Allow Remote Code Execution. But when I go to Windows Update, I don't see the update for it. Will the update for MS08-001 not be available until I turn on or install something that uses the IGMPv3 which has the Vulnerability? TIA, Knox North Tag: 802.1x wired , and logon script Tag: 96462
  - 15
    - how to issue certificates based on the content of certificate request In a past thread, an answer to a question was to issue certificates based on the content of the certificate request, rather than using certificate templates. Can someone explain how this works? Thanks, Kristin Tag: 802.1x wired , and logon script Tag: 96461
  - 16
    - Biometric keyboards and Windows 2003 I hope I'm posting to the right ng. Please guide me if I've chosen poorly. I'm wondering if it's possible to use biometric keyboards to logon to an AD domain. We've got a Terminal Server, too, and it would be nice to be able to use the fingerprint reader to logon to it. Any thoughts, white-paper links, or suggestions are greatly appreciated. I'm hoping not to incur the cost of third-party software. -- Best regards, Jim Graue Tag: 802.1x wired , and logon script Tag: 96455
  - 17
    - iTunes security risks Hello IT guys! Please advice about security issues concerning letting users do iTunes client in a business LAN. cyber-cheers, Tag: 802.1x wired , and logon script Tag: 96453
  - 18
    - How to get Digital Certificate for Outlook 2007? Hi, I used to use a Verisign certificate for Outlook 2003 that I paid $20/year for. When I try to obtain a similar certificate for Outlook 2007 http://office.microsoft.com/en-us/marketplace/EY010504841033.aspx It offers only two providers both of which charge $360/year per person. I tried to get the versign ID to work without luck. Does anyone know of any other solution that would work and have tried it? TIA Tag: 802.1x wired , and logon script Tag: 96449
  - 19
    - Running 3rd party apps that require admin privs on Vista I've read a vague excerpt in a MCTS study guide book and have had a presenter at a MS event debuting Vista that it is possible for a standard user logged in with a standard user account to run an application that requires elevated (admin) priveleges without having the user type in the username and password of an administrator account. Both, however, were unable to give me any specifics on how to accomplish this, and my Internet searches aren't kicking back anything useful. Could someone tell me how this can be configured? I've noticed the runas administrator checkbox on an exe's properties, but all it seems to do it prompt for username and password of an admin. I've also noticed the backward compatibility options, but it seems pretty vague as to how those settings work. thanks, Bill Tag: 802.1x wired , and logon script Tag: 96448
  - 20
    - Requesting certificate via certreq.exe to remote CA The following works on the CA server but will not work from my desktop machine: certreq -submit -config "CA-MACHINE\some-ca-name" cert.req test.cer From my desktop I get the error: Certificate Request Processor: This computer was unable to communicate with the computer providing the server. 0x8000401d (-2147467235) My goal is to be able to provision a new machine with a SSL cert on a website. I believe I need to request a certificate with a common name equal to the machine name to make this work. I am also able to do all of this manually thru IIS and the Certificate Server website but I need this to be automated to be practical. It is a standalone offline CA and is not part of any domain or AD infrastructure. The CA server is Windows 2003 Server. My desktop is WinXP Pro SP2. Tag: 802.1x wired , and logon script Tag: 96445
  - 21
    - Your digital ID name cannot be found by the underlying security system Hello All, My Class 1 Verisign Digital ID expired and I purchased (or renewed?) a new digital certificate. I disabled my Norton 2008 Firewall during the installation of the VeriSign certificate and received no error messages during the installation. However, unlike in my previous installation I receive the following error message: "Your digital ID name cannot be found by the underlying security system." The VeriSign troubleshooting requires one to export the private key from within Internet Explorer and then importing it again. However, when attempting to export the private key, the box is grayed out and a note indicates that "The associated private key can not be found. Only the certificate can be exported." I am using Win XP, IE 7.0.5730.11, Outlook 2003 SP3 Any suggestions on how to resolve the problem? Thanks Tag: 802.1x wired , and logon script Tag: 96444
  - 22
    - Problem Signing Large MSI file Hi, Posted this in microsoft.public.platformsdk.security....was informed to post it here instead! I have created a large MSI database (1.32GB) using Installshield 2008 and it failed on signing the MSI. Fair enough, I thought, a bit odd, but I can sign the file myself. I ran the following cmd line: signtool sign /a /n "Blah" /d "Blah Blah" /t http://timestamp.verisign.com/scripts/timstamp.dll install.msi got the following output: Done Adding Additional Store SignTool Error: ISignedCode::Sign returned error: 0xC0000005 An unknown error has occured. Please contact your vendor for assistance. SignTool Error: An error occurred while attempting to sign: install.msi Number of errors: 1 -- Now, using the exact same command line, I have no trouble signing executables/msp's etc and a previous version of the file (at around 900 MB) signed successfully about 8 months ago. For the record, the installation runs fine. I can't seem to find any information on the interwebs, so I turn to MSDN. Can someone point me to at least a starting point to solving the problem, please? I am using Vista x64 Business with SP1RC and 2003 Server SDK R2 Thanks Tag: 802.1x wired , and logon script Tag: 96443
  - 23
    - High Availability on a CLM Managed PKI Hello, I'm trying configure a CLM infraestructure on High Availability using NLB. I have two servers with CLM and CA installed. I can manage both CA from any CLM. Now I'm trying configure NLB Cluster for the two CLMs. I can connect, and log, to both using de cluster name and see de presentation page. But when I clic in any option to manage CLM templates, for example "Manage profile templates", I get the follow error: ExcepciÃ³n interna:Mensaje:An operations error occurred. Tipo:System.Runtime.InteropServices.COMException Origen:System.DirectoryServices Seguimiento de la pila: at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_Name() at Microsoft.Clm.DS.DirEntry.BindDirectoryEntry(ProviderType providerType, String serverOrDomain, String path) at Microsoft.Clm.DS.DirEntry.OpenDirEntry(ProviderType providerType, String path) at Microsoft.Clm.DataAccess.AD.UserProfiles.GetAllUserProfiles() at Microsoft.Clm.BusinessLayer.UserProfiles.GetUserProfiles() at Microsoft.Clm.Web.ManageProfiles.LoadProfileTemplatesIntoInterface() at Microsoft.Clm.Web.ManageProfiles.Page_Load(Object sender, EventArgs e) at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) Can anybody help my? Thanks. Tag: 802.1x wired , and logon script Tag: 96442
  - 24
    - Multiple CA's? Hello, I have a enterprise root CA that is unfortuntately running on Win 2K3 Standard. This is unfortunate because I'd like to use user auto-enrollment for user certs. My question is whether or not it's possible to build another enterprise CA on Server 2K3 Enterprise and use it as the enrollment server. Would that work? Thanks, D Tag: 802.1x wired , and logon script Tag: 96436
  - 25
    - Firewall Ive read all the post regarding this Im running XP with SP2 Ive tried the suggestions posted below with no luck I get the message 'DUE TO AN UNIDENTIFIED PROBLEM, WINDOWS CANNOT DISPLAY WINDOWS FIREWALL SETTINGS' Im not running any other firewall programs. Can somone suggest anything to help Tag: 802.1x wired , and logon script Tag: 96435

I am using 802.1x for wired computer connection to domain, using AD domain
user account name and password.

When users try to logon to the domain, it aways wait for a very long
time.(about 30s and more)

And the 802.1x authentication always successed only after the desktop icons
are shown. And user domain logon script for mapping drive is failed.

How can I solved the problem??

Thanks

Top

Re: 802.1x wired , and logon script by S

S
Tue Feb 12 03:14:38 CST 2008

Try another NIC. Seriously. Simple elimination, plus - I had similar issues
a while ago.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Michael Chau" <Michael Chau@discussions.microsoft.com> wrote in message
news:6F6BF68A-1552-4978-A998-885CD16D69D2@microsoft.com...
>I am using 802.1x for wired computer connection to domain, using AD domain
> user account name and password.
>
> When users try to logon to the domain, it aways wait for a very long
> time.(about 30s and more)
>
> And the 802.1x authentication always successed only after the desktop
> icons
> are shown. And user domain logon script for mapping drive is failed.
>
> How can I solved the problem??
>
> Thanks

Top

Re: 802.1x wired , and logon script by MichaelChau

MichaelChau
Wed Feb 13 09:02:01 CST 2008

Thanks

But what if the problem exsist with different computers, different models.??

Are there any other possible causes ?

"S. Pidgorny <MVP>" wrote:

> Try another NIC. Seriously. Simple elimination, plus - I had similar issues
> a while ago.
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> "Michael Chau" <Michael Chau@discussions.microsoft.com> wrote in message
> news:6F6BF68A-1552-4978-A998-885CD16D69D2@microsoft.com...
> >I am using 802.1x for wired computer connection to domain, using AD domain
> > user account name and password.
> >
> > When users try to logon to the domain, it aways wait for a very long
> > time.(about 30s and more)
> >
> > And the 802.1x authentication always successed only after the desktop
> > icons
> > are shown. And user domain logon script for mapping drive is failed.
> >
> > How can I solved the problem??
> >
> > Thanks
>
>
>

Top