security question

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ smallbiz
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Song of the Week - July 20, 2003 Here we are -- into the 21st century -- with all this technology and advancements around. So what happens? We turn on our computers, and things work just fine one day. Then they don't work the next day. It's enough to make a grown man (or woman) cry! So, with that, let's turn to a marvelous Broadway musical, "Bye Bye Birdie", where there's a tune that asked the timeless question: "What's the matter with kids today?" or "What's the matter with programs today?" Bugs! I don't know why programs still have bugs these days! Bugs! Programs don't work, they just fail each day! Bugs! They are disobedient, disrespectful oafs! Noisy, crazy, dirty, lazy, loafers! While we're on the subject: Bugs! You can talk and talk till your face is blue! Bugs! But they still just do what they want to do! Why can't these programs work like they did in DOS --- Perfect in every way? What's the matter with programs today? Software! We buy some many versions of software these days Software! Try it! Buy it! Download it! Break it! Crash it! What, no backup? And while we're on the subject! Software! They're just impossible to control! Software! With their awful GUI screens and prompts and illogical error messages! Why can't they write code like we did What's wrong with DOS and a 286 chip? What's the matter with programs today? Tag: security question Tag: 117825
  - 2
    - No internet access through 'Backoffice Internet Access' group - help Having now successfully added XP (home) and 9.x clients to my first SBS 2000 server I cannot seem to get internet access to happen by allowing access through ISA to members of the 'BackOffice Internet Users' group. I have a single BackOffice Internet Access Protocol rule which has to be set as follows to work - protocol = all IP traffic - applies to = Any request If I set the "applies to" to 'DOMAIN\BackOffice Internet Users' and "protocol" to 'all IP traffic' clients can get HTTP access but no NNTP or POP3 access. If I try to select certain IP filters eg NNTP there seems to be no effect. I am stumped as to why this happens and I understand that with access set this way my server is not as secure as it could be. I am under the assumption that - users are members of 'BackOffice Internet Users' - internet access is granted through ISA to ''BackOffice Internet Users' - so clients should be able to access the Internet according to the IP packet filters that have been selected (in my case only all IP traffic seems to work) I have full patches applied according to hfnetchk pro4. Can anyone point me in the directions of some help? TIA Tag: security question Tag: 117820
  - 3
    - Windows Explorer - Menu bar has disappeared Dear Microsoft Friends Yet another bizarre thing? When I used Windows Explorer in SBS. The Menu bar is missing even when the window is fully expanded. How do I get it back? With much thanks & Hope Regards Jeffery Tag: security question Tag: 117817
  - 4
    - Add Client button no working SBS Personal Console Dear Microsoft Friends I have a desperate problem that has occurred with the button to add a client in the SBS Personal Console no longer works. Does anyone know how to reset this? or what does it mean? With much thanks and hope Regards Jeffery Tag: security question Tag: 117816
  - 5
    - OT: Intel Hyper-Threading and Virtual Processor This is a multi-part message in MIME format. ------=_NextPart_000_0050_01C34E9B.DDE14010 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi All: Sorry about the OT, but with the volume of posting I thought at lest = some one has experience and/or knowledge they will share. A new server with a 2.4 GHz processor has Intel's BOIS Hyper-Threading. = Even though only one physical processor is installed, the OS sees 2 = processors due to the Hyper-Threading. The second processor is a = "virtual processor". White paper from Server Vendor (IBM) claims a 40% = increase in processing speed compared to turning off the = Hyper-Threading. =20 Question is, If I later add a 2nd physical processor, will the OS then = see 4 processors, and will this 4 processors effect the OS License? = What about a 3rd or 4th processor? (The server can have up to 4 = physical processors.) TIA Phil S. ------=_NextPart_000_0050_01C34E9B.DDE14010 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1141" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>Hi All:</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Sorry about the OT, but with the volume = of posting=20 I thought at lest some one has experience and/or knowledge they will=20 share.</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>A new server with a 2.4 GHz = processor has=20 Intel's BOIS Hyper-Threading.  Even though only one = physical=20 processor is installed, the OS sees 2 processors due to the=20 Hyper-Threading.  The second processor is a "virtual=20 processor".   White paper from Server Vendor (IBM) claims a = 40%=20 increase in processing speed compared to turning off the = Hyper-Threading. =20 </FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Question is, If I later add a 2nd = physical=20 processor, will the OS then see 4 processors, and will this 4 processors = effect=20 the OS License?  What about a 3rd or 4th processor?  (The = server can=20 have up to 4 physical processors.)</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>TIA</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Phil S.</FONT></DIV></BODY></HTML> ------=_NextPart_000_0050_01C34E9B.DDE14010-- Tag: security question Tag: 117811
  - 6
    - Time Servers Hi All I am looking to use an external time server on an SBS2000 install. The install is SBS2K with 2 nics and cable bradband. ISA is configured with standard settings. Can anyone recommend or explain how to set this up especially the ISA bit? Many thanks Euan Tag: security question Tag: 117800
  - 7
    - Cannot browse network on SBS 2000 when using ZyWALL VPN Hi I have problems browsing my SBS 2000 domain and connecting shared drives when using VPN access using a ZyWALL. The local network is 192.168.1.0/24. When I connect from another local network range (e.g. 192.168.21.0/24), I can browse the network with no problems. However, when I dial to some ISP and use a routed IP address, I can no longer access the resources (Run \\192.168.1.11 responds with "Network path not found."). The strange thing is I can ping the server, I can use other resources such as SMTP. Only NetBIOS performs strange. I uninstalled ISA server because I thought it might be an ISA server problem - this didn't solve the problem. There is no WINS server running. Is there a way to set NetBIOS access parameters like hosts_allow in Samba? Thanks for any help. David Tag: security question Tag: 117799
  - 8
    - Mainteneace and updates remotely What is the general consensus regarding performing regular maintenance, and updates to SBS Servers via terminal services? As I add more clients, it's getting harder to visit each regularly for maintenance, and more tempting to rely on TS. Any thoughts or experiences? Gavin Tag: security question Tag: 117775
  - 9
    - Help Exchange SP3 Problems Hi, Since upgrading the echange server on our SBS server to SP3 we can no longer send an item as an attachment. If you right click on an object and click send to mail recipient i get an error saying 'object not found'. If I run the fixmapi.exe i can then send. However if i log off and log on again it fails again. Also I have noticed that if I try to add the shared fax service in outlook 2002 it will accept the the service first time but does not display it as a listed account. If you then go back into accounts and try to add it again it says it can not add the service as it already is installed. any suggestions? Tag: security question Tag: 117771
  - 10
    - Pictures from the SBS 2003 Server Manager For all the people who did order the SBS 2003 preview kit I have published some pictures about SBS 2003 on my site: http://www.smallbizserver.net/sbs2003/sbs2003.aspx -- Mariette Knap www.smallbizserver.net Tag: security question Tag: 117766
  - 11
    - ms loopback adapter How do I get/install MS LoopBack Adapter adapter ? Tag: security question Tag: 117759
  - 12
    - Server Status Report and Network Browsing Hi All, I'm really troubled by this strange behavior: SBS2K, 2nics, patched and SP4, co has no valid domain name... I've been trying to have the Server Status Report run twice daily and have it sent over to an outside e-mail. Well, it just doesn't. However, it will send the report just fine to a mail inside the domain... 2nd - after I installed SP4 clients (win9x and 2000) can no longer browse the network and see other clients... any ideas are greatly appreciated! thanks, Mali Kirchner Tag: security question Tag: 117758
  - 13
    - Move a mailbox store to a different partition of drive. How do you move a mailbox store to a differnt partion or drive when the original configuration is running out of space? Tag: security question Tag: 117755
  - 14
    - POP3 connector crashes at SMTP delivery stage Hi, I have a really wierd problem with a SBS2000 installation and the POP3 connector for Exchange. Everything had been working fine for over a year but all of a sudden (without any change to the server's configuration), the POP3 connector has started crashing. Basically the POP3 connector crashes at the point where it transitions from completing the POP3 download from the remote mailbox to connecting to Exchange's SMTP server at the exact point where it trys to connect to the SMTP service, port 25 (the last event ID is 4020). However, if the server is rebooted, any mail previously collected prior to the crash will then be delivered, but the next time the POP3 connector collects new mail it crashes again after downloading them and then crashes whenever the service is restarted. Maybe it's a bit clearer if I walk through the exact sequence and what happens in the application log (I have logging set to maximum). 1. Start with the server rebooting. At this point there are messages left in the InForward directory from the previous session where the POP3 connector had crashed. 2. Once server is booted, I check the application log: I can see that a SMTP connection is attempted (event ID 4020 "The Delivery Service is logging as an SMTP client on port 25 ") followed by connection event ID 4013 and then all the messages are delivered one by one (event ID's 4022 and 4032). All OK so far - messages have been delivered to the appropriate mailboxes. Examining the SMTP server's log file also shows everything was ok. 3. Now I force a Retrieve Now on the POP3 connector. 4. The ADSL connection is established automatically (note that I currently have a dynamic IP address - hence the reason for using POP3!) 5. Summary of events that occur now: Event ID 4010: Checking messages in multiple POP3 mailboxes Event ID 4028: The POP3 agent is going to open the mailbox... Event ID 4019: The delivery service is logging as a POP3 client on port 110 Event ID 4015: The POP3 host ... answered ... Event ID 4016: We have been granted access to ... Event ID 4024: There are 21 message(s) with a total of 194156 byte(s) Event ID 4029: A message was downloaded from the POP3 server. ... {21 of these} Event ID 4023: The POP3 session transcript was: ... <G>: +OK demon POP3 server ready (demon.co.uk) <C>: USER *** <S>: +OK <C>: PASS <secret password> <S>: +OK <C>: STAT <S>: +OK 21 194156 <C> { Downloaded and deleted messages if neccessary. } <C>: QUIT <S>: +OK {This event is repeated once again} Event ID 4001: The shared POP3 accounts have been checked for incoming messages Event ID 4031: The individual POP3 accounts have been checked for incoming messages 6. At this point it crashes, stating an internal error has occured. No more events in the application log. The messages are now left in the INCOMING folder. The POP3 service is not running. This is an extract from the file VMIMB.TXT: ====================================================== Product: Microsoft Connector for POP3 Mailboxes 5.00.2195.1 Fault Date: 07/16/2003 Time: 20:09:25 ====================================================== Exception Code: C0000005 ACCESS_VIOLATION Fault Address: 004080B3 01:000070B3 C:\Program Files\Microsoft BackOffice\Connectivity\POP3 Connector\vmimb.exe 7. Restart the POP3 service manually. It now moves the files in INCOMING into INFORWARD before promptly crashing again. Looking in the application log I get: 1000: The service is starting. Microsoft Connector for POP3 Mailboxes 5.00.2195. 1001: The service started successfully. 4008: The delivery service is flushing its outgoing and incoming queues 4009: Flushing transaction complete 4041: LDAP: The entry points where loaded from the image: <C:\WINNT\system32\WLDAP32.dll> 4008: The delivery service is flushing its outgoing and incoming queues 4020: The Delivery Service is logging as an SMTP client on port 25 {crash now!} Every restart of the POP3 connector service now follows this pattern of crashing and the last event being 4020. Examining the SMTP log file shows that no connection was attempted. Even if I stop the SMTP service it still happens this way. The only way to get it to deliver the mail is to reboot the server. The SMTP connection is then made OK. I've also tried a manual telnet to the SMTP server to make sure that responds, and it does. I'm at a bit of a loss on how to resolve this. Anybody got any ideas? I've tried reinstalling the POP3 connector and that's not made any difference. Regards, Aled. Tag: security question Tag: 117749
  - 15
    - Change ip on sbs server 2000 I have to change the ip address on my sbs2000 server i used the network properties on windows 2000 server, but i was not able to connect to the server after reboot. Can you hel me? Thanks Matt Tag: security question Tag: 117747
  - 16
    - Desktop Streaming One of my customers asked me to look into a product called Desktop Streaming, from a company called ExpertCity. It prvides for remote tech support, includes chat and full remote desktop control, Here's the link: http://www.desktopstreaming.com/ad/corp/home Has anyone here in the SBS NG looked at this product, or have any knowledge or experience with it? Thanks, -kw Tag: security question Tag: 117727
  - 17
    - SBS2000 with XP Pro Clients We have just upgraded our network server to a Dell Poweregde running SBS2000. All of the clients run Windows XP Pro. The problem that i have is that i cannot get any client that was used on the old SBS4.5 server to connect to the new SBS2000 server. The problem seems to be the trust relationship being out of sync. Even trying to re-configure the clients using the disk created by the Add New User wizard does not correct the problem. The server reports that the trust relationship has been broken and should be re-established but i cannot find any instruction on how to do this. Has anybody encountered this before and if so do you have a fix? Thanks, Rob Tag: security question Tag: 117667
  - 18
    - ADSL/Router Email Problems I have installed a new SBS 2000 as follows: Internal NIC 10.0.x.x External NIC 192.168.x.2 Netgear ADSL/Router DG814 192.168.x.1 with Fixed IP address from ISP Have added Port Forwarding on the Router for Port 25 to the External IP on the NIC (should this be the internal Nic with a Static Route pointing to the external nic??) Have configured SBS using ICW for a router with 2 nic's Internet browsing great Sending Emails great Cannot Telnet to port 25 on the fixed IP address on the gateway (ISP address)- response is that no response has been received. NAT is enabled on the Router. Do I need to use the DMZ? Surely this reduces the Firewall of the Router. All the settings in the SMTP and Filters in ISA appear to be fine (as per the ICW configuration requested). Which IP addresse should be selected in the SMTP connector - internal or external? Would this make a difference? Any other pointers would be greatly appreciated. Thanks in advance Andrew Tag: security question Tag: 117662
  - 19
    - IMPORTANT: New method for spammers to relay through you Hi all, I've been investigating this week how one of my customers was used as a spam relay host - even though they are not an open relay host. It's a detailed issue and according to a number of other sources is a new method the spammers are using to "sell their products". I've written up an article (rather than post something too long here) and posted it on www.sbsfaq.com if your interested. I'd be interested to hear feedback on the people who have seen this attack. Regards, Wayne Small [SBS-MVP] MCSE+I MCSE 2000 Technical Director - Correct Solutions Pty Ltd For all the answers on Small Business Server 2000 - check out www.sbsfaq.com Tag: security question Tag: 117655
  - 20
    - Post SP4 unable to connect to Newsgroup without rebooting of server Having installed SP4 on my SBS 2000 without any glitch, I find that I am unable to connect to msnews.microsoft.com. I have to reboot the server and then the connection establishes. This connection will work for a day or two and then stop till I reboot. Shall be thankful for any work around. Rajiv Khandelwal ______________ www.vardaan.net Tag: security question Tag: 117653
  - 21
    - Looking for consultant/contractor I hope I'm not off topic asking this but I'm looking for someone to help with SBS work and have had no luck finding the type of person I want by advertising in the job ads. Probably because the type of person I'm looking for doesn't need to read the job ads. I am in Brisbane, Queensland, Australia and I am a contract network administrator/engineer and provide support for SMEs that are not big enough to justify the cost of their own full time network administrator. I also contract to a government department. Until recently a good friend and I worked together helping each other out when necessary but he has recently accepted a full time contract with one of his clients and I find myself with more work than I can handle at times, I'd also like to be able to take a holiday sometime. This is not an ad looking for someone out of work, there is not enough work to keep someone going full time and it is intermittent. I'm looking for someone in a postion similar to mine, who is self employed, who can share the work load when necessary. Conversely, I can help you out if and when necessary. If you fit this brief description and would like to find out more please email me direct at smesupport@enterprisecomputerservices.com to keep OT traffic off this news group. Lester Bennett Tag: security question Tag: 117645
  - 22
    - PC on external network I have a network with an SBS2K with a Netgear router between irt and the internet. We have to access a web based app via VPN (IPSec). We can't do it with the PC behind the SBS but it works fine with the PC on the subnet between the SBS and Router. The problem is, I'd like to access data on the server from that PC. Can anyone tell me how to configure ISA to allow that? Thanks, Lester Bennett Tag: security question Tag: 117643
  - 23
    - Cannot send email via SMTP connector Hi everyone, Using SBS2000, dial-up ISP, no fixed IP. Using the POP3 connector, I can collect email from the ISP pop3 server and relay it to individual mailbox. But I cannot send email using the ISP's smtp server, eventhough I have set the password in Outbound security (using basic authentication). What gives? Thanks Rudy Sujanto Tag: security question Tag: 117629
  - 24
    - Newbie: How to stop ISA server from dialing periodically Hi all, I'm using a modem dial-up to connect to the internet. The ISA server in my SBS2000 always dials every 5 minutes regardless whether there is a client connecting or not. How to stop this? If I check the log, the requests are initiated by the IP address of the server itself (192.168.0.1 and 127.0.0.1) and always contains "GET http://.com/". What is it? Thanks Rudy Sujanto Tag: security question Tag: 117625
  - 25
    - ** ON TOPIC: It's Friday night and it's patch time As I sit here with my fleet of computers beeping and playing the Windows tune as I push patches and force reboots.....just a friendly reminder....... Most of the hacks from the outside are due to lousy passwords [ensure that they are complex, longer than 8 characters] and from unpatched systems. Most of the real security issues come from the inside...... unprotected systems, outdated A/V, not relying on "defense in depth" [for example two passes of A/V over email, once in Exchange once on the desktop] If you have port 80 open.... [how do I know this? Go to www.grc.com click on shields up/ports up and see what you have open.] ..... and fast track yourself on patches. That said... our recent 03-026 security bulletin having to do with a vulnerability in RDP...that little sucker is a worm waiting to occur. A Polish team of guys [see their web site at http://lsd-pl.net/special.html] have not released the exploit but they are threatening to do so after people have had time to patch. This sucker hits ports 135, 139 and 445.... plain english that's how we talk to other computers and while we can easily protect our server systems from a port 135, 139 and 445 attack on the OUTSIDE by ensuring our firewalls are installed properly, we ALL have a squishy creamy middle on the inside that we can only protect with this patch...... all home users that don't have a firewall..... anyone who VPNs into the office bypasses all that protection. Also any one who has been getting Messenger service popups on their server.....dude that's a sign that you've got a squishy creamy outside that's not protected..... MAKE sure that "enable netbios over tcp/ip" is unticked and only tcp/ip is checked if you are running a two NIC setup. If you are running a 1 nic setup and a hardware firewall and getting these messenger service popups [not to be confused with back-ads on IE that are due to spybots] then dude your firewall is not configured right. Go to www.grc.com [look for Shields up go to shields up/ports up and if 135, 139 or 445 are open..... your firewall is not installed right]. I cannot stress this enough..... SANS is stressing three biggies this week... one is a CISCO router vulnerability ... Denial of service affecting CISCO routers, then there's a couple of nasty Linux vulnerabilities, and this one in the Windows world. It's just a real unfriendly world out here on the Internet these days plain and simple for everyone just trying to do their job. <<Soapbox rant on>> The days of installing systems and not monitoring them are over. Welcome to the maturing of computing where we have to take care of these little boxes that we've installed. I cannot stress this enough... even us little guys have all the tools we need to do patch management [in fact I would argue that we probably have more options at better prices than the big guys.... we've got two options that are free] SUS/Shavlik/St. Bernards.... if you don't have a patch managmement solution in place for every single computer system attached to your network, get one. SUS is free, Shavlik.com has a free hfnetchkLT that I run from my workstation here. For those people that work from home....get them to sign a statement in writing that they will patch their systems. Force them to get WinXP and auto update in place. http://www.microsoft.com/downloads/details.aspx?familyid=73ac38b7-5826-421d-99e8-cdcc608b8992 Guidance, tools, and templates for learning and performing security patch management. Last but not least... in this day and age of computing...if your server is just acting plain ol' weird..... that's not normal. Start doing some investigation, do a virus scan, go into the user/AD console and make sure there's still a little red X on the Guest account. If that guest account is enabled, and it's been added to the admin group, my friend, go get a stiff drink 'cause you may have a mess on your hands. We SBSers are NO different than any other system out here. Watch those passwords, keep up to date on patching, and we do just fine. We are no less secure than anyone else....we are no more secure than anyone else..... unfortunately.... Let's just be real careful out here huh? Sincerely, Susan the real paranoid P.S. If you are having problems running Windows Update from the server [which is just fine these days], shut down Exchange. I personally shut off Exchange, Officescan and ScanMail before installing patches. Title: Buffer Overrun In RPC Interface Could Allow Code Execution (823980) Date: July 16, 2003 Software: Microsoft Windows NT(r) 4.0 Microsoft Windows NT 4.0 Terminal Services Edition Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server(tm) 2003 Impact: Run code of attacker's choice Maximum Severity Rating: Critical Bulletin: MS02-026 The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-026 What Is It? The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-026 which concerns a vulnerability in Microsoft Windows. Customers are advised to review the information in the bulletin, test and deploy the patch immediately in their environments, if applicable. More information is now available at http://www.microsoft.com/technet/security/bulletin/MS03-026.asp -- "Don't lose sight of security. Security is a state of being, not a state of budget. He with the most firewalls still does not win. Put down that honeypot and keep up to date on your patches. Demand better security from vendors and hold them responsible. Use what you have, and make sure you know how to use it properly and effectively." ~Rain Forest Puppy http://www.wiretrip.net/rfp/txt/evolution.txt Tag: security question Tag: 117616
- Next
  - 1
    - upgrade wants new install instead - there goes the weekend. Today I tried to upgrade an existing install of SBS 4.5 (SP6a) to SBS 2000 using the CD's from MS labeled as upgrade. The stupid thing says that it cannot upgrade the current version and that I should perform a new install. Well a clean install would be better except that I need to be sure that the existing Exchange Email does not get wiped out in the process - which a new install would do and is not acceptable to them. Anyone see this before? I cleared the warnings applying to Exchange and Proxy and LDAP and tried again - still says it does not qualify. It baffles me - 4.5 to 2000 should work fine. The data is on a D: drive the OS on C:. The only thing that even occurs to me is that the C: drive is 3.99GB with 1.5GB free space. Has anyone had problems upgrading if there is less the 4GB? The RAM is 512 and the processor is 550Mhz so these should be OK. Any suggestions greatly appreciated as otherwise I will spend my evening making sure I know how to restore email and it seems like a painful process from what I have read so far. Or if anyone has restored email from 5.5 to 2000 and can pass along any links or tips, including the pit falls that would also be appreciated just in case I have to take that route. Looks like I will be stuck in a computer room all weekend - but if I can upgrade at least I may see some daylight. Thanks, Linda Tag: security question Tag: 117606
  - 2
    - Delete Old A/V Definitions (Trend) Good afternoon, I am using Trend's A/V for SBS and would like to develop a proceedure to delete any old A/V definition files - any suggestions? Maureen Tag: security question Tag: 117595
  - 3
    - Replacing Disks I have a sbs W2000 system with a 4 disk raid array which has both my operating system and data. I have outgrown the present drives and want to replace them with larger ones. In the process, I want to separate the operating system to a separate drive that will become part of an mirrored pair. I have yet to find a way to do this without removing all disks and doing a complete recovery from tape --- which I am reluctant to do with my only operating server. I have tried a number of tricks, none of which works. The array is a basic system -- it refuses to become a dynamic disk system. Anyone got an idea??/ Tag: security question Tag: 117588
  - 4
    - How you all getting on with sp4 ? Saw some posts with problems when it was launched and thought would wait a bit longer Haven't seen any recent probs, is that because you all still waiting to see if any other posts with problems...LOL Tag: security question Tag: 117586
  - 5
    - Proceedure for installing SBS to replace exsisting SBS machine Hello, I have a new server for our office and I need to install SBS 2000 to replace the old server. I'm wondering if there is a procedure for installing SBS to replace SBS current machine. If I used the wizard, I'm afriad that it'll do the whole AD thing and exchange setup and I'll have to add all the client PC's to the domain. Is there a way around this? Tag: security question Tag: 117575
  - 6
    - Server Status report I have configured the status report to e-mail report. When I click to test it, no report is sent. Why? Tag: security question Tag: 117570
  - 7
    - Information I have a Win 2000 SB server with 2 nics. I don't have a hardware firewall, just using SB to provide a software firewall. If I installed a hardware firewall should I go to 1 nic? Have to come up with some information as to how good Microsoft firewall is and if I put in a hardware firewall do I need 2 nic? Tag: security question Tag: 117569
  - 8
    - Best AD Setup for External User We wish to share an important file in real-time, with one of the employees at our logistics firm in another city. The file is a large shareable Excel spreadsheet that is in the SMB "Company" directory. The external user should only be able to see/read/modify that 1 file ONLY on our system. We can set her up with VPN; but how would I SEVERELY restrict her access to just that one file? Basically, she'd VPN in, and click the file shortcut we'd stick on her desktop. That's as far as she'd go, but others in her office who use her desktop would be the one's I worry about. Any ideas? Tag: security question Tag: 117568
  - 9
    - Can't install downloaded critcal updates When trying to install the latest critical updates to a Small Business Server 2000 from the MS update site, the installation fails. This happens with all updates. Any ideas? Tag: security question Tag: 117567
  - 10
    - Win9x clients crashing & losing drive mappings This week, I moved a client with 18 desktop machines from a Linux Server to SBS. Users have been set up thru the wizard but have not yet added computers to AD nor have I run the magic disk. All clients are connecting to the network in a WORKGROUP mode. Desktop OS as follows: 1 @ XP Pro 1 @ XP Home 3 @ Win98 SE 13 @ WinMe PROBLEM: Since the change to SBS, client machines running W98 & Me frequently either lose their connection to their mapped drives or even disconnect from the mapped drive and need to be remapped. Occasional their machine even crash. They are also reporting that their applications are running alot slower than when running against the Linux box. Any ideas out on what might be needed to resolve these issues or what steps might be taken to diagnose this one? Thanks all, AlanS Tag: security question Tag: 117563
  - 11
    - Login Script SBS2K, Win2K clients. I performed my first push to Win2000 over the weekend. Of course I am now working out a few kinks. One problem I am having is that for some users, when the SBS_Login_Script.bat runs the SBSCLNT.exe app, the command prompt window it opens just sits there forever. If I CTRL + ALT + DEL out of it, when the desktop loads, the company and user folders are there and everything seems to be okay. Also, I am running user login scripts via Group Policy to connect to printers, and those work okay too. I figured that the problem was that the users did not have the correct permissions to run the application. When I configured the computers, I did not add the specific user of that PC to the local Admins group. To try to get around the problem running that app, I assigned that Authenticated Users group to the Local Admins group. The program runs fine now, but here is my question: if you are deploying apps and other settings via Group Policy, is it still necessary to have users run the SBS_Login_Script.bat and the SBSCLNT.exe? I would, however, like to keep the company and the user's folder on the desktop. Any ideas would be most appreciated. Thanks, Chris Tag: security question Tag: 117544
  - 12
    - help needed - urgent! ok, posted this once before and got no responses. really, really need help here... Ok, trying to set up dial-in access. The WAN VPN works fine using IP after I have connected to an ISP on the client, but I can't connect directly from the client via modem. I receive the error 913: "a remote access client attempted to connect over a port that was reserved for routers only." The article I found in the knowledge base (http://support.microsoft.com/default.aspx?scid=kb;en- us;262357) doesn't help. It says: Click Ports, and then click Properties on the Action menu. Click the appropriate port (L2TP, Modem, PPTP, LPT1, and so on), and then click Configure. Click to select the Remote access connections (inbound only) check box, and then click OK. There is no "properties" on the action menu and no place to configure the port as far as I can tell. Is there something in IAS that I need to change or what? What am I missing here? TIA!! Tag: security question Tag: 117529
  - 13
    - SMBNatino Hotel!! Note to SMBNATION attendees: I just got booked at the Radisson Hotel City Centre Indianapolis for $56.00 per night through hotwire.com!!! Gavin Tag: security question Tag: 117526
  - 14
    - windows 98 synchro anyone know how to get windows 98 synchronization working? i can't seem to select folders. the only available folder is web folders. i hate win98 Tag: security question Tag: 117525
  - 15
    - power lost my office will have no power for several hours when the power cut, my server is doing a backup will this power cut hurt any software/data/hardware? Tag: security question Tag: 117519
  - 16
    - Critical Errors under Health Monitor Hello Fellow Administrators; Has anyone come across the problem with having multiple errors in Health Monitor under Admin Console. The errors seem to be just under the win 2000 performance monitors. Any help would be greatly appreciated. Tag: security question Tag: 117512
  - 17
    - Upgrade SQL7-SQL2000 w/sbs I recently upgraded a W2K/SQL7 server to SBS2000. During the installation it picked up the exisiting SQL installation and seemed to install correctly. However after typing SQL Query Analyzer and ran a version query (select @@version) and got the following results: Microsoft SQL Server 7.00 - 7.00.1063 (Intel X86) Apr 9 2002 14:18:16 Copyright (c) 1988-2002 Microsoft Corporation Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4) Any ideas? Just reinstall the SQL component of SBS 2000 again? Tag: security question Tag: 117508
  - 18
    - AOL Bouncing through SBS Has anyone had a problem with AOL mail bouncing back to the SBS servers? We have 4 clients that have various ISP connections, but any AOL mail they send is bouncing back a few days later. Trying to determine if it's an SBS/Exchange issue, or just AOL. Tag: security question Tag: 117504
  - 19
    - defrag Hi, I read somewhere that you can't defrag the exchange server. Can I use the Microsoft utility to defrag the C: and D: drives? (leaving the M: drive alone). Will the default MS supplied defrag utility work? thanks Tag: security question Tag: 117502
  - 20
    - POP3 Missing Retrieve Now Hi All, For some reason after a fresh SBS Installation, my POP3 Connector is missing the "Retrieve Now" button. Any suggestions? Thanks Sean Tag: security question Tag: 117500
  - 21
    - Internal Web Server I have recently changed from a linux router to a cisco SOHO router. I knew nothing about Linux so that is why I changed. Since I have switched to the cisco I have been unable to get to the web server internally using the domain name. I can get there with the ip address. I unplugged the router and still was unable to get to the web page using the domain name. I put a www host record in my dns and put the web servers IP address in it. I am still unable to get to it using the domain name. This is the first dns record i have put in so I am not sure if I have it correct. Thanks Tag: security question Tag: 117495
  - 22
    - Hosting Multiple Internet Domains on SBS and the ICW I want to host another domain on my SBS box and was wondering that during the ICW wizard when you input your Internet Domain name will it allow you to use a comma or semi colon to specify an addiitonal domain. If not how can I do this? Thanks! Tag: security question Tag: 117489
  - 23
    - Problems with .exe files! Hi, My name's Pedro, I have an SBS2000 server and last week it got infected with two viruses: PE_Parite.A and PE_Parite.B. We cleaned the computer, but now we can't find some .exe files. The backup application can't run because it's missing its .exe file. Other applications that are not working in the Administrative Tools are ODBC, Telnet, and Terminal Services Manager. In the Small Business Server Administrator Console, the IIS can't find its .exe file. I just wanted to know if there was a way to restore our Server without having to format it, again. Can I install those services without having to format the server? Or can any one tell me where to find the .exe files in the CDs so that I could do a 'copy and paste'? Thanks in advance! Pedro Tag: security question Tag: 117484
  - 24
    - Email reply address setup question We are using Exchange Server 2000 with SBS2000 server and Outlook 2002. We have a user with 2 email addresses: username@companyname.com & sales@companyname.com. The default reply address is setup as username@companyname.com. We he receives an email addressed to sales@companyname.com, and he replies, the reply address is: username@companyname.com. How can the reply address be setup as sales@companyname.com when he replies to email addressed to same? Thank you Tag: security question Tag: 117482
  - 25
    - email problem we have configured to send email through our ISP email server. we have sent one email on 3 Jul. our friends keep on receiving the same email messages for many times even after 3 Jul. running the latest version of Norton Anti Virus and scanned but no virus found Any insight to this problem would be highly appreciated Many Thanks in advance Tag: security question Tag: 117392

1. How can I block all external ip's from accessing terminal services on my
sbs2000 server - is it by means of a new policy in the ISA server

2. What is the best way to block all remote access to my sbs server using
terminal services EXCEPT from my laptop. Bear in mind I use dial up from my
lapop.

Can I specify, for example, an allowable computer name.

Pat

Top

Re: security question by Mark

Mark
Sun Jul 20 19:27:22 CDT 2003

you can get 3rd party s/w that blocks by IP or MAC but since you are on
dialup, IP won't help you out. MAC is spoofable but what are the chances
of that.

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com

"Patrick Coleman" <pcoleman@foodireland.com> wrote in message
news:uIb%23vEuTDHA.1868@TK2MSFTNGP11.phx.gbl...
> 1. How can I block all external ip's from accessing terminal services on
my
> sbs2000 server - is it by means of a new policy in the ISA server
>
> 2. What is the best way to block all remote access to my sbs server using
> terminal services EXCEPT from my laptop. Bear in mind I use dial up from
my
> lapop.
>
> Can I specify, for example, an allowable computer name.
>
> Pat
>
>
>
>
>

Top