Windows 2000/2003 Security

Security log is full

Phil M. - 16 Apr 2005 2:03 PM - 4 messages

Is there a way to allow a non-admin user to login, in spite of this condition? gpedit.msc? ...

Reset account lockout counter after

Nhut Minh Tran - 16 Apr 2005 10:25 AM - 3 messages

Our default domain account lockout policy is set like this: Lockout Duration = 0 (I want Aministrator manually unlock) Lockout Threshold = 4 Reset Counter After = ??? Microsoft say about Reset account lockout counter after: If an account lockout threshold is defined, this reset time must be less ...

Event 4311, Source:netBT after applying latest patches

Magoo - 15 Apr 2005 10:43 PM - 5 messages

In 3 out of 5 Win2003 servers, SAN connected, I applied latest patches 842773, 890859, 893086, 890923 and on event I got error: Event:4311, source:netbt Basically servers get no IP address and a "Run time error" message box ...

File and folder permission

Fernando - 15 Apr 2005 8:34 PM - 3 messages

Hi folks, look to this scenario: I need to share a folder with many subfolders, I will create one group for each subfolder, but I want to share just the main folder then my users will map just that main folder to access the appropriate folder. ...

Certificate Authority

Frank Durham - 15 Apr 2005 3:24 PM - 2 messages

Greetings- I am having a problem with one of my CA's. It was time to renew the subordinates certificate. I attempted to renew and an new certificate was issued. When the CA tries to start up it spits out an erros message of Invalid Signature. Has anyone seen this error message before, and if so what did you do to resolve it? ...

Unable to stop users creating new files on shared folder

techguy? - 15 Apr 2005 12:28 PM - 2 messages

I have a shared folder with the following permissions set everyone READ ONLY Group 1 MODIFY Admins FULL CONTROL I do not want the users in the group with modify permissions only to be able ...

all install or setup runs on windows process task manager

Kelvin - 15 Apr 2005 8:33 AM - 3 messages

Hi all, I don't know why all install or setup runs on windows process task manager. I am using windows 2000 server with sp4 and installed Norton Antivirus. I try to disable Norton Antivirus but same result. Please advised. ...

How can I stop it ?

¼ÓÆä - 14 Apr 2005 3:08 AM - 4 messages

HI,everyone: I have a harmful problem:when my friend put "\\10.3.0.50\d$" (the address is IP of my computer)in his IE,and he could visit the patition D in my computer,though I have shaped nothing. ...

MS Proxy Running on Win2K Server Question

David - 13 Apr 2005 5:41 PM - 2 messages

Sorry for the cross-post: I have Microsoft Proxy 2, SP1 running on a Windows 2000 Server for our Internet connection. Things work well - this replaced the WinNT4 server that had been running Proxy before. I like the newer IIS interface, and how ...

What makes client get 'certificate' warning pop up ?

Magoo - 13 Apr 2005 5:05 PM - 3 messages

I notice that I connect to my ISA->OWA https://webmail and my WinXP IE 6.0 client no longer displays the warning (the one with three green symbols) warning that is a secure connection. What makes client get that pop up warning that is a secure connection ? ...

Content Advisor & security access

Kevin Depree - 13 Apr 2005 2:32 PM - 3 messages

Hi, I have a number of PC's in my estate which run win2k with a standard 'user' profile. They run standalone so I am currently using contect advisor to control what access they have to various web sites. I want occasionally to be able to let them onto a site, so I dial in to them ...

ctl-alt-del forces reboot

andy smart - 13 Apr 2005 12:00 PM - 4 messages

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Dell GX270 / XP pro We've had 3 machines in 2 days in which ctl-alt-del forces the machine to reboot rather than bring up the login screen. The fact that this has ...

a problem with cryptographic?

J. Alberto Gonzalez - 13 Apr 2005 10:55 AM - 2 messages

Hello! I have this problem; when I try to import a certificate appears the following error: "The private key that you are importing might require a cryptographic service provider that is not installed on your system." I've been looking for this problen in microsoft database but the only thing ...

Prevent to use Network Neighbourhood,Clock,Printer,etc.

modakindia - 13 Apr 2005 8:35 AM - 2 messages

Our comptuers are connected with a Windows 2000 Server with DHCP DNS. Server name is rsm.com I would like to apply a policy over the client machines to prevent some function/operation like follows: 1. User could not be able to open/Edit Network Neighbourhood. ...

Audit code meaning

Larry - 13 Apr 2005 2:51 AM - 2 messages

Hi, I have turn on auditing for event ID 560. Would like to know what does "Accesses: SYNCHRONIZE, READ_CONTROL, ReadAttributes, DELETE, ReadData (or ListDirectory)" means? Would appreciate if someone can also point me the site where is state the meaning. ...

Microsoft Security Bulletins for April 2005

Jerry Bryant [MSFT] - 12 Apr 2005 6:26 PM - 2 messages

Follow up set to: microsoft.public.security April 12, 2005 Today Microsoft released the following Security Bulletin(s). Note: [link] and [link] are authoritative in all matters concerning Microsoft Security Bulletins! ANY ...

Authenticate on multi domain

Mirza Rizwan Ahmed - 12 Apr 2005 11:37 AM - 2 messages

At present I am connected to one windows 2000 advance Domain servier "medyan.swcc.gov.sa" by with my use name "ahmed". Now I also wanted to authenticat parallel on another domain server saline.gov.sa at same time. My ...

User Profile blocks internet access

Viking 55 - 12 Apr 2005 12:27 AM - 3 messages

I've just upgraded from Windows 98 to Windows 2000. I've successfully configured the Administrator to get access to the internet but all other users can't gain access to the internet. If I change a user profile to give ...

Issue in demoting users from Admin to Power Users

scot welker - 11 Apr 2005 8:47 PM - 7 messages

I have found it necessary to remove local admin rights for users on their W2K workstations. We went through a conversion of sorts recently which required them to be admin for that conversion. Their network user names will not be ...

Domain Admin Access across Trusted domains

DevGD - 11 Apr 2005 7:53 PM - 7 messages

Is there a way for me to have administrator rights on a domain that I trust with my domain? I just merged with a company and have established an external trust with their network. I am now incharge of all active directory for the ...

Can't assign "log on locally" right

Jim Matthews - 11 Apr 2005 7:20 PM - 2 messages

We have set up an "app" server, which is a member of my domain, and are trying to assign the "log on locally" right to a "local" (not a Domain) user. I have tried logging on as the Domain Admin as well as the local ...

802.1x Authentication for non-domain machines

Carlos A. Morillo - 11 Apr 2005 7:07 PM - 2 messages

Is it possible to assign non-domain machines a certificate to authenticate to a wireless network? ...

Need Help - Trojan Horse Downloader : Dyfica.2.BA

123 - 11 Apr 2005 2:37 PM - 3 messages

Dear All, My friend's computer inflected by following Torjan Horse ! (scanned by Ad-Aware) Trojan Horse Downloader : Dyfica.2.BA inflect files : C:\System Volume Information\_restore{.....}.....\A1604249.dll C:\System Volume Information\_restore{.....}.....\A1604330.dll C:\System Volume Information\_restore{.....}.....\A1604404.dll ...

Windows Patch Install Sequence

Arun - 10 Apr 2005 4:25 PM - 2 messages

Re: Patch Install Sequence for Win2k post SP4 patches and Win XP Post SP2 patches I have downloaded the patches and the latest service pack. Please validate the following sequence: Step-1.Apply latest service pack and Reboot. Step-2. Apply latest IE patch update [Applying first is optional but ...