July 24, 2008 02:03am pdt

1. rpggamer... 40,008
2. IndiGenus 36,230
3. jahboite 26,169
4. r-k 19,590
5. arnold 10,150
6. nsx106052 9,825
7. richrumble 7,050
8. briancassin 7,000
9. ahoffmann 6,907
10. PowerIT 6,400
11. tigermatt 6,148
12. johnb6767 5,600
13. KCTS 5,500
14. rindi 5,350
15. paradoxe... 5,300

1. rpggamer... 152,133
2. r-k 100,837
3. Sheharya... 88,781
4. IndiGenus 58,470
5. war1 45,835
6. blue_zee 39,997
7. sunray_2003 39,840
8. jahboite 32,113
9. ghana 29,660
10. Tolomir 29,508
11. rossfingal 27,308
12. johnb6767 22,034
13. ahoffmann 20,357
14. PowerIT 19,977
15. LucF 17,713

02.19.2004 at 03:40AM PST, ID: 20890518

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.7

(1265) the system detected a possible attempt to compromise security

Zone: Networking Security Vulnerabilities

Tags: system, detected, attempt, possible, compromise

I use winXP pro SP1 it's on the network o win2000 domain
After fresh boot I can do whatever I want with shared resources - copy, delete files and so on...
But when I try to copy a lot of files I get a problem of server address is not available, I push retry and it keeps copying as if there is nothing wrong. If I copy a lot of files, I get the same problem again and again.
That would be not a huge problem, but, after couple of hours (5-10) of work with XP, I get the error:

(1265) The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.

Now I can't even get to the shared files on server. (After reboot, I can for the same couple of hours with the same problem as mensioned before).

What is the most interesting thing - other computers doesn't have any problems like that (as far as I am concerned).
One more thing - I have totally no problems with internet connection. web surfing, emails, ftp - everything works perfectly.

What is the problem?

Start your free trial to view this solution

Question Stats

Zone: Security

Question Asked By: Povilas

Solution Provided By: modulo

Participating Experts: 12

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
Automotive
New Net Users
New Users

Software
Digital Music
Gaming World
Home Security

Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Displays / Monitors
Handhelds / PDAs
Components
Peripherals
Laptops/Notebooks

Servers
Misc
Apple
Embedded Hardware
Networking Hardware

Storage
Desktops
New Users

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMware
Misc
Web Development

OS
CYGWIN
Voice Recognition
Virtualization
Message Queue
Quality Assurance
Security
Firewalls

MultiMedia Applications
Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals
Devices

Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
Web Computing
WebApplications
IDS
Vulnerabilities
Email Clients
File Sharing

Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Consulting
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMware

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel
Automation

Algorithms
Game
Signal Processing
Project Management
Open Source
Database

Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Web Services

Images
Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration

WebApplications
Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Web Computing

Broadband
Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Lounge
Business Travel
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles
Automotive

Community Support

Suggestions
New to EE
New Topics
CleanUp

Announcements
General
Feedback

Input
EE Bugs

02.20.2004 at 12:20PM PST, ID: 10415789

tim_holman:

..does a service pack fix this ?
I can't find much about this error message - pretty obscure.

02.20.2004 at 07:05PM PST, ID: 10417779

ferg-o:

Are you running a firewall? Windows is not that clever...

02.20.2004 at 07:37PM PST, ID: 10417875

sirbounty:

Check your event logs (Start->Run->EVENTVWR.MSC) and see if there's anything resembling this error or its cause there...

02.21.2004 at 01:53AM PST, ID: 10419019

tim_holman:

I'm suspecting some obscure bug with SMB signing / DNS / DHCP ?
What's your DHCP lease anyways ?

02.24.2004 at 09:02PM PST, ID: 10447764

ahmedbahgat:

have you done online virus scan??

cheers

05.14.2004 at 03:15PM PDT, ID: 11072585

browolf:

can you still ping the server when the transfer goes wierd?

05.15.2004 at 05:07AM PDT, ID: 11075116

Povilas:

It looks like it was Windows 2000 Server license problem.
Thanks anyway :-)

06.12.2004 at 10:29AM PDT, ID: 11296337

Venabili:

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup topic area:
PAQ with points refunded

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Venabili
EE Cleanup Volunteer

06.17.2004 at 04:19AM PDT, ID: 11333353

modulo:

PAQed, with points refunded (250)

modulo
Community Support Moderator

Accepted Solution

06.30.2004 at 02:47PM PDT, ID: 11441314

Peter_Mannell:

Pardon me being a bit thick - but what is the answer to this problem? I have EXACTLY the same problem and am looking for an answer.

06.30.2004 at 02:59PM PDT, ID: 11441432

modulo:

Looks to me that the Comment from Povilas Date: 05/15/2004 05:07AM PDT states that it's a license problem.

modulo
CS Moderator

07.01.2004 at 11:54AM PDT, ID: 11450438

Povilas:

yes - I think that too.

07.07.2004 at 12:43PM PDT, ID: 11495814

Peter_Mannell:

What sort of licence problem?
I cannot find anything wrong.

07.16.2004 at 11:10AM PDT, ID: 11570804

Peter_Mannell:

Well Povilas is WRONG! Thinking you have the answer is not enough! - the problem is actually caused by setting the XP Client to obtain it's DNS server address automatically. If you SPECIFY the DNS server's i/p address, it works fine. You give the "Alternate DNS Server" address as your ISP's primary DNS, so that you can still browse the Internet.

Apparently it is because that automatic mode is really for workgroups where there is no specific Domain Name Server and the workstations share the responsibility (but this is incompatible with a domain where you have a specific server providing DNS service.

07.17.2004 at 02:44AM PDT, ID: 11573987

Povilas:

well, I am afraid but I think you are wrong, cause the settings on XP client are set on manual...
by the way - it doesn't matter any more...

07.21.2004 at 10:29AM PDT, ID: 11604990

asimon12:

i just had the same error message and the same inability to get to my servers. after seeing the post about dns settings i remembered that this morning when the university's dhcp server went down, i had to apply my ip info manually in order to work. our subnet is 255.255.252.0, i discovered i had put 254.0. I could ping the server, but not access the mapped drives {(1265) the system detected a possible attempt to compromise security}, no net view, no nothing. i corrected the subnet mask and the error message went away and i could acces the mapped drives without even rebooting.

07.21.2004 at 01:51PM PDT, ID: 11607001

Peter_Mannell:

Dear "Povilas",
Since changing the setting on the XP client PC to a specific DNS address, instead of finding the DNS automatically, the client PC has remained connected for several DAYS without a problem, compared to the few HOURS that it used to manage before. So clearly it has worked for me. I would advise anyone else experiencing this problem (and I know from other discussion groups that there are lots) to change the TCP I/P properties to specify the I/P address of the DNS server followed by the DNS of your ISP instead of letting XP find it automatically.
PeterM

07.22.2004 at 08:05AM PDT, ID: 11612995

susanzeigler:

I am getting the exact same error message, however this machine is using static IP assignment and already had DNS servers manually assigned. Subnet mask is assigned correctly and there are no licensing issues on the Win2K server. My issue didn't occur every 5-10 hours, but more like 12 to 36 hours (although occassionally it does happen more frequently). I have also tried changing to enable netbios over TCP/IP and to disable TCP/IP.

One thing to note, dynamic updates to DNS were turned on (I had previously disabled this) so this might make sense as to why manually specifying DNS servers worked for some, if they chose a server that allowed updates (my DNS servers do not).

I was able to find an entry in the event log--not at the time the error occured, but I believe between when I was last able to access and when I couldn't. The error pertains to problems with auto-enrollment.

"Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted.
Enrollment will not be performed."

Here is a link to a soluton for that:
http://support.microsoft.com/default.aspx?scid=kb;en-us;310461&sd=ee

I have now turned off auto-enrollment (gee, the first error occurred during the time my win2k server was backing up so it seems pretty fishy). I will let you know if this solves my issues.

-
Susan

10.22.2004 at 08:30AM PDT, ID: 12381888

Animal22:

The issue is caused by the client trying to resolve a server IP with a DNS server outside the internal network.

Example: DNS Server 1 is 192.168.0.2 (192.168.0. being your internal subnet) and DNS Server 2 being 199.44.2.10 (Sprint's Central Florida DNS Sever). The client is occasionally trying to go out to 199.44.2.10 to resolve the IP address for your internal server.

Set your client to explicitly check your internal network DNS server, or if you are using DHCP- set it that it is only listing internal DNS servers. If neither of those are viable options, the set up a LMHOSTS file on each cliently specifically pointing to your internal authentication server.

05.24.2005 at 08:34PM PDT, ID: 14074527

rkvincent:

It looks like the answer is in the DNS settings. I logged on to EE today to check the exact same error ... "The system detected a possibel attempt to comprimise security" and I tried the suggestion of checking the DNS settings and sure enough my LAN connection was set to automatically retrieve DNS settings from DHCP server ... which is my router ... I changed this to a primary DNS of my domain server and secondary DNS of my router (DHCP server) ... everything is fine now .... EE saves the day again.

Thank You All,
-Rich

08.12.2005 at 01:56AM PDT, ID: 14659008

itech-sol:

I am adding to this thread because of a couple of reasons.... First, I purchased a subscription to this forum community specifically because I cannot find a legit answer to my problem, and I am at the point where I am submitting multiple questions in different forums.

I am having the "compromising security" problem listed above with a Windows 2003 Server, and Windows XP Pro clients. I have all of the computers configured with a static IP address, which means that there is no DHCP requests happening. Everywhere I have looked on the net talks about the DNS DHCP requests that are causing this error. In my specific case I have ruled out the DNS problem, unless... it is possible that I have the DNS server on the Win2003 server configured wrong... Any suggestions?

Thank you,

Brian Weiss

08.14.2005 at 08:34PM PDT, ID: 14672348

rkvincent:

itech-sol

The problem is specifically related to misconfigured DNS settings. On your network if you are using Active Directory you need to assign your Domain Server (IP Address) as the DNS server for all of your Win XP clients ... this more than likely will fix the problem. DHCP is not the same as DNS and DNS is ALWAYS required if your are using TCP/IP at all to access the Internet or an Active Directory .... so check your settings.

08.29.2005 at 04:40PM PDT, ID: 14780376

itech-sol:

rkvincent,

Thank you. The problem definately has to do with adding the server's IP address to the DNS entry on the workstations. This has helped me quite a bit.

Thanks again.

20080236-EE-VQP-29