Top Solutions

We are experiencing random AD account lockouts on certain user accounts major system changes DC upgrades domain split new firewall etc etc making diagnistics difficult to say the least. I have checked scheduled tasks that may be running and can...

I am trying to force kill a process in windows 7 as administrator but am not able to. I would like a general solution but my specific example involves a service called "Mcafee validation trust service". The service is not listed in the task...

Last night I got a ton of Audit Failure event log entries.

How can I tell the type of access they're attempting from looking at the entry?

Example:

EVENT # 14330
EVENT LOG Security
EVENT TYPE Audit Failure
SOURCE Security ...

Hi Guys,

I work for an IT company and lately I have been seeing the following errors on a lot of clients (from several different companies) PC/Laptops? It just seems strange how many have popped up in the last few weeks. Can anyone shed any...

We have a Windows 2003 DC/CA (enterprise root in a single-tier).
We've imported a third party Root certificate (to the trusted root on the DC/CA and on the XP clients') and its intermediate certificate to the NTAuthCertificates store on the...

My company has a remote location with a rogue domain controller in which no one has the password for. This was set up by the my predecessor who was fired and never told anyone the password.  I want to migrate this location to our national domain,...

Trying to join notebook to domain after puting administrator/ password i get this error" Computer Name Changes The following error occurred attempting to join the domain "example domain":An internal error occured. will appreciate some help thanks...

Is there any free antiVirus software out there that i can use in a corporate network?
Something that i can deploy and remotely manage?

Hi, out of the blue, my 2008 R2 standard 64-bit SP1 server started spewing out these errors under event id 4625.  I have no idea what is causing this but I know that something is trying to use the guest account to sign on, which is disabled.  I...

I'm trying to find any articles or publications on MTBF (Mean time between failures) for HP servers, specifically their DL380 models. Does anyone know of such study? A rough estimate will do...

Thank you!

I have in my posession a good laptop I used when working for another company a couple of years ago. I'd completely forgotton that I even had it until my wife found it whilst tidying some kitchen cupboards out last weekend. Problem is I can't use...

Hi,

I've been asked to verify permissions set on directories for windows shares, as follows.

- Approx 15-20 servers
- Each with a number of shares, all configured with 'Everyone' permissions for the share
- Underlying folder has groups...

In the system logs of my Server 2003 with terminal services enabled, I get hundreds of event 1012 from terminal services. "Remote session from client a exceeded the maximum allowed failed login attempts. The session was forcibly terminated". ...

We recently took on a facility with a public facing Sharpoint server, running server 2008 standard. Over the past few days we have seen several audit failures like the one below each one having a different external IP address and port number....

Hello Experts,

My Question :

Is there a way to access other user's Recycle bin when logged in as an Administrator?

We have this user that we had to whack her profile from AD and create a new one.
She logges on on to her PC  and in Docs...

Historically, in our secure datacentre, we're only allowed to go to console located
in the DC to work & if we need to copy files out, we'll insert a controlled  thumb drive
 to the Linux & HP-UX servers, mount it & copy files out via the...

I have a Windows 2003 Serever Standard Edition (SP2). I have some scripts that I use to backup a SharePoint Database SQL Server 2005. The below script ran successfully on c: drive. I needed to move them to a x: drive (swap file). Running on X...

I need to be able to enable WMI on all domain computers through Group Policy and also to disable Windows Firewall.  What are the steps to do this?

Ok, recently my network has been getting bombarded with failure Audits (which I view on my PDC- Server 2003). I set Auditing up a while ago for some account lockout problems we were having, and just decided to leave it on (which I now realize was...

I am new to Server 2008 but I have administered many servers.  I am trying to change the complex password requrement for the domain and users policy and it is grayed out.  I am logged in on the server as a user with administrative security but it...

This log on my newly installed Netgear Router (firewall enabled) connected to 3 XP Boxes (Firewall enabled) and Windows server 2003 SBS (Single NIC, NO Firewall).  I am concerned - have some of these connections from foreign countries [LAN Access...

Hi Experts.

Over the last two days I have seen Event ID  529 messages on our SBS 2003 Premium DC, as follows:

(ONLY 1 OCCURRENCE OF THIS ONE)
Event Type:      Failure Audit
Event Source:      Security
Event Category:      Logon/Logoff
Event ID:      529...

I have enabled auditing on a folder and set the Auditing options on the folder to audit only on succesful deletion of Folder and Subfolders, but in the Security Event Viewer i get dozens of e-mails every hour.
It seems that i get an event 560...

Hi Experts,

I have been having an issue with users accessing an Oracle based application within a Citrix enivironment.  After much research, i discovered that if I go to the Local Security Settings>User Rights Assignment>Create global objects...

I established a reverse ssh tunnel from my PC to a HP-UX server using putty as shown in
attachment 1 so that after login to the HP-UX server, I can copy files using scp from
HP-UX down to the PC via tcp2222 (this PC is running freesshd...

I signed onto winxp pro via the Administrator account.. made many changes on the settings of Internet explorer e.g. caching, homepage-on-open, clear cookies after closing browser etc etc.

I have another user account set up on the same machine....

I want to see if a departing employee copied\transferred any\all of our company data files off our Windows 2000 server recently.  Is there a log file or profile log that shows each users activity over a given time?

Hello,
Found something that is disturbing (to say the least) on my server 2008 domain controller event log. Both of which occured today almost exactly 7 hours apart:

Here is the log entry:

An account failed to log on.

Subject:
...

Recently I've begun seeing quite a few failed login attempts on one of our servers.  They all pretty much look like this:

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Account Logon
Event ID:      680
Date:            7/24/2008
Time:...

In our Solaris 10's (this is a hardened server) messages file, we have following
 error messages :

#>  grep -i snmp messag* | grep "May  6"
messages:May  6 15:53:53 slasun11 /usr/lib/snmp/snmpdx: [ID 702911 daemon.error] error while...

  I'm trying to deny all users in a defined security group not to be able to logon to any PC on your network. We have well over 4000 users so I must use group policy to achieve this.

I have a test domain (contoso) and tried to set the...

Hi

I usually use the hardening guideline from CIS (Centre for Internet Security) to
harden our Windows (2003 & earlier) and MS Sql.

However, CIS has not released anything yet for Win 2008 and MS Sql 2008, the
latest IIS and HP-UX B11.33...

Due to the departure of an IT employee, I need to force everyone to change their AD password.  How can I do this without going into everyones profile?

User Account Changed:
 I have looked in the security event viewer for Eventid 642 and this is the result. The User is NT AUTHORITY\ANONYMOUS LOGON       

Target Account Name:      MyAccount
       Target Domain:      Mydomain
       Target Account ID:...

I have a Sonicwall Wireless TZ 170 and someone at a recent tech day told me that I could use the E-Mail filter section to block all EXE files from being downloaded. If this is true, how might I go about doing it? I'm looking at it now and it...

Hi! I recently got this error message.
C:\Windows\System32\svchost.exe  
NTVDM CPU has encountered and illegal instruction. Choose 'Close' to exit the program.

 It pops up with a MS-dos window once in a while. I've run CCleaner and ADaware...

I am trying to do a small test for restricting rpc to use static port. Using the Registry I did static port assignment for NTDS to be 49155 in the domain controller. I have two virtual machines, the dc is running windows 2008 r2 with ip 10.2.2.2,...

Need you assistance with error message "LMS service cannot connect to intel mei driver".  Client machine has Novell and Active Directory environment.  Do you know of a possible fix?

Print shot of Error message attached.

Thank you in advance.

HI, I have a customers PC Acer Veriton M464 which is producing the Blue Screen of death just after it has loaded the desktop.

The PC boots into Safe Mode fine, and I have tried to start by disabling most options with MSConfig, but still get...

Hello Experts
I am scanning the website to become a PCI compliant with securitymetrics. I am getting loads of error messages. I wonder if someone can advise how can I solve the below points?
Thanks
C

Hello Experts
I have lost the CA etrust threat management password.
Is there any way to recover it or to create another user to log in?
Thanks in advanced.

how do I reset the bios password on a dell inspiron notebook when I don't know the current password?

I am unable to download Windows Updates for my machine.  
After clicking Install, the following message pops up:
-----------------------------------------------
Some updates were not installed
The following updates were not installed:
Update...

Dear All,

I have Norton AntiVirus installed on all computers on my network (SAV 10.1).
For no apparent reason, some of the computers get their Auto-Protect disabled.
I've tried pushing a new installment and copying the GRC.DAT into these...

Hello,
I'm trying to run the Event Notifier Configuration wizard under the HP Management agent on my SBS 2008 server and after I've entered all the email info, and clicked finish, it returns the following:
"Unable to open the event notification...

DLINK DNS-323 NAS SERVER.
SOMEONE RESET ALL THE USER PERMISSIONS AND OWNER ON THIS DEVICE AND NOW WE CAN'T ACCESS ANY FOLDERS. I LOGGED INTO THE MANAGEMENT CONSOLE OF THIS DEVICE AND HAVE THE  PERMISSIONS SET CORRECLTY PER FOLDER BUT THE ...

I need to generate the certificate signing request to send to certificate authority (CA) to get the digital certificate. The keypair is generated by using the thales host security module (HSM). How can i generate the CSR?

I have a 2008 domain and one of my domain controllers (AD1) is my certificate authority. When I try and request a domain controller certificate for one of the other domain controllers (AD2 or AD3), I get an error (See below). I have added the...

Upon installing Kaspersky Internet Security 7.0 (KIS) on my pc with Windows Vista Ultimate (32-bit), WinAMP 5.52 will no longer connect to the Internet for such features as XM Radio by AOL.  Obviously there is some setting in KIS blocking WinAMP...

I have discovered this error on a certificate on a newly installed Windows 7 machine that I just entered into the domain.   I'm trying to understand more about certificates.   Since this machine was newly installed, I'm guessing that the expired...

Hi,

Running Windows SBS 2003 R2 with RWW and OWA enabled through relevant Port Forwards on our external Hardware Firewall.

Last night came across the following Event ID entries, with 35 entries logged under Event ID 529:-

"Logon Failure:...

My computer is infected with virus.  I had Kaspersky and it was disabled. I installed Microsoft OnCare ahd they have tried to help. Installed Super Anti Spyware and ran in safe mode Ditto with Malware Malbites (sp).  Trojan and other viruses...

When running dcdiag on a 2008 DC, I get the following error around 30 times, over and over. the administrator account is not locked.

 The SAM database was unable to lockout the account of Administrator
due to a resource error, such as a hard...

I'm looking for a web based product that would allow me and my co-workers to share a list of usernames and passwords securely.

I know there are lots of password managers out there, but I just want a simple one that is web based, encrypted,...

HI Experts,

I have to record a training session that is being hosted by a colleague on Webex.
I will be dialing in and logging into the meeting online and the trainer is displaying his desktop and the application in which we are being...

Can I apply the output of auto qos from a 2960 standard LAN IOS to a 2960 LITE switch and have the same results as if I ran the auto qos macro that is not available?

Are there QOS features Standard image applied with auto QOS that are not...

Getting ready to public face a lion server in order to do iPad policy/push.  Two Questions:

1) How do you turn off (and back on) unneeded ports on Lion server?

2) How do you determine which ports can/should be closed?

I need to block a particular machine from accessing my network. I have the machine name and mac address on dhcp. Problem is that the machine just needs to connect to any network outlet and the dhcp server will lease an ip to that machine as is...

I recently took on a client that has 5 workstations and one server. Of course they had no antivirus on their server and when I logged onto the server using the administrative log on I found a Hacking program running on the server. The program was...

runas.exe commanline does not accept password as a parameter. I need a vbscript which would grant elevated priviliges (I have the admin password) temporarily for a .exe to execute. How do I do this ?

We are due to implement system centre configuration manager in our business. I have read some basic links on this. It seems an admin’s dream. Our 3rd party support have said it can vastly help with managing and securing servers, workstations etc....

What port in the firewall do we need to open up to patch matchines in the DMZ

I am unable to delete some folders in Windows 7
I was moving the User data files as I had done in Vista to another drive. This folder is called Users on Data Drive. When I moved three folders starting with My  Music, Pictures, and Video, instead...

Just started receiving SAM error 12294 on 2003 AD primary domain controller as well as NTDS replication warning 1083 followed by 1955. The Domain Administrator account is constantly being locked out? Can anyone assist with this problem. I have...

Hi all,

I've come across yet another machine infected with XP Antivirus 2008. I downloaded and ran ComboFix against it, as in the past. This time, however, ComboFix keeps popping up a window which says "ComboFix has detected the presence of...

Hi Experts!

I am using the code from here as a basis for part of my application:

http://www.codeproject.com/KB/cs/Remote_process_controller.aspx#xx2157445xx

The target machine is a Server 2008 SP2 machine, and I am working from a Win 7...

I am using Microsoft Baseline Security Analyzer Version 2.2 (2.2.2170.0) on MS Windows SBS 2011 domain controller

I am unable to scan domain clients having Windows 7 OS but can scan Windows XP clients

getting the following error:
...

I have had to do a PCI (Payment Card Industry) Compliance check and we are failing with this:

150085 443 Slow HTTP POST vulnerability

"Application scanner discovered, that web application is probably vulnerable to slow
HTTP POST DDoS...

I cannot delte r edit my hosts files on two pcs, one running Vista and the other running XP. I need to insert one line.  But when I try I get a message that someone process is using HOSTS, or that the compouter cannot created a HOSTS file. I've...

Over the period of about a month, all our VPN laptops seem to be getting infected with what must be a rootkit of unknown origin. McAfee, SpyBot and SpySweeper can't seem to find any bugs, but our IDS has been alerting me to these symptoms: ICMP...

I have to urgently develop a scheduled agent that must access and rename folders on the file system of a data server.
The agent is almost done and I am testing it on local.
Of course I obtain a "Permission denied" when trying to rename the...

I have run fixboot on a pointsec encrypted hard disk. Now i cannot get access to the disk. The pre-boot pointsec login screen is lost. When I boot it shows NTLDIR missing. I have tried master-slave also but no sucess. I have also tried using the...

Hi Friends,

This is my nagios configuration. i am trying to schedule host and service downtime by nagisoadmin but i am unable to do. whenever i am going to schedule, getting message (Sorry, but you are not authorized to commit the specified...

Looking for confirmation, we have some WIndows 7 systems that we need to connect to a Samba share.  The only way we can get this t work is to set the LmCompatibilityLevel to 1, which is: Send LM & NTLM – use NTLMv2 session security if negotiate. ...

Hi

We would like to use a login script to delete any registry keys called "BACKUP OF Default Outlook Profile".

The keys are located here

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\...

When we try to use GMER on many of our machines, under the rootkit/malware tab, onlyl Services, Registry, and Files are selected.  Everything else is grayed out.  Can anyone shine some light on this?  If not, please recommend the best rootkit...

I could use some help please. Have a computer that is infected with at least a one trojan. Ran combo fix but I am pretty sure it didn't get everything. Here is the log file.

I need assistance setting up a Windows 2008 Network Policy Server to be used as a radius server for a Web Captive Portal used to authenticate users allowed to connect to a wireless network.
I have PEAP set up and operational for domain joined...

Experts,

I need some detaled (laymen) specifics on SID / RID /GUID.

I have read several documents/resource books, so please do not point me to several links I must not fully understand and/or have already viewed.

This has come about due...

Recently reformated desktop(dell dimension 8400,wireless network at home) with windows 7 pro. Although I like interface, always having problems with IE8 hanging up and closing. After recent same experience, closed IE, later when I returned...

A couple weeks ago, I started a Marlwarebytes scan. During the scan, MSE found two versions of: Java/CVE 2011.3544.N

They were removed by MSE.
I asked why MSE did not find these before the Malwarebytes scan started.
The answer was that...

HI
i've been infected by this 'security shiled' nuisance and I'm finding difficult to get rid of it.
I've tried with malwarebytes in safe mode and normal mode and after full scans it doesn't find anything wrong.
How can i remove it completely?...

I have a very old laptop that is on it's last leg. There is software installed on this laptop that I no longer have the disks or keys for, so reinstallation to a fresh system is not an option, I must move this installation to new hardware.

The...

I would like to automate the process of uninstalling Symantec Antivirus Client from about 40 Windows XP clients who are part of Windows Server 2003 domain and the only thing I am stuck at is how to edit registartion entry so that the uninstall...

Hi,

I have a pc that is infected w/ some unknown virus/spyware.  I tried to run office update from IE, but it keeps on redirecting me to another site.  I tried using malwarebyte, but it keeps on crashing.  My last resort is a re-install, but...

Hello Experts,
i have to appear in an interview very soon, for learning purpose i have this question :

Please, i want to know which is the latest Operating System being launched by any Company these days for Personal Computer and
What are...

i want to filter traffic from 2 ip address
192.168.10.3
192.168.20.4
how can i do this?

I'm trying to ssh to an AIX 5.3-12 box running "OpenSSH_5.2p1, OpenSSL 0.9.8k".  I can sftp to the box fine, but when I try to ssh to it the connection hangs immediately after entering the user name and password.  I tried rsh and it too hangs. ...

I am planning to implement a login notice for our domain users that basically states that you're using a company computer with no expectation of privacy and that they will follow all policies etc.

I would love to see some samples of these...

I had a virus on this computer and now windows update will not work.  I tried the fixit for me [agressive is no longer an option] and it failed to correct the problem.

The OS is Vista 32 bit and the error is 80096001

I have a cllient using thin clients & wants to disable auto logoff from Terminal Services, so the thin clients will not keep disconnecting. How & where would i accomplish this?

Thanks

Hello

One of our client laptops has a program installed called "PC Power Speed" that is clearly malware/virus as it claims to have found a virus and asks you to pay for it to remove it.

I've searched on the internet but there doesn't seem...

hi all
i use CSP to access smartcards and usbtoken , but i don't know how to change smartcard pincode .
please help me !
thanks

I would like to know how resilient a Windows server is to TCP SYN flood attacks. I know modern Linux kernels have SYN cookies which makes it pretty much invincible to SYN flood, but Windows seem to lack this feature. So my question is: now to...

Windows Server 2003, all current updates installed

I am getting tons of these messages on my domain controller.

Event Type:      Success Audit
Event Source:      Security
Event Category:      Account Management
Event ID:      697
Date:            2/13/2007
Time:      ...

Hi,
I want to know is that possible to scan external devices in PC using SEPM 11.4.2 or any other symantec product..?? its include USB keyboard,USB mouse or any other USB resources..please remember i want to schedule my scan on weekly basis or...

what is the diffrent between these two cisco switches
 WS-C2960-48TT-L
and
 WS-C2960-48TT-S

what is the diffrent between S and L ?

I have dell xps1330 noteboook  with fingerprint sensor, the system comes with fingerprint reader suite ver 5.6 software. i downlaod fingerprint reader suite 5.8 form net(link was given in windows problems & solutions windows). and i locked my...