Local System Account
I am a novice to Windows administration. On Windows 2000, several services 
 
run as local system account. If I were to run some commands manually as 
 
system, how do that. Do I logon as Administrator login locally on the server 
 
and then execute my commands, or there is something else to be done. 
 
I am an account on the server (pmehrotr) which is in Administrators group, 
 
but I do not have access to Administrator account per se. Is there any way I 
 
can run something as local system acc ...
Read Entire Conversation

SCECLI 1202
I recently updated the security policies on a standalone system (not on a 
 
domain but in a workgroup) and have begun to have SCECLI 1202 errors in the 
 
application event log.  These entries show up everytime the computer policy 
 
refreshes. 
 
Sample event text: 
 
Security policies are propagated with warning. 0xd : The data is invalid. 
 
For best results in resolving this event, log on with a non-administrative 
 
account and search http://support.microsoft.com for "Troubleshooting Event ...
Read Entire Conversation

Computers on the network
Hello: 
 
I have an issue with users putting there personal computers on my network 
 
and other devices.  I know I can configure DHCP to issue addresses via there 
 
MAC addresses but this is a lot to manage.  Does anyone know of a good way 
 
to manage this? 
 
Harrison Midkiff
Read Entire Conversation

Issue Certificate
Hi, 
 
How do I instruct Win2000/2003 server to issue a certificate without having 
 
a CA installed or having to purchase one from third party.  I was told there 
 
is a way to have OS generate its own computer certificate.  I have see on 
 
mail servers, etc. certificate issued by itself and with a common name of 
 
the server's FQDN. 
 
Any help appreciated. 
 
Thanks.
Read Entire Conversation

Hello Guys, Please let me know if you need any Cisco
Hello Guys, Please let me know if you need any Cisco 
 
WS-X6704-10GE $8390 (CFC) 
 
WS-X6724-SFP $7300 ( CFC) 
 
PA-MC-8TE1+ $5295 
 
PA-MC-STM-1SMI $12900 
 
4GE-SFP-LC $21995 
 
WS-F6700-DFC3BXL $7400 
 
60 days warranty 
 
For Quick Quote. Please visit here 
 
http://www.linkwaves.com/requestquote.asp 
 
LinkWaves Corp 
 
29980 Technology Drive, Suite 6 
 
Murrieta, CA 92563 
 
Tel: 909-725-9143 
 
Fax: 707-221-3762
Read Entire Conversation

security center turned off
my security center is turned off and there isn't anywherte to turn it back 
 
on. My firewall gives some error message and i can't update windows at all. 
 
help
Read Entire Conversation

rmtshare.exe overwrting ACLs
Has anyone ever seen the rmtshare.exe command overwrite the entire ACL 
 
instead of just adding to it when using the /grant switch?  I recently 
 
observered this behavior and can not figure out why it worked fine on some, 
 
but not others.  I have looked for any commonalities that I could think of 
 
and still don't have a clue!  Any help would be greatly appreciated.
Read Entire Conversation

Security Patch 921883
I have a couple of servers that are running Windows Server 2000 SP3. I 
 
cannot update them to the latest sp because of several issues. 
 
My question is that the requirements of the patch says that it needs 
 
SP4. 
 
So what happens if you install this patch on a SP3 system? 
 
Any help would be appreciated
Read Entire Conversation

Windows 2000 Server Local Policy
I have a Windows 2000 Server, SP4 with SQL 2000 installed and fully patched. 
 
The server is on a Windows NT 4.0 Domain.  I need to prevent Domain users 
 
from being able to login to the server via Local Security Policy, If someone 
 
could please advise of where I need to be looking in the Computer Management 
 
I would be extremely grateful.  This has been dumped on me basically because 
 
we are owned by a US Corp and need to be SOX compliant by end of month. 
 
Thanks, Please reply to group.
Read Entire Conversation

Why is MS04-012 still not marked obsolete for Windows 2000?
Hi, 
 
this would interest me a lot. As I simply do not like double work for no 
 
obvious reason, I did a direct comparison of the old patch... 
 
http://www.microsoft.com/technet/security/Bulletin/MS04-012.mspx 
 
and the new patch 
 
http://www.microsoft.com/technet/security/Bulletin/MS05-051.mspx 
 
Clearly Microsoft states in the Security Update Information section that 
 
especially for Win2k, MS05-051 does *NOT* replace the MS04-012 patch. 
 
Yet I think it does. 
 
Please take a look her ...
Read Entire Conversation

Exporting File and Folder permission
Hi, 
 
I have a very special requirement. In my setup, there is Terrabyte of data 
 
on file server. Users are directly added to these folders and files NTFS 
 
permission. Now they want to add those users into groups and remove users. 
 
For this, i need to export the ACL for users only. I have gone through many 
 
tools, but they export users as well as groups also. How can I distinguish. 
 
Folder hierarchy you can imange with TB of data. Its huge. Number of groups 
 
and users also huge. 
 
 ...
Read Entire Conversation

MS06-040: Vulnerability in Server service could allow remote code execution.
Hi, 
 
I haven't posted to a newsgroup for a long long time, I've searched high and 
 
low and cannot see an answer to this one but sorry if this has already been 
 
asked before. 
 
MS06-040: Vulnerability in Server service could allow remote code execution. 
 
We have about 100 Windows 2000 Servers running Service Pack 4 for various 
 
roles and about 1600 Windows 2000 Professional desktops. MS06-040 concerns 
 
me and we have been advised by our peers to patch immediately to prevent 
 
someth ...
Read Entire Conversation

Expanding on KB 244600?
Microsoft's KB article #244600 gives default file system permissions for 
 
folders for member servers and domain controllers for Windows 2000.     Has 
 
anyone seen any article (or even third party web page or book) that expands 
 
on that and actually talks about the reason for each of these settings, 
 
which Microsoft programs will use those folders and how, etc.? 
 
-- 
 
Will
Read Entire Conversation

Windows 2000-Export DHCP with Mac and IP Addresses
I can't for the life of me figure out how to export the Mac addresses 
 
along with the IP Addresses and the Reservation names (computer names). 
 
Could anyone help enlighten me on this?  I am trying to export the 
 
DHCP info from the Windows 2000 box and import it into a Mac OSX server.
Read Entire Conversation

Messenger Service?
Hello.  Sorry if this isn't the correct place to ask this question as I'm 
 
hoping to know more of a strange message that I recently noticed. 
 
I noticed there is a strange pop up message that appeared on one of our W2K 
 
Server this morning that says: 
 
-Messenger Service 
 
Message from [Some Fax machine name here?] to ADMINISTRATOR on 8/10/2006 
 
11:47:40 PM 
 
An outgoing fax is ready for previewing. 
 
[OK] 
 
I'm not familiar why this message came up since we haven't had any fax 
 
ma ...
Read Entire Conversation

Virus access to System Restore??
I just spent the day scanning my drives to remove some viruses. 
 
- Yes I was at fault in that I didn't have antivirus sw on my system.. now 
 
rectified 
 
- Yes I shouldn't have gone to that site and accepted a downloaded codec 
 
install 
 
The av sw found 4 viruses including, as I suspected a fake virus alert: 
 
The taskbar show (bottom right of screen) that there was a virus and 
 
occassionally popped up meassage saying my machine was infected and to click 
 
there to install antimalware ...
Read Entire Conversation

a noob encryption ?
Hello everyone, I am new to this and wanted to give you guys a scenario 
 
that maybe someone could suggest a good method of encryption. 
 
I have many txt files that need a level of security, and these files 
 
exist on win 2k/2k3 servers.  Then these files are pulled off the 
 
network by dos machines. 
 
What is a good way to keep these files encrypted on the server and then 
 
decrypted when they get to the dos machines.  These files are not 
 
stored locally on the dos machines. 
 
I have n ...
Read Entire Conversation

'authenticated users' group membership question
this is probably a stupid question but I was wondering if computer accounts 
 
were included in the 'authenticated users' group?
Read Entire Conversation

Group Policy - Computer Policy - When does this get applied?
I know that when you deploy software through GPO and assign the security 
 
group to a user account that policy gets applied after the user has supplied 
 
there network credentials and are logging into there PC. 
 
What I would like to know is at which stage would this same policy be 
 
applied if it is added to the computer account instead. 
 
The reason why I am asking this question is that I have a remote user who I 
 
have added his PC to a security group and I need this policy to apply its ...
Read Entire Conversation

Tracking File Modifications by User?
I am running SBS2003 with a Windows 2000 Server running as a "member server" 
 
with a role as file server. 
 
Clients map to the fileserver's drives via a login script.  We host various 
 
dBase5.7 files on one of the volumes (called "u:\") and the dBase developer 
 
has noticed that someone has maliciously changed the .dbf files and/or .mdx 
 
index files. 
 
Is there an audit log file in Windows 2000 Server so that I can pinpoint 
 
which AD user it was? 
 
Thanks, 
 
S
Read Entire Conversation

Your System is now locked.
I had to reboot my server (b/c it was convinced the printer had a paper jam). 
 
Instead of booting, it gives me this message: 
 
The RF-ID tag has changed. 
 
System security - keyboard is locked. 
 
PXE-M04: initializing network boot device using interrupt 18h.... 
 
System security - keyboard i unlocked. 
 
176 the system has been tampered with. 
 
Turn power to your system off and then on. 
 
Your system is now locked. 
 
--- 
 
If I turn power off and then on - 1st time, nothing happens; 2n ...
Read Entire Conversation

Access Denied to Virus Scan when checking Master Boot Records
Background: 
 
The system is an old, stable Windows 98 machine, completely up-to-date with 
 
Windows Update, the last 2 security fixes applied were KB917344 & KB918547 on 
 
June 23/06. Machine is used for some basic internet surfing, e-mail using 
 
Pegasus, and word processing. No other intentional OpSys settings or other 
 
changes (other than Windows Update) in a long time, no new applications 
 
installed, no downloads, nothing. This machine is in a LAN with a router hub 
 
c/w firewall. N ...
Read Entire Conversation

Restrict windows share access by IP address
Hello all, 
 
I work in a production network with contractors. 
 
All the employees and the contractors access the same server with 
 
several shares. 
 
How can I restrict the share access by IP adresses (to be sure the 
 
contractors won't be able to connect from their workstation, even is 
 
someone give them the login/password) 
 
Thank you 
 
Ze MD
Read Entire Conversation

Hardening Windows Registry
Does Microsoft publish any documents that give an alternative for hardening 
 
of the Windows 2000 or Windows 2003 registries?    There are a lot of 
 
default permissions with "Everyone" and I would like to tighten that up. 
 
-- 
 
Will
Read Entire Conversation

AD account admin delegation and moving all user accounts to an OU
Hello 
 
I want to delegate the adding and removal of user accounts to a 
 
secretary while restricting everything else including access to 
 
Exchange attributes in AD and creation of mailboxes. I read that and OU 
 
should be created and permissions delegated there. Can I move all my 
 
users into an OU without causing problems?  Can the delegation be done 
 
this way? 
 
Thanks 
 
Ned Hart
Read Entire Conversation