4
votes
4answers
629 views

How can I make an internet facing TFTP server secure?

I have many Cisco IP phones that operate in the following manner (oversimplified): Negotiate with DHCP for IP, DNS, TFTP, etc. Look for SEPXXXXXXXXXXXX.cnf.xml configuration file on TFTP server ...
2
votes
2answers
154 views

With Azure, can I create a VLAN and put all my worker roles and VM's in there?

Is it possible to create a sort of VLAN or private azure LAN thingy .. where I can put any new Workers or VM's in that VLAN? one of the reasons is because I was hoping to create a SQL server on a VM ...
1
vote
2answers
53 views

Is it possible to limit access to an svn server to not just credentials but to machines as well?

my office has provided laptops to all staff in addition to the new desktops we just have. I have been asked to secure our svn server which is a dedicated server hosted somewhere with ubuntu running on ...
-1
votes
1answer
82 views

Access Control Lists & DHCP

Please take a look at this image right here. In the image above you can see a virtual netwerk simulation program (CISCO Packet Tracer 6.0) where I'm trying to setup a network and secure it. However ...
1
vote
2answers
3k views

How to make security group in one forest show up in another forest?

I have two Win2k8 forests which I do maintenance on. The two forests have full 2 way external, non transitive trust with each other. I have a folder in forest X, domain countryX.mycompany.com ...
1
vote
1answer
245 views

Cygwin: how do I disable /cygdrive

I'm using a cygwin based SSHD server and I want to disable the /cygdrive/c and /cygdrive/d paths; is this possible? Using NTFS ACLs to achieve this will be a mess because the user will need access to ...
1
vote
2answers
346 views

What is the relationship (if any) between UAC and ACLs on Windows platforms?

What is the relationship between UAC and ACLs on Windows platforms? Are these two separate security schemes? Or is one a superset of the other? Intuitively I would expect them to be related but I've ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
1
vote
4answers
10k views

Is it possible to provide access to a domain resource to a non-domain user?

After a security review, I'm splitting the tiers of a Windows 2008 Server application that is currently on a single machine in the corporate domain. I want to move the IIS 7 Web UI to a new machine in ...
0
votes
2answers
91 views

Where ACLs are applied

I am trying to understand ACLs and am unsure of where they are applied. Here's my example. I am trying to prevent communication between two VLAN interfaces. My source clients are on VLAN 1, my ...
2
votes
4answers
3k views

Remove SID with ICACLS

I am trying to remove an obsolete SID (the account was apparently deleted). I've tried to run the following on the server (win2003) and a client (win7): icacls c:\path /remove ...
2
votes
2answers
4k views

Grant account write access to specific attributes on Active Directory User object

I am trying to allow an account to update very specific attributes on all User objects. I am setting this security on the "User" object. When I add the account on the security tab, go to advanced, ...
1
vote
3answers
833 views

Hiding subfolders from users with Windows Server security

Using Windows Server 2008. I would like to allow all users to map to a common network drive and be able to browse it. But, I only want them to be able to see the subfolders they actually have ...
2
votes
4answers
2k views

Finding all files in NTFS with specific user or group in ACL

Executive summary: I want to find all the directories and files a particular user or group has access to. In more detail: I'm looking for a command-line tool to recursively search an NTFS directory ...
1
vote
4answers
263 views

How I can secure some Git Repositories in AIX?

I want to secure some git repositories and using only users and groups is not sufficient. I'm thinking about using ACLs to control the access. The access to the repositories is local, the users ...
2
votes
2answers
1k views

Setting NTFS ACLs over the network - Is there a faster way?

In my environment, I have several projects that involve running NTFS ACL audit reports and various ACL cleanup activities on a number of file servers. There are two main reasons why I cannot perform ...