0
votes
1answer
38 views

Windows 2008 r2 not using default security groups (ie Domain Admin) prevented from changing own password

Apologies if I did not find a question similar to mine but i have searched honest! Firstly we have undertaken a no default group approach to our security on active directory. This has been very ...
2
votes
1answer
132 views

What should I do if an necessary client application has to run on an older (vulnerable) framework?

A client needs to have .NET Framework 4 installed and not patched so their software running on their Windows 2008 R2 Server functions properly. This sparks the questions: When is it okay to ...
1
vote
2answers
79 views

How to run a website securely on a server whose administration and security is outsourced?

I'm a web developer, and don't know much about system administration and security. Would it be possible for me to set up a site that processed credit card payment, payouts, bitcoin payments, or other ...
0
votes
1answer
135 views

How to set Jira default groups for new users?

I'm using Jira on demand and I'm trying to change the default groups a new registered user belongs to.
2
votes
1answer
129 views

Potential Bot-Net organizers probing for new machines?

I'm getting a number of exploit attempts from different IP's today. GET ...
0
votes
1answer
75 views

Web Server sercurity (used only for web services)

I am using a Virtual Private Server for accessing Web-Services used only on the Mobile devices, there are many entries in the access and error log, even there is nothing on the web server. I am ...
73
votes
16answers
8k views

How do I protect my company from my IT guy? [closed]

I'm going to hire an IT guy to help manage my office's computers and network. We're a small shop, so he'll be the only one doing IT. Of course, I'll interview carefully, check references, and run a ...
4
votes
1answer
168 views

Running a Windows server without an administrator in charge

I am dissolving my business as a Web Developer, and handing over all continuous work to successors. For one client for whom I have developed a number of web apps over the years, I set up a Windows ...
1
vote
2answers
815 views

How to hide the admin page?

The admin page is a page which allows me to access the database of my website. Of course, there will be a login screen there but I want to take measures that no one besides me will even ever see this ...
5
votes
4answers
1k views

Best way to securely communicate passwords and credentials to clients?

Often I end up doing server administration for clients as part of developing web applications, I always set up access for myself using an SSH Key pair. I usually end up choosing a random password for ...
14
votes
5answers
3k views

Updating production Ubuntu boxes the dos and don'ts

Every so often I login to production web/db/tools boxes and see the typical message: 30 packages can be updated. 16 updates are security updates. My question is, how do all of you handle updates on ...
3
votes
6answers
535 views

default ubuntu install, is it hackable?

Coming from a windows background, and I have admin'd a windows box for years now and I pretty much just have to install the patches (actually auto update takes care of that!). I am thinking about ...
3
votes
7answers
7k views

disable internet per user on windows xp

Is there a way I can disable internet access for a single account an XP Pro machine? Preferable something built-in like a security policy or something. Thanks!
8
votes
4answers
5k views

How do you manage service account credentials (passwords)?

In a Windows environment how do you address the following issues with service accounts? Regular Password changes - with single service accounts used on multiple machines how do you regularly change ...