The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
48 views

Microsoft Domain Controller, Account lockout polcy not locking out the users?

Just recently i have hardened the Microsoft 2003 domain controller, due to PCI-DSS requirement. I used CIS- cookbook as a guidance. the password threshold policy is set to 3. but as testing when i try ...
-1
votes
0answers
15 views

Restrict access to one VPC in AWS

I am trying to restrict users to a single VPC. I went through Controlling Access to Amazon VPC Resources and came up with the following policy but it does not work. Can someone point out the errors in ...
1
vote
0answers
17 views

How does Juniper vlan.0 work with policies?

I'm trying to understand vlan.0 and Juniper policies. Referring to here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB16667 According to the link above, it seems that if I use ...
0
votes
1answer
35 views

Using AirPort DHCP relay agent info to assign IP by policy from server 2012

We have recently setup a Windows server 2012 DHCP server, with one scope of 10.0.0.0/16 We have a couple of policies in place to make sure certain ranges are assigned to certain devices, e.g. Thin ...
0
votes
0answers
8 views

Missing objects in Startmenu due to terminalserver policy?

At a customer's site a have an environment with 2012 Standard server and a terminal server. I made some policy settings to restrict access to system options to the terminal server, and bound them to ...
0
votes
0answers
117 views

Setting Up Policy Based Routing For Openvpn

I am trying to run a server that is connected to a vpn. I want to route some of the traffic through the vpn and some of the traffic outside of the vpn. More specifically, I want all traffic to go ...
-2
votes
1answer
34 views

Removing programs for specific computers [closed]

i am currently working for a company as an intern. i have been given the task to remove Java on specific computers that have already installed the program manually. this means that there's no GPO ...
-3
votes
1answer
117 views

Deny to administrators to change network configuration settings

I need to provide admin rights to every user but the users should not able to change network configuration settings. For this I have enabled following policies in User Configuration\Administrative ...
-2
votes
1answer
50 views

Difference between target policy 18 and 24 in SELinux

I recently started to learning SELinux and I am so new on that. So I've faced an issue and I have question, I use CentOS 6.5 and I am learning SElinux via video training. Into the video training ...
0
votes
0answers
380 views

Hyper-V server with multiple subnets and Active Directory Policies and adding domain objects to local groups not working

My lab is a test HP computer connected to a port on my wireless router. It is running Windows 2012 R2 with the Hyper-V role and I am trying to simulate multiple testing subnets to test a number of ...
0
votes
1answer
106 views

allow machine to access localhost website

I've got some IP rules on an Azure VM, the first blocks all traffic, the second allows my laptop to access the website. Both work fine, however when I try to access a website hosted on the VM locally ...
1
vote
1answer
125 views

DMARC 'sampled out' policy override effect in GMail server

Anyone know what actually a 'sampled out' override reason mean in DMARC aggregated daily reports? I only get those from GMail and recently I've got some complains of undelivered messages from ...
1
vote
1answer
192 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
2answers
71 views

FTP Multi User Environment doesn't allow multiple logins

I think ths is a general question but I'm not sure if it needs to be migrated because of the technical and security related nature of the beast in question. For my current client we have an SFTP key ...
0
votes
0answers
27 views

SELinux, complains constantly about rm files in /tmp/

SELinux on my server is constantly flooded by messages like this: Apr 16 00:27:05 mail setroubleshoot: SELinux is preventing the rm from using potentially mislabeled files (/tmp/.font-unix). For ...
0
votes
0answers
89 views

Reading home files permission: Policy constraint violation

I want to confine a certain user to be able to bind a node.js server to a certain port. That bit is working. What isn't working is allowing said user to access his own files. audit2allow is telling ...
0
votes
0answers
319 views

Exchange 2013 - Default email policy with lowercase emails?

I've been trying to apply a custom email address policy to our new Exchange 2013 server. By default Exchange gives users capitalized emails address. Eg - Firstname.Surname@contoso.com I've done a bit ...
0
votes
0answers
315 views

Pam password policy not working for root

I was following this guide (http://xmodulo.com/2013/12/set-password-policy-linux.html) for setting up pam and password for policy for CentOS. Everything works great except the root or any user's ...
2
votes
1answer
120 views

Windows 7 / 2008 connect to VPN at login with Group Policy

I am trying to find a way to have windows 7 VPN clients connect to the VPN server automatically via Group Policy. I tried using a login script but it looks like the scripts are shared from sysvol and ...
1
vote
1answer
177 views

How to override default source address on packets originating from a router

My broadband router runs PPPoA and is dynamically assigned a single ipv4 internet address by my ISP. I have a static subnet which I host on a linux router/firewall (called chenin). The linux firewall ...
0
votes
2answers
539 views

Group Policy - Software Restrictions

I've just set up a new server on a new Domain Controller. I have implemented my Group Policy too. However, I would like to implement a policy to restrict the installation of all software by users and ...
1
vote
0answers
264 views

Complicated OpenVPN/IPSec passthrough setup to solve

I currently have some sort of complicated setup to do. I have a dedicated server, installed with OpenVPN server. There is one OpenWRT router connected to the dedicated server via OpenVPN. On the other ...
0
votes
1answer
304 views

Remove “Act as part of the operating system” policy

On one of our servers we have enabled the "Act as part of the operating system" policy in the Local Security Policy. (Security Settings > Local Policies > User Rights Assignment). Now we would like ...
1
vote
0answers
1k views

Upgrading from ESXi5.0 to ESXi5.1 Host Profile Incompliance

When we are upgrading from ESXi5.0 to ESXi5.1 we get these 2 warnings in the summary of eache upgraded host: “Associated Host Profile contains NIC teaming reverse policy settings that cannot be ...
0
votes
1answer
71 views

Windows Azure Cloud Service - add Local Security Policy to a user account in startup task

I have a Windows Azure Cloud Service project that includes a startup task Startup.cmd file to create some scheduled tasks. In this file I am using the command line to create a user account which I ...
-2
votes
1answer
55 views

Obtaining Full Text of ISO27002 [closed]

You would think this information would be easier to come across but I can't really find it. How do somehow obtain the text of ISO27002? I've tried to find it online in various places (including the ...
0
votes
3answers
478 views

Domain admin cannot change gpmc

Windows 2K8R2 domain. I created a GPO to restrict Domain User access to certain server components on an RDS Host. Now I cannot access the functions I restricted. I am a member of both the Domain ...
1
vote
1answer
72 views

Automatic Node Categorization not working in OpenNMS

I setup a Node Categorization policy in the foreign source definition ; its not working correctly what changes need to be done? Please do let me know if something wrong with the config and any ...
1
vote
1answer
343 views

Changing Password expiry date for limited users in Domain

I have 50 users in my domain. But i have to set password expiry days for 90 for only 10 users. How can i do it. How can this be done without affecting any other users Password Policy.
1
vote
4answers
4k views

How can I limit a users bandwidth in Windows Server 2008 R2 [closed]

We have a user that likes to download movies with torrents in our office and it just kills the overall network performance. Unfortunately we need this user and don't want to confront him directly ...
2
votes
1answer
115 views

Windows Bitlocker to go: How to make drive readonly for other users

I have encrypted a removable drive with Bitlocker to go. I will be giving this drive to another party and want to effectively prohibit this person's ability to write to this drive. This person ...
1
vote
1answer
330 views

Exchange 2010 find activesync policy applied

How to find which activesync policies are applied to an user in Ex2010?
4
votes
3answers
198 views

Email going to a user at a similar domain name

I guess this is more of a best practice/policy question. I'm the postmaster for example.net. Another company has example.com. I get the catch-all emails, any email that doesn't have a user account on ...
2
votes
2answers
2k views

How can I give a running process priority for bandwidth usage on Windows?

I found myself accidentally starting two large uploads, and since they are single BLOBs, I cannot easily stop/start them, potentially loosing much time. However, I prefer one of those processes to get ...
2
votes
2answers
228 views

Remove email addresses by policy

Is there any elegant way to remove email addresses from users using automation, Powershell or Exchange Email Address Policies? The platform in question is Exchange 2007. I would like to modify email ...
1
vote
0answers
45 views

Win 2008 firewall exceptions wont save

Possible Duplicate: My server’s been hacked EMERGENCY Windows 2008 R2 - all updates. The firewall used to work fine - since i edited the exceptions, up until now. Im getting RDP brute ...
1
vote
1answer
419 views

can i allow End Users to change the desktop background on Windows Server 2008 r2?

we are currnetly building a system consisting of windows server 2008 r2 (1 of 2 redundnacy) and 2 Win7 workstations. we would like to allow the customer (end users) to change the background at their ...
1
vote
1answer
870 views

Cross Region S3 bucket policy

I would like to allow EC2 servers based in us-east-1 to read content from a bucket in us-west-2. Every time I try I get a "The Bucket you are attempting to access must be addressed using the ...
0
votes
1answer
278 views

How can I prevent Mac Mail from connecting via Exchange ActiveSync while still allowing my other devices?

Running Office365 Exchange for a corporation, I am unable to enforce any policy on Mac Mail when it's using an active sync connection. It actually does not show up as a device (I even looked at this ...
1
vote
0answers
353 views

AD group policy: auto-lock desktop after idle

Goal is to have desktops lock if they walk away. Compromise is screensaver after some idle time + ask password. Used group policy, set idle time and ask password option...problem is it works on ...
0
votes
1answer
219 views

Route-map changing from permit to deny retains the match tag values

I have a route-map configured on my cisco router with name say s1 and sequence number 10(default) which contains a match tag 10. If i again try to configure the same route-map name with same sequence ...
2
votes
0answers
234 views

How to allow user to apply Retention Policy Personal Tag to Inbox folder

I'm beginning to understand the Exchange 2010 Retention Policies, and have assigned the 'Default Archive and Retention Policy' to all mailboxes. The users are quite capable of managing their own ...
1
vote
2answers
153 views

If modifying email at MTA level is bad, then what is good?

Because of the limitations of 1&1's email hosting (mailbox size) I am about to switch the management of our email to our other server which has WHM, CPanel and Exim installed. It's a CentOS box ...
1
vote
1answer
81 views

Configuring E-mail server to allow review of each outbound email

I want to have a separate person reviewing the style of outbound e-mail correspondence sent by new employees. We have an MS Exchange in our organization, but I can look into any e-mail server system ...
0
votes
1answer
256 views

Juniper NetScreen Policy for intra-vpn

I have Netscreen25 and three networks ( zones ): central, branch office, dial-up vpn, IPs in central network are in 10.0.0.0/24 range, branch office in 10.0.10.0/24 range and dial-up vpn in ...
0
votes
1answer
28 views

How can I set a custom allowed email adress in the exchange 2007/2010 policy?

A normal policy looks like: %s.%g@southeast.contoso.com This allows emails in the format [lastname].[firstname]@southeast.contoso.com. But I want to allow a custom address like ...
0
votes
1answer
3k views

iptables syn flood countermeasure

I'm trying to adjust my iptables firewall to increase the security of my server, and I found something a bit problematic here : I have to set INPUT policy to ACCEPT and, in addition, to have a rule ...
2
votes
2answers
208 views

iptables rejects everything it should accept

Everybody, hello! I'm trying to setup my server firewall using iptables (I have to admit that last time I used iptables was a year ago), but iptables acts contrary to what I ask. Here is my test ...
0
votes
2answers
1k views

group policy in Windows Server 2008 [duplicate]

Possible Duplicate: group policy in Windows Server 2008 One of our employees changed the users setting in a group policy which effects the login permissions for Administrators users. Each ...
1
vote
1answer
607 views

group policy in Windows Server 2008

One of the employee in the Enterprise changed the users setting in group policy which effects the login permissions for Administrators users. Each time I tried to log in locally this message shown: ...