0
votes
2answers
72 views
+50

Disable Windows Share Without Administrator Access

We have a folder on a windows server shared to provide access to an important application. When the application is being updated we (DBAs) change the permissions on the share to deny all access to it ...
0
votes
1answer
31 views

How to change password complexity for mailbox in exchange 2013

I find the default password policy in exchange pretty weak (only 6 char.). Is there a way to change this password policy ? e.g. : Minimum 1 cap, Minimum 8 letters. Thank you !
0
votes
0answers
16 views

802.1x Log.txt log file

I have a network that have a basic PC > SWITCH > RADIUS server structure ... and i noticed that every p.c on the network have a c:\8021x folder that contain a log.txt file ... and on the log.txt i ...
1
vote
0answers
45 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
0
votes
1answer
134 views

What are the minimal permissions for WMI access to processes CommandLine?

I have been trying to get a remote listing of running windows processes including their CommandLine/ExecutablePath attribute through WMI as a non-administrator domain user for a monitoring tool. I ...
0
votes
1answer
212 views

What is the workaround for WMI remote connection failure with Access Denied error when client runs with Local System account?

What is the workaround for WMI remote connection failure with Access Denied error when client runs with Local System account? I tried to run script under local system account on the client which ...
5
votes
1answer
201 views

Recursive reset file permissions on Windows

There is a big, complex directory structure on a relative big NTFS partition. Somebody managed to put very bad security privileges onto it - there are directories with randomly given/denied ...
2
votes
1answer
411 views

Windows 2008 R2 Server Security Log filling with event 521

I understand that status code 0xc0000008 means Invalid Handle. How do you resolve this issue (besides a restart)? What is the best way to determine the cause for this? Log Name: Security ...
1
vote
0answers
183 views

permissions for VBScript/ADSI remote local account password change

I am using the IISADMPWD pages on IIS8/Windows 2012 and have found that administrative rights on a remote server for password changes is not required. I am hoping somebody can shed some light as to ...
0
votes
1answer
184 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
1
vote
0answers
94 views

Restrict windows server 2008 R2 remote mmc

I am looking for a way how to disable remote access to management console of single Windows Server 2008 R2 with least administrative effort. Server is in domain and there is big amount of other ...
4
votes
1answer
255 views

Microsoft Multi-factor Authentication not working with RDP

I am installing a new remote access server, where I need multi-factor authentication for RDP access (=a call back to the user's cell phone after they enter their credentials). The problem is that the ...
0
votes
2answers
1k views

Allow service to interact with desktop

DC OS - Windows Server 2008 R2 Std Client OS - Windows XP, Windows 7 I have implemented Security policy through Network Policy Server and enabled Wired AutoConfig Services Automatically. While ...
-1
votes
1answer
109 views

Windows: View other network shares without sharing anything myself [closed]

Using windows, I would like to be able to browse computers and their shares on the network, without publishing any shares, administrative shares, and not even having my computer listed in the ...
10
votes
7answers
862 views

What are the pros/cons of blocking a program from running in %appdata%, %temp%, etc.?

While researching ways to prevent CryptoLocker, I saw a forum post that advised using Group Policy Objects (GPO) and/or antivirus software to block run access in the following locations: %appdata% ...
0
votes
0answers
102 views

Why AD DS user is able to write to ADLDS(ADAM) container(user is neither imported nor added as foreignsecurityprincipal)?PS/dsacls cmd to fix it-DENY

I have installed 'AD LDS' instance on one of my windows server 2012 which is part of a domain. I brought few users (windows security principals to 'AD LDS') as 'ForeignSecurityPrincipals' from AD DS ...
1
vote
1answer
223 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
1
vote
1answer
436 views

Can a windows service running with network service or local system account, updated active directory container?

I have two windows services (one running as network service and the other as local system) - because of some architecture reasons these cannot run under domain user account. And there will be a store ...
0
votes
1answer
43 views

What are the recommended internet security measures to take? [closed]

I have built a speical-purpose server, the only purpose of this server is to download some data from a remote(internet) data feeder and do some data processing in the server as well. The only ...
2
votes
1answer
196 views

Unexpected anonymous login in Windows security logs

I've got a VPS server account for some projects and was just troubleshooting an issue earlier when the following turned up in the logs (among the torrent of bots trying to guess account details...). ...
1
vote
2answers
1k views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
5
votes
1answer
75 views

Preventing a Domain Computer from Logging off Causes loss of Authentication

I have a set a domain computer to not require a password on wakeup. This is a strange situation I know but we want the user to never have to login to the computer unless he specifically logs out or ...
3
votes
1answer
216 views

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the ...
1
vote
1answer
190 views

Remote Desktop Clipboard Sharing - Security Risk?

If I connect to a server with RDP and share my clipboard with the server, are there any security risks of my clipboard being availble to other people logging onto the same server? e.g. I have a ...
0
votes
0answers
27 views

vpn error 720 on using specific ip address

I have configured a vpn setup on my system. It is a l2tp connection with a preshared key. on the ipv4 tab i have selected obtain ip address automatically. On clicking connect with this setup i am ...
0
votes
1answer
71 views

Way to script Local Intranet settings?

There's a dialog in the "Internet Options" control panel applet if you go to the Security Tab, highlight "Local Intranet" and press "Sites" that looks something like [X] Automatically detect intranet ...
0
votes
1answer
419 views

Is it safe to enable forced ASLR via EMET on Windows?

I'd like to enable forced ASLR for all DLLs on Windows. Is this safe? Background: ASLR is an important security mechanism that helps defend against code injection attacks. DLLs can opt into ASLR, ...
5
votes
1answer
642 views

How can I list hidden administrative shares using PowerShell?

I'm trying to write a script that will audit shared folders on a few HIPAA-sensitive servers. I'm getting a list of shares just fine using gwmi Win32_Share, however when I go to get the permissions on ...
-1
votes
1answer
60 views

Hosting setup for a small application with security-sensitive data

Not sure this is the right place to ask this but I'll give a shot. I've been asked to implement a system about criminality data. The data is security sensitive, in that it contains information about ...
1
vote
1answer
194 views

I want to find a way to visualise security groups and their members

I hope someone can help... I want to find a way to visualise security groups and their members, and be able to show that to users in a simple format for discussion. I have a simple matrix in Excel ...
1
vote
1answer
432 views

How to restrict access to Visual SVN server by specified IP address? [closed]

I need to allow only specific IP addrees to access my visual svn server. Visual SVN 2.6.0 is installed in the server. SERVER : WIndows 2008 R2 I'm accessing the svn by the urls like ...
1
vote
1answer
171 views

Accessing Remote Desktop on multiple windows machines behind NAT

Our company has multiple Windows servers running behind a NAT firewall. We would like to provide Remote Desktop access to these machines to our users. One of the solutions is by port forwarding. We ...
0
votes
1answer
474 views

Bastion host for PCI compliance

A client in the retail industry has a network with point-of-sale (POS) terminals that connect to a POS Server. Additionally, most of the Windows workstations in non-sales areas also connect to the ...
0
votes
1answer
87 views

Unsafe to run Apache as LOCALSYSTEM on Windows Server?

On my server (Windows Server 2008 R2), I have installed a couple of programs coming with a web interface. As I want to be able to access those web interfaces from outside my LAN, the relevant ports ...
0
votes
0answers
46 views

Cannot Connect to Windows Server Using a Particular IP

We have a Windows server 2008 running as web server. The Server has two IP's (A and B) added to it. We were able to use both the IP's for remote desktop connections and FTP connections. Strangely we ...
0
votes
1answer
36 views

Security Policy Logs On Windows 7 - Determine Why A Certain Software Function Fails

Is there a log file or administrator screen (like Event Viewer) where one can see specific rules that are being enforced? You know how you can use Process Monitor to monitor a task and see registry ...
1
vote
0answers
47 views

Difference between “Security Configuration Manager” and “Security Configuration Wizard”

I want some clarifications about differences between SCW and SCM. strictly Speaking when I use SCM baseline for specific Server Role (domain controller, ftp server, ...), I get for example 200 gpo's ...
4
votes
1answer
31 views

Domain security vs. Forest security

Is it true that the administrators of a domain "A" can reset a user's password in another domain "B" within the same Forest "out-of-the-box" ? I believe that it is not possible for a Domain ...
1
vote
1answer
117 views

“These files can't be opened” error on ALL files after update

Running Windows Server 2008 R2, and doing the latest updates for the last month. Updates had downloaded and installed, although not entirely as I had postponed restarting and finishing the process. ...
1
vote
1answer
163 views

Truecrypt Boot Volume - Keyfiles?

I am actively using keyfiles for non-boot partitions and files (containers?), but I am wanting to bring this into the full system with a boot partition containing my OS (Windows or Linux). However, I ...
1
vote
2answers
694 views

Windows Jump Host

A Jump Host is a special purpose computer on a network typically used to manage devices in a separate DMZ. So, I'm looking for the proper way to implement this for a target running on Windows. I was ...
0
votes
1answer
2k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
0
votes
2answers
103 views

Block Citrix User To Access TIF from IE

There is a restriction to not be able to access C:\ on a citrix environment I'm currently looking at. It is possible to circumvent this measure partially by looking at the temporary internet files ...
1
vote
3answers
689 views

Running programs with 'pre-allowed' admin rights Windows [closed]

I'm working in a high security corporate environment on a Windows 8 machine. I don't have administrator privileges, but am a developer. I won't go into the absurdity of this. The short is; there are ...
1
vote
1answer
75 views

Create files but not modify the created file or any other file in a directory

Is it possible using Windows standard tools to create such a permission model where a user can create a file in a directory, but once the file has been created (file handle closed), the user can not ...
7
votes
3answers
301 views

Hard disk write-once mode on Windows

Is it possible to force a hard disk into 'write-once' mode in Windows? I want to securely store logs so they can't be changed, but I can't use tapes or optical media due to performance reasons.
1
vote
1answer
41 views

How to setup NT Challenge on Windows 2008 R2

I want to setup NT Challenge for a web application. I have read a lot of articles but still not clear how can I setup it on windows server R2. Could anyone please point me settings/Configurations to ...
1
vote
1answer
45 views

Password require pre- and suffix

Is is possible to configure a required pre- and suffix that users need to use while changing their password in a Microsoft environment? If so how? Let me explain where this comes from. In my company ...
-2
votes
1answer
56 views

Local development server risk: inbound connection [closed]

My local development environment is Windows with xampp/nginx. Yesterday I installed malwarebytes and today when I started my xampp server, I soon find out that there is an inbound connection blocked ...
2
votes
1answer
583 views

IIS7 Response header exposes server information when post request is incomplete

IIS reveals "Server: Microsoft-HTTPAPI/2.0" in the response header when a invalid Post request is made. e.g. content-length is not included in the header. The Response returned also says HTTP/1.1 411 ...