20
votes
2answers
1k views

Why should I start to replace Windows Server 2003?

Windows Server 2003 is a very good operating system from Microsoft, and we're relying on it on a daily basis. I have heard that I should replace it by something "newer" and more "modern". Why should ...
0
votes
0answers
20 views

UNC shared path not accessible though necessary permissions are set

I have 2 environments A and B. A is an original environment whereas B is a clone of A, exactly except AD servers. AD server of B has been assigned a trust relationship with A, so that all the service ...
-1
votes
2answers
76 views

Windows 2003 Server Blocking .exe files [closed]

I have built 2 x windows 2003 r2 servers, during the teaming of two nics, the nics would not team correctly due to an issue with the switch I was connected to, only one nic would work, the second was ...
3
votes
1answer
66 views

Ban IP Address on unsuccessful login on Server 2003

I'm regularly under brute force attacks on my Windows Server 2003 with Citrix installed. How can I automatically ban IP addresses that have several unsuccessful login attempts ? This question has ...
0
votes
1answer
45 views

A way to only allow some ports on windows server

I have been trying to make this work the last few hours but haven't come far. I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look ...
0
votes
1answer
145 views

Windows Server 2003 R2 - Who has shutdown this server?

I'm hoping somebody can help me out here. I have a server that has been shutdown on 3 separate occassions but I cannot definitively determine who. I'm hoping somebody can help me figure out the ...
0
votes
1answer
64 views

allowing only access to TFS to external

Recently I've found the need for allowing access to external people to my TFS server, but I have to be sure that they can't access others servers. This is what I've tried so far: Created a security ...
0
votes
0answers
46 views

Cannot Connect to Windows Server Using a Particular IP

We have a Windows server 2008 running as web server. The Server has two IP's (A and B) added to it. We were able to use both the IP's for remote desktop connections and FTP connections. Strangely we ...
1
vote
2answers
973 views

Restrict RDC console session for administrator only in Windows 2003 Server

I have a server (Windows 2003 ) and different users connect the server via Remote Desktop Connection. All users have admin rights on it. So sometimes it becomes very difficult for me to RDC to the ...
-1
votes
1answer
223 views

Can't login to Windows Small Business Server 2003

I removed AD by cmd using dcpromo and now when trying to access and login after a reboot with the Administrator account I can't. Do I need to reset the password from a boot disk?
1
vote
2answers
332 views

Window Servers 2003 Security After Support Lifecycle

Hello, I wanted to ask if let's say that Microsoft has stopped supporting Windows Server 2003 now so there is no any security updates and I use that system for Domain Controller (Windows XP/7 ...
-5
votes
1answer
267 views

check local user accounts for blank passwords

I need a tool/script that can help me find local user accounts that do not have passwords across a network. Not all computers will be on the domain, but 90% are (win2003). But I need to audit/check ...
1
vote
0answers
13 views

How to use SCW to produce XML of current settings

The Security Configuration Wizard allows you to create an xml of various recommended security settings for the current server, based on role. Is there any way of producing this xml based on the ...
1
vote
0answers
275 views

All local users set to “User must change password at next logon”

We had a weird problem occur on a production Windows 2003 R2 SP2 server which has about 50 local (the server is in a 2000 AD domain, but these accounts are local to the server) accounts defined. ...
0
votes
1answer
1k views

Lots of Logon/Logoff events in the event viewer windows 2003

I seem to be getting a lot of these entries in the Security event viewer. Around 8-12 every hour. I am wondering if a) I should be worried about it? or b) what actually is going on, Can anyone help? ...
1
vote
1answer
714 views

Cannot Apply Screensaver GPO to Windows 7 clients through a Security Group

Our environment consists of a 2003 Active Directory with about 50% split regarding XP and Windows 7 clients. Our security policy states that by default everyone's desktop should lock at 2 hours for ...
2
votes
0answers
282 views

Duplicate Administrator Accounts

Somehow, I have a Windows 2003 Server that has two local Administrator accounts that have the same SID (S-21-xxxxxxxxx-500). Therefore, normal utilities don't let me delete them. (Can't delete a ...
0
votes
2answers
1k views

Save any file directly on Windows server instead of the user's PC?

I am using a Windows 2003 R2 server and an XP system. I want to save any file (like- .doc, .xls, audio and video file) directly on the server from XP system. There must be no option to save the file ...
4
votes
1answer
375 views

Why is my 2003 R2 SP2 server being scanned as vulnerable to MS05-019

A nessus security scan has found a 'security hole' from bulletin MS05-019 on my 2003 R2 SP2 system which is fully patched. According to MS, this vulnerability is only for 2003 SP1. So, how can the ...
1
vote
1answer
350 views

How to secure a Windows SBS Server against fraudulant login attempts?

I administer a Windows Small Business Server 2003 R2 server for a small business. The only ports that this server has exposed to the internet are SSL and the RDP tunnelling port used by the SBS remote ...
0
votes
2answers
879 views

How to allow just one user to login in special computer in Server 2003

I want to just allow one user to login to a special computer in domain. how can i do that ?
1
vote
0answers
537 views

Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?

I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...
2
votes
1answer
162 views

Is KB2641690 required on W2K3 running IE6

KB2641690 is an update to the Microsoft Untrusted Certificate Store but it not detected as required by MBSA. It is not installed on my machine and does not appear to be superseded by anything. Any ...
-2
votes
1answer
39 views

Need advice on Windows Server 2003 security for website use [closed]

I hope some really cool experts can share their knowledge with me. We have a dedicated server to host our online store Runs SQL 2005 No uploading by web viewers, strictly to sell goods Server ...
2
votes
3answers
167 views

Windows Server logged out vs. logged in and locked

We have some off-the-shelf OCR software that we'll be using to automate processing of certain customer forms that come to us via fax at all hours of the day. The OCR process needs to run 24 x 7, but ...
11
votes
4answers
1k views

How do I deal with the removal/eradication of an unknown worm on our network?

TL;DR I'm pretty sure our small network has been infected by some sort of worm/virus. It seems to only be afflicting our Windows XP machines, however. Windows 7 machines and Linux (well, yea) ...
2
votes
1answer
442 views

Identifying repeated, failed login attempts as Administrator on Windows network

I have a small network with a couple of Windows XP machines experiencing random reboots. When the computer restarts, it comes to the login prompt with 'admin' in the username field, even though the ...
1
vote
1answer
212 views

Windows Server 2003 force RDP client to be RDP 6

Hi I was wondering whether it is possible to configure Windows Server 2003 to require that the RDP client that connects to it is version 6 or above, as I believe with version 6 you are able to have ...
0
votes
1answer
269 views

Have a script which adds Security on share to “Everyone”

[Old post] I have a shared folder on the network which is shared with "Everyone" 'Read' & 'Read & Execute' privileges. A few people have 'Write' access and sometimes somehow when they either ...
0
votes
1answer
90 views

Win Server 2003/Terminal Services Remote Access

Office users access a win2003 server from within the office using thin clients and terminal services. In reviewing the security settings it seems, by default, all users in the 'Remote Desktop Users' ...
0
votes
1answer
64 views

How to create special groups and give them special process

I have many admins on the network and I want to specify job for them for example I want to create group responsible for install and run yahoo messenger means I don't want to give them full admin ...
0
votes
3answers
116 views

Help on securing WIndows

I have 2 systems running MSWindows Server 2003 and 2008 respectively. I have done all the updates. I am interested in securing them e.g. close all unneeded services. For example my concern is that if ...
0
votes
1answer
749 views

Remove local accounts but leave domain accounts in local administrators?

I'm trying to rename the local administrator account on all the PCs in a 2003 domain. The GP I have that uses GPP to rename the local administrator seems to work. However the problem I'm having is ...
0
votes
2answers
51 views

Set security on pattern of sub folders (Server 2003)

I have a folder structure similar to the one shown below these paragraphs. How do I change security on every 'Photos' folder without clicking through each individually in Windows Explorer? There are ...
1
vote
4answers
4k views

Security permissions for remote shared folders

I have two servers running Windows Server 2003, and I want copy files from one server (A), programmatically with a windows service running under the Local System account, to a shared folder on the ...
4
votes
1answer
2k views

How can I remove my users from local admin rights with a GPO?

I have active directory 2003 and windows xp running on clients so I don't want any of my users to have any admin rights on their PCs and I have already gave them local admin rights So Without to go to ...
2
votes
1answer
1k views

Active Directory how to make Group Policy to allow users to change their network settings

I have Active Directory 2003 and my users are on Windows XP. How can I set a policy to active network configuration for the users? In other words some users are traveling a lot so I want to give them ...
6
votes
2answers
1k views

What's the default hash format / algorithm of Active Directory?

I'm wondering what format I need to put hashes in to write to userPassword via LDAP. Apache Directory Studio gives me several options, but I don't think any of them are it. Can anyone document the ...
0
votes
4answers
248 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
0
votes
2answers
196 views

SSL: Page Includes Resources Which are not Secure

I get this error every time I have a request to my SSL server, even when it's a text file. Is it not sending the response via SSL? Apache SSL config: Listen 443 AddType application/x-x509-ca-cert ...
2
votes
1answer
287 views

Disable net command

How can I disable the command line net command in windows server 2003? It would probably be good to do so for security purposes.
0
votes
1answer
38 views

Unable to make registry or security policy changes (that “stick”) in an offline Windows Server 2003 environment

I've inherited a network, in my new position, that I'm in the process of getting accredited and then online. For now it's completely offline and all my updates are done locally at the machine(s). ...
0
votes
1answer
129 views

Windows Domain Controller “Security Folder” Permissions

anybody know if on %WindowsPath%\security the "Authenticated Users" and "Server Operators" must have "Traverse Folder" permissions on a Domain Controller (Windows 2003). An external audit over my ...
2
votes
2answers
500 views

Is there an alternative to installing a domain controller on the EC2 cloud for administering users across all of your instances?

We have a bunch of servers up on the Amazon EC2 cloud running Windows 2003 Server, and I was wondering if you knew of any ways (apart from a domain controller, which sounds like a pain to do on EC2) ...
2
votes
3answers
7k views

Anonymous Login attemps from IPs all over Asia, how do I stop them from being able to do this?

We had a successful hack attempt from Russia and one of our servers was used as a staging ground for further attacks, actually somehow they managed to get access to a Windows account called ...
0
votes
1answer
235 views

Wizard or script to assign folder permissions

I'm new to server support; spending most of my time in desktop support. I've been given a request to add read-only access to a list of subfolders on a Windows 2003 Server. Rather than adding the ...
0
votes
1answer
113 views

kerberos security question

I don't know what the best practice for kerberos is with regards to security. I was wondering is it a good idea to allow a kerberos server to be public so public servers can use single-sign on or is ...
1
vote
1answer
358 views

Exchange 2003 default permissions for ANONYMOUS LOGON and Everyone

ANONYMOUS LOGON and Everyone have the following top level permissions in our Exchange 2003 Server: Read Execute Read permissions List contents Read properties List objects Create public folder ...
0
votes
2answers
5k views

Default Domain Policy Overriding Custom GPO even though Custom GPO is Enforced

I'm trying to apply a custom GPO to an OU with a specific account in it. Even though I enforce the GPO, the default domain policy is still overriding my custom GPO and settings are not being applied ...
0
votes
2answers
274 views

Windows Server 2003/2008: Please recommend security software and practices [duplicate]

Possible Duplicate: What do I have to configure on my server to increase security from default? Hello, I am a "returning" MS Windows Server admin, I haven't been in in MS server business ...