-1
votes
1answer
35 views

Diagnosing heavy bandwidth usage

I run a couple of IIS web servers (Personal, not business) One on win server 2008 R2, the other on 2003. Both fully patched and up to date, with AV. Running on a No NAT connection with 8 WAN IP's The ...
0
votes
1answer
32 views

Does “Deny log on locally” effect “Allow log on through terminal services”?

I am hardening a system and i am unsure about whether or not denying log on locally but allowing log on through terminal services will work. Does deny locally override the terminal services setting?
0
votes
4answers
93 views

Email + data server for a small company needed?

I am currently working with a small company (10 people), whose main business has nothing to do with IT. But we have some IT-Infrastructure, namely an aging Small Business 2003 server, which runs ...
1
vote
1answer
27 views

Microsoft Windows .NET/Visual Studio SDKs installed on production server

We have a variety of SDKs installed on a production Microsoft Windows 2003 SP2 server and I'd like to know if there is any good reason for them to be there, or if they represent a security risk. ...
20
votes
2answers
1k views

Why should I start to replace Windows Server 2003?

Windows Server 2003 is a very good operating system from Microsoft, and we're relying on it on a daily basis. I have heard that I should replace it by something "newer" and more "modern". Why should ...
0
votes
0answers
39 views

UNC shared path not accessible though necessary permissions are set

I have 2 environments A and B. A is an original environment whereas B is a clone of A, exactly except AD servers. AD server of B has been assigned a trust relationship with A, so that all the service ...
-1
votes
2answers
87 views

Windows 2003 Server Blocking .exe files [closed]

I have built 2 x windows 2003 r2 servers, during the teaming of two nics, the nics would not team correctly due to an issue with the switch I was connected to, only one nic would work, the second was ...
3
votes
1answer
78 views

Ban IP Address on unsuccessful login on Server 2003

I'm regularly under brute force attacks on my Windows Server 2003 with Citrix installed. How can I automatically ban IP addresses that have several unsuccessful login attempts ? This question has ...
0
votes
1answer
47 views

A way to only allow some ports on windows server

I have been trying to make this work the last few hours but haven't come far. I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look ...
0
votes
1answer
165 views

Windows Server 2003 R2 - Who has shutdown this server?

I'm hoping somebody can help me out here. I have a server that has been shutdown on 3 separate occassions but I cannot definitively determine who. I'm hoping somebody can help me figure out the ...
0
votes
1answer
98 views

allowing only access to TFS to external

Recently I've found the need for allowing access to external people to my TFS server, but I have to be sure that they can't access others servers. This is what I've tried so far: Created a security ...
0
votes
0answers
46 views

Cannot Connect to Windows Server Using a Particular IP

We have a Windows server 2008 running as web server. The Server has two IP's (A and B) added to it. We were able to use both the IP's for remote desktop connections and FTP connections. Strangely we ...
1
vote
2answers
1k views

Restrict RDC console session for administrator only in Windows 2003 Server

I have a server (Windows 2003 ) and different users connect the server via Remote Desktop Connection. All users have admin rights on it. So sometimes it becomes very difficult for me to RDC to the ...
-1
votes
1answer
230 views

Can't login to Windows Small Business Server 2003

I removed AD by cmd using dcpromo and now when trying to access and login after a reboot with the Administrator account I can't. Do I need to reset the password from a boot disk?
1
vote
2answers
371 views

Window Servers 2003 Security After Support Lifecycle

Hello, I wanted to ask if let's say that Microsoft has stopped supporting Windows Server 2003 now so there is no any security updates and I use that system for Domain Controller (Windows XP/7 ...
-5
votes
1answer
284 views

check local user accounts for blank passwords

I need a tool/script that can help me find local user accounts that do not have passwords across a network. Not all computers will be on the domain, but 90% are (win2003). But I need to audit/check ...
1
vote
0answers
13 views

How to use SCW to produce XML of current settings

The Security Configuration Wizard allows you to create an xml of various recommended security settings for the current server, based on role. Is there any way of producing this xml based on the ...
1
vote
0answers
316 views

All local users set to “User must change password at next logon”

We had a weird problem occur on a production Windows 2003 R2 SP2 server which has about 50 local (the server is in a 2000 AD domain, but these accounts are local to the server) accounts defined. ...
0
votes
1answer
2k views

Lots of Logon/Logoff events in the event viewer windows 2003

I seem to be getting a lot of these entries in the Security event viewer. Around 8-12 every hour. I am wondering if a) I should be worried about it? or b) what actually is going on, Can anyone help? ...
1
vote
1answer
836 views

Cannot Apply Screensaver GPO to Windows 7 clients through a Security Group

Our environment consists of a 2003 Active Directory with about 50% split regarding XP and Windows 7 clients. Our security policy states that by default everyone's desktop should lock at 2 hours for ...
2
votes
1answer
300 views

Duplicate Administrator Accounts

Somehow, I have a Windows 2003 Server that has two local Administrator accounts that have the same SID (S-21-xxxxxxxxx-500). Therefore, normal utilities don't let me delete them. (Can't delete a ...
0
votes
2answers
1k views

Save any file directly on Windows server instead of the user's PC?

I am using a Windows 2003 R2 server and an XP system. I want to save any file (like- .doc, .xls, audio and video file) directly on the server from XP system. There must be no option to save the file ...
4
votes
1answer
407 views

Why is my 2003 R2 SP2 server being scanned as vulnerable to MS05-019

A nessus security scan has found a 'security hole' from bulletin MS05-019 on my 2003 R2 SP2 system which is fully patched. According to MS, this vulnerability is only for 2003 SP1. So, how can the ...
1
vote
1answer
368 views

How to secure a Windows SBS Server against fraudulant login attempts?

I administer a Windows Small Business Server 2003 R2 server for a small business. The only ports that this server has exposed to the internet are SSL and the RDP tunnelling port used by the SBS remote ...
0
votes
2answers
1k views

How to allow just one user to login in special computer in Server 2003

I want to just allow one user to login to a special computer in domain. how can i do that ?
1
vote
0answers
634 views

Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?

I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...
2
votes
1answer
164 views

Is KB2641690 required on W2K3 running IE6

KB2641690 is an update to the Microsoft Untrusted Certificate Store but it not detected as required by MBSA. It is not installed on my machine and does not appear to be superseded by anything. Any ...
-2
votes
1answer
39 views

Need advice on Windows Server 2003 security for website use [closed]

I hope some really cool experts can share their knowledge with me. We have a dedicated server to host our online store Runs SQL 2005 No uploading by web viewers, strictly to sell goods Server ...
2
votes
3answers
177 views

Windows Server logged out vs. logged in and locked

We have some off-the-shelf OCR software that we'll be using to automate processing of certain customer forms that come to us via fax at all hours of the day. The OCR process needs to run 24 x 7, but ...
11
votes
4answers
1k views

How do I deal with the removal/eradication of an unknown worm on our network?

TL;DR I'm pretty sure our small network has been infected by some sort of worm/virus. It seems to only be afflicting our Windows XP machines, however. Windows 7 machines and Linux (well, yea) ...
2
votes
1answer
481 views

Identifying repeated, failed login attempts as Administrator on Windows network

I have a small network with a couple of Windows XP machines experiencing random reboots. When the computer restarts, it comes to the login prompt with 'admin' in the username field, even though the ...
1
vote
1answer
222 views

Windows Server 2003 force RDP client to be RDP 6

Hi I was wondering whether it is possible to configure Windows Server 2003 to require that the RDP client that connects to it is version 6 or above, as I believe with version 6 you are able to have ...
0
votes
1answer
302 views

Have a script which adds Security on share to “Everyone”

[Old post] I have a shared folder on the network which is shared with "Everyone" 'Read' & 'Read & Execute' privileges. A few people have 'Write' access and sometimes somehow when they either ...
0
votes
1answer
91 views

Win Server 2003/Terminal Services Remote Access

Office users access a win2003 server from within the office using thin clients and terminal services. In reviewing the security settings it seems, by default, all users in the 'Remote Desktop Users' ...
0
votes
1answer
64 views

How to create special groups and give them special process

I have many admins on the network and I want to specify job for them for example I want to create group responsible for install and run yahoo messenger means I don't want to give them full admin ...
0
votes
3answers
116 views

Help on securing WIndows

I have 2 systems running MSWindows Server 2003 and 2008 respectively. I have done all the updates. I am interested in securing them e.g. close all unneeded services. For example my concern is that if ...
0
votes
1answer
812 views

Remove local accounts but leave domain accounts in local administrators?

I'm trying to rename the local administrator account on all the PCs in a 2003 domain. The GP I have that uses GPP to rename the local administrator seems to work. However the problem I'm having is ...
0
votes
2answers
52 views

Set security on pattern of sub folders (Server 2003)

I have a folder structure similar to the one shown below these paragraphs. How do I change security on every 'Photos' folder without clicking through each individually in Windows Explorer? There are ...
1
vote
4answers
4k views

Security permissions for remote shared folders

I have two servers running Windows Server 2003, and I want copy files from one server (A), programmatically with a windows service running under the Local System account, to a shared folder on the ...
5
votes
1answer
3k views

How can I remove my users from local admin rights with a GPO?

I have active directory 2003 and windows xp running on clients so I don't want any of my users to have any admin rights on their PCs and I have already gave them local admin rights So Without to go to ...
2
votes
1answer
1k views

Active Directory how to make Group Policy to allow users to change their network settings

I have Active Directory 2003 and my users are on Windows XP. How can I set a policy to active network configuration for the users? In other words some users are traveling a lot so I want to give them ...
6
votes
2answers
1k views

What's the default hash format / algorithm of Active Directory?

I'm wondering what format I need to put hashes in to write to userPassword via LDAP. Apache Directory Studio gives me several options, but I don't think any of them are it. Can anyone document the ...
0
votes
4answers
257 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
0
votes
2answers
215 views

SSL: Page Includes Resources Which are not Secure

I get this error every time I have a request to my SSL server, even when it's a text file. Is it not sending the response via SSL? Apache SSL config: Listen 443 AddType application/x-x509-ca-cert ...
2
votes
1answer
305 views

Disable net command

How can I disable the command line net command in windows server 2003? It would probably be good to do so for security purposes.
0
votes
1answer
38 views

Unable to make registry or security policy changes (that “stick”) in an offline Windows Server 2003 environment

I've inherited a network, in my new position, that I'm in the process of getting accredited and then online. For now it's completely offline and all my updates are done locally at the machine(s). ...
0
votes
1answer
137 views

Windows Domain Controller “Security Folder” Permissions

anybody know if on %WindowsPath%\security the "Authenticated Users" and "Server Operators" must have "Traverse Folder" permissions on a Domain Controller (Windows 2003). An external audit over my ...
2
votes
2answers
505 views

Is there an alternative to installing a domain controller on the EC2 cloud for administering users across all of your instances?

We have a bunch of servers up on the Amazon EC2 cloud running Windows 2003 Server, and I was wondering if you knew of any ways (apart from a domain controller, which sounds like a pain to do on EC2) ...
2
votes
3answers
8k views

Anonymous Login attemps from IPs all over Asia, how do I stop them from being able to do this?

We had a successful hack attempt from Russia and one of our servers was used as a staging ground for further attacks, actually somehow they managed to get access to a Windows account called ...
0
votes
1answer
236 views

Wizard or script to assign folder permissions

I'm new to server support; spending most of my time in desktop support. I've been given a request to add read-only access to a list of subfolders on a Windows 2003 Server. Rather than adding the ...