4
votes
3answers
48 views

Server 2008 permissions issues

We have a selection of top level folders: E:\Data1 E:\Data2 E:\Data3 The permissions are simple - the default CREATOR OWNER, SYSTEM Full Control, some security groups allowing Modify and the LOCAL ...
3
votes
1answer
61 views

“Net Send” command into Microsoft server 2008 r2 [duplicate]

I remember with the old windows server was able to send messages with the command "NET SEND", now I am using "Windows 2008 R2" and this feature is not active. Can you give me some additional ...
0
votes
1answer
81 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
2
votes
1answer
80 views

Windows Server 2008 what is the proper way to export or backup security event log

Using WEVTUTIL.EXE to export the Windows Server 2008 Security event log, I get a permission problem (I have administrator privileges): c:> wevtutil epl security test.evtx "Failed to export log ...
2
votes
1answer
131 views

What should I do if an necessary client application has to run on an older (vulnerable) framework?

A client needs to have .NET Framework 4 installed and not patched so their software running on their Windows 2008 R2 Server functions properly. This sparks the questions: When is it okay to ...
0
votes
1answer
284 views

LDAP throws Event ID 2887 warnings even after enabling “require signing”

I am running an AD LDS directory and, ever since configuring it, I have been seeing 2887 warning messages, so I have decided to follow this guide to have the server require LDAP signing. The problem ...
-4
votes
1answer
35 views

Is it possible to have multiple domain policy for different servers? [closed]

In my organization, there is 1 domain with 13 production servers joined to it. Recently, we realized that the default domain policy that is applied to the production servers have minimal security ...
0
votes
2answers
660 views

Allow service to interact with desktop

DC OS - Windows Server 2008 R2 Std Client OS - Windows XP, Windows 7 I have implemented Security policy through Network Policy Server and enabled Wired AutoConfig Services Automatically. While ...
1
vote
1answer
29 views

How do I audit where security groups are applied in my domain? [closed]

I've been asked to find out how and where specific security groups are being used in my organizations AD domain. I know what the groups are and where to find them in the directory, but I don't know ...
-2
votes
1answer
64 views

run as administrator has more permissions than SYSTEM

I have a Windows service that I can run either as a service or in a console. The program requires administrator access. When running in a console "as Administrator", the program works fine. When ...
0
votes
1answer
44 views

A way to only allow some ports on windows server

I have been trying to make this work the last few hours but haven't come far. I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look ...
1
vote
2answers
145 views

Filter Websites via Squid

I would like to install Squid to block all the websites and only allow a few websites (whitelist). Each department will have different rules. For example on the Sales department - all the websites ...
0
votes
0answers
29 views

Securing files on IIS 7 and Windows Server 2008 Server

What's the best practice for securing a file on an IIS 7 web application running on Windows 2008 server? I have the following requirements and ideas: Requirements: A authenticated user to my web app ...
3
votes
1answer
43 views

What SPNs are needed for an intranet web service that reads remote registries

Imagine a website that shows the value of a remote registry key, live, such as the version of the anti-virus definitions on a remote PC. To be clear, there are 3 computers involved, the web server ...
1
vote
1answer
46 views

Windows Server 2008 and blocking hackers

I have a web server serving public pages under a continuous barrage of requests attempting to login with various combinations of credentials. I would like to thwart these by blocking IP addresses and ...
0
votes
0answers
46 views

Cannot Connect to Windows Server Using a Particular IP

We have a Windows server 2008 running as web server. The Server has two IP's (A and B) added to it. We were able to use both the IP's for remote desktop connections and FTP connections. Strangely we ...
-1
votes
1answer
92 views

What steps do you take to secure a windows server [duplicate]

This question is my inspiration i have windows server 2008R2 in my network as DC. also i use this server for hosting our organization website. I want to make it as secure as possible. What I need ...
1
vote
1answer
93 views

“These files can't be opened” error on ALL files after update

Running Windows Server 2008 R2, and doing the latest updates for the last month. Updates had downloaded and installed, although not entirely as I had postponed restarting and finishing the process. ...
0
votes
1answer
2k views

How to disable SSL/TLS compression in Apache 2.2.16?

I have one sever running on Apache 2.2.16. I run the VA scanner on the server. According to the VA report it is recommended that SSL/TLS compression should be off. I tried to search google, but didnt ...
0
votes
2answers
229 views

Determine windows server attack? Should I monitor the server and block IPs all the day?

While Viewing the windows server 2008 event log, I always find many security events 4625/logon as follows: **An account failed to log on.** Subject: Security ID: SYSTEM Account Name: ...
0
votes
1answer
266 views

How to find which local process is sending spam on a Windows Server 2008 server

I am managing a Win Server 2008 system with a number of hosted web sites. Recently I found that something was sending spam through our SMTP server. The logs indicate that the connections were being ...
1
vote
1answer
40 views

How to setup NT Challenge on Windows 2008 R2

I want to setup NT Challenge for a web application. I have read a lot of articles but still not clear how can I setup it on windows server R2. Could anyone please point me settings/Configurations to ...
0
votes
2answers
166 views

Shared folder are inaccessible from system account

I have problem with different behavior of network machines. Little log: C:\Windows\system32>whoami nt authority\system C:\Windows\system32>net view Server Name Remark ...
1
vote
1answer
86 views

Blocking Administrator from accessing certain folders - Windows Server 2008 std

We've a server 2008 Std installed on our network. I want to setup 2 folders, that will be shared only with two relevant users. I've changed the Security to just those users, however when I double ...
3
votes
1answer
99 views

Create a Lockout policy for RDP

In my city there was a recent incident that some hackers login to a server by using brute force attack on RDP. I have got a server and I want to enable some security policy to lockout the account if ...
3
votes
1answer
60 views

What is the best way to determine server resources each remote user is using

I manage some Win2008R2 servers on the network for my department. Each server usually has 10 - 20 users at a time connected to it. They are nothing more than locked down file servers on the domain. ...
3
votes
2answers
736 views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
-1
votes
1answer
132 views

Admin user account on windows 7 and Windows Server 2008 admin$ share access denied?

On my local network I have several windows 7 workstations and a Windows 2008 server. I have an account on each of my Windows 7 boxes that have the corresponding admin account on Windows 2008. When I ...
2
votes
1answer
4k views

System Account Logon Failures every 30 seconds

We have two Windows 2008 R2 SP1 servers running in a SQL failover cluster. On one of them we are getting the following events in the security log every 30 seconds. The parts that are blank are ...
0
votes
2answers
122 views

Remote hosts accessing AD's registry

I have a situation here. I have an intrusion detection system and it constantly alerts me that a remote host is accessing our AD's registry remotely. Our remote hosts are mainly Windows XP and our ...
0
votes
3answers
1k views

connecting ipads to a windows domain [duplicate]

Possible Duplicate: iPad Management Do iPads (version 1, 2, and/or 3) have the ability to connect to a windows server 2008 or 2008 R2 domain? If not, is there a way to enforce security ...
3
votes
1answer
381 views

SIDs in Active Directory GPO

I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has had a few different administrators over the years. I am looking ...
7
votes
2answers
11k views

How can I tell when a given user's password will expire?

Is there a way from either the computer management console or the command line to determine when a user's password will expire? Note: I'm asking this questions for a server that is not part of a ...
4
votes
1answer
338 views

Server 2008 adit logs show 1000's of Failure Logon Attempts to the `Admin` account

I was just going through the logs of one of my servers and I noticed there are a ton of failed logon attempts for username Administrator, owner and Admin. I assume that these are bots since there is ...
1
vote
1answer
59 views

Enable usr account external hardisk? [closed]

I have a Windows 2008 installation on an external harddisk, it turns out that my account is disabled on this external harddisk. Can I enable this account again? For example by booting into my default ...
2
votes
2answers
510 views

Is it possible to disable “Admin Approval Mode” for a single account on a server?

A console-app runs on a single server in a domain and is tasked with deleting some home areas of users, who are no longer active. These homeareas are located on 50+ different servers spread around the ...
-3
votes
1answer
66 views

Share Permissions [closed]

We have some directories on one of our servers that are shared, however, they need to be locked down to an extent that they cannot be accessed by logging on as a local user or administrator or by ...
1
vote
1answer
285 views

(Server 2008) Changing file permissions of a folder after moving it from another user

I've recently started using a GPO to force users 'My Directory' folder to forward to c:\home on the server. This is working fine so far. The issue I'm running into is that since nothing like this ...
2
votes
1answer
981 views

40k Event Log Errors an hour Unknown Username or bad password

I am getting about 200k of these an hour: An account failed to log on. Subject: Security ID: SYSTEM Account Name: TGSERVER$ Account Domain: WORKGROUP Logon ID: ...
-5
votes
2answers
528 views

Email Administrator on failed login

Is there a way to have the server email me when there is a failed login? I have hundreds of hacking attempts and I'd like to know as soon as it happens. Thanks! <--- Woot! I'm making progress!!!! ...
0
votes
1answer
453 views

SQL Server NETWORK SERVICE account permissions

My SQL Server Windows service is set to use the NETWORK SERVICE account. The server is installed to C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL. However looking at the ...
-2
votes
1answer
702 views

TCP Port is disabled on my dedicated server, how to know why?

The firewall is off on my windows server 2008 r2, and no hardware firewalls, how to know what is blocking my port? From the comments: I am trying to connect to TFS from visual studio 2010, it gives ...
0
votes
2answers
88 views

Disable Server Login upon Updates Reboot

I have a co-located Dedicated Server running Windows 2008 R2. It is a Live server running my sites (wordpress, joomla, etc) I administer it via Remote Desktop. Everytime I do the Microsoft OS ...
0
votes
3answers
131 views

Can an attacker remotely abuse a Windows 2008 server if he knows the username/password of a user included into “Users” group only?

There's a Windows 2008 server where there's a local user account with a known password - let it be user "dummy" and password "dummy1". That local user only belongs to "Users" group. The attacker has ...
0
votes
1answer
175 views

How to restrict user to run and use only one program running on my server?

I have a cloud server running windows-server-2008 and i want my customer to log in to the server using remote desktop and the customer can run my own program only , he should not be able to run any ...
1
vote
0answers
49 views

Securing internal sites on Windows Server

Background: I have limited server admin / networking knowledge, my background is non-network programming. What are some options for securing and hiding internal sites? I have a Windows VPS running ...
0
votes
1answer
217 views

Minimum access required for Visual Studio 2010 on SharePoint

Hi we are trying to set up a SharePoint development environment for multiple developers on Windows 2008 server, we do not want to give the developers admin rights to the servers. Does anyone know ...
1
vote
3answers
2k views

Diagnosing Logon Audit Failure event log entries

I help a client manage a website that is run on a dedicated web server at a hosting company. Recently, we noticed that over the last two weeks there have been tens of thousands of Audit Failure ...
-3
votes
2answers
287 views

Why is Windows often perceived to be more vulnerable to attack than other systems, such as Linux and Mac OS? [closed]

ok I need help on this question cause I am learning the computer, so I am try to understand the question.
-1
votes
1answer
37 views

Where do I see a log of user connections to PC in Windows Server 2008 Event Log Viewer?

Event Log Viewer is listing a bunch of infos but where am I supposed to see the list of user connections to PC in Windows Server 2008 ?