0
votes
1answer
19 views

How to enable auditing for a folder only (and not anything within that folder)

I am trying to track down a process responsible for resetting ACLs on a particular folder, and ONLY that folder, not any of the 10,000 folders and files it contains. I tried going to Properties > ...
1
vote
0answers
49 views

Restrict windows server 2008 R2 remote mmc

I am looking for a way how to disable remote access to management console of single Windows Server 2008 R2 with least administrative effort. Server is in domain and there is big amount of other ...
0
votes
1answer
28 views

An account failed to log on Message on Windows 2008 R2

I'm having hundreds of messages in my Security Event System like: An account failed to log on. Failure Reason: Unknown user name or bad password. Caller Process Name: ...
1
vote
3answers
51 views

do I still need to block attacks on my server once I lock it down by ip?

I have a public dedicated server that clients log in to via RDP. I am using rdpguard to block bad RDP logins attempts on my server. Recently, I locked it down to only allow specific IP addresses ...
2
votes
1answer
94 views

Unexpected anonymous login in Windows security logs

I've got a VPS server account for some projects and was just troubleshooting an issue earlier when the following turned up in the logs (among the torrent of bots trying to guess account details...). ...
1
vote
1answer
147 views

A Windows Filtering Platform filter has been changed - File and Printer Sharing

My Windows 2008 R2 server gets hammered tons of login attempts. I guess somebody is running a Brute Force attack. Funny enough our MySQL configuration file got deleted last night, so they must have ...
1
vote
1answer
81 views

Why sometimes is required to log off and log on back again adding a group to a user

In Windows systems (particularly Windows Server 2008R2 which I an using), sometimes when I add a local user to a local group, the user needs to log-off and log-on back again before this new group is ...
1
vote
0answers
126 views

How can I run a scheduled task on a Windows 2008 R2 Domain Controller as a non-admin user?

I'm trying to run an exe as a scheduled task on a Windows 2008 R2 Domain Controller. The exe runs fine when I try and run it manually using an account which is a Domain Administrator, but I don't ...
0
votes
0answers
20 views

Cant Add Columns to a AD Task pad except for the top level of the domain

We are working on Active Directory taskpads application for user management in our organization and facing stange issue. When we create a taskpad, and when we are at top level of the domain, i can ...
1
vote
1answer
41 views

Outbound ports for a firewall for webserver and db server

I have an environment where there is one firewall, and there is a secure segment and a DMZ segment behind it. There is a bunch of servers in the secure segment - DB server, the QA server, etc and ...
1
vote
1answer
56 views

How to secure a single file download over HTTP on IIS?

I want to create a download link to a file on my HTTP server (IIS 7.5), for a one time secure download purpose. I don't want the file to be publicly available, the receiver must authenticate. When ...
0
votes
1answer
54 views

Grant NON-administrator privileges to IIS 7

We are implementing a pseudo-Platform as a Service environment. It's a fairly simple set up that parallels Infrastructure as a Service: basically our clients will each have a access to their own ...
1
vote
1answer
184 views

How to restrict access to Visual SVN server by specified IP address? [closed]

I need to allow only specific IP addrees to access my visual svn server. Visual SVN 2.6.0 is installed in the server. SERVER : WIndows 2008 R2 I'm accessing the svn by the urls like ...
1
vote
1answer
40 views

Cannot install Intel drivers from CD (browser driven install)

I'm trying to install some Intel drivers in a Windows Server 2008 R2 (64 bits) box. These drivers come in a CD. Problem is, this is a "browser-driven" install. And Internet Explorer, in this server ...
0
votes
1answer
54 views

Unsafe to run Apache as LOCALSYSTEM on Windows Server?

On my server (Windows Server 2008 R2), I have installed a couple of programs coming with a web interface. As I want to be able to access those web interfaces from outside my LAN, the relevant ports ...
1
vote
0answers
41 views

Difference between “Security Configuration Manager” and “Security Configuration Wizard”

I want some clarifications about differences between SCW and SCM. strictly Speaking when I use SCM baseline for specific Server Role (domain controller, ftp server, ...), I get for example 200 gpo's ...
-1
votes
2answers
161 views

Techniques for securing mod_php for shared hosting (WAMP)?

I've setup a web server for production use. The OS is Windows Server, and it runs Apache 2.0 and PHP 5.3 as an apache module (and MySQL too...). It is used to host several virtual hosts (Apache ...
1
vote
1answer
47 views

Restricting particular OUs from accessing Active Directory folder

I know how to restrict individual users from accessing/reading OUs or folders in Active Directory. This page provides a good guide on how to do this. But how can one bar the users of an entire OU, ...
1
vote
1answer
73 views

“These files can't be opened” error on ALL files after update

Running Windows Server 2008 R2, and doing the latest updates for the last month. Updates had downloaded and installed, although not entirely as I had postponed restarting and finishing the process. ...
0
votes
0answers
96 views

User security settings for scheduled task on Windows Server 2008 R2

I have a simple executable to run as a scheduled task on some Windows Server 2008 R2. The executable downloads a file from a couple of locations, then writes the time to download the files to a SQL ...
4
votes
7answers
459 views

Configure a “hardened” user account that an attacker would have a hard time abusing

Suppose you have a Windows Server machine running various sensitive services. Suppose that one of these services is pretty simple, maintaining a small amount of information in a text file, but as a ...
0
votes
2answers
196 views

Windows Security: can user read local files with only 'Log on as a batch job'?

A Windows Scheduled Task runs as serviceAccount@domain.tld on a 2008R2 server. The server's local disk has some files that Joe Blow should not see. Joe Blow knows the serviceAccount password. As far ...
1
vote
1answer
58 views

Task Scheduler with Virtual Accounts, possible?

Currently I'm using LOCAL SERVICE as the user account for various regular tasks, and was wondering if it was possible to use a Virtual Account instead. Task Scheduler seems to reject NT SERVICE\ ...
0
votes
2answers
389 views

When to use self-signed certificate with RDWeb?

I want to make sure the users connection is as secure as possible. Our RDWeb server has a .local name (for this question it will be called rdweb.contoso.local) and a public name: rdweb.contoso.com ...
0
votes
1answer
43 views

Blocking Access to Certain Sites

I have a weird setup on a server we host: the site hosts both live and test versions of its sites, set up in two different folders, D:\Live Sites, and D:\Test Sites. What would be the best way to ...
3
votes
2answers
288 views

Is UAC Preventing write access to Programs Folder?

We have a legacy application on a number of client sites. In some cases clients need to have write access to a folder or two under the Program Files (x86) folder. As time goes on more and more of the ...
0
votes
1answer
151 views

Applocker custom extension (Java, CPL, MSC etc.)

We have a Terminal server and want to prevent users from running inappropriate software. Previously we used Software Restriction Policies for this purpose. Now, Microsoft seems to recommend Applocker ...
0
votes
1answer
69 views

How should I set up a new local user for IIS to run under?

I'm interested in setting up a full-blown local user to run my ASP.NET web sites under in IIS 7.5 (Windows Server 2008 R2). (The long and boring rationale has to do with System.IO.Packaging's use of ...
-4
votes
3answers
102 views

Understanding administrator rights on a machine [closed]

As a developper I need to create a folder within a customer' server and I need to be sure that they wont be able to access that particular folder's content even if they are administrator or in any ...
1
vote
1answer
908 views

openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?

I performed a openVAS scan on a Windows Server 2008 R2 and got a report for a high threat level vulnerability called Microsoft RDP Server Private Key Information Disclosure Vulnerability. An remote ...
3
votes
1answer
179 views

Windows Firewall IPSec configuration, how to protect the AD

Here's my infrastructure configuration: All servers have public IP I've setup a GPO to enable IPSec on everyone of them with a "require for inbound and request for outbound" rule, for all server, ...
0
votes
2answers
55 views

Not enough priviliges to edit files on his/her home dirve

Just wondering if anyone could help me out on why a user is unable to edit anything on its mapped Home Drive. This is what I currently did. (OS Windows 2008 Standard R2) In AD I setup a home ...
2
votes
2answers
448 views

Is it possible to disable “Admin Approval Mode” for a single account on a server?

A console-app runs on a single server in a domain and is tasked with deleting some home areas of users, who are no longer active. These homeareas are located on 50+ different servers spread around the ...
-2
votes
1answer
630 views

TCP Port is disabled on my dedicated server, how to know why?

The firewall is off on my windows server 2008 r2, and no hardware firewalls, how to know what is blocking my port? From the comments: I am trying to connect to TFS from visual studio 2010, it gives ...
-2
votes
1answer
108 views

Getting Server 2008 R2 to ignore all traffic from Internet-facing NIC, leaving it to a VM [closed]

I got in to Server 2008 R2 via Dreamspark and would like to start learning on it. I don't have much option but to put it on a system sitting between the Internet and my home LAN due to electricity ...
1
vote
2answers
237 views

Office network and guest network - manage with separate physical servers or a VM on the office server?

I have a beefy server (dual Xenon & 16GB RAM with RAID5) I use as the domain controller and file server for an office network on a dedicated internet connection. I also have a guest network with ...
2
votes
1answer
669 views

Being Flooded with Security Event ID 4793 - Windows 2008 R2

I have a SQL server that is a domain member running Windows 2008 R2. It is a cluster node in a failover cluster. The security event log is getting flooded with these: Log Name: Security ...
0
votes
2answers
86 views

Disable Server Login upon Updates Reboot

I have a co-located Dedicated Server running Windows 2008 R2. It is a Live server running my sites (wordpress, joomla, etc) I administer it via Remote Desktop. Everytime I do the Microsoft OS ...
0
votes
0answers
429 views

What permissions are required to copy folders with security attached on a NAS

What permissions does a user require to copy folders and the folders permissions from one mapped drive to another using explorer? Our office has a large NAS with a number of shares. These shares are ...
0
votes
1answer
175 views

Windows Server 2008 R2 Security Log repeated Audit Failure Entries

We seem to be getting a huge load of entries in our security log with the following details: The Windows Filtering Platform has blocked a connection. The source IP address and port change for each ...
3
votes
1answer
4k views

Windows 2008 R2 NTFS file permissions not working as intended

We just got our first Windows Server 2008 R2 server in. It's going to be a file server. However, I am running into a weird issue with it that seems to be a result of UAC. When I try to share a ...
1
vote
1answer
363 views

Protection against DOS kits (Gootkit)

I've been helping a little hosting company. They have servers offering .NET hosting with Windows & IIS. For clients management, domain creation an this kind of stuff they're using Paralells Plesk ...
4
votes
2answers
1k views

How to detect Dell TPM from inside Windows?

I need to know whether my server has TPM installed. It is located 10000 miles away from me so going there to look at the BIOS is not an option. It is also not anyhow described on the Dell website nor ...
3
votes
1answer
1k views

How do you disable “stealth mode” on Windows Server 2008?

After reading this article and this one I've decided to change all our firewalls to reject instead of block packets in most cases. My experience corroborates the arguments these articles make. ...
1
vote
2answers
1k views

NETWORK SERVICE is unable to save to a network path

I've done some extensive research on this and I've tried every suggestion I have seen. I am troubleshooting an application that runs a "scheduler" service to periodically export *.txt files to a ...
1
vote
0answers
331 views

Where can I find information about inbuilt registry keys for Windows Server 2008 R2?

Is there a resource for looking up the description and/or usage of W2K8 R2 registry keys? I need to understand integrity checksum change messages appearing in OSSEC logs on Amazon EC2 instances. ...
0
votes
1answer
358 views

How to configure IIS 7.5 to host multiple websites with the correct F/S permissions

So, heres my scenario: Dedicated server running Windows 2008 R2 IIS 7.5 Multiple sites using PHP / .NET 4 / Perl / Python Need to do: Ensure that the sites are not able to write/create/read ...
2
votes
0answers
1k views

What are anonymous logons in Windows Event log?

I'm playing with a new Win2008 R2 server installed and hosted online with a direct connection to the web (i.e. no separate firewall in front of it). The server is supposedly locked down with just ...
2
votes
3answers
3k views

Securing RDP access to Windows Server 2008 R2: is Network Level Authentication enough?

I am a dev with little admin expertise, administering a single dedicated web server remotely. A recent independent security audit of our site recommended that "RDP is not exposed to the Internet and ...
-1
votes
2answers
366 views

How to protect my VPS from winlogon RDP spam requests [duplicate]

Possible Duplicate: Ban, slowdown or stop massive login attempts to RDP I got some hackers constantly hitting my RDP and generating thousands of audit failures in event log. Password is ...