Identity & Access Management

expired credentials in Windows XP

We have one particular XP-Pro system that repeatedly throughout the day (5-6 times) will ank the user for their credentials again. After entering them will continue just fine. This is the only system doing this and is pretty annoying. Why is this happening?

ping from outside

hi, could you please tell me which command in cisco routers prevent them from being ping from outside networks. and also how can i prevent terminals inside a network to ping outside ips(group policies etc??). thanks

Resticting Members of BuiltinAdministrator to just be able to create Domain Trust

In windows 2000/2003, Can we restrict a BuiltinAdministrators member to have just enough rights so that he/she can only create/delete domain Trust. The requirement that we have is to be programmatically create trust with all the domains in a given forest. The other part of the requirement is to...

Data vs. perimeter vs. network security

A short time ago, author Wes Noonan wrote some tips for SearchWindowsSecurity.com about <a href=http://searchwindowssecurity.techtarget.com/originalContent/0,289142,sid45_gci1007026,00.html>deperimeterization</a>. He explained how security is always pitted against business needs, and...

Stuck with WEP - will increasing key lengths help harden WLAN?

I have potential security issues on my wireless LAN because my equipment is older and I can?t use WPA. I'm worried that my data is vulnerable. If I increase my WEP key length from 40 to 128 or greater, will this help?

Is Windows security an afterthought?

As the editor of SearchWindowsSecurity.com, I often speak with users about their Windows security responsibilities. One senior systems analyst in particular sent me an interesting note recently... To give you some background, he's in charge of configuring and administering desktop systems...

Internet Explorer vs. Firefox

Hello, I'm the Assistant Editor on SearchWindowsSecurity.com. I'm looking to start a discussion about what browser people are using and why. Also, is anyone considering switching from IE to Firefox, or are your plans to stay with IE? Here's some food for thought... As of Feb. 2005, an...

Safe user sandbox?

*This question is from a SearchWindowsSecurity.com reader: I'm in a position to redesign our IT systems (network, servers, PCs, software, etc.) this summer, and I am undecided on which path to take. I'd like to disconnect our systems from the Internet so that we don't have to deal with all of the...

I've been hacked -- I think....

I'm an IT administrator with a little over 500 end users, running Windows 2000 and XP. One of our users is experiencing a problem with her Internet connection suddenly dropping for no apparent reason. When she restarts her computer, everything works fine for awhile, but then the connection drops...

Unlocking Screensaver password

1st of all this is a win2k AD Domain w/all XP Clients and the extended GPManager Grouppolicy. Okay, so B/C of HIPAA I have to have my computers screensaver/password protected. Even though I'm forever telling'em to sign off when they leave computers my staff still doesn't do it. Thusly the...

How did I get a virus on my computer?

Do you hear that question or something similar too often? We're taking an informal survery on SearchSecurity.com to find out what the most common security-related user questions are. Results will be compiled into a question and answer tip that you will be able to post or handout to your users. ...

Yearly Data owner review listing

Hi, We are currently on SAP 4.6C With SOX and other security settings we need to min. yearly prepare a user list per data owner, so that the data owner can review and sign-of on this. The data owner is determined per role. Now my question is, does anyone know a way of assigning a data owner to a...

Accessing Linked Server in SQL Server 2000 (Urgent)

I have a server named say 'SRVMAIN'. Using Enterprise Manager I added a linked server 'LNKDSRVR1' (existing server). I m able to access any database in 'LNKDSRVR1' by writing a query in query analyzer of 'SRVMAIN' as SELECT * FROM LNKDSRVR1.TESTDB.DBO.TESTTABLE Now if I have server as...

Installation issues with SQL Server and SPS on a member server.

I have a small windows 2003 domain.My domain controller runs Exchange server 2003 too.Wanting to set up a practice server for SPS2003, I introduced another Windows 2003 member server. I installed windows server 2003 and IIS 6 fine. When I got to the authentications stage during the installation of...

telnet error-backup authentication

hi all, i did something really stupid and now i need a quick help.i have a cisco 3661 router.i was just roaming around and just having a look at the configuration.i don't know what i did wrong but when i tried to telnet the next time, i m not able to enter the password for starting...

Default Group Policy Objects in Active Directory - Windows 2000 Server

I've had to restore my Default Domain Policy and Default Domain Controller policy because somehow they disappeared. I'm using Sophos Enterprise Manager to automatically update all computers on the network. Everything is working as normal but I can't update the 2 Domain Controllers on the system. ...

ID Theft and National Security

If it turns out, as I believe, that enemies of the United States are behind a lot of the major ID thefts in the US, that would mean that a lot of money is going to our enemies. Can we therefore surmise that those who mishandle our identity information, by means of their poor stewardship of our...

How to do a Linux DMZ Intranet with Windows authentication?

I am designing a new network that has a DMZ containing Linux webservers and behind a firewall separating the DMZ a Windows backoffice . I want to run our company Intranet on the DMZ side using Linux but I want to limit access to employees both from the Internet and behind the firewall using...

History of users for a particular userid.

I have an userid (username) which is named after a job function and there were changes on the actual owner of the Id. Is there a report or log that I can view who was the actual owner of the Id during a certain period of time? All I can get from the User Information System reporting tool is the...

Authorization in MIGO

I would like to grant a user authorization to object S_TCODE MIGO (Goods Receipt specifically for Purchase Order (movement type 101) where they could then enter any related data but restrict their activity to HOLD. A subsequent user would have the authorization to POST the document. I have...