Jump to content

adamt

Member
  • Posts

    138
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    United Kingdom

Everything posted by adamt

  1. I can't restart the computer because I don't know which computer the ILO is attached to. All I know is the IP address of the ILO, and the fact that it's got the wrong hostname and hasn't been configured with the correct username/password.
  2. Dear all, We have a client with rather a lot of servers. There seem to be two ILOs with the same name, but the incorrect one - we don't know the password for. Any easy way of determining which server has an ILO with which IP address? Thanks, Adam.
  3. I seem to recall reading something about being able to craft a USB device which would unlock a workstation when plugged in. Can't find the details now (my google-fu is weak today) - and it was about 3yrs ago, so if it really was possible, I would imagine it's been patched now. Best I can find is: http://www.eweek.com/c/a/Security/USB-Devi...-Crack-Windows/ - which stops a little short of saying it will 'unlock the workstation' - only that it allows the attacker to 'take control'. Not sure how you can unlock session 0 (console) when running as LocalSystem in the context of a driver. Perhaps if you had impersonate rights and enumerated the currently logged on user... or killed winlogon and aborted the shutdown (don't think that's possible in the same way as it is to abort when lsass.exe dies).
  4. You can use NAS now - sort of: http://support.microsoft.com/kb/888374
  5. You won't have permissions to these folders as a normal user. You're not supposed to. You can either make the user an Administrator/Server Operator - or you can modify the permissions on the folder. What role is the server supposed to have? Do you really want ordinary domain users to be able to write files to c:\Program Files and c:\Windows? Bit of a stability and security risk, surely?
  6. Do you have two PSUs in the server? Try changing the power cable, and where it's plugged in to. If still no joy, you might want to try changing the PSU itself. When you say that power manangement appeared to be fine - the BIOS can't record an 'I've lost power' event, because.. er.. by the time its lost power, it er.. is switched off. Servers with multiple PSUs can record events when one PSU dies, as they're still getting power.
  7. I think you're referring to the SMTP service, which is part of IIS. This service will TRANSFER messages, but will not STORE them.
  8. I took a quick google on this and found: http://support.microsoft.com/default.aspx?...kb;EN-US;810608 "Error in Ikernel.exe When You Install Programs By Using InstallShield" Also see: http://forums.techarena.in/showthread.php?t=661445 pertinent quote is: From a command prompt in that directory I typed: expand ikernel.ex_ ikernel.exe
  9. Have you tried disabling the TCP chimney offloading that gets installed with SP2?
  10. On a Win2K3 DNS server, I think you could add a stub zone for .tk and point it at an invalid nameserver. Pretty sure BIND supports stub zones, too.
  11. ColdFusion... ARGH! Are you using CF's own jrun HTTPd , or is it being run via IIS? Try running netstat -b and see if something/anything is actually listening on port 80. Can you do a telnet localhost 80 and then send it: GET / HTTP/1.0 - and get a response? NB - you probably won't be able to see what you're typing, and you need two carriage returns after the GET line. I tend to find CF issues with timeouts are usually down to bad CFML scripts, or broken dependencies like database backends.
  12. SNMP config is stored in HKLM\Systsem\CurrentControlSet\Services\SNMP Mostly you'll probably be looking for the Parameters subkey. Set these values to what you want, export the .REG file and then use regedit /S or reg.exe to import the .REG file on the target machines. One quick'n'dirty deployment method for existing servers would be to share the .reg file somewhere central and run psexec @serverlist.txt "reg.exe /import \\dfsshare\snmp\snmpsetting.reg" Or something similar.
  13. I'd have thought the group needed to be a Universal Group if you want members from different domains. Your domains need to be at Win2000 native functional level for this to work, so you'll need to decomm any old NT4 domain controllers before you can use Universal Groups. See: http://technet2.microsoft.com/windowsserve...3.mspx?mfr=true
  14. I believe that running tsadmin.exe will show how long you've been logged on for, as well as how long a session has been idle. Don't think it does any logging though. You could perhaps look in the security logs of the target server for logon/logoff events with your account name and a logon type of 10?
  15. Have a look in the group membership - are there any accounts in there which have been deleted/disabled/cannot be resolved from a SID to a sAMAccountName ?
  16. Re: mobsync.exe - do you use offline files at all?
  17. Are you sure you have the right username and password? Can you map a drive to the VM using that IP address, and that username and password? Does psexec work if you specify HOSTNAME\admin as the username?
  18. My first thought was - NTbackup, and when I googled to check that you actually get ntbackup with SBS 2003, I stumbled on this: http://www.microsoft.com/technet/community...bs/sbs0630.mspx Which mentions Acronis, as well as Ntbackup and other backup-related things for SBS goodness. Also check out the name "Susan Bradley" - who is the "SBS Diva": http://msmvps.com/blogs/bradley/
  19. Nevermind... it can be done with sc.exe - which is probably the first thing I should have looked at, but oh no.... I had to go firing up Regmon to see which keys were being enumerated, didn't I?
  20. Dear all, Windows services have a neat little feature, where you can set recovery options, so that should a service crash, the service control manager will restart it. I had hoped I might be able to write a .REG file with parameters for HKLM\SYSTEM\CurrentControlSet\Services\SVCname - ErrorControl and FailureActions, but the failure actions key isn't human-readable, and in any case, it doesn't appear that it does what I thought it did: http://www.microsoft.com/technet/scriptcen...q.mspx?mfr=true Any tips or pointers on how I can configure 3,000 servers to set SNMP to restart after a failure would be greatly appreciated. Thanks, Adam.
  21. That isn't quite true: http://blogs.msdn.com/oldnewthing/archive/...02/1786493.aspx ".Default user is not the default user profile. It's actually the profile for the Local System account and is an alias for HKEY_USERS\S-1-5-18."
  22. Dear all, Does anyone know how to find the path to the profile for the IIS IUSR_hostname user? I'm trying to find out if that user has a proxy setting -I think it just uses the machine's default, as shown in proxycfg.exe - but I can't find anything to confirm this suspicion. Thanks, Adam.
  23. adamt

    Serious problem

    Get ShellExView from http://www.nirsoft.net/utils/shexview.html , then follow this guide: http://www.helpwithwindows.com/techfiles/e...er-crashes.html
  24. adamt

    Serious problem

    Could be a shell extension or BHO: http://support.microsoft.com/kb/822797 As for process monitor - you'll need to have it running when you try to delete the folder. Then take a look and see which processes are doing what at the time. You'll probably see another process accessing the folder you're trying to delete.
  25. Regmon will do this, and do it very well: http://www.microsoft.com/technet/sysintern...ies/regmon.mspx
×
×
  • Create New...