[Full-Disclosure] Running DComCfg remotely...

From: Duane Maurer (duanerama_at_hotmail.com)
Date: 07/28/03

  • Next message: Steve W. Manzuik: "RE: [Full-Disclosure] RE: DCOM RPC exploit" 
    To: full-disclosure@lists.netsys.com
Date: Sun, 27 Jul 2003 20:47:29 -0400

    A few obeservations...

    1.) I am sick of hearing 'administrators' whining... at least you have a
    job...

    2.) If you deserve the title of 'administrator' (for Windows that is) then
    you should know by now how to use RegMon from www.SysInternals.com

    3.) So, run RegMon and see what key the check box in DComCfg.exe uses...
    duh...

    4.) For those too lazy, or not knowledgable enough...

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\EnableDCOM set this to 'N' (it is
    of type Reg_SZ)

    5.) If you can't change a registry key on all of your machines... you have
    more problems than I can help you with... and more problems than just an RPC
    worm...

    Thank you for your time,
    Duane Maurer II
    out of work administrator and developer

    _________________________________________________________________
    Add photos to your messages with MSN 8. Get 2 months FREE*.
    http://join.msn.com/?page=features/featuredemail

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Steve W. Manzuik: "RE: [Full-Disclosure] RE: DCOM RPC exploit"

    Relevant Pages

    • RE: Exception Handling Block not writing to Vista Event Log
      ... The code that creates the registry key at ... not unless I run the application as Administrator. ... 'Check whether event source key exists. ... Dim sourceName As String = "Driver Documents Manager" ...
      (microsoft.public.vsnet.general)
    • Re: TS users cannot set default printer
      ... following registry key did not exist: ... It has to do with some windows update, ... > When I log on to the TS as 'Administrator', ... When I logon as any Domain User, ...
      (microsoft.public.win2000.termserv.clients)
    • RE: Outlook cannot be accessed from client
      ... Are you able to access user mailboxes using Outlook Web Access? ... Are you able to logon as the Administrator and access the Administrator ... values in the following registry key: ... The following values are the core required values for Windows 2000 or ...
      (microsoft.public.windows.server.sbs)
    • Re: Problem With Outlook 2003
      ... My outlook was working fine last week. ... the loca administrator group. ... >> 1402 with various registry key errors. ...
      (microsoft.public.outlook)
    • Re: Cant run MMCs
      ... Check out this registry key and remember that modifying the registry can harm your system: ... Local administrator on member server or domain controller and domain ... "Current policies prevent instances of MMC invoced from scrips from ...
      (microsoft.public.windows.server.general)