RE: Security Center and Windows XP clients in domain

From: David Webster (dwebster_at_wittig.com)
Date: 09/01/04

  • Next message: Maestro De-Seguridad: "ADVISORY: http response splitting hole in Comersus shopping cart"
    Date: Tue, 31 Aug 2004 20:09:01 -0400
    To: <bugtraq@securityfocus.com>
    
    

    I just installed WINXP SP2 on my laptop which is already a member of a
    WIN2003 domain, and post install it had these settings. 1)security
    center was enabled 2)the Windows Firewall was set to ON (recommended) on
    all three interfaces (LAN, WAN, Cisco VPN adapter). I am running
    version 8.00.9374 of Symantec antivirus corporate edition on the laptop.
    The Security Center control panel applet does not display any
    information about the installed antivirus software.

    Contrast this with my home XP Pro machine, which is NOT a member of a
    domain. The Security Center Control Panel applet on that machine
    displays information about the installed AV software, AVG antivirus.
    Also, that machine runs Zone Alarm personal firewall. This is detected
    by the Security Center Control Panel applet, and the windows firewall is
    NOT activated.

    I have not tried joining a machine with SP2 already installed to a
    domain to see what happens to the settings in Security Center.

    Hope this helps.

    --David
    -----Original Message-----
    From: albatross@tim.it [mailto:albatross@tim.it]
    Sent: Tuesday, August 31, 2004 2:27 AM
    To: bugtraq@securityfocus.com
    Subject: Security Center and Windows XP clients in domain

     

    From the Symantec site:

    Q: Which Symantec products will the product update apply to?

    A: The product update applies to customers who use Symantec Client
    Security, Symantec AntiVirus Corporate Edition, and Symantec AntiVirus
    Enterprise Edition if their client systems are not members of a Windows
    domain. This is because Windows XP Service Pack 2 does not enable the
    Windows Security Center or the Windows Firewall if it detects that the
    computer is a member of a Windows domain. It also applies to
    administrators who choose to enable the Windows Security Client in a
    domain. Product updates for other Symantec products may be released in
    the future but none are scheduled at this time.

      

    As stated in the answer if a windows XP client is joining a Domain SP2
    won't enable neither the Security Center and Firewall. Does somebody
    have any mor information about this?

    albatross


  • Next message: Maestro De-Seguridad: "ADVISORY: http response splitting hole in Comersus shopping cart"

    Relevant Pages

    • Re: Windows Update Error on XP 64bit: update is redirected from v6
      ... In order to enable AHCI without reinstalling windows I had to pull ... under 'Reset the default security provider in Windows XP '. ... was this a clean reinstall of XP or a Repair Install? ... Microsoft Windows 2000 Operating System Group Policy Result tool ...
      (microsoft.public.windowsupdate)
    • Re: Microsoft ME
      ... > I have just found out that the Microsoft ME operating ... > long on security to ME so I can keep people from using our ... How can I force people to use a login ID and password to log into my Windows ... Install all service packs and security fixes from Microsoft and otherwise ...
      (microsoft.public.security)
    • Re: lets vote for better security
      ... : OE-related security vulnerabilities. ... But there is no requirement to install and update every 30 to 60 days on any ... your argument would require every Windows computer to ... and yet WSH is still a threat. ...
      (microsoft.public.security)
    • Re: Safe?
      ... Q1) I got an email from Microsoft about a security update. ... A1) No. Microsoft NEVER sends emails with security update attachments. ... pages where you can access Windows Update, download patches, or request ... Services to install Windows security updates or hotfixes. ...
      (microsoft.public.security)
    • Re: Role of current windows login user
      ... as Windows based 'roles' are mapped to "Windows security group" ... generic member of a sales department. ... |> opens the resource, this is the task of the OS and not the ...
      (microsoft.public.dotnet.languages.csharp)