RE: Files in system 32 directory

From: BELLMANN MARKUS (markus.bellmann@siemens.com)
Date: 04/24/03

  • Next message: Marc Fossi: "Article Announcement: Auditing Web Site Authentication"
    From: BELLMANN MARKUS <markus.bellmann@siemens.com>
    To: focus-ms@securityfocus.com
    Date: Thu, 24 Apr 2003 08:48:58 +0200
    
    

    Hi!

    > I have a windows 2000 sp2 machine which is a DC/DNS. In the
    > system32 folder i see a lot of files name 'Security=Impersonation
    > Dynamic False'. They are usually 1 to 2 kb in size and contain the
    > following in the file 'Error 0 to send control flag 0 over to
    > server'. Has anyone seen this before? What might be causing this?.

    According to a posting in microsoft.public.win2000.general, these files will be created after enabling logging for Security Configuration Processing. To disable SceCli Processing, you may want to follow the instructions in http://support.microsoft.com/default.aspx?scid=kb;en-us;245422

    Hope that helps,

    Markus
     

    -----------------------------------------------------------------------------
    Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
    world's premier event for IT and network security experts. The two-day
    Training features 6 hand-on courses on May 12-13 taught by professionals.
    The two-day Briefings on May 14-15 features 24 top speakers with no vendor
    sales pitches. Deadline for the best rates is April 25. Register today to
    ensure your place. http://www.securityfocus.com/BlackHat-focus-ms
    ------------------------------------------------------------------------------


  • Next message: Marc Fossi: "Article Announcement: Auditing Web Site Authentication"

    Relevant Pages

    • Re: interoperability of VPN checkpoint FW1 to ISA
      ... Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the ... Training features 6 hand-on courses on May 12-13 taught by professionals. ... Register today to ...
      (Focus-Microsoft)
    • RE: interoperability of VPN checkpoint FW1 to ISA
      ... However, CheckPoint has one little ... Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the ... Training features 6 hand-on courses on May 12-13 taught by professionals. ...
      (Focus-Microsoft)
    • RE: interoperability of VPN checkpoint FW1 to ISA
      ... If you are not the intended recipient be aware that any ... Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the ... Training features 6 hand-on courses on May 12-13 taught by professionals. ...
      (Focus-Microsoft)
    • RE: Log on the domain
      ... whether a given user account can be used from the "console" keyboard ... Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the ... Training features 6 hand-on courses on May 12-13 taught by professionals. ...
      (Security-Basics)
    • Re: Zenworks
      ... Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the ... world's premier event for IT and network security experts. ... Training features 6 hand-on courses on May 12-13 taught by professionals. ...
      (Security-Basics)