Re: Unable to view/manage server roles (windows 2003 server)

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 03/12/05

  • Next message: Shenan Stanley: "Re: Dream Pack? Need to get into PC w/PW from fired employee"
    Date: Sat, 12 Mar 2005 07:15:23 -0700
    
    

    Good to hear that you must be fixed up now.
    Thanks for the post-back in thanks

    -- 
    Roger
    "bonset" <bonset@discussions.microsoft.com> wrote in message 
    news:FDC2DB63-5B32-41AA-8F6A-45FE3DC2EF73@microsoft.com...
    > It is never too late to say thanks!!!!
    >
    > I thank you very much for your answer and your help!
    >
    > :)
    >
    > "Roger Abell" wrote:
    >
    >> Some websites over recent months have posted various
    >> suggestions at how to block exploitations from IE and OE
    >> usage.  Some of these have focused on crippling hta use.
    >> Perhaps someone tried the suggestions for one such hta
    >> workaround on that one machine ?
    >>
    >> If your server is, as IMO servers should, not used for
    >> email and web site browsing, and as you indicate it is
    >> now up to date on security patches, you could just set
    >> the NTFS permissions so that they match those on the
    >> mshta.exe file of the server where the management
    >> application does work.
    >>
    >> Remember Everyone includes all authenticated accounts,
    >> including members of the administrative groups; and, a
    >> Deny overrides grants.
    >>
    >> -- 
    >> Roger Abell
    >> Microsoft MVP (Windows  Security)
    >> MCSE (W2k3,W2k,Nt4)  MCDBA
    >> "bonset" <bonset@discussions.microsoft.com> wrote in message
    >> news:168CA1E3-9AF8-4697-BD4F-7D410304E85A@microsoft.com...
    >> > Hello all,
    >> >
    >> > I cannot run anymore the "MANAGE YOUR SERVER" utility on my windows 
    >> > 2003
    >> > server standard edition. When I run the utility I get the message 
    >> > "Windows
    >> > cannot access the specified device, path, or file. You may not have
    >> > permission to access the item".
    >> >
    >> > The item in question is the C:\windows\system32\mshta.exe. I checked 
    >> > its
    >> > permissions and the only group that can access it is EVERYONE but the 
    >> > READ
    >> > right  is set to DENY.
    >> >
    >> > I know this is wrong and I cannot understand what happened and the 
    >> > rights
    >> > are changed to this file.
    >> >
    >> > I never had problems in the past and my other 2003 server has no 
    >> > problem
    >> > with running the utility (both systems have installed the latest 
    >> > microsoft
    >> > patches released on February 9).
    >> >
    >> > Please help me with this, any suggestion is valuable, I don't have much
    >> > experience and I am completly stuck.
    >> >
    >> > I thank you very much for your time and help.
    >> >
    >> >
    >> >
    >>
    >>
    >> 
    

  • Next message: Shenan Stanley: "Re: Dream Pack? Need to get into PC w/PW from fired employee"

    Relevant Pages

    • Re: write with cURL
      ... execute permissions. ... of potential security risks from other users on the same server. ... I made this suggestion because their web host appears to run Apache ... risk to allow Apache's group write access, since all PHP scripts ran ...
      (alt.php)
    • Re: require client certificates SSL
      ... Microsoft MVP - Windows Security ... Then the user has to import the certificate in his 'Trusted root ... First one is for SSL protection of your server and this ...
      (microsoft.public.inetserver.iis.security)
    • RE: Windows 2003 Server - Everyone Group
      ... this folder only accessable by the users in the "special" group. ... Configure User and Group Access on an Intranet in Windows Server ... NTFS files system permissions control ... group that you want to set permissions for, click Check Names to verify the ...
      (microsoft.public.win2000.networking)
    • Fail DBD::Mysql 4.003 installation
      ... This test requires a running server and write permissions. ... permissions, then retry. ... Failed 9/9 tests, 0.00% okay ...
      (perl.dbi.users)
    • Re: XP Client cant joing 2003 Domain
      ... Open DNS MMC on your Windows Server and right click on the name of the ... Microsoft MVP - Windows Security ... can you open DNS MMC and check which Forward Lookup Zones ...
      (microsoft.public.windows.server.general)