Re: Several Problems Dealing With Shares, Permissions and RPC

From: Nick Mosier (vgi1@transedge.com)
Date: 01/24/03 

From: "Nick Mosier" <vgi1@transedge.com>
Date: Fri, 24 Jan 2003 09:54:39 -0600

    I was also thinking group policy, but where would this information be
stored in it to remove all security settings changed back to their
originals. But I have our security policy to refresh itself every 2 hours.
It should of taken affect by now. It's been up for 3 days.
    We have 3 NICs connected to 3 different subnets. One is our main web
site, one is our extranet site, and one is internal. I've been meaning to do
something about that. I just dont know what I could do to solve the problem.
I'm not that experienced in ISA server yet, but I would think that I could
do it through there. I could just add another NIC card to my ISA server, do
a publish web server and that would work, I think. I dont know. I will have
to look into that.

Thanks for reminding me and for your help,

Nick

"Karl Levinson [x y] mvp" <jamescagney90210@excite.com> wrote in message
news:uqatY86wCHA.640@TK2MSFTNGP12...
> RE: the problem with the permissions being lost on reboot, I am thinking
> this might be in Group Policy. If you run the command secedit
> /refreshpolicy machine_policy and the settings are immediately lost,
that
> indicates Group Policy is resetting the permissions.
>
> I am concerned about having three NICs in your web server. I feel there
> must be a better way to set this up, security wise. If a hacker
compromises
> your web server, they will probably have immediate access to your internal
> network. I don't believe having 3 NICs is any more secure or beneficial
> than having 1 NIC, in fact it could be less secure if this is bypassing a
> firewall or a router that could be doing filtering and logging.
>
>
> "Nick Mosier" <vgi1@transedge.com> wrote in message
> news:v30qr81ou1vj6d@corp.supernews.com...
> > Sorry forgot to tell you some vital information about the server
> >
> > It's a Web Server running Windows 2000 Server SP3. 3 NICs, 1 for
internal,
> 2
> > for external. Also running ISA SP1 on network. The DCs are W2K SP3
> >
> > "Nick Mosier" <vgi1@transedge.com> wrote in message
> > news:v30qgugc71pbf6@corp.supernews.com...
> > > Hey everyone,
> > > Well this all just started happening recently. There are several
> > things
> > > in this post
> > >
> > > 1. The default admin shares are being deleted/removed constantly. I
> think
> > > that I got that one figured out from searching this newsgroup with
> > KB245117.
> > >
> > > 2. If I go to any share, r-click on a folder/file, go to security,
then
> > add
> > > I get an error message stating "Object Picker cannot open because it
> > cannot
> > > determine whether (servername) is joined to a domain."
> > > Then I click close. Then I get another error message stating "Unable
to
> > > display the user selection dialog. The RPC server is unavailable."
> > > I don't understand this one. When I am on the server, I can change
> all
> > > of the security settins until my heart is content. But when I am
> accessing
> > > it remotely I get those messages. I also get the RPC error when I try
> and
> > > open my custom mmc that has all of my servers event viewers, services,
> > etc.
> > > The domain controllers are working fine. My other 2 member servers are
> > > functioning properly. My DNS is working fine, I have no problems
> > connecting
> > > to the my MMC snap-ins on my other servers. I can ping the server by
> > server
> > > name, ip and fqdn.I have tried KB 323790 and KB 224370 still no
effect.
> > This
> > > is driving me NUTS!
> > >
> > > 3. Whenever I restart the server all of the security settings, IIS
> > security
> > > settings, go back to the way it was before. For Example, I have to
> > > re-register certain components in IIS, redo the security settings on
> files
> > > and folders for these components because the security settings go back
> to
> > > before the restart.
> > >
> > > Any help would be much appreciated,
> > >
> > > Nick M.
> > >
> > >
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.443 / Virus Database: 248 - Release Date: 1/10/2003
>
>

Relevant Pages

  • Re: User Configuration
    ... You can not log onto that server interactively as per Group Policy defaults. ... This is a security related protection. ... Settings, Security Settings, Local Policies, User Rights Assesment, and ...
    (microsoft.public.windows.server.sbs)
  • Re: Replaced default "Domain Group Policy" - potential problem?
    ... Windows 2000 Server ... How to restore deleted GPO policy files to Active Directory on a computer ... I would also like to know how the policies in the Domain Group Policy ... Does the domain just make these security settings active for the GPO ...
    (microsoft.public.win2000.group_policy)
  • Group Policy - Start/stop specified service....
    ... It appears to me that you can use the Computer Configuration> Windows ... Settings> Security Settings> System Services for services that are ... installed on the server you edit the policy from. ...
    (microsoft.public.windows.server.active_directory)
  • RE: RPc server is unavailable since SP1
    ... DC to Member Server and Member Server to DC and also to clients. ... When SP1 was installed, there were no errors. ... > interface security settings before the installation of SP1 will be lost. ... > automatically update the DCOM security settings for enrollees from outside ...
    (microsoft.public.windows.server.sbs)
  • RE: RPc server is unavailable since SP1
    ... After these commands run successfully, ... RPc server is unavailable since SP1 ... >> when the member server update certificate you get the error message RPC ... >> interface security settings before the installation of SP1 will be lost. ...
    (microsoft.public.windows.server.sbs)