Re: How to fix broken security in Windows 2000?

From: Shannon Jacobs (shanen_at_my-deja.com)
Date: 02/09/05


Date: Wed, 9 Feb 2005 10:24:00 +0900

The technical question:

How to identify missing security certificates in Windows 2000? I am not
asking about every individual unique case, though there are many of them,
but about the general problem which apparently affects *EVERY* computer
which is still running Windows 2000.

Case 1: I am technically naive. In that case, you (Karl Levinson, mvp), are
failing to answer the question in a meaningful way.

Case 2: I am not technically naive. In that case, you (Karl Levinson, mvp),
are still failing to answer the question, but I would also know whether or
not you're just spewing mumbo jumbo. (But maybe you'd like to start by
trying to explain your bizarre comment about who is or is not allowed to
write RFCs?)

In Case 1, there is no reason for me to waste much time with someone who is
incapable of explaining the answer, whether or not that person understands
the answer. Case 2 is even less motivating. In both cases, there is no
reason for you (Karl Levinson, mvp) to continue repeating yourself. Whatever
the case, I've so far seen no evidence that you do understand either the
technical question or the answer. That only leaves the non-technical
question of why you are keeping this thread alive. It does not really matter
why you (Karl Levinson, mvp) are failing (yet again) to resolve the
technical problem. I'm not trying to confuse the issue, though I consider it
increasingly unlikely any answer will appear here.

I've also made no secret of my personal position. I use Microsoft products
not because they are the best and freely chosen. Many of them are adequate
for certain purposes, but mostly I use them because I am constrained to do
so. That does not change the fact that I am a customer in search of
technical support. Since you (Karl Levinson, mvp) can't provide it, what
prey tell are you doing?

By the way, if you were an employee of Microsoft, I quite probably would
already be complaining about your incompetence to your manager. Perhaps
"protecting" people like you (Karl Levinson, mvp) is the true residual
purpose of the MVP program? I still can't imagine why. Perhaps Microsoft
wants more customer hostility?

Karl Levinson, mvp wrote:
> "Shannon Jacobs" <shanen@my-deja.com> wrote in message
> news:%23h3VFSdDFHA.512@TK2MSFTNGP15.phx.gbl...
>> Why did you (Karl Levinson, mvp) post all this stuff? Isn't that a
>> question you can actually handle? Since you have nothing interesting
>> to say, why not say nothing?
>
> I ask you all the same questions.
>
> By the way, thanks for all the extra brownie points. Keep arguing
> with me for a few more posts, and I'll have enough for a trip to
> Bermuda.
>
> Believe it or not, I truly just want you to follow the steps in the
> article I posted, so we can help fix your problem. [Don't forget to
> perform step 13 from the article, which states "Put $50 into an
> envelope and mail it to..."]
>
>> The security problem is Microsoft's,
>
> I believe the security problem is yours. No one else besides you is
> having this problem. You blamed MS, and us, every step of the way,
> even when you thought the problem was that you had taken it upon
> yourself to delete old certificates.
>
>> but you (Karl Levinson, mvp) have not been any part of the solution.
>
> The link I gave you is the solution, or part of the solution. You
> are just too stubborn and arrogant to bother trying it and reporting
> back what happens. I'm telling you that following those procedures
> and reporting back what happened when you did them is part of the
> solution. You asked how to identify and replace the certs MS uses
> for signing Windows files; that link tells you that. You asked how
> to establish an association between those certs and the signed files;
> that link also tells you that.
>
> http://support.microsoft.com/default.aspx/kb/822798
>
> I don't believe you really followed all 8 of those steps in a
> methodical order. But even if you did, you aren't able to tell us
> the necessary information about what happened after you followed the
> instructions. Example, "I followed the instructions and confirmed all
> certs are there, but the X service still isn't starting and is giving
> error message Y, or one of the DLLs couldn't be re-registered because
> it was missing." You say some workstations are missing some certs,
> but can't tell us which certs are missing, and haven't bothered to
> replace the certs despite having the instructions on how to do that
> via the link I gave you.
>
> http://support.microsoft.com/default.aspx/kb/822798
>
> We could tell you what to do next when the steps in that article
> fail, but we would need to know how those steps failed exactly to
> guess what to suggest to you next. Because you don't have this
> information, you need to follow that article again to give us this
> information.
>
> http://support.microsoft.com/default.aspx/kb/822798
>
> Your problem will probably never be solved until you follow the steps
> in the article above and tell us, or someone, exactly what happened.



Relevant Pages

  • Re: How to fix broken security in Windows 2000?
    ... How to identify missing security certificates in Windows 2000? ... In that case, you (Karl Levinson, mvp), are ... You asked how to identify and replace the certs MS uses ...
    (microsoft.public.win2000.windows_update)
  • Re: How to fix broken security in Windows 2000?
    ... How to identify missing security certificates in Windows 2000? ... In that case, you (Karl Levinson, mvp), are ... You asked how to identify and replace the certs MS uses ...
    (microsoft.public.security)
  • Re: Slightly OT: Resume Advice
    ... If you think an MS Cert is worthless, then isn't the MVP award that you ... newsreader can help people long enough to get that. ... I think years ago the certs(all certs, MS, Novell, Cisco, etc), MVP, etc ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Certs for Domain Controllers-Trying to Prevent an Issue
    ... "Jorge de Almeida Pinto [MVP - DS]" wrote in message ... You can use certutil -dcinfo deleteALL to replace the certs after the new PKI is deployed ... The one remaining issue is that DC1 issued the Domain Controller ...
    (microsoft.public.windows.server.security)
  • Re: Auto fit table
    ... nothing missing in your menu. ... Luc Sanders ... "Suzanne S. Barnhill" wrote: ... Microsoft MVP (Word) ...
    (microsoft.public.word.tables)