Re: hisecweb.inf

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/08/05


Date: Mon, 7 Mar 2005 21:20:02 -0600

What exactly do you mean that the share disappeared? Is this the only share
on the server and if not can the other shares be accessed? When you go to
the server does it still show that the share exists? Verify that file and
print sharing is enabled and that the server service is running on the
server. Run the command net config server to see if it reports that the
computer is configured to share resources and the command net share to see
if the share and IPC$ are shown. Try to ping the server from the clients by
name and IP address. See if you can access administrative shares from a
client computer that is showing the problem such as C$. Run the support tool
netdiag and that server to see if it reports any particular problems. It is
possible that incompatible security options for digitally sign
commumications, lan manager authentication level, or other security options
could be causing a problem if they were changed on the server. -- Steve

"Mary S" <nomail@forme.com> wrote in message
news:3eqo21p9dn8vukn878p0c2mf46afspohmp@4ax.com...
> Hi Steve
>
> Thank you for your handsome explanation. What I'm trying to do is to
> strengthen a w2k server against intruders both locally and remotely.
> I'm using the hisecweb.inf file as a guideline at this point.
>
> I have not executed the "configure the comp..
>
> I'm going trough every separate suggestion. I can't say I understand
> everything. But I'm learning slowly but consistently. The objective
> being to produce our own security setting inf file as according to NSA
> guides.
>
> Even if I have been careful adjusting the settings I although managed
> to make a shared folder on the server disappear and I don't know where
> it went wrong. I'll keep getting "The network path
> \\192.168.0.10\share\ could not be found" from the clients.
>
> Any suggestions highly appreciated
>
> (F.y.g. Since last time I have connected to the shared folder I have
> installed the latest 6-7 security patches otherwise I can't think of
> any other things)
>
>
> Thanks again
>
>
> On Sun, 6 Mar 2005 12:09:05 -0600, "Steven L Umbach"
> <n9rou@nospam-comcast.net> wrote:
>
>>The easiest way is to import the security template into the Local Security
>>Policy or possibly at the Organizational Unit level that contains servers
>>you want to apply it to via a Group Policy assuming you want to implement
>>the security template as it is. If it includes settings for services,
>>Restricted Groups, file system, or registry you can not simply import it
>>into the Local Security Policy but you could use secedit or the Security
>>Configuration and Analysis tool to apply it. I suggest that you first use
>>the Security Configuration and Analysis tool which is a mmc snapin to
>>analyze the computer with that template to see exactly what changes it
>>will
>>implement before you do apply the template and that you make a full image
>>type backup of your server first so that you have a rollback plan as these
>>high security templates often have unintended consequences particularly if
>>the server is also running other applications or services that would not
>>normally be found on a dedicated web server. See the link below on using
>>the Security Configuration and Analysis tool. There is a lot of
>>information
>>for secedit in the Windows built in help or using secedit /?. --- Steve
>>
>>http://www.lokbox.net/SecureXP/secAnalysis.asp
>



Relevant Pages

  • security-basics Digest of: get.123_145
    ... VPN to ASP a security risk? ... Re: Multiple IPSec tunnels? ... Subject: Security NT Server ... VPN to ASP a security risk? ...
    (Security-Basics)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: << SBS News of the week - Sept 26 >>
    ... > And he points to the info you need to put the file on the server in the ... > at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... An attacker can exploit these flaws in tandem via specially ...
    (microsoft.public.backoffice.smallbiz2000)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.windows.server.sbs)