Re: tasklist.exe security problem??
From: Marcus (bafi_at_linux.nu)
Date: 09/24/04
- Previous message: Steven L Umbach: "Re: tasklist.exe security problem??"
- In reply to: Steven L Umbach: "Re: tasklist.exe security problem??"
- Next in thread: Marcus: "Result off filemon"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 24 Sep 2004 22:40:35 +0200
I will try on Monday with filemon and regmon when I am back at work. Thanks
Marcus
Steven L Umbach wrote:
> The only problems I am aware of if an program will not run is if the user does not
> have the proper user right such as debug in this case, lack of ntfs permissions,
> Software Restriction or Group Policy Restrictions, not being an administrator, or
> file/operating system corruption possibly due to a virus. If you want to dig deeper
> you could use the filemon and regmon tools from SysInternals to see what files and
> registry entries are being access when you use those tools. I would for instance run
> filemon just before I try to run taskkill and when it fails look in filemon's log for
> any pertinent entries where access has been denied and just to see what it does
> access. You could also temporarily enable auditing for failure for privilege use,
> object access, and process tracking on the server and then look in the security log
> for failed events which may give you a clue. --- Steve
>
> http://www.sysinternals.com/ntw2k/source/filemon.shtml
>
> "Marcus" <bafi@linux.nu> wrote in message news:41546138.4C3D387F@linux.nu...
> > Hi Steve,
> > I tried with copying tasklist from another computer on which it is working and it
> > is the
> > same problem. I tried also tasklist from XP machine. The same error: Access denied.
> > Maybe tasklist need some service which is stoped or deactivated. Do you know about
> > such
> > dependencies?
> > I will write soon.
> >
> > Marcus
> >
> > Steven L Umbach wrote:
> >
> >> I can't think of much else other than to be absolutely sure you are logged on as
> >> an
> >> administrator by viewing the membership of the local administrators group and then
> >> checking that system and administrators have full control for administrators and
> >> system to the system folders and subfolders. If this is new behavior be sure to
> >> run a
> >> full virus scan on your computer. It might be interesting to see what happens if
> >> you
> >> copy tasklist from a computer it works on into a folder not in the path on the
> >> problem computer to see if it executes from there. --- Steve
> >>
> >> "Marcus" <marcusbb@swipnet.se> wrote in message
> >> news:Oo%23CuKgoEHA.1776@TK2MSFTNGP14.phx.gbl...
> >> > Steven L Umbach wrote:
> >> >
> >> >> Check to see if the administrators group has the user right to debug programs
> >> >> in
> >> >> the appropriate security policy. For instance check Local Security Policy under
> >> >> security settings/local policies/user rights.
> >> > Yes, I checked now. Adminstrators have rights to debug
> >> > For Windows 2000 it would need to show as the
> >> >> "effective" settings. Certain utilities need this right. Other than that check
> >> >> the
> >> >> ntfs permissions on the executables. Software Restriction Policies in Windows
> >> >> 2003
> >> >> can also prevent a program from running but the user is usually told that the
> >> >> application is restricted. --- Steve
> >> >
> >> >
> >> > Software Restriction Policies are not defined
> >> >
> >> > What it could be???
> >> >
> >> > MArcus
> >> >
> >> >
> >> >
> >> >
> >> >>
> >> >>
> >> >> "Marcus" <bafi@linux.nu> wrote in message news:4151D7E8.3EE5B828@linux.nu...
> >> >>
> >> >>>I can not run tasklist.exe on my server. It does not
> >> >>>matter if I log in as administrator locally or as domain administrator.
> >> >>> I am geting always the same message:
> >> >>>Error: Access denied
> >> >>>
> >> >>>The same problem with taskkill.exe
> >> >>>
> >> >>>It is hapen only on one server in the domain, on the rest tasklist.exe
> >> >>>is working without problems.
> >> >>>
> >> >>>Please help. Is this have to do with the Security
> >> >>>
> >> >>>Marcus
> >> >>>
> >> >>>
> >> >>>
> >> >>
> >> >>
> >
- Previous message: Steven L Umbach: "Re: tasklist.exe security problem??"
- In reply to: Steven L Umbach: "Re: tasklist.exe security problem??"
- Next in thread: Marcus: "Result off filemon"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
