some notes on enabling auditing to enhance domain security for Windows 2000 Active Directory:

Start .. Programs .. Administrative Tools .. Domain Security Policy
Windows Settings .. Security Settings .. Local Policies .. Audit Policy

Enable these Policies:
Audit account logon events
Audit directory service access
Audit logon events
Audit object access
Audit policy change

Start .. Run .. CMD .. OK

secedit /refreshpolicy machine_policy
secedit /refreshpolicy user_policy

• Browse to folder requiring monitoring.
• Right click folder and choose properties.
• Select Security tab. Click Advanced...
• Select Auditing tab
• Click Add...
• Change Look in: to local system name
• Select Everyone from list and click OK
• Choose items to monitor
  • Delete Subfolders and Files (Successful/Failed)
  • Delete (Successful/Failed)
  • Take Ownership (Successful/Failed)
• Click OK
• Check Reset auditing entries on all child objects and enable propagation of inheritable auditing entries.
• Click OK

Monitor Security event log for alerts. Add or remove items to fit your specific requirements.

Keep in mind this is extra work for your servers and you may take a performance hit by enabling auditing.

 

 

( )

We were receiving this error after a password policy was implemented on our corporate network:

Compiler Error Message: BC30138: 
Unable to create temp file in path 'C:\WINDOWS\TEMP\': 
Access is denied. 

This article states The error can be resolved by explicitly assigning MODIFY rights to ASPNET User account (prior to Windows Server 2003) and NETWORK SERVICE account in case of Windows Server 2003. which did not work for us or the others responding to that particular blog, but it pointed us in the right direction.

We ended up assigning Full Access rights to the C:\Windows\Temp folder for these local accounts: ASP.Net, IUSR_(machine name) and Network Service
Follow up with a restart of the WWW service and the application comes back to life!

 

 

( Solution Fix )

I wrote this template to help with listing items. It is available on my website at no charge. No information is stored or cached so be careful and save the information before closing your browser.

eBay template

 

 

( )

Process Explorer from SysInternals is a great tool. HiJack This can remove a file during boot process. Use the two to disable and remove "SmitFraud-C" trojan and stubborn items: "MSSearchnet.exe" "nvctrl.exe" and "mscornet.exe" all located in the Windows\System32 folder. Also notice and correct entries in the registry at HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run

watch out for cmdService nesting itself in a long named directory. i just happened to make note of this file name:
n353tqcWtqk0prh5w0.vbs
this file had all special file attributes: hidden, system, read only

 

 

( )

After removing and reinstalling Veritas BackupExec 9.0, be sure to apply the following updates and patches:

• Be4454RSP1_267151.exe Backup Exec (tm) 9.0 for Windows Servers revision 4454 - Service Pack 1
• BackupExecTapeDeviceDriverInstall_265139.exe VERITAS Backup Exec (tm) 9.0 - Device Driver Installer (20040115) - Includes Tape Driver Release (20031222) and Robotic Library Release (41) (Intel Only)

The next two shouldn't be necessary, but I had to utilize the hot fix in order to apply the driver update.

• BE4454RHF2_267153.exe VERITAS Backup Exec (tm) 9.0 revision 4454 Hotfix 2 - Device and Media Support (adds support for the Super Advanced Intelligent Tape media type)
• When running the Backup Exec 9.0 Device Driver Installer 20040115, the error: "The following patches need to be installed before this patch can successfully continue. BE4454RHF2" is returned.

Silly thing still didn't work after installing all the updates. I wound up performing these steps and using the tape install tool (tapeinst.exe) to get it to work.

• Remove Veritas drivers
• Disable use by Removable Storage
• Restart all BackupExec services
• I was about to run through device configuration wizard, but ran a test backup instead
• Kicked off an inventory to make sure the tape is ready for tonight's backup job
• Crossed fingers for good luck!

 

 

( )

(sorry this isn't finished)

Located the following names missing from a security key that allows network access. This was on a Windows Domain, but someone had removed these security settings.

administrators;aspnet;backup operators;everyone;power users;users

Administrators; Backup Operators; Everyone; Users

below are a few notes i ran across while looking this up

http://support.microsoft.com/kb/823659

http://www.techsupportforum.com/file-application-sharing/73592-xp-pro-share-logon-failure.html

 

 

( )

This is another one that is more just for information rather than a fix, but it's still sounds like a good deal.

Beginner ("Bitty") web hosting for $3.33 per month!

Disk Space 50 mb
Bandwidth 512 mb
Monthly Price $3.33

http://www.a1can.com/

 

 

( )

Funny thing about that Windows server 2003, the backup decided to stop working one day. I kicked off the job manually and noticed the backup program come up and then close after a few seconds. Before getting to far, I just happened to notice event 8017 listed which turned up the following information:

Microsoft's Article ID: 828402 titled Backup (NTBackup.exe) stops during the backup process and event 8017 is logged states that there is a HotFix available, but to apply it only if you are severly affected.

Since the customer was not freaking out about any critical data I felt that we weren't severly affected and opted for a different approach.

The following lines placed in a batch file work just fine. The scheduler can run the batch file just like running the ntbackup, but this way all the switches are in a file that is much more difficult to mess up. Plus, this uses a variable to specify the name of the day of the week and adds it to the backup job name.

@echo off

FOR /F "tokens=1-4 delims=/ " %%I IN ('DATE /t') DO SET mydate=%%I

C:\WINDOWS\system32\ntbackup.exe backup D:\ /um /n "Daily Backup-%mydate%" /d "D-Drive %mydate%" /v:yes /r:no /rs:no /hc:on /m normal /j "Daily Backup" /l:f /p "8mm AIT"

C:\WINDOWS\system32\ntbackup.exe backup C:\ /um /t "Daily Backup-%mydate%" /d "C-Drive %mydate%" /a /v:yes /r:no /rs:no /hc:on /m normal /j "Daily Backup" /l:f

 

 

( )