dcxman

Morning all. To say the least, someone has decided to hack into my DC giving any user the ability to join any systems to my domain. I'm assuming that the a**hole has given delegation of control to all users. Is there a way I can counteract this in order to salvage my DC. I had continued to update my server with the latest patches and antivirus patterns and I still got hacked. Besides this jerk Microsoft is beginning to really steam me. Please if anyone can help I would greatly appreciate it. Thanks in advance as always.

Thanks for the responses duhmez and clutch. I liked duhmez's solution best Unfortunately you're right clutch. I didn't have a proper back up system in place. I just purchased a tape library system for this exact reason and was planning to implement it during the holidays (which is, as we all know, the only time administrators get to catch up on any work). As for back-up polices, I had back-ups and I did reapply them to no avail. I haven't tried reapplying the reg key templates yet though. Is there any instruction on how to go about reapplying those templates as I am not familiar with that process. I will probably end up building from scratch again any way to clear any doubts. Btw, I do not run any of the IIS services or third party web services and I am protected by a nice strong firewall from the outside. The only thing that my network has fault with is that the internal LAN setup has not been segmented yet between labs and servers as of yet. So as long as you have access to one of the units inside, you can pretty much hack your way to the servers. Thanks in advance all.

Morning all. I was just wondering what that MS tool/utility app is called in order to give the ability to account operators to manage AD user accounts. Thanks in advance all as always.

Thanks Vermyn. Much appreciated. I loaded it on a client system, gave account op priveleges to my techs, and voila. RocknRoll. Thanks again.

Where can I download it from?

Morning all. I've got a Win2K and a XP box that I'm trying to make secure but for the life of me I can't stop the C$ autoshare from starting up and coming back after reboot. How the hell do I stop it? I'm pretty much gettin frustrated with Microsoft at this point. Thanks in advance either way.

Understood. I am after the same type of security. Thanks again.

Excellent info Sampson. I just had one other question concerning this registry modification. I noticed that these new values not only remove the C$ share but the ADMIN$ share as well. I was just wondering what effect would that have on a Win2K Adv Server Domain Controller running AD services? Thanks so much Sampson either way.

I recently did a big "no no", meaning, I used IE6 to FTP into my server on a friends machine. Now when I go to an FTP site on IE6 and the login box pops up, it has my user ID from my last web server but without the password (I'm thankful for that at least). Is there any way on WinXP Pro SP1 w/IE6.1 SP1 to get rid of the history of logins? I've tried, in IE6, clearing history, deleting all files and offline and deleting cookies. I've also tried going under Content Tab, under Personal Information, under Auto Complete unchecking all the boxes along with clearing all forms and passwords. Still, no luck. Can anyone tell me any steps that I might not have seen or noticed? Thanks in advance as always.

Good morning all. I'm having issues adding users from my excel spreadsheet to my AD Users and Computers. I know the tool in the past used to be "addusers.exe" or "addusers.vbs" which was on the Resource Kit for both NT4 and 2K but that no longer exists in Win2K3. I've found the "dsadd.exe" tool in Win2K3 but it only does "individual" groups, computers, users.... Can anyone inform me if there's another tool to load from my spreadsheet doc or text doc? Much appreciated in advance either way.

DS3Circuit: I haven't tried those tools as of yet on Win2K3. I will give it a try later tonight. Thanks for the follow ups all.

Windows 2003 is not like WinXP where it creates an account automatically for you with administrative priveleges. You log into the administrator account directly just as you did in Windows 2000 Server. Yes I was under the admin account and yes as I stated previously I did use the ADMT which create single user or object accounts from command line (which I did successfully) but not in bulk. I've checked microsofts support.microsoft dot com as well for any related topics or issues without luck. They only talk of past migration tools that have worked with 2000 and NT4. Thanks again ViolentGreen for the follow up.

Thanks ViolentGreen for the input but I've tried command line even using ADMT as well and zip zilch nada. Have you actually tried this yourself on Windows 2003 Enterprise Server with AD? Thanks again

I just wanted to say thanks DS3Circuit. Unfortunately the BulkAddFromExcel tool does not work for Win2K3 Server. I forgot to state earlier that I was using this tool as well for my Win2K and had already tested it out along with AddUsers. Thanks again. Anyone else wanna give this a shot?

If you're extremely thrifty like I am then you could just get a regular parallel printer without the NIC and setup one of your systems with the parallel printer and then just "share" it on the network. Voila, you can even setup a 9 pin dot-matrix printer to be shared on the network. The only problem with cost would be your electricity bill as the system connected to the printer would have to remain on in order for the other systems to have access to the printer. Here are some links that may help you with your issue as well. http://support.microsoft.com/default.aspx?scid=kb;en-us;245603 http://support.microsoft.com/default.aspx?scid=kb;en-us;814220 Hope that helps

This link should give you some insight on how to get your office internet going. http://support.microsoft.com/default.aspx?scid=kb;en-us;314066

Morning all. I just found another one of those WinXP - Win2K differences just recently. Has anyone noticed that you can no longer copy the "Administrator" user profile to the "Default" user profile under the "User Profiles" section anymore? I would appreciate if anyone could explain to me what Microsoft has done to compensate for this and if there is a workaround or a fix for it. I'm trying to create a single user profile to exist locally so that when any of my users login to that system they will just get the one default user profile. I can't imagine Microsoft would force you to purchase there Win2K3 Server OS in order to make you pay for a roaming profile. Excellent Microsoft marketing strategy (heavy sarcasm here). Thanks in advance either way.

Excellent info on Default User setups. It was exactly what I was looking for. Virtual coffee's on me DS3Circuit. Thanks for the replies all.

Morning all. I just recently upgraded to WMP9 and loathe it. Does anyone know how I can get WMP8 back short of reinstalling my OS(WinXP Pro). Thanks in advance either way.

Thanks for all the responses guys. I was able to reinstall WMP8 by taking Hood's suggestion and unchecking it in the Windows Components section. Then followed up with Jerry Atrik and removed what remnants I could find of it in the registry. After rebooting I rechecked it in the the Windows Components list and voila. All is good. Avalanche, WMP9 does have better streaming than WMP7/8 but my main reason was for Divx playback where audio was lagging with every encoder I intstalled with WMP9. It just doesn't like any of the present Divx decoders.

Thanks Admiral LSD. I had a feeling I was SOL. No I did not make a restore point. Thanks again.

Morning all. I just had a question on user management under Windows 2000 Advanced Server. I recently received a list of users on an Excel spreadsheet to input into my Active Directory but I've never done this before as I've created all my domain users from scratch from a list. Can anyone tell me how to go about converting this Excel list into my AD tree? Sorry for the newbie question. Thanks in advance either way.

Thanks again DS3Circuit. I will give it a go tonight and I'll try not to double post.

Morning all. I just had a question on user management under Windows 2000 Advanced Server. I recently received a list of users on an Excel spreadsheet to input into my Active Directory but I've never done this before as I've created all my domain users from scratch from a list. Can anyone tell me how to go about converting this Excel list into my AD tree? Sorry for the newbie question. Thanks in advance either way.

Thanks again DS3Circuit. I will try it tonight. And I'll try not to double post.