IT Troubleshooting

Security : System Security

For Terminal Server related security problems, choose TS/Citrix - Security in the navigation bar.

US-CERT - updated summary of security incidents and vulnerabilities
ASSET - Automated Security Self-Evaluation Tool, by NIST
Microsoft TechNet - Security Bulletins
iDEFENCE - security intelligence
ICAT - searchable database with known computer vulnerabilities, by NIST
Vulnerability Information Center - by Computer Associates
Microsoft Baseline Security Analyzer
306460 - Microsoft Baseline Security Analyzer (MBSA) returns note messages for some updates
Security Compliance Management Toolkit Series
PGP - Pretty Good Privacy - encryption

Download Security Engineering - by Ross Anderson
Permissions: A Primer, or: DACL, SACL, Owner, SID and ACE Explained - by Helge Klein
Windows Security Services
Windows Server 2008 Security Guide
Threats and Countermeasures: Security Settings in Windows Server 2003 and Windows XP

947226 - Description of security events in Windows Vista and in Windows Server 2008
243330 - Well-known security identifiers in Windows operating systems
217098 - Basic Overview of Kerberos Authentication in Windows 2000
299475 - Windows 2000 Security Event Descriptions
140714 - Distinguishing Windows NT Audit Event Records
274176 - Security Event for Associating Service Account Logon Events
245207 - How to: Determine NTRIGHTS Names and Meanings

Protecting Data by Using EFS to Encrypt Hard Drives
961658 - How to enable Access-based Enumeration for a Distributed File System (DFS) share in Windows Server 2008
907458 - How to implement Windows Server 2003 Access-based Enumeration in a DFS environment
875352 - A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003
Do You Still Hide Your Share$? - by Helge Klein
How to Prevent Users from Changing Permissions on File Servers - by Helge Klein

Download the Managing Internet Explorer Enhanced Security Configuration White Paper
Internet Explorer in Protected Mode - How the Low Integrity Environment Gets Created - by Helge Klein

823659 - Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments
896687 - You cannot grant users who are members of other domains in the forest the permission to decrypt and encrypt EFS-encrypted files in Windows Server 2003 or in Windows XP - 2003 hotfix, XP post-SP2 hotfix
911805 - You cannot load or unload a roaming user profile if it contains EFS files on a Windows XP-based or a Windows Server 2003-based client
899742 - The auditing policy for logon events is turned off after a network connection fails in Windows Server 2003 - postSP1 hotfix
825069 - A member of the Power Users group may be able to gain administrator rights and permissions in Windows Server 2003, Windows 2000, or Windows XP
947870 - Error message when you run the Icacls.exe utility to set ownership of a file or of a folder on a computer that is running Windows Server 2003 SP2: "Access is denied"
951026 - A domain user may be able to access security logs even though the user does not have the "Manage auditing and security log" user right in Windows Server 2003
959489 - Error message when you try to perform certain operations on the files that are located on a network share: "Access is Denied" 2008 and Vista
967539 - Cannot configure ACL to the drive root using icacls.exe