IT Troubleshooting

Security : System Security

For Terminal Server related security problems, choose TS/Citrix - Security in the navigation bar or click here.

US-CERT - updated summary of security incidents and vulnerabilities
ASSET - Automated Security Self-Evaluation Tool, by NIST
Microsoft TechNet - Security Bulletins
iDEFENCE - security intelligence
ICAT - searchable database with known computer vulnerabilities, by NIST
Vulnerability Information Center - by Computer Associates
Microsoft Baseline Security Analyzer
306460 - Microsoft Baseline Security Analyzer (MBSA) returns note messages for some updates
PGP - Pretty Good Privacy - encryption

Download Security Engineering - by Ross Anderson
Windows Security overview
Windows Server 2008 Security Guide
Windows Vista Security Guide
Windows XP Security Guide
Threats and Countermeasures: Security Settings in Windows Server 2003 and Windows XP
Best Practice Guide for Securing Active Directory Installations and Day-to-Day Operations
How To Apply Group Policy and Security Templates with Windows Server 2003
Protecting Data by Using EFS to Encrypt Hard Drives
Encrypting File System in Windows XP and Windows Server 2003
Using Encrypting File System
875352 - A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003
907458 - How to implement Windows Server 2003 Access-based Enumeration in a DFS environment
Download the Managing Internet Explorer Enhanced Security Configuration White Paper
NSA Security Recommendation Guides

947226 - Description of security events in Windows Vista and in Windows Server 2008
243330 - Well-known security identifiers in Windows operating systems
217098 - Basic Overview of Kerberos Authentication in Windows 2000
299475 - Windows 2000 Security Event Descriptions
140714 - Distinguishing Windows NT Audit Event Records
274176 - Security Event for Associating Service Account Logon Events
245207 - How to: Determine NTRIGHTS Names and Meanings

823659 - Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments
896687 - You cannot grant users who are members of other domains in the forest the permission to decrypt and encrypt EFS-encrypted files in Windows Server 2003 or in Windows XP - 2003 hotfix, XP post-SP2 hotfix
911805 - You cannot load or unload a roaming user profile if it contains EFS files on a Windows XP-based or a Windows Server 2003-based client
899742 - The auditing policy for logon events is turned off after a network connection fails in Windows Server 2003 - postSP1 hotfix
825069 - A member of the Power Users group may be able to gain administrator rights and permissions in Windows Server 2003, Windows 2000, or Windows XP
947870 - Error message when you run the Icacls.exe utility to set ownership of a file or of a folder on a computer that is running Windows Server 2003 SP2: "Access is denied"
951026 - A domain user may be able to access security logs even though the user does not have the "Manage auditing and security log" user right in Windows Server 2003