Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: To disable SMB packet and secure channel signing enforcement on Wind

Subject: RE: To disable SMB packet and secure channel signing enforcement on Windows Server 2003-based domain controllers
Date: Thu, 05 May 2005 09:30:19 +1000
1. Return back to "Enabled" secure channel ecnryption requirement. SMB
file 
sharing has nothing to do woth it. Secure Channel is used by domain member 
computers to pass user authentication information to DCs.

Now the thing here is; in order to allow the scanner access to the shared
drives, I was advised to setup a 'user' so that there would not be any
authentication issues. Then I had to allow that 'user' permissions etc on
the folders in question. This was the only way I could find that the scanner
could actually dump the files to the req'd share.
I will try it and see if that allows the scan to dump the file.
Sorry, I should have mentioned this at the beginning but was trying to keep
it succinct. (I can already hear sucking in of breath!)

Murad
-----Original Message-----
From: ?????? ?????? [mailto:morsin@eastbridge.tula.ru] 
Sent: Wednesday, May 04, 2005 10:52 PM
To: Murad Talukdar
Subject: Re: To disable SMB packet and secure channel signing enforcement on
Windows Server 2003-based domain controllers


----- Original Message ----- 
1. From Administrative Tools open Domain Controller Security Policy 2. 
Smile
3. Select \Security Settings\Local Policies\Security Options folder. 4. In
the details pane, double-click Microsoft network server: Digitally sign
communications (always), and then click Disabled to prevent SMB packet
signing from being required. 5. Click OK. 6. In the details pane,
double-click Domain member: Digitally encrypt or sign secure channel data
(always), and then click Disabled to prevent secure channel signing from
being required. 7. Click OK.

1. Return back to "Enabled" secure channel ecnryption requirement. SMB file 
sharing has nothing to do woth it. Secure Channel is used by domain member 
computers to pass user authentication information to DCs.
2. There are companion settings "Digitally sign communications (always)" and

"Digitally sign communications (when possible)" for both servers and 
workstations. Set first to "Disabled" and second to "Enabled" and your DCs 
will communicate securely with users and insecurely with your printer. 





---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>