|
Is there any way to keep non admin users from installing local printers in Windows 2000?
Greg
|
|
|
|
|
Read the bottom half of the page:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwinpro02/html/w9p0102.asp
|
|
|
|
|
Thanks. That helped me find the problem. Someone had put Authenticated Users in the Power Users group, which meant that anyone could add a local printer.
|
|
|
|
|
There is one policies in group policies: "Prevent user from installing printer drive". Try to configure this policies and hope it would help you.
|
|
|
|
|
|
I treat all comparative reports with a large amount of distrust, especially when paid for by the companies that produce the products being tested.
While there is not likely to be any falsifying of results, you can be sure that the environment, including the tests themselves will have been skewed to present the correct product as the "winner".
my blog
|
|
|
|
|
Steven Campbell wrote:
when paid for by the companies that produce the products being tested
I totally agree with you. The test conditions themselves are fallacious like the results. And really speaking I dont like my favourite Linux systems being ranked below those I don't really love and admire 
|
|
|
|
|
On the VeriTest website on the age about which reports get posted it says
"The reports we've posted on our Web site, however, represent only a small fraction of the tests we've performed and the test reports we've written—the fraction that our clients have chosen to publish. Each client determines, for each test, whether to have us post its test report."
I would be interested in seeing some of the comparisons Microsoft chose not to make public.
|
|
|
|
|
Hi, I use command SYSKEY to let password for my winXP system. I forget it and can't access to windows. Can any one tell me how to recovery my password that I have forgotten?
APO-CEDC
Save Children Norway-Cambodia Office
|
|
|
|
|
Try hypnosis
The opinions expressed in this communication do not necessarily represent those of the author (especially if you find them impolite, discourteous or inflammatory).
|
|
|
|
|
Hi Phil, i try to check it in google but it seem that it relate to music or audio. What i want is the method to recovery my password from from windows after i use SYSKEY command and forget the password.
APO-CEDC
Save Children Norway-Cambodia Office
|
|
|
|
|
You might get some joy from these links[^]. However, since you used a passphrase I suspect that you're out of luck - if you can't remember it, you're not going to be able to get in.
You could also see http://is-it-true.org/nt/atips/atips262.shtml[^]
Unless you used Windows' data encryption features, you should still be able to install the hard disk in another computer and be able to extract the data - syskey only encrypts the account manager database, making it harder for an attacker to steal password hashes.
Stability. What an interesting concept. -- Chris Maunder
|
|
|
|
|
I need a simple, programmatic way to set up a small number of accounts on new PCs running Windows XP.
I'm prepared to write script (VBScript or Javascript), .NET code (C#) or even an app in C++
Please can someone give me a clue as to where would be the best place to start. Just pointing me to something relevant on MSDN would be fine.
Thanks in advance,
Phil
The opinions expressed in this communication do not necessarily represent those of the author (especially if you find them impolite, discourteous or inflammatory).
|
|
|
|
|
Try to look at the following website[^] it give a lot of script to working with user account.
APO-CEDC
Save Children Norway-Cambodia Office
|
|
|
|
|
No use if you're not using Active Directory 
The opinions expressed in this communication do not necessarily represent those of the author (especially if you find them impolite, discourteous or inflammatory).
|
|
|
|
|
|
i want to create a active directory without connecting to a dns server and it seems that i am always ask for an ip address to install the active directory. THANKS A LOT!!!!I really need help on this because i want to practice active directory at home.
|
|
|
|
|
If you have two network card in your PC connect it with the wire and run command DCPROMO from the command prompt. Follow the instruction...
APO-CEDC
Save Children Norway-Cambodia Office
|
|
|
|
|
ok i will try it... Thanks a lot!!
|
|
|
|
|
A while back I posted a question here about running two networks on a single hub, but I never reported back on the project. Sorry about that.
To recap, the upstairs network has DSL while the downstairs has dialup connectivity to the Internet. The people upstairs are management drones who don't need broadband, while the people downstairs are the ones dealing with customers and really need fast response times. The upstairs folks were paranoid about the downstairs troops being able to access their PCs, and there was much gnashing of teeth and rending of clothes involved in making the decision to link the two.
My solution, sound in theory but untried by me, was to readdress the upstairs network and downstairs network to use different subnets, then to run a single cable between their two hub/switches. In theory it should work fine - hubs are relatively dumb and shouldn't care what addresses are carried by the packets passing through them. I'm happy to report that it works as well in practice (it really should) as in theory. I ran a cable, plugged it in, readdressed the nets and all is humming along nicely now, with everyone sharing the same gateway DSL device. The only glitch arose from the fact that the creative genius who originally set this up named each of the servers (one on each network) \\SERVER, which intially made Windows choke. It was with much trepidation that I renamed the downstairs server and rebooted - it is WinNT4, after all - but after chanting a silent mantra for the ten minutes it took to restart it turned out that the computer gods were benign that day. Neither side can even see the other, so the drones are content, and being able to place orders online, retrieve information in seconds, and the like makes for happy customers downstairs.
Thanks to all for the reassurance that my plan wasn't totally mad.
"My kid was Inmate of the Month at Adobe Mountain Juvenile Corrections Center" - Bumper Sticker in Bullhead City
|
|
|
|
|
I'm trying to open the system store from IIS web extension and I
get an ACESS_DENIED error. It works when I run extension in "High-Isolation" mode under account belonging to Administrators group (which is not safe at all!!!), but id doesn't work if I run it under local IWAM_<machinename> account or specially-created "non-administrator" domain account. Where (and how) adjustments should be done to make it work?
Here is the call I make (C++)
store = CertOpenStore( CERT_STORE_PROV_SYSTEM,
PKCS_7_ASN_ENCODING | X509_ASN_ENCODING,
NULL,
CERT_SYSTEM_STORE_LOCAL_MACHINE,
L"MY"
);
Thanks,
Andrey
|
|
|
|
|
I cannot install updates from Windows Update because it does not pass the Windows Logo program.
Isn't this strange, since it comes from MS web site?
Also, is there a way disable it?
--------
"I say no to drugs, but they don't listen."
- Marilyn Manson
|
|
|
|
|
This shouldn't happen. Have you installed and enabled the Root Certificates Update feature? You'll find it in Add/Remove Windows Components in the Add/Remove Programs Control Panel applet (Update Root Certificates, on an English operating system).
The original key Microsoft used for signing updates expired at the end of 2002. Since then they've relied upon certificate-path features, using a code-signing key signed by their root certificate. If you've disabled the above feature, you may not have a current copy of the certificate. I don't believe there's any harm in having this feature enabled. Microsoft describes how it works here[^].
If you're talking about disabling the check for driver updates, go to Control Panel > System > Hardware tab and click Driver Signing. Select either Warn or Install rather than Block, then click OK.
Windows XP SP2 should include an up-to-date copy of Microsoft's certificates. You should also be able to get a copy from Windows Update - you may need to check for refused or hidden updates if you decided not to install them previously.
Stability. What an interesting concept. -- Chris Maunder
|
|
|
|
|
Hi, can any one give me a brief explaination? why using remote access via VPN is secure then using remote access by using dial up network?
APO-CEDC
Save Children Norway-Cambodia Office
|
|
|
|
|
Ugh. The risk in dial-up networking is that an attacker could tap the phone line and connect up a modem to monitor the signal and hence see the data on the line. You can mitigate this risk by using encrypted PPP - Windows Remote Access Service has this capability, both on the client and server side (Routing and Remote Access).
Encrypted PPP, and VPN, use some form of public-key cryptography to encrypt packets before they're sent. Only the intended recipient should have the key to decrypt the packets. In fact it turns out that full public-key cryptography is too slow for practical encryption, so instead the two keys are used to derive a shared key for use with a simpler encryption algorithm (such as RC4) which is quick enough to keep up with the stream of packets. The higher-level protocol changes this key periodically to reduce the risk that an attacker could work out the key.
The main thing that VPN offers is that you don't need a rack of modems at the server end - you just need a suitable internet connection. The client's packets can come across any intermediate connections and networks; this is less likely to be an issue for you, but it means that the client can be connected to a Digital Subscriber Line. We've recently deployed VPN for ten mobile users - some are still on dial-up, others are using broadband connections.
Stability. What an interesting concept. -- Chris Maunder
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
