Jump to content

ICTCity

Active Member
  • Posts

    1,532
  • Joined

  • Last visited

  • Days Won

    12

Everything posted by ICTCity

  1. Right... and post the network config (DNS, Server + Workstations config).
  2. You can create a cluster of webserver with a proxy. Once you need to reboot a server, your proxy forwards all the requests to the only alive server. Usually a proxy is made with linux and it doesn't need so much updates.
  3. Everything depends on you set up the permission on root and sub folders. When you assign a permission you can open the advanced tab of that folder and select EFFECTIVE permission and specify the username or group to determine which permission is applied. Remember: the most restrictive is applied.
  4. I don't know if it is right... I mean... yes it's right at network level, but I don't know if the 192.168.0.200 is a DNS server... but if it is... ok no problem. I only hope that yours servers have a static IP. If you need more help, try to be a bit more specific.
  5. OK, it's the same scenario? Domain users? The file server is also the DC? Or you use the "old" DC? Try to enable the security and folder auditing to determine why your user cannot access that folder. Other that, run a EFFECTIVE PERMISSIONS on that folder for that user. Maybe we can understand something more.
  6. Yes it is. But in most cases you assign just the internal DNS, then is the internal DNS itself that forward request to root servers.
  7. this is the only traffic you can't see?
  8. Which is not a protocol... You connect via HTTPS? VPN? How this connection works? Anyway the best thing is to add another Nic on your server, connected in front of the router, so you will have both interfaces sniffing inside and outside.
  9. The remote connection is on which protocol? if there's a tunnel you could not see that traffic.
  10. That means you have 2 dhcp server or one but misconfigured. Check under SCOPE of your windows dhcp server if there's the correct DNS server, if it is correct, well you have somewhere another dhcp server. Check this article to better understand how to setup the dhcp server: http://www.windowsnetworking.com/articles_tutorials/How-to-Install-Configure-Windows-Server-2008-DHCP-Server.html
  11. Hi, You should tell me more... Let's say you have this situation: Server: NIC 1 = LAN NIC 2 = WAN Terminal service running on both interfaces. You want that users can logon ONLY via NIC 1 (or NIC 2), right?
  12. Well... if you can't see some traffic from WAN to server this is normal, because actually it doesn't reach your switch. The problem is that you should see all the traffic if your switch is mirroring in the right way. What are you using to monitor your traffic? How can you say: "I'm still missing lots of traffic"?
  13. Who is providing addresses? in other words, who is your dhcp server? If it is under windows: under DHCP settings, you can easily assign the DNS ip.
  14. Yes but this will control ONLY the traffic from the switch to internet and viceversa. Internal communications (pc to pc) will not be seen. Check if your switch has port mirroring or something like that, so you can resend all the traffic in your switch to a single port and then sniff it.
  15. yes. But I don't think this is a credentials problem. Try (just a test) to share a folder with FULL CONTROL in both, ntfs and share permissions. Try if changes something.
  16. Hi, I'm quite sure there's a policy where you can allow "anonymous" autentication but this is only needed when you can't connect to windows server 2008. IN your case I think the problem is a compatibility, unlucky this OS (win 95) is no longer supported by microsoft so I can't even open a ticket. I just think there's not a solution because this is not a "policy" setting, but it looks like your client doesn't know how to handle the way windows server 2k8 gives shares to you.
  17. Select the folder, security > advanced > effective permission and select the user which can't write. Verify the permissions are correct. I think there's another inheritance somewhere.
  18. What doesn't work? People can't READ the content of SHARE folder? Can they access the C:\share\UserName folder?
  19. Yes it is. With that script you set parameters for specific folder. You can use also parameters, just google a bit.
  20. This should be what you need: $AccLst = new-object System.Security.AccessControl.DirectorySecurity $AccLst = Get-Acl "C:\MyFolder" $AudRul = New-Object Security.AccessControl.FileSystemAudRul("everyone","Modify","ContainerInherit, ObjectInherit", "None", "success") $AccLst.AddAudRul($AudRul) $AccLst | Set-Acl "C:\MyFolder"
  21. Hi and welcome :)
  22. It looks like the device can't understand HOW to authenticate... radius should be a standard but try to google looking for compatibility issues...
×
×
  • Create New...