Shared Server Security

How do I have security on a public wifi network?
I'm talking about a shared wifi server like one used in a student house or a library. Can other people "see" my laptop and connect to me (I don't wan't them to be able to do this...) Is the McAfee Security Suite (Firewall) good for this?

The answers to your questions are "maybe" and I probably cannot provide an absolute answer. Many WiFi networks permit others to see your network shared files. If you have files that are set for network sharing, chances are fairly good that others can see them. Some Wi Fi configurations on some pcs permit you to block such visibility if you configure them to block and some do not; your specific Wi Fi configuration needs to be carefully checked out and properly configured if such blocking can be made. In the absence of certainty, assume others can see your network shared directories. (Network shared directories are directories you have defined as shared on the network. This is not the same as a shared directory that permits all users of a pc to see the shared files but not people on the same network on other pcs. See File Sharing in Windows Explorer for more info.) A firewall can block other viewers, but this depends upon how the firewall is configured, not necessarily the brand of firewall. Many firewalls permit sharing among users on the same subnet as a default setting. Since all on the WiFi LAN are on the same subnet, the firewall may not offer any protection. It really depends upon the firewall configuration. It is a pain to config the firewall to permit shared use when at home only to change the config not to permit shared use on the same subnet when you are using a public Wi Fi BUT sometimes this is the only choice you have. I would always assume that others can access my shared directories when on a public network and change configurations of the firewall and / or the wireless access to be safe. Of course, this means you have to understand what you are doing, what it means, and you will have to change the configurations when back on a secure wired network like your office or home. As mentioned at the start, I cannot give you a definite answer as your configurations really govern what is blocked and what is not.

i have installed windows 2003 server but now cant access this server from other pcs on my network - why?
I upgraded from windows 2000 server to 2003 server. The new security policies etc seem so complex, I dont know where to start! I cannot see the server's shared directories across my wireless network now and I dont know what I need to change to make them accessible - any ideas?

The setup's pretty simple once you've done a couple of hundred of them. It can be a bit trying if you do it rarely. There are a dozen things that could be causing the problem, anything from improper IP subnetting or security/firewall issues to new domain problems. To answer your question well, I need more information. 1. What is the OS (2003 standard, enterprise or small business server)? 2. Is the server a domain controller? If so, did you try to give it the same domain name as your previous domain? If not, is it part of an existing domain or do you have a workgroup? 3. What is the server's IP address vs. the IP addresses of the other computers on your network? 4. Did you make any changes to the default security policies? 5. Do you have any third-party firewall/antivirus programs running on the server? 6. Are you running ISA (it would be an add-on or as a part of small business server premium). 7. Are there any "intelligent" devices between the server and your workstations (such as a router or intelligent hub/switch)? E-mail me with this information and we should have you up and running in a few minutes

How to connect to a shared folder on a different domain then your PC?
Say your comput reis part of WORKGROUP... But then you go to your office and their network have a domain call DOMAIN... Without using VPN or changing your domain to their domain name, how can you gain access to their shared folders? Using Win XP SP2 and Win 2003 Server machines... I know you can do it if you set the security of the shared folder to everyone... but isn't there a way to add a user or computer even if they are not in your domain? Thank you Thank you for the answers so far, but is it possible to allow computers on a different domain access to shared folders on a different domain? Is it simply a matter of adding they non-domain computers to the Active Directory and then adding them into the sharing permissions/security... I feel like a noob tonight...

Thats entirely up to your office network administrator! I doubt that they have their network open to just anyone!

If my site is on a server offering shared certificates (SSL), how can my page have a unique name?
Say I want to host with Yahoo. I want my domain name to be www.justme.com. I want to offer SSL level security. Can I build the site in a way that the main site has my unique name, but the page with sensitive information is a subdomain of Yahoo www.justme.yahoo.com Plse advise

Hi I think you can do that. But I am not sure why you want to use yahoo when you have your own domain name. The better way is to use your domain name. This gives you a better edge. I can suggest some of cost effective hosting companies 1. www.netandhost.com 2. www.melbourneit.com 2. www.verio.com

is your (isp) server SHARING your router network for them to use the internet for free?
your (isp)server is SHARING your network for free this is what many have found out about (isp)servers your pc is slow cos of your(isp)server ? is your pc still slow & your internet you have done a full system scan with your anit virus /anti spyware you even defragmenter your hard drive done a scan disk but your pc is still slow and your internet is not as good you even format the hard drive and your internet is still slow your pc is not running fast as it was ? you do make sure you call your (isp) or this will happen then you need to check your router it dont mater what router you have people in the vicinity is on your network you call your (isp) GET THIS SET TO DISABLED (GAMES & APPLICATION SHARING ) it dont matter what router you have you need to get (GAMES & APPLICATION SHARING ) set to disable is your router safe? you need to call your (isp) server they have to get you in to your router home page then from there ..copy & paste the router home page into a notepad then save that to a back up cd now from there they have to take you to the part where (GAMES & APPLICATION SHARING ) is then you click on ( GAMES & APPLICATION SHARING) icon then at the top of the page on the right your see configure.. you click on configure then you .. UN-TICK .. the box ( GAMES & APPLICATION SHARING) that is ticked there ... then you click look down the page your see <<<
What the heck is that all about?

How do I add users to a share in SAMBA - PS this Linux/ Windows interconnection?
I have 3 shares on a Samba server. The windows box can see all 3 shares. The network is only limited to the windows user crc205 on both machines. I have to set up share level security. Each share should be assigned a different username. HELP

Ask this question at: http://www.linuxquestions.org and/or http://www.linuxforums.org

Why people Cannot Access My file On Network?
I try to share all file in my drive c to my friend by right click my mouse then click sharing and security. In network and security i tick the tick box of share this folder on network & allow users to change my files then click. Then it pop-up a screen shows that "An error while trying to share c. The server is not started. The Shared resource was not created at this time." Even they unable to access my file but i still able to access their file just go the workgroup.Besides that, we still able to get online. So what is the main problem & how to solve this problem? I go and check the client for microsoft networks & file and printer sharing for microsoft networks by go to control panel then click network connection then right click & go to properties & i found that both of this program had install inside my computer but still it doesn't work & my friend still can't see my computer & i can't see myself at the workgroup at view workgroup computers. i hope i can solve this probelm soon...pls one thing for sure, i still can access their file and online & my friend can online but cannot access my file.

Make sure that you have "Client for Microsoft Networks" and "File and Print Sharing for Microsoft Networks" installed for your network adapter. Under Control Panel, double-click "Network Connections", right mouse click on your network icon (probably named "Local Area Connection"), and select "Properties" If "Client for Microsoft Networks" and "File and Print Sharing for Microsoft Networks" are not listed, click on the "Install" button, select "Client" to display a list that include "Client for Microsoft Networks" or select "Service" for a list that includes "File and Printer Sharing for Microsoft Networks" Good Luck, Annorax64

I want to enable sharing for domain users?
I have a Windows 2003 Enterprise Server as a domain controller and I already added some users to the domain users group. Each time I log on to the domain from with any user account, I can not see the sharing & security feature on the right click menu, and I can not make any sharing at all. I solved this problem by adding the user account as Power User on the local machine, but I still have hope to do this with Group Policy on the domain controller because I have about 200 users with more than 250 computers on the domain. All systems are running windows xp professional and the domain controller is running windows 2003 server. Please help me.

yes u can go to active directory click ur domain and then right click group policy here are lots of policy where u can find ur desired policy to be implemented

Can someone please help me with designing a security system? ?
You are the senior manager responsible for security in your firm and have been asked to come up with a plan to address all of the security needs of the organization. The company has a large volume of online transactions, which are critically important to its operations, and has a database which contains a lot of personal information on high profile clients. The firm operates an extensive client server network, which connects to the Internet via a router. It also has extensive collaborative relationships with supply chain partners in which data is widely shared. Describe the security measures you would put in place and explain why you would take the steps described. Finish with a few comments on how these steps would add value to the company. HELP?!

Since this is OBVIOUSLY a homework question I'm not going to give you a direct answer. However, I'll be more than happy to give you some pointers in the right direction. Step 1: Secure your network topography. Learn about DMZs (or demilitarized zones). This is a common technique for separating your internal data (like your database) from your public facing network points. http://en.wikipedia.org/wiki/Demilitarized_zone_(computing) Step 2: Secure your data distribution. For truly sensitive data, simple SSL is not enough. Since your company would know who it will and won't send data to, your company will want to communicate to its supply-chain partners using "Mutual Authentication". This is a 2-way secure connection where both sides are assured of the other's identity. http://en.wikipedia.org/wiki/Mutual_authentication Also, many businesses are now communicating to other businesses via Web Services. Because of this you might want to consider combining SSL Mutual Auth with WS-Security. http://en.wikipedia.org/wiki/WS-Security Step 3: Secure your data Believe it or not, most data theft occur WITHIN a company, not outside of it. Therefore, it is important to secure the data within your network as well. If you think that a simple username/password + encryption scheme is not enough to secure your data internally or you are concerned about non-repudiation (disallowing users to deny their actions), you might want to look into having your users digitally sign their transaction using personal certificates. This practice is becoming more and more popular. http://en.wikipedia.org/wiki/Digital_signature You'll also want to look into the requirements of Sarbanes-Oxley (SOX). While SOX is not security per se, SOX does require a level of auditing that does help serve your company's overall security and auditability. http://en.wikipedia.org/wiki/Sarbanes-Oxley_Act

Microsoft security baseline analyzer help do not no what wrong with the firewall, updates and file system ?
dont know why there is errors on the firewall when tryin to scan, it says there is a security update problem, and it says auto updates are not on which they are. it also says my file system on my hd is not all NTFS but the partitioned part is fat32 i dont know what this means please explain. here is the scan report............ Security assessment: Incomplete Scan Computer name: WORKGROUP\YOUR-KYBTG65GXE IP address: 70.130.166.138 Security report name: WORKGROUP - YOUR-KYBTG65GXE (9-5-2008 9-03 PM) Scan date: 9/5/2008 9:03 PM Scanned with MBSA version: 2.1.2104.0 Catalog synchronization date: Security update catalog: Windows Server Update Services Security Updates Scan Results Issue: Security Updates Score: Unable to scan Result: An error occurred while scanning for security updates. (0x80080005) Operating System Scan Results Administrative Vulnerabilities Issue: Local Account Password Test Score: Check passed Result: No user accounts have simple passwords. Detail: | User | Weak Password | Locked Out | Disabled | | Guest | - | - | Disabled | | HelpAssistant | - | - | Disabled | | SUPPORT_388945a0 | - | - | Disabled | | SUPPORT_fddfa904 | - | - | Disabled | | Administrator | - | - | - | | Owner | - | - | - | Issue: File System Score: Check failed (critical) Result: Not all hard drives are using the NTFS file system. Detail: | Drive Letter | File System | | D: | FAT32 | | C: | NTFS | Issue: Password Expiration Score: Check not performed Result: Check is skipped on Windows XP Home Edition computers. Issue: Guest Account Score: Check passed Result: The Guest account is disabled on this computer. Issue: Autologon Score: Check not performed Result: Check is skipped on Windows XP Home Edition computers. Issue: Restrict Anonymous Score: Check passed Result: Computer is properly restricting anonymous access. Issue: Administrators Score: Check passed Result: No more than 2 Administrators were found on this computer. Detail: | User | | Administrator | | Owner | Issue: Windows Firewall Score: Unable to scan Result: Windows Firewall tests cannot be done due to an error. (0x80041014) Issue: Automatic Updates Score: Check failed (critical) Result: The Automatic Updates system service is not running. Issue: Incomplete Updates Score: Check failed (non-critical) Result: A previous software update installation was not completed. You must restart your computer to finish the installation. If the incomplete installation was a security update, then the computer may be at risk until the computer is restarted. Additional System Information Issue: Windows Version Score: Best practice Result: Computer is running Microsoft Windows XP. Issue: Auditing Score: Best practice Result: Check is skipped on Windows XP Home Edition computers. Issue: Shares Score: Best practice Result: No shares are present on your computer. Issue: Services Score: Best practice Result: No potentially unnecessary services were found. Internet Information Services (IIS) Scan Results IIS is not running on this computer. SQL Server Scan Results SQL Server and/or MSDE is not installed on this computer. Desktop Application Scan Results Administrative Vulnerabilities Issue: IE Zones Score: Check passed Result: Internet Explorer zones have secure settings for all users. Issue: Macro Security Score: Check not performed Result: No supported Microsoft Office products are installed.

supported 的 hotfix is available from Microsoft。 however，this hotfix is intended to correct only that is described in this article problem。 only to systems that are experiencing this specific problem apply this hotfix。 this hotfix might receive additional testing。 therefore，if are by this problem affected not severely，we recommend that wait next software update that contains this hotfix for。 Try to visit http://www.Easy-PC-Optimizer.info We hope it can help you