a Flo + a Blog = a Flog

I have encountered an interesting follow up about a file and print server outage last week.
We do have a DFS namespace with 2 targets, one in Toronto, one in Montreal.
The DFS target is set on users belonging to the group “DropBox” by a vbs script that adds a link to the DFS referral.
Because DFS [...]

I found myself locked out a few times this week.
After a some locking out I thought it was me locking up my account as it is a fairly new password. However, it still locks out every day.
A quick “Account lockout status” tool use showed me that I am being locked out some other DC somewhere [...]

Boot the Backtrack CD.
Change dir to your Windows mount point:
# cd /mnt/hda2/WINDOWS/system32/config
Copy the SAM and the system Registry hive to the temp dir:
# cp SAM /tmp
# cp system /tmp
Prepare our wordlist:
# cd /pentest/password/dictionaries/
# gunzip -c wordlist.txt.Z > /tmp/words.txt
# cd /tmp
As the Windows hashes (in the SAM file) are encrypted, we need this key (called bootkey) [...]

I was facing a little situation this week. We do have Terminal Servers (TS) with TS licensing server (TSLS) and it works fine, all the settings have been configured properly to let users I have to access it from outside and so on.

But I wanted to enable it for users to access Windows XP boxes (WinXP) , their WinXP from another location (the gateway). And I thought enabling RD and allow access to their Desktop would be less tricky.

First I created a GPO with 2 things:

1. Allow Users to connect remotely using TS from Computer>Adm template>Windows Components/Terminal Services>
2. Set the permisson to the right groups for log on from Computer>Windows settings>Local Policies>User Rights Assignment

But no this did not too much and gave me a nice error message when trying to log on when login with authorized usres: you do not have access to logon this session.

This meant that users can do TS on the WinXPs but cannot logon.

So if you want to avoid this little embarrassment please follow those steps (III being my mistake)

I have a few terminal servers around the country and I needed to troubleshoot someone in need.
Of course I know how to remotely interact with the session of any of the company computers but somehow I almost forgot how to do this for users connected to a Terminal Session.
First of course you need to make [...]