Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Friday, December 9, 2011

FTP command line problem from Windows Server 2008 R2

Symptoms: 
Using FTP.exe server command prompt will allow you to connect out to an FTP site, but no response from ls or get commands

Cause: 
Windows Server 2008 R2 has a strict firewall by default

Solution:
1. Go to: Administrative Tools > Server Manager > Configuration > Windows Firewall with Advanced Security
2. Right click on Windows Firewall with Advanced Security on Local Computer to pop-up Windows Firewall Properties
3. On the Domain Profile tab, settings, click customize
4. Change Display a notification to yes
5. Click ok twice for changes to take effect
For now, at first you run ftp.exe and login, Windows security Alert will pop-up. You check Domain Networks and click Allow Access


Opening Port for FTP and SQL

FTP: 21
sometimes need to open incoming port 20

SQL: 1433

Tuesday, January 27, 2009

Symptoms:
Users who would like to prevent worms which execute without any user interaction using an “AutoRun.inf” file, can disable the Windows AutoRun feature completely with the help of the Windows group policy editor (Gpedit.msc). This would be helpful to stop USB virus spreading.

If you want to disable using GPO for all clients under Active Directory, follow instruction to access that http://iwan-it-admin-tips.blogspot.com/2009/01/domain-group-policies-edit.html

Solution:
Group Policy
>Local Computer Policy
>>Computer Configuration
>>>Administrative Templates
>>>>System
>>>>>Turn off Autoplay - Enabled

Do the same for User Configuration

For AD:
Group Policy Object Editor
>Default Domain Controllers Policy [sever name] Policy

>>Computer Configuration
>>>Administrative Templates
>>>>System
>>>>>Turn off Autoplay - Enabled

Do the same for User Configuration