Posts

Showing posts from October, 2011

LM hashes in Windows 2008 or above

Windows 2008 or above disables to store LM hashes in SAM. They can't be retrieved using password dumper programs. To enable this feature, set "Network security: Do not store LAN Manager hash" to "Disabled" under Local Policies → Security. Optionally, adjust "Network security: LAN Manager authentication level" to accept and/or send LM in addition to NTLM. (Note that this is very insecure and must be reverted after tests.) and please note that enabling via Group Policy applies only after setting a new password, you can't change the existing password to a weak one. ref:  http://hi.baidu.com/51cmdshell/blog/item/fe9271eb41ed87dad539c932.html ref:  http://superuser.com/questions/340208/enabling-lm-hash-in-windows-7 Password dumpers ref:  http://www.tarasco.org/security/pwdump_7/ ref:  http://www.foofus.net/~fizzgig/pwdump/

Save Settings for TeamViewer Portable

Work with TeamViewer.ini situated in \TeamViewerPortable\App\teamviewer folder. Setting nosave=0 will save your settings, but in the registry, and that doesn`t make it portable. The thing to do is importsettings=1 wich activate the automatic settings import. TeamViewer Portable will import the settings from a file called tv.ini which has to be situated in the same directory as your TeamViewer.exe. You can create the tv.ini by exporting your settings in the advanced options of the full TeamViewer version (Extras > Options > Advanced > Show advanced options > Export settings for TeamViewer Portable). This works in the oficial portable release from TeamViewer.com. In the PortableApps.com release, tv.ini must be situated in \TeamViewerPortable\App\teamviewer folder. Also, by setting LogOutgoingConnections=1 in the TeamViewer.ini file you can force TeamViewer to write a log file with detailed information about your connections. This log file is used by the TV Manager...

Windows 7 / Windows Search 4 does NOT support UNC network location indexing

WDS v3 gets the support, but Microsoft has disabled the support of UNC indexing in WDS v4, even the Windows Search in Windows 7. There're a lot of discussion about how to overcome this step-down functionality ( http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/afb904c1-1c61-4aae-b6b1-5cf525b9f8de/ ). There is a simple way. Go to  http://www.microsoft.com/download/en/details.aspx?DisplayLang=en&id=3383  to download a patch called UNCFATPHInstaller.msi . Although the KB states that the patch works only for Windows Server 2003, Windows Vista and Windows XP, it actually does work for Windows 7. After patching, the WDS v4 will recognize OTFS protocol handler, as seen in HKEY_CLASSES_ROOT. You could now specify indexing location in Group Policy, which format stated in ( http://technet.microsoft.com/en-us/library/cc732491(WS.10).aspx ) Please noted that the patch only supports 32 bit. Ref:  http://robsprotips.blogspot.com/2010/06/search-ne...

Access Denied When Connecting to Administrative Shares in Windows 7

To remote access administrative shares in windows 7 by a target local administrator with a correct password, no matter specifying target computer name in the login credential dialog, will fail and prompt "access denied". This is due to the "UAC remote restrictions" stated in  MS KB article 951916 . To disable this "feature", simple  setting the registry value LocalAccountTokenFilterPolicy to 1 as follows: Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Value: LocalAccountTokenFilterPolicy Data: 1 (to disable, 0 enables filtering) Type: REG_DWORD (32-bit) ref:  http://helgeklein.com/blog/2011/08/access-denied-trying-to-connect-to-administrative-shares-on-windows-7/