Manual DPM Agent Installation

Microsoft has published the steps on how to manually install DPM agent. The information can be found at:- http://technet.microsoft.com/en-us/library/bb870935.aspx
Technorati Tags: Manual DPM Agent Installation

Is WPA-PSK good enough? Give a second thoughts first before you place it in your network!

Often, people thoughts enable WPA-PSK on their wireless network is good enough. Is that true? WPA-PSK is as weak as WEP as well. There are many tools are widely available on the Internet for cracking WEP and WPA-PSK networks. Those tools are very easy to use. Recently, I have a customer plan to setup a wireless network in his company’s network. I have shared with the customer there are some security concerns on putting up wireless network. I also shared with him a WPA cracking tutorial that posted on the YouTube. If a wireless network is required, do plan and design it properly. Ensure all security countermeasure is in place to mitigate the security risks. Considering to disallow SSID broadcast and restrict access by MAC address. For maximum security, do use encryption protocol like IPSEC, TLS, VPN. Below is the WPA cracking tutorial:-

WPA Cracking Tutorial

 

A Handy Security Auditing Tool

I have an excellent security auditing tool that I have been used it for several years. It is called SomarSoft’s DumpSec. It is a very handy tools to find out which group a user belong to, and what are the permission that have applied to a particular folder, shares, etc. The result can export to a CSV format for reporting or documentation purpose. A must have tools for system administrator and security folks!

Below is the overview of the tool, and it can be downloaded from http://www.systemtools.com/download/dumpacl.zip

SomarSoft’s DumpSec is a security auditing program for Microsoft Windows® NT/XP/200x. It dumps the permissions (DACLs) and audit settings (SACLs) for the file system, registry, printers and shares in a concise, readable format, so that holes in system security are readily apparent. DumpSec also dumps user, group and replication information.