All posts by Kapuwa

etrust SCM

Which eSCM processes and folders should be excluded from antivirus realtime scanner?

Leave a comment

Description:

When you install CA Integrated Threat Management or eTrust Antivirus prior to installing eTrust Secure Content Manager r8, the Antivirus Realtime Scanner acts on data before eTrust Secure Content Manager r8 can analyze or use it. This may interfere with the functionally of the eTrust Secure Content Manager r8 engine.

To avoid conflicts between eTrust Antivirus and eTrust Secure Content Manager r8, you should identify the eTrust Secure Content Manager r8 processes that are running and add the processes to the eTrust Antivirus exclusions list.

Excluding eSCM Processes and Directories from Antivirus Realtime Scanning.

Solution:

Exclude the following process from the Antivirus realtime scanning

icihttp.exe
icismtp.exe
DCollSrv.exe
QmgrSrv.exe
CRepSrv.exe
ECSQDMN.exe
ECSSAFMGR.exe
eCCCleaner.exe
QMgr.exe
ManagerConsole.exe
iGateway.exe
servproc.exe
Exclude the following directories from the realtime scanning

:\Program Files\CA\eTrust SCM :\Program Files\CA\Ingres [EI] :\Program Files\CA\SharedComponents

 Other Relevant Information : Realtime scanner exclusions for machines running Microsoft Exchange: TEC393058 (SupportConnect, SupportOnline). https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=TEC393058 Realtime scanner exclusions for machines running Notes: TEC400737 (SupportConnect, SupportOnline).
https://support.ca.com/irj/portal/anonymous/redirArticles?reqPage=search&searchID=TEC400737

Windows 2003

To copy the IAS configuration to another server

Leave a comment

To copy the IAS configuration to another server
Open Command Prompt.

At the command prompt, type netsh aaaa show config >path\file.txt.
This stores configuration settings (including registry settings) in a text file. The path can be relative or absolute, or it can be a UNC path.

Copy the file you created to the destination computer.

At a command prompt on the destination computer, type netsh exec path\file.txt.
A message appears indicating whether the update was successful

Windows 2003

Error message when you create the trusted side of a trust between Windows Server 2003-based domains: "The parameter is incorrect"

Leave a comment

http://support.microsoft.com/kb/930218

If the names of two domains collide, you can rename one of the domains. If the SIDs of the domains are duplicate, you have to remove one of the domains. Typically, this situation occurs when one of the following scenarios exists:

  • One domain was cloned from the other domain.
  • Before a computer became the first domain controller in either of the two domains, you clone this computer without using the SYSPREP tool.

Alternatively, you can migrate one of the domains to a new domain. However, you cannot migrate a domain to a new SID by using the sIDHistory property. Even if you successfully create a trust after you migrate one of the domain SIDs, you still have duplicate SIDs in user access tokens. Then, users who have duplicate SIDs can access resources that they should be unable to access.

Windows 2003, Windows 2008, Windows Vista, Windows XP

DHCP server default permission settings in the registry

Leave a comment

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip “Local service” Full, Read (add this permission)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE “NT Service\BFE” Full, Read (add this permission)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS “NT Service\Trustedinstaller” Full, Read (add this permission)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc “NT Service\NlaSvc” Full, Read (add this permission)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch “NT Service\MpsSvc” Query, Set Value (add this permission)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy “NT Service\MpsSvc” Full, Read (add this permission)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy “NT Service\MpsSvc” Full, Read (add this permission)

Windows 2008

server manager encountered an unexpected error while collecting data about the stutus of HRESULT:0x80070543

1 Comment

server manager encountered an unexpected error while collecting data about the stutus of this computer
HRESULT:0x80070543

Problem:
The server-wide COM security settings have been changed to have a “Default Authentication Level” of ‘None.’

Solution:

1. Using elevated permissions, run Dcomcnfg.exe

2. In the “Component Services” window, navigate to ComponentServices->Computers->My Computer.

3. Right-click on “My Computer” and select [Properties] from the context menu.

4. In the “My Computer Properties” dialog, select the [Default Properties] tab.

5. Change the “Default Authentication Level” drop to ‘Connect’; if it is set to None.

7. Change the “Default Impersonation Level” to Identify; if it is set to something else.

8. Press the OK button in the “My Computer Properties” dialog.