How to Change SID and Hostname of Virtual machine
I m writing this post simply for the ones who are involved with virtualisation softwares like Vmware, Virtual Box, Virtual PC, etc. Most of the time we need more than one machine in order to make a network. We can achieve this by two methods :
- Make two seperate machines and install the operating system, softwares , etc seperatelt and waste a lot of time.
- Obviously you are not so stupid to waste your time, so why not make a machine, copy its hard disk in other folder and use it so many times, actually infinite times.
Solution is, we can change the "hostname" very easily from the properties of "my computer" or by command in Lunix. But SID can not be changed this way.
For accomplishing this, i.e. to connect the machines in samew nwtrok, we need to use a software "NEWSID".It is a simple utility exists that enables you to quickly change the SID and the computer name of a cloned virtual machine.
NewSID v4.10 and is available for download free of charge.
If it comes in zipped form , Unzip it application, start it and agree with the licence terms. You will see Welcome screen which tells you what NewSID is and tells you to backup your system before using it.
Dont forget to take backup if you are going on your important machine.
Start Newsid,and at the first screen Click on Next. Now we have a window where we have to choose new SID. Here you have three ways:
- Random Sid (wud calculate some random Sid with mathematical operations.
- Copy SID from some oether computer, and here it woud ask you for the location of that second computer.
- Or simply, you can give a SID of ur wish as well.
Next you would be asked for the Hostname. If you cant to change , then specify the new one. Otherwise simply leave it as it is.
By clicking Next you’ll see confirmation window, where you can choose to restart or not to restart computer after applying new SID.
Click on Next and that’s it. Wait for few minutes, and your PC will have new SID and name.
And you are done. Congrats. :) , Lol.
I guess this was useful to to newbies. Any query or suggesstion, drop it as comment.
12:20 AM 0
How To Check Whether You are Victim of RATS or not ?
1. Now every program has their own process which can be seen on task manager. So the first thing to do is to find out which process the Trojan is being attached to. If you see some unknown process search that on google. A good hacker will always makes sure he hides its process with a Windows based Process, for eg. svchost.exe or something like that.
2. If you cant find, then the next thing you can do is use cmd (to open cmd prompt, Click on Start--->Accessories-->Command prompt).
3. Once Command Prompt is opened, use this command: netstat -an |find /i "listening"
Note: The NETSTAT command will show you whatever ports are open or in use, but it is NOT a port scanning tool!
Now we wonder What this Command does? This command will show all the opening ports. Now check for any unknown port.
4. You can skip step 3 if you want, and can do this instead.
Open command prompt and type netstat -b
Now this command will show you the active connections with the process with their PID (Process Identifier) and also the packets.
Look out for SYN Packets and the Foreign address its been connecting with , check the process its been associated with, check the ports also. If you find that its connecting to some unknown ports, then you can say you have been backdoored.
5. Go to your task manager. On the top of it, click on View---> select Column---> Tick on PID (Process Identifier).
Match the suspicious Process with the Processes In task manager, check PID also.
Now most of the RATs resides on Start up. How to delete them from start up?
a) Go to regedit ---> HKLM\Software\Microsoft\Windows\Current version\Run
On the Right hand side, check for the process name which you find on step 4. if its not their. Check at
HKCU\Software\Microsoft\Windows\Current Version\Run
OR
Open Cmd prompt & type start msconfig. Go to Startup tab, you can check the startup process there.
I hope This Tutorial was easy and comprehensive.
10:50 AM 0
A Breif Overview On Types Of Port Scanning
- TCP connect scan: This type of scan connects to the target port and completes a full three-way handshake (SYN, SYN/ACK and ACK).
- TCP SYN scan: This is also called half-open scanning because it does not complete the three-way handshake, rather a SYN packet is sent and upon receiving a SYN/ACK packet it is determined that the target machines port is in a listening state and if an RST/ACK packet is received , it indicates that the port is not listening.
- TCP FIN scan: This technique sends a FIN packet to the target port and based on RFC 793 the target system should send back an RST for all closed ports.
- TCP Xmas Tree scan: This technique sends a FIN, URG and PUSH packet to the target port and based on RFC 793 the target system should send back an RST for all closed ports.
- TCP Null scan: This technique turns off all flags and based on RFC 793, the target system should send back an RST for all closed ports.
- TCP ACK scan: This technique is used to map out firewall rule sets. It can help determine if the firewall is a simple packet filter allowing only established connections or a stateful firewall performing advance packet filtering.
- TCP Windows scan: This type of scan can detect both filtered and non-filtered ports on some systems due to anomaly in the way TCP windows size is reported.
- TCP RPC scan: This technique is specific to UNIX systems and is used to detect and identify Remote Procedure Call (RPC) ports and their associated program and version number.
- UDP scan: This technique sends a UDP packet to the target port. If the target ports responds with an "ICMP port unreachable" message, the port is closed, if not then the port is open. This is a slow process since UDP is a connectionless protocol; the accuracy of this technique is dependent on many factors related to utilization of network and system resources.
11:30 AM 0
How To Run a Nessus Server
10:36 PM 0
Hacking Tool Or Software used For Sniffing : Hacking Tools
-
Packetyzer Provides a Windows user interface for Ethereal. Available free from www.networkchemistry.com/products/packetyzer.php. -
Etherpeek A commercial sniffer that offers a GUI interface and is used on the Windows platform. It is available at www.etherpeek.com. -
Dsniff Part of a collection of tools for network auditing and hacking. Includes dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy. These tools allow the attacker to passively monitor a network for interesting data such as passwords, email, files, and web traffic. The Windows port is available at www.datanerds.net/~mike/dsniff.html. -
TCPdump One of the most used network sniffer/analyzers for Linux. TCPdump is a command-line tool that is great for displaying header information. TCPdump is available at www.tcpdump.org. -
Windump A porting to the Windows platform of tcpdump, the most used network sniffer/analyzer for UNIX. This tool is similar to TCPdump in that it is a command-line tool that easily displays packet header information. It's available at www.winpcap.org/windump.
Any query or suggestion, do Contact us at upgoingstaar@gmail.com
Enjoy Hacking Enjoy Hackton
11:41 AM 0
How To Guess A Password : Methodology
- Haven't had password changes for a long time
- Weakly protected service accounts
- Poorly shared accounts
- Indicate the user has never logged in
- Have information in the comment field that might be used to compromise password security
Net use * \\target_IP\share * /u:nameC:\>net use * \\192.188.13.10\c$ * /u:jack Type the password for \\172.20.10.79\c$: The command completed successfully
- Create a simple username and password file.
- Pipe this file into a FOR command as follows:
C:\> FOR /F "token=1, 2*" %i in (credentials.txt) do net use \\target\IPC$ %i /u: %j
Automated Password Guessing
nat [-o filename] [-u userlist] [-p passlist]
8:09 PM 1
How To Hack A Web Server Thru FTP Anonimity
Ok well one of the easiest ways of getting superuser access is through
anonymous ftp access into a webpage. First you need learn a little about
the password file...
root:User:d7Bdg:1n2HG2:1127:20:Superuser
TomJones:p5Y(h0tiC:1229:20:Tom Jones,:/usr/people/tomjones:/bin/csh
BBob:EUyd5XAAtv2dA:1129:20:Billy Bob:/usr/people/bbob:/bin/csh
This is an example of a regular encrypted password file. The Superuser is
the part that gives you root. That's the main part of the file.
root:x:0:1:Superuser:/:
ftp:x:202:102:Anonymous ftp:/u1/ftp:
ftpadmin:x:203:102:ftp Administrator:/u1/ftp
This is another example of a password file, only this one has one little
difference, it's shadowed. Shadowed password files don't let you view or
copy the actual encrypted password. This causes problems for the password
cracker and dictionary maker(both explained later in the text). Below is
another example of a shadowed password file:
root:x:0:1:0000-Admin(0000):/:/usr/bin/csh
daemon:x:1:1:0000-Admin(0000):/:
bin:x:2:2:0000-Admin(0000):/usr/bin:
sys:x:3:3:0000-Admin(0000):/:
adm:x:4:4:0000-Admin(0000):/var/adm:
lp:x:71:8:0000-lp(0000):/usr/spool/lp:
smtp:x:0:0:mail daemon user:/:
uucp:x:5:5:0000-uucp(0000):/usr/lib/uucp:
nuucp:x:9:9:0000-uucp(0000):/var/spool/uucppublic:/usr/lib/uucp/uucico
listen:x:37:4:Network Admin:/usr/net/nls:
nobody:x:60001:60001:uid no body:/:
noaccess:x:60002:60002:uid no access:/:
webmastr:x:53:53:WWW Admin:/export/home/webmastr:/usr/bin/csh
pin4geo:x:55:55:PinPaper Admin:/export/home/webmastr/new/gregY/test/pin4geo:/bin/false
ftp:x:54:54:Anonymous FTP:/export/home/anon_ftp:/bin/false
Shadowed password files have an "x" in the place of a password or sometimes
they are disguised as an * as well.
Now that you know a little more about what the actual password file looks
like you should be able to identify a normal encrypted pw from a shadowed
pw file. We can now go on to talk about how to crack it.
Cracking a password file isn't as complicated as it would seem, although the
files vary from system to system.
1.The first step that you would take is
to download or copy the file.
2. The second step is to find a password
cracker and a dictionary maker. Although it's nearly impossible to find a
good cracker there are a few ok ones out there. I recomend that you look
for Cracker Jack, John the Ripper, Brute Force Cracker, or Jack the Ripper.
Now for a dictionary maker or a dictionary file... When you start a
cracking prog you will be asked to find the the password file. That's where
a dictionary maker comes in. You can download one from nearly every hacker
page on the net.
A dictionary maker finds all the possible letter
combinations with the alphabet that you choose(ASCII, caps, lowercase, and
numeric letters may also be added) . We will be releasing our pasword file
to the public soon, it will be called, Psychotic Candy, "The Perfect Drug."
As far as we know it will be one of the largest in circulation.
3. You then start up the cracker and follow the directions that it gives
you.
And You Are done...
Hopes u guys enjoyed it..
Ny query or suggestion, do contact th Author.
Enjoy Hackton
10:23 AM 2
How To Remove Default Admin Share : Vulnerability For 139 Port
When 139 port is open, one can easily create a null session by brute forcing this Share.
So, every security professional is supposed to Get Out of this , which may b done in folowing amnner.
System Key: [HKEY_LOCAL_MACHINE\ System\ CurrentControlSet\ Services\ LanmanServer\ Parameters]
Value Name: AutoShareWks
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable shares, 1 = enable)
This registry key actually stops the recreation of the shares, therefore it may be necessary to delete the shares through the drive properties also or you can also remove the shares through the Computer Management Console.
1. In Control Panel, double-click Administrative Tools, and then double-click Computer Management.
2. Click to expand Shared Folders, and then click Shares.
3. In the Shared Folder column, right-click the share you want to delete, click Stop sharing, and then click OK.
Note : To remove the admin share for only the current session use the second method (Computer Management console), if you want a permanent removal, add the AutoShareWks registry.
Hopes, u enjoyed this.
Any doubt or query do commenting or simply write to upgoingstar@yahoo.co.in
Enjoy Hackton
11:11 PM 0
How to Find Out a remote IP
Well, this one i think is quite intersting tweak as Lot of ma students n culleagues had already asked me this one.
After having a one day research on this, i came to this much conclusion.
Well, dere r basically these known methods for Finding out One's IP Address.
So, here we go...
Method 1
To view someone's IP# when they send u hotmail email do this:
1) Click "Options" on the upper right side of the page.
2) On the left side of the page, Click "Mail"
3) Click "Mail Display Settings"
4) Under "Message Headers" select "Full" or "Advanced"
5) Click ok
Method 2
reg a dydns account and install the ip pointer, so each time u ping the host name u regestored
for example:
u regestor the host name myhost.dydns.com, then u keep a little software running on the target host. The little software will keep update ur IP to dydns.com server.
so at ur pc just start cmd, and ping myhost.dydns.com, it will give u the most updated ip address.
Method 3
neverender, what doesn't work for u? Simply type in nc -vvv -l -p 80 on ur box, which will set it to listen in verbose mode on port 80. Then give them a link to ur IP address (for example: 111.111.111.11) and tell them to type it in their browser. The browser should resolve the address as well as append port 80 automatically. Just make sure that ur friend is not very computer literate.
Method 4
Just download a very simple server such as this one and install it on ur comp. Then run it and give ur ip to the person u want and tell them to connect to it through a browser. ur server will log their connection and u will get their IP.
link:http://www.download.com/Abyss-Web-Server/3000-2165-10283992.html?tag=lst-0-6
Other Ways
-www.imchaos.com and make a "spy poll" to put in ur profile, this will tell u the IP of anybody who answers ur poll
-originalicons.com there is a page for doin it (i dont like it, but it works)
-or irc
Here is a more detailed tutorial about using NetCat.
http://www.onlamp.com/pub/a/onlamp/2003/05/29/netcat.html
Windows users can download NetCat from here:
http://www.atstake.com/research/tools/network_utilities/
Watsay?
HOpes u enjoy the tutorial..Commenting wud be appreciated on any kinda doubts.
Enjoy Hackton
10:41 PM 0
How To hack A Computer In A LAN By Creating a Null Session
.jpg)
11:10 AM 0
How to use Google.com as proxy server to surf blocked/banned websites?
Google language translator tool can surf and perform language translation on websites or articles. Ordinary people, like myself, will simply use it as a language translator, to translate a web page into English or mother-tongue.
But, you can also use the Google language tool as a proxy server to surf banned/black-listed web pages!
Of course, there are other language translators (e.g. Alta-Vista Babel Fish) to easily serve the same purpose. But, as I said just now, Google.com is less likely be banned/blocked by any proxy servers or firewalls in the Earth.
Though, this trick will be failed too if some smart proxy servers is used to scan the whole URL for prohibited string/keywords.
But, if you are going to use Google language translator as proxy server to surf blocked web pages in English, which is your mother-tongue or the only language you understand, you may feel disappointed. There is no English to English translation in the option menu.
DON’T WORRY. Just try to use “Spanish to English”, “French To English”, “German to English”, “Japanese To English”, etc, will do the job.
This trick will work, as a German web page will not be 100% written in German language. So, Google language translator will only convert the German words and statements to English, otherwise no conversion will be done!
For example, this is how I use the Google language translator tool to surf Playboy.com, torrentscan.com, torrentz.com, etc, in office with the damn squid proxy server. If you do able to see these black-listed sites, then Using Google language translator tool as second proxy server will work for your case!
Anyway, this trick is only works for text. The multimedia contents such as jpeg pictures, quicktime movie, real media files, etc, will not working (displaying).
Never mind, you can try with another Google Application tool called Google Wireless Transcoder.
This Google Application is developed to convert a normal web page into format that is optimized for rendering in WAP browser, such as those web browser in wireless PDA, 3G smart-phone (such as Nokia N95, Dopod C838P), etc.
Google Wireless Transcoder will download the target web page, including those jpeg pictures of the site, and reformat the web page layout for best viewing in mini web browser of smart-phones
6:26 AM 1
How to Hack Telnet (Port 23)
Telnet is great program for doing a couple of interesting things. if you want to call yourself a hacker, you absolutely MUST be able to telnet!
In this post you will find out a few of the cool things a hacker can do with telnet.
Telenet is a system by which one canaccess almost every data-base and mainframe on the continantal U.S.
Most of these codes do not have passwords with them.
But be careful, more than one group of hackers have gotten busted for using this system for hacking into mainfraimes. An example is the 414's.
If you have read about them in newsweek, it's very scary.
(please dont misuse it, this is just for educational purpose)
What to do - The first thing you have to do if you want to hack with Telenet, is find your local Telenet phone number.
This can be done many ways. One way that always works, is to call up your local computer store, tel them that you recently purchased The Source or something like that, but that you lost the sheet that has the phone no. writen on it.
They'll tell it to you. (People who work in computer stores usualy aren't very smart
about that sort of thing.)
Call the number with your computer. Once the connection is established,
press twice. the computer will display "TERMINAL=" Type again. The computer will then display an at sign: "" Type in the access code here.
below are some access codes listed
(But please dont missuse it)
------------------------------------------------------------------------
Telemail
--------
To use the Telemail feature of Telenet, type mail at the "" prompt.
User id's are usually the first initial of the user's first name, plus
the last name.
eg- William gates= Wgates
-------------------------------------------------------------------------
C 20120 - VM 370 ONLINE
C 20124N- NEW YORK TIME INFORMATION SERVICE
C 20125 - NJIT ELECTRONIC INFORMATION
C 20130
C 20133
C 20138
C 20148
C 20154
C 20165
C 20166
C 20167 - WARNER COMPUTER SYSTEMS
C 20168 - WARNER COMPUTER SYSTEMS
C 20171
C 20182 - BANKERS TRUST CUSTOMER SERVICE
C 20184
C 20222
C 20225 - COMSHARE "COMMANDER II"
C 20246
C 20247 - GSD TIMESHARING
C 20270 - GSD TIMESHARING
C 202124- GENERAL MOTORS WARREN
C 202133
C 202138- (TYPE .HELP *)
C 202139- (TYPE .HELP *)
C 202140- (TYPE .HELP *)
C 202143
C 202144- (TYPE .HELP *)
C 202148
C 202149
C 202175 - HONEYWELL
C 202222 - GM PARTS
C 202229 - PRIMENET
C 20321 - WYLBUR
C 21221 - PRIMENET
C 21224 - PRIMENET
C 21225 - INTERACTIVE MARKET SYSTEMS
C 21226 - INTERACTIVE MARKET SYSTEMS
C 21228 - BURROUGHS NYC DATA CENTER
C 21229 - LANDART SYSTEMS
C 21231 - E.F.HUTTON
C 21233 - UNIVAC 1100
C 21247
C 21248
C 21252
C 21253 - VM/370 ONLINE
C 21256 - CITIBANK CASH MANAGER
C 21264 - CITICASH MANAGER INTERNATIONAL
C 21265 - CITICASH MANAGER INTERNATIONAL
C 21269
C 21281 - BANKERS TRUST CUSTOMER SERVICE
C 21284 - DATAMOR TIME SHARING
C 21288 - S-K WDC SYSTEM 1/ONLINE
C 212136 - (TYPE NEW/TSC)
C 212141
C 212142
C 212151 - CITICASH MANAGER INTERNATIONAL
C 212152
C 21255 - PRIMENET
C 21256 - PRIMENET
C 212160 - TELSTAT SIGMA 6
C 212167 - RSTS V.7.0-07
C 212168 - RSTS V.7.0-07
C 212171
C 212172
C 21284 - DATAMOR TIME SHARING
C 21325 - PRIMENET
C 21335 - MARKETRON RESEARCH AND SALES
C 21336 - MARKETRON RESEARCH AND SALES
C 21341
C 21360
C 21365
C 21366
C 213170 - DIALOG
C 21370 - XCC-WEST SYSTEM X2
C 21371 - XCC-WEST SYSTEM X3
C 21372 - XCC-WEST SYSTEM X3
C 21373 - XCC-WEST SYSTEM X1
C 21375 - XCC-WEST SYSTEM X2
C 21379 - INTERACTIVE SYSTEM/ONE
C 21384
C 21385
C 21386 - IAS PROGRAM DEVELOPMENT SYSTEM
C 21388
C 213105
C 21520 - TPF&C ONLINE
C 21534 - PRIMENET
C 21538
C 21722
C 21725
C 21726 - U OF I COMPUTING SERVICES
C 30121 - NASA RECON
C 30124 - SOURCE SYSTEM 10
C 30126 - DISTRIBUTIVE NETWORK
C 30128 - SOURCE SYSTEM 13
C 30134 - INTERACTIVE(GAITHERSBURG)
C 30135
C 30136
C 30138 - SOURCE SYSTEM 11
C 30147 - SOURCE SYSTEM 12
C 30148 - SOURCE SYSTEM 15
C 30149 - SOURCE SYSTEM 14
C 30320 - COMPUTER SHARING SERVICES
C 30330 - COMPUTER SHARING SERVICES
C 30335
C 30337 - PRIMENET
C 30339 - PRIMENET
C 30340 - PRIMENET
C 303125
C 30520
C 30522
C 30531
C 30532 - C.S.I. TIMESHARING SERVICE
C 30523 - C.S.I. TIMESHARING SERVICE
C 31231 - C.I.C. TIMESHARING
C 31232
C 31235
C 31236
C 31240
C 31247
C 31248
C 31249
C 31250
C 31254
C 31279
C 31289
C 312124
C 312127
C 31325
C 31327
C 31340 - ADP NETWORK
C 31341 - ADP NETWORK
C 31345 - PRIMENET
C 31359 - GENERAL MOTORS WARREN
C 31360 - GENERAL MOTORS WARREN
C 31361 - GM PARTS
C 31363 - VM/370 ONLINE
C 31370 - GM DECSYSTEM-20 TIMESHARING
C 31422
C 31423
C 31424 - MCAUTO VM/370 ONLINE
C 31425 - MCAUTO VM/370 ONLINE
C 31426
C 31432
C 31435 - PRIMENET
C 31444
C 31726 - RSTS V06C-04
C 40420
C 40434
C 40822
C 41520 - DIALOG
C 41527 - STANFORD IBM-3033A
C 41548 - DIALOG
C 41556
C 41560
C 41561
C 41562
C 41567
C 41580 - HARPER GROUP INFORMATION NETWORK
C 41587 - BUSSIPLEXER
C 51632
C 51633
C 51634
C 51638
C 51646
C 51647 - VM/370 ONLINE
C 51729
C 60320 - DARTMOUTH COLLEGE COMPUTING
C 60322
C 60324
C 60328
C 60331
C 60720
C 60942
C 60945
C 61114
C 61115
C 61118
C 61120
C 61221
C 61724
C 61735 - (TYPE D FOR SYSTEM) APPLIED LOGIC NETWORK CONTROL
C 61748 - PRIMENET
C 61750 - PRIMENET
C 61760 - (TYPE D FOR SYSTEM) APPLIED LOGIC NETWORK CONTROL
C 61766 - PRIMENET
C 61767 - PRIMENET
C 61770 - NDC-SYSTEM#
C 61774
C 61776 - NDC-SYSTEM#
C 61777 - NDC-SYSTEM#
C 61778 - PRIMENET
C 617120
C 617121
C 617124
C 617125
C 617127
C 617133
C 617135 - VM/370 ONLINE
C 61737 - VM/370 ONLINE
C 617138 - MASSACHUSETTS INSTITUE OF
C 617139 - MASSACHUSETTS INSTITUE OF
C 617140 - VM/370 ONLINE
C 617151
C 617152
C 617159
C 61763
C 61769 - (TYPE D FOR SYSTEM) APPLIED LOGIC NETWORK
C 61770 - BPL-INFORONICS
C 617171 - INTERACT LINE
C 617177 - ERT ENVIRONET
C 617178
C 617179 - ERT ENVIRONET
C 61780 - (TYPE HELP)
C 71424 - GLOBAL DATA TIMESHARING
C 71431 - (TYPE HELP)
C 71620 - UNION CARBIDE
C 80331
C 80423 - CONTROL DATA INTERCOM
C 80424 - CONTROL DATA INTERCOM
C 80426 - BABCOCK AND WILCOX
C 81623
C 81625 - UNINET
C 81626 - UNINET
C 90995D - TELENET NEWS SERVICE
C 91930
C 91931
C 91933
C 91934
10:22 PM 0
Use Run As to Perform Administrative Tasks : Hacking Tricks
Use Run As to protect your administrator workstation from Trojans and other nasties.
If you're lazy, like I am, you probably use the default administrator account on your desktop workstation for browsing the Web, checking your email, and managing the servers on your company's network.
Not a good idea.
What if you unknowingly visited a web page that executed a script that downloaded a Trojan to your machine? Your administrator account would be compromised, and the attacker would have total access to your workstation and possibly to your whole network! To avoid such dangers, administrators should always have two user accounts: a regular (user-level) account for ordinary activities, such as web browsing and messaging, and an administrator-level account, used only for performing administrative tasks. This way, when you are reading your email and suddenly remember you have to reschedule a backup, you can simply log off, log back on using your administrator account, perform the task, log off again, and log on again as a regular user.
Who am I kidding? That's too much to expect of a lazy system administrator.
How Run As Works
The Run As service (called Secondary Logon service in Windows Server 2003 and Windows XP) is a hack designed to enable you to run programs by using alternate credentials while you're logged on using another account. For example, if you are an administrator and are logged on to your desktop using your regular user account, you won't be able to run administrative tools such as Computer Management, because they require administrator credentials to run properly. (Actually, you can open Computer Management as an ordinary user; you just can't do much with it.) Using Run As, however, you can run Computer Management as an administrator while remaining logged on as an ordinary user.
There are two ways to use Run As: using the GUI or from the command line. To use the GUI method, first find the program you want to run in Windows Explorer or My Computer. Then, for executables (*.exe files), hold down the Shift key, right-click the program's icon, and select Run to open the Run As Other User dialog box shown in Figure 1-1. For MMC consoles (*.msc files) and Control Panel utilities (*.cpl files), you do the same thing but don't need to hold down the Shift key.
Once you specify the appropriate alternate credentials and click OK, the program you selected runs in the security context of those alternate credentials until you close or terminate the program. If you prefer, the alternative credentials can also be entered as domain\user or user@domain, which in Figure 1-1 would be MTIT\Administrator or Administrator@mtit.com for an example domain named mtit.com (replace these credentials with the name of your own domain). The advantage of doing it the way shown in Figure 1-1 is that, if your computer is a member server, you can specify a local user account by entering the name of the computer in the Domain field.
Using Run As from the command line is just as easy, but you need to know the path to the program (unless the program file is located within the system path). For example, the Computer Management console file compmgmt.msc is located in the \system32 directory. To run it as Administrator in the MTIT domain, simply type the following at a command prompt:
runas /user:MTIT\Administrator "mmc %windir\system32\compmgnt.msc"
You'll be prompted for a password for the account, after which Computer Management will open. Note that you can also type this command directly into the Run box (accessed by Start
Limitations of Run As
While Run As is useful, it has some limitations. First, the alternate credentials you specify must have the Log On Locally user right on the computer. Since Run As is usually used with administrator credentials (which have that right by default), this is usually an issue only in certain circumstances. For example, say you grant a few knowledgeable users a second user account that belongs to the Power Users group, to allow them to update device drivers and perform other minor maintenance on their desktop computers. If you try to reduce the attack surface of your network by removing the right to Log On Locally from the Power Users group using Group Policy, then these users won't be able to perform such tasks.
Also, there are certain tasks you can't perform directly using Run As, such as opening the Printers folder to administer a printer that is connected to your machine. The reason for this is that the special folders such as Printers and Network and Dial-up Connections are opened indirectly by the operating system, not by a command. You also can't use Run As to open Windows Explorer and access the filesystem on your computer as administrator, because the Windows shell explorer.exe is already running as your current desktop environment and Windows allows only one GUI shell to run at a time.
Finally, Run As also might not work if the program you are trying to run is located on a network share, because the credentials used to access the share might be different than the credentials used to run the program.
Most limitations have workarounds of some sort, if you try hard enough to find them. So, let's see if we can figure out ways to get around these limitations (except for the Log On Locally limitation, which is absolute).
Running programs without an executable
Say you want to change some settings for the Local Area Connection in the Network and Dial-up Connections folder. If you try doing this as an ordinary user, you'll get a message saying "The controls on this properties sheet are disabled because you do not have sufficient privileges to access them." Here's how to access these settings as an administrator without logging out of your regular account. Right-click on the task bar and open Task Manager. Then, switch to the Processes tab, select explorer.exe, and click End Process to kill the desktop but leave Task Manager running. Now, switch to the Applications tab, click New Task, type runas /user:MTIT\Administrator explorer.exe to run the Windows Explorer shell in an administrator context, and click OK. Finally, move Task Manager out of the way and type your password into the command-prompt window.
A new desktop will now appear, running in the security context of your administrator account. You can now change the settings of your Local Area Connection, modify the properties of a printer in the Printers folder, browse the filesystem, or do anything you want to do as administrator. But be sure to leave Task Manager running, because it is your only connection to your original desktop! You can minimize it so it won't be in the way.
Once you're finished performing your administrative tasks, you can return to your original desktop (the one running under the security context of your regular account) as follows. Maximize Task Manager so that you'll have access to it when your desktop disappears again. Then, to log off of your administrator session, click Start Shut Down and select Log Off.
|
Your administrator desktop has now disappeared, but Task Manager is still running (in the security context of your regular account), so switch to the Applications tab, click New Task, type runas /user:MTIT\Administrator explorer.exe, and click OK. Your desktop has returned.
At this point, you might ask, "Why should I go to all that trouble? It would be faster just to log off as a regular user and log on as an administrator." True, but any applications you have running as a regular user would then have to be terminated. Doing it the way shown here, however, leaves all your desktop applications running in the background.
Running programs from network shares
Here's how to get around the limitation of running programs from network shares with appropriate credentials. To run a program named test.exe found in the TOOLS share on server SRV230, use Start
Run As Shortcuts
To make your life easier, instead of having to type stuff at the command line, you can use Run As to create a shortcut that will run a program under alternate credentials. For example, to run the Computer Management console from a Run As shortcut, right-click on your desktop, select New
There's another way to create Run As shortcuts that you might find even easier to use. Just right-click on your desktop, select New
%windir%\system32\runas.exe /user:MTIT\Administrator "mmc %windir%\system32\compmgmt.msc"
Save the shortcut with the name Computer Management. Now, when you double-click the shortcut, a command-prompt window opens, prompting you for the password for the MTIT\Administrator account. Type the password, press Enter, and Computer Management starts in administrator context.
What if you get tired of typing your administrator password each time you want to run a Run As shortcut? On Windows Server 2003, there's a way to get around that. Just create a new shortcut with this command string:
%windir%\system32\runas.exe /user:MTIT\Administrator /savecred "mmc %windir%\
system32\compmgmt.msc"
Notice the /savecred switch in this string. This option first appeared in Windows XP. The first time you double-click on the shortcut, a command-prompt window opens to prompt you for the password for the alternate credentials, just like before. The next time you double-click on the shortcut, however, you are not prompted for the password; it was stored on your machine the first time you ran the shortcut. Now you no longer have to type a password each time you use your Run As shortcut. Time-saver, right? Yes, but it's also a possible security hole: once the credentials for your administrator account are stored locally on the machine, they can be used to run any command-line program using administrator credentials.
Here's a scenario to illustrate what I mean. Let's say you need to run an administrative tool on a user's desktop machine without logging the user off the machine. You ask the user to take a coffee break. Then, you open a command-prompt window and use runas with /savecred to start the tool (you use /savecred because you might have to run several administrative tools and you don't want to have to type your complex 24-character password repeatedly). When you're finished, you close all the tools you started and walk away. When the user returns to her desktop, she opens a command prompt and types runas /user:MTIT\Administrator /savecred cmd. A command-prompt window opens, displaying administrator credentials in the title bar. The user now knows that she can use this approach to run any program on her machine using administrator credentials.
What did you do wrong as administrator in this scenario? Two things: you used /savecred on a user's desktop machine, which saved your administrator password locally on the machine, and you haven't renamed the default administrator account. If you had changed the name of this account to something complex and unknown to ordinary users, the runas /user:MTIT\Administrator /savecred cmd command the user typed wouldn't work.
What do you do if you have used /savecred on an unsecured machine without thinking about the consequences? Just delete your stored credentials on the machine by opening Stored User Names and Passwords in the Control Panel.
5:08 AM 0
How To Shutdown A Remote Computer : Hacking Tricks
Here's a nifty way to use a script to shut down remote machines.
Sometimes, you need to be able to shut down a server remotely. This script pings the computer in question prior to sending the Win32Shutdown method. It operates on remote PCs and has been tested on systems running Windows 2000. It will probably work on NT4 systems with the proper WHS/WMI/VB scripting, though it has not been tested on such systems.
Using the Win32Shutdown method, the script provides you with the option of logging off the current user of the machine, powering the machine down, or rebooting it. In addition, each of these options can be forced so that the action occurs even if applications are running. Use this option carefully, though, because it might cause the logged-on user to lose his work if he has open files. Note that forced log off/power down/reboot will not work if the screen saver is password-protected and is currently active.
The Code
Make sure you have the latest scripting engines on the workstation you run this script from. You can download the latest scripting engines at the Microsoft Scripting home page (http://msdn.microsoft.com/library/default.asp?url=/nhp/default.asp?contentid=28001169). Note that, when working with the Active Directory Services Interface (ADSI), you must have the same applicable rights as you need to use the built-in administrative tools. Also, for VB scripts that interact with Windows Management Instrumentation (WMI), apply the most current version of the WMI agents.
Type the following code into a text editor such as Notepad (making sure to have Word Wrap disabled) and save it with a .vbs extension. Alternatively, you can download the RemoteShutdown.vbs script from the O'Reilly web site at http://www.oreilly.com/catalog/winsvrhks/.
'/'|| RemoteShutdown.vbs
'||
'|| Created by Harvey Hendricks, MCP, MCSE, A+
'|| March 2001
'|| email: Harvey.Hendricks@aramcoservices.com
'||
'||
'|| Based on techniques and ideas from:
'|| SMS admin, SMS Installer, & WMI forums ->
'|| http://www.myITforum.com/forums
'|| Win32 Scripting -> http://cwashington.netreach.net/
'|| Microsoft Windows Script Technologies ->
'|| http://msdn.microsoft.com/scripting
'|| Microsoft Online Library ->
'|| http://msdn.microsoft.com/library/default.asp
'|| Microsoft VBScript 5.5 documentation and Microsoft WMI SDK
'||
'||~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'|| SCRIPT LOGIC FLOW:
'|| Collects computername from user, calls function to ping the computername
'|| to determine if it is accessible, if not then display message and exit
'|| otherwise continue.
'|| Collects desired action to perform from the user, does error checking on
'|| the input to determine if it is acceptable, if not then display message
'|| and exit otherwise continue.
'|| Set variables and output messages based on the action chosen. Calls
'|| Win32Shutdown with the appropriate variable. Displays success message
'|| and exits
'||
'|| Uses WMI Win32Shutdown method from the Win32_OperatingSystem class
'|| to perform different logoff / powerdown / reboot functions
'||
'|| Testing found the following values to be effective on Win32Shutdown:
'|| Action decimal binary
'|| Logoff 0 0000
'|| Force Logoff 4 0100
'|| Reboot 2 0010
'|| Force Reboot 6 0110
'|| Powerdown 8 1000
'|| Force Powerdown 12 1100
'||
'|| Notice that the third bit from the right appears to be the "FORCE" bit.
'||
'|| A value of 1 will do a shutdown, ending at the "It is safe to turn
'|| off your computer" screen. I have no use for this and did not test it.
'||
'||
'||NOTES: - tested under Windows 2000 Pro. with ACPI compliant systems -
'|| SHOULD work under Windows NT4 without modification IF the
'|| system has compatible versions of WSH / WMI / VBscripting
'||
'||Logoff / Powerdown / Reboot:
'|| Does not work if a password protected screen saver is active or
'|| there is data to save. Either way the system waits for user input.
'||
'||Force Logoff / Force Powerdown / Force Reboot:
'|| Does not work if a password protected screen saver is active, will wait
'|| for user input. Otherwise will close open applications without saving
'|| data.
'||
'\/~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'/\/\/\/\/\/\/\/\/\/\/\/\/\/\ start function
function Ping(byval strName)
dim objFSO, objShell, objTempFile, objTS
dim sCommand, sReadLine
dim bReturn
set objShell = WScript.CreateObject("Wscript.Shell")
set objFSO = CreateObject("Scripting.FileSystemObject")
'Set default return value
bReturn = false
'Create command line to ping and save results to a temp file
sCommand = "cmd /c ping.exe -n 3 -w 1000 " & strName & " > C:\temp.txt"
'Execute the command
objShell.run sCommand, 0, true
'Get the temp file
set objTempFile = objFSO.GetFile("C:\temp.txt")
set objTS = objTempFile.OpenAsTextStream(1)
'Loop through the temp file to see if "reply from" is found,
'if it is then the ping was successful
do while objTs.AtEndOfStream <> true
sReadLine = objTs.ReadLine
if instr(lcase(sReadLine), "reply from") > 0 then
bReturn = true
exit do
end if
loop
'Close temp file and release objects
objTS.close
objTempFile.delete
set objTS = nothing
set objTempFile = nothing
set objShell = nothing
set objFSO = nothing
'Return value
Ping = bReturn
end function
'/\/\/\/\/\/\/\/\/\/\/\/\/\/\ end function
'/\/\/\/\/\/\/\/\/\/\/\ Start Main body of script
'Get computer name to operate on
ComputerName=InputBox("Enter the Machine name of the computer" & vbCRLF _
& "you wish to Shutdown / Reboot / Logoff", _
"Remote Shutdown / Reboot / Logoff", _
"ComputerName")
'if Cancel selected - exit
If (ComputerName = "") Then Wscript.Quit
'change the name to uppercase
ComputerName=UCase(ComputerName)
'ping the computername to see if it is accessible
bPingtest = ping(Computername)
If bPingtest = FALSE Then
y = msgbox ("'" & ComputerName & "' is not accessible!" & vbCRLF _
& "It may be offline or turned off." & vbCRLF _
& "Check the name for a typo." & vbCRLF, _
vbCritical, ComputerName & " NOT RESPONDING")
Wscript.Quit
end IF
'Get the action desired
Action=InputBox( _
"Select Action to perform on " & ComputerName & vbCRLF & vbCRLF _
& " 1 - Logoff" & vbCRLF _
& " 2 - Force Logoff ( NO SAVE )" & vbCRLF _
& " 3 - Powerdown" & vbCRLF _
& " 4 - Force Powerdown ( NO SAVE )" & vbCRLF _
& " 5 - Reboot" & vbCRLF _
& " 6 - Force Reboot ( NO SAVE )" & vbCRLF & vbCRLF _
& "NOTE:" & vbCRLF _
& " Using Force will close windows" & vbCRLF _
& " without saving changes!", _
"Select action to perform on " & ComputerName, "")
'if Cancel selected - exit
If (Action = "") Then Wscript.Quit
'error check input
If (INSTR("1234567",Action)=0) OR (Len(Action)>1) then
y = msgbox("Unacceptable input passed -- '" & Action & "'", _
vbOKOnly + vbCritical, "That was SOME bad input!")
Wscript.Quit
end if
'set flag to disallow action unless proper input achieved, 1 => go 0 => nogo
flag = 0
'set variables according to computername and action
Select Case Action
Case 1 'Logoff
x = 0
strAction = "Logoff sent to " & ComputerName
flag = 1
Case 2 'Force Logoff
x = 4
strAction = "Force Logoff sent to " & ComputerName
flag = 1
Case 3 'Powerdown
x = 8
strAction = "Powerdown sent to " & ComputerName
flag = 1
Case 4 'Force Powerdown
x = 12
strAction = "Force Powerdown sent to " & ComputerName
flag = 1
Case 5 'Reboot
x = 2
strAction = "Reboot sent to " & ComputerName
flag = 1
Case 6 'Force Reboot
x = 6
strAction = "Force Reboot sent to " & ComputerName
flag = 1
Case 7 'Test dialog boxes
y = msgbox("Test complete", vbOKOnly + vbInformation, "Dialog Box Test Complete")
flag = 0
Case Else 'Default -- should never happen
y = msgbox("Error occurred in passing parameters." _
& vbCRLF & " Passed '" & Action & "'", _
vbOKOnly + vbCritical, "PARAMETER ERROR")
flag = 0
End Select
'check flag
' if equal 1 (TRUE) then perform Win32Shutdown action on remote PC
' and display a confirmation message
' if not equal 1 (FALSE) then skip the action and script ends
if flag then
Set OpSysSet=GetObject("winmgmts:{(Debug,RemoteShutdown)}//" _
& ComputerName & "/root/cimv2").ExecQuery( _
"Select * from Win32_OperatingSystem where Primary=true")
for each OpSys in OpSysSet
OpSys.Win32Shutdown(x)
y = msgbox(strAction,vbOKOnly + vbInformation,"Mission Accomplished")
next
end If
'Release objects
set OpSys = nothing
set OpSysSet = nothing
Running the Hack
To run the hack, simply double-click on the RemoteShutdown.vbs file in Windows Explorer (or a shortcut to this file on your desktop) and type the name of the remote computer you want to log off from, power down, or reboot. This name can be the NetBIOS name, DNS name, or IP address of the remote machine. You will then be presented with an input box that displays a menu of options:
- 1 - Logoff
- 2 - Force Logoff
- 3 - Powerdown
- 4 - Force Powerdown
- 5 - Reboot
- 6 - Force Reboot
Simply type the number for the action you want to perform and press Enter.
5:05 AM 0
How to Setup A Virtual Private Network (VPN)
Basic VPN Requirement
*
User Permission. Enable a user to access the VPN. To do this, go to AD Users and Computers, select the user who need to access the VPN, click Dial-in. Check Allow access on the Remote Access Permission (Dial-in or VPN).
*
IP Configuration. The VPN server should have a static IP address and assign the arrange IP addresses to VPN clients. The VPN server must also be configured with DNS and WINS server addresses to assign to the VPN client during the connection.
*
Data Encryption. Data carried on the public network should be rendered unreadable to unauthorized clients on the network.
*
Protocol Support. The TCP/IP is common protocols used in the public network. The VPN also include IP, Internetwork Packet Exchange (IPX), NetBEUI and so on.
*
Firewall Ports. When you place a VPN server behind your firewall, be sure to enable IP protocol 47 (GRE) and TCP port 1723.
*
Interface(s) for VPN server. If your network doesn't have a router or the VPN is also a gateway, your computer must have at least two interfaces, one connecting to the Internet and another connecting to the LAN. If it is behind a router, you just need one NIC.
*
One interface for VPN client. The interface can be a dial-in modem, or a dedicated connection to the Internet.
9:27 PM 0
Reset your Forgotten default gateway's Router's (192.168.1.1) password.
1. username: <admin> / password: <admin>
2. username: <>/<admin>
3. username: <admin>/<password>
In most cases, you will be able to retrieve the access. In case you are not able to do that, and you are not able to remember the lost password of 192.168.1.1, then the only option left is to use the hardware reset button on the router. Just remember to press the reset button for at least 30 seconds, otherwise the router may not be able to reset itself to the factory settings.
Once the router settings are reset, just use try to use the different username password combination we have described above.
9:21 PM 0
Managing And Maintaining Windows 2003 Server Netwrk Outline - Learn Latest Computer And Mobile Hacking Tricks
Demonstrations: 64
Simulations: 103
Fact Sheets: 77
Exam Questions: 276
Exams: 42
Contents:
0.0 Introduction (15 questions)
0.1 Introduction
0.1.1 Windows 2003 Introduction
0.2 Active Directory Overview
0.2.1 Active Directory Overview
0.2.2 Active Directory Organization
0.2.3 Functional Levels
0.2.4 Users and Groups
0.2.5 Default Local Groups
0.2.6 Default Domain Groups
0.2.7 Permissions and Rights
0.3 Group Policy
0.3.1 Group Policy Objects
0.3.2 Creating and Linking a GPO
0.3.3 Configuring GPO Settings
0.3.4 Controlling GPO Application
0.3.5 Configuring GPO Application
0.3.6 Effective GPO Settings
0.3.7 Group Policy Facts
0.3.8 Refreshing Group Policy
0.4 Server Administration
0.4.1 Management Tools
0.4.2 Microsoft Management Console (MMC)
0.4.3 ExamSim Questions - Section 0.4
1.0 Installation (8 questions)
1.1 Installing Windows 2003 Server
1.1.1 Winnt and Winnt32
1.1.2 Command Switches
1.1.3 Troubleshooting Installation Facts
1.1.4 Licensing
1.1.5 Licensing Facts
1.1.6 ExamSim Questions - Section 1.1
1.2 Automated Installs
1.2.1 Unattended Installation
1.2.2 Creating an Unattend.txt File
1.2.3 Unattended Installation Facts
1.2.4 Disk Imaging Facts
1.2.5 Remote Installation Services (RIS)
1.2.6 Network Installation Facts
2.0 Users, Groups, and Computers (62 questions)
2.1 Users
2.1.1 Creating User Accounts
2.1.2 Create a Domain User Account
2.1.3 Modify User Account Properties
2.1.4 User Account Management
2.1.5 Managing User Accounts
2.1.6 Domain User Account Facts
2.1.7 Change the Logon Name
2.1.8 Modify Password Settings
2.1.9 Set Account Expiration
2.1.10 Enable an Account
2.1.11 Modify Multiple Users
2.1.12 Create a Template User
2.1.13 ExamSim Questions - Section 2.1
2.2 Groups
2.2.1 Group Scopes
2.2.2 Domain Local Scopes
2.2.3 Group Facts
2.2.4 Creating Groups
2.2.5 Create a Global Group
2.2.6 Create a Domain Local Group
2.2.7 Create a Universal Group
2.2.8 Create a Distribution Group
2.2.9 Change the Group Scope
2.2.10 Built-in Groups
2.2.11 Default Domain Groups
2.2.12 ExamSim Questions - Section 2.2
2.3 Group Strategy
2.3.1 Group Strategy
2.3.2 Implementing a Group Strategy
2.3.3 Group Strategy Facts
2.3.4 Implement a Group Strategy 1
2.3.5 Implement a Group Strategy 2
2.3.6 ExamSim Questions - Section 2.3
2.4 User Profiles
2.4.1 Mandatory Profile
2.4.2 Create a Mandatory Profile
2.4.3 Roaming Profile
2.4.4 Managing User Profiles
2.4.5 User Profile Management Tasks
2.4.6 Roaming Profile Facts
2.4.7 Create a Roaming Profile
2.4.8 Delete User Profiles
2.4.9 Add Mandatory Roaming Profiles
2.4.10 ExamSim Questions - Section 2.4
2.5 Computer Accounts
2.5.1 Computer Accounts
2.5.2 Joining a Domain
2.5.3 Managing Computer Accounts
2.5.4 Computer Account Facts
2.5.5 Create Computer Accounts
2.5.6 Disable a Computer Account
2.5.7 Reset a Computer Account
2.5.8 ExamSim Questions - Section 2.5
2.6 Account Policies
2.6.1 Password Policies
2.6.2 Setting Account and Password Policies
2.6.3 Account Policies Facts
2.6.4 Configure Account Settings 1
2.6.5 Configure Account Settings 2
2.6.6 Configure Password Settings 1
2.6.7 Configure Password Settings 2
2.6.8 Troubleshooting Logon
2.6.9 Reset the Password
2.6.10 ExamSim Questions - Section 2.6
2.7 AD Command Prompt Tools
2.7.1 Importing and Exporting
2.7.2 AD Management Commands
2.7.3 Using Command Prompt Tools
2.7.4 Command Prompt Tools
2.7.5 ExamSim Questions - Section 2.7
3.0 Hardware Devices (12 questions)
3.1 Installing Hardware Devices
3.1.1 Device Installation
3.1.2 Installing Devices
3.1.3 Device Installation Facts
3.1.4 Autodetect a Plug and Play Device
3.1.5 Install a Legacy Device
3.2 Managing Devices and Drivers
3.2.1 Managing Devices and Drivers
3.2.2 Device Management Facts
3.2.3 Enable and Disable Devices
3.2.4 Remove a Device
3.2.5 Upgrade a Driver
3.2.6 Driver Signing
3.2.7 Configuring Driver Signing
3.2.8 Driver Facts
3.2.9 Configure Driver Signing
3.2.10 File Verification Programs
3.2.11 Hardware Control Panel Applets
3.2.12 ExamSim Questions - Section 3.2
4.0 Disk Storage (18 questions)
4.1 File Systems
4.1.1 File Systems
4.1.2 Convert to NTFS
4.1.3 File System Facts
4.1.4 Format a Drive
4.1.5 Convert a Drive
4.1.6 ExamSim Questions - Section 4.1
4.2 Disks and Volumes
4.2.1 Disk Types
4.2.2 Basic and Dynamic Disks
4.2.3 Creating a Simple Volume
4.2.4 Upgrade a Disk
4.2.5 Revert a Disk to Basic
4.2.6 Create a Volume
4.2.7 Spanned Volumes
4.2.8 Creating Spanned Volumes
4.2.9 Span an Existing Volume
4.2.10 Create a Spanned Volume
4.2.11 Volume Characteristics
4.2.12 ExamSim Questions - Section 4.2
4.3 Performance and Fault Tolerance
4.3.1 RAID Levels
4.3.2 Striping
4.3.3 Create a Striped Volume
4.3.4 Mirroring
4.3.5 Creating Mirrored Volumes
4.3.6 Create a Mirrored Volume
4.3.7 Mirror an Existing Drive
4.3.8 Mirror the System Partition
4.3.9 RAID-5
4.3.10 Creating RAID Volumes
4.3.11 Create a RAID Volume
4.3.12 Redundancy and Fault Tolerance
4.3.13 ExamSim Questions - Section 4.3
4.4 Maintaining Disks and Volumes
4.4.1 Defragmenting a Hard Disk
4.4.2 Disk Recovery
4.4.3 Recovering from a Failed Disk
4.4.4 Disk Management Facts
4.4.5 Break a Mirrored Volume
4.4.6 Recover a Failed Mirrored Volume
4.4.7 Repair a RAID Volume
4.4.8 Boot.ini File
4.4.9 Boot.ini Facts
4.4.10 ExamSim Questions - Section 4.4
5.0 Backup and Recovery (46 questions)
5.1 Backup and Restore
5.1.1 Windows Backup
5.1.2 System State Data
5.1.3 Choosing a Backup Strategy
5.1.4 Backing up Data
5.1.5 Restoring Data
5.1.6 Backup Types Facts
5.1.7 Backup Management Facts
5.1.8 ExamSim Questions - Section 5.1
5.2 Volume Shadow Copy Services (VSS)
5.2.1 Volume Shadow Copy Services (VSS)
5.2.2 Using Volume Shadow Copy
5.2.3 Enable Shadow Copies
5.2.4 ExamSim Questions - Section 5.2
5.3 System Recovery
5.3.1 Driver Rollback and ASR
5.3.2 Setting up and Using ASR
5.3.3 Troubleshooting System Startup
5.3.4 System Recovery Facts
5.3.5 Backing Up and Restoring Active Directory
5.3.6 Active Directory Restore Facts
5.3.7 ExamSim Questions - Section 5.3
6.0 File Management (29 questions)
6.1 NTFS Permissions
6.1.1 NTFS Permissions
6.1.2 Setting NTFS Permissions
6.1.3 NTFS Permission Facts
6.1.4 Configure NTFS Permissions
6.1.5 Copy and Modify Inherited Permissions
6.1.6 Remove Inherited Permissions
6.1.7 Viewing Effective Permissions
6.1.8 Effective NTFS Permissions
6.1.9 ExamSim Questions - Section 6.1
6.2 Shared Folders
6.2.1 Share a Folder
6.2.2 Shared Folder Facts
6.2.3 Share a Folder with a Second Name
6.2.4 Unshare a Folder
6.2.5 Remove a Shared Folder
6.2.6 ExamSim Questions - Section 6.2
6.3 Share Access
6.3.1 Share Permissions
6.3.2 Controlling Share Access
6.3.3 Share Access Facts
6.3.4 Configure Share Permissions
6.3.5 Create a Share and Set Permissions
6.3.6 Configure Share Limits
6.3.7 Configure NTFS and Share Permissions 1
6.3.8 Configure NTFS and Share Permissions 2
6.3.9 ExamSim Questions - Section 6.3
6.4 Disk Quotas
6.4.1 Disk Quotas
6.4.2 Enabling Quota Management
6.4.3 Enable Quota Restrictions
6.4.4 Quota Entries
6.4.5 Configuring Quota Entries
6.4.6 Create a Quota Entry
6.4.7 Modify Quota Limits
6.4.8 Delete a Quota Entry
6.4.9 Disk Quota Facts
6.4.10 ExamSim Questions - Section 6.4
6.5 Encryption and Compression
6.5.1 File Encryption
6.5.2 Encrypting Files
6.5.3 Encryption Facts
6.5.4 Encrypt a Folder
6.5.5 Decrypt a File
6.5.6 Compression
6.5.7 Compressing Files
6.5.8 File Compression Facts
6.5.9 Compress a Drive
6.5.10 Compress a Folder
6.6 Offline Files
6.6.1 Configuring Offline Files on the Server
6.6.2 Configuring Offline Files on the Client
6.6.3 Offline File Facts
6.6.4 Optimize Program Caching
6.6.5 Enable Automatic Caching
6.6.6 Disable Share Caching
6.6.7 ExamSim Questions - Section 6.6
7.0 Internet Information Services (IIS) (12 questions)
7.1 Installing and Configuring a Web Site
7.1.1 IIS Facts
7.1.2 Installing and Administering IIS
7.1.3 Install IIS
7.1.4 Change the Default Home Page
7.1.5 Change the Home Directory Path
7.1.6 Creating a Virtual Directory
7.1.7 Create a Virtual Directory
7.1.8 Set the Virtual Directory Home Page
7.1.9 ExamSim Questions - Section 7.1
7.2 Securing IIS
7.2.1 IIS Security
7.2.2 Managing IIS Authentication
7.2.3 IIS Authentication Facts
7.2.4 Configure Web Site Authentication
7.2.5 Configure Virtual Directory Authentication
7.2.6 Managing IIS Permissions
7.2.7 IIS Permission Facts
7.2.8 Configure Virtual Directory Permissions
7.2.9 ExamSim Questions - Section 7.2
7.3 Managing IIS
7.3.1 Creating a Web Site
7.3.2 Create a New Web Site
7.3.3 Configuring Web Site Identification
7.3.4 Web Site Identification Facts
7.3.5 IIS Management Facts
7.3.6 Limit Web Site Access
7.3.7 Stop the Web Site
7.3.8 ExamSim Questions - Section 7.3
8.0 Printers (9 questions)
8.1 Configuring Printing
8.1.1 Printing Concepts
8.1.2 Printing Facts
8.1.3 Installing a Local Printer
8.1.4 Install a Local Printer
8.1.5 Sharing a Printer
8.1.6 Share a Printer
8.1.7 Create and Share a Printer
8.1.8 Unpublish a Printer in Active Directory
8.1.9 Add Printer Drivers
8.1.10 Configure Printer Permissions
8.1.11 ExamSim Questions - Section 8.1
8.2 Customizing Printing
8.2.1 Advanced Print Configuration
8.2.2 Configuring Printer Pooling
8.2.3 Configure Printer Pooling
8.2.4 Configuring Multiple Printer Objects
8.2.5 Restrict Printing Times
8.2.6 Configure Printer Priority
8.2.7 ExamSim Questions - Section 8.2
8.3 Managing Printing
8.3.1 Managing Printers
8.3.2 Managing the Print Queue
8.3.3 Delete a Print Job
8.3.4 Managing the Print Server
8.3.5 Disable Printer Notification
8.3.6 Disable Printer Notification (Non-2000 Clients)
8.3.7 Change the Spool Location
8.3.8 Managing Printing
8.4 Troubleshooting Printing
8.4.1 Recovering from Printer Failure
8.4.2 Troubleshooting Printing Facts
8.4.3 Redirect Print Jobs
8.4.4 Redirect Print Jobs 2
8.4.5 ExamSim Questions - Section 8.4
8.5 Internet Printing Protocol (IPP)
8.5.1 IPP
8.5.2 Configuring IPP
8.5.3 IPP Facts
8.5.4 ExamSim Questions - Section 8.5
9.0 Installing Software (11 questions)
9.1 Deploying and Updating Software
9.1.1 Deploying Applications
9.1.2 Creating a Software Distribution
9.1.3 Troubleshooting Software Deployment
9.1.4 Service Packs and Patches
9.1.5 Installer Package Facts
9.1.6 ExamSim Questions - Section 9.1
9.2 Software Update Services (SUS)
9.2.1 Software Update Services (SUS) Components
9.2.2 SUS Server Configuration
9.2.3 Configuring SUS
9.2.4 Managing SUS Clients
9.2.5 SUS Client Configuration
9.2.6 SUS Infrastructure Design
9.2.7 SUS Facts
9.2.8 ExamSim Questions - Section 9.2
10.0 System Security (7 questions)
10.1 Auditing
10.1.1 Auditing
10.1.2 Configuring Auditing
10.1.3 Auditing Facts
10.1.4 Configure Auditing 1
10.1.5 Configure Auditing 2
10.1.6 Configure Auditing 3
10.1.7 Configuring File System Auditing
10.1.8 ExamSim Questions - Section 10.1
10.2 Security Templates
10.2.1 Security Templates
10.2.2 Analyzing Security Settings
10.2.3 Configuring and Applying Security Templates
10.2.4 Security Template Facts
10.2.5 ExamSim Questions - Section 10.2
11.0 Management and Performance (44 questions)
11.1 Remote Management
11.1.1 Terminal Services
11.1.2 Installing Terminal Services
11.1.3 Enable Remote Desktop
11.1.4 Terminal Services Facts
11.1.5 Managing Terminal Services
11.1.6 Terminal Service Licensing
11.1.7 Remote Desktop Facts
11.1.8 Remote Assistance
11.1.9 Remote Assistance Facts
11.1.10 ExamSim Questions - Section 11.1
11.2 Event Viewer
11.2.1 Event Viewer
11.2.2 Using Event Viewer
11.2.3 Managing Event Logs
11.2.4 Event Facts
11.2.5 Configure Log Properties
11.2.6 Clear the System Log
11.2.7 ExamSim Questions - Section 11.2
11.3 Monitoring Performance
11.3.1 Monitoring the System
11.3.2 Using Task Manager
11.3.3 Using System Monitor
11.3.4 Performance Monitoring Tools
11.3.5 Objects and Counters
11.3.6 ExamSim Questions - Section 11.3
ExamSim (276 questions)
Preparing for Certification
Exam Objectives
Exam FAQs
How to Register for an Exam
Exam-taking Hints and Tips
Objective 100, All Questions (32 questions)
Objective 200, All Questions (66 questions)
Objective 300, All Questions (48 questions)
Objective 400, All Questions (82 questions)
Objective 500, All Questions (48 questions)
Typical Exam
Download 12 Part
Here are The links:
http://www.linkbucks.com/link/ff575b2a/5370
http://www.linkbucks.com/link/fe343ac3/5370
http://www.linkbucks.com/link/f807962f/5370
http://www.linkbucks.com/link/f800c2d4/5370
http://www.linkbucks.com/link/fe37332c/5370
http://www.linkbucks.com/link/fd2cb22d/5370
http://www.linkbucks.com/link/ff669b9b/5370
http://www.linkbucks.com/link/f98ea2da/5370
http://www.linkbucks.com/link/fb564641/5370
http://www.linkbucks.com/link/f9491a76/5370
http://www.linkbucks.com/link/fee9f192/5370
http://www.linkbucks.com/link/f907c0d3/5370
Any broken link, pls do comment
11:57 AM 3
Posts
