Access to local administration E3000 via HTTPS problem

Similar Questions

• Access to the administration via VPN to 887 after config setup pro

  Hi all

  Ive just made a three 887w for a client in a few branches, and as this is the first time I have deployed these devices, I decided to go with the GUI (downloaded config pro 2.3) to get the configuration made that I had some constraints of time to get them in place (sometimes I go with the graphical interface first and then look back at the CLI to see what as its been) (, then hand it in Notepad to get a better understanding of the new features of the CLI may be gone and allowed).

  One thing I again, that I was going to do face was my first experience of the firewall IOS area type of config...

  At this point, I'm still unclear on the config (where why Im posting here I guess!) - but the main problem I have at the moment is with managing access to devices.

  Particularly with regard to access to the administration of headquarters inside the IP address of the branch routers.

  I should mention that the branch routers are connected to Headquarters by connections IPSec site-to-site VPN and these connections are all very good, all connectivity (PC server, PC, printer, etc.) is very well... I can also send packets (using the inside of the interface as a source) ping from branch routers to servers on the headquarters LAN.

  Set up access to administration using config pro to allow access to the router on the subnet headquarters (on its inside interface), as well as the local subnet and also SSH access to a specific host from the internet - the local subnet and the only host on the internet can access the router very well.

  I'm not sure if the problem is with the ZBF config or if its something really obvious Im missing! -Ive done routers branch several times previously, so with this being the first config ZBF I did, so I came to the conclusion that there must be something in the absence of my understanding.

  Any help greatly appreciated... sanitized config below!

  Thanks in advance

  Paul

  version 15.1
  no service button
  tcp KeepAlive-component snap-in service
  a tcp-KeepAlive-quick service
  horodateurs service debug datetime localtime show-timezone msec
  Log service timestamps datetime localtime show-timezone msec
  encryption password service
  sequence numbers service
  !
  hostname name-model
  !
  boot-start-marker
  boot-end-marker
  !
  logging buffered 51200
  recording console critical
  enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxx
  !
  No aaa new-model
  !
  iomem 10 memory size
  clock timezone PCTime 0
  PCTime of summer time clock day March 30, 2003 01:00 October 26, 2003 02:00
  Service-module wlan-ap 0 autonomous bootimage
  !
  Crypto pki trustpoint TP-self-signed-2874941309
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 2874941309
  revocation checking no
  rsakeypair TP-self-signed-2874941309
  !
  !
  TP-self-signed-2874941309 crypto pki certificate chain
  certificate self-signed 01
  

  no ip source route
  !
  !
  DHCP excluded-address IP 10.0.0.1 10.0.0.63
  DHCP excluded-address IP 10.0.0.193 10.0.0.254
  !
  DHCP IP CCP-pool
  import all
  Network 10.0.0.0 255.255.255.0
  default router 10.0.0.1
  xxxxxxxxx.com domain name
  Server DNS 192.168.xx.20 194.74.xx.68
  Rental 2 0
  !
  !
  IP cef
  no ip bootp Server
  IP domain name xxxxxxx.com
  name of the server IP 192.168.XX.20
  name of the server IP 194.74.XX.68
  No ipv6 cef
  !
  !
  Authenticated MultiLink bundle-name Panel

  parameter-card type urlfpolicy websense cpwebpara0
  Server 192.168.xx.25
  source-interface Vlan1
  allow mode on
  parameter-card type urlf-glob cpaddbnwlocparapermit0
  model citrix.xxxxxxxxxxxx.com

  license udi pid xxxxxxxxxxx sn CISCO887MW-GN-E-K9
  !
  !
  username xxxxxxx privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxx
  username privilege 15 secret 5 xxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxx
  !
  !
  !
  !
  synwait-time of tcp IP 10
  !
  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-1
  game group-access 106
  type of class-card inspect entire game SDM_SHELL
  match the name of group-access SDM_SHELL
  type of class-card inspect entire game SDM_SSH
  match the name of group-access SDM_SSH
  type of class-card inspect entire game SDM_HTTPS
  match the name of group-access SDM_HTTPS
  type of class-card inspect all match sdm-mgmt-cls-0
  corresponds to the SDM_SHELL class-map
  corresponds to the SDM_SSH class-map
  corresponds to the SDM_HTTPS class-map
  type of class-card inspect entire game SDM_AH
  match the name of group-access SDM_AH
  type of class-card inspect entire game SDM_ESP
  match the name of group-access SDM_ESP
  type of class-card inspect entire game SDM_VPN_TRAFFIC
  match Protocol isakmp
  match Protocol ipsec-msft
  corresponds to the SDM_AH class-map
  corresponds to the SDM_ESP class-map
  type of class-card inspect the correspondence SDM_VPN_PT
  game group-access 105
  corresponds to the SDM_VPN_TRAFFIC class-map
  type of class-card inspect entire game PAC-cls-insp-traffic
  match Protocol cuseeme
  dns protocol game
  ftp protocol game
  h323 Protocol game
  https protocol game
  match icmp Protocol
  match the imap Protocol
  pop3 Protocol game
  netshow Protocol game
  Protocol shell game
  match Protocol realmedia
  match rtsp Protocol
  smtp Protocol game
  sql-net Protocol game
  streamworks Protocol game
  tftp Protocol game
  vdolive Protocol game
  tcp protocol match
  udp Protocol game
  inspect the class-map match PAC-insp-traffic type
  corresponds to the class-map PAC-cls-insp-traffic
  type of class-map urlfilter match - all cpaddbnwlocclasspermit0
  Server-domain urlf-glob cpaddbnwlocparapermit0 match
  type of class-card inspect entire game PAC-cls-icmp-access
  match icmp Protocol
  tcp protocol match
  udp Protocol game
  class-map type urlfilter websense match - all cpwebclass0
  match any response from the server
  type of class-card inspect correspondence ccp-invalid-src
  game group-access 100
  type of class-card inspect correspondence ccp-icmp-access
  corresponds to the class-ccp-cls-icmp-access card
  type of class-card inspect sdm-mgmt-cls-ccp-permit-0 correspondence
  corresponds to the class-map sdm-mgmt-cls-0
  game group-access 103
  type of class-card inspect correspondence ccp-Protocol-http
  http protocol game
  !
  !
  type of policy-card inspect PCB-permits-icmpreply
  class type inspect PCB-icmp-access
  inspect
  class class by default
  Pass
  type of policy-card inspect sdm-pol-VPNOutsideToInside-1
  class type inspect sdm-cls-VPNOutsideToInside-1
  inspect
  class class by default
  drop
  type of policy-card inspect urlfilter cppolicymap-1
  urlfpolicy websense cpwebpara0 type parameter
  class type urlfilter cpaddbnwlocclasspermit0
  allow
  Journal
  class type urlfilter websense cpwebclass0
  Server-specified-action
  Journal
  type of policy-map inspect PCB - inspect
  class type inspect PCB-invalid-src
  Drop newspaper
  class type inspect PCB-Protocol-http
  inspect
  service-policy urlfilter cppolicymap-1
  class type inspect PCB-insp-traffic
  inspect
  class class by default
  drop
  type of policy-card inspect PCB-enabled
  class type inspect SDM_VPN_PT
  Pass
  class type inspect sdm-mgmt-cls-ccp-permit-0
  inspect
  class class by default
  drop
  !
  security of the area outside the area
  safety zone-to-zone
  zone-pair security PAC-zp-self-out source destination outside zone auto
  type of service-strategy inspect PCB-permits-icmpreply
  zone-pair security PAC-zp-in-out source in the area of destination outside the area
  type of service-strategy inspect PCB - inspect
  source of PAC-zp-out-auto security area outside zone destination auto pair
  type of service-strategy inspect PCB-enabled
  sdm-zp-VPNOutsideToInside-1 zone-pair security source outside the area of destination in the area
  type of service-strategy inspect sdm-pol-VPNOutsideToInside-1
  !
  !
  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  ISAKMP crypto key address 194.105.xxx.xxx xxxxxxxxxxxx
  !
  !
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  !
  map SDM_CMAP_1 1 ipsec-isakmp crypto
  Description Tunnel to194.105.xxx.xxx
  the value of 194.105.xxx.xxx peer
  game of transformation-ESP-3DES-SHA
  match address VPN - ACL
  !
  !
  !
  !
  !
  interface BRI0
  no ip address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  encapsulation hdlc
  Shutdown
  Multidrop ISDN endpoint
  !
  ATM0 interface
  no ip address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  No atm ilmi-keepalive
  !
  point-to-point interface ATM0.1
  Description $ES_WAN$
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  PVC 0/38
  aal5mux encapsulation ppp Dialer
  Dialer pool-member 1
  !
  !
  interface FastEthernet0
  !
  interface FastEthernet1
  !
  interface FastEthernet2
  !
  interface FastEthernet3
  !
  wlan-ap0 interface
  description of the Service interface module to manage the embedded AP
  IP unnumbered Vlan1
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  ARP timeout 0
  !
  interface GigabitEthernet0 Wlan
  Description interface connecting to the AP the switch embedded internal
  !
  interface Vlan1
  Description $ETH - SW - LAUNCH, INTF-INFO-HWIC $$ $4ESW $FW_INSIDE$
  the IP 10.0.0.1 255.255.255.0
  IP access-group 104 to
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  IP nat inside
  IP virtual-reassembly
  Security members in the box area
  IP tcp adjust-mss 1452
  !
  interface Dialer0
  Description $FW_OUTSIDE$
  IP address 81.142.xxx.xxx 255.255.xxx.xxx
  IP access-group 101 in
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  NAT outside IP
  IP virtual-reassembly
  outside the area of security of Member's area
  encapsulation ppp
  Dialer pool 1
  Dialer-Group 1
  Authentication callin PPP chap Protocol
  PPP chap hostname xxxxxxxxxxxxxxxx
  PPP chap password 7 xxxxxxxxxxxxxxxxx
  No cdp enable
  map SDM_CMAP_1 crypto
  !
  IP forward-Protocol ND
  IP http server
  23 class IP http access
  local IP http authentication
  IP http secure server
  IP http timeout policy slowed down 60 life 86400 request 10000
  !
  !
  IP nat inside source overload map route SDM_RMAP_1 interface Dialer0
  IP route 0.0.0.0 0.0.0.0 Dialer0
  !
  SDM_AH extended IP access list
  Note the category CCP_ACL = 1
  allow a whole ahp
  SDM_ESP extended IP access list
  Note the category CCP_ACL = 1
  allow an esp
  SDM_HTTP extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq www
  SDM_HTTPS extended IP access list
  Note the category CCP_ACL = 0
  permit any any eq 443 tcp
  SDM_SHELL extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq cmd
  SDM_SNMP extended IP access list
  Note the category CCP_ACL = 0
  allow udp any any eq snmp
  SDM_SSH extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq 22
  SDM_TELNET extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq telnet
  scope of access to IP-VPN-ACL list
  Note ACLs to identify a valuable traffic to bring up the VPN tunnel
  Note the category CCP_ACL = 4
  Licensing ip 10.0.0.0 0.0.0.255 192.168.xx.0 0.0.0.255
  Licensing ip 10.0.0.0 0.0.0.255 10.128.xx.0 0.0.255.255
  Licensing ip 10.0.0.0 0.0.0.255 160.69.xx.0 0.0.255.255
  !
  recording of debug trap
  Note category of access list 1 = 2 CCP_ACL
  access-list 1 permit 10.0.0.0 0.0.0.255
  access-list 23 allow 193.195.xxx.xxx
  Note access-list 23 category CCP_ACL = 17
  access-list 23 permit 192.168.xx.0 0.0.0.255
  access-list 23 allow 10.0.0.0 0.0.0.255
  Access-list 100 category CCP_ACL = 128 note
  access-list 100 permit ip 255.255.255.255 host everything
  access-list 100 permit ip 127.0.0.0 0.255.255.255 everything
  access-list 100 permit ip 81.142.xxx.xxx 0.0.0.7 everything
  Access-list 101 remark self-generated by SDM management access feature
  Note access-list 101 category CCP_ACL = 1
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq 22
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq 443
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq cmd
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq telnet
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq 22
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq www
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq 443
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq cmd
  access-list 101 deny udp any host 81.142.xxx.xxx eq snmp
  access-list 101 permit ip 160.69.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 101 permit ip 10.128.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 101 permit ip 192.168.xx.0 0.0.0.255 10.0.0.0 0.0.0.255
  access-list 101 permit udp host 194.105.xxx.xxx host 81.142.xxx.xxx eq non500-isakmp
  access-list 101 permit udp host 194.105.xxx.xxx host 81.142.xxx.xxx eq isakmp
  access-list 101 permit host 194.105.xxx.xxx host 81.142.xxx.xxx esp
  access-list 101 permit ahp host 194.105.xxx.xxx host 81.142.xxx.xxx
  access list 101 ip allow a whole
  Note access-list 102 CCP_ACL category = 1
  access-list 102 permit ip 192.168.xx.0 0.0.0.255 everything
  access-list 102 permit ip host 193.195.xxx.xxx all
  access-list 102 permit ip 10.0.0.0 0.0.0.255 any
  Note access-list 103 self-generated by SDM management access feature
  Note access-list 103 CCP_ACL category = 1
  access-list 103 allow ip host 193.195.xxx.xxx host 81.142.xxx.xxx
  Note access-list 104 self-generated by SDM management access feature
  Note access-list 104 CCP_ACL category = 1
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq telnet
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq telnet
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 eq on host 10.0.0.1 22
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq 22
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq www
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 eq to host 10.0.0.1 www
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq 443
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq 443
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq cmd
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq cmd
  access-list 104 tcp refuse any host 10.0.0.1 eq telnet
  access-list 104 tcp refuse any host 10.0.0.1 eq 22
  access-list 104 tcp refuse any host 10.0.0.1 eq www
  access-list 104 tcp refuse any host 10.0.0.1 eq 443
  access-list 104 tcp refuse any host 10.0.0.1 eq cmd
  access-list 104 deny udp any host 10.0.0.1 eq snmp
  104 ip access list allow a whole
  Note access-list 105 CCP_ACL category = 128
  access-list 105 permit ip host 194.105.xxx.xxx all
  Note access-list 106 CCP_ACL category = 0
  access-list 106 allow ip 192.168.xx.0 0.0.0.255 10.0.0.0 0.0.0.255
  access-list 106 allow ip 10.128.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 106 allow ip 160.69.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  Note category from the list of access-107 = 2 CCP_ACL
  access-list 107 deny ip 10.0.0.0 0.0.0.255 160.69.0.0 0.0.255.255
  access-list 107 deny ip 10.0.0.0 0.0.0.255 10.128.0.0 0.0.255.255
  access-list 107 deny ip 10.0.0.0 0.0.0.255 192.168.xx.0 0.0.0.255
  access-list 107 allow ip 10.0.0.0 0.0.0.255 any
  Dialer-list 1 ip protocol allow
  not run cdp

  !
  !
  !
  !
  allowed SDM_RMAP_1 1 route map
  corresponds to the IP 107
  !
  !
  control plan
  !
  !
  Line con 0
  local connection
  no activation of the modem
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport of entry all
  line vty 0 4
  access-class 102 in
  privilege level 15
  local connection
  transport input telnet ssh
  !
  Scheduler allocate 4000 1000
  Scheduler interval 500
  NTP-Calendar Update
  130.159.196.118 source Dialer0 preferred NTP server
  end

  Hi Paul,.

  Here is the relevant configuration:

  type of policy-card inspect PCB-enabled

  class type inspect sdm-mgmt-cls-ccp-permit-0
  inspect

  
  

  type of class-card inspect sdm-mgmt-cls-ccp-permit-0 correspondence
  corresponds to the class-map sdm-mgmt-cls-0
  game group-access 103

  
  

  type of class-card inspect all match sdm-mgmt-cls-0
  corresponds to the SDM_SHELL class-map
  corresponds to the SDM_SSH class-map
  corresponds to the SDM_HTTPS class-map

  
  

  type of class-card inspect entire game SDM_SHELL
  match the name of group-access SDM_SHELL
  type of class-card inspect entire game SDM_SSH
  match the name of group-access SDM_SSH
  type of class-card inspect entire game SDM_HTTPS
  match the name of group-access SDM_HTTPS

  
  

  SDM_SHELL extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq cmd
  SDM_SSH extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq 22
  SDM_HTTPS extended IP access list
  Note the category CCP_ACL = 0
  permit any any eq 443 tcp

  
  

  Note access-list 103 self-generated by SDM management access feature
  Note access-list 103 CCP_ACL category = 1
  access-list 103 allow ip host 193.195.xxx.xxx host 81.142.xxx.xxx

  The above configuration will allow you to access the router on the 81.142.xxx.xxx the IP address of the host 193.195.xxx.xxx using HTTPS/SSH/SHELL. To allow network 192.168.16.0/24 access to the router's IP 10.0.0.1, add another entry to the access list 103 as below:

  access-list 103 allow ip 192.168.16.0 0.0.0.255 host 10.0.0.1

  This should take enable access to this IP address for hosts using ssh and https. Try this out and let me know how it goes.

  Thank you and best regards,

  Assia

• Access to the Console of Administration Mapviewer 12 c problem

  I try to install and configure Oracle Mapviewer 12 c (v12.1.3).  The installation seemed successful, but after the installation, I am unable to access the Console of Administration Mapviewer 12 c.  The default is Admin Console URL http://[host]:[port]/mapviewer.  I can reach the URL using a browser (Firefox, Chrome, IE), but the admin home page will not appear.  The browser just "turns its wheels"as it tries to load the page. " The image below is from Firefox

  Looking at the console of the developer of the browser (press F12) while the page loads, you can see browse the page of connection repeatedly (see image below).

  

  My environment consists of the following:

  (1) server OS: Linux (RedHat Enterprise 5.11) x86_64

  (2) oracle Weblogic Server 12 c - distribution "Oracle Fusion Middleware Infrastructure"

  According to the documentation, Oracle Mapviewer 12 c requires specific dependencies that will not provide generic install Weblogic Server (i.e. , http://www.oracle.com/technetwork/middleware/weblogic/overview/index.html,).  Instead, you must use the "Oracle Fusion Middleware Infrastructure" distribution, installation of weblogic server and all the dependencies required.

  The distribution of Oracle Fusion Middleware Infrastructure has been downloaded from the Oracle ADF OTN download page or leave cloud of delivery of the Oracle software.

  -Oracle ADF OTN download page: http://www.Oracle.com/technetwork/developer-tools/ADF/downloads/index.html

  -JAR file fmw_12.1.3.0.0_infrastructure_Disk1_1of1.zip

  (3) oracle Fusion Middleware MapViewer Version 12 c (12.1.3)

  -downloaded from http://www.Oracle.com/technetwork/middleware/MapViewer/downloads/index.html

  -JAR file is fmw_12.1.3.0.0_mapviewer.jar

  Following the instructions in the for Oracle Mapviewer 12 c E29624-02 User Guide (http://docs.oracle.com/middleware/1213/core/JIMPV/index.html), first of all, I have installed and configured Weblogic Server 12 c, in Mapviewer 12 c followed.

  I made two attempts of different installation:

  (a) I installed Mapviewer using the Universal Installer

  (b) I have manually deployed an EAR MapViewer exploded in WebLogic Server folder

  Two attempts produced the same results.

  Specifically, after installation and configuration of Mapviewer, I could check the Mapviewer version using the URL:

  http://[host]:[port]/MapViewer/omserver?getv=t

  Immediately access this URL resulted in the expected answer text string:

  Ver12.1.3_B140430.1010

  I could also successfully access the Weblogic administration Console (http://[host]:[port]/console) and confirm the Weblogic is running, and that Mapviewer was correctly deployment up and running as well.

  However, at this point, if I try to access the Console of Administration Mapviewer 12 c via http://[host]:[port]/MapViewer , the Console launch page does not appear (as described above).

  at this point, I wonder why the Oracle demo site works (http://slc02okf.oracle.com) and me does not work.  I assumed that the demonstration site for the Oracle Mapviewer used Mapviewer 12 c.  I based this assumption on the fact of demonstration site for this Orqacle (http://slc02okf.oracle.com/mvdemo/demo/oracle_maps_demo_v2.jsp) displays a header SEO Mapviewer 12 c (see image below).

  

  However, when I questioned the version of Oracle Demo site URL (i.e. ) http://slc02okf.Oracle.com/MapViewer/omserver?getv=t ), I see that they run Mapviewer 11 g!

  Ver11_1_1_7_3_B140717

  So, long story short, deployed anyone successfully Mapviewer 12 c and if so, can you access the Console of Administration Mapviewer 12 c?

  Any contribution is greatly appreciated.

  Wayne

  Hi Wayne,

  Please check that Java is used to start the WebLogic Server. If the JDK 8, try starting with JDK 7 to see if the spin connection problem is resolved.

  Thank you.

  João

• How to give some access to the system without giving local administrator access?

  Hello

  I'm looking for advice on how I can accomplish the following tasks without giving certain groups of rights of a local administrator on the server.

  • Ability to query the status of all Windows Services
  • Access WMI
  • Ability to read all the event logs
  • Ability of the State to the query of all services
  • Activation of remote PowerShell commands

  I need to give this kind of access to the servers are Windows Server 2008 R2, Windows Server 2008 Std Edition and Windows Server 2003.

  Advice and guidance would be greatly appreciated.

  Thanks in advance.

  Hello

  The question you have posted is better suited for the TechNet forums. Please post your question here.

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

• Program running as local administrator in Windows XP needs to access a network drive

  I just write a batch file to automatically run a program in Windows XP as a local administrator.  I had to do to get the program to work right.  However, the program cannot access network drives to save the files even if the user who is connected has access to these network resources.  How can I give an a running program as a Windows XP local administrator the possibility to access and back up the files on a network share?

  I found a solution for this.  I had to add the same user a local administrator on the server with network drives.  This solves the problem.

• Local administrator account and issue of local Group Policy permissions problem.

  You have a local administrator account where it was defined

  http://img26.imageshack.us/img26/5716/18112010133154.PNG

  I think preventing the admin account to remove or install devices.  This causes a problem.  Looks like it's AD GP as is grayed out and I can't add locally.  The network team claim there is no GPs AD to limit the admin account local they know of.

  Also, I try to use the process on the machine monitor, but who needs administrator rights and he repeats that the local administrator account is not a member of the Administrators group, but it is.

  Any ideas?  Even if it's just he Process Monitor bit setting?

  And looking at the photo can someone explain which means that icon next to load and unload device drivers.  It is different from the others and think that it is linked, may be trying to tell me that it is a strategy of AD Group.

  I talked to the networks, they said there is not together AD GP for this.  I used the local administrator account to create a new local administrator account and put it in the Administrators group.  Connected to it and it also has the same problem.

  Any ideas?

  The symbol, that you reference indicates that the setting has been locked by group policy and is not editable.  When I saw it in the past, the only way I could replace, it is using "secedit".  For more information about this command:
  Starting-> help and support-> Search: Secedit

  "Elephant Gun" approach might also work:

  "How to restore the security settings the default settings?
    <>http://support.Microsoft.com/kb/313222 >

  HTH,
  JW

• To access the PIX501 via HTTP

  I'm a little confused right now. I'm trying to config PIX501 accessmy & PDM via HTTP, but it's not working. Please see my config below. Thank you!

  6.3 (3) version PIX

  interface ethernet0 car

  interface ethernet1 100full

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  activate the password >

  passwd >

  fixup protocol dns-length maximum 512

  fixup protocol ftp 21

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol http 80

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol sip 5060

  fixup protocol sip udp 5060

  fixup protocol 2000 skinny

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol tftp 69

  names of

  pager lines 24

  debug logging in buffered memory

  Outside 1500 MTU

  Within 1500 MTU

  IP address outside dhcp setroute

  IP address inside 10.29.18.1 255.255.255.248

  alarm action IP verification of information

  alarm action attack IP audit

  location of PDM 10.29.18.0 255.255.255.248 inside

  PDM 100 debug logging

  history of PDM activate

  ARP timeout 14400

  Global 1 interface (outside)

  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

  Access-group outside-outside interface

  Route inside 10.128.40.0 255.255.255.240 10.29.18.2 1

  Timeout xlate 0:05:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  RADIUS Protocol RADIUS AAA server

  AAA-server local LOCAL Protocol

  Enable http server

  http 10.29.18.0 255.255.255.248 inside

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Telnet timeout 5

  SSH timeout 5

  Console timeout 0

  dhcpd outside auto_config

  Terminal width 80

  Hello

  Your PIX config has the following:

  Enable http server

  http 10.29.18.0 255.255.255.248 inside

  If you try to access the market SHARE of 10.128.40.0 255.255.255.240 then you must add this to your config as file:

  http 10.128.40.0 255.255.255.240 inside

  Your routing looks correct on the PIX, its delivery to 10.128.40.0 255.255.255.240 by what seems to be your SOHO router, so you should be able to ping the inside interface of the PIX

  If not add "icmp allow no matter what Interior"

  Rgds

  Paddy

• Windows cannot load the locally stored profile. Possible causes of this error include insufficient __security rights or a damaged local profile. If the problem persists, contact your network administrator. __

  Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a damaged local profile. If the problem persists, contact your network administrator.
  My documents are 'hidden' also

  xpconfused,
  This article explains how to solve problems with a corrupted profile. Article  After return your results. Mike - Engineer Support Microsoft Answers
  Visit our Microsoft answers feedback Forum and let us know what you think.

• How to set up a local administrator account with elevated privileges, but without the rights of local access connection

  I want workstation installation a Windows 7 where regular users only have power user rights, because I do not want that they either accidentally change important settings or for malicious to be processes able to run Web sites. However that these will be remote users there maybe times when they need a local administrator account to allow them to perform installation, correction or updating. So, I created a local user account, added to the Administrators group and used the Panel of local security policy and the account added to the list "Deny log on locally '.

  It works by refusing the admin account to connect directly. However when I log in under the power user account and run something that requires elevated privileges the admin account is refused to carry out the process.

  What is the combination of security settings can I refuse a desktop session Admin account but allows it to be used for processes requiring elevated privileges?

  Thank you!

  Hello

  Thank you for contacting Microsoft Community.
  This is quite normal. When you refuse the privileges of local access connection, local users can not use the administrator account information because it is be the local login. So, it is better to create a domain and restrict the use of administrative operations to the administrator.

• I can't access the administration user who has local administrator controls and everything that happens is my username at the start who has administrator rights but permissions administrator space

  This is compared to Windows 7

  In Windows 7, all administrator accounts are equal. There is none who are more equal than others (with apologies to George Orwell). What makes you think that you don't have local administrator access? Be specific!

• The administration server is not reachable from the node target via HTTP (S)

  Hi all
  
  I tried add Host in Oracle 12 c. I previously added Linux host OS, but I couldn't add OS AIX in 12 c. I did the auto update for Agent of AIX. You can find my OS and DB info on below.
  
  Server Oracle 12 c - OS is SunOS 5.10
  Client host Oracle 11.2.0.1.0 - OS is AIX
  
  During the installation, I got this error message "the administration server is not reachable from the node target via HTTP (S). In topology, we do not use any firewall... As I said I've added Linux and SunOS but AIX does not...
  
  How can I solve that?
  
  B.R

  You already mentioned the metalink note? Otherwise please see note

  EM 12: Agent deployment fails with error "the administration server can be reached from the node target via HTTP (S)" [1393450.1 ID]

  Kind regards
  http://www.oracleracexpert.com
  Remove the grid or the repository targets control agents
  http://www.oracleracexpert.com/2010/06/remove-grid-control-agents-or-targets.html
  Tablespace transportable export and import on the same Endian platforms
  http://www.oracleracexpert.com/2009/08/transportable-tablespace-export-import.html

• Phone book access via HTTP/s C60

  Hello world

  I have set up a phonepook through TMS (manual list) and provide this to several endpoints.

  Then I've linked to the HTTPS endpoint, but I do not see the telephone directory.

  is it possible to see the Yearbook of the C series via http?

  Thank you

  Stefan

  The question is in IIS.

  On the TMS server, open IIS and expand the default Web page, then the MST file, and then follow these steps:

  I guess it's an iis 7.5 and Windows 2008 server

  Click the Public folder

  Click on authentication

  Disable Windows authentication

  Disable Basic authentication

  Enable anonymous authentication

  Try to get new directory.,.

  My guess is it does not work for the MXP either because MXP is caching the entires so what you see is updated information in cache...

  / Magnus

• Change sharing permissions, now I can't access the local disk

  Hello all, I have two computers, both running windows 7 (one is 64-bit and the other is 32-bit) connected via LAN and WiFi. One of them has all of the local disk shared with full compensation for everyone (full control). I decided to remove these permissions and control to "deny". Then I had to cancel the task and decided to resume later. HURT, now I've lost access to this drive, even though I can access some files. When I try to enter in the drive, an error message appears saying "C: is not accessible. Access is denied. I did some research and it seems to be a common problem, but I followed all the steps did not work. It shows as 0 bytes and security options does not show anything, but "you don't have permission to view or change the permissions of the object settings. I tried to adapt, even in safe mode and as administrator, do not to prevail. It keeps saying 'access denied' I also tried to set a hidden administrator account, but the account manager is 'not available for my system' when I made these unfortunate changes, it was not this computer but on the other, I think it might be the reason. Now, I can not access my local disk or change anything. Please, help me, I can't find a solution to this mess!
  Thank you

  Hello

  I suggest you to follow the steps in the link given below and check if it helps.

  How to open a file if I get an access denied message?

  http://Windows.Microsoft.com/en-CA/Windows7/how-do-i-open-a-file-if-i-get-an-access-denied-message

  Let us know the status of the issue.

• What would prevent a local administrator to change the local policies?

  The problem occurred on a workstation XP (svc pk 3) within a W2K3 domain. It is the only station working (103 others) which I can't distance in via mstsc since my post (also under XP svc pk 3). I went (work to) the workstation and connected as a local administrator, and then have pulled-up gpedit so that I could change the local user rights policy for "Refusal to logon via the Terminal Services" to remove the Everyone group. But the two buttons are grayed (add user or group, and delete). After reviewing several other local policy settings, I found that they also had their gray button. I then tried the same thing connected as a domain administrator. No joy. The same problem. I couldn't change the local policy settings through my domain administrator account or the local administrator account. So I checked the default domain and all policy policies assigned to the ORGANIZATIONAL unit in which resides the problem workstation account. All of these policies had the "Deny logon via the Terminal Server Services of' value 'undefined '.  Is it possible that one of our administrators changed the permissions on a registry key where the policy settings so that only he could change local policy on this box? Or is there another explanation?

  I found the solution. I had to give administrators complete control over HKLM\SECURITY. Once I made this change I could once more change local policy. Now, I need to implement a method to push this change for all our workstations...

  ICACLS?

• How to reset the Local administrator password in Windows Server 2008

  Original title: reset Local Administrator

  How can I reset all my password of Local administrator using a GPO on windows server 2008

  Hey isaberthe,

  Just for future reference, all the problems of Windows Server goes to TechNet forum. Microsoft Answers support only consumer related research. You can find professional support services in TechNet forum.

  Here is the link from TechNet:

  Windows Server forums

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  Kind regards

  Shinmila H - Microsoft Support

  Visit our Microsoft answers feedback Forum and let us know what you think.