Windows

Remove NDIS firewall filter (McAfee Internet Security)

Posted on by Andy

A component of McAfee's Internet Security Suite, the McAfee Firewall Network Filter Miniport is a firewall adapter that blocks unwanted users from accessing your computer and Internet connection. The firewall adapter is installed within your computer's configuration and can cause issues with virtual private networks (VPN), email applications, peer-to-peer applications and other programs that are trying to access your computer's Internet connection. You can remove the McAfee Firewall Network Filter Miniport and keep the McAfee Internet Security Suite installed on your computer system.

  1. run the windows terminal:
    Start -> Run -> type "cmd" and press Enter
  2. stop McAfee Host instrusion Prevention:
    type "NET STOP enterceptagent" in the terminal
  3. stop McAfee Miniport Driver:
    type "NET STOP firepm" and press Enter
  4. change to directory where the driver lies:
    type "cd Program Files\McAfee\Host Intrusion Prevention\inf\" and hit Enter
  5. remove ndis network driver:
    type "installfirehk /u"
  6. restart the host intrusion prevention service:
    type "NET START enterceptagent" and hit Enter

That should be all. Maybe you need to restart your computer to get rid of all temporary files.

(source)

Map unix group to a windows domain group

Posted on by Andy

Hello world,

here my scenario: i have a webdevelopment server as a domain member and i need the apache user in one of the domain groups so that apache can access readable and writeable files by the webdev group. The problem now is that you can't add unix users to a windows group because the unix user doesn't exist on the windows machine. BUT: you can map an existing unix group to an existing windows group so that the unix group is like an alias for the windows one and add the unix user to that group… and it is quite easy.

Let's say you have group1 on windows and domgroup1 on unix. Here is how to do it:

create a new unix group
# groupadd domgroup1

now map the groups
# net groupmap add ntgroup="group1" unixgroup="domgroup1" type=domain

list the mapped groups
# net groupmap list

now restart samba
# /etc/init.d/smb restart

The only thing left you have to do now is to add the user add to your domgroup1 in /etc/group

Roaming profiles permissions

Posted on by Andy

Hi again, when i installed a windows 2008 server and configured the roaming folders for domain users, the permissions were wrong and the folders were not created automatically. So here is a basic overview of some working permissions:

NTFS-Level permissions:

Windows User Account Minimum permissions required
Creater/Owner Full Control, Subfolders And Files Only
Administrator None
Security group of users needing to put data on share List Folder/Read Data, Create Folders/Append Data – This Folder Only
Everyone No Permissions
Local System Full Control, This Folder, Subfolders And Files

SMB-Level permissions:

Windows User Account Default Permissions Minimum permissions required
Everyone Full Control No Permissions
Security group of users needing to put data on share N/A Full Control

Following NTFS permissions are set automatically when the folder is created:

Windows User Account Default Permissions Minimum permissions required
%Username% Full Control, Owner Of Folder Full Control, Owner Of Folder
Local System Full Control Full Control
Administrators No Permissions No Permissions
Everyone No Permissions No Permissions

for more information check here.