SunQuest
 
           Windows Security
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
 
User Name:
Password:
Remember me
Go Back   ASP Free ForumsSystem AdministrationWindows Security

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread ASP Free Forums Sponsor:
Be the architects of evolution and help create the mobile internet future. It’s your move---enter to win here!
  #1  
Old February 27th, 2007, 11:15 AM
kingsvball kingsvball is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Feb 2007
Posts: 3 kingsvball User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 29 m 6 sec
Reputation Power: 0
Windows Security Wizard on a Cluster server

Hi,

I am trying to apply a security policy on a windows 2003 r2 x64 cluster server using the windows security wizard. but when i try to apply the policy it fails. it comes up with the following error:

Error configuring C:\ WINDOWS\security\msscw\ConfigureFiles\Services.inf Access is denied.

The access to that folder allows read/write/execute for local administrators. so thats not the problem

The policy works fine on other non cluster servers.

Any ideas??

Thanks

Reply With Quote
  #2  
Old February 27th, 2007, 02:07 PM
Doug G Doug G is offline
Grumpier Old Moderator
ASP Free God 11th Plane (10000 - 10499 posts)
 
Join Date: Sep 2003
Posts: 10,143 Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 3 Weeks 4 Days 19 h 31 m 41 sec
Reputation Power: 180
I know nothing about clustering, but as a guess is there a domain involved where you may need to add a particular domain account access?
__________________
======
Doug G
======
I didn't attend the funeral, but I sent a nice letter saying I approved of it. --Mark Twain

Reply With Quote
  #3  
Old February 28th, 2007, 02:51 AM
kingsvball kingsvball is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Feb 2007
Posts: 3 kingsvball User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 29 m 6 sec
Reputation Power: 0
It is on a domain, i have tried using local user accounts and domian admins that have been added to the administrators group on the server.

Reply With Quote
  #4  
Old February 28th, 2007, 03:27 PM
Doug G Doug G is offline
Grumpier Old Moderator
ASP Free God 11th Plane (10000 - 10499 posts)
 
Join Date: Sep 2003
Posts: 10,143 Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 3 Weeks 4 Days 19 h 31 m 41 sec
Reputation Power: 180
Sorry, your problem is out of my area of knowledge, perhaps a clustering guru will jump in.

Reply With Quote
  #5  
Old March 5th, 2007, 06:30 AM
N.Own N.Own is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2007
Posts: 1 N.Own User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 4 m 42 sec
Reputation Power: 0
Hello,

be carefull when applying security templates to cluster nodes.

The following rights have to be granted to the cluster service account:
KB 269229

It is not recommended to apply standard security templates to cluster nodes (hisec template e.g.).

hth

Reply With Quote
  #6  
Old March 6th, 2007, 06:54 AM
kingsvball kingsvball is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Feb 2007
Posts: 3 kingsvball User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 29 m 6 sec
Reputation Power: 0
Thanks,

Is there any other way of replicating what the security wizard does without going through every service and manually changing the state and manually blocking or permitting ports?

Thanks again

Reply With Quote
Reply

Viewing: ASP Free ForumsSystem AdministrationWindows Security > Windows Security Wizard on a Cluster server


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 4 hosted by Hostway