SecurityFocus

w2k server compromised Jan 23 2003 08:16AM
Dan Uscatu (duscatu lunatech ro) (4 replies)

RE: w2k server compromised Jan 24 2003 07:59AM
Laura A. Robinson (larobins bellatlantic net)

LDIFDE or CSVDE, although they just do text dumps of the configuration and
accounts and won't maintain SIDs. You could use ADMT v2 to migrate from the
infected domain into a clean domain, and it does migrate passwords.

Laura

> -----Original Message-----
> From: Dan Uscatu [mailto:duscatu (at) lunatech (dot) ro [email concealed]]
> Sent: Thursday, January 23, 2003 3:17 AM
> To: focus-ms (at) securityfocus (dot) com [email concealed]
> Subject: w2k server compromised
>
>
> hey all
>
> i just found one of the w2k servers to be infected and acting
> very strangely. unfortunately it is a domain controller and
> it has all the users/computers lists.
>
> how can i export these before reinstall in order to keep the
> exact same configuration (everything except passwords of
> course) ? i suppose this could be usefull to be done on a
> regular basis too...
>
> TIA
>
>

[ reply ]

Re: w2k server compromised Jan 24 2003 01:31AM
H C (keydet89 yahoo com)

Re: w2k server compromised Jan 23 2003 10:14PM
Kurt Seifried (bt seifried org)

RE: w2k server compromised Jan 23 2003 10:07PM
james leafgrove com (James D Stallard) (1 replies)

IIS 5.0 and Digest Authentication Jan 27 2003 02:53PM
Sarbjit Singh Gill (ssgill gilltechnologies com) (1 replies)

RE: IIS 5.0 and Digest Authentication Jan 29 2003 04:31AM
dave (dave netmedic net)