A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

dns question



 
 
Thread Tools Display Modes
  #1  
Old June 26th 10, 04:40 PM posted to microsoft.public.windowsxp.security_admin
thebluefox
external usenet poster
 
Posts: 7
Default dns question

Greetings,

I have recently had an issue with the dns address on a windows xp
professional workstation... some background.

I have a windows domain environment, with sbs server 2003 R2 and 20 XP
pro workstations.

My work stations point to the server for DNS in the network settings
tcp/ip dialog box. My ip's are all static, as well as the gateway.

A recent virus/malware renamed the dns address to some address in
russia. how can I lockdown the dns settings so that no program,
malware, etc. can make changes to it. I assume something at the server
level in group policy can handle this, but need some help in getting
there. Anything is greatly appreciated. Thanks.


-thebluefox
Ads
  #2  
Old June 26th 10, 04:52 PM posted to microsoft.public.windowsxp.security_admin
Shenan Stanley
external usenet poster
 
Posts: 10,523
Default dns question

thebluefox wrote:
I have recently had an issue with the dns address on a windows xp
professional workstation... some background.

I have a windows domain environment, with sbs server 2003 R2 and 20
XP pro workstations.

My work stations point to the server for DNS in the network settings
tcp/ip dialog box. My ip's are all static, as well as the gateway.

A recent virus/malware renamed the dns address to some address in
russia. how can I lockdown the dns settings so that no program,
malware, etc. can make changes to it. I assume something at the
server level in group policy can handle this, but need some help in
getting there. Anything is greatly appreciated. Thanks.



Since the user who got infested had to have administrative rights in order
to make such changes - your answer is that you cannot. Take away
administrative rights and do not use the computer daily with such rights.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


  #3  
Old June 26th 10, 10:26 PM posted to microsoft.public.windowsxp.security_admin
VanguardLH[_2_]
external usenet poster
 
Posts: 10,881
Default dns question

thebluefox wrote:

Greetings,

I have recently had an issue with the dns address on a windows xp
professional workstation... some background.

I have a windows domain environment, with sbs server 2003 R2 and 20 XP
pro workstations.

My work stations point to the server for DNS in the network settings
tcp/ip dialog box. My ip's are all static, as well as the gateway.

A recent virus/malware renamed the dns address to some address in
russia. how can I lockdown the dns settings so that no program,
malware, etc. can make changes to it. I assume something at the server
level in group policy can handle this, but need some help in getting
there. Anything is greatly appreciated. Thanks.

-thebluefox


See replies to your same MULTI-posted message in the other newsgroups
(and now you get to try to figure out where you multi-posted whereas if
you had cross-posted then you wouldn't have to go check the other
newsgroups).
  #4  
Old June 28th 10, 08:18 PM posted to microsoft.public.windowsxp.security_admin
Sy Kosis
external usenet poster
 
Posts: 12
Default dns question


:
: See replies to your same MULTI-posted message in the other newsgroups
: (and now you get to try to figure out where you multi-posted whereas if
: you had cross-posted then you wouldn't have to go check the other
: newsgroups).

More of your pretentious condescension.


  #5  
Old June 29th 10, 07:06 PM posted to microsoft.public.windowsxp.security_admin
Twayne[_3_]
external usenet poster
 
Posts: 1,073
Default dns question

In ,
Sy Kosis typed:
See replies to your same MULTI-posted message in the other
newsgroups (and now you get to try to figure out where you
multi-posted whereas if you had cross-posted then you
wouldn't have to go check the other newsgroups).


More of your pretentious condescension.


That advice is dead-on correct.

--
--
http://www.blakjak.demon.co.uk/mul_crss.htm




--
--
http://en.wikipedia.org/wiki/Cross_posting
and
http://en.wikipedia.org/wiki/Crossposting





 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 12:26 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.