Active Directory Archives - ADSploit

The password does not meet the password policy requirements.Exception from HRESULT: 0x800708C5

Fri, 04 Jan 2019 12:30:50 +0000

Error while changing the AD user password (Change required in GPO policy)

You will get this error while changing the password of Active Directory user directly by using native AD tool or from Cionsystems Enterprise SelfService or ADMPRO Applications.

Resolution : In Domain control “Default Domain Policy “ Set the “Minimum password age” to 0

Follow the below steps for details (Image attach for reference)

In Windows server 2008R2 Start -> Run -> gpmc.msc

Go to Domains -> domainName(cionsystems.com) -> Select Default Domain Policy , right click and edit

Select Computer Configuration -> Policies -> Windows Settings ->Security settings -> Account Policies -> Passowrd Policy -> Set “Minimum password age” to 0

Open Command prompt as administrator gpupdate/force

CionSystem Selfservice Password reset

The post The password does not meet the password policy requirements.Exception from HRESULT: 0x800708C5 appeared first on ADSploit.

Active Directory Manager Pro version 5.0

Tue, 24 Jun 2014 15:14:12 +0000

Active Directory Manager Pro 5.0 brings significant enhancements to an already impressive array of capabilities. The ADM PowerShell Console allows users to create, run, save, and modify scripts. The PowerShell scripting workspace lets users create or leverage existing office365, AD, Local exchange and Exchange online.

Many new compliance and governance centric features are now part of Active Directory Manager Pro 5.0, including attestation for user and groups, date range bounded reports, de-provisioning, and more!

Active Directory Manager Pro 5.0 supports all LDAP capable directory services, such as OpenLDAP, Radiant Logic, ViewDS, Novel, IBM Security Directory Server, and any other LDAP compliant service or server. Active Directory Manager Pro 5.0 includes a separate LDAP console for persisting connections and search filters, as well as performing object creation, modification, and deletion. This includes operations on groups and their memberships.

The Search & Manage, options now exist to search accounts based on date ranges. Other search enhancements include wildcard searches, searching deleted objects in the archive and searching for data in reports.

User management and reporting now include last Login and primary group. Further, SID history is now be removed, supporting security hardening and migration activities.

Active Directory Manager Pro 5.0 now supports provisioning and de-provisioning. There is also a csv based de-provisioning capability. Additional Enhancements include enhanced detail in the displays and reports, searchable reports, enhanced schema management functionality, the ability to scope access based on OU, customizable dashboards, and OU based workflows.

Active Directory Manager Pro 5.0’s significantly expanded Exchange 2010 & 2013 management’s new capabilities include:

Connect mailbox
New MailboxExportRequest
Resume MailboxExportRequest
Remove Mailbox Export Request
List MailboxExportRequest
Resume Move Request
Remove Move Request
List Move Request
Get mailbox permissions
Manage mailbox permissions
Get Active Directory permissions
Enable mail contact
Manage mail contact email addresses
Disable mail contact
Remove mail contact
List mail contacts
List contacts
Edit distribution group
Disable distribution group
Remove distribution group
Remove distribution group member
Clear Mailbox Database
List mailbox databases

Management of workstations and member servers:

Create directory (file system)
Get file/directory information
Copy directory
Rename file or directory
Delete file(s)
Delete directory
Create share
Edit share
Delete share
List files and/or directories
Execute service command
Configure service
List printer documents
Execute print job command

User management:

Remove SID history
Get primary group

Generic LDAP workspace:

Option to delete directory object on search result of LDAP query
Option to save and execute LDAP queries.
Allow people to add their own “filters” for generating reports
Modify, create, delete, enable, disable and other functions

Powershell workspace:

Option to save and execute scripts
Share scripts with others
Sample scripts

Reports:

Report for any LDAP filter
Users Not Logged On report
OU based search and reports based on date range
User last login based on date range
Users that were recently added to a specific group
Users that were recently removed from a group
Recently modified groups
All accounts with admin privileges
Permissions for specific printers
Permissions for all printers
OU search based on delegated user
Recently created groups
All Managers report
Smart card enabled users report
Users with change Password at next Logon report
Detailed Group Members Reports
Users Only members of Domain Users Group report
Recently created computers report
Users without mailbox Report
Default Receiving message size report
Default storage Limit report
OMA Disabled report
POP3 Enabled report
IMAP4 Enabled report
Active Sync Enabled report
Active Sync Disabled report
Open Group Join Restriction distribution Groups report
Closed Group Join Restriction distribution Groups report
Approval Required Members Join Restriction distribution Groups report
Users with terminal service Access report
Permission for folders report
Server permissions report
Subnet permissions report
Servers accessible by accounts report
Subnets accessible by accounts report
Recently created contacts report
Recently deleted contacts report
Recently modified contacts report
Generating file share permission report using PowerShell
Permissions(trustee) of an object
Active Directory Object ownership report
Send-As and Allowed to Authenticate report
Nested Groups report
In Computer Reports, IE, Java, Installed Patches and Details report
Logon report
Report for Store password Using Reversible Encryption
Several new reports in Security report section. For example, Full Control Permission Objects, Non-inheritable Objects, List all Permissions of Group, Access Control list of forest, Non-inheritable folder and files.
All user Details (brings all information for a user)

The post Active Directory Manager Pro version 5.0 appeared first on ADSploit.

CionSystems Releases New Version of its Active Directory Manager Pro

Wed, 13 Jan 2010 23:32:00 +0000

We released the newest version of its application, Active Directory Manager Pro, which works with Microsoft Windows Server® 2008 R2 to offer customers enhanced security, as well as innovative user interface features and reliability improvements. The Active Directory Manager Pro is an affordable and comprehensive web-based application that greatly improves and automates User Provisioning, Deprovisioning and AD management. Managers can view, approve changes, and manage the full user lifecycle, along with automating tasks and generating reports on the Active Directory environment without using any scripts. Making our application compatible with Microsoft Windows Server 2008 R2 helps us offer our customers compelling benefits, including lowering TCO for Windows Server and AD administration, and improved security.

The post CionSystems Releases New Version of its Active Directory Manager Pro appeared first on ADSploit.

Removing Windows SharePoint Services 3.0

Wed, 02 Dec 2009 18:47:47 +0000

As Sharepoint becomes mainstream, sometimes is nice to remember the little things. Recently we had a case where we had to do just that. We removed Sharepoint Services 3.0 and reinstaled it, only to notice the same info on the webpage. We did a little digging and came across an article from Microsoft pointing out that when removing Sharepoint Services 3.0, you have to manually remove the Windows Internal Database. With this version, there’s no way to remove it through the GUI and no user notification, so you have to use the msiexec.exe command to do it.
If you are running an x86-based edition of Microsoft Windows Server 2003, use the following command line to remove Windows Internal Database from the computer:
msiexec /x {CEB5780F-1A70-44A9-850F-DE6C4F6AA8FB}
CALLERID=ocsetup.exe
If you are running an x64-based edition of Windows Server 2003, use the following command line to remove Windows Internal Database from the computer:
msiexec /x {BDD79957-5801-4A2D-B09E-852E7FA64D01}
CALLERID=ocsetup.exe
The full Microsoft article (KB920277) can be found here.

The post Removing Windows SharePoint Services 3.0 appeared first on ADSploit.

Group Policy Settings References for Windows Server

Mon, 14 Sep 2009 17:04:40 +0000

Microsoft policy settings for computer and user configurations included in the Administrative template files delivered with the Windows operating systems specified. You can configure these policy settings when you edit Group Policy objects (GPOs).
These spreadsheets include the following categories of security policy settings: Account Policies (Password Policy, Account Lockout Policy, and Kerberos Policy), Local Policies (Audit Policy, User Rights Assignment, and Security Options), Event Log, Restricted Groups, System Services, Registry, and File System policy settings. The spreadsheets do not include security settings that exist outside of the Security Settings extension (scecli.dll), such as Wireless Network extension, Public Key Policies, or Software Restriction Policies.
http://tinyurl.com/ljxtvn

The post Group Policy Settings References for Windows Server appeared first on ADSploit.

Real Time Event Notifications

Fri, 11 Sep 2009 18:36:21 +0000

IT admins don’t want small problems to snowball into an issue that can cause severe damage to a company’s infrastructure and Active Directory. They need a robust alert mechanism which identifies any threats in REAL TIME. Most IT organizations are unaware of the changes until something breaks. This leads to downtime, loss of productivity, and higher cost. Becoming proactive and more aware is part of the overall IT optimization strategy.
Consider this scenario: An administrative account in Active Directory has been hacked or accessed by someone with malicious intent and you as the administrator of the network are not aware. Logging into an administrative account is an activity that is very critical and ignoring it could result in irreparable damage to your network security.
A reporting solution while outlining what happened and when, will do so after considerable time has passed, when it could be too late to be acted upon. The usual audit solutions will help you outline and analyze who made changes to what- after you’ve discovered the damage. What is needed is a proactive approach to AD security- a product that will let you know Who made What changes When and Where, in REAL TIME. For such a product to work accurately, it cannot and should not rely only on Even Log information. The most reliable info is in Active Directory. The best solution in this case is to pull the data from both. Other changes in Active Directory might not necessarily require an administrators’ intervention, so adequate filtering is also needed.
Unmanaged changes are a problem in every company. They are THE primary cause of outages. If they are not prevented, the company will fail a security audit. However, even planned changes should be monitored to ensure that policies are being followed. Active Directory Change Notifier allows IT administrators to configure (define) alerts for one or more desired Active Directory events. Any alert is then delivered to the mailbox of intended recipients.
Active Directory Change Notifier is a flexible, scalable, easy to use application that will help you with your day-to-day activities. This application is part of our Active Directory solutions that are designed to simplify your IT environment and enable you to work better, faster, and more efficiently.

The post Real Time Event Notifications appeared first on ADSploit.

CionSystems named Startup of the Day by Microsoft

Sat, 18 Jul 2009 00:15:38 +0000

CionSystems has been selected as a 2009 Microsoft Startup of the Day. The company was chosen out of an international field of startups as delivering market-leading customer solutions built on Microsoft technology. Building affordable and secure Active Directory management applications for the Windows infrastructure has been the focus from the beginning. “We are honored and excited to be recognized by Microsoft. We see this as a great opportunity to showcase our company, products, and an excellent validation of our approach and hard work. As a pioneering technology company, Microsoft knows what it takes to be a successful in the marketplace,” said Zubair Ansari, CTO. CionSystems is a Gold-level member of the Microsoft Partner Program.

The post CionSystems named Startup of the Day by Microsoft appeared first on ADSploit.

Administrative Security Risks

Thu, 16 Apr 2009 22:54:45 +0000

IT personnel cannot effectively manage their infrastructure without admin-level access. But with gaining this access comes great responsibility. Most companies do not effectively allocate their resources or implement enough technology tools to prevent information security risks. Often enough the response to countless regulations is to concentrate on building controls against external and internal business users, while ignoring IT administrators who more often than not have access to information well beyond the scope of their jobs. Recent damaging and costly incidents (UBS, City of San Francisco) prove that companies in any vertical industry, and of any size can be affected.

Giving administrators unlimited system authority is a reality for the foreseeable future, especially in SMB organizations that cannot afford Enterprise-level solutions. Traditional controls are ineffective against administrators armed with full access to all resources. Controlling administrative authority risks is key, and protecting the integrity of the company’s Active Directory is paramount- this is recognized as a vital piece of any organization’s security strategy. A domain administrator in an Active Directory forest can gain root access to any other domain (and therefore member system) in the forest.

Having sufficient separation between the AD administrators and other IT personnel has its own special set of challenges. The best ways of meeting these challenges differ according to an organization’s size. Small and midsized organizations often lack dedicated IT security staff. In those organizations, IT professionals are already busy keeping many different technologies operational. Other small or midsized organizations may employ an information security officer but that individual is often a generalist and frequently lacks the time or technical knowledge to manage this process. Large enterprises generally have dedicated staff to ensure this separation, but they end up overloaded by unnecessary fragmentation. Organizations in any one of these situations can benefit from the role delegation available in the Active Directory Manager. This application will allow the creation of specific roles, accessing specific containers, objects or reports within AD- depending on specific job functions. IT users can be assigned to these roles and thus maintain the separation between HelpDesk, system admins, IT generalists, etc. The Active Directory Manager reduces administrative costs by providing a dynamically configured and customized Web-based interface for each job function. IT personnel have access only to the resources necessary to perform their job function and nothing else. Thus a tighter security policy can be implemented- one that will reduce the threat and impact derived from the actions of rogue IT personnel and mitigate the information security risks.

The post Administrative Security Risks appeared first on ADSploit.

Identity and access management

Sun, 22 Mar 2009 07:02:26 +0000

Access control is often discussed as part of identity and access management (IAM). This is a market that has grown during the past few years thanks to more and more organizations wanting to satisfy compliance requirements. Better access control is needed- not just for compliance, but also to address vulnerabilities and safeguard against malicious acts. For example- on January 24, 2008, a rogue trader at Société Générale in France placed $7.2 billion in fraudulent trades. He had built up positions worth more than $73 billion—more than the bank’s estimated market value of $50 billion. How could such massive fraud occur at the second-largest bank in France? “Very clearly, some internal control procedures didn’t work,” said Christine Lagarde, France’s Finance Minister, after the investigation. A couple of more examples: More than $12 was million lost when an administrator planted logic bombs that destroyed critical programs at Omega Engineering. $2.5 million of intellectual property was lost when an administrative assistant at “Steven E. Hutchins Architects” deleted seven years’ worth of architectural drawings. She used her own credentials to access the server where the drawings were stored.
Every company has to identify all the sensitive data in the organization and regularly audit access to it. Without that, there is no way to know just how much the company has already lost to insider attacks or how much will potentially be lost.The 2007 E-Crime Watch Survey reports that “unauthorized access to/use of corporate information, systems or networks was the most common insider crime. In several cases, having a role distribution policy in place would have prevented the malicious acts. Consider the access to the network and to user accounts, where junior-level administrators have access to the network and to user accounts, so they can reset passwords, restart servers, and perform other administrative tasks. Or the superuser accounts that can bypass system controls to access or destroy sensitive information. Or the unauthorized access to an application using a stolen password to a privileged account.
Having solid procedures in place can prevent events that can have disastruous consequences. “It is important that organizations are proactive in their approach to mitigating insider threats,” says Dawn Cappelli, Senior Member of the Technical Staff at CERT. CionSystems’ Active Directory management suite can help. Real-time notifications, in-depth reporting, granular password management tools and role-based delegation will help control insider access and mitigate risk.

The post Identity and access management appeared first on ADSploit.

Configuring Wireless settings with Group Policy

Tue, 10 Mar 2009 08:01:24 +0000

Active Directory can be used to manage Wireless configurations and can really help remote users leverage wireless. I recently read a great article about this on TechRepublic and although Derek is using the GPMC, other third party applications like the Active Directory Manager can be used for Group Policy creation and management.

The post Configuring Wireless settings with Group Policy appeared first on ADSploit.