Recommended Posts

Group Policy Management Console

Account Lockout and Management Tools

Windows Server 2003 Access-based Enumeration

Also the TarPit registry entry for SMTP servers

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPSVC\Parameters]
"TarpitTime"=dword:0000000a

Link to comment
https://www.neowin.net/forum/topic/552038-2003-requested-w2k3-add-ons/
Share on other sites

I only have 32bit running atm. This KB refers to 32 bit x86 but does mention 64 bit SMTPSVC.dll for 64 bit. Can anyone out there with W2K3 64bit check?

I do find that 10 seconds as opposed to the default 0 second is a huge lag for any spammer trying to enumerate email addresses. Generally you get a 100ms delay, if that goes up 1000 times that would discourage any spammer sending out 10,000 enumerations (27 hours btw vs 16 minutes).

Edited by MazX_Napalm

okay, GPMC, i don't have a copy of 2k3 so i need some info to complete the module

firstly i need detection information

secondly i need un-installation instructions

edit: found it installs on xp sp2 even though it specifically says xp sp1 so i got the above info

thirdly i need to know exactly what versions of 2k3 this applies to, SP0/SP1/SP2?

if the version of gpmgmt.dll (%programfiles%\gpmc\) under SP1 and SP2 is greater than 5.2.3790.145 it's an indication that it's not needed.

Edited by theblazingangel

now Access-based Enumeration, this one is only for 2k3 so i can't get any fo the info myself unlike gpmc

firstly i need to know whether this applies to 2k3 sp2

secondly i need uninstall instructions, go to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

look for a key (folder) for it, and get the contents of the UninstallString entry

thirdly i need detection info, either

a) go to the above key, and look for something to identify the version installed. i'll need the name of the key, the name of the entry, and the value fo the entry

b) install it in admin mode (start > run > msiexec /s "path_to_setup_file\ABEUI.msi" [enter]), this will extract the files it installs to the location you specify. get the name of one of the files it installs and its version, then after installing it properly, search for the file on your system and get the path where it's installed to.

it would also be good if i could get the above info for the x64 copy too if possible

Account Lockout and Management Tools

what should i do with this, it doesn't actually 'install', it extracts some files to the folder you specify. where would you like them to go?

infact once there extracted, how do you intend to access and use them, there are no startmenu entries or desktop shortcuts...

at least one thing comes in a zip file and is supposed to be put onto other systems to trace problems...

i really don't know what i'm doing with this one, should i just have the module copy and paste the files to some folder for you to use as you wish? if so what folder?

Install Additional Account Info

1. Copy acctinfo.dll to the %systemroot%\system32 folder 
2. Register the service and dll with this command: 
   regsvr32 acctinfo
3. Close, then open Active Directory Users and Computers.
4. If you wish to remove the Additional Account Info tab, open a run command and type:
   regsvr32 /u acctinfo

  theblazingangel said:
thirdly i need to know exactly what versions of 2k3 this applies to, SP0/SP1/SP2?

if the version of gpmgmt.dll (%programfiles%\gpmc\) under SP1 and SP2 is greater than 5.2.3790.145 it's an indication that it's not needed.

I currently have SP2, but it was running on SP1

5.2.3790.145 (vbl04.040504-1022)

Edited by MazX_Napalm
  theblazingangel said:
firstly i need to know whether this applies to 2k3 sp2

it would also be good if i could get the above info for the x64 copy too if possible

Installed on SP1, server now SP2. Works fine. Don't have a 64bit so can't help there.

  theblazingangel said:
secondly i need uninstall instructions, go to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

look for a key (folder) for it, and get the contents of the UninstallString entry

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2475C7C3-1663-4BE4-8067-7A09A1928FC3}]
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"="Microsoft Corporation"
"DisplayVersion"="1.0.0"
"HelpLink"=""
"HelpTelephone"=""
"InstallDate"="20061014"
"InstallLocation"=""
"InstallSource"="E:\\New Folder\\"
"ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\
  00,65,00,20,00,2f,00,49,00,7b,00,32,00,34,00,37,00,35,00,43,00,37,00,43,00,\
  33,00,2d,00,31,00,36,00,36,00,33,00,2d,00,34,00,42,00,45,00,34,00,2d,00,38,\
  00,30,00,36,00,37,00,2d,00,37,00,41,00,30,00,39,00,41,00,31,00,39,00,32,00,\
  38,00,46,00,43,00,33,00,7d,00,00,00
"Publisher"="Microsoft Corporation"
"Readme"=""
"Size"=""
"EstimatedSize"=dword:000002d4
"UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\
  78,00,65,00,20,00,2f,00,49,00,7b,00,32,00,34,00,37,00,35,00,43,00,37,00,43,\
  00,33,00,2d,00,31,00,36,00,36,00,33,00,2d,00,34,00,42,00,45,00,34,00,2d,00,\
  38,00,30,00,36,00,37,00,2d,00,37,00,41,00,30,00,39,00,41,00,31,00,39,00,32,\
  00,38,00,46,00,43,00,33,00,7d,00,00,00
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:00000001
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:01000000
"Language"=dword:00000409
"DisplayName"="Windows Server 2003 Access-based Enumeration"

4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\

78,00,65,00,20,00,2f,00,49,00,7b,00,32,00,34,00,37,00,35,00,43,00,37,00,43,\

00,33,00,2d,00,31,00,36,00,36,00,33,00,2d,00,34,00,42,00,45,00,34,00,2d,00,\

38,00,30,00,36,00,37,00,2d,00,37,00,41,00,30,00,39,00,41,00,31,00,39,00,32,\

00,38,00,46,00,43,00,33,00,7d,00,00,00

which is ...

MsiExec.exe /I{2475C7C3-1663-4BE4-8067-7A09A1928FC3}

thanks, two of them are done, i'm still unsure of the account lockout one though.

i've downloaded the "setup" file, when run it asks where to extract the files to with no default location. microsoft may as well have put it in a zip file, it acts just like a file archive, it doesn't really install anything.

so... i've got these files and i don't know what to do with them all, they are as follows:

acctinfo.dll

Alockout.zip

AlockoutXP.zip

aloinfo.exe

EnableKerbLog.vbs

eventcombmt.chm

eventcombMT.exe

LockoutStatus.exe

nlparse.exe

Alockout.zip and AlockoutXP.zip contain:

alockout.dll

appinit.reg

Readme.txt

Readme.txt says to copy alockout.dll to system32 and run appinit.reg

so files sound like they are aimed at clients and some at servers

since i don't have or use windows 2003, don't use these tools, and there is no decent info from microsoft (that i've seen) i have no idea what to do with these files. where should i put each of them, which should go on clients and which on servers, for the client ones should i be expected to include them in the 2k/xp releases or just put them somewhere on the server for a user to copy them to clients as they wish...

since they don't "install", i really need extremely detailed instructions on what you want me to do with each of these files...

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • RGB yes, as a gimmick on cheap cases and keyboard.  A well built, thoughtfully considered computer with good configurable RGB are not on the top of people's lists when searching for a deal.  And invariably, when people look towards the 2nd hand market - they are searching for a deal.
    • Hello, The thing about Thunderbolt 2/3/4 PCIe cards is that in additional to the signals carried over the PCIe slot they are plugged into they need to send additional signals to the motherboard for which there is no standardized connection set of connections on the PCIe bus.  To get around this limitation, motherboard manufacturers can include a separate Thunderbolt header. which is sometimes labeled as JTBT1 or TBT1 on the motherboard.  The Thunderbolt PCIe card has a corresponding header on it, and comes with a proprietary cable to connect between the card and motherboard. While the additional signals that need to be sent over the Thunderbolt header are somewhat standardized, motherboard manufacturers are also free to implement whatever custom vendor-specific additions like like, like allowing a the system to recognize an on/off button on a Thunderbolt dock they alone offer to power up the system, or recognize what an external peripheral has been plugged in or unplugged from the Thunderbolt port.  Features like this, plus the lack of requirements for standardized features, or even a standard physical layout for the Thunderbolt header, mean that manufacturers can implement what are Thunderbolt PCIe cards that are essentially proprietary in that all features only work with their motherboard and even then only when their custom cable is used between their motherboard and their Thunderbolt PCIe card.  There may be additional cables required in order to route a video card's signals through the Thunderbolt port as well. Because of this, you need to go with the motherboard manufacturer's Thunderbolt PCIe card, unless you want to get a different brand, build a custom cable to connect it to your motherboard, and potentially give up features like hot-plugging devices to it. I believe @Nik Louch identified a card which will work with your motherboard.  You can always double-check with the motherboard manufacturer just to be sure, or find out if there are any issues or limitations to the combination of your motherboard and the card. If you purchase a used Thunderbolt PCIe card, make sure to check with the seller if it comes with all of the cabling necessary to use it, otherwise you may end up having to purchase that separately as well. Regards, Aryeh Goretsky  
    • ChromeOS M137 goes stable, bringing new Face Control policy and more by David Uzondu Google has brought ChromeOS M137 to the stable channel, and it includes a few focused updates for users and IT admins. A key change is a new policy for managing big groups of Chromebooks. The face control accessibility tool, which Google also updated back in ChromeOS M135, now gets a vital control for managers. A new policy called FaceGazeEnabled lets them switch the feature on or off across a whole school or company. The update also brings a new audio feature called crosstalk cancellation. It aims to create a better sound experience using just the Chromebook's built-in speakers. The software processes audio to make it seem like it is surrounding your head, not just coming from two small points. This tries to copy the feel of a surround sound system or good headphones. Any audio gets a boost, but you will notice it most when watching movies or playing games with directional sound. More accessibility tools have arrived, too. ChromeVox now has a direct keyboard shortcut, Search + O + C, that displays spoken text as braille captions on a connected display. For the poor souls in IT, troubleshooting got a little less painful as well. A new event-based log collection system, when enabled by an admin, will automatically upload relevant logs when something specific fails, like an OS crash or a botched update. Instead of digging through mountains of data, administrators get targeted reports sent straight to them. Here's how to enable it: Turn on the Device system log upload setting. Turn on OS update status reporting—For the Report device OS information setting, select OS update status. Turn on device telemetry reporting on crash information—For the Report device telemetry setting, select Crash information. Google also keeps things sane by limiting these targeted uploads to just twice a day per device. As usual, the update is rolling out slowly. If you do not see ChromeOS M137 for your machine yet, just be patient. This phased release lets Google find and address any issues before the update gets to everyone.
    • LG gram Book 15U50T: Is this lightweight laptop the right upgrade for you? by Paul Hill If you’re in the UK looking for a new mid-range laptop that won’t feel underpowered, check out the LG gram Book 15U50T now because it’s at its all-time lowest price on Amazon UK thanks to a 14% discount from its £699.99 RRP. You can get it now for just £599.99 (Buying link at the end). At this price, the laptop definitely makes this mid-range option much more appealing, it’s also pretty new having only come out in January 2025, so you’re definitely getting more value for your money. The delivery is free and will take a few days to arrive unless you take advantage of a Prime member trial and get it next-day in time for Father’s Day. LG gram Book 15U50T: Key features and who it's for The LG gram Book 15U50T features a 15.6-inch Full-HD (1920x1080) anti-glare IPS display, making it ideal for use in well-lit areas as you won’t see yourself staring back. It’s powered by an Intel Core i5 processor (1334U), 16GB of RAM, and has a very fast 512GB NVMe Gen4 SSD. In my opinion, the storage might be a bit tight for some users; however, the device comes with two M.2 slots if you want to upgrade the storage. The LG gram Book 15U50T is ideal for students or professionals who need a device to carry with them out and about. It has an ultra-lightweight design and weighs just 1.65kg - that’s not too far off a similarly sized MacBook Air, but for a fraction of the cost. In terms of ports, there is an HDMI port, two USB-A ports, and two USB-C ports. There's also a 3.5mm headphone jack if you need to plug in headphones. Other noteworthy details about this laptop include that it's running Windows 11 Home with Copilot integration, it has a HD webcam with a privacy shutter, it uses Dolby Atmos audio for immersive sound, and it has a unique feature called gram Link for multi-device (including Android and iOS) connectivity. Should you buy it? If you are a student or a professional that won’t be doing heavy gaming, or using other super intensive applications, this laptop is a solid pick. It’s lightweight - so easy to carry around, it has an anti-reflective screen - so good in well-lit environments; and it features upgradeable storage slots if 512GB is not enough space. On the downside, this laptop has a mid-range processor that could limit your ability to use high-end professional tools. Another thing I’m not really a fan of here is how opaque LG has been with the battery life. As a portable laptop, you’re obviously going to want to take it on the go where you don’t have a charger handy, but all LG says about the battery is that it has a capacity of 51Wh. According to some online sources, variants of this laptop manage about 7 to 10 hours, so if you need a super long battery life, you might be better off with something like a MacBook Air. So should you buy it? If you’re not going to be doing anything super intensive, but can’t stand underpowered and slow budget laptops then this could be the ideal laptop for you. The £100 discount makes it even more appealing! LG gram Book 15U50T: £599.99 (Amazon UK) / RRP £699.99 This Amazon deal is U.K. specific, and not available in other regions unless specified. If you don't like it or want to look at more options, check out the Amazon UK deals page here. Get Prime, Prime Video, Music Unlimited, Audible or Kindle Unlimited, free for the first 30 days As an Amazon Associate we earn from qualifying purchases.
  • Recent Achievements

    • Week One Done
      somar86 earned a badge
      Week One Done
    • One Month Later
      somar86 earned a badge
      One Month Later
    • Apprentice
      Adrian Williams went up a rank
      Apprentice
    • Reacting Well
      BashOrgRu earned a badge
      Reacting Well
    • Collaborator
      CHUNWEI earned a badge
      Collaborator
  • Popular Contributors

    1. 1
      +primortal
      504
    2. 2
      ATLien_0
      260
    3. 3
      +Edouard
      186
    4. 4
      +FloatingFatMan
      175
    5. 5
      snowy owl
      132
  • Tell a friend

    Love Neowin? Tell a friend!