Recommended Posts

Group Policy Management Console

Account Lockout and Management Tools

Windows Server 2003 Access-based Enumeration

Also the TarPit registry entry for SMTP servers

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPSVC\Parameters]
"TarpitTime"=dword:0000000a

Link to comment
https://www.neowin.net/forum/topic/552038-2003-requested-w2k3-add-ons/
Share on other sites

I only have 32bit running atm. This KB refers to 32 bit x86 but does mention 64 bit SMTPSVC.dll for 64 bit. Can anyone out there with W2K3 64bit check?

I do find that 10 seconds as opposed to the default 0 second is a huge lag for any spammer trying to enumerate email addresses. Generally you get a 100ms delay, if that goes up 1000 times that would discourage any spammer sending out 10,000 enumerations (27 hours btw vs 16 minutes).

Edited by MazX_Napalm

okay, GPMC, i don't have a copy of 2k3 so i need some info to complete the module

firstly i need detection information

secondly i need un-installation instructions

edit: found it installs on xp sp2 even though it specifically says xp sp1 so i got the above info

thirdly i need to know exactly what versions of 2k3 this applies to, SP0/SP1/SP2?

if the version of gpmgmt.dll (%programfiles%\gpmc\) under SP1 and SP2 is greater than 5.2.3790.145 it's an indication that it's not needed.

Edited by theblazingangel

now Access-based Enumeration, this one is only for 2k3 so i can't get any fo the info myself unlike gpmc

firstly i need to know whether this applies to 2k3 sp2

secondly i need uninstall instructions, go to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

look for a key (folder) for it, and get the contents of the UninstallString entry

thirdly i need detection info, either

a) go to the above key, and look for something to identify the version installed. i'll need the name of the key, the name of the entry, and the value fo the entry

b) install it in admin mode (start > run > msiexec /s "path_to_setup_file\ABEUI.msi" [enter]), this will extract the files it installs to the location you specify. get the name of one of the files it installs and its version, then after installing it properly, search for the file on your system and get the path where it's installed to.

it would also be good if i could get the above info for the x64 copy too if possible

Account Lockout and Management Tools

what should i do with this, it doesn't actually 'install', it extracts some files to the folder you specify. where would you like them to go?

infact once there extracted, how do you intend to access and use them, there are no startmenu entries or desktop shortcuts...

at least one thing comes in a zip file and is supposed to be put onto other systems to trace problems...

i really don't know what i'm doing with this one, should i just have the module copy and paste the files to some folder for you to use as you wish? if so what folder?

Install Additional Account Info

1. Copy acctinfo.dll to the %systemroot%\system32 folder 
2. Register the service and dll with this command: 
   regsvr32 acctinfo
3. Close, then open Active Directory Users and Computers.
4. If you wish to remove the Additional Account Info tab, open a run command and type:
   regsvr32 /u acctinfo

  theblazingangel said:
thirdly i need to know exactly what versions of 2k3 this applies to, SP0/SP1/SP2?

if the version of gpmgmt.dll (%programfiles%\gpmc\) under SP1 and SP2 is greater than 5.2.3790.145 it's an indication that it's not needed.

I currently have SP2, but it was running on SP1

5.2.3790.145 (vbl04.040504-1022)

Edited by MazX_Napalm
  theblazingangel said:
firstly i need to know whether this applies to 2k3 sp2

it would also be good if i could get the above info for the x64 copy too if possible

Installed on SP1, server now SP2. Works fine. Don't have a 64bit so can't help there.

  theblazingangel said:
secondly i need uninstall instructions, go to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

look for a key (folder) for it, and get the contents of the UninstallString entry

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2475C7C3-1663-4BE4-8067-7A09A1928FC3}]
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"="Microsoft Corporation"
"DisplayVersion"="1.0.0"
"HelpLink"=""
"HelpTelephone"=""
"InstallDate"="20061014"
"InstallLocation"=""
"InstallSource"="E:\\New Folder\\"
"ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\
  00,65,00,20,00,2f,00,49,00,7b,00,32,00,34,00,37,00,35,00,43,00,37,00,43,00,\
  33,00,2d,00,31,00,36,00,36,00,33,00,2d,00,34,00,42,00,45,00,34,00,2d,00,38,\
  00,30,00,36,00,37,00,2d,00,37,00,41,00,30,00,39,00,41,00,31,00,39,00,32,00,\
  38,00,46,00,43,00,33,00,7d,00,00,00
"Publisher"="Microsoft Corporation"
"Readme"=""
"Size"=""
"EstimatedSize"=dword:000002d4
"UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\
  78,00,65,00,20,00,2f,00,49,00,7b,00,32,00,34,00,37,00,35,00,43,00,37,00,43,\
  00,33,00,2d,00,31,00,36,00,36,00,33,00,2d,00,34,00,42,00,45,00,34,00,2d,00,\
  38,00,30,00,36,00,37,00,2d,00,37,00,41,00,30,00,39,00,41,00,31,00,39,00,32,\
  00,38,00,46,00,43,00,33,00,7d,00,00,00
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:00000001
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:01000000
"Language"=dword:00000409
"DisplayName"="Windows Server 2003 Access-based Enumeration"

4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\

78,00,65,00,20,00,2f,00,49,00,7b,00,32,00,34,00,37,00,35,00,43,00,37,00,43,\

00,33,00,2d,00,31,00,36,00,36,00,33,00,2d,00,34,00,42,00,45,00,34,00,2d,00,\

38,00,30,00,36,00,37,00,2d,00,37,00,41,00,30,00,39,00,41,00,31,00,39,00,32,\

00,38,00,46,00,43,00,33,00,7d,00,00,00

which is ...

MsiExec.exe /I{2475C7C3-1663-4BE4-8067-7A09A1928FC3}

thanks, two of them are done, i'm still unsure of the account lockout one though.

i've downloaded the "setup" file, when run it asks where to extract the files to with no default location. microsoft may as well have put it in a zip file, it acts just like a file archive, it doesn't really install anything.

so... i've got these files and i don't know what to do with them all, they are as follows:

acctinfo.dll

Alockout.zip

AlockoutXP.zip

aloinfo.exe

EnableKerbLog.vbs

eventcombmt.chm

eventcombMT.exe

LockoutStatus.exe

nlparse.exe

Alockout.zip and AlockoutXP.zip contain:

alockout.dll

appinit.reg

Readme.txt

Readme.txt says to copy alockout.dll to system32 and run appinit.reg

so files sound like they are aimed at clients and some at servers

since i don't have or use windows 2003, don't use these tools, and there is no decent info from microsoft (that i've seen) i have no idea what to do with these files. where should i put each of them, which should go on clients and which on servers, for the client ones should i be expected to include them in the 2k/xp releases or just put them somewhere on the server for a user to copy them to clients as they wish...

since they don't "install", i really need extremely detailed instructions on what you want me to do with each of these files...

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • i built my own, all ya need is a pc with two network cards and i used operwrt as the os
    • hi thanks for input. those two modems are supported  thankfully. i really am leaning towards the b12 though since there's a few complaints of the cm3000 and its chipset (drops and whatnot), although those might just be vocal minority complaints.
    • A PDF or text file is all you need for Copilot to generate a PowerPoint for you in seconds by Usama Jawad Assistive AI is all the rage these days. In the past few hours alone, we have witnessed AI summaries on YouTube, context-aware text generation capabilities in Google Sheets, Gemini tools on the cloud, the availability of additional AI models with smarter defaults in Visual Studio, and chat summarization on WhatsApp. Now, Microsoft has detailed an upcoming Copilot capability in PowerPoint. Microsoft has outlined a streamlined approach to creating PowerPoint presentations within seconds using a PDF or text file, and a natural language prompt as input. Previously, you could just ground Word files for this purpose, so support for additional formats is certainly welcome. In order to generate a slide deck using Copilot, you can simply open a PowerPoint presentation in the platform of your choice and click the Copilot button. In the resulting Copilot pane, select the "Create a presentation from a file" option, which allows you to type in the name of a PDF or text file stored on the cloud or browse for files in OneDrive or SharePoint manually using the "Attach cloud files" button. You can then refine your prompt by adding details about items that you'd like Copilot to focus on and click the "Send" button. This will generate the slide deck which you can rearrange or add more topics to, before you create the final version of the presentation. Of course, this is a particularly useful feature in many scenarios including those which require you to create a slide deck based on some detailed documentation that you have already completed. That said, it's obviously worth vetting any content that Copilot creates, since data inaccuracy is still a concern when it comes to AI models. This feature is available to Insiders across PowerPoint for web, Windows, and Mac for the following versions: Windows: Version 2409 (Build 18025.20000) or later Mac: Version 16.88 (Build 24082514) or later That said, you do need an Enterprise Copilot license in order to utilize the AI assistant in this way.
  • Recent Achievements

    • One Month Later
      jfam earned a badge
      One Month Later
    • First Post
      TheRingmaster earned a badge
      First Post
    • Conversation Starter
      Kavin25 earned a badge
      Conversation Starter
    • One Month Later
      Leonard grant earned a badge
      One Month Later
    • Week One Done
      pcdoctorsnet earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      541
    2. 2
      ATLien_0
      200
    3. 3
      +FloatingFatMan
      177
    4. 4
      Michael Scrip
      146
    5. 5
      snowy owl
      114
  • Tell a friend

    Love Neowin? Tell a friend!