Over 1 million tech questions and answers.

Policy compliance issue

Q: Policy compliance issue

Hi guys...an odd question here and I am mad at my IT Manager !!

Being a network Admin in-charge, i want to enforce a few policies at help desk. One of them is, not to create any user account unless an email arrives from HR to HelpDesk, informing of the user's badge ID, the department he/she belongs to. The status of employment and all those things. The procedures are in place but sometimes it so happens that some head of the Dept. call our IT Manager over the phone, or send him an email directly whcih is then forwarded to our Help Desk incharge who is then left with little options but to create the account without due processes.

HelpDesk incharge is bound by his position to defy IT manager and he is scared to tell me (sometimes he does) that IT manager is forcing him to dilute the AD account creation policy.

I don't want to confront IT manager based upon inputs by Helpdesk guys but would rather put a mechanism in place, where I would automatically come to know, that an account has been created and I can ask helpdesk to provide proof of the email from HR arbitrarily and then confront the manager.

I know some Audit trails can be put and they would appear under Securty tab of Event manager ( or so I guess) but I need something more automated that would land in my mailbox.

Is this possible?

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Policy compliance issue

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 59.2

I am having a issue playing Blu Ray disks. I continue to get a HDCP compliance error everytime I try to play a Blu Ray video.  I am using arcsoft TMT6 on windows 7. I checked to make sure my monitor and video card are both HDCP compliant, and they both are. I used to be able to watch Blu Ray movies, and I'm not sure what changed, or why I cant watch them now. Also, I used cyberlink BluRay advisor and it said my "software player was not found" and "video connection type is digital without HDCP". Those are the only two problems found. I have a HP 2310 series wide lcd display and have a ATI Radeon HD 5570 video card, and am using a HDMI cable to the monitor. Can someone please help me with this. 

A:HDCP Compliance Issue, Everything is Compliant Though???

Hi Eric,   The Cyberlink BD Advisor only look for a Cyberlink BD software player.  You might very well have a perfectly good BD HDCP certified software player and Cyberlink won't indicate that you have it.  Your non-Cyberlink BD player might need updating to play the new BD titles.  The other issue might be a loose or faulty HDMI cable, a bad video card, corrupted video driver or a monitor problem. Power off the PC and monitor. Check the cables for tightness.  Be sure that you monitor has only one video connection and that it is a HDMI cable. Now try a monitor reset by unplugging the monitor's power cord and then hold down the power button for 30 seconds.  If you still have issues then try reinstalling the video card driver or installing the latest AMD driver from the AMD web site.

Read other 2 answers
RELEVANCY SCORE 46.4

Ok, so I kinda screwed myself over...

I was editing the local policy on my Windows 2003 Server, and now I can't run any programs - even as the administrator. And that's including the policy editor...

Any suggestions on how to reverse this?
 

Read other answers
RELEVANCY SCORE 46

I am currently working on a hand me down pc at work. It seems to have some sort of policy set so that even the local admin account can not install software. There is no registry.pol file in the system32\grouppolicy\user folder. Also, everything under local security settings under admin tools is set to default. I don't know where this policy is coming from, I'm guessing there must be something in the registry but do not even know where to begin looking. Any ideas?
 

A:local policy issue

ps This is a windows 2000 pro pc.
 

Read other 2 answers
RELEVANCY SCORE 46

Hello Guys,
I have created an GPO for 802.1x in  windows server 2012 and uncheck to
verify the servers identity by validating the certificate.
GPO is successfully pushed to clients, when i checked the option in client side the verify the servers identity by validating the certificate.   option was checked. i dont know why i uncheck
this in GPO but in client it is checked.

Could you guys please help. 

below two pictures are for your information 

Read other answers
RELEVANCY SCORE 46

Since the last update, my GPE is ignoring my Control Panel preferences to not show about half of the standard CP icons. I removed all the ignores, and added a few to ignore back after a boot, but only about half were removed from the CP.

I did install KB2823324, but removed it later in the day. I didn't seem to cause any issues, but maybe this is one.

It's really not a big deal to have all the icons show if this is not repairable, but I'm a bit a*al about my rig.

Anyone else with this issue? Any thoughts on repair?

Thanks in advance;

Sarris

A:Group Policy Issue

This advice help perhaps?

Restore Missing/Hidden Items in Windows 7 or Vista Control Panel

Read other 6 answers
RELEVANCY SCORE 45.2

Hi guys,

I have a windows 7 machine here with the above issue.

My search for resolutions has bought me to the forum. I am starting a new topic as it seems the help for this topic previously has been user/machine specific.

Please let me know what I need to do and I will report back.

Many thanks to all! :)

A:AVG 'blocked due to group policy' issue

Hello and welcome to TSF.

Please note that more than one round may be needed to properly eradicate malware. In co-operation with the cleaning process, please: do not uninstall/install any programs unless asked to do so, to make it easier on us as it is more difficult when files/programs are appearing in/disappearing from the logs;
do not run any tools or scans other than those requested;
follow all instructions in the order they are presented;
if you have problems with or do not understand the instructions, ask before continuing;
stay with this thread until given the All Clear, as absence of symptoms does not always mean the machine is clean;
do not attach any logs/reports, etc.. unless specifically requested to do so.
All logs/reports, etc.. must be posted in Notepad making sure the word wrap is unchecked. (In notepad click format, uncheck word wrap if it is checked.)
Also note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

===========
Please download the Farbar Recovery Scan Tool, compatible with your system, from the links below:
Downloading Farbar Recovery Scan Tool (for 32bit systems)
Downloading Farbar Recovery Scan Tool (for 64bit systems)

Note: Wait for the direct download to begin, do not click on anything else on the page.

save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of the... Read more

Read other 17 answers
RELEVANCY SCORE 45.2

Hello,
Using IEAK 11 I created an MSI which should config IE 11 on win 7 computers.  I created a Software Installation under USER CONFIG\POLICIES\SOFTWARE SETTINGS (points to \\server\scripts\ie11-setup.msi".
I've confirmed the user can access the MSI as I've tried to install it manually by browsing to the UNC path and executing the MSI.  Needed admin privileges to run it this way. However when logging in as the user on other systems, based on the log file,
it appears it tries to install the MSI, but it doesn't.  HEre is the log:

=== Verbose logging started: 9/11/2015  16:19:13  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\Windows\system32\svchost.exe ===
MSI (c) (48:EC) [16:19:13:743]: User policy value 'DisableRollback' is 0
MSI (c) (48:EC) [16:19:13:743]: Machine policy value 'DisableRollback' is 0
MSI (c) (48:EC) [16:19:13:749]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2

MSI (c) (48:EC) [16:19:13:750]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1194033724,LangId=1033,Platform=0,ScriptType=3,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=0)
MSI (c) (48:EC) [16:19:13:750]: Executing op: ProductInfo(ProductKey={BE44006E-D2EA-42E2-98CA-D6F1EADB0F8A},ProductName=Internet Explorer 11,PackageName=IE11-Setup-Branding.msi,Language=1033,Version=184549376,Assignment=1,ObsoleteArg=0,,,PackageCode={BE44006E-D2EA-42E2-98CA-D... Read more

Read other answers
RELEVANCY SCORE 45.2

Hi - I've got what sounds like the same or a very similar problem. I've run every networking setup I can find, but still only get one-way networking. That is my Desktop (HP Pavilion w/ Win/XP Home) can see, view, and move files to and from my wife's Laptop (Toshiba Satellite w/ Win/XP Home also), but the Laptop cannot do the same. Pings using either the IP Address or the ComputerName work fine with instant response. Doing the \\IPAddress works from Desktop to Laptop, but not the other way around. Error message is:
\\Computer_name (or \\IPAddress) is not accessible. You might not have permission to use this network resource. Contact the administrator ...
Logon failure: the user has not been granted the requested logon type at this computer.
For what it's worth, both PCs receive the wireless signal very well - my Hi-speed internet (satellite - we're 'way out in the boonies!) modem is connected to the wireless hub/router and it works very well.
Also, attempting to work the Windows Firewall results in a message about "... settings are managed by Group Policy ...", but I can't find any way to edit/manage the Group Policy - in fact I found some info that said that XP doesn't use Group Policy!
NOW WHAT!
 

A:Solved: Group Policy Issue

Read other 9 answers
RELEVANCY SCORE 45.2

Hi everyone,

I'm trying to setup basic set of SRP rules to prevent some malware infections and it's driving me crazy. 

Default rule is to deny all executables from running from all locations, except the ones which i defined in white list.
 
Execution is allowed from this locations only:
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
 
This generally works just fine.

The problem is  ? Microsoft Office (go figure...). When i attempt to open Office files from Outlook, i get usual error message:
 
Access to C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE has been restricted by your Administrator by the default software restriction policy level.
 
This would make complete sense, if this path is not white listed. Otherwise, if you save this file to (e.g.) Desktop, and open it from there, it will work normally. Except if file is not blocked, then it won't open in ?Protected  mode? either
unless file is manually unblocked by user. Which is also real joy.
 
IF i set hash rule to SRP white list policy for each Office program (EXCEL.EXE, WINWORD.EXE, etc), then everything works as charm from any location (protected mode too). But i really don't want to use hash rules for this, as i will have to update
them upon e... Read more

Read other answers
RELEVANCY SCORE 45.2

I'm working with a Window 7 Enterprise 64-bit system. It seems that anyone in the Administrators group that tries to open Internet Explorer gets the error "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item."
First off, anyone in theother groups, Power Users, ect., can open IE no problem. There's no security settings locking down iexplore.exe and nothing in Applocker. No sure where else to look for this issue. Any ideas?

A:Local Policy restriction issue

Long shot, but if IE was previously used to open a file (presumably .htm, or .html) from a removable device, e.g.: by going to File > Open > Browse..., and the removable device (e.g.: USB stick) has since been removed the program may 'hang' whilst trying to (unsuccessfully) open the file location. I saw this quite a bit with older operating systems (e.g.: Windows 98, 2000, and to a lesser extent XP) and usually with floppy disks. However IE has been around for a long time and whilst some parts are quite new other 'root' parts probably are not!

Read other 1 answers
RELEVANCY SCORE 44.8

Hi all,
So I just got a work-issued computer and of course it's using 8.1 (instead of 10) and of course any of the good parts are disabled. After I de-crapified it (removing Classic Shell and restoring the start screen), I realized my OneDrive is not working, at all. Also, downloading the installation file from Microsoft's site also fails -- the installation won't go through.

Through my own sniffing, I figure out the issue is that Microsoft accounts are blocked on our system, so you can never have a domain account that's also connected to a microsoft account. As such, OneDrive doesn't even show up. I tried to get this setting changed in group policy, to no avail. That's organization's for you.

Because I can't authenticate the microsoft account, I can't even use the Windows 8 app because the login fails. Our IT guy suggested OneDrive for Business, but I need to access files on personal and work devices, so OneDrive for business is out. He also suggested a mapped drive, but to my understanding my personal computer would need to be on and connected to the same network, so that's out as well.

So my question is: how in the world do I get my OneDrive files on a company-owned PC, for syncing and use? I'm thinking some sort of third-party app might exist, or even an older version of the OneDrive sync client could work, if that's still available. The main requirement is that it be totally decoupled from Windows 8's Microsoft account integration, because that is totally locked d... Read more

Read other answers
RELEVANCY SCORE 44.8

Hi,

Equipment:

Dell Inspiron 3000
Windows 10 Home
64 bit Operating Sysytem, x-64 based processor

Issue:

(Error message on boot -)
Failed to connect to a Windows service
Windows couldn't connect to the Group
Policy Client service. This problem
prevents standard users from signing in.
As an administrative user, you can review

History:

This laptop is about 1 year old, so is probably in warranty,
but frankly i cannot afford shipping costs for repair.
About 3 months ago, it seemed to manifest a blue-screen-of-death
so i took it to professionals who did a clean re-install.
Recently, on boot, it sometimes displays the Group Policy Client service
- error message.
The system then displays various instances of dysfunction.

I have had a look around google, and discovered a webpage which
seems close to a solution by some changes in the registry ....
http://answers.microsoft.com/en-us/...y/b73107f8-8447-4599-87a5-65ecc6a63aa0?auth=1

which includes a youtube video which would be quite simple to implement,
but i notice some slight differences between my registry entires and the videos ...
I think it is wise to get some advice, prior to making changes in the registry.
Can you possible assist me with that?

Much obliged

Steve
 

A:Group Policy Client service Issue

Read other 8 answers
RELEVANCY SCORE 44.8

Hi,

I have a few PC that are locked with Group Policy. The Group Policy disable all the function in the PC including command prompt. Is there anyway to shutdown these PC without turn off the power button?

I have tried shutting down "Shutdown -s -f -t 1.bat" but the command prompt does not allow these command to run. Can anyone help me?


I also want to ask about Window XP group policy. I have to tasked to redo the group policy for the above PC. I want to know is there anyway I can create a group policy which enable password prompt shutdown?


Can anyone advice me on what to do?

Thanks
FidoIT

Read other answers
RELEVANCY SCORE 44.4

I have put in place a SRP and are having issues with GoToAssist Express, Everytime our help desk needs to use this program to connect to another machine that user has to download a small exe, however, with the new SRP in place they not allowed to do this.

As you can see from this image

Is there anyway I can add a new path rule or .EXE rule to allow the user to download this? Thank you for your time.
 

A:GoToAssist Express / Software Restriction Policy issue

I know there is a way to add a rule, as you can see from the image it puts the .EXE is one of those crazy temp folders first, then it want's to install.
 

Read other 1 answers
RELEVANCY SCORE 44.4

Hi there,

I was wondering whether anyone can tell as to why Group Policy package deployments don't always apply as expected on all computers i.e. on next boot even after performing a gpupdate /force and/or gpupdate /boot, a restart and/or a warm or cold boot. Also I
was wondering whether anyone else has had these issues and to share their experiences of how they troubleshooted this issue. Your help would be much appreciated.

Kind regards,
RocknRollTim

P.S. I was advised by a forum user off the Microsoft Community forum to post my query here.

A:Issue with deploying Group Policy packages on boot

Case closed, sorted issue.

Read other 9 answers
RELEVANCY SCORE 44.4

I'm having an issue modifying local security policy on my machine using secedit
When I run:
secedit /export /cfg c:\temp.cfg /areas SECURITYPOLICY
I get a copy of the configuration just fine.
However, when I modify this file and try to apply this new configuration with:
secedit /configure /db c:\windows\security\local.sdb /cfg c:\temp.cfg /areas SECURITYPOLICY
I get the following message:
Completed 5 percent (0/18) Process Security Policy area
Completed 22 percent (3/18) Process Security Policy area
Completed 44 percent (7/18) Process Security Policy area
Completed 61 percent (10/18) Process Security Policy area
Completed 77 percent (13/18) Process Security Policy area
Completed 100 percent (18/18) Process Security Policy area

The task has completed successfully.
See log %windir%\security\logs\scesrv.log for detail info.
However, when I delete my temp.cfg file and re-pull the security configuration, it reverts back to what it was before and none of my changes have taken place.

Any ideas?

Read other answers
RELEVANCY SCORE 44.4

Hi,

I bought a MG5450 2 days ago and began setting it up yesterday however stumbled across an issue where the printer driver would not install regardless of the compatibility setting. Being as it's a newly released printer I thought the drivers would be up to date and new, however I think there may be a issue with NT 4.0 driver policy as when I try to install the drivers through the device manager, it gives me that message that there's a policy in place stopping me.

Windows update always fails when trying to install the printer, however the scanner, and software included all work fine. I can scan images on wirelessly and have them saved on my computer without an issue, however there is no way to print.

I have tried disabling the policing through the 'MSC' and adding a local group policy or something along those lines. However none of this has worked. How can I get the driver to install or disable the policy to allow the printer to be installed.

My Printer

Running Windows 7 Ultimate 64x
Tried installation of the drivers both through wireless and wired, both come to the same outcome.

Any other information needed, then please ask.

Thanks!

A:Canon Pixma MG5450 - NT 4.0 Policy: Driver Issue

Windows Update when USB plugged into the computer from the printer.

[IMG]http://s12.**************/52uu8vzil/Failed_Driver_Install.png[/IMG]

Manually trying to install the drivers through device manager.

[IMG]http://s12.**************/wrhhgemj1/Policy_Issue_Driver.png[/IMG]

Read other 2 answers
RELEVANCY SCORE 44

I am having a problem when trying to use a mandatory profile with new user accounts that I have created in active directory. I set up a model profile on a client machine then moved it over to the server to apply to the user accounts. However everytime I apply the profile it seems to ignore all of the group policy settings, except with the account I have created it with. I do have another OU in the Active Directory setup in this way where many users share the same mandatory profile but I have never had any problems with group policy setting with that OU.
I have only been managing this network (or any network for that matter) for a few months now so it could be some rookie mistake, so don't be hesitent to mention the obvious. Please help. Thanks
 

Read other answers
RELEVANCY SCORE 44

Hi,

I setup a HP Desktop 550-111a last weekend 28/11/15 with windows 10
Setup restore point, and installed various programs WLM and Openoffice

On the Monday , had a call - the PC reported a "Windows could not connect to the Group Policy Client service. This problem prevents standard users from logging on to the system." message
I remotely looked at a couple of things and decided a restore maybe in order or repair
So Advised to Hold the Shift Key and Restart

As the PC shut down - it mentioned Updating
and so when the trouble shooting screen eventuality appeared - I decided just to continue to windows
And the PC worked fine
and has been used every day - upto yesterday , when he got the same error message and symptoms

So i decided to do the same restart Shift Key & Restart
Then Continue
The PC restarted fine, no error message - so the Shift Key + restart , fixes something/
I decided to look into the issue a bit further
As updating had been mentioned last week, i thought I would start there
Indeed Windows update had failed
and I noticed that the Windows defender had two entries for the 30th and also for yesterday.
The Update also had a button for a retry
Which I did - and then the 10586 upgrade started to install

I have allowed this to run and install - so all the issues maybe solved
I had to enable restore - as this appears to be off by default !!!!!!
and also re-associate OpenOffice with MSfiles, as they went back to Office... Read more

Read other answers
RELEVANCY SCORE 44

Running Win7x64 SP1 Pro
Just upgraded to IE11 from IE9
The browser seems to be working OK, but

When I open the Group Policy Editor it says:
___________________________________________
Encountered an error while parsing.

Resource $(string.Advanced_EnableSSLFallback)
referenced in attribute displayName could not be found.

File C:\windows\PolicyDefinition\inetres.admx, line795, column 308.
_________________________________________________

And there is no longer any settings for Internet Explorer under the User Configuration > Administrative Templates > Windows Components as there were with IE9.

A search says something about two files inetres.admx and inetres.adml .

Anybody have a solution to this problem?

Read other answers
RELEVANCY SCORE 44

Hi,
Not really sure where to post this question so if there's a better forum just let me know.
We bought a new HP Color LaserJet Pro M452dn printer and I set it up today.  Installed it on my printer server and set it to deploy using group policy.  Seems to be working fine on our Windows 7 desktops but I have a Windows 8.1 workstation and
it isn't deploying.
Since it is the day after patch Tuesday I decided to run Windows Updates and interestingly enough the printer shows up as an Important Update.  Ok, so I tell it to install but it fails with an error code of 80070490.
Searched for help with that error found a few suggestions, running sfc and dism, but so far none of that has helped.  I also tried deleting the port thinking since I had used it in the past it may need to recreate it, didn't help.
So I'm stumped, I've rebooted the computer dozens of times, even turned it off for a while, no help.  I even manually installed the printer to see if having the drivers pre-loaded would help but it didn't.
Any suggestions?  Anyone run into this issue before?
Thanks in advance,
Linn

Read other answers
RELEVANCY SCORE 44

We have a curious behaviour of the Smartcard Policy, I have try it :

Open the notepad and type "I Like Sugar". Do not save.Try to restart from Windows manuallyI'm not be forcefully logged off. Notepad will ask you to save my text.Click cancel and I don't save my  document just yetI Remove the smart cardThe Windows 7 desktop stay open , without the smarcard on the reader devices , and dont logoff , dont restart 
How it's possible ?



JulienM

Read other answers
RELEVANCY SCORE 44

This site is just a treasure chest of info!

I'm trying to troubleshoot a problem. I have a Win7 Home Premium 32bit netbook and a Vista Home Premium 64bit laptop on a wireless network. I'm able to share files, folders, and a printer with no problem, but I can't seem to share the DVD drive on the laptop. I want to be able to install software on the Win7 netbook using the Vista laptop's DVD drive over the network. The DVD drive is shared and given full control permission. It shows up on the Win7 netbook, but when I try to access it, it says Windows cannot access (drive name). You do not have permission to access (drive name). Contact your network administrator to request access.

After browsing the net for a solution, I think an entry in the Vista registry is restricting access to the drive through a group policy. I saw on another forum where changing the Default value to 0 may correct this issue. I also changed the ValueType value to 0. Neither worked for me. Then I noticed that DisplayName value, @wsecedit.dll,-59098. (See picture) I researched and found out that it had something to do with a Group Policy restriction. Since there is no Group Policy Editor for Vista Home Premium, could I simply delete that entry? How else could I change or edit that? (I saw on this forum where someone is working on Group Policy Editor for all versions of Vista). Any help or advice would be greatly apprectiated.

dtgVA

A:Share DVD drive on wireless network (Group Policy issue?)

Hi dtgVA,

I am looking into this right now. Vista Home Premium does not have gpedit.msc (and don't use my hack yet, as there is a serious bug in it), however all the controls are still in the registry. All gpedit.msc does is neatly bring all these registry entries together into one neat program. All these settings still work, and Microsoft has kindly provided a spreadsheet with all the registry eqivalents. Therefore, deleting any registry entries, even to do with gpedit.msc which does not exist on Home Premium, will bring you no end of trouble! Do not just delete the registry entry!

Be warned that some CD/DVD drives will not share over a network. There is nothing you can do about this except update drivers and try again. No CD/DVD drive will allow you to burn CD/DVDs over a network.

I will come back to you in a few minutes with a proper answer.

Richard

Read other 12 answers
RELEVANCY SCORE 44

I'll try to set this up as best I can. I have a laptop with a fresh Windows 8.1 install on it. It is on my domain, and I have a single GPO applied to it. In the GPO under Computer Configuration -> Windows Settings -> Security Settings ->
Wireless Network Policies I have created a Windows Vista or later policy. In the policy I have configured single sign on.  I log into a local account on the laptop and plug it into a wired connection. I then run gpupdate on it. At that point I unplug
the network cable, and log off. Now, from the login screen I click Other user, and it looks like the screenshot below.

Notice that "Windows will try to connect to" is present. I can login using domain credentials, and single sign on works perfectly. Now if I reboot the machine, the "Windows will try to connect to" is gone and single sign
on does not work. If I log in with a local account and log out. The "Windows will try to connect to" is present again. I can login normally using domain credentials, and single sign on works perfectly again.
One other note: I installed a fresh copy of Windows 7 on the same model laptop, and put it in the same OU with that single GPO. Single sign on works perfectly with the Windows 7 machine every time. Including after reboots. Thank you, in advance,
for any advice or comments. I will be happy to provide additional information if it is needed.

Read other answers
RELEVANCY SCORE 43.6

Dear Bleepingcomputers and friends,
 
I need you guys' help!
 
Have a  customer that need help getting PCI complaint [1] at five of her facilities.   So far I only have two thing left to figure out.  I only have available Window XP Pro sp3 machines to do this on. 
 
1)  I need to set up an internal IDS/IPS [2] scanner.   Antivirus doesn't count (PCI's insistence).  Wireshark?
 
2)  I need to set up an FIM [3] system on each computer with credit card information (PCI's doesn't care that the information is encrypted).  Again, Antivirus doesn't count (PCI insistence). 
 
 
 
Many thanks,
-T
 
1)  http://www.pcicomplianceguide.org/pcifaqs.php
 
2) Intrusion Detection System, Intrusion Preventions System
 
3) File Integrity Monitoring
 
 
 
 

A:need help with PCI compliance

price is everything in this question... Establish that and you can pretty much just Google it.
 
Also establishing training and user outlines/ skill-sets would be beneficial... As those XP machines could be nixxed and you could do it very cheap/free if they have decent users...

Read other 7 answers
RELEVANCY SCORE 43.2

Hi and thanks for any help, hope this is in the right spot.

Symptoms:
1. Pop stating a service failed to start. Happens every boot up.
2. Event ID's 7000 and 7009 each time.
3. XBox lost connection as extender and will not reconnect (I do understand this completley so the setup side is not an issue)
4. Group Policy related which is why I posted here misguided or not.
5. The group polcy service can not be started manually everything is grayed out.
6. Enabling the servce in prompt results in access deined.

Why I am stupid:
1. I got to playing around with permission in an attempt to run yamm (update video files automatically for media center to display info).
2. This was done in c prompt which I don't normally use.
3. Think I broke something =-(
4. I did not imediatly notice an issue so maybe not or it manifested after a reboot which normally I do only once a week or longer. But since I know some of what I was doing was definitly touching persmissions and policies I should own up to it.

Event ID Details:
1. Event ID: 7000 = "The Group Policy Client service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion."
Details:
System
-Provider[ Name] Service Control Manager[ Guid] {555908d1-a6d7-4695-8e1e-26931d2012f4}[ EventSourceName] Service Control Manager
-EventID7000[ Qualifiers] 49152
Version0Level2Task0Opcode0Keywords0x8080000000000000-TimeCreated[ SystemTime] 2012-11-04T12:29:19.619240300Z
... Read more

A:Group Policy Issue: A service failed message and XBOX Won't connect

I hate bumps but I am really lost with this issue. I have tried searching I've done every tip or trick ever mentioned.
Spyware removal steps done.
Did the scr deal from command prompt.
Compared HK values
Made both admin and me (only other user) with all privledge and made my account owner.
Compared Windows features to stock (they are)
Compared the service requirements and ensured they are loaded.
Compared services which should be on automatic start and they are...

Someone *has* to have some ideas...

Read other 2 answers
RELEVANCY SCORE 43.2

I purchased a usb type c spectre late last year (the rose version with i7 and 512GB.  It generally works well but so far the power system is very disappointing.  The basic issue is I purchased this device specifically because it purports to be USB Type C compliant.  That means I should be able to charge the device with any usb type c charger provided it meets the technical specs (e.g. 45 watts and so forth).  But it doesn't.  Instead, the software settings seem to make it in effect a proprietary set up.  If so, this is objectionable and possibly contrary Australian consumer law.  The problem is that I can only charge the device with the supplied charger.  The first issue is the charger is excessively heavy and bulky.  Why does the world's slimest and lightest laptop have such a bulky charger.  It's comparable to the laptop itself.  This is just dumb!The second issue is I can't use the rest of my USB Type C set up including a large battery, and a charger in my car.  Nor can I use my phone charger.  So I have to drag the HP charger everywhere.  The third issue is that only 1 of the 3 ports actually charges other devices at the USB Type C spec.  The 2 lighting ports are not USB Type C at all - they are just 3.1 with a usb type c connector.  So they only charge the phone at 20 per cent, the phone won't transfer data, and various peripherals such as a bluetooth keyboard/mouse don't have enough juice to... Read more

Read other answers
RELEVANCY SCORE 43.2

Not sure if this is the correct forum for this question...
Recently had a PCI Compliance Scan performed which I failed for the following reason: "Firewall UDP Packet Source Port 53 Ruleset Bypass".  I am using Windows Firewall in Windows 7 Pro and the only place I can find any rule that specifies
port 53 is Core Networking DNS (UDP-Out).  I am not sure if I should disable this rule or not.  Or should I block port 53 in my wireless router?
Thanks in advance!

Read other answers
RELEVANCY SCORE 43.2

Hello,
Can anybody tell me of a good company that provides information about Compliance management? Someone recommended the site "infolocktech"
Any recommendations on this?
_________________
Dual DVD Recorders Football News
 

Read other answers
RELEVANCY SCORE 43.2

I am currently operating XP Pro 32 bit and Directx 9. In a few days I will be installing from scratch Vista Home premium 64 bit.

What I am not sure of is whether my CPU is compliant with Directx 10.

It is an Intel Pentium D 915.

I have searched Intels site for hours to no avail.

Does anyone have an answer for me please?

Regards

cogs06

A:Directx 10 Compliance

For DirectX 10 to work you need a graphics card that is capable eg ATI HD 2000 series or above

Vista is capable of running DirectX 9 and 10 so you wont need to upgrade your graphics card unless you want to use DirectX 10

Read other 10 answers
RELEVANCY SCORE 43.2

Is there a plan to make MBSA Section 508 compliant (American with Disabilities Act)?

Read other answers
RELEVANCY SCORE 43.2

I'm working on a government project that includes using PowerPoint slideshows on the internet. If you're at all familiar with the government, you're aware that there is a MAJOR push to make sure all files on the internet are 508 compliant (accessible to users with disabilities.) I'm hearing from some folks that PowerPoint is NOT 508 compliant, while others say it can be MADE compliant. (In my digging around, I found a download that claims to walk you through making a PP slideshow compliant.)

Has anyone out there run into this situation? Have any suggestions?

Thanks in advance!
Terry
 

Read other answers
RELEVANCY SCORE 43.2

Hello,
We are using Windows 8.1 currently in a Fax Appliance. this used by medical and financial offices around the country.
We need to know if Windows 8.1 currently meets HIPAA standards for compliancy. We understand it is no longer in mainstream support, and exist now in a state of extended support and will be EOL by 2023. 
If this product does not meet HIPAA compliance standards we need to know now.
Thank you,
Ron.

Read other answers
RELEVANCY SCORE 43.2

Hello all,

while evaluating a new enterprise tool for our company a question was asked to the suppliers if their software is Vista compliant. One solution only requires a thin client with IE 5.5 or higher to use and say that they will not check if their software is Vista compliant as Vista uses IE 7 and they have tested with IE7 and Windows XP and it works fine.

Is there something that could prevent their software from working in Vista? Should we require them to certify Vista compliance?

BR Martin

Read other answers
RELEVANCY SCORE 42.8

Windows Defender in Windows 7 OS
Error Code 0x800704ec
Won't allow me to open it due to a group policy is apply by the administrator which I check don't exist
I try every kind of Antivirus programs and spyware, malware security removal program and I also try to fix the group policy which it don't exist.
 
I'm RogerRogerC

A:Windows 7 Defender won't open because a group policy issue and error code is 0x800704ec

Hi,
 
Please try the suggestions from the link below to check whether Windows Defender can be started.
 
Error message trying to start Windows
defender
 
Thanks,
Novak

Read other 6 answers
RELEVANCY SCORE 42.8

Hi
What is a good PCI compliance security analyser primarily for Win 7 but also for later versions?
Thanks
Regards

Read other answers
RELEVANCY SCORE 42.8

Hi Team.

I have a client with banking operations.

Long time send MBSA report about scanning servers to Regulatory Office.

There is documentary support about MBSA meet some Regulation, Process or Standard?

Thanks

Read other answers
RELEVANCY SCORE 42.8

I work at a very small business with a newer credit card machine that is wired into a Netgear router with an Ethernet cable.

Credit card terminal runs thur no computer, it is hooked directly to the router.

I try to take care of all the IT concerns and problem when they come up.

The new PCI compliance rules that went into effect on Jan 31st 2018 are giving me real problems.

We have a static IP address which has not changed for about 4 years.
We always passed the PCI compliance scan done by a company called Trustwave.

For the pass 2 months we have failed the scans. The reason stated in the report is "Host not detected".

They (Trustwave) has told me that something in the router must be blocking the scan.

Basically they have been no help.

Does anyone know the solution to this problem?? I think that there must be thousands of small business with the same problem, as I tried to call Trustwave support but got only voice mail leave a call back number because of high call volume. I have been communicating with them only by email.

I am thinking that there must be a simple solution to this, but I have not found it yet.

If we passed the last 4 years and nothing on our end has changed then why can we not pass now.?

Makes no sense to me.

Anybody got any ideas ??? Should I call the bank that services the credit card machine ?

Thanks in advance for any help..................
 

Read other answers
RELEVANCY SCORE 42.8

What are the requirements for an existing application to be comaptible on Windows Vista RC1? How they are different from " Works with Windows Vista" requiremnts?

A:Requirements For Application Compliance.

I suspect that you'll have to contact Microsoft on MSDN to find that out. But, since Vista has gone RTM, I suspect they aren't very concerned with RC1 right now.

Read other 2 answers
RELEVANCY SCORE 42.8

Hopefully this is the right forum to post in..
I do IT work and am expanding into medical practices. I understand they must be HIPPA compliant and i was wondering if I need to be certified/take a test or anything to be able to even do IT work for a medical practice (third party IT). Some have said i need to have some certification to see the confidential patient information and I was wondering if any of you could maybe be more specific and show me what requirements they must meet or what certification I need to get to legally be able to work on their stuff, being I will be exposed to private patient information. 
 
Thanks

A:HIPPA Compliance/Certification?

No, there is no certification required.  However, you do need to be fully aware of the HIPAA laws and the security systems on the computer and any transference of data must be HIPAA compliant.
 
For more information, you can read these:
 
http://www.hhs.gov/ocr/privacy/hipaa/faq/securityrule/2003.html
 
http://www.hhs.gov/ocr/privacy/hipaa/understanding/
 
http://smallbusiness.chron.com/hipaa-certification-2810.html
 
Orange Blossom

Read other 4 answers
RELEVANCY SCORE 42.8

Here's my situation. We have 4 systems that get remotely used. How ever we have been upgrading to be PCI-DSS compliant. We now need a way for these specific users to gain remote access to their desktops. Here are my thoughts but not sure which is best. So I'm just looking for your quick thoughts on this.

1. VPN that is PCI compliant. Then remote desktop from within the VPN. Would this still be PCI compliant? We have a Netgear FV338 router that is VPN pci compliant, but 60 bucks a client.

2. Use a 3rd party app such as go to my pc. That claims to be PCI compliant. I find these to vulnerable to changes in PCI compliancy. Will these actually pass our test?

I am just looking for options or if anyone has come across this situation?

Read other answers
RELEVANCY SCORE 42.8

Update: Installation successful, at the cost of one RAM module (remove from system), as suggested in this thread.
However, boot still fails with 2 modules in place.

Original Post:
Hello, my version of Windows 7 has failed to install, both at boot and within windows XP. The in-OS install failed, generically stating that it couldn't read the files it was looking for. (It REALLY needs a details tab for IT experts. It could have been my raid drivers, which seem to be running afoul in other OS's...s) The boot install didn't even start stating that my BIOS was not fully compatible with APCI.
However it is a feature-laden Gigabyte model from this year! There are no BIOS updates in regards to ACPI.

MA790TX-UD4P motherboard....

In my next installation attempt I will mount the ISO with Emulation and install from there, at least until restart.

Full system specs in my profile...

Edit: I've taken a look at this thread, I should note that I have no onboard video and only have access to an Nvidia 9800 GT with this motherboard.
I will attempt the removal of the 2nd DIMM as suggested on page 2.

A:ACPI Compliance Failure? REALLY?

Welcome SI5K,


Sounds like you have been reading some posts first, good start. Must give you a for having your system specs in place. I have found in several of my installs of Win7 that the Bios settings were rather confusing as to how ACPI was enabled or not. So I just made several attemps until I got the right one recognized by Win7 install. that's just one thought. What Build # of win7 are you installing? How did you burn the DVD? 4x speed? seems to work best for most members. You did not state how much memory you have, but you say you took 1 stick out & attempted an install.

No Over-clocking of CPU, right ?

We can start here & other members will jump in with their thoughts, also. Sounds like all the right hardware, just some minor bugs to configure correctly.

" Doc "

Read other 9 answers
RELEVANCY SCORE 42.8

Hi all - I'm having an error throughout many of the security and compliance pages in my instance - not getting too much help as yet so thought I'd post here. The errors I'm seeing are as follows:


error








The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/XXXXXXXXXXXXXX.onmicrosoft.com/Configuration/Transport Settings/Rules/SafeAttachmentVersioned' is not within the scope
of this operation. Cannot perform searches outside the scope 'apcprd06.prod.outlook.com/Configuration/Services/Microsoft Exchange/ExchangeLabs'.








The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/XXXXXXXXXXXX.onmicrosoft.com/Configuration/Transport Settings/Rules/AntiPhishVersioned' is not within the scope of this operation. Cannot
perform searches outside the scope 'apcprd06.prod.outlook.com/Configuration/Services/Microsoft Exchange/ExchangeLabs'.

The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/XXXXXXXXX.onmicrosoft.com/Configuration/Transport Settings/Rules/SafeLinksVersioned'
is not within the scope of this operation. Cannot perform searches outside the scope 'apcprd06.prod.outlook.com/Configuration/Services/Microsoft Exchange/ExchangeLabs'.

Any thoughts?

Read other answers
RELEVANCY SCORE 42.4

Hi all
For the past 6 months we have received reports of PC's taking up to an hour to get to the login prompt.
All our PC's are running Windows 7 32/64 Bit.
The message is always "Applying Group Policy Local Users and Groups policy"
Once it gets to the login prompt they will login with no problem.
I have enabled GPO logging on 1 PC and the results show as below (sorry for the wall of text) Boot time was 15:16.
I was hoping someone else had come across this issue and maybe has some insight
Network team say "its not the network"!!
Server Team say "Its not DNS or Group Policy" !! 
So its been left with me on the desktop team to diagnose the fault
Regards
Paul Griffiths - NHS Trust in Bristol

GPSVC(534.75c) 15:17:14:459 ProcessGPOs: -----------------------
GPSVC(534.75c) 15:17:14:459 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(534.75c) 15:17:14:459 ReadStatus: Read Extension's Previous status successfully.
GPSVC(534.75c) 15:17:14:459 CompareGPOLists:  The lists are the same.
GPSVC(534.75c) 15:17:14:459 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(534.75c) 15:17:14:459 LockPolicySection called for user <Machine>
GPSVC(534.75c) 15:17:14:459 Sync Lock Called
GPSVC(534.75c) 15:17:14:459 Writer Lock got immediately.
GPSVC(534.75c) 15:17:14:459 Lock taken successfully
GPSVC(534.75c) 15:17:14:459 ProcessGPOList: Entering for extension Group Policy ... Read more

Read other answers
RELEVANCY SCORE 42.4

Hi All,
Help!
I have a customer that is trying to jump through Trustwave's
questionnaire on PCI compliance (credit cards).  This is
their explanation of one of the required tests:  they
want both "vulnerability" and "penetration testing".  Now I don't
see the difference, but they do:
       Vulnerability scanning uses automated tools to attempt
       to discover vulnerabilities in the cardholder data
       environment.  Penetration testing goes further by
       having personnel *manually* attempt to exploit
       vulnerabilities and gaps in security the same way a
       criminal would.  Without penetration testing, you may
       know where vulnerabilities may be, but you won't know
       how deep an attacker can get or what he may be able to
       steal.
"Manually"?  How is the world does one do that?  Try to log in
with telnet?  Call the local federal prison and ask to borrow
a hacker for the day?  What can I do manually that the
"automated tools" can't?
Now I an see trying to seal the hole and retesting, but
that is not what they are asking for.  They want me
to sit down and try to breaking into the thing *the same
way a criminal would*!
AAAAAAAAAHHHHH... Read more

A:PCI compliance: vulnerability vs penetration testing

Since you are already receiving help here, please continue in that thread. Do not start new threads or duplicate topics as this causes confusion and makes it more difficult to get the help you need to resolve your issues. Further, it necessitates staff spending time with housecleaning to remove those duplicate postings...time which could have been provided to others needing assistance.Thanks for your cooperation.This thread is closed. If you have any questions, please PM me or another Moderator.

Read other 1 answers