[jedi/old/i-menu.htm]


Matt's Windows Security Page                                        

I use these links to help present the Windows Security courses I deliver. I hope you find all of this useful.
Cheers  Matt.

 

  Index  

    Knowledge Base Articles by page number in the 2823B Manual

Module Page Microsoft KB Article Number
1 7

232179 - Kerberos Administration in Windows 2000
1 7

837361 - Kerberos protocol registry entries and KDC configuration keys in Windows Server 2003
1 7

217098 - Basic Overview of Kerberos User Authentication Protocol in Windows 2000
1 7

810755 - White Paper Windows 2000 Kerberos Interoperability and Authentication
1 7

266080 - Answers to frequently asked Kerberos questions
1 7

262177 - HOW TO Enable Kerberos Event Logging
1 25

308989 - How To Encrypt a Folder in Windows XP
1 25

302093 - HOW TO Prevent Files from Being Encrypted When Copied to a Server
1 25

320044 - How to encrypt files and folders on a remote Windows 2000 Server
2 3

810758 - White Paper An Introduction to the Windows 2000 Public Key Infrastructure
2 3

818761 - White Paper Technical Overview of Windows Server 2003 Security Services
2 36

295663 - How to import third-party certification authority (CA) certificates into the Enterprise NTAuth store
2 36

228786 - How To Export-Import Plain Text Session Key Using CryptoAPI
2 27

304298 - How To Perform CRL Checking with CAPICOM
3 8

257480 - Certificate enrollment using smart cards
3 8

330389 - Internet Explorer Stops Responding at Downloading ActiveX Control Message When You Try to Use a Certificate Server
3 8

218445 - How to configure Certificate Server for use with SSL on IIS
5 10

315672 - How To Use Cipher.exe to Overwrite Deleted Data in Windows
5 10

814599 - HOW TO- Use Cipher.exe to Overwrite Deleted Data in Windows Server 2003
5 12

259732 - EFS Recovery Agent Cannot Export Private Keys
5 12

887414 - How to add an EFS recovery agent in Windows XP Professional
5 13

827014 - New Functionality Is Available for Cipher.exe in Windows 2000 and Windows XP
5 13

298009 - Cipher.exe Security Tool for the Encrypting File System
5 14

322346 - You Cannot Access Protected Data After You Change Your Password
5 16

308993 - How To Remove File Encryption in Windows XP
5 24

241201 - How to back up the recovery agent Encrypting File System (EFS) private key in Windows Server 2003, in Windows 2000, and in Windows XP
5 26

295680 - Using the Cipher.exe utility to migrate self-signed certificates to certification authority-issued certificates
5 33

308991 - HOW TO- Share Access to an Encrypted File in Windows XP
5 35

302093 - HOW TO- Prevent Files from Being Encrypted When Copied to a Server
5 44

311513 - Users with Roaming Profiles Cannot Use EFS On Domain Controllers
5 45

223178 - Transferring Encrypted Files That Need to Be Recovered
6 37

816585 - HOW TO- Apply Predefined Security Templates in Windows Server 2003
7 11

818200 - An Attacker with Physical Access to Your Computer May Be Able to Access Your Files and Other Data
7 23

241352 - How to Prevent DNS Cache Pollution
7 23

316786 - Description of the DNS Server Secure Cache Against Pollution Setting
8 5

313222 - How To Reset Security Settings Back to the Defaults
8 8

816662 - Recommendations for managing Group Policy administrative template (.adm) files
8 10

231287 - Loopback Processing of Group Policy
8 27

324036 - How To Use Software Restriction Policies in Windows Server 2003
8 27

824526 - Microsoft Windows Server 2003 Software Restriction Policies
8 41 818200
9 31

328010 - How to configure automatic updates by using Group Policy or registry settings
10 All

Visit "Matts IPSec information page" for lots of IPSec articles
11 16

814394 - Certificate requirements when you use EAP-TLS and PEAP with EAP-TLS
11 17

325725 - Protected EAP (PEAP) Support Added to Windows XP SP1 and Windows Server 2003
11 41

317588 - HOW TO- Configure a Primary Internet Authentication Service Server on a Domain Controller
11 42

883619 - How to import and to export IAS configuration information from one Windows 2000 Server-based computer to another Windows 2000 Server-based computer
11 44

821978 - Group Policy Support for 802.11 and 802.1x Added in Windows XP Service Pack 1
11 44

811233 - The new Wireless Network (IEEE 802.11) Policies feature is available for Windows Server 2003
11 44

815485 - Overview of the WPA Wireless Security Update in Windows XP

Back to the top

    Creating a Strong and Memorable Password
This quote taken from http://www.microsoft.com/australia/smallbusiness/themes/techwise/effectivepassword.mspx


Computers running Microsoft Windows XP Professional, Windows Small Business Server 2003 as well as Windows NT and Windows 2000 all support strong passwords. They also support pass phrases, which can be easier to remember. Examples of pass phrases might be:

  • I ate (!!) mangoes in Cairns.
  • 3 shoes @ the store cost $92.
Another approach is to select a phrase, but use only the first character of every word. For example:
  • Ocw13iJ.! (Our cat was 13 in Jan.!)
  • Mcif&h@17. (My cat is fat & happy @ 17.)
Another trick for creating easy to remember passwords is to string a couple of words together with numbers and symbols. For instance:
  • 2potatoes+beans$4
  • cOws@the2ndfArm
There are several ways to make pass phrases easier to remember. Since you'll be changing them every few months, you might want to look to an upcoming event or something that holds special significance for you. For instance:
  • Mum&Dad#25Annivers@ry
  • ruNNing@Cty2Surf#1teaM
Once you've created strong passwords or pass phrases, there are three ways to make sure they remain effective:
  1. Always log off when you leave your PC unattended
  2. Change your passwords at least every 90 days
  3. Don't share your passwords with anyone
By putting the power of strong passwords to work, you'll help ensure your confidential information stays that way.

 

Back to the top

    RFC documentation

Back to the top

    Passwords

 

 

    Password Cracking The Art
                                                Brute force Password Grinding - The combinations
1 Character password (84)1 = 84                                         ( 84)
2 Character password (84)2 = 7056                                     (7 thousand)
3 Character password (84)3 = 592, 704                                (592.7 Thousand)
4 Character password (84)4 = 49,787, 136                            (49.8 Million)
5 Character password (84)5 = 4,182,119,424                        ( 4.1 Billion)
6 Character password (84)6 = 351,298,031,616                    (351.3 Billion)
7 Character password (84)7 = 29,509,034,655,744                (29.5 Trillion)
8 Character password (84)8 = 2,478,758,911,082,496           (2.5 Quadrillion)

 

Total = 2,508,623,476,276,260  (Still roughly 2.5 Quadrillion)
 
If you could try 5000 passwords/second, it would take you over 15,000 years of continuous operation to crack the password

8 Character password (84)8 =                 2,478,758,911,082,496           (2.5 Quadrillion)

9 Character password (84)9 =             208,215,748,530,929,664           (208 Quadrillion)

10 Character password (84)10 =     17,490,122,876,598,091,776           (17 Quintillion)
11 Character password (84)11 = 1,469,170,321,634,239,709,184           (1.5 Sextillion)
 
And what if we used some Non-Standard ascii characters and extended the possible character set to 308 (some extra Windows characters are also allowed in passwords)
 Uncrackable Win2k/NT4 Passwords
8 Character password (308)8 =       80,985,213,602,868,822,016           (80 Quintillion)
 
 

 

       

    The Base64 Alphabet

  Value

Encoding  

     

  Value

Encoding  

     

  Value

Encoding  

     

  Value

Encoding  

0

A

  

17

R

  

34

i

  

51

z

1

B

  

18

S

  

35

j

  

52

0

2

C

  

19

T

  

36

k

  

53

1

3

D

  

20

U

  

37

l

  

54

2

4

E

  

21

V

  

38

m

  

55

3

5

F

  

22

W

  

39

n

  

56

4

6

G

  

23

X

  

40

o

  

57

5

7

H

  

24

Y

  

41

p

  

58

6

8

I

  

25

Z

  

42

q

  

59

7

9

J

  

26

a

  

43

r

  

60

8

10

K

  

27

b

  

44

s

  

61

9

11

L

  

28

c

  

45

t

  

62

+

12

M

  

29

d

  

46

u

  

63

/

13

N

  

30

e

  

47

v

14

O

  

31

f

  

48

w

  

(pad)

=

15

P

  

32

g

  

49

x

16

Q

  

33

h

  

50

y

 

Back to the top

    Firewall Stuff

Back to the top

    Virus Information

Back to the top

    Microsoft Knowledge Base Articles

Back to the top

    Security Links

Back to the top

    802.1x Links

Back to the top

    Certificates and PKI

Back to the top

    Securing File Systems Links

Back to the top

    Protected Store

Back to the top

    Standards

Back to the top

    SIDs

Back to the top

    Tools

Back to the top

    Attacks

Back to the top

    EFS

Back to the top

    ISA Links

Back to the top

This page was last edited on Tuesday, 16 March 2010 08:04:48 PM