If you double click a drive or folder, Search window may start and the drive or folder may not open. You can remove this problem by doing the following edit on registry.
Start Registry Editor
Go to following path
HKEY_CLASSES_ROOT\Directory\shell
HKEY_CLASSES_ROOT\Drive\shell
Right click and Modify
Type none in the Value data box, and then click OK.
Then Go to RUN
And run this regsvr32 /i shell32.dll
Restart the system
Last one week I was facing problem with one of our server. Whenever I login to that server through RDP it is just showing “Applying Personal settings” And it is hanging . Even I can’t access the shared folder of that server. I searched for a solution but every where its saying that it is a problem with user profile issue and DNS issue. Both may be the reason for this issue. Because I got this same issue with one windows XP PC. It was a problem with wrong DNS entry. That time windows will load after 1-2 minutes. But in the case of a user profile corruption it won’t login.
I checked both options in this server. But it was not the problem in this server. Finally I came to one Microsoft knowledge base and understood it is a problem with Vulnerability in Server service could allow remote code execution.
About this vulnerability :
This is a remote code execution vulnerability. An attacker who successfully exploited this vulnerability could take complete control of an affected system remotely. On Microsoft Windows 2000-based, Windows XP-based, and Windows Server 2003-based systems, an attacker could exploit this vulnerability over RPC without authentication and could run arbitrary code. If an exploit attempt fails, this could also lead to a crash in Svchost.exe. If the crash in Svchost.exe occurs, the Server service will be affected. The Server service provides file, print, and named pipe sharing over the network.
Patched file : WindowsServer2003-KB958644-x86-ENU.exe
Download Patch from Microsoft :
http://www.microsoft.com/technet/security/bulletin/MS08-067.mspx
This security update is rated Critical for all supported editions of Microsoft Windows 2000, Windows XP, Windows Server 2003, and rated Important for all supported editions of Windows Vista and Windows Server 2008. For more information, see the subsection
Recommendation : Microsoft recommends that customers apply the update immediately.
Read more at Microsoft.
http://support.microsoft.com/?kbid=958644
What is MX record ? An MX record is a type of resource record in the DNS specifying how Emails should be routed using the SMTP Each MX record contains a preference and a host name,
We know How to find the IP address of a website uising “Nslookup”
With the help of this command line tool nslookup itself we can find the Mx record of that server.
For example if you want to find the MX enrty of hotmail.com
Type following line in the command line
Nslookup –q=mx hotmail.com
Result
Z:\>nslookup -q=mx hotmail.com
Server: ads.gfslho.geojit.com
Address: 192.168.9.7
Non-authoritative answer:
hotmail.com MX preference = 5, mail exchanger = mx4.hotmail.com
hotmail.com MX preference = 5, mail exchanger = mx1.hotmail.com
hotmail.com MX preference = 5, mail exchanger = mx2.hotmail.com
hotmail.com MX preference = 5, mail exchanger = mx3.hotmail.com
mx4.hotmail.com internet address = 65.54.244.104
mx4.hotmail.com internet address = 65.54.244.232
mx4.hotmail.com internet address = 65.54.245.104
mx4.hotmail.com internet address = 65.55.37.88
mx4.hotmail.com internet address = 65.55.37.104
mx4.hotmail.com internet address = 65.55.37.120
mx4.hotmail.com internet address = 65.55.92.152
mx4.hotmail.com internet address = 65.55.92.168
mx4.hotmail.com internet address = 65.55.92.184
mx1.hotmail.com internet address = 65.54.244.8
mx1.hotmail.com internet address = 65.54.244.136
mx1.hotmail.com internet address = 65.54.245.8
mx1.hotmail.com internet address = 65.55.37.72
mx1.hotmail.com internet address = 65.55.37.88
mx1.hotmail.com internet address = 65.55.37.104
mx1.hotmail.com internet address = 65.55.92.136
mx1.hotmail.com internet address = 65.55.92.152
mx1.hotmail.com internet address = 65.55.92.168
Do you know your drive is shared by default. this sharing will not show the sharing icon in the drive. this sharing is known as administrative shares.
you can access the shares them with a $ sigh.
for example
path to access the C drive of a pc with ip 192.168.0.1 is as follows
If you are running pc with a blank password. anyone can access your drive.
Permanently disable the the admin shares by editing the registry. check the following values
Windows NT 4 Server, 2000 Server, Windows Server 2003
Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareServer
Data Type: REG_DWORD
Value: 0
Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 0
Posts
All Comments
