OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: NTFS and ACLs
From: Free, Bob (RWF4PGE.COM)
Date: Thu Sep 14 2000 - 14:05:25 CDT

There was an article on how to remove SCM published about the time SP4 came
out. Look in the MS KB for it.

-----Original Message-----
From: Gu1tarb0yaol.com [mailto:Gu1tarb0yaol.com]
Sent: Thursday, September 14, 2000 9:14 AM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Re: [FOCUS-MS] NTFS and ACLs

AD
aka thorhammerofgod

Thanks. SCM is the culprit, I had not even made that association with it.
Recommended by Info Sec people up the corporate ladder, they neglected to
state there is an artifact. I tried reloading SP6a but that made no
difference. I have put in a call to gripe at them and see what is to be
done. I hope they can give me something better than just reloading the OS
which is easy enough, but then I have to start hardening things down again.
There in lies the pain.

I found that with REGEDT32 on this machine, somehow the acledit.dll was
missing from winnt\system32 folder. (It sure helps to carefully read the
error MSGs and then do some creative interpretations). I found the .DLL in
winnt\temporary internet files\system32 (???). I moved it back to the
winnt\system 32 folder and voila...I'm cooking with gas. Many thanks

Jim McFarlen
"Extracting the stone of madness chip by chip"