Technology and troubleshooting.

Tuesday, September 13, 2016

Rename local Administrator account via GPO

This tutorial describes how to rename the local administrator account via GPO. Why we need to rename the Built-in administrator account?
The Built-in Administrator account is one of the most targeted account easily guessed by anonymous person that are attempting to access your computer with full privileges.

Rename local Administrator account via GPO

Let's move on to the tutorial.
All the screenshots are taken from Windows 2012R2 and Windows 8.1 Client.

Step#1 Open the gpmc.msc 
how to open gpmc.msc
Step#2 Group Policy Management console Create a new policy and its named as Rename local Administrator Account for future reference.
[Your Domain]==>Group Policy Objects==>Right click New==>Name[Name for your Policy]

Create a new policy for rename local administrator account
Right click and Edit the newly created policy Rename Local Administrator Account.
Edit a new policy for rename local administrator account
 In Group Policy Management Editor Elapse==>Computer Configuration==>Policies==>Windows Settings==>Security Settings==>Local Policies==>Security Options==>Accounts: Rename administrator account==>Right Click Properties==>Check Define this Policy Settings checkbox==>Rename local Administrator name"Poweruser"
Edit a new policy for rename local administrator account
Step#3 Link a rename administrator account policy to Computer OU
link rename local administrator account for Computer OU
Step#4 Update the group policy in client computer.
RUN==>gpupdate /force refresh the lusrmgr.msc changes.
renamed local administrator account
I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Monday, September 12, 2016

How to fix WAMP is not working on IIS installed machine

This tutorial describes How to fix WAMP is not working on IIS installed machine.

My Scenario:- My teammate informed me can you please check why WAMP service is not started?  I found the issue is caused by recently Installed IIS Web service on WAMP Server installed machine.

Troubleshooting:-
I logon the WMAP the sever type localhost on the browser it navigate to IIS default page.

IIS Default Page
Issue identified, IIS and WAMP Service are listing the same port (Port 80) to run Web Service. So i decided to change the listing port for WAMP Service in order to run WMAP service. 

Resolution:- How to change WMAP Listing Port:- 
Step#1 Travel to "C:\WAMP\bin\apache\Apache2.2.21\conf" directory.
WAMP Directory

Step#2  Open the httpd.config using text editor.
Step#3 Find the line Listen 80 in the httpd.conf file and change it to  "Listen 8080" (or assign any port which is not in use).


change wamp port Listen 8080

Step#4 Start the WAMP Service it will start working using Port 8080.
start wamp service

I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Sunday, September 11, 2016

How to fix metasploit failed to connect to the database

This tutorial describes How to fix metasploit failed to connect to the database in Kali Linux2.0 Sana .

My scenario:- Today i did some experimental with Kali Linux Sana. I tired to connect metasploit database with postgresql it failed to connect database these is the error i got during experimental.
Error:-
root@kali:~# service postgresql start
root@kali:~# service postgresql status
postgresql.service - PostgreSQL RDBMS
   Loaded: loaded (/lib/systemd/system/postgresql.service; disabled)
   Active: active (exited) since Sun 2016-09-11 16:44:35 IST; 48min ago
  Process: 6448 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
 Main PID: 6448 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/postgresql.service
root@kali:~# service metasploit start
Failed to start metasploit.service: Unit metasploit.service failed to load: No such file or directory.


  root@kali:~# msfconsole
                                                  ole.../
# cowsay++
 ____________
< metasploit >
 ------------
       \   ,__,
        \  (oo)____
           (__)    )\
              ||--|| *



Save 45% of your time on large engagements with Metasploit Pro
Learn more on http://rapid7.com/metasploit

       =[ metasploit v4.11.4-2015071403                   ]
+ -- --=[ 1467 exploits - 840 auxiliary - 232 post        ]
+ -- --=[ 432 payloads - 37 encoders - 8 nops             ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]

msf > db_status
[*] postgresql selected, no connection


Solution:-
Here is the solution to fix metasploit failed to connect to the database.
root@kali:~# /usr/bin/msfconsole
msf > msfdb init
[*] exec: msfdb init
msf > msfconsole
[*] exec: msfconsole
msf > db_status
[*] postgresql connected to msf
              [OR]
root@kali:~# /usr/bin/msfconsole start
msf > db_status
[*] postgresql connected to msf
I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Saturday, September 10, 2016

Configure IE11 Proxy Settings Via Group Policy in Windows 2012 R2

This tutorial describes How to Configure Proxy Settings in Internet Explorer 11 via group policy.

My Scenario:-
I've recently updated IE9 to IE11 to users. One day our proxy server went down. So i changed the redundant proxy server IP Address from group policy in Windows 2008R2 but proxy settings are not applied to IE11 Users. I google and found IE11 proxy settings will not applied from Internet Explorer Maintenance (IEM) anymore.
Solution:-
Screenshot are taken from the LAB environment using windows 2012R2 for Security reason.
Step#1  Run==>gpmc.msc

Step#2 Create a new policy for IE11


Step#3 Edit the newly created IE11 policy using group policy management editor


User Configuration==>Policies==>Windows Settings==>Registry (Edit Registry)

Add new Registry

Add the following registry's

1#ProxyEnable
Keypath:Software\Microsoft\Windows\CurrentVersion\Internet Settings
Default:ProxyEnable
Value type: REG_DWORD
Value_Data: 00000001
Base: Hexadecimal

2#ProxyServer
Keypath:Software\Microsoft\Windows\CurrentVersion\Internet Settings
Default:ProxyServer
Value type: REG_SZ
Value_Data: 172.19.120.12:3128

3#ProxyOverride
Keypath:Software\Microsoft\Windows\CurrentVersion\Internet Settings
Default:ProxyOverride
Value type: REG_SZ
Value_Data: hrms;172.19.120.11<local>

4# Gray out Proxy, User can not change proxy settings
Keypath:Software\Policies\Microsoft\Internet Explorer\Control Panel\
Default:Proxy
Value type: REG_DWORD
Value_Data: 1
Base: Decimal
Step#4 Now Link our IE11 Policy into respective OU


Step#5 Logoff and logon Clients or Update group policy in client machine using Run==>gpupdate /force

I hope you this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Friday, September 2, 2016

How to configure the Logon Banner on Domain Computers by using Group Policy

This tutorial describes How to configure the Logon Banner on Domain Computers by using Group Policy in windows 2012R2

Step #1
gpmc.msc
Run==>CMD==>gpmc.msc
Step #2
Create logon banner in windows 2012R2

In Group Policy Objects==>New==>Name"Logon Banner"==> Press Ok==>Logon Banner==>Edit
Step #3
Create new GPO

Group Policy Management Editor==> Click on Computer Configuration, expand Policies, expand Windows Settings, expand Security Settings, expand Local Policies, expand Security Options
 Edit logon banner policy




Edit logon banner policy



On the Right Pane find the Policy==>Interactive logon: Message text for users attempting to log on.
In "Security Policy Settings"  Tab => Tick the "Define this policy settings in the template"==> Type Your Legal message content
Interactive logon Message text for users attempting to log on

Message in Message Box==>Press Ok
Then we need to provide TITLE for Example "WARNING!!!     TECHLANDA."
Interactive logon: Message title for users attempting to log on==>In "Security Policy Settings"  Tab => Tick the "Define this policy settings in the template"==> Your TITLE GOES HERE==>Press Ok
Interactive logon Message title for users attempting to log on

Step #4
Now we are going to Link our Logon Banner Policy.
Right Click on Domain Name "Techlanda.com" ==>Link an Existing GPO...==>GPO Wizard, in group policy objects, Select Logon Banner==> Press ok

Link an Existing GPO
Select Existing GPO

Added Existing GPO


Step # 5
Restart the client machine to Apply changes
Windows logon banner

I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share: