Re: [ActiveDir] Terminal Services and Connections

2002-06-06 Thread Nah Idee

This is fact. On XP though, MS has taken TS and vnc'ed it, ie there is only
one remote session allowed and it can be a shared one, unlike win2000.
- Original Message -
From: Darren Sykes [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, June 06, 2002 9:53 AM
Subject: RE: [ActiveDir] Terminal Services and Connections


As far as I know, you get 2 remote admin connections and the console
login does not affect the TS behaviour in any way.

Darren.


-Original Message-
From: Morgan, Joshua [mailto:[EMAIL PROTECTED]]
Sent: 06 June 2002 14:50
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Terminal Services and Connections

I use Terminal Services on remote Admin Mode
I was under the impression that it would allow 3 connections to the
machine.
I have a few questions with this:
1. Does TS reserve 1 connection for the local machine logon?
2. If #1 is yes is there any way to force it to allow that reserve to be
used.








Joshua Morgan
PROFITLAB
Senior Network Engineer
PH: (864) 250-1350 Ext 133
Fax: (413) 581-4936
[EMAIL PROTECTED]
http://www.profit-lab.com
http://ncontrol.info

The greatest glory is not in never failing, but in rising up every time
we
fall.
-- Confucius

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] Very OT...Sun

2002-05-26 Thread Nah Idee

Forget NIS+. Your best bet is a Sun book from any book store. It also
depends on what you want to do with the Ultra re DNS.
- Original Message -
From: Marvin Cummings [EMAIL PROTECTED]
To: NT 2000 Discussions [EMAIL PROTECTED]; ActiveDir
[EMAIL PROTECTED]
Sent: Sunday, May 26, 2002 3:37 PM
Subject: [ActiveDir] Very OT...Sun


 Can anyone point me to some online assistance for learning Sun? I have an
 Ultra 10 that I'm trying to setup on my W2K network and I'm having trouble
 deciding on either DNS or NIS+. Acutally I installed it with DNS and I can
 ping my W2K servers fine, I'm just not sure where to go now.
 Any help is appreciated.

 Sorry for the change of topic...

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] OT :: Network Monitoring

2002-04-29 Thread Nah Idee

RE: [ActiveDir] OT :: Network MonitoringThe monitoring suite from Silverback
is quite good. It really doesn't require a resource to config or maintain,
it is installed in about a day and monitors availability, performance and
security of networks, systems and applications in real time or historically
with notification capabilities. They're here
http://www.silverbacktech.com  If you don't have time to roll your own or
the time  money to pay someone, this is an excellent choice.

- Original Message -
From: Fritzel, Max
To: '[EMAIL PROTECTED]'
Sent: Monday, April 29, 2002 2:38 PM
Subject: RE: [ActiveDir] OT :: Network Monitoring


We use Compaq Insight Manager for Compaq Servers, and IPSwitch What's Up
Gold for node availability and paging.  We are evaluating a product called
SilverBack, for additional notifications.
Max
-Original Message-
From: Myrick, Todd (CIT) [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 29, 2002 1:20 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT :: Network Monitoring


NetIQ Appmanager is pretty good, but requires SQL and is expensive.
NetPro is good for AD.
Quest Spotlight Series is great for Troubleshooting problems.
Todd

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



VERY OT Re: [ActiveDir] Program for blocking of websites

2002-04-29 Thread Nah Idee

There is nothing that will do what the parents ultimately want, complete
porn screening. So they have 2 choices. Put in a network and run vnc server
on the lad's PC and watch where he goes on another PC or here's a wild one,
act like parents and exert parental control over internet access, rather
than treat it as a substitute parent or substitute friends. Hell that one's
free. Gee, how much do I have to pay to relinquish my duties as a parent,
because if I can defer the child's needs for now, I can get the state
(prisons, hospitals) to fulfill his needs later, woo hoo. Why did I have
children again ?



- Original Message -
From: Christopher Hummert [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 29, 2002 4:23 PM
Subject: RE: [ActiveDir] Program for blocking of websites


 Yea after talking to them they caught their kid looking at porn and they
 want to block all porn sites from themI think cybersitter will be
 what I'm going to use for them. Thanks to everyone that helped and if
 anyone has any other comments I would love to hear them

 -Chris

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Ellis, Debbie
 Sent: Monday, April 29, 2002 12:43 PM
 To: '[EMAIL PROTECTED]'
 Subject: RE: [ActiveDir] Program for blocking of websites


 I would just enable Content Advisor in Internet Explorer. (Tools.
 Internet Options click on the Content tab) You have to be a local admin
 to do this. You can't block just one site, but it sounds like they want
 to block the porn sites and other objectionable sites. -Original
 Message-
 From: Christopher Hummert [mailto:[EMAIL PROTECTED]]
 Sent: Monday, April 29, 2002 2:59 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [ActiveDir] Program for blocking of websites

 Actually they want to block one of their children from using the
 internet. _Chris

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Christopher
 Hummert
 Sent: Monday, April 29, 2002 11:54 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [ActiveDir] Program for blocking of websites


 Well I just had a user ask if I could do this on their home computer.
 They have windows XP pro. Any idea on how to do it on there? -Chris

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Morgan, Joshua
 Sent: Monday, April 29, 2002 11:51 AM
 To: '[EMAIL PROTECTED]'
 Subject: RE: [ActiveDir] Program for blocking of websites


 Well there are a few ways... Proxy or IAS

 Or a third party program  like WebSense






 Joshua Morgan
 PH: (864) 250-1350 Ext 133
 [EMAIL PROTECTED]
 http://www.profit-lab.com
 http://ncontrol.info


 -Original Message-
 From: Christopher Hummert [mailto:[EMAIL PROTECTED]]
 Sent: Monday, April 29, 2002 2:42 PM
 To: [EMAIL PROTECTED]
 Subject: [ActiveDir] Program for blocking of websites


 I need to block certain websites from a few of my users computers. Could
 someone give me suggestions on how to do this?

 Thanks
 Chris Hummert

 
 Network Administrator - Albany Agency of Insurance
 Webmaster for Noghri.net
 http://www.noghri.net
 MS Beta tester ID #: 388366

 Sometimes I think the surest sign that intelligent life exists elsewhere
 in the universe is that none of it has tried to contacts us.

 - from Calvin and Hobbes
 

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: VERY OT Re: [ActiveDir] Program for blocking of websites

2002-04-29 Thread Nah Idee

Sounds like the youngest kid is still at home ;-|
Would content advisor keep him from viewing this
http://64.205.178.90/b5/rant/spec/1234567.jpg
?
I promise no more...
- Original Message -
From: Ellis, Debbie [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 29, 2002 5:18 PM
Subject: RE: VERY OT Re: [ActiveDir] Program for blocking of websites


 To be honest, I use Content Advisor to keep hubby off the Porn sites, not
my
 kids.  They are in college.



List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] It's A Question Of Trust...

2002-04-16 Thread Nah Idee

I think neither, a  forest for each company with one domain/forest. I would
go with one forest with 2 trees as you offered below.

- Original Message -
From: Rick Kingslan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 16, 2002 10:23 AM
Subject: RE: [ActiveDir] It's A Question Of Trust...


 Eric,

 Tell me I'm reading this wrong - two different forests - one for each
 company - each forest with two domains?  Or, is this a new forest with
 two trees (tree root domains)?

 Thanks!

 Rick Kingslan - Microsoft MVP [Windows NT/2000]
   Microsoft Certified Trainer
   MCSA, MCSE+I - Windows NT / 2000

 Any sufficiently advanced technology
 is indistinguishable from magic.
   ---  Arthur C. Clarke



  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]] On Behalf Of Eric Yeoh
  Sent: Tuesday, April 16, 2002 9:20 AM
  To: [EMAIL PROTECTED]
  Subject: Re: [ActiveDir] It's A Question Of Trust...
 
 
  Go with 2 domains in different Forest with 2-way transitive
  trusts, easier and lesser hassles!
 
  ERIC
  - Original Message -
  From: Blair, James [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, April 16, 2002 8:27 PM
  Subject: [ActiveDir] It's A Question Of Trust...
 
 
  
   All,
  
   Need a bit of advise here...Our sister company has decided to
   eventually migrate to W2K and in their design
  considerations they have
   put forward a proposal to create a new domain and have us integrate
   into it with them to centralise things and therefore make things
   easier to manage etc. Do you think that this is the right
  way to go or
   would it be better to stick with having two domains and a
  transitive
   trust etc. Our core business is not
  the
   same and our network architecture is certainly a lot different to
   theirs. They are used to high speed WAN's and have predominantly
   office workers with the OS, Office Suite, IE 6 etc
  installed. We on
   the other hand have a lot of places linked by various methods of
   phone: Satellite, Mobile etc.
  in
   very remote locations dialling into central points. We also
  have a WAN
   however our backbone is of inferior speed, still pretty
  good however,
  theirs
   a bit OTT. Over and above the standard installations we have a large
  amount
   of software packages to support due to the nature of
  business. There
   is a lot of theorising going on about the best way to go
  and I would
   like a
  real
   world answer. We are fully W2K in mixed mode and have been for more
   than a year now with no hassles...
  
   James
   List info   : http://www.activedir.org/mail_list.htm
   List FAQ: http://www.activedir.org/list_faq.htm
   List archive:
   http://www.mail-archive.com/activedir%40mail.activedir.org/
  
 
  List info   : http://www.activedir.org/mail_list.htm
  List FAQ: http://www.activedir.org/list_faq.htm
  List archive:
  http://www.mail-archive.com/activedir% 40mail.activedir.org/
 

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] It's A Question Of Trust...

2002-04-16 Thread Nah Idee

Well I took these statements as telling
They are used to high speed WAN's and have predominantly office workers
with the OS, Office Suite, IE 6 etc installed. We on the other hand have
 a lot of places linked by various methods of phone: Satellite, Mobile etc.
Over and above the standard installations we have a large amount
of software packages to support due to the nature of business. There
 is a lot of theorising going on about the best way to go and I would
 like a real world answer. We are fully W2K in mixed mode and have
 been for more than a year now with no hassles..
His org has more varying app support, network topologies AND a better
understanding of how to make it work. He needs to bring the other org in,
keeping control himself, but not saying so. He needs to play it off as a
control sharing arrangement, as evidenced by each entity having the 'same'
AD design.He has more at risk, after creating a stable environment
for the other org, it should remain quite stable.


- Original Message -
From: Rick Kingslan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 16, 2002 10:45 AM
Subject: RE: [ActiveDir] It's A Question Of Trust...


 Nah Idee,

 Yep, that's one of the scenarios that I painted in the follow up that
 you should be seeing shortly.  Depends on how well we all get along.

 The only problem that I have with the single forest, two trees is that
 there is the issue with who controls the enterprise and the schema
 accounts.



List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] Need recommendations for internet environment

2002-04-15 Thread Nah Idee

Where do the developers need access, to just the inet app servers or to the
resources of the entire WAN infarstucture ? The 'production' servers are the
inet app servers ?

- Original Message -
From: Baker, David [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 15, 2002 11:40 AM
Subject: [ActiveDir] Need recommendations for internet environment


We currently have a WAN that spans multiple cities and includes a site at
out hosting facility that houses our internet application servers.  We are
considering creating a separate domain, using NTFS security, for the
developers to use for their production needs - which would include 2
thousand new user accounts - which we don't want polluting our existing
infrastructure.

Is this what we should do?  In other words, if we are ABC.com,  should we
create a new domain  XYZ.com  or  create the child DEV.ABC.com?

Now to add a further wrinkle.

One application needs ultimate security.  Perhaps it even needs its own
domain as the top execs have said they want only 1 or 2 people to have any
administrative access to the servers running the specialized application.

Any ideas?

Would like to hear feedback and perhaps some implementation strategies.


Thanks,

David


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] Customzied Logon Screen

2002-04-05 Thread Nah Idee

I know it is possible. Novell supplants the MS login screen altogether.
- Original Message -
From: Fleenor Todd [EMAIL PROTECTED]
To: [EMAIL PROTECTED]; ADSI Discussions (E-mail)
[EMAIL PROTECTED]
Sent: Friday, April 05, 2002 1:37 PM
Subject: [ActiveDir] Customzied Logon Screen


 Does anyone know a way to program a customized logon screen for Windows
 2000?

 I would like to add a fill-in text box that a user can type something
 into.

 Thanks.

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] Changing Tree Structure

2002-04-04 Thread Nah Idee

I would suggest 3 boxes. You have the alpha.com master domain controller
already. Build the new internal.alpha.com on a new box and migrate the
beta.com folks to internal.alpha. Take the old beta.com DC and build a new
external.alpha.com, then migrate alpha.com down to external. Now the box
that is the root DC of the alpha.com forest can be a mid level powered box
since it will be primarily the role(s) holder and 'figure head', while the
int and ext boxes will do the most DC labour.
- Original Message -
From: Kyle Moore [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 7:32 PM
Subject: [ActiveDir] Changing Tree Structure


I currently have two domains: alpha.com and beta.com. There are no trust
relationships built between the two domains. What I would like to do is
migrate alpha.com to external.alpha.com and move beta.com to
internal.alpha.com. They would both be children under the new, empty
root domain called alpha.com.

Two questions:
1. How do I go about doing this to minimize the impact on users?
2. Do I need three separate domain controllers? I am unclear as to
whether domainA.com (which will be empty) will need to be on a separate
domain controller or if it can share with one of the others.


Thanks
--
Kyle


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



[ActiveDir] AD Tool opinions

2002-04-02 Thread Nah Idee

Hi,
I recognize that MS Op Mgr (MOM) gives you good info about AD status, but it
is not free. So I am writing a little VB freeware utility and was wondering
if I could solicit some comments about what you might like to see (or not
see) with respect to what I am proposing to include. Thanks

Performance reports will look like a spreadsheet in html showing (each):

Availability
· A/D Server name
· Availability (tested by doing a login) % avail

Directory Database
· A/D Server name
· Cache % Hit
· Table Open Cache % hit
· Cache Size
· Log Threads Waiting
· Log Record Stalls/sec

Client logins
· A/D Server name
· Time
· #  of logins

NTDS
· A/D Server name
· DS Reads per second
· DS Writes per second
· Threads in use
· Search Time (seconds)

Replication
· A/D Server name
· DRA Inbound Bytes
· DRA Outbound Bytes

Authentication
· A/D Server name
· LDAP bind time
· LDAP client sessions
· LDAP sessions per second
· NTLM Authentications per second


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] sites and domains

2002-04-02 Thread Nah Idee
Title: Message



In the testing I have performed, failover works better in 
scenario A. I have tested scenario A with a 33.6 modem between sites. the 33.6 
saw some relief from time to time, but was mostly pegged. A T1 should not be 
taxed in addition to the traffic that is not AD related.

  - Original Message - 
  From: 
  Jeremy 
  Thompson 
  To: '[EMAIL PROTECTED]' 
  
  Sent: Tuesday, April 02, 2002 3:27 
  PM
  Subject: [ActiveDir] sites and 
  domains
  
  I'm building a new 
  AD network for my company. We'll have two sites with dedicated T1 access 
  between the two. I need to have failover support at each site for exchange 
  2000. Should I create one domain with two different sites or two domains and 
  connect the sites along that logical path? 
  
  Thanks,
  
  Jeremy


Re: [ActiveDir] DNS

2002-03-19 Thread Nah Idee

I would make sure you even need WINS before enabling it on the new 2k PDC.
In my experience, the configuration of DNS on a new win 2000 server seems to
vary in degrees of success, I would attempt to install these on the PDC
first. You mihgt have a better chance of a smooth conversion rather than an
addition. Be sure initially to configure a bogus DHCP range so there are no
overlapping issues.
- Original Message -
From: Scott Krall [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, March 19, 2002 8:13 AM
Subject: [ActiveDir] DNS


 We currently have our DNS/DHCP/WINS running on a Win NT 4.0 member server
 (all of our servers are NT 4.0) and we are going to be upgrading to Win2K.
 Of course, we plan on upgrading our PDC first. Would the recommendation be
 to install DNS/WINS/DHCP on the PDC prior to upgrading to Win2K?
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] Blocking direct telnet access

2002-03-05 Thread Nah Idee

If you have clients outside the firewall that need to access mail on the
exchange server, then you need to reconfigure all of those clients to use
uncommon ports and map those ports through the firewall to 25,110 on your
exchange server. Of course those uncommon ports will respond to a telnet,
but it is less likely an occurrence.
- Original Message -
From: Oluwaseyi Owoeye [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, March 05, 2002 8:03 AM
Subject: RE: [ActiveDir] Blocking direct telnet access


If I block SMTP AND POP3 on my firewall, my exchange server will not be able
to function because the exchange server which is behind my firewall needs
these 2  protocols to function effectively.

 -Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 05, 2002 2:04 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Blocking direct telnet access

Block SMTP and POP3 on your firewall then.


-Original Message-
From: Oluwaseyi Owoeye [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 05, 2002 7:55 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Blocking direct telnet access


What I want to do is to block people from being able to telnet into either
my port 25 which is the smtp port or my pop3 port 110, I am not really
interested in port 23 for now. Could you please help on this

Thanks

 -Original Message-
From: Andy Grafton [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 05, 2002 1:54 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Blocking direct telnet access

Oluwaseyi writes;

How can I block direct telnet access into my exchange 2000 server. Please
any help will be highly appreciated

Seyi AFAIK you can't make a telnet connection to port 23 of a vanilla
2K/exchange 2K server.  You'd get connect failed or similar.  I have no
idea of the actual application, but I am guessing you *do* mean telnet via
port 23?

I would think that a firewall of some description is the best idea if you
want to control connections to the machine.

If you want to turn on a level of TCP/IP security on the server, you can get
to it via the options of advanced properties of the IP settings for the
network card(s).  Turn on TCP/IP filtering with the appropriate settings.

You could install a software firewall.

I think you need to be really clear about what you do or don't want to let
through to the server before implementation, though.

All the best,

Andy

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


--
The information contained in this email message is privileged and
confidential information intended only for the use of the individual or
entity to whom it is addressed.  If the reader of this message is not the
intended recipient, you are hereby notified that any dissemination,
distribution or copy of this message is strictly prohibited.  If you have
received this email in error, please immediately notify Veronis Suhler
Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
([EMAIL PROTECTED]) and delete the message.  Thank you.


==

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



Re: [ActiveDir] Server availability/monitoring/management tools

2002-01-10 Thread Nah Idee

MOM is MS's attempt to compete (I mean take away market share) with CA
Unicenter and Tivoli in the frameworks arena. MS and NetIQ together
developed the MOM architecture. NetIQ offers plugins, sure, they wrote most
of MOM. MOM is probably the most comprehensive AD geared management system
you can use. With NetIQ offering unix, notes, netware, etc plugins for MOM,
there you have your CA, Tivoli equivalent. Of course I would doubt MOM's
foray into mainframes, but most large organizations still have a separate
support system for mainframes. There should be LESS consulting work to
roll a cross platform MOM solution, but it is quite new.
My organization uses a tool from here http://www.silverbacktech.com
It utilizes WMI (windows management instrumentation) to keep tabs on NT and
win2000 resources, but also does many other things.

- Original Message -
From: Thomas Di Nardo [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, January 10, 2002 9:46 AM
Subject: RE: [ActiveDir] Server availability/monitoring/management tools


It's not an AD only tool. You ought to take a longer look at it.

Tom.

-Original Message-
From: Flanagan, Kevin [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 10, 2002 8:59 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Server availability/monitoring/management tools

Well, MOM is really an AD only tool, and a framework that you can plug other
things into, IE: NT4 modules from NetIQ.  I think that those modules are
more or less based on NetIQ Appmanager.   I've really liked Appmanager where
we used it at my last job.



-Original Message-
From: Abbiss, Mark [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 10, 2002 8:53 AM
To: '[EMAIL PROTECTED]'
Subject: AW: [ActiveDir] Server availability/monitoring/management tools


Thanks, looking at it right now..anything else out there ?

Mark Abbiss

EADS Headquarters
81663 Muenchen
Deutschland
Phone : +49 (0)89 607-34776
Email:[EMAIL PROTECTED]


-Ursprüngliche Nachricht-
Von: Strand, Ted [mailto:[EMAIL PROTECTED]]
Gesendet: Donnerstag, 10. Januar 2002 14:51
An: '[EMAIL PROTECTED]'
Betreff: RE: [ActiveDir] Server availability/monitoring/management tools


You might want to look at Microsoft MOM.  It is similar to a lighter version
of NETIQ and I think it is less expensive.



-Original Message-
From: Abbiss, Mark [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 10, 2002 8:46 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Server availibility/monitoring/management tools

Does anyone have any strong recommendations for a good Windows 2K server
monitoring/management tool ? We are ideally looking for something that can
monitor a range of running services and server availability and take
remedial action if anything goes wrong (restart server or service) and
notify support staff by email, SMS or pager.

A flexible reporting tool that can be directly accessed via a browser is
also required.

Have looked at NetIQ but it is SO expensive !

Regards,

Mark Abbiss
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/