RE: [ActiveDir] spyware(OT)
In case no one has mentioned it, this solution works great: http://www.mvps.org/winhelp2002/hosts.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manuel Santos Sent: Friday, June 11, 2004 10:49 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] spyware(OT) I distributed AdAware (http://www.lavasoftusa.com/software/adaware/) and made my users use it in a regular basis (once a week, at least) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: sexta-feira, 11 de Junho de 2004 15:16 To: [EMAIL PROTECTED] Subject: [ActiveDir] spyware(OT) My users are inundated with spyware and adware, what are the ways you guys deal with this? do you change the zone settings in I.E via gpo? can you turn spybot/spyblaster into an msi and push it out? Its hard for me to block access to web sites via an application firewall as we're a liquor ditribution company and our sales staff has to go to liqour sites that may have links to gambling or porn. i'd love to hear any ideas. thanks alot List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SMS 2003
Here's a script to get the OS. It'll give you a start. http://www.myitforum.com/articles/11/view.asp?id=7108 BTW: You could also utilizeremote installation, which would auto-detect the OS. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve ShaffSent: Thursday, May 13, 2004 1:13 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SMS 2003 This means that I would have to take a group of computers and manually push the client. I like setting up automation, makes my job easier. S From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod TrentSent: Thursday, May 13, 2004 9:00 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SMS 2003 Why not just use targeted Client Push? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve ShaffSent: Thursday, May 13, 2004 11:11 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] SMS 2003 Is anyone using SMS 2003 with an AD2003 domain? I am trying to create a logon script to detect the clients OS and install the appropriate SMS Client. I need some scripting help, if someone would be willing. It is not going extremely well. L Thanks,S
RE: [ActiveDir] Login script problems
Can you post a copy of the script? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Thursday, April 22, 2004 3:35 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Login script problems I just wanted to say this newgroup is GREAT and has saved me a lot of calls to Microsoft but this last problem is killing me. What is going on is I have a login script assigned to the user and if the user logs into Windows XP it works perfect, the script is just net using a few drives. Now if the same user logs into a Windows 2000 Pro computer the script does not run at all. I have no idea why this is and I check FRS and the script is on all the DC's so I know it's there. I have 6 test users and this happens to all of them. Any ideas would be great! ThanksRyan
RE: [ActiveDir] SUS 2.0 Beta
Most likely from your friendly neighborhood MVP. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Philadelphia, Lynden - Revios Toronto Sent: Wednesday, April 14, 2004 1:10 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS 2.0 Beta How will we be notified when it is ready for public use Lynden -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 12:57 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta I believe its currently considered a closed beta, by invitation only. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Robbie Foust [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 12:24 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS 2.0 Beta Looks like you can sign up for the open evaluation version here: http://www.microsoft.com/windowsserversystem/sus/wusbeta.mspx But I haven't been able to locate the beta version yet. Haven't found a Guest ID yet either. - Robbie Robbie Foust, IT Analyst Systems and Core Services Duke University England, Christopher M wrote: Greetings, I guess SUS 2.0 Beta has been released: _http://www.nwc.com/showitem.jhtml?articleID=18400592_ Does anyone have a Guest ID to get in on the Beta? Or is there just a download somewhere? Thanks all, Chris Christopher England Systems Administrator MCSA, Server+, Network+, A+ College Information Technology Office Indiana University List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS 2.0 Beta
This was asked and answered in the recent Microsoft public chat on WUS, but I can't seem to locate the chat transcripts page. Anyone have a link? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Wednesday, April 14, 2004 1:57 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta Does anyone know what the upgrade process is going to be from SUS to SUS 2.0? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Wednesday, April 14, 2004 1:41 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta Same way all other products are announced. My information has it that you've got a few months still before it goes public. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Philadelphia, Lynden - Revios Toronto [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 1:10 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS 2.0 Beta How will we be notified when it is ready for public use Lynden -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 12:57 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta I believe its currently considered a closed beta, by invitation only. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Robbie Foust [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 12:24 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS 2.0 Beta Looks like you can sign up for the open evaluation version here: http://www.microsoft.com/windowsserversystem/sus/wusbeta.mspx But I haven't been able to locate the beta version yet. Haven't found a Guest ID yet either. - Robbie Robbie Foust, IT Analyst Systems and Core Services Duke University England, Christopher M wrote: Greetings, I guess SUS 2.0 Beta has been released: _http://www.nwc.com/showitem.jhtml?articleID=18400592_ Does anyone have a Guest ID to get in on the Beta? Or is there just a download somewhere? Thanks all, Chris Christopher England Systems Administrator MCSA, Server+, Network+, A+ College Information Technology Office Indiana University List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS 2.0 Beta
SUSServer.com is hosting a contest for a better name: http://forums.susserver.com/index.php?showtopic=2032 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Wednesday, April 14, 2004 4:37 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta At the MVP summit, even the WUS product team was appologizing for the name. I was kinda hoping they're rename MIIS to the Windows Identity Integration Server. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 2:44 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta Yes, painfully, that is true. MS Marketing strikes again. I can just see the advertising: Trust your network to a WUS -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christopher Hummert Sent: Wednesday, April 14, 2004 11:09 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta Waitisn't the next version called WUS now or am I mistaken? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Wednesday, April 14, 2004 10:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta Does anyone know what the upgrade process is going to be from SUS to SUS 2.0? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Wednesday, April 14, 2004 1:41 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta Same way all other products are announced. My information has it that you've got a few months still before it goes public. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Philadelphia, Lynden - Revios Toronto [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 1:10 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS 2.0 Beta How will we be notified when it is ready for public use Lynden -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 12:57 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS 2.0 Beta I believe its currently considered a closed beta, by invitation only. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Robbie Foust [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 12:24 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS 2.0 Beta Looks like you can sign up for the open evaluation version here: http://www.microsoft.com/windowsserversystem/sus/wusbeta.mspx But I haven't been able to locate the beta version yet. Haven't found a Guest ID yet either. - Robbie Robbie Foust, IT Analyst Systems and Core Services Duke University England, Christopher M wrote: Greetings, I guess SUS 2.0 Beta has been released: _http://www.nwc.com/showitem.jhtml?articleID=18400592_ Does anyone have a Guest ID to get in on the Beta? Or is there just a download somewhere? Thanks all, Chris Christopher England Systems Administrator MCSA, Server+, Network+, A+ College Information Technology Office Indiana University List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ:
RE: [ActiveDir] Updating Schema to Windows 2003
Also, if you stick in the CD to upgrade a server, it will check the server and AD type, and will not upgrade until you have performed those steps. It even gives you the steps to perform that you can copy/paste. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Tuesday, April 06, 2004 1:19 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Updating Schema to Windows 2003 I am not aware of any KB articles, but here are the steps that were performed on our upgrade. The forest and domains are prepared by using the adprep command on the schema operations master and infrastructure operations master, respectively. (25min) * At a command prompt, change to the \I386 directory on the installation media and then type: d:\i386\adprep /forestprep * When prompted, type 'C', and then press ENTER to begin forest preparation, or type any other key, and then press ENTER to cancel. * After the forest preparation data has replicated throughout the forest, prepare the domains for Windows Server 2003 as described below. The domain preparation operation must be performed on the infrastructure operations master of each domain in the forest. (no reboot necessary) Prepare an Active Directory domain for Windows Server 2003: (4min) * On the domain controller holding the infrastructure operations master role * At a command prompt, change to the \I386 directory on the installation media, and then type: d:\i386\adprep /domainprep * After the domain preparation data has replicated throughout the domain, upgrade the domain controller by running Windows Server 2003 Setup (I386\winnt32.exe on the installation media). (no reboot necessary) * Specify Upgrade from menu options * Enter Corporate CD Key * Update Setup Files from Microsoft (system reboots) * Setup will now prepare the installation * Installing Windows * Finishing Installation (system reboots) o Total Install Time: 2 hours 10 minutes Hope this helps. S * Steve Shaff Active Directory / Exchange Administrator Corillian Corporation (W) 503.629.3538 (C) 503.807.4797 (F) 503.629.3674 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, April 06, 2004 10:13 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Updating Schema to Windows 2003 I have a question, what are the steps to update the schema to Windows 2003? Is there a q article out there? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] MSI Deployable apps
You might try Appdeploy.com But, still, if it comes in MSI format, it should be deployable via GPO. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Gauss Sent: Tuesday, April 06, 2004 9:32 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] MSI Deployable apps Is there any site or anything that lists the apps that can be deployed via MSI and Group Policies?? The information contained in this communication may be confidential or legally privileged and may contain confidential health information. This email is intended only for the recipient named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication or its contents is strictly prohibited. Confidential health information is protected by state and federal law, including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 and related regulations. If you have received this communication in error, please immediately advise the sender and delete the original and any copies from your computer system. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Remote Desktop
VB Script and a GPO, or Login Script. http://www.myitforum.com/articles/11/view.asp?id=2457 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Philadelphia, Lynden - Revios TorontoSent: Wednesday, March 24, 2004 3:16 PMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] Remote Desktop Is there a way to add Domain Admins to the Remote Users of every pc in our Domain with AD and not go to every PC?
RE: [ActiveDir] Finding users who must change pw (and OT side thread)
Rename it with a .txt extension. Or upload it to a site where everyone can get to it. If you need it, myITforum.com has an upload facility for anyone. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lou VegaSent: Thursday, March 11, 2004 10:18 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Finding users who must change pw (and OT side thread) OK there are many, many virus alerts coming to me now based on a VBS file being zipped in my last e-mail. For those who can read the VBS, youll see that there is indeed NO virus. This brings up an interesting slightly OT question though: When you need to legitimately send a VBS file or other type file that is frequently targeted as a virus, what is a good and acceptable way to send it so that it doesnt get blocked? Of course the double-edged sword there is that if legitimate users find a way to safely send such files, of course the bad guys will too. r/ Lou -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lou VegaSent: Thursday, March 11, 2004 10:01 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Finding users who must change pw Attached youll find a VB script written by Brad Sanford which Ive used to generate user dumps before. One note with it open it up and find the lines: Domain = "YourDOmainGoesHere" OutfileName = "c:\AllUsers.txt" On the domain = line put your domain name (i.e., Microsoft not Microsoft.com) and on the OutfileName= put the path to the file you want the results written to. Enjoy! r/ Lou Vega -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Thursday, March 11, 2004 9:46 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Finding users who must change pw I need to find which users have their accounts currently flagged to require a password change on next logon. Can that be done with dsquery user stalepwd? If so, what value would I use? Or, is there a different solution I should be using? Thanks! Mark Creamer Systems Engineer Cintas Corporation Honesty and Integrity in Everything We Do
RE: [ActiveDir] [OT] SMS LIST???
Title: [OT] SMS LIST??? Yes...the migration will start Monday. The SMS list is the last one to migrate. Here's where its migrating to: http://www.listleague.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, MikeSent: Friday, March 05, 2004 3:28 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] [OT] SMS LIST??? There's one hosted by Topica. The address is [EMAIL PROTECTED]. Excellent contributors on the list and it's very very active. FYI it's run by www.MyItForum.com and will be migrating to their list server starting Monday so you may want to wait till then to subscribe. Rod Trent runs the list (whom I'm pretty sure subscribes to this list too) so he can provide more information. Mike From: Brown, Bill [contractor] [mailto:[EMAIL PROTECTED] Sent: Friday, March 05, 2004 3:22 PMTo: ActiveDirListSubject: [ActiveDir] [OT] SMS LIST??? To All, Can anyone recommend a list for SMS that has quality contributors - like this one? R/Bill
RE: [ActiveDir] OT - VNC / Remote Administration
The straight version of VNC is less secure than PCAnywhere (sends passwords in clear text format). You'll want to look at a secure version that uses Windows authentication. UltraVNC offers this: http://ultravnc.sourceforge.net/ And, UltraVNC tends to be the fastest implementation out there. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank AbagnaleSent: Thursday, February 19, 2004 9:17 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] OT - VNC / Remote Administration Sorry for the OT post, does anyone have any experience with VNC as a remote tool for your servers, more specifically NT4 Servers? We use Terminal Servicesor HP Remote Insight (depending on what needs to be done)for our new core Windows 2000 AD servers for day to day administration, however, on our legacy NT4 domain, we have a number of NT4 servers which we a planning to move over to our Windows 2000 domain but not for another 6-8months. In this time they will still need to be remotely administered. They currently have PCAnywhere installed on there and it's something our security guyhas recommended we removed and installed a different package on. any feedback? - Frank Frank Abagnale Do you Yahoo!?Yahoo! Mail SpamGuard - Read only the mail you want.
RE: [ActiveDir] Other Listsrvs
Title: Message SMS list= www.topica.com/lists/mssms SMS web site = www.myITforum.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve ShaffSent: Monday, February 09, 2004 1:58 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Other Listsrvs This is a general question for the group. I am in charge more than just the active directory, schema, trusts, etc. I have found that this has been a valuable source of information and I would like to know if anyone knows of other listsrvs that deal with SMS and/or exchange, that are as good as this one? Thanks,S
RE: [ActiveDir] Integrate Linux with AD
Look into Microsoft's Services for Unix 3.5. http://www.microsoft.com/windows/sfu/default.asp -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, February 03, 2004 10:20 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Integrate Linux with AD this is the best link I know.- http://www.securityfocus.com/infocus/1563 -Original Message- From: Jennifer Fountain [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 03, 2004 10:13 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Integrate Linux with AD Does anyone know where I can locate instructions on how to integrate Linux clients with AD? Has anyone on the list implement this successfully and would they share this information? Thank you for any information! Jennifer List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] schema updates (SMS 2003)
The toolkit was released on 12/3/2003 but updated on 1/23/2003. The LDIF was included in the update. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Monday, February 02, 2004 7:10 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] schema updates (SMS 2003) Thanks Lee Do you know if this is new? I seem to remember hunting high and low for this a few months back. At that time I was also in contact with Microsoft and wasn't made aware of it. Tony -- Original Message -- From: Flight, L. [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 2 Feb 2004 10:45:10 - In fact there is an LDIF file for SMS2003, it's buried in the SMS2003 Toolkit: http://www.microsoft.com/smserver/downloads/2003/tools/toolkit.asp Unfortunately the SMS2003 Active Directory Schema Modification and Publishing for Systems Management Server 2003 documentation at: http://www.microsoft.com/downloads/details.aspx?FamilyID=d1de764c-8e26-455f- bee5-34fb1ca9f2c4DisplayLang=en neglects to mention it. :( Lee -- Lee Flight Network Support, Computer Centre University of Leicester Date: Fri, 30 Jan 2004 09:46:35 -0500 From: Tony Murray [EMAIL PROTECTED] Subject: RE: [ActiveDir] schema updates Reply-To: [EMAIL PROTECTED] I completely agree with you Joe. I've been hassling vendors left, right and centre to provide LDIF file for schema extensions. Unfortunately, noone appears to listen. The most recent extensions I've tested have been from MS (SMS 2003) and HP (Managed Objects), both of which fail to provide LDIFs. If we can't get the big boys to provide them, what hope do we have with the smaller vendors. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] schema updates (SMS 2003)
Doh! Yeah...2004. The SMS Admin could install the toolkit (who will want to use it anyway) and then pass along the contents to the AD team. Still, good point. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Monday, February 02, 2004 7:24 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] schema updates (SMS 2003) Thanks Rod. I assume you mean 1/23/2004? It's great to have the update. The only complaint I have is that you need to actually install the toolkit to get it. Typically, the schema updates are tested by the AD team, who are not likely to want to have to download and install the toolkit. Tony -- Original Message -- Wrom: HYUCDDJBLVLMHAALPTCXLYRWTQTIPWIG Reply-To: [EMAIL PROTECTED] Date: Mon, 2 Feb 2004 07:15:22 -0500 The toolkit was released on 12/3/2003 but updated on 1/23/2003. The LDIF was included in the update. -Original Message- Wrom: YOKSTTZRCLBDXRQBGJSNBOHMKHJYFMYXOE [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Monday, February 02, 2004 7:10 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] schema updates (SMS 2003) Thanks Lee Do you know if this is new? I seem to remember hunting high and low for this a few months back. At that time I was also in contact with Microsoft and wasn't made aware of it. Tony -- Original Message -- Wrom: AIJJPHSCRTNHGSWZIDREXCAXZOWCONEUQZ Reply-To: [EMAIL PROTECTED] Date: Mon, 2 Feb 2004 10:45:10 - In fact there is an LDIF file for SMS2003, it's buried in the SMS2003 Toolkit: http://www.microsoft.com/smserver/downloads/2003/tools/toolkit.asp Unfortunately the SMS2003 Active Directory Schema Modification and Publishing for Systems Management Server 2003 documentation at: http://www.microsoft.com/downloads/details.aspx?FamilyID=d1de764c-8e26-455f- bee5-34fb1ca9f2c4DisplayLang=en neglects to mention it. :( Lee -- Lee Flight Network Support, Computer Centre University of Leicester Date: Fri, 30 Jan 2004 09:46:35 -0500 Wrom: AAFXISHJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIY Subject: RE: [ActiveDir] schema updates Reply-To: [EMAIL PROTECTED] I completely agree with you Joe. I've been hassling vendors left, right and centre to provide LDIF file for schema extensions. Unfortunately, noone appears to listen. The most recent extensions I've tested have been from MS (SMS 2003) and HP (Managed Objects), both of which fail to provide LDIFs. If we can't get the big boys to provide them, what hope do we have with the smaller vendors. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Parse CSV with script?
Something like this? http://www.myitforum.com/articles/11/view.asp?id=4380 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent: Friday, January 23, 2004 3:41 PM To: ([EMAIL PROTECTED]) Subject: [ActiveDir] Parse CSV with script? I'm sure this is probably pretty simple to do, but being a script newbie, I don't really know where to look to find what I need. I'm running dumpevt against my critical servers via a batch file. Each run drops the logs into a separate folder for the server onto my admin machine . So what I end up with is a series of folders with 3 .tmp files. I usually open them in UltraEdit and read through them each morning. I like dumpevt since I can easily look at just the logs since the last check. Here's what I'd like to do. I'd like to be able to run a script against the .tmp files that would provide me only the lines with criteria that I want to see, like error, warning, or failure audit. Or maybe a source criteria, like w32tm or netlogon. Does this make sense? Is it possible? Again, I'm not great with scripting yet, so I don't really know how to write this from scratch. Can anyone point me to a resource with a sample or better? Thanks! ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 985 0975 x5083 ** List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Apply patch's via vbs scripts
I'm curious...why two different patching mechanisms? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of marcus Sent: Thursday, January 22, 2004 8:15 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Apply patch's via vbs scripts Yeah, we use SMS for desktops and use Shavlik for servers here. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pennell, Ronald B. Sent: Thursday, January 22, 2004 12:37 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Apply patch's via vbs scripts They have battle field dressings that will stop the bleeding. Anyway, looking for a good cross platform package (unix, linux, mac's, And windows systems. Anyone using any type of software package that will do patch management? Ron -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Thursday, January 22, 2004 12:26 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Apply patch's via vbs scripts I'd describe it as more of a sucking chest wound than a bleeding ulcer -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Ken Cornetet [mailto:[EMAIL PROTECTED] Sent: Thursday, January 22, 2004 11:49 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Apply patch's via vbs scripts Trust me, there is a bleeding ulcer at the end of that path. Too many different schemes for patching, and too many places to look to see if a patch needs applied. Use SUS or buy Shavlik. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pennell, Ronald B. Sent: Thursday, January 22, 2004 11:28 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Apply patch's via vbs scripts Does anyone have scripts that push patch's across their network to all systems. Running w2k sp3 on servers. Clients are 98, NT, w2k, w2k XP and w3k. Ron Pennell List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Using InstallShield in a Startup Script
You may need to give the InstallShield setup file a path on the command-line. http://www.myitforum.com/articles/1/view.asp?id=272 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, MikeSent: Wednesday, November 19, 2003 4:12 PMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] Using InstallShield in a Startup Script Has anyone ever called an InstallShield setup from a startup script before? I have a simple batch file that calls an InstallShield setup.exe filefrom a startup script but it never seems to run. The setup.exe file is on a server with a Null Share. I've verified that the script is able to reach the file but the setup does not seem to run. The machine I'm testing it on says "Running startup scripts" when it boots up for about 15 minutes but the setup program is never run. If I login to the machine and run the file it works without any problems. Mike Celone Systems Specialist Radio Frequency Systems v 203-630-3311 x1031 f 203-634-2027 m 203-537-2406
RE: [ActiveDir] Bare metal restore on other hardware?
Have you thought about looking into using ADS? http://www.microsoft.com/windowsserver2003/technologies/management/ads/defau lt.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Friday, November 07, 2003 5:21 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Bare metal restore on other hardware? Identical hardware then? -Original Message- From: Chris Flesher [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2003 4:12 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Bare metal restore on other hardware? The machine was a member server with the TSM client installed. Ran a restore and rebooted, brought back registry, and backup made it a DC with info at time of backup. It replicated and was good. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Friday, November 07, 2003 10:32 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Bare metal restore on other hardware? What'd you restore? Were there other DC's available to replicate to? -Original Message- From: Chris Flesher [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2003 11:25 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Bare metal restore on other hardware? We managed to do a restore of AD to other Hardware. However, what we did is re-install the OS, put the backup client on there, and do a restore. Tivoli's TSM product worked pretty well in this regard. -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Orin Rehorst Sent: Friday, November 07, 2003 10:15 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Bare metal restore on other hardware? I'm charged with planning for disaster recovery. The goal is to restore active directory to new hardware at a hot site. Can you do a bare metal active directory restore on other hardware? TIA Regards, Orin Orin Rehorst Port of Houston Authority (Largest U.S. port in foreign tonnage) e-mail: [EMAIL PROTECTED] Phone: (713)670-2443 Fax: (713)670-2457 TOPAS web site: www.homestead.com/topas/topas.html List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] vbscript output to html
Here's an example: http://www.myitforum.com/articles/11/view.asp?id=1393 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich MilburnSent: Monday, November 03, 2003 2:28 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] vbscript output to html While scripting seems to be a good topic today, perhaps Ill throw this one out there: Does anyone know a qnd way to output vbscript results to html? Were trying to get users to change passwords till the average age comes down, and while I have some good tools (courtesy of joeware.net) that will show me the info I need, it would be nice if I could keep this running and put a page up for managers to see how the progress is going. Hmm I might this to a csv file or something for graphs any ideas? (PS yes I am doing research on my own, but my first exposure to vbscript was last Thursday I managed to avoid it for 10+ years of Windows but I guess its finally caught up with me! J ) Rich ---APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE--- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.
RE: [ActiveDir] RestrictAnonymous Settings
Keep in mind that with the RestrictAnonymous value set, SMS will not be able to detect the OS of discovered computers. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marcus Oh Sent: Sunday, November 02, 2003 12:21 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] RestrictAnonymous Settings This has been a long week. We finally made the RestrictAnonymous=1 setting this weekend to combat what looked like Gaobot infections locking out thousands of accounts. Gave the PDCe a good run for the money with all the lock/unlock activity going on. The odd thing is, shortly after we put the settings in place and bounced all the domain controllers, it still happened. The bottom line being, a two fold situation. One, an infection of sdbot, causing lockouts... the other we discovered on a sniff of one of the DCs showing ridiculously high # of packets originating from one machine. Finally in the clear for now... Problem is, any script written to enumerate objects w/ a normal or logged-on user account and attempt a dictionary list of passwords is going to cause this same problem. Any of you guys have lockout policies in place... and if so... what steps have you taken to mitigate these lockout storms? Thanks! Marcus attachment: winmail.dat
RE: [ActiveDir] OT: enterprise Spam blocking products
Outlook 2003 does a great job at handling Spam. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fuller, Stuart Sent: Tuesday, October 21, 2003 2:05 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT: enterprise Spam blocking products Jason, Two possible solutions to consider: 1. Cloudmark SpamNet - this runs locally on the client and automagically moves spam from the inbox to a spam folder. See http://www.cloudmark.com/ 2. Hardware based Spam appliance - this device sits in front of your mail gateways and filters the mail before it even hits Exchange. Users get a daily email report so that they can see what has been blocked and have an opportunity to request the blocked mail. An example of this is Espion's Interceptor appliance - see http://www.espionintl.com/interceptor.html -Stuart -Original Message- From: Jason Benway [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 21, 2003 11:34 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] OT: enterprise Spam blocking products I started testing different spam products for our company. I'm testing GFI right now. I'm really like Ihatespam Gateway edition, but it has limitations because of CDO. What I'm looking for a software that will move spam into a user's folder other than the inbox without the user having to setup a filter in outlook. I would also like for the user to have the ability to 'tell' the software when it missed a spam message or incorrect tags a message as spam. I would prefer a product that does not run directly on the Exchange box. We are currently running Exchange 5.5 in a cluster. I know I'm asking a lot, but I thought will everyone's help I could find a product that is close. Thank you. jb List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: NetIQ or MOM
Title: Message Amen. BTW: MOM 2004 beta is right around the corner, and the product looks awesome. MS will be making some serious headway with MOM in the next 2-3 years, before combining their systems management products. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris FlesherSent: Thursday, October 09, 2003 10:44 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] OT: NetIQ or MOM Well, we're going to be coming from Tivoli, so cost isn't so much a factor. Anything is easier to manage and costs less than Tivoli. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Abbiss, MarkSent: Thursday, October 09, 2003 9:22 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] OT: NetIQ or MOM Forget MOM..Net IQ costs and arm and a leg and needs hours of extra consulting to get your out-of-the-box installation doing what you want it to do. We evaluated both MOM and Net IQ as well as RoboMon (www.itheon.co.uk) and went for the latter. EXCELLENT support, second to none and the product does what it says it will and it only took 2 days to get it up and running. Its also significantly cheaper than the other 2. Just my 2p -Original Message-From: Chris Flesher [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 9. Oktober 2003 16:13To: [EMAIL PROTECTED]Subject: [ActiveDir] OT: NetIQ or MOM We're looking at NetIQ for monitoring our Windows/SQL stuff, as well as what it can do on Unix (Solaris, AIX). However, with Microsoft going head on into monitoring, should I be worried about the affect this will have on NetIQ in the short/long term? Which is a better product right now? Which has better cross-platform support? We are a dominantly Windows in this department, with Unix in there as well. Thank you for any info you may have. Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477
RE: [ActiveDir] SUS failure rate
Another issue is if the end-user manually visits the Windows Update website and installs their own updates from there. This can throw SUS for a loop. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of England, Christopher MSent: Friday, September 26, 2003 9:21 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SUS failure rate We have seen this occasionally, but usually it is due to some extenuating circumstance. Like if we had turned off theSUS GPO to do some testing (we only have one SUS server setup right now, with multiple GPOs) the clients revert back to their previous Automatic Update settings. If they have it set to Download but Prompt me, they can ignore those. Therefore SUS will think they are good, but they are really not. Similarly, if they turn their computers off continually during the time you have SUS set to run (like ours is 3 AM every day), they may have downloaded the patches earlier (we find sometime in the afternoon or late evening it prepares this), but if the computer is off, it never runs. And if it prompts them the next morning, they can choose to ignore. Ok, enough rambling. But what it comes down to is a bit of planning on our end (the sysadmins) as well as a bit of user education. The latter is the part that has been most troublesome for us. I guess "leave your computer on (but logged off) all the time" does not mean anything to anyone. :) Chris - Christopher England Server Administrator MCSA, Server+, Network+, A+ College Information Technology Office Indiana University From: Greg Felzer [mailto:[EMAIL PROTECTED] Sent: Friday, September 26, 2003 8:08 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] SUS failure rate I was wondering what kind of failure rate you have all been seeing having SUS install patches. We are preparing a lab test to get hard numbers. We have seen failures where SUS repeatedly tries to install the same patch on each connect and where SUS claims the patch is installed but scanning with HFnetCHKPro shows that the patch is not installed. Greg FelzerMCSE NT4, MCSE 2000, CCA, CCNA, CNASenior Systems EngineerCenter for Computing and Information TechnologyMedical University of South Carolina
RE: [ActiveDir] SUS failure rate
There are still a myriad of ways to get to the Windows Update website. If you venture out to Microsoft.com for very long (or any other technical site), there will be links to Windows Update. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Lynch Sent: Friday, September 26, 2003 11:33 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS failure rate -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 And this is why you should disable all links to Windows Update on your client workstations via a GPO. Chris Lynch Senior Network Engineer Axcent Solutions, Inc. *Opinions expressed here does not necessarily reflect what the company views are.* From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod Trent Sent: Friday, September 26, 2003 6:26 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS failure rate Another issue is if the end-user manually visits the Windows Update website and installs their own updates from there. This can throw SUS for a loop. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of England, Christopher M Sent: Friday, September 26, 2003 9:21 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS failure rate We have seen this occasionally, but usually it is due to some extenuating circumstance. Like if we had turned off the SUS GPO to do some testing (we only have one SUS server setup right now, with multiple GPOs) the clients revert back to their previous Automatic Update settings. If they have it set to Download but Prompt me, they can ignore those. Therefore SUS will think they are good, but they are really not. Similarly, if they turn their computers off continually during the time you have SUS set to run (like ours is 3 AM every day), they may have downloaded the patches earlier (we find sometime in the afternoon or late evening it prepares this), but if the computer is off, it never runs. And if it prompts them the next morning, they can choose to ignore. Ok, enough rambling. But what it comes down to is a bit of planning on our end (the sysadmins) as well as a bit of user education. The latter is the part that has been most troublesome for us. I guess leave your computer on (but logged off) all the time does not mean anything to anyone. :) Chris - - Christopher England Server Administrator MCSA, Server+, Network+, A+ College Information Technology Office Indiana University From: Greg Felzer [mailto:[EMAIL PROTECTED] Sent: Friday, September 26, 2003 8:08 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] SUS failure rate I was wondering what kind of failure rate you have all been seeing having SUS install patches. We are preparing a lab test to get hard numbers. We have seen failures where SUS repeatedly tries to install the same patch on each connect and where SUS claims the patch is installed but scanning with HFnetCHKPro shows that the patch is not installed. Greg Felzer MCSE NT4, MCSE 2000, CCA, CCNA, CNA Senior Systems Engineer Center for Computing and Information Technology Medical University of South Carolina -BEGIN PGP SIGNATURE- Version: PGP 8.0.2 iQA/AwUBP3RcMm9fg+xq5T3MEQJc6wCg7/feMrBKLPr8CvvLNHU6/fUwgh0AoJD8 aL14bIClFTQahy421exDOxdN =vMf6 -END PGP SIGNATURE- List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Microsoft MOM
Its going to get a LOT better...so hold on a bit. MOM can be close to a hands-off product once its setup and the agents are deployed. There are a lot of environment issues that can keep MOM from healing itself, which results in a little more babysitting. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn Corbett Sent: Tuesday, September 23, 2003 5:25 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] OT: Microsoft MOM Agreed Rick. We run MOM as well as CIM (Cpq Insight Mgr) - should that now be 'HIM' ??? CIM is great for the low level stuff, disk failures and the like, and MOM is a fairly acceptable tool for application / OS monitoring. MOM needs a LOT of looking after as you said, amongst all the other things I'm doing, MOM is one of them. Currently spending about 1/2 the time looking after MOM, and its not quite enough. I have a number of gripes with the MOM interface, which I find confusing as the NetIQ offering thats its dervied from is much cleaner and easier to use. That being said, some of the trending and long term metrics is what makes MOM really useful IMHO. Pity the db size is so restricted in this version *sigh* G. - Original Message - From: Rick Kingslan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 11:39 AM Subject: RE: [ActiveDir] OT: Microsoft MOM MOM has lots of promise - but it's like any other tool of this type. It takes much care, quite a bit of skill, and a lot of commitment. We have one person who is all but dedicated to running MOM. As to the pieces of MOM that come in the AD Management Pack - well, they're not bad. But - they aren't great either. There are a lot of holes, but as mentioned - it takes tuning. I suspect the holes are the pieces of our installation that need to be tuned to collect the right data to fill in. Given enough data, MOM can be a great tool. I suspect, given this depth and breadth of a tool - you're going to need 12 - 18 mos. Of historical data built up before it becomes a PREDICTIVE tool - and not just a monitoring station. If all you want is monitoring, Dell Open Manage or HP/Compaq Insight Manager is going to do that for you - and the cost is, well, let's just say a lot less. :o) MOM is a great tool. It just needs LOTS of care and feeding. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, September 22, 2003 8:14 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] OT: Microsoft MOM I was just looking at this and was wondering if anyone uses the AD monitoring stuff and if so how does it work? Right now we have NETiQ but it is not setup correctly so I was looking to start fresh with MOM. Thanks Ryan This message may contain privileged or confidential information. If you are not the intended recipient of this message, you may not make any use of, or rely in any way on, this information, and you should destroy this message and notify the sender by reply email. Any opinions or advice contained in this email are subject to the terms and conditions in any applicable client engagement letter or service agreement. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Microsoft MOM
Beta for MOM 2004 starts in the next 30 days. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Tuesday, September 23, 2003 12:51 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Microsoft MOM MOM v2 is going to be very graphical. Much better then v1 or even NetIQ. Yeah, Microsoft boroughed the functionality of NetIQ software and made it pretty. We are going to wait for v2 to come out, hopefully soon. Currently we are using Nagios (running Linux) on our Windows Servers. It free and does some basic monitoring. S -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Monday, September 22, 2003 7:00 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] OT: Microsoft MOM It does need a little mothering, yes, and it is probably overkill for a smaller firm. Isn't MOM an offspring of NetIQ? And I work with the Exchange Management Pack mostly. - Original Message - From: Rick Kingslan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, September 22, 2003 6:39 PM Subject: RE: [ActiveDir] OT: Microsoft MOM MOM has lots of promise - but it's like any other tool of this type. It takes much care, quite a bit of skill, and a lot of commitment. We have one person who is all but dedicated to running MOM. As to the pieces of MOM that come in the AD Management Pack - well, they're not bad. But - they aren't great either. There are a lot of holes, but as mentioned - it takes tuning. I suspect the holes are the pieces of our installation that need to be tuned to collect the right data to fill in. Given enough data, MOM can be a great tool. I suspect, given this depth and breadth of a tool - you're going to need 12 - 18 mos. Of historical data built up before it becomes a PREDICTIVE tool - and not just a monitoring station. If all you want is monitoring, Dell Open Manage or HP/Compaq Insight Manager is going to do that for you - and the cost is, well, let's just say a lot less. :o) MOM is a great tool. It just needs LOTS of care and feeding. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone This message may contain privileged or confidential information. If you are not the intended recipient of this message, you may not make any use of, or rely in any way on, this information, and you should destroy this message and notify the sender by reply email. Any opinions or advice contained in this email are subject to the terms and conditions in any applicable client engagement letter or service agreement. .org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Microsoft MOM
Urban legend. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 9:58 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Microsoft MOM Funnily enough, I talked to a Microsoft technical person about this a few weeks ago and he suggested that initially NetIQ licensed the software from Microsoft, and Microsoft just took it back when they decided to develop their own monitoring solution. James R. Day National Parks Service - AD Core Team (202) 354-1464 Fax (202) 371-1549 [EMAIL PROTECTED] |-+-- | | Steve Shaff | | | [EMAIL PROTECTED] | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org| | | | | | | | | 09/22/2003 09:50 PM MST| | | Please respond to | | | ActiveDir | |-+-- --- ---| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: RE: [ActiveDir] OT: Microsoft MOM | --- ---| MOM v2 is going to be very graphical. Much better then v1 or even NetIQ. Yeah, Microsoft boroughed the functionality of NetIQ software and made it pretty. We are going to wait for v2 to come out, hopefully soon. Currently we are using Nagios (running Linux) on our Windows Servers. It free and does some basic monitoring. S -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Monday, September 22, 2003 7:00 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] OT: Microsoft MOM It does need a little mothering, yes, and it is probably overkill for a smaller firm. Isn't MOM an offspring of NetIQ? And I work with the Exchange Management Pack mostly. - Original Message - From: Rick Kingslan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, September 22, 2003 6:39 PM Subject: RE: [ActiveDir] OT: Microsoft MOM MOM has lots of promise - but it's like any other tool of this type. It takes much care, quite a bit of skill, and a lot of commitment. We have one person who is all but dedicated to running MOM. As to the pieces of MOM that come in the AD Management Pack - well, they're not bad. But - they aren't great either. There are a lot of holes, but as mentioned - it takes tuning. I suspect the holes are the pieces of our installation that need to be tuned to collect the right data to fill in. Given enough data, MOM can be a great tool. I suspect, given this depth and breadth of a tool - you're going to need 12 - 18 mos. Of historical data built up before it becomes a PREDICTIVE tool - and not just a monitoring station. If all you want is monitoring, Dell Open Manage or HP/Compaq Insight Manager is going to do that for you - and the cost is, well, let's just say a lot less. :o) MOM is a great tool. It just needs LOTS of care and feeding. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone This message may contain privileged or confidential information. If you are not the intended recipient of this message, you may not make any use of, or rely in any way on, this information, and you should destroy this message and notify the sender by reply email. Any opinions or advice contained in this email are subject to the terms and conditions in any applicable client engagement letter or service agreement. .org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS does SPs now
That's good if you have a minimal number of servers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Sent: Friday, September 19, 2003 7:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now I'll be setting up SUS SP updates to servers, only I set my servers to download and notify, not to automatically install and boot. I keep control that way. Ken A., MCSA, MCSE -Original Message- From: Henderson Richard [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 7:13 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now As it will only run on W2KSP2+ Clients SMS is still needed for NT4 Clients. But another question, how many here will setup SUS SP updates to Servers? i.e 100 servers all being rebooted at 3am Sunday morning ?? -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED] Sent: 19 September 2003 09:44 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS does SPs now Have just picked up on this thread of SUS - looks a real winner would be glad for the views of the positioning of this product relative to SMS ?? GT - Original Message - From: Free, Bob [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 11:44 PM Subject: RE: [ActiveDir] SUS does SPs now a complete rollup with every patch released for a particular OS. There is actually a current WU beta along those lines... If history repeats, it may be available sooner than later -Original Message- From: Crenshaw, Jason [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003 1:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now You should see a roll-back/recall in SUS 2.0. I didn't hear about the SP's being available in SUS until this morning when I saw that it was something that was available to be published, so something or someone must have pulled the trigger for this to happen. Being an Enterprise customer of Microsoft, they usually go way out of their way to ensure that we know about major upcoming changes before going live with them. I guess Microsoft is tired of getting slammed with deployment problems for SP's. For anyone not using SMS, UpdateExpert, or something else along those lines, deploying SP's enterprise wide can be a task within itself. It's too bad that Microsoft doesn't offer patches in a two prong manner. One being you can just install the one hotfix for a particular problem and the other would be a complete rollup with every patch released for a particular OS. Of course, it is easy to say that from a customer side. I don't have to write or manage any of the changes; I just have to work with what I am given. Jason List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ *** This correspondence is confidential and is solely for the intended recipient(s). If you are not the intended recipient, you must not use, disclose, copy, distribute or retain this message or any part of it. If you are not the intended recipient please delete this correspondence from your system and notify the sender immediately. No warranty is given that this correspondence is free from any virus. In keeping with good computer practice, you should ensure that it is actually virus free. E-mail messages may be subject to delays, non-delivery and unauthorised alterations therefore, information expressed in this message is not given or endorsed by Sx3 unless otherwise notified by our duly authorised representative independent of this message. Sx3 is a trading name of Service and Systems Solutions Limited, a limited company registered in Northern Ireland under number NI 32979 whose registered office is at 120 Malone Road, Belfast, BT9 5HT. *** List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS does SPs now
The approval in the change management process should be before the update is even deployed -- after testing against applications, services, infrastructure, rollback, etc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Sent: Friday, September 19, 2003 8:30 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now It's also good if you have a Change Management process that requires a CM record be created and approved by a review board before the actual installation occurs. Ken A., MCSA, MCSE -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 7:49 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now That's good if you have a minimal number of servers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Sent: Friday, September 19, 2003 7:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now I'll be setting up SUS SP updates to servers, only I set my servers to download and notify, not to automatically install and boot. I keep control that way. Ken A., MCSA, MCSE -Original Message- From: Henderson Richard [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 7:13 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now As it will only run on W2KSP2+ Clients SMS is still needed for NT4 Clients. But another question, how many here will setup SUS SP updates to Servers? i.e 100 servers all being rebooted at 3am Sunday morning ?? -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED] Sent: 19 September 2003 09:44 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS does SPs now Have just picked up on this thread of SUS - looks a real winner would be glad for the views of the positioning of this product relative to SMS ?? GT - Original Message - From: Free, Bob [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 11:44 PM Subject: RE: [ActiveDir] SUS does SPs now a complete rollup with every patch released for a particular OS. There is actually a current WU beta along those lines... If history repeats, it may be available sooner than later -Original Message- From: Crenshaw, Jason [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003 1:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now You should see a roll-back/recall in SUS 2.0. I didn't hear about the SP's being available in SUS until this morning when I saw that it was something that was available to be published, so something or someone must have pulled the trigger for this to happen. Being an Enterprise customer of Microsoft, they usually go way out of their way to ensure that we know about major upcoming changes before going live with them. I guess Microsoft is tired of getting slammed with deployment problems for SP's. For anyone not using SMS, UpdateExpert, or something else along those lines, deploying SP's enterprise wide can be a task within itself. It's too bad that Microsoft doesn't offer patches in a two prong manner. One being you can just install the one hotfix for a particular problem and the other would be a complete rollup with every patch released for a particular OS. Of course, it is easy to say that from a customer side. I don't have to write or manage any of the changes; I just have to work with what I am given. Jason List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ *** This correspondence is confidential and is solely for the intended recipient(s). If you are not the intended recipient, you must not use, disclose, copy, distribute or retain this message or any part of it. If you are not the intended recipient please delete this correspondence from your system and notify the sender immediately. No warranty is given that this correspondence is free from any virus. In keeping with good computer practice, you should ensure that it is actually virus free. E-mail messages may be subject to delays, non-delivery and unauthorised alterations therefore, information expressed in this message is not given or endorsed by Sx3 unless otherwise notified by our duly authorised representative independent of this message. Sx3 is a trading name of Service and Systems Solutions Limited, a limited company registered in Northern Ireland under number NI 32979 whose registered office is at 120 Malone Road, Belfast, BT9 5HT
RE: [ActiveDir] SUS does SPs now
It uses SUS-type functionality, but the code-bases are completely different. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Friday, September 19, 2003 8:24 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now Two separate products entirely - but there is an SUS feature pack for SMS, which I believe uses the SUS server to automatically build packages for separate SMS deployment. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 4:44 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS does SPs now Have just picked up on this thread of SUS - looks a real winner would be glad for the views of the positioning of this product relative to SMS ?? GT - Original Message - From: Free, Bob [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 11:44 PM Subject: RE: [ActiveDir] SUS does SPs now a complete rollup with every patch released for a particular OS. There is actually a current WU beta along those lines... If history repeats, it may be available sooner than later -Original Message- From: Crenshaw, Jason [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003 1:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now You should see a roll-back/recall in SUS 2.0. I didn't hear about the SP's being available in SUS until this morning when I saw that it was something that was available to be published, so something or someone must have pulled the trigger for this to happen. Being an Enterprise customer of Microsoft, they usually go way out of their way to ensure that we know about major upcoming changes before going live with them. I guess Microsoft is tired of getting slammed with deployment problems for SP's. For anyone not using SMS, UpdateExpert, or something else along those lines, deploying SP's enterprise wide can be a task within itself. It's too bad that Microsoft doesn't offer patches in a two prong manner. One being you can just install the one hotfix for a particular problem and the other would be a complete rollup with every patch released for a particular OS. Of course, it is easy to say that from a customer side. I don't have to write or manage any of the changes; I just have to work with what I am given. Jason List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS does SPs now
Yes, and it still utilizes a synch machine that synchronizes with the Windows Update site, based on an updated XML file. The SMS FP also beefs up inventory so you can successfully target machines that need specific patches. And, of course, SMS has the reporting features so you can see where distributions were successful and where they failed. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Friday, September 19, 2003 10:05 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now Right - but the feature pack's sole purpose in life is to automate building the packages for SMS to then deploy. At least that's how I read it. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 8:29 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now It uses SUS-type functionality, but the code-bases are completely different. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Friday, September 19, 2003 8:24 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now Two separate products entirely - but there is an SUS feature pack for SMS, which I believe uses the SUS server to automatically build packages for separate SMS deployment. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 4:44 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS does SPs now Have just picked up on this thread of SUS - looks a real winner would be glad for the views of the positioning of this product relative to SMS ?? GT - Original Message - From: Free, Bob [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 11:44 PM Subject: RE: [ActiveDir] SUS does SPs now a complete rollup with every patch released for a particular OS. There is actually a current WU beta along those lines... If history repeats, it may be available sooner than later -Original Message- From: Crenshaw, Jason [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003 1:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now You should see a roll-back/recall in SUS 2.0. I didn't hear about the SP's being available in SUS until this morning when I saw that it was something that was available to be published, so something or someone must have pulled the trigger for this to happen. Being an Enterprise customer of Microsoft, they usually go way out of their way to ensure that we know about major upcoming changes before going live with them. I guess Microsoft is tired of getting slammed with deployment problems for SP's. For anyone not using SMS, UpdateExpert, or something else along those lines, deploying SP's enterprise wide can be a task within itself. It's too bad that Microsoft doesn't offer patches in a two prong manner. One being you can just install the one hotfix for a particular problem and the other would be a complete rollup with every patch released for a particular OS. Of course, it is easy to say that from a customer side. I don't have to write or manage any of the changes; I just have to work with what I am given. Jason List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS does SPs now
Aren't we saying the same thing, then? Updates deployed to test environment, then approval, then deployment to production. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Sent: Friday, September 19, 2003 11:45 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now Not if your SUS server is used to supply the fixes to your test environment. Kenneth W. (Ken) Adams, MCSA, MCSE -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 9:22 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now The approval in the change management process should be before the update is even deployed -- after testing against applications, services, infrastructure, rollback, etc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Sent: Friday, September 19, 2003 8:30 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now It's also good if you have a Change Management process that requires a CM record be created and approved by a review board before the actual installation occurs. Ken A., MCSA, MCSE -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 7:49 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now That's good if you have a minimal number of servers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Sent: Friday, September 19, 2003 7:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now I'll be setting up SUS SP updates to servers, only I set my servers to download and notify, not to automatically install and boot. I keep control that way. Ken A., MCSA, MCSE -Original Message- From: Henderson Richard [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 7:13 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now As it will only run on W2KSP2+ Clients SMS is still needed for NT4 Clients. But another question, how many here will setup SUS SP updates to Servers? i.e 100 servers all being rebooted at 3am Sunday morning ?? -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED] Sent: 19 September 2003 09:44 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS does SPs now Have just picked up on this thread of SUS - looks a real winner would be glad for the views of the positioning of this product relative to SMS ?? GT - Original Message - From: Free, Bob [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 11:44 PM Subject: RE: [ActiveDir] SUS does SPs now a complete rollup with every patch released for a particular OS. There is actually a current WU beta along those lines... If history repeats, it may be available sooner than later -Original Message- From: Crenshaw, Jason [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003 1:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now You should see a roll-back/recall in SUS 2.0. I didn't hear about the SP's being available in SUS until this morning when I saw that it was something that was available to be published, so something or someone must have pulled the trigger for this to happen. Being an Enterprise customer of Microsoft, they usually go way out of their way to ensure that we know about major upcoming changes before going live with them. I guess Microsoft is tired of getting slammed with deployment problems for SP's. For anyone not using SMS, UpdateExpert, or something else along those lines, deploying SP's enterprise wide can be a task within itself. It's too bad that Microsoft doesn't offer patches in a two prong manner. One being you can just install the one hotfix for a particular problem and the other would be a complete rollup with every patch released for a particular OS. Of course, it is easy to say that from a customer side. I don't have to write or manage any of the changes; I just have to work with what I am given. Jason List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ *** This correspondence is confidential and is solely for the intended recipient(s). If you are not the intended recipient, you must not use, disclose, copy, distribute or retain this message or any part of it. If you are not the intended recipient please delete this correspondence from your system and notify the sender immediately. No warranty is given that this correspondence
RE: [ActiveDir] SUS does SPs now
Understood. SMS 2003 includes a lot of features that folks couldn't wait for, so they sought out other vendors that already provide that functionality. SMS 2003 will be going to RTM very shortly, with a public event release at IT Forum 03 in Denmark, November 11th. http://www.microsoft.com/Europe/msitforum/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Friday, September 19, 2003 10:30 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now It sounds really kinda cool, especially if Topaz ever actually ships. But we already spent the money on the Altiris Inventory solution, so we probably won't be going to SMS3/SMS2003 anytime soon. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 10:15 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now Yes, and it still utilizes a synch machine that synchronizes with the Windows Update site, based on an updated XML file. The SMS FP also beefs up inventory so you can successfully target machines that need specific patches. And, of course, SMS has the reporting features so you can see where distributions were successful and where they failed. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Friday, September 19, 2003 10:05 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now Right - but the feature pack's sole purpose in life is to automate building the packages for SMS to then deploy. At least that's how I read it. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 8:29 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS does SPs now It uses SUS-type functionality, but the code-bases are completely different. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Friday, September 19, 2003 8:24 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now Two separate products entirely - but there is an SUS feature pack for SMS, which I believe uses the SUS server to automatically build packages for separate SMS deployment. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED] Sent: Friday, September 19, 2003 4:44 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS does SPs now Have just picked up on this thread of SUS - looks a real winner would be glad for the views of the positioning of this product relative to SMS ?? GT - Original Message - From: Free, Bob [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 11:44 PM Subject: RE: [ActiveDir] SUS does SPs now a complete rollup with every patch released for a particular OS. There is actually a current WU beta along those lines... If history repeats, it may be available sooner than later -Original Message- From: Crenshaw, Jason [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003 1:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS does SPs now You should see a roll-back/recall in SUS 2.0. I didn't hear about the SP's being available in SUS until this morning when I saw that it was something that was available to be published, so something or someone must have pulled the trigger for this to happen. Being an Enterprise customer of Microsoft, they usually go way out of their way to ensure that we know about major upcoming changes before going live with them. I guess Microsoft is tired of getting slammed with deployment problems for SP's. For anyone not using SMS, UpdateExpert, or something else along those lines, deploying SP's enterprise wide can be a task within itself. It's too bad that Microsoft doesn't offer patches in a two prong manner. One being you can just install the one hotfix for a particular problem and the other would be a complete rollup with every patch released for a particular OS. Of course, it is easy to say that from a customer side. I don't have to write or manage any of the changes; I just have to work with what I am given. Jason List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org
RE: [ActiveDir] SUS does SPs now
Title: Message SUS 2.0 will include other applications such as Office, SQL server, etc. SUS 2.0 preview should start this month, with a more general public beta to follow. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger SeielstadSent: Thursday, September 18, 2003 11:24 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] SUS does SPs now Yeah - I believe this was supposed to be part of SUS 2.0, which is going beta this month, according to my sources. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Celone, Mike [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003 10:35 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] SUS does SPs now I noticed this in the synchronization this morning. I did not have to upgrade either. I thought this was not planned until the next version of SUS. Mike -Original Message- From: Parker, Edward [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 18, 2003 10:14 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] SUS does SPs now I got this after My Sync last night. I did not have to upgrade or anything. I hope this is not old news. Microsoft Software Update Services (SUS) now provides Windows service packs (SPs), in addition to critical and security updates.SUS will deliver Windows XP SP1, Windows 2000 SP4, and all future service packs for Windows 2000, Windows XP, and the Windows Server(tm) 2003 family of products. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS does SPs now
Title: RE: [ActiveDir] SUS does SPs now Doesn't get any better than this: http://www.microsoft.com/windows2000/windowsupdate/sus/susdeployment.asp From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.Sent: Thursday, September 18, 2003 11:55 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] SUS does SPs now Does anyone have any instructions on how to install SUS? I have not had a chance yet to download it and test it. Thanks -Original Message-From: Chianese, David P. [mailto:[EMAIL PROTECTED]Sent: Thursday, September 18, 2003 11:35 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] SUS does SPs now We abandoned our SUS project until this functionality is added. It was proposed for the next version so I am surprised to see that functionality now. Does it also support Office SP's now as well? Regards, Dave -Original Message-From: Celone, Mike [mailto:[EMAIL PROTECTED]Sent: Thursday, September 18, 2003 10:35 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] SUS does SPs now I noticed this in the synchronization this morning. I did not have to upgrade either. I thought this was not planned until the next version of SUS. Mike -Original Message- From: Parker, Edward [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 18, 2003 10:14 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] SUS does SPs now I got this after My Sync last night. I did not have to upgrade or anything. I hope this is not old news. Microsoft Software Update Services (SUS) now provides Windows service packs (SPs), in addition to critical and security updates.SUS will deliver Windows XP SP1, Windows 2000 SP4, and all future service packs for Windows 2000, Windows XP, and the Windows Server(tm) 2003 family of products. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any accompanying attachments are confidential. The information is intended solely for the use of the individual to whom it is addressed. Any review, disclosure, copying, distribution, or use of this e-mail communication by others is strictly prohibited. If you are not the intended recipient, please notify us immediately by returning this message to the sender and delete all copies. Thank you for your cooperation.
RE: [ActiveDir] OT: Did anyone use patching software?
Microsoft Systems Management Server. It will takes your 2 days down to 6 hours or less. When a serious vulnerability is found and an attack is initiated, 2 days is too long. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Adner Sent: Saturday, September 13, 2003 11:29 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] OT: Did anyone use patching software? Just curious, due to the discussion on trying to verify patched systems and such, but did anyone actually use 3rd party or even MS's patching software? Or did you use custom scripts, manually updates, etc? I ask because we had budgeted for patching software but management has decided we're too efficient. We patched around 900 NT/2000 servers and 15,000 workstations using various login scripts, batch files, psexec.exe, and plain old manual installs, etc over the course of 2 days. I'm still in favor of an enterprise class patching product, if only to ease auditing and more granular distribution. We go through significant effort trying to re-inventory everything, trying to figure out which systems can get patched first, etc. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] What is SUS?
This is from the same page where you downloaded the automatic update client: Note: It is not necessary to install this Automatic Update if you are running Windows 2000 with SP3 or later because it is already included. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Henderson Richard Sent: Thursday, September 11, 2003 8:45 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] What is SUS? I am trying to run the WUAU.msi on a W2KSP4 client, but get an error indicating I need W2KSP2. The package I have is stamped 23 May 2002, is there a later msi file ? -Original Message- From: Tim Hines [mailto:[EMAIL PROTECTED] Sent: 10 September 2003 13:26 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] What is SUS? It stands for Software Update Services. You can use it to deploy updates to your clients. You can setup an internal server that stores updates that you download from the web. Your clients will then use this server to obtain their updates. You can find more info about it at http://www.microsoft.com/windows2000/windowsupdate/sus/ -- Tim Hines, MCSE, MCSA - Original Message - From: John Parker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 8:17 AM Subject: [ActiveDir] What is SUS? Hey all.. No flames ok? I'm covered in jet fuel. Could someone explain what SUS is? I thik it is for windows updates, but I am not sure, and if it is something that would streamline my updates, then I would like to know more. Thank you John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] Be excellent to each other ---End of Line--- -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 8:35 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS Feedback... William, We, too, run SUS with great success - much of the warts have already been mentioned so I won't elaborate. However, we knew that ther was an issue with users not shutting of their systems. What we implemented to resolve this and to insure that updates did get applied - especially in the case of vulns like MS03-07 and MS03-26 - we have a script that will do a rolling 'restart' of systems. Granted, our systems are named in a logical manner for our production seats, but our staff seats are on their own subnet - so we just reboot anything between specific IP ranges - and have it spaced out (by minutes, hours, or days = depending on criticallity) so that the systems don't overload the DCs and SUS systems, oh yeah - and the network g. It's been effective for us for a fair amount of time (10 - 12 mos.) and we are running this in 14 of our remote locations as well as our local campus WAN with 8 buildings. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Tuesday, September 09, 2003 3:33 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS Feedback... We share the same issues. But we have laptops that have traveled the country or just get taken home each night, but haven't been rebooted in weeks. They just hibernate on battery power til next time they are opened. Essentially, we have chosen to not shut off workstations at days' end. They remain running 24/7. Updates for antivirus, patches for applications or OS all happen after hours for desktops. William - Original Message - From: Roger Seielstad [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 11:59 AM Subject: RE: [ActiveDir] SUS Feedback... I've been running SUS SP1 for a week or two now - finally got time to implement it. I'd second a lot of the basic limitations of the product - its not perfect, but it does do a good job with the basics. If you're aware of the limits, it's a good way to push the more critical OS layer stuff. The biggest issue I've got is dealing with the automatic reboots - a lot of MS patches (as you know) require restarts to take effect. The decision as to whether or not to force reboot isn't easy, and I wish there was some form of recurring reminder to reboot. In my environment, that can be an issue - I have a heavily laptop oriented client base, so I have to schedule the updates to happen when they're here (I chose Noon), but that's a busy time for people, so forcing a reboot then isn't a great option. Fortunately, most laptops get shut down and taken home at night. My desktops, however, probably won't get rebooted, so that's a problem. And more often than not, the desktops are on the desks of people who are going to cause me pain (development and customer support). I'd like to
RE: [ActiveDir] What is SUS?
http://www.susserver.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Wednesday, September 10, 2003 8:17 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] What is SUS? Hey all.. No flames ok? I'm covered in jet fuel. Could someone explain what SUS is? I thik it is for windows updates, but I am not sure, and if it is something that would streamline my updates, then I would like to know more. Thank you John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] Be excellent to each other ---End of Line--- -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 8:35 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS Feedback... William, We, too, run SUS with great success - much of the warts have already been mentioned so I won't elaborate. However, we knew that ther was an issue with users not shutting of their systems. What we implemented to resolve this and to insure that updates did get applied - especially in the case of vulns like MS03-07 and MS03-26 - we have a script that will do a rolling 'restart' of systems. Granted, our systems are named in a logical manner for our production seats, but our staff seats are on their own subnet - so we just reboot anything between specific IP ranges - and have it spaced out (by minutes, hours, or days = depending on criticallity) so that the systems don't overload the DCs and SUS systems, oh yeah - and the network g. It's been effective for us for a fair amount of time (10 - 12 mos.) and we are running this in 14 of our remote locations as well as our local campus WAN with 8 buildings. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Tuesday, September 09, 2003 3:33 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS Feedback... We share the same issues. But we have laptops that have traveled the country or just get taken home each night, but haven't been rebooted in weeks. They just hibernate on battery power til next time they are opened. Essentially, we have chosen to not shut off workstations at days' end. They remain running 24/7. Updates for antivirus, patches for applications or OS all happen after hours for desktops. William - Original Message - From: Roger Seielstad [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 11:59 AM Subject: RE: [ActiveDir] SUS Feedback... I've been running SUS SP1 for a week or two now - finally got time to implement it. I'd second a lot of the basic limitations of the product - its not perfect, but it does do a good job with the basics. If you're aware of the limits, it's a good way to push the more critical OS layer stuff. The biggest issue I've got is dealing with the automatic reboots - a lot of MS patches (as you know) require restarts to take effect. The decision as to whether or not to force reboot isn't easy, and I wish there was some form of recurring reminder to reboot. In my environment, that can be an issue - I have a heavily laptop oriented client base, so I have to schedule the updates to happen when they're here (I chose Noon), but that's a busy time for people, so forcing a reboot then isn't a great option. Fortunately, most laptops get shut down and taken home at night. My desktops, however, probably won't get rebooted, so that's a problem. And more often than not, the desktops are on the desks of people who are going to cause me pain (development and customer support). I'd like to be able to do some form of filtering (WMI?) for client type and have different settings for different boxes, and I *think* that's on the books for 2.0, but I don't know. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 1:12 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] SUS Feedback... Is anyone out there running Software Update Service? I want to gage what the general opinion of the service is. I personally think that there probably needs to be two approaches when it comes to a service like this. One is a pull service based on GPO agent configuration, the other is a push service based on a need to force workstation updates on down-level clients, and those that seem to ride outside the SUS zone. Any comments? Thanks, Todd Myrick List info : http://www.activedir.org/mail_list.htm
RE: [ActiveDir] What is SUS?
It's a free download. Its different in the fact that it installs within your company, allows you to download updates to the server inside your firewall, and then gives you the ability to authorize only those updates you decide are required for your environment. There's an ADM file that you import into GPO that forces your computers to retrieve their updates from your server, instead of the Windows Update website. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Parker Sent: Wednesday, September 10, 2003 9:08 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] What is SUS? Please forgive my naievity... How is this different from the windows update component in my Group policy? And, is this a seperate piece of software? Or is it included with Server? John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] Be excellent to each other ---End of Line--- -Original Message- From: Tim Hines [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 7:26 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] What is SUS? It stands for Software Update Services. You can use it to deploy updates to your clients. You can setup an internal server that stores updates that you download from the web. Your clients will then use this server to obtain their updates. You can find more info about it at http://www.microsoft.com/windows2000/windowsupdate/sus/ -- Tim Hines, MCSE, MCSA - Original Message - From: John Parker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 8:17 AM Subject: [ActiveDir] What is SUS? Hey all.. No flames ok? I'm covered in jet fuel. Could someone explain what SUS is? I thik it is for windows updates, but I am not sure, and if it is something that would streamline my updates, then I would like to know more. Thank you John Parker, MCSE IS Admin. Senior Technical Specialist Digital Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] Be excellent to each other ---End of Line--- -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 8:35 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS Feedback... William, We, too, run SUS with great success - much of the warts have already been mentioned so I won't elaborate. However, we knew that ther was an issue with users not shutting of their systems. What we implemented to resolve this and to insure that updates did get applied - especially in the case of vulns like MS03-07 and MS03-26 - we have a script that will do a rolling 'restart' of systems. Granted, our systems are named in a logical manner for our production seats, but our staff seats are on their own subnet - so we just reboot anything between specific IP ranges - and have it spaced out (by minutes, hours, or days = depending on criticallity) so that the systems don't overload the DCs and SUS systems, oh yeah - and the network g. It's been effective for us for a fair amount of time (10 - 12 mos.) and we are running this in 14 of our remote locations as well as our local campus WAN with 8 buildings. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Tuesday, September 09, 2003 3:33 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] SUS Feedback... We share the same issues. But we have laptops that have traveled the country or just get taken home each night, but haven't been rebooted in weeks. They just hibernate on battery power til next time they are opened. Essentially, we have chosen to not shut off workstations at days' end. They remain running 24/7. Updates for antivirus, patches for applications or OS all happen after hours for desktops. William - Original Message - From: Roger Seielstad [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 11:59 AM Subject: RE: [ActiveDir] SUS Feedback... I've been running SUS SP1 for a week or two now - finally got time to implement it. I'd second a lot of the basic limitations of the product - its not perfect, but it does do a good job with the basics. If you're aware of the limits, it's a good way to push the more critical OS layer stuff. The biggest issue I've got is dealing with the automatic reboots - a lot of MS patches (as you know) require restarts to take effect. The decision as to whether or not to force reboot isn't easy, and I wish there was some form of recurring reminder to reboot. In my environment, that can be an issue - I
RE: [ActiveDir] SUS Feedback...
You have both of those if you use SMS with the SUS Feature Pack. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Tuesday, September 09, 2003 1:12 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] SUS Feedback... Is anyone out there running Software Update Service? I want to gage what the general opinion of the service is. I personally think that there probably needs to be two approaches when it comes to a service like this. One is a pull service based on GPO agent configuration, the other is a push service based on a need to force workstation updates on down-level clients, and those that seem to ride outside the SUS zone. Any comments? Thanks, Todd Myrick List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS Feedback...
For the reporting, use the SUS reporting tool. http://www.susserver.com/Software/SUSreporting/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Parker, Edward Sent: Tuesday, September 09, 2003 1:27 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS Feedback... We use SUS. It works very effectively for us. We set up the client configuration to install and reboot. The client services connects and checks for updates. Go to a website and approve. The client usually gets updated in 24hours. Some things I wish were better. 1) Reporting needs to be better. Sure I can use the IIS logs to view it...but a simple % complete etc would be nice. 2) Setting up SUS zones for different client updates. Servers may get different patches than the workstations. Or they do not get them at the same time. So We have setup multiple SUS servers to have different approved updates. 3) It would be nice to be able to group SUS clients together and send patches. (Push) 4) Alas Service Packs. We use GPOs. You could use SMS. But that sure would be nice to do it in a single interface. -Original Message- From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 12:12 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] SUS Feedback... Is anyone out there running Software Update Service? I want to gage what the general opinion of the service is. I personally think that there probably needs to be two approaches when it comes to a service like this. One is a pull service based on GPO agent configuration, the other is a push service based on a need to force workstation updates on down-level clients, and those that seem to ride outside the SUS zone. Any comments? Thanks, Todd Myrick List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS Feedback... Resend
Not sure why you would want to. Just download the .ADM file and use that to configure SUS. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Tuesday, September 09, 2003 3:20 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] SUS Feedback... Resend http://www.autoprof.com/policy/ Has anyone used this utility with SUS? Thanks, Todd Myrick List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SUS Feedback...
Title: Message Its still in beta. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Parker, EdwardSent: Tuesday, September 09, 2003 2:30 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SUS Feedback... Do you have a link on SUS 2.0 info? -Original Message-From: Celone, Mike [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 1:26 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] SUS Feedback... We also use SUS with great results. I'm looking forward to using SUS 2.0 with support for other apps, especially Office. Another new feature in SUS 2.0 is deadline installs. So you assign an update and the user has until a certain time to install it. If not done by that time it installs automatically. Mike -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 09, 2003 1:28 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] SUS Feedback... I think SUS is great for what it does... in my environment I don't need NT4 or Win9x support. I do need non-domain workstation and server support, so I developed a few scripts that set the appropriate registry entries to make that work. I push the scripts and SUS pulls the patches. I'll be happy when it's better integrated with Office, SQL, etc. etc. etc. The feature set of SUS 2.0 should be nice. For environments that need to support the push model, Update Expert (St. Bernard) and HFNetChk Pro (Shavlik) both work well. I have them deployed at several clients. And, of course, SMS for you large environment (and large IT staff) guys/gals. -Original Message- From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 09, 2003 1:12 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] SUS Feedback... Is anyone out there running Software Update Service? I want to gage what the general opinion of the service is. I personally think that there probably needs to be two approaches when it comes to a service like this. One is a pull service based on GPO agent configuration, the other is a push service based on a need to force workstation updates on down-level clients, and those that seem to ride outside the SUS zone. Any comments? Thanks, Todd Myrick List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] SP4 question
:) Sorry...I only highlighted the words because that's the statement from MS, and to thumbtack the issue. It caught my eye only after your post, but I was responding to the general thread. I've seen this issue floating around due to BugTraq's report. BugTraq provides a good service, but falls short on occasion. Anything you see on BugTraq (or any other list) should be taken up first with your MS representative (TAM, SAM, MVP, etc.) -- particularly security concerns. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick KingslanSent: Wednesday, August 27, 2003 10:20 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SP4 question Rod, With all due respect, did I somehow indicate otherwise? If Imiscommunicated the message, I'd appreciate guidance on how to better answer a question of this type. -rtk From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod TrentSent: Wednesday, August 27, 2003 9:10 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SP4 question SP4 DOES NOT reintroduce the vulnerability. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick KingslanSent: Wednesday, August 27, 2003 10:02 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SP4 question Given that Russ Cooper did the original study that presented the incomplete / incorrect information that Brian Livingston reported on, going back to Russ is likely the correct step. Russ has since retracted and corrected his findings. This correction can be found, as wll on NTBUGTRAQ or the TruSecure site. Regardless - SP4 does NOT negate / remove MS03-026, but please check with NTBUGTRAQ to be 100% certain. Or, better yet - do as I did when confronted with this. Conduct your own study! :-) Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Hicks/MIS/HQ/KEMET/USSent: Wednesday, August 27, 2003 8:03 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] SP4 question I have heard mixed opinions on whether or not installing Win2k SP4 breaks the MS03-026 patch. Does anyone have any links to docs form MS about this subject. NTBUGTRAQ posted some reports from people that SP4 did break the patch, but later found it to be untrue. Thanks Jon Hicks | KEMET Electronics Corporation | Server TeamPhone: 864-228-4473 | E-mail: [EMAIL PROTECTED] | AOL IM: jhicks352[ Mailing: 2835 KEMET Way Simpsonville, SC 29681 USA ]
RE: [ActiveDir] SP4 question
Jon, if you wouldn't mind, send your TAM's nameoffline. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Hicks/MIS/HQ/KEMET/USSent: Wednesday, August 27, 2003 11:33 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SP4 question I agree completely. It is funny, after I sent my boss all the info I have found about the issue and performed my own tests here, which came back negative for the SP rolloing back the hotfix, they still emailed our MS TAM about the issue and here is what was sent back The patch is post-sp4 and would have to be re-installed. Theyve made it available to install on the older SPs to allow organizations at different levels to secure the environment. This is not unlike any other patch until we have a roll-up that includes 026. I told my boss that this is incorrect, but they are still insisting on re applying the hotfix after servers are upgraded to SP4. I guess this is just the typicla corporate mentality around here, what can you do. Anyone looking for a good network/security admin?Thanks, Jon Jon Hicks | KEMET Electronics Corporation | Server TeamPhone: 864-228-4473 | E-mail: [EMAIL PROTECTED] | AOL IM: jhicks352[ Mailing: 2835 KEMET Way Simpsonville, SC 29681 USA ] "Rick Kingslan" [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 08/27/2003 10:15 AM Please respond to[EMAIL PROTECTED] To [EMAIL PROTECTED] cc Subject RE: [ActiveDir] SP4 question John, Show him the statement from TruSecure. Microsoft is not going to repond to it, as they denied that it was a problem from day one. Russ so much as sadmits this and the problem is now history. If your boss will not accept Russ Cooper's retraction as stated, then I doubt that a statement from Microsoft would be authoritative either. Me, I'd prefer to have a statement from the discoverer rather than an affected party - Microsoft - who has much to loose if they are shown to have a faulty patch. Hope this helps Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Hicks/MIS/HQ/KEMET/USSent: Wednesday, August 27, 2003 9:00 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] SP4 questionSP4 was released first. I ran a test on a few servers running SP3 that have the MS03-026 patch applied and I then installed SP4 and ran a DCOM vulnerability scanner against them and they still showed as patched, so it appears not to effect the patch. I was just looking for something from Microsoft to appease my boss, they always want something form MS to make them feel better about things Jon Hicks | KEMET Electronics Corporation | Server TeamPhone: 864-228-4473 | E-mail: [EMAIL PROTECTED] | AOL IM: jhicks352[ Mailing: 2835 KEMET Way Simpsonville, SC 29681 USA ] "Hutchins, Mike" [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 08/27/2003 09:29 AM Please respond to[EMAIL PROTECTED] To [EMAIL PROTECTED] cc Subject RE: [ActiveDir] SP4 question which one came out first chronologically? From: Jon Hicks/MIS/HQ/KEMET/US [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2003 7:03 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] SP4 questionI have heard mixed opinions on whether or not installing Win2k SP4 breaks the MS03-026 patch. Does anyone have any links to docs form MS about this subject. NTBUGTRAQ posted some reports from people that SP4 did break the patch, but later found it to be untrue. Thanks Jon Hicks | KEMET Electronics Corporation | Server TeamPhone: 864-228-4473 | E-mail: [EMAIL PROTECTED] | AOL IM: jhicks352[ Mailing: 2835 KEMET Way Simpsonville, SC 29681 USA ]
RE: [ActiveDir] FYI - Office 2003 went RTM today
Agreed...Outlook 2k3 is probably the best product in the group. Spam features alone are worth the price of admission. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Tuesday, August 19, 2003 7:56 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] FYI - Office 2003 went RTM today Just a heads up to those of you who want to be 'in the know' If you haven't had the chance to use the new Outlook - it's very nice! Visio, SharePoint Portal will lag a little bit - October timeframe, as I recall. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Patch Management
SMS with the SUS Feature Pack. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mitch Reid Sent: Friday, August 08, 2003 3:26 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] OT: Patch Management Hi, we finally 'found' some money to purchase software that will help with patch management. I was wondering if anybody has suggestions what I should look at (and what not to look at). We have about 300 local servers and a handful more across the WAN. They're NT, 2000 and 2003 in an NT/AD multi-domain configuration. I'm not concerned about workstations for this project. Thanks List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Server Monitoring
Try MOM. http://www.microsoft.com/mom When the email server is down, you can use scripts to send email via SMTP. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, August 05, 2003 4:35 PM To: ActiveDir (E-mail) Subject: [ActiveDir] OT: Server Monitoring Mmy company is currently looking for a product that will monitor if the e-mail server and other servers are up or down and then notify me by e-mailing my cell phone. Question 1) What software do you use? 2) How do you get notified by e-mail if your e-mail server is down? Any help is appreciated, I have already looked at Whats Up Gold and Servers Alive. Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Has anyone had a problem with the RPC call to the OS
The name is going to depend on the antivirus vendor. But...this is not an antivirus vendor issue...this is a patch issue. The patch has been available for a couple weeks. Grab MS03-026. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carlos MagalhaesSent: Tuesday, August 12, 2003 8:05 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] OT: Has anyone had a problem with the RPC call to the OS Do you have the exact virus name? CM
RE: [ActiveDir] VBscript Help
Add myITforum.com to that list... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, August 07, 2003 10:25 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] VBscript Help I keep a list of these sites - hope this helps (watch for URL wrap): (may be dups from others in list) http://msdn.microsoft.com/scripting -- Microsoft's scripting site http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcen ter/default.asp -- Another Microsoft scripting site http://cwashington.netreach.net -- The absolute best site for WSH in my point of view... www.planet-source-code.com - Lots of code http://www.winscripter.com -- Great message board with answers http://www.microsoft.com/windows2000/techinfo/howitworks/activedirectory/ads ilinks.asp -- ADSI http://www.microsoft.com/ntserver/Default.asp - WMI (do a search for scripting http://www.cdolive.com/world.htm -- CDOLIVE links page - very rich http://www.winscript.com/ -- Has VBScript and WSH Reference Guides http://www.ddj.com/maillists/active/ - Dr. Dobbs - good site and great mailing lists http://www.mindspring.com/~mark_baker/ - Active scripting http://home.att.net/~wshvbs/index.htm -- More samples - beware - starts with music! Louann Friedland Levi Strauss Co. San Francisco, CA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, August 07, 2003 3:20 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] VBscript Help I seem to be have to report more and more information on the AD. As I am not from a scripting/programming background writing VBscripts is a little bit trial and error. Can anyone recommend any Web resources, books etc that will help me. The way I normally achieve my end result is by trawling the web and finding a script that does part of what I wish it to do, trying to work out what it does exactly, then amending or adding bits (usually from another script). The problem I feel I have is understanding things like the core components of a script, correct syntax say for LDAP queries and object/property names. I would really like to understand what I am doing and be able to achieve simpler scripts from scratch rather than having to rip off others hard work. Many thanks, Jacqui List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Packaging Software for Deployment
You can use a .Zap file: http://www.myitforum.com/articles/6/view.asp?id=648 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Wednesday, August 06, 2003 3:05 PM To: ActiveDir (E-mail) Subject: [ActiveDir] OT: Packaging Software for Deployment Hello Everyone, I have a install that I need to push out to all users and would like to do it through GPO. However there is no MSI file associated with this install, it is just a EXE. How can I push this out through a GPO? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Tivoli
Title: OT: Tivoli FaqShop.com also has some cooperation with the Tivoli folks to republish material, and add FAQ type of answers. www.faqshop.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Duncan, LarrySent: Monday, July 14, 2003 11:54 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] OT: Tivoli As much as I hate to further the cause: http://publib-b.boulder.ibm.com/Redbooks.nsf/portals/TivoliCustom1 -Original Message-From: Bjelke John A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2003 10:38 AMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] OT: Tivoli Any of you folks know of a good list (or would that be a "support group"?) for Tivoli? John A. Bjelke Unisys 505.853.6774 [EMAIL PROTECTED] C8H10N4O2 Philosophy! Empty thinking by ignorant conceited men who think they can digest without eating! -Iris Murdoch
RE: [ActiveDir] OT: Tivoli
But, at what cost? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, July 14, 2003 12:03 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] OT: Tivoli Here ya' go. You will probably enjoy managing with Tivoli's current products. I'm monitoring our entire W2k3/AD lab environment with Tivoli. I think they've gotten it right this time (with customization). http://publib-b.boulder.ibm.com/Redbooks.nsf/Portals/TivoliTME10MailingList Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com |-+-- | | Bjelke John A Contr| | | AFRL/VSIO | | | [EMAIL PROTECTED]| | | f.mil | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org| | | | | | | | | 07/14/2003 11:38 AM| | | Please respond to | | | ActiveDir | | | | |-+-- --- ---| | | | To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] | | cc: | | Subject: [ActiveDir] OT: Tivoli | --- ---| Any of you folks know of a good list (or would that be a support group?) for Tivoli? John A. Bjelke Unisys 505.853.6774 [EMAIL PROTECTED] C8H10N4O2 Philosophy! Empty thinking by ignorant conceited men who think they can digest without eating! -Iris Murdoch List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Tivoli
I've talked with folks over the years who have tried to implement Tivoli 100%. 100% doesn't seem attainable. Tivoli implementations generally last 2-4 years before they give up and find another product. There's quite a bit of development involved in getting it to work in each environment, which usually means bringing in Tivoli consultants at $250-500 per hour. Tivoli tends to infest companies where SMS is already installed and running, so there are quite a few horror stories from SMS Admins. I'd suggest doing a search on the SMS list for 'Tivoli'. http://www.topica.com/lists/mssms/read -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Flesher Sent: Monday, July 14, 2003 1:10 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Tivoli It's funny you ask that question. We are in the midst of figuring out what the cost will be to implement/maintain Tivoli for monitoring/software distribution/inventory. How much of an increase in staff is necessary? Completely off topic, I know. Just curious if anyone can share there success/horror stories on implementing Tivoli. What size shop, what did it cost, how much of an increase in staff? Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod Trent Sent: Monday, July 14, 2003 11:53 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Tivoli But, at what cost? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, July 14, 2003 12:03 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] OT: Tivoli Here ya' go. You will probably enjoy managing with Tivoli's current products. I'm monitoring our entire W2k3/AD lab environment with Tivoli. I think they've gotten it right this time (with customization). http://publib-b.boulder.ibm.com/Redbooks.nsf/Portals/TivoliTME10MailingList Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com |-+-- | | Bjelke John A Contr| | | AFRL/VSIO | | | [EMAIL PROTECTED]| | | f.mil | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org| | | | | | | | | 07/14/2003 11:38 AM| | | Please respond to | | | ActiveDir | | | | |-+-- --- ---| | | | To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] | | cc: | | Subject: [ActiveDir] OT: Tivoli | --- ---| Any of you folks know of a good list (or would that be a support group?) for Tivoli? John A. Bjelke Unisys 505.853.6774 [EMAIL PROTECTED] C8H10N4O2 Philosophy! Empty thinking by ignorant conceited men who think they can digest without eating! -Iris Murdoch List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Tivoli
There's still that question of cost. Not just product price (which is generally out of sight), but the cost of training, additional hardware resources, consultants, IBM's insistence on implementing their other add-ons, and IBM's ultimate plan of selling their services so IT can be outsourced. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, July 14, 2003 3:38 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Tivoli Tivoli today is not nearly as horrible on the Windows Server Platform as it may have been before. Reference the following article...starting at about paragraph 7: http://www.informationweek.com/story/showArticle.jhtml?articleID=6502661 IBM's IBM Tivoli Monitoring products are nearly completely based on WMI. ITM seems to provide flexibility and capability to effectively monitor one's windows server platform w/o wanting to take a shot at the developers for making your life Hell. I am an admitted convert. I'm certainly not saying that Tivoli is the best [I don't know who is.]. ITM does have its limitations and issues. I am saying that the Tivoli products needed to monitor a Windows Server infrastructure are 'today' should not be the resource drain that it may have been in the past...providing you leave the past in the past...don't bring that stuff (--being kind) over to the new and improved Tivoli... One could even simply attribute this notion to the fact that ITM, again is almost completely based on WMI (Windows Management Instrumentation). Any one directly leveraging WMI is quite aware of the capabilities... especially on W2k/W2k3 boxes. From a 'single product' standpoint, you won't go wrong with selecting MOM, AppManager, or Tivoli. Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com |-+-- | | Rod Trent| | | [EMAIL PROTECTED] | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org| | | | | | | | | 07/14/2003 12:52 PM| | | Please respond to | | | ActiveDir | | | | |-+-- --- ---| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: RE: [ActiveDir] OT: Tivoli | --- ---| But, at what cost? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, July 14, 2003 12:03 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] OT: Tivoli Here ya' go. You will probably enjoy managing with Tivoli's current products. I'm monitoring our entire W2k3/AD lab environment with Tivoli. I think they've gotten it right this time (with customization). http://publib-b.boulder.ibm.com/Redbooks.nsf/Portals/TivoliTME10MailingList Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com |-+-- | | Bjelke John A Contr| | | AFRL/VSIO | | | [EMAIL PROTECTED]| | | f.mil | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org| | | | | | | | | 07/14/2003 11:38 AM| | | Please respond to | | | ActiveDir | | | | |-+-- --- ---| | | | To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] | | cc: | | Subject: [ActiveDir] OT: Tivoli | --- ---| Any of you folks know of a good list (or would that be a support group?) for Tivoli? John A. Bjelke Unisys 505.853.6774 [EMAIL PROTECTED] C8H10N4O2 Philosophy! Empty thinking by ignorant conceited men who think they can digest without eating! -Iris Murdoch List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir
RE: [ActiveDir] GPO Software Installation
Unless you want to mess around with .Zap files, GPO needs MSI (Windows Installer) installations. You can use Wise Solutions or InstallShield to generate MSI's for apps that don't already conform to this standard. But, most apps already come in MSI format. You just need to know the proper command-line switches to deploy through GPO with options. www.wise.com www.installshield.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, July 14, 2003 4:23 PM To: ActiveDir (E-mail) Subject: [ActiveDir] GPO Software Installation Does anyone have any good references on how to develop packages to install through a GPO? I am currently doing some research on Technet. Thanks Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Todd Myrick - SearchWin2000.com's 2003 Innova tor Award winner
Title: Message The TechTarget people are like that. You have to be very specific with them, telling them exactly what they can and can't use. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT)Sent: Thursday, June 26, 2003 7:32 PMTo: '[EMAIL PROTECTED]' Thanks Doug, I think this might be a career ending move on my part though : This article makes me look like I single handedly saved the NIH and HHS. I hope my management doesn't get thrown : Nothing like coming above the radar. Here are some of the comments that didn't make the article. Also don't you like how the writer managed to get LINUX in the article. Must be a requirement now-a-days. I now have to go buy the "Team" a round of beers. There is 25 people on the "Team", I guess I will use some of those millions I saved. Toddler -Original Message-From: Myrick, Todd (NIH/CIT) Sent: Monday, June 16, 2003 11:55 AMTo: 'Pye, David'Subject: RE: Follow up article questions. "The NIH Windows 2000 Focus group determined that the best way to deploy Windows Server 2000 and Active Directory to meet the immediate requirement of upgrading the accounts domains to Active Directory and the future objectives of deploying Exchange 2000 as a department wide collaboration platform required that the design be rooted in a politically neutral placeholder security domain. This would allow for several HHS operating divisions to join the Active Directory and have an autonomous namespace and operation, -- all without ever losing access to Exchange 5.5. The introduction of AD would also serve to improve manageability by combining the existing collaboration directory and enterprise provisioning directory structures." "Although planning started way back in 1999, the project's "golden spike" was driven on January 6, 2001 by establishing the internal DDNS infrastructure, and placeholder security domain. Two months later the master account domain was in-place upgraded and converted to Native mode 2 months later. These early successes convinced the NIH IT Management council that it was safe to move forward with a full deployment. It took the rest of 2001 to develop final architectural standards for the 28 NIH Institutes Centers and HHS Operating Divisions planning to joining their NT domains to the Active Directory. The architecture standards established authorities used to make decisions about changes that would affect the overall configuration and schema of the active directory, and operation authorities to manage the changes. The standards we also established to set minimal technical standards for Active Directory and other critical network service operation. The majority of 2002 was spent joining NIH and HHS NT account domains to the Active Directory as either child domains under NIH or HHS domains. The last in-place upgrades took place on December 15, 2002 -- but the quest to fully optimize the efficiency of the NIH's IT management structure will continue indefinitely." "A critical factor in the success of the NIH Active Directory deployment was the faith that the NIH CIO Alan Graeff put both in the Microsoft technology and the CIT and NIH IC staff that implemented the technology. His support and his ability to balance the pressures both politically and technically helped move the implementation of Active Directory forward and get it integrated into several of the new business systems being developed at the NIH and HHS." "Another critical factor in the success of the deployment of the NIH Active Directory was the faith and support that Kevin Hobson (Branch Chief of the Backoffice Systems Branch, The branch that is tasked with establishing and coordinating the NIH Active Directory) gave his staff. This support allowed Todd Myrick and Dan Sheehan the freedom they needed to explore technical solutions necessary to make the Microsoft technology integrate better into the NIH organization. In mid 2002 there was an added requirement to have all the NIH IC's join the NIH Active Directory tree to allow for an Enterprise Authentication system to be deployed. The BOSB stretched both their skills and time in helping get the other NIH and HHS groups joined to the Active Directory by the deadline of December. The pressure was great, but in the end they accomplished something that many people though impossible." "Today, the NIH Active Directory is being optimized to provide better operation continuity in Identity management, collaboration, security, and provisioning. The NIH Active Directory Operations Group (ADOG is part of the BOSB) is leading this effort by identifying the technical specifications and implementation the solutions and technology to make the service continue to grow." Todd Myrick Quote: "To many of us in IT, and the BOSB in particular we use Star Trek Star Wars analogies to describe what we do, how we interact with one another. The BOSB used to be
RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4
Win2k SP4 was released to Premier customers this morning. Those are the links you are seeing. Public availability is June 30th. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Wednesday, June 25, 2003 1:16 PM To: [EMAIL PROTECTED] Rick, The RC1 that we got the other day had NO warnings - standard EULA. So, I wouldn't base the reality of release or beta on 'big warnings'. That's not always the case. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Reynolds Sent: Wednesday, June 25, 2003 10:02 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d0-a0c5-241bfec d095e/w2ksp4_en.exe I am downloading now, I will let you know what Microsoft Says in the install. Beta stuff has big warnings.. of course so does the regular patches to. From: Leeuwen van, JWJ (Joost) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 Date: Wed, 25 Jun 2003 14:44:17 +0200 MIME-Version: 1.0 Received: from mail.activedir.org ([64.245.160.7]) by mc9-f39.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Wed, 25 Jun 2003 07:40:41 -0700 Received: from RELAY02.rabobank.nl [145.72.69.21] by mail.activedir.org with ESMTP (SMTPD32-7.07) id A972E0600F0; Wed, 25 Jun 2003 08:45:38 -0400 X-Message-Info: JGTYoYF78jEHjJx36Oi8+Q1OJDRSDidP Message-ID: [EMAIL PROTECTED] Return-Receipt-To: Leeuwen van, JWJ (Joost) [EMAIL PROTECTED] X-WSS-ID: 12E747131949507-01-01 X-WSS-ID: 12E746331337517-01-01 Precedence: bulk Sender: [EMAIL PROTECTED] Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 25 Jun 2003 14:40:42.0040 (UTC) FILETIME=[C0C4EB80:01C33B27] Is this the final version or a leaked one? Joost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 25, 2003 2:39 PM To: [EMAIL PROTECTED] http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d 0-a0c5-241 bfecd095e/w2ksp4_en.exe List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. _ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4
You should also note, that service packs have been yanked after being released to Premier customers that have had to be retooled before public release. So, its really not a good idea to apply a service pack in a production environment that doesn't yet have full public support. If you have problems with a pre-public release, you are SOL. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Tuip Sent: Wednesday, June 25, 2003 1:59 PM To: [EMAIL PROTECTED] So who is going to get 'slapped' ? Martin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod Trent Sent: Wednesday, June 25, 2003 7:54 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 Win2k SP4 was released to Premier customers this morning. Those are the links you are seeing. Public availability is June 30th. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Wednesday, June 25, 2003 1:16 PM To: [EMAIL PROTECTED] Rick, The RC1 that we got the other day had NO warnings - standard EULA. So, I wouldn't base the reality of release or beta on 'big warnings'. That's not always the case. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Reynolds Sent: Wednesday, June 25, 2003 10:02 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d0-a0c5-241bfec d095e/w2ksp4_en.exe I am downloading now, I will let you know what Microsoft Says in the install. Beta stuff has big warnings.. of course so does the regular patches to. From: Leeuwen van, JWJ (Joost) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 Date: Wed, 25 Jun 2003 14:44:17 +0200 MIME-Version: 1.0 Received: from mail.activedir.org ([64.245.160.7]) by mc9-f39.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Wed, 25 Jun 2003 07:40:41 -0700 Received: from RELAY02.rabobank.nl [145.72.69.21] by mail.activedir.org with ESMTP (SMTPD32-7.07) id A972E0600F0; Wed, 25 Jun 2003 08:45:38 -0400 X-Message-Info: JGTYoYF78jEHjJx36Oi8+Q1OJDRSDidP Message-ID: [EMAIL PROTECTED] Return-Receipt-To: Leeuwen van, JWJ (Joost) [EMAIL PROTECTED] X-WSS-ID: 12E747131949507-01-01 X-WSS-ID: 12E746331337517-01-01 Precedence: bulk Sender: [EMAIL PROTECTED] Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 25 Jun 2003 14:40:42.0040 (UTC) FILETIME=[C0C4EB80:01C33B27] Is this the final version or a leaked one? Joost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 25, 2003 2:39 PM To: [EMAIL PROTECTED] http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d 0-a0c5-241 bfecd095e/w2ksp4_en.exe List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. _ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4
Not at all. Too many Premier customers have been burned by the week-early releases. Even Premier customers generally wait several weeks before applying the service pack after public release. The thing that the Beta an Premier folks should be upset about, is that someone internal to MS or in the Premier program will ruin it for everyone by going against their NDA. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, June 25, 2003 2:34 PM To: [EMAIL PROTECTED] Sounds like the boys with Beta and Premier access are pissed we PUBLIC only individuals can obtain this software at the same time or before them. Like any other software from MS, use at your own discretion and test, test, test before production. Enjoy or don't it is up to you. -Original Message- From: Craig Cerino [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 25, 2003 2:26 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 Add to that the fact that you could void certain warranties and contracts you have with Microsoft (support etc) if a box you have STB on you while you're running an app/service pack etc that your class of service has not yet been made privy to -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 25, 2003 2:15 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 You should also note, that service packs have been yanked after being released to Premier customers that have had to be retooled before public release. So, its really not a good idea to apply a service pack in a production environment that doesn't yet have full public support. If you have problems with a pre-public release, you are SOL. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Tuip Sent: Wednesday, June 25, 2003 1:59 PM To: [EMAIL PROTECTED] So who is going to get 'slapped' ? Martin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod Trent Sent: Wednesday, June 25, 2003 7:54 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 Win2k SP4 was released to Premier customers this morning. Those are the links you are seeing. Public availability is June 30th. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Wednesday, June 25, 2003 1:16 PM To: [EMAIL PROTECTED] Rick, The RC1 that we got the other day had NO warnings - standard EULA. So, I wouldn't base the reality of release or beta on 'big warnings'. That's not always the case. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Reynolds Sent: Wednesday, June 25, 2003 10:02 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d0-a0c5-241 bfec d095e/w2ksp4_en.exe I am downloading now, I will let you know what Microsoft Says in the install. Beta stuff has big warnings.. of course so does the regular patches to. From: Leeuwen van, JWJ (Joost) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 Date: Wed, 25 Jun 2003 14:44:17 +0200 MIME-Version: 1.0 Received: from mail.activedir.org ([64.245.160.7]) by mc9-f39.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Wed, 25 Jun 2003 07:40:41 -0700 Received: from RELAY02.rabobank.nl [145.72.69.21] by mail.activedir.org with ESMTP (SMTPD32-7.07) id A972E0600F0; Wed, 25 Jun 2003 08:45:38 -0400 X-Message-Info: JGTYoYF78jEHjJx36Oi8+Q1OJDRSDidP Message-ID: [EMAIL PROTECTED] Return-Receipt-To: Leeuwen van, JWJ (Joost) [EMAIL PROTECTED] X-WSS-ID: 12E747131949507-01-01 X-WSS-ID: 12E746331337517-01-01 Precedence: bulk Sender: [EMAIL PROTECTED] Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 25 Jun 2003 14:40:42.0040 (UTC) FILETIME=[C0C4EB80:01C33B27] Is this the final version or a leaked one? Joost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 25, 2003 2:39 PM To: [EMAIL PROTECTED] http://download.microsoft.com/download/e/6/a/e6a04295-d2a8-40d 0-a0c5-241 bfecd095e/w2ksp4_en.exe List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u verzocht de inhoud niet te gebruiken en de
RE: [ActiveDir] Scripting
Scripting list: http://www.topica.com/lists/scripting VB Script you're looking for: http://www.myitforum.com/articles/11/view.asp?id=3102 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, June 03, 2003 4:14 PMTo: [EMAIL PROTECTED] Does anyone know of a good admin scripting list? Or how to write a script that will check to see if the user has password never expires checked on all of the users of a domain? Thanks Ryan
RE: [ActiveDir] OT: Identifying laptops on domain
Title: Message
Here's another one. Haven't made this live on the site
yet:
http://www.myitforum.com/inc/upload/7839islaptop-wsh-msica.vbs
Here's the description:
Detects if a computer is a laptop using up to 5 different WMI
classes. Runs as WSH and MSI Custom Action without modification, supports
verbose mode, allows "Model Override" when all other detection methods
fail.
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Jones, Rick J.(Desktop Engineering)Sent:
Monday, March 24, 2003 10:42 AMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] OT:
Identifying laptops on domain
In case you
want to know the possible numbers and definition, here is the info
from the Platform SDK on
Win32_SystemEnclosure:
ChassisTypes
Data type: uint16 arrayAccess
type: Read-only
Array of chassis types. This property is
inherited from CIM_Chassis.
Value Meaning1
Other2 Unknown3
Desktop4 Low Profile
Desktop5 Pizza
Box6
Mini Tower7
Tower8
Portable9
Laptop10
Notebook11 Hand
Held12
Docking Station13 All in
One14 Sub
Notebook15
Space-Saving16 Lunch
Box17 Main
System Chassis18 Expansion
Chassis19
SubChassis20 Bus
Expansion Chassis21 Peripheral
Chassis22 Storage Chassis23 Rack
Mount Chassis24
Sealed-Case PC
And here is the
modified script as well;
CheckComputer_ChassisType2.v-b-s
Rick J. Jones
-Original
Message-From: GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED]]Sent:
Friday, March 21, 2003 4:10 AMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] OT: Identifying
laptops on domain
looks like you
really found the best solution to the problem - I've just
tested this in
a script myself and it works very well! I suspect this
not
to help much on
NT4 machines, but for Win2k and XP this really is your best
bet (I tested
against XP notebook and Win2k3 Server on a Desktop enclosure
-
both reported
back the correct value).
I've added a
simple select statement to get the appropriate text-feedback
-
see attached
script (remove dashes...). Be good to hear from others, if
this
also works well
on their machines.
/Guido
-Original
Message-
From: Bjelke
John A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED]]
Sent: Freitag,
7. März 2003 16:51
To:
'[EMAIL PROTECTED]'
Subject: RE:
[ActiveDir] OT: Identifying laptops on domain
Folks,
I just found
this:
http://www.microsoft.com/technet/treeview/default.asp?url="">
ter/scrguide/sas_cpm_btnz.asp (watch the word
wrap)
strComputer =
"."
Set
objWMIService = GetObject("winmgmts:" _
"{impersonationLevel=impersonate}!\\"
strComputer "\root\cimv2")
Set colChassis
= objWMIService.ExecQuery _
("SELECT * FROM
Win32_SystemEnclosure")
For Each
objChassis in colChassis
For Each intType in
objChassis.ChassisTypes
Wscript.Echo
intType
Next
Next
Where chassis
type is one of 24 possible values. Seems like this might be
the magic
bullet, but I definately need to test. Thanks for the suggestion!
Regards,
John A. Bjelke
-Original
Message-
From: Bjelke
John A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED]]
Sent: Friday,
March 07, 2003 8:41 AM
To:
'[EMAIL PROTECTED]'
Subject: RE:
[ActiveDir] OT: Identifying laptops on domain
Bill,
we are moving to that already, and if I can
figure out how to
differentiate
the chasis type I can write scripts to automate the process
instead of
relying on attrition or a massive helpdesk effort to rename
every
pc and laptop.
Catch-22.
-Original
Message-
From: Brown,
Bill [contractor] [mailto:[EMAIL PROTECTED]]
Sent: Friday,
March 07, 2003 8:38 AM
To:
'[EMAIL PROTECTED]'
Subject: RE:
[ActiveDir] OT: Identifying laptops on domain
We employ a
standardized machine naming convention whereby a laptop is
given
the name
User-LT and this makes it a very simple process to break them
out.
R/Bill
-Original Message-
From:
Bjelke John A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 07, 2003 10:32 AM
To:
'[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT:
Identifying laptops on domain
Existing IP
scheme is static, and that's not viable to change at this time.
-Original
Message-
From: PERRIN
Martial (EURIWARE) [mailto:[EMAIL PROTECTED]]
Sent: Friday,
March 07, 2003 8:16 AM
To:
'[EMAIL PROTECTED]'
Subject: RE:
[ActiveDir] OT: Identifying laptops on domain
You can do this
with segmentation on a DHCP network.
Martial
-Message
d'origine-
De: Bjelke John
A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED]]
Date: vendredi
7 mars 2003 16:04
À:
'[EMAIL PROTECTED]'
Objet:
RE: [ActiveDir] Active Directory vs. SunONE directory
I think there's only one question that needs to be posed. Why would anyone need another directory technology? Go back and innovate instead of duplicate. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vikas Deolaliker Sent: Monday, March 24, 2003 3:15 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Active Directory vs. SunONE directory Hello, I would like to get opinions on ActiveDirectory as compared to SunONE directory from this forum. If you could use the following format for your feedback, I would really appreciate it. Dimensions : 1) Discovery Features 2) Security Features 3) Scalability Features 4) Management Features Please reply directly to me. Thanks Vikas Deolaliker Sun Microsystems, Inc. (650) 786-7734 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Locking down network access
Title: Message DNS udp 53 DHCP udp 67 RPC TCP 135 WINS udp 137 NetBIOS datagrams udp 138 NetBIOS datagrams tcp 139 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brad MartinSent: Thursday, February 13, 2003 4:38 PMTo: Active Directory Mailing ListSubject: [ActiveDir] Locking down network access Does anyone have a list of what ports need to be open on a firewall to access things like Active Directory, WINS, DNS, mapping drives, etc.? We need to lock down a section of our network and we only want to let the bare minimum through our firewall. Thanks. Brad Martin Go Daddy Software, Inc. 480.505.8800 ext. 250 [EMAIL PROTECTED] http://www.godaddy.com
