Re(2): Printing Issue
I had a not too dissimillar problem with printing in a thin client environment. I found a Tecnet artical (Q252388) which described how to set up a default printer for new users and modified its application. In order to set up different printers for different groups of people I followed the artical (much of which can be automated by creating a user and setting up just the printers needed) to get the Key values then exported them into a .reg file. Then a simple batch file in an appropriate place (the startup folder for users or attached to the start of the application shortcut (for application specific printers!!)) does a simple 'regedit -i -s regfile.reg' to put everything in place. Nic Wright NT Systems Analyst Stoke on Rent City Council [EMAIL PROTECTED] Ray Zorz (17/08/2001 16:57): I dunno. I didn't waste too much time on it at the time. I used the Con2prt utility, put it in a batch file and put it if I remember correctly in the startup folder on the several pc's in question. -Original Message- From: Steve Roberts [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 9:33 AM To: NT System Admin Issues Subject: RE: Printing Issue I am also having this issue with mandatory profiles. When I log in with an mandatory account to a machine ( which has two three lexmark tcp/ip printers installed on it ) how does it determine which printer is the one going to be set as the default. I think the list of printers installed on an NT machine is stored in : HKLM\System\CurrentControlSet\Control\Print\Printers and the user setting is stored in : HKCU\Software\Microsoft\Windows NT\Windows\Device ( another list of printer stored in HKCU\Sw\MS\WinNT\PrinterPorts How does the machine emunerate HKLM and decide which one is set as default? Can we apply a weighting somehow to force it?? -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: 17 August 2001 15:18 To: NT System Admin Issues Subject: Printing Issue If this email has any attachments then send it onto the IT Help Desk for virus checking Hello, i was wondering if anyone knows a way to have machines print to a specific printer no matter who logs on. for example we have a computer lab and each student has their own account. they have a roaming profile so they can log into any comuter in the school and retain settings etc. server is w2k sp2 and workstations are w2k pro and nt 4.0. is there a way so when they log into one of the lab computers it only captures the printers in the lab, when they go to the library they only capture the library printers, etc? could it possibly be in group policy for machines? any help is greatly appreciated.. Bob Chyka http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the email to the intended recipient, please immediately notify the Muir Group IT Help Desk on +44 (0) 1244 606139 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Exchange ?
I created a detailed document on this, including numerous screenshots, in an effort to make the process completely idiot-proof. They still think it's something I should be doing for them. Mutter. Les Bessant mailto:[EMAIL PROTECTED]IT Manager, Sanderson Townend GilbertActing in a personal capacityhttp://www.tiggercam.co.uk - New, improved and with more bounce! -Original Message-From: Ray Zorz [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 6:13 PMTo: NT System Admin IssuesSubject: RE: Exchange ? Make the users do it. Just give them some instructions, and encourage those that get it to help those that don't. -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 10:16 AMTo: NT System Admin IssuesSubject: Exchange ? Hello everyone, was wondering if there is an easy way in exchange 5.5 to set permissions to see other people's calendar, etc. without going to each machine and doing it through outlook. is there any place at the server where this can be done? a company i work for on the side wants everybody to be able to see each other's claendars and i dont feel like setting permissions at every users calendar through outlook.. TIA, Bob C.http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm_This message has been checked for all known viruses by Star Internetdelivered through the MessageLabs Virus Scanning Service. For furtherinformation visit http://www.star.net.uk/stats.asp or alternatively callStar Internet for details on the Virus Scanning Service. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm The information in this communication and any attachments is confidential and may be legally privileged. It is intended solely for the addressee. If you are not the intended recipient any use, review, dissemination, distribution or copying of this information is strictly prohibited. If you have received this communication in error please notify us immediately on 0191 261 2681 and delete the original message and any copies of it. Any opinions, conclusions or other information in this message that do not relate to the official business of Sanderson Townend & Gilbert are neither given nor endorsed by the firm. _ This message has been checked for all known viruses by Star Internet delivered through the MessageLabs Virus Scanning Service. For further information visit http://www.star.net.uk/stats.asp or alternatively call Star Internet for details on the Virus Scanning Service. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Windows 2000 Pro and Outlook 2K Issue
Shane - OutlookDefPath allows you to change Outlook's default save directory. http://www.simpler-web.com/products/Products.htm Works great in OL 2000 XP. -- Jeff Eggleston MCP [EMAIL PROTECTED] Scales, Shane G., SPC [EMAIL PROTECTED] wrote in message news:170198@ntsysadmin... | | ALL: | We are redirecting the My Documents shortcut on our user's desktop | to a folder on our file server via the properties of the shortcut. That | part works great. Outlook 2000 defaults to the My Documents folder under | the user's profile. Changing the shell folders under HKCU has no effect on | Outlook 2000 default. All other Office 2000 apps work fine. Has anyone | else seen this? Thanks, | Shane Scales, MCSE | SPC, Network Engineer/System Analyst, US Army | Email: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] | [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] | | | http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Domain Issue
Title: RE: Domain Issue There is one thing I can think of that has happened to me. Depending on the location on your network, and what type of topography you have of course, you may be trying to communicate in a manner that is incompatible with the nearest switch/hub/etc. If you go into your adapter properties and set it to half duplex vice full, and 10baseT vice 100baseT. If it is in auto or default set it to the half and 10baseT. Reboot and see if it has any affect. Pat Banyas MCSE System/Network Administrator U.S. Naval Hospital Guantanamo Bay -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 1:57 PM To: NT System Admin Issues Subject: RE: Domain Issue if you have the, Use LMHOSTS for Name Resolution, checked, and you dont have valid domain information in there, I dont think you'll get there. Have you tried unchecking that box, and letting the WINS/DNS name resolution get you there? Network Issues [EMAIL PROTECTED] on 08/17/2001 02:02:19 PM Please respond to NT System Admin Issues [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] cc: Subject: RE: Domain Issue Yes to both questions as well as the correct DNS and WINS servers entered statically. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 10:50 AM To: NT System Admin Issues Subject: RE: Domain Issue well...does this PC have a valid LMHOSTS file? is the Use LMHOSTS for Name Resolution, checked? does the LMHOSTS file have the valid #DOM and #PRE info directing the PC to the proper DC ? Network Issues [EMAIL PROTECTED] on 08/17/2001 01:57:39 PM Please respond to NT System Admin Issues [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] cc: Subject: RE: Domain Issue Name resolution is through WINS. However, there are entries on the local LMHOSTS file that references an AS400 system as well as one of our NT Servers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 10:45 AM To: NT System Admin Issues Subject: RE: Domain Issue What are you using for name resolution? WINS ? LMHOSTS ? ...sounds like your PC cant find its domain controller because of a name resolution issue. Is this PC on a different network subnet than where the DC's are ? Network Issues [EMAIL PROTECTED] on 08/17/2001 01:52:46 PM Please respond to NT System Admin Issues [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] cc: Subject: RE: Domain Issue DC's are all up as no one is having problems logging in. I have also unjoined and rejoined the domain several times and the issue persists. One more thing, I am unable to connect to the workstation using USRMGR or SRVMGR from an NT Server box. -Original Message- From: Luke Brumbaugh [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 10:50 AM To: NT System Admin Issues Subject: RE: Domain Issue check to see if you domain controllers are up. (see if you can logon from another box) then remove your workstation from domain and readd -Original Message- From: Network Issues [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 1:47 PM To: NT System Admin Issues Subject: Domain Issue Goodmorning All, I was wondering if someone can give me an idea why I'm getting this message when attempting to log on to my domain. The computer log you on now because the domain DomainName is not available. This is from an NTWS4/SP6a. I can connect to any and all network resources, but I'm unable to log onto the domain from the workstation. The only way I can log on is on the local box. Any suggestions? TIA Ron http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm Enterprise Channel Management Software for Manufacturers Visit us at http://www.ultryx.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
MS Releases New Free Hotfix Scanner
Hi, I am testing the Hfnetchk tool on NT 4.0 and have the following problem: When I run the tool it want to download the xml File (at http://download.microsoft.com/download/xml/security/1.0/nt5/en-us/mssecure.cab). The Customer where I am working use a proxyserver, but the tool can not get over it (authentication). How can I (automaticly) check for or get the current xml file? http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
email adress
Hi all, In an answer on test-messages someone has published an email-adress that answers automatically. Has someone this for me Thanks a lot, Mark. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: MS Releases New Free Hotfix Scanner
There is an option to pull down the xml file manually from http://www.microsoft.com/security and point the checker to that file with: -x datasource Specifies the xml datasource containing the hotfix information. Location may be an xml filename, compressed xml cab file, or URL. Default is mssecure.cab from the Microsoft website. Matthew Puckett MCSE, MCP+Internet, MCP Customer Support Analyst Genie KB for Customer Care IT Service Delivery Bristol Customer Care Center 1-540-642-3753 1-423-967-3086 - PCS 1-800-307-0683 - Pager We are the knights who say 'NI'. -Original Message- From: Stephan Lieftuechter [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 8:05 AM To: NT System Admin Issues Subject: MS Releases New Free Hotfix Scanner Hi, I am testing the Hfnetchk tool on NT 4.0 and have the following problem: When I run the tool it want to download the xml File (at http://download.microsoft.com/download/xml/security/1.0/nt5/en-us/mssecure.c ab). The Customer where I am working use a proxyserver, but the tool can not get over it (authentication). How can I (automaticly) check for or get the current xml file? http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: email adress
[EMAIL PROTECTED] Works Great Robert -Original Message- From: mark verschaeve [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 5:59 AM To: NT System Admin Issues Subject: email adress Hi all, In an answer on test-messages someone has published an email-adress that answers automatically. Has someone this for me Thanks a lot, Mark. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
MSProxy, Watchgaurd and ASP Smart Upload
Hi there, I remember a couple of years ago I was developing a site for a client that accessed the internet through MSProxy Server 1 on SBS. Part of the site we developed allowed them to upload images via a web page, using some component (cant remember which one now), but each time the client tried to upload an image it would kill their connection, and hence not upload the image. Im having a similar problem with ASP Smart Upload and Watchguard, the client uploads a spreadsheet they get an unspecified error and it kills their browser and does something funny to IIS4 with eventually falls over and dies. My problem is that I cant remember what the problem was with the first client something to do with allowing HTTP uploads through the proxy, does anyone know if there is a similar tick box on Watch Guard that I can get the IT guy to tick/un tick. Is it something to do with the content type that Watch Guard is allowing through? should it be set to allow multipart/form-data through? BTW its Watch Guard FireBox II using software ver 4.61-b1922 Thanks Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Cisco question...
Sometimes the autonegotiate does not work right. We had similar problems with some Solaris boxes. You might also try hard coding the duplex mode - Original Message - From: Keith Nelson [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] Sent: Sunday, August 19, 2001 8:24 PM Subject: RE: Cisco question... Is the router connected to a Switch or a Hub? Are both ends set to use Auto-Negotiation for Port Speed and Duplex. It is possible that you are having a port speed/duplex mismatch which is shutting down the interface. Just a few thoughts. Keith -Original Message- From: mail.kenmcphail.com [mailto:[EMAIL PROTECTED]] Sent: Monday, August 13, 2001 8:13 AM To: NT System Admin Issues Subject: Re: Cisco question... Are you running any IPSEC or GRE tunnels on the device? - Original Message - From: Goldoff, Erik [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] Sent: Monday, August 13, 2001 10:02 AM Subject: RE: Cisco question... show buffers... Erik Goldoff Systems Manager The HoneyBaked Ham Company 678-966-3320 [EMAIL PROTECTED] -Original Message- From: Eric Brouwer [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 09, 2001 12:23 PM To: NT System Admin Issues Subject: Cisco question... I guess I'll start out by asking, are there any good Cisco lists out there? If not, hopefully someone here can help. I have a Cisco 3620 router. We have 3 T1 Serial WIC's installed that connect our 3 regional offices. We also have 2 ethernet interfaces installed. One is for video inferences, the other connects to our LAN. We are having problems today with the LAN interface. The regional offices called saying they could not get e-mail. (Our Exchange servers are all on the local network.) In tracing the problem back, it seems like the LAN interface goes down. If I look on the router, all the lines are green. A reboot of the router cleared up the problem. For about an hour. Then the same symptoms returned. Another reboot fixed it. When the problem is occurring, I can not ping that LAN interface, even though the connection is green on both ends of the patch cable. Any ideas? What can I look for? Eric http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Installing RAS disabled keyboard/mice
Title: Message For no apparent reason other than a hunch, I checked the boot.ini file and the loading options had been modified to start WinNT without a mouse. I removed the offending parameter and rebooted, with a mouse but without a keyboard still. The kbdclass key looked fine to me, but I still couldn't get a keyboard, so I ran NT Setup with the repair option and I ended up with a keyboard but without a network. Totally frustrated by then, I chose the fdisk way... Thanks for your suggestions, guys. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Joe Casale [mailto:[EMAIL PROTECTED]]Sent: Saturday, August 18, 2001 11:57 PMTo: NT System Admin IssuesSubject: RE: Installing RAS disabled keyboard/mice Dude, I had this problem w/ an e2k server. When I booted into safemode, the KB worked. This happened after I updated win2k to sp2. I tried a few different makes of kbs, and the problem actually went away. I never did figure it out! If you guys find the culprit, post it back here, that one pissed me off! jlc -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 2001 10:50 PMTo: NT System Admin IssuesSubject: RE: Installing RAS disabled keyboard/mice I can't tell for the mouse, but the keyboard works fine up until after the "last known good profile" screen. Then does it become inoperative. -Original Message-From: Kevin Miller [mailto:[EMAIL PROTECTED]]Sent: Sunday, August 19, 2001 2:21 AMTo: NT System Admin IssuesSubject: RE: Installing RAS disabled keyboard/mice Hardware? did you perhaps disable them in the CMOS??? Kevinm WLKMMAS*TM, QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG ~~~ More letters after my name makes me Smarter. ~~~ please respond back to rent this ad space for your needs -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 2001 9:24 PMTo: NT System Admin IssuesSubject: Installing RAS disabled keyboard/mice Hello week-enders, I installed RAS in order to enable a remote user to use her modem (read, I'm scrambling to survive the Rhythms shutdown) on a WinNT SP6a PC. After reboot, the keyboard and PS/2 mouse were inoperative. Connecting to the logs from a different PC, I found out that the following three devices/services wouldn't load at start-up (error message 7026) : kbdclass, lmoufltr, mouclass. I tried rebooting in VGA mode or with the last known good hardware config, neither helped, nor did it do any difference when I rebotted the machine with the mouse and keyboard unplugged. The user "lost" the ERD (or in clearspeak, never bothered to do one despite my instructions). Anyone has a suggestion that'd let me revive this PC without reinstalling NT. I'm thinking reinstalling SP6 may solve the problem, but how do I do that when the keyboard and the mouse are inoperative ? Thanks in advance. Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Corporate Firewall Software for NT/2000/XP
Title: OT: Corporate Firewall Software for NT/2000/XP Probably the smartest thing ive ever heard. Oh wellz thanx all -Original Message-From: Andrew S. Baker [mailto:[EMAIL PROTECTED]]Sent: Monday, 20 August 2001 3:21 PMTo: NT System Admin IssuesCc: [EMAIL PROTECTED]Subject: RE: Corporate Firewall Software for NT/2000/XP High-End: CheckPoint FW-1 Mid-Range: WinRoute Pro I won't even question the requirements... :) http://www.ultratech-llc.com/KB/?File=SFirewalls.TXT == ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT == "Human beings, who are almost unique in having the abilityto learn from the experience of others, are also remarkablefor their apparent disinclination to do so." -- Douglas Adams -Original Message-From: Ryan McBride [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 12:34 AMTo: NT System Admin IssuesSubject: OT: Corporate Firewall Software for NT/2000/XP We are about to put a 6meg ADSL Connection into our head office. Due to the size of the link we see the need for a EXTREAMLY strong and customisable firewall. Needs to support DMZ's and logging, etc and HAS to run on NT/2000/XP. Suggestions please anyone?!?!? - - Ryan McBride (MCSE) Network Comms Administrator Strategic Management Works http://www.smw.com.au +612-9906-9611 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Changing SCSI Controller - Need Help Fast
NT4 Server SP6. Strange problem I'm having here. This server had 5 hard disks in it and I was able to consolidate all the data onto two drives. I took out the 3 unneeded disks and now the event log is filling with Event ID 9: aix78xx The Device, \Device\ScsiPort0, did not respond within the timeout period. These events occur every few minutes, all day and all night, even when there's no activity on the machine. The backup fails also. (Seagate DDS4 tape drive) I made sure the terminations were correct, and don't really know what else to check. All I did was take drives out. Those three disks were in the middle of the chain. I was wondering how to go about upgrading the controller from an adaptec 2940 to a new Ultra 160 controller (Adaptec 29160). The tape drive and one hard disk are LVD. The boot drive is single ended. Maybe this is part of my problem. Should I install the new card, install the driver then switch the devices to the new adapter? Thanks, Scott http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Proxy Problem..
Title: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. (www.msn.com) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: How to move DHCP from one server to another - hardware upgrad e - not OS upgrade
Title: Message I think I used these instructions when I did it. http://www.jsiinc.com/subd/tip1600/rh1628.htm I have done it once and it worked, but like Kevin says, YMMV. Regards Rene -Original Message-From: Flanagan, Kevin [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 2:12 PMTo: NT System Admin IssuesSubject: RE: How to move DHCP from one server to another - hardware upgrad e - not OS upgrade There is a technet article. http://support.microsoft.com/support/kb/articles/Q130/6/42.asp Your Mileage May Vary, these are updated instructions since I tried to do this about a year ago, it didn't work for a crap back then. Good luck, Kevin +---+ Kevin Flanagan C/S Planning Engineer III I/T Implementation Department Branch Banking Trust Company 3261 Atlantic Avenue, Suite 116 MC: 172-85-01-00 Raleigh, NC 27604 Voice: 919-716-6209 -Original Message-From: Robert E Young [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 2001 2:04 PMTo: NT System Admin IssuesSubject: How to move DHCP from one server to another - hardware upgrade - not OS upgrade Has anyone moved/copied DHCP from one server to another ? This is a total PC replacement (hardware upgrade only - not OS) or Does anyone KNOW of a command line way to importthe backup registry file. e \winnt\system32\DHCP\backup\DHCPcfg , (it is a binary file) ? thx, rey -Original Message-From: Robert E Young [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 16, 2001 8:36 PMTo: NT System Admin IssuesSubject: RE: command line import of the DHCPcfg file Unfortunately, it is a binary file, not an ascii test file. rey -Original Message-From: Kevin Miller [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 16, 2001 11:07 PMTo: NT System Admin IssuesSubject: RE: command line import of the DHCPcfg file open it with notepad. Kevinm QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG ~~~ More letters after my names makes me Smarter. ~~~ please respond back to rent this ad space for your needs -Original Message-From: Robert E Young [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 16, 2001 6:19 PMTo: NT System Admin IssuesSubject: command line import of the DHCPcfg fileImportance: High DHCP server creates its own registry backup i.e \winnt\system32\DHCP\backup\DHCPcfg the file has no extension. It can be imported to the registry using the regedt32 utility, however, I need to import it in a batch file. I have tried regedit /s I have tried reg from the resource kit neither work... Does anyone KNOW of a command line way to import that particular registry file. TIA Robert E Young MCSE Dallas, TX http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm *** The information in this e-mail is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this e-mail in error please notify the sender by return e-mail, delete this e-mail, and refrain from any disclosure or action based on the information.
Re: Proxy Problem..
Title: Proxy Problem.. Have you entered the proxy settings for the browser? Anything unusual in the Event Viewer? - Original Message - From: [EMAIL PROTECTED] To: NT System Admin Issues Sent: Monday, August 20, 2001 9:55 AM Subject: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. (www.msn.com) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Proxy Problem..
Title: Proxy Problem.. Yes, the browsers connection settings are all pointing to the proxy server. Check of the event viewer only reveals one error: "The HTTP server was unable to load the ISAPI Application 'C:\winnt.sbs\system32\idq.dll'. The data is the error." .. and of course it's looking a whole lot like greek to me! Ptl. Bob CouchmanUnit 57Network AdministratorMadisonville Police Department99 East Center StreetMadisonville, KY 42431(270) 821-1720(270) 824-2115 (fax)[EMAIL PROTECTED]Visit the Madisonville Police Department on the internet athttp://www.madisonvillepd.com -Original Message-From: Peter Pearson [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 9:10To: NT System Admin IssuesSubject: Re: Proxy Problem.. Have you entered the proxy settings for the browser? Anything unusual in the Event Viewer? - Original Message - From: [EMAIL PROTECTED] To: NT System Admin Issues Sent: Monday, August 20, 2001 9:55 AM Subject: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. (www.msn.com) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Proxy Problem..
Title: RE: Proxy Problem.. You never get anything but a plain white screen? Correct.. nothing but a white screen... No 'Page not available' or other type of message? Nope.. That's what is puzzling me.. I'm assuming you have pointed your browser at the proxy server. Yes, the browser is pointed to the proxy server. Where is the exchange server? Is it on the Proxy server machine? I'm running SBS 4.5 so exchange and proxy are on the same physical machine. Are all your proxy services started in the Proxy Management Console? Yes, all services are running properly on the PMC. Have you tried using the proxy client on a client machine (you shouldn't have to in order to just browse, but ??)? Actually, yes! I tried that too. I am pulling at what ever strings I can. This one is puzzling me. Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ -Original Message- From: Bill Kuhn - MCSE [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:24 To: NT System Admin Issues Subject: RE: Proxy Problem.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 8:55 AM To: NT System Admin Issues Subject: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. (www.msn.com) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Proxy Problem..
Title: Proxy Problem.. What is your proxy setup exactly? Proxy 2.0? 2 Nics? etc.. Have you added a static route in the routing table? Has it ever worked? Have you tried the IP of the proxy rather than netbios in the proxy settings? - Original Message - From: [EMAIL PROTECTED] To: NT System Admin Issues Sent: Monday, August 20, 2001 10:20 AM Subject: RE: Proxy Problem.. Yes, the browsers connection settings are all pointing to the proxy server. Check of the event viewer only reveals one error: "The HTTP server was unable to load the ISAPI Application 'C:\winnt.sbs\system32\idq.dll'. The data is the error." .. and of course it's looking a whole lot like greek to me! Ptl. Bob CouchmanUnit 57Network AdministratorMadisonville Police Department99 East Center StreetMadisonville, KY 42431(270) 821-1720(270) 824-2115 (fax)[EMAIL PROTECTED]Visit the Madisonville Police Department on the internet athttp://www.madisonvillepd.com -Original Message-From: Peter Pearson [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 9:10To: NT System Admin IssuesSubject: Re: Proxy Problem.. Have you entered the proxy settings for the browser? Anything unusual in the Event Viewer? - Original Message - From: [EMAIL PROTECTED] To: NT System Admin Issues Sent: Monday, August 20, 2001 9:55 AM Subject: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. (www.msn.com) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Windows 2000 System shutdown unexpected
Hello all, We have couples of very critical web servers. They are doing Network load balance on each other.. One of the server keep automatic turn off everyday 1:56am since 8/18 (Three days already). I need go back to office turn on early in the morning. We have paging system always notified me.. The only message I can see from my event view during that times is Event ID: 6008 - System shutdown unexpected. No other message.. That is couple of chance I am thinking now. 1. Power issue.. I test ups - We brought big central UPS couple month ago. I disconnect and connect. No problem. 2. Nothing I can found under event view can cause problem that time / nothing also in the schedule.. (I type AT show nothing in the schedule.) --- Anyone know any hidden schedule?? 3. Hardware issue.. (But why the things happen only at 1:56am ??).. 4. Security issue - So far we never get effect by code red. We already remove all unnecessary scripting from our web server since long times ago and we always keep update our service pack and security patch.. But web server may already get attacked by hacker.. Anyone have same experiences?? I need your help.. Albert http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Proxy Problem..
.. Hmm, IDQ.DLL is the dll the Code Red worm plays with and it's also the dll that is patched with the update. Do any updates lately? Kent --- [EMAIL PROTECTED] wrote: Yes, the browsers connection settings are all pointing to the proxy server. Check of the event viewer only reveals one error: The HTTP server was unable to load the ISAPI Application 'C:\winnt.sbs\system32\idq.dll'. The data is the error. .. and of course it's looking a whole lot like greek to me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com/ http://www.madisonvillepd.com -Original Message- From: Peter Pearson [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:10 To: NT System Admin Issues Subject: Re: Proxy Problem.. Have you entered the proxy settings for the browser? Anything unusual in the Event Viewer? - Original Message - From: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:[EMAIL PROTECTED] Sent: Monday, August 20, 2001 9:55 AM Subject: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. ( www.msn.com http://www.msn.com ) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Windows 2000 System shutdown unexpected
Backups? Also, reply the latest service pack. -Andrew -Original Message- From: Albert Chong [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 10:42 AM To: NT System Admin Issues Subject: Windows 2000 System shutdown unexpected Hello all, We have couples of very critical web servers. They are doing Network load balance on each other.. One of the server keep automatic turn off everyday 1:56am since 8/18 (Three days already). I need go back to office turn on early in the morning. We have paging system always notified me.. The only message I can see from my event view during that times is Event ID: 6008 - System shutdown unexpected. No other message.. That is couple of chance I am thinking now. 1. Power issue.. I test ups - We brought big central UPS couple month ago. I disconnect and connect. No problem. 2. Nothing I can found under event view can cause problem that time / nothing also in the schedule.. (I type AT show nothing in the schedule.) --- Anyone know any hidden schedule?? 3. Hardware issue.. (But why the things happen only at 1:56am ??).. 4. Security issue - So far we never get effect by code red. We already remove all unnecessary scripting from our web server since long times ago and we always keep update our service pack and security patch.. But web server may already get attacked by hacker.. Anyone have same experiences?? I need your help.. Albert http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Exchange ?
There's no question that some will balk. But I always figured that if I get even 1 to do it, that's one less I have to do. And the percentages were usually higher. I had this one job where we were all in a big room, about 75 of us. I sent out an e-mail asking them to do something similiar. It was kind of fun watching who understood, who didn't and who jumped up to help. -Original Message-From: Les Bessant [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 2:26 AMTo: NT System Admin IssuesSubject: RE: Exchange ? I created a detailed document on this, including numerous screenshots, in an effort to make the process completely idiot-proof. They still think it's something I should be doing for them. Mutter. Les Bessant mailto:[EMAIL PROTECTED]IT Manager, Sanderson Townend GilbertActing in a personal capacityhttp://www.tiggercam.co.uk - New, improved and with more bounce! -Original Message-From: Ray Zorz [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 6:13 PMTo: NT System Admin IssuesSubject: RE: Exchange ? Make the users do it. Just give them some instructions, and encourage those that get it to help those that don't. -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 10:16 AMTo: NT System Admin IssuesSubject: Exchange ? Hello everyone, was wondering if there is an easy way in exchange 5.5 to set permissions to see other people's calendar, etc. without going to each machine and doing it through outlook. is there any place at the server where this can be done? a company i work for on the side wants everybody to be able to see each other's claendars and i dont feel like setting permissions at every users calendar through outlook.. TIA, Bob C.http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm_This message has been checked for all known viruses by Star Internetdelivered through the MessageLabs Virus Scanning Service. For furtherinformation visit http://www.star.net.uk/stats.asp or alternatively callStar Internet for details on the Virus Scanning Service.http://www.sunbelt-software.com/ntsysadmin_list_charter.htm The information in this communication and any attachments is confidential and may be legally privileged. It is intended solely for the addressee. If you are not the intended recipient any use, review, dissemination, distribution or copying of this information is strictly prohibited. If you have received this communication in error please notify us immediately on 0191 261 2681 and delete the original message and any copies of it. Any opinions, conclusions or other information in this message that do not relate to the official business of Sanderson Townend Gilbert are neither given nor endorsed by the firm. _This message has been checked for all known viruses by Star Internetdelivered through the MessageLabs Virus Scanning Service. For furtherinformation visit http://www.star.net.uk/stats.asp or alternatively callStar Internet for details on the Virus Scanning Service.http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Proxy Problem..
Title: RE: Proxy Problem.. er, um, no I haven't put it on yet.. gone looking now... with my fingers crossed. Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ -Original Message- From: Spencer Kent [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:47 To: NT System Admin Issues Subject: RE: Proxy Problem.. .. Hmm, IDQ.DLL is the dll the Code Red worm plays with and it's also the dll that is patched with the update. Do any updates lately? Kent --- [EMAIL PROTECTED] wrote: Yes, the browsers connection settings are all pointing to the proxy server. Check of the event viewer only reveals one error: The HTTP server was unable to load the ISAPI Application 'C:\winnt.sbs\system32\idq.dll'. The data is the error. .. and of course it's looking a whole lot like greek to me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com/ http://www.madisonvillepd.com -Original Message- From: Peter Pearson [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:10 To: NT System Admin Issues Subject: Re: Proxy Problem.. Have you entered the proxy settings for the browser? Anything unusual in the Event Viewer? - Original Message - From: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:[EMAIL PROTECTED] Sent: Monday, August 20, 2001 9:55 AM Subject: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. ( www.msn.com http://www.msn.com ) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Windows 2000 System shutdown unexpected
Title: RE: Windows 2000 System shutdown unexpected REPLY the latest service pack? Boy, that's gonna be a BIG e-mail message! -Original Message- From: Andrew Petukov [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 09:49 To: NT System Admin Issues Subject: RE: Windows 2000 System shutdown unexpected Backups? Also, reply the latest service pack. -Andrew -Original Message- From: Albert Chong [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 10:42 AM To: NT System Admin Issues Subject: Windows 2000 System shutdown unexpected Hello all, We have couples of very critical web servers. They are doing Network load balance on each other.. One of the server keep automatic turn off everyday 1:56am since 8/18 (Three days already). I need go back to office turn on early in the morning. We have paging system always notified me.. The only message I can see from my event view during that times is Event ID: 6008 - System shutdown unexpected. No other message.. That is couple of chance I am thinking now. 1. Power issue.. I test ups - We brought big central UPS couple month ago. I disconnect and connect. No problem. 2. Nothing I can found under event view can cause problem that time / nothing also in the schedule.. (I type AT show nothing in the schedule.) --- Anyone know any hidden schedule?? 3. Hardware issue.. (But why the things happen only at 1:56am ??).. 4. Security issue - So far we never get effect by code red. We already remove all unnecessary scripting from our web server since long times ago and we always keep update our service pack and security patch.. But web server may already get attacked by hacker.. Anyone have same experiences?? I need your help.. Albert http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Proxy Problem..
.. I'd sure scan the IIS logs then to see if any successful attempts to muck with IDQ.dll were done. Kent --- [EMAIL PROTECTED] wrote: er, um, no I haven't put it on yet.. gone looking now... with my fingers crossed. Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ -Original Message- From: Spencer Kent [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:47 To: NT System Admin Issues Subject: RE: Proxy Problem.. .. Hmm, IDQ.DLL is the dll the Code Red worm plays with and it's also the dll that is patched with the update. Do any updates lately? Kent --- [EMAIL PROTECTED] wrote: Yes, the browsers connection settings are all pointing to the proxy server. Check of the event viewer only reveals one error: The HTTP server was unable to load the ISAPI Application 'C:\winnt.sbs\system32\idq.dll'. The data is the error. .. and of course it's looking a whole lot like greek to me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com/ http://www.madisonvillepd.com -Original Message- From: Peter Pearson [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:10 To: NT System Admin Issues Subject: Re: Proxy Problem.. Have you entered the proxy settings for the browser? Anything unusual in the Event Viewer? - Original Message - From: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] To: NT System Admin Issues mailto:[EMAIL PROTECTED] Sent: Monday, August 20, 2001 9:55 AM Subject: Proxy Problem.. I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio: 1) User puts a valid address request in. ( www.msn.com http://www.msn.com ) 2) The request is made to the server (watching the bottom left side of the browser) 3) The browser goes to a plain white screen I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me! Ptl. Bob Couchman Unit 57 Network Administrator Madisonville Police Department 99 East Center Street Madisonville, KY 42431 (270) 821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com http://www.madisonvillepd.com/ http://www.madisonvillepd.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
code red patch when you need index server
How do you patch a iis4 box for code red when you need index server to run? I applied the fix from microsoft back when it came out, but after I applied it index server stopped working. Thanks http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: code red patch when you need index server
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-033.asp .. Read the fine print as it says service calls associated with security patches are free. .. What version Index Server and what SP is NT? Kent --- Derrenbacker, L. Jonathan [EMAIL PROTECTED] wrote: How do you patch a iis4 box for code red when you need index server to run? I applied the fix from microsoft back when it came out, but after I applied it index server stopped working. Thanks http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Windows 2000 System shutdown unexpected
Nothing I can found under event view can cause problem that time / nothing also in the schedule.. (I type AT show nothing in the schedule.) --- Anyone know any hidden schedule?? Did you have a look at the scheduled tasks in Control Panel? As far as I know, you can't see these tasks with the 'at'-Command. Andreas http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Can't access printer on network, problem with AD
Hi: I have a win2000 network with a small group of computers in onesection that use a laser printer that is attached to one of thewin2000 machines. Last week all of a sudden nobody could print. Ifound out that the local security, local policies, users rights,access this computer from the network had effective settings of onlyadmin and domain admin having access. The local policies haveeveryone. I took all restrictions off the domain. First I don't knowwhat changed, and second I don't know how to get the local policy topropagate to the effective setting. Everything I have read says thatit should do this automatically.Anyone have any ideas? I don't want to do anything radical until Ihave tried everything else. Thanks Blaine http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re:Can't access printer on network, problem with AD
HP4100 printers have a known problem working with win2000 machines. Is this an HP4100? If so contact HP for their latest firmware upgrade. ralph Reply Separator Subject:Can't access printer on network, problem with AD Author: NT System Admin Issues [EMAIL PROTECTED] Date: 20/08/2001 11:49 AM Hi: I have a win2000 network with a small group of computers in one section that use a laser printer that is attached to one of the win2000 machines. Last week all of a sudden nobody could print. I found out that the local security, local policies, users rights, access this computer from the network had effective settings of only admin and domain admin having access. The local policies have everyone. I took all restrictions off the domain. First I don't know what changed, and second I don't know how to get the local policy to propagate to the effective setting. Everything I have read says that it should do this automatically. Anyone have any ideas? I don't want to do anything radical until I have tried everything else. Thanks Blaine http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Windows 2000 System shutdown unexpected
Also check that the BIOS does not have any powerdown at XX:XX setting, God only knows why someone would program something like that into the BIOS but its there in some machines. Stephen -Original Message- From: Albert Chong [mailto:[EMAIL PROTECTED]] Sent: 20 August 2001 15:42 To: NT System Admin Issues Subject: Windows 2000 System shutdown unexpected Hello all, We have couples of very critical web servers. They are doing Network load balance on each other.. One of the server keep automatic turn off everyday 1:56am since 8/18 (Three days already). I need go back to office turn on early in the morning. We have paging system always notified me.. The only message I can see from my event view during that times is Event ID: 6008 - System shutdown unexpected. No other message.. That is couple of chance I am thinking now. 1. Power issue.. I test ups - We brought big central UPS couple month ago. I disconnect and connect. No problem. 2. Nothing I can found under event view can cause problem that time / nothing also in the schedule.. (I type AT show nothing in the schedule.) --- Anyone know any hidden schedule?? 3. Hardware issue.. (But why the things happen only at 1:56am ??).. 4. Security issue - So far we never get effect by code red. We already remove all unnecessary scripting from our web server since long times ago and we always keep update our service pack and security patch.. But web server may already get attacked by hacker.. Anyone have same experiences?? I need your help.. Albert http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Windows 2000 System shutdown unexpected
Thank you Stephen. I will check tonight.. -Original Message- From: Stephen I. Woolhead [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:11 AM To: NT System Admin Issues Subject: RE: Windows 2000 System shutdown unexpected Also check that the BIOS does not have any powerdown at XX:XX setting, God only knows why someone would program something like that into the BIOS but its there in some machines. Stephen -Original Message- From: Albert Chong [mailto:[EMAIL PROTECTED]] Sent: 20 August 2001 15:42 To: NT System Admin Issues Subject: Windows 2000 System shutdown unexpected Hello all, We have couples of very critical web servers. They are doing Network load balance on each other.. One of the server keep automatic turn off everyday 1:56am since 8/18 (Three days already). I need go back to office turn on early in the morning. We have paging system always notified me.. The only message I can see from my event view during that times is Event ID: 6008 - System shutdown unexpected. No other message.. That is couple of chance I am thinking now. 1. Power issue.. I test ups - We brought big central UPS couple month ago. I disconnect and connect. No problem. 2. Nothing I can found under event view can cause problem that time / nothing also in the schedule.. (I type AT show nothing in the schedule.) --- Anyone know any hidden schedule?? 3. Hardware issue.. (But why the things happen only at 1:56am ??).. 4. Security issue - So far we never get effect by code red. We already remove all unnecessary scripting from our web server since long times ago and we always keep update our service pack and security patch.. But web server may already get attacked by hacker.. Anyone have same experiences?? I need your help.. Albert http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Code Red Got me - one more quick thing
If using IIS 4.0, be sure you aren't using the native HTTP redirects. The malformed URLs sent by Code Red probes causes Web services to shut down when implementing this configuration even if your server is not infected. Eeye's tool does not detect this as a security hole. If you're using these redirects, convert them to page redirects. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Microsoft Security Bulletin MS01-044
Title: Message For those of you who have installed this, have you seen any issues? We have run it in our dev env. with no issues, but just want to get a the opinions of others. Thanks Martin Blackstone Director, Information Technologies Superior Access Insurance Services 949.470.2111 x279 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Microsoft Security Bulletin MS01-044
Title: Message No issues. -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 9:57 AMTo: NT System Admin IssuesSubject: Microsoft Security Bulletin MS01-044 For those of you who have installed this, have you seen any issues? We have run it in our dev env. with no issues, but just want to get a the opinions of others. Thanks Martin Blackstone Director, Information Technologies Superior Access Insurance Services 949.470.2111 x279 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Anyone know about server Work Items? I don't....
Does anyone know exactly what a work item is and how they are used by NT Server? Unfortunately I have been unable to find much information on this subject. I have a policy server (Dell Poweredge 1300, 2x PIII 500, 256Mb, 2x 8.4SCSI)which dishes out group policy settings to users as they logon to the network. The number of clients it serves can be as high as 550 concurrent users. A few months back, before I managed to get a hold of the Dell Poweredge server, I had an old single processor PII 400 Compaq Desktop PC with 128Mb being used as the policy server... not ideal I know, but it's all I could scrounge of head office at the time!! Whenever large amounts of users started to login and pull the policy down to their workstations, some of the users would get a grey screen instead of their wallpaper. The policy server (desktop!) suffered from a lack of available work items. I've managed to find bits and pieces from Technet which have lead to several registry entries in the Lanman Server\Parameters section which helped the situation and now that the desktop PC has been replaced with a proper server, the problem has never re-occurred. However, I've noticed the following activity when monitoring 'Available Work Items' and 'Current Clients' from Performance Monitor. Lets say that the server is serving 0 clients. The available work items is at 512. As users start logging on, the number of clients goes up and the available work items go down... pretty much as expected. It appears that for every client being served, 3 work items are used. After, lets say, 70 clients are being served, the available work items value is around about 4-7. Then... 20 more clients logon, but the available work items stay's the same. I'm not sure, but I think this is because the server allocates additional work items as and when needed. At the end of the day, 500 or so people all logoff, but the available work items value shoots up to well over 1000 and has so far reached a maximum of 2790!!! However, the next morning, as soon as users start logging back on, lets say about 50 clients, the available work items value drops like dotcom shares and is back to having 4-7 available work items left. What the hell happened to the rest of them?!? Anyway... enough waffelling, if you've managed to read (and understand me) this far, thanks!! Any Thoughts / Ideas? Cheers, Tony Mitchell Server Administrator ITV Digital http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Printing Issue
Looks like it comes with the ZAK. Not sure where else. Check technet. -Original Message-From: Mark Pilbeam [mailto:[EMAIL PROTECTED]]Sent: Saturday, August 18, 2001 12:37 AMTo: NT System Admin IssuesSubject: RE: Printing Issue What is the con2prt utility, and where do I get it from? -Original Message-From: Ray Zorz [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 5:58 PMTo: NT System Admin IssuesSubject: RE: Printing Issue I dunno. I didn't waste too much time on it at the time. I used the Con2prt utility, put it in a batch file and put itif I remember correctly in the startup folder on the several pc's in question. -Original Message-From: Steve Roberts [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 9:33 AMTo: NT System Admin IssuesSubject: RE: Printing Issue I am also having this issue with mandatory profiles. When I log in with an mandatory account to a machine ( which has two three lexmark tcp/ip printers installed on it ) how does it determine which printer is the one going to be set as the default. I think the list of printers installed on an NT machine is stored in : HKLM\System\CurrentControlSet\Control\Print\Printers and the user setting is stored in : HKCU\Software\Microsoft\Windows NT\Windows\Device ( another list of printer stored in HKCU\Sw\MS\WinNT\PrinterPorts How does the machine emunerate HKLM and decide which one is set as default? Can we apply a weighting somehow to force it?? -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]]Sent: 17 August 2001 15:18To: NT System Admin IssuesSubject: Printing Issue If this email has any attachments then send it onto the IT Help Desk for virus checking Hello, i was wondering if anyone knows a way to have machines print to a specific printer no matter who logs on. for example we have a computer lab and each student has their own account. they have a roaming profile so they can log into any comuter in the school and retain settings etc. server is w2k sp2 and workstations are w2k pro and nt 4.0. is there a way so when they log into one of the lab computers it only captures the printers in the lab, when they go to the library they only capture the library printers, etc? could it possibly be in group policy for machines? any help is greatly appreciated.. Bob Chykahttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the email to the intended recipient, please immediately notify the Muir Group IT Help Desk on +44 (0) 1244 606139http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
ODBC Connections
All, Is there as Reg Hack/Utility that will allow me to add a system DSN without having to go to 175 machines and add it to each one? It is a NT4.0 sp6a environment with Office 2k sr1. We are moving from an access oriented back end to a SQL7 back end, and I would prefer not to have to go to each individual machine to add the connectivity. TIA for your help. Barrett Blackburn ___ Things a Mother Learns: No matter how much Jell-O you put in a swimming pool, you still can't walk on water. ___ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
OT - Macromedia's pricing strategy?
I just got a bulletin that Macromedia released some new something. However, the interesting part to me was their pricing strategy. :) ~~ Pricing ~~ Pricing starts at just $1999 for a 3-user version. Add a single user for $499. For more details on pricing, visit: http://www.macromedia.com/go/sitespring_esd_pricing So, I can pay $1,500 fro 3 individual licenses or you will bundle them for me and I will save . . . oh, no, I will actually lose $500. Sounds like a great deal! I'm sure Marc at eeye will be interested to see if this works. :) JayW http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: ODBC Connections
.. create it on one NTWS and export the registry key and apply it to all in login script. Kent --- Blackburn Barrett [EMAIL PROTECTED] wrote: All, Is there as Reg Hack/Utility that will allow me to add a system DSN without having to go to 175 machines and add it to each one? It is a NT4.0 sp6a environment with Office 2k sr1. We are moving from an access oriented back end to a SQL7 back end, and I would prefer not to have to go to each individual machine to add the connectivity. TIA for your help. Barrett Blackburn ___ Things a Mother Learns: No matter how much Jell-O you put in a swimming pool, you still can't walk on water. ___ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT - Macromedia's pricing strategy?
The single user license (which is an ADDITION to the Site license) would be useless to you without the original site purchase. William -Original Message- From: Jay Woody [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 10:22 AM To: NT System Admin Issues Subject: OT - Macromedia's pricing strategy? I just got a bulletin that Macromedia released some new something. However, the interesting part to me was their pricing strategy. :) ~~ Pricing ~~ Pricing starts at just $1999 for a 3-user version. Add a single user for $499. For more details on pricing, visit: http://www.macromedia.com/go/sitespring_esd_pricing So, I can pay $1,500 fro 3 individual licenses or you will bundle them for me and I will save . . . oh, no, I will actually lose $500. Sounds like a great deal! I'm sure Marc at eeye will be interested to see if this works. :) JayW http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: ODBC Connections
.. Or the long way, Kent http://support.microsoft.com/support/kb/articles/Q123/0/08.ASP --- Blackburn Barrett [EMAIL PROTECTED] wrote: All, Is there as Reg Hack/Utility that will allow me to add a system DSN without having to go to 175 machines and add it to each one? It is a NT4.0 sp6a environment with Office 2k sr1. We are moving from an access oriented back end to a SQL7 back end, and I would prefer not to have to go to each individual machine to add the connectivity. TIA for your help. Barrett Blackburn ___ Things a Mother Learns: No matter how much Jell-O you put in a swimming pool, you still can't walk on water. ___ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Active Directory Problem
I have a small network: W2K Server SP2 with 2 NICs one for internal and one for cable modem that is shared. A bunch of WIN98 clients. Things have been running smooth for a while and all of a sudden none of the clients can be authenticated through the server. When I try to go into manage user accounts I get the following message: Naming information cannot be located because: The specified domain either does not exist or cannot be contacted. Contact your system administrator to verify that your domain is properly configured and is currently online. Well ladies and gentlemen I am the so called system administrator and I have no clue what to do. Please help me. Thanks Ibby wannabe sys admin. You can tell whether a man is clever by his answers. You can tell whether a man is wise by his questions. Naguib Mahfouz http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Reporting Code red
Is there a website, or agency or whatever that you can report Code Red web hits to. We are getting hit from Concentric, and msn and I do have the ipaddress' It's not a problem here, just irritating. Luke L. Brumbaugh System Administrator,MCSE Ultryx Corporation mailto:[EMAIL PROTECTED] Enterprise Channel Management Software for Manufacturers Visit us at http://www.ultryx.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Microsoft Security Bulletin MS01-044
No issues for me. I ran it on about 15 servers. Probably 4 different Compaq hardware platforms. JayW [EMAIL PROTECTED] 08/20/01 11:57AM For those of you who have installed this, have you seen any issues? We have run it in our dev env. with no issues, but just want to get a the opinions of others. Thanks Martin Blackstone Director, Information Technologies Superior Access Insurance Services 949.470.2111 x279 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Active Directory Problem
I would start by checking your DNS server. ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸ Howard Steinberg, MCSE LAN Administrator Zepf Inc., Clearwater, FL [EMAIL PROTECTED] Click here for the Top TEN reasons you should have quick-change container handling parts for all your packaging machines! http://www.zepf.com/zepf/chngprts.htm -Original Message- From: Ibby El-Raheb [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:00 PM To: NT System Admin Issues Subject: Active Directory Problem I have a small network: W2K Server SP2 with 2 NICs one for internal and one for cable modem that is shared. A bunch of WIN98 clients. Things have been running smooth for a while and all of a sudden none of the clients can be authenticated through the server. When I try to go into manage user accounts I get the following message: Naming information cannot be located because: The specified domain either does not exist or cannot be contacted. Contact your system administrator to verify that your domain is properly configured and is currently online. Well ladies and gentlemen I am the so called system administrator and I have no clue what to do. Please help me. Thanks Ibby wannabe sys admin. You can tell whether a man is clever by his answers. You can tell whether a man is wise by his questions. Naguib Mahfouz http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Active Directory Problem
Before that I would check to see if your Account is Locked OUT. I have seen this error when mine gets locked out. Jeremiah -Original Message- From: Howard.Steinberg [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:37 PM To: ntsysadmin Subject: RE: Active Directory Problem I would start by checking your DNS server. ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸ Howard Steinberg, MCSE LAN Administrator Zepf Inc., Clearwater, FL [EMAIL PROTECTED] Click here for the Top TEN reasons you should have quick-change container handling parts for all your packaging machines! http://www.zepf.com/zepf/chngprts.htm -Original Message- From: Ibby El-Raheb [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:00 PM To: NT System Admin Issues Subject: Active Directory Problem I have a small network: W2K Server SP2 with 2 NICs one for internal and one for cable modem that is shared. A bunch of WIN98 clients. Things have been running smooth for a while and all of a sudden none of the clients can be authenticated through the server. When I try to go into manage user accounts I get the following message: Naming information cannot be located because: The specified domain either does not exist or cannot be contacted. Contact your system administrator to verify that your domain is properly configured and is currently online. Well ladies and gentlemen I am the so called system administrator and I have no clue what to do. Please help me. Thanks Ibby wannabe sys admin. You can tell whether a man is clever by his answers. You can tell whether a man is wise by his questions. Naguib Mahfouz http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Active Directory Problem
No doubt, more then one nic on diff subnets w/ ics or blocked ports get tricky on a dc. You probably did that all on one machine because of budget constraints, but that is not an ideal setup so to speak. I am betting its DNS issues as well! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 12:37 PM To: NT System Admin Issues Subject: RE: Active Directory Problem I would start by checking your DNS server. ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸ Howard Steinberg, MCSE LAN Administrator Zepf Inc., Clearwater, FL [EMAIL PROTECTED] Click here for the Top TEN reasons you should have quick-change container handling parts for all your packaging machines! http://www.zepf.com/zepf/chngprts.htm -Original Message- From: Ibby El-Raheb [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:00 PM To: NT System Admin Issues Subject: Active Directory Problem I have a small network: W2K Server SP2 with 2 NICs one for internal and one for cable modem that is shared. A bunch of WIN98 clients. Things have been running smooth for a while and all of a sudden none of the clients can be authenticated through the server. When I try to go into manage user accounts I get the following message: Naming information cannot be located because: The specified domain either does not exist or cannot be contacted. Contact your system administrator to verify that your domain is properly configured and is currently online. Well ladies and gentlemen I am the so called system administrator and I have no clue what to do. Please help me. Thanks Ibby wannabe sys admin. You can tell whether a man is clever by his answers. You can tell whether a man is wise by his questions. Naguib Mahfouz http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Web Hosting
Nope.. I try to limit hosting activities to people like http://www.infovue.net Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com -Original Message- From: Erik Brown [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 3:04 PM To: NT System Admin Issues Subject: Web Hosting Has anyone had any dealings with or know anything about the hosting company Tansinc Network? Thanks, Erik http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Reporting Code red
Try [EMAIL PROTECTED] -Original Message- From: Luke Brumbaugh [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 11:39 AM To: NT System Admin Issues Cc: Rick Smetzer Subject: Reporting Code red Is there a website, or agency or whatever that you can report Code Red web hits to. We are getting hit from Concentric, and msn and I do have the ipaddress' It's not a problem here, just irritating. Luke L. Brumbaugh System Administrator,MCSE Ultryx Corporation mailto:[EMAIL PROTECTED] Enterprise Channel Management Software for Manufacturers Visit us at http://www.ultryx.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: End of My Rope with WINS
TO be more precise - it will work with clients alternately registering, but every additional registration point makes it exponentially uglier. -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com -Original Message- From: Jay Kulsh [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 3:47 PM To: NT System Admin Issues Subject: Re: End of My Rope with WINS You wrote - All clients and other domain controllers are set up using their local wins server as primary and the remote wins server as secondary. Is this OK? According to Roger S and many others, it is not Ok. You should have same WINS server as primary for all subnets. Secondary server can be local servers. Primary server would then only push, reducing the chance of any corruption. (This way WINS configuration approximates DNS configuration.) Jay ___ Jay Kulsh - Original Message - From: Scott Erwin [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] Sent: Friday, August 17, 2001 11:39 AM Subject: End of My Rope with WINS NT4 Network. I have two buildings, each on their own network connected by fiber. Pinging with ip address and netbios name between networks is no problem and searching for computers using netbios names works too. There is a WINS server on each network configured as push and pull partners of each other. Each WINS server is its own Primary and Secondary. Browsing with Network Neighborhood is intermittent. Sometimes Network A sees Network B, sometimes it can't (and vice versa). I've never had simultaneous browsing. I have never gotten a WINS error in the event viewer. I do get successful push/pull entries. All clients and other domain controllers are set up using their local wins server as primary and the remote wins server as secondary. Is this OK? All the required entries seem to be there [1C], [1Eh], [OOh], etc... I don't know what else to check for, and am close to deleting both databases and starting over. Any advice? Scott http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Browser/WINS issues
Your running AD-2k, what os r your clients using? Why do you have WINS? WINS sucks. More info please jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:16 PM To: NT System Admin Issues Subject: Browser/WINS issues Hello everyone, i have a question that i have been fighting with here. i have 2 AD controllers on our network in the same vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for dhcp across the different subnets). i am having browser issues. is there any way to have just one of the nics in the multihomed machine use the browser service? i am trying to have the domain master browser on the multihomed machine on 1 of the nics (vlan 30). the backup browser i want on the 2nd controller (not multihomed - vlan 30). what is the best way to configure this? anyone been here before? thanks for any input in advance. everyone can see vlan 30 just to note. Bob Chyka http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Browser/WINS issues
Title: Message I don't wonder that you have browser problems! Do you have any way to do what is the router equivalent of setting the BOOTP/DHCP helper address with these switches? If you do you can bring the multi homed down to one NIC. I bet your browser problems would get better. +---+ Kevin Flanagan C/S Planning Engineer III I/T Implementation Department Branch Banking Trust Company 3261 Atlantic Avenue, Suite 116 MC: 172-85-01-00 Raleigh, NC 27604 Voice: 919-716-6209 -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:16 PMTo: NT System Admin IssuesSubject: Browser/WINS issues Hello everyone, i have a question that i have been fighting with here. i have 2 AD controllers on our network in the same vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for dhcp across the different subnets). i am having browser issues. is there any way to have just one of the nics in the multihomed machine use the browser service? i am trying to have the domain master browser on the multihomed machine on 1 of the nics (vlan 30). the backup browser i want on the 2nd controller (not multihomed - vlan 30). what is the best way to configure this? anyone been here before? thanks for any input in advance. everyone can see vlan 30 just to note. Bob Chykahttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Browser/WINS issues
NO doubt, I feel for ya! Try to unbind all except one of the TCP/IP subnet transport bindings from the wks service. I saw this in a q article somewhere, looking for it now! Restart your browser service. Definitely a complicated setup? jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:29 PM To: NT System Admin Issues Subject: Re: Browser/WINS issues clients are w2k pro, nt 4 workstation, and windows 98 unfortunately. i know wins sucks it is just there for the win 98 clients.. - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:15 PM Subject: RE: Browser/WINS issues Your running AD-2k, what os r your clients using? Why do you have WINS? WINS sucks. More info please jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:16 PM To: NT System Admin Issues Subject: Browser/WINS issues Hello everyone, i have a question that i have been fighting with here. i have 2 AD controllers on our network in the same vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for dhcp across the different subnets). i am having browser issues. is there any way to have just one of the nics in the multihomed machine use the browser service? i am trying to have the domain master browser on the multihomed machine on 1 of the nics (vlan 30). the backup browser i want on the 2nd controller (not multihomed - vlan 30). what is the best way to configure this? anyone been here before? thanks for any input in advance. everyone can see vlan 30 just to note. Bob Chyka http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Browser/WINS issues
Yup, thats workstation service. Just a question, but why did you choose that setup? Good luck! jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:36 PM To: NT System Admin Issues Subject: Re: Browser/WINS issues thanks, i will look for the q article also. is that unbind from the workstation service? yes very complicated setup...thanks for any help ill try to work through it.. - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:22 PM Subject: RE: Browser/WINS issues NO doubt, I feel for ya! Try to unbind all except one of the TCP/IP subnet transport bindings from the wks service. I saw this in a q article somewhere, looking for it now! Restart your browser service. Definitely a complicated setup? jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:29 PM To: NT System Admin Issues Subject: Re: Browser/WINS issues clients are w2k pro, nt 4 workstation, and windows 98 unfortunately. i know wins sucks it is just there for the win 98 clients.. - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:15 PM Subject: RE: Browser/WINS issues Your running AD-2k, what os r your clients using? Why do you have WINS? WINS sucks. More info please jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:16 PM To: NT System Admin Issues Subject: Browser/WINS issues Hello everyone, i have a question that i have been fighting with here. i have 2 AD controllers on our network in the same vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for dhcp across the different subnets). i am having browser issues. is there any way to have just one of the nics in the multihomed machine use the browser service? i am trying to have the domain master browser on the multihomed machine on 1 of the nics (vlan 30). the backup browser i want on the 2nd controller (not multihomed - vlan 30). what is the best way to configure this? anyone been here before? thanks for any input in advance. everyone can see vlan 30 just to note. Bob Chyka http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Browser/WINS issues
it started out as a very basic setup with one nic, then we got all new infrastructure equipment and it was a quick fix to get dhcp up and running in our newly defined vlans. where can i unbind the cards from the workstation service? thanks! - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:33 PM Subject: RE: Browser/WINS issues Yup, thats workstation service. Just a question, but why did you choose that setup? Good luck! jlc -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:36 PMTo: NT System Admin IssuesSubject: Re: Browser/WINS issues thanks, i will look for the q article also. is that unbind from the workstation service? yes very complicated setup...thanks for any help ill try to work through it.. - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:22 PM Subject: RE: Browser/WINS issues NO doubt, I feel for ya! Try to unbind all except one of the TCP/IP subnet transport bindings from the wks service. I saw this in a q article somewhere, looking for it now! Restart your browser service. Definitely a complicated setup? jlc -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:29 PMTo: NT System Admin IssuesSubject: Re: Browser/WINS issues clients are w2k pro, nt 4 workstation, and windows 98 unfortunately. i know wins sucks it is just there for the win 98 clients.. - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:15 PM Subject: RE: Browser/WINS issues Your running AD-2k, what os r your clients using? Why do you have WINS? WINS sucks. More info please jlc -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:16 PMTo: NT System Admin IssuesSubject: Browser/WINS issues Hello everyone, i have a question that i have been fighting with here. i have 2 AD controllers on our network in the same vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for dhcp across the different subnets). i am having browser issues. is there any way to have just one of the nics in the multihomed machine use the browser service? i am trying to have the domain master browser on the multihomed machine on 1 of the nics (vlan 30). the backup browser i want on the 2nd controller (not multihomed - vlan 30). what is the best way to configure this? anyone been here before? thanks for any input in advance. everyone can see vlan 30 just to note. Bob Chyka http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT - Macromedia's pricing strategy?
So you have to also buy the Site license and then you still have to pay $500 more for purchasing 3 licenses at one time? Seems like a deal. :) Does the Site License maybe come bundled in the 3-pack? Is that the difference? JayW [EMAIL PROTECTED] 08/20/01 12:24PM The single user license (which is an ADDITION to the Site license) would be useless to you without the original site purchase. William -Original Message- From: Jay Woody [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 10:22 AM To: NT System Admin Issues Subject: OT - Macromedia's pricing strategy? I just got a bulletin that Macromedia released some new something. However, the interesting part to me was their pricing strategy. :) ~~ Pricing ~~ Pricing starts at just $1999 for a 3-user version. Add a single user for $499. For more details on pricing, visit: http://www.macromedia.com/go/sitespring_esd_pricing So, I can pay $1,500 fro 3 individual licenses or you will bundle them for me and I will save . . . oh, no, I will actually lose $500. Sounds like a great deal! I'm sure Marc at eeye will be interested to see if this works. :) JayW http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: End of My Rope with WINS - Solved
It was a browse master issue. I noticed some unneeded entries in the Computer Browser service properties. Took them out. Things look good now. Someday I'll switch everyone to use the same primary WINS server. Scott -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:53 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Well, you said you had no problem with netbios name resolution. So I would have to say that your problem isn't with your WINS implementation but perhaps with your Browsers. To browse the network neighborhood the machine has to be able to determine and query a machine that contains the browse list, be that the Domain Master Browser or the backup browser for the segment. This article might be of some assistance. You should be able to look through the Wins Database to determine which computers are currently acting as your browsers. http://support.microsoft.com Hope that helps. -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:47 AM To: NT System Admin Issues Subject: RE: End of My Rope with WINS DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to 0x8. -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:43 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Are your clients set up using DHCP or manually assigned configuration? -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:39 AM To: NT System Admin Issues Subject: End of My Rope with WINS NT4 Network. I have two buildings, each on their own network connected by fiber. Pinging with ip address and netbios name between networks is no problem and searching for computers using netbios names works too. There is a WINS server on each network configured as push and pull partners of each other. Each WINS server is its own Primary and Secondary. Browsing with Network Neighborhood is intermittent. Sometimes Network A sees Network B, sometimes it can't (and vice versa). I've never had simultaneous browsing. I have never gotten a WINS error in the event viewer. I do get successful push/pull entries. All clients and other domain controllers are set up using their local wins server as primary and the remote wins server as secondary. Is this OK? All the required entries seem to be there [1C], [1Eh], [OOh], etc... I don't know what else to check for, and am close to deleting both databases and starting over. Any advice? Scott http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: End of My Rope with WINS - Solved
what did you use to look at the computer browser properties? - Original Message - From: Scott Erwin [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] Sent: Monday, August 20, 2001 3:46 PM Subject: RE: End of My Rope with WINS - Solved It was a browse master issue. I noticed some unneeded entries in the Computer Browser service properties. Took them out. Things look good now. Someday I'll switch everyone to use the same primary WINS server. Scott -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:53 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Well, you said you had no problem with netbios name resolution. So I would have to say that your problem isn't with your WINS implementation but perhaps with your Browsers. To browse the network neighborhood the machine has to be able to determine and query a machine that contains the browse list, be that the Domain Master Browser or the backup browser for the segment. This article might be of some assistance. You should be able to look through the Wins Database to determine which computers are currently acting as your browsers. http://support.microsoft.com Hope that helps. -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:47 AM To: NT System Admin Issues Subject: RE: End of My Rope with WINS DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to 0x8. -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:43 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Are your clients set up using DHCP or manually assigned configuration? -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:39 AM To: NT System Admin Issues Subject: End of My Rope with WINS NT4 Network. I have two buildings, each on their own network connected by fiber. Pinging with ip address and netbios name between networks is no problem and searching for computers using netbios names works too. There is a WINS server on each network configured as push and pull partners of each other. Each WINS server is its own Primary and Secondary. Browsing with Network Neighborhood is intermittent. Sometimes Network A sees Network B, sometimes it can't (and vice versa). I've never had simultaneous browsing. I have never gotten a WINS error in the event viewer. I do get successful push/pull entries. All clients and other domain controllers are set up using their local wins server as primary and the remote wins server as secondary. Is this OK? All the required entries seem to be there [1C], [1Eh], [OOh], etc... I don't know what else to check for, and am close to deleting both databases and starting over. Any advice? Scott http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT - Macromedia's pricing strategy?
Sitespring is a team collaboration product. It requires $1999 for a 3 user license, then $499 for *additional* single users. What am I missing? -Original Message- From: Jay Woody [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 11:45 AM To: NT System Admin Issues Subject: RE: OT - Macromedia's pricing strategy? So you have to also buy the Site license and then you still have to pay $500 more for purchasing 3 licenses at one time? Seems like a deal. :) Does the Site License maybe come bundled in the 3-pack? Is that the difference? JayW [EMAIL PROTECTED] 08/20/01 12:24PM The single user license (which is an ADDITION to the Site license) would be useless to you without the original site purchase. William -Original Message- From: Jay Woody [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 10:22 AM To: NT System Admin Issues Subject: OT - Macromedia's pricing strategy? I just got a bulletin that Macromedia released some new something. However, the interesting part to me was their pricing strategy. :) ~~ Pricing ~~ Pricing starts at just $1999 for a 3-user version. Add a single user for $499. For more details on pricing, visit: http://www.macromedia.com/go/sitespring_esd_pricing So, I can pay $1,500 fro 3 individual licenses or you will bundle them for me and I will save . . . oh, no, I will actually lose $500. Sounds like a great deal! I'm sure Marc at eeye will be interested to see if this works. :) JayW http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Browser/WINS issues
Heh, Dont quote me, but fire up regedt32, and got to HKLM/System/CurrentControlSet/Services/LanmanWorkstation/Linkage/Bind Look in there, does it seem right?? Backup time, is it current? jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:48 PM To: NT System Admin Issues Subject: Re: Browser/WINS issues it started out as a very basic setup with one nic, then we got all new infrastructure equipment and it was a quick fix to get dhcp up and running in our newly defined vlans. where can i unbind the cards from the workstation service? thanks! - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:33 PM Subject: RE: Browser/WINS issues Yup, thats workstation service. Just a question, but why did you choose that setup? Good luck! jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:36 PM To: NT System Admin Issues Subject: Re: Browser/WINS issues thanks, i will look for the q article also. is that unbind from the workstation service? yes very complicated setup...thanks for any help ill try to work through it.. - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:22 PM Subject: RE: Browser/WINS issues NO doubt, I feel for ya! Try to unbind all except one of the TCP/IP subnet transport bindings from the wks service. I saw this in a q article somewhere, looking for it now! Restart your browser service. Definitely a complicated setup? jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:29 PM To: NT System Admin Issues Subject: Re: Browser/WINS issues clients are w2k pro, nt 4 workstation, and windows 98 unfortunately. i know wins sucks it is just there for the win 98 clients.. - Original Message - From: Joe Casale To: NT System Admin Issues Sent: Monday, August 20, 2001 3:15 PM Subject: RE: Browser/WINS issues Your running AD-2k, what os r your clients using? Why do you have WINS? WINS sucks. More info please jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:16 PM To: NT System Admin Issues Subject: Browser/WINS issues Hello everyone, i have a question that i have been fighting with here. i have 2 AD controllers on our network in the same vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for dhcp across the different subnets). i am having browser issues. is there any way to have just one of the nics in the multihomed machine use the browser service? i am trying to have the domain master browser on the multihomed machine on 1 of the nics (vlan 30). the backup browser i want on the 2nd controller (not multihomed - vlan 30). what is the best way to configure this? anyone been here before? thanks for any input in advance. everyone can see vlan 30 just to note. Bob Chyka http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: End of My Rope with WINS - Solved
RegEdit I think? Don't know where else config is stored for that service. jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:56 PM To: NT System Admin Issues Subject: Re: End of My Rope with WINS - Solved what did you use to look at the computer browser properties? - Original Message - From: Scott Erwin [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] Sent: Monday, August 20, 2001 3:46 PM Subject: RE: End of My Rope with WINS - Solved It was a browse master issue. I noticed some unneeded entries in the Computer Browser service properties. Took them out. Things look good now. Someday I'll switch everyone to use the same primary WINS server. Scott -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:53 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Well, you said you had no problem with netbios name resolution. So I would have to say that your problem isn't with your WINS implementation but perhaps with your Browsers. To browse the network neighborhood the machine has to be able to determine and query a machine that contains the browse list, be that the Domain Master Browser or the backup browser for the segment. This article might be of some assistance. You should be able to look through the Wins Database to determine which computers are currently acting as your browsers. http://support.microsoft.com Hope that helps. -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:47 AM To: NT System Admin Issues Subject: RE: End of My Rope with WINS DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to 0x8. -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:43 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Are your clients set up using DHCP or manually assigned configuration? -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:39 AM To: NT System Admin Issues Subject: End of My Rope with WINS NT4 Network. I have two buildings, each on their own network connected by fiber. Pinging with ip address and netbios name between networks is no problem and searching for computers using netbios names works too. There is a WINS server on each network configured as push and pull partners of each other. Each WINS server is its own Primary and Secondary. Browsing with Network Neighborhood is intermittent. Sometimes Network A sees Network B, sometimes it can't (and vice versa). I've never had simultaneous browsing. I have never gotten a WINS error in the event viewer. I do get successful push/pull entries. All clients and other domain controllers are set up using their local wins server as primary and the remote wins server as secondary. Is this OK? All the required entries seem to be there [1C], [1Eh], [OOh], etc... I don't know what else to check for, and am close to deleting both databases and starting over. Any advice? Scott http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: End of My Rope with WINS - Solved
Control Panel / Network Icon / Services Tab / Select Computer Browser - Properties. I didn't know about this until I saw a Q article Q137003. Scott -Original Message- From: Joe Casale [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:51 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS - Solved RegEdit I think? Don't know where else config is stored for that service. jlc -Original Message- From: Bob Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:56 PM To: NT System Admin Issues Subject: Re: End of My Rope with WINS - Solved what did you use to look at the computer browser properties? - Original Message - From: Scott Erwin [EMAIL PROTECTED] To: NT System Admin Issues [EMAIL PROTECTED] Sent: Monday, August 20, 2001 3:46 PM Subject: RE: End of My Rope with WINS - Solved It was a browse master issue. I noticed some unneeded entries in the Computer Browser service properties. Took them out. Things look good now. Someday I'll switch everyone to use the same primary WINS server. Scott -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:53 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Well, you said you had no problem with netbios name resolution. So I would have to say that your problem isn't with your WINS implementation but perhaps with your Browsers. To browse the network neighborhood the machine has to be able to determine and query a machine that contains the browse list, be that the Domain Master Browser or the backup browser for the segment. This article might be of some assistance. You should be able to look through the Wins Database to determine which computers are currently acting as your browsers. http://support.microsoft.com Hope that helps. -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:47 AM To: NT System Admin Issues Subject: RE: End of My Rope with WINS DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to 0x8. -Original Message- From: Brandon Bristow [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 2:43 PM To: NT System Admin Issues Subject: RE: End of My Rope with WINS Are your clients set up using DHCP or manually assigned configuration? -Original Message- From: Scott Erwin [mailto:[EMAIL PROTECTED]] Sent: Friday, August 17, 2001 11:39 AM To: NT System Admin Issues Subject: End of My Rope with WINS NT4 Network. I have two buildings, each on their own network connected by fiber. Pinging with ip address and netbios name between networks is no problem and searching for computers using netbios names works too. There is a WINS server on each network configured as push and pull partners of each other. Each WINS server is its own Primary and Secondary. Browsing with Network Neighborhood is intermittent. Sometimes Network A sees Network B, sometimes it can't (and vice versa). I've never had simultaneous browsing. I have never gotten a WINS error in the event viewer. I do get successful push/pull entries. All clients and other domain controllers are set up using their local wins server as primary and the remote wins server as secondary. Is this OK? All the required entries seem to be there [1C], [1Eh], [OOh], etc... I don't know what else to check for, and am close to deleting both databases and starting over. Any advice? Scott http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
IIS stopping without reason
Title: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason Hold on dude, your OS is not patched after sp6a! And Exchange is 5.5 SP1. WTF! Is this box on the net? No wonder you got probs! jlc -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:09 PM To: NT System Admin Issues Subject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Welcome to Code Red. -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:09 PM To: NT System Admin Issues Subject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Strange time counters when copying files
I am trying to copy priv and pub databases from one W2k server SP2, Exchange 5.5, to another folder on a different W2k server SP2 across the network, just as a back up to replay into another test server. The pub database is 5.1 G and seems to copy OK until in gets down to the last few seconds of the timeline and then suddenly it says there is approx 756437 minutes left, this then ramdomly changes up and down to say eg. 695000, then 796567 and just carries on doing this. Anybody got any ideas ? - I don't think it is to do with exchange so I put it on this group. Thanks. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Browser/WINS issues
MS does not recommend multihoing the master browser per various technet articles. I found an article that gave a workaround for NT4. Later I found an article that stated the PDC and master browser cannot be multihomed. Go figure. Anyway, I found a number of Q articles that might help you so here is a list: - q221210, q133241 (more NT4 centric) q181774, q191611 (include W2K in their discussions) Article q191611 states the following: Domain Master Browser Issues - PDC -- NOTE: The domain master browser in Windows 2000 is the PDC FSMO owner. The PDC cannot be multihomed for there to be a single domain-wide list of servers because the browser maintains a separate list of servers for each network adapter and protocol combination. If the PDC is multihomed, there are two partial cumulative lists built for the domain, and no single computer in the network can access the full list of servers in the domain. Each master browser can retrieve the list of servers from only one of the PDC's network adapters. The list of servers that the PDC builds on each network adapter is not deterministic because it depends on which network adapter the PDC uses to contact the master browser. Master Browser Issues - After the master browser obtains a list of servers in the domain and the list of additional domain names from the PDC, it sends a MasterAnnouncement frame to the PDC. This signals the PDC to retrieve a list of servers and workgroup announcements from the master browser. Because all NetBIOS sessions between any two servers over TCP/IP can only reside on a single IP connection, there is no way for the PDC to maintain more than one IP address for the master browser's computer name. This means that any server that is a master browser cannot be multihomed because the PDC will contact only the master browser on one of its network adapters. If a multihomed server is a master browser on both network adapters, the PDC collects only the hosts discovered by the network adapter that it is connected to, and all other servers and domain names discovered on the other network adapter are lost to the rest of the domain. If a multihomed server is a master browser on one network adapter and a backup browser or a non-browser by election or the UnboundBindings setting on the other network adapter, there is no way to guarantee that the PDC will connect to the master browser's network adapter. If the master browser has two network adapters, the odds of connecting to the correct interface are fifty percent. If the wrong network adapter is selected, all servers and domain names collected by this master browser are unavailable to the rest of the domain. Therefore, for the PDC to centrally collect all server and domain names, all master browsers must not be multihomed. Backup And Potential Browser Issues --- Because browser roles are determined by election, no server that can be a master browser can be multihomed. When a client requests a browse list, it issues a GetBackupListRequest, and the response contains a list of computer names. The client then establishes a session to one of the computer names in the response frame. If the network adapter chosen is not running the browser service, the client does not receive a browse list. Therefore, no backup browsers can be multihomed. If the network adapter selected is a browser, the list received may contain servers collected by a master browser on another segment, thereby removing the deterministic nature of the browser infrastructure. Now the article then goes on to give some workarounds. I guess I would go with q191611 and what it states. From my personnal experience I never allowed multihomed servers to become master browsers or even potential browsers, I would either edit the registry to disallow that and/or stop the computer browser service on them. Thanks Bob Chyka bchyka@medaiTo: NT System Admin Issues lle.edu [EMAIL PROTECTED] cc: 08/20/2001 Subject: Re: Browser/WINS issues 02:48 PM Please respond to
Re: IIS stopping without reason
Wow, your BDC huh. What was the TCP address again? I will download the .sam and mail you your admin password as quickly as l0phtcrack can crack it. :) I'm sure everyone has already told you that this is likely Code Red. If this is on the outside, I would unplug it, quick and re-build it. JayW [EMAIL PROTECTED] 08/20/01 03:08PM Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason -Original Message-From: Joe Casale [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:07 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Hold on dude, your OS is not patched after sp6a![EP]To quote someone who shall remain nameless (at least he doesn't subscribe to the list, or so I hope) "Stability is the only issue we have to worry about, we can always fix security later if necessary." That I don't quite agree with that statement doesn't make much of a difference... http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason Regardless of codered, the list of bug fixes from your state till now is huge. If you called PSS and told them your HF/SP state, they would say upgrade, and call back Im guessing! As for your Mcafee, why dont you schedule Auto updates! Eliminates you maybe not knowing about a virus after its to late! Gotta love management like that, sometimes I think they do stuff like that just to make sure they got a thumb in the pie, even though they dont know S@$t anyway. Tellm if they want the systems running right, let you runem right. If they want it to remain like that, make no changes! I have never even seen an E55sp1 box for years! jlc -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:24 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message- From: Kevin Lundy [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:06 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason The no patch is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:09 PM To: NT System Admin Issues Subject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: Message No, it's a perfectly normal boot, no red flag at all. All other servers are at least similarly protected as this one, or as badly, if you want to argue that point... Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Erik Sojka [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:25 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Perhaps another internal box is infected. Is there anything from the IIS logs from the times when the box goes belly up? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: Message In this case, screw the higher ups. They have no clue, and they will have no clue if you patch it either. Just because someone is above you does not have to mean you put up with sheer idiocy.Patch it NOW. -Original Message-From: Erik Sojka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Perhaps another internal box is infected. Is there anything from the IIS logs from the times when the box goes belly up? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Guidelines for W2K Pro PageFile Size
I use an approximation of twice RAM, but usually stop once it hits about 750MB (no good reason, I just do). I always set it to be a static size, since you're inducing overhead when it expands at the same time the system is already under load. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com -Original Message- From: Jim Underwood [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 2001 3:57 PM To: NT System Admin Issues Subject: Guidelines for W2K Pro PageFile Size I'm looking for guidelines/recommendations for setting the pagefile size on a W2K Pro SP2 machine. My guideline for NT used to be to set both MIN and MAX = (2 * PhysicalRAM) + 16 I just bought 512MB SDRAM (only $80!!! for 2 Kingston 256M ECC sticks) , so this works out to be quite a good size pagefile: 1040 Interestingly enough, the W2K default setting is 768 - 1536. So, for W2K is it still best to set MIN and MAX to the same value? Is there a formula that's best to use? Or is it best to let W2K set it's own values? I know about setting the location of the pagefile: -- Only one PF per physical disk -- Create separate PFs on separate physical disks -- Best on non-RAID or RAID 1 -- Avoid putting on RAID 5 Best Regards, JMU Jim Underwood Apollo Information Systems, Inc. Houston, TX 77058 EMail: [EMAIL PROTECTED] http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: RE: IIS stopping without reason It's inside, the IP is 10.10.10.5 (I am sure you can find any routable IP you need without my help - grin). The proxy redirects the mail traffic to that box. Eric Peeters Network Administrator TexLoc Ltd -Original Message- From: Jay Woody [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:24 PM To: NT System Admin Issues Subject: Re: IIS stopping without reason Wow, your BDC huh. What was the TCP address again? I will download the .sam and mail you your admin password as quickly as l0phtcrack can crack it. :) I'm sure everyone has already told you that this is likely Code Red. If this is on the outside, I would unplug it, quick and re-build it. JayW [EMAIL PROTECTED] 08/20/01 03:08PM Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason Not related to your current problem, but you need to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of GroupShield. Jeff -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: Message Well, I have been hinting at my boss that patching *should* solve the problem, however I don't know that for a fact, I am just *hoping* it will and again *hoping* I will be able to patch it. Otherwise, it may end up as a case of "ooopp wrong files, sorry, server got accidentally patched..." Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:31 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason In this case, screw the higher ups. They have no clue, and they will have no clue if you patch it either. Just because someone is above you does not have to mean you put up with sheer idiocy.Patch it NOW. -Original Message-From: Erik Sojka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Perhaps another internal box is infected. Is there anything from the IIS logs from the times when the box goes belly up? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: RE: IIS stopping without reason We had the same problem it is due to redirect on your server. MS has published an article on this problem. I will see if I can find it. -Original Message- From: Jay Woody [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:24 PM To: NT System Admin Issues Subject: Re: IIS stopping without reason Wow, your BDC huh. What was the TCP address again? I will download the .sam and mail you your admin password as quickly as l0phtcrack can crack it. :) I'm sure everyone has already told you that this is likely Code Red. If this is on the outside, I would unplug it, quick and re-build it. JayW [EMAIL PROTECTED] 08/20/01 03:08PM Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason Forgot about that one! Good eye Jeff! Dude, Im feeling for you now jlc -Original Message- From: Bunting, Jeff [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:33 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason Not related to your current problem, but you need to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of GroupShield. Jeff -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message- From: Kevin Lundy [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:06 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason The no patch is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:09 PM To: NT System Admin Issues Subject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason You're absolutely right, I realized that the second I clicked Send. Exchange is patched to SP3 plus the hotfix(es) (if I remember correctly, only one) to SP3, the sole motive being able to install GroupShield, otherwise you can bet your bottom dollar it wouldn't be so "up to date." Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:33 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Not related to your current problem, but you need to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of GroupShield. Jeff -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: Message DO IT Don't pass go, don't collect 200, don't ask anyone's permission. I would say for the responses to your question that the answer is self evident. -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:37 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Well, I have been hinting at my boss that patching *should* solve the problem, however I don't know that for a fact, I am just *hoping* it will and again *hoping* I will be able to patch it. Otherwise, it may end up as a case of "ooopp wrong files, sorry, server got accidentally patched..." Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:31 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason In this case, screw the higher ups. They have no clue, and they will have no clue if you patch it either. Just because someone is above you does not have to mean you put up with sheer idiocy.Patch it NOW. -Original Message-From: Erik Sojka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Perhaps another internal box is infected. Is there anything from the IIS logs from the times when the box goes belly up? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: Message Read these two articles. http://www.theregister.co.uk/content/4/21019.html http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-044.asp The new patch from MS should solve your problem. -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:39 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason DO IT Don't pass go, don't collect 200, don't ask anyone's permission. I would say for the responses to your question that the answer is self evident. -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:37 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Well, I have been hinting at my boss that patching *should* solve the problem, however I don't know that for a fact, I am just *hoping* it will and again *hoping* I will be able to patch it. Otherwise, it may end up as a case of "ooopp wrong files, sorry, server got accidentally patched..." Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:31 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason In this case, screw the higher ups. They have no clue, and they will have no clue if you patch it either. Just because someone is above you does not have to mean you put up with sheer idiocy.Patch it NOW. -Original Message-From: Erik Sojka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Perhaps another internal box is infected. Is there anything from the IIS logs from the times when the box goes belly up? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no
RE: IIS stopping without reason
Title: Message Who is your network administrator over there? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:39 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason You're absolutely right, I realized that the second I clicked Send. Exchange is patched to SP3 plus the hotfix(es) (if I remember correctly, only one) to SP3, the sole motive being able to install GroupShield, otherwise you can bet your bottom dollar it wouldn't be so "up to date." Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:33 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Not related to your current problem, but you need to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of GroupShield. Jeff -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason Are you guys getting my emails. There is a new patch from MS on this issue. When you are being probed by the code red (evan if you are patched) and You have redirects your services will stop. -Original Message-From: Stephen Chiang [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:45 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason you know, I'm seeing the same thing on one of my IIS 5.0 box and I've already applied the latest cumulative patch on Windows 2000 Server SP2. Even after the services stop, when I run the Code Red scanner from Symantec and eEye, they both come out negative... -Original Message-From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 1:33 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Not related to your current problem, but you need to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of GroupShield. Jeff -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: Message Fmuuh? I'll ask again. It's possible that another internal machine is infected and is reinfecting the box in question. Check your IIS logs for any entries that were logged at or before the times the boxes rebooted. Or any log entries that might be CodeRed-related. -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:32 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason No, it's a perfectly normal boot, no red flag at all. All other servers are at least similarly protected as this one, or as badly, if you want to argue that point... Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Erik Sojka [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:25 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Perhaps another internal box is infected. Is there anything from the IIS logs from the times when the box goes belly up? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: RE: IIS stopping without reason Either -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:47 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Redirect from that box to... elsewhere or redirect from elsewhere to that box ? Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Decker, Jeff [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:36 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason We had the same problem it is due to redirect on your server. MS has published an article on this problem. I will see if I can find it. -Original Message- From: Jay Woody [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:24 PM To: NT System Admin Issues Subject: Re: IIS stopping without reason Wow, your BDC huh. What was the TCP address again? I will download the .sam and mail you your admin password as quickly as l0phtcrack can crack it. :) I'm sure everyone has already told you that this is likely Code Red. If this is on the outside, I would unplug it, quick and re-build it. JayW [EMAIL PROTECTED] 08/20/01 03:08PM Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Reporting Code red
www.dshield.org has utilities that you can use to send in your firewall reports from various servers and have it tracked on their site. They also notify the abuser(s) or ISP of certain offenders and their problems. They also run a mailing list that's not as active as this one but still active. I hope this helps. Jason Morris CCDA CCNP Network Administrator MJMC, Inc. 708-225-2350 [EMAIL PROTECTED] -Original Message- From: Luke Brumbaugh [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:39 PM To: NT System Admin Issues Cc: Rick Smetzer Subject: Reporting Code red Is there a website, or agency or whatever that you can report Code Red web hits to. We are getting hit from Concentric, and msn and I do have the ipaddress' It's not a problem here, just irritating. Luke L. Brumbaugh System Administrator,MCSE Ultryx Corporation mailto:[EMAIL PROTECTED] Enterprise Channel Management Software for Manufacturers Visit us at http://www.ultryx.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm Confidential: This e-mail and any files transmitted with it are the property of Lanco International and/or its affiliates, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender at the above e-mail address and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic As far as blocking port 80 to outside, I am pretty sure that Code Red can be adapted to hit any port, it just does 80 for obvious reasons. Also, I would wonder about internal boxes that then in turn got to this box. the Index Server service is disabled. Doesn't matter. All that has to be there is the IDA.dll or whatever file it was that eeye found the original vuln in. If the file is there, you can be hit. It is a buffer overflow, so it doesn't depend on a service, just the mere existence of a file. Not patched (not my choice, people higher up make decisions I can't argue with) Been there done that. I quickly left and went to a place that cared. I ran three all-files virus checks, on top of the on-access scan, since having this problem I am puzzled by this statement. I don't believe that there is anything to find for the worm except for maybe some registry entries. The first changed your webpage and I could see something catching that, but not an anti-virus. The third put a root.exe and maybe the anti-virus companies are looking for that now. However, I would rely on anti-virus to protect me from a Worm. You shut the door. I've rebooted twice (which should have taken care of Code Red if it had been an issue) No, only if you run the patch and then reboot. I've also ran the Code Red scanner, all to no avail. Don't know which one here, but most of then simply check if you are vulnerable, not if you are already hit. You are asking for help here and the best advice that I think any of us could give you is to first get up to date. Even if we are wrong and it isn't Code Red, there is still a real good chance that the SPs and HFs could help here. If I had to guess if you called PSS, that is where they would take you first also. BTW, if you are running this on Compaq hardware, tell me. There is a bluescreen gotcha on some of the platforms. JayW [EMAIL PROTECTED] 08/20/01 03:24PM It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message- From: Kevin Lundy [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:06 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason The no patch is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:09 PM To: NT System Admin Issues Subject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
When did you apply the patches? Could you have been hit before you got the patches on? We have had a couple of e-mail's on this also. Here is the last thread I remember, maybe it will help: [EMAIL PROTECTED] 08/08/01 10:00AM Ok, further clarification. Some peopleare seeing these crashes as the result of redirects done via IIS directly (via MMC settings), but changing to an html page with a redirect in it seems to work fine. Roger -- Roger D. Seielstad - MCSE MCT Senior Network Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com -Original Message- From: Pam [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 08, 2001 10:53 AM To: IIS50 Discussions Subject: RE: POSSIBLE FIX CODE RED PATCH !! So what I'm understanding is: With Patch 001-033, and redirects set up in the MMC, systems can crash unexpectedly. Turn off the redirects at the MMC level, switch to using a page in that directory with the redirect tag in it, problem goes away. I've been seeing some quirky behavior of INETINFO on some servers (try to stop the service, INETINFO blows up), but I haven't had a server crash yet. Pam -Original Message- From: Okie Tex [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 08, 2001 10:52 AM To: IIS50 Discussions Subject: Re: POSSIBLE FIX CODE RED PATCH !! We did this last night after John posted it on another mailing list. It worked for us as we had some redirects on some virtuals. Before doing this, we DID have the CodeRed Worm Patch from MS installed - however, our Inetinfo/DrWatson were bombing on us and we'd go down in between 10 minutes and a couple of hours. So - this, so far!! (fingers-crossed) - has worked for us and it's 10+ hours now since we did it - no downtime. System with problem: NT4,SP6a,Patch -ot From: John Cesta - Lists [EMAIL PROTECTED] Reply-To: IIS50 Discussions [EMAIL PROTECTED] To: IIS50 Discussions [EMAIL PROTECTED] Subject: POSSIBLE FIX CODE RED PATCH !! Date: Tue, 7 Aug 2001 21:40:56 -0400 I found this on a ColdFusion list I subscribe to. It may be a solution for the inetinfo crashes: For over two weeks, a couple of shared web servers have been going nuts. Dr. Watson locks Inetinfo, W3SVC stops, cycling all services usually did the trick. This trend escalated over the weekend with all of the probing going round. I gave in last night and called MSFT for help. He looked at my Dr. Watson and quickly knew the problem, HTTPRedirects in IIS after applying the CodeRed patch. I used MDUTIL.exe to dump IIS to a text file and searched for HTTPRedirect. Found a total of three across the two of them. Opened IIS, reset IIS to point to a directory, put a Default.asp in that directory with a single line % RESPONSE.REDIRECT HTTP://[IP]; % . Cycled IIS and the problem was solved. MSFT did not charge as this is a bug in the IIS / CodeRed patch. John Cesta JayW [EMAIL PROTECTED] 08/20/01 03:45PM IIS stopping without reasonyou know, I'm seeing the same thing on one of my IIS 5.0 box and I've already applied the latest cumulative patch on Windows 2000 Server SP2. Even after the services stop, when I run the Code Red scanner from Symantec and eEye, they both come out negative... http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason I've checked IIS before putting my foot in my mouth and we don't use redirect however I will apply the patch last night, along with any other patch I can lay my hands on, just to see if it does the trick. I'm still debating whether to do them all in sequence and give qchain a try or do a reboot after each to see which one solves the issue. I guess it'll depend on how hard it is to keep an eye open. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Decker, Jeff [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:47 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Are you guys getting my emails. There is a new patch from MS on this issue. When you are being probed by the code red (evan if you are patched) and You have redirects your services will stop. -Original Message-From: Stephen Chiang [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:45 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason you know, I'm seeing the same thing on one of my IIS 5.0 box and I've already applied the latest cumulative patch on Windows 2000 Server SP2. Even after the services stop, when I run the Code Red scanner from Symantec and eEye, they both come out negative... -Original Message-From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 1:33 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason Not related to your current problem, but you need to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of GroupShield. Jeff -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message-From: Kevin Lundy [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason The "no patch" is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 PMTo: NT System Admin IssuesSubject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd
OWA/SSL/ACE/WLBS
Has anyone successfully set up Outlook Web Access in a W2K Windows Load Balancing environment and used SSL for encryption and ACE SecurID for additional authentication? We're having trouble with the ACE agent talking over the correct IP address. Laura Bibel Allegheny Energy: Information Services Voice (724) 830-5966 Fax (724) 853-3600 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: Message Toss an SP4 upgrade in while you are at it! -Original Message-From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:41 PMTo: NT System Admin IssuesSubject: RE: IIS stopping without reason I ran three all-files virus checks, on top of the on-access scan, since having this problem I am puzzled by this statement. I don't believe that there is anything to "find" for the worm except for maybe some registry entries. The first changed your webpage and I could see something catching that, but not an anti-virus. The third put a root.exe and maybe the anti-virus companies are looking for that now. However, I would rely on anti-virus to protect me from a Worm. You shut the door. Well, I ran the virus checks on the assumption that "a" virus, not necessarily Code Red, may be causing this problem and I just wanted to cover my bases. I've rebooted twice (which should have taken care of Code Red if it had been an issue) No, only if you run the patch and then reboot. I was under the impression that Code Red is memory resident, henceforth gone after a reboot (I know if I can be infected once, I can be infected twice), or is the latest variant saved to disk ? You are asking for help here and the best advice that I think any of us could give you is to first get up to date. Even if we are wrong and it isn't Code Red, there is still a real good chance that the SPs and HFs could help here. If I had to guess if you called PSS, that is where they would take you first also. Well, I have a patch party planned for tonight between 3 and 5 am, complete with freshly baked croissants and Starbucks hot chocolate for breakfast (come one and come all). What did the trick with the no-patch higher up is the fact that Exchange has markedly slowed down the past few hours (it takes a full minute for my Outlook to open whereas it used to take only a few seconds) and complaints are starting to pile up. The *hope* is fixing IIS will somehow fix Exchange... Stand by for a report tomorrow morning. Thanks for everyone's help so far. Hopefully I won't need it anymore tomorrow... :-) Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OWA/SSL/ACE/WLBS
Have you tried to work with RSA's tech support ? https://knowledge.rsasecurity.com/formslogin.asp What form of SSL ? -Original Message- From: Bibel, Laura Y. [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 18:40 To: NT System Admin Issues Subject: OWA/SSL/ACE/WLBS Has anyone successfully set up Outlook Web Access in a W2K Windows Load Balancing environment and used SSL for encryption and ACE SecurID for additional authentication? We're having trouble with the ACE agent talking over the correct IP address. Laura Bibel Allegheny Energy: Information Services Voice (724) 830-5966 Fax (724) 853-3600 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] http://www.sunbelt-software.com/ntsysadmin_list_charter.htm _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Security Audit
I'm hiring someone to do a security audit of our site, what are some of the things that I need to ask a security company to do? Any tips? THanks. Stephen http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Security Audit
Ask them to find out how much Sick leave your boss and you have. All depends on what your company does and what kind of security audit you are getting? Is this just computer hacking? Or we talking the hole nine yards, we are gonna date the bosses secretary and find out what she knows maybe get a job at your company and see what we can find there?? Kevinm WLKMMAS*TM, QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG ~~~ More letters after my name makes me Smarter. ~~~ please respond back to rent this ad space for your needs -Original Message- From: Stephen Chiang [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:52 PM To: NT System Admin Issues Subject: Security Audit I'm hiring someone to do a security audit of our site, what are some of the things that I need to ask a security company to do? Any tips? THanks. Stephen http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Security Audit
good point... offsite hacking only. -Original Message- From: Kevin Miller [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 6:54 PM To: NT System Admin Issues Subject: RE: Security Audit Ask them to find out how much Sick leave your boss and you have. All depends on what your company does and what kind of security audit you are getting? Is this just computer hacking? Or we talking the hole nine yards, we are gonna date the bosses secretary and find out what she knows maybe get a job at your company and see what we can find there?? Kevinm WLKMMAS*TM, QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG ~~~ More letters after my name makes me Smarter. ~~~ please respond back to rent this ad space for your needs -Original Message- From: Stephen Chiang [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:52 PM To: NT System Admin Issues Subject: Security Audit I'm hiring someone to do a security audit of our site, what are some of the things that I need to ask a security company to do? Any tips? THanks. Stephen http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IIS stopping without reason
Title: IIS stopping without reason Stephen, I had the same problem on my W2K box. I tried several re-installs, and I figured out SP2 was the culprit. I would not even put anything on the box, just sp2 right after install, then IIS 5 would quit. I would take a few hours though. I looked at my logs, and the IIS service would be restarted every minute for 150 minutes or so, then it just wouldnt start any more. I just did a re-install, and applied SP1 with all IIS hotfixes. I am guessing it has something to do with my computer hardware configuration. No other explanation. -Original Message- From: Stephen Chiang [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 2:45 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason you know, I'm seeing the same thing on one of my IIS 5.0 box and I've already applied the latest cumulative patch on Windows 2000 Server SP2. Even after the services stop, when I run the Code Red scanner from Symantec and eEye, they both come out negative... -Original Message- From: Bunting, Jeff [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:33 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason Not related to your current problem, but you need to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of GroupShield. Jeff -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason It can't be Code Red... Until that machine actually goes live, port 80 is blocked to outside traffic (and I am toying with the idea of not using port 80 when it goes live anyways), besides the Index Server service is disabled. Not patched (not my choice, people higher up make decisions I can't argue with) doesn't mean totally abandonned. I update the McAfee virus scan definition list whenever a new comes out, I have GroupShield running on Exchange (updated just as lovingly), I ran three all-files virus checks, on top of the on-access scan, since having this problem, I've rebooted twice (which should have taken care of Code Red if it had been an issue) and I've also ran the Code Red scanner, all to no avail. Eric Peeters Network Administrator TexLoc Ltd -Original Message- From: Kevin Lundy [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:06 PM To: NT System Admin Issues Subject: RE: IIS stopping without reason The no patch is the clue. My betting money is on Code Red - you have heard the news the past month? -Original Message- From: Eric Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:09 PM To: NT System Admin Issues Subject: IIS stopping without reason Hello, My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem... All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop. Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC. I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ? Eric Peeters Network Administrator TexLoc Ltd http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
DHCP...
Sorry for asking for what must be a very rookie question, but to install DHCP on a Win2K domain, does Active Directory 'have' to be used. Thanks, -johnp http://www.sunbelt-software.com/ntsysadmin_list_charter.htm