Re(2): Printing Issue

2001-08-20 Thread Nic Wright

I had a not too dissimillar problem with printing in a thin client environment.
I found a Tecnet artical (Q252388) which described how to set up a default
printer for new users and modified its application. In order to set up
different printers for different groups of people I followed the artical (much
of which can be automated by creating a user and setting up just the printers
needed) to get the Key values then exported them into a .reg file. Then a
simple batch file in an appropriate place (the startup folder for users or
attached to the start of the application shortcut (for application specific
printers!!)) does a simple 'regedit -i -s regfile.reg' to put everything in
place.

Nic Wright
NT Systems Analyst
Stoke on Rent City Council
[EMAIL PROTECTED]



Ray Zorz  (17/08/2001  16:57):
I dunno. I didn't waste too much time on it at the time. I used the Con2prt
utility, put it in a batch file and put it if I remember correctly in the
startup folder on the several pc's in question.

-Original Message-
From: Steve Roberts [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 9:33 AM
To: NT System Admin Issues
Subject: RE: Printing Issue


I am also having this issue with mandatory profiles. When I log in with an
mandatory account to a machine ( which has two three lexmark tcp/ip printers
installed on it ) how does it determine which printer is the one going to be
set as the default.

I think the list of printers installed on an NT machine is stored in :

HKLM\System\CurrentControlSet\Control\Print\Printers and the user setting is
stored in :

HKCU\Software\Microsoft\Windows NT\Windows\Device  ( another list of printer
stored in HKCU\Sw\MS\WinNT\PrinterPorts

How does the machine emunerate HKLM and decide which one is set as default?
Can we apply a weighting somehow to force it??

-Original Message-
From: Bob Chyka [mailto:[EMAIL PROTECTED]]
Sent: 17 August 2001 15:18
To: NT System Admin Issues
Subject: Printing Issue



If this email has any attachments then send it onto the IT Help Desk for
virus checking


Hello,

i was wondering if anyone knows a way to have machines print to a specific
printer no matter who logs on.  for example we have a computer lab and each
student has their own account.  they have a roaming profile so they can log
into any comuter in the school and retain settings etc.  server is w2k sp2
and workstations are w2k pro and nt 4.0.  is there a way so when they log
into one of the lab computers it only captures the printers in the lab, when
they go to the library they only capture the library printers, etc?  could
it possibly be in group policy for machines?  any help is greatly
appreciated..

Bob Chyka
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



This email and any files transmitted with it are confidential and are
intended solely for the use of the individual or entity to whom they are
addressed. If you are not the intended recipient or the person responsible
for delivering the email to the intended recipient, please immediately
notify the Muir Group IT Help Desk on +44 (0) 1244 606139



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Exchange ?

2001-08-20 Thread Les Bessant



I 
created a detailed document on this, including numerous screenshots, in an 
effort to make the process completely idiot-proof. They still think it's 
something I should be doing for them. Mutter.


Les Bessant mailto:[EMAIL PROTECTED]IT Manager, 
Sanderson Townend  GilbertActing in a personal capacityhttp://www.tiggercam.co.uk 
- New, improved and with more bounce! 

  -Original Message-From: Ray Zorz 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 
  6:13 PMTo: NT System Admin IssuesSubject: RE: Exchange 
  ?
  Make 
  the users do it. Just give them some instructions, and encourage those 
  that get it to help those that don't. 
  
-Original Message-From: Bob Chyka 
[mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 10:16 
AMTo: NT System Admin IssuesSubject: Exchange 
?
Hello everyone,

was wondering if there is an easy way in 
exchange 5.5 to set permissions to see other people's calendar, etc. without 
going to each machine and doing it through outlook. is there any place 
at the server where this can be done? a company i work for on the side 
wants everybody to be able to see each other's claendars and i dont feel 
like setting permissions at every users calendar through 
outlook..

TIA,
Bob 
C.http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm_This 
  message has been checked for all known viruses by Star Internetdelivered 
  through the MessageLabs Virus Scanning Service. For furtherinformation 
  visit http://www.star.net.uk/stats.asp or alternatively callStar Internet 
  for details on the Virus Scanning Service.
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





The information in this communication and any attachments is confidential and may be legally privileged. It is intended solely for the addressee. If you are not the intended recipient any use, review, dissemination, distribution or copying of this information is strictly prohibited. If you have received this communication in error please notify us immediately on 0191 261 2681 and delete the original message and any copies of it. 


Any opinions, conclusions or other information in this message that do not relate to the official business of Sanderson Townend & Gilbert are neither given nor endorsed by the firm. 



_
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or alternatively call
Star Internet for details on the Virus Scanning Service.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





Re: Windows 2000 Pro and Outlook 2K Issue

2001-08-20 Thread Jeffegg

Shane -

OutlookDefPath allows you to change Outlook's default save directory.

http://www.simpler-web.com/products/Products.htm


Works great in OL 2000  XP.

--
Jeff Eggleston
MCP
[EMAIL PROTECTED]
Scales, Shane G., SPC [EMAIL PROTECTED] wrote in message
news:170198@ntsysadmin...
|
| ALL:
| We are redirecting the My Documents shortcut on our user's desktop
| to a folder on our file server via the properties of the shortcut.  That
| part works great.  Outlook 2000 defaults to the My Documents folder
under
| the user's profile.  Changing the shell folders under HKCU has no effect
on
| Outlook 2000 default.  All other Office 2000 apps work fine.  Has anyone
| else seen this?  Thanks,
| Shane Scales, MCSE
| SPC, Network Engineer/System Analyst, US Army
| Email:   [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
|  [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
|
|
|



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Domain Issue

2001-08-20 Thread Banyas, Pat F. Civ
Title: RE: Domain Issue





There is one thing I can think of that has happened to me. Depending on the location on your network, and what type of topography you have of course, you may be trying to communicate in a manner that is incompatible with the nearest switch/hub/etc. If you go into your adapter properties and set it to half duplex vice full, and 10baseT vice 100baseT. If it is in auto or default set it to the half and 10baseT. Reboot and see if it has any affect.

Pat Banyas MCSE
System/Network Administrator
U.S. Naval Hospital Guantanamo Bay




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 1:57 PM
To: NT System Admin Issues
Subject: RE: Domain Issue



if you have the, Use LMHOSTS for Name Resolution, checked, and you dont
have valid domain information in there, I dont think you'll get there.
Have you tried unchecking that box, and letting the WINS/DNS name
resolution get you there?






Network Issues [EMAIL PROTECTED] on 08/17/2001 02:02:19 PM


Please respond to NT System Admin Issues
 [EMAIL PROTECTED]


To: NT System Admin Issues [EMAIL PROTECTED]
cc:


Subject: RE: Domain Issue



Yes to both questions as well as the correct DNS and WINS servers entered
statically.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 10:50 AM
To: NT System Admin Issues
Subject: RE: Domain Issue



well...does this PC have a valid LMHOSTS file? is the Use LMHOSTS for Name
Resolution, checked? does the LMHOSTS file have the valid #DOM and #PRE
info directing the PC to the proper DC ?






Network Issues [EMAIL PROTECTED] on 08/17/2001 01:57:39 PM


Please respond to NT System Admin Issues
 [EMAIL PROTECTED]


To: NT System Admin Issues [EMAIL PROTECTED]
cc:


Subject: RE: Domain Issue



Name resolution is through WINS. However, there are entries on the local
LMHOSTS file that references an AS400 system as well as one of our NT
Servers.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 10:45 AM
To: NT System Admin Issues
Subject: RE: Domain Issue



What are you using for name resolution? WINS ? LMHOSTS ? ...sounds like
your PC cant find its domain controller because of a name resolution issue.
Is this PC on a different network subnet than where the DC's are ?






Network Issues [EMAIL PROTECTED] on 08/17/2001 01:52:46 PM


Please respond to NT System Admin Issues
 [EMAIL PROTECTED]


To: NT System Admin Issues [EMAIL PROTECTED]
cc:


Subject: RE: Domain Issue




DC's are all up as no one is having problems logging in.  I have also
unjoined and rejoined the domain several times and the issue persists.


One more thing, I am unable to connect to the workstation using USRMGR or
SRVMGR from an NT Server box. -Original Message-
From: Luke Brumbaugh [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 10:50 AM
To: NT System Admin Issues
Subject: RE: Domain Issue



check to see if you domain controllers are up.
(see if you can logon from another box)
then remove your workstation from domain and readd



-Original Message-
From: Network Issues [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 1:47 PM
To: NT System Admin Issues
Subject: Domain Issue




Goodmorning All,


I was wondering if someone can give me an idea why I'm getting this
message
when attempting to log on to my domain.


The computer log you on now because the domain DomainName is not
available.


This is from an NTWS4/SP6a.


I can connect to any and all network resources, but I'm unable to log onto
the domain from the workstation.  The only way I can log on is on the
local
box.


Any suggestions?


TIA


Ron
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


Enterprise Channel Management Software for Manufacturers


Visit us at http://www.ultryx.com


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm








http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm








http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm








http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





MS Releases New Free Hotfix Scanner

2001-08-20 Thread Stephan Lieftuechter

Hi,

I am testing the Hfnetchk tool on NT 4.0 and have the following problem:
When I run the tool it want to download the xml File (at
http://download.microsoft.com/download/xml/security/1.0/nt5/en-us/mssecure.cab).
The Customer where I am working use a proxyserver, but the tool can not
get over it (authentication). How can I (automaticly) check for or get the
current xml file?

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




email adress

2001-08-20 Thread mark verschaeve

 Hi all,
 
 In an answer on test-messages someone has published an email-adress that
 answers automatically.
 
 Has someone this for me
 
 
 Thanks a lot,
 
 
 Mark.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: MS Releases New Free Hotfix Scanner

2001-08-20 Thread Puckett, Matt

There is an option to pull down the xml file manually from
http://www.microsoft.com/security and point the checker to that file with:

-x  datasource   Specifies the xml datasource containing the
 hotfix information.  Location may be an xml
 filename, compressed xml cab file, or URL.
 Default is mssecure.cab from the Microsoft
 website.

Matthew Puckett MCSE, MCP+Internet, MCP 
Customer Support Analyst 
Genie KB for Customer Care 
IT Service Delivery 
Bristol Customer Care Center 
1-540-642-3753 
1-423-967-3086 - PCS 
1-800-307-0683 - Pager 
We are the knights who say 'NI'. 



-Original Message-
From: Stephan Lieftuechter [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 8:05 AM
To: NT System Admin Issues
Subject: MS Releases New Free Hotfix Scanner


Hi,

I am testing the Hfnetchk tool on NT 4.0 and have the following problem:
When I run the tool it want to download the xml File (at
http://download.microsoft.com/download/xml/security/1.0/nt5/en-us/mssecure.c
ab).
The Customer where I am working use a proxyserver, but the tool can not
get over it (authentication). How can I (automaticly) check for or get the
current xml file?

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: email adress

2001-08-20 Thread Robert Sanderson

[EMAIL PROTECTED]

Works Great

Robert


-Original Message-
From: mark verschaeve [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 5:59 AM
To: NT System Admin Issues
Subject: email adress


 Hi all,
 
 In an answer on test-messages someone has published an email-adress that
 answers automatically.
 
 Has someone this for me
 
 
 Thanks a lot,
 
 
 Mark.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




MSProxy, Watchgaurd and ASP Smart Upload

2001-08-20 Thread Paul Broomfield








Hi
there,



I remember a couple of years ago I was developing a site for a client
that accessed the internet through MSProxy Server 1 on SBS. Part of the site we developed allowed
them to upload images via a web page, using some component (cant remember
which one now), but each time the client tried to upload an image it would kill
their connection, and hence not upload the image.



Im having a similar problem with ASP Smart Upload and Watchguard, the client
uploads a spreadsheet they get an unspecified error and it kills their
browser and does something funny to IIS4 with eventually falls over and dies.



My problem is that I cant remember what the problem was with the first client
 something to do with allowing HTTP uploads through the proxy, does anyone
know if there is a similar tick box on Watch Guard that I can get the IT guy to
tick/un tick. Is it something to
do with the content type that Watch Guard is allowing through?  should it be
set to allow multipart/form-data through?



BTW its Watch Guard FireBox II using software ver 4.61-b1922



Thanks

Paul





Paul Broomfield, Network Administrator and Database
Technician

Tell
Communications

Tamar Science
Park

Derriford

Plymouth

Devon

PL6 8BX



Tel: +44 (0)
1752 764242

Fax: +44 (0)
1752 764243



Visit us on
the web at: http://www.tell-com.com/






http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







Re: Cisco question...

2001-08-20 Thread Mathew Shember

Sometimes the autonegotiate does not work right.

We had similar problems with some Solaris boxes.

You might also try hard coding the duplex mode


- Original Message - 
From: Keith Nelson [EMAIL PROTECTED]
To: NT System Admin Issues [EMAIL PROTECTED]
Sent: Sunday, August 19, 2001 8:24 PM
Subject: RE: Cisco question...


 Is the router connected to a Switch or a Hub?
 Are both ends set to use Auto-Negotiation for Port Speed and Duplex.
 It is possible that you are having a port speed/duplex mismatch which is
 shutting down the interface.
 
 Just a few thoughts.
 Keith
 
 -Original Message-
 From: mail.kenmcphail.com [mailto:[EMAIL PROTECTED]] 
 Sent: Monday, August 13, 2001 8:13 AM
 To: NT System Admin Issues
 Subject: Re: Cisco question...
 
 Are you running any IPSEC or GRE tunnels on the device?
 - Original Message -
 From: Goldoff, Erik [EMAIL PROTECTED]
 To: NT System Admin Issues [EMAIL PROTECTED]
 Sent: Monday, August 13, 2001 10:02 AM
 Subject: RE: Cisco question...
 
 
  show buffers...
 
 
  Erik Goldoff
  Systems Manager
  The HoneyBaked Ham Company
  678-966-3320
  [EMAIL PROTECTED]
 
 
 
  -Original Message-
  From: Eric Brouwer [mailto:[EMAIL PROTECTED]]
  Sent: Thursday, August 09, 2001 12:23 PM
  To: NT System Admin Issues
  Subject: Cisco question...
 
 
  I guess I'll start out by asking, are there any good Cisco lists out
 there?
 
  If not, hopefully someone here can help.
 
  I have a Cisco 3620 router.  We have 3 T1 Serial WIC's installed that
  connect our 3 regional offices.  We also have 2 ethernet interfaces
  installed.  One is for video inferences, the other connects to our
 LAN.
 We
  are having problems today with the LAN interface.  The regional
 offices
  called saying they could not get e-mail.  (Our Exchange servers are
 all on
  the local network.)  In tracing the problem back, it seems like the
 LAN
  interface goes down.  If I look on the router, all the lines are
 green.  A
  reboot of the router cleared up the problem.  For about an hour.  Then
 the
  same symptoms returned.  Another reboot fixed it.  When the problem
 is
  occurring, I can not ping that LAN interface, even though the
 connection
 is
  green on both ends of the patch cable.
 
  Any ideas?  What can I look for?
 
  Eric
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Installing RAS disabled keyboard/mice

2001-08-20 Thread Eric Peeters
Title: Message



For no apparent 
reason other than a hunch, I checked the boot.ini file and the loading options 
had been modified to start WinNT without a mouse. I removed the offending 
parameter and rebooted, with a mouse but without a keyboard still. The kbdclass 
key looked fine to me, but I still couldn't get a keyboard, so I ran NT Setup 
with the repair option and I ended up with a keyboard but without a network. 
Totally frustrated by then, I chose the fdisk way...

Thanks for your 
suggestions, guys.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Joe Casale 
  [mailto:[EMAIL PROTECTED]]Sent: Saturday, August 18, 2001 11:57 
  PMTo: NT System Admin IssuesSubject: RE: Installing RAS 
  disabled keyboard/mice
  
  Dude, I had this 
  problem w/ an e2k server.
  When I booted into 
  safemode, the KB 
worked.
  This happened after I 
  updated win2k to sp2. I tried a few different makes of kbs, and the problem actually 
  went away.
  I never did figure it 
  out! 
  If you guys find the 
  culprit, post it back here, that one pissed me 
  off!
  jlc
  
  -Original 
  Message-From: Eric 
  Peeters [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 2001 10:50 
  PMTo: NT System Admin 
  IssuesSubject: RE: 
  Installing RAS disabled keyboard/mice
  
  
  I can't tell for the mouse, but 
  the keyboard works fine up until after the "last known good profile" screen. 
  Then does it become inoperative.
  
-Original 
Message-From: Kevin 
Miller [mailto:[EMAIL PROTECTED]]Sent: Sunday, August 19, 2001 2:21 
AMTo: NT System Admin 
IssuesSubject: RE: 
Installing RAS disabled keyboard/mice

Hardware? did you 
perhaps disable them in the CMOS???




Kevinm WLKMMAS*TM, QWSZC, VRY+Y, 
NFH, SAD-VF, DERSDESDFG
~~~
More letters after my name makes 
me Smarter.
~~~
please respond back to rent this 
ad space for your needs
-Original 
  Message-From: Eric 
  Peeters [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 2001 9:24 
  PMTo: NT System Admin 
  IssuesSubject: 
  Installing RAS disabled keyboard/mice
  Hello 
  week-enders, 
  I installed RAS in order to 
  enable a remote user to use her modem (read, I'm scrambling to survive the 
  Rhythms shutdown) on a WinNT SP6a PC. After reboot, the keyboard and PS/2 
  mouse were inoperative. Connecting to the logs from a different PC, I 
  found out that the following three devices/services wouldn't load at 
  start-up (error message 7026) : kbdclass, lmoufltr, mouclass. I tried 
  rebooting in VGA mode or with the last known good hardware config, neither 
  helped, nor did it do any difference when I rebotted the machine with the 
  mouse and keyboard unplugged.
  The user "lost" the ERD (or in 
  clearspeak, never bothered to do one despite my instructions). Anyone has 
  a suggestion that'd let me revive this PC without reinstalling NT. I'm 
  thinking reinstalling SP6 may solve the problem, but how do I do that when 
  the keyboard and the mouse are inoperative ?
  Thanks in 
  advance. 
  Eric Peeters 
  Network 
  Administrator TexLoc Ltd 
  
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Corporate Firewall Software for NT/2000/XP

2001-08-20 Thread Ryan McBride
Title: OT: Corporate Firewall Software for NT/2000/XP



Probably the smartest thing ive ever heard. 

Oh 
wellz thanx all

  -Original Message-From: Andrew S. Baker 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, 20 August 2001 
  3:21 PMTo: NT System Admin IssuesCc: 
  [EMAIL PROTECTED]Subject: RE: Corporate Firewall Software for 
  NT/2000/XP
  High-End: CheckPoint FW-1
  Mid-Range: WinRoute Pro
  
  I 
  won't even question the requirements... :)
  
  
  http://www.ultratech-llc.com/KB/?File=SFirewalls.TXT
  
  
  ==
  ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT
  ==
  "Human beings, who are almost unique in having the 
  abilityto learn from the experience of others, are also 
  remarkablefor their apparent disinclination to do so." -- Douglas 
  Adams 
  
-Original Message-From: Ryan McBride 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 12:34 
AMTo: NT System Admin IssuesSubject: OT: Corporate 
Firewall Software for NT/2000/XP
We are about to put a 6meg ADSL Connection into 
our head office. Due to the size of the link we see the need for a EXTREAMLY 
strong and customisable firewall. Needs to support DMZ's and logging, etc 
and HAS to run on NT/2000/XP. Suggestions please anyone?!?!?
- - Ryan McBride (MCSE) Network  Comms Administrator Strategic Management Works http://www.smw.com.au +612-9906-9611 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





Changing SCSI Controller - Need Help Fast

2001-08-20 Thread Scott Erwin

NT4 Server SP6.

Strange problem I'm having here. This server had 5 hard disks in it and I
was able to consolidate all the data onto two drives. I took out the 3
unneeded disks and now the event log is filling with
Event ID 9: aix78xx
The Device, \Device\ScsiPort0, did not respond within the timeout period.
These events occur every few minutes, all day and all night, even when
there's no activity on the machine. The backup fails also. (Seagate DDS4
tape drive)

I made sure the terminations were correct, and don't really know what else
to check. All I did was take drives out. Those three disks were in the
middle of the chain.


I was wondering how to go about upgrading the controller from an adaptec
2940 to a new Ultra 160 controller (Adaptec 29160). The tape drive and one
hard disk are LVD. The boot drive is single ended. Maybe this is part of my
problem. Should I install the new card, install the driver then switch the
devices to the new adapter?


Thanks,
Scott


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Proxy Problem..

2001-08-20 Thread bcouchman
Title: Proxy Problem..





I had a problem with our proxy server. I've uninstalled and reinstalled everything. All seems fine except


From the server, I can surf the web. The exchange server is checking mail on a regular basis just like it's supposed to. My workstations however can't seem to access the proxy. Here's the senerio:

1) User puts a valid address request in. (www.msn.com)
2) The request is made to the server (watching the bottom left side of the browser)
3) The browser goes to a plain white screen


I've searched technet and found a few things such as making sure IP forwarding is disabled and other things, but to no avail. 

Any one have any idea what check box I'm missing. It's usually something so fustratingly simple that baffles me!


Ptl. Bob Couchman
Unit 57
Network Administrator
Madisonville Police Department
99 East Center Street
Madisonville, KY 42431
(270) 821-1720
(270) 824-2115 (fax)
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 


Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: How to move DHCP from one server to another - hardware upgrad e - not OS upgrade

2001-08-20 Thread Rene de Haas
Title: Message



I 
think I used these instructions when I did it.

http://www.jsiinc.com/subd/tip1600/rh1628.htm

I have done it once and it worked, but like Kevin says, 
YMMV.

Regards
Rene

  -Original Message-From: Flanagan, Kevin 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 2:12 
  PMTo: NT System Admin IssuesSubject: RE: How to move 
  DHCP from one server to another - hardware upgrad e - not OS 
  upgrade
  There is a technet article.
  
  http://support.microsoft.com/support/kb/articles/Q130/6/42.asp
  
  
  Your 
  Mileage May Vary, these are updated instructions since I tried to do this 
  about a year ago, it didn't work for a crap back then.
  
  
  
  Good 
  luck,
  
  
   Kevin
  
  
  +---+ 
  Kevin Flanagan 
  C/S Planning Engineer 
  III I/T 
  Implementation Department Branch Banking  Trust Company 3261 Atlantic Avenue, Suite 
  116 MC: 
  172-85-01-00 Raleigh, NC 27604 Voice: 919-716-6209 
  

-Original Message-From: Robert E Young 
[mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 
2001 2:04 PMTo: NT System Admin IssuesSubject: How to 
move DHCP from one server to another - hardware upgrade - not OS 
upgrade
Has anyone moved/copied DHCP from one server to another ? This is a 
total PC replacement (hardware upgrade only - not OS)

or


Does anyone KNOW of a command line way to 
importthe backup registry 
file. e \winnt\system32\DHCP\backup\DHCPcfg , 
(it is a binary file) ?

thx,
rey


  -Original Message-From: Robert E Young 
  [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 16, 
  2001 8:36 PMTo: NT System Admin IssuesSubject: RE: 
  command line import of the DHCPcfg file
  Unfortunately, it is a binary file, not an ascii test 
  file.
  rey
  
-Original Message-From: Kevin Miller 
[mailto:[EMAIL PROTECTED]]Sent: Thursday, August 
16, 2001 11:07 PMTo: NT System Admin 
IssuesSubject: RE: command line import of the DHCPcfg 
file
open it with notepad.


Kevinm QWSZC, VRY+Y, NFH, 
SAD-VF, DERSDESDFG
~~~
More letters after my names 
makes me Smarter.
~~~
please respond back to rent this 
ad space for your needs

  
  -Original Message-From: Robert E 
  Young [mailto:[EMAIL PROTECTED]] Sent: Thursday, 
  August 16, 2001 6:19 PMTo: NT System Admin 
  IssuesSubject: command line import of the DHCPcfg 
  fileImportance: High
  DHCP server creates its own registry backup 
  i.e \winnt\system32\DHCP\backup\DHCPcfg the file has no extension. It 
  can be imported to the registry using the regedt32 utility, 
  however, I need to import it in a batch file.
  
  I have tried regedit /s
  
  I have tried reg from the resource 
  kit
  
  neither 
  work...
  
  Does anyone KNOW of a command line way to 
  import that particular registry file.
  
  TIA
  
  Robert E Young MCSE
  Dallas, TX
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




***

The information in this e-mail is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this e-mail in error please notify the sender by return e-mail, delete this e-mail, and refrain from any disclosure or action based on the information.





Re: Proxy Problem..

2001-08-20 Thread Peter Pearson
Title: Proxy Problem..



Have you entered the proxy settings for the 
browser? Anything unusual in the Event Viewer?

  - Original Message - 
  From: 
  [EMAIL PROTECTED] 
  To: NT System Admin Issues 
  Sent: Monday, August 20, 2001 9:55 
  AM
  Subject: Proxy Problem..
  
  I had a problem with our proxy server. I've uninstalled and 
  reinstalled everything. All seems fine except 
  From the server, I can surf the web. The exchange server is 
  checking mail on a regular basis just like it's supposed to. My workstations 
  however can't seem to access the proxy. Here's the senerio:
  1) User puts a valid address request in. (www.msn.com) 2) The 
  request is made to the server (watching the bottom left side of the 
  browser) 3) The browser goes to a plain white 
  screen 
  I've searched technet and found a few things such as making 
  sure IP forwarding is disabled and other things, but to no avail. 
  Any one have any idea what check box I'm missing. It's usually 
  something so fustratingly simple that baffles me! 
  Ptl. Bob Couchman Unit 57 
  Network Administrator Madisonville 
  Police Department 99 East Center Street 
  Madisonville, KY 42431 (270) 
  821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
  
  Visit the Madisonville Police Department on the internet 
  at http://www.madisonvillepd.com http://www.madisonvillepd.com/ 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Proxy Problem..

2001-08-20 Thread bcouchman
Title: Proxy Problem..



Yes, 
the browsers connection settings are all pointing to the proxy 
server.

Check 
of the event viewer only reveals one error:

"The 
HTTP server was unable to load the ISAPI Application 
'C:\winnt.sbs\system32\idq.dll'. The data is the error."

.. and 
of course it's looking a whole lot like greek to me!


Ptl. Bob CouchmanUnit 57Network AdministratorMadisonville Police 
Department99 East Center StreetMadisonville, KY 42431(270) 
821-1720(270) 824-2115 (fax)[EMAIL PROTECTED]Visit the 
Madisonville Police Department on the internet athttp://www.madisonvillepd.com

  -Original Message-From: Peter Pearson 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  9:10To: NT System Admin IssuesSubject: Re: Proxy 
  Problem..
  Have you entered the proxy settings for the 
  browser? Anything unusual in the Event Viewer?
  
- Original Message - 
From: 
[EMAIL PROTECTED] 
To: NT System Admin Issues 

Sent: Monday, August 20, 2001 9:55 
AM
Subject: Proxy Problem..

I had a problem with our proxy server. I've uninstalled and 
reinstalled everything. All seems fine except 
From the server, I can surf the web. The exchange server is 
checking mail on a regular basis just like it's supposed to. My workstations 
however can't seem to access the proxy. Here's the senerio:
1) User puts a valid address request in. (www.msn.com) 2) The 
request is made to the server (watching the bottom left side of the 
browser) 3) The browser goes to a plain white 
screen 
I've searched technet and found a few things such as making 
sure IP forwarding is disabled and other things, but to no avail. 

Any one have any idea what check box I'm missing. It's 
usually something so fustratingly simple that baffles me! 
Ptl. Bob Couchman Unit 57 
Network Administrator Madisonville 
Police Department 99 East Center Street 
Madisonville, KY 42431 (270) 
821-1720 (270) 824-2115 (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 

Visit the Madisonville Police Department on the internet 
at http://www.madisonvillepd.com http://www.madisonvillepd.com/ 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Proxy Problem..

2001-08-20 Thread bcouchman
Title: RE: Proxy Problem..





You never get anything but a plain white screen?


Correct.. nothing but a white screen...

No 'Page not available' or other type of message?


Nope.. That's what is puzzling me..

I'm assuming you have pointed your browser at the proxy server.


Yes, the browser is pointed to the proxy server.


Where is the exchange server? Is it on the Proxy server machine?


I'm running SBS 4.5 so exchange and proxy are on the same physical machine.

Are all your proxy services started in the Proxy Management Console?


Yes, all services are running properly on the PMC.

Have you tried using the proxy client on a client machine (you shouldn't
have to in order to just browse, but ??)?


Actually, yes! I tried that too. I am pulling at what ever strings I can. 


This one is puzzling me.


Ptl. Bob Couchman
Unit 57
Network Administrator
Madisonville Police Department
99 East Center Street
Madisonville, KY 42431
(270) 821-1720
(270) 824-2115 (fax)
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 


Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ 



-Original Message-
From: Bill Kuhn - MCSE [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 9:24
To: NT System Admin Issues
Subject: RE: Proxy Problem..





-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 8:55 AM
To: NT System Admin Issues
Subject: Proxy Problem..




I had a problem with our proxy server. I've uninstalled and reinstalled
everything. All seems fine except 


From the server, I can surf the web. The exchange server is checking
mail on a regular basis just like it's supposed to. My workstations
however can't seem to access the proxy. Here's the senerio:


1) User puts a valid address request in. (www.msn.com) 
2) The request is made to the server (watching the bottom left side of
the browser) 
3) The browser goes to a plain white screen 


I've searched technet and found a few things such as making sure IP
forwarding is disabled and other things, but to no avail. 


Any one have any idea what check box I'm missing. It's usually something
so fustratingly simple that baffles me! 


Ptl. Bob Couchman 
Unit 57 
Network Administrator 
Madisonville Police Department 
99 East Center Street 
Madisonville, KY 42431 
(270) 821-1720 
(270) 824-2115 (fax) 
[EMAIL PROTECTED]  mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]  


Visit the Madisonville Police Department on the internet at
http://www.madisonvillepd.com http://www.madisonvillepd.com 
http://www.madisonvillepd.com/ http://www.madisonvillepd.com/  


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





Re: Proxy Problem..

2001-08-20 Thread Peter Pearson
Title: Proxy Problem..



What is your proxy setup exactly? Proxy 2.0? 2 
Nics? etc.. Have you added a static route in the routing table? Has it ever 
worked? Have you tried the IP of the proxy rather than netbios in the proxy 
settings?

  - Original Message - 
  From: 
  [EMAIL PROTECTED] 
  To: NT System Admin Issues 
  Sent: Monday, August 20, 2001 10:20 
  AM
  Subject: RE: Proxy Problem..
  
  Yes, 
  the browsers connection settings are all pointing to the proxy 
  server.
  
  Check of the event viewer only reveals one 
  error:
  
  "The 
  HTTP server was unable to load the ISAPI Application 
  'C:\winnt.sbs\system32\idq.dll'. The data is the error."
  
  .. 
  and of course it's looking a whole lot like greek to 
  me!
  
  
  Ptl. Bob CouchmanUnit 57Network AdministratorMadisonville 
  Police Department99 East Center StreetMadisonville, KY 42431(270) 
  821-1720(270) 824-2115 (fax)[EMAIL PROTECTED]Visit the 
  Madisonville Police Department on the internet athttp://www.madisonvillepd.com
  
-Original Message-From: Peter Pearson 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
9:10To: NT System Admin IssuesSubject: Re: Proxy 
Problem..
Have you entered the proxy settings for the 
browser? Anything unusual in the Event Viewer?

  - Original Message - 
  From: 
  [EMAIL PROTECTED] 
  To: NT System Admin Issues 
  
  Sent: Monday, August 20, 2001 9:55 
  AM
  Subject: Proxy Problem..
  
  I had a problem with our proxy server. I've uninstalled 
  and reinstalled everything. All seems fine except 
  From the server, I can surf the web. The exchange server 
  is checking mail on a regular basis just like it's supposed to. My 
  workstations however can't seem to access the proxy. Here's the 
  senerio:
  1) User puts a valid address request in. (www.msn.com) 2) The 
  request is made to the server (watching the bottom left side of the 
  browser) 3) The browser goes to a plain white 
  screen 
  I've searched technet and found a few things such as 
  making sure IP forwarding is disabled and other things, but to no avail. 
  
  Any one have any idea what check box I'm missing. It's 
  usually something so fustratingly simple that baffles me! 
  Ptl. Bob Couchman Unit 57 
  Network Administrator Madisonville Police Department 99 East 
  Center Street Madisonville, KY 42431 
  (270) 821-1720 (270) 824-2115 
  (fax) [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
  
  Visit the Madisonville Police Department on the internet 
  at http://www.madisonvillepd.com http://www.madisonvillepd.com/ 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





Windows 2000 System shutdown unexpected

2001-08-20 Thread Albert Chong

Hello all,

We have couples of very critical web servers. They are doing Network load
balance on each other..

One of the server keep automatic turn off everyday 1:56am since 8/18 (Three
days already). I need go back to office turn on early in the morning. We
have paging system always notified me.. The only message I can see from my
event view during that times is Event ID: 6008 - System shutdown
unexpected. No other message..

That is couple of chance I am thinking now.
1. Power issue.. I test ups - We brought big central UPS couple month ago. I
disconnect and connect. No problem.
2. Nothing I can found under event view can cause problem that time /
nothing also in the schedule.. (I type AT show nothing in the schedule.) ---
Anyone know any hidden schedule??
3. Hardware issue.. (But why the things happen only at 1:56am ??)..
4. Security issue - So far we never get effect by code red. We already
remove all unnecessary scripting from our web server since long times ago
and we always keep update our service pack and security patch.. But web
server may already get attacked by hacker..

Anyone have same experiences?? I need your help..


Albert 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Proxy Problem..

2001-08-20 Thread Spencer Kent

.. Hmm, IDQ.DLL is the dll the Code Red worm plays
   with and it's also the dll that is patched with
   the update. Do any updates lately?

Kent

--- [EMAIL PROTECTED] wrote:
 Yes, the browsers connection settings are all
 pointing to the proxy server.
  
 Check of the event viewer only reveals one error:
  
 The HTTP server was unable to load the ISAPI
 Application
 'C:\winnt.sbs\system32\idq.dll'. The data is the
 error.
  
 .. and of course it's looking a whole lot like greek
 to me! 
  
 
 Ptl. Bob Couchman
 Unit 57
 Network Administrator
 Madisonville Police Department
 99 East Center Street
 Madisonville, KY 42431
 (270) 821-1720
 (270) 824-2115 (fax)
  mailto:[EMAIL PROTECTED]
 [EMAIL PROTECTED] 
 
 Visit the Madisonville Police Department on the
 internet at
 http://www.madisonvillepd.com/
 http://www.madisonvillepd.com
 
 -Original Message-
 From: Peter Pearson [mailto:[EMAIL PROTECTED]]
 Sent: Monday, August 20, 2001 9:10
 To: NT System Admin Issues
 Subject: Re: Proxy Problem..
 
 
 Have you entered the proxy settings for the browser?
 Anything unusual in the
 Event Viewer?
 
 - Original Message - 
 From: [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]  
 To: NT System Admin Issues
 mailto:[EMAIL PROTECTED]  
 Sent: Monday, August 20, 2001 9:55 AM
 Subject: Proxy Problem..
 
 
 I had a problem with our proxy server. I've
 uninstalled and reinstalled
 everything. All seems fine except 
 
 From the server, I can surf the web. The exchange
 server is checking mail on
 a regular basis just like it's supposed to. My
 workstations however can't
 seem to access the proxy. Here's the senerio:
 
 1) User puts a valid address request in. (
 www.msn.com http://www.msn.com
 ) 
 2) The request is made to the server (watching the
 bottom left side of the
 browser) 
 3) The browser goes to a plain white screen 
 
 I've searched technet and found a few things such as
 making sure IP
 forwarding is disabled and other things, but to no
 avail. 
 
 Any one have any idea what check box I'm missing.
 It's usually something so
 fustratingly simple that baffles me! 
 
 Ptl. Bob Couchman 
 Unit 57 
 Network Administrator 
 Madisonville Police Department 
 99 East Center Street 
 Madisonville, KY 42431 
 (270) 821-1720 
 (270) 824-2115 (fax) 
 [EMAIL PROTECTED] 
 mailto:[EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]   
 
 Visit the Madisonville Police Department on the
 internet at
 http://www.madisonvillepd.com
 http://www.madisonvillepd.com  
 http://www.madisonvillepd.com/
 http://www.madisonvillepd.com/  
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Windows 2000 System shutdown unexpected

2001-08-20 Thread Andrew Petukov

Backups? Also, reply the latest service pack.

-Andrew

-Original Message-
From: Albert Chong [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 10:42 AM
To: NT System Admin Issues
Subject: Windows 2000 System shutdown unexpected


Hello all,

We have couples of very critical web servers. They are doing Network load
balance on each other..

One of the server keep automatic turn off everyday 1:56am since 8/18 (Three
days already). I need go back to office turn on early in the morning. We
have paging system always notified me.. The only message I can see from my
event view during that times is Event ID: 6008 - System shutdown
unexpected. No other message..

That is couple of chance I am thinking now.
1. Power issue.. I test ups - We brought big central UPS couple month ago. I
disconnect and connect. No problem.
2. Nothing I can found under event view can cause problem that time /
nothing also in the schedule.. (I type AT show nothing in the schedule.) ---
Anyone know any hidden schedule??
3. Hardware issue.. (But why the things happen only at 1:56am ??)..
4. Security issue - So far we never get effect by code red. We already
remove all unnecessary scripting from our web server since long times ago
and we always keep update our service pack and security patch.. But web
server may already get attacked by hacker..

Anyone have same experiences?? I need your help..


Albert

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Exchange ?

2001-08-20 Thread Ray Zorz



There's no question that some will balk. But I always figured that 
if I get even 1 to do it, that's one less I have to do. And the 
percentages were usually higher. 

I had 
this one job where we were all in a big room, about 75 of us. I sent out 
an e-mail asking them to do something similiar. It was kind of fun 
watching who understood, who didn't and who jumped up to help. 


  -Original Message-From: Les Bessant 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 2:26 
  AMTo: NT System Admin IssuesSubject: RE: Exchange 
  ?
  I 
  created a detailed document on this, including numerous screenshots, in an 
  effort to make the process completely idiot-proof. They still think it's 
  something I should be doing for them. Mutter.
  
  
  Les Bessant mailto:[EMAIL PROTECTED]IT 
  Manager, Sanderson Townend  GilbertActing in a personal 
  capacityhttp://www.tiggercam.co.uk - New, 
  improved and with more bounce! 
  
-Original Message-From: Ray Zorz 
[mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 
6:13 PMTo: NT System Admin IssuesSubject: RE: Exchange 
?
Make the users do it. Just give them some instructions, and 
encourage those that get it to help those that don't. 

  -Original Message-From: Bob Chyka 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 10:16 
  AMTo: NT System Admin IssuesSubject: Exchange 
  ?
  Hello everyone,
  
  was wondering if there is an easy way in 
  exchange 5.5 to set permissions to see other people's calendar, etc. 
  without going to each machine and doing it through outlook. is there 
  any place at the server where this can be done? a company i work for 
  on the side wants everybody to be able to see each other's claendars and i 
  dont feel like setting permissions at every users calendar through 
  outlook..
  
  TIA,
  Bob 
  C.http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm_This 
message has been checked for all known viruses by Star Internetdelivered 
through the MessageLabs Virus Scanning Service. For furtherinformation 
visit http://www.star.net.uk/stats.asp or alternatively callStar 
Internet for details on the Virus Scanning 
  Service.http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  The information in this communication and any 
  attachments is confidential and may be legally privileged. It is intended 
  solely for the addressee. If you are not the intended recipient any use, 
  review, dissemination, distribution or copying of this information is strictly 
  prohibited. If you have received this communication in error please notify us 
  immediately on 0191 261 2681 and delete the original message and any copies of 
  it. 
  Any opinions, conclusions or other information in 
  this message that do not relate to the official business of Sanderson Townend 
   Gilbert are neither given nor endorsed by the firm. 
  _This 
  message has been checked for all known viruses by Star Internetdelivered 
  through the MessageLabs Virus Scanning Service. For furtherinformation 
  visit http://www.star.net.uk/stats.asp or alternatively callStar Internet 
  for details on the Virus Scanning 
  Service.http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Proxy Problem..

2001-08-20 Thread bcouchman
Title: RE: Proxy Problem..





er, um, no I haven't put it on yet.. gone looking now... with my fingers crossed.


Ptl. Bob Couchman
Unit 57
Network Administrator
Madisonville Police Department
99 East Center Street
Madisonville, KY 42431
(270) 821-1720
(270) 824-2115 (fax)
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 


Visit the Madisonville Police Department on the internet at http://www.madisonvillepd.com http://www.madisonvillepd.com/ 



-Original Message-
From: Spencer Kent [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 9:47
To: NT System Admin Issues
Subject: RE: Proxy Problem..



.. Hmm, IDQ.DLL is the dll the Code Red worm plays
 with and it's also the dll that is patched with
 the update. Do any updates lately?


Kent


--- [EMAIL PROTECTED] wrote:
 Yes, the browsers connection settings are all
 pointing to the proxy server.
 
 Check of the event viewer only reveals one error:
 
 The HTTP server was unable to load the ISAPI
 Application
 'C:\winnt.sbs\system32\idq.dll'. The data is the
 error.
 
 .. and of course it's looking a whole lot like greek
 to me! 
 
 
 Ptl. Bob Couchman
 Unit 57
 Network Administrator
 Madisonville Police Department
 99 East Center Street
 Madisonville, KY 42431
 (270) 821-1720
 (270) 824-2115 (fax)
 mailto:[EMAIL PROTECTED]
 [EMAIL PROTECTED] 
 
 Visit the Madisonville Police Department on the
 internet at
 http://www.madisonvillepd.com/
 http://www.madisonvillepd.com
 
 -Original Message-
 From: Peter Pearson [mailto:[EMAIL PROTECTED]]
 Sent: Monday, August 20, 2001 9:10
 To: NT System Admin Issues
 Subject: Re: Proxy Problem..
 
 
 Have you entered the proxy settings for the browser?
 Anything unusual in the
 Event Viewer?
 
 - Original Message - 
 From: [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED] 
 To: NT System Admin Issues
 mailto:[EMAIL PROTECTED] 
 Sent: Monday, August 20, 2001 9:55 AM
 Subject: Proxy Problem..
 
 
 I had a problem with our proxy server. I've
 uninstalled and reinstalled
 everything. All seems fine except 
 
 From the server, I can surf the web. The exchange
 server is checking mail on
 a regular basis just like it's supposed to. My
 workstations however can't
 seem to access the proxy. Here's the senerio:
 
 1) User puts a valid address request in. (
 www.msn.com http://www.msn.com
 ) 
 2) The request is made to the server (watching the
 bottom left side of the
 browser) 
 3) The browser goes to a plain white screen 
 
 I've searched technet and found a few things such as
 making sure IP
 forwarding is disabled and other things, but to no
 avail. 
 
 Any one have any idea what check box I'm missing.
 It's usually something so
 fustratingly simple that baffles me! 
 
 Ptl. Bob Couchman 
 Unit 57 
 Network Administrator 
 Madisonville Police Department 
 99 East Center Street 
 Madisonville, KY 42431 
 (270) 821-1720 
 (270) 824-2115 (fax) 
 [EMAIL PROTECTED] 
 mailto:[EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]  
 
 Visit the Madisonville Police Department on the
 internet at
 http://www.madisonvillepd.com
 http://www.madisonvillepd.com 
 http://www.madisonvillepd.com/
 http://www.madisonvillepd.com/  
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 



__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Windows 2000 System shutdown unexpected

2001-08-20 Thread Rogers, Jeff L (OM)
Title: RE: Windows 2000 System shutdown unexpected





REPLY the latest service pack? Boy, that's gonna be a BIG e-mail message!


-Original Message-
From: Andrew Petukov [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 09:49
To: NT System Admin Issues
Subject: RE: Windows 2000 System shutdown unexpected



Backups? Also, reply the latest service pack.


-Andrew


-Original Message-
From: Albert Chong [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 10:42 AM
To: NT System Admin Issues
Subject: Windows 2000 System shutdown unexpected



Hello all,


We have couples of very critical web servers. They are doing Network load
balance on each other..


One of the server keep automatic turn off everyday 1:56am since 8/18 (Three
days already). I need go back to office turn on early in the morning. We
have paging system always notified me.. The only message I can see from my
event view during that times is Event ID: 6008 - System shutdown
unexpected. No other message..


That is couple of chance I am thinking now.
1. Power issue.. I test ups - We brought big central UPS couple month ago. I
disconnect and connect. No problem.
2. Nothing I can found under event view can cause problem that time /
nothing also in the schedule.. (I type AT show nothing in the schedule.) ---
Anyone know any hidden schedule??
3. Hardware issue.. (But why the things happen only at 1:56am ??)..
4. Security issue - So far we never get effect by code red. We already
remove all unnecessary scripting from our web server since long times ago
and we always keep update our service pack and security patch.. But web
server may already get attacked by hacker..


Anyone have same experiences?? I need your help..



Albert


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Proxy Problem..

2001-08-20 Thread Spencer Kent

.. I'd sure scan the IIS logs then to see if any
   successful attempts to muck with IDQ.dll were
   done.
Kent

--- [EMAIL PROTECTED] wrote:
 er, um, no I haven't put it on yet.. gone
 looking now... with my fingers
 crossed.
 
 Ptl. Bob Couchman
 Unit 57
 Network Administrator
 Madisonville Police Department
 99 East Center Street
 Madisonville, KY 42431
 (270) 821-1720
 (270) 824-2115 (fax)
 [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]  
 
 Visit the Madisonville Police Department on the
 internet at
 http://www.madisonvillepd.com
 http://www.madisonvillepd.com/ 
 
 
 
 -Original Message-
 From: Spencer Kent [mailto:[EMAIL PROTECTED]]
 Sent: Monday, August 20, 2001 9:47
 To: NT System Admin Issues
 Subject: RE: Proxy Problem..
 
 
 .. Hmm, IDQ.DLL is the dll the Code Red worm plays
with and it's also the dll that is patched with
the update. Do any updates lately?
 
 Kent
 
 --- [EMAIL PROTECTED] wrote:
  Yes, the browsers connection settings are all
  pointing to the proxy server.
   
  Check of the event viewer only reveals one error:
   
  The HTTP server was unable to load the ISAPI
  Application
  'C:\winnt.sbs\system32\idq.dll'. The data is the
  error.
   
  .. and of course it's looking a whole lot like
 greek
  to me! 
   
  
  Ptl. Bob Couchman
  Unit 57
  Network Administrator
  Madisonville Police Department
  99 East Center Street
  Madisonville, KY 42431
  (270) 821-1720
  (270) 824-2115 (fax)
   mailto:[EMAIL PROTECTED]
  [EMAIL PROTECTED] 
  
  Visit the Madisonville Police Department on the
  internet at
  http://www.madisonvillepd.com/
  http://www.madisonvillepd.com
  
  -Original Message-
  From: Peter Pearson
 [mailto:[EMAIL PROTECTED]]
  Sent: Monday, August 20, 2001 9:10
  To: NT System Admin Issues
  Subject: Re: Proxy Problem..
  
  
  Have you entered the proxy settings for the
 browser?
  Anything unusual in the
  Event Viewer?
  
  - Original Message - 
  From: [EMAIL PROTECTED]
  mailto:[EMAIL PROTECTED]  
  To: NT System Admin Issues
  mailto:[EMAIL PROTECTED]  
  Sent: Monday, August 20, 2001 9:55 AM
  Subject: Proxy Problem..
  
  
  I had a problem with our proxy server. I've
  uninstalled and reinstalled
  everything. All seems fine except 
  
  From the server, I can surf the web. The exchange
  server is checking mail on
  a regular basis just like it's supposed to. My
  workstations however can't
  seem to access the proxy. Here's the senerio:
  
  1) User puts a valid address request in. (
  www.msn.com http://www.msn.com
  ) 
  2) The request is made to the server (watching the
  bottom left side of the
  browser) 
  3) The browser goes to a plain white screen 
  
  I've searched technet and found a few things such
 as
  making sure IP
  forwarding is disabled and other things, but to no
  avail. 
  
  Any one have any idea what check box I'm missing.
  It's usually something so
  fustratingly simple that baffles me! 
  
  Ptl. Bob Couchman 
  Unit 57 
  Network Administrator 
  Madisonville Police Department 
  99 East Center Street 
  Madisonville, KY 42431 
  (270) 821-1720 
  (270) 824-2115 (fax) 
  [EMAIL PROTECTED] 
  mailto:[EMAIL PROTECTED]
  mailto:[EMAIL PROTECTED]   
  
  Visit the Madisonville Police Department on the
  internet at
  http://www.madisonvillepd.com
  http://www.madisonvillepd.com  
  http://www.madisonvillepd.com/
  http://www.madisonvillepd.com/  
  
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  
  
  
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  
 
 
 __
 Do You Yahoo!?
 Make international calls for as low as $.04/minute
 with Yahoo! Messenger
 http://phonecard.yahoo.com/
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




code red patch when you need index server

2001-08-20 Thread Derrenbacker, L. Jonathan

How do you patch a iis4 box for code red when you need index server to run?

I applied the fix from microsoft back when it came out, but
after I applied it index server stopped working.


Thanks

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: code red patch when you need index server

2001-08-20 Thread Spencer Kent

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-033.asp
.. Read the fine print as it says service calls 
   associated with security patches are free.
.. What version Index Server and what SP is NT?

Kent

--- Derrenbacker,  L. Jonathan
[EMAIL PROTECTED] wrote:
 How do you patch a iis4 box for code red when you
 need index server to run?
 
 I applied the fix from microsoft back when it came
 out, but
 after I applied it index server stopped working.
 
 
 Thanks
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Windows 2000 System shutdown unexpected

2001-08-20 Thread Andreas Marbet

 Nothing I can found under event view can cause problem that 
 time / nothing also in the schedule.. (I type AT show nothing 
 in the schedule.) --- Anyone know any hidden schedule??

Did you have a look at the scheduled tasks in Control Panel? As far as I
know, you can't see these tasks with the 'at'-Command.

Andreas

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Can't access printer on network, problem with AD

2001-08-20 Thread Blaine



Hi:

I have a win2000 network with a small group of 
computers in onesection that use a laser printer that is attached to one of 
thewin2000 machines. Last week all of a sudden nobody could 
print. Ifound out that the local security, local policies, users 
rights,access this computer from the network had effective settings of 
onlyadmin and domain admin having access. The local policies 
haveeveryone. I took all restrictions off the domain. First I 
don't knowwhat changed, and second I don't know how to get the local policy 
topropagate to the effective setting. Everything I have read says 
thatit should do this automatically.Anyone have any ideas? I don't 
want to do anything radical until Ihave tried everything else.

Thanks

Blaine
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





Re:Can't access printer on network, problem with AD

2001-08-20 Thread Ralph Davis

HP4100 printers have a known problem working with win2000 machines.  Is this an
HP4100?  If so contact HP for their latest firmware upgrade.

ralph

Reply Separator
Subject:Can't access printer on network, problem with AD
Author: NT System Admin Issues [EMAIL PROTECTED]
Date:   20/08/2001 11:49 AM

Hi:

I have a win2000 network with a small group of computers in one
section that use a laser printer that is attached to one of the
win2000 machines.  Last week all of a sudden nobody could print.  I
found out that the local security, local policies, users rights,
access this computer from the network had effective settings of only
admin and domain admin having access.  The local policies have
everyone.  I took all restrictions off the domain.  First I don't know
what changed, and second I don't know how to get the local policy to
propagate to the effective setting.  Everything I have read says that
it should do this automatically.
Anyone have any ideas?  I don't want to do anything radical until I
have tried everything else.

Thanks

Blaine

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Windows 2000 System shutdown unexpected

2001-08-20 Thread Stephen I. Woolhead

Also check that the BIOS does not have any powerdown at XX:XX setting,
God only knows why someone would program something like that into the
BIOS but its there in some machines.

Stephen


 -Original Message-
 From: Albert Chong [mailto:[EMAIL PROTECTED]]
 Sent: 20 August 2001 15:42
 To: NT System Admin Issues
 Subject: Windows 2000 System shutdown unexpected
 
 
 Hello all,
 
 We have couples of very critical web servers. They are doing 
 Network load
 balance on each other..
 
 One of the server keep automatic turn off everyday 1:56am 
 since 8/18 (Three
 days already). I need go back to office turn on early in the 
 morning. We
 have paging system always notified me.. The only message I 
 can see from my
 event view during that times is Event ID: 6008 - System shutdown
 unexpected. No other message..
 
 That is couple of chance I am thinking now.
 1. Power issue.. I test ups - We brought big central UPS 
 couple month ago. I
 disconnect and connect. No problem.
 2. Nothing I can found under event view can cause problem that time /
 nothing also in the schedule.. (I type AT show nothing in the 
 schedule.) ---
 Anyone know any hidden schedule??
 3. Hardware issue.. (But why the things happen only at 1:56am ??)..
 4. Security issue - So far we never get effect by code red. We already
 remove all unnecessary scripting from our web server since 
 long times ago
 and we always keep update our service pack and security 
 patch.. But web
 server may already get attacked by hacker..
 
 Anyone have same experiences?? I need your help..
 
 
 Albert 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Windows 2000 System shutdown unexpected

2001-08-20 Thread Albert Chong

Thank you Stephen. I will check tonight..

-Original Message-
From: Stephen I. Woolhead [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 9:11 AM
To: NT System Admin Issues
Subject: RE: Windows 2000 System shutdown unexpected


Also check that the BIOS does not have any powerdown at XX:XX setting,
God only knows why someone would program something like that into the
BIOS but its there in some machines.

Stephen


 -Original Message-
 From: Albert Chong [mailto:[EMAIL PROTECTED]]
 Sent: 20 August 2001 15:42
 To: NT System Admin Issues
 Subject: Windows 2000 System shutdown unexpected
 
 
 Hello all,
 
 We have couples of very critical web servers. They are doing 
 Network load
 balance on each other..
 
 One of the server keep automatic turn off everyday 1:56am 
 since 8/18 (Three
 days already). I need go back to office turn on early in the 
 morning. We
 have paging system always notified me.. The only message I 
 can see from my
 event view during that times is Event ID: 6008 - System shutdown
 unexpected. No other message..
 
 That is couple of chance I am thinking now.
 1. Power issue.. I test ups - We brought big central UPS 
 couple month ago. I
 disconnect and connect. No problem.
 2. Nothing I can found under event view can cause problem that time /
 nothing also in the schedule.. (I type AT show nothing in the 
 schedule.) ---
 Anyone know any hidden schedule??
 3. Hardware issue.. (But why the things happen only at 1:56am ??)..
 4. Security issue - So far we never get effect by code red. We already
 remove all unnecessary scripting from our web server since 
 long times ago
 and we always keep update our service pack and security 
 patch.. But web
 server may already get attacked by hacker..
 
 Anyone have same experiences?? I need your help..
 
 
 Albert 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Code Red Got me - one more quick thing

2001-08-20 Thread Jerry Kennedy

If using IIS 4.0, be sure you aren't using the native HTTP redirects.  The
malformed URLs sent by Code Red probes causes Web services to shut down
when implementing this configuration even if your server is not infected. 
Eeye's tool does not detect this as a security hole.
If you're using these redirects, convert them to page redirects.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Microsoft Security Bulletin MS01-044

2001-08-20 Thread Martin Blackstone
Title: Message



For those of you who 
have installed this, have you seen any issues?
We have run it in 
our dev env. with no issues, but just want to get a the opinions of 
others.
Thanks 



Martin Blackstone
Director, Information Technologies
Superior Access Insurance Services
949.470.2111 x279

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Microsoft Security Bulletin MS01-044

2001-08-20 Thread Paul M. Puccinelli
Title: Message



No 
issues.

  
  -Original Message-From: Martin 
  Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, 
  August 20, 2001 9:57 AMTo: NT System Admin 
  IssuesSubject: Microsoft Security Bulletin 
  MS01-044
  For those of you 
  who have installed this, have you seen any issues?
  We have run it in 
  our dev env. with no issues, but just want to get a the opinions of 
  others.
  Thanks 
  
  
  
  Martin Blackstone
  Director, Information Technologies
  Superior Access Insurance Services
  949.470.2111 x279
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





Anyone know about server Work Items? I don't....

2001-08-20 Thread Tony Mitchell

Does anyone know exactly what a work item is and how they are used by NT
Server?
Unfortunately I have been unable to find much information on this subject.
I have a policy server (Dell Poweredge 1300, 2x PIII 500, 256Mb, 2x
8.4SCSI)which dishes out group policy settings to users as they logon to
the network. The number of clients it serves can be as high as 550
concurrent users.
A few months back, before I managed to get a hold of the Dell Poweredge
server, I had an old single processor PII 400 Compaq Desktop PC with 128Mb
being used as the policy server... not ideal I know, but it's all I could
scrounge of head office at the time!!
Whenever large amounts of users started to login and pull the policy down
to their workstations, some of the users would get a grey screen instead
of their wallpaper. The policy server (desktop!) suffered from a lack of
available work items.
I've managed to find bits and pieces from Technet which have lead to
several registry entries in the Lanman Server\Parameters section which
helped the situation and now that the desktop PC has been replaced with a
proper server, the problem has never re-occurred.
However, I've noticed the following activity when monitoring 'Available
Work Items' and 'Current Clients' from Performance Monitor.
Lets say that the server is serving 0 clients. The available work items is
at 512.
As users start logging on, the number of clients goes up and the available
work items go down... pretty much as expected. It appears that for every
client being served, 3 work items are used.
After, lets say, 70 clients are being served, the available work items
value is around about 4-7. Then... 20 more clients logon, but the
available work items stay's the same. I'm not sure, but I think this is
because the server allocates additional work items as and when needed.

At the end of the day, 500 or so people all logoff, but the available work
items value shoots up to well over 1000 and has so far reached a maximum
of 2790!!!
However, the next morning, as soon as users start logging back on, lets
say about 50 clients, the available work items value drops like dotcom
shares and is back to having 4-7 available work items left. What the hell
happened to the rest of them?!?

Anyway... enough waffelling, if you've managed to read (and understand me)
this far, thanks!!

Any Thoughts / Ideas?

Cheers,

Tony Mitchell
Server Administrator
ITV Digital

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Printing Issue

2001-08-20 Thread Ray Zorz



Looks 
like it comes with the ZAK. Not sure where else. Check technet. 


  -Original Message-From: Mark Pilbeam 
  [mailto:[EMAIL PROTECTED]]Sent: Saturday, August 18, 2001 
  12:37 AMTo: NT System Admin IssuesSubject: RE: Printing 
  Issue
  What is the 
  con2prt utility, and where do I get it from?
  
  
-Original Message-From: Ray Zorz 
[mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 
5:58 PMTo: NT System Admin IssuesSubject: RE: Printing 
Issue
I 
dunno. I didn't waste too much time on it at the time. I used the Con2prt 
utility, put it in a batch file and put itif I remember correctly in 
the startup folder on the several pc's in question. 


  -Original Message-From: Steve Roberts 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, August 17, 2001 
  9:33 AMTo: NT System Admin IssuesSubject: RE: 
  Printing Issue
  I am also having this issue with mandatory profiles. When I log in 
  with an mandatory account to a machine ( which has two three lexmark 
  tcp/ip printers installed on it ) how does it determine which printer is 
  the one going to be set as the default.
  
  I think the list of printers installed on an NT machine is stored 
  in :
  
  HKLM\System\CurrentControlSet\Control\Print\Printers and the user 
  setting is stored in :
  
  HKCU\Software\Microsoft\Windows NT\Windows\Device ( another 
  list of printer stored in 
HKCU\Sw\MS\WinNT\PrinterPorts
  
  How does the machine emunerate HKLM and decide which one is set as 
  default? Can we apply a weighting somehow to force 
it??
  
-Original Message-From: Bob Chyka 
[mailto:[EMAIL PROTECTED]]Sent: 17 August 2001 
15:18To: NT System Admin IssuesSubject: Printing 
Issue
If this email has any attachments then send 
it onto the IT Help Desk for virus checking
Hello,

i was wondering if anyone knows a way to 
have machines print to a specific printer no matter who logs on. 
for example we have a computer lab and each student has their own 
account. they have a roaming profile so they can log into any 
comuter in the school and retain settings etc. server is w2k sp2 
and workstations are w2k pro and nt 4.0. is there a way so when 
they log into one of the lab computers it only captures the printers in 
the lab, when they go to the library they only capture the library 
printers, etc? could it possibly be in group policy for 
machines? any help is greatly appreciated..

Bob 
Chykahttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  This email and any files transmitted with it 
  are confidential and are intended solely for the use of the individual or 
  entity to whom they are addressed. If you are not the intended recipient 
  or the person responsible for delivering the email to the intended 
  recipient, please immediately notify the Muir Group IT Help Desk on +44 
  (0) 1244 
606139http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





ODBC Connections

2001-08-20 Thread Blackburn Barrett

All,

Is there as Reg Hack/Utility that will allow me to add a system DSN without
having to go to 175 machines and add it to each one?  It is a NT4.0 sp6a
environment with Office 2k sr1. We are moving from an access oriented back
end to a SQL7 back end, and I would prefer not to have to go to each
individual machine to add the connectivity.

TIA for your help.

Barrett Blackburn
___

Things a Mother Learns:  No matter how much Jell-O you put in a swimming
pool, you still can't walk on water.  
___

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




OT - Macromedia's pricing strategy?

2001-08-20 Thread Jay Woody

I just got a bulletin that Macromedia released some new something.  However, the 
interesting part to me was their pricing strategy.  :)

 ~~
 Pricing
 ~~
 
 Pricing starts at just $1999 for a 3-user version. Add a
 single user for $499.
 
 For more details on pricing, visit:
 http://www.macromedia.com/go/sitespring_esd_pricing
 

So, I can pay $1,500 fro 3 individual licenses or you will bundle them for me and I 
will save . . . oh, no, I will actually lose $500.  Sounds like a great deal!  I'm 
sure Marc at eeye will be interested to see if this works.  :)  

JayW


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: ODBC Connections

2001-08-20 Thread Spencer Kent

.. create it on one NTWS and export the registry
   key and apply it to all in login script.
Kent

--- Blackburn Barrett [EMAIL PROTECTED]
wrote:
 All,
 
 Is there as Reg Hack/Utility that will allow me to
 add a system DSN without
 having to go to 175 machines and add it to each one?
  It is a NT4.0 sp6a
 environment with Office 2k sr1. We are moving from
 an access oriented back
 end to a SQL7 back end, and I would prefer not to
 have to go to each
 individual machine to add the connectivity.
 
 TIA for your help.
 
 Barrett Blackburn
 ___
 
 Things a Mother Learns:  No matter how much Jell-O
 you put in a swimming
 pool, you still can't walk on water.  
 ___
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: OT - Macromedia's pricing strategy?

2001-08-20 Thread Lefkovics, William

The single user license (which is an ADDITION to the Site license) would be
useless to you without the original site purchase.

William


-Original Message-
From: Jay Woody [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 10:22 AM
To: NT System Admin Issues
Subject: OT - Macromedia's pricing strategy?


I just got a bulletin that Macromedia released some new something.  However,
the interesting part to me was their pricing strategy.  :)

 ~~
 Pricing
 ~~
 
 Pricing starts at just $1999 for a 3-user version. Add a
 single user for $499.
 
 For more details on pricing, visit:
 http://www.macromedia.com/go/sitespring_esd_pricing
 

So, I can pay $1,500 fro 3 individual licenses or you will bundle them for
me and I will save . . . oh, no, I will actually lose $500.  Sounds like a
great deal!  I'm sure Marc at eeye will be interested to see if this works.
:)  

JayW


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: ODBC Connections

2001-08-20 Thread Spencer Kent

.. Or the long way, Kent
http://support.microsoft.com/support/kb/articles/Q123/0/08.ASP

--- Blackburn Barrett [EMAIL PROTECTED]
wrote:
 All,
 
 Is there as Reg Hack/Utility that will allow me to
 add a system DSN without
 having to go to 175 machines and add it to each one?
  It is a NT4.0 sp6a
 environment with Office 2k sr1. We are moving from
 an access oriented back
 end to a SQL7 back end, and I would prefer not to
 have to go to each
 individual machine to add the connectivity.
 
 TIA for your help.
 
 Barrett Blackburn
 ___
 
 Things a Mother Learns:  No matter how much Jell-O
 you put in a swimming
 pool, you still can't walk on water.  
 ___
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Active Directory Problem

2001-08-20 Thread Ibby El-Raheb

I have a small network: W2K Server SP2 with 2 NICs one for internal and one
for cable modem that is shared. A bunch of WIN98 clients. Things have been
running smooth for a while and all of a sudden none of the clients can be
authenticated through the server. When I try to go into manage user accounts
I get the following message: Naming information cannot be located because:
The specified domain either does not exist or cannot be contacted. Contact
your system administrator to verify that your domain is properly configured
and is currently online. Well ladies and gentlemen I am the so called
system administrator and I have no clue what to do. Please help me.

Thanks
Ibby
wannabe sys admin.

You can tell whether a man is clever by his answers. You can tell whether a
man is wise by his questions.   Naguib Mahfouz



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Reporting Code red

2001-08-20 Thread Luke Brumbaugh

Is there a website, or agency or whatever that you can report Code Red web
hits to.
We are getting hit from Concentric, and msn and I do have the ipaddress'
It's not a problem here, just irritating.


Luke L. Brumbaugh
System Administrator,MCSE
Ultryx Corporation
mailto:[EMAIL PROTECTED]

Enterprise Channel Management Software for Manufacturers 
Visit us at http://www.ultryx.com 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: Microsoft Security Bulletin MS01-044

2001-08-20 Thread Jay Woody

No issues for me.  I ran it on about 15 servers.  Probably 4 different Compaq hardware 
platforms.

JayW

 [EMAIL PROTECTED] 08/20/01 11:57AM 
For those of you who have installed this, have you seen any issues?
We have run it in our dev env. with no issues, but just want to get a
the opinions of others.
Thanks 
 
Martin Blackstone
Director, Information Technologies
Superior Access Insurance Services
949.470.2111 x279
 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Active Directory Problem

2001-08-20 Thread Howard . Steinberg

I would start by checking your DNS server.

¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸

Howard Steinberg, MCSE
LAN Administrator
Zepf Inc., Clearwater, FL
[EMAIL PROTECTED]

Click here for the Top TEN reasons you should have quick-change container
handling parts for all your packaging machines!
http://www.zepf.com/zepf/chngprts.htm



-Original Message-
From: Ibby El-Raheb [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 2:00 PM
To: NT System Admin Issues
Subject: Active Directory Problem


I have a small network: W2K Server SP2 with 2 NICs one for internal and one
for cable modem that is shared. A bunch of WIN98 clients. Things have been
running smooth for a while and all of a sudden none of the clients can be
authenticated through the server. When I try to go into manage user accounts
I get the following message: Naming information cannot be located because:
The specified domain either does not exist or cannot be contacted. Contact
your system administrator to verify that your domain is properly configured
and is currently online. Well ladies and gentlemen I am the so called
system administrator and I have no clue what to do. Please help me.

Thanks
Ibby
wannabe sys admin.

You can tell whether a man is clever by his answers. You can tell whether a
man is wise by his questions.   Naguib Mahfouz



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Active Directory Problem

2001-08-20 Thread jwatson

Before that I would check to see if your Account is Locked OUT.  I have 
seen this error when mine gets locked out.

Jeremiah

-Original Message-
From: Howard.Steinberg [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 2:37 PM
To: ntsysadmin
Subject: RE: Active Directory Problem


I would start by checking your DNS server.

¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸

Howard Steinberg, MCSE
LAN Administrator
Zepf Inc., Clearwater, FL
[EMAIL PROTECTED]

Click here for the Top TEN reasons you should have quick-change 
container
handling parts for all your packaging machines!
http://www.zepf.com/zepf/chngprts.htm



-Original Message-
From: Ibby El-Raheb [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 2:00 PM
To: NT System Admin Issues
Subject: Active Directory Problem


I have a small network: W2K Server SP2 with 2 NICs one for internal and 
one
for cable modem that is shared. A bunch of WIN98 clients. Things have 
been
running smooth for a while and all of a sudden none of the clients can 
be
authenticated through the server. When I try to go into manage user 
accounts
I get the following message: Naming information cannot be located 
because:
The specified domain either does not exist or cannot be contacted. 
Contact
your system administrator to verify that your domain is properly 
configured
and is currently online. Well ladies and gentlemen I am the so called
system administrator and I have no clue what to do. Please help me.

Thanks
Ibby
wannabe sys admin.

You can tell whether a man is clever by his answers. You can tell 
whether a
man is wise by his questions.   Naguib Mahfouz



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Active Directory Problem

2001-08-20 Thread Joe Casale

No doubt, more then one nic on diff subnets w/ ics or blocked ports get
tricky on a dc. You probably did that all on one machine because of
budget constraints, but that is not an ideal setup so to speak. I am
betting its DNS issues as well!

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 12:37 PM
To: NT System Admin Issues
Subject: RE: Active Directory Problem

I would start by checking your DNS server.

¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸

Howard Steinberg, MCSE
LAN Administrator
Zepf Inc., Clearwater, FL
[EMAIL PROTECTED]

Click here for the Top TEN reasons you should have quick-change
container
handling parts for all your packaging machines!
http://www.zepf.com/zepf/chngprts.htm



-Original Message-
From: Ibby El-Raheb [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 2:00 PM
To: NT System Admin Issues
Subject: Active Directory Problem


I have a small network: W2K Server SP2 with 2 NICs one for internal and
one
for cable modem that is shared. A bunch of WIN98 clients. Things have
been
running smooth for a while and all of a sudden none of the clients can
be
authenticated through the server. When I try to go into manage user
accounts
I get the following message: Naming information cannot be located
because:
The specified domain either does not exist or cannot be contacted.
Contact
your system administrator to verify that your domain is properly
configured
and is currently online. Well ladies and gentlemen I am the so called
system administrator and I have no clue what to do. Please help me.

Thanks
Ibby
wannabe sys admin.

You can tell whether a man is clever by his answers. You can tell
whether a
man is wise by his questions.   Naguib Mahfouz



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Web Hosting

2001-08-20 Thread Roger Seielstad

Nope.. I try to limit hosting activities to people like
http://www.infovue.net

Roger
--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Erik Brown [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 3:04 PM
 To: NT System Admin Issues
 Subject: Web Hosting
 
 
 Has anyone had any dealings with or know anything about the 
 hosting company
 Tansinc Network?
 
 Thanks,
 Erik
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Reporting Code red

2001-08-20 Thread Martin Blackstone

Try [EMAIL PROTECTED]

-Original Message-
From: Luke Brumbaugh [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 11:39 AM
To: NT System Admin Issues
Cc: Rick Smetzer
Subject: Reporting Code red


Is there a website, or agency or whatever that you can report Code Red
web hits to. We are getting hit from Concentric, and msn and I do have
the ipaddress' It's not a problem here, just irritating.


Luke L. Brumbaugh
System Administrator,MCSE
Ultryx Corporation
mailto:[EMAIL PROTECTED]

Enterprise Channel Management Software for Manufacturers 
Visit us at http://www.ultryx.com 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: End of My Rope with WINS

2001-08-20 Thread Roger Seielstad

TO be more precise - it will work with clients alternately registering, but
every additional registration point makes it exponentially uglier.

--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Jay Kulsh [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 3:47 PM
 To: NT System Admin Issues
 Subject: Re: End of My Rope with WINS
 
 
 You wrote -
 
 All clients and other domain controllers are set up using 
 their local wins
 server as primary and the remote wins server as secondary. Is 
 this OK?
 
 According to Roger S and many others, it is not Ok. You 
 should have same
 WINS server as primary for all subnets. Secondary server can be local
 servers. Primary server would then only push, reducing the 
 chance of any
 corruption. (This way WINS configuration approximates DNS 
 configuration.)
 
 Jay
 ___
 Jay Kulsh
 
 
 - Original Message -
 From: Scott Erwin [EMAIL PROTECTED]
 To: NT System Admin Issues [EMAIL PROTECTED]
 Sent: Friday, August 17, 2001 11:39 AM
 Subject: End of My Rope with WINS
 
 
 
  NT4 Network. I have two buildings, each on their own 
 network connected by
  fiber. Pinging with ip address and netbios name between 
 networks is no
  problem and searching for computers using netbios names 
 works too. There
 is
  a WINS server on each network configured as push and pull 
 partners of each
  other. Each WINS server is its own Primary and Secondary. 
 Browsing with
  Network Neighborhood is intermittent. Sometimes Network A 
 sees Network B,
  sometimes it can't (and vice versa). I've never had 
 simultaneous browsing.
 I
  have never gotten a WINS error in the event viewer. I do 
 get successful
  push/pull entries.
 
  All clients and other domain controllers are set up using 
 their local wins
  server as primary and the remote wins server as secondary. 
 Is this OK?
 
  All the required entries seem to be there [1C], [1Eh], [OOh], etc...
 
  I don't know what else to check for, and am close to deleting both
 databases
  and starting over.
 
 
  Any advice?
  Scott
 
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Browser/WINS issues

2001-08-20 Thread Joe Casale









Your running AD-2k, what os r your clients
using?

Why do you have WINS? WINS
sucks.

More info please

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:16
PM
To: NT System Admin Issues
Subject: Browser/WINS issues





Hello everyone,











i have a question that i have been
fighting with here. i have 2 AD controllers on our network in the same
vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for
dhcp across the different subnets). i am having browser issues. is
there any way to have just one of the nics in the multihomed machine use the
browser service? i am trying to have the domain master browser on the
multihomed machine on 1 of the nics (vlan 30). the backup browser i want
on the 2nd controller (not multihomed - vlan 30). what is the best way to
configure this? anyone been here before? thanks for any input in
advance.











everyone can see vlan 30 just to
note.











Bob Chyka



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







RE: Browser/WINS issues

2001-08-20 Thread Flanagan, Kevin
Title: Message



I 
don't wonder that you have browser problems! Do you have any way to do 
what is the router equivalent of setting the BOOTP/DHCP helper address with 
these switches? If you do you can bring the multi homed down to one 
NIC. I bet your browser problems would get better.


+---+ 
Kevin Flanagan 
C/S Planning Engineer 
III I/T 
Implementation Department Branch Banking  Trust Company 3261 Atlantic Avenue, Suite 116 
MC: 172-85-01-00 
Raleigh, NC 
27604 Voice: 
919-716-6209 

  
  -Original Message-From: Bob Chyka 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:16 
  PMTo: NT System Admin IssuesSubject: Browser/WINS 
  issues
  Hello everyone,
  
  i have a question that i have been fighting with 
  here. i have 2 AD controllers on our network in the same vlan. one 
  of the controllers is multihomed (5 nics - 1 for each vlan for dhcp across the 
  different subnets). i am having browser issues. is there any way 
  to have just one of the nics in the multihomed machine use the browser 
  service? i am trying to have the domain master browser on the multihomed 
  machine on 1 of the nics (vlan 30). the backup browser i want on the 2nd 
  controller (not multihomed - vlan 30). what is the best way to configure 
  this? anyone been here before? thanks for any input in 
  advance.
  
  everyone can see vlan 30 just to 
  note.
  
  Bob 
  Chykahttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Browser/WINS issues

2001-08-20 Thread Joe Casale









NO doubt, I feel for ya!

Try to unbind all except one of the
TCP/IP subnet transport bindings from the wks service.

I saw this in a q article somewhere,
looking for it now!

Restart your browser service.

Definitely a complicated
setup?

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:29 PM
To: NT System Admin Issues
Subject: Re: Browser/WINS issues





clients are w2k pro, nt 4
workstation, and windows 98 unfortunately. i know wins sucks it is just
there for the win 98 clients..







- Original Message - 





From: Joe Casale 





To: NT System Admin Issues 





Sent: Monday, August 20, 2001 3:15 PM





Subject: RE:
Browser/WINS issues









Your running AD-2k, what
os r your clients using?

Why do you have WINS?
WINS sucks.

More info please

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:16 PM
To: NT System Admin Issues
Subject: Browser/WINS issues





Hello everyone,











i have a question that i have been
fighting with here. i have 2 AD controllers on our network in the same
vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for
dhcp across the different subnets). i am having browser issues. is
there any way to have just one of the nics in the multihomed machine use the
browser service? i am trying to have the domain master browser on the
multihomed machine on 1 of the nics (vlan 30). the backup browser i want
on the 2nd controller (not multihomed - vlan 30). what is the best way to
configure this? anyone been here before? thanks for any input in
advance.











everyone can see vlan 30 just to
note.











Bob Chyka



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







RE: Browser/WINS issues

2001-08-20 Thread Joe Casale









Yup, thats workstation service.

Just a question, but why did you choose
that setup?

Good luck!

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:36 PM
To: NT System Admin Issues
Subject: Re: Browser/WINS issues





thanks, i will look for the q
article also. is that unbind from the workstation service? yes very
complicated setup...thanks for any help ill try to work through it..







- Original Message - 





From: Joe Casale 





To: NT System Admin Issues 





Sent: Monday, August 20, 2001 3:22 PM





Subject: RE:
Browser/WINS issues









NO
doubt, I feel for ya!

Try to
unbind all except one of the TCP/IP subnet transport bindings from the wks
service.

I saw
this in a q article somewhere, looking for it now!

Restart
your browser service.

Definitely
a complicated setup?

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:29 PM
To: NT System Admin Issues
Subject: Re: Browser/WINS issues





clients are w2k pro, nt 4
workstation, and windows 98 unfortunately. i know wins sucks it is just
there for the win 98 clients..







- Original Message - 





From: Joe Casale 





To: NT System Admin Issues 





Sent: Monday, August 20, 2001 3:15 PM





Subject: RE:
Browser/WINS issues









Your
running AD-2k, what os r your clients using?

Why do
you have WINS? WINS sucks.

More
info please

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:16 PM
To: NT System Admin Issues
Subject: Browser/WINS issues





Hello everyone,











i have a question that i have been
fighting with here. i have 2 AD controllers on our network in the same
vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for
dhcp across the different subnets). i am having browser issues. is
there any way to have just one of the nics in the multihomed machine use the
browser service? i am trying to have the domain master browser on the
multihomed machine on 1 of the nics (vlan 30). the backup browser i want
on the 2nd controller (not multihomed - vlan 30). what is the best way to
configure this? anyone been here before? thanks for any input in advance.











everyone can see vlan 30 just to
note.











Bob Chyka



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







Re: Browser/WINS issues

2001-08-20 Thread Bob Chyka



it started out as a very basic setup with one nic, 
then we got all new infrastructure equipment and it was a quick fix to get dhcp 
up and running in our newly defined vlans. where can i unbind the cards 
from the workstation service?

thanks!

  - Original Message - 
  From: 
  Joe Casale 
  
  To: NT System Admin Issues 
  
  Sent: Monday, August 20, 2001 3:33 
  PM
  Subject: RE: Browser/WINS issues
  
  
  Yup, thats 
  workstation service.
  Just a question, but 
  why did you choose that setup?
  Good 
  luck!
  jlc
  
  -Original 
  Message-From: Bob Chyka 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 
  2001 1:36 
  PMTo: NT System Admin IssuesSubject: Re: Browser/WINS 
  issues
  
  
  thanks, i will look for the q 
  article also. is that unbind from the workstation service? yes 
  very complicated setup...thanks for any help ill try to work through 
  it..
  

- Original Message - 


From: Joe Casale 


To: NT System Admin 
Issues 

Sent: 
Monday, August 20, 
2001 3:22 
PM

Subject: RE: 
Browser/WINS issues


NO 
doubt, I feel for ya!
Try 
to unbind all except one of the TCP/IP subnet transport bindings from the 
wks service.
I saw 
this in a q article somewhere, looking for it 
now!
Restart your 
browser service.
Definitely a 
complicated setup?
jlc

-Original 
Message-From: Bob 
Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 
2001 1:29 
PMTo: NT System Admin IssuesSubject: Re: Browser/WINS 
issues


clients are w2k pro, nt 4 
workstation, and windows 98 unfortunately. i know wins sucks it is 
just there for the win 98 clients..

  
  - Original Message - 
  
  
  From: Joe Casale 
  
  
  To: NT System Admin 
  Issues 
  
  Sent: 
  Monday, August 
  20, 2001 3:15 
  PM
  
  Subject: RE: 
  Browser/WINS issues
  
  
  Your 
  running AD-2k, what os r your clients using?
  Why 
  do you have WINS? WINS sucks.
  More 
  info please
  jlc
  
  -Original 
  Message-From: Bob 
  Chyka [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 
  2001 1:16 
  PMTo: NT System Admin 
  IssuesSubject: 
  Browser/WINS issues
  
  
  Hello 
  everyone,
  
  
  
  i have a question 
  that i have been fighting with here. i have 2 AD controllers on our 
  network in the same vlan. one of the controllers is multihomed (5 
  nics - 1 for each vlan for dhcp across the different subnets). i am 
  having browser issues. is there any way to have just one of the nics 
  in the multihomed machine use the browser service? i am trying to 
  have the domain master browser on the multihomed machine on 1 of the nics 
  (vlan 30). the backup browser i want on the 2nd controller (not 
  multihomed - vlan 30). what is the best way to configure this? 
  anyone been here before? thanks for any input in 
  advance.
  
  
  
  everyone can see 
  vlan 30 just to note.
  
  
  
  Bob 
  Chyka
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: OT - Macromedia's pricing strategy?

2001-08-20 Thread Jay Woody

So you have to also buy the Site license and then you still have to pay $500 more for 
purchasing 3 licenses at one time?  Seems like a deal.  :)  Does the Site License 
maybe come bundled in the 3-pack?  Is that the difference?

JayW

 [EMAIL PROTECTED] 08/20/01 12:24PM 
The single user license (which is an ADDITION to the Site license) would be
useless to you without the original site purchase.

William


-Original Message-
From: Jay Woody [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 10:22 AM
To: NT System Admin Issues
Subject: OT - Macromedia's pricing strategy?


I just got a bulletin that Macromedia released some new something.  However,
the interesting part to me was their pricing strategy.  :)

 ~~
 Pricing
 ~~
 
 Pricing starts at just $1999 for a 3-user version. Add a
 single user for $499.
 
 For more details on pricing, visit:
 http://www.macromedia.com/go/sitespring_esd_pricing 
 

So, I can pay $1,500 fro 3 individual licenses or you will bundle them for
me and I will save . . . oh, no, I will actually lose $500.  Sounds like a
great deal!  I'm sure Marc at eeye will be interested to see if this works.
:)  

JayW


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: End of My Rope with WINS - Solved

2001-08-20 Thread Scott Erwin

It was a browse master issue. I noticed some unneeded entries in the
Computer Browser service properties. Took them out. Things look good now.
Someday I'll switch everyone to use the same primary WINS server.

Scott

-Original Message-
From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 2:53 PM
To: NT System Admin Issues
Subject: RE: End of My Rope with WINS


Well, you said you had no problem with netbios name resolution. So I would
have to say that your problem isn't with your WINS implementation but
perhaps with your Browsers. To browse the network neighborhood the machine
has to be able to determine and query a machine that contains the browse
list, be that the Domain Master Browser or the backup browser for the
segment. This article might be of some assistance. You should be able to
look through the Wins Database to determine which computers are currently
acting as your browsers.

http://support.microsoft.com


Hope that helps.

-Original Message-
From: Scott Erwin [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 11:47 AM
To: NT System Admin Issues
Subject: RE: End of My Rope with WINS

DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to 0x8.


-Original Message-
From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 2:43 PM
To: NT System Admin Issues
Subject: RE: End of My Rope with WINS


Are your clients set up using DHCP or manually assigned configuration?

-Original Message-
From: Scott Erwin [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 11:39 AM
To: NT System Admin Issues
Subject: End of My Rope with WINS

NT4 Network. I have two buildings, each on their own network connected by
fiber. Pinging with ip address and netbios name between networks is no
problem and searching for computers using netbios names works too. There is
a WINS server on each network configured as push and pull partners of each
other. Each WINS server is its own Primary and Secondary. Browsing with
Network Neighborhood is intermittent. Sometimes Network A sees Network B,
sometimes it can't (and vice versa). I've never had simultaneous browsing. I
have never gotten a WINS error in the event viewer. I do get successful
push/pull entries.

All clients and other domain controllers are set up using their local wins
server as primary and the remote wins server as secondary. Is this OK?

All the required entries seem to be there [1C], [1Eh], [OOh], etc...

I don't know what else to check for, and am close to deleting both databases
and starting over.


Any advice?
Scott



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: End of My Rope with WINS - Solved

2001-08-20 Thread Bob Chyka

what did you use to look at the computer browser properties?
- Original Message -
From: Scott Erwin [EMAIL PROTECTED]
To: NT System Admin Issues [EMAIL PROTECTED]
Sent: Monday, August 20, 2001 3:46 PM
Subject: RE: End of My Rope with WINS - Solved


 It was a browse master issue. I noticed some unneeded entries in the
 Computer Browser service properties. Took them out. Things look good now.
 Someday I'll switch everyone to use the same primary WINS server.

 Scott

 -Original Message-
 From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 2:53 PM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS


 Well, you said you had no problem with netbios name resolution. So I would
 have to say that your problem isn't with your WINS implementation but
 perhaps with your Browsers. To browse the network neighborhood the machine
 has to be able to determine and query a machine that contains the browse
 list, be that the Domain Master Browser or the backup browser for the
 segment. This article might be of some assistance. You should be able to
 look through the Wins Database to determine which computers are currently
 acting as your browsers.

 http://support.microsoft.com


 Hope that helps.

 -Original Message-
 From: Scott Erwin [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 11:47 AM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS

 DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to 0x8.


 -Original Message-
 From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 2:43 PM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS


 Are your clients set up using DHCP or manually assigned configuration?

 -Original Message-
 From: Scott Erwin [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 11:39 AM
 To: NT System Admin Issues
 Subject: End of My Rope with WINS

 NT4 Network. I have two buildings, each on their own network connected by
 fiber. Pinging with ip address and netbios name between networks is no
 problem and searching for computers using netbios names works too. There
is
 a WINS server on each network configured as push and pull partners of each
 other. Each WINS server is its own Primary and Secondary. Browsing with
 Network Neighborhood is intermittent. Sometimes Network A sees Network B,
 sometimes it can't (and vice versa). I've never had simultaneous browsing.
I
 have never gotten a WINS error in the event viewer. I do get successful
 push/pull entries.

 All clients and other domain controllers are set up using their local wins
 server as primary and the remote wins server as secondary. Is this OK?

 All the required entries seem to be there [1C], [1Eh], [OOh], etc...

 I don't know what else to check for, and am close to deleting both
databases
 and starting over.


 Any advice?
 Scott



 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: OT - Macromedia's pricing strategy?

2001-08-20 Thread Lefkovics, William

Sitespring is a team collaboration product.

It requires $1999 for a 3 user license, then $499 for *additional* single
users.

What am I missing?


-Original Message-
From: Jay Woody [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 11:45 AM
To: NT System Admin Issues
Subject: RE: OT - Macromedia's pricing strategy?


So you have to also buy the Site license and then you still have to pay $500
more for purchasing 3 licenses at one time?  Seems like a deal.  :)  Does
the Site License maybe come bundled in the 3-pack?  Is that the difference?

JayW

 [EMAIL PROTECTED] 08/20/01 12:24PM 
The single user license (which is an ADDITION to the Site license) would be
useless to you without the original site purchase.

William


-Original Message-
From: Jay Woody [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 10:22 AM
To: NT System Admin Issues
Subject: OT - Macromedia's pricing strategy?


I just got a bulletin that Macromedia released some new something.  However,
the interesting part to me was their pricing strategy.  :)

 ~~
 Pricing
 ~~
 
 Pricing starts at just $1999 for a 3-user version. Add a
 single user for $499.
 
 For more details on pricing, visit:
 http://www.macromedia.com/go/sitespring_esd_pricing 
 

So, I can pay $1,500 fro 3 individual licenses or you will bundle them for
me and I will save . . . oh, no, I will actually lose $500.  Sounds like a
great deal!  I'm sure Marc at eeye will be interested to see if this works.
:)  

JayW


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Browser/WINS issues

2001-08-20 Thread Joe Casale









Heh,

Dont quote me, but fire up
regedt32, and got to HKLM/System/CurrentControlSet/Services/LanmanWorkstation/Linkage/Bind



Look in there, does it seem right??



Backup time, is it current?

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:48 PM
To: NT System Admin Issues
Subject: Re: Browser/WINS issues





it started out as a very basic setup
with one nic, then we got all new infrastructure equipment and it was a quick
fix to get dhcp up and running in our newly defined vlans. where can i
unbind the cards from the workstation service?











thanks!







- Original Message - 





From: Joe Casale 





To: NT System Admin Issues 





Sent: Monday, August 20, 2001 3:33 PM





Subject: RE:
Browser/WINS issues









Yup, thats
workstation service.

Just a question, but why
did you choose that setup?

Good luck!

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:36 PM
To: NT System Admin Issues
Subject: Re: Browser/WINS issues





thanks, i will look for the q
article also. is that unbind from the workstation service? yes very
complicated setup...thanks for any help ill try to work through it..







- Original Message - 





From: Joe Casale 





To: NT System Admin Issues 





Sent: Monday, August 20, 2001 3:22 PM





Subject: RE:
Browser/WINS issues









NO
doubt, I feel for ya!

Try to
unbind all except one of the TCP/IP subnet transport bindings from the wks
service.

I saw
this in a q article somewhere, looking for it now!

Restart
your browser service.

Definitely
a complicated setup?

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:29 PM
To: NT System Admin Issues
Subject: Re: Browser/WINS issues





clients are w2k pro, nt 4 workstation,
and windows 98 unfortunately. i know wins sucks it is just there for the
win 98 clients..







- Original Message - 





From: Joe Casale 





To: NT System Admin Issues 





Sent: Monday, August 20, 2001 3:15 PM





Subject: RE:
Browser/WINS issues









Your
running AD-2k, what os r your clients using?

Why do
you have WINS? WINS sucks.

More info
please

jlc



-Original Message-
From: Bob Chyka
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:16 PM
To: NT System Admin Issues
Subject: Browser/WINS issues





Hello everyone,











i have a question that i have been
fighting with here. i have 2 AD controllers on our network in the same
vlan. one of the controllers is multihomed (5 nics - 1 for each vlan for
dhcp across the different subnets). i am having browser issues. is
there any way to have just one of the nics in the multihomed machine use the
browser service? i am trying to have the domain master browser on the
multihomed machine on 1 of the nics (vlan 30). the backup browser i want
on the 2nd controller (not multihomed - vlan 30). what is the best way to
configure this? anyone been here before? thanks for any input in
advance.











everyone can see vlan 30 just to
note.











Bob Chyka



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







RE: End of My Rope with WINS - Solved

2001-08-20 Thread Joe Casale

RegEdit I think?
Don't know where else config is stored for that service.
jlc

-Original Message-
From: Bob Chyka [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 1:56 PM
To: NT System Admin Issues
Subject: Re: End of My Rope with WINS - Solved

what did you use to look at the computer browser properties?
- Original Message -
From: Scott Erwin [EMAIL PROTECTED]
To: NT System Admin Issues [EMAIL PROTECTED]
Sent: Monday, August 20, 2001 3:46 PM
Subject: RE: End of My Rope with WINS - Solved


 It was a browse master issue. I noticed some unneeded entries in the
 Computer Browser service properties. Took them out. Things look good
now.
 Someday I'll switch everyone to use the same primary WINS server.

 Scott

 -Original Message-
 From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 2:53 PM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS


 Well, you said you had no problem with netbios name resolution. So I
would
 have to say that your problem isn't with your WINS implementation but
 perhaps with your Browsers. To browse the network neighborhood the
machine
 has to be able to determine and query a machine that contains the
browse
 list, be that the Domain Master Browser or the backup browser for the
 segment. This article might be of some assistance. You should be able
to
 look through the Wins Database to determine which computers are
currently
 acting as your browsers.

 http://support.microsoft.com


 Hope that helps.

 -Original Message-
 From: Scott Erwin [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 11:47 AM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS

 DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to
0x8.


 -Original Message-
 From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 2:43 PM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS


 Are your clients set up using DHCP or manually assigned configuration?

 -Original Message-
 From: Scott Erwin [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 11:39 AM
 To: NT System Admin Issues
 Subject: End of My Rope with WINS

 NT4 Network. I have two buildings, each on their own network connected
by
 fiber. Pinging with ip address and netbios name between networks is no
 problem and searching for computers using netbios names works too.
There
is
 a WINS server on each network configured as push and pull partners of
each
 other. Each WINS server is its own Primary and Secondary. Browsing
with
 Network Neighborhood is intermittent. Sometimes Network A sees Network
B,
 sometimes it can't (and vice versa). I've never had simultaneous
browsing.
I
 have never gotten a WINS error in the event viewer. I do get
successful
 push/pull entries.

 All clients and other domain controllers are set up using their local
wins
 server as primary and the remote wins server as secondary. Is this OK?

 All the required entries seem to be there [1C], [1Eh], [OOh], etc...

 I don't know what else to check for, and am close to deleting both
databases
 and starting over.


 Any advice?
 Scott



 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: End of My Rope with WINS - Solved

2001-08-20 Thread Scott Erwin

Control Panel / Network Icon / Services Tab / Select Computer Browser -
Properties.
I didn't know about this until I saw a Q article Q137003.

Scott

-Original Message-
From: Joe Casale [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:51 PM
To: NT System Admin Issues
Subject: RE: End of My Rope with WINS - Solved


RegEdit I think?
Don't know where else config is stored for that service.
jlc

-Original Message-
From: Bob Chyka [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 1:56 PM
To: NT System Admin Issues
Subject: Re: End of My Rope with WINS - Solved

what did you use to look at the computer browser properties?
- Original Message -
From: Scott Erwin [EMAIL PROTECTED]
To: NT System Admin Issues [EMAIL PROTECTED]
Sent: Monday, August 20, 2001 3:46 PM
Subject: RE: End of My Rope with WINS - Solved


 It was a browse master issue. I noticed some unneeded entries in the
 Computer Browser service properties. Took them out. Things look good
now.
 Someday I'll switch everyone to use the same primary WINS server.

 Scott

 -Original Message-
 From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 2:53 PM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS


 Well, you said you had no problem with netbios name resolution. So I
would
 have to say that your problem isn't with your WINS implementation but
 perhaps with your Browsers. To browse the network neighborhood the
machine
 has to be able to determine and query a machine that contains the
browse
 list, be that the Domain Master Browser or the backup browser for the
 segment. This article might be of some assistance. You should be able
to
 look through the Wins Database to determine which computers are
currently
 acting as your browsers.

 http://support.microsoft.com


 Hope that helps.

 -Original Message-
 From: Scott Erwin [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 11:47 AM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS

 DHCP. I've set 044 WINS/NBNS servers and 046 WINS/NBT Node Type to
0x8.


 -Original Message-
 From: Brandon Bristow [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 2:43 PM
 To: NT System Admin Issues
 Subject: RE: End of My Rope with WINS


 Are your clients set up using DHCP or manually assigned configuration?

 -Original Message-
 From: Scott Erwin [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 11:39 AM
 To: NT System Admin Issues
 Subject: End of My Rope with WINS

 NT4 Network. I have two buildings, each on their own network connected
by
 fiber. Pinging with ip address and netbios name between networks is no
 problem and searching for computers using netbios names works too.
There
is
 a WINS server on each network configured as push and pull partners of
each
 other. Each WINS server is its own Primary and Secondary. Browsing
with
 Network Neighborhood is intermittent. Sometimes Network A sees Network
B,
 sometimes it can't (and vice versa). I've never had simultaneous
browsing.
I
 have never gotten a WINS error in the event viewer. I do get
successful
 push/pull entries.

 All clients and other domain controllers are set up using their local
wins
 server as primary and the remote wins server as secondary. Is this OK?

 All the required entries seem to be there [1C], [1Eh], [OOh], etc...

 I don't know what else to check for, and am close to deleting both
databases
 and starting over.


 Any advice?
 Scott



 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: IIS stopping without reason





Hello,


My IIS4 server has been behaving strangely for the past four days. It is not a mission-critical unit (yet) as it runs only the users' default home page when they start IE though it was supposed to go live in a week as the IIS for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at random and hit Start. Nothing happens. I click Start again after a few seconds. The service in question will start and function normally, however anywhere from 5 to 15 minutes later, it'll stop again. There is no message in the log file other than a notice in the Security log that the IIS account logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what keywords do you use to describe this when there's no message in the log) to no avail. Anyone out there with a suggestion ?

Eric Peeters
Network Administrator
TexLoc Ltd



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Joe Casale
Title: IIS stopping without reason









Hold on dude, your OS is not patched after
sp6a!

And Exchange is 5.5 SP1.

WTF!

Is this box on the net?

No wonder you got probs!

jlc



-Original Message-
From: Eric Peeters
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 2:09
PM
To: NT System Admin Issues
Subject: IIS stopping without
reason



Hello, 

My IIS4 server has been behaving strangely for the
past four days. It is not a mission-critical unit (yet) as it runs only the
users' default home page when they start IE though it was supposed to go live
in a week as the IIS for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I
click on one of them at random and hit Start. Nothing happens. I click Start
again after a few seconds. The service in question will start and function
normally, however anywhere from 5 to 15 minutes later, it'll stop again. There
is no message in the log file other than a notice in the Security log that the
IIS account logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server
(no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what
keywords do you use to describe this when there's no message in the log) to no
avail. Anyone out there with a suggestion ?

Eric Peeters 
Network
Administrator 
TexLoc
Ltd 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







RE: IIS stopping without reason

2001-08-20 Thread Bill Kuhn - MCSE

Welcome to Code Red.

-Original Message-
From: Eric Peeters [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:09 PM
To: NT System Admin Issues
Subject: IIS stopping without reason



Hello, 

My IIS4 server has been behaving strangely for the past four days. It is
not a mission-critical unit (yet) as it runs only the users' default
home page when they start IE though it was supposed to go live in a week
as the IIS for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them
at random and hit Start. Nothing happens. I click Start again after a
few seconds. The service in question will start and function normally,
however anywhere from 5 to 15 minutes later, it'll stop again. There is
no message in the log file other than a notice in the Security log that
the IIS account logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and
Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what keywords do you use
to describe this when there's no message in the log) to no avail. Anyone
out there with a suggestion ?

Eric Peeters 
Network Administrator 
TexLoc Ltd 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: IIS stopping without reason



It can't be Code 
Red... Until that machine actually goes live, port 80 is blocked to outside 
traffic (and I am toying with the idea of not using port 80 when it goes live 
anyways), besides the Index Server service is disabled. Not patched (not my 
choice, people higher up make decisions I can't argue with) doesn't mean totally 
abandonned. I update the McAfee virus scan definition list whenever a new comes 
out, I have GroupShield running on Exchange (updated just as lovingly), I ran 
three all-files virus checks, on top of the on-access scan, since having this 
problem, I've rebooted twice (which should have taken care of Code Red if it had 
been an issue) and I've also ran the Code Red scanner, all to no 
avail.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Kevin Lundy 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  The 
  "no patch" is the clue. My betting money is on Code Red - you have heard 
  the news the past month?
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 
PMTo: NT System Admin IssuesSubject: IIS stopping 
without reason
Hello, 
My IIS4 server has been behaving strangely for 
the past four days. It is not a mission-critical unit (yet) as it runs only 
the users' default home page when they start IE though it was supposed to go 
live in a week as the IIS for OWA. On to the problem...
All IIS services (NNTP, FTP, HTTP) are stopped. I 
click on one of them at random and hit Start. Nothing happens. I click Start 
again after a few seconds. The service in question will start and function 
normally, however anywhere from 5 to 15 minutes later, it'll stop again. 
There is no message in the log file other than a notice in the Security log 
that the IIS account logged in and out at start/stop.
Besides IIS, that box is running Win NT 4 SP6a 
Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the 
BDC.
I've roamed through the Microsoft KB (not easy, 
what keywords do you use to describe this when there's no message in the 
log) to no avail. Anyone out there with a suggestion ?
Eric Peeters Network Administrator TexLoc 
Ltd 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





Strange time counters when copying files

2001-08-20 Thread Andrew Bancroft

I am trying to copy priv and pub databases from one W2k server SP2,
Exchange 5.5, to another folder on a different W2k server SP2 across the
network, just as a back up to replay into another test server. The pub
database is 5.1 G and seems to copy OK until in gets down to the last few
seconds of the timeline and then suddenly it says there is approx 756437
minutes left, this then ramdomly changes up and down to say eg. 695000,
then 796567 and just carries on doing this.
Anybody got any ideas ? - I don't think it is to do with exchange so I put
it on this group.
Thanks.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: Browser/WINS issues

2001-08-20 Thread Ernest . Dinda


MS does not recommend multihoing the master browser per various technet
articles. I found an article that gave a workaround for NT4. Later I found an
article that stated the PDC and master browser cannot be multihomed. Go
figure. Anyway, I found a number of Q articles that might help you so here is
a list:
- q221210, q133241 (more NT4 centric) q181774, q191611 (include W2K in their
discussions)

Article q191611 states the following:
  Domain Master Browser Issues - PDC
  --

  NOTE: The domain master browser in Windows 2000 is the PDC FSMO owner. The
  PDC
  cannot be multihomed for there to be a single domain-wide list of servers
  because the browser maintains a separate list of servers for each network
  adapter and protocol combination. If the PDC is multihomed, there are two
  partial cumulative lists built for the domain, and no single computer in the
  network can access the full list of servers in the domain. Each master
  browser
  can retrieve the list of servers from only one of the PDC's network
  adapters.
  The list of servers that the PDC builds on each network adapter is not
  deterministic because it depends on which network adapter the PDC uses to
  contact the master browser.

  Master Browser Issues
  -

  After the master browser obtains a list of servers in the domain and the
  list of
  additional domain names from the PDC, it sends a MasterAnnouncement frame to
  the
  PDC. This signals the PDC to retrieve a list of servers and workgroup
  announcements from the master browser.

  Because all NetBIOS sessions between any two servers over TCP/IP can only
  reside
  on a single IP connection, there is no way for the PDC to maintain more than
  one
  IP address for the master browser's computer name. This means that any
  server
  that is a master browser cannot be multihomed because the PDC will contact
  only
  the master browser on one of its network adapters.

  If a multihomed server is a master browser on both network adapters, the PDC
  collects only the hosts discovered by the network adapter that it is
  connected
  to, and all other servers and domain names discovered on the other network
  adapter are lost to the rest of the domain. If a multihomed server is a
  master
  browser on one network adapter and a backup browser or a non-browser by
  election
  or the UnboundBindings setting on the other network adapter, there is no way
  to
  guarantee that the PDC will connect to the master browser's network adapter.
  If
  the master browser has two network adapters, the odds of connecting to the
  correct interface are fifty percent. If the wrong network adapter is
  selected,
  all servers and domain names collected by this master browser are
  unavailable to
  the rest of the domain.

  Therefore, for the PDC to centrally collect all server and domain names, all
  master browsers must not be multihomed.

  Backup And Potential Browser Issues
  ---

  Because browser roles are determined by election, no server that can be a
  master
  browser can be multihomed. When a client requests a browse list, it issues a
  GetBackupListRequest, and the response contains a list of computer names.
  The
  client then establishes a session to one of the computer names in the
  response
  frame. If the network adapter chosen is not running the browser service, the
  client does not receive a browse list. Therefore, no backup browsers can be
  multihomed. If the network adapter selected is a browser, the list received
  may
  contain servers collected by a master browser on another segment, thereby
  removing the deterministic nature of the browser infrastructure.


Now the article then goes on to give some workarounds. I guess I would go with
q191611 and what it states. From my personnal experience I never allowed
multihomed servers to become master browsers or even potential browsers, I
would either edit the registry to disallow that and/or stop the computer
browser service on them.

Thanks



   
   
Bob Chyka
   
bchyka@medaiTo: NT System Admin Issues  
   
lle.edu [EMAIL PROTECTED]   
   
 cc:   
   
08/20/2001   Subject: Re: Browser/WINS issues  
   
02:48 PM   
   
Please 
   
respond to

Re: IIS stopping without reason

2001-08-20 Thread Jay Woody

Wow, your BDC huh.  What was the TCP address again?  I will download the .sam and mail 
you your admin password as quickly as l0phtcrack can crack it.  :)

I'm sure everyone has already told you that this is likely Code Red.  If this is on 
the outside, I would unplug it, quick and re-build it.

JayW

 [EMAIL PROTECTED] 08/20/01 03:08PM 
Hello,

My IIS4 server has been behaving strangely for the past four days. It is not
a mission-critical unit (yet) as it runs only the users' default home page
when they start IE though it was supposed to go live in a week as the IIS
for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at
random and hit Start. Nothing happens. I click Start again after a few
seconds. The service in question will start and function normally, however
anywhere from 5 to 15 minutes later, it'll stop again. There is no message
in the log file other than a notice in the Security log that the IIS account
logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and
Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what keywords do you use to
describe this when there's no message in the log) to no avail. Anyone out
there with a suggestion ?

Eric Peeters
Network Administrator
TexLoc Ltd



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: IIS stopping without reason




  -Original Message-From: Joe Casale 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:07 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  
  Hold on dude, your OS 
  is not patched after sp6a![EP]To quote someone who shall remain 
  nameless (at least he doesn't subscribe to the list, or so I hope) "Stability 
  is the only issue we have to worry about, we can always fix security later if 
  necessary." That I don't quite agree with that statement doesn't make much of 
  a 
difference...
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Joe Casale
Title: IIS stopping without reason









Regardless of codered,
the list of bug fixes from your state till now is huge. If you called PSS and
told them your HF/SP state, they would say upgrade, and call back Im
guessing! As for your Mcafee, why dont you
schedule Auto updates! Eliminates you maybe not knowing about a virus after its to late!



Gotta love management like that, sometimes I
think they do stuff like that just to make sure they got a thumb in the pie,
even though they dont know S@$t anyway. Tellm if they want the systems running right, let
you runem right. If they want it to remain
like that, make no changes!



I have never even seen an E55sp1 box for
years!



jlc



-Original Message-
From: Eric Peeters
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 2:24
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason





It can't be Code Red... Until that
machine actually goes live, port 80 is blocked to outside traffic (and I am
toying with the idea of not using port 80 when it goes live anyways), besides
the Index Server service is disabled. Not patched (not my choice, people higher
up make decisions I can't argue with) doesn't mean totally abandonned. I update
the McAfee virus scan definition list whenever a new comes out, I have
GroupShield running on Exchange (updated just as lovingly), I ran three
all-files virus checks, on top of the on-access scan, since having this
problem, I've rebooted twice (which should have taken care of Code Red if it
had been an issue) and I've also ran the Code Red scanner, all to no avail.



Eric Peeters 
Network
Administrator 
TexLoc
Ltd 



-Original Message-
From: Kevin Lundy
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:06
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason



The no patch
is the clue. My betting money is on Code Red - you have heard the news
the past month?





-Original Message-
From: Eric Peeters
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 4:09
PM
To: NT System Admin Issues
Subject: IIS stopping without
reason

Hello, 

My IIS4 server has been behaving strangely for the
past four days. It is not a mission-critical unit (yet) as it runs only the
users' default home page when they start IE though it was supposed to go live
in a week as the IIS for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I
click on one of them at random and hit Start. Nothing happens. I click Start
again after a few seconds. The service in question will start and function
normally, however anywhere from 5 to 15 minutes later, it'll stop again. There
is no message in the log file other than a notice in the Security log that the
IIS account logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server
(no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what
keywords do you use to describe this when there's no message in the log) to no
avail. Anyone out there with a suggestion ?

Eric Peeters 
Network
Administrator 
TexLoc
Ltd 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







RE: IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: Message



No, it's a perfectly 
normal boot, no red flag at all. All other servers are at least similarly 
protected as this one, or as badly, if you want to argue that 
point...
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Erik Sojka 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:25 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  Perhaps another internal box is infected. Is there anything from 
  the IIS logs from the times when the box goes belly up?
  

-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
It can't be Code 
Red... Until that machine actually goes live, port 80 is blocked to outside 
traffic (and I am toying with the idea of not using port 80 when it goes 
live anyways), besides the Index Server service is disabled. Not patched 
(not my choice, people higher up make decisions I can't argue with) doesn't 
mean totally abandonned. I update the McAfee virus scan definition list 
whenever a new comes out, I have GroupShield running on Exchange (updated 
just as lovingly), I ran three all-files virus checks, on top of the 
on-access scan, since having this problem, I've rebooted twice (which should 
have taken care of Code Red if it had been an issue) and I've also ran the 
Code Red scanner, all to no avail.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Kevin Lundy 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  3:06 PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  The "no patch" is the clue. My betting money is on Code Red - 
  you have heard the news the past month?
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
4:09 PMTo: NT System Admin IssuesSubject: IIS 
stopping without reason
Hello, 
My IIS4 server has been behaving strangely 
for the past four days. It is not a mission-critical unit (yet) as it 
runs only the users' default home page when they start IE though it was 
supposed to go live in a week as the IIS for OWA. On to the 
problem...
All IIS services (NNTP, FTP, HTTP) are 
stopped. I click on one of them at random and hit Start. Nothing 
happens. I click Start again after a few seconds. The service in 
question will start and function normally, however anywhere from 5 to 15 
minutes later, it'll stop again. There is no message in the log file 
other than a notice in the Security log that the IIS account logged in 
and out at start/stop.
Besides IIS, that box is running Win NT 4 
SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as 
the BDC.
I've roamed through the Microsoft KB (not 
easy, what keywords do you use to describe this when there's no message 
in the log) to no avail. Anyone out there with a suggestion ?
Eric Peeters Network Administrator TexLoc 
Ltd 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Martin Blackstone
Title: Message



In 
this case, screw the higher ups. They have no clue, and they will have no clue 
if you patch it either. Just because someone is above you does not have to mean 
you put up with sheer idiocy.Patch it NOW.

  
  -Original Message-From: Erik Sojka 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  Perhaps another internal box is infected. Is there anything from 
  the IIS logs from the times when the box goes belly up?
  

-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
It can't be Code 
Red... Until that machine actually goes live, port 80 is blocked to outside 
traffic (and I am toying with the idea of not using port 80 when it goes 
live anyways), besides the Index Server service is disabled. Not patched 
(not my choice, people higher up make decisions I can't argue with) doesn't 
mean totally abandonned. I update the McAfee virus scan definition list 
whenever a new comes out, I have GroupShield running on Exchange (updated 
just as lovingly), I ran three all-files virus checks, on top of the 
on-access scan, since having this problem, I've rebooted twice (which should 
have taken care of Code Red if it had been an issue) and I've also ran the 
Code Red scanner, all to no avail.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Kevin Lundy 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  3:06 PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  The "no patch" is the clue. My betting money is on Code Red - 
  you have heard the news the past month?
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
4:09 PMTo: NT System Admin IssuesSubject: IIS 
stopping without reason
Hello, 
My IIS4 server has been behaving strangely 
for the past four days. It is not a mission-critical unit (yet) as it 
runs only the users' default home page when they start IE though it was 
supposed to go live in a week as the IIS for OWA. On to the 
problem...
All IIS services (NNTP, FTP, HTTP) are 
stopped. I click on one of them at random and hit Start. Nothing 
happens. I click Start again after a few seconds. The service in 
question will start and function normally, however anywhere from 5 to 15 
minutes later, it'll stop again. There is no message in the log file 
other than a notice in the Security log that the IIS account logged in 
and out at start/stop.
Besides IIS, that box is running Win NT 4 
SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as 
the BDC.
I've roamed through the Microsoft KB (not 
easy, what keywords do you use to describe this when there's no message 
in the log) to no avail. Anyone out there with a suggestion ?
Eric Peeters Network Administrator TexLoc 
Ltd 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Guidelines for W2K Pro PageFile Size

2001-08-20 Thread Roger Seielstad

I use an approximation of twice RAM, but usually stop once it hits about
750MB (no good reason, I just do).

I always set it to be a static size, since you're inducing overhead when it
expands at the same time the system is already under load.

Roger
-- 
Roger D. Seielstad - MCSE MCT 
Senior Systems Administrator 
Peregrine Systems 
Atlanta, GA 
http://www.peregrine.com 
-Original Message-
From: Jim Underwood [mailto:[EMAIL PROTECTED]]
Sent: Saturday, August 18, 2001 3:57 PM
To: NT System Admin Issues
Subject: Guidelines for W2K Pro PageFile Size


I'm looking for guidelines/recommendations for setting the pagefile size on
a W2K Pro SP2 machine.

My guideline for NT used to be to set both MIN and MAX = (2 * PhysicalRAM) +
16

I just bought 512MB SDRAM (only $80!!! for 2 Kingston 256M ECC sticks) , so
this works out to be quite a good size pagefile:  1040

Interestingly enough, the W2K default setting is 768 - 1536.

So, for W2K is it still best to set MIN and MAX to the same value?
Is there a formula that's best to use?
Or is it best to let W2K set it's own values?

I know about setting the location of the pagefile:
-- Only one PF per physical disk
-- Create separate PFs on separate physical disks
-- Best on non-RAID or RAID 1
-- Avoid putting on RAID 5
Best Regards, 
JMU 


Jim Underwood
Apollo Information Systems, Inc.
Houston, TX 77058 
EMail:  [EMAIL PROTECTED]


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: RE: IIS stopping without reason





It's inside, the IP is 10.10.10.5 (I am sure you can find any routable IP you need without my help - grin). The proxy redirects the mail traffic to that box.

Eric Peeters
Network Administrator
TexLoc Ltd



 -Original Message-
 From: Jay Woody [mailto:[EMAIL PROTECTED]]
 Sent: Monday, August 20, 2001 3:24 PM
 To: NT System Admin Issues
 Subject: Re: IIS stopping without reason
 
 
 Wow, your BDC huh. What was the TCP address again? I will 
 download the .sam and mail you your admin password as quickly 
 as l0phtcrack can crack it. :)
 
 I'm sure everyone has already told you that this is likely 
 Code Red. If this is on the outside, I would unplug it, 
 quick and re-build it.
 
 JayW
 
  [EMAIL PROTECTED] 08/20/01 03:08PM 
 Hello,
 
 My IIS4 server has been behaving strangely for the past four 
 days. It is not
 a mission-critical unit (yet) as it runs only the users' 
 default home page
 when they start IE though it was supposed to go live in a 
 week as the IIS
 for OWA. On to the problem...
 
 All IIS services (NNTP, FTP, HTTP) are stopped. I click on 
 one of them at
 random and hit Start. Nothing happens. I click Start again after a few
 seconds. The service in question will start and function 
 normally, however
 anywhere from 5 to 15 minutes later, it'll stop again. There 
 is no message
 in the log file other than a notice in the Security log that 
 the IIS account
 logged in and out at start/stop.
 
 Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and
 Exchange 5.5 SP1 (no patch) and it acts as the BDC.
 
 I've roamed through the Microsoft KB (not easy, what keywords 
 do you use to
 describe this when there's no message in the log) to no 
 avail. Anyone out
 there with a suggestion ?
 
 Eric Peeters
 Network Administrator
 TexLoc Ltd
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Bunting, Jeff
Title: IIS stopping without reason



Not 
related to your current problem, but you need to have a higher level Exchange SP 
(SP3 plus hotfix, or Sp4 should include this)  for the latest version of 
GroupShield.

Jeff

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  It can't be Code 
  Red... Until that machine actually goes live, port 80 is blocked to outside 
  traffic (and I am toying with the idea of not using port 80 when it goes live 
  anyways), besides the Index Server service is disabled. Not patched (not my 
  choice, people higher up make decisions I can't argue with) doesn't mean 
  totally abandonned. I update the McAfee virus scan definition list whenever a 
  new comes out, I have GroupShield running on Exchange (updated just as 
  lovingly), I ran three all-files virus checks, on top of the on-access scan, 
  since having this problem, I've rebooted twice (which should have taken care 
  of Code Red if it had been an issue) and I've also ran the Code Red scanner, 
  all to no avail.
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Kevin Lundy 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:06 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
The "no patch" is the clue. My betting money is on Code Red - 
you have heard the news the past month?

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:09 
  PMTo: NT System Admin IssuesSubject: IIS stopping 
  without reason
  Hello, 
  My IIS4 server has been behaving strangely for 
  the past four days. It is not a mission-critical unit (yet) as it runs 
  only the users' default home page when they start IE though it was 
  supposed to go live in a week as the IIS for OWA. On to the 
  problem...
  All IIS services (NNTP, FTP, HTTP) are stopped. 
  I click on one of them at random and hit Start. Nothing happens. I click 
  Start again after a few seconds. The service in question will start and 
  function normally, however anywhere from 5 to 15 minutes later, it'll stop 
  again. There is no message in the log file other than a notice in the 
  Security log that the IIS account logged in and out at 
  start/stop.
  Besides IIS, that box is running Win NT 4 SP6a 
  Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as the 
  BDC.
  I've roamed through the Microsoft KB (not easy, 
  what keywords do you use to describe this when there's no message in the 
  log) to no avail. Anyone out there with a suggestion ?
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: Message



Well, I have been 
hinting at my boss that patching *should* solve the problem, however I don't 
know that for a fact, I am just *hoping* it will and again *hoping* I will be 
able to patch it. Otherwise, it may end up as a case of "ooopp wrong files, 
sorry, server got accidentally patched..."
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Martin Blackstone 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 
  2001 3:31 PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  In 
  this case, screw the higher ups. They have no clue, and they will have no clue 
  if you patch it either. Just because someone is above you does not have to 
  mean you put up with sheer idiocy.Patch it NOW.
  

-Original Message-From: Erik Sojka 
[mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
Perhaps another internal box is infected. Is there anything 
from the IIS logs from the times when the box goes belly 
up?

  
  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 
  PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  It can't be 
  Code Red... Until that machine actually goes live, port 80 is blocked to 
  outside traffic (and I am toying with the idea of not using port 80 when 
  it goes live anyways), besides the Index Server service is disabled. Not 
  patched (not my choice, people higher up make decisions I can't argue 
  with) doesn't mean totally abandonned. I update the McAfee virus scan 
  definition list whenever a new comes out, I have GroupShield running on 
  Exchange (updated just as lovingly), I ran three all-files virus checks, 
  on top of the on-access scan, since having this problem, I've rebooted 
  twice (which should have taken care of Code Red if it had been an issue) 
  and I've also ran the Code Red scanner, all to no 
  avail.
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Kevin Lundy 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
3:06 PMTo: NT System Admin IssuesSubject: RE: IIS 
stopping without reason
The "no patch" is the clue. My betting money is on Code Red 
- you have heard the news the past month?

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  4:09 PMTo: NT System Admin IssuesSubject: IIS 
  stopping without reason
  Hello, 
  My IIS4 server has been behaving strangely 
  for the past four days. It is not a mission-critical unit (yet) as it 
  runs only the users' default home page when they start IE though it 
  was supposed to go live in a week as the IIS for OWA. On to the 
  problem...
  All IIS services (NNTP, FTP, HTTP) are 
  stopped. I click on one of them at random and hit Start. Nothing 
  happens. I click Start again after a few seconds. The service in 
  question will start and function normally, however anywhere from 5 to 
  15 minutes later, it'll stop again. There is no message in the log 
  file other than a notice in the Security log that the IIS account 
  logged in and out at start/stop.
  Besides IIS, that box is running Win NT 4 
  SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as 
  the BDC.
  I've roamed through the Microsoft KB (not 
  easy, what keywords do you use to describe this when there's no 
  message in the log) to no avail. Anyone out there with a suggestion 
  ?
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Decker, Jeff
Title: RE: IIS stopping without reason





We had the same problem it is due to redirect on your server. MS has published an article on this problem. I will see if I can find it.


-Original Message-
From: Jay Woody [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:24 PM
To: NT System Admin Issues
Subject: Re: IIS stopping without reason



Wow, your BDC huh. What was the TCP address again? I will download the .sam and mail you your admin password as quickly as l0phtcrack can crack it. :)

I'm sure everyone has already told you that this is likely Code Red. If this is on the outside, I would unplug it, quick and re-build it.

JayW


 [EMAIL PROTECTED] 08/20/01 03:08PM 
Hello,


My IIS4 server has been behaving strangely for the past four days. It is not
a mission-critical unit (yet) as it runs only the users' default home page
when they start IE though it was supposed to go live in a week as the IIS
for OWA. On to the problem...


All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at
random and hit Start. Nothing happens. I click Start again after a few
seconds. The service in question will start and function normally, however
anywhere from 5 to 15 minutes later, it'll stop again. There is no message
in the log file other than a notice in the Security log that the IIS account
logged in and out at start/stop.


Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and
Exchange 5.5 SP1 (no patch) and it acts as the BDC.


I've roamed through the Microsoft KB (not easy, what keywords do you use to
describe this when there's no message in the log) to no avail. Anyone out
there with a suggestion ?


Eric Peeters
Network Administrator
TexLoc Ltd




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Joe Casale
Title: IIS stopping without reason









Forgot about that one!

Good eye Jeff!

Dude, Im feeling for you now

jlc



-Original Message-
From: Bunting, Jeff
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 2:33
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason





Not related to your
current problem, but you need to have a higher level Exchange SP (SP3 plus
hotfix, or Sp4 should include this) for the latest version of GroupShield.











Jeff





-Original Message-
From: Eric Peeters
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 4:24
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason



It can't be Code Red... Until that
machine actually goes live, port 80 is blocked to outside traffic (and I am
toying with the idea of not using port 80 when it goes live anyways), besides
the Index Server service is disabled. Not patched (not my choice, people higher
up make decisions I can't argue with) doesn't mean totally abandonned. I update
the McAfee virus scan definition list whenever a new comes out, I have
GroupShield running on Exchange (updated just as lovingly), I ran three
all-files virus checks, on top of the on-access scan, since having this
problem, I've rebooted twice (which should have taken care of Code Red if it
had been an issue) and I've also ran the Code Red scanner, all to no avail.



Eric Peeters 
Network
Administrator 
TexLoc
Ltd 



-Original Message-
From: Kevin Lundy
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:06
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason



The no patch
is the clue. My betting money is on Code Red - you have heard the news
the past month?





-Original Message-
From: Eric Peeters
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 4:09
PM
To: NT System Admin Issues
Subject: IIS stopping without
reason

Hello, 

My IIS4 server has been behaving strangely for the
past four days. It is not a mission-critical unit (yet) as it runs only the
users' default home page when they start IE though it was supposed to go live
in a week as the IIS for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I
click on one of them at random and hit Start. Nothing happens. I click Start
again after a few seconds. The service in question will start and function
normally, however anywhere from 5 to 15 minutes later, it'll stop again. There
is no message in the log file other than a notice in the Security log that the
IIS account logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server
(no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what
keywords do you use to describe this when there's no message in the log) to no
avail. Anyone out there with a suggestion ?

Eric Peeters 
Network
Administrator 
TexLoc
Ltd 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







RE: IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: IIS stopping without reason



You're 
absolutely right, I realized that the second I clicked Send. Exchange is patched 
to SP3 plus the hotfix(es) (if I remember correctly, only one) to SP3, the sole 
motive being able to install GroupShield, otherwise you can bet your bottom 
dollar it wouldn't be so "up to date."
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Bunting, Jeff 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:33 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  Not 
  related to your current problem, but you need to have a higher level Exchange 
  SP (SP3 plus hotfix, or Sp4 should include this) for the latest version of 
  GroupShield.
  
  Jeff
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
It can't be Code 
Red... Until that machine actually goes live, port 80 is blocked to outside 
traffic (and I am toying with the idea of not using port 80 when it goes 
live anyways), besides the Index Server service is disabled. Not patched 
(not my choice, people higher up make decisions I can't argue with) doesn't 
mean totally abandonned. I update the McAfee virus scan definition list 
whenever a new comes out, I have GroupShield running on Exchange (updated 
just as lovingly), I ran three all-files virus checks, on top of the 
on-access scan, since having this problem, I've rebooted twice (which should 
have taken care of Code Red if it had been an issue) and I've also ran the 
Code Red scanner, all to no avail.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Kevin Lundy 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  3:06 PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  The "no patch" is the clue. My betting money is on Code Red - 
  you have heard the news the past month?
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
4:09 PMTo: NT System Admin IssuesSubject: IIS 
stopping without reason
Hello, 
My IIS4 server has been behaving strangely 
for the past four days. It is not a mission-critical unit (yet) as it 
runs only the users' default home page when they start IE though it was 
supposed to go live in a week as the IIS for OWA. On to the 
problem...
All IIS services (NNTP, FTP, HTTP) are 
stopped. I click on one of them at random and hit Start. Nothing 
happens. I click Start again after a few seconds. The service in 
question will start and function normally, however anywhere from 5 to 15 
minutes later, it'll stop again. There is no message in the log file 
other than a notice in the Security log that the IIS account logged in 
and out at start/stop.
Besides IIS, that box is running Win NT 4 
SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as 
the BDC.
I've roamed through the Microsoft KB (not 
easy, what keywords do you use to describe this when there's no message 
in the log) to no avail. Anyone out there with a suggestion ?
Eric Peeters Network Administrator TexLoc 
Ltd 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Martin Blackstone
Title: Message



DO 
IT 
Don't 
pass go, don't collect 200, don't ask anyone's permission. 
I 
would say for the responses to your question that the answer is self 
evident.

  
  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:37 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  Well, I have been 
  hinting at my boss that patching *should* solve the problem, however I don't 
  know that for a fact, I am just *hoping* it will and again *hoping* I will be 
  able to patch it. Otherwise, it may end up as a case of "ooopp wrong 
  files, sorry, server got accidentally patched..."
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Martin Blackstone 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 
2001 3:31 PMTo: NT System Admin IssuesSubject: RE: IIS 
stopping without reason
In 
this case, screw the higher ups. They have no clue, and they will have no 
clue if you patch it either. Just because someone is above you does not have 
to mean you put up with sheer idiocy.Patch it NOW.

  
  -Original Message-From: Erik Sojka 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 
  PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  Perhaps another internal box is infected. Is there anything 
  from the IIS logs from the times when the box goes belly 
  up?
  

-Original Message-From: Eric 
Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 
2001 4:24 PMTo: NT System Admin IssuesSubject: RE: 
IIS stopping without reason
It can't be 
Code Red... Until that machine actually goes live, port 80 is blocked to 
outside traffic (and I am toying with the idea of not using port 80 when 
it goes live anyways), besides the Index Server service is disabled. Not 
patched (not my choice, people higher up make decisions I can't argue 
with) doesn't mean totally abandonned. I update the McAfee virus scan 
definition list whenever a new comes out, I have GroupShield running on 
Exchange (updated just as lovingly), I ran three all-files virus checks, 
on top of the on-access scan, since having this problem, I've rebooted 
twice (which should have taken care of Code Red if it had been an issue) 
and I've also ran the Code Red scanner, all to no 
avail.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Kevin Lundy 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 
  2001 3:06 PMTo: NT System Admin IssuesSubject: 
  RE: IIS stopping without reason
  The "no patch" is the clue. My betting money is on Code 
  Red - you have heard the news the past month?
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
4:09 PMTo: NT System Admin IssuesSubject: IIS 
stopping without reason
Hello, 
My IIS4 server has been behaving 
strangely for the past four days. It is not a mission-critical unit 
(yet) as it runs only the users' default home page when they start 
IE though it was supposed to go live in a week as the IIS for OWA. 
On to the problem...
All IIS services (NNTP, FTP, HTTP) are 
stopped. I click on one of them at random and hit Start. Nothing 
happens. I click Start again after a few seconds. The service in 
question will start and function normally, however anywhere from 5 
to 15 minutes later, it'll stop again. There is no message in the 
log file other than a notice in the Security log that the IIS 
account logged in and out at start/stop.
Besides IIS, that box is running Win NT 4 
SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts 
as the BDC.
I've roamed through the Microsoft KB (not 
easy, what keywords do you use to describe this when there's no 
message in the log) to no avail. Anyone out there with a suggestion 
?
Eric Peeters Network Administrator TexLoc Ltd 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Decker, Jeff
Title: Message



Read 
these two articles.
http://www.theregister.co.uk/content/4/21019.html
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-044.asp

The 
new patch from MS should solve your problem.

  -Original Message-From: Martin Blackstone 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 
  2001 3:39 PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  DO 
  IT 
  Don't pass go, don't collect 200, don't ask anyone's permission. 
  
  I 
  would say for the responses to your question that the answer is self 
  evident.
  

-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:37 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
Well, I have 
been hinting at my boss that patching *should* solve the problem, however I 
don't know that for a fact, I am just *hoping* it will and again *hoping* I 
will be able to patch it. Otherwise, it may end up as a case of "ooopp 
wrong files, sorry, server got accidentally patched..."
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Martin Blackstone 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 
  2001 3:31 PMTo: NT System Admin IssuesSubject: RE: 
  IIS stopping without reason
  In this case, screw the higher ups. They have no clue, and they 
  will have no clue if you patch it either. Just because someone is above 
  you does not have to mean you put up with sheer idiocy.Patch it 
  NOW.
  

-Original Message-From: Erik Sojka 
[mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:25 
PMTo: NT System Admin IssuesSubject: RE: IIS 
stopping without reason
Perhaps another internal box is infected. Is there anything 
from the IIS logs from the times when the box goes belly 
up?

  
  -Original Message-From: Eric 
  Peeters [mailto:[EMAIL PROTECTED]] Sent: Monday, August 
  20, 2001 4:24 PMTo: NT System Admin 
  IssuesSubject: RE: IIS stopping without 
  reason
  It can't 
  be Code Red... Until that machine actually goes live, port 80 is 
  blocked to outside traffic (and I am toying with the idea of not using 
  port 80 when it goes live anyways), besides the Index Server service 
  is disabled. Not patched (not my choice, people higher up make 
  decisions I can't argue with) doesn't mean totally abandonned. I 
  update the McAfee virus scan definition list whenever a new comes out, 
  I have GroupShield running on Exchange (updated just as lovingly), I 
  ran three all-files virus checks, on top of the on-access scan, since 
  having this problem, I've rebooted twice (which should have taken care 
  of Code Red if it had been an issue) and I've also ran the Code Red 
  scanner, all to no avail.
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Kevin Lundy 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 
2001 3:06 PMTo: NT System Admin IssuesSubject: 
RE: IIS stopping without reason
The "no patch" is the clue. My betting money is on Code 
Red - you have heard the news the past month?

  -Original Message-From: Eric 
  Peeters [mailto:[EMAIL PROTECTED]]Sent: Monday, 
  August 20, 2001 4:09 PMTo: NT System Admin 
  IssuesSubject: IIS stopping without 
  reason
  Hello, 
  My IIS4 server has been behaving 
  strangely for the past four days. It is not a mission-critical 
  unit (yet) as it runs only the users' default home page when they 
  start IE though it was supposed to go live in a week as the IIS 
  for OWA. On to the problem...
  All IIS services (NNTP, FTP, HTTP) are 
  stopped. I click on one of them at random and hit Start. Nothing 
  happens. I click Start again after a few seconds. The service in 
  question will start and function normally, however anywhere from 5 
  to 15 minutes later, it'll stop again. There is no message in the 
  log file other than a notice in the Security log that the IIS 
  account logged in and out at start/stop.
  Besides IIS, that box is running Win NT 
  4 SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it 
  acts as the BDC.
  I've roamed through the Microsoft KB 
  (not easy, what keywords do you use to describe this when there's 
  no message in the log) to no 

RE: IIS stopping without reason

2001-08-20 Thread Martin Blackstone
Title: Message



Who is 
your network administrator over there?

  
  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 1:39 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  You're absolutely right, I realized that the second I 
  clicked Send. Exchange is patched to SP3 plus the hotfix(es) (if I remember 
  correctly, only one) to SP3, the sole motive being able to install 
  GroupShield, otherwise you can bet your bottom dollar it wouldn't be so "up to 
  date."
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Bunting, Jeff 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:33 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
Not related to your current problem, but you need 
to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include 
this) for the latest version of GroupShield.

Jeff

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 
  PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  It can't be 
  Code Red... Until that machine actually goes live, port 80 is blocked to 
  outside traffic (and I am toying with the idea of not using port 80 when 
  it goes live anyways), besides the Index Server service is disabled. Not 
  patched (not my choice, people higher up make decisions I can't argue 
  with) doesn't mean totally abandonned. I update the McAfee virus scan 
  definition list whenever a new comes out, I have GroupShield running on 
  Exchange (updated just as lovingly), I ran three all-files virus checks, 
  on top of the on-access scan, since having this problem, I've rebooted 
  twice (which should have taken care of Code Red if it had been an issue) 
  and I've also ran the Code Red scanner, all to no 
  avail.
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Kevin Lundy 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
3:06 PMTo: NT System Admin IssuesSubject: RE: IIS 
stopping without reason
The "no patch" is the clue. My betting money is on Code Red 
- you have heard the news the past month?

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  4:09 PMTo: NT System Admin IssuesSubject: IIS 
  stopping without reason
  Hello, 
  My IIS4 server has been behaving strangely 
  for the past four days. It is not a mission-critical unit (yet) as it 
  runs only the users' default home page when they start IE though it 
  was supposed to go live in a week as the IIS for OWA. On to the 
  problem...
  All IIS services (NNTP, FTP, HTTP) are 
  stopped. I click on one of them at random and hit Start. Nothing 
  happens. I click Start again after a few seconds. The service in 
  question will start and function normally, however anywhere from 5 to 
  15 minutes later, it'll stop again. There is no message in the log 
  file other than a notice in the Security log that the IIS account 
  logged in and out at start/stop.
  Besides IIS, that box is running Win NT 4 
  SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as 
  the BDC.
  I've roamed through the Microsoft KB (not 
  easy, what keywords do you use to describe this when there's no 
  message in the log) to no avail. Anyone out there with a suggestion 
  ?
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Decker, Jeff
Title: IIS stopping without reason



Are 
you guys getting my emails. There is a new patch from MS on this 
issue. When you are being probed by the code red (evan if you are patched) 
and You have redirects your services will stop.

  -Original Message-From: Stephen Chiang 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:45 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  you 
  know, I'm seeing the same thing on one of my IIS 5.0 box and I've already 
  applied the latest cumulative patch on Windows 2000 Server SP2. Even 
  after the services stop, when I run the Code Red scanner from Symantec and 
  eEye, they both come out negative...
  
  
  
-Original Message-From: Bunting, Jeff 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 1:33 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
Not related to your current problem, but you need 
to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include 
this) for the latest version of GroupShield.

Jeff

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 4:24 
  PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  It can't be 
  Code Red... Until that machine actually goes live, port 80 is blocked to 
  outside traffic (and I am toying with the idea of not using port 80 when 
  it goes live anyways), besides the Index Server service is disabled. Not 
  patched (not my choice, people higher up make decisions I can't argue 
  with) doesn't mean totally abandonned. I update the McAfee virus scan 
  definition list whenever a new comes out, I have GroupShield running on 
  Exchange (updated just as lovingly), I ran three all-files virus checks, 
  on top of the on-access scan, since having this problem, I've rebooted 
  twice (which should have taken care of Code Red if it had been an issue) 
  and I've also ran the Code Red scanner, all to no 
  avail.
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Kevin Lundy 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
3:06 PMTo: NT System Admin IssuesSubject: RE: IIS 
stopping without reason
The "no patch" is the clue. My betting money is on Code Red 
- you have heard the news the past month?

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  4:09 PMTo: NT System Admin IssuesSubject: IIS 
  stopping without reason
  Hello, 
  My IIS4 server has been behaving strangely 
  for the past four days. It is not a mission-critical unit (yet) as it 
  runs only the users' default home page when they start IE though it 
  was supposed to go live in a week as the IIS for OWA. On to the 
  problem...
  All IIS services (NNTP, FTP, HTTP) are 
  stopped. I click on one of them at random and hit Start. Nothing 
  happens. I click Start again after a few seconds. The service in 
  question will start and function normally, however anywhere from 5 to 
  15 minutes later, it'll stop again. There is no message in the log 
  file other than a notice in the Security log that the IIS account 
  logged in and out at start/stop.
  Besides IIS, that box is running Win NT 4 
  SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as 
  the BDC.
  I've roamed through the Microsoft KB (not 
  easy, what keywords do you use to describe this when there's no 
  message in the log) to no avail. Anyone out there with a suggestion 
  ?
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Erik Sojka
Title: Message



Fmuuh? I'll ask again.

It's 
possible that another internal machine is infected and is reinfecting the box in 
question.

Check 
your IIS logs for any entries that were logged at or before the times the boxes 
rebooted. Or any log entries that might be 
CodeRed-related.



  
  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:32 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  No, it's a 
  perfectly normal boot, no red flag at all. All other servers are at least 
  similarly protected as this one, or as badly, if you want to argue that 
  point...
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Erik Sojka 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:25 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
Perhaps another internal box is infected. Is there anything 
from the IIS logs from the times when the box goes belly 
up?

  
  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 4:24 
  PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  It can't be 
  Code Red... Until that machine actually goes live, port 80 is blocked to 
  outside traffic (and I am toying with the idea of not using port 80 when 
  it goes live anyways), besides the Index Server service is disabled. Not 
  patched (not my choice, people higher up make decisions I can't argue 
  with) doesn't mean totally abandonned. I update the McAfee virus scan 
  definition list whenever a new comes out, I have GroupShield running on 
  Exchange (updated just as lovingly), I ran three all-files virus checks, 
  on top of the on-access scan, since having this problem, I've rebooted 
  twice (which should have taken care of Code Red if it had been an issue) 
  and I've also ran the Code Red scanner, all to no 
  avail.
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Kevin Lundy 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
3:06 PMTo: NT System Admin IssuesSubject: RE: IIS 
stopping without reason
The "no patch" is the clue. My betting money is on Code Red 
- you have heard the news the past month?

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
  4:09 PMTo: NT System Admin IssuesSubject: IIS 
  stopping without reason
  Hello, 
  My IIS4 server has been behaving strangely 
  for the past four days. It is not a mission-critical unit (yet) as it 
  runs only the users' default home page when they start IE though it 
  was supposed to go live in a week as the IIS for OWA. On to the 
  problem...
  All IIS services (NNTP, FTP, HTTP) are 
  stopped. I click on one of them at random and hit Start. Nothing 
  happens. I click Start again after a few seconds. The service in 
  question will start and function normally, however anywhere from 5 to 
  15 minutes later, it'll stop again. There is no message in the log 
  file other than a notice in the Security log that the IIS account 
  logged in and out at start/stop.
  Besides IIS, that box is running Win NT 4 
  SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts as 
  the BDC.
  I've roamed through the Microsoft KB (not 
  easy, what keywords do you use to describe this when there's no 
  message in the log) to no avail. Anyone out there with a suggestion 
  ?
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: IIS stopping without reason

2001-08-20 Thread Decker, Jeff
Title: RE: IIS stopping without reason



Either


  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:47 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  Redirect from that 
  box to... elsewhere or redirect from elsewhere to that box 
  ?
  Eric Peeters Network Administrator TexLoc 
  Ltd 
  
-Original Message-From: Decker, Jeff 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:36 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
We had the same problem it is due to redirect on your 
server. MS has published an article on this problem. I will see if I 
can find it.
-Original Message- From: Jay 
Woody [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 3:24 PM To: NT System Admin Issues Subject: Re: IIS 
stopping without reason 
Wow, your BDC huh. What was the TCP address 
again? I will download the .sam and mail you your admin password as 
quickly as l0phtcrack can crack it. :)
I'm sure everyone has already told you that this is likely 
Code Red. If this is on the outside, I would unplug it, quick and 
re-build it.
JayW 
 [EMAIL PROTECTED] 08/20/01 03:08PM 
 Hello, 
My IIS4 server has been behaving strangely for the past four 
days. It is not a mission-critical unit (yet) as it 
runs only the users' default home page when they 
start IE though it was supposed to go live in a week as the IIS 
for OWA. On to the problem... 
All IIS services (NNTP, FTP, HTTP) are stopped. I click on 
one of them at random and hit Start. Nothing 
happens. I click Start again after a few seconds. 
The service in question will start and function normally, however 
anywhere from 5 to 15 minutes later, it'll stop again. 
There is no message in the log file other than a 
notice in the Security log that the IIS account logged in and out at start/stop. 
Besides IIS, that box is running Win NT 4 SP6a Server (no 
patch) and Exchange 5.5 SP1 (no patch) and it acts 
as the BDC. 
I've roamed through the Microsoft KB (not easy, what 
keywords do you use to describe this when there's no 
message in the log) to no avail. Anyone out there 
with a suggestion ? 
Eric Peeters Network 
Administrator TexLoc Ltd 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Reporting Code red

2001-08-20 Thread Jason Morris

www.dshield.org has utilities that you can use to send in your firewall
reports from various servers and have it tracked on their site. They also
notify the abuser(s) or ISP of certain offenders and their problems.  They
also run a mailing list that's not as active as this one but still active.

I hope this helps.

Jason Morris CCDA CCNP
Network Administrator
MJMC, Inc.
708-225-2350
[EMAIL PROTECTED]


-Original Message-
From: Luke Brumbaugh [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 1:39 PM
To: NT System Admin Issues
Cc: Rick Smetzer
Subject: Reporting Code red


Is there a website, or agency or whatever that you can report Code Red web
hits to.
We are getting hit from Concentric, and msn and I do have the ipaddress'
It's not a problem here, just irritating.


Luke L. Brumbaugh
System Administrator,MCSE
Ultryx Corporation
mailto:[EMAIL PROTECTED]

Enterprise Channel Management Software for Manufacturers 
Visit us at http://www.ultryx.com 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Confidential:  This e-mail and any files transmitted with it are the
property of Lanco International and/or its affiliates, are confidential, and
are intended solely for the use of the individual or entity to whom this
e-mail is addressed. If you are not one of the named recipient(s) or
otherwise have reason to believe that you have received this message in
error, please notify the sender at the above e-mail address and delete this
message immediately from your computer.  Any other use, retention,
dissemination, forwarding, printing or copying of this e-mail is strictly
prohibited.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Jay Woody

 It can't be Code Red... Until that machine actually goes live, 
 port 80 is blocked to outside traffic

As far as blocking port 80 to outside, I am pretty sure that Code Red can be adapted 
to hit any port, it just does 80 for obvious reasons.  Also, I would wonder about 
internal boxes that then in turn got to this box.

 the Index Server service is disabled.

Doesn't matter.  All that has to be there is the IDA.dll or whatever file it was that 
eeye found the original vuln in.  If the file is there, you can be hit.  It is a 
buffer overflow, so it doesn't depend on a service, just the mere existence of a file.

 Not patched (not my choice, people higher up make decisions 
 I can't argue with)

Been there done that.  I quickly left and went to a place that cared.

 I ran three all-files virus checks, on top of the on-access 
 scan, since having this problem

I am puzzled by this statement.  I don't believe that there is anything to find for 
the worm except for maybe some registry entries.  The first changed your webpage and I 
could see something catching that, but not an anti-virus.  The third put a root.exe 
and maybe the anti-virus companies are looking for that now.  However, I would rely on 
anti-virus to protect me from a Worm.  You shut the door.

 I've rebooted twice (which should have taken care of 
 Code Red if it had been an issue)

No, only if you run the patch and then reboot.

 I've also ran the Code Red scanner, all to no avail.

Don't know which one here, but most of then simply check if you are vulnerable, not if 
you are already hit.

You are asking for help here and the best advice that I think any of us could give you 
is to first get up to date.  Even if we are wrong and it isn't Code Red, there is 
still a real good chance that the SPs and HFs could help here.  If I had to guess if 
you called PSS, that is where they would take you first also.

BTW, if you are running this on Compaq hardware, tell me.  There is a bluescreen 
gotcha on some of the platforms.

JayW

 [EMAIL PROTECTED] 08/20/01 03:24PM 
It can't be Code Red... Until that machine actually goes live, port 80 is
blocked to outside traffic (and I am toying with the idea of not using port
80 when it goes live anyways), besides the Index Server service is disabled.
Not patched (not my choice, people higher up make decisions I can't argue
with) doesn't mean totally abandonned. I update the McAfee virus scan
definition list whenever a new comes out, I have GroupShield running on
Exchange (updated just as lovingly), I ran three all-files virus checks, on
top of the on-access scan, since having this problem, I've rebooted twice
(which should have taken care of Code Red if it had been an issue) and I've
also ran the Code Red scanner, all to no avail.

Eric Peeters 
Network Administrator 
TexLoc Ltd 

-Original Message-
From: Kevin Lundy [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 3:06 PM
To: NT System Admin Issues
Subject: RE: IIS stopping without reason


The no patch is the clue.  My betting money is on Code Red - you have
heard the news the past month?

-Original Message-
From: Eric Peeters [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 4:09 PM
To: NT System Admin Issues
Subject: IIS stopping without reason



Hello, 

My IIS4 server has been behaving strangely for the past four days. It is not
a mission-critical unit (yet) as it runs only the users' default home page
when they start IE though it was supposed to go live in a week as the IIS
for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I click on one of them at
random and hit Start. Nothing happens. I click Start again after a few
seconds. The service in question will start and function normally, however
anywhere from 5 to 15 minutes later, it'll stop again. There is no message
in the log file other than a notice in the Security log that the IIS account
logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server (no patch) and
Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what keywords do you use to
describe this when there's no message in the log) to no avail. Anyone out
there with a suggestion ?

Eric Peeters 
Network Administrator 
TexLoc Ltd 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Jay Woody

When did you apply the patches?  Could you have been hit before you got the patches 
on?  We have had a couple of e-mail's on this also.

Here is the last thread I remember, maybe it will help:

 [EMAIL PROTECTED] 08/08/01 10:00AM 
Ok, further clarification.

Some peopleare seeing these crashes as the result of redirects done via IIS directly 
(via MMC settings), but changing to an html page with a redirect in it seems to work 
fine.

Roger
--
Roger D. Seielstad - MCSE MCT
Senior Network Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com 


 -Original Message-
 From: Pam [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, August 08, 2001 10:53 AM
 To: IIS50 Discussions
 Subject: RE: POSSIBLE FIX CODE RED PATCH !!
 
 
 So what I'm understanding is:
 
 With Patch 001-033, and redirects set up in the MMC, systems can 
 crash unexpectedly.
 
 Turn off the redirects at the MMC level, switch to using a 
 page in that directory with the redirect tag in it, problem 
 goes away.
 
 I've been seeing some quirky behavior of INETINFO on some 
 servers (try to  stop the service, INETINFO blows up), but 
 I haven't had a server crash yet.
 
 Pam
 
 -Original Message-
 From: Okie Tex [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, August 08, 2001 10:52 AM
 To: IIS50 Discussions
 Subject: Re: POSSIBLE FIX CODE RED PATCH !!
 
 
 We did this last night after John posted it on another 
 mailing list. It  worked for us as we had some redirects 
 on some virtuals.  Before doing this, we DID have the 
 CodeRed Worm Patch from MS installed - however, our 
 Inetinfo/DrWatson were bombing on us and we'd go down in 
 between 10 minutes and a couple of hours.
 
 So - this, so far!! (fingers-crossed) - has worked for us and 
 it's 10+ hours now since we did it - no downtime.
 
 System with problem: NT4,SP6a,Patch
 
 -ot
 
 
 From: John Cesta - Lists [EMAIL PROTECTED]
 Reply-To: IIS50 Discussions [EMAIL PROTECTED]
 To: IIS50 Discussions [EMAIL PROTECTED]
 Subject: POSSIBLE FIX CODE RED PATCH !!
 Date: Tue, 7 Aug 2001 21:40:56 -0400
 
 
 
 I found this on a ColdFusion list I subscribe to.
 
 It may be a solution for the inetinfo crashes:
 
 
 For over two weeks, a couple of shared web servers have 
 been going nuts.  Dr. Watson locks Inetinfo, W3SVC stops, 
 cycling all services usually did the trick.  This trend escalated 
 over the weekend with all of the probing going round.
 
 I gave in last night and called MSFT for help.  He looked at 
 my Dr. Watson and quickly knew the problem, HTTPRedirects 
 in IIS after applying the CodeRed patch.  I used MDUTIL.exe 
 to dump IIS to a text file and searched for HTTPRedirect. 
 Found a total of three across the two of them.  Opened IIS, 
 reset IIS to point to a directory, put a Default.asp in that 
 directory with a single line % RESPONSE.REDIRECT 
 HTTP://[IP]; % .  Cycled IIS and the problem was solved.
 
 MSFT did not charge as this is a bug in the IIS / CodeRed patch.
 
 John Cesta

JayW

 [EMAIL PROTECTED] 08/20/01 03:45PM 
IIS stopping without reasonyou know, I'm seeing the same thing on one of my
IIS 5.0 box and I've already applied the latest cumulative patch on Windows
2000 Server SP2.  Even after the services stop, when I run the Code Red
scanner from Symantec and eEye, they both come out negative...




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Eric Peeters
Title: IIS stopping without reason



I've checked IIS 
before putting my foot in my mouth and we don't use redirect however I will 
apply the patch last night, along with any other patch I can lay my hands on, 
just to see if it does the trick. I'm still debating whether to do them all in 
sequence and give qchain a try or do a reboot after each to see which one solves 
the issue. I guess it'll depend on how hard it is to keep an eye 
open.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Decker, Jeff 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:47 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
  Are 
  you guys getting my emails. There is a new patch from MS on this 
  issue. When you are being probed by the code red (evan if you are 
  patched) and You have redirects your services will stop.
  
-Original Message-From: Stephen Chiang 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 3:45 
PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
without reason
you know, I'm seeing the same thing on one of my IIS 5.0 box and I've 
already applied the latest cumulative patch on Windows 2000 Server 
SP2. Even after the services stop, when I run the Code Red scanner 
from Symantec and eEye, they both come out negative...



  -Original Message-From: Bunting, Jeff 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 1:33 
  PMTo: NT System Admin IssuesSubject: RE: IIS 
  stopping without reason
  Not related to your current problem, but you need 
  to have a higher level Exchange SP (SP3 plus hotfix, or Sp4 should include 
  this) for the latest version of GroupShield.
  
  Jeff
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
4:24 PMTo: NT System Admin IssuesSubject: RE: IIS 
stopping without reason
It can't be 
Code Red... Until that machine actually goes live, port 80 is blocked to 
outside traffic (and I am toying with the idea of not using port 80 when 
it goes live anyways), besides the Index Server service is disabled. Not 
patched (not my choice, people higher up make decisions I can't argue 
with) doesn't mean totally abandonned. I update the McAfee virus scan 
definition list whenever a new comes out, I have GroupShield running on 
Exchange (updated just as lovingly), I ran three all-files virus checks, 
on top of the on-access scan, since having this problem, I've rebooted 
twice (which should have taken care of Code Red if it had been an issue) 
and I've also ran the Code Red scanner, all to no 
avail.
Eric Peeters Network Administrator TexLoc 
Ltd 

  -Original Message-From: Kevin Lundy 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 
  2001 3:06 PMTo: NT System Admin IssuesSubject: 
  RE: IIS stopping without reason
  The "no patch" is the clue. My betting money is on Code 
  Red - you have heard the news the past month?
  
-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, August 20, 2001 
4:09 PMTo: NT System Admin IssuesSubject: IIS 
stopping without reason
Hello, 
My IIS4 server has been behaving 
strangely for the past four days. It is not a mission-critical unit 
(yet) as it runs only the users' default home page when they start 
IE though it was supposed to go live in a week as the IIS for OWA. 
On to the problem...
All IIS services (NNTP, FTP, HTTP) are 
stopped. I click on one of them at random and hit Start. Nothing 
happens. I click Start again after a few seconds. The service in 
question will start and function normally, however anywhere from 5 
to 15 minutes later, it'll stop again. There is no message in the 
log file other than a notice in the Security log that the IIS 
account logged in and out at start/stop.
Besides IIS, that box is running Win NT 4 
SP6a Server (no patch) and Exchange 5.5 SP1 (no patch) and it acts 
as the BDC.
I've roamed through the Microsoft KB (not 
easy, what keywords do you use to describe this when there's no 
message in the log) to no avail. Anyone out there with a suggestion 
?
Eric Peeters Network Administrator TexLoc Ltd 

OWA/SSL/ACE/WLBS

2001-08-20 Thread Bibel, Laura Y.

Has anyone successfully set up Outlook Web Access in a W2K Windows Load
Balancing environment and used SSL for encryption and ACE SecurID for
additional authentication? We're having trouble with the ACE agent talking
over the correct IP address.


Laura Bibel
Allegheny Energy: Information Services
Voice (724) 830-5966 Fax (724) 853-3600
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Martin Blackstone
Title: Message



Toss 
an SP4 upgrade in while you are at it!

  
  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 3:41 
  PMTo: NT System Admin IssuesSubject: RE: IIS stopping 
  without reason
I ran three all-files virus checks, on top of 
  the on-access   scan, since having this 
  problem   I am puzzled 
  by this statement. I don't believe that there  is anything to "find" for the worm except for maybe some 
   registry entries. The first changed your 
  webpage and I could  see something catching that, 
  but not an anti-virus. The  third put a 
  root.exe and maybe the anti-virus companies are  
  looking for that now. However, I would rely on anti-virus to 
   protect me from a Worm. You shut the 
  door. 
  Well, I ran the virus checks on the assumption that "a" virus, 
  not necessarily Code Red, may be causing this problem and I just wanted to 
  cover my bases.
I've rebooted twice (which should have taken 
  care of   Code Red if it had been an 
  issue)   No, only if 
  you run the patch and then reboot. 
  I was under the impression that Code Red is memory resident, 
  henceforth gone after a reboot (I know if I can be infected once, I can be 
  infected twice), or is the latest variant saved to disk ?
   You are asking for help here and the best advice that I 
  think  any of us could give you is to first get up 
  to date. Even if  we are wrong and it isn't 
  Code Red, there is still a real  good chance that 
  the SPs and HFs could help here. If I had  
  to guess if you called PSS, that is where they would take you  first also. 
  Well, I have a patch party planned for tonight between 3 and 5 
  am, complete with freshly baked croissants and Starbucks hot chocolate for 
  breakfast (come one and come all). What did the trick with the no-patch higher 
  up is the fact that Exchange has markedly slowed down the past few hours (it 
  takes a full minute for my Outlook to open whereas it used to take only a few 
  seconds) and complaints are starting to pile up. The *hope* is fixing IIS will 
  somehow fix Exchange... Stand by for a report tomorrow morning.
  Thanks for everyone's help so far. Hopefully I won't need it 
  anymore tomorrow... :-) 
  Eric Peeters Network 
  Administrator TexLoc Ltd 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: OWA/SSL/ACE/WLBS

2001-08-20 Thread David N. Precht

Have you tried to work with RSA's tech support ?
https://knowledge.rsasecurity.com/formslogin.asp
What form of SSL ?

-Original Message-
From: Bibel, Laura Y. [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 18:40
To: NT System Admin Issues
Subject: OWA/SSL/ACE/WLBS


Has anyone successfully set up Outlook Web Access in a W2K Windows Load
Balancing environment and used SSL for encryption and ACE SecurID for
additional authentication? We're having trouble with the ACE agent talking
over the correct IP address.


Laura Bibel
Allegheny Energy: Information Services
Voice (724) 830-5966 Fax (724) 853-3600
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



_

Do You Yahoo!?

Get your free @yahoo.com address at http://mail.yahoo.com




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Security Audit

2001-08-20 Thread Stephen Chiang

I'm hiring someone to do a security audit of our site, what are some of the
things that I need to ask a security company to do?  Any tips?  THanks.

Stephen



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Security Audit

2001-08-20 Thread Kevin Miller

Ask them to find out how much Sick leave your boss and you have. All
depends on what your company does and what kind of security audit you
are getting? Is this just computer hacking? Or we talking the hole nine
yards, we are gonna date the bosses secretary and find out what she
knows maybe get a job at your company and see what we can find there??  

Kevinm WLKMMAS*TM, QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG
~~~
More letters after my name makes me Smarter.
~~~
please respond back to rent this ad space for your needs


-Original Message-
From: Stephen Chiang [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 3:52 PM
To: NT System Admin Issues
Subject: Security Audit


I'm hiring someone to do a security audit of our site, what are some of
the things that I need to ask a security company to do?  Any tips?
THanks.

Stephen



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Security Audit

2001-08-20 Thread Stephen Chiang

good point... offsite hacking only. 

-Original Message-
From: Kevin Miller [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 6:54 PM
To: NT System Admin Issues
Subject: RE: Security Audit


Ask them to find out how much Sick leave your boss and you have. All
depends on what your company does and what kind of security audit you
are getting? Is this just computer hacking? Or we talking the hole nine
yards, we are gonna date the bosses secretary and find out what she
knows maybe get a job at your company and see what we can find there??  

Kevinm WLKMMAS*TM, QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG
~~~
More letters after my name makes me Smarter.
~~~
please respond back to rent this ad space for your needs


-Original Message-
From: Stephen Chiang [mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 3:52 PM
To: NT System Admin Issues
Subject: Security Audit


I'm hiring someone to do a security audit of our site, what are some of
the things that I need to ask a security company to do?  Any tips?
THanks.

Stephen



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS stopping without reason

2001-08-20 Thread Shawn H. Mesiatowsky
Title: IIS stopping without reason









Stephen,

I
had the same problem on my W2K box. I tried several re-installs, and I figured
out SP2 was the culprit. I would not even put anything on the box, just sp2
right after install, then IIS 5 would quit. I would take a few hours though. I
looked at my logs, and the IIS service would be restarted every minute for 150
minutes or so, then it just wouldnt start any more. I just did a
re-install, and applied SP1 with all IIS hotfixes. I
am guessing it has something to do with my computer hardware configuration. No
other explanation. 



-Original Message-
From: Stephen Chiang
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, August 20, 2001 2:45
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason





you know, I'm seeing the
same thing on one of my IIS 5.0 box and I've already applied the latest
cumulative patch on Windows 2000 Server SP2. Even after the services
stop, when I run the Code Red scanner from Symantec and eEye, they both come
out negative...

















-Original Message-
From: Bunting, Jeff
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 1:33
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason



Not related to your
current problem, but you need to have a higher level Exchange SP (SP3 plus
hotfix, or Sp4 should include this) for the latest version of GroupShield.











Jeff





-Original Message-
From: Eric Peeters
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 4:24
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason



It can't be Code Red... Until that
machine actually goes live, port 80 is blocked to outside traffic (and I am
toying with the idea of not using port 80 when it goes live anyways), besides
the Index Server service is disabled. Not patched (not my choice, people higher
up make decisions I can't argue with) doesn't mean totally abandonned. I update
the McAfee virus scan definition list whenever a new comes out, I have GroupShield
running on Exchange (updated just as lovingly), I ran three all-files virus
checks, on top of the on-access scan, since having this problem, I've rebooted
twice (which should have taken care of Code Red if it had been an issue) and
I've also ran the Code Red scanner, all to no avail.



Eric Peeters 
Network
Administrator 
TexLoc
Ltd 



-Original Message-
From: Kevin Lundy
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 3:06
PM
To: NT System Admin Issues
Subject: RE: IIS stopping without
reason



The no patch
is the clue. My betting money is on Code Red - you have heard the news
the past month?





-Original Message-
From: Eric Peeters
[mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 4:09
PM
To: NT System Admin Issues
Subject: IIS stopping without
reason

Hello, 

My IIS4 server has been behaving strangely for the
past four days. It is not a mission-critical unit (yet) as it runs only the
users' default home page when they start IE though it was supposed to go live in
a week as the IIS for OWA. On to the problem...

All IIS services (NNTP, FTP, HTTP) are stopped. I
click on one of them at random and hit Start. Nothing happens. I click Start
again after a few seconds. The service in question will start and function normally,
however anywhere from 5 to 15 minutes later, it'll stop again. There is no
message in the log file other than a notice in the Security log that the IIS
account logged in and out at start/stop.

Besides IIS, that box is running Win NT 4 SP6a Server
(no patch) and Exchange 5.5 SP1 (no patch) and it acts as the BDC.

I've roamed through the Microsoft KB (not easy, what
keywords do you use to describe this when there's no message in the log) to no
avail. Anyone out there with a suggestion ?

Eric Peeters 
Network
Administrator 
TexLoc
Ltd 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm







DHCP...

2001-08-20 Thread Starrdust

Sorry for asking for what must be a very rookie question, but to install
DHCP on a Win2K domain, does Active Directory 'have' to be used.

Thanks,

-johnp


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




  1   2   >