Re: Please help me understand this
The last couple of IPs are from Microsoft... Just another suggestion, don't throw your IP addresses around. Especially on a MS Proxy box. I'm sure there are all kinds of losers reading lists like this waiting for an address or a url that they can try to break in to. Steve Jacobson <[EMAIL PROTECTED]> on 09/22/2001 09:02:33 PM Please respond to NT System Admin Issues <[EMAIL PROTECTED]> To: NT System Admin Issues <[EMAIL PROTECTED]> cc: Subject: Please help me understand this I really would appreciate it if one of you learned folks could help me understand this. I am running a dual processor Win2K machine with dual Ethernet cards. One card is connected to the Internet via a DSL line, and the ip address is 209.42.32.74. The other Ethernet card is connected to an internal LAN, and its ip address is 10.1.2.2. I use MS Proxy 2.0 as a NAT and firewall on this machine, and the 10.x.x.x address space is defined in the Proxy tables. I am also running MS Exchange 5.5 on this machine as my e-mail server. Netbios name resolution is running on the internal LAN, but not on the segment connected to the Internet. Proxy is set to block port 137 (Netbios). My question is when I examine the packet filter logs, I see that address 10.1.2.2 is attempting to send a netbios request to some external machine on the Internet. This is a fragment from the logs: 9/22/2001, 0:59:37, 10.1.2.2, 210.144.23.58, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 0:59:39, 10.1.2.2, 210.144.23.58, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:03:04, 10.1.2.2, 207.90.4.67, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:03:06, 10.1.2.2, 207.90.4.67, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:05:22, 10.1.2.2, 195.14.133.252, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:05:24, 10.1.2.2, 195.14.133.252, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 7:15:36, 10.1.2.2, 199.172.144.25, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 7:15:38, 10.1.2.2, 199.172.144.25, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 8:52:27, 10.1.2.2, 64.85.93.144, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 8:52:28, 10.1.2.2, 64.85.93.144, Udp, 137, 137, -, 0, 209.42.32.74, -, -, I have no clue who the external machines belong to (I can find the IP block, but it doesn't tell me what the machine is doing), why my server is trying to send them a netbios packet, or what service on the Win2K box is attempting to send the packet. I suspect, however, that Exchange is attempting to connect to another machine somewhere. If someone could enlighten me on what is going on, I would really appreciate it. I would like to keep the Win2K machine from even trying to send any netbios requests. Thanks in advance. Steve Jacobson http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Blue screen (ntoskrnl)
Don't worry about that script. If you create an ERD from another server running the same OS (in the same directory) you can throw that disk in while you're running repair. As soon as the repair says that it can't find any copies of windows on your HDD, and to put your ERD disk in if you have it, throw it in and hit the key. The disk drive will be accessed for about 4 seconds, then the light will go off. Pop the disk out, as this is just enough time for the program to figure out where your OS was before. Wa-la. Game over. Stephen Moreau <[EMAIL PROTECTED]> on 09/22/2001 06:45:45 PM Please respond to NT System Admin Issues <[EMAIL PROTECTED]> To: NT System Admin Issues <[EMAIL PROTECTED]> cc: Subject: Re: Blue screen (ntoskrnl) Thanks for the info but I recently took over these servers (the admin before me quit) and he didn't maintain the erd. I tried the emergency repair process and told the process to look on the harddrives but it didn't work. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Everytime I reboot a win2k term server, my reg entry is reset!
Sorry, make that Autodisconnect = -Original Message- From: Joe L. Casale [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 11:11 PM To: NT System Admin Issues Subject: Everytime I reboot a win2k term server, my reg entry is reset! \System\CurrentControlSet\Services\LanmanServer\Parameters Autodisconnect =3D Gets reset to ! Even if I set the perms to allow system only read, and only me Full! According to MS q article, using net config server /autodisconnect:-1 at the command line disables auto tuning, so it recommends editing the reg directly? WTF is going on! jlc http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Everytime I reboot a win2k term server, my reg entry is reset!
\System\CurrentControlSet\Services\LanmanServer\Parameters Autodisconnect =3D Gets reset to ! Even if I set the perms to allow system only read, and only me Full! According to MS q article, using net config server /autodisconnect:-1 at the command line disables auto tuning, so it recommends editing the reg directly? WTF is going on! jlc http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Problems with cdrom drive under Windows 2000
HCL -- check to see if it's supported. If it is, update the drivers. Denise -Original Message- From: Jason Youngquist [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 1:08 PM To: NT System Admin Issues Subject: Problems with cdrom drive under Windows 2000 I've been having some problems with a cdrom drive under Windows 2000. Sometimes when I insert a cd into the cdrom drive it will not get recognized. I've tried 10 known good cds and none of them will work. (ie the label and files do not show up in explorer). I then reboot the machine and try the same 10 cds again and this time they all appear in explorer. I did some searching and really didn't find much. Any thoughts? Thanks, Jason Youngquist [EMAIL PROTECTED] http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: ISS and NT password crap
WTF? Jesse E. Gardner, MCP P.O. Box 11431 Columbia, SC 29211 (803)216-0119 (803)216-0921 fax (803)361-4361 cell [EMAIL PROTECTED] -Original Message- From: Tiffany Belcher [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 4:22 PM To: NT System Admin Issues Subject:ISS and NT password crap I have beat myself silly trying to figure out wtf and why its asking me ofr a passwrd to vew my message board. I have given full control to jsut about all in the security settings and still a password. HELP http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Accpac Plus 6.5 on Win2k Terminal Server
Yup, its installed locally, well at least all the files are copied over from the old NT4 server, our VAR said this was all that was required, as she has done it this way for a while... Thanks for the help! jlc -Original Message- From: Dave Cook [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 7:14 PM To: NT System Admin Issues Subject: RE: Accpac Plus 6.5 on Win2k Terminal Server Joe, Have worked with some the Accpac products for several years. Accpac Pro Series has had problems with Terminal services also. with Pro Series it occurs when the Accpac is installed on another server other than the one running terminal services (BTW does not happen on NT 4.0 Terminal). Several of the Accpac SP's have worked extensively with MS and only been able to determine that it has something to do with drive mapping to another server and moving the app to terminal server solves the problem. If you have the Accpac app installed on another server, try moving it too the terminal server. HTH, Dave -Original Message- From: Joe L. Casale [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 5:53 PM To: NT System Admin Issues Subject: RE: Accpac Plus 6.5 on Win2k Terminal Server Well, I just spoke w/ Accpac them selves, and the tech went a level above to verufy, it is tested on wkst, but not ts, so they wont support it. I have all oplock settings correct I think, and I just altered the lanman disco to max, the tech said it sounds like OE DayEnd is getting interrupted... What a basty! I am told by the guy that 7 is supported, and we might just goto adagio and give it a windows front end... What a real POS accpac is, its WAY overpriced for what you get... jlc -Original Message- From: Benjamin Zachary [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 5:09 PM To: NT System Admin Issues Subject: RE: Accpac Plus 6.5 on Win2k Terminal Server That's funny we were looking at accpac from a consulting point of view and the guys said it was no problem on win2k, win2k ts or anything of the like.. We ended up going with a different package though. -Original Message- From: Joe Casale [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 4:57 PM To: NT System Admin Issues Subject: Accpac Plus 6.5 on Win2k Terminal Server I am having OE troubles, it isnt completing something, and untill our rep runs FixIT and enters her pwd, no one can do OE after dayend is done? Anyideas, anyone running this ver in 2k terminal server? Accpac says it isnt supported, as they have not done any testing, but I know its been used! __ Do You Yahoo!? Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger. http://im.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Accpac Plus 6.5 on Win2k Terminal Server
Joe, Have worked with some the Accpac products for several years. Accpac Pro Series has had problems with Terminal services also. with Pro Series it occurs when the Accpac is installed on another server other than the one running terminal services (BTW does not happen on NT 4.0 Terminal). Several of the Accpac SP's have worked extensively with MS and only been able to determine that it has something to do with drive mapping to another server and moving the app to terminal server solves the problem. If you have the Accpac app installed on another server, try moving it too the terminal server. HTH, Dave -Original Message- From: Joe L. Casale [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 5:53 PM To: NT System Admin Issues Subject: RE: Accpac Plus 6.5 on Win2k Terminal Server Well, I just spoke w/ Accpac them selves, and the tech went a level above to verufy, it is tested on wkst, but not ts, so they wont support it. I have all oplock settings correct I think, and I just altered the lanman disco to max, the tech said it sounds like OE DayEnd is getting interrupted... What a basty! I am told by the guy that 7 is supported, and we might just goto adagio and give it a windows front end... What a real POS accpac is, its WAY overpriced for what you get... jlc -Original Message- From: Benjamin Zachary [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 5:09 PM To: NT System Admin Issues Subject: RE: Accpac Plus 6.5 on Win2k Terminal Server That's funny we were looking at accpac from a consulting point of view and the guys said it was no problem on win2k, win2k ts or anything of the like.. We ended up going with a different package though. -Original Message- From: Joe Casale [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 4:57 PM To: NT System Admin Issues Subject: Accpac Plus 6.5 on Win2k Terminal Server I am having OE troubles, it isnt completing something, and untill our rep runs FixIT and enters her pwd, no one can do OE after dayend is done? Anyideas, anyone running this ver in 2k terminal server? Accpac says it isnt supported, as they have not done any testing, but I know its been used! __ Do You Yahoo!? Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger. http://im.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Please help me understand this
I really would appreciate it if one of you learned folks could help me understand this. I am running a dual processor Win2K machine with dual Ethernet cards. One card is connected to the Internet via a DSL line, and the ip address is 209.42.32.74. The other Ethernet card is connected to an internal LAN, and its ip address is 10.1.2.2. I use MS Proxy 2.0 as a NAT and firewall on this machine, and the 10.x.x.x address space is defined in the Proxy tables. I am also running MS Exchange 5.5 on this machine as my e-mail server. Netbios name resolution is running on the internal LAN, but not on the segment connected to the Internet. Proxy is set to block port 137 (Netbios). My question is when I examine the packet filter logs, I see that address 10.1.2.2 is attempting to send a netbios request to some external machine on the Internet. This is a fragment from the logs: 9/22/2001, 0:59:37, 10.1.2.2, 210.144.23.58, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 0:59:39, 10.1.2.2, 210.144.23.58, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:03:04, 10.1.2.2, 207.90.4.67, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:03:06, 10.1.2.2, 207.90.4.67, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:05:22, 10.1.2.2, 195.14.133.252, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 2:05:24, 10.1.2.2, 195.14.133.252, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 7:15:36, 10.1.2.2, 199.172.144.25, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 7:15:38, 10.1.2.2, 199.172.144.25, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 8:52:27, 10.1.2.2, 64.85.93.144, Udp, 137, 137, -, 0, 209.42.32.74, -, -, 9/22/2001, 8:52:28, 10.1.2.2, 64.85.93.144, Udp, 137, 137, -, 0, 209.42.32.74, -, -, I have no clue who the external machines belong to (I can find the IP block, but it doesn't tell me what the machine is doing), why my server is trying to send them a netbios packet, or what service on the Win2K box is attempting to send the packet. I suspect, however, that Exchange is attempting to connect to another machine somewhere. If someone could enlighten me on what is going on, I would really appreciate it. I would like to keep the Win2K machine from even trying to send any netbios requests. Thanks in advance. Steve Jacobson http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Accpac Plus 6.5 on Win2k Terminal Server
Well, I just spoke w/ Accpac them selves, and the tech went a level above to verufy, it is tested on wkst, but not ts, so they wont support it. I have all oplock settings correct I think, and I just altered the lanman disco to max, the tech said it sounds like OE DayEnd is getting interrupted... What a basty! I am told by the guy that 7 is supported, and we might just goto adagio and give it a windows front end... What a real POS accpac is, its WAY overpriced for what you get... jlc -Original Message- From: Benjamin Zachary [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 5:09 PM To: NT System Admin Issues Subject: RE: Accpac Plus 6.5 on Win2k Terminal Server That's funny we were looking at accpac from a consulting point of view and the guys said it was no problem on win2k, win2k ts or anything of the like.. We ended up going with a different package though. -Original Message- From: Joe Casale [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 4:57 PM To: NT System Admin Issues Subject: Accpac Plus 6.5 on Win2k Terminal Server I am having OE troubles, it isnt completing something, and untill our rep runs FixIT and enters her pwd, no one can do OE after dayend is done? Anyideas, anyone running this ver in 2k terminal server? Accpac says it isnt supported, as they have not done any testing, but I know its been used! __ Do You Yahoo!? Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger. http://im.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Blue screen (ntoskrnl)
>>One of my servers died today - blue screen stating: >>IRQL_NOT_LESS_OR_EQUAL...blahblah..ntoskrnl.exe http://www.ultratech-llc.com/KB/?File=BSOD.TXT >>Can I create a dual boot system then copy the new >>ntoskrnl.exe file from the new install and replace >>the ntoskrnl.exe file in the old install? That's one way, although your issue might not actually be NTOSKRNL http://www.ultratech-llc.com/KB/?File=RepairNT.TXT == ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT == "And now a word from Wall Street: "HELP!" >-Original Message- >From: Stephen Moreau [mailto:[EMAIL PROTECTED]] >Sent: Saturday, September 22, 2001 6:22 PM >To: NT System Admin Issues >Subject: Blue screen (ntoskrnl) > > >One of my servers died today - blue screen stating: >IRQL_NOT_LESS_OR_EQUAL...blahblah..ntoskrnl.exe > > >Can I create a dual boot system then copy the new >ntoskrnl.exe file from >the new install and replace the ntoskrnl.exe file in the old install? > >All suggestions/ideas greatly appreciated. > >Steve > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Accpac Plus 6.5 on Win2k Terminal Server
That's funny we were looking at accpac from a consulting point of view and the guys said it was no problem on win2k, win2k ts or anything of the like.. We ended up going with a different package though. -Original Message- From: Joe Casale [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 4:57 PM To: NT System Admin Issues Subject: Accpac Plus 6.5 on Win2k Terminal Server I am having OE troubles, it isnt completing something, and untill our rep runs FixIT and enters her pwd, no one can do OE after dayend is done? Anyideas, anyone running this ver in 2k terminal server? Accpac says it isnt supported, as they have not done any testing, but I know its been used! __ Do You Yahoo!? Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger. http://im.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Nimda Breakout Help!
Unplug the infected machine from the network. -K > -Original Message- > From: Roger Ali [mailto:[EMAIL PROTECTED]] > Sent: Saturday, September 22, 2001 2:06 PM > To: NT System Admin Issues > Subject: Nimda Breakout Help! > > > Guys, > Does anyone know a way to prevent the PE_Nimda and all other > variations from infecting servers. I've got a mixed network 2K and NT and > all my servers were hit, I have trend office scan and trend server protect > and all it does is notifies me about the virus and that it > couldn't clean or > move the files. I've gotten the cumulative patch from trend's site and > applied it to all my servers but they keep getting infected. Is > there a way > to stop this at all?? Please help. > > Thanks > Roger Ali > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Blue screen (ntoskrnl)
Check out www.bootdisk.com "Stephen Moreau" To: "NT System Admin Issues" <[EMAIL PROTECTED]> Subject: RE: Blue screen (ntoskrnl) 09/22/2001 04:17 PM Please respond to "NT System Admin Issues" Thanks, Steve, for the batch files. I'll give 'em a try. Anything to make things a little easier. Do you know how to make a bootable floppy for NT? I can restore the system files/registry from tape but I need a way to get into my dead system to replace the files. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Blue screen (ntoskrnl)
http://support.microsoft.com/support/kb/articles/Q119/4/67.asp Also, I recall a utility from Dr Dos (I think) that would give you a free boot disk utility. Something to consider for future - the IDR from Veritas accompanied with a fll backup will restore a server from boot disk and tape drive. Excellent product and service. Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: Stephen Moreau [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 7:18 PM To: NT System Admin Issues Subject: RE: Blue screen (ntoskrnl) Thanks, Steve, for the batch files. I'll give 'em a try. Anything to make things a little easier. Do you know how to make a bootable floppy for NT? I can restore the system files/registry from tape but I need a way to get into my dead system to replace the files. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Nimda Breakout Help!
Defintely keep up to date on patches...especially for IIS. Check out Microsoft's bulletin: MS01-044. It has links for the cumulative patch (fixes all known errors) for IIS. I use Norton and of my 10 servers only one got bit my Nimda (one of my BDCs). Luckily Norton contained it and only shut down the server. The Nimda fix from Symantec fixed everything. Good luck! http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Blue screen (ntoskrnl)
Thanks, Steve, for the batch files. I'll give 'em a try. Anything to make things a little easier. Do you know how to make a bootable floppy for NT? I can restore the system files/registry from tape but I need a way to get into my dead system to replace the files. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Blue screen (ntoskrnl)
Pretty cool. Thanks.. -Original Message- From: Clark, Steve [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 6:58 PM To: NT System Admin Issues Subject: RE: Blue screen (ntoskrnl) As long as the rdisk /s works on W2K it will work. Here's the scripts: Each Sunday night at 0 dark thirty, this bath file runs: @echo off REM Created by Steve Clark - Clark Systems Support, LLC REM to automatically backup the registry and such REM Copies to \\server\drivers\erd\%computername% REM Date: 2/17/00 %windir%\system32/rdisk /s- if not exist d:\drivers\winnt\erd\%computername% md d:\drivers\winnt\erd\%computername% copy %windir%\repair\*.* d:\drivers\winnt\erd\%computername%\ The one time per month, I email the zip files to myself using BLAT REM This will email the ERD for all REM servers at office REM Created 6/10 by Steve Clark - Clark Systems Support, LLC REM -- d:\drivers\winnt\erd\pkzip.exe d:\drivers\winnt\erd\server.zip d:\drivers\winnt\erd\server\*.* c:\blat\blat c:\blat\erd.txt -s "ERD's for office" -t [EMAIL PROTECTED] -attach d:\drivers\winnt\erd\server.zip It may not be the prettiest solution but I now have the ERD's in my office, on the backup tape as well as on a different server than the source. Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: Clark, Steve [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 6:50 PM To: Clark, Steve Subject: RE: Blue screen (ntoskrnl) Hi Steve Is the batch process for win2k ? if so could you please send it over to me, thanks in advance Gareth Nice - welcome to the new company! I've got a batch process to create ERD's automatically if you're interested. Steve Clark Clark Systems Support, LLC AVIEN Charter Member www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: Stephen Moreau [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 6:46 PM To: NT System Admin Issues Subject: Re: Blue screen (ntoskrnl) Thanks for the info but I recently took over these servers (the admin before me quit) and he didn't maintain the erd. I tried the emergency repair process and told the process to look on the harddrives but it didn't work. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Blue screen (ntoskrnl)
As long as the rdisk /s works on W2K it will work. Here's the scripts: Each Sunday night at 0 dark thirty, this bath file runs: @echo off REM Created by Steve Clark - Clark Systems Support, LLC REM to automatically backup the registry and such REM Copies to \\server\drivers\erd\%computername% REM Date: 2/17/00 %windir%\system32/rdisk /s- if not exist d:\drivers\winnt\erd\%computername% md d:\drivers\winnt\erd\%computername% copy %windir%\repair\*.* d:\drivers\winnt\erd\%computername%\ The one time per month, I email the zip files to myself using BLAT REM This will email the ERD for all REM servers at office REM Created 6/10 by Steve Clark - Clark Systems Support, LLC REM -- d:\drivers\winnt\erd\pkzip.exe d:\drivers\winnt\erd\server.zip d:\drivers\winnt\erd\server\*.* c:\blat\blat c:\blat\erd.txt -s "ERD's for office" -t [EMAIL PROTECTED] -attach d:\drivers\winnt\erd\server.zip It may not be the prettiest solution but I now have the ERD's in my office, on the backup tape as well as on a different server than the source. Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: Clark, Steve [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 6:50 PM To: Clark, Steve Subject: RE: Blue screen (ntoskrnl) Hi Steve Is the batch process for win2k ? if so could you please send it over to me, thanks in advance Gareth Nice - welcome to the new company! I've got a batch process to create ERD's automatically if you're interested. Steve Clark Clark Systems Support, LLC AVIEN Charter Member www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: Stephen Moreau [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 6:46 PM To: NT System Admin Issues Subject: Re: Blue screen (ntoskrnl) Thanks for the info but I recently took over these servers (the admin before me quit) and he didn't maintain the erd. I tried the emergency repair process and told the process to look on the harddrives but it didn't work. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Blue screen (ntoskrnl)
Nice - welcome to the new company! I've got a batch process to create ERD's automatically if you're interested. Steve Clark Clark Systems Support, LLC AVIEN Charter Member www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: Stephen Moreau [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 6:46 PM To: NT System Admin Issues Subject: Re: Blue screen (ntoskrnl) Thanks for the info but I recently took over these servers (the admin before me quit) and he didn't maintain the erd. I tried the emergency repair process and told the process to look on the harddrives but it didn't work. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Blue screen (ntoskrnl)
Thanks for the info but I recently took over these servers (the admin before me quit) and he didn't maintain the erd. I tried the emergency repair process and told the process to look on the harddrives but it didn't work. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: Blue screen (ntoskrnl)
Hi Stephen, Why not use ERD Disk and boot from cd use repair mode and let it fix the problem for yourself ? -- Best regards, Gareth, MCP mailto:[EMAIL PROTECTED] Saturday, September 22, 2001, 11:22:28 PM, you wrote: SM> One of my servers died today - blue screen stating: SM> IRQL_NOT_LESS_OR_EQUAL...blahblah..ntoskrnl.exe SM> Can I create a dual boot system then copy the new ntoskrnl.exe file from SM> the new install and replace the ntoskrnl.exe file in the old install? SM> All suggestions/ideas greatly appreciated. SM> Steve SM> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Blue screen (ntoskrnl)
One of my servers died today - blue screen stating: IRQL_NOT_LESS_OR_EQUAL...blahblah..ntoskrnl.exe Can I create a dual boot system then copy the new ntoskrnl.exe file from the new install and replace the ntoskrnl.exe file in the old install? All suggestions/ideas greatly appreciated. Steve http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: ISS and NT password crap
Usually IE (and I am assuming that's what you're using to connect to whatever site you're talking about) prmpts for a password when it cannot detect that the site is part of the local intranet (again assuming that it is in your case as you give no info) You have 2 options - make sure your TCP/IP / DNS / WINS / networking is all correct domain-wise OR go into IE, tools, internet options, Security, Local Intranet, Sites, Advanced, and add the URL to the zone. No more password prompts. Ian - [EMAIL PROTECTED] - REALITY.SYS corrupted -- unable to recover universe. -Original Message- From: Tiffany Belcher [mailto:[EMAIL PROTECTED]] Sent: September 22, 2001 16:22 PM To: NT System Admin Issues Subject: ISS and NT password crap I have beat myself silly trying to figure out wtf and why its asking me ofr a passwrd to vew my message board. I have given full control to jsut about all in the security settings and still a password. HELP http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
ISS and NT password crap
I have beat myself silly trying to figure out wtf and why its asking me ofr a passwrd to vew my message board. I have given full control to jsut about all in the security settings and still a password. HELP http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: How do you all do it?
Deleting this thread reduced my unread mmessages by 36 :-) -Original Message- From: Dewar Charles R [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 9:09 AM To: NT System Admin Issues Subject: RE: How do you all do it? Sort by thread. Scan messages. Delete whole threads. -Original Message- From: Don Collier (Intermap Denver) [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 20, 2001 5:03 PM To: NT System Admin Issues Subject: How do you all do it? I just joined this list today and am overwhelmed with email. Almost 200 messages today. How do you all keep up with this list and get any work done? (Not meant to imply anything) _ Don Collier Network Administrator Intermap Technologies Inc. Voice: 303-708-0955 x-207 Fax:303-708-0952 [EMAIL PROTECTED] www.intermaptechnologies.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: AD Connector
Did you run forestPrep and DomainPrep prior to installing the ADC? Your best bet is to run the Exchange2K ForestPrep and DomainPrep in the forest and AD domain that you will be connecting to. Then you should be able to install the ADC service on the machine that you want. Diane -Original Message-From: Bob Chyka [mailto:[EMAIL PROTECTED]]Sent: Friday, September 21, 2001 11:51 AMTo: NT System Admin IssuesSubject: AD Connector Hello, i am having trouble installing the AD connector on a member server that i am going to run exchange 5.5 off of. i have a couple questions... can the AD connector be installed on a member server? when i install it, it says i dont have permissions to update the Schema. i am logging in as administrator with domain admin rights and schema admin rights. any ideas why i can install this? we have 2 2000 controllers with ad running in native mode.. thanks, Bob C.http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Nimda Breakout Help!
1. Keep your servers up to date on patches. NIMDA used old vulnerabilities 2. Use something like URLScan and IISSecure on Web Servers 3. Make use of AV software 4. Employ good security practices 5. Read the security lists 6. Read the AV sites See the following: http://www.ultratech-llc.com/KB/?File=Security.TXT http://www.ultratech-llc.com/KB/?File=AntiVirus.TXT == ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT == "Nakedness has no color: this can come as news only to those who have never covered, or been covered by, another naked human being." -- James Arthur Baldwin, NNITS. >-Original Message- >From: Roger Ali [mailto:[EMAIL PROTECTED]] >Sent: Saturday, September 22, 2001 2:06 PM >To: NT System Admin Issues >Subject: Nimda Breakout Help! > > >Guys, > Does anyone know a way to prevent the PE_Nimda and all other >variations from infecting servers. I've got a mixed network >2K and NT and >all my servers were hit, I have trend office scan and trend >server protect >and all it does is notifies me about the virus and that it >couldn't clean or >move the files. I've gotten the cumulative patch from >trend's site and >applied it to all my servers but they keep getting infected. > Is there a way >to stop this at all?? Please help. > >Thanks >Roger Ali > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Fax service
Sorry guys, I have a brain fade, I gotta remove the fax service from a 2k term server, and 1 win2k pro box. How tha heck do I do that? It isn't in windows components, and the service is set to disabled, that the cust wants it out! jlc http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Nimda Breakout Help!
Guys, Does anyone know a way to prevent the PE_Nimda and all other variations from infecting servers. I've got a mixed network 2K and NT and all my servers were hit, I have trend office scan and trend server protect and all it does is notifies me about the virus and that it couldn't clean or move the files. I've gotten the cumulative patch from trend's site and applied it to all my servers but they keep getting infected. Is there a way to stop this at all?? Please help. Thanks Roger Ali http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Nimda and HTML Files
Good thinking! I did try the url several times and wasn't getting a response from the server, which is why I included the code. -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 12:52 PM To: NT System Admin Issues Subject: RE: Nimda and HTML Files That's why I posted a url to the info :-) - Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: Bunting, Jeff [mailto:[EMAIL PROTECTED]] > Sent: 21 September 2001 17:15 > To: NT System Admin Issues > Subject: RE: Nimda and HTML Files > > > Yikes!! I got a bunch of antigen messages after including > that code in the > email. Looks like a lot of people are scanning for it. > > -Original Message- > From: Bunting, Jeff [mailto:[EMAIL PROTECTED]] > Sent: Friday, September 21, 2001 12:13 PM > To: NT System Admin Issues > Subject: RE: Nimda and HTML Files > > > This is what it adds at the end of .htm, .html, and .asp files: > > > > It is only one line; I haven't seen anything else. > > Jeff > > -Original Message- > From: Mark Kelsay [mailto:[EMAIL PROTECTED]] > Sent: Friday, September 21, 2001 11:35 AM > To: NT System Admin Issues > Subject: Nimda and HTML Files > > > I have read that nimda appends two lines of code to htm, html > and asp files. > Does anyone know what those two lines of code are or where I > can find out? > > TIA, > > Mark Kelsay > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT on Windows ME
Is Fastfind (comes with MS Office) running? It will index the hard drive every couple of hours and can really put a hit on slower machines. Jeff -Original Message- From: John Cesta - Lists [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 2:08 AM To: NT System Admin Issues Subject: OT on Windows ME I have been a member of this list for about a month. We are a small company and I don't have the benefit of a large IT dept so I thought I'd throw this question to you guys. My personal PC is a Windows ME PC. Today it started doing something really weird. About every two hours it just kind of stops. I mean, it still works and all ( although there is no more Internet access) but it is very, very slow. Can't hardly move the mouse and I have to shutdown too get it back. It's weird because it goes south almost like clock work every 1.5 to 2 hours. I don't have a virus, I am fairly certain of that. It actually happens all of a sudden, yea, I sat here and waited for it to happen. It doesn't seem to be a gradual thing, I mean, it doesn't get progressively slow, it happens all at once all of a sudden. It is a royal PITA. Any ideas? : Thanks, John Cesta http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
Re: OT on Windows ME
Is all the power management turned off? Speed Step? Mike - Original Message - From: "David N. Precht" <[EMAIL PROTECTED]> To: "NT System Admin Issues" <[EMAIL PROTECTED]> Sent: Saturday, September 22, 2001 7:25 AM Subject: RE: OT on Windows ME > Could it be a heat issue, I have seen this on SO many laptops > > -Original Message- > From: John Cesta - Lists [mailto:[EMAIL PROTECTED]] > Sent: Saturday, September 22, 2001 02:08 > To: NT System Admin Issues > Subject: OT on Windows ME > > > > > I have been a member of this list for about a month. We are a small > company and I don't have the benefit of a large IT dept so I thought I'd > throw this question to you guys. My personal PC is a Windows ME PC. > Today it started doing something really weird. About every two hours it > just kind of stops. I mean, it still works and all ( although there is > no more Internet access) but it is very, very slow. Can't hardly move > the mouse and I have to shutdown too get it back. It's weird because it > goes south almost like clock work every 1.5 to 2 hours. I don't have a > virus, I am fairly certain of that. It actually happens all of a sudden, > yea, I sat here and waited for it to happen. It doesn't seem to be a > gradual thing, I mean, it doesn't get progressively slow, it happens all > at once all of a sudden. It is a royal PITA. > > Any ideas? : > > Thanks, > > John Cesta > > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm > > > > _ > > Do You Yahoo!? > > Get your free @yahoo.com address at http://mail.yahoo.com > > > > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT: Time Warner Telecom
So who's left??? Don Ely <[EMAIL PROTECTED]> on 09/21/2001 02:07:02 PM Please respond to NT System Admin Issues <[EMAIL PROTECTED]> To: NT System Admin Issues <[EMAIL PROTECTED]> cc: Subject: RE: OT: Time Warner Telecom Well... I don't know what to tell you. I do know that when you actually have to use tech support that unless you're calling between 8am to 5pm Monday thru Friday that you'll be waiting a long time for any kind of assistance whatsoever. I look at it like this, once I have a bad experience from an ISP, I'll never go back to them. For instance.. MCI, terrible tech support, won't use them again. Teligent, again terrible tech support and service, won't use them again, TWT, terrible tech support, won't use them again. To each their own though, you never know, TWT may have improved. I doubt it though... -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 10:55 AM To: NT System Admin Issues Subject: RE: OT: Time Warner Telecom They are offering a deal. Buy 2 Telecom T-1's, get a data T-1 for a $100 a mo. -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 10:53 AM To: NT System Admin Issues Subject: RE: OT: Time Warner Telecom They offer what they like to call Clear Channel Voice and Data T's. I don't remember if they're offering DS-3's or the like yet... D -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 10:34 AM To: NT System Admin Issues Subject: Re: OT: Time Warner Telecom What type of telecomm "services" are they offering? Martin Blackstone <[EMAIL PROTECTED]> on 09/21/2001 01:08:47 PM Please respond to NT System Admin Issues <[EMAIL PROTECTED]> To: NT System Admin Issues <[EMAIL PROTECTED]> cc: Subject: OT: Time Warner Telecom Anyone ever heard of or have experience with this tentacle of the TW machine? They are pitching us telecomm services, but I have never heard of anyone who uses them. Martin Blackstone Director, Information Technologies Superior Access Insurance Services 949.470.2111 x279 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT on Windows ME
Could it be a heat issue, I have seen this on SO many laptops -Original Message- From: John Cesta - Lists [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 02:08 To: NT System Admin Issues Subject: OT on Windows ME I have been a member of this list for about a month. We are a small company and I don't have the benefit of a large IT dept so I thought I'd throw this question to you guys. My personal PC is a Windows ME PC. Today it started doing something really weird. About every two hours it just kind of stops. I mean, it still works and all ( although there is no more Internet access) but it is very, very slow. Can't hardly move the mouse and I have to shutdown too get it back. It's weird because it goes south almost like clock work every 1.5 to 2 hours. I don't have a virus, I am fairly certain of that. It actually happens all of a sudden, yea, I sat here and waited for it to happen. It doesn't seem to be a gradual thing, I mean, it doesn't get progressively slow, it happens all at once all of a sudden. It is a royal PITA. Any ideas? : Thanks, John Cesta http://www.sunbelt-software.com/ntsysadmin_list_charter.htm _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT on Windows ME
You cant do the same three finger salute like in NT or 2k with ME, it only gives a 9x memory breakdown (like how much memory its taking) -Original Message- From: Clark, Steve [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 08:06 To: NT System Admin Issues Subject: RE: OT on Windows ME Don't know much about ME other than it's a stripped out version of W2K. Can you look at the logs or do a Ctrl-Alt-Del and look at what's running when it slows. My focus is small shops - I realize money is very tight; however, you need to get rid of ME from the standpoint of your company trying to do anything network related down the road ME will not support. Good luck. Steve Clark Clark Systems Support, LLC AVIEN Charter Member www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: John Cesta - Lists [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 2:08 AM To: NT System Admin Issues Subject: OT on Windows ME I have been a member of this list for about a month. We are a small company and I don't have the benefit of a large IT dept so I thought I'd throw this question to you guys. My personal PC is a Windows ME PC. Today it started doing something really weird. About every two hours it just kind of stops. I mean, it still works and all ( although there is no more Internet access) but it is very, very slow. Can't hardly move the mouse and I have to shutdown too get it back. It's weird because it goes south almost like clock work every 1.5 to 2 hours. I don't have a virus, I am fairly certain of that. It actually happens all of a sudden, yea, I sat here and waited for it to happen. It doesn't seem to be a gradual thing, I mean, it doesn't get progressively slow, it happens all at once all of a sudden. It is a royal PITA. Any ideas? : Thanks, John Cesta http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: OT on Windows ME
Don't know much about ME other than it's a stripped out version of W2K. Can you look at the logs or do a Ctrl-Alt-Del and look at what's running when it slows. My focus is small shops - I realize money is very tight; however, you need to get rid of ME from the standpoint of your company trying to do anything network related down the road ME will not support. Good luck. Steve Clark Clark Systems Support, LLC AVIEN Charter Member www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message- From: John Cesta - Lists [mailto:[EMAIL PROTECTED]] Sent: Saturday, September 22, 2001 2:08 AM To: NT System Admin Issues Subject: OT on Windows ME I have been a member of this list for about a month. We are a small company and I don't have the benefit of a large IT dept so I thought I'd throw this question to you guys. My personal PC is a Windows ME PC. Today it started doing something really weird. About every two hours it just kind of stops. I mean, it still works and all ( although there is no more Internet access) but it is very, very slow. Can't hardly move the mouse and I have to shutdown too get it back. It's weird because it goes south almost like clock work every 1.5 to 2 hours. I don't have a virus, I am fairly certain of that. It actually happens all of a sudden, yea, I sat here and waited for it to happen. It doesn't seem to be a gradual thing, I mean, it doesn't get progressively slow, it happens all at once all of a sudden. It is a royal PITA. Any ideas? : Thanks, John Cesta http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
