Re: redimensioning partitions on RAID 1+0

[Ben Scott]

On Mon, Mar 17, 2008 at 10:29 PM, Miguel Gonzalez Castaños
<[EMAIL PROTECTED]> wrote:
>  It's a hardware RAID.

  So, hardware RAID, with Windows seeing the RAID set as one big disk.
 And that "disk" is divided into two NTFS partitions.  Right?

  If so, Linux may work.  The Linux disc you use will need to have a
driver for your RAID controller.  Otherwise, it won't even see the
"disk".  Then parted can be used to resize NTFS partitions in most
cases.  I've used it for that myself, although never on a Windows
server, let alone a production server.

  Make sure your backups are good.  :)

-- Ben

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: redimensioning partitions on RAID 1+0

[Miguel Gonzalez Castaños]

Ben Scott wrote:

On Mon, Mar 17, 2008 at 12:43 PM, Miguel Gonzalez
<[EMAIL PROTECTED]> wrote:
  

 We have two logical Windows partitions on a RAID 1+0.



  Windows software RAID, or hardware RAID controller?  If hardware,
what kind of controller?

  

  I was thinkinng of using the Ghost linux clone
 partimage, but I'm really concerned that doing this
 kind of operations could break the RAID?



  If this is software RAID, partimage can only do a raw block-by-block
image copy; it doesn't understand Windows software RAID, and thus
cannot shrink or grow the partition.

  If this is hardware RAID... the partimage docs say it can only grow
the image, not shrink it, so I don't think that will work, either.
(I've never tried.)
  


It's a hardware RAID. I was thinking of using the rescuecd live cd and 
actually I was thinking of using gparted. Apparently It'd be possible to 
shrink the partitions too


Any experience?

Miguel


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: DNS Wildcard zones for malware protection

[Roger Wright]

OpenDNS provides filtering by category now.  Could you perhaps integrate
that into your DNS strategy?



Roger Wright 
Network Administrator 
727.572.7076  x388 
 

Fisherman's Credo:  Fillet and Release. 
  
  
From: Tim Evans [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 7:40 PM 
To: NT System Admin Issues 
Subject: DNS Wildcard zones for malware protection 
  
I've been looking at HYPERLINK
"http://www.malwaredomains.com"www.malwaredomains.com and thinking about
setting up a block list using their list of malicious domains. I'm
thinking about doing this by setting up a wildcard zone for each domain
on our DNS server. Right now, the list has almost 20,000 domains.  We're
running Windows 2003 domain & forest functional mode, with AD integrated
zones. Our DNS servers are for internal use only and are not publicly
accessible. Here is the batch file I'm planning to use:

wget http://www.malwaredomains.com/files/domains.txt 
for /F "eol=# tokens=1 " %%f in (domains.txt) do @echo %%f >>file.txt 
for /F %%f in (file.txt) do dnscmd %server% /zoneadd %%f /DsPrimary /DP
/forest 
for /F %%f in (file.txt) do dnscmd %server% /recordadd %%f * A 127.0.0.1

  
Some questions: 
-Is there a more efficient way to block these domains (we also have ISA
2006)? 
-Is there a downside to having all that many domains on our DNS servers?

-any other words of wisdoms or warnings before I try this? 
  
Thanks. 
  
...Tim 
  
  
  


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: redimensioning partitions on RAID 1+0

[Ben Scott]

On Mon, Mar 17, 2008 at 12:43 PM, Miguel Gonzalez
<[EMAIL PROTECTED]> wrote:
>  We have two logical Windows partitions on a RAID 1+0.

  Windows software RAID, or hardware RAID controller?  If hardware,
what kind of controller?

>   I was thinkinng of using the Ghost linux clone
>  partimage, but I'm really concerned that doing this
>  kind of operations could break the RAID?

  If this is software RAID, partimage can only do a raw block-by-block
image copy; it doesn't understand Windows software RAID, and thus
cannot shrink or grow the partition.

  If this is hardware RAID... the partimage docs say it can only grow
the image, not shrink it, so I don't think that will work, either.
(I've never tried.)

-- Ben

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: DNS Wildcard zones for malware protection

[Michael B. Smith]

Theoretically, Windows is ready to handle domain loads of "any size". I know
there are quite a number of companies hosting many thousands of domains
using Windows DNS.

The last time the question came up in a call I was on where DNS developers
were on the call (which was around Windows 2003 SP1), they said that they
believed Windows DNS was ready to go up against any other DNS server.

The only major issue I've seen when hosting large numbers of domains (around
a couple thousand) is the impact of defrosting the domains after a DNS
server restart. That can be I/O intensive. Bind has a similar issue. I think
djbdns works around it by pre-salting database indices.

The only other major issue that I've run into is that Windows DNS doesn't
really allow you to separate being a caching server from being an
authoritative server (in the same operating system instance).

Regards,

Michael B. Smith
MCSE/Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Ben Scott [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 9:06 PM
To: NT System Admin Issues
Subject: Re: DNS Wildcard zones for malware protection

On Mon, Mar 17, 2008 at 7:39 PM, Tim Evans <[EMAIL PROTECTED]> wrote:
> I've been looking at www.malwaredomains.com and thinking about setting up
a
> block list using their list of malicious domains. I'm thinking about doing
> this by setting up a wildcard zone for each domain on our DNS server.

  You don't need to use a DNS wildcard record.  Simply claim authority
for the domain in question, and any subdomain which might be
referenced under the domain will get an NXDOMAIN record in return.

> Right now, the list has almost 20,000 domains.

  With that many, you might want to configure your Windows nameservers
to forward queries to different server, and do the filtering on that
server.  Possibly using ISC BIND or another nameserver program.  I
haven't seen any reports on Windows 2003, but MS-DNS in Windows 2000
tended to... "have issues"... under large loads like that.  It wasn't
really designed with that in mind.

> -Is there a more efficient way to block these domains (we also have ISA
> 2006)?

  I would be fairly surprised if ISA didn't have a web filter with
domain blacklisting facility.

  I know you can do it with Squid.

-- Ben

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: http://downforeveryoneorjustme.com/

[Ben Scott]

On Mon, Mar 17, 2008 at 6:00 PM, Axcess Internet <[EMAIL PROTECTED]> wrote:
> It's a good site as long as the site you are trying to reach accepts ICMP;
> if it doesn't then it will report the site is down, even if it isn't.

  Are you sure?  Microsoft doesn't respond to ICMP Echo Request, but
the site in question says they are up.

http://downforeveryoneorjustme.com/microsoft.com

-- Ben

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Unknown Device

[Ben Scott]

On Mon, Mar 17, 2008 at 11:42 AM, Gavin Wilby <[EMAIL PROTECTED]> wrote:
> There are a lot of tools that will do it, but what is the preffered weapon
> of choice in regard to identigying unknown devices in device manager.

  I use the "Details" tab to get the "Hardware IDs" for the mystery
device.  Specifically, the Device ID for PCI, the Product ID for USB,
and the Vendor ID for either.  Then I check those IDs with the
appropriate web site to lookup the manufacturer (and sometimes model).

http://www.pcidatabase.com/ - has a nice web-based UI

http://www.usb.org/developers/tools/ - has only an ugly "Company List"
ASCII dump

  For the USB list, the file has 'nix-style end-of-line markers, so
you need to do LF->CRLF conversion on  'doze.  But then it can be
searched with the tool of your choice (Notepad, FINDSTR, Excel,
whatever).

-- Ben

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: DNS Wildcard zones for malware protection

[Ben Scott]

On Mon, Mar 17, 2008 at 7:39 PM, Tim Evans <[EMAIL PROTECTED]> wrote:
> I've been looking at www.malwaredomains.com and thinking about setting up a
> block list using their list of malicious domains. I'm thinking about doing
> this by setting up a wildcard zone for each domain on our DNS server.

  You don't need to use a DNS wildcard record.  Simply claim authority
for the domain in question, and any subdomain which might be
referenced under the domain will get an NXDOMAIN record in return.

> Right now, the list has almost 20,000 domains.

  With that many, you might want to configure your Windows nameservers
to forward queries to different server, and do the filtering on that
server.  Possibly using ISC BIND or another nameserver program.  I
haven't seen any reports on Windows 2003, but MS-DNS in Windows 2000
tended to... "have issues"... under large loads like that.  It wasn't
really designed with that in mind.

> -Is there a more efficient way to block these domains (we also have ISA
> 2006)?

  I would be fairly surprised if ISA didn't have a web filter with
domain blacklisting facility.

  I know you can do it with Squid.

-- Ben

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

DNS Wildcard zones for malware protection

[Tim Evans]

I've been looking at www.malwaredomains.com and thinking about setting
up a block list using their list of malicious domains. I'm thinking
about doing this by setting up a wildcard zone for each domain on our
DNS server. Right now, the list has almost 20,000 domains.  We're
running Windows 2003 domain & forest functional mode, with AD integrated
zones. Our DNS servers are for internal use only and are not publicly
accessible. Here is the batch file I'm planning to use:

wget http://www.malwaredomains.com/files/domains.txt

for /F "eol=# tokens=1 " %%f in (domains.txt) do @echo %%f >>file.txt

for /F %%f in (file.txt) do dnscmd %server% /zoneadd %%f /DsPrimary /DP
/forest

for /F %%f in (file.txt) do dnscmd %server% /recordadd %%f * A 127.0.0.1

 

Some questions:

-Is there a more efficient way to block these domains (we also have ISA
2006)?

-Is there a downside to having all that many domains on our DNS servers?

-any other words of wisdoms or warnings before I try this?

 

Thanks.

 

...Tim

 


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Unknown Device

[Ken Schaefer]

I usually just get the Device ID (from device manager) and stick that into 
Google. That usually turns up what the device is.

Cheers
Ken

From: Gavin Wilby [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 18 March 2008 2:43 AM
To: NT System Admin Issues
Subject: Unknown Device

There are a lot of tools that will do it, but what is the preffered weapon of 
choice in regard to identigying unknown devices in device manager.

Id like something that will just scan and output as clearly as possible what 
something is.

We gets 100's of varying PC's and servers here and its occasionally a real pain 
to identify some things. I dont mind paying for it if it works.

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: NTFS take ownership question

[Kurt Buff]

Two things that I've run across that cause this:

1) Corrupt file/directory

2) Incredibly long (way longer than the usual 254 characters limit)
path specification for the file/directory

In the first case, a 'chkdsk /f' is needed, and probably a restore of
the file after that, because it might be deleted.

In the second case, you'll have to shorten the file name and/or the
directory name(s) that lead to it, so that it's closer to (and
preferably shorter than) the 254 character limit. This condition is
quite rare, in my experience, however - I consider case 1) much more
likely.

Kurt

On Mon, Mar 17, 2008 at 11:44 AM, Juned Shaikh <[EMAIL PROTECTED]> wrote:
> Hi,
>
>  Need help in resolving this issue on our Common/Public drive. A directory is 
> showing as NO permission even for Administrator. the NTFS permission security 
> tab is absolutely blank.
>
>  Current owner of this shows "Unable to display current owner."
>  If I tried to take ownership - it displays access denied and nothing happens.
>
>  Help please..
>
>  Thanks,
>  ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>  ~   ~
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: http://downforeveryoneorjustme.com/

[Axcess Internet]

It's a good site as long as the site you are trying to reach accepts
ICMP; if it doesn't then it will report the site is down, even if it
isn't.

 

Regards,

Jim

 

From: Osama Salah [mailto:[EMAIL PROTECTED] 
Sent: Saturday, March 15, 2008 8:23 PM
To: ML: NT System Admin Issues
Subject: http://downforeveryoneorjustme.com/

 

http://downforeveryoneorjustme.com/

just came across this, might be useful since many people on the list ask
others to check if a site is up or not.

rgds

OS



Disclaimer:This communication contains information that is confidential
and may also be legally privileged. It is for the exclusive use of the
intended recipient(s). If you are not the intended recipient,disclosure,
copying, distribution or other use of, or taking of any action in
reliance upon, this communication or the information in it is prohibited
and may be unlawful. If you have received this communication in error
please notify the sender by return email, delete it from your system and
destroy any copies.



 

 

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Strange excel registry string

[Joe Heaton]

Oh yeah, that'll solve it.  Works for me every time.
 
Joe Heaton
 



From: Oliver Marshall [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 2:48 PM
To: NT System Admin Issues
Subject: RE: Strange excel registry string



Cheers.

 

I agree with the last post on the Russian forum.

 

"Can and blatantly, but reliably. Выискивать все хвосты после зоопарка может 
быть дольше в несколько раз (если не десятков раз), чем переставить винду. 
Brainstorm all the tails after the zoo could be several times longer (if not 
tens of times) than rearrange vindu. "

 

Never a finer word said 

 

J

 

 

From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: 17 March 2008 20:45
To: NT System Admin Issues
Subject: Re: Strange excel registry string

 

I've only been able to find 2 forum threads regarding this, and neither are 
conclusive:

 

Russian forum:

 

http://translate.google.com/translate?hl=en&sl=ru&u=http://forum.windowsfaq.ru/showthread.php%3Ft%3D84442&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3D%2522MKKSkEXCELFiles%2522%26hl%3Den%26safe%3Doff%26rls%3Dcom.microsoft:*%26sa%3DG

 

Chinese forum:

 

http://translate.google.com/translate?hl=en&sl=zh-CN&u=http://bbs.onegreen.net/dispbbs.asp%3FboardID%3D2%26ID%3D10419%26page%3D1&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3Dl2xaTO5%26hl%3Den%26safe%3Doff%26rls%3Dcom.microsoft:*

 



 

On Mon, Mar 17, 2008 at 4:06 PM, Oliver Marshall <[EMAIL PROTECTED]> wrote:

Hi chaps.

I'm running Office 2007 on my vista box, and every now and again (prob
once a day or so) excel refuses to open any Excel files (xls, xlsx, csv
etc) whether its from a file location or from an attachment.

Each time this happens the HKCR\Excel.sheet.12\shell\open\command key
contains this string;

w_1^VX!MKKSkEXCELFiles>[EMAIL PROTECTED] /e

removing this solves the issue.

This doesn't look like a normal reg entry.

Anyone know what might be causing this ?

Olly

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~




-- 
ME2 






~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Strange excel registry string

[Oliver Marshall]

Cheers.

 

I agree with the last post on the Russian forum.

 

"Can and blatantly, but reliably. Выискивать все хвосты после зоопарка может 
быть дольше в несколько раз (если не десятков раз), чем переставить винду. 
Brainstorm all the tails after the zoo could be several times longer (if not 
tens of times) than rearrange vindu. "

 

Never a finer word said 

 

J

 

 

From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: 17 March 2008 20:45
To: NT System Admin Issues
Subject: Re: Strange excel registry string

 

I've only been able to find 2 forum threads regarding this, and neither are 
conclusive:

 

Russian forum:

 

http://translate.google.com/translate?hl=en&sl=ru&u=http://forum.windowsfaq.ru/showthread.php%3Ft%3D84442&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3D%2522MKKSkEXCELFiles%2522%26hl%3Den%26safe%3Doff%26rls%3Dcom.microsoft:*%26sa%3DG

 

Chinese forum:

 

http://translate.google.com/translate?hl=en&sl=zh-CN&u=http://bbs.onegreen.net/dispbbs.asp%3FboardID%3D2%26ID%3D10419%26page%3D1&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3Dl2xaTO5%26hl%3Den%26safe%3Doff%26rls%3Dcom.microsoft:*

 



 

On Mon, Mar 17, 2008 at 4:06 PM, Oliver Marshall <[EMAIL PROTECTED]> wrote:

Hi chaps.

I'm running Office 2007 on my vista box, and every now and again (prob
once a day or so) excel refuses to open any Excel files (xls, xlsx, csv
etc) whether its from a file location or from an attachment.

Each time this happens the HKCR\Excel.sheet.12\shell\open\command key
contains this string;

w_1^VX!MKKSkEXCELFiles>[EMAIL PROTECTED] /e

removing this solves the issue.

This doesn't look like a normal reg entry.

Anyone know what might be causing this ?

Olly

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~




-- 
ME2 


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Looking for a recommendation on a power cycle device

[Edwards, David]

You could use an APC PDU that has Ethernet built in. We have one that
has 8 outlets, each outlet can be turned off or on remotely via a web
interface. http://www.apc.com/products/family/index.cfm?id=70 

 

Regards, 

Dave



From: Lee, Damon [mailto:[EMAIL PROTECTED] 
Sent: Thursday, March 13, 2008 9:21 AM
To: NT System Admin Issues
Subject: Looking for a recommendation on a power cycle device

 

Hi all, I'm looking for a device I can use to power cycle a cable modem
in a remote location. So I only need one outlet and I have network and
phone access in the same room.  I've found several, but have no
experience with these boxes and I wanted to see if anyone has one in
place and or any recommendations.

 

Thanks.

 

 

Damon Lee

The Silvercrest Center for Nursing and Rehabilitation
 

144-45 87th Avenue

Briarwood, NY 11435

718.480.4009

[EMAIL PROTECTED]

 

 

 

 

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Commvault resumability question

[Edwards, David]

They wouldn't let you do an onsite demo? My Austin area rep had no
problem with it. I am nearing the end of my POC with them and some other
vendors. They have been very helpful in proving that their software will
do what they say it will. You should push them on that one. But to
answer you question, it will pause and resume a job on request or on the
fly if a restore is started and there are no drives available to do the
restore. Restores have priority over backups so the backup is paused,
tape ejected, restore tape inserted and read, then the backup tape is
reinserted and the backup job continues from where it left off. Very
cool. 

Regards, 
Dave

-Original Message-
From: Jeremy Young [mailto:[EMAIL PROTECTED] 
Sent: Thursday, March 13, 2008 2:41 PM
To: NT System Admin Issues
Subject: Commvault resumability question

I just attended a Commvault demo yesterday at their Oceanport HQ 
yesterday and had a chance to go over a lot of their features.  So far 
I'm very happy with what I've seen.  Not having an in house demo install

(something they are very reluctant to give us) is a sticking point so I 
need to reach out to others for practical feedback.

They talk about their ability to resume backups based on checkpoints of 
data blocks already processed to tape (or another location).  This is 
something that would really matter to me.  For one thing I wouldn't need

to purchase a spare tape drive that sits idle waiting for restore 
operations like I currently have and would have to buy in my new 
library.  Since restores are a higher priority the backup or duplication

job would pause, the tape being written to would eject, the restore tape

would load and run and then the previous operation would start where it 
left off.

I questioned Commvault heavily about this feature and they swear it 
works as advertised.  I've since had an external source say that it kind

of works but not nearly as well as Commvault claims.  Who has experience

with this feature and what are your thoughts on it?

- Jer

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Strange excel registry string

[Micheal Espinola Jr]

I've only been able to find 2 forum threads regarding this, and neither are
conclusive:

Russian forum:

http://translate.google.com/translate?hl=en&sl=ru&u=http://forum.windowsfaq.ru/showthread.php%3Ft%3D84442&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3D%2522MKKSkEXCELFiles%2522%26hl%3Den%26safe%3Doff%26rls%3Dcom.microsoft:*%26sa%3DG

Chinese forum:

http://translate.google.com/translate?hl=en&sl=zh-CN&u=http://bbs.onegreen.net/dispbbs.asp%3FboardID%3D2%26ID%3D10419%26page%3D1&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3Dl2xaTO5%26hl%3Den%26safe%3Doff%26rls%3Dcom.microsoft:*




On Mon, Mar 17, 2008 at 4:06 PM, Oliver Marshall <
[EMAIL PROTECTED]> wrote:

> Hi chaps.
>
> I'm running Office 2007 on my vista box, and every now and again (prob
> once a day or so) excel refuses to open any Excel files (xls, xlsx, csv
> etc) whether its from a file location or from an attachment.
>
> Each time this happens the HKCR\Excel.sheet.12\shell\open\command key
> contains this string;
>
> w_1^VX!MKKSkEXCELFiles>[EMAIL PROTECTED] /e
>
> removing this solves the issue.
>
> This doesn't look like a normal reg entry.
>
> Anyone know what might be causing this ?
>
> Olly
>
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~   ~
>



-- 
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: NTFS take ownership question

[Edwards, David]

Are you connecting remotely to view security or locally. Do you have a
backup? 

Regards, 
Dave

-Original Message-
From: Juned Shaikh [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 1:45 PM
To: NT System Admin Issues
Subject: NTFS take ownership question

Hi,

Need help in resolving this issue on our Common/Public drive. A
directory is showing as NO permission even for Administrator. the NTFS
permission security tab is absolutely blank. 

Current owner of this shows "Unable to display current owner."
If I tried to take ownership - it displays access denied and nothing
happens.

Help please..

Thanks,
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Strange excel registry string

[Oliver Marshall]

Hi chaps.

I'm running Office 2007 on my vista box, and every now and again (prob
once a day or so) excel refuses to open any Excel files (xls, xlsx, csv
etc) whether its from a file location or from an attachment. 

Each time this happens the HKCR\Excel.sheet.12\shell\open\command key
contains this string;

w_1^VX!MKKSkEXCELFiles>[EMAIL PROTECTED] /e

removing this solves the issue. 

This doesn't look like a normal reg entry. 

Anyone know what might be causing this ?

Olly

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Explorer.exe 100%

[Don Ely]

Not on your life...  :P

On Mon, Mar 17, 2008 at 11:18 AM, Mike Gill <[EMAIL PROTECTED]>
wrote:

>  Hey, at least it wasn't install Linux. ;P
>
>
>
> --
> Mike Gill
>
>
>
> *From:* Tom Strader [mailto:[EMAIL PROTECTED]
> *Sent:* Monday, March 17, 2008 10:05 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Explorer.exe 100%
>
>
>
> *BSD = Bullsh#t Sensing Device*
>
>
>
> *Shook uses it for all his conversations.*
>
>
>
>
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Official time: 1 hour 3 minutes

[Amer Karim]

Thank you!

 

Regards,

Amer Karim

Nautilis Information Systems

 

From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: March-17-08 12:20 PM
To: NT System Admin Issues
Subject: Re: Official time: 1 hour 3 minutes

 

>From what I can see, the Symantec CleanWipe utility has no restrictions
on its use or distribution.  I am going to put it up on my site after I
give it another review and some minor documentation.

 

If anyone has anything else similar for other products, I would be very
interested in see/sharing those too.  Please email me!

 

For those interested in the Symantec product, the following is some
output from what it does.

 

Pop-up introduction:

-- 

CleanWipe will remove all remnants of the following products from a
computer:

 

 * Symantec Endpoint Protection
 * Symantec AntiVirus
 * Symantec Client Security
 * Symantec Sygate Enterprise Protection
 * Symantec Network Access Control
 * Norton AntiVirus
 * Symantec System Center
 * Symantec Endpoint Protection Manager

 

Note: The following cautions apply to the use of CleanWipe:

 

- CleanWipe removes all of the listed applications.  You cannot select
individual applications to remove.  

 

- CleanWipe may also remove LiveUpdate.

 

- CleanWipe may also remove Virus Definitions.

 

- If you have other Symantec applications on the computer that depend on
any of the applications listed above, those applications may not
function properly.  You need to reinstall the missing applications after
you run CleanWipe.

--

 

Sample command line output:

-- 

External step - Dynamically Setting Environment Variables.
External step - Removing services.
External step - Call ServiceShutdown.exe to shutdown services.
External step - Call TerminateProcesses.bat to terminate processes.
External step - Removing LiveUpdate.
External step - Cleaning the MSI Registry.

 

Started detailed MSI product code search at 11:57:35.47

 

Finished detailed MSI product code search at 11:58:30.92

 

External step - Call UninstallSymEvnt.bat to uninstall SymEvent.
External step - Call UnregisterDLLs.bat to unregister DLL's.
External step - Removing Website.
External step - All Virus Definitions and Decomposers will be removed.
External step - Modifying registry key values.
External step - Symantec files under the Windows folder will be deleted.
External step - Call deletefiles.exe to remove all application files.
External step - Call deletefiles.exe to remove application specific
files.
External step - Removing empty folders.
===
Restart the computer...
===

--

 

A GUI-based pop-up then appears, requiring a restart.  The pop-up
states:

--

CleanWipe is going to accomplish a restart of the system next.

--

 

Not the greatest example of English grammar, but it does what it says.
I've tested this on a few different systems (servers and workstations),
and it works as advertised and well.  I have not tested or looked into
automation.  During its run, it creates a subdirectory in the user's
temp folder and deposits multiple files that actually perform the
cleaning functions.

 

All of which is why I'd like to document it before unleashing it and
having to deal with any questions regarding it.

 

On Fri, Mar 14, 2008 at 5:23 PM, Micheal Espinola Jr
<[EMAIL PROTECTED]> wrote:

The prep/install documentation is 99% complete.  I've included links
to the latest SEP software and the version of Java that you should
install.

If added detail in italics where there were points of arguement
between my and Symantec.  The details as I've presented them are my
opinion specifically (unless noted otherwise).  I stand by them
because it worked, where nothing Symantec said or did would.

I'll try to embellish more later on, but for now its done.  If there
is something you think I have missed, or something you find confusing,
please drop me a line.








--
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~




-- 
ME2 


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Email "deleting itself"

[Eric Woodford]

I am liking the outlook junk mail filter. Could have added the sender
to the blocked sender list and set it to delete all spam mail instead
of deliver to junk mail folderm



On 3/17/08, Christopher Boggs <[EMAIL PROTECTED]> wrote:
> I've had multiple times where the user turned on auto archive with the
> settings to delete instead of move to another folder, and didn't realize
> it.
>
>
>
> I would second the suggestion to check the auto archive settings
>
>
>
>
>
> 
>
> From: Sherry Abercrombie [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 17, 2008 10:49 AM
> To: NT System Admin Issues
> Subject: Re: Email "deleting itself"
>
>
>
>
>
>
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~   ~

-- 
Sent from Gmail for mobile | mobile.google.com

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

NTFS take ownership question

[Juned Shaikh]

Hi,

Need help in resolving this issue on our Common/Public drive. A directory is 
showing as NO permission even for Administrator. the NTFS permission security 
tab is absolutely blank. 

Current owner of this shows "Unable to display current owner."
If I tried to take ownership - it displays access denied and nothing happens.

Help please..

Thanks,
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Windows Storage Server 2008

[Chipshead]

I'm looking at purchasing a Dell storage device that runs Windows Storage 
Server 2003 R2 with SP2. Any opinions or rumors on when Windows Storage Server 
2008 will be out? 
Thanks.
Steve
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Official time: 1 hour 3 minutes

[Joe Heaton]

Looks like I could use this tool, when it is available.  Have a Symantec
installation that is giving me some real headaches.  I think there's
remnants of a previous install that won't let me run the network
install.
 
Joe Heaton
 



From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 9:12 AM
To: NT System Admin Issues
Subject: Re: Official time: 1 hour 3 minutes


>From what I can see, the Symantec CleanWipe utility has no restrictions
on its use or distribution.  I am going to put it up on my site after I
give it another review and some minor documentation.
 
If anyone has anything else similar for other products, I would be very
interested in see/sharing those too.  Please email me!
 
For those interested in the Symantec product, the following is some
output from what it does.
 
Pop-up introduction:
-- 
CleanWipe will remove all remnants of the following products from a
computer:
 
 * Symantec Endpoint Protection
 * Symantec AntiVirus
 * Symantec Client Security
 * Symantec Sygate Enterprise Protection
 * Symantec Network Access Control
 * Norton AntiVirus
 * Symantec System Center
 * Symantec Endpoint Protection Manager
 
Note: The following cautions apply to the use of CleanWipe:
 
- CleanWipe removes all of the listed applications.  You cannot select
individual applications to remove.  
 
- CleanWipe may also remove LiveUpdate.
 
- CleanWipe may also remove Virus Definitions.
 
- If you have other Symantec applications on the computer that depend on
any of the applications listed above, those applications may not
function properly.  You need to reinstall the missing applications after
you run CleanWipe.
--
 
Sample command line output:
-- 
External step - Dynamically Setting Environment Variables.
External step - Removing services.
External step - Call ServiceShutdown.exe to shutdown services.
External step - Call TerminateProcesses.bat to terminate processes.
External step - Removing LiveUpdate.
External step - Cleaning the MSI Registry.
 
Started detailed MSI product code search at 11:57:35.47
 
Finished detailed MSI product code search at 11:58:30.92
 
External step - Call UninstallSymEvnt.bat to uninstall SymEvent.
External step - Call UnregisterDLLs.bat to unregister DLL's.
External step - Removing Website.
External step - All Virus Definitions and Decomposers will be removed.
External step - Modifying registry key values.
External step - Symantec files under the Windows folder will be deleted.
External step - Call deletefiles.exe to remove all application files.
External step - Call deletefiles.exe to remove application specific
files.
External step - Removing empty folders.
===
Restart the computer...
===
--
 
A GUI-based pop-up then appears, requiring a restart.  The pop-up
states:
--
CleanWipe is going to accomplish a restart of the system next.
--
 
Not the greatest example of English grammar, but it does what it says.
I've tested this on a few different systems (servers and workstations),
and it works as advertised and well.  I have not tested or looked into
automation.  During its run, it creates a subdirectory in the user's
temp folder and deposits multiple files that actually perform the
cleaning functions.
 
All of which is why I'd like to document it before unleashing it and
having to deal with any questions regarding it.

 
On Fri, Mar 14, 2008 at 5:23 PM, Micheal Espinola Jr
<[EMAIL PROTECTED]> wrote:


The prep/install documentation is 99% complete.  I've included
links
to the latest SEP software and the version of Java that you
should
install.

If added detail in italics where there were points of arguement
between my and Symantec.  The details as I've presented them are
my
opinion specifically (unless noted otherwise).  I stand by them
because it worked, where nothing Symantec said or did would.

I'll try to embellish more later on, but for now its done.  If
there
is something you think I have missed, or something you find
confusing,
please drop me a line.









--
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~





-- 
ME2 


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Explorer.exe 100%

[Mike Gill]

Hey, at least it wasn't install Linux. ;P

 

-- 
Mike Gill

 

From: Tom Strader [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 10:05 AM
To: NT System Admin Issues
Subject: RE: Explorer.exe 100%

 

BSD = Bullsh#t Sensing Device

 

Shook uses it for all his conversations.

 

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Ides of March have come and gone...

[Carl Houseman]

Thanks!


"Sam Cayze" <[EMAIL PROTECTED]> wrote in message 
news:[EMAIL PROTECTED]
"Vista SP1 to hit Windows Update Tuesday, reports say"

http://bink.nu/news/vista-sp1-to-hit-windows-update-tuesday-reports-say.aspx

-Original Message-
From: Carl Houseman [mailto:[EMAIL PROTECTED]
Sent: Monday, March 17, 2008 12:48 PM
To: NT System Admin Issues
Subject: Ides of March have come and gone...

Microsoft said general availablility of Vista SP1 from the download
center
would happen by "mid-March".   Well mid-March is here and then some and
Vista SP1 is not at the download center.  A Partner Program newsletter
sent
earlier today claims "Windows Vista Service Pack 1 Is Available" but the

link doesn't go anywhere useful.

Anyone have updated info?  I was hoping to do another SP1 install
without
the WU reghack today or tomorrow.

Carl



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~




~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Ides of March have come and gone...

[Sam Cayze]

"Vista SP1 to hit Windows Update Tuesday, reports say"

http://bink.nu/news/vista-sp1-to-hit-windows-update-tuesday-reports-say.
aspx



-Original Message-
From: Carl Houseman [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 12:48 PM
To: NT System Admin Issues
Subject: Ides of March have come and gone...

Microsoft said general availablility of Vista SP1 from the download
center 
would happen by "mid-March".   Well mid-March is here and then some and 
Vista SP1 is not at the download center.  A Partner Program newsletter
sent 
earlier today claims "Windows Vista Service Pack 1 Is Available" but the

link doesn't go anywhere useful.

Anyone have updated info?  I was hoping to do another SP1 install
without 
the WU reghack today or tomorrow.

Carl 



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Ides of March have come and gone...

[Carl Houseman]

Microsoft said general availablility of Vista SP1 from the download center 
would happen by "mid-March".   Well mid-March is here and then some and 
Vista SP1 is not at the download center.  A Partner Program newsletter sent 
earlier today claims "Windows Vista Service Pack 1 Is Available" but the 
link doesn't go anywhere useful.

Anyone have updated info?  I was hoping to do another SP1 install without 
the WU reghack today or tomorrow.

Carl 



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Official time: 1 hour 3 minutes

[Sam Cayze]

Indeed, thanks Michael!

 

From: Bob Fronk [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 11:46 AM
To: NT System Admin Issues
Subject: RE: Official time: 1 hour 3 minutes

 

That would be a handy tool to have.

 

Bob Fronk

 

 

 

From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 12:12 PM
To: NT System Admin Issues
Subject: Re: Official time: 1 hour 3 minutes

 

>From what I can see, the Symantec CleanWipe utility has no restrictions
on its use or distribution.  I am going to put it up on my site after I
give it another review and some minor documentation.

 

If anyone has anything else similar for other products, I would be very
interested in see/sharing those too.  Please email me!

 

For those interested in the Symantec product, the following is some
output from what it does.

 

Pop-up introduction:

-- 

CleanWipe will remove all remnants of the following products from a
computer:

 

 * Symantec Endpoint Protection
 * Symantec AntiVirus
 * Symantec Client Security
 * Symantec Sygate Enterprise Protection
 * Symantec Network Access Control
 * Norton AntiVirus
 * Symantec System Center
 * Symantec Endpoint Protection Manager

 

Note: The following cautions apply to the use of CleanWipe:

 

- CleanWipe removes all of the listed applications.  You cannot select
individual applications to remove.  

 

- CleanWipe may also remove LiveUpdate.

 

- CleanWipe may also remove Virus Definitions.

 

- If you have other Symantec applications on the computer that depend on
any of the applications listed above, those applications may not
function properly.  You need to reinstall the missing applications after
you run CleanWipe.

--

 

Sample command line output:

-- 

External step - Dynamically Setting Environment Variables.
External step - Removing services.
External step - Call ServiceShutdown.exe to shutdown services.
External step - Call TerminateProcesses.bat to terminate processes.
External step - Removing LiveUpdate.
External step - Cleaning the MSI Registry.

 

Started detailed MSI product code search at 11:57:35.47

 

Finished detailed MSI product code search at 11:58:30.92

 

External step - Call UninstallSymEvnt.bat to uninstall SymEvent.
External step - Call UnregisterDLLs.bat to unregister DLL's.
External step - Removing Website.
External step - All Virus Definitions and Decomposers will be removed.
External step - Modifying registry key values.
External step - Symantec files under the Windows folder will be deleted.
External step - Call deletefiles.exe to remove all application files.
External step - Call deletefiles.exe to remove application specific
files.
External step - Removing empty folders.
===
Restart the computer...
===

--

 

A GUI-based pop-up then appears, requiring a restart.  The pop-up
states:

--

CleanWipe is going to accomplish a restart of the system next.

--

 

Not the greatest example of English grammar, but it does what it says.
I've tested this on a few different systems (servers and workstations),
and it works as advertised and well.  I have not tested or looked into
automation.  During its run, it creates a subdirectory in the user's
temp folder and deposits multiple files that actually perform the
cleaning functions.

 

All of which is why I'd like to document it before unleashing it and
having to deal with any questions regarding it.

 

On Fri, Mar 14, 2008 at 5:23 PM, Micheal Espinola Jr
<[EMAIL PROTECTED]> wrote:

The prep/install documentation is 99% complete.  I've included links
to the latest SEP software and the version of Java that you should
install.

If added detail in italics where there were points of arguement
between my and Symantec.  The details as I've presented them are my
opinion specifically (unless noted otherwise).  I stand by them
because it worked, where nothing Symantec said or did would.

I'll try to embellish more later on, but for now its done.  If there
is something you think I have missed, or something you find confusing,
please drop me a line.






--
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~




-- 
ME2 

This email and any attached files are confidential and intended solely
for the intended recipient(s). If you are not the named recipient you
should not read, distribute, copy or alter this email. Any views or
opinions expressed in this email are those of the author and do not
represent those of the Davis H. Elliot Company . Warning: Although
precautions have been taken to make sure no viruses are present in this
email, the company cannot accept responsibility for any loss or damage
that arise from the use of this email or attachments.

 

 

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!

Re: Unknown Device

[Carl Houseman]

I use 'unknowndevices.exe".  Requires no installation, just two files.

http://www.softpedia.com/get/System/System-Info/Unknown-Devices.shtml

Be sure to pick up the latest pcidevs.txt.

http://members.datafast.net.au/dft0802/downloads.htm

Carl
  "Gavin Wilby" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]
  There are a lot of tools that will do it, but what is the preffered weapon of 
choice in regard to identigying unknown devices in device manager.

  Id like something that will just scan and output as clearly as possible what 
something is.

  We gets 100's of varying PC's and servers here and its occasionally a real 
pain to identify some things. I dont mind paying for it if it works.
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Explorer.exe 100%

[Tom Strader]

BSD = Bullsh#t Sensing Device
 
Shook uses it for all his conversations.



From: Don Ely [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 10:31 AM
To: NT System Admin Issues
Subject: Re: Explorer.exe 100%


Install BSD...


On Mon, Mar 17, 2008 at 7:29 AM, Bob Fronk <[EMAIL PROTECTED]>
wrote:


I recall a thread a while back about a Windows update that
caused explorer.exe to consume 100% cpu.  I have tried to Google and
look at the archives, but have been unsuccessful in my search.

 

Does anyone recall what the fix was?

 

I have a client with 2 PCs that went to 100% CPU following a
reboot from Windows update.

 

Bob Fronk

This email and any attached files are confidential and intended
solely for the intended recipient(s). If you are not the named recipient
you should not read, distribute, copy or alter this email. Any views or
opinions expressed in this email are those of the author and do not
represent those of the Davis H. Elliot Company . Warning: Although
precautions have been taken to make sure no viruses are present in this
email, the company cannot accept responsibility for any loss or damage
that arise from the use of this email or attachments.















~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Official time: 1 hour 3 minutes

[Bob Fronk]

That would be a handy tool to have.

 

Bob Fronk

 

 

 

From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 12:12 PM
To: NT System Admin Issues
Subject: Re: Official time: 1 hour 3 minutes

 

>From what I can see, the Symantec CleanWipe utility has no restrictions
on its use or distribution.  I am going to put it up on my site after I
give it another review and some minor documentation.

 

If anyone has anything else similar for other products, I would be very
interested in see/sharing those too.  Please email me!

 

For those interested in the Symantec product, the following is some
output from what it does.

 

Pop-up introduction:

-- 

CleanWipe will remove all remnants of the following products from a
computer:

 

 * Symantec Endpoint Protection
 * Symantec AntiVirus
 * Symantec Client Security
 * Symantec Sygate Enterprise Protection
 * Symantec Network Access Control
 * Norton AntiVirus
 * Symantec System Center
 * Symantec Endpoint Protection Manager

 

Note: The following cautions apply to the use of CleanWipe:

 

- CleanWipe removes all of the listed applications.  You cannot select
individual applications to remove.  

 

- CleanWipe may also remove LiveUpdate.

 

- CleanWipe may also remove Virus Definitions.

 

- If you have other Symantec applications on the computer that depend on
any of the applications listed above, those applications may not
function properly.  You need to reinstall the missing applications after
you run CleanWipe.

--

 

Sample command line output:

-- 

External step - Dynamically Setting Environment Variables.
External step - Removing services.
External step - Call ServiceShutdown.exe to shutdown services.
External step - Call TerminateProcesses.bat to terminate processes.
External step - Removing LiveUpdate.
External step - Cleaning the MSI Registry.

 

Started detailed MSI product code search at 11:57:35.47

 

Finished detailed MSI product code search at 11:58:30.92

 

External step - Call UninstallSymEvnt.bat to uninstall SymEvent.
External step - Call UnregisterDLLs.bat to unregister DLL's.
External step - Removing Website.
External step - All Virus Definitions and Decomposers will be removed.
External step - Modifying registry key values.
External step - Symantec files under the Windows folder will be deleted.
External step - Call deletefiles.exe to remove all application files.
External step - Call deletefiles.exe to remove application specific
files.
External step - Removing empty folders.
===
Restart the computer...
===

--

 

A GUI-based pop-up then appears, requiring a restart.  The pop-up
states:

--

CleanWipe is going to accomplish a restart of the system next.

--

 

Not the greatest example of English grammar, but it does what it says.
I've tested this on a few different systems (servers and workstations),
and it works as advertised and well.  I have not tested or looked into
automation.  During its run, it creates a subdirectory in the user's
temp folder and deposits multiple files that actually perform the
cleaning functions.

 

All of which is why I'd like to document it before unleashing it and
having to deal with any questions regarding it.

 

On Fri, Mar 14, 2008 at 5:23 PM, Micheal Espinola Jr
<[EMAIL PROTECTED]> wrote:

The prep/install documentation is 99% complete.  I've included links
to the latest SEP software and the version of Java that you should
install.

If added detail in italics where there were points of arguement
between my and Symantec.  The details as I've presented them are my
opinion specifically (unless noted otherwise).  I stand by them
because it worked, where nothing Symantec said or did would.

I'll try to embellish more later on, but for now its done.  If there
is something you think I have missed, or something you find confusing,
please drop me a line.








--
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~




-- 
ME2 




This email and any attached files are confidential and intended solely for the 
intended recipient(s). If you are not the named recipient you should not read, 
distribute, copy or alter this email. Any views or opinions expressed in this 
email are those of the author and do not represent those of the Davis H. Elliot 
Company company. Warning: Although precautions have been taken to make sure no 
viruses are present in this email, the company cannot accept responsibility for 
any loss or damage that arise from the use of this email or attachments.
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

redimensioning partitions on RAID 1+0

[Miguel Gonzalez]

Hi,

  We have two logical Windows partitions on a RAID
1+0. While one of the partitions (the OS) is running
out of space, the other one has more space so I wanted
to redimension them.

  I was thinkinng of using the Ghost linux clone
partimage, but I'm really concerned that doing this
kind of operations could break the RAID?

  Of course I will backup the drives before doing this
but I wanted to know if this is the way to go or there
is any other tool for doing this? This is an HP DL380
G2 server, so maybe the HP tools could help me out
instead?

  Miguel


  __ 
Enviado desde Correo Yahoo!
Disfruta de una bandeja de entrada más inteligente. 
http://es.docs.yahoo.com/mail/overview/index.html


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Email "deleting itself"

[Christopher Boggs]

I've had multiple times where the user turned on auto archive with the
settings to delete instead of move to another folder, and didn't realize
it.

 

I would second the suggestion to check the auto archive settings

 

 



From: Sherry Abercrombie [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 10:49 AM
To: NT System Admin Issues
Subject: Re: Email "deleting itself"

 

 


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Email "deleting itself"

[Sherry Abercrombie]

First place I would look is rules, then auto archive settings.

Email just doesn't delete itself without some kind of input.  Period.

On Mon, Mar 17, 2008 at 10:40 AM, Gavin Wilby <[EMAIL PROTECTED]> wrote:

> I have to go and see a user in a bit that insists that his email keeps
> deleting itsefl with no input from him.
>
> I cant see it myself, but has anyone come across this and know what it
> might be.
>
> He uses Outlook 2003 on a SBS2003 server.
>
> He does use OWA also.
>
> AFAIK nobody has access to his email account.
>
> Any ideas, is there anywhere I can look that will even tell me what has
> happened.
>
> Persoanlly, I think its the user being thick but I am prepared to stand
> corrected.
>
>


-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic."
Arthur C. Clarke

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Official time: 1 hour 3 minutes

[Micheal Espinola Jr]

>From what I can see, the Symantec CleanWipe utility has no restrictions on
its use or distribution.  I am going to put it up on my site after I give it
another review and some minor documentation.

If anyone has anything else similar for other products, I would be very
interested in see/sharing those too.  Please email me!

For those interested in the Symantec product, the following is some output
from what it does.

Pop-up introduction:
 -- CleanWipe will remove all remnants of the following products
from a computer:

 · Symantec Endpoint Protection
 · Symantec AntiVirus
 · Symantec Client Security
 · Symantec Sygate Enterprise Protection
 · Symantec Network Access Control
 · Norton AntiVirus
 · Symantec System Center
 · Symantec Endpoint Protection Manager

Note: The following cautions apply to the use of CleanWipe:

- CleanWipe removes all of the listed applications.  You cannot select
individual applications to remove.

- CleanWipe may also remove LiveUpdate.

- CleanWipe may also remove Virus Definitions.

- If you have other Symantec applications on the computer that depend on any
of the applications listed above, those applications may not function
properly.  You need to reinstall the missing applications after you run
CleanWipe.
--

Sample command line output:
-- External step - Dynamically Setting Environment Variables.
External step - Removing services.
External step - Call ServiceShutdown.exe to shutdown services.
External step - Call TerminateProcesses.bat to terminate processes.
External step - Removing LiveUpdate.
External step - Cleaning the MSI Registry.

Started detailed MSI product code search at 11:57:35.47

Finished detailed MSI product code search at 11:58:30.92

External step - Call UninstallSymEvnt.bat to uninstall SymEvent.
External step - Call UnregisterDLLs.bat to unregister DLL's.
External step - Removing Website.
External step - All Virus Definitions and Decomposers will be removed.
External step - Modifying registry key values.
External step - Symantec files under the Windows folder will be deleted.
External step - Call deletefiles.exe to remove all application files.
External step - Call deletefiles.exe to remove application specific files.
External step - Removing empty folders.
===
Restart the computer...
===
--

A GUI-based pop-up then appears, requiring a restart.  The pop-up states:
--
CleanWipe is going to accomplish a restart of the system next.
--

Not the greatest example of English grammar, but it does what it says.  I've
tested this on a few different systems (servers and workstations), and it
works as advertised and well.  I have not tested or looked into automation.
During its run, it creates a subdirectory in the user's temp folder and
deposits multiple files that actually perform the cleaning functions.

All of which is why I'd like to document it before unleashing it and having
to deal with any questions regarding it.


On Fri, Mar 14, 2008 at 5:23 PM, Micheal Espinola Jr <
[EMAIL PROTECTED]> wrote:

> The prep/install documentation is 99% complete.  I've included links
> to the latest SEP software and the version of Java that you should
> install.
>
> If added detail in italics where there were points of arguement
> between my and Symantec.  The details as I've presented them are my
> opinion specifically (unless noted otherwise).  I stand by them
> because it worked, where nothing Symantec said or did would.
>
> I'll try to embellish more later on, but for now its done.  If there
> is something you think I have missed, or something you find confusing,
> please drop me a line.
>
>
> <
> http://www.espinola.net/wiki/How_to_install_Symantec_Endpoint_Protection_Manager_%28SEPM%29_11
> >
>
>
>
> --
> ME2
>
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~   ~
>



-- 
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Email "deleting itself"

[Gavin Wilby]

The email is being deleted, its going into his deleted items bin.

He swears he is not doing it though.

On Mon, Mar 17, 2008 at 3:45 PM, Klint Price - ArizonaITPro <
[EMAIL PROTECTED]> wrote:

> check what "view" is being utilized in Outlook or OWA.
>
> Klint
>
> Gavin Wilby wrote:
> > I have to go and see a user in a bit that insists that his email keeps
> > deleting itsefl with no input from him.
> >
> > I cant see it myself, but has anyone come across this and know what it
> > might be.
> >
> > He uses Outlook 2003 on a SBS2003 server.
> >
> > He does use OWA also.
> >
> > AFAIK nobody has access to his email account.
> >
> > Any ideas, is there anywhere I can look that will even tell me what
> > has happened.
> >
> > Persoanlly, I think its the user being thick but I am prepared to
> > stand corrected.
>
>
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~   ~
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Email "deleting itself"

[Benjamin Zachary]

I have this on a couple of users using pop mail with their iphone. Ive asked
to see the phone to see if it says delete mail older than 2 weeks or
something, but haven't looked at it yet. Its definitely something just
wiping out 14 day old mail, every day its cleaned up. Could be autoarchiving
or something, but the 2 people its happening too both happen to have iphones
so not sure if that's it but it's the only common denominator.

 

Maybe intelligence factors in here since they bought an iphone to begin with
*wink wink*

 

 

  _  

From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 11:45 AM
To: NT System Admin Issues
Subject: Re: Email "deleting itself"

 

 


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Email "deleting itself"

[Joe Heaton]

Make sure to check the Views settings.  Most times I've run into this
issue, they've changed the default view.
 
Joe Heaton
 



From: Gavin Wilby [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 8:41 AM
To: NT System Admin Issues
Subject: Email "deleting itself"


I have to go and see a user in a bit that insists that his email keeps
deleting itsefl with no input from him.
 
I cant see it myself, but has anyone come across this and know what it
might be.
 
He uses Outlook 2003 on a SBS2003 server.
 
He does use OWA also.
 
AFAIK nobody has access to his email account.
 
Any ideas, is there anywhere I can look that will even tell me what has
happened.
 
Persoanlly, I think its the user being thick but I am prepared to stand
corrected.


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Explorer.exe 100%

[Bob Fronk]

Might be.  I will give it a try.

 

Bob Fronk

 

 

 

From: Fogarty, Richard R Mr CTR USA USASOC
[mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 11:28 AM
To: NT System Admin Issues
Subject: RE: Explorer.exe 100%

 

This it?

http://www.espinola.net/wiki/WSUS_Update_and_Reboot

 

 

From: Bob Fronk [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 10:29 AM
To: NT System Admin Issues
Subject: Explorer.exe 100%

 

I recall a thread a while back about a Windows update that caused
explorer.exe to consume 100% cpu.  I have tried to Google and look at
the archives, but have been unsuccessful in my search.

 

Does anyone recall what the fix was?

 

I have a client with 2 PCs that went to 100% CPU following a reboot from
Windows update.

 

Bob Fronk

This email and any attached files are confidential and intended solely
for the intended recipient(s). If you are not the named recipient you
should not read, distribute, copy or alter this email. Any views or
opinions expressed in this email are those of the author and do not
represent those of the Davis H. Elliot Company . Warning: Although
precautions have been taken to make sure no viruses are present in this
email, the company cannot accept responsibility for any loss or damage
that arise from the use of this email or attachments.

 

 

 

 



This email and any attached files are confidential and intended solely for the 
intended recipient(s). If you are not the named recipient you should not read, 
distribute, copy or alter this email. Any views or opinions expressed in this 
email are those of the author and do not represent those of the Davis H. Elliot 
Company company. Warning: Although precautions have been taken to make sure no 
viruses are present in this email, the company cannot accept responsibility for 
any loss or damage that arise from the use of this email or attachments.
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Email "deleting itself"

[Durf]

The only time I've seen anything like this has been when the proper
antivirus exclusions for the Exchange Information Store were not set,
usually with the Symantec Client, and it was eating holes in the IS.
Usually this manifests first as problems with calendar items though.

-- Durf

On Mon, Mar 17, 2008 at 11:40 AM, Gavin Wilby <[EMAIL PROTECTED]> wrote:

> I have to go and see a user in a bit that insists that his email keeps
> deleting itsefl with no input from him.
>
> I cant see it myself, but has anyone come across this and know what it
> might be.
>
> He uses Outlook 2003 on a SBS2003 server.
>
> He does use OWA also.
>
> AFAIK nobody has access to his email account.
>
> Any ideas, is there anywhere I can look that will even tell me what has
> happened.
>
> Persoanlly, I think its the user being thick but I am prepared to stand
> corrected.
>
>


-- 
--
Give a man a fish, and he'll eat for a day.
Give a fish a man, and he'll eat for weeks!

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Email "deleting itself"

[Rankin, James R]

He hasn’t got an Auto Delete rule set up has he…that’s what my ex-wife
(no.2) uses for me…

 

  _  

From: Gavin Wilby [mailto:[EMAIL PROTECTED] 
Sent: 17 March 2008 15:41
To: NT System Admin Issues
Subject: Email "deleting itself"

 

 


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Understanding DNS Querries

[Joseph L. Casale]

Hilarious,
Given that I was writing a series of Bind zone files out all night, you would 
have thought I would catch that :)
Thanks!
jlc

From: Carl Houseman [mailto:[EMAIL PROTECTED]
Sent: Monday, March 17, 2008 8:48 AM
To: NT System Admin Issues
Subject: RE: Understanding DNS Querries

Any query data that doesn't end with "." is unqualified.  So lookup 
www.microsoft.com. and you'll get different results.

Carl


From: Joseph L. Casale [mailto:[EMAIL PROTECTED]
Sent: Monday, March 17, 2008 9:36 AM
To: NT System Admin Issues
Subject: Understanding DNS Querries
I have a Vista wkst and two dns servers, one Win2k3 and one Linux running Bind. 
If from the Vista wkst I run nslookup, point it to the Win2k3 server, set q=mx 
then query Microsoft.com, it returns expected data. If I point I to the Bind 
server and perform the same test, I can see through the logging that the query 
"www.microsoft.com" actually gets querried as 
www.microsoft.com.ad-domain.local and 
www.microsoft.com and finally returns correct data. 
When I set q=mx and ask for microsoft.com it wont resolve it as it gets asked 
as "microsoft.com.ad-domain.local".

I thought the behavior was to append the dns suffix only to unqualified names?

Thanks!
jlc











~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Email "deleting itself"

[Klint Price - ArizonaITPro]

check what "view" is being utilized in Outlook or OWA.

Klint

Gavin Wilby wrote:
I have to go and see a user in a bit that insists that his email keeps 
deleting itsefl with no input from him.
 
I cant see it myself, but has anyone come across this and know what it 
might be.
 
He uses Outlook 2003 on a SBS2003 server.
 
He does use OWA also.
 
AFAIK nobody has access to his email account.
 
Any ideas, is there anywhere I can look that will even tell me what 
has happened.
 
Persoanlly, I think its the user being thick but I am prepared to 
stand corrected.



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Email "deleting itself"

[Micheal Espinola Jr]

My money is on an Inbox rule moving or deleting e-mail.



On Mon, Mar 17, 2008 at 11:40 AM, Gavin Wilby <[EMAIL PROTECTED]> wrote:

> I have to go and see a user in a bit that insists that his email keeps
> deleting itsefl with no input from him.
>
> I cant see it myself, but has anyone come across this and know what it
> might be.
>
> He uses Outlook 2003 on a SBS2003 server.
>
> He does use OWA also.
>
> AFAIK nobody has access to his email account.
>
> Any ideas, is there anywhere I can look that will even tell me what has
> happened.
>
> Persoanlly, I think its the user being thick but I am prepared to stand
> corrected.
>
>


-- 
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

FYI: Buggy Microsoft Excel patch causes bad math

[Micheal Espinola Jr]

> If you installed one of those Excel security patches issued by 
> Microsoftearlier this week, 
> you may want to double-check your math.
>
> That's because a bug in the recent 
> MS08-014patch
>  is causing Excel to return zeroes instead of the correct number when
> certain types of macros are run within the program.
>

<
http://www.networkworld.com/news/2008/031408-buggy-microsoft-excel-patch-causes.html>

 --
ME2

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Unknown Device

[Gavin Wilby]

There are a lot of tools that will do it, but what is the preffered weapon
of choice in regard to identigying unknown devices in device manager.

Id like something that will just scan and output as clearly as possible what
something is.

We gets 100's of varying PC's and servers here and its occasionally a real
pain to identify some things. I dont mind paying for it if it works.

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Email "deleting itself"

[Gavin Wilby]

I have to go and see a user in a bit that insists that his email keeps
deleting itsefl with no input from him.

I cant see it myself, but has anyone come across this and know what it might
be.

He uses Outlook 2003 on a SBS2003 server.

He does use OWA also.

AFAIK nobody has access to his email account.

Any ideas, is there anywhere I can look that will even tell me what has
happened.

Persoanlly, I think its the user being thick but I am prepared to stand
corrected.

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Free XML viewer?

[Tim Evans]

XML Notepad: 
http://www.microsoft.com/downloads/details.aspx?familyid=72d6aa49-787d-4
118-ba5f-4f30fe913628&displaylang=en



...Tim


> -Original Message-
> From: Oliver Marshall [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 17, 2008 4:06 AM
> To: NT System Admin Issues
> Subject: Free XML viewer?
> 
> Chaps,
> 
> Anyone got a recommendation of an XML viewer that displays large XMLs
> with lots of nesting as a treeview style hierarchy of nodes ?
> 
> Olly
> 
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~   ~

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Explorer.exe 100%

[Fogarty, Richard R Mr CTR USA USASOC]

This it?

http://www.espinola.net/wiki/WSUS_Update_and_Reboot

 

 

From: Bob Fronk [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 10:29 AM
To: NT System Admin Issues
Subject: Explorer.exe 100%

 

I recall a thread a while back about a Windows update that caused
explorer.exe to consume 100% cpu.  I have tried to Google and look at the
archives, but have been unsuccessful in my search.

 

Does anyone recall what the fix was?

 

I have a client with 2 PCs that went to 100% CPU following a reboot from
Windows update.

 

Bob Fronk

This email and any attached files are confidential and intended solely for
the intended recipient(s). If you are not the named recipient you should not
read, distribute, copy or alter this email. Any views or opinions expressed
in this email are those of the author and do not represent those of the
Davis H. Elliot Company . Warning: Although precautions have been taken to
make sure no viruses are present in this email, the company cannot accept
responsibility for any loss or damage that arise from the use of this email
or attachments.

 

 

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Understanding DNS Querries

[Carl Houseman]

Any query data that doesn't end with "." is unqualified.  So lookup
www.microsoft.com. and you'll get different results.
 
Carl
 
  _  

From: Joseph L. Casale [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2008 9:36 AM
To: NT System Admin Issues
Subject: Understanding DNS Querries



I have a Vista wkst and two dns servers, one Win2k3 and one Linux running
Bind. If from the Vista wkst I run nslookup, point it to the Win2k3 server,
set q=mx then query Microsoft.com, it returns expected data. If I point I to
the Bind server and perform the same test, I can see through the logging
that the query "www.microsoft.com" actually gets querried as
www.microsoft.com.ad-domain.local and www.microsoft.com and finally returns
correct data. When I set q=mx and ask for microsoft.com it wont resolve it
as it gets asked as "microsoft.com.ad-domain.local".

I thought the behavior was to append the dns suffix only to unqualified
names?

 

Thanks!
jlc










~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Explorer.exe 100%

[Don Ely]

Install BSD...

On Mon, Mar 17, 2008 at 7:29 AM, Bob Fronk <[EMAIL PROTECTED]> wrote:

>  I recall a thread a while back about a Windows update that caused
> explorer.exe to consume 100% cpu.  I have tried to Google and look at the
> archives, but have been unsuccessful in my search.
>
>
>
> Does anyone recall what the fix was?
>
>
>
> I have a client with 2 PCs that went to 100% CPU following a reboot from
> Windows update.
>
>
>
> Bob Fronk
>
> This email and any attached files are confidential and intended solely for
> the intended recipient(s). If you are not the named recipient you should not
> read, distribute, copy or alter this email. Any views or opinions expressed
> in this email are those of the author and do not represent those of the
> Davis H. Elliot Company . Warning: Although precautions have been taken to
> make sure no viruses are present in this email, the company cannot accept
> responsibility for any loss or damage that arise from the use of this email
> or attachments.
>
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Explorer.exe 100%

[Bob Fronk]

I recall a thread a while back about a Windows update that caused
explorer.exe to consume 100% cpu.  I have tried to Google and look at
the archives, but have been unsuccessful in my search.

 

Does anyone recall what the fix was?

 

I have a client with 2 PCs that went to 100% CPU following a reboot from
Windows update.

 

Bob Fronk




This email and any attached files are confidential and intended solely for the 
intended recipient(s). If you are not the named recipient you should not read, 
distribute, copy or alter this email. Any views or opinions expressed in this 
email are those of the author and do not represent those of the Davis H. Elliot 
Company company. Warning: Although precautions have been taken to make sure no 
viruses are present in this email, the company cannot accept responsibility for 
any loss or damage that arise from the use of this email or attachments.
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Understanding DNS Querries

[Joseph L. Casale]

I have a Vista wkst and two dns servers, one Win2k3 and one Linux running Bind. 
If from the Vista wkst I run nslookup, point it to the Win2k3 server, set q=mx 
then query Microsoft.com, it returns expected data. If I point I to the Bind 
server and perform the same test, I can see through the logging that the query 
"www.microsoft.com" actually gets querried as 
www.microsoft.com.ad-domain.local and 
www.microsoft.com and finally returns correct data. 
When I set q=mx and ask for microsoft.com it wont resolve it as it gets asked 
as "microsoft.com.ad-domain.local".

I thought the behavior was to append the dns suffix only to unqualified names?

Thanks!
jlc

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Free XML viewer?

[Oliver Marshall]

Chaps,

Anyone got a recommendation of an XML viewer that displays large XMLs
with lots of nesting as a treeview style hierarchy of nodes ?

Olly

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~