RE: moving from mixed to native w2k/3
Thanks all! (been on leave :) ) -Original Message- From: Free, Bob [mailto:[EMAIL PROTECTED] Sent: 10 June 2008 22:58 To: NT System Admin Issues Subject: RE: moving from mixed to native w2k/3 Functional Levels Background Information http://technet2.microsoft.com/WindowsServer/en/library/4a589ca2-b572-48c d-94d2-7d5b0c817f411033.mspx?mfr=true Many more articles at- http://search.microsoft.com/results.aspx?mkt=en-CAsetlang=en-CAq=domai n+functional+levels From: Palmer, Neal [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2008 6:30 AM To: NT System Admin Issues Subject: RE: moving from mixed to native w2k/3 Sorry, maybe I misread. For 2003 Native AD, yes we'll have DC's at 2003 too... but that's a step ahead of us. We need to switch to native on 2000 AD first. My concern is the NT server. Does anyone have a web link or explanation of why it's okay to do it? My concern was NTLM. Cheers Neal From: Palmer, Neal [mailto:[EMAIL PROTECTED] Sent: 09 June 2008 14:26 To: NT System Admin Issues Subject: RE: moving from mixed to native w2k/3 Is that correct? What about this... # Windows 2000 mixed mode (this is the default setting) we are here # Windows 2000 native mode need to go here # Windows 2003 interim modeand keep going... # Windows 2003 mode http://searchexchange.techtarget.com/tip/0,289483,sid43_gci1042173,00.ht ml ? Neal From: Todd Lemmiksoo [mailto:[EMAIL PROTECTED] Sent: 09 June 2008 14:00 To: NT System Admin Issues Subject: RE: moving from mixed to native w2k/3 Going to native Windows 2003 AD does not impact your non Windows 200X or NT member servers. You have to have all DC's running Windows 2003. Todd Lemmiksoo From: Palmer, Neal [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2008 8:00 AM To: NT System Admin Issues Subject: moving from mixed to native w2k/3 Hi all, I've been asked to look into moving from mixed to native mode for our single domain/tree, multiple DC network, we're all 2000 SP4 or 2003 SP2 DC's. Nothing NT4 aside from one legacy application member server serving an Oracle database and some file sharing for a renegade (i.e. separately funded, politically protected) department. If we move to native, is this NT4 server still going to be contactable/alive/working? I can't see anything on the web other than concern about W2K clients that will have issues (e.g. group policy) in the absence of W2K DC's (which we have anyway). Does NTLM Authentication disappear, thus so does the NT4 server? Excuse the rather old-hat nature of this question, I haven't been party to infrastructure AD stuff for long, I guess we haven't changed over yet because it's never been needed that badly. Thanks Neal --- Neal Palmer Senior Technical Support Officer Systems and Communications Services Information Services Division UWIC Cardiff Wales CF5 2YB --- P SAVE PAPER - Please do not print this e-mail unless absolutely necessary ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: VIPRE Enterprise beta software is available
On Wed, Jun 11, 2008 at 9:21 PM, Micheal Espinola Jr [EMAIL PROTECTED] wrote: why would anyone on this list test beta AV software... Someone has to the first to test it. And if one has the resources to dedicate to testing a product the way one wants to use it, it might lead to a product that better does what one wants. Now I just wish I had the resources to test it. :) -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: VIPRE Enterprise beta software is available
... why would anyone on this list test beta AV software... Maybe because they CAN ! Hopefully they'd have the knowledge to understand what it does and doesn't do, and to provide proper feedback, and maybe take part in shaping a piece of software that they'd end up using to help protect their systems. Just my take on it, YMMV -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 9:22 PM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available yes, thats where I test production release AV software. why would anyone on this list test beta AV software... On 6/11/08, Erik Goldoff [EMAIL PROTECTED] wrote: Absolutely use TEST/Dev networks first ... But then again, you DO want it tested at some point by the same group that would be using the production release Sorry, Micheal, doesn't seem too silly to me, YMMV ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Basic Group policy question
Good morning, I'm still playing with Group Policy, and obviously, I am new at this. Let me ask if what I'm trying to do is even possible: I am running Terminal Server on a 2003 Server. We installed scheduling software on the server that everyone needs to use. Our users use the same account to login to the domain locally, as well as to login to the TS. When they login to the TS we want to disable certain activities such as browsing the network or internet. We don't want them to lose this ability on their local machines. To accomplish this, I set up a Terminal Server group, and added the proper users to the group. I am trying to setup group policies on this TS group. Should this work to accomplish my goal? Thanks, Eric _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 2:27 PM To: NT System Admin Issues Subject: Group policy question Now that I've solved my logon script issue, I've moved on to locking down Terminal Server connections. We are running some scheduling software from TS. It would be great if people could access the TS externally to via the schedules, but I have some security concerns. Can I lock down TS clients ability to browse my network, map drives, etc. through a group policy governing my TS group? Thanks again, Eric ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Basic Group policy question
I think you need to use loopback processing to apply this http://support.microsoft.com/kb/231287 2008/6/12 [EMAIL PROTECTED]: Good morning, I'm still playing with Group Policy, and obviously, I am new at this. Let me ask if what I'm trying to do is even possible: I am running Terminal Server on a 2003 Server. We installed scheduling software on the server that everyone needs to use. Our users use the same account to login to the domain locally, as well as to login to the TS. When they login to the TS we want to disable certain activities such as browsing the network or internet. We don't want them to lose this ability on their local machines. To accomplish this, I set up a Terminal Server group, and added the proper users to the group. I am trying to setup group policies on this TS group. Should this work to accomplish my goal? Thanks, Eric -- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *Sent:* Wednesday, June 11, 2008 2:27 PM *To:* NT System Admin Issues *Subject:* Group policy question Now that I've solved my logon script issue, I've moved on to locking down Terminal Server connections. We are running some scheduling software from TS. It would be great if people could access the TS externally to via the schedules, but I have some security concerns. Can I lock down TS clients ability to browse my network, map drives, etc. through a group policy governing my TS group? Thanks again, Eric ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Basic Group policy question
No. Users are users and since their using the same account everywhere those polices will follow them everywhere. Shook From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 9:39 AM To: NT System Admin Issues Subject: Basic Group policy question Good morning, I'm still playing with Group Policy, and obviously, I am new at this. Let me ask if what I'm trying to do is even possible: I am running Terminal Server on a 2003 Server. We installed scheduling software on the server that everyone needs to use. Our users use the same account to login to the domain locally, as well as to login to the TS. When they login to the TS we want to disable certain activities such as browsing the network or internet. We don't want them to lose this ability on their local machines. To accomplish this, I set up a Terminal Server group, and added the proper users to the group. I am trying to setup group policies on this TS group. Should this work to accomplish my goal? Thanks, Eric From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 2:27 PM To: NT System Admin Issues Subject: Group policy question Now that I've solved my logon script issue, I've moved on to locking down Terminal Server connections. We are running some scheduling software from TS. It would be great if people could access the TS externally to via the schedules, but I have some security concerns. Can I lock down TS clients ability to browse my network, map drives, etc. through a group policy governing my TS group? Thanks again, Eric ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: VIPRE Enterprise beta software is available
Obviously testing the actual AV component itself would be very difficult, but testing the UI, install procedures, compatibility, footprint, etc would be valuable. I have a lab that's about 4x the size of my production network, so I could easily do this if I had the time. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 6:22 PM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available yes, thats where I test production release AV software. why would anyone on this list test beta AV software... On 6/11/08, Erik Goldoff [EMAIL PROTECTED] wrote: Absolutely use TEST/Dev networks first ... But then again, you DO want it tested at some point by the same group that would be using the production release Sorry, Micheal, doesn't seem too silly to me, YMMV -Original Message- From: Alex Eckelberry [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 8:49 PM To: NT System Admin Issues Subject: RE: VIPRE Enterprise beta software is available The idea of beta testing by general administrators just strikes me as extremely silly. Of course. That's why you have test networks ;-) -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 10:09 AM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available Yes.. sign me up for some beta security software! weee! Sorry, but I couldn't resist. The idea of beta testing by general administrators just strikes me as extremely silly. On Tue, Jun 10, 2008 at 6:22 PM, Alex Eckelberry [EMAIL PROTECTED] wrote: If you're interested in Sunbelt's new antivirus + antispyware product for the enterprise, Beta 1 of VIPRE Enterprise is now available. Please send an email to [EMAIL PROTECTED] and put VIPRE Enterprise (SVE) in the title in order to register for the beta. At VIPRE's core is an antivirus and antispyware engine that merges the detection of all types of malware into a single efficient and powerful system. The new technology was developed exclusively by Sunbelt, without building on older generation antivirus engines. VIPRE Enterprise utilizes a high speed threat scanning engine that can scan large volumes of information for malware threats in a short period of time with limited performance impact on the end user's PC. VIPRE Enterprise uses multiple techniques to inspect the characteristics of all types of potentially threatening files. From simple signature-based detection to dynamic, sophisticated analysis of malware files, VIPRE quickly determines whether a file is good or bad - enabling comprehensive detection of both existing and new unidentified threats. VIPRE Enterprise is designed to replace both your antivirus and antispyware desktop applications. However, it is not recommended during the beta to do a full production rollout (for obvious reasons). Once you've registered for the beta, you will be given access to the beta forum, which has more information on the product's functionality, as well as known issues, etc. (If you like, you can also download the consumer/home office version at http://beta.sunbeltsoftware.com) Alex Alex Eckelberry CEO Sunbelt Software 33 N. Garden Avenue, Suite 1200 Clearwater, FL 33755 e: [EMAIL PROTECTED] p: 727.562.0101 x220 f: 727-562-3402 w: www.sunbeltsoftware.com b: www.sunbeltblog.com ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ -- ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ No virus found in this incoming message. Checked by AVG. Version: 8.0.100 / Virus Database: 270.2.0/1497 - Release Date: 6/11/2008 8:32 AM ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ -- Sent from Gmail for mobile | mobile.google.com ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Basic Group policy question
Check this out: http://www.microsoft.com/downloads/details.aspx?familyid=7f272fff-9a6e-40c7-b64e-7920e6ae6a0ddisplaylang=en Original Message Subject: Basic Group policy questionTo: "NT System Admin Issues" ntsysadmin@lyris.sunbelt-software.com Good morning, I'm still playing with Group Policy, and obviously, I am new at this. Let me ask if what I'm trying to do is even possible: I am running Terminal Server on a 2003 Server. We installed scheduling software on the server that everyone needs to use. Our users use the same account to login to the domain locally, as well as to login to the TS. When they login to the TS we want to disable certain activities such as browsing the network or internet. We don't want them to lose this ability on their local machines. To accomplish this, I set up a Terminal Server group, and added the proper users to the group. I am trying to setup group policies on this TS group. Should this work to accomplish my goal?
RE: RDP question
Oh, nothing real serious, he was just exploiting an account that has been around for a very long time - which happens to have *domain admin* rights . . . (I was being sarcastic about the serious part . . .) James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services From: Troy Meyer [mailto:[EMAIL PROTECTED] Posted At: Wednesday, June 11, 2008 3:35 PM Posted To: NTSysadmin Conversation: RDP question Subject: RE: RDP question James, This kind of stuff intrigues me. Without giving up details can you tell us what he was doing and what type of account he was exploiting? Many times I have found issues in my own setup listening to what is vulnerable on other networks. Thanks Troy From: James Winzenz [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 3:26 PM To: NT System Admin Issues Subject: RE: RDP question We do have that set up in our audit policy, and the logon was indeed a 528; the problem was that the guy didn't use his own account. He also had no business doing what he did. Luckily the terminal services logon event provided the ip address that connected, so we were able to track it down to the person who did it and report them. As to what happens now, anyone's guess. I highly doubt he will be fired, although if it were me, that is what I would recommend, due to the nature of the account he used and the actions he took. At least we are going to be able to get rid of another generic account . . . James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services From: Bob Fronk [mailto:[EMAIL PROTECTED] Posted At: Monday, June 09, 2008 10:40 AM Posted To: NTSysadmin Conversation: RDP question Subject: RE: RDP question The default.rdp will help, but for future, you probably need to set a GPO to audit logon events. If this already exists, just look on the security log for the event. (I think it is 528, but from memory so not positive) Bob Fronk [EMAIL PROTECTED] From: James Winzenz [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2008 1:07 PM To: NT System Admin Issues Subject: RDP question RDP question for everyone - is there a file on the client (log or other file type) that shows a client's most recent rdp sessions? When I click on my remote desktop connection, it always shows me my the name of the last server I RDP'd into, but I am looking to see if that is stored somewhere on the local computer. We had some inappropriate activity using a service account and don't yet have enough information to prove that a certain person did something they should not have. The more information I can obtain, the better. The client was XP Pro SP2, if that helps any. I have viewed the event logs on the server they logged into, and it unfortunately does not provide the computer name that connected to it, just the IP address. I want irrefutable proof, and this, in combination with the DHCP logs, does not quite provide that. I have been unable to find anything yet in Google using multiple different search strings. Thanks, James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services Telefax: (602) 797-5823 CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~image002.gif
RE: RDP question
That is actually something that we should look into - I am going to mention that to our infrastructure group. Thanks, James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services From: James Rankin [mailto:[EMAIL PROTECTED] Posted At: Wednesday, June 11, 2008 3:40 PM Posted To: NTSysadmin Conversation: RDP question Subject: Re: RDP question CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: VIPRE Enterprise beta software is available
Well, I don't have *all* the latest, but I do have a small zoo of different viruses (virii) quarantined over the years ... And will test on a DEVELOPMENT network off the main wire to begin with -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 9:41 AM To: NT System Admin Issues Subject: RE: VIPRE Enterprise beta software is available Obviously testing the actual AV component itself would be very difficult, but testing the UI, install procedures, compatibility, footprint, etc would be valuable. I have a lab that's about 4x the size of my production network, so I could easily do this if I had the time. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: VIPRE Enterprise beta software is available
Let us know your results Eric. Thanks, Tom -Original Message- From: Erik Goldoff [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 10:36 AM To: NT System Admin Issues Subject: RE: VIPRE Enterprise beta software is available Well, I don't have *all* the latest, but I do have a small zoo of different viruses (virii) quarantined over the years ... And will test on a DEVELOPMENT network off the main wire to begin with -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 9:41 AM To: NT System Admin Issues Subject: RE: VIPRE Enterprise beta software is available Obviously testing the actual AV component itself would be very difficult, but testing the UI, install procedures, compatibility, footprint, etc would be valuable. I have a lab that's about 4x the size of my production network, so I could easily do this if I had the time. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
AD reports
Hi all, We have a client that will require quarterly reports regarding AD users and the groups to which they belong. Is there an easy and possibly free tool out there to provide a legible list of users and the groups the user is in. This isn't any big enterprise AD environment. Only about 30 users who are currently on an SBS. I know there are a couple of dsquery commands that will list users and groups, but that doesn't really seem to get me very close to providing a list that basically says this user has these memberships, this user has these memberships, and have it organized by OU. I just don't want to spend a few hours exporting the info and cutting and pasting to a report so that it is discernible to someone else outside of the AD admin...especially if they will require this quarterly. Thanks for any help. Bill ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: AD reports
I've used this tool with decent success.. I think it is more Exchange focused, but might do your job for AD groups too.. Otherwise PowerShell and something like *get-qadGroup Groupname* could do it in a rough format.. http://www.imanami.com/products/smartr/ On Thu, Jun 12, 2008 at 7:58 AM, wjh [EMAIL PROTECTED] wrote: Hi all, We have a client that will require quarterly reports regarding AD users and the groups to which they belong. Is there an easy and possibly free tool out there to provide a legible list of users and the groups the user is in. This isn't any big enterprise AD environment. Only about 30 users who are currently on an SBS. I know there are a couple of dsquery commands that will list users and groups, but that doesn't really seem to get me very close to providing a list that basically says this user has these memberships, this user has these memberships, and have it organized by OU. I just don't want to spend a few hours exporting the info and cutting and pasting to a report so that it is discernible to someone else outside of the AD admin...especially if they will require this quarterly. Thanks for any help. Bill ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Terminal Services Default Printer
I have several remote users connecting to a terminal server. They select their default printer while connected but that setting is not remembered upon reconnection. What setting am I missing? Roger Wright Network Administrator 727.572.7076 x388 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~image003.jpg
Re: Terminal Services Default Printer
I am assuming they are networked printers...this may not solve the problem, but you've checked into the filterqueuetype reg entry? On Thu, Jun 12, 2008 at 10:53 AM, Roger Wright [EMAIL PROTECTED] wrote: I have several remote users connecting to a terminal server. They select their default printer while connected but that setting is not remembered upon reconnection. What setting am I missing? Roger Wright Network Administrator 727.572.7076 x388 [image: ET E-mail Signature Logo] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~image003.jpg
Re: AD reports
With PowerShell and the Quest AD cmdlets it would be more along the lines of $user = juser (get-QADuser $user ).memberof | get-qadgroup | select-object Name | export-cvs ./report.csv - To do all the users you could loop through them from a list or an AD query with Get-QADuser. If you used the list you would avoid random service accounts, unless your users are in a specific OU and you did the Get-QADuser on that specific OU. Steven Peck http://www.blkmtn.org On Thu, Jun 12, 2008 at 8:13 AM, Eric Woodford [EMAIL PROTECTED] wrote: I've used this tool with decent success.. I think it is more Exchange focused, but might do your job for AD groups too.. Otherwise PowerShell and something like get-qadGroup Groupname could do it in a rough format.. http://www.imanami.com/products/smartr/ On Thu, Jun 12, 2008 at 7:58 AM, wjh [EMAIL PROTECTED] wrote: Hi all, We have a client that will require quarterly reports regarding AD users and the groups to which they belong. Is there an easy and possibly free tool out there to provide a legible list of users and the groups the user is in. This isn't any big enterprise AD environment. Only about 30 users who are currently on an SBS. I know there are a couple of dsquery commands that will list users and groups, but that doesn't really seem to get me very close to providing a list that basically says this user has these memberships, this user has these memberships, and have it organized by OU. I just don't want to spend a few hours exporting the info and cutting and pasting to a report so that it is discernible to someone else outside of the AD admin...especially if they will require this quarterly. Thanks for any help. Bill ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Terminal Services Default Printer
They are networked printers. The users are getting their local printers mapped and can set the default printer to a network printer during a session and it's fine for duration. But they have to reset it each day, or after their session times out. Roger Wright Network Administrator 727.572.7076 x388 _ From: Steve Ens [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:02 PM To: NT System Admin Issues Subject: Re: Terminal Services Default Printer I am assuming they are networked printers...this may not solve the problem, but you've checked into the filterqueuetype reg entry? On Thu, Jun 12, 2008 at 10:53 AM, Roger Wright [EMAIL PROTECTED] wrote: I have several remote users connecting to a terminal server. They select their default printer while connected but that setting is not remembered upon reconnection. What setting am I missing? Roger Wright Network Administrator 727.572.7076 x388 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~image001.jpg
Re: Whats thrashing my disk
Perfmon? On Thu, Jun 12, 2008 at 11:15 AM, Oliver Marshall [EMAIL PROTECTED] wrote: Hi chaps, I have a laptop here that's prone to bouts of disk thrashing. All will be fine, then suddenly everything takes 20 secs and you notice the disk light is just on all the time. The disk appears fine from the checks we've done so I want to look at any errant processes that may be causing the disk to go nuts in short bursts. Is there a tool for XP that will show whats using the disk the most at any given time? Something I can leave running and just sit and watch it until this disk light goes on solid? Olly ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
How to logon to 2 domains question
I moved some machines to a corporate WAN domain (trusted). In case the link to the domain go down I think I will not able to join the local domain for using at least shared resources.(the machines are now joined to the WAN domain) Am I right ? TIA GuidoElia HELPPC ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Terminal Services Default Printer
Sounds like a permissions issue. I have a similar issue when people logon as a guest user, a new profile gets created each time, one needs to reinitialize Office, etc. On Thu, Jun 12, 2008 at 11:17 AM, Roger Wright [EMAIL PROTECTED] wrote: They are networked printers. The users are getting their local printers mapped and can set the default printer to a network printer during a session and it's fine for duration. But they have to reset it each day, or after their session times out. Roger Wright Network Administrator 727.572.7076 x388 _ *From:* Steve Ens [mailto:[EMAIL PROTECTED] *Sent:* Thursday, June 12, 2008 12:02 PM *To:* NT System Admin Issues *Subject:* Re: Terminal Services Default Printer I am assuming they are networked printers...this may not solve the problem, but you've checked into the filterqueuetype reg entry? On Thu, Jun 12, 2008 at 10:53 AM, Roger Wright [EMAIL PROTECTED] wrote: I have several remote users connecting to a terminal server. They select their default printer while connected but that setting is not remembered upon reconnection. What setting am I missing? Roger Wright Network Administrator 727.572.7076 x388 [image: ET E-mail Signature Logo] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~image001.jpg
Re: How to logon to 2 domains question
Why dont you have a local DC from corp at your location. I would think you would have one so logins do not have to go across the WAN. Unless you only have a few users at your site, like 50 or less. On Thu, Jun 12, 2008 at 12:27 PM, HELP_PC [EMAIL PROTECTED] wrote: I moved some machines to a corporate WAN domain (trusted). In case the link to the domain go down I think I will not able to join the local domain for using at least shared resources.(the machines are now joined to the WAN domain) Am I right ? TIA *GuidoElia* *HELPPC* ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
R: How to logon to 2 domains question
That is the case. I don't know if they will want to add a Corporate DC, but in the meantime the DC is only for the local domain.(45 users ,were SBS) GuidoElia HELPPC _ Da: KenM [mailto:[EMAIL PROTECTED] Inviato: giovedì 12 giugno 2008 18.33 A: NT System Admin Issues Oggetto: Re: How to logon to 2 domains question Why dont you have a local DC from corp at your location. I would think you would have one so logins do not have to go across the WAN. Unless you only have a few users at your site, like 50 or less. On Thu, Jun 12, 2008 at 12:27 PM, HELP_PC [EMAIL PROTECTED] wrote: I moved some machines to a corporate WAN domain (trusted). In case the link to the domain go down I think I will not able to join the local domain for using at least shared resources.(the machines are now joined to the WAN domain) Am I right ? TIA GuidoElia HELPPC ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Whats thrashing my disk
Usually when this happens to me, I run Task Manager and add the columns for I/O reads and I/O writes. Then sort on those and you can usually see this. As a second thought, what Antivirus are you using and how often does it run and update. I know with at least one vendor when updates are pulled for 3-5 minutes on our laptops it really thrashes the disk as the new defs are installed. If you are running Windows Defender that can also hit you hard while it is scanning. -Original Message- From: Oliver Marshall [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 11:16 AM To: NT System Admin Issues Subject: Whats thrashing my disk Hi chaps, I have a laptop here that's prone to bouts of disk thrashing. All will be fine, then suddenly everything takes 20 secs and you notice the disk light is just on all the time. The disk appears fine from the checks we've done so I want to look at any errant processes that may be causing the disk to go nuts in short bursts. Is there a tool for XP that will show whats using the disk the most at any given time? Something I can leave running and just sit and watch it until this disk light goes on solid? Olly ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: AD reports
Just a word of warning if you decide to use this. This will not get the users Primary group or any nested groups the users may belong to. I do not know PS well enough to tell you how to get those but would be interested to see how this is done with PS if anyone knows. On Thu, Jun 12, 2008 at 12:06 PM, Steven Peck [EMAIL PROTECTED] wrote: With PowerShell and the Quest AD cmdlets it would be more along the lines of $user = juser (get-QADuser $user ).memberof | get-qadgroup | select-object Name | export-cvs ./report.csv - To do all the users you could loop through them from a list or an AD query with Get-QADuser. If you used the list you would avoid random service accounts, unless your users are in a specific OU and you did the Get-QADuser on that specific OU. Steven Peck http://www.blkmtn.org On Thu, Jun 12, 2008 at 8:13 AM, Eric Woodford [EMAIL PROTECTED] wrote: I've used this tool with decent success.. I think it is more Exchange focused, but might do your job for AD groups too.. Otherwise PowerShell and something like get-qadGroup Groupname could do it in a rough format.. http://www.imanami.com/products/smartr/ On Thu, Jun 12, 2008 at 7:58 AM, wjh [EMAIL PROTECTED] wrote: Hi all, We have a client that will require quarterly reports regarding AD users and the groups to which they belong. Is there an easy and possibly free tool out there to provide a legible list of users and the groups the user is in. This isn't any big enterprise AD environment. Only about 30 users who are currently on an SBS. I know there are a couple of dsquery commands that will list users and groups, but that doesn't really seem to get me very close to providing a list that basically says this user has these memberships, this user has these memberships, and have it organized by OU. I just don't want to spend a few hours exporting the info and cutting and pasting to a report so that it is discernible to someone else outside of the AD admin...especially if they will require this quarterly. Thanks for any help. Bill ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: R: How to logon to 2 domains question
I am guessing that if you have a corp Domain that they do not want you to have your own local domain, especially SBS. I dont think anyone here can help you, you will need to talk to your Corp office and see what their policies are. One thing that may work though is if you have your users keep the same user names and password in each Domain. You will run into problems when they have to change passwords. One thing you can try for that is enable password change through IIS and tell the users if the password changes in Corp they need to change it in the local domain On Thu, Jun 12, 2008 at 12:43 PM, HELP_PC [EMAIL PROTECTED] wrote: That is the case. I don't know if they will want to add a Corporate DC, but in the meantime the DC is only for the local domain.(45 users ,were SBS) *GuidoElia* *HELPPC* -- *Da:* KenM [mailto:[EMAIL PROTECTED] *Inviato:* giovedì 12 giugno 2008 18.33 *A:* NT System Admin Issues *Oggetto:* Re: How to logon to 2 domains question Why dont you have a local DC from corp at your location. I would think you would have one so logins do not have to go across the WAN. Unless you only have a few users at your site, like 50 or less. On Thu, Jun 12, 2008 at 12:27 PM, HELP_PC [EMAIL PROTECTED] wrote: I moved some machines to a corporate WAN domain (trusted). In case the link to the domain go down I think I will not able to join the local domain for using at least shared resources.(the machines are now joined to the WAN domain) Am I right ? TIA *GuidoElia* *HELPPC* ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Old IP from a Win2003 System
Any chance of enumerating an ip a system *had*, it was changed and I need to know it! Thanks, jlc ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: VIPRE Enterprise beta software is available
Well sure... but why would you? This just doesn't make any sense to me. And I'm not trying to be a pita here - I just seriously cannot make sense out of: 1. Why if you are a disassociated admin, would you test beta AV software. I'm sketchy about beta software in general - but beta AV software? Are you a virus-security professional? Do you really have what it takes to put AV software through its paces? A beta-test request like this is much better suited for the security professionals on the Full-Disclosure list, etc. 2. Devote any time/resources to testing beta anything that was not mission0critical to your organization. Mabe Im getting old, and am thinking with too much of an old-school a mentality. But I cant imagine having any justification for beta testing AV software. Let alone my organization approving that justification. I wonder if there is something going on that I am sorely missing out on. People or so gung-ho to test any kinda of beta software these days regardless of professional expertise - it just boggles my mind. *shrug* On Thu, Jun 12, 2008 at 9:41 AM, Martin Blackstone [EMAIL PROTECTED] wrote: Obviously testing the actual AV component itself would be very difficult, but testing the UI, install procedures, compatibility, footprint, etc would be valuable. I have a lab that's about 4x the size of my production network, so I could easily do this if I had the time. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 6:22 PM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available yes, thats where I test production release AV software. why would anyone on this list test beta AV software... On 6/11/08, Erik Goldoff [EMAIL PROTECTED] wrote: Absolutely use TEST/Dev networks first ... But then again, you DO want it tested at some point by the same group that would be using the production release Sorry, Micheal, doesn't seem too silly to me, YMMV -Original Message- From: Alex Eckelberry [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 8:49 PM To: NT System Admin Issues Subject: RE: VIPRE Enterprise beta software is available The idea of beta testing by general administrators just strikes me as extremely silly. Of course. That's why you have test networks ;-) -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 10:09 AM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available Yes.. sign me up for some beta security software! weee! Sorry, but I couldn't resist. The idea of beta testing by general administrators just strikes me as extremely silly. On Tue, Jun 10, 2008 at 6:22 PM, Alex Eckelberry [EMAIL PROTECTED] wrote: If you're interested in Sunbelt's new antivirus + antispyware product for the enterprise, Beta 1 of VIPRE Enterprise is now available. Please send an email to [EMAIL PROTECTED] and put VIPRE Enterprise (SVE) in the title in order to register for the beta. At VIPRE's core is an antivirus and antispyware engine that merges the detection of all types of malware into a single efficient and powerful system. The new technology was developed exclusively by Sunbelt, without building on older generation antivirus engines. VIPRE Enterprise utilizes a high speed threat scanning engine that can scan large volumes of information for malware threats in a short period of time with limited performance impact on the end user's PC. VIPRE Enterprise uses multiple techniques to inspect the characteristics of all types of potentially threatening files. From simple signature-based detection to dynamic, sophisticated analysis of malware files, VIPRE quickly determines whether a file is good or bad - enabling comprehensive detection of both existing and new unidentified threats. VIPRE Enterprise is designed to replace both your antivirus and antispyware desktop applications. However, it is not recommended during the beta to do a full production rollout (for obvious reasons). Once you've registered for the beta, you will be given access to the beta forum, which has more information on the product's functionality, as well as known issues, etc. (If you like, you can also download the consumer/home office version at http://beta.sunbeltsoftware.com) Alex Alex Eckelberry CEO Sunbelt Software 33 N. Garden Avenue, Suite 1200 Clearwater, FL 33755 e: [EMAIL PROTECTED] p: 727.562.0101 x220 f: 727-562-3402 w: www.sunbeltsoftware.com b: www.sunbeltblog.com ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ -- ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next
Re: VIPRE Enterprise beta software is available
BUT.having random admins do testing reveals compatibility and UI issues that can be tweaked. Are you telling me you never run MS beta software just to see how it may impact your environment? - Original Message - From: Micheal Espinola Jr [EMAIL PROTECTED] To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thu Jun 12 13:35:08 2008 Subject: Re: VIPRE Enterprise beta software is available Well sure... but why would you? This just doesn't make any sense to me. And I'm not trying to be a pita here - I just seriously cannot make sense out of: 1. Why if you are a disassociated admin, would you test beta AV software. I'm sketchy about beta software in general - but beta AV software? Are you a virus-security professional? Do you really have what it takes to put AV software through its paces? A beta-test request like this is much better suited for the security professionals on the Full-Disclosure list, etc. 2. Devote any time/resources to testing beta anything that was not mission0critical to your organization. Mabe Im getting old, and am thinking with too much of an old-school a mentality. But I cant imagine having any justification for beta testing AV software. Let alone my organization approving that justification. I wonder if there is something going on that I am sorely missing out on. People or so gung-ho to test any kinda of beta software these days regardless of professional expertise - it just boggles my mind. *shrug* On Thu, Jun 12, 2008 at 9:41 AM, Martin Blackstone [EMAIL PROTECTED] wrote: Obviously testing the actual AV component itself would be very difficult, but testing the UI, install procedures, compatibility, footprint, etc would be valuable. I have a lab that's about 4x the size of my production network, so I could easily do this if I had the time. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 6:22 PM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available yes, thats where I test production release AV software. why would anyone on this list test beta AV software... On 6/11/08, Erik Goldoff [EMAIL PROTECTED] wrote: Absolutely use TEST/Dev networks first ... But then again, you DO want it tested at some point by the same group that would be using the production release Sorry, Micheal, doesn't seem too silly to me, YMMV -Original Message- From: Alex Eckelberry [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 8:49 PM To: NT System Admin Issues Subject: RE: VIPRE Enterprise beta software is available The idea of beta testing by general administrators just strikes me as extremely silly. Of course. That's why you have test networks ;-) -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 10:09 AM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available Yes.. sign me up for some beta security software! weee! Sorry, but I couldn't resist. The idea of beta testing by general administrators just strikes me as extremely silly. On Tue, Jun 10, 2008 at 6:22 PM, Alex Eckelberry [EMAIL PROTECTED] wrote: If you're interested in Sunbelt's new antivirus + antispyware product for the enterprise, Beta 1 of VIPRE Enterprise is now available. Please send an email to [EMAIL PROTECTED] and put VIPRE Enterprise (SVE) in the title in order to register for the beta. At VIPRE's core is an antivirus and antispyware engine that merges the detection of all types of malware into a single efficient and powerful system. The new technology was developed exclusively by Sunbelt, without building on older generation antivirus engines. VIPRE Enterprise utilizes a high speed threat scanning engine that can scan large volumes of information for malware threats in a short period of time with limited performance impact on the end user's PC. VIPRE Enterprise uses multiple techniques to inspect the characteristics of all types of potentially threatening files. From simple signature-based detection to dynamic, sophisticated analysis of malware files, VIPRE quickly determines whether a file is good or bad - enabling comprehensive detection of both existing and new unidentified threats. VIPRE Enterprise is designed to replace both your antivirus and antispyware desktop applications. However, it is not recommended during the beta to do a full production rollout (for obvious reasons). Once you've registered for the beta, you will be given access to the beta forum, which has more information on the product's functionality, as well as known issues, etc. (If you like, you can also download the consumer/home office version at http://beta.sunbeltsoftware.com) Alex Alex Eckelberry CEO Sunbelt Software 33 N. Garden Avenue, Suite 1200 Clearwater, FL 33755 e: [EMAIL PROTECTED] p:
RE: RDP question
Hopefully everyone is also strictly limiting the systems a service account can logon to whenever possible ..right? Also a very good idea to be auditing any changes to the userWorkstations attribute of such accounts. From: James Rankin [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 3:40 PM To: NT System Admin Issues Subject: Re: RDP question We have our service accounts set via GPO so that they can't log on interactively or via RDP. However some (admittedly poor) software goes belly-up without the Interactive Logon right On 11/06/2008, James Winzenz [EMAIL PROTECTED] wrote: We do have that set up in our audit policy, and the logon was indeed a 528; the problem was that the guy didn't use his own account. He also had no business doing what he did. Luckily the terminal services logon event provided the ip address that connected, so we were able to track it down to the person who did it and report them. As to what happens now, anyone's guess. I highly doubt he will be fired, although if it were me, that is what I would recommend, due to the nature of the account he used and the actions he took. At least we are going to be able to get rid of another generic account . . . James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services From: Bob Fronk [mailto:[EMAIL PROTECTED] Posted At: Monday, June 09, 2008 10:40 AM Posted To: NTSysadmin Conversation: RDP question Subject: RE: RDP question The default.rdp will help, but for future, you probably need to set a GPO to audit logon events. If this already exists, just look on the security log for the event. (I think it is 528, but from memory so not positive) Bob Fronk [EMAIL PROTECTED] From: James Winzenz [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2008 1:07 PM To: NT System Admin Issues Subject: RDP question RDP question for everyone - is there a file on the client (log or other file type) that shows a client's most recent rdp sessions? When I click on my remote desktop connection, it always shows me my the name of the last server I RDP'd into, but I am looking to see if that is stored somewhere on the local computer. We had some inappropriate activity using a service account and don't yet have enough information to prove that a certain person did something they should not have. The more information I can obtain, the better. The client was XP Pro SP2, if that helps any. I have viewed the event logs on the server they logged into, and it unfortunately does not provide the computer name that connected to it, just the IP address. I want irrefutable proof, and this, in combination with the DHCP logs, does not quite provide that. I have been unable to find anything yet in Google using multiple different search strings. Thanks, James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services Telefax: (602) 797-5823 CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~image001.gif
RE: Old IP from a Win2003 System
Maybe an old event log entry? System log, look for source of w32time, which shows the source IP going to the DC it updated against. -Bonnie From: Joseph L. Casale [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 10:17 AM To: NT System Admin Issues Subject: Old IP from a Win2003 System Any chance of enumerating an ip a system *had*, it was changed and I need to know it! Thanks, jlc ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Terminal Services Default Printer
Sounds like a profile problem-not getting saved at logoff? Permissions? -Bonnie From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 9:18 AM To: NT System Admin Issues Subject: RE: Terminal Services Default Printer They are networked printers. The users are getting their local printers mapped and can set the default printer to a network printer during a session and it's fine for duration. But they have to reset it each day, or after their session times out. Roger Wright Network Administrator 727.572.7076 x388 _ From: Steve Ens [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:02 PM To: NT System Admin Issues Subject: Re: Terminal Services Default Printer I am assuming they are networked printers...this may not solve the problem, but you've checked into the filterqueuetype reg entry? On Thu, Jun 12, 2008 at 10:53 AM, Roger Wright [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: I have several remote users connecting to a terminal server. They select their default printer while connected but that setting is not remembered upon reconnection. What setting am I missing? Roger Wright Network Administrator 727.572.7076 x388 [cid:image001.jpg@01C8CC7A.D02DD480] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~inline: image001.jpg
RE: AD reports
This will not get the users Primary group or any nested groups As of v1.1 Get-QADGroupMember has a parameter -Indirect which, when specified expands nested group objects in addition to objects that are direct members of the group. It also has some facilities for primarys- $group = Get-QADGroup group -ip primaryGroupToken Get-QADObject -ldapFilter (primaryGroupID=$($group.primaryGroupToken)) To consider primary group in member of: $user = Get-QADUser user -ip primaryGroupID Get-QADGroup -ldapFilter (primaryGroupToken=$($user.primaryGroupID)) From: KenM [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 9:57 AM To: NT System Admin Issues Subject: Re: AD reports Just a word of warning if you decide to use this. This will not get the users Primary group or any nested groups the users may belong to. I do not know PS well enough to tell you how to get those but would be interested to see how this is done with PS if anyone knows. On Thu, Jun 12, 2008 at 12:06 PM, Steven Peck [EMAIL PROTECTED] wrote: With PowerShell and the Quest AD cmdlets it would be more along the lines of $user = juser (get-QADuser $user ).memberof | get-qadgroup | select-object Name | export-cvs ./report.csv - To do all the users you could loop through them from a list or an AD query with Get-QADuser. If you used the list you would avoid random service accounts, unless your users are in a specific OU and you did the Get-QADuser on that specific OU. Steven Peck http://www.blkmtn.org On Thu, Jun 12, 2008 at 8:13 AM, Eric Woodford [EMAIL PROTECTED] wrote: I've used this tool with decent success.. I think it is more Exchange focused, but might do your job for AD groups too.. Otherwise PowerShell and something like get-qadGroup Groupname could do it in a rough format.. http://www.imanami.com/products/smartr/ On Thu, Jun 12, 2008 at 7:58 AM, wjh [EMAIL PROTECTED] wrote: Hi all, We have a client that will require quarterly reports regarding AD users and the groups to which they belong. Is there an easy and possibly free tool out there to provide a legible list of users and the groups the user is in. This isn't any big enterprise AD environment. Only about 30 users who are currently on an SBS. I know there are a couple of dsquery commands that will list users and groups, but that doesn't really seem to get me very close to providing a list that basically says this user has these memberships, this user has these memberships, and have it organized by OU. I just don't want to spend a few hours exporting the info and cutting and pasting to a report so that it is discernible to someone else outside of the AD admin...especially if they will require this quarterly. Thanks for any help. Bill ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Whats thrashing my disk
Well, in the usual way, it was running google desktop AND windows desktop (im no fan of the former, but quite a fan of the latter). Either way I've removed both and it still happens. It's running NOD32 as its AV which doesn't appear to have any impact on the other 30 laptops at this site. I've been using Task Manager to try to track it. The problem is that, as usually happens, task manager grinds to a halt when the disk is being used, only firing up to live when it returns to normal. CPU use during this time is fine though. Olly -Original Message- From: Terry Dickson [mailto:[EMAIL PROTECTED] Sent: 12 June 2008 17:45 To: NT System Admin Issues Subject: RE: Whats thrashing my disk Usually when this happens to me, I run Task Manager and add the columns for I/O reads and I/O writes. Then sort on those and you can usually see this. As a second thought, what Antivirus are you using and how often does it run and update. I know with at least one vendor when updates are pulled for 3-5 minutes on our laptops it really thrashes the disk as the new defs are installed. If you are running Windows Defender that can also hit you hard while it is scanning. -Original Message- From: Oliver Marshall [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 11:16 AM To: NT System Admin Issues Subject: Whats thrashing my disk Hi chaps, I have a laptop here that's prone to bouts of disk thrashing. All will be fine, then suddenly everything takes 20 secs and you notice the disk light is just on all the time. The disk appears fine from the checks we've done so I want to look at any errant processes that may be causing the disk to go nuts in short bursts. Is there a tool for XP that will show whats using the disk the most at any given time? Something I can leave running and just sit and watch it until this disk light goes on solid? Olly ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Old IP from a Win2003 System
Good idea. It turns out that the IP change wasn't the problem. It was a disk snap that made the license software unhappy. jlc From: Miller Bonnie L. [EMAIL PROTECTED] Sent: Thursday, June 12, 2008 11:54 AM To: NT System Admin Issues Subject: RE: Old IP from a Win2003 System Maybe an old event log entry? System log, look for source of w32time, which shows the source IP going to the DC it updated against. -Bonnie From: Joseph L. Casale [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 10:17 AM To: NT System Admin Issues Subject: Old IP from a Win2003 System Any chance of enumerating an ip a system *had*, it was changed and I need to know it! Thanks, jlc ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
OT: $75 Shell Gas Card
http://www.206inc.com/dockersgiftcard2008 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: VIPRE Enterprise beta software is available
Where did all these damn titles for Admins come from? General Admin, Disassociated Admin??? Educate me please! -Original Message- From: John Cook [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 1:46 PM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available BUT.having random admins do testing reveals compatibility and UI issues that can be tweaked. Are you telling me you never run MS beta software just to see how it may impact your environment? - Original Message - From: Micheal Espinola Jr [EMAIL PROTECTED] To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thu Jun 12 13:35:08 2008 Subject: Re: VIPRE Enterprise beta software is available Well sure... but why would you? This just doesn't make any sense to me. And I'm not trying to be a pita here - I just seriously cannot make sense out of: 1. Why if you are a disassociated admin, would you test beta AV software. I'm sketchy about beta software in general - but beta AV software? Are you a virus-security professional? Do you really have what it takes to put AV software through its paces? A beta-test request like this is much better suited for the security professionals on the Full-Disclosure list, etc. 2. Devote any time/resources to testing beta anything that was not mission0critical to your organization. Mabe Im getting old, and am thinking with too much of an old-school a mentality. But I cant imagine having any justification for beta testing AV software. Let alone my organization approving that justification. I wonder if there is something going on that I am sorely missing out on. People or so gung-ho to test any kinda of beta software these days regardless of professional expertise - it just boggles my mind. *shrug* On Thu, Jun 12, 2008 at 9:41 AM, Martin Blackstone [EMAIL PROTECTED] wrote: Obviously testing the actual AV component itself would be very difficult, but testing the UI, install procedures, compatibility, footprint, etc would be valuable. I have a lab that's about 4x the size of my production network, so I could easily do this if I had the time. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 6:22 PM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available yes, thats where I test production release AV software. why would anyone on this list test beta AV software... On 6/11/08, Erik Goldoff [EMAIL PROTECTED] wrote: Absolutely use TEST/Dev networks first ... But then again, you DO want it tested at some point by the same group that would be using the production release Sorry, Micheal, doesn't seem too silly to me, YMMV -Original Message- From: Alex Eckelberry [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 8:49 PM To: NT System Admin Issues Subject: RE: VIPRE Enterprise beta software is available The idea of beta testing by general administrators just strikes me as extremely silly. Of course. That's why you have test networks ;-) -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2008 10:09 AM To: NT System Admin Issues Subject: Re: VIPRE Enterprise beta software is available Yes.. sign me up for some beta security software! weee! Sorry, but I couldn't resist. The idea of beta testing by general administrators just strikes me as extremely silly. On Tue, Jun 10, 2008 at 6:22 PM, Alex Eckelberry [EMAIL PROTECTED] wrote: If you're interested in Sunbelt's new antivirus + antispyware product for the enterprise, Beta 1 of VIPRE Enterprise is now available. Please send an email to [EMAIL PROTECTED] and put VIPRE Enterprise (SVE) in the title in order to register for the beta. At VIPRE's core is an antivirus and antispyware engine that merges the detection of all types of malware into a single efficient and powerful system. The new technology was developed exclusively by Sunbelt, without building on older generation antivirus engines. VIPRE Enterprise utilizes a high speed threat scanning engine that can scan large volumes of information for malware threats in a short period of time with limited performance impact on the end user's PC. VIPRE Enterprise uses multiple techniques to inspect the characteristics of all types of potentially threatening files. From simple signature-based detection to dynamic, sophisticated analysis of malware files, VIPRE quickly determines whether a file is good or bad - enabling comprehensive detection of both existing and new unidentified threats. VIPRE Enterprise is designed to replace both your antivirus and antispyware desktop applications. However, it is not recommended during the beta to do a full production rollout (for obvious reasons). Once you've registered for the beta, you will be given access to the beta forum, which has more information on the product's functionality,
RE: Terminal Services Default Printer
Profiles are saved on the server itself, but perhaps the users are just closing the session without logging off. I'll check into that. Thanks... Roger Wright Network Administrator 727.572.7076 x388 _ From: Miller Bonnie L. [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 1:55 PM To: NT System Admin Issues Subject: RE: Terminal Services Default Printer Sounds like a profile problem-not getting saved at logoff? Permissions? -Bonnie From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 9:18 AM To: NT System Admin Issues Subject: RE: Terminal Services Default Printer They are networked printers. The users are getting their local printers mapped and can set the default printer to a network printer during a session and it's fine for duration. But they have to reset it each day, or after their session times out. Roger Wright Network Administrator 727.572.7076 x388 _ From: Steve Ens [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:02 PM To: NT System Admin Issues Subject: Re: Terminal Services Default Printer I am assuming they are networked printers...this may not solve the problem, but you've checked into the filterqueuetype reg entry? On Thu, Jun 12, 2008 at 10:53 AM, Roger Wright [EMAIL PROTECTED] wrote: I have several remote users connecting to a terminal server. They select their default printer while connected but that setting is not remembered upon reconnection. What setting am I missing? Roger Wright Network Administrator 727.572.7076 x388 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~image001.jpg
Re: AD reports
oh, missed the OU part of the original request. There are output
formatting options available in PowerShell but I haven't really
explored those much yet so this really just dumps output to the
screen. You can add an Out-File or do the old cmd prompt redirect
to a text file. One of these days I will explore the out- / export-
options.
1. $users =
2. foreach ($user in $users) {
3. Write-Host User Name: ($User).displayname;
4. Write-Host Parent Container: ($user).ParentContainerDN;
5. Write-Host Member Of
6. (Get-QADUser $user).memberof | Get-QADGroup | ForEach-Object { $_.name}
7. Write-Host
8. }
-
for the $user you could input in a variety of ways.
$users = get-content c:\userlist.txt
$users = Get-QADGroupMember Domain Users
In any case, this was fun while on long boring not terribly relevant
to me conference call.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 10:53 AM, Steven Peck [EMAIL PROTECTED] wrote:
I believe the original request was for groups a user account is a memberof.
If you want to get group membership and nested group membership I
think you would have to go with a top down approach and then
compare/soprt etc. (note, I could easily be wrong here)
get-qadgroupmember Group Name -indirect
So, Eric and I played a bit more with the original request to get it
slightly more usable.
-
1. $users =
2. foreach ($user in $users) {
3. ($User).displayname;(Get-QADUser $user).memberof | Get-QADGroup |
ForEach-Object { $_.name}
4. }
-
This gets you the Display Name of the user in question and a list of
groups they are a memberof as reported in the memberof tab.
for the $user you could input in a variety of ways.
$users = get-content c:\userlist.txt
$users = Get-QADGroupMember Domain Users
To make it prettier you'd want to play with the output formatting a
bit. Maybe add a write-host for a blank line at the end of the
loop for something basic.
If you don't have PowerShell setup:
http://www.blkmtn.org/setting-up-a-PowerShell-environment
List of two nice starter tutorials:
http://www.blkmtn.org/powershell-tutorial-series
I am sure there is a 'neater'/more complete way to do this with
PowerShell but this is what we could toss together in the short run.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 9:56 AM, KenM [EMAIL PROTECTED] wrote:
Just a word of warning if you decide to use this. This will not get the
users Primary group or any nested groups the users may belong to. I do not
know PS well enough to tell you how to get those but would be interested to
see how this is done with PS if anyone knows.
On Thu, Jun 12, 2008 at 12:06 PM, Steven Peck [EMAIL PROTECTED] wrote:
With PowerShell and the Quest AD cmdlets it would be more along the lines
of
$user = juser
(get-QADuser $user ).memberof | get-qadgroup | select-object Name |
export-cvs ./report.csv
-
To do all the users you could loop through them from a list or an AD
query with Get-QADuser. If you used the list you would avoid random
service accounts, unless your users are in a specific OU and you did
the Get-QADuser on that specific OU.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 8:13 AM, Eric Woodford [EMAIL PROTECTED]
wrote:
I've used this tool with decent success.. I think it is more Exchange
focused, but might do your job for AD groups too.. Otherwise PowerShell
and
something like get-qadGroup Groupname could do it in a rough format..
http://www.imanami.com/products/smartr/
On Thu, Jun 12, 2008 at 7:58 AM, wjh [EMAIL PROTECTED] wrote:
Hi all,
We have a client that will require quarterly reports regarding AD users
and the groups to which they belong. Is there an easy and possibly
free
tool out there to provide a legible list of users and the groups the
user is
in. This isn't any big enterprise AD environment. Only about 30 users
who
are currently on an SBS. I know there are a couple of dsquery commands
that
will list users and groups, but that doesn't really seem to get me very
close to providing a list that basically says this user has these
memberships, this user has these memberships, and have it organized by
OU.
I just don't want to spend a few hours exporting the info and cutting
and
pasting to a report so that it is discernible to someone else outside
of the
AD admin...especially if they will require this quarterly.
Thanks for any help.
Bill
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Utility to show details of installed printers?
On 11 Jun 2008 at 15:16, Damien Solodow wrote: Win2k3 and XP have a couple of pr*.vbs files in %systemroot% that will help with this. Prnmngr.vbs will let you list installed printers and it will give you driver name and port name. There is a prnport.vbs that will give you all the details on the ports as well. These are only present on XP Pro, my XP Home system doesn't have these ... and FWIW on my XP Pro test system they're not in %systemroot%, they're in %systemroot%\System32\. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Whats thrashing my disk
On 12 Jun 2008 at 19:07, Oliver Marshall wrote: Well, in the usual way, it was running google desktop AND windows desktop (im no fan of the former, but quite a fan of the latter). Either way I've removed both and it still happens. It's running NOD32 as its AV which doesn't appear to have any impact on the other 30 laptops at this site. I've been using Task Manager to try to track it. The problem is that, as usually happens, task manager grinds to a halt when the disk is being used, only firing up to live when it returns to normal. CPU use during this time is fine though. Perhaps one of the sysinternals tools, probably Disk Monitor, or maybe Process Monitor which has logging capabilities, might help more than Task Mangler. DiskMon for Windows DiskMon is an application that logs and displays all hard disk activity on a Windows system. You can also minimize DiskMon to your system tray where it acts as a disk light, presenting a green icon when there is disk-read activity and a red icon when there is disk-write activity. http://technet.microsoft.com/en-us/sysinternals/bb896646.aspx Process Monitor http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: OT: $75 Shell Gas Card
On 12 Jun 2008 at 14:09, Robert Cato wrote: http://www.206inc.com/dockersgiftcard2008 Less than 1 fill-up ... [sigh] -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
FedEx Ship Mangler
Anyone use this? For the client/server model, the software has to apparently be running on the console as it doesn't run as a service? Is that for real? jlc ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: AD reports
Wow, thanks guys. I didn't mean to give anyone a task. But, I
appreciate it.
Bill
Steven Peck wrote:
I believe the original request was for groups a user account is a memberof.
If you want to get group membership and nested group membership I
think you would have to go with a top down approach and then
compare/soprt etc. (note, I could easily be wrong here)
get-qadgroupmember Group Name -indirect
So, Eric and I played a bit more with the original request to get it
slightly more usable.
-
1. $users =
2. foreach ($user in $users) {
3. ($User).displayname;(Get-QADUser $user).memberof | Get-QADGroup |
ForEach-Object { $_.name}
4. }
-
This gets you the Display Name of the user in question and a list of
groups they are a memberof as reported in the memberof tab.
for the $user you could input in a variety of ways.
$users = get-content c:\userlist.txt
$users = Get-QADGroupMember Domain Users
To make it prettier you'd want to play with the output formatting a
bit. Maybe add a write-host for a blank line at the end of the
loop for something basic.
If you don't have PowerShell setup:
http://www.blkmtn.org/setting-up-a-PowerShell-environment
List of two nice starter tutorials:
http://www.blkmtn.org/powershell-tutorial-series
I am sure there is a 'neater'/more complete way to do this with
PowerShell but this is what we could toss together in the short run.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 9:56 AM, KenM [EMAIL PROTECTED] wrote:
Just a word of warning if you decide to use this. This will not get the
users Primary group or any nested groups the users may belong to. I do not
know PS well enough to tell you how to get those but would be interested to
see how this is done with PS if anyone knows.
On Thu, Jun 12, 2008 at 12:06 PM, Steven Peck [EMAIL PROTECTED] wrote:
With PowerShell and the Quest AD cmdlets it would be more along the lines
of
$user = juser
(get-QADuser $user ).memberof | get-qadgroup | select-object Name |
export-cvs ./report.csv
-
To do all the users you could loop through them from a list or an AD
query with Get-QADuser. If you used the list you would avoid random
service accounts, unless your users are in a specific OU and you did
the Get-QADuser on that specific OU.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 8:13 AM, Eric Woodford [EMAIL PROTECTED]
wrote:
I've used this tool with decent success.. I think it is more Exchange
focused, but might do your job for AD groups too.. Otherwise PowerShell
and
something like get-qadGroup Groupname could do it in a rough format..
http://www.imanami.com/products/smartr/
On Thu, Jun 12, 2008 at 7:58 AM, wjh [EMAIL PROTECTED] wrote:
Hi all,
We have a client that will require quarterly reports regarding AD users
and the groups to which they belong. Is there an easy and possibly
free
tool out there to provide a legible list of users and the groups the
user is
in. This isn't any big enterprise AD environment. Only about 30 users
who
are currently on an SBS. I know there are a couple of dsquery commands
that
will list users and groups, but that doesn't really seem to get me very
close to providing a list that basically says this user has these
memberships, this user has these memberships, and have it organized by
OU.
I just don't want to spend a few hours exporting the info and cutting
and
pasting to a report so that it is discernible to someone else outside
of the
AD admin...especially if they will require this quarterly.
Thanks for any help.
Bill
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Utility to show details of installed printers?
I kind of ignored XP Home as he was talking about a print server. ;) And yeah, they are in system32 just had a brain fart. -Original Message- From: Angus Scott-Fleming [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 2:47 PM To: NT System Admin Issues Subject: RE: Utility to show details of installed printers? On 11 Jun 2008 at 15:16, Damien Solodow wrote: Win2k3 and XP have a couple of pr*.vbs files in %systemroot% that will help with this. Prnmngr.vbs will let you list installed printers and it will give you driver name and port name. There is a prnport.vbs that will give you all the details on the ports as well. These are only present on XP Pro, my XP Home system doesn't have these ... and FWIW on my XP Pro test system they're not in %systemroot%, they're in %systemroot%\System32\. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: FedEx Ship Mangler
The client portion also writes to HKLM. On 6/12/08 11:49 AM, Joseph L. Casale [EMAIL PROTECTED] wrote: Anyone use this? For the client/server model, the software has to apparently be running on the console as it doesn't run as a service? Is that for real? jlc ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: FedEx Ship Mangler
Hmm, now that I think about it, I can¹t remember if that was the UPS or FedEx software.. On 6/12/08 11:54 AM, Auxiliary Services [EMAIL PROTECTED] wrote: The client portion also writes to HKLM. On 6/12/08 11:49 AM, Joseph L. Casale [EMAIL PROTECTED] wrote: Anyone use this? For the client/server model, the software has to apparently be running on the console as it doesn't run as a service? Is that for real? jlc ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Weird DFS Issue
Quick background... At each school, I have a server with a shared directory. I use DFS to make these accessible to everyone under an F: drive, and every user has F: mapped to \\mydomain\dfs. That way users at school1 find their stuff under f:\school1, users at school2 find it under f:\school2, and so on. Some time back--I don't recall exactly when--I stopped being able to access one of my school's stuff from my Vista machine via the F: drive. Whenever I go to f:\school1 I get this dialog box: f:\school1 is not accessible. Element not found. I have no problem directly accessing the share (i.e., going to \\school1server\shareddirectory), but I can't get to it via DFS. Neither through the F: drive nor through \\mydomain\dfs\school1. On this Vista machine I'm running an XP virtual machine. Interestingly, from that virtual machine I've had no problems accessing f:\school1. Until now. Now from the XP virtual machine when I go to f:\school1, I get: f:\school1 is not accessible. Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. And now I'm starting to see computers at that school have the same problem accessing their stuff via DFS. Not all of the computers, but some. We're working on determining a pattern. From within the DFS utility, all looks good. School1's share shows up as being online in the DFS management utility. I have no clue where to go from here. Any suggestions? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Basic Group policy question
On Thu, Jun 12, 2008 at 9:41 AM, Andy Shook [EMAIL PROTECTED] wrote: No. Users are users and since their using the same account everywhere those polices will follow them everywhere. Loopback processing of Group Policy. Use the User Configuration settings, but apply the GPO to the computer. http://support.microsoft.com/kb/231287 -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: AD reports
No problem, I was bored and am still learning PowerShell so knowing
how to solve your problem may come in handy later. :)
Steven
On Thu, Jun 12, 2008 at 11:52 AM, wjh [EMAIL PROTECTED] wrote:
Wow, thanks guys. I didn't mean to give anyone a task. But, I appreciate
it.
Bill
Steven Peck wrote:
I believe the original request was for groups a user account is a
memberof.
If you want to get group membership and nested group membership I
think you would have to go with a top down approach and then
compare/soprt etc. (note, I could easily be wrong here)
get-qadgroupmember Group Name -indirect
So, Eric and I played a bit more with the original request to get it
slightly more usable.
-
1. $users =
2. foreach ($user in $users) {
3. ($User).displayname;(Get-QADUser $user).memberof | Get-QADGroup |
ForEach-Object { $_.name}
4. }
-
This gets you the Display Name of the user in question and a list of
groups they are a memberof as reported in the memberof tab.
for the $user you could input in a variety of ways.
$users = get-content c:\userlist.txt
$users = Get-QADGroupMember Domain Users
To make it prettier you'd want to play with the output formatting a
bit. Maybe add a write-host for a blank line at the end of the
loop for something basic.
If you don't have PowerShell setup:
http://www.blkmtn.org/setting-up-a-PowerShell-environment
List of two nice starter tutorials:
http://www.blkmtn.org/powershell-tutorial-series
I am sure there is a 'neater'/more complete way to do this with
PowerShell but this is what we could toss together in the short run.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 9:56 AM, KenM [EMAIL PROTECTED] wrote:
Just a word of warning if you decide to use this. This will not get the
users Primary group or any nested groups the users may belong to. I do
not
know PS well enough to tell you how to get those but would be interested
to
see how this is done with PS if anyone knows.
On Thu, Jun 12, 2008 at 12:06 PM, Steven Peck [EMAIL PROTECTED] wrote:
With PowerShell and the Quest AD cmdlets it would be more along the
lines
of
$user = juser
(get-QADuser $user ).memberof | get-qadgroup | select-object Name |
export-cvs ./report.csv
-
To do all the users you could loop through them from a list or an AD
query with Get-QADuser. If you used the list you would avoid random
service accounts, unless your users are in a specific OU and you did
the Get-QADuser on that specific OU.
Steven Peck
http://www.blkmtn.org
On Thu, Jun 12, 2008 at 8:13 AM, Eric Woodford [EMAIL PROTECTED]
wrote:
I've used this tool with decent success.. I think it is more Exchange
focused, but might do your job for AD groups too.. Otherwise PowerShell
and
something like get-qadGroup Groupname could do it in a rough format..
http://www.imanami.com/products/smartr/
On Thu, Jun 12, 2008 at 7:58 AM, wjh [EMAIL PROTECTED] wrote:
Hi all,
We have a client that will require quarterly reports regarding AD
users
and the groups to which they belong. Is there an easy and possibly
free
tool out there to provide a legible list of users and the groups the
user is
in. This isn't any big enterprise AD environment. Only about 30
users
who
are currently on an SBS. I know there are a couple of dsquery
commands
that
will list users and groups, but that doesn't really seem to get me
very
close to providing a list that basically says this user has these
memberships, this user has these memberships, and have it organized by
OU.
I just don't want to spend a few hours exporting the info and cutting
and
pasting to a report so that it is discernible to someone else outside
of the
AD admin...especially if they will require this quarterly.
Thanks for any help.
Bill
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Weird DFS Issue
Sounds like maybe a dfs root share problem. Check ntfs and share permissions on all the servers sharing the root one at a time and see if any are down, not configured correctly, or otherwise inaccessible. DFSutil might be handy as well. -Bonnie -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:03 PM To: NT System Admin Issues Subject: Weird DFS Issue Quick background... At each school, I have a server with a shared directory. I use DFS to make these accessible to everyone under an F: drive, and every user has F: mapped to \\mydomain\dfs. That way users at school1 find their stuff under f:\school1, users at school2 find it under f:\school2, and so on. Some time back--I don't recall exactly when--I stopped being able to access one of my school's stuff from my Vista machine via the F: drive. Whenever I go to f:\school1 I get this dialog box: f:\school1 is not accessible. Element not found. I have no problem directly accessing the share (i.e., going to \\school1server\shareddirectory), but I can't get to it via DFS. Neither through the F: drive nor through \\mydomain\dfs\school1. On this Vista machine I'm running an XP virtual machine. Interestingly, from that virtual machine I've had no problems accessing f:\school1. Until now. Now from the XP virtual machine when I go to f:\school1, I get: f:\school1 is not accessible. Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. And now I'm starting to see computers at that school have the same problem accessing their stuff via DFS. Not all of the computers, but some. We're working on determining a pattern. From within the DFS utility, all looks good. School1's share shows up as being online in the DFS management utility. I have no clue where to go from here. Any suggestions? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Weird DFS Issue
But the crazy thing is that nothing has changed on that share in terms of permissions (or anything else I'm aware of). If I can access the share directly (via \\servername\sharename), then permissions must be okay, right? In doing some testing today, it's looking as though the problem appears on XP machines after SP3 is installed. And on Vista, too, the issue appears to be tied to some specific update (although we've not yet figured out which one). But since 99% of the machines at that school are XP, that's what we're focusing on for the moment. One thing I did find was that the share was configured to allow offline files, which I recall reading should be avoided with DFS. So I turned that off a couple of hours ago, but it doesn't seem to have made a difference. I also found a second server at a second school that had offline files enabled for its shared folder, but I've had no problems accessing that one. John -Original Message- From: Miller Bonnie L. [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 3:39 PM To: NT System Admin Issues Subject: RE: Weird DFS Issue Sounds like maybe a dfs root share problem. Check ntfs and share permissions on all the servers sharing the root one at a time and see if any are down, not configured correctly, or otherwise inaccessible. DFSutil might be handy as well. -Bonnie -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:03 PM To: NT System Admin Issues Subject: Weird DFS Issue Quick background... At each school, I have a server with a shared directory. I use DFS to make these accessible to everyone under an F: drive, and every user has F: mapped to \\mydomain\dfs. That way users at school1 find their stuff under f:\school1, users at school2 find it under f:\school2, and so on. Some time back--I don't recall exactly when--I stopped being able to access one of my school's stuff from my Vista machine via the F: drive. Whenever I go to f:\school1 I get this dialog box: f:\school1 is not accessible. Element not found. I have no problem directly accessing the share (i.e., going to \\school1server\shareddirectory), but I can't get to it via DFS. Neither through the F: drive nor through \\mydomain\dfs\school1. On this Vista machine I'm running an XP virtual machine. Interestingly, from that virtual machine I've had no problems accessing f:\school1. Until now. Now from the XP virtual machine when I go to f:\school1, I get: f:\school1 is not accessible. Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. And now I'm starting to see computers at that school have the same problem accessing their stuff via DFS. Not all of the computers, but some. We're working on determining a pattern. From within the DFS utility, all looks good. School1's share shows up as being online in the DFS management utility. I have no clue where to go from here. Any suggestions? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: FedEx Ship Mangler
On Thu, Jun 12, 2008 at 2:49 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: Anyone use this? Unfortunately, we have to use FedEx Ship Manager (FSM) here. That software is a giant pile of steaming canine excrement. It's hugely bloated. We run it on Pentium 4 computers with 1 GB RAM, and it's still very slow to start. (UPS WorldShip is nice and speedy on the same PC.) FSM is fragile and falls apart spontaneously. The UI is clunky and counter-intuitive. It's hard to find things. It keeps all its data in a database server they've licensed (Sybase Adaptive SQL Anywhere), but the only approved way to back it up is using the program UI. If you're using it with a thermal label printer, it sends printer control codes directly. It apparently decides which control codes to send by looking at the name of the Windows printer object (icon). So if we rename the printer from Eltron LP2844 to FedEx label printer, it formats the labels incorrectly. When you start the application, it actually starts several other processes which run concurrently with it. That includes the database server, which runs as a tray icon. If and when the main application crashes, you have to run a special utility to close all the other processes down before you can restart the main process properly. Their phone support varies from well meaning but unable to help to totally incompetent. Circa 2000, while on a tech call, I said I was running Windows 98, and the phone tech asked, Windows 98... is that like Windows 95?. They expect you to run it as administrator, and they get confused when you explain about things like security or user accounts. It expects to be able to write to the FedEx registry branch(es) under HKLM. It also expects to be able to write to a few directories under the program install directory. So far, I've found that granting Modify permission to Users on the files and registry branches in question will make it work okay. The objects are: HKEY_LOCAL_MACHINE\SOFTWARE\FEDEX HKEY_LOCAL_MACHINE\SOFTWARE\FedEx Services C:\Program Files\FedEx\ShipManager\Rate C:\Program Files\FedEx\ShipManager\ROUTE C:\Program Files\FedEx\ShipManager\Temp\ For the client/server model, the software has to apparently be running on the console as it doesn't run as a service? Correct. Welcome to hell. Here's your copy of FedEx Ship Manager. -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Whats thrashing my disk
On Thu, Jun 12, 2008 at 2:07 PM, Oliver Marshall [EMAIL PROTECTED] wrote: I've been using Task Manager to try to track it. The problem is that, as usually happens, task manager grinds to a halt when the disk is being used, only firing up to live when it returns to normal. Try Process Explorer from Microsoft/Sysinternals, and turn on the columns for I/O History, CPU History, and Private Bytes History. That will give you graphs over time for each process, which sometimes helps me find those sorts of things. -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Weird DFS Issue
I've just been seeing this very problem only recently and have found that if you add \\servername to your Trusted Sites in IE it will fix the problem. In fact it was from a XP SP2 machine trying to connect to a XP SP3 share. And from Server 2003 R2 machine to a Server 2003 fileserver. - Stan Wood - Systems Administrator for CARES, 573-884-3706 (work) http://www.cares.missouri.edu (work) http://www.eswood.com (personal) http://www.amlethmoor.org (SCA) Sarah Connor: No one is ever safe! Half an hour, plus the guns... I'll make pancakes. -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 2:48 PM To: NT System Admin Issues Subject: RE: Weird DFS Issue But the crazy thing is that nothing has changed on that share in terms of permissions (or anything else I'm aware of). If I can access the share directly (via \\servername\sharename), then permissions must be okay, right? In doing some testing today, it's looking as though the problem appears on XP machines after SP3 is installed. And on Vista, too, the issue appears to be tied to some specific update (although we've not yet figured out which one). But since 99% of the machines at that school are XP, that's what we're focusing on for the moment. One thing I did find was that the share was configured to allow offline files, which I recall reading should be avoided with DFS. So I turned that off a couple of hours ago, but it doesn't seem to have made a difference. I also found a second server at a second school that had offline files enabled for its shared folder, but I've had no problems accessing that one. John -Original Message- From: Miller Bonnie L. [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 3:39 PM To: NT System Admin Issues Subject: RE: Weird DFS Issue Sounds like maybe a dfs root share problem. Check ntfs and share permissions on all the servers sharing the root one at a time and see if any are down, not configured correctly, or otherwise inaccessible. DFSutil might be handy as well. -Bonnie -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:03 PM To: NT System Admin Issues Subject: Weird DFS Issue Quick background... At each school, I have a server with a shared directory. I use DFS to make these accessible to everyone under an F: drive, and every user has F: mapped to \\mydomain\dfs. That way users at school1 find their stuff under f:\school1, users at school2 find it under f:\school2, and so on. Some time back--I don't recall exactly when--I stopped being able to access one of my school's stuff from my Vista machine via the F: drive. Whenever I go to f:\school1 I get this dialog box: f:\school1 is not accessible. Element not found. I have no problem directly accessing the share (i.e., going to \\school1server\shareddirectory), but I can't get to it via DFS. Neither through the F: drive nor through \\mydomain\dfs\school1. On this Vista machine I'm running an XP virtual machine. Interestingly, from that virtual machine I've had no problems accessing f:\school1. Until now. Now from the XP virtual machine when I go to f:\school1, I get: f:\school1 is not accessible. Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. And now I'm starting to see computers at that school have the same problem accessing their stuff via DFS. Not all of the computers, but some. We're working on determining a pattern. From within the DFS utility, all looks good. School1's share shows up as being online in the DFS management utility. I have no clue where to go from here. Any suggestions? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Weird DFS Issue
If you mean the dfs root share, then I would agree that permissions are probably fine. How about the next route, which is the report that it is unable to read the configuration container in AD. Anything in AD event logs that things are awry? Does dcdiag turn up any problems? Maybe something in here will help as well http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsdb_dfs_vxjw.mspx?mfr=true -Bonnie -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:48 PM To: NT System Admin Issues Subject: RE: Weird DFS Issue But the crazy thing is that nothing has changed on that share in terms of permissions (or anything else I'm aware of). If I can access the share directly (via \\servername\sharename), then permissions must be okay, right? In doing some testing today, it's looking as though the problem appears on XP machines after SP3 is installed. And on Vista, too, the issue appears to be tied to some specific update (although we've not yet figured out which one). But since 99% of the machines at that school are XP, that's what we're focusing on for the moment. One thing I did find was that the share was configured to allow offline files, which I recall reading should be avoided with DFS. So I turned that off a couple of hours ago, but it doesn't seem to have made a difference. I also found a second server at a second school that had offline files enabled for its shared folder, but I've had no problems accessing that one. John -Original Message- From: Miller Bonnie L. [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 3:39 PM To: NT System Admin Issues Subject: RE: Weird DFS Issue Sounds like maybe a dfs root share problem. Check ntfs and share permissions on all the servers sharing the root one at a time and see if any are down, not configured correctly, or otherwise inaccessible. DFSutil might be handy as well. -Bonnie -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 12:03 PM To: NT System Admin Issues Subject: Weird DFS Issue Quick background... At each school, I have a server with a shared directory. I use DFS to make these accessible to everyone under an F: drive, and every user has F: mapped to \\mydomain\dfs. That way users at school1 find their stuff under f:\school1, users at school2 find it under f:\school2, and so on. Some time back--I don't recall exactly when--I stopped being able to access one of my school's stuff from my Vista machine via the F: drive. Whenever I go to f:\school1 I get this dialog box: f:\school1 is not accessible. Element not found. I have no problem directly accessing the share (i.e., going to \\school1server\shareddirectory), but I can't get to it via DFS. Neither through the F: drive nor through \\mydomain\dfs\school1. On this Vista machine I'm running an XP virtual machine. Interestingly, from that virtual machine I've had no problems accessing f:\school1. Until now. Now from the XP virtual machine when I go to f:\school1, I get: f:\school1 is not accessible. Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. And now I'm starting to see computers at that school have the same problem accessing their stuff via DFS. Not all of the computers, but some. We're working on determining a pattern. From within the DFS utility, all looks good. School1's share shows up as being online in the DFS management utility. I have no clue where to go from here. Any suggestions? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: FedEx Ship Mangler
ROTFLMAO, Freaking hilarious... I sooo didnt need another headache :) I planned on using a Digi port server for the Eltron printer, I hope that works :) I was going to use newer drivers, but now I am worried! I best use the old ones on FedEx's site. So lame... This info rocks though, thanks! jlc From: Ben Scott [EMAIL PROTECTED] Sent: Thursday, June 12, 2008 1:56 PM To: NT System Admin Issues Subject: Re: FedEx Ship Mangler On Thu, Jun 12, 2008 at 2:49 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: Anyone use this? Unfortunately, we have to use FedEx Ship Manager (FSM) here. That software is a giant pile of steaming canine excrement. It's hugely bloated. We run it on Pentium 4 computers with 1 GB RAM, and it's still very slow to start. (UPS WorldShip is nice and speedy on the same PC.) FSM is fragile and falls apart spontaneously. The UI is clunky and counter-intuitive. It's hard to find things. It keeps all its data in a database server they've licensed (Sybase Adaptive SQL Anywhere), but the only approved way to back it up is using the program UI. If you're using it with a thermal label printer, it sends printer control codes directly. It apparently decides which control codes to send by looking at the name of the Windows printer object (icon). So if we rename the printer from Eltron LP2844 to FedEx label printer, it formats the labels incorrectly. When you start the application, it actually starts several other processes which run concurrently with it. That includes the database server, which runs as a tray icon. If and when the main application crashes, you have to run a special utility to close all the other processes down before you can restart the main process properly. Their phone support varies from well meaning but unable to help to totally incompetent. Circa 2000, while on a tech call, I said I was running Windows 98, and the phone tech asked, Windows 98... is that like Windows 95?. They expect you to run it as administrator, and they get confused when you explain about things like security or user accounts. It expects to be able to write to the FedEx registry branch(es) under HKLM. It also expects to be able to write to a few directories under the program install directory. So far, I've found that granting Modify permission to Users on the files and registry branches in question will make it work okay. The objects are: HKEY_LOCAL_MACHINE\SOFTWARE\FEDEX HKEY_LOCAL_MACHINE\SOFTWARE\FedEx Services C:\Program Files\FedEx\ShipManager\Rate C:\Program Files\FedEx\ShipManager\ROUTE C:\Program Files\FedEx\ShipManager\Temp\ For the client/server model, the software has to apparently be running on the console as it doesn't run as a service? Correct. Welcome to hell. Here's your copy of FedEx Ship Manager. -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: FedEx Ship Mangler
IOW, you really like it, right?!? grin Roger Wright Network Administrator 727.572.7076 x388 _ -Original Message- From: Ben Scott [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 3:57 PM To: NT System Admin Issues Subject: Re: FedEx Ship Mangler On Thu, Jun 12, 2008 at 2:49 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: Anyone use this? Unfortunately, we have to use FedEx Ship Manager (FSM) here. That software is a giant pile of steaming canine excrement. It's hugely bloated. We run it on Pentium 4 computers with 1 GB RAM, and it's still very slow to start. (UPS WorldShip is nice and speedy on the same PC.) FSM is fragile and falls apart spontaneously. The UI is clunky and counter-intuitive. It's hard to find things. It keeps all its data in a database server they've licensed (Sybase Adaptive SQL Anywhere), but the only approved way to back it up is using the program UI. If you're using it with a thermal label printer, it sends printer control codes directly. It apparently decides which control codes to send by looking at the name of the Windows printer object (icon). So if we rename the printer from Eltron LP2844 to FedEx label printer, it formats the labels incorrectly. When you start the application, it actually starts several other processes which run concurrently with it. That includes the database server, which runs as a tray icon. If and when the main application crashes, you have to run a special utility to close all the other processes down before you can restart the main process properly. Their phone support varies from well meaning but unable to help to totally incompetent. Circa 2000, while on a tech call, I said I was running Windows 98, and the phone tech asked, Windows 98... is that like Windows 95?. They expect you to run it as administrator, and they get confused when you explain about things like security or user accounts. It expects to be able to write to the FedEx registry branch(es) under HKLM. It also expects to be able to write to a few directories under the program install directory. So far, I've found that granting Modify permission to Users on the files and registry branches in question will make it work okay. The objects are: HKEY_LOCAL_MACHINE\SOFTWARE\FEDEX HKEY_LOCAL_MACHINE\SOFTWARE\FedEx Services C:\Program Files\FedEx\ShipManager\Rate C:\Program Files\FedEx\ShipManager\ROUTE C:\Program Files\FedEx\ShipManager\Temp\ For the client/server model, the software has to apparently be running on the console as it doesn't run as a service? Correct. Welcome to hell. Here's your copy of FedEx Ship Manager. -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: FedEx Ship Mangler
It's the best thing since r*y inserted sliced bread. On 6/12/08 1:43 PM, Roger Wright [EMAIL PROTECTED] wrote: IOW, you really like it, right?!? grin Roger Wright Network Administrator 727.572.7076 x388 _ -Original Message- From: Ben Scott [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 3:57 PM To: NT System Admin Issues Subject: Re: FedEx Ship Mangler On Thu, Jun 12, 2008 at 2:49 PM, Joseph L. Casale [EMAIL PROTECTED] wrote: Anyone use this? Unfortunately, we have to use FedEx Ship Manager (FSM) here. That software is a giant pile of steaming canine excrement. It's hugely bloated. We run it on Pentium 4 computers with 1 GB RAM, and it's still very slow to start. (UPS WorldShip is nice and speedy on the same PC.) FSM is fragile and falls apart spontaneously. The UI is clunky and counter-intuitive. It's hard to find things. It keeps all its data in a database server they've licensed (Sybase Adaptive SQL Anywhere), but the only approved way to back it up is using the program UI. If you're using it with a thermal label printer, it sends printer control codes directly. It apparently decides which control codes to send by looking at the name of the Windows printer object (icon). So if we rename the printer from Eltron LP2844 to FedEx label printer, it formats the labels incorrectly. When you start the application, it actually starts several other processes which run concurrently with it. That includes the database server, which runs as a tray icon. If and when the main application crashes, you have to run a special utility to close all the other processes down before you can restart the main process properly. Their phone support varies from well meaning but unable to help to totally incompetent. Circa 2000, while on a tech call, I said I was running Windows 98, and the phone tech asked, Windows 98... is that like Windows 95?. They expect you to run it as administrator, and they get confused when you explain about things like security or user accounts. It expects to be able to write to the FedEx registry branch(es) under HKLM. It also expects to be able to write to a few directories under the program install directory. So far, I've found that granting Modify permission to Users on the files and registry branches in question will make it work okay. The objects are: HKEY_LOCAL_MACHINE\SOFTWARE\FEDEX HKEY_LOCAL_MACHINE\SOFTWARE\FedEx Services C:\Program Files\FedEx\ShipManager\Rate C:\Program Files\FedEx\ShipManager\ROUTE C:\Program Files\FedEx\ShipManager\Temp\ For the client/server model, the software has to apparently be running on the console as it doesn't run as a service? Correct. Welcome to hell. Here's your copy of FedEx Ship Manager. -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Radius in Windows Servers failover
Hi all, I have setup IAS Radius server in one DC in my domain. I want that my secondary DC IAS Radius can be a failover replacement if the first DC is down. I have seen that IAS has a Remote Radius Server Group option, which contemplates a master and a slave configuration. However, the Microsoft configuration doesn't clarify how to configure it and how it works when you had a pre-existing IAS configuration. Anyone has configured something like this? Thanks! Miguel __ Enviado desde Correo Yahoo! La bandeja de entrada más inteligente. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
software licenses audits
Hi, We are a small shop with Windows and Mac OSX. I'm looking for a tool that could pull the license numbers installed in our machines for audit purposes. Spiceworks claim to do this, but it doesn't work with Mac OSX (it hangs) and it doesn't retrieve many licenses from Windows. I'm using right now keyfinder and I'm developing a network logon script to send me at least the information of the Microsoft software installed in our Windows machines. Also Belarc is a nice tool. However I'm struggling to find a tool that gets most of our licenses in both types of platforms. I installed GLPI thinking that it gets that information, but It actually requires you to type it in by hand. It could work if we get all the licenses that we have, but the spreadsheet that we were using is outdated, which makes a nightmare to keep track of what is installed and on which machines. Thanks! Miguel __ Enviado desde Correo Yahoo! La bandeja de entrada más inteligente. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software licenses audits
http://www.nirsoft.net/utils/product_cd_key_viewer.html It can run across a network. I use this command line: ProduKey.exe /remotealldomain DOMAINNAME It isn't going to get the key's from OSX though. -- Mike Gill -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 4:16 PM To: NT System Admin Issues Subject: software licenses audits Hi, We are a small shop with Windows and Mac OSX. I'm looking for a tool that could pull the license numbers installed in our machines for audit purposes. Spiceworks claim to do this, but it doesn't work with Mac OSX (it hangs) and it doesn't retrieve many licenses from Windows. I'm using right now keyfinder and I'm developing a network logon script to send me at least the information of the Microsoft software installed in our Windows machines. Also Belarc is a nice tool. However I'm struggling to find a tool that gets most of our licenses in both types of platforms. I installed GLPI thinking that it gets that information, but It actually requires you to type it in by hand. It could work if we get all the licenses that we have, but the spreadsheet that we were using is outdated, which makes a nightmare to keep track of what is installed and on which machines. Thanks! Miguel __ Enviado desde Correo Yahoo! La bandeja de entrada más inteligente. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software licenses audits
Great, this is going to help me a lot. I have issues with Adobe products, CS3 in particular, Belarc doesn't get those licenses. Anyone knows of any tool that get those ones? Miguel --- Mike Gill [EMAIL PROTECTED] escribió: http://www.nirsoft.net/utils/product_cd_key_viewer.html It can run across a network. I use this command line: ProduKey.exe /remotealldomain DOMAINNAME It isn't going to get the key's from OSX though. -- Mike Gill -Original Message- From: Miguel Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 4:16 PM To: NT System Admin Issues Subject: software licenses audits Hi, We are a small shop with Windows and Mac OSX. I'm looking for a tool that could pull the license numbers installed in our machines for audit purposes. Spiceworks claim to do this, but it doesn't work with Mac OSX (it hangs) and it doesn't retrieve many licenses from Windows. I'm using right now keyfinder and I'm developing a network logon script to send me at least the information of the Microsoft software installed in our Windows machines. Also Belarc is a nice tool. However I'm struggling to find a tool that gets most of our licenses in both types of platforms. I installed GLPI thinking that it gets that information, but It actually requires you to type it in by hand. It could work if we get all the licenses that we have, but the spreadsheet that we were using is outdated, which makes a nightmare to keep track of what is installed and on which machines. Thanks! Miguel __ Enviado desde Correo Yahoo! La bandeja de entrada más inteligente. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ __ Enviado desde Correo Yahoo! La bandeja de entrada más inteligente. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Can't Safely Unplug USB drive
Is there an app that will show me programs or processes that are accessing a drive letter? This is one of my biggest frustrations with Vista. Before it was almost impossible for me to be able to eject a USB hard drive, now it is impossible any time. But now, I can't even safely remove my thumb drive. I've exited out of all programs, down to the AV and sidebar and even stopped the index service. Nothing suspicious is seen in the task manager. I'm just at a loss. I've tried process monitor and can't get it to show me anything. -- Mike Gill ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Can't Safely Unplug USB drive
Try handle.exe Cheers Ken From: Mike Gill [mailto:[EMAIL PROTECTED] Sent: Friday, 13 June 2008 12:09 PM To: NT System Admin Issues Subject: Can't Safely Unplug USB drive Is there an app that will show me programs or processes that are accessing a drive letter? This is one of my biggest frustrations with Vista. Before it was almost impossible for me to be able to eject a USB hard drive, now it is impossible any time. But now, I can't even safely remove my thumb drive. I've exited out of all programs, down to the AV and sidebar and even stopped the index service. Nothing suspicious is seen in the task manager. I'm just at a loss. I've tried process monitor and can't get it to show me anything. -- Mike Gill ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: Whats thrashing my disk
Use Filemon or Process Monitor (both are Microsoft/Sysinternals tools) Cheers Ken -Original Message- From: Oliver Marshall [mailto:[EMAIL PROTECTED] Sent: Friday, 13 June 2008 4:08 AM To: NT System Admin Issues Subject: RE: Whats thrashing my disk Well, in the usual way, it was running google desktop AND windows desktop (im no fan of the former, but quite a fan of the latter). Either way I've removed both and it still happens. It's running NOD32 as its AV which doesn't appear to have any impact on the other 30 laptops at this site. I've been using Task Manager to try to track it. The problem is that, as usually happens, task manager grinds to a halt when the disk is being used, only firing up to live when it returns to normal. CPU use during this time is fine though. Olly -Original Message- From: Terry Dickson [mailto:[EMAIL PROTECTED] Sent: 12 June 2008 17:45 To: NT System Admin Issues Subject: RE: Whats thrashing my disk Usually when this happens to me, I run Task Manager and add the columns for I/O reads and I/O writes. Then sort on those and you can usually see this. As a second thought, what Antivirus are you using and how often does it run and update. I know with at least one vendor when updates are pulled for 3-5 minutes on our laptops it really thrashes the disk as the new defs are installed. If you are running Windows Defender that can also hit you hard while it is scanning. -Original Message- From: Oliver Marshall [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 11:16 AM To: NT System Admin Issues Subject: Whats thrashing my disk Hi chaps, I have a laptop here that's prone to bouts of disk thrashing. All will be fine, then suddenly everything takes 20 secs and you notice the disk light is just on all the time. The disk appears fine from the checks we've done so I want to look at any errant processes that may be causing the disk to go nuts in short bursts. Is there a tool for XP that will show whats using the disk the most at any given time? Something I can leave running and just sit and watch it until this disk light goes on solid? Olly ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: Can't Safely Unplug USB drive
process explorer http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx Kirk Woloshyn 2825 Temple Avenue Signal Hill, CA 90755 v 562.304.1939 c 562.682.0261 Mike Gill wrote: Is there an app that will show me programs or processes that are accessing a drive letter? This is one of my biggest frustrations with Vista. Before it was almost impossible for me to be able to eject a USB hard drive, now it is impossible any time. But now, I cant even safely remove my thumb drive. Ive exited out of all programs, down to the AV and sidebar and even stopped the index service. Nothing suspicious is seen in the task manager. Im just at a loss. Ive tried process monitor and cant get it to show me anything. -- Mike Gill
