RE: OT Looking for new Webhost
Server Intellect has been great for me for many years. I assume given you're on WebHost4Life that's the price range you're looking to play in. If you're looking for something serious, OrcsWeb is where I'd go. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: James Kerr [mailto:cluster...@gmail.com] Sent: Tuesday, July 14, 2009 8:57 AM To: NT System Admin Issues Subject: OT Looking for new Webhost Looking for a new webhost, been trying to use the hosting review sites but it seems most of the sites listed as the top sites do not fit our needs. We are looking to host our site on windows servers and we need cold fusion. For about 3 months out of the year our site is pretty busy and during that time we need 100% uptime. Our currently webhost isnt really up to the task, we use webhost4life. Anyone have any recommondations? James ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: OT Looking for new Webhost
+1 to both Orcsweb and Server Intellect. CrystalTech were also pretty good when I was with them. Not sure whether OrcsWeb does CF though. Cheers Ken From: Brian Desmond [br...@briandesmond.com] Sent: Wednesday, 15 July 2009 4:05 PM To: NT System Admin Issues Subject: RE: OT Looking for new Webhost Server Intellect has been great for me for many years. I assume given you’re on WebHost4Life that’s the price range you’re looking to play in. If you’re looking for something serious, OrcsWeb is where I’d go. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: James Kerr [mailto:cluster...@gmail.com] Sent: Tuesday, July 14, 2009 8:57 AM To: NT System Admin Issues Subject: OT Looking for new Webhost Looking for a new webhost, been trying to use the hosting review sites but it seems most of the sites listed as the top sites do not fit our needs. We are looking to host our site on windows servers and we need cold fusion. For about 3 months out of the year our site is pretty busy and during that time we need 100% uptime. Our currently webhost isnt really up to the task, we use webhost4life. Anyone have any recommondations? James ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
OT: blog newsletter
I have just started a (non-technical) blog and have been asked by a couple of people, who obviously can't use RSS, to add them to the blog's newsletter. I am presuming this is just a kind of weekly email update advising them of the latest blog entries. I am using Google's Blogger and can't find any functions on there that would provide newsletter functionality, do any of the bloggers on here know of any free services that might provide this function? Or is there some way to build and maintain this functionality on my own blog without much effort? (I am one of those system administrators who hates doing anything I.T-related in his own time) TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: OT: blog newsletter
I'm sure there are some that offer that feature, but Google's doesn't. I know we maintain separate software to give this functionality, but we have more than just blogs. But, really...its a blog. Blogs automate communication through RSS feeds. That's just part of the technology. -Original Message- From: James Rankin kz2...@googlemail.com Sent: Wednesday, July 15, 2009 5:22 AM To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Subject: OT: blog newsletter I have just started a (non-technical) blog and have been asked by a couple of people, who obviously can't use RSS, to add them to the blog's newsletter. I am presuming this is just a kind of weekly email update advising them of the latest blog entries. I am using Google's Blogger and can't find any functions on there that would provide newsletter functionality, do any of the bloggers on here know of any free services that might provide this function? Or is there some way to build and maintain this functionality on my own blog without much effort? (I am one of those system administrators who hates doing anything I.T-related in his own time) TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Xen 5.5 diagram
I'd be interested in seeing that too :-) 2009/7/14 Webster carlwebs...@gmail.com *From:* Andy Shook [mailto:andy.sh...@peak10.com] *Subject:* Xen 5.5 diagram Looking for a logical architectural diagram of XenServer 5.5 that shows how the different components are laid out within the various tiers of a virtual infrastructure. Citrix’s training stuff is way lame and I wanted to see if anyone knew of such an animal. 5.5 documentation is “a little lean” to be polite. As usual, I took care of my Shooky Baby! J Webster -- Regards, Clayton clay...@alsipius.com http://alsipius.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Help me STU!!! (was RE: Xen 5.5 diagram)
Agreed, that was a major fail on my part, now cut the chatter Red 2... Shook From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Tuesday, July 14, 2009 10:34 PM To: NT System Admin Issues Subject: RE: Help me STU!!! (was RE: Xen 5.5 diagram) Imagine my disappointment when the subject line started out Help me Stu, but then omitted you're my only hope! -sc From: Andy Shook [mailto:andy.sh...@peak10.com] Sent: Tuesday, July 14, 2009 6:11 PM To: NT System Admin Issues Subject: OT: Help me STU!!! (was RE: Xen 5.5 diagram) Stu, Please setup a block rule in your Lyris box to automatically delete any message from Webster that contains Shooky Baby...he is really starting to creep me out. Shook From: Webster [mailto:carlwebs...@gmail.com] Sent: Tuesday, July 14, 2009 6:05 PM To: NT System Admin Issues Subject: RE: Xen 5.5 diagram From: Andy Shook [mailto:andy.sh...@peak10.com] Subject: Xen 5.5 diagram Looking for a logical architectural diagram of XenServer 5.5 that shows how the different components are laid out within the various tiers of a virtual infrastructure. Citrix's training stuff is way lame and I wanted to see if anyone knew of such an animal. 5.5 documentation is a little lean to be polite. As usual, I took care of my Shooky Baby! :) Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Help me STU!!! (was RE: Xen 5.5 diagram)
Use the Schwartz Andy.. John W. Cook Systems Administrator Partnership For Strong Families Sent to you from my Blackberry in the Cloud From: Andy Shook To: NT System Admin Issues Sent: Wed Jul 15 07:30:30 2009 Subject: RE: Help me STU!!! (was RE: Xen 5.5 diagram) Agreed, that was a major fail on my part, now cut the chatter Red� Shook From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Tuesday, July 14, 2009 10:34 PM To: NT System Admin Issues Subject: RE: Help me STU!!! (was RE: Xen 5.5 diagram) Imagine my disappointment when the subject line started ou�Help me St��, but then omittedyore my only hop� -sc From: Andy Shook [mailto:andy.sh...@peak10.com] Sent: Tuesday, July 14, 2009 6:11 PM To: NT System Admin Issues Subject: OT: Help me STU!!! (was RE: Xen 5.5 diagram) Stu, Please setup a block rule in your Lyris box to automatically delete any message from Webster that contains Shooky Babhe is really starting to creep me out. Shook From: Webster [mailto:carlwebs...@gmail.com] Sent: Tuesday, July 14, 2009 6:05 PM To: NT System Admin Issues Subject: RE: Xen 5.5 diagram From: Andy Shook [mailto:andy.sh...@peak10.com] Subject: Xen 5.5 diagram Looking for a logical architectural diagram of XenServer 5.5 that shows how the different components are laid out within the various tiers of a virtual infrastructure. Citrix���s training stuff is way lame and I wanted to see if anyone knew of such an animal. 5.5 documentation is ���a little lea�� to be polite. As usual, I took care of my Shooky Baby� Webster CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of the company. Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Spare touch screen
What did you drive the touch screen w/ when you were using mce? -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Tuesday, July 14, 2009 9:27 PM To: NT System Admin Issues Subject: RE: Spare touch screen I meant at home. I've been trying to get LinuxMCE to work and use this as an orbiter, but no luck.. Thus the quest for other ideas. I do use X10 at home, but an inwall really doesn���t intrigue me. -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Tuesday, July 14, 2009 10:37 PM To: NT System Admin Issues Subject: RE: Spare touch screen You mean besides taking them home to do whole-house automation? -sc -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Tuesday, July 14, 2009 10:16 PM To: NT System Admin Issues Subject: Spare touch screen Hi all, I've come across 2 15 touch screen monitors that are spare. If you have them, what would you use them for? Let the creativity begin! Thanks Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Help me STU!!! (was RE: Xen 5.5 diagram)
It's Mega Maid. She's gone from suck to blow. On Wed, Jul 15, 2009 at 7:48 AM, John Cook john.c...@pfsf.org wrote: Use the Schwartz Andy.. John W. Cook Systems Administrator Partnership For Strong Families Sent to you from my Blackberry in the Cloud -- *From*: Andy Shook *To*: NT System Admin Issues *Sent*: Wed Jul 15 07:30:30 2009 *Subject*: RE: Help me STU!!! (was RE: Xen 5.5 diagram) Agreed, that was a major fail on my part, now cut the chatter Red Аж Shook *From:* Steven M. Caesare [mailto:scaes...@caesare.com] *Sent:* Tuesday, July 14, 2009 10:34 PM *To:* NT System Admin Issues *Subject:* RE: Help me STU!!! (was RE: Xen 5.5 diagram) Imagine my disappointment when the subject line started out Ь*Help me Stu* А, but then omitted Ь*you Щre my only hope А* -sc *From:* Andy Shook [mailto:andy.sh...@peak10.com] *Sent:* Tuesday, July 14, 2009 6:11 PM *To:* NT System Admin Issues *Subject:* OT: Help me STU!!! (was RE: Xen 5.5 diagram) Stu, Please setup a block rule in your Lyris box to automatically delete any message from Webster that contains Shooky Bab Ажhe is really starting to creep me out. Shook *From:* Webster [mailto:carlwebs...@gmail.com] *Sent:* Tuesday, July 14, 2009 6:05 PM *To:* NT System Admin Issues *Subject:* RE: Xen 5.5 diagram *From:* Andy Shook [mailto:andy.sh...@peak10.com] *Subject:* Xen 5.5 diagram Looking for a logical architectural diagram of XenServer 5.5 that shows how the different components are laid out within the various tiers of a virtual infrastructure. Citri АЩs training stuff is way lame and I wanted to see if anyone knew of such an animal. 5.5 documentation i т Ьa little lean А to be polite. As usual, I took care of my Shooky Baby! J Webster -- CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of the company. Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Spare touch screen
I use one on a Vista box to run media center and it works great. It's hooked up to my outdoor entertainment center on the patio/pergola I built. Have the computer, monitor, stereo locked up inside. Mounted an old projector inside pointing out the top of the window to a screen hung on the other side of the patio. Kids love outdoor movie night and I can play whatever back from the PC or sling the sat. from inside. -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Tuesday, July 14, 2009 9:37 PM To: NT System Admin Issues Subject: RE: Spare touch screen You mean besides taking them home to do whole-house automation? -sc -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Tuesday, July 14, 2009 10:16 PM To: NT System Admin Issues Subject: Spare touch screen Hi all, I've come across 2 15 touch screen monitors that are spare. If you have them, what would you use them for? Let the creativity begin! Thanks Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
My experience with XServers is several years out of date, but the last time I got involved in a project using them, the directory was buggy, prone to crashing, and had to be manually resynchronized with AD at least once a day (or whenever new users were added, new computers were added, or passwords were changed). I was very unimpressed. I think if you want some POSITIVE opinions of them - you should probably ask on an Apple forum. :-) From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: OT: Help me STU!!! (was RE: Xen 5.5 diagram)
Okay... now I'm starting to get creeped out. From: Jeremy Anderson [mailto:jer...@mapiadmin.net] Sent: Tuesday, July 14, 2009 5:46 PM To: NT System Admin Issues Subject: RE: OT: Help me STU!!! (was RE: Xen 5.5 diagram) Shookie baby, slip a sable under the tree, for me I've been an awful good girl Shookie baby, and hurry down the chimney tonight From: Sherry Abercrombie [saber...@gmail.com] Sent: Tuesday, July 14, 2009 3:14 PM To: NT System Admin Issues Subject: Re: OT: Help me STU!!! (was RE: Xen 5.5 diagram) Awww Shookie Baby, wassa matta? Hmmm, you're not really scared of Webster now are you Shookie Baby. On Tue, Jul 14, 2009 at 4:11 PM, Andy Shook andy.sh...@peak10.com wrote: Stu, Please setup a block rule in your Lyris box to automatically delete any message from Webster that contains Shooky Baby...he is really starting to creep me out. Shook From: Webster [mailto:carlwebs...@gmail.com] Sent: Tuesday, July 14, 2009 6:05 PM To: NT System Admin Issues Subject: RE: Xen 5.5 diagram From: Andy Shook [mailto:andy.sh...@peak10.com] Subject: Xen 5.5 diagram Looking for a logical architectural diagram of XenServer 5.5 that shows how the different components are laid out within the various tiers of a virtual infrastructure. Citrix's training stuff is way lame and I wanted to see if anyone knew of such an animal. 5.5 documentation is a little lean to be polite. As usual, I took care of my Shooky Baby! J Webster -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Patch Tuesday Killbits
FYI, he Killbits for the recent Active X issue is in this Tuesday's releases. The ones for KB972890http://www.microsoft.com/technet/security/advisory/972890.mspx. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
I couldn't possibly begin to answer the OP's question, but I will just throw this out there. It is my understanding that most (if not all) of the server-specific functions come from open source projects and the main thing that Apple does is provide a nice GUI for them. So, depending on your view of open source, you can insert whether that is a good or bad thing here. In regards to Michael's comment, I would note that there have been several iterations of Mac OS X in the last several years. In fact, they are just months short of shipping yet another one. I have no idea if the issues that Michael indicates have been resolved or not, but it does seem reasonable to assume that there has been some improvement since that time. I would also agree that you might check with another forum to hear about more actual experience with OS X Server. -Original Message- From: Michael B. Smith [mailto:mich...@owa.smithcons.com] Sent: Wednesday, July 15, 2009 8:17 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? My experience with XServers is several years out of date, but the last time I got involved in a project using them, the directory was buggy, prone to crashing, and had to be manually resynchronized with AD at least once a day (or whenever new users were added, new computers were added, or passwords were changed). I was very unimpressed. I think if you want some POSITIVE opinions of them - you should probably ask on an Apple forum. :-) From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Spare touch screen
Nicely done... I uses a gyro mouse for my downstairs theater setup.. and to run MCE if I need more than just the remote. -sc -Original Message- From: N Parr [mailto:npar...@mortonind.com] Sent: Wednesday, July 15, 2009 8:13 AM To: NT System Admin Issues Subject: RE: Spare touch screen I use one on a Vista box to run media center and it works great. It's hooked up to my outdoor entertainment center on the patio/pergola I built. Have the computer, monitor, stereo locked up inside. Mounted an old projector inside pointing out the top of the window to a screen hung on the other side of the patio. Kids love outdoor movie night and I can play whatever back from the PC or sling the sat. from inside. -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Tuesday, July 14, 2009 9:37 PM To: NT System Admin Issues Subject: RE: Spare touch screen You mean besides taking them home to do whole-house automation? -sc -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Tuesday, July 14, 2009 10:16 PM To: NT System Admin Issues Subject: Spare touch screen Hi all, I've come across 2 15 touch screen monitors that are spare. If you have them, what would you use them for? Let the creativity begin! Thanks Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Vmarew and P2V of Exchange 2007 Sp1 CCR
Hi Folks, Currently I have 2 x CCR Sp1 on Win2003 Sp2 machines using a local quorum to host the DB's. What I want to try and achieve is to use (VMware ESXi 3.5i) P2V each of the nodes and (the HT\CAS) and bring these nodes up in a separate test network so I will have a exact replica of our existing Exchange environment so I can test restores etc... Once the P2V process is complete and shutdown - bring the Vm images over by tape and restore to the test network. What is the best way to p2v using Exchange 2007 CCR nodes? I'm thinking of p2v the passive (B) node - once complete then move Exchange from Node A to Node B and then P2V node a. Will this work without affecting the Information Stores? Regards Fergal O'Connell ICT Support The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. If you are not the intended addressee please contact the sender and dispose of this e-mail. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
I can't answer your question but I can direct you to the Mac mailing lists hosted by Apple. http://lists.apple.com/mailman/listinfo The Macos-x-server list is quite active: http://lists.apple.com/mailman/listinfo/macos-x-server The Interoperability list has virtually no traffic, unfortunately: http://lists.apple.com/mailman/listinfo/macosx-interop Good luck! -Original Message- From: Shawn [mailto:sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
VMWARE 3.5 REDO LOG Corrupt
Hello; I've just been handed a VMWARE ESX 3.5 system that has a Corrupt redo log. How do I repair that redo log. The VM Instance is currently down but if I bring up it goes into a loop about log being corrupt. It states that I need to fix or remove. Any suggestions. Joe Haralson 630-780-6869 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Spare touch screen
12 Gauge! - Original Message - From: gro...@beachcomp.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Tuesday, July 14, 2009 10:16 PM Subject: Spare touch screen Hi all, I've come across 2 15 touch screen monitors that are spare. If you have them, what would you use them for? Let the creativity begin! Thanks Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error, please contact the sender by reply e-mail message and destroy all copies of the original message (including attachments). ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: OT Looking for new Webhost
Yeah Orcsweb doesn't support CF, they are strictly MS only, I don't know why the heck we are still using cold fusion though. Will check out server intellect. Thanks, James - Original Message - From: Ken Schaefer To: NT System Admin Issues Sent: Wednesday, July 15, 2009 2:15 AM Subject: RE: OT Looking for new Webhost +1 to both Orcsweb and Server Intellect. CrystalTech were also pretty good when I was with them. Not sure whether OrcsWeb does CF though. Cheers Ken -- From: Brian Desmond [br...@briandesmond.com] Sent: Wednesday, 15 July 2009 4:05 PM To: NT System Admin Issues Subject: RE: OT Looking for new Webhost Server Intellect has been great for me for many years. I assume given you’re on WebHost4Life that’s the price range you’re looking to play in. If you’re looking for something serious, OrcsWeb is where I’d go. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: James Kerr [mailto:cluster...@gmail.com] Sent: Tuesday, July 14, 2009 8:57 AM To: NT System Admin Issues Subject: OT Looking for new Webhost Looking for a new webhost, been trying to use the hosting review sites but it seems most of the sites listed as the top sites do not fit our needs. We are looking to host our site on windows servers and we need cold fusion. For about 3 months out of the year our site is pretty busy and during that time we need 100% uptime. Our currently webhost isnt really up to the task, we use webhost4life. Anyone have any recommondations? James ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
I don't have it either. From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 06:21 To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
It hasn't been released yet. MS is working on it. From the KB: Microsoft is currently working to develop a security update for all affected software listed in the Overview section to address this vulnerability and will release the update when it has reached an appropriate level of quality for broad distribution. From: Martin Blackstone [mailto:mblackst...@gmail.com] Sent: Wednesday, July 15, 2009 9:34 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I don't have it either. From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 06:21 To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
TS eval terminates early
I have two 2003 TS that have been running in eval mode. One expired yesterday after 120 days because we are waiting on the cals to activate it. But this other TS has only been running for two weeks and it also expired yesterday. Coincidence? Anyone ideas? This message contains confidential information and is intended only for the intended recipient(s). If you are not the named recipient you should not read, distribute or copy this e-mail. Please notify the sender immediately via e-mail if you have received this e-mail by mistake; then, delete this e-mail from your system. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
On Wed, Jul 15, 2009 at 9:19 AM, Vue, Zaz...@emory.edu wrote: Where does the boss get the idea that a Mac environment will be a better long term move? Yah, I'd like to know that, too. It may even be true for certain situations, but without knowing the reasoning, it's just a wild claim. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users ... Please tell me where I can get Windows 2008 and 150 CALs for under $1000. I had to look-up Apple's licensing policies. According to their website, OS X Server can be got with unlimited client licenses for $1000. http://store.apple.com/us/product/MB605Z/A Accepting your $3000 hardware cost, then for $4000, you've got an Apple server that will do 150 users. If I listen to Google, a Win 2008 CAL is $26. That's $3900 for CALs alone. Ignoring volume discounts, of course. Now, a Windows CAL is good for any number of servers, while a Apple server OS license for unlimited clients is only good for one server. OTOH, the Win 2008 OS itself is around $800. None of the above is intended to be comprehensive, nor conclusive. I torrent the damn thing instead. One may want to avoid boasting of software piracy in a public forum. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define manage. I would expect it manages Mac's better :). David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM's at a time, but... -- -Original Message- From: Vue, Za [mailto:z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error, please contact the sender by reply e-mail message and destroy all copies of the original message (including attachments). ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: OT: blog newsletter
On Wed, Jul 15, 2009 at 5:58 AM, Rod Trentrodtr...@myitforum.com wrote: Blogs automate communication through RSS feeds. I know there are RSS-email gateways out there. I use them myself. Perhaps the OP should direct people to them. (I've been reading email for newsletters and similar since before there *was* a web, and I'm not about to change that just because someone invented a new way to do the same old thing.) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Help me STU!!! (was RE: Xen 5.5 diagram)
On Wed, Jul 15, 2009 at 8:05 AM, Rob Bonfigliorobbonfig...@gmail.com wrote: It's Mega Maid. She's gone from suck to blow. Holy crap, they've gone to plaid! -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
I believe there was something on the Patch management list about slayocx.vbs which could be called from a script and would do a commandline type setoff the kill bit. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 9:50 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: OT Looking for new Webhost
+2 to ORcsweb.. I met the folks that run the site last yr at tech Ed, very good very savvy. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: James Kerr [mailto:cluster...@gmail.com] Sent: Wednesday, July 15, 2009 9:33 AM To: NT System Admin Issues Subject: Re: OT Looking for new Webhost Yeah Orcsweb doesn't support CF, they are strictly MS only, I don't know why the heck we are still using cold fusion though. Will check out server intellect. Thanks, James - Original Message - From: Ken Schaefer mailto:k...@adopenstatic.com To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, July 15, 2009 2:15 AM Subject: RE: OT Looking for new Webhost +1 to both Orcsweb and Server Intellect. CrystalTech were also pretty good when I was with them. Not sure whether OrcsWeb does CF though. Cheers Ken From: Brian Desmond [br...@briandesmond.com] Sent: Wednesday, 15 July 2009 4:05 PM To: NT System Admin Issues Subject: RE: OT Looking for new Webhost Server Intellect has been great for me for many years. I assume given you're on WebHost4Life that's the price range you're looking to play in. If you're looking for something serious, OrcsWeb is where I'd go. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian https://mvp.support.microsoft.com/profile/Brian From: James Kerr [mailto:cluster...@gmail.com] Sent: Tuesday, July 14, 2009 8:57 AM To: NT System Admin Issues Subject: OT Looking for new Webhost Looking for a new webhost, been trying to use the hosting review sites but it seems most of the sites listed as the top sites do not fit our needs. We are looking to host our site on windows servers and we need cold fusion. For about 3 months out of the year our site is pretty busy and during that time we need 100% uptime. Our currently webhost isnt really up to the task, we use webhost4life. Anyone have any recommondations? James ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
That reply was a lame attempt at humor implying why don't we just killbit everything... -Paul From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 8:59 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I believe there was something on the Patch management list about slayocx.vbs which could be called from a script and would do a commandline type setoff the kill bit. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 9:50 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745
I've not yet received the promised email with the download and license info. Anyone else? Roger Wright ___ Milton Berle - If opportunity doesn't knock, build a door. On Tue, Jul 14, 2009 at 2:45 PM, Roger Wrightrhw...@gmail.com wrote: Sorry, all, here's the link: http://www.oo-software.com/smb/en/special/oodiskstatserver/ Roger Wright ___ Timothy Leary - Women who seek to be equal with men lack ambition. - http://www.brainyquote.com/quotes/authors/t/timothy_leary.html On Tue, Jul 14, 2009 at 8:01 AM, Jake Gardnerjgard...@ttcdas.com wrote: Got a link? I searched their site and didn't see any promo form with this offer. Thanks, Jake Gardner Network Administrator 267-352-2020 Ext. 246 www.ttcdas.com -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Monday, July 13, 2009 5:10 PM To: NT System Admin Issues Subject: Fwd: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745 Looks like another handy application to monitor server drive space. Roger Wright Network Administrator HSA Engineers Scientists 813.971.3882 x293 http://www.hsa-env.com _ From: Mandy Tieslauk [mailto:mandy.tiesl...@oo-software.com] Sent: Friday, July 10, 2009 10:05 AM Subject: The OO Console and OO DiskStat 2 - Free! 2009/015001745 Dear Customer, They say the best things in life are free - well, we'd like to give that some strength! Beginning today and ending on July 31, 2009, we are offering you a stunning combination of the OO Enterprise Management Console 2 and OO DiskStat 2, for a whole single location, entirely free. Yes - a 100% discount! Curious? This is what you'll get: OO DiskStat 2 Site License. OO DiskStat gives you a concise overview of the disk usage on your computer. The product makes it simple for you to track down those files and folders that are taking up too much space on your hard disk, and causing your computer to slow down. This versatile tool offers a Windows-Explorer type interface and a whole range of options to track down sources of wasted space. OO Enterprise Management Console 2. With the OO Enterprise Management Console (OOEMC), you can manage your OO products across your network from a central location. Not only can you carry out jobs on individual computers or computer groups, you can also remotely install the agents. All data is saved in the SQL database included in delivery, meaning you are kept fully informed of the success of your jobs through comprehensive reports. Electronic delivery of this offer contains the following: · OO DiskStat 2 Site license (according to how many Desktops, Notebooks and Servers you have in your location). · One OO Enterprise Management Console 2.3 license. · Download links for both products. To take advantage of this stunning offer, simply complete the online form, and submit your details in full as requested, and we will mail you your licenses. So the best things in life are easy too? At OO Software, yes - and we are looking forward to hearing from you! Best regards, Mandy Tieslauk Team Assistant P.S. Please hurry - this offer is only valid until July 31, 2009! The offer cannot be accepted by telephone, fax or letter. The licenses you get from us are unrestricted in period and update eligibility. They do not include Maintenance, and may only be used on Company/Authority machines. Maximum one order per company/authority. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ***Teletronics Technology Corporation*** This e-mail is confidential and may also be privileged. If you are not the addressee or authorized by the addressee to receive this e-mail, you may not disclose, copy, distribute, or use this e-mail. If you have received this e-mail in error, please notify the sender immediately by reply e-mail or by telephone at 267-352-2020 and destroy this message and any copies. Thank you. *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745
No not yet -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Wednesday, July 15, 2009 8:03 AM To: NT System Admin Issues Subject: Re: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745 I've not yet received the promised email with the download and license info. Anyone else? Roger Wright ___ Milton Berle - If opportunity doesn't knock, build a door. On Tue, Jul 14, 2009 at 2:45 PM, Roger Wrightrhw...@gmail.com wrote: Sorry, all, here's the link: http://www.oo-software.com/smb/en/special/oodiskstatserver/ Roger Wright ___ Timothy Leary - Women who seek to be equal with men lack ambition. - http://www.brainyquote.com/quotes/authors/t/timothy_leary.html On Tue, Jul 14, 2009 at 8:01 AM, Jake Gardnerjgard...@ttcdas.com wrote: Got a link? I searched their site and didn't see any promo form with this offer. Thanks, Jake Gardner Network Administrator 267-352-2020 Ext. 246 www.ttcdas.com -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Monday, July 13, 2009 5:10 PM To: NT System Admin Issues Subject: Fwd: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745 Looks like another handy application to monitor server drive space. Roger Wright Network Administrator HSA Engineers Scientists 813.971.3882 x293 http://www.hsa-env.com _ From: Mandy Tieslauk [mailto:mandy.tiesl...@oo-software.com] Sent: Friday, July 10, 2009 10:05 AM Subject: The OO Console and OO DiskStat 2 - Free! 2009/015001745 Dear Customer, They say the best things in life are free - well, we'd like to give that some strength! Beginning today and ending on July 31, 2009, we are offering you a stunning combination of the OO Enterprise Management Console 2 and OO DiskStat 2, for a whole single location, entirely free. Yes - a 100% discount! Curious? This is what you'll get: OO DiskStat 2 Site License. OO DiskStat gives you a concise overview of the disk usage on your computer. The product makes it simple for you to track down those files and folders that are taking up too much space on your hard disk, and causing your computer to slow down. This versatile tool offers a Windows-Explorer type interface and a whole range of options to track down sources of wasted space. OO Enterprise Management Console 2. With the OO Enterprise Management Console (OOEMC), you can manage your OO products across your network from a central location. Not only can you carry out jobs on individual computers or computer groups, you can also remotely install the agents. All data is saved in the SQL database included in delivery, meaning you are kept fully informed of the success of your jobs through comprehensive reports. Electronic delivery of this offer contains the following: · OO DiskStat 2 Site license (according to how many Desktops, Notebooks and Servers you have in your location). · One OO Enterprise Management Console 2.3 license. · Download links for both products. To take advantage of this stunning offer, simply complete the online form, and submit your details in full as requested, and we will mail you your licenses. So the best things in life are easy too? At OO Software, yes - and we are looking forward to hearing from you! Best regards, Mandy Tieslauk Team Assistant P.S. Please hurry - this offer is only valid until July 31, 2009! The offer cannot be accepted by telephone, fax or letter. The licenses you get from us are unrestricted in period and update eligibility. They do not include Maintenance, and may only be used on Company/Authority machines. Maximum one order per company/authority. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ***Teletronics Technology Corporation*** This e-mail is confidential and may also be privileged. If you are not the addressee or authorized by the addressee to receive this e-mail, you may not disclose, copy, distribute, or use this e-mail. If you have received this e-mail in error, please notify the sender immediately by reply e-mail or by telephone at 267-352-2020 and destroy this message and any copies. Thank you. *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This message contains confidential information and is intended only for the intended recipient(s). If you are not the named recipient you should not read, distribute or copy this e-mail. Please notify the sender
Terminal Services Profiles
All - I have TS profiles, configured through GP. The GP works, as it actually creates the profile when the user logs on, as it is supposed to. However, the folders remain empty and I recieve errors that the profile cannot load correctly. Any thoughts? Mike This message, and any response to it, may constitute a public record and thus may be publicly available to anyone who requests it in accordance with Chapter 149 of the Ohio Revised Code. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745
No sign of it here. John W. Cook Systems Administrator Partnership For Strong Families 315 SE 2nd Ave Gainesville, Fl 32601 Office (352) 393-2741 x320 Cell (352) 215-6944 Fax (352) 393-2746 MCSE, MCTS, MCP+I, A+, N+, VSP -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Wednesday, July 15, 2009 10:03 AM To: NT System Admin Issues Subject: Re: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745 I've not yet received the promised email with the download and license info. Anyone else? Roger Wright ___ Milton Berle - If opportunity doesn't knock, build a door. On Tue, Jul 14, 2009 at 2:45 PM, Roger Wrightrhw...@gmail.com wrote: Sorry, all, here's the link: http://www.oo-software.com/smb/en/special/oodiskstatserver/ Roger Wright ___ Timothy Leary - Women who seek to be equal with men lack ambition. - http://www.brainyquote.com/quotes/authors/t/timothy_leary.html On Tue, Jul 14, 2009 at 8:01 AM, Jake Gardnerjgard...@ttcdas.com wrote: Got a link? I searched their site and didn't see any promo form with this offer. Thanks, Jake Gardner Network Administrator 267-352-2020 Ext. 246 www.ttcdas.com -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Monday, July 13, 2009 5:10 PM To: NT System Admin Issues Subject: Fwd: FW: The OO Console and OO DiskStat 2 - Free! 2009/015001745 Looks like another handy application to monitor server drive space. Roger Wright Network Administrator HSA Engineers Scientists 813.971.3882 x293 http://www.hsa-env.com _ From: Mandy Tieslauk [mailto:mandy.tiesl...@oo-software.com] Sent: Friday, July 10, 2009 10:05 AM Subject: The OO Console and OO DiskStat 2 - Free! 2009/015001745 Dear Customer, They say the best things in life are free - well, we'd like to give that some strength! Beginning today and ending on July 31, 2009, we are offering you a stunning combination of the OO Enterprise Management Console 2 and OO DiskStat 2, for a whole single location, entirely free. Yes - a 100% discount! Curious? This is what you'll get: OO DiskStat 2 Site License. OO DiskStat gives you a concise overview of the disk usage on your computer. The product makes it simple for you to track down those files and folders that are taking up too much space on your hard disk, and causing your computer to slow down. This versatile tool offers a Windows-Explorer type interface and a whole range of options to track down sources of wasted space. OO Enterprise Management Console 2. With the OO Enterprise Management Console (OOEMC), you can manage your OO products across your network from a central location. Not only can you carry out jobs on individual computers or computer groups, you can also remotely install the agents. All data is saved in the SQL database included in delivery, meaning you are kept fully informed of the success of your jobs through comprehensive reports. Electronic delivery of this offer contains the following: · OO DiskStat 2 Site license (according to how many Desktops, Notebooks and Servers you have in your location). · One OO Enterprise Management Console 2.3 license. · Download links for both products. To take advantage of this stunning offer, simply complete the online form, and submit your details in full as requested, and we will mail you your licenses. So the best things in life are easy too? At OO Software, yes - and we are looking forward to hearing from you! Best regards, Mandy Tieslauk Team Assistant P.S. Please hurry - this offer is only valid until July 31, 2009! The offer cannot be accepted by telephone, fax or letter. The licenses you get from us are unrestricted in period and update eligibility. They do not include Maintenance, and may only be used on Company/Authority machines. Maximum one order per company/authority. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ***Teletronics Technology Corporation*** This e-mail is confidential and may also be privileged. If you are not the addressee or authorized by the addressee to receive this e-mail, you may not disclose, copy, distribute, or use this e-mail. If you have received this e-mail in error, please notify the sender immediately by reply e-mail or by telephone at 267-352-2020 and destroy this message and any copies. Thank you. *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: OT Looking for new Webhost
I wonder how much they charge for their shared hosting. They don't list prices on their site, anyone know? James - Original Message - From: Ziots, Edward To: NT System Admin Issues Sent: Wednesday, July 15, 2009 9:59 AM Subject: RE: OT Looking for new Webhost +2 to ORcsweb.. I met the folks that run the site last yr at tech Ed, very good very savvy. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 -- From: James Kerr [mailto:cluster...@gmail.com] Sent: Wednesday, July 15, 2009 9:33 AM To: NT System Admin Issues Subject: Re: OT Looking for new Webhost Yeah Orcsweb doesn't support CF, they are strictly MS only, I don't know why the heck we are still using cold fusion though. Will check out server intellect. Thanks, James - Original Message - From: Ken Schaefer To: NT System Admin Issues Sent: Wednesday, July 15, 2009 2:15 AM Subject: RE: OT Looking for new Webhost +1 to both Orcsweb and Server Intellect. CrystalTech were also pretty good when I was with them. Not sure whether OrcsWeb does CF though. Cheers Ken From: Brian Desmond [br...@briandesmond.com] Sent: Wednesday, 15 July 2009 4:05 PM To: NT System Admin Issues Subject: RE: OT Looking for new Webhost Server Intellect has been great for me for many years. I assume given you're on WebHost4Life that's the price range you're looking to play in. If you're looking for something serious, OrcsWeb is where I'd go. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: James Kerr [mailto:cluster...@gmail.com] Sent: Tuesday, July 14, 2009 8:57 AM To: NT System Admin Issues Subject: OT Looking for new Webhost Looking for a new webhost, been trying to use the hosting review sites but it seems most of the sites listed as the top sites do not fit our needs. We are looking to host our site on windows servers and we need cold fusion. For about 3 months out of the year our site is pretty busy and during that time we need 100% uptime. Our currently webhost isnt really up to the task, we use webhost4life. Anyone have any recommondations? James ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
snip Please tell me where I can get Windows 2008 and 150 CALs for under $1000. Ejumacational pricing perhaps? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
[OT] We Choose The Moon
This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error,
Re: Apple vs Microsoft?
That should have been logo 2009/7/15 James Rankin kz2...@googlemail.com Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any
RE: TS eval terminates early
By default, the first one that you install in a domain is the license server. You should be able to point the second one to itself as a license server. http://lmgtfy.com/?q=specify+terminal+services+license+server :-) (Couldn't resist.) From: Eldridge, Dave [...@parkviewmc.com] Sent: Wednesday, July 15, 2009 9:40 AM To: NT System Admin Issues Subject: TS eval terminates early I have two 2003 TS that have been running in eval mode. One expired yesterday after 120 days because we are waiting on the cals to activate it. But this other TS has only been running for two weeks and it also expired yesterday. Coincidence? Anyone ideas? This e-mail contains the thoughts and opinions of the sender and does not represent official Parkview Medical Center policy. This communication is intended only for the recipient(s) named above, may be confidential and/or legally privileged: and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please return to sender and delete the message from your computer system. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
DC running in VM
Just came across this, some MS recommendations on Virtual DCs, I know we had a fairly heated discussion on this a few weeks back. http://support.microsoft.com/kb/888794http://www.linkedin.com/e/plh/http%3A%2F%2Fsupport%2Emicrosoft%2Ecom%2Fkb%2F888794/jCtc/ CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Installing Outlook 2007 on a server?
Interesting. Am I correct in thinking that any rule I set up via OWA is always a server side rule? My main goal is just to be sure that the rules are always fired Thanks for the all the replies so far! Evan -Original Message- From: Terry Dickson [mailto:te...@treasurer.state.ks.us] Sent: Monday, July 13, 2009 11:20 AM To: NT System Admin Issues Subject: RE: Installing Outlook 2007 on a server? I agree, setup rules that are not client based and setup OWA if you really want to check on the server. Then you are just using IE which is installed anyway, and rules run when the messages show up without having Outlook on the DC, or exchange server. -Original Message- From: KenM [mailto:kenmli...@gmail.com] Sent: Monday, July 13, 2009 10:13 AM To: NT System Admin Issues Subject: Re: Installing Outlook 2007 on a server? I would highly recomend against either. You should not be checking mail on a DC. and outlook should not be installed on an exchange server becuase of the mapi.dll. If I were you and needed outlook to be running all the time I would create a VM or get a old workstation. On Mon, Jul 13, 2009 at 10:50 AM, Evan Brastow ebras...@automatedemblem.com wrote: Hi guys, Yes, I know this is flame bait. Assuming adequate CPU power, is there any known reason why I couldn't installed Outlook 2007 on a server? It would either be a W2k3 Server domain controller, or a W2k Server box (non-dc) running Exchange 2003 Enterprise. I'm leaning toward putting it on the former. The purpose of this is that I have a mailbox that my customer service people attach to that receives all of our orders-related emails. I'd like to have a box with guaranteed uptime available to run the Outlook client on so that it can do rule-based filing and marking of items as they come in. Downsides? Thanks for your time J Evan ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Spare touch screen
We just set a couple up here to do company directories and guest badge creation in our lobby areas. They work great and have turned a lot of messy looking stacks of paper into a sleek tech showpiece. TVK -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Tuesday, July 14, 2009 9:23 PM To: NT System Admin Issues Subject: RE: Spare touch screen Kiosk setup ( HR, Employee intranet ) , Point-of-Sale , warehouse email station, etc, etc, etc .. Erik Goldoff IT Consultant Systems, Networks, Security -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Tuesday, July 14, 2009 10:16 PM To: NT System Admin Issues Subject: Spare touch screen Hi all, I've come across 2 15 touch screen monitors that are spare. If you have them, what would you use them for? Let the creativity begin! Thanks Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
+1 Jon On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: That should have been logo 2009/7/15 James Rankin kz2...@googlemail.com Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby
RE: Keeping us employed (link)
I got the joke, maybe EZ is under too much stress these days? Dave From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 7:02 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) That reply was a lame attempt at humor implying why don't we just killbit everything... -Paul From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 8:59 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I believe there was something on the Patch management list about slayocx.vbs which could be called from a script and would do a commandline type setoff the kill bit. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.orgmailto:ezi...@lifespan.org Phone:401-639-3505 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 9:50 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: TS eval terminates early
it's not the servers, it's the temp licenses that are issued Erik Goldoff IT Consultant Systems, Networks, Security _ From: Eldridge, Dave [mailto:d...@parkviewmc.com] Sent: Wednesday, July 15, 2009 9:40 AM To: NT System Admin Issues Subject: TS eval terminates early I have two 2003 TS that have been running in eval mode. One expired yesterday after 120 days because we are waiting on the cals to activate it. But this other TS has only been running for two weeks and it also expired yesterday. Coincidence? Anyone ideas? This e-mail contains the thoughts and opinions of the sender and does not represent official Parkview Medical Center policy. This communication is intended only for the recipient(s) named above, may be confidential and/or legally privileged: and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please return to sender and delete the message from your computer system. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
WAY OT NOW: RE: Help me STU!!! (was RE: Xen 5.5 diagram)
From: Andy Shook [mailto:andy.sh...@peak10.com] Subject: OT: Help me DADDY!!! (was RE: Xen 5.5 diagram) Stu, Please setup a block rule in your Lyris box to automatically delete any message from Webster that contains Shooky Baby.he is really starting to creep me out. With apologies to Stu and Bill Chase and his band from the 70s (http://www.youtube.com/watch?v=txYyQwUGjNY ) Run Back to Daddy If you can't face the day you better stay in bed boy It's not my only job to organize your head boy You say that IT life is such a heavy load If you can't take it boy just pack your bags and hit the road Run back to Daddy Tell him that I do all sorts of terrible things Run back to Daddy Well you're obviously tied to those apron strings You say my jokes are crude you think I am a sinner you say I yell to loud each time you crash the server you say I treat you like a child that's misbehaving If you can't take it boy I think you best be on your way Run back to Daddy Tell him that I do all sorts of terrible things Run back to Daddy Well you're obviously tied to those apron strings Run back to Daddy Tell him that I do all sorts of terrible things Run back to Daddy Well you're obviously tied to those apron strings Run back to Daddy Let's go, let's go, let's go Run back to Daddy Boy if you were smart you'd let go of those strings Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Installing Outlook 2007 on a server?
That is correct. Using OWA is, in fact, the easiest way to tell which rules are server-side and which are client-side. From: Evan Brastow [ebras...@automatedemblem.com] Sent: Wednesday, July 15, 2009 10:51 AM To: NT System Admin Issues Subject: RE: Installing Outlook 2007 on a server? Interesting. Am I correct in thinking that any rule I set up via OWA is always a server side rule? My main goal is just to be sure that the rules are always fired Thanks for the all the replies so far! Evan -Original Message- From: Terry Dickson [mailto:te...@treasurer.state.ks.us] Sent: Monday, July 13, 2009 11:20 AM To: NT System Admin Issues Subject: RE: Installing Outlook 2007 on a server? I agree, setup rules that are not client based and setup OWA if you really want to check on the server. Then you are just using IE which is installed anyway, and rules run when the messages show up without having Outlook on the DC, or exchange server. -Original Message- From: KenM [mailto:kenmli...@gmail.com] Sent: Monday, July 13, 2009 10:13 AM To: NT System Admin Issues Subject: Re: Installing Outlook 2007 on a server? I would highly recomend against either. You should not be checking mail on a DC. and outlook should not be installed on an exchange server becuase of the mapi.dll. If I were you and needed outlook to be running all the time I would create a VM or get a old workstation. On Mon, Jul 13, 2009 at 10:50 AM, Evan Brastow ebras...@automatedemblem.com wrote: Hi guys, Yes, I know this is flame bait. Assuming adequate CPU power, is there any known reason why I couldn't installed Outlook 2007 on a server? It would either be a W2k3 Server domain controller, or a W2k Server box (non-dc) running Exchange 2003 Enterprise. I'm leaning toward putting it on the former. The purpose of this is that I have a mailbox that my customer service people attach to that receives all of our orders-related emails. I'd like to have a box with guaranteed uptime available to run the Outlook client on so that it can do rule-based filing and marking of items as they come in. Downsides? Thanks for your time J Evan ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Terminal Services Profiles
Are you using TS profiles? I have a GPO set on the Terminal Servers OU, and that sets profiles to be stored on a large share, and allows profiles to be cached on the TS servers as well. That's in the TS 2008 Resource Guide. I don't have it handy but can get more details if you need it. Owens, Michael michael.ow...@dys.ohio.gov 7/15/2009 10:07 AM All - I have TS profiles, configured through GP. The GP works, as it actually creates the profile when the user logs on, as it is supposed to. However, the folders remain empty and I recieve errors that the profile cannot load correctly. Any thoughts? Mike This message, and any response to it, may constitute a public record and thus may be publicly available to anyone who requests it in accordance with Chapter 149 of the Ohio Revised Code. Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
You have no idea Dave,,, 0 days are killing me :-) Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 11:09 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I got the joke, maybe EZ is under too much stress these days? Dave From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 7:02 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) That reply was a lame attempt at humor implying why don't we just killbit everything... -Paul From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 8:59 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I believe there was something on the Patch management list about slayocx.vbs which could be called from a script and would do a commandline type setoff the kill bit. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 9:50 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified
RE: Keeping us employed (link)
Hmmm Day 0 meant something else on an another list long, long ago in a galaxy far, far away... -sc From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 11:23 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) You have no idea Dave,,, 0 days are killing me J Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 11:09 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I got the joke, maybe EZ is under too much stress these days? Dave From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 7:02 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) That reply was a lame attempt at humor implying why don't we just killbit everything... -Paul From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 8:59 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I believe there was something on the Patch management list about slayocx.vbs which could be called from a script and would do a commandline type setoff the kill bit. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 9:50 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
I just call the 0 day exploit the big black hole of the Internet Universe, once you go in you can never get out :-) Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:32 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Hmmm Day 0 meant something else on an another list long, long ago in a galaxy far, far away... -sc From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 11:23 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) You have no idea Dave,,, 0 days are killing me :-) Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 11:09 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I got the joke, maybe EZ is under too much stress these days? Dave From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 7:02 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) That reply was a lame attempt at humor implying why don't we just killbit everything... -Paul From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 8:59 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I believe there was something on the Patch management list about slayocx.vbs which could be called from a script and would do a commandline type setoff the kill bit. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 9:50 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Keeping us employed (link)
This is not the Day 0 you are looking for. Move along... -sc From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 11:35 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I just call the 0 day exploit the big black hole of the Internet Universe, once you go in you can never get out J Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:32 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Hmmm Day 0 meant something else on an another list long, long ago in a galaxy far, far away... -sc From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 11:23 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) You have no idea Dave,,, 0 days are killing me J Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 11:09 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I got the joke, maybe EZ is under too much stress these days? Dave From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 7:02 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) That reply was a lame attempt at humor implying why don't we just killbit everything... -Paul From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, July 15, 2009 8:59 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) I believe there was something on the Patch management list about slayocx.vbs which could be called from a script and would do a commandline type setoff the kill bit. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, July 15, 2009 9:50 AM To: NT System Admin Issues Subject: RE: Keeping us employed (link) Does Microsoft have a command similar to killbit *.* Sheesh! From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 8:21 AM To: NT System Admin Issues Subject: Keeping us employed (link) http://isc.sans.org/diary.html?storyid=6778 I don't see KB973472 on my WSUS server but it did sync the others yesterday, is this something newer? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] We Choose The Moon
Very cool. While we are OT'ing... if y'all ever get a chance, catch the 6-part series Moon Machines (Discovery, Science or NatGeo channel methinks). All about the engineers and processed behind the scenes, as opposed to the more typical focus on the politics and astronaut story. Fascinating stuff that bunch of uber-nerds accomplished. I say that with the greatest respect, obviously... -sc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 10:14 AM To: NT System Admin Issues Subject: [OT] We Choose The Moon This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Terminal Services Profiles
Yes. I have the Set path for TS Roaming User Profile set. I am trying to create them on a larger share, and it is working... kind of. The folder gets created, so it is clear the account has access to that folder, but it doesn't create a profile in that folder, it creates a temporary profile locally. From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Wednesday, July 15, 2009 11:18 AM To: NT System Admin Issues Subject: Re: Terminal Services Profiles Are you using TS profiles? I have a GPO set on the Terminal Servers OU, and that sets profiles to be stored on a large share, and allows profiles to be cached on the TS servers as well. That's in the TS 2008 Resource Guide. I don't have it handy but can get more details if you need it. Owens, Michael michael.ow...@dys.ohio.gov 7/15/2009 10:07 AM All - I have TS profiles, configured through GP. The GP works, as it actually creates the profile when the user logs on, as it is supposed to. However, the folders remain empty and I recieve errors that the profile cannot load correctly. Any thoughts? Mike This message, and any response to it, may constitute a public record and thus may be publicly available to anyone who requests it in accordance with Chapter 149 of the Ohio Revised Code. Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. This message, and any response to it, may constitute a public record and thus may be publicly available to anyone who requests it in accordance with Chapter 149 of the Ohio Revised Code. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Spare touch screen
Spiffy. Did you buy apps for that or are they homegrown? -Original Message- From: Tim Vander Kooi [mailto:tvanderk...@expl.com] Sent: Wednesday, July 15, 2009 9:53 AM To: NT System Admin Issues Subject: RE: Spare touch screen We just set a couple up here to do company directories and guest badge creation in our lobby areas. They work great and have turned a lot of messy looking stacks of paper into a sleek tech showpiece. TVK -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Tuesday, July 14, 2009 9:23 PM To: NT System Admin Issues Subject: RE: Spare touch screen Kiosk setup ( HR, Employee intranet ) , Point-of-Sale , warehouse email station, etc, etc, etc .. Erik Goldoff IT Consultant Systems, Networks, Security -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Tuesday, July 14, 2009 10:16 PM To: NT System Admin Issues Subject: Spare touch screen Hi all, I've come across 2 15 touch screen monitors that are spare. If you have them, what would you use them for? Let the creativity begin! Thanks Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.comwrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some
Re: Apple vs Microsoft?
Thanks for the input guys. I am checking both sides of the arena to get both takes. I am very aware that Apple has their own forums. I started this discussion there, but did not think it would be fair to take only one side. I have found that most users in the Apple forums are Apple purists and was expecting to see some users here who were possibly running in a mixed environment. I did not intend to set off any of your gag reflexes by bringing the up the 'A' word. Thanks to those who have responded. Shawn On Wed, Jul 15, 2009 at 11:28 AM, Jonathan Link jonathan.l...@gmail.comwrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding
Re: Apple vs Microsoft?
A bench tech does not a network guru make. On Wed, Jul 15, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote: I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.comwrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150.
RE: Terminal Services Profiles
It's supposed to create a temporary profile on the TS to which the user is connected. Then it's updated upon disconnect (I think disconnect). User eventually re-connects, and the profile is pulled from the share and the local cached profile is updated. Check the perms. If I recall the Resource Guide had some specifics about that. Owens, Michael michael.ow...@dys.ohio.gov 7/15/2009 11:42 AM Yes. I have the Set path for TS Roaming User Profile set. I am trying to create them on a larger share, and it is working... kind of. The folder gets created, so it is clear the account has access to that folder, but it doesn't create a profile in that folder, it creates a temporary profile locally. From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Wednesday, July 15, 2009 11:18 AM To: NT System Admin Issues Subject: Re: Terminal Services Profiles Are you using TS profiles? I have a GPO set on the Terminal Servers OU, and that sets profiles to be stored on a large share, and allows profiles to be cached on the TS servers as well. That's in the TS 2008 Resource Guide. I don't have it handy but can get more details if you need it. Owens, Michael michael.ow...@dys.ohio.gov 7/15/2009 10:07 AM All - I have TS profiles, configured through GP. The GP works, as it actually creates the profile when the user logs on, as it is supposed to. However, the folders remain empty and I recieve errors that the profile cannot load correctly. Any thoughts? Mike This message, and any response to it, may constitute a public record and thus may be publicly available to anyone who requests it in accordance with Chapter 149 of the Ohio Revised Code. Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. This message, and any response to it, may constitute a public record and thus may be publicly available to anyone who requests it in accordance with Chapter 149 of the Ohio Revised Code. Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
Agreed. I can guarantee you that you would have similar results taking any of our desktop support guys and telling them to setup a new Windows domain. I also can't help but point out that it is Mac, not MAC. Mac is short for Macintosh. MAC stands for Media Access Control (http://en.wikipedia.org/wiki/Media_Access_Control). Seeing that drives me as crazy as hearing someone say they are going to the ATM machine. From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, July 15, 2009 11:55 AM To: NT System Admin Issues Subject: Re: Apple vs Microsoft? A bench tech does not a network guru make. On Wed, Jul 15, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote: I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.com wrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.com wrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define manage. I would expect it manages Mac's better :-). David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM's at a time, but... -- -Original Message- From: Vue, Za [mailto:z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a
Re: Apple vs Microsoft?
I commend you on your pedantic-ness (or should that be *pedanticity? *:-) ). At work, I am referred to as the grammar police 2009/7/15 Mayo, Bill bem...@pittcountync.gov Agreed. I can guarantee you that you would have similar results taking any of our desktop support guys and telling them to setup a new Windows domain. I also can't help but point out that it is Mac, not MAC. Mac is short for Macintosh. MAC stands for Media Access Control ( http://en.wikipedia.org/wiki/Media_Access_Control). Seeing that drives me as crazy as hearing someone say they are going to the ATM machine. -- *From:* Jonathan Link [mailto:jonathan.l...@gmail.com] *Sent:* Wednesday, July 15, 2009 11:55 AM *To:* NT System Admin Issues *Subject:* Re: Apple vs Microsoft? A bench tech does not a network guru make. On Wed, Jul 15, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote: I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.comwrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into
RE: Apple vs Microsoft?
You must hate PHP and GNU. From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Wednesday, July 15, 2009 12:03 PM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Agreed. I can guarantee you that you would have similar results taking any of our desktop support guys and telling them to setup a new Windows domain. I also can't help but point out that it is Mac, not MAC. Mac is short for Macintosh. MAC stands for Media Access Control (http://en.wikipedia.org/wiki/Media_Access_Control). Seeing that drives me as crazy as hearing someone say they are going to the ATM machine. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
Jeff I agree with you completely on the manual. It seems that they do not go over any of the under the covers data about their services in the manuals. This data only becomes visible in the Apple developer forums it seems. Do you know how things went at that location after you got things working? Which version of OS X were they running? I have heard on both ends that 10.5 was a huge improvement and 10.6 is supposed to be even better. The remote management tools are quite nifty and I have found that anything not able to be handled through their GUI to be accessible via ssh. Shawn On Wed, Jul 15, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote: I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.comwrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+
RE: Apple vs Microsoft?
I am working in a mixed enviroment, and well, meh Disclaimer - we do not have an Xserv, just AD. Here is the deal, if you are managing windows clients, stay with Windows servers. Group Policies, login scripts, remote managment, WSUS, user managment. Its all gonna work best from a windows server. If you have 150 OS X clients, then you should get an XServe. Its that easy. I have a low level tech, skill set is break fix, no formal network education at all. He is skilled at OSX desktop support as well as XP. He wanted to learn a bit more. So he got a Server 2003 trial and set up a basic domain, I made him set up DHCP, DNS, RDNS, etc.. It all worked (we never got as far as Group policy). He also ordered a X Serv trial CS and attempted to get that going on a MacMini. No love. We never got DHCP or DNS working, and because of this we were never able to bind clients to it. I didnt help much, but I did look at the DNS server documentation online and it scared me. Match the server to the clients is my best advice. And take a look at Essential Busisness Server. Jeremy From: Shawn LoPresto [sh...@loprestohome.com] Sent: Wednesday, July 15, 2009 8:53 AM To: NT System Admin Issues Subject: Re: Apple vs Microsoft? Thanks for the input guys. I am checking both sides of the arena to get both takes. I am very aware that Apple has their own forums. I started this discussion there, but did not think it would be fair to take only one side. I have found that most users in the Apple forums are Apple purists and was expecting to see some users here who were possibly running in a mixed environment. I did not intend to set off any of your gag reflexes by bringing the up the 'A' word. Thanks to those who have responded. Shawn On Wed, Jul 15, 2009 at 11:28 AM, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.commailto:kz2...@googlemail.com wrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.orgmailto:david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better :). David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM’s at a time, but… -- -Original Message- From: Vue, Za [mailto:z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my
Who deleted files
Hi all, Is there an easy way to see who deleted files from a networks drive. I've been able to restore the files from backup but we'd like to know who deleted initially. The server is Win2K. Thanks, Robert Robert LeBlanc Network Administrator MCP,MCSE Anesthesia Associates of New Mexico, P.C. (P)505-260-4300 (F)505-260-4338 (E)robert.lebl...@aanmpc.com Please note that the information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us by replying to the message and deleting it from your computer. Thank you. Anesthesia Associates of New Mexico, P.C. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Who deleted files
do you have auditing enabled? From: Robert LeBlanc [mailto:robert.lebl...@aanmpc.com] Sent: Wednesday, July 15, 2009 12:25 PM To: NT System Admin Issues Subject: Who deleted files Hi all, Is there an easy way to see who deleted files from a networks drive. I've been able to restore the files from backup but we'd like to know who deleted initially. The server is Win2K. Thanks, Robert Robert LeBlanc Network Administrator MCP,MCSE Anesthesia Associates of New Mexico, P.C. (P)505-260-4300 (F)505-260-4338 (E)robert.lebl...@aanmpc.com Please note that the information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us by replying to the message and deleting it from your computer. Thank you. Anesthesia Associates of New Mexico, P.C. This message, and any response to it, may constitute a public record and thus may be publicly available to anyone who requests it in accordance with Chapter 149 of the Ohio Revised Code. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Who deleted files
Unless you have file auditing turned on, I believe you're kinda snookered. Anyone with the Delete privilege is a suspect 2009/7/15 Robert LeBlanc robert.lebl...@aanmpc.com Hi all, Is there an easy way to see who deleted files from a networks drive. I’ve been able to restore the files from backup but we’d like to know who deleted initially. The server is Win2K. Thanks, Robert Robert LeBlanc Network Administrator MCP,MCSE Anesthesia Associates of New Mexico, P.C. (P)505-260-4300 (F)505-260-4338 (E)robert.lebl...@aanmpc.com Please note that the information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us by replying to the message and deleting it from your computer. Thank you. Anesthesia Associates of New Mexico, P.C. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Who deleted files
Do you have auditing on? Jon On Wed, Jul 15, 2009 at 12:25 PM, Robert LeBlanc robert.lebl...@aanmpc.comwrote: Hi all, Is there an easy way to see who deleted files from a networks drive. I’ve been able to restore the files from backup but we’d like to know who deleted initially. The server is Win2K. Thanks, Robert Robert LeBlanc Network Administrator MCP,MCSE Anesthesia Associates of New Mexico, P.C. (P)505-260-4300 (F)505-260-4338 (E)robert.lebl...@aanmpc.com Please note that the information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us by replying to the message and deleting it from your computer. Thank you. Anesthesia Associates of New Mexico, P.C. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
I just did this yesterday to my boss. He kept referring to BES as BES Enterprise Server, and I kindly informed him that the E in BES was for Enterprise and the S was for Server... That being said, I'll now go back on-topic. I have a Mac server with an attached Xraid that I am responsible for. While administrating it isn't that difficult, the person that set it up (who left just after getting a weeks worth of training on the Mac server and then the following week set it up and then was gone) did not do the AD integration because he said it would cause problems. I think that I would like to integrate it with AD because it seems that it would resolve a lot of issues. I finally had to resort to a scripted copy off to a different location then backup to tape backup solution because it was taking so long to do backups on it with Symantec BE using the Mac agent. The Mac agent kept crashing and not working anytime the server was rebooted, or just at any random time for unknown reasons. I suppose that because I have some Linux experience using the command line stuff on the Mac server was not at all foreign to me. I don't particularly like the Mac server, but honestly, it's not that hard to administrate (but then I think that Linux servers aren't that hard to administrate either once they've been setup and configured). My random thoughts on the topic.. On Wed, Jul 15, 2009 at 11:10 AM, James Rankin kz2...@googlemail.comwrote: I commend you on your pedantic-ness (or should that be *pedanticity? *:-) ). At work, I am referred to as the grammar police 2009/7/15 Mayo, Bill bem...@pittcountync.gov Agreed. I can guarantee you that you would have similar results taking any of our desktop support guys and telling them to setup a new Windows domain. I also can't help but point out that it is Mac, not MAC. Mac is short for Macintosh. MAC stands for Media Access Control ( http://en.wikipedia.org/wiki/Media_Access_Control). Seeing that drives me as crazy as hearing someone say they are going to the ATM machine. -- *From:* Jonathan Link [mailto:jonathan.l...@gmail.com] *Sent:* Wednesday, July 15, 2009 11:55 AM *To:* NT System Admin Issues *Subject:* Re: Apple vs Microsoft? A bench tech does not a network guru make. On Wed, Jul 15, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote: I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.com wrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.comwrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define “manage”. I would expect it manages Mac’s better J. *David Lum** **// *SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 *// *(Cell) 503.267.9764 P.S. I have to LOL
RE: Apple vs Microsoft?
I thought the joke was that it cured pancreatic cancer. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 _ From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, July 15, 2009 10:16 AM To: NT System Admin Issues Subject: Re: Apple vs Microsoft? Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define manage. I would expect it manages Mac's better :-). David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM's at a time, but. -- -Original Message- From: Vue, Za [mailto:z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent the damn thing instead. :) I have a Dell Optiplex 745, 3.0 Ghz, 6/GB RAM, 2x250 GB HD set up as a 64/bit Win08 DC and print server for 23 networked printers. I have 160 users 400+ students in the department. The darn thing is as quiet as my laptop. -Z.V. From: Shawn [sh...@loprestohome.com] Sent: Tuesday, July 14, 2009 10:01 PM To: NT System Admin Issues Subject: Apple vs Microsoft? Does anyone here have any experience, good or bad, regarding the Apple XSERVE being utilized to host email, data storage, open directory, etc as an equivalent replacement for Microsoft Server? We are currently running SBS 2003 and have 40 users, but will soon be upping that number to 150. My boss insists that moving everything over to a Mac environment will be a better long term move, but I am a bit hesitant without having some outside data to back that up. I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network, yet I have had a rough time finding any direct comparisons. If any of you have experience running either a mixed environment with both OS X Server and Windows Server or just a pure OS X environment w/ Mac clients as well, I would be interested to hear what your take on this is. I would also be very interested to here from anyone that has done a migration from Active directory to Open directory, along with any challenges on the user end. What challenges did you face? Are there any specifics that you can offer regarding stability, administration, etc? Thanks in advance for any input you can provide. Shawn ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the
UAC--argh...
So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I'm concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC-honestly, I really don't want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] We Choose The Moon
What day/time? I'm getting rather disappointed with late night TV lately. I'm the type to be at the office till 10pm or later, and watch tv till 2 or 3am. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:43 AM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon Very cool. While we are OT'ing... if y'all ever get a chance, catch the 6-part series Moon Machines (Discovery, Science or NatGeo channel methinks). All about the engineers and processed behind the scenes, as opposed to the more typical focus on the politics and astronaut story. Fascinating stuff that bunch of uber-nerds accomplished. I say that with the greatest respect, obviously... -sc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 10:14 AM To: NT System Admin Issues Subject: [OT] We Choose The Moon This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNDg1Njg1On BqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] We Choose The Moon
It was a six part series I caught about 6 months ago.. and I've seen it occasionally since... not sure when they will opt to air it again, but with the 40th anniversary going on it might be a good time to keep an eye on the guide... -sc -Original Message- From: Phillip Partipilo [mailto:p...@psnet.com] Sent: Wednesday, July 15, 2009 12:42 PM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon What day/time? I'm getting rather disappointed with late night TV lately. I'm the type to be at the office till 10pm or later, and watch tv till 2 or 3am. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:43 AM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon Very cool. While we are OT'ing... if y'all ever get a chance, catch the 6-part series Moon Machines (Discovery, Science or NatGeo channel methinks). All about the engineers and processed behind the scenes, as opposed to the more typical focus on the politics and astronaut story. Fascinating stuff that bunch of uber-nerds accomplished. I say that with the greatest respect, obviously... -sc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 10:14 AM To: NT System Admin Issues Subject: [OT] We Choose The Moon This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNDg1N jg1On BqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: UAC--argh...
Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I’ve been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let’s call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn’t really part of the problem. What I’ve listed above, which is fine on WS03, never seems to be enough permission for UAC, and I’ll get “access denied” errors when trying to apply permissions. If I add my account explicitly (the domain admin I’m logged on as), it then works. But if there is a subfolder (let’s say E:\Files\Butterflies) that I’m not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the “everyone” permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can’t be run in “compatability mode” so I can’t set it to run elevated, but I find that if I run it as administrator I seem to still have problems—it’s almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, *what are you doing to handle this?* Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders—yikes! Would this work with a domain group, as long as it’s not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they’ve made this “better” somehow? 4) When creating a folder, leave permissions at the “default”. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet ( http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I’m not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I’m concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC—honestly, I really don’t want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Who deleted files
Snookered is right I do not have auditing on but will turn it on. Never had this issue but now I know why it's there. I have my suspicions on the user only because they were called out on a bunch of non work related things being done during the work day, but no concrete evidence.. From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, July 15, 2009 10:27 AM To: NT System Admin Issues Subject: Re: Who deleted files Unless you have file auditing turned on, I believe you're kinda snookered. Anyone with the Delete privilege is a suspect 2009/7/15 Robert LeBlanc robert.lebl...@aanmpc.com Hi all, Is there an easy way to see who deleted files from a networks drive. I've been able to restore the files from backup but we'd like to know who deleted initially. The server is Win2K. Thanks, Robert Robert LeBlanc Network Administrator MCP,MCSE Anesthesia Associates of New Mexico, P.C. (P)505-260-4300 (F)505-260-4338 (E)robert.lebl...@aanmpc.com Please note that the information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us by replying to the message and deleting it from your computer. Thank you. Anesthesia Associates of New Mexico, P.C. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: UAC--argh...
Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:46 PM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I'm concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC-honestly, I really don't want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: UAC--argh...
I am just bringing up my first and should be only 08 File server. I am having the same issue so I just put my user ID on the root folder and then after everything is done I will back out removing my direct access as I reset the permissions, owners and auditing. Jon On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I’ve been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let’s call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn’t really part of the problem. What I’ve listed above, which is fine on WS03, never seems to be enough permission for UAC, and I’ll get “access denied” errors when trying to apply permissions. If I add my account explicitly (the domain admin I’m logged on as), it then works. But if there is a subfolder (let’s say E:\Files\Butterflies) that I’m not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the “everyone” permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can’t be run in “compatability mode” so I can’t set it to run elevated, but I find that if I run it as administrator I seem to still have problems—it’s almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, *what are you doing to handle this?* Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders—yikes! Would this work with a domain group, as long as it’s not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they’ve made this “better” somehow? 4) When creating a folder, leave permissions at the “default”. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet ( http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I’m not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I’m concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC—honestly, I really don’t want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: UAC--argh...
Holy C I forgot to do that! That would have made last week much less stressful. Jon On Wed, Jul 15, 2009 at 12:48 PM, Carl Houseman c.house...@gmail.comwrote: Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl *From:* Rob Bonfiglio [mailto:robbonfig...@gmail.com] *Sent:* Wednesday, July 15, 2009 12:46 PM *To:* NT System Admin Issues *Subject:* Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I’ve been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let’s call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn’t really part of the problem. What I’ve listed above, which is fine on WS03, never seems to be enough permission for UAC, and I’ll get “access denied” errors when trying to apply permissions. If I add my account explicitly (the domain admin I’m logged on as), it then works. But if there is a subfolder (let’s say E:\Files\Butterflies) that I’m not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the “everyone” permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can’t be run in “compatability mode” so I can’t set it to run elevated, but I find that if I run it as administrator I seem to still have problems—it’s almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, *what are you doing to handle this?* Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders—yikes! Would this work with a domain group, as long as it’s not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they’ve made this “better” somehow? 4) When creating a folder, leave permissions at the “default”. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet ( http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I’m not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I’m concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC—honestly, I really don’t want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: [OT] We Choose The Moon
Looks like July 20th at 6 and 7pm, and again on July 21st at 2am. http://science.discovery.com/tv-schedules/series.html?paid=48.15013.18.34203.3 On Wed, Jul 15, 2009 at 12:41 PM, Phillip Partipilo p...@psnet.com wrote: What day/time? I'm getting rather disappointed with late night TV lately. I'm the type to be at the office till 10pm or later, and watch tv till 2 or 3am. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:43 AM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon Very cool. While we are OT'ing... if y'all ever get a chance, catch the 6-part series Moon Machines (Discovery, Science or NatGeo channel methinks). All about the engineers and processed behind the scenes, as opposed to the more typical focus on the politics and astronaut story. Fascinating stuff that bunch of uber-nerds accomplished. I say that with the greatest respect, obviously... -sc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 10:14 AM To: NT System Admin Issues Subject: [OT] We Choose The Moon This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNDg1Njg1On BqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: UAC--argh...
MS really needs to more clearly separate object permissions errors from errors generated as a result of lack of elevation, IMO. -sc From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 12:49 PM To: NT System Admin Issues Subject: RE: UAC--argh... Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:46 PM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I'm concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC-honestly, I really don't want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: [OT] We Choose The Moon
On Wed, Jul 15, 2009 at 07:14, Ben Scottmailvor...@gmail.com wrote: This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben July 20th and July 4th are the two days I observe as truly worthy human events. Nothing else is as sacred to me, and I pity the morons who believe the landing was faked. I still remember staying up until all hours watching the landing and walk. I was not quite 12 years old, and my parents understood just who important it was, and had no qualms letting me stay up, and then keep watching again the next day, as long as I wanted. It was magnificent. Best news of the week: NASA has found the lost tapes of the landing and walk, and will be restoring them. They were done with a high quality SSTV recording - apparently what the public has seen was standard resolution, and what's on tape is definitely superior. I'll be acquiring the restoration when released. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] We Choose The Moon
That's the series, although that's only 2 of the 4 episodes. -sc From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:58 PM To: NT System Admin Issues Subject: Re: [OT] We Choose The Moon Looks like July 20th at 6 and 7pm, and again on July 21st at 2am. http://science.discovery.com/tv-schedules/series.html?paid=48.15013.1222 28.34203.3 On Wed, Jul 15, 2009 at 12:41 PM, Phillip Partipilo p...@psnet.com wrote: What day/time? I'm getting rather disappointed with late night TV lately. I'm the type to be at the office till 10pm or later, and watch tv till 2 or 3am. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:43 AM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon Very cool. While we are OT'ing... if y'all ever get a chance, catch the 6-part series Moon Machines (Discovery, Science or NatGeo channel methinks). All about the engineers and processed behind the scenes, as opposed to the more typical focus on the politics and astronaut story. Fascinating stuff that bunch of uber-nerds accomplished. I say that with the greatest respect, obviously... -sc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 10:14 AM To: NT System Admin Issues Subject: [OT] We Choose The Moon This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNDg1Nj g1On BqcEBwc25ldC5jb20%3D http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNDg1N jg1OnBqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] We Choose The Moon
Of course it was faked... how else could they fake the footage that perpetuates the myth that the earth isn't flat? -sc -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, July 15, 2009 1:00 PM To: NT System Admin Issues Subject: Re: [OT] We Choose The Moon On Wed, Jul 15, 2009 at 07:14, Ben Scottmailvor...@gmail.com wrote: ���This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. ���The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos�� It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ ���Needs Flash 10.���Doesn't seem to like Firefox. -- Ben July 20th and July 4th are the two days I observe as truly worthy human events. Nothing else is as sacred to me, and I pity the morons who believe the landing was faked. I still remember staying up until all hours watching the landing and walk. I was not quite 12 years old, and my parents understood just who important it was, and had no qualms letting me stay up, and then keep watching again the next day, as long as I wanted. It was magnificent. Best news of the week: NASA has found the lost tapes of the landing and walk, and will be restoring them. They were done with a high quality SSTV recording - apparently what the public has seen was standard resolution, and what's on tape is definitely superior. I'll be acquiring the restoration when released. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Apple vs Microsoft?
Right up there with my personal fav NIC Card From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: July-15-09 12:03 PM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Agreed. I can guarantee you that you would have similar results taking any of our desktop support guys and telling them to setup a new Windows domain. I also can't help but point out that it is Mac, not MAC. Mac is short for Macintosh. MAC stands for Media Access Control (http://en.wikipedia.org/wiki/Media_Access_Control). Seeing that drives me as crazy as hearing someone say they are going to the ATM machine. _ From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, July 15, 2009 11:55 AM To: NT System Admin Issues Subject: Re: Apple vs Microsoft? A bench tech does not a network guru make. On Wed, Jul 15, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote: I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.com wrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.com wrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define manage. I would expect it manages Mac's better J. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM's at a time, but. -- -Original Message- From: Vue, Za [mailto:z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD. Customize the system to your requirements and you are looking at $6000-$7000 per server. Just to remote into the server requires a $300 extra software. Crazy man.. I torrent
Re: UAC--argh...
We, as administrators, need to get more in tune with the OS again. This is not like the days of NT 4 and Win 98. I blew hours last week because I forgot something as simple as what Carl just said. Jon On Wed, Jul 15, 2009 at 12:59 PM, Steven M. Caesare scaes...@caesare.comwrote: MS really needs to more clearly separate object permissions errors from errors generated as a result of lack of elevation, IMO. -sc *From:* Carl Houseman [mailto:c.house...@gmail.com] *Sent:* Wednesday, July 15, 2009 12:49 PM *To:* NT System Admin Issues *Subject:* RE: UAC--argh... Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl *From:* Rob Bonfiglio [mailto:robbonfig...@gmail.com] *Sent:* Wednesday, July 15, 2009 12:46 PM *To:* NT System Admin Issues *Subject:* Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I’ve been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let’s call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn’t really part of the problem. What I’ve listed above, which is fine on WS03, never seems to be enough permission for UAC, and I’ll get “access denied” errors when trying to apply permissions. If I add my account explicitly (the domain admin I’m logged on as), it then works. But if there is a subfolder (let’s say E:\Files\Butterflies) that I’m not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the “everyone” permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can’t be run in “compatability mode” so I can’t set it to run elevated, but I find that if I run it as administrator I seem to still have problems—it’s almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, *what are you doing to handle this?* Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders—yikes! Would this work with a domain group, as long as it’s not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they’ve made this “better” somehow? 4) When creating a folder, leave permissions at the “default”. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet ( http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I’m not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I’m concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC—honestly, I really don’t want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: UAC--argh...
Yes-If I run cmd as administrator and then run explorer.exe, I still have trouble. That's why I had the question about whether explorer really runs as administrator or whether it is changing with the focus changes. In fact, okay, this is interesting... I run cmd as administrator and just run explorer and navigate to e:\files-I get the UAC prompt when opening the folder. When trying to change permissions, I edit and add someone with read, and get the access denied. If I run cmd as administrator and then run explorer e:\files, to open that folder. Now, I can change perms with no errors, and can even navigate around and still have administrator permissions. What the heck? Can anyone confirm if they see the same thing? I get this on both WS08 and Vista, but our machines are all in the same domain and likely have similar policies. -Create a folder while logged on as a domain admin. -Remove inheritable permissions -Remove all accounts except administrators and system full control, and ok out of the security window. -Edit security again and try to add a group or user. When applying, this is where I get access denied. [cid:image001.jpg@01CA0534.36EB0290] -B From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 9:49 AM To: NT System Admin Issues Subject: RE: UAC--argh... Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:46 PM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I'm concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC-honestly, I really don't want to do this unless there is no other option. -Bonnie ~ Finally,
RE: Apple vs Microsoft?
PIN number _ From: Cameron [mailto:cameron.orl...@gmail.com] Sent: Wednesday, July 15, 2009 12:54 PM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Right up there with my personal fav NIC Card From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: July-15-09 12:03 PM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Agreed. I can guarantee you that you would have similar results taking any of our desktop support guys and telling them to setup a new Windows domain. I also can't help but point out that it is Mac, not MAC. Mac is short for Macintosh. MAC stands for Media Access Control (http://en.wikipedia.org/wiki/Media_Access_Control). Seeing that drives me as crazy as hearing someone say they are going to the ATM machine. _ From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, July 15, 2009 11:55 AM To: NT System Admin Issues Subject: Re: Apple vs Microsoft? A bench tech does not a network guru make. On Wed, Jul 15, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote: I used to work for a consulting firm that actually had both MS and Apple techs. The mac techs were so excited about the I-Server and of course convinced that it would lead the the short demise of all windows servers. Their first install started at 4 pm on a Friday, they were replacing a SBS with this new MAC. It NEVER crossed their minds that they might need an MS tech to help at all with this migration. They called me at 5 p.m. on Saturday. NOTHING worked on either server. These were 2 FULLY certified MAC specialists who were approved to do warrantee work for most everything Apple. The manual for the xserve looked like it had been written by a sales person. It looks to me like no one in that whole org knows JACK about networking. They had not even considered looking at the firewall portion. well anyway, maybe the guys I worked with were the biggest part of that problem, but I don't think so. I think both of them were better than average for MAC techs, but they were lost on server side, and the EASY interface didn't do the job for them. It does have some COOL features. You can pull up any mac's current session and watch them work without them knowing it... Wow. On Wed, Jul 15, 2009 at 10:28 AM, Jonathan Link jonathan.l...@gmail.com wrote: Sure you are. Not that there's anything wrong with that. :-) -Jonathan On Wed, Jul 15, 2009 at 10:16 AM, James Rankin kz2...@googlemail.com wrote: Stick an Apple logon on a lump of Steve Jobs' vomit and Mac users would claim it tasted like pumpkin pie, and looked much cooler than Microsoft puke This is from someone who is sick of hearing a colleague Apple fan-boy bigging up their iPhone by showing us how useful it is, from the lightsabre noises it can make to the fact that there is an app for everything (including the cure for AIDS) Not wanting to reignite the old MS v Apple debate or anything :-) 2009/7/15 David Lum david@nwea.org Your boss might want to consider how hard it may or may not be to find someone to handle the XSERVE thing as well, the talent pool will be smaller and (I would expect) the salaries to be higher. I know of some Mac users that love their Macs unless they need help with it, because so many folks are PC types.. Also I have been told that 150 users can be better managed on two XSERVE's than on a Windows Active directory network Have them define manage. I would expect it manages Mac's better J. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 P.S. I have to LOL Za, I have a Optiplex 745 with 64-bit XP running VMWare Workstation and it is hosting my dev environment: SQL server, web server, misc. development servers (W2K8, Moss2K7, SCCM, etc) and a VM of Win XP. Of course, I can only power up about 4 VM's at a time, but. -- -Original Message- From: Vue, Za [mailto:z...@emory.edu] Sent: Wednesday, July 15, 2009 6:19 AM To: NT System Admin Issues Subject: RE: Apple vs Microsoft? Where does the boss get the idea that a Mac environment will be a better long term move? I still manage one Xserve. Attached to it is an Xraid with 16 hard drives. Used exclusively for data storage. One 400 GB hard drive failed in last 3 years. Controller B was also replaced on the X-Raid. The server is attached to a Win08 AD. Overall the system works well but I am just not a proponent of Mac OS. AD integration has greatly improved with the latest OS. A Dell Optiplex running Windows 2008 for under $1000 can handle 150 users but maybe your company has money to spend. Get two Optiplex'es and cluster them and attach a disk array. The cheapest single Xserve is currently $2999.00 and comes only with a 7200 160gig HD.
Re: UAC--argh...
Try right clicking on Explorer and run as administrator. Jon On Wed, Jul 15, 2009 at 1:08 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: Yes—If I run cmd as administrator and then run explorer.exe, I still have trouble. That’s why I had the question about whether explorer really runs as administrator or whether it is changing with the focus changes. In fact, okay, this is interesting… I run cmd as administrator and just run explorer and navigate to e:\files—I get the UAC prompt when opening the folder. When trying to change permissions, I edit and add someone with read, and get the “access denied”. If I run cmd as administrator and then run “explorer e:\files”, to open that folder. Now, I can change perms with no errors, and can even navigate around and still have administrator permissions. What the heck? Can anyone confirm if they see the same thing? I get this on both WS08 and Vista, but our machines are all in the same domain and likely have similar policies. -Create a folder while logged on as a domain admin. -Remove inheritable permissions -Remove all accounts except administrators and system full control, and ok out of the security window. -Edit security again and try to add a group or user. When applying, this is where I get access denied. -B *From:* Carl Houseman [mailto:c.house...@gmail.com] *Sent:* Wednesday, July 15, 2009 9:49 AM *To:* NT System Admin Issues *Subject:* RE: UAC--argh... Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl *From:* Rob Bonfiglio [mailto:robbonfig...@gmail.com] *Sent:* Wednesday, July 15, 2009 12:46 PM *To:* NT System Admin Issues *Subject:* Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I’ve been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let’s call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn’t really part of the problem. What I’ve listed above, which is fine on WS03, never seems to be enough permission for UAC, and I’ll get “access denied” errors when trying to apply permissions. If I add my account explicitly (the domain admin I’m logged on as), it then works. But if there is a subfolder (let’s say E:\Files\Butterflies) that I’m not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the “everyone” permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can’t be run in “compatability mode” so I can’t set it to run elevated, but I find that if I run it as administrator I seem to still have problems—it’s almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, *what are you doing to handle this?* Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders—yikes! Would this work with a domain group, as long as it’s not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they’ve made this “better” somehow? 4) When creating a folder, leave permissions at the “default”. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet ( http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I’m not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I’m concerned that this might really negate the security benefit of having
RE: UAC--argh...
I'm not much of a script junkie and my co-workers are about the same, so neither of those are good long term options for what we do here. As per my reply to Carl, I have tried just a basic elevated cmd, but not beyond that, such as using icacls. From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 9:46 AM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I'm concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC-honestly, I really don't want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Apple vs Microsoft?
On 15 Jul 2009 at 12:13, Richard Stovall wrote: You must hate PHP and GNU. and Bing (Bing Is Not Google) ;-) -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: UAC--argh...
Sorry-not sure if that one made it into my first post. When I do that, I get the same behavior as if I run an elevated cmd prompt, run explorer, and then navigate to the files-first the UAC elevation prompt, then access denied when editing security. So far, it seems like the only workaround I have is to run an elevated cmd prompt and then explorer E:\pathtofiles to get it to open directly. I just can't imagine that everyone who manages a WS08 file server has to do this??? Is what we are doing with security on folders unique in some way? -B From: Jon Harris [mailto:jk.har...@gmail.com] Sent: Wednesday, July 15, 2009 10:11 AM To: NT System Admin Issues Subject: Re: UAC--argh... Try right clicking on Explorer and run as administrator. Jon On Wed, Jul 15, 2009 at 1:08 PM, Miller Bonnie L. mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote: Yes-If I run cmd as administrator and then run explorer.exe, I still have trouble. That's why I had the question about whether explorer really runs as administrator or whether it is changing with the focus changes. In fact, okay, this is interesting... I run cmd as administrator and just run explorer and navigate to e:\files-I get the UAC prompt when opening the folder. When trying to change permissions, I edit and add someone with read, and get the access denied. If I run cmd as administrator and then run explorer e:\files, to open that folder. Now, I can change perms with no errors, and can even navigate around and still have administrator permissions. What the heck? Can anyone confirm if they see the same thing? I get this on both WS08 and Vista, but our machines are all in the same domain and likely have similar policies. -Create a folder while logged on as a domain admin. -Remove inheritable permissions -Remove all accounts except administrators and system full control, and ok out of the security window. -Edit security again and try to add a group or user. When applying, this is where I get access denied. [cid:image001.jpg@01CA0535.6714C360] -B From: Carl Houseman [mailto:c.house...@gmail.commailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 9:49 AM To: NT System Admin Issues Subject: RE: UAC--argh... Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl From: Rob Bonfiglio [mailto:robbonfig...@gmail.commailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:46 PM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse
RE: [OT] We Choose The Moon
Could that be the When We Left Earth series? I loved that series. I bought them all on iTunes, and accidentially nuked my whole iTunes storage on my home PC and, while I have not tried very hard, haven't been very successful getting the videos off of my iPhone back into the PC. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 12:45 PM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon It was a six part series I caught about 6 months ago.. and I've seen it occasionally since... not sure when they will opt to air it again, but with the 40th anniversary going on it might be a good time to keep an eye on the guide... -sc -Original Message- From: Phillip Partipilo [mailto:p...@psnet.com] Sent: Wednesday, July 15, 2009 12:42 PM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon What day/time? I'm getting rather disappointed with late night TV lately. I'm the type to be at the office till 10pm or later, and watch tv till 2 or 3am. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:43 AM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon Very cool. While we are OT'ing... if y'all ever get a chance, catch the 6-part series Moon Machines (Discovery, Science or NatGeo channel methinks). All about the engineers and processed behind the scenes, as opposed to the more typical focus on the politics and astronaut story. Fascinating stuff that bunch of uber-nerds accomplished. I say that with the greatest respect, obviously... -sc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 10:14 AM To: NT System Admin Issues Subject: [OT] We Choose The Moon This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNDg1N jg1On BqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNTI5OTY2On BqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE
RE: UAC--argh...
I don't deny that. However clear feedback from the OS assists the administrator. And the user. The elevation/access hierarchy (aka UIPI) is almost completely internal, with only mechanisms like icacls for inspecting the relationship between credential and object/action, unlike the object permission mechanism with clearly defined and exposed ACL's. You almost have to have 3rd party tools like AccessChk from SysInternals to see what's going on with permissions. With both mechanisms generically reporting access/permissions errors, I don't think it's too much to ask for clear error feedback. Ya know..even for us lazy admins who want to manage things Win3.1 style. -sc From: Jon Harris [mailto:jk.har...@gmail.com] Sent: Wednesday, July 15, 2009 1:07 PM To: NT System Admin Issues Subject: Re: UAC--argh... We, as administrators, need to get more in tune with the OS again. This is not like the days of NT 4 and Win 98. I blew hours last week because I forgot something as simple as what Carl just said. Jon On Wed, Jul 15, 2009 at 12:59 PM, Steven M. Caesare scaes...@caesare.com wrote: MS really needs to more clearly separate object permissions errors from errors generated as a result of lack of elevation, IMO. -sc From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 12:49 PM To: NT System Admin Issues Subject: RE: UAC--argh... Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:46 PM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I'm concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC-honestly, I really don't want to do this unless there is no other option.
RE: UAC--argh...
And so far, I have added my user id to the folders to get things set up. What I'm faced with (and why I've finally gone over the edge) is that I created a folder like: E:\files With all normal permissions, plus me. And then an automated program created subfolders, with special permission, plus the inherited permissions. Now, when I go back to E:\files and try to take myself off, I get an error as it hits every subfolder that I don't have permission to remove myself. So are other people just leaving themselves on all of the files and folders then? If so, I guess I will try creating a separate domain group and add our file management admin users. -B From: Jon Harris [mailto:jk.har...@gmail.com] Sent: Wednesday, July 15, 2009 9:56 AM To: NT System Admin Issues Subject: Re: UAC--argh... I am just bringing up my first and should be only 08 File server. I am having the same issue so I just put my user ID on the root folder and then after everything is done I will back out removing my direct access as I reset the permissions, owners and auditing. Jon On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or lose anything by doing something like disabling admin approval mode or changing the elevation prompt for administrators. I'm concerned that this might really negate the security benefit of having UAC in the first place on a server. 6) Turn off UAC-honestly, I really don't want to do this unless there is no other option. -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: UAC--argh...
I should have said type 'explorer .' at the command prompt. That is what I always do instinctively b/c I want it focused on the directory I've been looking at from the (elevated) command prompt, usually. I just ran your scenario on Vista and didn't have any problems. Carl From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 1:09 PM To: NT System Admin Issues Subject: RE: UAC--argh... Yes-If I run cmd as administrator and then run explorer.exe, I still have trouble. That's why I had the question about whether explorer really runs as administrator or whether it is changing with the focus changes. In fact, okay, this is interesting. I run cmd as administrator and just run explorer and navigate to e:\files-I get the UAC prompt when opening the folder. When trying to change permissions, I edit and add someone with read, and get the access denied. If I run cmd as administrator and then run explorer e:\files, to open that folder. Now, I can change perms with no errors, and can even navigate around and still have administrator permissions. What the heck? Can anyone confirm if they see the same thing? I get this on both WS08 and Vista, but our machines are all in the same domain and likely have similar policies. -Create a folder while logged on as a domain admin. -Remove inheritable permissions -Remove all accounts except administrators and system full control, and ok out of the security window. -Edit security again and try to add a group or user. When applying, this is where I get access denied. -B From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 9:49 AM To: NT System Admin Issues Subject: RE: UAC--argh... Or elevate a command prompt, then type explorer at the command line and now you have an elevated Explorer. Carl From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:46 PM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I create a folder on the root of the hard drive (let's call it E:\Files). Then, we remove inherited permissions and strip the list down to administrators and system full, and sometimes add domain admins with full, since that is the group here who can work with user files. Then, we assign the permissions for domain groups who need access. Folder can be shared out with Everyone Full, but the sharing isn't really part of the problem. What I've listed above, which is fine on WS03, never seems to be enough permission for UAC, and I'll get access denied errors when trying to apply permissions. If I add my account explicitly (the domain admin I'm logged on as), it then works. But if there is a subfolder (let's say E:\Files\Butterflies) that I'm not added onto, then applying higher level permissions will make it stop and bark about permissions for that subfolder. There can be a lot of subfolders, and it stops on each one. Leaving the everyone permissions or creator owner on there when setting up the folder seems to help sometimes, but then you end up with more permissions than we want on something, and with creator owner there seem to be added permissions. Explorer.exe can't be run in compatability mode so I can't set it to run elevated, but I find that if I run it as administrator I seem to still have problems-it's almost like each time you change the focus in explorer it re-evaluates your credentials. Do other people have this trouble, and if so, what are you doing to handle this? Here are some options I see: 1) Assign explicit permissions for administrative accounts on all files and folders-yikes! Would this work with a domain group, as long as it's not domain admins (or something else in administrators)? 2) Log on with THE local administrator account when we need to work on permissions. (Yuk, getting prompted for domain credentials every time we need to browse the domain to add a group. Also bad having multiple admins logging on the same account all the time). 3) Suck it up and wait for R2, because they've made this better somehow? 4) When creating a folder, leave permissions at the default. Add groups that need access, and restrict the share-level permissions to just those groups (another yuk, especially since we are really getting away from sharing out every folder). 5) Something else? I was reading up on UAC on technet (http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx), but I'm not sure if I could gain or
RE: [OT] We Choose The Moon
No... different... this really focuses on the tech and the teams behind it... the 1000's of geeky unsung heroes, IMO. I have that series recorded too, but not watched all of it yet. That's the Tom Hanks produced series, right? -sc -Original Message- From: Phillip Partipilo [mailto:p...@psnet.com] Sent: Wednesday, July 15, 2009 1:19 PM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon Could that be the When We Left Earth series? I loved that series. I bought them all on iTunes, and accidentially nuked my whole iTunes storage on my home PC and, while I have not tried very hard, haven't been very successful getting the videos off of my iPhone back into the PC. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 12:45 PM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon It was a six part series I caught about 6 months ago.. and I've seen it occasionally since... not sure when they will opt to air it again, but with the 40th anniversary going on it might be a good time to keep an eye on the guide... -sc -Original Message- From: Phillip Partipilo [mailto:p...@psnet.com] Sent: Wednesday, July 15, 2009 12:42 PM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon What day/time? I'm getting rather disappointed with late night TV lately. I'm the type to be at the office till 10pm or later, and watch tv till 2 or 3am. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, July 15, 2009 11:43 AM To: NT System Admin Issues Subject: RE: [OT] We Choose The Moon Very cool. While we are OT'ing... if y'all ever get a chance, catch the 6-part series Moon Machines (Discovery, Science or NatGeo channel methinks). All about the engineers and processed behind the scenes, as opposed to the more typical focus on the politics and astronaut story. Fascinating stuff that bunch of uber-nerds accomplished. I say that with the greatest respect, obviously... -sc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 10:14 AM To: NT System Admin Issues Subject: [OT] We Choose The Moon This year is the 40th anniversary of Apollo 11 -- the first time a human being set foot on another world. The JFK Presidential Library has a website which is providing a real-time simulation/recreation, complete with CGI models, recorded audio, video footage, and photos. It's still on the pad right now. Launch is in less than 24 hours (9:32 AM EDT on 16 July). http://wechoosethemoon.org/ Needs Flash 10. Doesn't seem to like Firefox. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNDg1N jg1On BqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE OF THIS MESSAGE IS PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER AND DELETE THIS MAIL AND ALL ATTACHMENTS. DO NOT FORWARD THIS MESSAGE WITHOUT PERMISSION OF THE SENDER. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- If this email is spam, report it here: http://www.onlymyemail.com/view/?action=reportSpamId=ODEzNjQ6OTMwNTI5O TY2On BqcEBwc25ldC5jb20%3D THIS ELECTRONIC MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL AND PROPRIETARY PROPERTY OF THE SENDER. THE INFORMATION IS INTENDED FOR USE BY THE ADDRESSEE ONLY. ANY OTHER INTERCEPTION, COPYING, ACCESSING, OR DISCLOSURE
