RE: P2V / VHD?
Look at imagex in the WAIK. You can make a WIM of a drive and let PSS figure out how to apply that to a VHD. Or you could do it yourself pretty easily (just create a virtual PC, mount the VHD localy, and apply the WIM to it). Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, September 09, 2009 12:04 AM To: NT System Admin Issues Subject: P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple 'VM Convertor' for the VHD world? I can do Offline or Online; it's just a measly XP OS contained on a SATA Drive I can slave. TIA, Sam Cayze Information Technology Administrator ROLLOUTS ONSITE * ON DEMAND ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Business card scanners
didn't think my Touch Diamond has that ... what is the program named ? Erik Goldoff IT Consultant Systems, Networks, Security _ From: N Parr [mailto:npar...@mortonind.com] Sent: Tuesday, September 08, 2009 3:12 PM To: NT System Admin Issues Subject: RE: Business card scanners My HTC Touch Pro has that, works very well. Does a little preview when you select a field if you need to verify. Rarely have to correct anything. _ From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Tuesday, September 08, 2009 1:57 PM To: NT System Admin Issues Subject: RE: Business card scanners I read about a PDA/cell phone, may have been one of the Omnia. You can take a pic of the business card and it adds it to your contacts. Sync with outlook. Might be available on a phone you already have. From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Tuesday, September 08, 2009 2:14 PM To: NT System Admin Issues Subject: Business card scanners Guys, our sales department has a bunch of business cards they want to enter into a database of some sort. I'm guessing the easiest way to do that is some sort of business card scanner. Anyone got a recommendation for a good scanner for this? Also, any suggestions for software to manage the contacts once they are scanned into the computer? John-AldrichTile-Tools ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~image001.jpgimage002.jpg
RE: Business card scanners
It's not on the Touch Diamond. Might be on the Touch Pro or Touch Pro 2 The Omnia 2 has something similar - quite a nifty little program Cheers Ken From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, 9 September 2009 7:43 PM To: NT System Admin Issues Subject: RE: Business card scanners didn't think my Touch Diamond has that ... what is the program named ? Erik Goldoff IT Consultant Systems, Networks, Security From: N Parr [mailto:npar...@mortonind.com] Sent: Tuesday, September 08, 2009 3:12 PM To: NT System Admin Issues Subject: RE: Business card scanners My HTC Touch Pro has that, works very well. Does a little preview when you select a field if you need to verify. Rarely have to correct anything. From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Tuesday, September 08, 2009 1:57 PM To: NT System Admin Issues Subject: RE: Business card scanners I read about a PDA/cell phone, may have been one of the Omnia. You can take a pic of the business card and it adds it to your contacts. Sync with outlook. Might be available on a phone you already have. From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Tuesday, September 08, 2009 2:14 PM To: NT System Admin Issues Subject: Business card scanners Guys, our sales department has a bunch of business cards they want to enter into a database of some sort. I'm guessing the easiest way to do that is some sort of business card scanner. Anyone got a recommendation for a good scanner for this? Also, any suggestions for software to manage the contacts once they are scanned into the computer? [cid:image001.jpg@01CA3186.2B6D6A10][cid:image002@01ca3186.2b6d6a10] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~inline: image001.jpginline: image002.jpg
RE: Business card scanners
but I wonder if it *could* be ? g Erik Goldoff IT Consultant Systems, Networks, Security _ From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Wednesday, September 09, 2009 7:46 AM To: NT System Admin Issues Subject: RE: Business card scanners It's not on the Touch Diamond. Might be on the Touch Pro or Touch Pro 2 The Omnia 2 has something similar - quite a nifty little program Cheers Ken From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, 9 September 2009 7:43 PM To: NT System Admin Issues Subject: RE: Business card scanners didn't think my Touch Diamond has that ... what is the program named ? Erik Goldoff IT Consultant Systems, Networks, Security _ From: N Parr [mailto:npar...@mortonind.com] Sent: Tuesday, September 08, 2009 3:12 PM To: NT System Admin Issues Subject: RE: Business card scanners My HTC Touch Pro has that, works very well. Does a little preview when you select a field if you need to verify. Rarely have to correct anything. _ From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Tuesday, September 08, 2009 1:57 PM To: NT System Admin Issues Subject: RE: Business card scanners I read about a PDA/cell phone, may have been one of the Omnia. You can take a pic of the business card and it adds it to your contacts. Sync with outlook. Might be available on a phone you already have. From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Tuesday, September 08, 2009 2:14 PM To: NT System Admin Issues Subject: Business card scanners Guys, our sales department has a bunch of business cards they want to enter into a database of some sort. I'm guessing the easiest way to do that is some sort of business card scanner. Anyone got a recommendation for a good scanner for this? Also, any suggestions for software to manage the contacts once they are scanned into the computer? John-AldrichTile-Tools ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~image001.jpgimage002.jpg
RE: P2V / VHD?
VMware converter. I have used converter to import VHD for Windows 2003. Mike _ From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, September 09, 2009 12:04 AM To: NT System Admin Issues Subject: P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple 'VM Convertor' for the VHD world? I can do Offline or Online; it's just a measly XP OS contained on a SATA Drive I can slave. TIA, Sam Cayze Information Technology Administrator ROLLOUTS ONSITE . ON DEMAND ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: P2V / VHD?
That will not work I believe he needs to end up with a VHD. Jon Harris On Wed, Sep 9, 2009 at 8:01 AM, Mike Semon mse...@ont.com wrote: VMware converter. I have used converter to import VHD for Windows 2003. Mike -- *From:* Sam Cayze [mailto:sam.ca...@rollouts.com] *Sent:* Wednesday, September 09, 2009 12:04 AM *To:* NT System Admin Issues *Subject:* P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple ‘VM Convertor’ for the VHD world? I can do Offline or Online; it’s just a measly XP OS contained on a SATA Drive I can slave. TIA, *Sam Cayze* Information Technology Administrator *ROLLOUTS** **ONSITE • ON DEMAND** * ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Windows Storage Server 2008
From: Richard Stovall [mailto:richard.stov...@researchdata.com] Subject: RE: Windows Storage Server 2008 Ah. Gotcha. I've been interested in a DIY Storage Server box for a while and was hoping there was a way to do it now. Just updated my lab article to include the new storage server and writing station: http://www.dabcc.com/article.aspx?id=11764 Webster From: Webster [mailto:carlwebs...@gmail.com] Subject: RE: Windows Storage Server 2008 From: Richard Stovall [mailto:richard.stov...@researchdata.com] Subject: RE: Windows Storage Server 2008 I thought Storage Server was an OEM-only product. Where did you get the license? I see that it's on MSDN, but I can't use that in production. Mine is for my lab. http://www.dabcc.com/article.aspx?id=11464 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Win 7 key
Yes. Did the update, entered the new key - no issues. -Malcolm From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Tuesday, September 08, 2009 3:04 PM To: NT System Admin Issues Subject: RE: Win 7 key While we are on this topic, anyone do the upgrade of their KMS servers to support 2008 R2? I've done the updates on the KMS servers and retrieved my new KMS key but haven't swapped it out yet. Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.com Phone: 610-807-6459 Fax: 610-807-6003 _ From: m...@drumbrae.net [mailto:m...@drumbrae.net] Sent: Tuesday, September 08, 2009 3:59 PM To: NT System Admin Issues Subject: RE: Win 7 key Install KMS server, play with DNS, have a cuppa. http://technet.microsoft.com/en-gb/windows/dd197314.aspx http://technet.microsoft.com/en-us/library/dd772270.aspx Mike From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: 08 September 2009 20:44 To: NT System Admin Issues Subject: RE: Win 7 key Can I hijack this? I've actually never been in a position that manages purchasing licenses. It was always handled by different role. Now I am that role, how does the licensing work in a nutshell? I range between 20 and 30 deployed workstations that will be needing Win7. All of them are using WinXP Volume. They all shipped with Vista OEM's as well. (I skipped Vista). And I would like to upconvert any XP/Vista/Win7 OEM licenses that the machines ship with to Volume. I hate activations. What's the best route? TIA, Sam _ From: Jim Majorowicz [mailto:jmajorow...@gmail.com] Sent: Tuesday, September 08, 2009 12:59 PM To: NT System Admin Issues Subject: RE: Win 7 key Yes and no. It seems that when you purchase any sort of Open license they will now issue KMS keys regardless of how many licenses you purchase. If you don't qualify for a KMS server, you'll need to request MAK keys for your licenses. I've found this needs to be done from the Licensing website, not the eOpen website. From: David Lum [mailto:david@nwea.org] Sent: Tuesday, September 08, 2009 10:19 AM To: NT System Admin Issues Subject: Win 7 key I have licenses for 5 Windows 7 systems but the only key code I received is for KMS, not MAK ones, is this normal? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 _ This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Can't run TaskManager
Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA ®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index.php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
You mentioned that Start - Run - taskmgr returned file not found. Have you verified that %PATH% is still correct, that the .exe actually exists in c:\windows\system32 and that NTFS ACLs haven't been changed? Cheers Ken From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, 9 September 2009 8:47 PM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.commailto:angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.orgmailto:richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.orgmailto:richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.orghttp://www.aspca.org/ The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index.php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
Just for giggles, have you run a search for taskmgr.exe on the affected system? Maybe it got corrupted or something and copying that file across from another machine would work John-AldrichTile-Tools From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 http://www.aspca.org/ www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index.php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.412 / Virus Database: 270.13.87/2356 - Release Date: 09/09/09 06:53:00 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~image001.jpgimage002.jpg
RE: Can't run TaskManager
Please forgive if I've missed an earlier part of this thread. What happens if you: 1) Copy taskmgr.exe from a known-good computer onto your machine and run it manually from the command line with the entire path specified? 2) Run the copy in %windir%\system32 manually from the command line with the entire path specified? My workstation is XP SP3 and the MD5 sum of taskmgr.exe is 2cd1c3506a85b38e2d17e61aded175c4. It has a create date of February 28, 2006, 8:00:00 AM. From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org http://www.aspca.org/ The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index.php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
All but the last one. However, I copied TaskMgr.exe from my own machine onto my desktop on that machine. It would not run from there, either - same error message. Once I'm out of Safe Mode, though, I will check the ACL. Thanks! -- RMc Ken Schaefer k...@adopenstatic.com wrote on 09/09/2009 07:51:57 AM: You mentioned that Start - Run - taskmgr returned ?file not found?. Have you verified that %PATH% is still correct, that the . exe actually exists in c:\windows\system32 and that NTFS ACLs haven? t been changed? Cheers Ken From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, 9 September 2009 8:47 PM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index. php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
Thanks! As I just tolk Ken, that didn't seem to work. However, I had copied it onto the desktop rather than into [admin$\system32\. I'll check the permissions (as well as time/date stamp) on the non-functional file and see if I can move a known good version and get it to work. -- RMc John Aldrich jaldr...@blueridgecarpet.com wrote on 09/09/2009 07:52:58 AM: Just for giggles, have you run a search for taskmgr.exe on the affected system? Maybe it got corrupted or something and copying that file across from another machine would work [image removed] [image removed] From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index. php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.412 / Virus Database: 270.13.87/2356 - Release Date: 09/09/09 06:53:00 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
Yeah Id say if it wont run from the proper location and the permissions are correct, its best to take off and nuke it from orbit its the only way to be sure. J (Saw Aliens this weekend! G) John-AldrichTile-Tools From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:58 AM To: NT System Admin Issues Subject: RE: Can't run TaskManager Thanks! As I just tolk Ken, that didn't seem to work. However, I had copied it onto the desktop rather than into [admin$\system32\. I'll check the permissions (as well as time/date stamp) on the non-functional file and see if I can move a known good version and get it to work. -- RMc John Aldrich jaldr...@blueridgecarpet.com wrote on 09/09/2009 07:52:58 AM: Just for giggles, have you run a search for taskmgr.exe on the affected system? Maybe it got corrupted or something and copying that file across from another machine would work [image removed] [image removed] From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index. php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.412 / Virus Database: 270.13.87/2356 - Release Date: 09/09/09 06:53:00
RE: Can't run TaskManager
Thank you for the checksum details. As your file claims a date of 2006, I am hoping it has not changed since SP2. I'll check these things once the SafeMode MBytes scan completes. -- RMc Richard Stovall richard.stov...@researchdata.com wrote on 09/09/2009 07:54:49 AM: Please forgive if I?ve missed an earlier part of this thread. What happens if you: 1) Copy taskmgr.exe from a known-good computer onto your machine and run it manually from the command line with the entire path specified? 2) Run the copy in %windir%\system32 manually from the command line with the entire path specified? My workstation is XP SP3 and the MD5 sum of taskmgr.exe is 2cd1c3506a85b38e2d17e61aded175c4. It has a create date of February 28, 2006, 8:00:00 AM. From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index. php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: P2V / VHD?
That won't _BUILD_ a VHD tho, will it? -sc From: Mike Semon [mailto:mse...@ont.com] Sent: Wednesday, September 09, 2009 8:02 AM To: NT System Admin Issues Subject: RE: P2V / VHD? VMware converter. I have used converter to import VHD for Windows 2003. Mike From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, September 09, 2009 12:04 AM To: NT System Admin Issues Subject: P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple 'VM Convertor' for the VHD world? I can do Offline or Online; it's just a measly XP OS contained on a SATA Drive I can slave. TIA, Sam Cayze Information Technology Administrator ROLLOUTS ONSITE * ON DEMAND ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: P2V / VHD?
You could use the VMware P2V tool to make a VMware VM then use the free VM converter tool from Starwinds to convert your VMware VM to Microsoft VHD. http://www.starwindsoftware.com/converter I haven't personally used this tool but have friends that have. Matt On Wed, Sep 9, 2009 at 1:03 AM, Sam Cayze sam.ca...@rollouts.com wrote: Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple ‘VM Convertor’ for the VHD world? I can do Offline or Online; it’s just a measly XP OS contained on a SATA Drive I can slave. TIA, *Sam Cayze* Information Technology Administrator *ROLLOUTS** **ONSITE • ON DEMAND** * ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Windows Storage Server 2008
I understand some people's aversion to top posting, but replying within quoted message space (much less in between 2 messages, is hard to follow. -sc From: Webster [mailto:carlwebs...@gmail.com] Sent: Wednesday, September 09, 2009 8:22 AM To: NT System Admin Issues Subject: RE: Windows Storage Server 2008 From: Richard Stovall [mailto:richard.stov...@researchdata.com] Subject: RE: Windows Storage Server 2008 Ah. Gotcha. I've been interested in a DIY Storage Server box for a while and was hoping there was a way to do it now. Just updated my lab article to include the new storage server and writing station: http://www.dabcc.com/article.aspx?id=11764 Webster From: Webster [mailto:carlwebs...@gmail.com] Subject: RE: Windows Storage Server 2008 From: Richard Stovall [mailto:richard.stov...@researchdata.com] Subject: RE: Windows Storage Server 2008 I thought Storage Server was an OEM-only product. Where did you get the license? I see that it's on MSDN, but I can't use that in production. Mine is for my lab. http://www.dabcc.com/article.aspx?id=11464 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Business card scanners
I have an Omnia and it is called Smart Reader on it . Works really well. From: bounce-8652576-8231...@lyris.sunbelt-software.com [mailto:bounce-8652576-8231...@lyris.sunbelt-software.com] Sent: Wednesday, September 09, 2009 07:43 To: NT System Admin Issues Subject: RE: Business card scanners didn't think my Touch Diamond has that ... what is the program named ? Erik Goldoff IT Consultant Systems, Networks, Security _ From: N Parr [mailto:npar...@mortonind.com] Sent: Tuesday, September 08, 2009 3:12 PM To: NT System Admin Issues Subject: RE: Business card scanners My HTC Touch Pro has that, works very well. Does a little preview when you select a field if you need to verify. Rarely have to correct anything. _ From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Tuesday, September 08, 2009 1:57 PM To: NT System Admin Issues Subject: RE: Business card scanners I read about a PDA/cell phone, may have been one of the Omnia. You can take a pic of the business card and it adds it to your contacts. Sync with outlook. Might be available on a phone you already have. From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Tuesday, September 08, 2009 2:14 PM To: NT System Admin Issues Subject: Business card scanners Guys, our sales department has a bunch of business cards they want to enter into a database of some sort. I'm guessing the easiest way to do that is some sort of business card scanner. Anyone got a recommendation for a good scanner for this? Also, any suggestions for software to manage the contacts once they are scanned into the computer? John-AldrichTile-Tools ---AV Spam Filtering by M+Guardian - Risk Free Email (TM)--- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~image001.jpgimage002.jpg
Possible to have GPO assigned software package install at shutdown?
I have a VPN client that I am trying to deploy software to via GPO. The problem is that the client connects via the windows VPN client and it makes the connection after the computer runs it startup scripts and applying the software policy. Is there anyway to have the software install at shutdown instead of startup? The client is XP SP3 and server is W2k3 SP2. TIA, Eric ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
Nuts! SP-2 version is dated earlier - 2004. #1, again, does not work. I'll see about #2 shortly... -- RMc Richard Stovall richard.stov...@researchdata.com wrote on 09/09/2009 07:54:49 AM: Please forgive if I?ve missed an earlier part of this thread. What happens if you: 1) Copy taskmgr.exe from a known-good computer onto your machine and run it manually from the command line with the entire path specified? 2) Run the copy in %windir%\system32 manually from the command line with the entire path specified? My workstation is XP SP3 and the MD5 sum of taskmgr.exe is 2cd1c3506a85b38e2d17e61aded175c4. It has a create date of February 28, 2006, 8:00:00 AM. From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager Thanks... I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. Angus Scott-Fleming angu...@geoapps.com wrote on 09/08/2009 06:00:06 PM: On 8 Sep 2009 at 10:42, richardmccl...@aspca.org wrote: I still cannot run Task Manager on this machine - either by right- clicking the task bar and selecting it, or by Ctrl-Alt-Del and clicking the Task Manager button. SO, I go to the machine and run taskmgr.exe.To that I get a response - the file is not there. Any ideas as to what could have whacked that file? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. Virus/Trojan. I *_know_* I was reading something about this exact problem in the last few days, but I can't find it. Wait, found it in my history Here's what I remember reading: Computer Security Research - McAfee Avert Labs Blog http://www.avertlabs.com/research/blog/index. php/2009/09/01/task-manager- still-working-can-you-change-your-windows-password/ or here if the above wraps unusably: http://preview.tinyurl.com/mbxlkt Original blog, published September 1: We´ve heard about malware that reduce a computer´s state of security. These malware might, for instance, disable your access to the registry, lower Internet Explorer´s security configuration, delete system files, or manipulate the system´s DNS settings. Each of these steps exposes the victim to graver malware infections or system compromise. Yesterday we ran into a Trojan that weakens the victim system´s security by making registry changes. The malware disables Task Manager, Windows Update, and toolbars in Internet Explorer. Further, it does not let you lock your machine or change your password. Anyway, I'd re-image the box. If you want to try to clean, or to figure out what it is, get Process Explorer from Sysinternals, it's a Better TaskMgr and probably won't be blocked like TaskMgr.exe is. HTH, let us know ... -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Possible to have GPO assigned software package install at shutdown?
That is how I do many of them. I also use an if exists clause so it does not run every time. Here is the one I use to reset the computers in windows update. It looks for a text file, if it exists it knows hit has already run...if not it runs and creates it for the next time. if exist c:\wsus.txt goto end echo %date% %time% c:\wsus.txt reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f net stop wuauserv net start wuauserv wuauclt /resetauthorization /detectnow :end -Original Message- From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] Sent: Wednesday, September 09, 2009 9:32 AM To: NT System Admin Issues Subject: Re: Possible to have GPO assigned software package install at shutdown? Hmm, Would I then make a batch file to call the msi? I'll give that a shot. Thanks. On 9/9/09, Kennedy, Jim kennedy...@elyriaschools.org wrote: Assign it as a shutdown script, it is in the computer configuration/windows settings/scripts section. There is both startup and shutdown. -Original Message- From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] Sent: Wednesday, September 09, 2009 9:23 AM To: NT System Admin Issues Subject: Possible to have GPO assigned software package install at shutdown? I have a VPN client that I am trying to deploy software to via GPO. The problem is that the client connects via the windows VPN client and it makes the connection after the computer runs it startup scripts and applying the software policy. Is there anyway to have the software install at shutdown instead of startup? The client is XP SP3 and server is W2k3 SP2. TIA, Eric ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Windows Storage Server 2008
On Wed, Sep 9, 2009 at 9:10 AM, Steven M. Caesare scaes...@caesare.comwrote: I understand some people’s aversion to top posting, but replying within quoted message space (much less in between 2 messages, is hard to follow. Good Luck with that -Jonathan -sc *From:* Webster [mailto:carlwebs...@gmail.com] *Sent:* Wednesday, September 09, 2009 8:22 AM *To:* NT System Admin Issues *Subject:* RE: Windows Storage Server 2008 *From:* Richard Stovall [mailto:richard.stov...@researchdata.com] *Subject:* RE: Windows Storage Server 2008 Ah. Gotcha. I’ve been interested in a DIY Storage Server box for a while and was hoping there was a way to do it now. Just updated my lab article to include the new storage server and writing station: http://www.dabcc.com/article.aspx?id=11764 Webster *From:* Webster [mailto:carlwebs...@gmail.com] *Subject:* RE: Windows Storage Server 2008 *From:* Richard Stovall [mailto:richard.stov...@researchdata.com] *Subject:* RE: Windows Storage Server 2008 I thought Storage Server was an OEM-only product. Where did you get the license? I see that it’s on MSDN, but I can’t use that in production. Mine is for my lab. http://www.dabcc.com/article.aspx?id=11464 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: P2V / VHD?
The OP needs a VHD as an end result. Importing to convert to another format does no good. -sc -Original Message- From: mse...@ont.com [mailto:mse...@ont.com] Sent: Wednesday, September 09, 2009 9:38 AM To: NT System Admin Issues Subject: RE: P2V / VHD? It won't build a VHD image but it will import one. Look at this Microsoft Site for VHD's. they might have one http://technet.microsoft.com/en-us/bb738372.aspx Mike Original Message: - From: Steven M. Caesare scaes...@caesare.com Date: Wed, 9 Sep 2009 09:08:43 -0400 To: ntsysadmin@lyris.sunbelt-software.com Subject: RE: P2V / VHD? That won't _BUILD_ a VHD tho, will it? -sc From: Mike Semon [mailto:mse...@ont.com] Sent: Wednesday, September 09, 2009 8:02 AM To: NT System Admin Issues Subject: RE: P2V / VHD? VMware converter. I have used converter to import VHD for Windows 2003. Mike From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, September 09, 2009 12:04 AM To: NT System Admin Issues Subject: P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple 'VM Convertor' for the VHD world? I can do Offline or Online; it's just a measly XP OS contained on a SATA Drive I can slave. TIA, Sam Cayze Information Technology Administrator ROLLOUTS ONSITE * ON DEMAND ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ mail2web - Check your email from the web at http://link.mail2web.com/mail2web ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Windows Storage Server 2008
[deaned] -sc From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, September 09, 2009 9:39 AM To: NT System Admin Issues Subject: Re: Windows Storage Server 2008 On Wed, Sep 9, 2009 at 9:10 AM, Steven M. Caesare scaes...@caesare.com wrote: I understand some people's aversion to top posting, but replying within quoted message space (much less in between 2 messages, is hard to follow. Good Luck with that -Jonathan -sc From: Webster [mailto:carlwebs...@gmail.com] Sent: Wednesday, September 09, 2009 8:22 AM To: NT System Admin Issues Subject: RE: Windows Storage Server 2008 From: Richard Stovall [mailto:richard.stov...@researchdata.com] Subject: RE: Windows Storage Server 2008 Ah. Gotcha. I've been interested in a DIY Storage Server box for a while and was hoping there was a way to do it now. Just updated my lab article to include the new storage server and writing station: http://www.dabcc.com/article.aspx?id=11764 Webster From: Webster [mailto:carlwebs...@gmail.com] Subject: RE: Windows Storage Server 2008 From: Richard Stovall [mailto:richard.stov...@researchdata.com] Subject: RE: Windows Storage Server 2008 I thought Storage Server was an OEM-only product. Where did you get the license? I see that it's on MSDN, but I can't use that in production. Mine is for my lab. http://www.dabcc.com/article.aspx?id=11464 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Possible to have GPO assigned software package install at shutdown?
Thanks Jim. On 9/9/09, Kennedy, Jim kennedy...@elyriaschools.org wrote: That is how I do many of them. I also use an if exists clause so it does not run every time. Here is the one I use to reset the computers in windows update. It looks for a text file, if it exists it knows hit has already run...if not it runs and creates it for the next time. if exist c:\wsus.txt goto end echo %date% %time% c:\wsus.txt reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f net stop wuauserv net start wuauserv wuauclt /resetauthorization /detectnow :end -Original Message- From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] Sent: Wednesday, September 09, 2009 9:32 AM To: NT System Admin Issues Subject: Re: Possible to have GPO assigned software package install at shutdown? Hmm, Would I then make a batch file to call the msi? I'll give that a shot. Thanks. On 9/9/09, Kennedy, Jim kennedy...@elyriaschools.org wrote: Assign it as a shutdown script, it is in the computer configuration/windows settings/scripts section. There is both startup and shutdown. -Original Message- From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] Sent: Wednesday, September 09, 2009 9:23 AM To: NT System Admin Issues Subject: Possible to have GPO assigned software package install at shutdown? I have a VPN client that I am trying to deploy software to via GPO. The problem is that the client connects via the windows VPN client and it makes the connection after the computer runs it startup scripts and applying the software policy. Is there anyway to have the software install at shutdown instead of startup? The client is XP SP3 and server is W2k3 SP2. TIA, Eric ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: P2V / VHD?
I was just about to post this one as well. Sent from my Verizon Wireless BlackBerry -Original Message- From: Matt Plahtinsky cbusitl...@gmail.com Date: Wed, 9 Sep 2009 09:10:02 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Subject: Re: P2V / VHD? You could use the VMware P2V tool to make a VMware VM then use the free VM converter tool from Starwinds to convert your VMware VM to Microsoft VHD. http://www.starwindsoftware.com/converter I haven't personally used this tool but have friends that have. Matt On Wed, Sep 9, 2009 at 1:03 AM, Sam Cayze sam.ca...@rollouts.com wrote: Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simpleÿ‘VM Convertÿÿ’ for the VHD world? I can do Offline or Online; ÿÿ’s just a measly XP OS contained on a SATA Drive I can slave. TIA, *Sam Cayze* Information Technology Administrator *ROLLOUTS** **ONSITEÿ• ON DEMAND** * ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: P2V / VHD?
Look like there isn't an obvious answer. Thanks for the ideas. I even asked the support rep helping about the quickest way to do this. He said the quickest way to get it to him is to skip VHD and give him a VMDK. WOW. MS Support just told me to they would prefer a VMware image over their own product. I'll think I'll stick to VMware products for a while... :) Sam -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, September 09, 2009 8:40 AM To: NT System Admin Issues Subject: RE: P2V / VHD? The OP needs a VHD as an end result. Importing to convert to another format does no good. -sc -Original Message- From: mse...@ont.com [mailto:mse...@ont.com] Sent: Wednesday, September 09, 2009 9:38 AM To: NT System Admin Issues Subject: RE: P2V / VHD? It won't build a VHD image but it will import one. Look at this Microsoft Site for VHD's. they might have one http://technet.microsoft.com/en-us/bb738372.aspx Mike Original Message: - From: Steven M. Caesare scaes...@caesare.com Date: Wed, 9 Sep 2009 09:08:43 -0400 To: ntsysadmin@lyris.sunbelt-software.com Subject: RE: P2V / VHD? That won't _BUILD_ a VHD tho, will it? -sc From: Mike Semon [mailto:mse...@ont.com] Sent: Wednesday, September 09, 2009 8:02 AM To: NT System Admin Issues Subject: RE: P2V / VHD? VMware converter. I have used converter to import VHD for Windows 2003. Mike From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, September 09, 2009 12:04 AM To: NT System Admin Issues Subject: P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple 'VM Convertor' for the VHD world? I can do Offline or Online; it's just a measly XP OS contained on a SATA Drive I can slave. TIA, Sam Cayze Information Technology Administrator ROLLOUTS ONSITE * ON DEMAND ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ mail2web - Check your email from the web at http://link.mail2web.com/mail2web ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Can't run TaskManager
It's time to cut your losses and wipe-and-reload the system. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Windows Storage Server 2008
[deaned] yea, I can't follow those posts either:) But I have to ask, WTF does deaned mean? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Can't run TaskManager
I would have thought that when he found a root kit on the machine. Once one of those has been found only God will know if you find all the rest of the stuff that may have been installed. Jon On Wed, Sep 9, 2009 at 10:01 AM, Ben Scott mailvor...@gmail.com wrote: It's time to cut your losses and wipe-and-reload the system. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Can't run TaskManager
Who said anything about finding a root kit on THIS machine? We are finding absolutely nothing but losing the ability to run taskmgr.exe. -- RMc Jon Harris jk.har...@gmail.com wrote on 09/09/2009 09:15:40 AM: I would have thought that when he found a root kit on the machine. Once one of those has been found only God will know if you find all the rest of the stuff that may have been installed. Jon On Wed, Sep 9, 2009 at 10:01 AM, Ben Scott mailvor...@gmail.com wrote: It's time to cut your losses and wipe-and-reload the system. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
I wonder - what happens if you run Process Monitor, and then try to run Taskmgr.exe. Might give you a clue as to what it's not finding Cheers Ken From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, 9 September 2009 10:37 PM To: NT System Admin Issues Subject: Re: Can't run TaskManager Yes, and sorry for the confusion. It was a neighbor's home machine that would not let me boot into SafeMode. That one is frightening! (I told her that, as her son built it up for her and supposedly maintains it, it would really be up to him to wipe and re-build.) This machine here, again, the only(!) symptom we've found is the inability to run TaskMgr.exe. Tasklist.exe (a CLI) works fine (well, anyway, it appears to work fine). Anyway, like Ben and another or two have said, it's time to wipe this one. Don't know when a very-well-hidden bot is going to show up (but not show up in TaskMgr because that's been whacked). -- RMc Jon Harris jk.har...@gmail.commailto:jk.har...@gmail.com wrote on 09/09/2009 09:27:59 AM: At 8:46 am today you wrote this. I've checked the other symptoms. All pass, except for not being able to run TaskMgr.exe. The CLI app TaskList.exe runs fine, as does the ability to lock the screen, change password, run Windows Update, turn IE tool bars on-and-off, etc. I have now booted into Safe Mode (I ran across a root kit that prevented that recently) and am running a full MBytes scan in Safe Mode. Again, I am _not_ finding any of the registry settings which have been reported elswhere. You did? Were you possibly talking about another machine? Jon On Wed, Sep 9, 2009 at 10:19 AM, richardmccl...@aspca.orgmailto:richardmccl...@aspca.org wrote: Who said anything about finding a root kit on THIS machine? We are finding absolutely nothing but losing the ability to run taskmgr.exe. -- RMc Jon Harris jk.har...@gmail.commailto:jk.har...@gmail.com wrote on 09/09/2009 09:15:40 AM: I would have thought that when he found a root kit on the machine. Once one of those has been found only God will know if you find all the rest of the stuff that may have been installed. Jon On Wed, Sep 9, 2009 at 10:01 AM, Ben Scott mailvor...@gmail.commailto:mailvor...@gmail.com wrote: It's time to cut your losses and wipe-and-reload the system. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Profile loading problem
No, this is on the server she's logging onto, using a domain account. On Wed, Sep 9, 2009 at 10:54 AM, Daniel Rodriguez drod...@gmail.com wrote: Is this happening on the workstation? On Wed, Sep 9, 2009 at 10:43 AM, Jeff Bunting bunting.j...@gmail.comwrote: Have a problem with a particular user not being able to load her profile (locked) when logging onto a system and getting a temporary one instead. I turned on userenv logging and see that it is trying to create one from backup: (username sid edited) ExtractProfileFromBackup: Failed to open key Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-...-6346 with error 2 RegRenameKey: renaming Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-...-6346.bak to Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-...-6346 ExtractProfileFromBackup: Profile created from Backup PatchNewProfileIfRequred: A profile already exists with the current sid, exitting CreateLocalProfileKey: user S-1-5-21-...-6346 is local, not setting preference key GetExistingLocalProfileImage: Found entry in profile list for existing local profile GetExistingLocalProfileImage: Local profile image filename = %SystemDrive%\Documents and Settings\Alvin GetExistingLocalProfileImage: Expanded local profile image filename = M:\Documents and Settings\Alvin GetExistingLocalProfileImage: No local mandatory profile. Error = 2 GetExistingLocalProfileImage: Found local profile image file ok M:\Documents and Settings\Alvin\ntuser.dat GetExistingLocalProfileImage: Failed to query low profile unload time with error 2 Local Existing Profile Image is reachable Local profile name is M:\Documents and Settings\Alvin RestoreUserProfile: No central profile. Attempting to load local profile. MyRegLoadKey: Failed to load subkey S-1-5-21-...-6346, error =32 MyRegLoadKey: Returning 0020 RestoreUserProfile: MyRegLoadKey returned FALSE. ReportError: Impersonating user. ReportError: Logging Error Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile. If this problem persists, contact your network administrator. DETAIL - The process cannot access the file because it is being used by another process. Looking in the registry under HKLM\Software\Micorsoft\Window NT\CurrentVersion\ProfileList, I see S-1-5-21-...-6346.bak, but not one without a bak extension. I'm starting to think maybe there is some sort of permission problem not allowing this to be saved in the registry. Does that sound reasonable? System is Win2003 SP2, running Citrix. Only one user is affected. UPHCLEAN does not help. Thanks, Jeff ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Can't run TaskManager
Thinking aloud: Opening a command console and entering c:\windows\system32\taskmgr.exe returns a file or path not found.This tells me that none of the other methods will work and other results are as expected Looking at Process Monitor I see Task Manager calls C:\WINDOWS\WinSxS\ x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83 I wonder if that path existed? That might give the path not found message, time to play with a VM to see if I can dupe that message. Dave From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 8:47 AM To: NT System Admin Issues Subject: RE: Can't run TaskManager I can give you a quick summary (I've already told Help Desk to wipe it, fearing a bot): TaskMgr.exe will not run from the task bar menu or from the Ctrl-Alt-Del button bar. Nothing happens. Opening a command console and entering c:\windows\system32\taskmgr.exe returns a file or path not found. Opening a command console and entering c:\windows\system32\tasklist.exe (or even skipping the path) DOES return a list of running tasks and properties. Browsing with Explorer to .\system32 shows the TaskMgr.exe icon. In its properties sheets, all is identical with the same file on functional systems. Copying said file to the affected machine fixes nothing - all the above actions return the file or path not found message. Double-clicking the TaskMgr.exe icon returns a pop-up saying file or path not found. The known registry changes for other systems (world-wide) reporting the loss of TaskMgr are not found. These reports also mention other functions lost, such as WindowsUpdate, not being able to lock the screen, no toolbars for IE, etc. On this system though, all these functions appear to work. Deep scan with VIPRE and full scan with MalwareBytes (both in regular mode and with the machine booted into SafeMode) find nothing. CHKDSK /f and reboot fixes nothing. -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA(r) 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.orghttp://www.aspca.org/ The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. David Lum david@nwea.org wrote on 09/09/2009 10:20:27 AM: Quicker yes, but I'm super curious about this one and have been following this thread closely, I was hoping to find out what it was even though I have no systems with this issue. Dave -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, September 09, 2009 7:55 AM To: NT System Admin Issues Subject: Re: Can't run TaskManager On Wed, Sep 9, 2009 at 10:36 AM, richardmccl...@aspca.org wrote: Anyway, like Ben and another or two have said, it's time to wipe this one. Don't know when a very-well-hidden bot is going to show up (but not show up in TaskMgr because that's been whacked). It might not even be malware, but some accidentally screwed up registry setting or class registration or system library or whatever. Finding it will take forever, assuming it's even possible. Quicker to wipe and reload. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Windows Storage Server 2008
Not everyone has been on the list forever... On Wed, Sep 9, 2009 at 10:28 AM, Doug Hampshire dhampsh...@gmail.comwrote: Next you'll be say you don't know what missying or dr*wing are either. shakes head On Wed, Sep 9, 2009 at 10:13 AM, Joseph L. Casale jcas...@activenetwerx.com wrote: [deaned] yea, I can't follow those posts either:) But I have to ask, WTF does deaned mean? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
That's the issue, thanks Ken. The other DC is not showing these settings within the policy in sysvol. Is there a way to check this replication, to verify that it is even setup? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] web - HDTV
Vista/Win7 Media Center. -sc From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. - Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: P2V / VHD?
One route you could go is using ImageX from the WAIK and passing the resulting WIM through this script - http://code.msdn.microsoft.com/wim2vhd Thanks, Brad DeHart Network Systems Administrator Kern Health Systems (661)664-5068 br...@khs-net.commailto:br...@khs-net.com From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Tuesday, September 08, 2009 10:04 PM To: NT System Admin Issues Subject: P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple 'VM Convertor' for the VHD world? I can do Offline or Online; it's just a measly XP OS contained on a SATA Drive I can slave. TIA, Sam Cayze Information Technology Administrator ROLLOUTS ONSITE * ON DEMAND Kern Health Systems Confidentiality Statement: This email and any attachments are legally privileged and can contain business proprietary and/or confidential information intended for a specific individual and purpose. This information is intended only for the use of the individual or entity named above. The authorized recipient of this information is prohibited from disclosing this information to any other party unless required to do so by law or regulation and is required to destroy the information after its stated need has been fulfilled. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of these documents is strictly prohibited. If you have received this information in error, please notify the sender immediately and arrange for the return or destruction of these documents. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
Do you have the support tools installed anywhere? You can use replmon (GUI) or repadmin (CLI) to check/force replication. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 12:30 PM To: NT System Admin Issues Subject: RE: group policy updating That's the issue, thanks Ken. The other DC is not showing these settings within the policy in sysvol. Is there a way to check this replication, to verify that it is even setup? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
That's what I'm looking at now. Should that be run on the source, or target machine, or does it matter? Also, is replmon available for 2k8? The server I've been making the changes on is 2K8, and the replication is happening to one of my 2K3 DCs, but not the other. Richard Stovall richard.stov...@researchdata.com 9/9/2009 9:34 AM Do you have the support tools installed anywhere? You can use replmon (GUI) or repadmin (CLI) to check/force replication. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 12:30 PM To: NT System Admin Issues Subject: RE: group policy updating That's the issue, thanks Ken. The other DC is not showing these settings within the policy in sysvol. Is there a way to check this replication, to verify that it is even setup? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Weird Lotus Notes issue
Greetings! We are a Lotus Notes shop... For some reason, some folks posting here show up both in my NTSysAdmin folder AND in my Junk mail folder. It is the same address, same message, etc. If I delete them in one folder, then the copy in the other folder is gone as well. If I read the posting in one folder, it is marked Read in the other. (I've learned that if Richard Stovall, for example, shows in the Junk mail folder, to NOT delete it until I've read it.) I tried unblocking him, for example, but Notes informed me I would first need to add him to my personal address book. Anyone else see this bit of weirdness? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA ®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: P2V / VHD?
WAIK/ImageX is something I have wanted to get going anyway. I want to move away from Ghost soon. Thanks. From: Brad DeHart [mailto:br...@khs-net.com] Sent: Wednesday, September 09, 2009 11:35 AM To: NT System Admin Issues Subject: RE: P2V / VHD? One route you could go is using ImageX from the WAIK and passing the resulting WIM through this script - http://code.msdn.microsoft.com/wim2vhd Thanks, Brad DeHart Network Systems Administrator Kern Health Systems (661)664-5068 br...@khs-net.com mailto:br...@khs-net.com From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Tuesday, September 08, 2009 10:04 PM To: NT System Admin Issues Subject: P2V / VHD? Being a complete ESX shop over here, I have no idea to how to do a one off VHD of an XP Image that I need to send to MS Support for troubleshooting. All the provided MS solutions seem to require building up a whole dang infrastructure; ADS servers and SQL and the whole 9 yards. Is there just a simple 'VM Convertor' for the VHD world? I can do Offline or Online; it's just a measly XP OS contained on a SATA Drive I can slave. TIA, Sam Cayze Information Technology Administrator ROLLOUTS ONSITE * ON DEMAND Kern Health Systems Confidentiality Statement: This email and any attachments are legally privileged and can contain business proprietary and/or confidential information intended for a specific individual and purpose. This information is intended only for the use of the individual or entity named above. The authorized recipient of this information is prohibited from disclosing this information to any other party unless required to do so by law or regulation and is required to destroy the information after its stated need has been fulfilled. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of these documents is strictly prohibited. If you have received this information in error, please notify the sender immediately and arrange for the return or destruction of these documents. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
This site (http://www.infotechguyz.com/server2008/server2008supporttools.html) makes it seem like the Support Tools are included with 2008 but have to be added as a feature. Our DCs are 2003 SP2 so that's the version of the Support Tools I use. I've got the 2003 SP2 support tools on my XP SP3 workstation and can run both replmon and repadmin locally. This site from MS (http://blogs.technet.com/askds/archive/2009/07/01/getting-over-replmon. aspx) describes Getting over replmon and how to use repadmin effectively for many situations. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 12:45 PM To: NT System Admin Issues Subject: RE: group policy updating That's what I'm looking at now. Should that be run on the source, or target machine, or does it matter? Also, is replmon available for 2k8? The server I've been making the changes on is 2K8, and the replication is happening to one of my 2K3 DCs, but not the other. Richard Stovall richard.stov...@researchdata.com 9/9/2009 9:34 AM Do you have the support tools installed anywhere? You can use replmon (GUI) or repadmin (CLI) to check/force replication. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 12:30 PM To: NT System Admin Issues Subject: RE: group policy updating That's the issue, thanks Ken. The other DC is not showing these settings within the policy in sysvol. Is there a way to check this replication, to verify that it is even setup? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint
Re: Weird Lotus Notes issue
Welcome to the world of Lotus Notes :-) What version of LN are you using? I'm using 8.5 and I just right-click on an email in the junk folder and select 'Unblock'. There is also a Manage List option in the Junk mail view where you can remove blocked addresses. Not sure about earlier versions. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com From: richardmccl...@aspca.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 09/09/2009 17:50 Subject: Weird Lotus Notes issue Greetings! We are a Lotus Notes shop... For some reason, some folks posting here show up both in my NTSysAdmin folder AND in my Junk mail folder. It is the same address, same message, etc. If I delete them in one folder, then the copy in the other folder is gone as well. If I read the posting in one folder, it is marked Read in the other. (I've learned that if Richard Stovall, for example, shows in the Junk mail folder, to NOT delete it until I've read it.) I tried unblocking him, for example, but Notes informed me I would first need to add him to my personal address book. Anyone else see this bit of weirdness? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA ®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. http://www.quinn-insurance.com This e-mail is intended only for the addressee named above. The contents should not be copied nor disclosed to any other person. Any views or opinions expressed are solely those of the sender and do not necessarily represent those of QUINN-Insurance, unless otherwise specifically stated . As internet communications are not secure, QUINN-Insurance is not responsible for the contents of this message nor responsible for any change made to this message after it was sent by the original sender. Although virus scanning is used on all inbound and outbound e-mail, we advise you to carry out your own virus check before opening any attachment. We cannot accept liability for any damage sustained as a result of any software viruses. QUINN-Life Direct Limited is regulated by the Financial Regulator. QUINN-Insurance Limited is regulated by the Financial Regulator and regulated by the Financial Services Authority for the conduct of UK business. QUINN-Life Direct Limited is registered in Ireland, registration number 292374 and is a private company limited by shares. QUINN-Insurance Limited is registered in Ireland, registration number 240768 and is a private company limited by shares. Both companies have their head office at Dublin Road, Cavan, Co. Cavan. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Weird Lotus Notes issue
Labeled as junk by the system... Story of my life... From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Wednesday, September 09, 2009 12:50 PM To: NT System Admin Issues Subject: Weird Lotus Notes issue Greetings! We are a Lotus Notes shop... For some reason, some folks posting here show up both in my NTSysAdmin folder AND in my Junk mail folder. It is the same address, same message, etc. If I delete them in one folder, then the copy in the other folder is gone as well. If I read the posting in one folder, it is marked Read in the other. (I've learned that if Richard Stovall, for example, shows in the Junk mail folder, to NOT delete it until I've read it.) I tried unblocking him, for example, but Notes informed me I would first need to add him to my personal address book. Anyone else see this bit of weirdness? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA(r) 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org http://www.aspca.org/ The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
So, I've now looked at this with replmon. It is showing all replications successful. It shows: DC=domain CN=Configuration,DC=domain CN=Schema,CN=Configuration,DC=domain DC=DomainDNSZones,DC=domain DC=ForestDNSZones,DC=domain All of these are showing successful, within the last 15 minutes. Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Weird Lotus Notes issue
Here's the only real solution I've found. http://tinyurl.com/669el8 From: tony patton [mailto:tony.pat...@quinn-insurance.com] Sent: Wednesday, September 09, 2009 1:06 PM To: NT System Admin Issues Subject: Re: Weird Lotus Notes issue Welcome to the world of Lotus Notes :-) What version of LN are you using? I'm using 8.5 and I just right-click on an email in the junk folder and select 'Unblock'. There is also a Manage List option in the Junk mail view where you can remove blocked addresses. Not sure about earlier versions. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com From: richardmccl...@aspca.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 09/09/2009 17:50 Subject: Weird Lotus Notes issue _ Greetings! We are a Lotus Notes shop... For some reason, some folks posting here show up both in my NTSysAdmin folder AND in my Junk mail folder. It is the same address, same message, etc. If I delete them in one folder, then the copy in the other folder is gone as well. If I read the posting in one folder, it is marked Read in the other. (I've learned that if Richard Stovall, for example, shows in the Junk mail folder, to NOT delete it until I've read it.) I tried unblocking him, for example, but Notes informed me I would first need to add him to my personal address book. Anyone else see this bit of weirdness? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCAR 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 http://www.aspca.org/ www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to AnimalsR (ASPCAR) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. http://www.quinn-insurance.com This e-mail is intended only for the addressee named above. The contents should not be copied nor disclosed to any other person. Any views or opinions expressed are solely those of the sender and do not necessarily represent those of QUINN-Insurance, unless otherwise specifically stated . As internet communications are not secure, QUINN-Insurance is not responsible for the contents of this message nor responsible for any change made to this message after it was sent by the original sender. Although virus scanning is used on all inbound and outbound e-mail, we advise you to carry out your own virus check before opening any attachment. We cannot accept liability for any damage sustained as a result of any software viruses. QUINN-Life Direct Limited is regulated by the Financial Regulator. QUINN-Insurance Limited is regulated by the Financial Regulator and regulated by the Financial Services Authority for the conduct of UK business. QUINN-Life Direct Limited is registered in Ireland, registration number 292374 and is a private company limited by shares. QUINN-Insurance Limited is registered in Ireland, registration number 240768 and is a private company limited by shares. Both companies have their head office at Dublin Road, Cavan, Co. Cavan. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Weird Lotus Notes issue
J From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Wednesday, September 09, 2009 1:11 PM To: NT System Admin Issues Subject: RE: Weird Lotus Notes issue Here's the only real solution I've found... http://tinyurl.com/669el8 From: tony patton [mailto:tony.pat...@quinn-insurance.com] Sent: Wednesday, September 09, 2009 1:06 PM To: NT System Admin Issues Subject: Re: Weird Lotus Notes issue Welcome to the world of Lotus Notes :-) What version of LN are you using? I'm using 8.5 and I just right-click on an email in the junk folder and select 'Unblock'. There is also a Manage List option in the Junk mail view where you can remove blocked addresses. Not sure about earlier versions. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com From: richardmccl...@aspca.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 09/09/2009 17:50 Subject: Weird Lotus Notes issue Greetings! We are a Lotus Notes shop... For some reason, some folks posting here show up both in my NTSysAdmin folder AND in my Junk mail folder. It is the same address, same message, etc. If I delete them in one folder, then the copy in the other folder is gone as well. If I read the posting in one folder, it is marked Read in the other. (I've learned that if Richard Stovall, for example, shows in the Junk mail folder, to NOT delete it until I've read it.) I tried unblocking him, for example, but Notes informed me I would first need to add him to my personal address book. Anyone else see this bit of weirdness? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA(r) 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org http://www.aspca.org/ The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. http://www.quinn-insurance.com This e-mail is intended only for the addressee named above. The contents should not be copied nor disclosed to any other person. Any views or opinions expressed are solely those of the sender and do not necessarily represent those of QUINN-Insurance, unless otherwise specifically stated . As internet communications are not secure, QUINN-Insurance is not responsible for the contents of this message nor responsible for any change made to this message after it was sent by the original sender. Although virus scanning is used on all inbound and outbound e-mail, we advise you to carry out your own virus check before opening any attachment. We cannot accept liability for any damage sustained as a result of any software viruses. QUINN-Life Direct Limited is regulated by the Financial Regulator. QUINN-Insurance Limited is regulated by the Financial Regulator and regulated by the Financial Services Authority for the conduct of UK business. QUINN-Life Direct Limited is registered in Ireland, registration number 292374 and is a private company limited by shares. QUINN-Insurance Limited is registered in Ireland, registration number 240768 and is a private company limited by shares. Both companies have their head office at Dublin Road, Cavan, Co. Cavan. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Weird Lotus Notes issue
True, and we'd like to. It ain't cheap! Some day far far into the future... (AppleMail?) -- RMc Rod Trent rodtr...@myitforum.com wrote on 09/09/2009 12:11:01 PM: Here?s the only real solution I?ve found? http://tinyurl.com/669el8 From: tony patton [mailto:tony.pat...@quinn-insurance.com] Sent: Wednesday, September 09, 2009 1:06 PM To: NT System Admin Issues Subject: Re: Weird Lotus Notes issue Welcome to the world of Lotus Notes :-) What version of LN are you using? I'm using 8.5 and I just right-click on an email in the junk folder and select 'Unblock'. There is also a Manage List option in the Junk mail view where you can remove blocked addresses. Not sure about earlier versions. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com From: richardmccl...@aspca.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 09/09/2009 17:50 Subject: Weird Lotus Notes issue Greetings! We are a Lotus Notes shop... For some reason, some folks posting here show up both in my NTSysAdmin folder AND in my Junk mail folder. It is the same address, same message, etc. If I delete them in one folder, then the copy in the other folder is gone as well. If I read the posting in one folder, it is marked Read in the other. (I've learned that if Richard Stovall, for example, shows in the Junk mail folder, to NOT delete it until I've read it.) I tried unblocking him, for example, but Notes informed me I would first need to add him to my personal address book. Anyone else see this bit of weirdness? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. http://www.quinn-insurance.com This e-mail is intended only for the addressee named above. The contents should not be copied nor disclosed to any other person. Any views or opinions expressed are solely those of the sender and do not necessarily represent those of QUINN-Insurance, unless otherwise specifically stated . As internet communications are not secure, QUINN-Insurance is not responsible for the contents of this message nor responsible for any change made to this message after it was sent by the original sender. Although virus scanning is used on all inbound and outbound e-mail, we advise you to carry out your own virus check before opening any attachment. We cannot accept liability for any damage sustained as a result of any software viruses. QUINN-Life Direct Limited is regulated by the Financial Regulator. QUINN-Insurance Limited is regulated by the Financial Regulator and regulated by the Financial Services Authority for the conduct of UK business. QUINN-Life Direct Limited is registered in Ireland, registration number 292374 and is a private company limited by shares. QUINN-Insurance Limited is registered in Ireland, registration number 240768 and is a private company limited by shares. Both companies have their head office at Dublin Road, Cavan, Co. Cavan. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Windows Storage Server 2008
Cripes, I have been on it for ages... Steven has enlightened me none the less:) From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, September 09, 2009 10:04 AM To: NT System Admin Issues Subject: Re: Windows Storage Server 2008 Not everyone has been on the list forever... On Wed, Sep 9, 2009 at 10:28 AM, Doug Hampshire dhampsh...@gmail.commailto:dhampsh...@gmail.com wrote: Next you'll be say you don't know what missying or dr*wing are either. shakes head On Wed, Sep 9, 2009 at 10:13 AM, Joseph L. Casale jcas...@activenetwerx.commailto:jcas...@activenetwerx.com wrote: [deaned] yea, I can't follow those posts either:) But I have to ask, WTF does deaned mean? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Can't run TaskManager
Not really. Tripwire or one of its workalikes such as samhain can do a great job for executables, though samhain requires cygwin. If you really want, you can use the md5sum from gnuwin32.sf.net, and use that against the Windows and Program Files directories, and store those on CD. Storing the hashes on CD is a good thing. It requires a lot of up-front work, which, of course, I've never done, as I'm lazy, but it's something... Kurt On Wed, Sep 9, 2009 at 07:15, Jon Harrisjk.har...@gmail.com wrote: I would have thought that when he found a root kit on the machine. Once one of those has been found only God will know if you find all the rest of the stuff that may have been installed. Jon On Wed, Sep 9, 2009 at 10:01 AM, Ben Scott mailvor...@gmail.com wrote: It's time to cut your losses and wipe-and-reload the system. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Weird Lotus Notes issue
1 comedians out of work... From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Wednesday, September 09, 2009 12:14 PM To: NT System Admin Issues Subject: RE: Weird Lotus Notes issue J From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Wednesday, September 09, 2009 1:11 PM To: NT System Admin Issues Subject: RE: Weird Lotus Notes issue Here's the only real solution I've found... http://tinyurl.com/669el8 From: tony patton [mailto:tony.pat...@quinn-insurance.com] Sent: Wednesday, September 09, 2009 1:06 PM To: NT System Admin Issues Subject: Re: Weird Lotus Notes issue Welcome to the world of Lotus Notes :-) What version of LN are you using? I'm using 8.5 and I just right-click on an email in the junk folder and select 'Unblock'. There is also a Manage List option in the Junk mail view where you can remove blocked addresses. Not sure about earlier versions. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com From: richardmccl...@aspca.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 09/09/2009 17:50 Subject: Weird Lotus Notes issue Greetings! We are a Lotus Notes shop... For some reason, some folks posting here show up both in my NTSysAdmin folder AND in my Junk mail folder. It is the same address, same message, etc. If I delete them in one folder, then the copy in the other folder is gone as well. If I read the posting in one folder, it is marked Read in the other. (I've learned that if Richard Stovall, for example, shows in the Junk mail folder, to NOT delete it until I've read it.) I tried unblocking him, for example, but Notes informed me I would first need to add him to my personal address book. Anyone else see this bit of weirdness? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA(r) 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org http://www.aspca.org/ The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. http://www.quinn-insurance.com This e-mail is intended only for the addressee named above. The contents should not be copied nor disclosed to any other person. Any views or opinions expressed are solely those of the sender and do not necessarily represent those of QUINN-Insurance, unless otherwise specifically stated . As internet communications are not secure, QUINN-Insurance is not responsible for the contents of this message nor responsible for any change made to this message after it was sent by the original sender. Although virus scanning is used on all inbound and outbound e-mail, we advise you to carry out your own virus check before opening any attachment. We cannot accept liability for any damage sustained as a result of any software viruses. QUINN-Life Direct Limited is regulated by the Financial Regulator. QUINN-Insurance Limited is regulated by the Financial Regulator and regulated by the Financial Services Authority for the conduct of UK business. QUINN-Life Direct Limited is registered in Ireland, registration number 292374 and is a private company limited by shares. QUINN-Insurance Limited is registered in Ireland, registration number 240768 and is a private company limited by shares. Both companies have their head office at Dublin Road, Cavan, Co. Cavan. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: Profile loading problem
The user has to be logging into the server from a workstation, right? Has the user attempted logon from a different workstation? On Wed, Sep 9, 2009 at 11:26 AM, Jeff Bunting bunting.j...@gmail.comwrote: No, this is on the server she's logging onto, using a domain account. On Wed, Sep 9, 2009 at 10:54 AM, Daniel Rodriguez drod...@gmail.comwrote: Is this happening on the workstation? On Wed, Sep 9, 2009 at 10:43 AM, Jeff Bunting bunting.j...@gmail.comwrote: Have a problem with a particular user not being able to load her profile (locked) when logging onto a system and getting a temporary one instead. I turned on userenv logging and see that it is trying to create one from backup: (username sid edited) ExtractProfileFromBackup: Failed to open key Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-...-6346 with error 2 RegRenameKey: renaming Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-...-6346.bak to Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-...-6346 ExtractProfileFromBackup: Profile created from Backup PatchNewProfileIfRequred: A profile already exists with the current sid, exitting CreateLocalProfileKey: user S-1-5-21-...-6346 is local, not setting preference key GetExistingLocalProfileImage: Found entry in profile list for existing local profile GetExistingLocalProfileImage: Local profile image filename = %SystemDrive%\Documents and Settings\Alvin GetExistingLocalProfileImage: Expanded local profile image filename = M:\Documents and Settings\Alvin GetExistingLocalProfileImage: No local mandatory profile. Error = 2 GetExistingLocalProfileImage: Found local profile image file ok M:\Documents and Settings\Alvin\ntuser.dat GetExistingLocalProfileImage: Failed to query low profile unload time with error 2 Local Existing Profile Image is reachable Local profile name is M:\Documents and Settings\Alvin RestoreUserProfile: No central profile. Attempting to load local profile. MyRegLoadKey: Failed to load subkey S-1-5-21-...-6346, error =32 MyRegLoadKey: Returning 0020 RestoreUserProfile: MyRegLoadKey returned FALSE. ReportError: Impersonating user. ReportError: Logging Error Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile. If this problem persists, contact your network administrator. DETAIL - The process cannot access the file because it is being used by another process. Looking in the registry under HKLM\Software\Micorsoft\Window NT\CurrentVersion\ProfileList, I see S-1-5-21-...-6346.bak, but not one without a bak extension. I'm starting to think maybe there is some sort of permission problem not allowing this to be saved in the registry. Does that sound reasonable? System is Win2003 SP2, running Citrix. Only one user is affected. UPHCLEAN does not help. Thanks, Jeff ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Free Utility to Copy Share and NTFS Permissions from One SAN Disk to Another
Some of us still have entry level tech's. I would rather make it harder to get it to work, than have a oops, everyone now has full rights to the CEO's personal folder. On the rare occasion that a tech goofs on permissions, they have to goof twice if using shares. -Original Message- From: James Rankin [mailto:kz2...@googlemail.com] Sent: Friday, September 04, 2009 12:47 AM To: NT System Admin Issues Subject: Re: Free Utility to Copy Share and NTFS Permissions from One SAN Disk to Another Whoa! Someone uses share permissions? I thought share permissions were just a hangover from the Win9x days (or when people installed NT4 with FAT32 file system instead of NTFS) to provide some security for those systems that couldn't do it on a file level. I'd use this opportunity to knock the share permissions on the head and drop them to Everyone:Full Control. They generally end up as the reason you can't work out why someone can't access a file. 2009/9/3 Terri Esham terri.es...@noaa.gov: What is the best free tool to copy share and NTFS permissions from one SAN disk to another. I have already tried Robocopy and it did copy the NTFS permission but not the Share permissions. I need to move a large amount of folders from one SAN disk to another and I don't want to have to recreate all the shares. The file server is running Windows 2008 Standard Server, SP2, all critical updates installed. Any help will be greatly appreciated. Thanks, Terri ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
I have now enabled verbose logging on one of the clients not working. Under Debug\User Mode, there is a gpsvc file, showing group policy stuff. In this file, it doesn't show that the client ever found the Member Server Policy, which contains the login banner. However, when I run gpresult /S computername /V |more, it shows the Member Server Policy listed under Computer Settings - Applied Group Policy Objects. But, again, if I scroll down through the report, it shows the settings that were already part of the Member Server Policy, but not the new changes I made yesterday. This client I'm looking at now, is connecting to a DC that does have the new settings in the policy under Sysvol. Richard Stovall richard.stov...@researchdata.com 9/9/2009 10:55 AM Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
RE: group policy updating
And you have no replication errors at all anywhere? Are all your DCs in the same site? Is there anything complex or unusual about your AD structure? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 2:47 PM To: NT System Admin Issues Subject: RE: group policy updating I have now enabled verbose logging on one of the clients not working. Under Debug\User Mode, there is a gpsvc file, showing group policy stuff. In this file, it doesn't show that the client ever found the Member Server Policy, which contains the login banner. However, when I run gpresult /S computername /V |more, it shows the Member Server Policy listed under Computer Settings - Applied Group Policy Objects. But, again, if I scroll down through the report, it shows the settings that were already part of the Member Server Policy, but not the new changes I made yesterday. This client I'm looking at now, is connecting to a DC that does have the new settings in the policy under Sysvol. Richard Stovall richard.stov...@researchdata.com 9/9/2009 10:55 AM Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool, using my account on the boxes in question, and the results come back saying that the desired group policy is supposed to be affecting it. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally,
RE: group policy updating
One of the DCs is in a Warm site, the other two are virtualized in the same server room. All three of the DCs are listed in the same site in AD Sites Services. Replmon is showing successful replication for everything it lists. Richard Stovall richard.stov...@researchdata.com 9/9/2009 12:03 PM And you have no replication errors at all anywhere? Are all your DCs in the same site? Is there anything complex or unusual about your AD structure? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 2:47 PM To: NT System Admin Issues Subject: RE: group policy updating I have now enabled verbose logging on one of the clients not working. Under Debug\User Mode, there is a gpsvc file, showing group policy stuff. In this file, it doesn't show that the client ever found the Member Server Policy, which contains the login banner. However, when I run gpresult /S computername /V |more, it shows the Member Server Policy listed under Computer Settings - Applied Group Policy Objects. But, again, if I scroll down through the report, it shows the settings that were already part of the Member Server Policy, but not the new changes I made yesterday. This client I'm looking at now, is connecting to a DC that does have the new settings in the policy under Sysvol. Richard Stovall richard.stov...@researchdata.com 9/9/2009 10:55 AM Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local Security Policy, grayed out, which tells me it's getting it from GP. Other machines don't seem to be updating, even after sitting for a while.The successes and failures vary from 2k3 to 2k8, physical, and virtual boxes. Anyone have any idea what I can look at to troubleshoot this? I've gone into GPMC, and run the Group Policy Results tool,
Re: [OT] web - HDTV
http://www.netgear.com/Products/Entertainment/DigitalMediaPlayers/EVA8000.aspx http://www.netgear.com/Products/Entertainment/DigitalMediaPlayers/EVA8000.aspxSeems to be the buzz at the moment. Anybody use Boxee? On Wed, Sep 9, 2009 at 10:31 AM, Steven M. Caesare scaes...@caesare.comwrote: Vista/Win7 Media Center. -sc *From:* G.Waleed Kavalec [mailto:kava...@gmail.com] *Sent:* Wednesday, September 09, 2009 11:08 AM *To:* NT System Admin Issues *Subject:* [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. — Joan Walsh Anglund -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. — Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
If you right-click on the each of the DCs in replmon and choose Show Group Policy Object Status, do you see the same information for all three Domain Controllers? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 3:17 PM To: NT System Admin Issues Subject: RE: group policy updating One of the DCs is in a Warm site, the other two are virtualized in the same server room. All three of the DCs are listed in the same site in AD Sites Services. Replmon is showing successful replication for everything it lists. Richard Stovall richard.stov...@researchdata.com 9/9/2009 12:03 PM And you have no replication errors at all anywhere? Are all your DCs in the same site? Is there anything complex or unusual about your AD structure? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 2:47 PM To: NT System Admin Issues Subject: RE: group policy updating I have now enabled verbose logging on one of the clients not working. Under Debug\User Mode, there is a gpsvc file, showing group policy stuff. In this file, it doesn't show that the client ever found the Member Server Policy, which contains the login banner. However, when I run gpresult /S computername /V |more, it shows the Member Server Policy listed under Computer Settings - Applied Group Policy Objects. But, again, if I scroll down through the report, it shows the settings that were already part of the Member Server Policy, but not the new changes I made yesterday. This client I'm looking at now, is connecting to a DC that does have the new settings in the policy under Sysvol. Richard Stovall richard.stov...@researchdata.com 9/9/2009 10:55 AM Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added manually either to the Local Security Policy, or directly to the registry. I've gone in, deleted any entries in these two locations, I've run gpupdate /force, and logged out and back in. When I do this, some machines show the correct banner, and show it in Local
RE: [OT] web - HDTV
http://www.popcornhour.com From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 3:31 PM To: NT System Admin Issues Subject: Re: [OT] web - HDTV http://www.netgear.com/Products/Entertainment/DigitalMediaPlayers/EVA800 0.aspx Seems to be the buzz at the moment. Anybody use Boxee? On Wed, Sep 9, 2009 at 10:31 AM, Steven M. Caesare scaes...@caesare.com wrote: Vista/Win7 Media Center. -sc From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. - Joan Walsh Anglund -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. - Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] web - HDTV
That thing is a media streamer it looks like. You wanted live web feeds? If you are content to stream, check out the Popcorn Hour too. -sc From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 3:31 PM To: NT System Admin Issues Subject: Re: [OT] web - HDTV http://www.netgear.com/Products/Entertainment/DigitalMediaPlayers/EVA800 0.aspx Seems to be the buzz at the moment. Anybody use Boxee? On Wed, Sep 9, 2009 at 10:31 AM, Steven M. Caesare scaes...@caesare.com wrote: Vista/Win7 Media Center. -sc From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. - Joan Walsh Anglund -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. - Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
The DC without the updates has an X in the Sync status column, and showing different version numbers between the version number and the SysVol version. The other two are the same as each other. Richard Stovall richard.stov...@researchdata.com 9/9/2009 12:31 PM If you right-click on the each of the DCs in replmon and choose Show Group Policy Object Status, do you see the same information for all three Domain Controllers? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 3:17 PM To: NT System Admin Issues Subject: RE: group policy updating One of the DCs is in a Warm site, the other two are virtualized in the same server room. All three of the DCs are listed in the same site in AD Sites Services. Replmon is showing successful replication for everything it lists. Richard Stovall richard.stov...@researchdata.com 9/9/2009 12:03 PM And you have no replication errors at all anywhere? Are all your DCs in the same site? Is there anything complex or unusual about your AD structure? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 2:47 PM To: NT System Admin Issues Subject: RE: group policy updating I have now enabled verbose logging on one of the clients not working. Under Debug\User Mode, there is a gpsvc file, showing group policy stuff. In this file, it doesn't show that the client ever found the Member Server Policy, which contains the login banner. However, when I run gpresult /S computername /V |more, it shows the Member Server Policy listed under Computer Settings - Applied Group Policy Objects. But, again, if I scroll down through the report, it shows the settings that were already part of the Member Server Policy, but not the new changes I made yesterday. This client I'm looking at now, is connecting to a DC that does have the new settings in the policy under Sysvol. Richard Stovall richard.stov...@researchdata.com 9/9/2009 10:55 AM Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, and check it again in the morning... Thanks, Joe L. Heaton Devin Meade devin.me...@gmail.com 9/8/2009 2:33 PM Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heatonjhea...@dfg.ca.gov wrote: I'm updating a group policy, to add a login banner. Some of the machines in question had one, but they were added
RE: group policy updating
It's far easier and more thorough to check GPOs with GPOtool.exe (ResKit). AD can be replicating fine but if FRS is having issues so can your GPO. It will evaluate both the GPT (sysvol portion replicated by FRS) and the GPC (AD portion replicated by DS replication) for any inconsistencies. It can optionally check the sysvol ACL which can also be a problem occasionally. I would run gpotool /checkacl from a system in the domain that is encountering issues. That way you can rule out any inconsistencies with the GPO plumbing on all the DCs before you start mucking around with clients. -Original Message- From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Wednesday, September 09, 2009 12:32 PM To: NT System Admin Issues Subject: RE: group policy updating If you right-click on the each of the DCs in replmon and choose Show Group Policy Object Status, do you see the same information for all three Domain Controllers? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 3:17 PM To: NT System Admin Issues Subject: RE: group policy updating One of the DCs is in a Warm site, the other two are virtualized in the same server room. All three of the DCs are listed in the same site in AD Sites Services. Replmon is showing successful replication for everything it lists. Richard Stovall richard.stov...@researchdata.com 9/9/2009 12:03 PM And you have no replication errors at all anywhere? Are all your DCs in the same site? Is there anything complex or unusual about your AD structure? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 2:47 PM To: NT System Admin Issues Subject: RE: group policy updating I have now enabled verbose logging on one of the clients not working. Under Debug\User Mode, there is a gpsvc file, showing group policy stuff. In this file, it doesn't show that the client ever found the Member Server Policy, which contains the login banner. However, when I run gpresult /S computername /V |more, it shows the Member Server Policy listed under Computer Settings - Applied Group Policy Objects. But, again, if I scroll down through the report, it shows the settings that were already part of the Member Server Policy, but not the new changes I made yesterday. This client I'm looking at now, is connecting to a DC that does have the new settings in the policy under Sysvol. Richard Stovall richard.stov...@researchdata.com 9/9/2009 10:55 AM Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an exception. I have a 2K8 virtual box, that is connecting to the DC that I made the changes to in GPMC. The server that is definitely showing the new additions to the policy. This server is not showing the updates under RSoP. The gpupdate /force says it worked successfully, and there were no errors in the Application log. Normally, I would just wait for the change, but it has been almost a full day now, without the change coming through. Any other ideas? Ken Schaefer k...@adopenstatic.com 9/9/2009 9:17 AM If RSOP is not showing the setting, then check the DC that your client is connecting to, to see what *it* thinks the policy should be (e.g. load GPMC and target that DC). Verify that the relevant GPO objects in sysvol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It does show other settings from that GPO, but those were already in effect prior to me adding the banner. But the banner isn't coming up. I'm guessing I'm going to have to bounce the servers that aren't taking it, at this point, as there has been plenty of time for policy updates, both manual by me, and automatically through the system. Ken Schaefer k...@adopenstatic.com 9/8/2009 9:13 PM Check event logs for any GPO processing errors Check your DC replication status to work out whether the GPO has actually replicated to the DCs that these clients are talking to etc Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at
RE: group policy updating
So, after I run the gpotool /checkacl, I ended up piping it to a text file, and the errors it finds, are version mismatches on the server I knew about. Here's where I stand: 3 DCs MoDC01 - 2K3 Virtual MoDC04 - 2K8 Virtual WSDC02 - 2K3 Physical GPMC is installed on MoDC04, and that's where I made the GP change. The change is to a policy we call Member Server Policy, and I added a login banner to it. Prior to this change, the login banner that existed was input manually, most into the Local Security Policy, and a few to the registry at: Machine\Software\Microsoft\Windows NT\Winlogin\. Immediately after applying the GPO change on MoDC04, I went back through the servers that were set manually before, and deleted the entries in Local Security Policy, and the registry (data, not the keys themselves) Yesterday afternoon, I noticed some client servers weren't updating the GPO. I tried gpupdate /force with no luck. This morning, after troubleshooting, I found that the bad clients are connected to various DCs for logonserver. Also found out that MoDC01 does not have the changes made to the GPO. MoDC04 and WSDC02 are both the same, with the latest changes. I've looked at replmon, which shows all sucesses. I've turned on verbose logging on a client server that is having issues, and it doesn't list the Member Server Policy at all. I've used gpotool, and the errors it shows are the version mismatches on MoDC01. There's nothing in that report showing lack of rights/credentials to process the GPOs. Bottom line: I have client servers that are not updating this new GPO, some trying to get it from MoDC01, some trying to get it from WSDC02, and one or two trying to get it from MoDC04. Free, Bob r...@pge.com 9/9/2009 12:45 PM It's far easier and more thorough to check GPOs with GPOtool.exe (ResKit). AD can be replicating fine but if FRS is having issues so can your GPO. It will evaluate both the GPT (sysvol portion replicated by FRS) and the GPC (AD portion replicated by DS replication) for any inconsistencies. It can optionally check the sysvol ACL which can also be a problem occasionally. I would run gpotool /checkacl from a system in the domain that is encountering issues. That way you can rule out any inconsistencies with the GPO plumbing on all the DCs before you start mucking around with clients. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: group policy updating
Joe- First thing you need to do is figure out what is causing the version mismatch and correct it, then tackle the client side issues. Any of your clients could be encountering the problem and not processing policy correctly. I assuming that gpotool told you something like Error: Version mismatch on DCx, DS=12345, sysvol=45678 and only one of these sysvol versions is mismatched? Further assumption is that you have a problem with FRS since a) you said your DS replication was OK, and b) that's almost always what it is IME. Look at the FRS logs on that DC and see what they say and we can take it from there. Depending on what is going on with FRS, sometimes it is as simple as making an insignificant change to the GPO, saving it, undoing said change and saving it again and waiting for the new version number to replicate out. /aside I've seen %logonserver% mentioned a couple of times, you can't put a lot of store in that evar because your GPOs are based on a DFS referral for the SYSVOL[1].The DC a client is currently communicating with (aka SecureChannel) is not necessarily the same as the server that authenticated you interactively. What is actually used can change from that server for a variety of reasons. The :logonserver% evar also isn't maintained, it is set once at logon and stays that way until you log off and log on again. So all you can really count on it for is to tell you who authenticated your interactive logon. On the box I am typing this on, all three (%logonserver, SecureChannel sysvol) are different DC's. If you want to know where you are getting your sysvol share from do: dfsutil /pktinfo and look for the entry something like [dc1.full.domain.name\sysvol] State:0x131 ( ACTIVE ) [1] The system volume is a domain-based DFS root, and each domain controller in the domain hosts a link replica of the share. To locate the system volume, a client computer queries the logon server for a list of DFS link replicas. The logon server returns a list of all servers in DFS that host the system volume. This list is in random order. Servers that are located in the same site that the client computer is located in are put at the top of the list. A user can be authenticated by one domain controller, and can download policies from another domain controller in the site. ./aside -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:31 PM To: NT System Admin Issues Subject: RE: group policy updating So, after I run the gpotool /checkacl, I ended up piping it to a text file, and the errors it finds, are version mismatches on the server I knew about. Here's where I stand: 3 DCs MoDC01 - 2K3 Virtual MoDC04 - 2K8 Virtual WSDC02 - 2K3 Physical GPMC is installed on MoDC04, and that's where I made the GP change. The change is to a policy we call Member Server Policy, and I added a login banner to it. Prior to this change, the login banner that existed was input manually, most into the Local Security Policy, and a few to the registry at: Machine\Software\Microsoft\Windows NT\Winlogin\. Immediately after applying the GPO change on MoDC04, I went back through the servers that were set manually before, and deleted the entries in Local Security Policy, and the registry (data, not the keys themselves) Yesterday afternoon, I noticed some client servers weren't updating the GPO. I tried gpupdate /force with no luck. This morning, after troubleshooting, I found that the bad clients are connected to various DCs for logonserver. Also found out that MoDC01 does not have the changes made to the GPO. MoDC04 and WSDC02 are both the same, with the latest changes. I've looked at replmon, which shows all sucesses. I've turned on verbose logging on a client server that is having issues, and it doesn't list the Member Server Policy at all. I've used gpotool, and the errors it shows are the version mismatches on MoDC01. There's nothing in that report showing lack of rights/credentials to process the GPOs. Bottom line: I have client servers that are not updating this new GPO, some trying to get it from MoDC01, some trying to get it from WSDC02, and one or two trying to get it from MoDC04. Free, Bob r...@pge.com 9/9/2009 12:45 PM It's far easier and more thorough to check GPOs with GPOtool.exe (ResKit). AD can be replicating fine but if FRS is having issues so can your GPO. It will evaluate both the GPT (sysvol portion replicated by FRS) and the GPC (AD portion replicated by DS replication) for any inconsistencies. It can optionally check the sysvol ACL which can also be a problem occasionally. I would run gpotool /checkacl from a system in the domain that is encountering issues. That way you can rule out any inconsistencies with the GPO plumbing on all the DCs before you start mucking around with clients. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~
RE: group policy updating
Bob, Thanks for the explanation, it makes it more logical for me. I looked in the FRS logs, and there's one error repeated over and over, from around July sometime. It's an Event ID: 13559, Source: NtFrs. It says that the FRS has detected that the replica root path has changed from c:\windows\sysvol\domain to c:\windows\sysvol\domain. Seems like the same exact path to me, but oh well. It also says that a file with the name NTFRS_CMD_FILE_MOVE_ROOT needs to be created under the new root path. I looked in that path, and that file was there...almost. There was no underline between FILE and MOVE. I've fixed that, and we'll see in the morning if FRS is working again. In the meantime, I've gone back into the client machines that weren't taking the GPO update and manually added the login banner to their Local Security Policy. Should I go back and delete that again, in hopes that the GPO does it tonight, or should I leave it until tomorrow, and see if it works then? Free, Bob r...@pge.com 9/9/2009 2:46 PM Joe- First thing you need to do is figure out what is causing the version mismatch and correct it, then tackle the client side issues. Any of your clients could be encountering the problem and not processing policy correctly. I assuming that gpotool told you something like Error: Version mismatch on DCx, DS=12345, sysvol=45678 and only one of these sysvol versions is mismatched? Further assumption is that you have a problem with FRS since a) you said your DS replication was OK, and b) that's almost always what it is IME. Look at the FRS logs on that DC and see what they say and we can take it from there. Depending on what is going on with FRS, sometimes it is as simple as making an insignificant change to the GPO, saving it, undoing said change and saving it again and waiting for the new version number to replicate out. /aside I've seen %logonserver% mentioned a couple of times, you can't put a lot of store in that evar because your GPOs are based on a DFS referral for the SYSVOL[1].The DC a client is currently communicating with (aka SecureChannel) is not necessarily the same as the server that authenticated you interactively. What is actually used can change from that server for a variety of reasons. The :logonserver% evar also isn't maintained, it is set once at logon and stays that way until you log off and log on again. So all you can really count on it for is to tell you who authenticated your interactive logon. On the box I am typing this on, all three (%logonserver, SecureChannel sysvol) are different DC's. If you want to know where you are getting your sysvol share from do: dfsutil /pktinfo and look for the entry something like [dc1.full.domain.name\sysvol] State:0x131 ( ACTIVE ) [1] The system volume is a domain-based DFS root, and each domain controller in the domain hosts a link replica of the share. To locate the system volume, a client computer queries the logon server for a list of DFS link replicas. The logon server returns a list of all servers in DFS that host the system volume. This list is in random order. Servers that are located in the same site that the client computer is located in are put at the top of the list. A user can be authenticated by one domain controller, and can download policies from another domain controller in the site. ./aside -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:31 PM To: NT System Admin Issues Subject: RE: group policy updating So, after I run the gpotool /checkacl, I ended up piping it to a text file, and the errors it finds, are version mismatches on the server I knew about. Here's where I stand: 3 DCs MoDC01 - 2K3 Virtual MoDC04 - 2K8 Virtual WSDC02 - 2K3 Physical GPMC is installed on MoDC04, and that's where I made the GP change. The change is to a policy we call Member Server Policy, and I added a login banner to it. Prior to this change, the login banner that existed was input manually, most into the Local Security Policy, and a few to the registry at: Machine\Software\Microsoft\Windows NT\Winlogin\. Immediately after applying the GPO change on MoDC04, I went back through the servers that were set manually before, and deleted the entries in Local Security Policy, and the registry (data, not the keys themselves) Yesterday afternoon, I noticed some client servers weren't updating the GPO. I tried gpupdate /force with no luck. This morning, after troubleshooting, I found that the bad clients are connected to various DCs for logonserver. Also found out that MoDC01 does not have the changes made to the GPO. MoDC04 and WSDC02 are both the same, with the latest changes. I've looked at replmon, which shows all sucesses. I've turned on verbose logging on a client server that is having issues, and it doesn't list the Member Server Policy at all. I've used gpotool, and the errors it shows are the version mismatches on MoDC01. There's nothing
RE: group policy updating
Joe- Did you bounce the offending FRS service? Depending on the size of the replica set, all could be well in a few minutes but AFAIK you must restart FRS. Since you have it in your Local Policy which I assume makes any regulatory-types happy, I'd just leave it till you have time to troubleshoot it further if that is necessary. Fixing FRS should resolve the problem if everything else is right. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 3:22 PM To: NT System Admin Issues Subject: RE: group policy updating Bob, Thanks for the explanation, it makes it more logical for me. I looked in the FRS logs, and there's one error repeated over and over, from around July sometime. It's an Event ID: 13559, Source: NtFrs. It says that the FRS has detected that the replica root path has changed from c:\windows\sysvol\domain to c:\windows\sysvol\domain. Seems like the same exact path to me, but oh well. It also says that a file with the name NTFRS_CMD_FILE_MOVE_ROOT needs to be created under the new root path. I looked in that path, and that file was there...almost. There was no underline between FILE and MOVE. I've fixed that, and we'll see in the morning if FRS is working again. In the meantime, I've gone back into the client machines that weren't taking the GPO update and manually added the login banner to their Local Security Policy. Should I go back and delete that again, in hopes that the GPO does it tonight, or should I leave it until tomorrow, and see if it works then? Free, Bob r...@pge.com 9/9/2009 2:46 PM Joe- First thing you need to do is figure out what is causing the version mismatch and correct it, then tackle the client side issues. Any of your clients could be encountering the problem and not processing policy correctly. I assuming that gpotool told you something like Error: Version mismatch on DCx, DS=12345, sysvol=45678 and only one of these sysvol versions is mismatched? Further assumption is that you have a problem with FRS since a) you said your DS replication was OK, and b) that's almost always what it is IME. Look at the FRS logs on that DC and see what they say and we can take it from there. Depending on what is going on with FRS, sometimes it is as simple as making an insignificant change to the GPO, saving it, undoing said change and saving it again and waiting for the new version number to replicate out. /aside I've seen %logonserver% mentioned a couple of times, you can't put a lot of store in that evar because your GPOs are based on a DFS referral for the SYSVOL[1].The DC a client is currently communicating with (aka SecureChannel) is not necessarily the same as the server that authenticated you interactively. What is actually used can change from that server for a variety of reasons. The :logonserver% evar also isn't maintained, it is set once at logon and stays that way until you log off and log on again. So all you can really count on it for is to tell you who authenticated your interactive logon. On the box I am typing this on, all three (%logonserver, SecureChannel sysvol) are different DC's. If you want to know where you are getting your sysvol share from do: dfsutil /pktinfo and look for the entry something like [dc1.full.domain.name\sysvol] State:0x131 ( ACTIVE ) [1] The system volume is a domain-based DFS root, and each domain controller in the domain hosts a link replica of the share. To locate the system volume, a client computer queries the logon server for a list of DFS link replicas. The logon server returns a list of all servers in DFS that host the system volume. This list is in random order. Servers that are located in the same site that the client computer is located in are put at the top of the list. A user can be authenticated by one domain controller, and can download policies from another domain controller in the site. ./aside -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:31 PM To: NT System Admin Issues Subject: RE: group policy updating So, after I run the gpotool /checkacl, I ended up piping it to a text file, and the errors it finds, are version mismatches on the server I knew about. Here's where I stand: 3 DCs MoDC01 - 2K3 Virtual MoDC04 - 2K8 Virtual WSDC02 - 2K3 Physical GPMC is installed on MoDC04, and that's where I made the GP change. The change is to a policy we call Member Server Policy, and I added a login banner to it. Prior to this change, the login banner that existed was input manually, most into the Local Security Policy, and a few to the registry at: Machine\Software\Microsoft\Windows NT\Winlogin\. Immediately after applying the GPO change on MoDC04, I went back through the servers that were set manually before, and deleted the entries in Local Security Policy, and the registry (data, not the keys themselves) Yesterday afternoon, I noticed some client servers weren't
RE: [OT] web - HDTV
not sure about your area, but comcast where I live is going to transition their channels above channel 27 to digital transmission over cable on October 13th, requiring their digital box to view those stations. ( The digital channel transmission takes less cable bandwidth than the current analog channels, and they intend on using the newly re-gained bandwidth for on-demand and other pay based content. I currently have a WinXP based Media Center PC with tuner card and I'm gonna loose the ability to view stations above channel 27 when they make the switch. I don't know if there's a 'cable card' version of tuner available that would work for this now ... Erik Goldoff IT Consultant Systems, Networks, Security _ From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. — Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: [OT] web - HDTV
Why can't you get one of the Hauppage HDTV USB device. From what I read, they can received Analog and Digital. The one with the cable coax connection should work. And if you look around you can get one of those type devices for around $50. On Wed, Sep 9, 2009 at 7:34 PM, Erik Goldoff egold...@gmail.com wrote: not sure about your area, but comcast where I live is going to transition their channels above channel 27 to digital transmission over cable on October 13th, requiring their digital box to view those stations. ( The digital channel transmission takes less cable bandwidth than the current analog channels, and they intend on using the newly re-gained bandwidth for on-demand and other pay based content. I currently have a WinXP based Media Center PC with tuner card and I'm gonna loose the ability to view stations above channel 27 when they make the switch. I don't know if there's a 'cable card' version of tuner available that would work for this now ... Erik Goldoff *IT Consultant* *Systems, Networks, Security * -- *From:* G.Waleed Kavalec [mailto:kava...@gmail.com] *Sent:* Wednesday, September 09, 2009 11:08 AM *To:* NT System Admin Issues *Subject:* [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. — Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] web - HDTV
I have Comcast and have been trying to figure this one out too. I think what is happening is that the analog TV spectrum has been sold to make $$ for our benevolent government. Terrestrial signals in that spectrum will now be cellular, emergency services etc, etc, etc. Those things are not going to be carried on TV cable systems of course, leaving a big unused spectrum not making any money for Comcast. So they decided to put digital TV (pay-per-view?) in the old analog spectrum which HDTV systems are not equipped to tune. To use it you need some kind of set-top box. Thank you Comcast From: Daniel Rodriguez [mailto:drod...@gmail.com] Sent: Wednesday, September 09, 2009 5:02 PM To: NT System Admin Issues Subject: Re: [OT] web - HDTV Why can't you get one of the Hauppage HDTV USB device. From what I read, they can received Analog and Digital. The one with the cable coax connection should work. And if you look around you can get one of those type devices for around $50. On Wed, Sep 9, 2009 at 7:34 PM, Erik Goldoff egold...@gmail.com wrote: not sure about your area, but comcast where I live is going to transition their channels above channel 27 to digital transmission over cable on October 13th, requiring their digital box to view those stations. ( The digital channel transmission takes less cable bandwidth than the current analog channels, and they intend on using the newly re-gained bandwidth for on-demand and other pay based content. I currently have a WinXP based Media Center PC with tuner card and I'm gonna loose the ability to view stations above channel 27 when they make the switch. I don't know if there's a 'cable card' version of tuner available that would work for this now ... Erik Goldoff IT Consultant Systems, Networks, Security From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. - Joan Walsh Anglund We value your opinion! How may we serve you better? Please click the survey link to tell us how we are doing: http://www.craneae.com/ContactUs/VoiceofCustomer.aspx Your feedback is of the utmost importance to us. Thank you for your time. Crane Aerospace Electronics Confidentiality Statement: The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient, or any employee or agent responsible to deliver it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] web - HDTV
Hey, why don't newly manufactured HDTV's come not with dual analog/digital tuners, but with digital/analog-band-digital tuners? From: Hilderbrand, Doug [mailto:doug.hilderbr...@craneaerospace.com] Sent: Wednesday, September 09, 2009 5:20 PM To: NT System Admin Issues Subject: RE: [OT] web - HDTV I have Comcast and have been trying to figure this one out too. I think what is happening is that the analog TV spectrum has been sold to make $$ for our benevolent government. Terrestrial signals in that spectrum will now be cellular, emergency services etc, etc, etc. Those things are not going to be carried on TV cable systems of course, leaving a big unused spectrum not making any money for Comcast. So they decided to put digital TV (pay-per-view?) in the old analog spectrum which HDTV systems are not equipped to tune. To use it you need some kind of set-top box. Thank you Comcast From: Daniel Rodriguez [mailto:drod...@gmail.com] Sent: Wednesday, September 09, 2009 5:02 PM To: NT System Admin Issues Subject: Re: [OT] web - HDTV Why can't you get one of the Hauppage HDTV USB device. From what I read, they can received Analog and Digital. The one with the cable coax connection should work. And if you look around you can get one of those type devices for around $50. On Wed, Sep 9, 2009 at 7:34 PM, Erik Goldoff egold...@gmail.com wrote: not sure about your area, but comcast where I live is going to transition their channels above channel 27 to digital transmission over cable on October 13th, requiring their digital box to view those stations. ( The digital channel transmission takes less cable bandwidth than the current analog channels, and they intend on using the newly re-gained bandwidth for on-demand and other pay based content. I currently have a WinXP based Media Center PC with tuner card and I'm gonna loose the ability to view stations above channel 27 when they make the switch. I don't know if there's a 'cable card' version of tuner available that would work for this now ... Erik Goldoff IT Consultant Systems, Networks, Security From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. - Joan Walsh Anglund We value your opinion! http://www.craneae.com/surveys/satisfaction.htm How may we serve you better?Please click the survey link to tell us how we are doing: http://www.craneae.com/surveys/satisfaction.htm http://www.craneae.com/surveys/satisfaction.htm http://www.craneae.com/surveys/satisfaction.htm Your feedback is of the utmost importance to us. Thank you for your time. Crane Aerospace Electronics Confidentiality Statement: The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient, or any employee or agent responsible to deliver it to the intended recipient. Any
RE: [OT] web - HDTV
The Hauppage devices are over the air digital. Not the same as over cable digital. The only cable card pc tuner is an OEM only and available for Win7 media center. From: Daniel Rodriguez [mailto:drod...@gmail.com] Sent: Wednesday, September 09, 2009 8:02 PM To: NT System Admin Issues Subject: Re: [OT] web - HDTV Why can't you get one of the Hauppage HDTV USB device. From what I read, they can received Analog and Digital. The one with the cable coax connection should work. And if you look around you can get one of those type devices for around $50. On Wed, Sep 9, 2009 at 7:34 PM, Erik Goldoff egold...@gmail.com wrote: not sure about your area, but comcast where I live is going to transition their channels above channel 27 to digital transmission over cable on October 13th, requiring their digital box to view those stations. ( The digital channel transmission takes less cable bandwidth than the current analog channels, and they intend on using the newly re-gained bandwidth for on-demand and other pay based content. I currently have a WinXP based Media Center PC with tuner card and I'm gonna loose the ability to view stations above channel 27 when they make the switch. I don't know if there's a 'cable card' version of tuner available that would work for this now ... Erik Goldoff IT Consultant Systems, Networks, Security From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. � Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: [OT] web - HDTV
Hey Glen, know anyone who carries that OEM card? On Wed, Sep 9, 2009 at 8:59 PM, Glen Johnson gjohn...@vhcc.edu wrote: The Hauppage devices are over the air digital. Not the same as over cable digital. The only cable card pc tuner is an OEM only and available for Win7 media center. *From:* Daniel Rodriguez [mailto:drod...@gmail.com] *Sent:* Wednesday, September 09, 2009 8:02 PM *To:* NT System Admin Issues *Subject:* Re: [OT] web - HDTV Why can't you get one of the Hauppage HDTV USB device. From what I read, they can received Analog and Digital. The one with the cable coax connection should work. And if you look around you can get one of those type devices for around $50. On Wed, Sep 9, 2009 at 7:34 PM, Erik Goldoff egold...@gmail.com wrote: not sure about your area, but comcast where I live is going to transition their channels above channel 27 to digital transmission over cable on October 13th, requiring their digital box to view those stations. ( The digital channel transmission takes less cable bandwidth than the current analog channels, and they intend on using the newly re-gained bandwidth for on-demand and other pay based content. I currently have a WinXP based Media Center PC with tuner card and I'm gonna loose the ability to view stations above channel 27 when they make the switch. I don't know if there's a 'cable card' version of tuner available that would work for this now ... Erik Goldoff *IT Consultant* *Systems, Networks, Security * -- *From:* G.Waleed Kavalec [mailto:kava...@gmail.com] *Sent:* Wednesday, September 09, 2009 11:08 AM *To:* NT System Admin Issues *Subject:* [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. яя Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: [OT] web - HDTV
Is this relevant? http://gizmodo.com/5356007/normal-people-can-now-install-cablecard-tuners-on-windows-7-pcs On Wed, Sep 9, 2009 at 9:59 PM, Glen Johnson gjohn...@vhcc.edu wrote: The Hauppage devices are over the air digital. Not the same as over cable digital. The only cable card pc tuner is an OEM only and available for Win7 media center. From: Daniel Rodriguez [mailto:drod...@gmail.com] Sent: Wednesday, September 09, 2009 8:02 PM To: NT System Admin Issues Subject: Re: [OT] web - HDTV Why can't you get one of the Hauppage HDTV USB device. From what I read, they can received Analog and Digital. The one with the cable coax connection should work. And if you look around you can get one of those type devices for around $50. On Wed, Sep 9, 2009 at 7:34 PM, Erik Goldoff egold...@gmail.com wrote: not sure about your area, but comcast where I live is going to transition their channels above channel 27 to digital transmission over cable on October 13th, requiring their digital box to view those stations. ( The digital channel transmission takes less cable bandwidth than the current analog channels, and they intend on using the newly re-gained bandwidth for on-demand and other pay based content. I currently have a WinXP based Media Center PC with tuner card and I'm gonna loose the ability to view stations above channel 27 when they make the switch. I don't know if there's a 'cable card' version of tuner available that would work for this now ... Erik Goldoff IT Consultant Systems, Networks, Security From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Wednesday, September 09, 2009 11:08 AM To: NT System Admin Issues Subject: [OT] web - HDTV My wife and I are looking at a Samsung 40 HDTV (UN40B7000 probably) and I'd like to be able to easily toggle into various web channels now available. Anyone already doing this? What is the easiest (and most spouse friendly) way to do it? I have Comcast for both TV and Internet, and I'm open to dedicating a PC to the job. -- -- Gregory Waleed Kavalec - What matters?... Only the flicker of light within the darkness, the feeling of warmth within the cold, the knowledge of love within the void. яя Joan Walsh Anglund ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: [OT] web - HDTV
I looked at this for a few days with my cousin a couple of months ago, he has HD Dish and HD Cox cable and wanted to watch the HD channels on his mediapc w/ bluray. He currently sees all the standard channels but HD is just grey screen. We looked at 6-7 different cards and they all appear to sneakily say' over air HD' or in other words antenna based HD. Speaking to a rep at Fry's electronics, he said there is no standard signaling for HD between vendors like it is with analog TV so you cant find a card to accommodate all of the different signaling being used. IDK if I believe that but it does kind of make sense. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~