Re: Automatic Updates has humongous datastore.edb and memory consumption

[James Rankin]

Does it make any difference if you clear out the whole SoftwareDistribution
directory? This is a tactic utilised in one of our AU cleanup scripts which
our desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

>  Looking at an XP Pro SP3 desktop yesterday/today and soon after booting,
> the startup of the Automatic Updates service (wuauserv) is just killing it,
> using up all RAM and stalling everything due to all the swapping.  Machine
> has only 512MB, but this is not a question that must be answered with "add
> memory" until I understand what is going on with Automatic Updates.
>
>
>
> Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file,
> that file is about 170MB, and not coincidentally, 170MB is the peak VM size
> I saw for both wuauclt.exe and the svchost.exe used by wuauserv.
>
>
>
> So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and
> did a wuauclt /detectnow, and it created a new datastore.edb of the same 170
> MB size as before.
>
>
>
> Looking at my own XP machine, datastore.edb is about 6 MB.
>
>
>
> And, I'm not finding much with google for "large datastore.edb" or "huge
> datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't
> pegged because of all the swapping.  Anybody?
>
>
>
> TIA,
>
> Carl
>
>
>
>
>
>


-- 
"On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question."

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Finding a huge file dump from June...

[Mark Kelsay]

I like using Spacemonger.

http://www.sixty-five.cc/sm/




-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: 03 August 2010 01:49
To: NT System Admin Issues
Subject: Finding a huge file dump from June...

All,

On our file server we have a single 1.5tb partition - it's on a SAN.
Over the course of 4 days recently it went from about 30% free to
about 13% free - someone slammed around 200gb onto the file server.

I have a general idea of where it might be - there are two top-level
directories that are over 200gb each.

However, windirstat hasn't been completely helpful, as I can't seem to
isolate which files were loaded during those days, and none of the
files that I've been looking at were huge - no ISO or VHD files worth
mentioning, etc..

I also am pretty confident that there are a *bunch* of duplicate files
on those directories.

So, I'm looking for a couple of things:

1) A way to get a directory listing that supports a time/date stamp
(my choice of atime, mtime or ctime) size and a complete path name for
each file/directory on a single line - something like:

 2009-01-08  16:12   854,509
K:\Groups\training\On-Site_Special_Training\Customer1.doc

I've tried every trick I can think of for the 'dir' command and it
won't do what I want, and the 'ls' command from gunuwin32 doesn't seem
to want to do this either. Is there a powershell one-liner that can do
this for me perhaps?

2) A recommendation for a duplicate file finder - cheap or free would
be preferred.

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

_
This message has been checked for all known viruses by bluesource. For further 
information visit www.blue-source.com

powered by Messagelabs

** This email is sent for and on behalf of Inspop.com Limited **

Authorised and regulated by the Financial Services Authority. Registration no. 
310635.

Inspop.com Limited [also trading as "Confused.com"] is registered in England 
and Wales at 2nd Floor, Friary House, Greyfriars Road, Cardiff, CF10 3AE [Reg. 
No. 03857130]. Any opinions expressed in this email are those of the individual 
and not necessarily the company. This email and any files transmitted with it, 
including replies and forwarded copies [which may contain alterations] 
subsequently transmitted from the Company, are confidential and solely for the 
use of the intended recipient. It may contain material protected by 
attorney-client privilege. If you are not the intended recipient or the person 
responsible for delivering to the intended recipient, be advised that you have 
received this email in error and that any use is strictly prohibited.

If you have received this email in error please notify the Information Security 
Officer by telephone on +44 [0] 29 2043 4372. Please then delete this email and 
destroy any copies of it. This email has been swept for viruses before leaving 
our system.

Security Warning: Please note that this email has been created in the knowledge 
that Internet email is not a 100% secure communications medium. We advise that 
you understand and accept this lack of security when emailing us.

Viruses: Although we have taken steps to ensure that this email and any 
attachments are free from any virus, we advise that in keeping with good 
computing practice the recipient should ensure they are actually virus free.
We may monitor the content of E-mails sent and received via our network for 
viruses or unauthorised use and for other lawful business purposes.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: WSUS tools?

[Ken Schaefer]

There isn't even a need for a separate OU - you can just use security group 
filtering...

Cheers
Ken

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, 6 August 2010 2:32 AM
To: NT System Admin Issues
Subject: Re: WSUS tools?

That seems overly complex - perhaps that's because I'm not familiar with the 
technique. I'll look into that, however.

On Wed, Aug 4, 2010 at 18:39, Richard Stovall  wrote:
> I must be missing something about the second.  Why not put the 
> machines in a special OU (or OUs) and set the GPO for that particular 
> OU to install at 6PM on Wednesday.  Modify as necessary.  Control the 
> updates applied via groups in WSUS, control the actual installation of those 
> updates via GPO.
> But like I said, I must be missing something.  Constrained by computer 
> object and OU placement in AD, perhaps?
>
> On Wed, Aug 4, 2010 at 5:33 PM, Kurt Buff  wrote:
>>
>> I've got to clean up our WSUS installation after the departure of a 
>> minion, and I'm trying to find find some tools to help with the task.
>>
>> Here's a couple of wishes:
>>
>>     1) Ability to clean out superseded updates - decline them, or 
>> whatever, so I only see what's current
>>
>>     2) Ability to prep updates for a target group and set them to go 
>> at a future date/time.
>>          For instance, I might have to leave on Tuesday for a couple 
>> of days, and want to prepare my
>>          test group to receive the latest set on Wednesday after 6pm.
>>
>> It looks like WSUSter (http://www.wsus.nl/site/content/view/23/38/)
>> would be useful for (1) but haven't implemented it yet - do any of 
>> you have experience with it and like it? Any alternatives that you like?
>>
>> I haven't found *anything* for (2) yet, and am hoping someone has 
>> found something to satisfy that desire.
>>
>> Kurt


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: WSUS tools?

[Richard Stovall]

Good point.

On Fri, Aug 6, 2010 at 4:37 AM, Ken Schaefer  wrote:

> There isn't even a need for a separate OU - you can just use security group
> filtering...
>
> Cheers
> Ken
>
> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Sent: Friday, 6 August 2010 2:32 AM
> To: NT System Admin Issues
> Subject: Re: WSUS tools?
>
> That seems overly complex - perhaps that's because I'm not familiar with
> the technique. I'll look into that, however.
>
> On Wed, Aug 4, 2010 at 18:39, Richard Stovall  wrote:
> > I must be missing something about the second.  Why not put the
> > machines in a special OU (or OUs) and set the GPO for that particular
> > OU to install at 6PM on Wednesday.  Modify as necessary.  Control the
> > updates applied via groups in WSUS, control the actual installation of
> those updates via GPO.
> > But like I said, I must be missing something.  Constrained by computer
> > object and OU placement in AD, perhaps?
> >
> > On Wed, Aug 4, 2010 at 5:33 PM, Kurt Buff  wrote:
> >>
> >> I've got to clean up our WSUS installation after the departure of a
> >> minion, and I'm trying to find find some tools to help with the task.
> >>
> >> Here's a couple of wishes:
> >>
> >> 1) Ability to clean out superseded updates - decline them, or
> >> whatever, so I only see what's current
> >>
> >> 2) Ability to prep updates for a target group and set them to go
> >> at a future date/time.
> >>  For instance, I might have to leave on Tuesday for a couple
> >> of days, and want to prepare my
> >>  test group to receive the latest set on Wednesday after 6pm.
> >>
> >> It looks like WSUSter (http://www.wsus.nl/site/content/view/23/38/)
> >> would be useful for (1) but haven't implemented it yet - do any of
> >> you have experience with it and like it? Any alternatives that you like?
> >>
> >> I haven't found *anything* for (2) yet, and am hoping someone has
> >> found something to satisfy that desire.
> >>
> >> Kurt
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Kudos to Michael B Smith!

[Holstrom, Don]

Truly...

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Thursday, August 05, 2010 3:22 PM
To: NT System Admin Issues
Subject: Re: Kudos to Michael B Smith!

If MBS got all of the beers we owe him at one time, he'd drown...

On Thu, Aug 5, 2010 at 07:59, David Lum  wrote:
> I just wanted to publicly thank Michael B Smith for helping me out with the
> “password about to expire” .VBS script that he blogged about here:
>
> http://theessentialexchange.com/blogs/michael/archive/2007/11/13/sending-an-e-mail-to-users-whose-password-is-about-to-expire.aspx
>
>
>
> It needed a minor tweak to work in my environment and he took the time to
> help me out,  now it works perfectly and saved us from spending $700 for a
> tool that we had budgeted for (I found the request in process and said “I
> think I can get this done with a script”).
>
>
>
> Instead of spending $700 + time to learn the new tool, we spent zero for
> purchase and took maybe an hour of my time. Thank you Michael! That MVP was
> well earned in my book!!!
>
> David Lum // SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 // (Cell) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

R: WSUS tools?

[HELP_PC]

Wsuster doesn't work from remote 
 
GuidoElia
HELPPC
 

  _  

Da: Richard Stovall [mailto:rich...@gmail.com] 
Inviato: venerdì 6 agosto 2010 11.40
A: NT System Admin Issues
Oggetto: Re: WSUS tools?


Good point.


On Fri, Aug 6, 2010 at 4:37 AM, Ken Schaefer  wrote:


There isn't even a need for a separate OU - you can just use security group 
filtering...

Cheers
Ken


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]

Sent: Friday, 6 August 2010 2:32 AM
To: NT System Admin Issues

Subject: Re: WSUS tools?

That seems overly complex - perhaps that's because I'm not familiar with the 
technique. I'll look into that, however.

On Wed, Aug 4, 2010 at 18:39, Richard Stovall  wrote:
> I must be missing something about the second.  Why not put the
> machines in a special OU (or OUs) and set the GPO for that particular
> OU to install at 6PM on Wednesday.  Modify as necessary.  Control the
> updates applied via groups in WSUS, control the actual installation of those 
> updates via GPO.
> But like I said, I must be missing something.  Constrained by computer
> object and OU placement in AD, perhaps?
>
> On Wed, Aug 4, 2010 at 5:33 PM, Kurt Buff  wrote:
>>
>> I've got to clean up our WSUS installation after the departure of a
>> minion, and I'm trying to find find some tools to help with the task.
>>
>> Here's a couple of wishes:
>>
>> 1) Ability to clean out superseded updates - decline them, or
>> whatever, so I only see what's current
>>
>> 2) Ability to prep updates for a target group and set them to go
>> at a future date/time.
>>  For instance, I might have to leave on Tuesday for a couple
>> of days, and want to prepare my
>>  test group to receive the latest set on Wednesday after 6pm.
>>
>> It looks like WSUSter (http://www.wsus.nl/site/content/view/23/38/)
>> would be useful for (1) but haven't implemented it yet - do any of
>> you have experience with it and like it? Any alternatives that you like?
>>
>> I haven't found *anything* for (2) yet, and am hoping someone has
>> found something to satisfy that desire.
>>
>> Kurt



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


 


 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Kudos to Michael B Smith!

[Steven M. Caesare]

Do it now, you hoser.

-sc

> -Original Message-
> From: Don Guyer [mailto:don.gu...@prufoxroach.com]
> Sent: Thursday, August 05, 2010 3:39 PM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> OMG! Now I've got to watch that again, been soo long!
> 
> Don Guyer
> Systems Engineer - Information Services
> Prudential, Fox & Roach/Trident Group
> 431 W. Lancaster Avenue
> Devon, PA 19333
> Direct: (610) 993-3299
> Fax: (610) 650-5306
> don.gu...@prufoxroach.com
> 
> 
> -Original Message-
> From: Crawford, Scott [mailto:crawfo...@evangel.edu]
> Sent: Thursday, August 05, 2010 3:35 PM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> Reminds of the scene in Strange Brew where Rick Moranis drinks the entire
> vat of beer he was thrown in to be drowned.
> 
> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Sent: Thursday, August 05, 2010 2:22 PM
> To: NT System Admin Issues
> Subject: Re: Kudos to Michael B Smith!
> 
> If MBS got all of the beers we owe him at one time, he'd drown...
> 
> On Thu, Aug 5, 2010 at 07:59, David Lum  wrote:
> > I just wanted to publicly thank Michael B Smith for helping me out
> > with the “password about to expire” .VBS script that he blogged about
> here:
> >
> >
> http://theessentialexchange.com/blogs/michael/archive/2007/11/13/sendi
> > ng-an-e-mail-to-users-whose-password-is-about-to-expire.aspx
> >
> >
> >
> > It needed a minor tweak to work in my environment and he took the time
> > to help me out,  now it works perfectly and saved us from spending
> > $700 for a tool that we had budgeted for (I found the request in
> > process and said “I think I can get this done with a script”).
> >
> >
> >
> > Instead of spending $700 + time to learn the new tool, we spent zero
> > for purchase and took maybe an hour of my time. Thank you Michael!
> > That MVP was well earned in my book!!!
> >
> > David Lum // SYSTEMS ENGINEER
> > NORTHWEST EVALUATION ASSOCIATION
> > (Desk) 971.222.1025 // (Cell) 503.267.9764
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Local server name appears on the Internet DNS

[itli...@imcu.com]

I am really confused.

I am using MXToolBox and the SMTP tool.
I get the below results:


220-nachodevice.imcu.local ESMTPIronport Success
 Not an open relay.
 0 seconds - Good on Connection time
 0.546 seconds - Good on Transaction time
 OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
 OK - Reverse DNS matches SMTP Banner
Session Transcript:
HELO please-read-policy.mxtoolbox.com 
250 nachodevice.imcu.local [16 ms] 
MAIL FROM:  
250 sender  ok [31 ms] 
RCPT TO:  
550 #5.1.0 Address rejected. [31 ms] 
QUIT 
221 nachodevice.imcu.local [47 ms] 


The nachdevice.imcu.local is my ironport, I get that
The 03030611n4m055.imcu.local is my Exchange server, on the internal
side of the firewall.  I have an mx record for the ironport's external
port.
I do not know why the 0303... name is being published to the world??
Any ideas??





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Local server name appears on the Internet DNS

[Richard Stovall]

The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
 Ask your ISP to change it to mail.imcu.com or whatever is appropriate.

On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com  wrote:

> I am really confused.
>
> I am using MXToolBox and the SMTP tool.
> I get the below results:
>
>
> 220-nachodevice.imcu.local ESMTPIronport Success
>  Not an open relay.
>  0 seconds - Good on Connection time
>  0.546 seconds - Good on Transaction time
>  OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
>  OK - Reverse DNS matches SMTP Banner
> Session Transcript:
> HELO please-read-policy.mxtoolbox.com
> 250 nachodevice.imcu.local [16 ms]
> MAIL FROM: 
> 250 sender  ok [31 ms]
> RCPT TO: 
> 550 #5.1.0 Address rejected. [31 ms]
> QUIT
> 221 nachodevice.imcu.local [47 ms]
>
>
> The nachdevice.imcu.local is my ironport, I get that
> The 03030611n4m055.imcu.local is my Exchange server, on the internal
> side of the firewall.  I have an mx record for the ironport's external
> port.
> I do not know why the 0303... name is being published to the world??
> Any ideas??
>
>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Local server name appears on the Internet DNS

[Leedy, Andy]

Doing an nslookup, it appears that 206.18.123.221 resolves to 
03030611n4m055.imcu.local.

nslookup 206.18.123.221

Name:03030611n4m055.imcu.local
Address:  206.18.123.221
Aliases:  221.123.18.206.in-addr.arpa

-Andy

-Original Message-
From: itli...@imcu.com [mailto:itli...@imcu.com] 
Sent: Friday, August 06, 2010 9:25 AM
To: NT System Admin Issues
Subject: Local server name appears on the Internet DNS

I am really confused.

I am using MXToolBox and the SMTP tool.
I get the below results:


220-nachodevice.imcu.local ESMTPIronport Success
 Not an open relay.
 0 seconds - Good on Connection time
 0.546 seconds - Good on Transaction time
 OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
 OK - Reverse DNS matches SMTP Banner
Session Transcript:
HELO please-read-policy.mxtoolbox.com 
250 nachodevice.imcu.local [16 ms] 
MAIL FROM:  
250 sender  ok [31 ms] 
RCPT TO:  
550 #5.1.0 Address rejected. [31 ms] 
QUIT 
221 nachodevice.imcu.local [47 ms] 


The nachdevice.imcu.local is my ironport, I get that
The 03030611n4m055.imcu.local is my Exchange server, on the internal
side of the firewall.  I have an mx record for the ironport's external
port.
I do not know why the 0303... name is being published to the world??
Any ideas??





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~



**

CONFIDENTIALITY NOTICE - The information transmitted in this message is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, 
please contact the sender and destroy all copies of this document. Thank you.

Butler Schein Animal Health

**


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Kudos to Michael B Smith!

[Steve Kistenmacher]

Great White North,  take off eh

-Original Message-
From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Friday, August 06, 2010 9:22 AM
To: NT System Admin Issues
Subject: RE: Kudos to Michael B Smith!

Do it now, you hoser.

-sc

> -Original Message-
> From: Don Guyer [mailto:don.gu...@prufoxroach.com]
> Sent: Thursday, August 05, 2010 3:39 PM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> OMG! Now I've got to watch that again, been soo long!
> 
> Don Guyer
> Systems Engineer - Information Services Prudential, Fox & 
> Roach/Trident Group
> 431 W. Lancaster Avenue
> Devon, PA 19333
> Direct: (610) 993-3299
> Fax: (610) 650-5306
> don.gu...@prufoxroach.com
> 
> 
> -Original Message-
> From: Crawford, Scott [mailto:crawfo...@evangel.edu]
> Sent: Thursday, August 05, 2010 3:35 PM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> Reminds of the scene in Strange Brew where Rick Moranis drinks the 
> entire vat of beer he was thrown in to be drowned.
> 
> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Sent: Thursday, August 05, 2010 2:22 PM
> To: NT System Admin Issues
> Subject: Re: Kudos to Michael B Smith!
> 
> If MBS got all of the beers we owe him at one time, he'd drown...
> 
> On Thu, Aug 5, 2010 at 07:59, David Lum  wrote:
> > I just wanted to publicly thank Michael B Smith for helping me out 
> > with the “password about to expire” .VBS script that he blogged 
> > about
> here:
> >
> >
> http://theessentialexchange.com/blogs/michael/archive/2007/11/13/sendi
> > ng-an-e-mail-to-users-whose-password-is-about-to-expire.aspx
> >
> >
> >
> > It needed a minor tweak to work in my environment and he took the 
> > time to help me out,  now it works perfectly and saved us from 
> > spending
> > $700 for a tool that we had budgeted for (I found the request in 
> > process and said “I think I can get this done with a script”).
> >
> >
> >
> > Instead of spending $700 + time to learn the new tool, we spent zero 
> > for purchase and took maybe an hour of my time. Thank you Michael!
> > That MVP was well earned in my book!!!
> >
> > David Lum // SYSTEMS ENGINEER
> > NORTHWEST EVALUATION ASSOCIATION
> > (Desk) 971.222.1025 // (Cell) 503.267.9764
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
>   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
>   ~
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
>   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Kudos to Michael B Smith!

[Andy Shook]

Take off, eh?


Koo-ko-ko-kokoko-ko


There's a mouse in my beer

Shook
-Original Message-
From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Friday, August 06, 2010 9:22 AM
To: NT System Admin Issues
Subject: RE: Kudos to Michael B Smith!

Do it now, you hoser.

-sc

> -Original Message-
> From: Don Guyer [mailto:don.gu...@prufoxroach.com]
> Sent: Thursday, August 05, 2010 3:39 PM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> OMG! Now I've got to watch that again, been soo long!
> 
> Don Guyer
> Systems Engineer - Information Services
> Prudential, Fox & Roach/Trident Group
> 431 W. Lancaster Avenue
> Devon, PA 19333
> Direct: (610) 993-3299
> Fax: (610) 650-5306
> don.gu...@prufoxroach.com
> 
> 
> -Original Message-
> From: Crawford, Scott [mailto:crawfo...@evangel.edu]
> Sent: Thursday, August 05, 2010 3:35 PM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> Reminds of the scene in Strange Brew where Rick Moranis drinks the entire
> vat of beer he was thrown in to be drowned.
> 
> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Sent: Thursday, August 05, 2010 2:22 PM
> To: NT System Admin Issues
> Subject: Re: Kudos to Michael B Smith!
> 
> If MBS got all of the beers we owe him at one time, he'd drown...
> 
> On Thu, Aug 5, 2010 at 07:59, David Lum  wrote:
> > I just wanted to publicly thank Michael B Smith for helping me out
> > with the “password about to expire” .VBS script that he blogged about
> here:
> >
> >
> http://theessentialexchange.com/blogs/michael/archive/2007/11/13/sendi
> > ng-an-e-mail-to-users-whose-password-is-about-to-expire.aspx
> >
> >
> >
> > It needed a minor tweak to work in my environment and he took the time
> > to help me out,  now it works perfectly and saved us from spending
> > $700 for a tool that we had budgeted for (I found the request in
> > process and said “I think I can get this done with a script”).
> >
> >
> >
> > Instead of spending $700 + time to learn the new tool, we spent zero
> > for purchase and took maybe an hour of my time. Thank you Michael!
> > That MVP was well earned in my book!!!
> >
> > David Lum // SYSTEMS ENGINEER
> > NORTHWEST EVALUATION ASSOCIATION
> > (Desk) 971.222.1025 // (Cell) 503.267.9764
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Local server name appears on the Internet DNS

[itli...@imcu.com]

There is a ptr for mail.imcu.com to 206.18.123.221 though.

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 9:35 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
Ask your ISP to change it to mail.imcu.com or whatever is appropriate.

On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com 
wrote:

I am really confused.

I am using MXToolBox and the SMTP tool.
I get the below results:


220-nachodevice.imcu.local ESMTPIronport Success
 Not an open relay.
 0 seconds - Good on Connection time
 0.546 seconds - Good on Transaction time
 OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
 OK - Reverse DNS matches SMTP Banner
Session Transcript:
HELO please-read-policy.mxtoolbox.com
250 nachodevice.imcu.local [16 ms]
MAIL FROM: 
250 sender  ok [31 ms]
RCPT TO: 
550 #5.1.0 Address rejected. [31 ms]
QUIT
221 nachodevice.imcu.local [47 ms]


The nachdevice.imcu.local is my ironport, I get that
The 03030611n4m055.imcu.local is my Exchange server, on the internal
side of the firewall.  I have an mx record for the ironport's external
port.
I do not know why the 0303... name is being published to the world??
Any ideas??





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Local server name appears on the Internet DNS

[Richard Stovall]

In the reverse zone at ATT?  It sure doesn't seem like it because the answer
coming back for that IP is 03030611n4m055.imcu.local.  A *forward* lookup of
mail.imcu.com returns 206.18.123.221.

You'll need to ask ATT to change the record in their reverse zone.

On Fri, Aug 6, 2010 at 10:23 AM, itli...@imcu.com  wrote:

>  There is a ptr for mail.imcu.com to 206.18.123.221 though.
>
>
>  --
>
> *From:* Richard Stovall [mailto:rich...@gmail.com]
> *Posted At:* Friday, August 06, 2010 9:35 AM
> *Posted To:* itli...@imcu.com
> *Conversation:* Local server name appears on the Internet DNS
> *Subject:* Re: Local server name appears on the Internet DNS
>
>
> The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
>  Ask your ISP to change it to mail.imcu.com or whatever is appropriate.
>
> On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com  wrote:
>
> I am really confused.
>
> I am using MXToolBox and the SMTP tool.
> I get the below results:
>
>
> 220-nachodevice.imcu.local ESMTPIronport Success
>  Not an open relay.
>  0 seconds - Good on Connection time
>  0.546 seconds - Good on Transaction time
>  OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
>  OK - Reverse DNS matches SMTP Banner
> Session Transcript:
> HELO please-read-policy.mxtoolbox.com
> 250 nachodevice.imcu.local [16 ms]
> MAIL FROM: 
> 250 sender  ok [31 ms]
> RCPT TO: 
> 550 #5.1.0 Address rejected. [31 ms]
> QUIT
> 221 nachodevice.imcu.local [47 ms]
>
>
> The nachdevice.imcu.local is my ironport, I get that
> The 03030611n4m055.imcu.local is my Exchange server, on the internal
> side of the firewall.  I have an mx record for the ironport's external
> port.
> I do not know why the 0303... name is being published to the world??
> Any ideas??
>
>
>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Local server name appears on the Internet DNS

[Mike French]

Your MX records that were reported by your nameservers are:

5   mx1.imcu.com   206.18.123.221

 

Your reverse (PTR) record:
221.123.18.206.in-addr.arpa ->  03030611n4m055.imcu.local

 

Banner Received: 220-nachodevice.imcu.local ESMTP

 

Get your ISP to change your PTR to: 221.123.18.206.in-addr.arpa ->
mx1.imcu.com

 

On your ironport, log into the web interface -> Mail Policies -> Mail
Flow Policies -> Default Policy Parameters -> Override SMTP Banner
Hostname: mx1.imcu.com

 

 

 

 



From: itli...@imcu.com [mailto:itli...@imcu.com] 
Sent: Friday, August 06, 2010 9:24 AM
To: NT System Admin Issues
Subject: RE: Local server name appears on the Internet DNS

 

There is a ptr for mail.imcu.com to 206.18.123.221 though.

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 9:35 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
Ask your ISP to change it to mail.imcu.com or whatever is appropriate.

On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com 
wrote:

I am really confused.

I am using MXToolBox and the SMTP tool.
I get the below results:


220-nachodevice.imcu.local ESMTPIronport Success
 Not an open relay.
 0 seconds - Good on Connection time
 0.546 seconds - Good on Transaction time
 OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
 OK - Reverse DNS matches SMTP Banner
Session Transcript:
HELO please-read-policy.mxtoolbox.com
250 nachodevice.imcu.local [16 ms]
MAIL FROM: 
250 sender  ok [31 ms]
RCPT TO: 
550 #5.1.0 Address rejected. [31 ms]
QUIT
221 nachodevice.imcu.local [47 ms]


The nachdevice.imcu.local is my ironport, I get that
The 03030611n4m055.imcu.local is my Exchange server, on the internal
side of the firewall.  I have an mx record for the ironport's external
port.
I do not know why the 0303... name is being published to the world??
Any ideas??





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Local server name appears on the Internet DNS

[itli...@imcu.com]

Could my Active Directory be pushing that address out to them?



 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 10:32 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

In the reverse zone at ATT?  It sure doesn't seem like it because the
answer coming back for that IP is 03030611n4m055.imcu.local.  A forward
lookup of mail.imcu.com returns 206.18.123.221.

 

You'll need to ask ATT to change the record in their reverse zone.

On Fri, Aug 6, 2010 at 10:23 AM, itli...@imcu.com 
wrote:

There is a ptr for mail.imcu.com to 206.18.123.221 though.

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 9:35 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
Ask your ISP to change it to mail.imcu.com or whatever is appropriate.

On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com 
wrote:

I am really confused.

I am using MXToolBox and the SMTP tool.
I get the below results:


220-nachodevice.imcu.local ESMTPIronport Success
 Not an open relay.
 0 seconds - Good on Connection time
 0.546 seconds - Good on Transaction time
 OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
 OK - Reverse DNS matches SMTP Banner
Session Transcript:
HELO please-read-policy.mxtoolbox.com
250 nachodevice.imcu.local [16 ms]
MAIL FROM: 
250 sender  ok [31 ms]
RCPT TO: 
550 #5.1.0 Address rejected. [31 ms]
QUIT
221 nachodevice.imcu.local [47 ms]


The nachdevice.imcu.local is my ironport, I get that
The 03030611n4m055.imcu.local is my Exchange server, on the internal
side of the firewall.  I have an mx record for the ironport's external
port.
I do not know why the 0303... name is being published to the world??
Any ideas??







~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Local server name appears on the Internet DNS

[Richard Stovall]

I sure hope not.  :-)

I'd call ATT and ask them what's up, and also take the rest of the steps
suggested by Mike French earlier.

On Fri, Aug 6, 2010 at 10:36 AM, itli...@imcu.com  wrote:

>  Could my Active Directory be pushing that address out to them?
>
>
>  --
>
> *From:* Richard Stovall [mailto:rich...@gmail.com]
> *Posted At:* Friday, August 06, 2010 10:32 AM
>
> *Posted To:* itli...@imcu.com
> *Conversation:* Local server name appears on the Internet DNS
> *Subject:* Re: Local server name appears on the Internet DNS
>
>
> In the reverse zone at ATT?  It sure doesn't seem like it because the
> answer coming back for that IP is 03030611n4m055.imcu.local.  A 
> *forward*lookup of
> mail.imcu.com returns 206.18.123.221.
>
>
>
> You'll need to ask ATT to change the record in their reverse zone.
>
> On Fri, Aug 6, 2010 at 10:23 AM, itli...@imcu.com 
> wrote:
>
> There is a ptr for mail.imcu.com to 206.18.123.221 though.
>
>
>  --
>
> *From:* Richard Stovall [mailto:rich...@gmail.com]
> *Posted At:* Friday, August 06, 2010 9:35 AM
> *Posted To:* itli...@imcu.com
> *Conversation:* Local server name appears on the Internet DNS
> *Subject:* Re: Local server name appears on the Internet DNS
>
>
> The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
>  Ask your ISP to change it to mail.imcu.com or whatever is appropriate.
>
> On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com  wrote:
>
> I am really confused.
>
> I am using MXToolBox and the SMTP tool.
> I get the below results:
>
>
> 220-nachodevice.imcu.local ESMTPIronport Success
>  Not an open relay.
>  0 seconds - Good on Connection time
>  0.546 seconds - Good on Transaction time
>  OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
>  OK - Reverse DNS matches SMTP Banner
> Session Transcript:
> HELO please-read-policy.mxtoolbox.com
> 250 nachodevice.imcu.local [16 ms]
> MAIL FROM: 
> 250 sender  ok [31 ms]
> RCPT TO: 
> 550 #5.1.0 Address rejected. [31 ms]
> QUIT
> 221 nachodevice.imcu.local [47 ms]
>
>
> The nachdevice.imcu.local is my ironport, I get that
> The 03030611n4m055.imcu.local is my Exchange server, on the internal
> side of the firewall.  I have an mx record for the ironport's external
> port.
> I do not know why the 0303... name is being published to the world??
> Any ideas??
>
>
>
>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[Carl Houseman]

The problem machine isn't local, but I found a local machine with a 80MB
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it rebuilt
to 33 MB.  Then I deleted the datastore.edb and the logs folder, and it
rebuilt to the same 33 MB size.  But I'll give your idea a try next time I
have face time at the machine.

 

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt
to 33 MB.  Coincidence, or result of both machines accessing the same WSUS
server?   The problem machine is using Microsoft's update servers.

 

Carl

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory
consumption

 

Does it make any difference if you clear out the whole SoftwareDistribution
directory? This is a tactic utilised in one of our AU cleanup scripts which
our desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

 

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the
startup of the Automatic Updates service (wuauserv) is just killing it, using
up all RAM and stalling everything due to all the swapping.  Machine has only
512MB, but this is not a question that must be answered with "add memory"
until I understand what is going on with Automatic Updates.

 

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file,
that file is about 170MB, and not coincidentally, 170MB is the peak VM size I
saw for both wuauclt.exe and the svchost.exe used by wuauserv.

So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and did
a wuauclt /detectnow, and it created a new datastore.edb of the same 170 MB
size as before.

 

Looking at my own XP machine, datastore.edb is about 6 MB.

 

And, I'm not finding much with google for "large datastore.edb" or "huge
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't
pegged because of all the swapping.  Anybody?

TIA,

Carl

 

 




-- 
"On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the
machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such a
question."

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Local server name appears on the Internet DNS

[itli...@imcu.com]

I am working his list now.

Just curious as to how that name got to the Internet.

My faxed request to my ISP was for mail.imcu.com to have the PTR of
206.18.123.221.

So to have the imcu.local address having it I am a little bit concerned
as to how it was updated...

 

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 10:57 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

I sure hope not.  :-)

 

I'd call ATT and ask them what's up, and also take the rest of the steps
suggested by Mike French earlier.

On Fri, Aug 6, 2010 at 10:36 AM, itli...@imcu.com 
wrote:

Could my Active Directory be pushing that address out to them?

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 10:32 AM


Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

In the reverse zone at ATT?  It sure doesn't seem like it because the
answer coming back for that IP is 03030611n4m055.imcu.local.  A forward
lookup of mail.imcu.com returns 206.18.123.221.

 

You'll need to ask ATT to change the record in their reverse zone.

On Fri, Aug 6, 2010 at 10:23 AM, itli...@imcu.com 
wrote:

There is a ptr for mail.imcu.com to 206.18.123.221 though.

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 9:35 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
Ask your ISP to change it to mail.imcu.com or whatever is appropriate.

On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com 
wrote:

I am really confused.

I am using MXToolBox and the SMTP tool.
I get the below results:


220-nachodevice.imcu.local ESMTPIronport Success
 Not an open relay.
 0 seconds - Good on Connection time
 0.546 seconds - Good on Transaction time
 OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
 OK - Reverse DNS matches SMTP Banner
Session Transcript:
HELO please-read-policy.mxtoolbox.com
250 nachodevice.imcu.local [16 ms]
MAIL FROM: 
250 sender  ok [31 ms]
RCPT TO: 
550 #5.1.0 Address rejected. [31 ms]
QUIT
221 nachodevice.imcu.local [47 ms]


The nachdevice.imcu.local is my ironport, I get that
The 03030611n4m055.imcu.local is my Exchange server, on the internal
side of the firewall.  I have an mx record for the ironport's external
port.
I do not know why the 0303... name is being published to the world??
Any ideas??







~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

 

 

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Kudos to Michael B Smith!

[Steven M. Caesare]

Beauty, eh?

-sc

> -Original Message-
> From: Andy Shook [mailto:andy.sh...@peak10.com]
> Sent: Friday, August 06, 2010 10:08 AM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> Take off, eh?
> 
> 
> Koo-ko-ko-kokoko-ko
> 
> 
> There's a mouse in my beer
> 
> Shook
> -Original Message-
> From: Steven M. Caesare [mailto:scaes...@caesare.com]
> Sent: Friday, August 06, 2010 9:22 AM
> To: NT System Admin Issues
> Subject: RE: Kudos to Michael B Smith!
> 
> Do it now, you hoser.
> 
> -sc
> 
> > -Original Message-
> > From: Don Guyer [mailto:don.gu...@prufoxroach.com]
> > Sent: Thursday, August 05, 2010 3:39 PM
> > To: NT System Admin Issues
> > Subject: RE: Kudos to Michael B Smith!
> >
> > OMG! Now I've got to watch that again, been soo long!
> >
> > Don Guyer
> > Systems Engineer - Information Services Prudential, Fox &
> > Roach/Trident Group
> > 431 W. Lancaster Avenue
> > Devon, PA 19333
> > Direct: (610) 993-3299
> > Fax: (610) 650-5306
> > don.gu...@prufoxroach.com
> >
> >
> > -Original Message-
> > From: Crawford, Scott [mailto:crawfo...@evangel.edu]
> > Sent: Thursday, August 05, 2010 3:35 PM
> > To: NT System Admin Issues
> > Subject: RE: Kudos to Michael B Smith!
> >
> > Reminds of the scene in Strange Brew where Rick Moranis drinks the
> > entire vat of beer he was thrown in to be drowned.
> >
> > -Original Message-
> > From: Kurt Buff [mailto:kurt.b...@gmail.com]
> > Sent: Thursday, August 05, 2010 2:22 PM
> > To: NT System Admin Issues
> > Subject: Re: Kudos to Michael B Smith!
> >
> > If MBS got all of the beers we owe him at one time, he'd drown...
> >
> > On Thu, Aug 5, 2010 at 07:59, David Lum  wrote:
> > > I just wanted to publicly thank Michael B Smith for helping me out
> > > with the “password about to expire” .VBS script that he blogged
> > > about
> > here:
> > >
> > >
> >
> http://theessentialexchange.com/blogs/michael/archive/2007/11/13/sendi
> > > ng-an-e-mail-to-users-whose-password-is-about-to-expire.aspx
> > >
> > >
> > >
> > > It needed a minor tweak to work in my environment and he took the
> > > time to help me out,  now it works perfectly and saved us from
> > > spending
> > > $700 for a tool that we had budgeted for (I found the request in
> > > process and said “I think I can get this done with a script”).
> > >
> > >
> > >
> > > Instead of spending $700 + time to learn the new tool, we spent zero
> > > for purchase and took maybe an hour of my time. Thank you Michael!
> > > That MVP was well earned in my book!!!
> > >
> > > David Lum // SYSTEMS ENGINEER
> > > NORTHWEST EVALUATION ASSOCIATION
> > > (Desk) 971.222.1025 // (Cell) 503.267.9764
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> >   ~
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> >   ~
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> >   ~
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Local server name appears on the Internet DNS

[Mike French]

Somebody got something FUBAR'd if that's the case. I see your MX as
MX1.imcu.com from the ultrdns nameservers who claim to be authoritative
for your zone:

 

The SOA record is:
Primary nameserver: pdns1.ultradns.net
Hostmaster E-mail address: bill.krause.fiserv.com
Serial #: 2010072104 
Refresh: 10800 
Retry: 3600 
Expire: 2592000   4 weeks
Default TTL: 86400

 

5   mx1.imcu.com   206.18.123.221

 

If you are using "Mail.imcu.com" for your MX, make sure your DNS host
updates the record from MX1.imcu.com.

 

One other thing to keep in mind, When your Ironport is sending mail (I
assume inbound and outbound goes through the Ironport) the HELO in the
destination mail server will see your FQDN of the Ironport which in your
case will be "nachodevice.imcu.local". This could pose some problems; I
would suggest that you change the host name of your Ironport to whatever
your MX, and SMTP banner is, however you need to make that call since
this could have some adverse impact on you network internally. Ironport
Web Interface -> Network -> Select Interface Name to modify -> Enter
your Hostname in the Hostname field. 

 

Test - Test - Test

 

You can open up a couple of ssh sessions to your Ironport and use the
Tail command and watch "SMTP Conversations" and "mail_logs" which can
help

 

https://www.testexchangeconnectivity.com/Default.aspx

http://www.intodns.com/

http://www.whatsmydns.net/

http://www.sort-dns.com/

 

 

 



From: itli...@imcu.com [mailto:itli...@imcu.com] 
Sent: Friday, August 06, 2010 10:21 AM
To: NT System Admin Issues
Subject: RE: Local server name appears on the Internet DNS

 

I am working his list now.

Just curious as to how that name got to the Internet.

My faxed request to my ISP was for mail.imcu.com to have the PTR of
206.18.123.221.

So to have the imcu.local address having it I am a little bit concerned
as to how it was updated...

 

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 10:57 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

I sure hope not.  :-)

 

I'd call ATT and ask them what's up, and also take the rest of the steps
suggested by Mike French earlier.

On Fri, Aug 6, 2010 at 10:36 AM, itli...@imcu.com 
wrote:

Could my Active Directory be pushing that address out to them?

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 10:32 AM


Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

In the reverse zone at ATT?  It sure doesn't seem like it because the
answer coming back for that IP is 03030611n4m055.imcu.local.  A forward
lookup of mail.imcu.com returns 206.18.123.221.

 

You'll need to ask ATT to change the record in their reverse zone.

On Fri, Aug 6, 2010 at 10:23 AM, itli...@imcu.com 
wrote:

There is a ptr for mail.imcu.com to 206.18.123.221 though.

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Posted At: Friday, August 06, 2010 9:35 AM
Posted To: itli...@imcu.com
Conversation: Local server name appears on the Internet DNS
Subject: Re: Local server name appears on the Internet DNS
  

The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local.
Ask your ISP to change it to mail.imcu.com or whatever is appropriate.

On Fri, Aug 6, 2010 at 9:24 AM, itli...@imcu.com 
wrote:

I am really confused.

I am using MXToolBox and the SMTP tool.
I get the below results:


220-nachodevice.imcu.local ESMTPIronport Success
 Not an open relay.
 0 seconds - Good on Connection time
 0.546 seconds - Good on Transaction time
 OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local
 OK - Reverse DNS matches SMTP Banner
Session Transcript:
HELO please-read-policy.mxtoolbox.com
250 nachodevice.imcu.local [16 ms]
MAIL FROM: 
250 sender  ok [31 ms]
RCPT TO: 
550 #5.1.0 Address rejected. [31 ms]
QUIT
221 nachodevice.imcu.local [47 ms]


The nachdevice.imcu.local is my ironport, I get that
The 03030611n4m055.imcu.local is my Exchange server, on the internal
side of the firewall.  I have an mx record for the ironport's external
port.
I do not know why the 0303... name is being published to the world??
Any ideas??







~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

OT: J-O-B

[Andy Shook]

I have a need for a VMWare\Cisco\EMC rock star.  Al three would be nice but 
Cisco is the least important, I need someone who knows VMWare and EMC very, 
very, very well.

 Position is in Charlotte, NC.  Please send resumes or questions to me off-list.

Andy Shook
Senior Sales Engineer  |  Peak 10, Inc.
8910 Lenox Pointe Drive, Suite B, Charlotte, NC 28273
office: (704) 264-1078
fax: (704) 264-1075
mobile: (803) 517-2168
email:  andy.sh...@peak10.com
 www.peak10.com

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Automatic Updates has humongous datastore.edb and memory consumption

[Ben Scott]

On Thu, Aug 5, 2010 at 10:40 PM, Carl Houseman  wrote:
> Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the
> startup of the Automatic Updates service (wuauserv) is just killing it,
> using up all RAM and stalling everything due to all the swapping.

  There's a bug in WU or MSI or both or something that can cause it to
go insane and act that way.  A fix was released via WU to prevent it
from going in sane in the first place, but once it's happened it has
to be manually lobotomized to make it sane again.  It seems everybody
ends up writing a script to do this.  Here's mine:

http://sites.google.com/site/mailvortex/windows/install/wu-au-client-reinit

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Backups

[Cameron Cooper]

Due to a recent issue with some files within our system being deleted
and then taking 4 days to restore those files, we are looking for
suggestions/advice on what an efficient backup process should look like.
Here's what we currently have setup:

 

-  Every Sunday of the week we do a full backup to disk and Tape

-  Every Monday - Friday we do an incremental backup onto Tape

-  Every Monday - Saturday we do an incremental backup to disk

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com   | www.aurico.com

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[Carl Houseman]

Oh... I just realized you wanted me to delete the entire SoftwareDistribution
hierarchy... Previously I was only clearing out the datastore\Logs\ files in
addition to datastore.edb.

 

Found a SBS03 server that uses Microsoft's update servers with a 162 MB
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to 152
MB.  Deleted all SoftwareDistribution\ folders and datastore.edb rebuilt to
152 MB again.   So there's no apparent improvement from taking out all of
SoftwareDistribution vs. just the datastore.edb file.

 

But I'm still thinking, 170 MB datastore,.edb on XP Pro is abominably large.
And I should have gotten some minor improvement on the problem machine as
I've seen with every other machine I've rebuilt a datastore.edb on, but maybe
that only happens if some MS software has been uninstalled.

 

So anyone else?  If you have a a well-used XP Pro with lots of MS products
installed that uses MS's update servers, what is your
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?

 

Carl

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

The problem machine isn't local, but I found a local machine with a 80MB
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it rebuilt
to 33 MB.  Then I deleted the datastore.edb and the logs folder, and it
rebuilt to the same 33 MB size.  But I'll give your idea a try next time I
have face time at the machine.

 

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt
to 33 MB.  Coincidence, or result of both machines accessing the same WSUS
server?   The problem machine is using Microsoft's update servers.

 

Carl

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory
consumption

 

Does it make any difference if you clear out the whole SoftwareDistribution
directory? This is a tactic utilised in one of our AU cleanup scripts which
our desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

 

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the
startup of the Automatic Updates service (wuauserv) is just killing it, using
up all RAM and stalling everything due to all the swapping.  Machine has only
512MB, but this is not a question that must be answered with "add memory"
until I understand what is going on with Automatic Updates.

 

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file,
that file is about 170MB, and not coincidentally, 170MB is the peak VM size I
saw for both wuauclt.exe and the svchost.exe used by wuauserv.

So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and did
a wuauclt /detectnow, and it created a new datastore.edb of the same 170 MB
size as before.

 

Looking at my own XP machine, datastore.edb is about 6 MB.

 

And, I'm not finding much with google for "large datastore.edb" or "huge
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't
pegged because of all the swapping.  Anybody?

TIA,

Carl


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[Michael B. Smith]

My son's XP Pro gaming machine (which hasn't been rebuilt since 2005 and used 
to be my "working" machine, so it has just about every Microsoft desktop 
product installed) has a datastore.edb of 95 MB.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Carl Houseman [mailto:c.house...@gmail.com]
Sent: Friday, August 06, 2010 12:28 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption

Oh... I just realized you wanted me to delete the entire SoftwareDistribution 
hierarchy... Previously I was only clearing out the datastore\Logs\ files in 
addition to datastore.edb.

Found a SBS03 server that uses Microsoft's update servers with a 162 MB 
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to 152 MB. 
 Deleted all SoftwareDistribution\ folders and datastore.edb rebuilt to 152 MB 
again.   So there's no apparent improvement from taking out all of 
SoftwareDistribution vs. just the datastore.edb file.

But I'm still thinking, 170 MB datastore,.edb on XP Pro is abominably large.  
And I should have gotten some minor improvement on the problem machine as I've 
seen with every other machine I've rebuilt a datastore.edb on, but maybe that 
only happens if some MS software has been uninstalled.

So anyone else?  If you have a a well-used XP Pro with lots of MS products 
installed that uses MS's update servers, what is your 
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?

Carl

From: Carl Houseman [mailto:c.house...@gmail.com]
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption

The problem machine isn't local, but I found a local machine with a 80MB 
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it rebuilt 
to 33 MB.  Then I deleted the datastore.edb and the logs folder, and it rebuilt 
to the same 33 MB size.  But I'll give your idea a try next time I have face 
time at the machine.

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt to 
33 MB.  Coincidence, or result of both machines accessing the same WSUS server? 
  The problem machine is using Microsoft's update servers.

Carl

From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory 
consumption

Does it make any difference if you clear out the whole SoftwareDistribution 
directory? This is a tactic utilised in one of our AU cleanup scripts which our 
desktop guys claim helps out.
On 6 August 2010 03:40, Carl Houseman 
mailto:c.house...@gmail.com>> wrote:

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the 
startup of the Automatic Updates service (wuauserv) is just killing it, using 
up all RAM and stalling everything due to all the swapping.  Machine has only 
512MB, but this is not a question that must be answered with "add memory" until 
I understand what is going on with Automatic Updates.

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file, that 
file is about 170MB, and not coincidentally, 170MB is the peak VM size I saw 
for both wuauclt.exe and the svchost.exe used by wuauserv.
So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and did a 
wuauclt /detectnow, and it created a new datastore.edb of the same 170 MB size 
as before.

Looking at my own XP machine, datastore.edb is about 6 MB.

And, I'm not finding much with google for "large datastore.edb" or "huge 
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't 
pegged because of all the swapping.  Anybody?
TIA,
Carl





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[Carl Houseman]

Thanks for the script.  I've done everything but the registry changes and
re-registering .dll's, which I doubt will make a difference, at least on the
test machines I've got ready access to.  It's starting to look like 512MB of
RAM is really just too little to handle Automatic Updates from MS's servers
where all updates, including superceded versions, are approved.

Carl

-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Friday, August 06, 2010 12:22 PM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory
consumption

On Thu, Aug 5, 2010 at 10:40 PM, Carl Houseman  wrote:
> Looking at an XP Pro SP3 desktop yesterday/today and soon after booting,
the
> startup of the Automatic Updates service (wuauserv) is just killing it,
> using up all RAM and stalling everything due to all the swapping.

  There's a bug in WU or MSI or both or something that can cause it to
go insane and act that way.  A fix was released via WU to prevent it
from going in sane in the first place, but once it's happened it has
to be manually lobotomized to make it sane again.  It seems everybody
ends up writing a script to do this.  Here's mine:

http://sites.google.com/site/mailvortex/windows/install/wu-au-client-reinit

-- Ben



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Local server name appears on the Internet DNS

[Ben Scott]

On Fri, Aug 6, 2010 at 10:23 AM, itli...@imcu.com  wrote:
> There is a ptr for mail.imcu.com to 206.18.123.221 though.

  You've got that backwards.  Also, you should understand that
reverse-lookups (number-to-name) and forward-lookups (name-to-number)
have no inherent relationship.  They're resolved by completely
different paths, and generally the nameservers are hosted by
completely different organizations.

  Forward: When I look up "mail.imcu.com", my query eventually goes to
UltraDNS and they give me an IP address.  Specifically, in the zone
, hosted by UltraDNS, there is an A (address) record:

mail.imcu.com.  A   206.18.123.221

  You can associate whatever IP address you want with a name you own.
You could associate Microsoft's web site IP address with
 if you wanted to.

  Reverse: When I look up the IP address "206.18.123.221", that gets
turned into a query for <221.123.18.206.in-addr.arpa.>.  ARPA dates
back to when the Internet was the ARPANET.  "in-addr" is short for
"Internet address", a special domain reserved for reverse lookups.

  Note that the order of the address octets is reversed.  IP addresses
put the most significant part first.  For example, in 206.18.123.221,
208 might be a big network operator, 18 might be the area you're in,
123 might be a sub-network delegated to you, and 221 might be one of
your nodes.[1]  Conversely, DNS puts the most significant part last.
For example, in , the "com" is the most significant.
So the IP address order gets reversed to work for DNS.

  Anyway, that leads me to a completely separate zone,
<123.18.206.in-addr.arpa.>, hosted by AT&T, where there are CNAME and
PTR records:

221.123.18.206.in-addr.arpa.CNAME   
221.208/28.123.18.206.in-addr.arpa.
221.208/28.123.18.206.in-addr.arpa. PTR 
03030611n4m055.imcu.local.

  The CNAME in the reverse lookup has to do with how your ISP has
structured their network.  The details of that aren't relevant to this
problem.

  But the PTR tells me that 206.18.123.221 is associated with
<03030611n4m055.imcu.local.>  As before, whoever "owns" the DNS zone
can say whatever they want.  They could claim 206.18.123.221 is
associated with  if they wanted to.

  How <03030611n4m055.imcu.local.> got in there is anybody's guess.
Perhaps someone at your organization made a mistake when registering
things with AT&T.  Perhaps AT&T had their servers open to dynamic DNS
update, and one of your systems tried  to register itself that way.

  Either which way, you'll have to contact AT&T to get it fixed, as
others have said.

-- Ben

[1] Technically, I can tell from the CNAME that AT&T's network is
*not* laid out this way.  But the reality is more confusing and not
relevant to this problem.  Hence I pretend I don't know and write
"might".

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[John Aldrich]

My machine the datastore.edb is 165 mb.

 

John-AldrichTile-Tools

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 12:28 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

Oh... I just realized you wanted me to delete the entire
SoftwareDistribution hierarchy... Previously I was only clearing out the
datastore\Logs\ files in addition to datastore.edb.

 

Found a SBS03 server that uses Microsoft's update servers with a 162 MB
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to 152
MB.  Deleted all SoftwareDistribution\ folders and datastore.edb rebuilt to
152 MB again.   So there's no apparent improvement from taking out all of
SoftwareDistribution vs. just the datastore.edb file.

 

But I'm still thinking, 170 MB datastore,.edb on XP Pro is abominably large.
And I should have gotten some minor improvement on the problem machine as
I've seen with every other machine I've rebuilt a datastore.edb on, but
maybe that only happens if some MS software has been uninstalled.

 

So anyone else?  If you have a a well-used XP Pro with lots of MS products
installed that uses MS's update servers, what is your
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?

 

Carl

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

The problem machine isn't local, but I found a local machine with a 80MB
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it
rebuilt to 33 MB.  Then I deleted the datastore.edb and the logs folder, and
it rebuilt to the same 33 MB size.  But I'll give your idea a try next time
I have face time at the machine.

 

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt
to 33 MB.  Coincidence, or result of both machines accessing the same WSUS
server?   The problem machine is using Microsoft's update servers.

 

Carl

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory
consumption

 

Does it make any difference if you clear out the whole SoftwareDistribution
directory? This is a tactic utilised in one of our AU cleanup scripts which
our desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

 

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the
startup of the Automatic Updates service (wuauserv) is just killing it,
using up all RAM and stalling everything due to all the swapping.  Machine
has only 512MB, but this is not a question that must be answered with "add
memory" until I understand what is going on with Automatic Updates.

 

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file,
that file is about 170MB, and not coincidentally, 170MB is the peak VM size
I saw for both wuauclt.exe and the svchost.exe used by wuauserv.

So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and
did a wuauclt /detectnow, and it created a new datastore.edb of the same 170
MB size as before.

 

Looking at my own XP machine, datastore.edb is about 6 MB.

 

And, I'm not finding much with google for "large datastore.edb" or "huge
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't
pegged because of all the swapping.  Anybody?

TIA,

Carl

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: Backups

[Ben Scott]

On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper  wrote:
> Due to a recent issue with some files within our system being deleted and
> then taking 4 days to restore those files, we are looking for
> suggestions/advice on what an efficient backup process should look like.
> Here’s what we currently have setup:
>
> -  Every Sunday of the week we do a full backup to disk and Tape
> -  Every Monday – Friday we do an incremental backup onto Tape
> -  Every Monday – Saturday we do an incremental backup to disk

  Maybe you could do differential backups to tape.  "Incremental"
backs up everything changed since the previous Full or Incremental.
So in a restore, you have to restore the Full, then each Incremental.
"Differential" backs up everything changed since the previous Full.
So in a restore, you restore the Full and then the most recent
Differential.

  Maybe you could do a full every night.

  Maybe you could do disk-to-disk-to-tape.

  Insufficient data for a better recommendation.  It would help to
know how many computers you're backing up, data set size, tape size,
backup disk size, and what software -- OS and backup -- you're using.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Backups

[Andrew S. Baker]

What's your retention period on the tapes?  (I'm assuming that the disk
backup gets overwritten each week?)

Why did it take 4 days to restore the file?

Perhaps understanding that will help us provide suggestions.


*ASB *(My XeeSM Profile) 
*Exploiting Technology for Business Advantage...*
* *
Signature powered by WiseStamp 


On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper  wrote:

>  Due to a recent issue with some files within our system being deleted and
> then taking 4 days to restore those files, we are looking for
> suggestions/advice on what an efficient backup process should look like.
> Here’s what we currently have setup:
>
>
>
> -  Every Sunday of the week we do a full backup to disk and Tape
>
> -  Every Monday – Friday we do an incremental backup onto Tape
>
> -  Every Monday – Saturday we do an incremental backup to disk
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified***
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-255-1896
>
> ccoo...@aurico.com | www.aurico.com
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[Free, Bob]

5+ year old ThinkPad home machine that seems like I've loaded nearly
anything MS makes on at one time or another is 113MB. 

 

3 month old Dell laptop is 89MB.

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 9:28 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

Oh... I just realized you wanted me to delete the entire
SoftwareDistribution hierarchy... Previously I was only clearing out the
datastore\Logs\ files in addition to datastore.edb.

 

Found a SBS03 server that uses Microsoft's update servers with a 162 MB
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to
152 MB.  Deleted all SoftwareDistribution\ folders and datastore.edb
rebuilt to 152 MB again.   So there's no apparent improvement from
taking out all of SoftwareDistribution vs. just the datastore.edb file.

 

But I'm still thinking, 170 MB datastore,.edb on XP Pro is abominably
large.  And I should have gotten some minor improvement on the problem
machine as I've seen with every other machine I've rebuilt a
datastore.edb on, but maybe that only happens if some MS software has
been uninstalled.

 

So anyone else?  If you have a a well-used XP Pro with lots of MS
products installed that uses MS's update servers, what is your
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?

 

Carl

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

The problem machine isn't local, but I found a local machine with a 80MB
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it
rebuilt to 33 MB.  Then I deleted the datastore.edb and the logs folder,
and it rebuilt to the same 33 MB size.  But I'll give your idea a try
next time I have face time at the machine.

 

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also
rebuilt to 33 MB.  Coincidence, or result of both machines accessing the
same WSUS server?   The problem machine is using Microsoft's update
servers.

 

Carl

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory
consumption

 

Does it make any difference if you clear out the whole
SoftwareDistribution directory? This is a tactic utilised in one of our
AU cleanup scripts which our desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

 

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting,
the startup of the Automatic Updates service (wuauserv) is just killing
it, using up all RAM and stalling everything due to all the swapping.
Machine has only 512MB, but this is not a question that must be answered
with "add memory" until I understand what is going on with Automatic
Updates.

 

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb
file, that file is about 170MB, and not coincidentally, 170MB is the
peak VM size I saw for both wuauclt.exe and the svchost.exe used by
wuauserv.

So I stopped wuauserv, renamed the datastore.edb, started up wuauserv
and did a wuauclt /detectnow, and it created a new datastore.edb of the
same 170 MB size as before.

 

Looking at my own XP machine, datastore.edb is about 6 MB.

 

And, I'm not finding much with google for "large datastore.edb" or "huge
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU
isn't pegged because of all the swapping.  Anybody?

TIA,

Carl

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[John Aldrich]

I just tried that script and it didn't find a number of the registry
entries. Now I'm connected to Microsoft Update and the file size on the
Software Distribution\datastore directory is climbing. L

 

John-AldrichTile-Tools

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, August 06, 2010 12:51 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

My machine the datastore.edb is 165 mb.

 

John-AldrichTile-Tools

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 12:28 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

Oh... I just realized you wanted me to delete the entire
SoftwareDistribution hierarchy... Previously I was only clearing out the
datastore\Logs\ files in addition to datastore.edb.

 

Found a SBS03 server that uses Microsoft's update servers with a 162 MB
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to 152
MB.  Deleted all SoftwareDistribution\ folders and datastore.edb rebuilt to
152 MB again.   So there's no apparent improvement from taking out all of
SoftwareDistribution vs. just the datastore.edb file.

 

But I'm still thinking, 170 MB datastore,.edb on XP Pro is abominably large.
And I should have gotten some minor improvement on the problem machine as
I've seen with every other machine I've rebuilt a datastore.edb on, but
maybe that only happens if some MS software has been uninstalled.

 

So anyone else?  If you have a a well-used XP Pro with lots of MS products
installed that uses MS's update servers, what is your
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?

 

Carl

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

The problem machine isn't local, but I found a local machine with a 80MB
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it
rebuilt to 33 MB.  Then I deleted the datastore.edb and the logs folder, and
it rebuilt to the same 33 MB size.  But I'll give your idea a try next time
I have face time at the machine.

 

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt
to 33 MB.  Coincidence, or result of both machines accessing the same WSUS
server?   The problem machine is using Microsoft's update servers.

 

Carl

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory
consumption

 

Does it make any difference if you clear out the whole SoftwareDistribution
directory? This is a tactic utilised in one of our AU cleanup scripts which
our desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

 

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the
startup of the Automatic Updates service (wuauserv) is just killing it,
using up all RAM and stalling everything due to all the swapping.  Machine
has only 512MB, but this is not a question that must be answered with "add
memory" until I understand what is going on with Automatic Updates.

 

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file,
that file is about 170MB, and not coincidentally, 170MB is the peak VM size
I saw for both wuauclt.exe and the svchost.exe used by wuauserv.

So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and
did a wuauclt /detectnow, and it created a new datastore.edb of the same 170
MB size as before.

 

Looking at my own XP machine, datastore.edb is about 6 MB.

 

And, I'm not finding much with google for "large datastore.edb" or "huge
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't
pegged because of all the swapping.  Anybody?

TIA,

Carl

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: Automatic Updates has humongous datastore.edb and memory consumption

[Don Kuhlman]

I just checked an older machine that I'm running a missed update on and it's 
about 100 meg...

Don K





From: Carl Houseman 
To: NT System Admin Issues 
Sent: Fri, August 6, 2010 11:27:41 AM
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption


Oh... I just realized you wanted me to delete the entire SoftwareDistribution 
hierarchy... Previously I was only clearing out the datastore\Logs\ files in 
addition to datastore.edb.
 
Found a SBS03 server that uses Microsoft's update servers with a 162 MB 
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to 152 
MB.  
Deleted all SoftwareDistribution\ folders and datastore.edb rebuilt to 152 MB 
again.   So there's no apparent improvement from taking out all of 
SoftwareDistribution vs. just the datastore.edb file.
 
But I’m still thinking, 170 MB datastore,.edb on XP Pro is abominably large.  
And I should have gotten some minor improvement on the problem machine as I've 
seen with every other machine I've rebuilt a datastore.edb on, but maybe that 
only happens if some MS software has been uninstalled.
 
So anyone else?  If you have a a well-used XP Pro with lots of MS products 
installed that uses MS's update servers, what is your 
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?
 
Carl
 
From:Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption
 
The problem machine isn't local, but I found a local machine with a 80MB 
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it rebuilt 
to 
33 MB.  Then I deleted the datastore.edb and the logs folder, and it rebuilt to 
the same 33 MB size.  But I'll give your idea a try next time I have face time 
at the machine.
 
On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt to 
33 MB.  Coincidence, or result of both machines accessing the same WSUS 
server?   The problem machine is using Microsoft's update servers.
 
Carl
 
From:James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory 
consumption
 
Does it make any difference if you clear out the whole SoftwareDistribution 
directory? This is a tactic utilised in one of our AU cleanup scripts which our 
desktop guys claim helps out.
On 6 August 2010 03:40, Carl Houseman  wrote:
 
Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the 
startup of the Automatic Updates service (wuauserv) is just killing it, using 
up 
all RAM and stalling everything due to all the swapping.  Machine has only 
512MB, but this is not a question that must be answered with "add memory" until 
I understand what is going on with Automatic Updates.
 
Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file, that 
file is about 170MB, and not coincidentally, 170MB is the peak VM size I saw 
for 
both wuauclt.exe and the svchost.exe used by wuauserv.
So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and did a 
wuauclt /detectnow, and it created a new datastore.edb of the same 170 MB size 
as before.
 
Looking at my own XP machine, datastore.edb is about 6 MB.
 
And, I'm not finding much with google for "large datastore.edb" or "huge 
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't 
pegged because of all the swapping.  Anybody?
TIA,
Carl


  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Backups

[Cameron Cooper]

- We are backing up 7 servers (exchange, terminal, storage server, sql cluster 
and two web servers).

- OS - Windows Server 2003, 2003 R2, 2008 R2.

- Amount of data backed up - 400GB

- Backup Software - Backup Exec 12

- Tape drive LTO with tapes that can hold 800GB (Native)/1600GB (Compressed)

- The server that we are using for backup-to-disk has 1.3TB free on it

_
Cameron Cooper
Network Administrator | CompTIA A+ Certified
Aurico Reports, Inc
Phone: 847-890-4021 | Fax: 847-255-1896
ccoo...@aurico.com | www.aurico.com


-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Friday, August 06, 2010 11:55 AM
To: NT System Admin Issues
Subject: Re: Backups

On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper  wrote:
> Due to a recent issue with some files within our system being deleted and
> then taking 4 days to restore those files, we are looking for
> suggestions/advice on what an efficient backup process should look like.
> Here's what we currently have setup:
>
> -  Every Sunday of the week we do a full backup to disk and Tape
> -  Every Monday - Friday we do an incremental backup onto Tape
> -  Every Monday - Saturday we do an incremental backup to disk

  Maybe you could do differential backups to tape.  "Incremental"
backs up everything changed since the previous Full or Incremental.
So in a restore, you have to restore the Full, then each Incremental.
"Differential" backs up everything changed since the previous Full.
So in a restore, you restore the Full and then the most recent
Differential.

  Maybe you could do a full every night.

  Maybe you could do disk-to-disk-to-tape.

  Insufficient data for a better recommendation.  It would help to
know how many computers you're backing up, data set size, tape size,
backup disk size, and what software -- OS and backup -- you're using.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Backups

[Cameron Cooper]

The retention period on the tapes is at least one full day.  For the
full tape backups it's a week.  The incremental backups are one full day
as well.

 

We currently have 5 tapes that we rotate out.  One for the weekly full
backup and the other four for the daily incremental backup.

 

Part of the reason that it took 4 days was due to restoring the tapes
and being limited by the hardware.  The tape drive is an external Dell
LTO box that only takes one tape at a time.  Once restoring the tape to
disk, we had to wait for the cataloging of the media to finish.  Once
that was done, then we could go into the disk media to look if the files
were there.  The server that performs the backup, is a Dell PowerEdge
2950 with dual Xeon CPU @ 1.60GHz (each) with 5GB of RAM installed.
Also the server's only role is to backup.

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 06, 2010 11:56 AM
To: NT System Admin Issues
Subject: Re: Backups

 

What's your retention period on the tapes?  (I'm assuming that the disk
backup gets overwritten each week?)

 

Why did it take 4 days to restore the file?

 

Perhaps understanding that will help us provide suggestions.


ASB (My XeeSM Profile)   
Exploiting Technology for Business Advantage...
 

Signature powered by WiseStamp 


 

On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper 
wrote:

Due to a recent issue with some files within our system being deleted
and then taking 4 days to restore those files, we are looking for
suggestions/advice on what an efficient backup process should look like.
Here's what we currently have setup:

 

-  Every Sunday of the week we do a full backup to disk and Tape

-  Every Monday - Friday we do an incremental backup onto Tape

-  Every Monday - Saturday we do an incremental backup to disk

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Adobe Acrobat Font Parsing Integer Overflow Vulnerability

[Andrew S. Baker]

https://isc.sans.edu/diary.html?storyid=9334#comment

Another Adobe Acrobat vulnerability...



*ASB *(My XeeSM Profile) 
*Exploiting Technology for Business Advantage...*
* *
Signature powered by WiseStamp 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Automatic Updates has humongous datastore.edb and memory consumption

[Carl Houseman]

What was the final result?

 

Thanks everyone for the datapoints, your efforts are much appreciated.  I'm
starting to think, even if I can do something to drop the datastore.edb down
to ~100 MB and the startup of wuauserv becomes almost tolerable, they'll want
to use the machine for another couple years at least, and the RAM upgrade
will be needed sooner or later so might as well go with "sooner".

 

Carl

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, August 06, 2010 12:59 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

I just tried that script and it didn't find a number of the registry entries.
Now I'm connected to Microsoft Update and the file size on the Software
Distribution\datastore directory is climbing. L

 

 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, August 06, 2010 12:51 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

My machine the datastore.edb is 165 mb.

 

 

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 12:28 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

Oh... I just realized you wanted me to delete the entire SoftwareDistribution
hierarchy... Previously I was only clearing out the datastore\Logs\ files in
addition to datastore.edb.

 

Found a SBS03 server that uses Microsoft's update servers with a 162 MB
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to 152
MB.  Deleted all SoftwareDistribution\ folders and datastore.edb rebuilt to
152 MB again.   So there's no apparent improvement from taking out all of
SoftwareDistribution vs. just the datastore.edb file.

 

But I'm still thinking, 170 MB datastore,.edb on XP Pro is abominably large.
And I should have gotten some minor improvement on the problem machine as
I've seen with every other machine I've rebuilt a datastore.edb on, but maybe
that only happens if some MS software has been uninstalled.

 

So anyone else?  If you have a a well-used XP Pro with lots of MS products
installed that uses MS's update servers, what is your
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?

 

Carl

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory
consumption

 

The problem machine isn't local, but I found a local machine with a 80MB
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it rebuilt
to 33 MB.  Then I deleted the datastore.edb and the logs folder, and it
rebuilt to the same 33 MB size.  But I'll give your idea a try next time I
have face time at the machine.

 

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt
to 33 MB.  Coincidence, or result of both machines accessing the same WSUS
server?   The problem machine is using Microsoft's update servers.

 

Carl

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory
consumption

 

Does it make any difference if you clear out the whole SoftwareDistribution
directory? This is a tactic utilised in one of our AU cleanup scripts which
our desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

 

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the
startup of the Automatic Updates service (wuauserv) is just killing it, using
up all RAM and stalling everything due to all the swapping.  Machine has only
512MB, but this is not a question that must be answered with "add memory"
until I understand what is going on with Automatic Updates.

 

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file,
that file is about 170MB, and not coincidentally, 170MB is the peak VM size I
saw for both wuauclt.exe and the svchost.exe used by wuauserv.

So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and did
a wuauclt /detectnow, and it created a new datastore.edb of the same 170 MB
size as before.

 

Looking at my own XP machine, datastore.edb is about 6 MB.

 

And, I'm not finding much with google for "large datastore.edb" or "huge
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't
pegged because of all the swapping.  Anybody?

TIA,

Carl

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Any have experience with USA.NET?

[David Lum]

Pardon my 2nd cross-post in as many days... we are looking at using USA.NET for 
hosting our Exchange environment, does anyone here have an experience with 
them, good bad or otherwise?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Backups

[Andrew S. Baker]

So you're not keeping the backup to disk at all?

BTW, I can't see how the retention of the tapes can be classified as "at
least one full day".It would have to be a week or something.
Otherwise, how would you restore on Friday, what was lost on Wednesday if it
was only created on Tuesday morning?


I would be inclined to go with the following backup scheme:

   - *Full Backup to Disk* -- Each Sunday
  - Alternate backup jobs by week (total of 2 jobs) -- Retention of 2
  Weeks

  - *Differential Backup to Disk* -- Monday to Saturday
  - Retention of 2 Weeks (tied to the corresponding Full)

  - *Weekly to Tape* -- Every Saturday
  - Backup Recently Completed Full + Diff and take off site -- Retention
  of 6 Weeks


   - *Monthly to Tape* -- Every Saturday of Each Month
  - Backup Recently Completed Full + Diff and take off site -- Retention
  of 12-24 Months


Now, you'll be able to restore files of up to 2 weeks from disk, and up to 6
weeks from tape.   Beyond 6 weeks, you'll have to restore the closest month
end version, assuming one exists.

I've used some variation of this scheme for the past 4 or 5 years.
 Environments that are more critical can copy to tape and take off-site
daily...  (or find another way to replicate the backups to a separate
location)



*ASB *(My XeeSM Profile) 
*Exploiting Technology for Business Advantage...*
* *
Signature powered by WiseStamp 


On Fri, Aug 6, 2010 at 1:15 PM, Cameron Cooper  wrote:

>  The retention period on the tapes is at least one full day.  For the full
> tape backups it’s a week.  The incremental backups are one full day as well.
>
>
>
> We currently have 5 tapes that we rotate out.  One for the weekly full
> backup and the other four for the daily incremental backup.
>
>
>
> Part of the reason that it took 4 days was due to restoring the tapes and
> being limited by the hardware.  The tape drive is an external Dell LTO box
> that only takes one tape at a time.  Once restoring the tape to disk, we had
> to wait for the cataloging of the media to finish.  Once that was done, then
> we could go into the disk media to look if the files were there.  The server
> that performs the backup, is a Dell PowerEdge 2950 with dual Xeon CPU @
> 1.60GHz (each) with 5GB of RAM installed.  Also the server’s only role is to
> backup.
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified***
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-255-1896
>
> ccoo...@aurico.com | www.aurico.com
>
>
>
> *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
> *Sent:* Friday, August 06, 2010 11:56 AM
>
> *To:* NT System Admin Issues
> *Subject:* Re: Backups
>
>
>
> What's your retention period on the tapes?  (I'm assuming that the disk
> backup gets overwritten each week?)
>
>
>
> Why did it take 4 days to restore the file?
>
>
>
> Perhaps understanding that will help us provide suggestions.
>
>
> *ASB *(My XeeSM Profile) 
> *Exploiting Technology for Business Advantage...*
> * *
>
> Signature powered by WiseStamp 
>
>
>
> On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper 
> wrote:
>
> Due to a recent issue with some files within our system being deleted and
> then taking 4 days to restore those files, we are looking for
> suggestions/advice on what an efficient backup process should look like.
> Here’s what we currently have setup:
>
>
>
> -  Every Sunday of the week we do a full backup to disk and Tape
>
> -  Every Monday – Friday we do an incremental backup onto Tape
>
> -  Every Monday – Saturday we do an incremental backup to disk
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified*
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-255-1896
>
> ccoo...@aurico.com | www.aurico.com
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Backups

[Cameron Cooper]

Sorry... the retention times are indefinite.

 

Each night the backup-to-disk backup jobs run incremental, but run to
the same folder each night.  So the files on the disk, that we needed,
weren't on there.

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 06, 2010 12:44 PM
To: NT System Admin Issues
Subject: Re: Backups

 

So you're not keeping the backup to disk at all?

 

BTW, I can't see how the retention of the tapes can be classified as "at
least one full day".It would have to be a week or something.
Otherwise, how would you restore on Friday, what was lost on Wednesday
if it was only created on Tuesday morning?

 

 

I would be inclined to go with the following backup scheme:

*   Full Backup to Disk -- Each Sunday

*   Alternate backup jobs by week (total of 2 jobs) --
Retention of 2 Weeks

*   Differential Backup to Disk -- Monday to Saturday

*   Retention of 2 Weeks (tied to the corresponding Full)

*   Weekly to Tape -- Every Saturday

*   Backup Recently Completed Full + Diff and take off site
-- Retention of 6 Weeks

*   Monthly to Tape -- Every Saturday of Each Month

*   Backup Recently Completed Full + Diff and take off site
-- Retention of 12-24 Months

 

Now, you'll be able to restore files of up to 2 weeks from disk, and up
to 6 weeks from tape.   Beyond 6 weeks, you'll have to restore the
closest month end version, assuming one exists.

 

I've used some variation of this scheme for the past 4 or 5 years.
Environments that are more critical can copy to tape and take off-site
daily...  (or find another way to replicate the backups to a separate
location)

 



ASB (My XeeSM Profile)   
Exploiting Technology for Business Advantage...
 

Signature powered by WiseStamp 


 

On Fri, Aug 6, 2010 at 1:15 PM, Cameron Cooper 
wrote:

The retention period on the tapes is at least one full day.  For the
full tape backups it's a week.  The incremental backups are one full day
as well.

 

We currently have 5 tapes that we rotate out.  One for the weekly full
backup and the other four for the daily incremental backup.

 

Part of the reason that it took 4 days was due to restoring the tapes
and being limited by the hardware.  The tape drive is an external Dell
LTO box that only takes one tape at a time.  Once restoring the tape to
disk, we had to wait for the cataloging of the media to finish.  Once
that was done, then we could go into the disk media to look if the files
were there.  The server that performs the backup, is a Dell PowerEdge
2950 with dual Xeon CPU @ 1.60GHz (each) with 5GB of RAM installed.
Also the server's only role is to backup.

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 06, 2010 11:56 AM


To: NT System Admin Issues
Subject: Re: Backups

 

What's your retention period on the tapes?  (I'm assuming that the disk
backup gets overwritten each week?)

 

Why did it take 4 days to restore the file?

 

Perhaps understanding that will help us provide suggestions.


ASB (My XeeSM Profile)   
Exploiting Technology for Business Advantage...
 

Signature powered by WiseStamp 


 

On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper 
wrote:

Due to a recent issue with some files within our system being deleted
and then taking 4 days to restore those files, we are looking for
suggestions/advice on what an efficient backup process should look like.
Here's what we currently have setup:

 

-  Every Sunday of the week we do a full backup to disk and Tape

-  Every Monday - Friday we do an incremental backup onto Tape

-  Every Monday - Saturday we do an incremental backup to disk

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Backups

[Jonathan Link]

Get more disk space, keep a couple of weeks on there.  Heck even on a NAS,
disks are cheap, enclosures are relatively cheap.
What was the cost of using the personnel involved to restore this backup?
Is that more than you could spend on additional disk capcity?
I have one week of backups accessible.  After my backup job runs, I dump it
out to another directory with the date on it.

On Fri, Aug 6, 2010 at 1:51 PM, Cameron Cooper  wrote:

>  Sorry… the retention times are indefinite.
>
>
>
> Each night the backup-to-disk backup jobs run incremental, but run to the
> same folder each night.  So the files on the disk, that we needed, weren’t
> on there.
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified***
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-255-1896
>
> ccoo...@aurico.com | www.aurico.com
>
>
>
> *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
> *Sent:* Friday, August 06, 2010 12:44 PM
>
> *To:* NT System Admin Issues
> *Subject:* Re: Backups
>
>
>
> So you're not keeping the backup to disk at all?
>
>
>
> BTW, I can't see how the retention of the tapes can be classified as "at
> least one full day".It would have to be a week or something.
> Otherwise, how would you restore on Friday, what was lost on Wednesday if it
> was only created on Tuesday morning?
>
>
>
>
>
> I would be inclined to go with the following backup scheme:
>
>- *Full Backup to Disk* -- Each Sunday
>
>
> - Alternate backup jobs by week (total of 2 jobs) -- Retention of 2
>   Weeks
>
>
>- *Differential Backup to Disk* -- Monday to Saturday
>
>
> - Retention of 2 Weeks (tied to the corresponding Full)
>
>
>- *Weekly to Tape* -- Every Saturday
>
>
> - Backup Recently Completed Full + Diff and take off site -- Retention
>   of 6 Weeks
>
>
>- *Monthly to Tape* -- Every Saturday of Each Month
>
>
> - Backup Recently Completed Full + Diff and take off site -- Retention
>   of 12-24 Months
>
>
>
> Now, you'll be able to restore files of up to 2 weeks from disk, and up to
> 6 weeks from tape.   Beyond 6 weeks, you'll have to restore the closest
> month end version, assuming one exists.
>
>
>
> I've used some variation of this scheme for the past 4 or 5 years.
>  Environments that are more critical can copy to tape and take off-site
> daily...  (or find another way to replicate the backups to a separate
> location)
>
>
>
>
>
> *ASB *(My XeeSM Profile) 
> *Exploiting Technology for Business Advantage...*
> * *
>
> Signature powered by WiseStamp 
>
>
>
> On Fri, Aug 6, 2010 at 1:15 PM, Cameron Cooper  wrote:
>
> The retention period on the tapes is at least one full day.  For the full
> tape backups it’s a week.  The incremental backups are one full day as well.
>
>
>
> We currently have 5 tapes that we rotate out.  One for the weekly full
> backup and the other four for the daily incremental backup.
>
>
>
> Part of the reason that it took 4 days was due to restoring the tapes and
> being limited by the hardware.  The tape drive is an external Dell LTO box
> that only takes one tape at a time.  Once restoring the tape to disk, we had
> to wait for the cataloging of the media to finish.  Once that was done, then
> we could go into the disk media to look if the files were there.  The server
> that performs the backup, is a Dell PowerEdge 2950 with dual Xeon CPU @
> 1.60GHz (each) with 5GB of RAM installed.  Also the server’s only role is to
> backup.
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified*
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-255-1896
>
> ccoo...@aurico.com | www.aurico.com
>
>
>
> *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
> *Sent:* Friday, August 06, 2010 11:56 AM
>
>
> *To:* NT System Admin Issues
> *Subject:* Re: Backups
>
>
>
> What's your retention period on the tapes?  (I'm assuming that the disk
> backup gets overwritten each week?)
>
>
>
> Why did it take 4 days to restore the file?
>
>
>
> Perhaps understanding that will help us provide suggestions.
>
>
> *ASB *(My XeeSM Profile) 
> *Exploiting Technology for Business Advantage...*
> * *
>
> Signature powered by WiseStamp 
>
>
>
> On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper 
> wrote:
>
> Due to a recent issue with some files within our system being deleted and
> then taking 4 days to restore those files, we are looking for
> suggestions/advice on what an efficient backup process should look like.
> Here’s what we currently have setup:
>
>
>
> -  Every Sunday of the week we do a full backup to disk and Tape
>
> -  Every Monday – Friday we do an incremental backup onto Tape
>
> -  Every Monday – Saturday we do an incremental backup to disk
>
>
>
> _
>
> *Cameron Cooper*
>
> *Ne

RE: Backups

[Cameron Cooper]

For the Full Backup to Disk... by alternating backup jobs... what do you
mean there?

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 06, 2010 12:44 PM
To: NT System Admin Issues
Subject: Re: Backups

 

So you're not keeping the backup to disk at all?

 

BTW, I can't see how the retention of the tapes can be classified as "at
least one full day".It would have to be a week or something.
Otherwise, how would you restore on Friday, what was lost on Wednesday
if it was only created on Tuesday morning?

 

 

I would be inclined to go with the following backup scheme:

*   Full Backup to Disk -- Each Sunday

*   Alternate backup jobs by week (total of 2 jobs) --
Retention of 2 Weeks

*   Differential Backup to Disk -- Monday to Saturday

*   Retention of 2 Weeks (tied to the corresponding Full)

*   Weekly to Tape -- Every Saturday

*   Backup Recently Completed Full + Diff and take off site
-- Retention of 6 Weeks

*   Monthly to Tape -- Every Saturday of Each Month

*   Backup Recently Completed Full + Diff and take off site
-- Retention of 12-24 Months

 

Now, you'll be able to restore files of up to 2 weeks from disk, and up
to 6 weeks from tape.   Beyond 6 weeks, you'll have to restore the
closest month end version, assuming one exists.

 

I've used some variation of this scheme for the past 4 or 5 years.
Environments that are more critical can copy to tape and take off-site
daily...  (or find another way to replicate the backups to a separate
location)

 



ASB (My XeeSM Profile)   
Exploiting Technology for Business Advantage...
 

Signature powered by WiseStamp 


 

On Fri, Aug 6, 2010 at 1:15 PM, Cameron Cooper 
wrote:

The retention period on the tapes is at least one full day.  For the
full tape backups it's a week.  The incremental backups are one full day
as well.

 

We currently have 5 tapes that we rotate out.  One for the weekly full
backup and the other four for the daily incremental backup.

 

Part of the reason that it took 4 days was due to restoring the tapes
and being limited by the hardware.  The tape drive is an external Dell
LTO box that only takes one tape at a time.  Once restoring the tape to
disk, we had to wait for the cataloging of the media to finish.  Once
that was done, then we could go into the disk media to look if the files
were there.  The server that performs the backup, is a Dell PowerEdge
2950 with dual Xeon CPU @ 1.60GHz (each) with 5GB of RAM installed.
Also the server's only role is to backup.

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 06, 2010 11:56 AM


To: NT System Admin Issues
Subject: Re: Backups

 

What's your retention period on the tapes?  (I'm assuming that the disk
backup gets overwritten each week?)

 

Why did it take 4 days to restore the file?

 

Perhaps understanding that will help us provide suggestions.


ASB (My XeeSM Profile)   
Exploiting Technology for Business Advantage...
 

Signature powered by WiseStamp 


 

On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper 
wrote:

Due to a recent issue with some files within our system being deleted
and then taking 4 days to restore those files, we are looking for
suggestions/advice on what an efficient backup process should look like.
Here's what we currently have setup:

 

-  Every Sunday of the week we do a full backup to disk and Tape

-  Every Monday - Friday we do an incremental backup onto Tape

-  Every Monday - Saturday we do an incremental backup to disk

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Backups

[Sam Cayze]

4 days?  What is your rate of transfer?  Maybe an issue there.  My
largest server, 300GB server, I can restore in about 2-3 hours.  (You
mentioned 400GB in a later email.)

 

Sam

 

 

 

From: Cameron Cooper [mailto:ccoo...@aurico.com] 
Sent: Friday, August 06, 2010 11:29 AM
To: NT System Admin Issues
Subject: Backups

 

Due to a recent issue with some files within our system being deleted
and then taking 4 days to restore those files, we are looking for
suggestions/advice on what an efficient backup process should look like.
Here's what we currently have setup:

 

-  Every Sunday of the week we do a full backup to disk and Tape

-  Every Monday - Friday we do an incremental backup onto Tape

-  Every Monday - Saturday we do an incremental backup to disk

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Any have experience with USA.NET?

[N Parr]

I've been using them as a pop address for over 10 years now and never
had an issue.  I know that doesn't really help with your question but
still a good reference.  



From: David Lum [mailto:david@nwea.org] 
Sent: Friday, August 06, 2010 12:37 PM
To: NT System Admin Issues
Subject: Any have experience with USA.NET?



Pardon my 2nd cross-post in as many days... we are looking at using
USA.NET for hosting our Exchange environment, does anyone here have an
experience with them, good bad or otherwise?

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Backups

[Jacob]

We do full backups from all server to disk(s) on our backup server every
night.

 

Every Thursday night, a full backup from the backup server to tape is
started and completed by Friday afternoon. Tapes are taken off site Friday
evening when I go home.

 

Recovery from the backup server for accidentally deleted files takes about a
minute or so.

 

Jacob 

 

From: Cameron Cooper [mailto:ccoo...@aurico.com] 
Sent: Friday, August 06, 2010 9:29 AM
To: NT System Admin Issues
Subject: Backups

 

Due to a recent issue with some files within our system being deleted and
then taking 4 days to restore those files, we are looking for
suggestions/advice on what an efficient backup process should look like.
Here's what we currently have setup:

 

-  Every Sunday of the week we do a full backup to disk and Tape

-  Every Monday - Friday we do an incremental backup onto Tape

-  Every Monday - Saturday we do an incremental backup to disk

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Backups

[Cameron Cooper]

Here's the info for the restore to disk job:

 

-  Amount of data restored: 57GB

-  Job Rate: 1,841.00 MB/Min

-  Job time: 29minutes and 36 seconds

 

The data was restored to a drive on a different server, so at this point
the speed of the NIC (1GB) would be a bottleneck.

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

From: Sam Cayze [mailto:sam.ca...@rollouts.com] 
Sent: Friday, August 06, 2010 1:14 PM
To: NT System Admin Issues
Subject: RE: Backups

 

4 days?  What is your rate of transfer?  Maybe an issue there.  My
largest server, 300GB server, I can restore in about 2-3 hours.  (You
mentioned 400GB in a later email.)

 

Sam

 

 

 

From: Cameron Cooper [mailto:ccoo...@aurico.com] 
Sent: Friday, August 06, 2010 11:29 AM
To: NT System Admin Issues
Subject: Backups

 

Due to a recent issue with some files within our system being deleted
and then taking 4 days to restore those files, we are looking for
suggestions/advice on what an efficient backup process should look like.
Here's what we currently have setup:

 

-  Every Sunday of the week we do a full backup to disk and Tape

-  Every Monday - Friday we do an incremental backup onto Tape

-  Every Monday - Saturday we do an incremental backup to disk

 

_

Cameron Cooper

Network Administrator | CompTIA A+ Certified

Aurico Reports, Inc

Phone: 847-890-4021 | Fax: 847-255-1896

ccoo...@aurico.com | www.aurico.com

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

[Ziots, Edward]

Yep, 

 

And still going to keep coming, until Adobe changes its ways...

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 06, 2010 1:16 PM
To: NT System Admin Issues
Subject: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

 

https://isc.sans.edu/diary.html?storyid=9334#comment

 

Another Adobe Acrobat vulnerability...



ASB (My XeeSM Profile)   
Exploiting Technology for Business Advantage...
 

Signature powered by WiseStamp 


 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Windows 2008 Firewall

[Jeff Bunting]

Anyone have some good links to in-depth articles to recommend about the
builtin Win2008 firewall, particularly in regards to profiles?  I have a
2008 domain member which says the public profile is active rather than the
domain profile, which, from what I've read, should be applied
automatically.  I verified the DC can be resolved via nslookup
(_ldap._tcp.dc._msdcs.domain).  Also would like to be able to get backup
network (172.16.x) to appear as a private rather than public network.  *

thanks,
Jeff
*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

[Michael B. Smith]

Apparently 3 or 4 MSFT people have recently jumped ship over to go over to 
Adobe to help them develop their own SDL...

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Friday, August 06, 2010 2:47 PM
To: NT System Admin Issues
Subject: RE: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

Yep,

And still going to keep coming, until Adobe changes its ways...

Z

Edward E. Ziots
CISSP, Network +, Security +
Network Engineer
Lifespan Organization
Email:ezi...@lifespan.org
Cell:401-639-3505

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, August 06, 2010 1:16 PM
To: NT System Admin Issues
Subject: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

https://isc.sans.edu/diary.html?storyid=9334#comment

Another Adobe Acrobat vulnerability...


ASB (My XeeSM Profile)
Exploiting Technology for Business Advantage...

Signature powered by WiseStamp









~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

[Ziots, Edward]

Well starting with good development practices, along with the SDLC would
help greatly. Maybe back to Waterford Model, or Spiral Model of
application development... 

 

But security needs to be full integrated, and regression tested at each
step of the software development cycle, and they should hire some savvy
security vul researchers that can help fuzz and try and break
functionality in the end product before it goes RTM 

 

Wash/Rinse/Repeat... Improve their process, till he bugs of old, become
no more

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, August 06, 2010 2:49 PM
To: NT System Admin Issues
Subject: RE: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

 

Apparently 3 or 4 MSFT people have recently jumped ship over to go over
to Adobe to help them develop their own SDL...

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: Friday, August 06, 2010 2:47 PM
To: NT System Admin Issues
Subject: RE: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

 

Yep, 

 

And still going to keep coming, until Adobe changes its ways...

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 06, 2010 1:16 PM
To: NT System Admin Issues
Subject: Adobe Acrobat Font Parsing Integer Overflow Vulnerability

 

https://isc.sans.edu/diary.html?storyid=9334#comment

 

Another Adobe Acrobat vulnerability...



ASB (My XeeSM Profile)   
Exploiting Technology for Business Advantage...
 

Signature powered by WiseStamp 


 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Windows 2008 Firewall

[Brian Desmond]

Look up Network Location Awareness/NLA as to the magic of the 
locations/profiles.

I've only really deployed the Windows Firewall on servers so I just set the 
rules to apply across all profiles and force them all to behave uniformly.

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132

From: Jeff Bunting [mailto:bunting.j...@gmail.com]
Sent: Friday, August 06, 2010 1:47 PM
To: NT System Admin Issues
Subject: Windows 2008 Firewall

Anyone have some good links to in-depth articles to recommend about the builtin 
Win2008 firewall, particularly in regards to profiles?  I have a 2008 domain 
member which says the public profile is active rather than the domain profile, 
which, from what I've read, should be applied automatically.  I verified the DC 
can be resolved via nslookup (_ldap._tcp.dc._msdcs.domain).  Also would like to 
be able to get backup network (172.16.x) to appear as a private rather than 
public network.

thanks,
Jeff





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Moving Volume Activation Management Tool

[Mayo, Bill]

Does anyone have any experience with relocating the VAMT (Volume
Activation Management Tool) used for proxy activiations of Windows
Server 2008, et al?  We have a modest amount of Windows Server 2008
boxes, and the VAMT was the best tool for us to handle the activations.
I need to move this function from the server it is currently on (2003
Server) to a new server (which will itself be 2008).  I have tried to do
some searching to determine if there is any particular migration
methodology required, but my google-fu has failed me.

The only things that look like data in the application directory have an
extension of "xrm-ms".  Plus, there is the CIL (Computer Information
List) file which apparently stores information on the activations that
have been performed.

I am thinking that I can just copy the files over to another server and
be fine, as I am guessing that no critical information is stored within
the application.  Can anyone confirm/deny this is the case, or provide
any other information?

TIA,
Bill Mayo

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Backups

[Bob Hartung]

Why not do full backups every night? It looks like you have plenty of space on 
the tape and that amount of data should only take 4-5 hours to backup.

Benefits:


* You don't have to mess around with multiple step restores.
* Restores happen faster since you only have to access one tape.

* It also protects you from a bad full backup tape.

--

Bob Hartung
Wisco Industries, Inc.
736 Janesville St.
Oregon, WI 53575
Tel: (608) 835-3106 x215
Fax: (608) 835-7399
e-mail: bhartung(at)wiscoind.com
  _  

From: Cameron Cooper [mailto:ccoo...@aurico.com]
To: NT System Admin Issues [mailto:ntsysad...@lyris.sunbelt-software.com]
Sent: Fri, 06 Aug 2010 12:08:13 -0500
Subject: RE: Backups

- We are backing up 7 servers (exchange, terminal, storage server, sql cluster 
and two web servers).
  
  - OS - Windows Server 2003, 2003 R2, 2008 R2.
  
  - Amount of data backed up - 400GB
  
  - Backup Software - Backup Exec 12
  
  - Tape drive LTO with tapes that can hold 800GB (Native)/1600GB (Compressed)
  
  - The server that we are using for backup-to-disk has 1.3TB free on it
  
  _
  Cameron Cooper
  Network Administrator | CompTIA A+ Certified
  Aurico Reports, Inc
  Phone: 847-890-4021 | Fax: 847-255-1896
  ccoo...@aurico.com | www.aurico.com
  
  
  -Original Message-
  From: Ben Scott [mailto:mailvor...@gmail.com] 
  Sent: Friday, August 06, 2010 11:55 AM
  To: NT System Admin Issues
  Subject: Re: Backups
  
  On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper  wrote:
  > Due to a recent issue with some files within our system being deleted and
  > then taking 4 days to restore those files, we are looking for
  > suggestions/advice on what an efficient backup process should look like.
  > Here's what we currently have setup:
  >
  > -  Every Sunday of the week we do a full backup to disk and Tape
  > -  Every Monday - Friday we do an incremental backup onto Tape
  > -  Every Monday - Saturday we do an incremental backup to disk
  
Maybe you could do differential backups to tape.  "Incremental"
  backs up everything changed since the previous Full or Incremental.
  So in a restore, you have to restore the Full, then each Incremental.
  "Differential" backs up everything changed since the previous Full.
  So in a restore, you restore the Full and then the most recent
  Differential.
  
Maybe you could do a full every night.
  
Maybe you could do disk-to-disk-to-tape.
  
Insufficient data for a better recommendation.  It would help to
  know how many computers you're backing up, data set size, tape size,
  backup disk size, and what software -- OS and backup -- you're using.
  
  -- Ben
  
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~   ~
  
  
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~   ~
  

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Windows 2008 Firewall

[Jeff Bunting]

Thanks Brian. I found part of the answer to my question.  (form
http://technet.microsoft.com/en-us/library/cc754893%28WS.10%29.aspx)


   - Windows Vista and Windows Server 2008 support only *a single profile on
   the computer* at a time. If the computer is connected to more than one
   network, then the network location that requires the most protection is the
   one applied to all connections on the computer. If a public network is
   detected, then all connections to the computer are protected by the rules
   associated with the public profile. If a private network is detected and
   there are no public networks detected, then the private profile is applied
   to the computer. Only if a domain network is detected and there are no
   public or private networks detected is the domain profile applied.

   - Starting with Windows 7 and Windows Server 2008 R2, Windows supports a
   *separate profile for each network connection*. If a connection to a
   public network is detected, then that connection is protected by the rules
   associated with the public profile. A connection to a domain network on the
   same computer is protected by the domain profile. All of the profiles can be
   active at the same, each protecting the connections according to its network
   location type.


I didn't realize the vanilla 2008 FW doesn't support multiple profiles like
R2 does.



On Fri, Aug 6, 2010 at 2:55 PM, Brian Desmond wrote:

> *Look up Network Location Awareness/NLA as to the magic of the
> locations/profiles.*
>
> * *
>
> *I’ve only really deployed the Windows Firewall on servers so I just set
> the rules to apply across all profiles and force them all to behave
> uniformly. *
>
> * *
>
> *Thanks,*
>
> *Brian Desmond*
>
> *br...@briandesmond.com*
>
> * *
>
> *c   – 312.731.3132*
>
> * *
>
> *From:* Jeff Bunting [mailto:bunting.j...@gmail.com]
> *Sent:* Friday, August 06, 2010 1:47 PM
> *To:* NT System Admin Issues
> *Subject:* Windows 2008 Firewall
>
>
>
> Anyone have some good links to in-depth articles to recommend about the
> builtin Win2008 firewall, particularly in regards to profiles?  I have a
> 2008 domain member which says the public profile is active rather than the
> domain profile, which, from what I've read, should be applied
> automatically.  I verified the DC can be resolved via nslookup
> (_ldap._tcp.dc._msdcs.domain).  Also would like to be able to get backup
> network (172.16.x) to appear as a private rather than public network.  *
>
> thanks,
> Jeff*
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Any have experience with USA.NET?

[Justin Thomas]

They've hosted our exchange for years. We're happy.

On Fri, Aug 6, 2010 at 12:36 PM, David Lum  wrote:

>  Pardon my 2nd cross-post in as many days… we are looking at using 
> USA.NETfor hosting our Exchange environment, does anyone 
> here have an experience
> with them, good bad or otherwise?
>
> *David Lum** **// *SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 *// *(Cell) 503.267.9764
>
>
>
>
>
>
>
>


-- 
Probable Contrarian

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Cost affective 2 Gb USB key

[Stefan Jafs]

We need a supplier for about 5,000, 2Gb USB keys with promotional
information and our logo / name printed.



Do you guys have any good suppliers?


-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Cost affective 2 Gb USB key

[RichardMcClary]

With or without conflicker?

Stefan Jafs  wrote on 08/06/2010 02:54:20 PM:

> We need a supplier for about 5,000, 2Gb USB keys with promotional 
> information and our logo / name printed.
>  
> Do you guys have any good suppliers?
> 
> 
> -- 
> Stefan Jafs
> 
> 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Cost affective 2 Gb USB key

[Stefan Jafs]

Preferably without :)

SJ

On Fri, Aug 6, 2010 at 4:04 PM,  wrote:

>
> With or without conflicker?
>
> Stefan Jafs  wrote on 08/06/2010 02:54:20 PM:
>
>
> > We need a supplier for about 5,000, 2Gb USB keys with promotional
> > information and our logo / name printed.
>
>  >
> > Do you guys have any good suppliers?
> >
> >
> > --
> > Stefan Jafs
> >
> >
>
>
>
>
>
>


-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Cost affective 2 Gb USB key

[N Parr]

http://buymemory.com/
Been working with them for years.  They were able to do just what you
asked for me with very short notice a few months back.  We only ordered
200 but they vectorized our logo and had them shipped in two days.  Tell
them I sent you.



From: Stefan Jafs [mailto:stefan.j...@gmail.com] 
Sent: Friday, August 06, 2010 2:54 PM
To: NT System Admin Issues
Subject: Cost affective 2 Gb USB key



We need a supplier for about 5,000, 2Gb USB keys with promotional
information and our logo / name printed.

 

Do you guys have any good suppliers?



-- 
Stefan Jafs


 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Massive Patch Tuesday

[Marc Maiffret]

This next Patch Tuesday is massive and a lot of interesting
vulnerabilities are coming out. I would start stock piling the mountain
dew and such as it is sure to be a fun one. I am doing a webinar
Wednesday morning after patch Tuesday to go over all of our analysis of
the patches and many nuances that are left out from the very generic
Microsoft bulletins. If you are interested in cutting through this
mountain of vulnerabilities to get some specifics you should join the
conference and ask any questions you might have: http://www.eeye.com/vef

Happy Friday NTSYSADMIN'ers!
-Marc

Signed,
Marc Maiffret
Co-Founder/CTO
eEye Digital Security
Web: http://www.eeye.com
Blog: http://blog.eeye.com
Twitter: http://www.twitter.com/marcmaiffret



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Moving Volume Activation Management Tool

[Malcolm Reitz]

No need to copy any files - the KMS server doesn't really track anything (it
keeps the last 50 activations as a rolling list, but that's it). If you're
worried about meeting the minimum number of systems for activation, note
that when you reinstall the KMS key on the same KMS server, you will reset
the counters, so moving the data files makes no sense anyway.

 

You should be able to just remove the key from your existing KMS server,
delete it from DNS, and then install the KMS service and key on a new
server. Here's a write-up that looks good:

http://social.technet.microsoft.com/Forums/en-US/itprovistaactivation/thread
/cd4177bd-8df5-4a66-afdc-c760398b7e7f

 

Don't do this often, though, as your KMS key is only good for 6
installations; more than that and you'll have to call MS Licensing.

 

If you ever think you'll use your KMS to activate software such as Windows 7
and, especially, Office 2010, I would suggest you put the KMS on something
besides a Server 2008 box. Office 2010 activations only work from a KMS on
Server 2003 or 2008 R2, not "plain" 2008.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;981859

 

-Malcolm

 

From: Mayo, Bill [mailto:bem...@pittcountync.gov] 
Sent: Friday, August 06, 2010 13:59
To: NT System Admin Issues
Subject: Moving Volume Activation Management Tool

 

Does anyone have any experience with relocating the VAMT (Volume Activation
Management Tool) used for proxy activiations of Windows Server 2008, et al?
We have a modest amount of Windows Server 2008 boxes, and the VAMT was the
best tool for us to handle the activations.  I need to move this function
from the server it is currently on (2003 Server) to a new server (which will
itself be 2008).  I have tried to do some searching to determine if there is
any particular migration methodology required, but my google-fu has failed
me.

The only things that look like data in the application directory have an
extension of "xrm-ms".  Plus, there is the CIL (Computer Information List)
file which apparently stores information on the activations that have been
performed.

I am thinking that I can just copy the files over to another server and be
fine, as I am guessing that no critical information is stored within the
application.  Can anyone confirm/deny this is the case, or provide any other
information?

TIA, 
Bill Mayo 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Backups

[Andrew S. Baker]

On odd numbered Sunday's, use Backup #1, and follow that week with
differentials to that same file.

On even numbered Sunday's, use Backup #2, etc.This will allow you to
recover necessary files from disk for up to 14 days.



*ASB *(My XeeSM Profile) 
*Exploiting Technology for Business Advantage...*
* *
Signature powered by WiseStamp 


On Fri, Aug 6, 2010 at 2:02 PM, Cameron Cooper  wrote:

>  For the Full Backup to Disk… by alternating backup jobs… what do you mean
> there?
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified***
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-255-1896
>
> ccoo...@aurico.com | www.aurico.com
>
>
>
> *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
> *Sent:* Friday, August 06, 2010 12:44 PM
> *To:* NT System Admin Issues
> *Subject:* Re: Backups
>
>
>
> So you're not keeping the backup to disk at all?
>
>
>
> BTW, I can't see how the retention of the tapes can be classified as "at
> least one full day".It would have to be a week or something.
> Otherwise, how would you restore on Friday, what was lost on Wednesday if it
> was only created on Tuesday morning?
>
>
>
>
>
> I would be inclined to go with the following backup scheme:
>
>- *Full Backup to Disk* -- Each Sunday
>
>
> - Alternate backup jobs by week (total of 2 jobs) -- Retention of 2
>   Weeks
>
>
>- *Differential Backup to Disk* -- Monday to Saturday
>
>
> - Retention of 2 Weeks (tied to the corresponding Full)
>
>
>- *Weekly to Tape* -- Every Saturday
>
>
> - Backup Recently Completed Full + Diff and take off site -- Retention
>   of 6 Weeks
>
>
>- *Monthly to Tape* -- Every Saturday of Each Month
>
>
> - Backup Recently Completed Full + Diff and take off site -- Retention
>   of 12-24 Months
>
>
>
> Now, you'll be able to restore files of up to 2 weeks from disk, and up to
> 6 weeks from tape.   Beyond 6 weeks, you'll have to restore the closest
> month end version, assuming one exists.
>
>
>
> I've used some variation of this scheme for the past 4 or 5 years.
>  Environments that are more critical can copy to tape and take off-site
> daily...  (or find another way to replicate the backups to a separate
> location)
>
>
>
>
>
> *ASB *(My XeeSM Profile) 
> *Exploiting Technology for Business Advantage...*
> * *
>
> Signature powered by WiseStamp 
>
>
>
> On Fri, Aug 6, 2010 at 1:15 PM, Cameron Cooper  wrote:
>
> The retention period on the tapes is at least one full day.  For the full
> tape backups it’s a week.  The incremental backups are one full day as well.
>
>
>
> We currently have 5 tapes that we rotate out.  One for the weekly full
> backup and the other four for the daily incremental backup.
>
>
>
> Part of the reason that it took 4 days was due to restoring the tapes and
> being limited by the hardware.  The tape drive is an external Dell LTO box
> that only takes one tape at a time.  Once restoring the tape to disk, we had
> to wait for the cataloging of the media to finish.  Once that was done, then
> we could go into the disk media to look if the files were there.  The server
> that performs the backup, is a Dell PowerEdge 2950 with dual Xeon CPU @
> 1.60GHz (each) with 5GB of RAM installed.  Also the server’s only role is to
> backup.
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified*
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-255-1896
>
> ccoo...@aurico.com | www.aurico.com
>
>
>
> *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
> *Sent:* Friday, August 06, 2010 11:56 AM
>
>
> *To:* NT System Admin Issues
> *Subject:* Re: Backups
>
>
>
> What's your retention period on the tapes?  (I'm assuming that the disk
> backup gets overwritten each week?)
>
>
>
> Why did it take 4 days to restore the file?
>
>
>
> Perhaps understanding that will help us provide suggestions.
>
>
> *ASB *(My XeeSM Profile) 
> *Exploiting Technology for Business Advantage...*
> * *
>
> Signature powered by WiseStamp 
>
>
>
> On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper 
> wrote:
>
> Due to a recent issue with some files within our system being deleted and
> then taking 4 days to restore those files, we are looking for
> suggestions/advice on what an efficient backup process should look like.
> Here’s what we currently have setup:
>
>
>
> -  Every Sunday of the week we do a full backup to disk and Tape
>
> -  Every Monday – Friday we do an incremental backup onto Tape
>
> -  Every Monday – Saturday we do an incremental backup to disk
>
>
>
> _
>
> *Cameron Cooper*
>
> *Network Administrator | CompTIA A+ Certified*
>
> Aurico Reports, Inc
>
> Phone: 847-890-4021 | Fax: 847-

Re: Backups

[Andrew S. Baker]

That's true too...



*ASB *(My XeeSM Profile) 
*Exploiting Technology for Business Advantage...*
* *
Signature powered by WiseStamp 


On Fri, Aug 6, 2010 at 3:14 PM, Bob Hartung  wrote:

>  Why not do full backups every night? It looks like you have plenty of
> space on the tape and that amount of data should only take 4-5 hours to
> backup.
>
> Benefits:
>
>- You don't have to mess around with multiple step restores.
>- Restores happen faster since you only have to access one tape.
>- It also protects you from a bad full backup tape.
>
>
> --
>
> Bob Hartung
> Wisco Industries, Inc.
> 736 Janesville St.
> Oregon, WI 53575
> Tel: (608) 835-3106 x215
> Fax: (608) 835-7399
> e-mail: bhartung(at)wiscoind.com
>
> --
> *From:* Cameron Cooper [mailto:ccoo...@aurico.com]
> *To:* NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com
> ]
> *Sent:* Fri, 06 Aug 2010 12:08:13 -0500
> *Subject:* RE: Backups
>
>
> - We are backing up 7 servers (exchange, terminal, storage server, sql
> cluster and two web servers).
>
> - OS - Windows Server 2003, 2003 R2, 2008 R2.
>
> - Amount of data backed up - 400GB
>
> - Backup Software - Backup Exec 12
>
> - Tape drive LTO with tapes that can hold 800GB (Native)/1600GB
> (Compressed)
>
> - The server that we are using for backup-to-disk has 1.3TB free on it
>
> _
> Cameron Cooper
> Network Administrator | CompTIA A+ Certified
> Aurico Reports, Inc
> Phone: 847-890-4021 | Fax: 847-255-1896
> ccoo...@aurico.com | www.aurico.com
>
>
> -Original Message-
> From: Ben Scott [mailto:mailvor...@gmail.com]
> Sent: Friday, August 06, 2010 11:55 AM
> To: NT System Admin Issues
> Subject: Re: Backups
>
> On Fri, Aug 6, 2010 at 12:29 PM, Cameron Cooper 
> wrote:
> > Due to a recent issue with some files within our system being deleted and
> > then taking 4 days to restore those files, we are looking for
> > suggestions/advice on what an efficient backup process should look like.
> > Here's what we currently have setup:
> >
> > -  Every Sunday of the week we do a full backup to disk and Tape
> > -  Every Monday - Friday we do an incremental backup onto Tape
> > -  Every Monday - Saturday we do an incremental backup to disk
>
> Maybe you could do differential backups to tape. "Incremental"
> backs up everything changed since the previous Full or Incremental.
> So in a restore, you have to restore the Full, then each Incremental.
> "Differential" backs up everything changed since the previous Full.
> So in a restore, you restore the Full and then the most recent
> Differential.
>
> Maybe you could do a full every night.
>
> Maybe you could do disk-to-disk-to-tape.
>
> Insufficient data for a better recommendation. It would help to
> know how many computers you're backing up, data set size, tape size,
> backup disk size, and what software -- OS and backup -- you're using.
>
> -- Ben
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~  ~
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~  ~
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Massive Patch Tuesday

[Andrew S. Baker]

Back in action, you are.



*ASB *(My XeeSM Profile) 
*Exploiting Technology for Business Advantage...*
* *
Signature powered by WiseStamp 


On Fri, Aug 6, 2010 at 5:21 PM, Marc Maiffret  wrote:

> This next Patch Tuesday is massive and a lot of interesting
> vulnerabilities are coming out. I would start stock piling the mountain
> dew and such as it is sure to be a fun one. I am doing a webinar
> Wednesday morning after patch Tuesday to go over all of our analysis of
> the patches and many nuances that are left out from the very generic
> Microsoft bulletins. If you are interested in cutting through this
> mountain of vulnerabilities to get some specifics you should join the
> conference and ask any questions you might have: http://www.eeye.com/vef
>
> Happy Friday NTSYSADMIN'ers!
> -Marc
>
> Signed,
> Marc Maiffret
> Co-Founder/CTO
> eEye Digital Security
> Web: http://www.eeye.com
> Blog: http://blog.eeye.com
> Twitter: http://www.twitter.com/marcmaiffret
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: WSUS tools?

[Anders Blomgren]

Which is darn strange. If you have the WSUS admin console installed you have
the wsus assemblies and the main method to connect to the server
(AdminProxy.GetUpdateServer) is overloaded to optionally take a hostname,
sslflag and port.
Lack of time perhaps?

-Anders

On Fri, Aug 6, 2010 at 2:59 PM, HELP_PC  wrote:

>  Wsuster doesn't work from remote
>
> *GuidoElia*
> *HELPPC*
>
>
>  --
> *Da:* Richard Stovall [mailto:rich...@gmail.com]
> *Inviato:* venerdì 6 agosto 2010 11.40
> *A:* NT System Admin Issues
> *Oggetto:* Re: WSUS tools?
>
>   Good point.
>
> On Fri, Aug 6, 2010 at 4:37 AM, Ken Schaefer  wrote:
>
>> There isn't even a need for a separate OU - you can just use security
>> group filtering...
>>
>> Cheers
>> Ken
>>
>> -Original Message-
>> From: Kurt Buff [mailto:kurt.b...@gmail.com]
>> Sent: Friday, 6 August 2010 2:32 AM
>> To: NT System Admin Issues
>> Subject: Re: WSUS tools?
>>
>> That seems overly complex - perhaps that's because I'm not familiar with
>> the technique. I'll look into that, however.
>>
>> On Wed, Aug 4, 2010 at 18:39, Richard Stovall  wrote:
>> > I must be missing something about the second.  Why not put the
>> > machines in a special OU (or OUs) and set the GPO for that particular
>> > OU to install at 6PM on Wednesday.  Modify as necessary.  Control the
>> > updates applied via groups in WSUS, control the actual installation of
>> those updates via GPO.
>> > But like I said, I must be missing something.  Constrained by computer
>> > object and OU placement in AD, perhaps?
>> >
>> > On Wed, Aug 4, 2010 at 5:33 PM, Kurt Buff  wrote:
>> >>
>> >> I've got to clean up our WSUS installation after the departure of a
>> >> minion, and I'm trying to find find some tools to help with the task.
>> >>
>> >> Here's a couple of wishes:
>> >>
>> >> 1) Ability to clean out superseded updates - decline them, or
>> >> whatever, so I only see what's current
>> >>
>> >> 2) Ability to prep updates for a target group and set them to go
>> >> at a future date/time.
>> >>  For instance, I might have to leave on Tuesday for a couple
>> >> of days, and want to prepare my
>> >>  test group to receive the latest set on Wednesday after 6pm.
>> >>
>> >> It looks like WSUSter (http://www.wsus.nl/site/content/view/23/38/)
>> >> would be useful for (1) but haven't implemented it yet - do any of
>> >> you have experience with it and like it? Any alternatives that you
>> like?
>> >>
>> >> I haven't found *anything* for (2) yet, and am hoping someone has
>> >> found something to satisfy that desire.
>> >>
>> >> Kurt
>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Cost affective 2 Gb USB key

[Ben Scott]

On Fri, Aug 6, 2010 at 3:54 PM, Stefan Jafs  wrote:
> We need a supplier for about 5,000, 2Gb USB keys with promotional
> information and our logo / name printed.

  We use http://www.promolocker.com/ and have been happy with them.
They were able to supply us with flash drives with a hardware
write-protect switch, which we found valuable and hard to find.   I
wasn't part of price negotiations, but if $WORK went for it I can't
imaging they were expensive.  ;-)

  YMMV.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Cost affective 2 Gb USB key

[Jim Holmgren]

Holy smokes - those guys are still around?  I was buying memory from
them back in the late 90's when I first joined this list!  Back then,  I
think they had about 5 sales people.  I had forgotten all about them.

 

 

Jim Holmgren

Manager of Server Engineering

XLHealth Corporation

The Warehouse at Camden Yards

351 West Camden Street, Suite 100

Baltimore, MD 21201 

410.625.2200 (main)

443.524.8573 (direct)

443-506.2400 (cell)

www.xlhealth.com

 

 

 

From: N Parr [mailto:npar...@mortonind.com] 
Sent: Friday, August 06, 2010 4:20 PM
To: NT System Admin Issues
Subject: RE: Cost affective 2 Gb USB key

 

http://buymemory.com/

Been working with them for years.  They were able to do just what you
asked for me with very short notice a few months back.  We only ordered
200 but they vectorized our logo and had them shipped in two days.  Tell
them I sent you.

 



From: Stefan Jafs [mailto:stefan.j...@gmail.com] 
Sent: Friday, August 06, 2010 2:54 PM
To: NT System Admin Issues
Subject: Cost affective 2 Gb USB key

We need a supplier for about 5,000, 2Gb USB keys with promotional
information and our logo / name printed.

 

Do you guys have any good suppliers?



-- 
Stefan Jafs

 

 

 

 


CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole use 
of the intended recipient(s) and may contain confidential and/or protected 
health information. Under the Federal Law (HIPAA), the intended recipient is 
obligated to keep this information secure and confidential. Any disclosure to 
third parties without authorization from the member of as permitted by law is 
prohibited and punishable under Federal Law. If you are not the intended 
recipient, please contact the sender by reply e-mail and destroy all copies of 
the original message.

NOTA DE CONFIDENCIALIDAD: Este facsímile, incluyendo lo adjunto, es para el uso 
exclusivo del destinatario(s) y puede contener información confidencial y/o 
información protegida de salud. En virtud de la Ley Federal (HIPAA), el 
destinatario tiene la obligación de mantener esta información segura y 
confidencial. Cualquier divulgación a terceros sin la autorización de los 
miembros de lo permitido por la ley está prohibido y penado en virtud de la Ley 
Federal. Si usted no es el destinatario, por favor, póngase en contacto con el 
remitente por teléfono y destruir todas las copias del mensaje original
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Backups

[Ben Scott]

On Fri, Aug 6, 2010 at 3:14 PM, Bob Hartung  wrote:
> Why not do full backups every night?

  +1.  If you can get away with it, this hugely decreases complexity
and time-to-restore.  Simplicity is golden.  Complexity breeds
failure.  KISS.

  We were doing fancier things before we got a bigger tape drive with
a server upgrade, and it's been a win.

  Sometimes you can't afford to do a full every night (data set size,
backup window time, etc.), and if so, the complexity is justified a
cost of operations.  But if you can dodge that, do it.  :)

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Massive Patch Tuesday

[Ben Scott]

On Fri, Aug 6, 2010 at 5:32 PM, Andrew S. Baker  wrote:
> Back in action, you are.

  Talk like Yoda, you do.  ;-)

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Friday OT: Man's best friend?

[Kurt Buff]

I am at a loss for words on this one

http://www.mlive.com/news/grand-rapids/index.ssf/2010/08/dog_eats_rockford_mans_big_toe.html

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Massive Patch Tuesday

[Kurt Buff]

On Fri, Aug 6, 2010 at 15:16, Ben Scott  wrote:
> On Fri, Aug 6, 2010 at 5:32 PM, Andrew S. Baker  wrote:
>> Back in action, you are.
>
>  Talk like Yoda, you do.  ;-)
>
> -- Ben

The farce is strong in this one...

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Massive Patch Tuesday

[Daniel Rodriguez]

Use the Fork, Luke! Not the Spoon!

On Aug 6, 2010 7:11 PM, "Kurt Buff"  wrote:

On Fri, Aug 6, 2010 at 15:16, Ben Scott  wrote:
> On Fri, Aug 6, 2010 at 5:32 ...
The farce is strong in this one...


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Massive Patch Tuesday

[Jonathan Link]

I see your schwartz is as big as mine...

On Fri, Aug 6, 2010 at 7:11 PM, Kurt Buff  wrote:

> On Fri, Aug 6, 2010 at 15:16, Ben Scott  wrote:
> > On Fri, Aug 6, 2010 at 5:32 PM, Andrew S. Baker 
> wrote:
> >> Back in action, you are.
> >
> >  Talk like Yoda, you do.  ;-)
> >
> > -- Ben
>
> The farce is strong in this one...
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Massive Patch Tuesday

[Daniel Rodriguez]

So, she's a baritone.

On Aug 6, 2010 7:16 PM, "Jonathan Link"  wrote:

I see your schwartz is as big as mine...

On Fri, Aug 6, 2010 at 7:11 PM, Kurt Buff  wrote:

> >
> > On Fri, Aug 6, 2010 at 15:16, Ben Scott  wrote:
>
> > > On Fri, Aug 6, 2010 at 5:32 PM, Andrew S. Baker 
> wrote:
> > >> Back in action, ...
>
> > The farce is strong in this one...
>
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Friday OT: Man's best friend?

[Sherry Abercrombie]

Ummm, wow.

On Fri, Aug 6, 2010 at 6:08 PM, Kurt Buff  wrote:

> I am at a loss for words on this one
>
>
> http://www.mlive.com/news/grand-rapids/index.ssf/2010/08/dog_eats_rockford_mans_big_toe.html
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>



-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic."
Arthur C. Clarke

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Massive Patch Tuesday

[Sherry Abercrombie]

Sirius/XM just announced today that they will be starting a Star Wars
channel.  Interesting should be.

On Fri, Aug 6, 2010 at 6:18 PM, Daniel Rodriguez  wrote:

> So, she's a baritone.
>
> On Aug 6, 2010 7:16 PM, "Jonathan Link"  wrote:
>
> I see your schwartz is as big as mine...
>
> On Fri, Aug 6, 2010 at 7:11 PM, Kurt Buff  wrote:
>
>> >
>> > On Fri, Aug 6, 2010 at 15:16, Ben Scott  wrote:
>>
>> > > On Fri, Aug 6, 2010 at 5:32 PM, Andrew S. Baker 
>> wrote:
>> > >> Back in action, ...
>>
>> > The farce is strong in this one...
>>
>> >
>> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>>
>
>
>
>
>
>
>
>
>


-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic."
Arthur C. Clarke

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

R: Automatic Updates has humongous datastore.edb and memory consumption

[HELP_PC]

Sooner is my advice. For my customers I don't keep in production XP machines 
with less than 2GB RAM
 
GuidoElia
HELPPC
 

  _  

Da: Carl Houseman [mailto:c.house...@gmail.com] 
Inviato: venerdì 6 agosto 2010 19.29
A: NT System Admin Issues
Oggetto: RE: Automatic Updates has humongous datastore.edb and memory 
consumption



What was the final result?

 

Thanks everyone for the datapoints, your efforts are much appreciated.  I'm 
starting to think, even if I can do something to drop the datastore.edb down to 
~100 MB and the startup of wuauserv becomes almost tolerable, they'll want to 
use the machine for another couple years at least, and the RAM upgrade will be 
needed sooner or later so might as well go with "sooner".

 

Carl

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, August 06, 2010 12:59 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption

 

I just tried that script and it didn't find a number of the registry entries. 
Now I'm connected to Microsoft Update and the file size on the Software 
Distribution\datastore directory is climbing. L

 

 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, August 06, 2010 12:51 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption

 

My machine the datastore.edb is 165 mb.

 

 

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 12:28 PM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption

 

Oh... I just realized you wanted me to delete the entire SoftwareDistribution 
hierarchy... Previously I was only clearing out the datastore\Logs\ files in 
addition to datastore.edb.

 

Found a SBS03 server that uses Microsoft's update servers with a 162 MB 
datastore.edb.  Deleting and rebuilding the datastore.edb reduced it to 152 MB. 
 Deleted all SoftwareDistribution\ folders and datastore.edb rebuilt to 152 MB 
again.   So there's no apparent improvement from taking out all of 
SoftwareDistribution vs. just the datastore.edb file.

 

But I'm still thinking, 170 MB datastore,.edb on XP Pro is abominably large.  
And I should have gotten some minor improvement on the problem machine as I've 
seen with every other machine I've rebuilt a datastore.edb on, but maybe that 
only happens if some MS software has been uninstalled.

 

So anyone else?  If you have a a well-used XP Pro with lots of MS products 
installed that uses MS's update servers, what is your 
\Windows\SoftwareDistribution\DataStore\Datastore.edb file size?

 

Carl

 

From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Friday, August 06, 2010 10:59 AM
To: NT System Admin Issues
Subject: RE: Automatic Updates has humongous datastore.edb and memory 
consumption

 

The problem machine isn't local, but I found a local machine with a 80MB 
datastore.edb.  Deleted the datastore.edb file and let it rebuild, it rebuilt 
to 33 MB.  Then I deleted the datastore.edb and the logs folder, and it rebuilt 
to the same 33 MB size.  But I'll give your idea a try next time I have face 
time at the machine.

 

On my Windows 7 x64, I had a datastore.edb, deleted it, and it also rebuilt to 
33 MB.  Coincidence, or result of both machines accessing the same WSUS server? 
  The problem machine is using Microsoft's update servers.

 

Carl

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, August 06, 2010 3:42 AM
To: NT System Admin Issues
Subject: Re: Automatic Updates has humongous datastore.edb and memory 
consumption

 

Does it make any difference if you clear out the whole SoftwareDistribution 
directory? This is a tactic utilised in one of our AU cleanup scripts which our 
desktop guys claim helps out.

On 6 August 2010 03:40, Carl Houseman  wrote:

 

Looking at an XP Pro SP3 desktop yesterday/today and soon after booting, the 
startup of the Automatic Updates service (wuauserv) is just killing it, using 
up all RAM and stalling everything due to all the swapping.  Machine has only 
512MB, but this is not a question that must be answered with "add memory" until 
I understand what is going on with Automatic Updates.

 

Looking at the \Windows\SoftwareDistribution\DataStore\DataStore.edb file, that 
file is about 170MB, and not coincidentally, 170MB is the peak VM size I saw 
for both wuauclt.exe and the svchost.exe used by wuauserv.

So I stopped wuauserv, renamed the datastore.edb, started up wuauserv and did a 
wuauclt /detectnow, and it created a new datastore.edb of the same 170 MB size 
as before.

 

Looking at my own XP machine, datastore.edb is about 6 MB.

 

And, I'm not finding much with google for "large datastore.edb" or "huge 
datastore.edb".  The usual AU problem has been pegged CPU, but the CPU isn't 
pegged because of all the swapping.  Anybody?

TIA,

Carl

 

 

 

 

 

 

 


 


~ Finally, powerful en