date:20100910

This KB describes the available interfaces: 
http://support.microsoft.com/kb/894564/en-us

If you don't mind writing a little C++ (or P/Invoking some C#), here is the API 
interface:

http://msdn.microsoft.com/en-us/library/ff547694.aspx

This blog post should help you understand how the binding order is built from 
the registry and how to modify it there:

http://blogs.technet.com/b/brucecowper/archive/2005/03/28/403043.aspx

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Haritwal, Dhiraj [mailto:dhiraj.harit...@ap.sony.com]
Sent: Friday, September 10, 2010 5:06 AM
To: NT System Admin Issues
Subject: Script to change Network Adapters Binding

Hi,

How can I change Network Adapter binding for Win XP/Vista/7. I know the 
settings can be found under below reg key, but how to set Local Area 
Connection as first  Wireless Connection as second connection.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Linkage\Bind

With below command we can check the Device ID of Network adapters. But not 
getting how to use below output of Local area connection to change above Reg 
key sequence.

wmic nicconfig get Description,SettingID

Kindly tell me if another way is there to do this.


Dhiraj



This email is confidential and intended only for the use of the individual or 
entity named above and may contain information that is privileged. If you are 
not the intended recipient, you are notified that any dissemination, 
distribution or copying of this email is strictly prohibited. If you have 
received this email in error, please notify us immediately by return email or 
telephone and destroy the original message. - This mail is sent via Sony Asia 
Pacific Mail Gateway..

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT - Creating deployment media with menu choice of OS, etc.

2010-09-10 Thread Rod Trent

Plus, there are a couple good community add-ons to put a web-based interface
on it.

From: Tony Patton [mailto:apco...@gmail.com] 
Sent: Friday, September 10, 2010 5:43 AM
To: NT System Admin Issues
Subject: Re: OT - Creating deployment media with menu choice of OS, etc.

I recommend you take a look at M$ MDT 2010.

Does all you are asking.

http://technet.microsoft.com/en-us/solutionaccelerators/dd407791.aspx

On 9 September 2010 19:40, Mark Smith winsysad...@gmail.com wrote:

I would like to create bootable media (probably external USB drive) that
would present a menu to select a flavor of Windows OS to install as well as
which applications to install, such as MS Office, AntiVirus, etc. Then once
selected, would perform an unattended install.

Looking for ideas on the easiest way to accomplish this.

Thanks! 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Telco Carrier - CBeyond

I've  done some contract work with one of their infrastructure teams. They are 
a bunch of smart cookies.

But I don't know anything about their network; which is probably what you are 
most interested in.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Cesare' A. Ramos [mailto:cra...@idfllc.com]
Sent: Thursday, September 09, 2010 11:21 PM
To: NT System Admin Issues
Subject: Telco Carrier - CBeyond

Hellos to all.

Has anyone worked with CBeyond (www.cbeyond.nethttp://www.cbeyond.net)?  They 
are courting us for service and partnership.  We are performing some research 
and I listen greatly to the thoughts on this forum.

Thanks.

Sincerely,
Cesare' A. Ramos

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Script to change Network Adapters Binding

2010-09-10 Thread Haritwal, Dhiraj

Thanks Michael, I have already saw these posts. Does anybody tried this with 
these articles. Sorry, I don't have C++ programming skills.

Set_Wireless_NIC_IPMetric.vbs I have tried but it's not changing Binding order.

http://blogs.technet.com/b/brucecowper/archive/2005/03/28/403043.aspx

above post also not changing Network Adapter binding order.



Dhiraj



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, September 10, 2010 4:46 PM
To: NT System Admin Issues
Subject: RE: Script to change Network Adapters Binding

This KB describes the available interfaces: 
http://support.microsoft.com/kb/894564/en-us

If you don't mind writing a little C++ (or P/Invoking some C#), here is the API 
interface:

http://msdn.microsoft.com/en-us/library/ff547694.aspx

This blog post should help you understand how the binding order is built from 
the registry and how to modify it there:

http://blogs.technet.com/b/brucecowper/archive/2005/03/28/403043.aspx

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Haritwal, Dhiraj [mailto:dhiraj.harit...@ap.sony.com]
Sent: Friday, September 10, 2010 5:06 AM
To: NT System Admin Issues
Subject: Script to change Network Adapters Binding

Hi,

How can I change Network Adapter binding for Win XP/Vista/7. I know the 
settings can be found under below reg key, but how to set Local Area 
Connection as first  Wireless Connection as second connection.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Linkage\Bind

With below command we can check the Device ID of Network adapters. But not 
getting how to use below output of Local area connection to change above Reg 
key sequence.

wmic nicconfig get Description,SettingID

Kindly tell me if another way is there to do this.


Dhiraj



This email is confidential and intended only for the use of the individual or 
entity named above and may contain information that is privileged. If you are 
not the intended recipient, you are notified that any dissemination, 
distribution or copying of this email is strictly prohibited. If you have 
received this email in error, please notify us immediately by return email or 
telephone and destroy the original message. - This mail is sent via Sony Asia 
Pacific Mail Gateway..

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


This email is confidential and intended only for the use of the individual or 
entity named above and may contain information that is privileged. If you are 
not the intended recipient, you are notified that any dissemination, 
distribution or copying of this email is strictly prohibited. If you have 
received this email in error, please notify us immediately by return email or 
telephone and destroy the original message. - This mail is sent via Sony Asia 
Pacific Mail Gateway..

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

2010-09-10 Thread Ziots, Edward

Saw this about two days ago, from other sources, already put the
mitigating controls in place, and sent the alerts to the user community.


 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: Sam Cayze [mailto:sam.ca...@rollouts.com] 
Sent: Thursday, September 09, 2010 10:47 PM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

 

Just got an email from someone who had their business hit...

 

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US
:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=
d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_res
ultct=more-resultsresnum=1ved=0CB4QqgIwAA

 

 

 

From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

 

Got these two separate alerts from McAfee forwarded to me this evening.
Anyone had any exposure to these yet ?  

Looks like *IF* your end users are trained/informed properly against
social engineering (using spam as a vector) like this then nothing to
worry about.

 

 



We have just been made aware of another malicious 0-day attack in the
wild. The attack is in the form of an email with the SUBJECT: Here You
Have which leads the user to open a malicious .pdf document.

 

McAfee will be releasing an extra.dat to detect and clean the known
components soon, but until then, I recommend to block the email at the
email gateway identified by the Subject line:  Here you Have until the
extra.dat or .dat is fully deployed. For other non-McAfee anti-virus
vendors, the same methodology should be used until a signature file is
available. 

 

*

McAfee has received confirmation that some customers have received large
volumes of spam containing a link to malware, a mass-mailing worm
identified as VBMania. The symptom reported thus far is that the spam
volume is overwhelming the email infrastructure. 

Static URLs in the email link to a .SCR file. McAfee recommends that
customers filter for the URL on gateway and email servers, and block the
creation of .SCR files on endpoint systems. 

McAfee Trusted Source is actively protecting against this threat.
Customers with McAfee Trusted Source Email Reputation will have the
emails blocked. Customers with McAfee Trusted Source Web Reputation will
have the URL blocked from click-through. McAfee Artemis provides
protection as well. 

For further information, mysupport.mcafee.com and search for KB article
KB69857. McAfee also will provide further information as gathered. 

*

Erik Goldoff

IT  Consultant

Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Script to change Network Adapters Binding

The blog post is about changing network binding order.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage
Bind -- reg_multi_sz

The Bind registry value contains a list of devices and that list is the 
registry binding order. That list looks something like the below (taken off my 
Server 2008 R2 server):

\Device\{17333B2B-417A-4067-AC98-B7EB24FCB339}
\Device\{23A51D9E-9FFA-4F32-8F67-B9C4B61E2FAD}
\Device\{9638CAB0-CFC8-433F-B189-099B0518F380}
\Device\{A25EC12E-404C-4234-A4F9-18D9D8BAD79C}
\Device\{E7B7845A-A963-4085-8B4E-276F6D19A74B}
\Device\{D887DA91-0415-470E-AAD9-CACB2319BC87}
\Device\{4034AA4F-1E2D-4F84-A244-D94355DC2BD8}
\Device\{F41AB86C-A9BC-4513-9303-075EF4F77E03}
\Device\{EAFA97BD-3969-48A0-9421-5ECB81C1BB18}

You have to take the GUIDs and look them up to find the device names. That 
information is at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\interface
 GUID\Connection
Name -- reg_sz

Which easily lets me figure out:

\Device\{17333B2B-417A-4067-AC98-B7EB24FCB339} - Local Area Connection* 9
\Device\{23A51D9E-9FFA-4F32-8F67-B9C4B61E2FAD} - Local Area Connection 7
\Device\{9638CAB0-CFC8-433F-B189-099B0518F380} - Local Area Connection 6
\Device\{A25EC12E-404C-4234-A4F9-18D9D8BAD79C} - Local Area Connection 3
\Device\{E7B7845A-A963-4085-8B4E-276F6D19A74B} - Local Area Connection 5
\Device\{D887DA91-0415-470E-AAD9-CACB2319BC87} - Local Area Connection 4
\Device\{4034AA4F-1E2D-4F84-A244-D94355DC2BD8} - Local Area Connection 2
\Device\{F41AB86C-A9BC-4513-9303-075EF4F77E03} - Local Area Connection
\Device\{EAFA97BD-3969-48A0-9421-5ECB81C1BB18} - Wireless Network Connection

Which is exactly the binding order shown in Advanced network properties on my 
computer.

If you want a different binding order, then re-write the array in the order you 
want it. That's what the blog post does.

Here is another way to get done what you want: 
http://code.msdn.microsoft.com/nvspbind

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Haritwal, Dhiraj [mailto:dhiraj.harit...@ap.sony.com]
Sent: Friday, September 10, 2010 7:54 AM
To: NT System Admin Issues
Subject: RE: Script to change Network Adapters Binding

Thanks Michael, I have already saw these posts. Does anybody tried this with 
these articles. Sorry, I don't have C++ programming skills.

Set_Wireless_NIC_IPMetric.vbs I have tried but it's not changing Binding order.

http://blogs.technet.com/b/brucecowper/archive/2005/03/28/403043.aspx

above post also not changing Network Adapter binding order.



Dhiraj



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, September 10, 2010 4:46 PM
To: NT System Admin Issues
Subject: RE: Script to change Network Adapters Binding

This KB describes the available interfaces: 
http://support.microsoft.com/kb/894564/en-us

If you don't mind writing a little C++ (or P/Invoking some C#), here is the API 
interface:

http://msdn.microsoft.com/en-us/library/ff547694.aspx

This blog post should help you understand how the binding order is built from 
the registry and how to modify it there:

http://blogs.technet.com/b/brucecowper/archive/2005/03/28/403043.aspx

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Haritwal, Dhiraj [mailto:dhiraj.harit...@ap.sony.com]
Sent: Friday, September 10, 2010 5:06 AM
To: NT System Admin Issues
Subject: Script to change Network Adapters Binding

Hi,

How can I change Network Adapter binding for Win XP/Vista/7. I know the 
settings can be found under below reg key, but how to set Local Area 
Connection as first  Wireless Connection as second connection.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Linkage\Bind

With below command we can check the Device ID of Network adapters. But not 
getting how to use below output of Local area connection to change above Reg 
key sequence.

wmic nicconfig get Description,SettingID

Kindly tell me if another way is there to do this.


Dhiraj

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: OT : Malware alerts from McAfee, anyone experienced these yet ?

2010-09-10 Thread Andrew S. Baker

Based on the reports of a .SCR file as the attachment, I wonder why these
organizations are even allowing that extension into their networks.

BTW, doesn't Google own Postini? Is there any reason why they should have
been hit?

I hope the email admins in question have a documented trail that suggests
that they were trying to implement these well-known (supposedly, anyway)
layers for email security.

*ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
*Exploiting Technology for Business Advantage...*
* *
On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze sam.ca...@rollouts.com wrote:

Just got an email from someone who had their business hit…

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_resultct=more-resultsresnum=1ved=0CB4QqgIwAA

*From:* Erik Goldoff [mailto:egold...@gmail.com]
*Sent:* Thursday, September 09, 2010 5:45 PM
*To:* NT System Admin Issues
*Subject:* OT : Malware alerts from McAfee, anyone experienced these yet ?

Got these two separate alerts from McAfee forwarded to me this evening.
Anyone had any exposure to these yet ?

Looks like **IF** your end users are trained/informed properly against
social engineering (using spam as a vector) like this then nothing to worry
about.

We have just been made aware of another malicious 0-day attack in the wild.
The attack is in the form of an email with the SUBJECT: Here You Have
which leads the user to open a malicious .pdf document.

McAfee will be releasing an extra.dat to detect and clean the known
components soon, but until then, I recommend to block the email at the email
gateway identified by the Subject line: Here you Have until the extra.dat
or .dat is fully deployed. For other non-McAfee anti-virus vendors, the same
methodology should be used until a signature file is available.

McAfee has received confirmation that some customers have received large
volumes of spam containing a link to malware, a mass-mailing worm identified
as VBMania. The symptom reported thus far is that the spam volume is
overwhelming the email infrastructure.

Static URLs in the email link to a .SCR file. McAfee recommends that
customers filter for the URL on gateway and email servers, and block the
creation of .SCR files on endpoint systems.

McAfee Trusted Source is actively protecting against this threat. Customers
with McAfee Trusted Source *Email Reputation* will have the emails
blocked. Customers with McAfee Trusted Source *Web Reputation* will have
the URL blocked from click-through. McAfee *Artemis* provides protection
as well.

For further information, mysupport.mcafee.com and search for KB article
KB69857. McAfee also will provide further information as gathered.

*Erik Goldoff***

*IT Consultant*

*Systems, Networks, Security *

' Security is an ongoing process, not a one time event ! '

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

2010-09-10 Thread John Hornbuckle

What impact will attempting to run the worm as a non-elevated user have?



John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.us





From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these yet ?

Based on the reports of a .SCR file as the attachment, I wonder why these 
organizations are even allowing that extension into their networks.

BTW, doesn't Google own Postini?  Is there any reason why they should have been 
hit?

I hope the email admins in question have a documented trail that suggests that 
they were trying to implement these well-known (supposedly, anyway) layers for 
email security.

ASB (My XeeSM Profile)http://XeeSM.com/AndrewBaker
Exploiting Technology for Business Advantage...

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze 
sam.ca...@rollouts.commailto:sam.ca...@rollouts.com wrote:
Just got an email from someone who had their business hit...

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_resultct=more-resultsresnum=1ved=0CB4QqgIwAA



From: Erik Goldoff [mailto:egold...@gmail.commailto:egold...@gmail.com]
Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

Got these two separate alerts from McAfee forwarded to me this evening.  Anyone 
had any exposure to these yet ?
Looks like *IF* your end users are trained/informed properly against social 
engineering (using spam as a vector) like this then nothing to worry about.



We have just been made aware of another malicious 0-day attack in the wild. The 
attack is in the form of an email with the SUBJECT: Here You Have which leads 
the user to open a malicious .pdf document.

McAfee will be releasing an extra.dat to detect and clean the known components 
soon, but until then, I recommend to block the email at the email gateway 
identified by the Subject line:  Here you Have until the extra.dat or .dat is 
fully deployed. For other non-McAfee anti-virus vendors, the same methodology 
should be used until a signature file is available.

*
McAfee has received confirmation that some customers have received large 
volumes of spam containing a link to malware, a mass-mailing worm identified as 
VBMania. The symptom reported thus far is that the spam volume is overwhelming 
the email infrastructure.
Static URLs in the email link to a .SCR file. McAfee recommends that customers 
filter for the URL on gateway and email servers, and block the creation of .SCR 
files on endpoint systems.
McAfee Trusted Source is actively protecting against this threat. Customers 
with McAfee Trusted Source Email Reputation will have the emails blocked. 
Customers with McAfee Trusted Source Web Reputation will have the URL blocked 
from click-through. McAfee Artemis provides protection as well.
For further information, mysupport.mcafee.comhttp://mysupport.mcafee.com and 
search for KB article KB69857. McAfee also will provide further information as 
gathered.
*
Erik Goldoff
IT  Consultant
Systems, Networks,  Security
'  Security is an ongoing process, not a one time event ! '



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



NOTICE: Florida has a broad public records law. Most written communications to 
or from this entity are public records that will be disclosed to the public and 
the media upon request. E-mail communications may be subject to public 
disclosure.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: OT : Malware alerts from McAfee, anyone experienced these yet ?

I thought the same thing, but then realized that it's not actually an
attachment. It's a link in the body of the email to something like:

http: // members . multimania . co . uk / yahoophoto / filename . scr

that is obfuscated to look like:

http: // www . sharedocuments . com / library / filename . pdf

Source: http://isc.sans.edu/diary.html?storyid=9529

On Fri, Sep 10, 2010 at 9:05 AM, Andrew S. Baker asbz...@gmail.com wrote:

Based on the reports of a .SCR file as the attachment, I wonder why these
organizations are even allowing that extension into their networks.

BTW, doesn't Google own Postini? Is there any reason why they should have
been hit?

I hope the email admins in question have a documented trail that suggests
that they were trying to implement these well-known (supposedly, anyway)
layers for email security.

*ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
*Exploiting Technology for Business Advantage...*
* *
On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze sam.ca...@rollouts.com wrote:

Just got an email from someone who had their business hit…

*From:* Erik Goldoff [mailto:egold...@gmail.com]
*Sent:* Thursday, September 09, 2010 5:45 PM
*To:* NT System Admin Issues
*Subject:* OT : Malware alerts from McAfee, anyone experienced these yet
?

Got these two separate alerts from McAfee forwarded to me this evening.
Anyone had any exposure to these yet ?

Looks like **IF** your end users are trained/informed properly against
social engineering (using spam as a vector) like this then nothing to worry
about.

We have just been made aware of another malicious 0-day attack in the
wild. The attack is in the form of an email with the SUBJECT: Here You
Have which leads the user to open a malicious .pdf document.

Static URLs in the email link to a .SCR file. McAfee recommends that
customers filter for the URL on gateway and email servers, and block the
creation of .SCR files on endpoint systems.

McAfee Trusted Source is actively protecting against this threat.
Customers with McAfee Trusted Source *Email Reputation* will have the
emails blocked. Customers with McAfee Trusted Source *Web Reputation*will
have the URL blocked from click-through. McAfee
*Artemis* provides protection as well.

For further information, mysupport.mcafee.com and search for KB article
KB69857. McAfee also will provide further information as gathered.

*Erik Goldoff***

*IT Consultant*

*Systems, Networks, Security *

' Security is an ongoing process, not a one time event ! '

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

The non-elevated rights will force it to run as a grub.

Shook

From: John Hornbuckle [john.hornbuc...@taylor.k12.fl.us]
Sent: Friday, September 10, 2010 9:16 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

What impact will attempting to run the worm as a non-elevated user have?

John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.ushttps://mail2.peak10.com/owa/UrlBlockedError.aspx

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these yet ?

Based on the reports of a .SCR file as the attachment, I wonder why these 
organizations are even allowing that extension into their networks.

BTW, doesn't Google own Postini?  Is there any reason why they should have been 
hit?

I hope the email admins in question have a documented trail that suggests that 
they were trying to implement these well-known (supposedly, anyway) layers for 
email security.

ASB (My XeeSM Profile)http://XeeSM.com/AndrewBaker
Exploiting Technology for Business Advantage...

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze 
sam.ca...@rollouts.commailto:sam.ca...@rollouts.com wrote:
Just got an email from someone who had their business hit…

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_resultct=more-resultsresnum=1ved=0CB4QqgIwAA

From: Erik Goldoff [mailto:egold...@gmail.commailto:egold...@gmail.com]
Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

Got these two separate alerts from McAfee forwarded to me this evening.  Anyone 
had any exposure to these yet ?
Looks like *IF* your end users are trained/informed properly against social 
engineering (using spam as a vector) like this then nothing to worry about.

We have just been made aware of another malicious 0-day attack in the wild. The 
attack is in the form of an email with the SUBJECT: Here You Have which leads 
the user to open a malicious .pdf document.

McAfee will be releasing an extra.dat to detect and clean the known components 
soon, but until then, I recommend to block the email at the email gateway 
identified by the Subject line:  Here you Have until the extra.dat or .dat is 
fully deployed. For other non-McAfee anti-virus vendors, the same methodology 
should be used until a signature file is available.

*
McAfee has received confirmation that some customers have received large 
volumes of spam containing a link to malware, a mass-mailing worm identified as 
VBMania. The symptom reported thus far is that the spam volume is overwhelming 
the email infrastructure.
Static URLs in the email link to a .SCR file. McAfee recommends that customers 
filter for the URL on gateway and email servers, and block the creation of .SCR 
files on endpoint systems.
McAfee Trusted Source is actively protecting against this threat. Customers 
with McAfee Trusted Source Email Reputation will have the emails blocked. 
Customers with McAfee Trusted Source Web Reputation will have the URL blocked 
from click-through. McAfee Artemis provides protection as well.
For further information, mysupport.mcafee.comhttp://mysupport.mcafee.com and 
search for KB article KB69857. McAfee also will provide further information as 
gathered.
*
Erik Goldoff
IT  Consultant
Systems, Networks,  Security
'  Security is an ongoing process, not a one time event ! '

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

NOTICE: Florida has a broad public records law. Most written communications to 
or from this entity are public records that will be disclosed to the public and 
the media upon request. E-mail communications may be subject to public 
disclosure.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

2010-09-10 Thread Ziots, Edward

Humm a lot of what I read was packed PDF's, with links to .SCR and WMV
files. 

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these
yet ?

 

Based on the reports of a .SCR file as the attachment, I wonder why
these organizations are even allowing that extension into their
networks.

 

BTW, doesn't Google own Postini?  Is there any reason why they should
have been hit?

 

I hope the email admins in question have a documented trail that
suggests that they were trying to implement these well-known
(supposedly, anyway) layers for email security.


ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze sam.ca...@rollouts.com
wrote:

Just got an email from someone who had their business hit...

 

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US
:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=
d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_res
ultct=more-resultsresnum=1ved=0CB4QqgIwAA

 

 

 

From: Erik Goldoff [mailto:egold...@gmail.com] 

Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

 

Got these two separate alerts from McAfee forwarded to me this evening.
Anyone had any exposure to these yet ?  

Looks like *IF* your end users are trained/informed properly against
social engineering (using spam as a vector) like this then nothing to
worry about.

 

 



We have just been made aware of another malicious 0-day attack in the
wild. The attack is in the form of an email with the SUBJECT: Here You
Have which leads the user to open a malicious .pdf document.

 

McAfee will be releasing an extra.dat to detect and clean the known
components soon, but until then, I recommend to block the email at the
email gateway identified by the Subject line:  Here you Have until the
extra.dat or .dat is fully deployed. For other non-McAfee anti-virus
vendors, the same methodology should be used until a signature file is
available. 

 

*

McAfee has received confirmation that some customers have received large
volumes of spam containing a link to malware, a mass-mailing worm
identified as VBMania. The symptom reported thus far is that the spam
volume is overwhelming the email infrastructure. 

Static URLs in the email link to a .SCR file. McAfee recommends that
customers filter for the URL on gateway and email servers, and block the
creation of .SCR files on endpoint systems. 

McAfee Trusted Source is actively protecting against this threat.
Customers with McAfee Trusted Source Email Reputation will have the
emails blocked. Customers with McAfee Trusted Source Web Reputation will
have the URL blocked from click-through. McAfee Artemis provides
protection as well. 

For further information, mysupport.mcafee.com and search for KB article
KB69857. McAfee also will provide further information as gathered. 

*

Erik Goldoff

IT  Consultant

Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

That pun was so bad that you should go commit seppuku.

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, September 10, 2010 9:18 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

The non-elevated rights will force it to run as a grub.

Shook

From: John Hornbuckle [john.hornbuc...@taylor.k12.fl.us]
Sent: Friday, September 10, 2010 9:16 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?
What impact will attempting to run the worm as a non-elevated user have?

John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.ushttps://mail2.peak10.com/owa/UrlBlockedError.aspx

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these yet ?

Based on the reports of a .SCR file as the attachment, I wonder why these 
organizations are even allowing that extension into their networks.

BTW, doesn't Google own Postini?  Is there any reason why they should have been 
hit?

I hope the email admins in question have a documented trail that suggests that 
they were trying to implement these well-known (supposedly, anyway) layers for 
email security.

ASB (My XeeSM Profile)http://XeeSM.com/AndrewBaker
Exploiting Technology for Business Advantage...

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze 
sam.ca...@rollouts.commailto:sam.ca...@rollouts.com wrote:
Just got an email from someone who had their business hit...

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_resultct=more-resultsresnum=1ved=0CB4QqgIwAA

From: Erik Goldoff [mailto:egold...@gmail.commailto:egold...@gmail.com]
Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

Got these two separate alerts from McAfee forwarded to me this evening.  Anyone 
had any exposure to these yet ?
Looks like *IF* your end users are trained/informed properly against social 
engineering (using spam as a vector) like this then nothing to worry about.

We have just been made aware of another malicious 0-day attack in the wild. The 
attack is in the form of an email with the SUBJECT: Here You Have which leads 
the user to open a malicious .pdf document.

McAfee will be releasing an extra.dat to detect and clean the known components 
soon, but until then, I recommend to block the email at the email gateway 
identified by the Subject line:  Here you Have until the extra.dat or .dat is 
fully deployed. For other non-McAfee anti-virus vendors, the same methodology 
should be used until a signature file is available.

*
McAfee has received confirmation that some customers have received large 
volumes of spam containing a link to malware, a mass-mailing worm identified as 
VBMania. The symptom reported thus far is that the spam volume is overwhelming 
the email infrastructure.
Static URLs in the email link to a .SCR file. McAfee recommends that customers 
filter for the URL on gateway and email servers, and block the creation of .SCR 
files on endpoint systems.
McAfee Trusted Source is actively protecting against this threat. Customers 
with McAfee Trusted Source Email Reputation will have the emails blocked. 
Customers with McAfee Trusted Source Web Reputation will have the URL blocked 
from click-through. McAfee Artemis provides protection as well.
For further information, mysupport.mcafee.comhttp://mysupport.mcafee.com and 
search for KB article KB69857. McAfee also will provide further information as 
gathered.
*
Erik Goldoff
IT  Consultant
Systems, Networks,  Security
'  Security is an ongoing process, not a one time event ! '

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

NOTICE: Florida has a broad public records law. Most written communications to 
or from this entity are public records that will be disclosed to the public and 
the media upon request. E-mail communications may be subject to

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

OK, I admit, I had to go look that up.

That was mean.

Shook



From: Michael B. Smith [mich...@smithcons.com]
Sent: Friday, September 10, 2010 9:25 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

That pun was so bad that you should go commit seppuku.


From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, September 10, 2010 9:18 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

The non-elevated rights will force it to run as a grub.

Shook

From: John Hornbuckle [john.hornbuc...@taylor.k12.fl.us]
Sent: Friday, September 10, 2010 9:16 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?
What impact will attempting to run the worm as a non-elevated user have?



John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.ushttps://mail2.peak10.com/owa/UrlBlockedError.aspx





From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these yet ?

Based on the reports of a .SCR file as the attachment, I wonder why these 
organizations are even allowing that extension into their networks.

BTW, doesn't Google own Postini?  Is there any reason why they should have been 
hit?

I hope the email admins in question have a documented trail that suggests that 
they were trying to implement these well-known (supposedly, anyway) layers for 
email security.

ASB (My XeeSM Profile)http://XeeSM.com/AndrewBaker
Exploiting Technology for Business Advantage...

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze 
sam.ca...@rollouts.commailto:sam.ca...@rollouts.com wrote:
Just got an email from someone who had their business hit…

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_resultct=more-resultsresnum=1ved=0CB4QqgIwAA



From: Erik Goldoff [mailto:egold...@gmail.commailto:egold...@gmail.com]
Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

Got these two separate alerts from McAfee forwarded to me this evening.  Anyone 
had any exposure to these yet ?
Looks like *IF* your end users are trained/informed properly against social 
engineering (using spam as a vector) like this then nothing to worry about.



We have just been made aware of another malicious 0-day attack in the wild. The 
attack is in the form of an email with the SUBJECT: Here You Have which leads 
the user to open a malicious .pdf document.

McAfee will be releasing an extra.dat to detect and clean the known components 
soon, but until then, I recommend to block the email at the email gateway 
identified by the Subject line:  Here you Have until the extra.dat or .dat is 
fully deployed. For other non-McAfee anti-virus vendors, the same methodology 
should be used until a signature file is available.

*
McAfee has received confirmation that some customers have received large 
volumes of spam containing a link to malware, a mass-mailing worm identified as 
VBMania. The symptom reported thus far is that the spam volume is overwhelming 
the email infrastructure.
Static URLs in the email link to a .SCR file. McAfee recommends that customers 
filter for the URL on gateway and email servers, and block the creation of .SCR 
files on endpoint systems.
McAfee Trusted Source is actively protecting against this threat. Customers 
with McAfee Trusted Source Email Reputation will have the emails blocked. 
Customers with McAfee Trusted Source Web Reputation will have the URL blocked 
from click-through. McAfee Artemis provides protection as well.
For further information, mysupport.mcafee.comhttp://mysupport.mcafee.com and 
search for KB article KB69857. McAfee also will provide further information as 
gathered.
*
Erik Goldoff
IT  Consultant
Systems, Networks,  Security
'  Security is an ongoing process, not a one time event ! '



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

2010-09-10 Thread Kim Longenbaugh

Did you notice he didn't say honorable seppuku, which is often the way
I've seen that referenced.  I wonder if he was actually suggesting
dishonorable seppuku

 

At any rate, I disagree with MBS, because to me, the badder the pun,
the better it is.

 

Not to mention that I'm not sure your comment is even a pun, technically
speaking.

 

From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Friday, September 10, 2010 8:31 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

 

OK, I admit, I had to go look that up.  

 

That was mean.

 

Shook

 

 



From: Michael B. Smith [mich...@smithcons.com]
Sent: Friday, September 10, 2010 9:25 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

That pun was so bad that you should go commit seppuku.

 

 

From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Friday, September 10, 2010 9:18 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

 

The non-elevated rights will force it to run as a grub.

 

Shook



From: John Hornbuckle [john.hornbuc...@taylor.k12.fl.us]
Sent: Friday, September 10, 2010 9:16 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

What impact will attempting to run the worm as a non-elevated user have?

 

 

 

John Hornbuckle

MIS Department

Taylor County School District

www.taylor.k12.fl.us https://mail2.peak10.com/owa/UrlBlockedError.aspx


 

 

 

 

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these
yet ?

 

Based on the reports of a .SCR file as the attachment, I wonder why
these organizations are even allowing that extension into their
networks.

 

BTW, doesn't Google own Postini?  Is there any reason why they should
have been hit?

 

I hope the email admins in question have a documented trail that
suggests that they were trying to implement these well-known
(supposedly, anyway) layers for email security.


ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze sam.ca...@rollouts.com
wrote:

Just got an email from someone who had their business hit...

 

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US
:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=
d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_res
ultct=more-resultsresnum=1ved=0CB4QqgIwAA

 

 

 

From: Erik Goldoff [mailto:egold...@gmail.com] 

Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

 

Got these two separate alerts from McAfee forwarded to me this evening.
Anyone had any exposure to these yet ?  

Looks like *IF* your end users are trained/informed properly against
social engineering (using spam as a vector) like this then nothing to
worry about.

 

 



We have just been made aware of another malicious 0-day attack in the
wild. The attack is in the form of an email with the SUBJECT: Here You
Have which leads the user to open a malicious .pdf document.

 

McAfee will be releasing an extra.dat to detect and clean the known
components soon, but until then, I recommend to block the email at the
email gateway identified by the Subject line:  Here you Have until the
extra.dat or .dat is fully deployed. For other non-McAfee anti-virus
vendors, the same methodology should be used until a signature file is
available. 

 

*

McAfee has received confirmation that some customers have received large
volumes of spam containing a link to malware, a mass-mailing worm
identified as VBMania. The symptom reported thus far is that the spam
volume is overwhelming the email infrastructure. 

Static URLs in the email link to a .SCR file. McAfee recommends that
customers filter for the URL on gateway and email servers, and block the
creation of .SCR files on endpoint systems. 

McAfee Trusted Source is actively protecting against this threat.
Customers with McAfee Trusted Source Email Reputation will have the
emails blocked. Customers with McAfee Trusted Source Web Reputation will
have the URL blocked from click-through. McAfee Artemis provides
protection as well. 

For further information, mysupport.mcafee.com and search for KB article
KB69857. McAfee also will provide further information as gathered. 

*

Erik Goldoff

IT  Consultant

Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~

RE: W2k3 DHCP redundancy / high availability

2010-09-10 Thread Fergal O'Connell

What is the lease time on your DHCP server?

You might want to change this to say 2-3 days which will enable you to fix the 
original problem if there is one.

From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com]
Sent: 09 September 2010 22:55
To: NT System Admin Issues
Subject: W2k3 DHCP redundancy / high availability

Ok, here goes...

Present environment - pure Windows 2003 AD, with two DCs. One is virtual 
(vmware esx 3.5), 2003 Enterprise Edition. The other is physical, 2003 Standard 
Edition (not sure why - I didn't set it up). Virtual DC is running DHCP for our 
entire organization, and would be a pain to go through and setup split scopes 
(many sites, multiple vlans per site, and thus, multiple DHCP scopes for each 
site.) A year ago, we were using Cisco devices at each remote site to handle 
DHCP for each subnet. We performed a major network overhaul and had to 
centralize, so here we are.

I've now been tasked with building redundancy for our DHCP services. Moving to 
Server 2008 is not an option right now. We MAY be able to upgrade the 2003 
Standard server to 2003 Enterprise, but that isn't a given just yet.

Issues...

Can't cluster, because of the Std Edition OS, (but even then, how would that 
impact AD  DNS?)
Can't backup from Primary and restore to Secondary, again, because of different 
OS (M$ says, not supported to backup from Enterprise and try to restore to 
Standard)
As mentioned, split scopes would be a major admin pain (it wouldn't be so bad 
if we had 2008, since there is a wizard in 2008, but I digress)

So, the way I see it, I have a couple of options...

Setup secondary as a hot spare but disable the DHCP service unless and 
until the primary becomes available. Use netsh dhcp server export 
c:\dhcpdatabase.txt all on a daily basis to ensure a valid backup of the 
primary, and copy that file over to the secondary as part of one scheduled task.

-or-

Setup secondary, authorize it, configure it, turn it on, (hear me out here) and 
setup IP Address Conflict Resolution at the server level on both servers, and 
let them work it out on their own. I realize that I wouldn't have any lease 
synchronization, and that there is a slight risk of duplicate IP, but I can't 
imagine there would be much. My WAN links are solid. Also, any scope or option 
changes made on the primary would have to be duplicated on the 
secondary...administrative overhead yes, but still less than dealing with split 
scope, IMO. Even then, couldn't I just export from the primary after I've made 
changes and then import to the secondary? I know lease information is contained 
in the exported file...trying to decide whether or not that would be good or 
bad... if it wouldn't be a problem, why not take it a step further and schedule 
an export/import from the primary to the secondary?

What am I missing?

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com
www.eaglemds.comBLOCKED::http://www.eaglemds.com/

Any medical information contained in this electronic message is CONFIDENTIAL 
and privileged. It is unlawful for unauthorized persons to view, copy, 
disclose, or disseminate CONFIDENTIAL information. This electronic message may 
contain information that is confidential and/or legally privileged. It is 
intended only for the use of the individual(s) and/or entity named as 
recipients in the message. If you are not an intended recipient of this 
message, please notify the sender immediately and delete this material from 
your computer. Do not deliver, distribute or copy this message, and do not 
disclose its contents or take any action in reliance on the information that it 
contains.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. If you are not the intended recipient, any disclosure,
copying, distribution or any action taken or omitted to be taken in reliance
on it, is prohibited and may be unlawful. If you are not the intended
addressee please contact the sender and dispose of this e-mail. Thank you.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

Pun: a play on words. EX: People are dying to get in to the cemetery

To pun: to make a play on words

He intentionally made a play on words, confusing the meanings between two 
wildly different interpretations of the word worm.

So: pun.

Nyah nyah nyah.

:)

In regard to honorable vs. dishonorablecome on. This _IS_ shooky we are 
talking about...

From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Friday, September 10, 2010 9:40 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

Did you notice he didn't say honorable seppuku, which is often the way I've 
seen that referenced.  I wonder if he was actually suggesting dishonorable 
seppuku

At any rate, I disagree with MBS, because to me, the badder the pun, the 
better it is.

Not to mention that I'm not sure your comment is even a pun, technically 
speaking.

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, September 10, 2010 8:31 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

OK, I admit, I had to go look that up.

That was mean.

Shook



From: Michael B. Smith [mich...@smithcons.com]
Sent: Friday, September 10, 2010 9:25 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?
That pun was so bad that you should go commit seppuku.


From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, September 10, 2010 9:18 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

The non-elevated rights will force it to run as a grub.

Shook

From: John Hornbuckle [john.hornbuc...@taylor.k12.fl.us]
Sent: Friday, September 10, 2010 9:16 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these yet ?
What impact will attempting to run the worm as a non-elevated user have?



John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.ushttps://mail2.peak10.com/owa/UrlBlockedError.aspx





From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these yet ?

Based on the reports of a .SCR file as the attachment, I wonder why these 
organizations are even allowing that extension into their networks.

BTW, doesn't Google own Postini?  Is there any reason why they should have been 
hit?

I hope the email admins in question have a documented trail that suggests that 
they were trying to implement these well-known (supposedly, anyway) layers for 
email security.

ASB (My XeeSM Profile)http://XeeSM.com/AndrewBaker
Exploiting Technology for Business Advantage...

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze 
sam.ca...@rollouts.commailto:sam.ca...@rollouts.com wrote:
Just got an email from someone who had their business hit...

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_resultct=more-resultsresnum=1ved=0CB4QqgIwAA



From: Erik Goldoff [mailto:egold...@gmail.commailto:egold...@gmail.com]
Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

Got these two separate alerts from McAfee forwarded to me this evening.  Anyone 
had any exposure to these yet ?
Looks like *IF* your end users are trained/informed properly against social 
engineering (using spam as a vector) like this then nothing to worry about.



We have just been made aware of another malicious 0-day attack in the wild. The 
attack is in the form of an email with the SUBJECT: Here You Have which leads 
the user to open a malicious .pdf document.

McAfee will be releasing an extra.dat to detect and clean the known components 
soon, but until then, I recommend to block the email at the email gateway 
identified by the Subject line:  Here you Have until the extra.dat or .dat is 
fully deployed. For other non-McAfee anti-virus vendors, the same methodology 
should be used until a signature file is available.

*
McAfee has received confirmation that some customers have received large 
volumes of spam containing a link to malware, a mass-mailing worm identified as 
VBMania. The symptom reported thus far is that the spam volume is overwhelming 
the email infrastructure.
Static URLs in the email link to a .SCR file. McAfee recommends that customers 
filter for the URL on gateway and email servers, and block the creation of .SCR 
files on endpoint systems.
McAfee Trusted Source is actively protecting against this threat. Customers 
with McAfee Trusted Source Email Reputation will have the emails blocked. 
Customers with McAfee Trusted

RE: OT : Malware alerts from McAfee, anyone experienced these yet ?

2010-09-10 Thread Kim Longenbaugh

Okay, I concede, he was holding us at pun-point.

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, September 10, 2010 8:56 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

Pun: a play on words. EX: People are dying to get in to the cemetery

To pun: to make a play on words

He intentionally made a play on words, confusing the meanings between
two wildly different interpretations of the word worm.

So: pun.

Nyah nyah nyah.

J

In regard to honorable vs. dishonorablecome on. This _IS_ shooky
we are talking about...

From: Kim Longenbaugh [mailto:k...@colonialsavings.com] 
Sent: Friday, September 10, 2010 9:40 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

Did you notice he didn't say honorable seppuku, which is often the way
I've seen that referenced.  I wonder if he was actually suggesting
dishonorable seppuku

At any rate, I disagree with MBS, because to me, the badder the pun,
the better it is.

Not to mention that I'm not sure your comment is even a pun, technically
speaking.

From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Friday, September 10, 2010 8:31 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

OK, I admit, I had to go look that up.  

That was mean.

Shook

From: Michael B. Smith [mich...@smithcons.com]
Sent: Friday, September 10, 2010 9:25 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

That pun was so bad that you should go commit seppuku.

From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Friday, September 10, 2010 9:18 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

The non-elevated rights will force it to run as a grub.

Shook

From: John Hornbuckle [john.hornbuc...@taylor.k12.fl.us]
Sent: Friday, September 10, 2010 9:16 AM
To: NT System Admin Issues
Subject: RE: OT : Malware alerts from McAfee, anyone experienced these
yet ?

What impact will attempting to run the worm as a non-elevated user have?

John Hornbuckle

MIS Department

Taylor County School District

www.taylor.k12.fl.us https://mail2.peak10.com/owa/UrlBlockedError.aspx

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, September 10, 2010 9:06 AM
To: NT System Admin Issues
Subject: Re: OT : Malware alerts from McAfee, anyone experienced these
yet ?

Based on the reports of a .SCR file as the attachment, I wonder why
these organizations are even allowing that extension into their
networks.

BTW, doesn't Google own Postini?  Is there any reason why they should
have been hit?

I hope the email admins in question have a documented trail that
suggests that they were trying to implement these well-known
(supposedly, anyway) layers for email security.

ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...

On Thu, Sep 9, 2010 at 10:46 PM, Sam Cayze sam.ca...@rollouts.com
wrote:

Just got an email from someone who had their business hit...

http://news.google.com/news/story?client=firefox-arls=org.mozilla:en-US
:officialchannel=shl=enq=here+You+Have+virus+emailum=1ie=UTF-8ncl=
d3_8Aeb9qdTcV2MsAEIz0YjQdS_OMei=bJuJTPykA5SlngeVu7mqDAsa=Xoi=news_res
ultct=more-resultsresnum=1ved=0CB4QqgIwAA

From: Erik Goldoff [mailto:egold...@gmail.com] 

Sent: Thursday, September 09, 2010 5:45 PM
To: NT System Admin Issues
Subject: OT : Malware alerts from McAfee, anyone experienced these yet ?

Got these two separate alerts from McAfee forwarded to me this evening.
Anyone had any exposure to these yet ?  

Looks like *IF* your end users are trained/informed properly against
social engineering (using spam as a vector) like this then nothing to
worry about.

We have just been made aware of another malicious 0-day attack in the
wild. The attack is in the form of an email with the SUBJECT: Here You
Have which leads the user to open a malicious .pdf document.

McAfee will be releasing an extra.dat to detect and clean the known
components soon, but until then, I recommend to block the email at the
email gateway identified by the Subject line:  Here you Have until the
extra.dat or .dat is fully deployed. For other non-McAfee anti-virus
vendors, the same methodology should be used until a signature file is
available. 

*

McAfee has received confirmation that some customers have received large
volumes of spam containing a link to malware, a mass-mailing worm
identified as VBMania. The symptom reported thus far is that the spam
volume is overwhelming the email infrastructure. 

Static URLs in the email link to a .SCR file.

RE: W2k3 DHCP redundancy / high availability

2010-09-10 Thread Don Guyer

Setup secondary as a hot spare but disable the DHCP service unless
and until the primary becomes available. Use netsh dhcp server export
c:\dhcpdatabase.txt all on a daily basis to ensure a valid backup of
the primary, and copy that file over to the secondary as part of one
scheduled task.

 

This is kinda what we do currently. We have 2 other AD Controllers in
the same Site as our DHCP server that we would just configure DHCP on
and restore the backup to it.

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com mailto:don.gu...@prufoxroach.com 

 

From: Fergal O'Connell [mailto:foconn...@curamsoftware.com] 
Sent: Friday, September 10, 2010 9:51 AM
To: NT System Admin Issues
Subject: RE: W2k3 DHCP redundancy / high availability

 

What is the lease time on your DHCP server?

 

You might want to change this to say 2-3 days which will enable you to
fix the original problem if there is one.

 

 

From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] 
Sent: 09 September 2010 22:55
To: NT System Admin Issues
Subject: W2k3 DHCP redundancy / high availability

 

Ok, here goes...

 

Present environment - pure Windows 2003 AD, with two DCs. One is virtual
(vmware esx 3.5), 2003 Enterprise Edition. The other is physical, 2003
Standard Edition (not sure why - I didn't set it up). Virtual DC is
running DHCP for our entire organization, and would be a pain to go
through and setup split scopes (many sites, multiple vlans per site, and
thus, multiple DHCP scopes for each site.) A year ago, we were using
Cisco devices at each remote site to handle DHCP for each subnet. We
performed a major network overhaul and had to centralize, so here we
are.

 

I've now been tasked with building redundancy for our DHCP services.
Moving to Server 2008 is not an option right now. We MAY be able to
upgrade the 2003 Standard server to 2003 Enterprise, but that isn't a
given just yet.

 

Issues...

 

Can't cluster, because of the Std Edition OS, (but even then, how would
that impact AD  DNS?)

Can't backup from Primary and restore to Secondary, again, because of
different OS (M$ says, not supported to backup from Enterprise and try
to restore to Standard)

As mentioned, split scopes would be a major admin pain (it wouldn't be
so bad if we had 2008, since there is a wizard in 2008, but I digress)

 

So, the way I see it, I have a couple of options...

 

Setup secondary as a hot spare but disable the DHCP service unless
and until the primary becomes available. Use netsh dhcp server export
c:\dhcpdatabase.txt all on a daily basis to ensure a valid backup of
the primary, and copy that file over to the secondary as part of one
scheduled task.

 

-or-

 

Setup secondary, authorize it, configure it, turn it on, (hear me out
here) and setup IP Address Conflict Resolution at the server level on
both servers, and let them work it out on their own. I realize that I
wouldn't have any lease synchronization, and that there is a slight risk
of duplicate IP, but I can't imagine there would be much. My WAN links
are solid. Also, any scope or option changes made on the primary would
have to be duplicated on the secondary...administrative overhead yes,
but still less than dealing with split scope, IMO. Even then, couldn't I
just export from the primary after I've made changes and then import to
the secondary? I know lease information is contained in the exported
file...trying to decide whether or not that would be good or bad... if
it wouldn't be a problem, why not take it a step further and schedule an
export/import from the primary to the secondary?

 

What am I missing?

 

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.com BLOCKED::mailto:%20jra...@eaglemds.com 
www.eaglemds.com BLOCKED::http://www.eaglemds.com/  

 

 



Any medical information contained in this electronic message is
CONFIDENTIAL and privileged. It is unlawful for unauthorized persons to
view, copy, disclose, or disseminate CONFIDENTIAL information. This
electronic message may contain information that is confidential and/or
legally privileged. It is intended only for the use of the individual(s)
and/or entity named as recipients in the message. If you are not an
intended recipient of this message, please notify the sender immediately
and delete this material from your computer. Do not deliver, distribute
or copy this message, and do not disclose its contents or take any
action in reliance on the information that it contains.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe

Re: OT - Creating deployment media with menu choice of OS, etc.

2010-09-10 Thread Mark Smith

Thank you everyone for all the great responses!
I'll check them out and let you know how it goes.



On Fri, Sep 10, 2010 at 7:26 AM, Rod Trent rodtr...@myitforum.com wrote:

  Plus, there are a couple good community add-ons to put a web-based
 interface on it.



 *From:* Tony Patton [mailto:apco...@gmail.com]
 *Sent:* Friday, September 10, 2010 5:43 AM

 *To:* NT System Admin Issues
 *Subject:* Re: OT - Creating deployment media with menu choice of OS, etc.



 I recommend you take a look at M$ MDT 2010.

 Does all you are asking.

 http://technet.microsoft.com/en-us/solutionaccelerators/dd407791.aspx

 On 9 September 2010 19:40, Mark Smith winsysad...@gmail.com wrote:

 I would like to create bootable media (probably external USB drive) that
 would present a menu to select a flavor of Windows OS to install as well as
 which applications to install, such as MS Office, AntiVirus, etc. Then once
 selected, would perform an unattended install.

 Looking for ideas on the easiest way to accomplish this.



 Thanks!





 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT - Creating deployment media with menu choice of OS, etc.

2010-09-10 Thread Rod Trent

I'd also be remiss if I didn't mention an add-on for ConfigMgr 2007 (also
runs without the integration) that allows a full deployment of the OS and
also required apps.  A new version (3.2) was just released yesterday.

 

http://www.1e.com/softwareproducts/shopping/index.aspx 

 

From: Mark Smith [mailto:winsysad...@gmail.com] 
Sent: Friday, September 10, 2010 10:18 AM
To: NT System Admin Issues
Subject: Re: OT - Creating deployment media with menu choice of OS, etc.

 

Thank you everyone for all the great responses!

I'll check them out and let you know how it goes.



 

On Fri, Sep 10, 2010 at 7:26 AM, Rod Trent rodtr...@myitforum.com wrote:

Plus, there are a couple good community add-ons to put a web-based interface
on it.

 

From: Tony Patton [mailto:apco...@gmail.com] 
Sent: Friday, September 10, 2010 5:43 AM 


To: NT System Admin Issues
Subject: Re: OT - Creating deployment media with menu choice of OS, etc.

 

I recommend you take a look at M$ MDT 2010.

Does all you are asking.

http://technet.microsoft.com/en-us/solutionaccelerators/dd407791.aspx

On 9 September 2010 19:40, Mark Smith winsysad...@gmail.com wrote:

I would like to create bootable media (probably external USB drive) that
would present a menu to select a flavor of Windows OS to install as well as
which applications to install, such as MS Office, AntiVirus, etc. Then once
selected, would perform an unattended install.

Looking for ideas on the easiest way to accomplish this.

 

Thanks! 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

bandwidth monitoring part deux

So I was reading up on implementing netflow on my Cisco 3750 core switch stack 
and guess whut.  The 3750 platform does not support netflow.  Awesome.

So, I'm now thinking I my only option is to span my uplink port to my ASA and 
use software brand 'X' to analyze the captured data and put it into purdy 
little graphs for this customer.

Customer would like to know who is using bandwidth and what they are doing with 
it.  FYI, I'm already running MRTG Bundle on the switches so I have raw 
bandwidth utilization numbers, trends, etc.  However, I need the ability to 
drill down more.  I do have an upstream ASA5510 running 8.3.1 and an upstream 
2821 router to terminate two ISPs, do the BGP stuff but I figure monitoring the 
ASA or the BGP router is worthless b\c of translation, etc.

You done got any ideers?


Shook

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Will Vipre Enterprise protect us?

Just reading on PC World about the new screen saver worm. Hoping Vipre
Enterprise will protect us. J

 

John-AldrichPerception_2

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

RE: bandwidth monitoring part deux

Your CORE is 3750's

shakes head

Rrd, prtg, ntop, and nagios come to mind. If you want free tools.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, September 10, 2010 10:31 AM
To: NT System Admin Issues
Subject: bandwidth monitoring part deux

So I was reading up on implementing netflow on my Cisco 3750 core switch stack 
and guess whut.  The 3750 platform does not support netflow.  Awesome.

So, I'm now thinking I my only option is to span my uplink port to my ASA and 
use software brand 'X' to analyze the captured data and put it into purdy 
little graphs for this customer.

Customer would like to know who is using bandwidth and what they are doing with 
it.  FYI, I'm already running MRTG Bundle on the switches so I have raw 
bandwidth utilization numbers, trends, etc.  However, I need the ability to 
drill down more.  I do have an upstream ASA5510 running 8.3.1 and an upstream 
2821 router to terminate two ISPs, do the BGP stuff but I figure monitoring the 
ASA or the BGP router is worthless b\c of translation, etc.

You done got any ideers?


Shook

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Mac and Windows mix

2010-09-10 Thread Don Guyer

I bought one of those a few years ago, broken, for a few bucks. Wired in
a new battery connector and it worked perfectly! I must admit, I
couldn't get that dash to run as fast as I could 30 years ago.

 

J

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com mailto:don.gu...@prufoxroach.com 

 

From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Thursday, September 09, 2010 8:48 PM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

Those dashes were Gnarly!

 

-sc

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 09, 2010 7:32 PM
To: NT System Admin Issues
Subject: Re: Mac and Windows mix

 

Or the original Mattel handheld Football!

Nostalgia alert!!



ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 

On Thu, Sep 9, 2010 at 6:29 PM, Steven M. Caesare scaes...@caesare.com
wrote:

...emulating Pong.

Or the original Mattel handheld Football!

-sc


-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, September 09, 2010 5:23 PM
To: NT System Admin Issues

Subject: RE: Mac and Windows mix

Put a Palm Pilot emulator on it, running the gameboy emulator!

What's the current Levels of emulation world record? For some reason,
11 layers comes to mind.

--Matt Ross
Ephrata School District


- Original Message -
From: Steven M. Caesare
[mailto:scaes...@caesare.com]

To: NT System Admin Issues

[mailto:ntsysad...@lyris.sunbelt-software.com]
Sent: Thu, 09 Sep 2010

14:17:46 -0700
Subject: RE: Mac and Windows mix

 Incidentally, that's a 16 bit app(Bob), running on the WoW16 layer of
 a 32bit OS(XP), running in a virtual machine(MS VirtualPC) on a
 64bitmachine(Win7x64).

 Kinda cool.

 -sc

 -Original Message-

 From: William J. Robbins [mailto:dangerw...@gmail.com]
 Sent: Thursday, September 09, 2010 5:08 PM
 To: NT System Admin Issues
 Subject: Re: Mac and Windows mix


 I wish I could create some crap software and end up married to a
 multi-billionaire. :)

 WJR
  - from my Crackberry.

 If you find yourself in a fair fight, your tactics suck.

 -Original Message-
 From: Matthew W. Ross mr...@ephrataschools.org
 Date: Thu, 09 Sep 2010 14:06:05

 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

 Reply-To: NT System Admin Issues
 ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
 mix


 It's all Melinda's fault, isn't it?

 Sm:)e.


 --Matt Ross
 Ephrata School District


 - Original Message -
 From: Steven M. Caesare
 [mailto:scaes...@caesare.com]

 To: NT System Admin Issues

 [mailto:ntsysad...@lyris.sunbelt-software.com]
 Sent: Thu, 09 Sep 2010
 14:03:36 -0700

 Subject: RE: Mac and Windows mix


 
 
 
 
 
 

  -Original Message-
  From: William J. Robbins [mailto:dangerw...@gmail.com]
  Sent: Thursday, September 09, 2010 4:13 PM
  To: NT System Admin Issues
  Subject: Re: Mac and Windows mix
 
 
 

  Like Microsoft Bob?
 
  WJR
 
  - from my Crackberry.
 
 
 
  If you find yourself in a fair fight, your tactics suck.
 
 
 
  -Original Message-
 
  From: Steven M. Caesare scaes...@caesare.com
 
  Date: Thu, 9 Sep 2010 15:02:52
 

  To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
 

  Reply-To: NT System Admin Issues
  ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
  mix
 
 
 

  Because it's AWE-SOME!
 
 
 
  Actually it's probably because up to XP, the WOW16 layer still
  shipped, and progman needed to be there for old 16 bit apps that may

  have relied on calling in to it.
 
 
 
  -sc
 
 
 
   -Original Message-
 

   From: James Kerr [mailto:cluster...@gmail.com]
 
   Sent: Thursday, September 09, 2010 2:58 PM
 
   To: NT System Admin Issues
 
   Subject: Re: Mac and Windows mix
 
  
 

   Speaking of 3.x, anyone have any idea why at least until XP there
   is
 
  still
 
   program manager shipping with Windows?
 
  
 
  
 
   - Original Message -
 
   From: David Lum david@nwea.org
 

   To: NT System Admin Issues
   ntsysadmin@lyris.sunbelt-software.com
 

   Sent: Thursday, September 09, 2010 2:52 PM
 
   Subject: RE: Mac and Windows mix
 
  
 
  
 

   Nice to know I'm not the only one who has done that. Back in 3.11
   days
 
  I did
 
   that and made clock.exe the shell. How do you get out of Windows?
 
  Close
 
   Clock. :-)
 
  
 
   I've done that twice...the 2nd time the results weren't pretty
   because
 
  it
 
   was a developer who started deleting his duplicate icons...
 
  
 
   David Lum // SYSTEMS ENGINEER
 
   NORTHWEST EVALUATION ASSOCIATION
 
   (Desk) 971.222.1025 // (Cell) 503.267.9764
 
  
 

   -Original Message-
 
   From: James Winzenz [mailto:james.winz...@hotmail.com]
 

   Sent: Thursday, September 09, 2010 9:20 AM
 
   To: NT

RE: bandwidth monitoring part deux

Not at %dayjob%

Shook

From: Michael B. Smith [mich...@smithcons.com]
Sent: Friday, September 10, 2010 10:40 AM
To: NT System Admin Issues
Subject: RE: bandwidth monitoring part deux

Your CORE is 3750’s

shakes head

Rrd, prtg, ntop, and nagios come to mind. If you want “free” tools.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, September 10, 2010 10:31 AM
To: NT System Admin Issues
Subject: bandwidth monitoring part deux

So I was reading up on implementing netflow on my Cisco 3750 core switch stack 
and guess whut.  The 3750 platform does not support netflow.  Awesome.

So, I'm now thinking I my only option is to span my uplink port to my ASA and 
use software brand 'X' to analyze the captured data and put it into purdy 
little graphs for this customer.

Customer would like to know who is using bandwidth and what they are doing with 
it.  FYI, I'm already running MRTG Bundle on the switches so I have raw 
bandwidth utilization numbers, trends, etc.  However, I need the ability to 
drill down more.  I do have an upstream ASA5510 running 8.3.1 and an upstream 
2821 router to terminate two ISPs, do the BGP stuff but I figure monitoring the 
ASA or the BGP router is worthless b\c of translation, etc.

You done got any ideers?

Shook

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Will Vipre Enterprise protect us?

2010-09-10 Thread Micheal Espinola Jr

Sunbelt is the only anti-virus vendor that is catching a nasty scamware that
is making its rounds in San Diego right now.  Anti-malware apps are catching
it, but most home users dont run anti-malware in real-time.

--
ME2


On Fri, Sep 10, 2010 at 7:32 AM, John Aldrich
jaldr...@blueridgecarpet.comwrote:

  Just reading on PC World about the new screen saver worm. Hoping Vipre
 Enterprise will protect us. J



 [image: John-Aldrich][image: Perception_2]



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

Re: Will Vipre Enterprise protect us?

2010-09-10 Thread Micheal Espinola Jr

oops, here's a link to virus total reflecting its current status:

http://www.virustotal.com/file-scan/report.html?id=337c12c66cb5e898357d861617c21cd3f2c5519e78927b1f636eed14a52bff0c-1282678787

--
ME2


On Fri, Sep 10, 2010 at 7:42 AM, Micheal Espinola Jr 
michealespin...@gmail.com wrote:

 Sunbelt is the only anti-virus vendor that is catching a nasty scamware
 that is making its rounds in San Diego right now.  Anti-malware apps are
 catching it, but most home users dont run anti-malware in real-time.

 --
 ME2



 On Fri, Sep 10, 2010 at 7:32 AM, John Aldrich 
 jaldr...@blueridgecarpet.com wrote:

  Just reading on PC World about the new screen saver worm. Hoping Vipre
 Enterprise will protect us. J



 [image: John-Aldrich][image: Perception_2]



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage002.jpgimage001.jpg

RE: Mac and Windows mix

2010-09-10 Thread Steven M. Caesare

Awesome.

 

There's gotta be a port for cell phones out there somewhere...

 

-sc

 

From: Don Guyer [mailto:don.gu...@prufoxroach.com] 
Sent: Friday, September 10, 2010 10:43 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

I bought one of those a few years ago, broken, for a few bucks. Wired in
a new battery connector and it worked perfectly! I must admit, I
couldn't get that dash to run as fast as I could 30 years ago.

 

:-)

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com

 

From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Thursday, September 09, 2010 8:48 PM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

Those dashes were Gnarly!

 

-sc

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 09, 2010 7:32 PM
To: NT System Admin Issues
Subject: Re: Mac and Windows mix

 

Or the original Mattel handheld Football!

Nostalgia alert!!



ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 

On Thu, Sep 9, 2010 at 6:29 PM, Steven M. Caesare scaes...@caesare.com
wrote:

...emulating Pong.

Or the original Mattel handheld Football!

-sc


-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, September 09, 2010 5:23 PM
To: NT System Admin Issues

Subject: RE: Mac and Windows mix

Put a Palm Pilot emulator on it, running the gameboy emulator!

What's the current Levels of emulation world record? For some reason,
11 layers comes to mind.

--Matt Ross
Ephrata School District


- Original Message -
From: Steven M. Caesare
[mailto:scaes...@caesare.com]

To: NT System Admin Issues

[mailto:ntsysad...@lyris.sunbelt-software.com]
Sent: Thu, 09 Sep 2010

14:17:46 -0700
Subject: RE: Mac and Windows mix

 Incidentally, that's a 16 bit app(Bob), running on the WoW16 layer of
 a 32bit OS(XP), running in a virtual machine(MS VirtualPC) on a
 64bitmachine(Win7x64).

 Kinda cool.

 -sc

 -Original Message-

 From: William J. Robbins [mailto:dangerw...@gmail.com]
 Sent: Thursday, September 09, 2010 5:08 PM
 To: NT System Admin Issues
 Subject: Re: Mac and Windows mix


 I wish I could create some crap software and end up married to a
 multi-billionaire. :)

 WJR
  - from my Crackberry.

 If you find yourself in a fair fight, your tactics suck.

 -Original Message-
 From: Matthew W. Ross mr...@ephrataschools.org
 Date: Thu, 09 Sep 2010 14:06:05

 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

 Reply-To: NT System Admin Issues
 ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
 mix


 It's all Melinda's fault, isn't it?

 Sm:)e.


 --Matt Ross
 Ephrata School District


 - Original Message -
 From: Steven M. Caesare
 [mailto:scaes...@caesare.com]

 To: NT System Admin Issues

 [mailto:ntsysad...@lyris.sunbelt-software.com]
 Sent: Thu, 09 Sep 2010
 14:03:36 -0700

 Subject: RE: Mac and Windows mix


 
 
 
 
 
 

  -Original Message-
  From: William J. Robbins [mailto:dangerw...@gmail.com]
  Sent: Thursday, September 09, 2010 4:13 PM
  To: NT System Admin Issues
  Subject: Re: Mac and Windows mix
 
 
 

  Like Microsoft Bob?
 
  WJR
 
  - from my Crackberry.
 
 
 
  If you find yourself in a fair fight, your tactics suck.
 
 
 
  -Original Message-
 
  From: Steven M. Caesare scaes...@caesare.com
 
  Date: Thu, 9 Sep 2010 15:02:52
 

  To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
 

  Reply-To: NT System Admin Issues
  ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
  mix
 
 
 

  Because it's AWE-SOME!
 
 
 
  Actually it's probably because up to XP, the WOW16 layer still
  shipped, and progman needed to be there for old 16 bit apps that may

  have relied on calling in to it.
 
 
 
  -sc
 
 
 
   -Original Message-
 

   From: James Kerr [mailto:cluster...@gmail.com]
 
   Sent: Thursday, September 09, 2010 2:58 PM
 
   To: NT System Admin Issues
 
   Subject: Re: Mac and Windows mix
 
  
 

   Speaking of 3.x, anyone have any idea why at least until XP there
   is
 
  still
 
   program manager shipping with Windows?
 
  
 
  
 
   - Original Message -
 
   From: David Lum david@nwea.org
 

   To: NT System Admin Issues
   ntsysadmin@lyris.sunbelt-software.com
 

   Sent: Thursday, September 09, 2010 2:52 PM
 
   Subject: RE: Mac and Windows mix
 
  
 
  
 

   Nice to know I'm not the only one who has done that. Back in 3.11
   days
 
  I did
 
   that and made clock.exe the shell. How do you get out of Windows?
 
  Close
 
   Clock. :-)
 
  
 
   I've done that twice...the 2nd time the results weren't pretty
   because
 
  it
 
   was a developer who started deleting his duplicate icons...
 
  
 
   David Lum // SYSTEMS ENGINEER
 
   NORTHWEST EVALUATION

RE: bandwidth monitoring part deux

2010-09-10 Thread Kim Longenbaugh

Your core is CISCO?

shakes head

 

 

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, September 10, 2010 9:40 AM
To: NT System Admin Issues
Subject: RE: bandwidth monitoring part deux

 

Your CORE is 3750's

 

shakes head

 

Rrd, prtg, ntop, and nagios come to mind. If you want free tools.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Friday, September 10, 2010 10:31 AM
To: NT System Admin Issues
Subject: bandwidth monitoring part deux

 

So I was reading up on implementing netflow on my Cisco 3750 core switch
stack and guess whut.  The 3750 platform does not support netflow.
Awesome.

 

So, I'm now thinking I my only option is to span my uplink port to my
ASA and use software brand 'X' to analyze the captured data and put it
into purdy little graphs for this customer.  

 

Customer would like to know who is using bandwidth and what they are
doing with it.  FYI, I'm already running MRTG Bundle on the switches so
I have raw bandwidth utilization numbers, trends, etc.  However, I need
the ability to drill down more.  I do have an upstream ASA5510 running
8.3.1 and an upstream 2821 router to terminate two ISPs, do the BGP
stuff but I figure monitoring the ASA or the BGP router is worthless b\c
of translation, etc.  

 

You done got any ideers? 

 

 

Shook

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Mac and Windows mix

2010-09-10 Thread Mayo, Bill

LED Football for iPhone.  Don't know about others.

From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Friday, September 10, 2010 10:45 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

Awesome.

There's gotta be a port for cell phones out there somewhere...

-sc

From: Don Guyer [mailto:don.gu...@prufoxroach.com] 
Sent: Friday, September 10, 2010 10:43 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

I bought one of those a few years ago, broken, for a few bucks. Wired in
a new battery connector and it worked perfectly! I must admit, I
couldn't get that dash to run as fast as I could 30 years ago.

:-)

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com

From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Thursday, September 09, 2010 8:48 PM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

Those dashes were Gnarly!

-sc

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 09, 2010 7:32 PM
To: NT System Admin Issues
Subject: Re: Mac and Windows mix

Or the original Mattel handheld Football!

Nostalgia alert!!

ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...

On Thu, Sep 9, 2010 at 6:29 PM, Steven M. Caesare scaes...@caesare.com
wrote:

...emulating Pong.

Or the original Mattel handheld Football!

-sc

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, September 09, 2010 5:23 PM
To: NT System Admin Issues

Subject: RE: Mac and Windows mix

Put a Palm Pilot emulator on it, running the gameboy emulator!

What's the current Levels of emulation world record? For some reason,
11 layers comes to mind.

--Matt Ross
Ephrata School District

- Original Message -
From: Steven M. Caesare
[mailto:scaes...@caesare.com]

To: NT System Admin Issues

[mailto:ntsysad...@lyris.sunbelt-software.com]
Sent: Thu, 09 Sep 2010

14:17:46 -0700
Subject: RE: Mac and Windows mix

 Incidentally, that's a 16 bit app(Bob), running on the WoW16 layer of
 a 32bit OS(XP), running in a virtual machine(MS VirtualPC) on a
 64bitmachine(Win7x64).

 Kinda cool.

 -sc

 -Original Message-

 From: William J. Robbins [mailto:dangerw...@gmail.com]
 Sent: Thursday, September 09, 2010 5:08 PM
 To: NT System Admin Issues
 Subject: Re: Mac and Windows mix

 I wish I could create some crap software and end up married to a
 multi-billionaire. :)

 WJR
  - from my Crackberry.

 If you find yourself in a fair fight, your tactics suck.

 -Original Message-
 From: Matthew W. Ross mr...@ephrataschools.org
 Date: Thu, 09 Sep 2010 14:06:05

 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

 Reply-To: NT System Admin Issues
 ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
 mix

 It's all Melinda's fault, isn't it?

 Sm:)e.

 --Matt Ross
 Ephrata School District

 - Original Message -
 From: Steven M. Caesare
 [mailto:scaes...@caesare.com]

 To: NT System Admin Issues

 [mailto:ntsysad...@lyris.sunbelt-software.com]
 Sent: Thu, 09 Sep 2010
 14:03:36 -0700

 Subject: RE: Mac and Windows mix

  -Original Message-
  From: William J. Robbins [mailto:dangerw...@gmail.com]
  Sent: Thursday, September 09, 2010 4:13 PM
  To: NT System Admin Issues
  Subject: Re: Mac and Windows mix

  Like Microsoft Bob?

  WJR

  - from my Crackberry.

  If you find yourself in a fair fight, your tactics suck.

  -Original Message-

  From: Steven M. Caesare scaes...@caesare.com

  Date: Thu, 9 Sep 2010 15:02:52

  To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

  Reply-To: NT System Admin Issues
  ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
  mix

  Because it's AWE-SOME!

  Actually it's probably because up to XP, the WOW16 layer still
  shipped, and progman needed to be there for old 16 bit apps that may

  have relied on calling in to it.

  -sc

   -Original Message-

   From: James Kerr [mailto:cluster...@gmail.com]

   Sent: Thursday, September 09, 2010 2:58 PM

   To: NT System Admin Issues

   Subject: Re: Mac and Windows mix

   Speaking of 3.x, anyone have any idea why at least until XP there
   is

  still

   program manager shipping with Windows?

   - Original Message -

   From: David Lum david@nwea.org

   To: NT System Admin Issues
   ntsysadmin@lyris.sunbelt-software.com

   Sent: Thursday, September 09, 2010 2:52 PM

   Subject: RE: Mac and Windows mix

   Nice to know I'm not the only one who has done that. Back in 3.11
   days

  I did

   that and made clock.exe the shell. How do you get out of Windows?

  Close

RE: Mac and Windows mix

2010-09-10 Thread Don Guyer

I think that was the start of my ADD.

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com mailto:don.gu...@prufoxroach.com 

 

From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Friday, September 10, 2010 10:45 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

Awesome.

 

There's gotta be a port for cell phones out there somewhere...

 

-sc

 

From: Don Guyer [mailto:don.gu...@prufoxroach.com] 
Sent: Friday, September 10, 2010 10:43 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

I bought one of those a few years ago, broken, for a few bucks. Wired in
a new battery connector and it worked perfectly! I must admit, I
couldn't get that dash to run as fast as I could 30 years ago.

 

J

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com

 

From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Thursday, September 09, 2010 8:48 PM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

Those dashes were Gnarly!

 

-sc

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 09, 2010 7:32 PM
To: NT System Admin Issues
Subject: Re: Mac and Windows mix

 

Or the original Mattel handheld Football!

Nostalgia alert!!



ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 

On Thu, Sep 9, 2010 at 6:29 PM, Steven M. Caesare scaes...@caesare.com
wrote:

...emulating Pong.

Or the original Mattel handheld Football!

-sc


-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, September 09, 2010 5:23 PM
To: NT System Admin Issues

Subject: RE: Mac and Windows mix

Put a Palm Pilot emulator on it, running the gameboy emulator!

What's the current Levels of emulation world record? For some reason,
11 layers comes to mind.

--Matt Ross
Ephrata School District


- Original Message -
From: Steven M. Caesare
[mailto:scaes...@caesare.com]

To: NT System Admin Issues

[mailto:ntsysad...@lyris.sunbelt-software.com]
Sent: Thu, 09 Sep 2010

14:17:46 -0700
Subject: RE: Mac and Windows mix

 Incidentally, that's a 16 bit app(Bob), running on the WoW16 layer of
 a 32bit OS(XP), running in a virtual machine(MS VirtualPC) on a
 64bitmachine(Win7x64).

 Kinda cool.

 -sc

 -Original Message-

 From: William J. Robbins [mailto:dangerw...@gmail.com]
 Sent: Thursday, September 09, 2010 5:08 PM
 To: NT System Admin Issues
 Subject: Re: Mac and Windows mix


 I wish I could create some crap software and end up married to a
 multi-billionaire. :)

 WJR
  - from my Crackberry.

 If you find yourself in a fair fight, your tactics suck.

 -Original Message-
 From: Matthew W. Ross mr...@ephrataschools.org
 Date: Thu, 09 Sep 2010 14:06:05

 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

 Reply-To: NT System Admin Issues
 ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
 mix


 It's all Melinda's fault, isn't it?

 Sm:)e.


 --Matt Ross
 Ephrata School District


 - Original Message -
 From: Steven M. Caesare
 [mailto:scaes...@caesare.com]

 To: NT System Admin Issues

 [mailto:ntsysad...@lyris.sunbelt-software.com]
 Sent: Thu, 09 Sep 2010
 14:03:36 -0700

 Subject: RE: Mac and Windows mix


 
 
 
 
 
 

  -Original Message-
  From: William J. Robbins [mailto:dangerw...@gmail.com]
  Sent: Thursday, September 09, 2010 4:13 PM
  To: NT System Admin Issues
  Subject: Re: Mac and Windows mix
 
 
 

  Like Microsoft Bob?
 
  WJR
 
  - from my Crackberry.
 
 
 
  If you find yourself in a fair fight, your tactics suck.
 
 
 
  -Original Message-
 
  From: Steven M. Caesare scaes...@caesare.com
 
  Date: Thu, 9 Sep 2010 15:02:52
 

  To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
 

  Reply-To: NT System Admin Issues
  ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
  mix
 
 
 

  Because it's AWE-SOME!
 
 
 
  Actually it's probably because up to XP, the WOW16 layer still
  shipped, and progman needed to be there for old 16 bit apps that may

  have relied on calling in to it.
 
 
 
  -sc
 
 
 
   -Original Message-
 

   From: James Kerr [mailto:cluster...@gmail.com]
 
   Sent: Thursday, September 09, 2010 2:58 PM
 
   To: NT System Admin Issues
 
   Subject: Re: Mac and Windows mix
 
  
 

   Speaking of 3.x, anyone have any idea why at least until XP there
   is
 
  still
 
   program manager shipping with Windows?
 
  
 
  
 
   - Original Message -
 
   From: David Lum david@nwea.org
 

   To: NT System Admin Issues
   ntsysadmin@lyris.sunbelt-software.com
 

   Sent: Thursday, September 09, 2010 2:52 PM
 
   Subject: RE: Mac

RE: Mac and Windows mix

2010-09-10 Thread Steven M. Caesare

I suspect it just won't be the same without the tactile feedback from
those buttons tho (clik, clik, clik...)

 

-sc

 

From: Mayo, Bill [mailto:bem...@pittcountync.gov] 
Sent: Friday, September 10, 2010 10:47 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

LED Football for iPhone.  Don't know about others.

 



From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Friday, September 10, 2010 10:45 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

Awesome.

 

There's gotta be a port for cell phones out there somewhere...

 

-sc

 

From: Don Guyer [mailto:don.gu...@prufoxroach.com] 
Sent: Friday, September 10, 2010 10:43 AM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

I bought one of those a few years ago, broken, for a few bucks. Wired in
a new battery connector and it worked perfectly! I must admit, I
couldn't get that dash to run as fast as I could 30 years ago.

 

:-)

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com

 

From: Steven M. Caesare [mailto:scaes...@caesare.com] 
Sent: Thursday, September 09, 2010 8:48 PM
To: NT System Admin Issues
Subject: RE: Mac and Windows mix

 

Those dashes were Gnarly!

 

-sc

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 09, 2010 7:32 PM
To: NT System Admin Issues
Subject: Re: Mac and Windows mix

 

Or the original Mattel handheld Football!

Nostalgia alert!!



ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 

On Thu, Sep 9, 2010 at 6:29 PM, Steven M. Caesare scaes...@caesare.com
wrote:

...emulating Pong.

Or the original Mattel handheld Football!

-sc


-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, September 09, 2010 5:23 PM
To: NT System Admin Issues

Subject: RE: Mac and Windows mix

Put a Palm Pilot emulator on it, running the gameboy emulator!

What's the current Levels of emulation world record? For some reason,
11 layers comes to mind.

--Matt Ross
Ephrata School District


- Original Message -
From: Steven M. Caesare
[mailto:scaes...@caesare.com]

To: NT System Admin Issues

[mailto:ntsysad...@lyris.sunbelt-software.com]
Sent: Thu, 09 Sep 2010

14:17:46 -0700
Subject: RE: Mac and Windows mix

 Incidentally, that's a 16 bit app(Bob), running on the WoW16 layer of
 a 32bit OS(XP), running in a virtual machine(MS VirtualPC) on a
 64bitmachine(Win7x64).

 Kinda cool.

 -sc

 -Original Message-

 From: William J. Robbins [mailto:dangerw...@gmail.com]
 Sent: Thursday, September 09, 2010 5:08 PM
 To: NT System Admin Issues
 Subject: Re: Mac and Windows mix


 I wish I could create some crap software and end up married to a
 multi-billionaire. :)

 WJR
  - from my Crackberry.

 If you find yourself in a fair fight, your tactics suck.

 -Original Message-
 From: Matthew W. Ross mr...@ephrataschools.org
 Date: Thu, 09 Sep 2010 14:06:05

 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

 Reply-To: NT System Admin Issues
 ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
 mix


 It's all Melinda's fault, isn't it?

 Sm:)e.


 --Matt Ross
 Ephrata School District


 - Original Message -
 From: Steven M. Caesare
 [mailto:scaes...@caesare.com]

 To: NT System Admin Issues

 [mailto:ntsysad...@lyris.sunbelt-software.com]
 Sent: Thu, 09 Sep 2010
 14:03:36 -0700

 Subject: RE: Mac and Windows mix


 
 
 
 
 
 

  -Original Message-
  From: William J. Robbins [mailto:dangerw...@gmail.com]
  Sent: Thursday, September 09, 2010 4:13 PM
  To: NT System Admin Issues
  Subject: Re: Mac and Windows mix
 
 
 

  Like Microsoft Bob?
 
  WJR
 
  - from my Crackberry.
 
 
 
  If you find yourself in a fair fight, your tactics suck.
 
 
 
  -Original Message-
 
  From: Steven M. Caesare scaes...@caesare.com
 
  Date: Thu, 9 Sep 2010 15:02:52
 

  To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
 

  Reply-To: NT System Admin Issues
  ntsysadmin@lyris.sunbelt-software.comSubject: RE: Mac and Windows
  mix
 
 
 

  Because it's AWE-SOME!
 
 
 
  Actually it's probably because up to XP, the WOW16 layer still
  shipped, and progman needed to be there for old 16 bit apps that may

  have relied on calling in to it.
 
 
 
  -sc
 
 
 
   -Original Message-
 

   From: James Kerr [mailto:cluster...@gmail.com]
 
   Sent: Thursday, September 09, 2010 2:58 PM
 
   To: NT System Admin Issues
 
   Subject: Re: Mac and Windows mix
 
  
 

   Speaking of 3.x, anyone have any idea why at least until XP there
   is
 
  still
 
   program manager shipping with Windows?
 
  
 
  
 
   - Original Message -
 
   From: David Lum david@nwea.org
 

   To: NT System Admin Issues

RE: Will Vipre Enterprise protect us?

Great! That's good to know. J Since Vipre Home and Enterprise have the same
engine, I feel confident that we're covered now. J

 

Similar topic, on my home PC I tried to install an IE plugin the other day.
Vipre refused to let me do it, saying it was a Trojan. J I feel better
knowing I've got Vipre installed and I *will* be renewing it when the
license expires in December. J

 

John-AldrichPerception_2

 

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Friday, September 10, 2010 10:43 AM
To: NT System Admin Issues
Subject: Re: Will Vipre Enterprise protect us?

 

oops, here's a link to virus total reflecting its current status:

http://www.virustotal.com/file-scan/report.html?id=337c12c66cb5e898357d86161
7c21cd3f2c5519e78927b1f636eed14a52bff0c-1282678787

--
ME2



On Fri, Sep 10, 2010 at 7:42 AM, Micheal Espinola Jr
michealespin...@gmail.com wrote:

Sunbelt is the only anti-virus vendor that is catching a nasty scamware that
is making its rounds in San Diego right now.  Anti-malware apps are catching
it, but most home users dont run anti-malware in real-time.

--
ME2





On Fri, Sep 10, 2010 at 7:32 AM, John Aldrich jaldr...@blueridgecarpet.com
wrote:

Just reading on PC World about the new screen saver worm. Hoping Vipre
Enterprise will protect us. J

 

John-AldrichPerception_2

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

Re: Will Vipre Enterprise protect us?

2010-09-10 Thread Don Ely so sc will stop complaining

Something had to make you feel good...  :P
Sent from my Verizon Wireless BlackBerry

-Original Message-
From: John Aldrich jaldr...@blueridgecarpet.com
Date: Fri, 10 Sep 2010 11:03:52 
To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
Reply-To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Subject: RE: Will Vipre Enterprise protect us?

Great! That's good to know. J Since Vipre Home and Enterprise have the same
engine, I feel confident that we're covered now. J

Similar topic, on my home PC I tried to install an IE plugin the other day.
Vipre refused to let me do it, saying it was a Trojan. J I feel better
knowing I've got Vipre installed and I *will* be renewing it when the
license expires in December. J

John-AldrichPerception_2

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Friday, September 10, 2010 10:43 AM
To: NT System Admin Issues
Subject: Re: Will Vipre Enterprise protect us?

oops, here's a link to virus total reflecting its current status:

http://www.virustotal.com/file-scan/report.html?id=337c12c66cb5e898357d86161
7c21cd3f2c5519e78927b1f636eed14a52bff0c-1282678787

--
ME2

On Fri, Sep 10, 2010 at 7:42 AM, Micheal Espinola Jr
michealespin...@gmail.com wrote:

Sunbelt is the only anti-virus vendor that is catching a nasty scamware that
is making its rounds in San Diego right now.  Anti-malware apps are catching
it, but most home users dont run anti-malware in real-time.

--
ME2

On Fri, Sep 10, 2010 at 7:32 AM, John Aldrich jaldr...@blueridgecarpet.com
wrote:

Just reading on PC World about the new screen saver worm. Hoping Vipre
Enterprise will protect us. J

John-AldrichPerception_2

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
image001.jpgimage002.jpg

Re: Will Vipre Enterprise protect us?

In the interest of maintaining a whole apples to apples kind of thing, it
doesn't appear that what ME2 referred to is the same nasty you asked about
(assuming you were asking about the Here you have email).

The ISC writeup links to a Virustotal page from yesterday that does not show
Vipre detecting the .scr malware on def version 6853.  ME2's link is to a
scan of an exe run on 8/24 with Vipre defs version 6785.

On Fri, Sep 10, 2010 at 11:03 AM, John Aldrich jaldr...@blueridgecarpet.com
 wrote:

  Great! That’s good to know. J Since Vipre Home and Enterprise have the
 same engine, I feel confident that we’re covered now. J



 Similar topic, on my home PC I tried to install an IE plugin the other day.
 Vipre refused to let me do it, saying it was a Trojan. J I feel better
 knowing I’ve got Vipre installed and I **will** be renewing it when the
 license expires in December. J



 [image: John-Aldrich][image: Perception_2]



 *From:* Micheal Espinola Jr [mailto:michealespin...@gmail.com]
 *Sent:* Friday, September 10, 2010 10:43 AM
 *To:* NT System Admin Issues
 *Subject:* Re: Will Vipre Enterprise protect us?



 oops, here's a link to virus total reflecting its current status:


 http://www.virustotal.com/file-scan/report.html?id=337c12c66cb5e898357d861617c21cd3f2c5519e78927b1f636eed14a52bff0c-1282678787

 --
 ME2

  On Fri, Sep 10, 2010 at 7:42 AM, Micheal Espinola Jr 
 michealespin...@gmail.com wrote:

 Sunbelt is the only anti-virus vendor that is catching a nasty scamware
 that is making its rounds in San Diego right now.  Anti-malware apps are
 catching it, but most home users dont run anti-malware in real-time.

 --
 ME2



  On Fri, Sep 10, 2010 at 7:32 AM, John Aldrich 
 jaldr...@blueridgecarpet.com wrote:

 Just reading on PC World about the new screen saver worm. Hoping Vipre
 Enterprise will protect us. J



 [image: John-Aldrich][image: Perception_2]



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin





 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

RE: Will Vipre Enterprise protect us?

Thanks, Coppertop! :-) Good to know you guys are hot on the trail of the 
beastie! :-)



-Original Message-
From: Tammy [mailto:copper...@personainternet.com] 
Sent: Friday, September 10, 2010 11:12 AM
To: NT System Admin Issues
Subject: re: Will Vipre Enterprise protect us?

Yes. :)

One of our researchers managed to get a sample yesterday.

http://www.virustotal.com/file-scan/report.html?id=fedb7b404754cf85737fb7e50f33324b84eb4c0b98024c7d3302039a901b04b7-1284129427
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Will Vipre Enterprise protect us?

2010-09-10 Thread Micheal Espinola Jr

This is true.  Its an example of something else Vipre is catching, that no
other a/v is.

--
ME2


On Fri, Sep 10, 2010 at 8:18 AM, Richard Stovall rich...@gmail.com wrote:

 In the interest of maintaining a whole apples to apples kind of thing, it
 doesn't appear that what ME2 referred to is the same nasty you asked about
 (assuming you were asking about the Here you have email).

 The ISC writeup links to a Virustotal page from yesterday that does not
 show Vipre detecting the .scr malware on def version 6853.  ME2's link is to
 a scan of an exe run on 8/24 with Vipre defs version 6785.

 On Fri, Sep 10, 2010 at 11:03 AM, John Aldrich 
 jaldr...@blueridgecarpet.com wrote:

  Great! That’s good to know. J Since Vipre Home and Enterprise have the
 same engine, I feel confident that we’re covered now. J



 Similar topic, on my home PC I tried to install an IE plugin the other
 day. Vipre refused to let me do it, saying it was a Trojan. J I feel
 better knowing I’ve got Vipre installed and I **will** be renewing it
 when the license expires in December. J



 [image: John-Aldrich][image: Perception_2]



 *From:* Micheal Espinola Jr [mailto:michealespin...@gmail.com]
 *Sent:* Friday, September 10, 2010 10:43 AM
 *To:* NT System Admin Issues
 *Subject:* Re: Will Vipre Enterprise protect us?



 oops, here's a link to virus total reflecting its current status:


 http://www.virustotal.com/file-scan/report.html?id=337c12c66cb5e898357d861617c21cd3f2c5519e78927b1f636eed14a52bff0c-1282678787

 --
 ME2

  On Fri, Sep 10, 2010 at 7:42 AM, Micheal Espinola Jr 
 michealespin...@gmail.com wrote:

 Sunbelt is the only anti-virus vendor that is catching a nasty scamware
 that is making its rounds in San Diego right now.  Anti-malware apps are
 catching it, but most home users dont run anti-malware in real-time.

 --
 ME2



  On Fri, Sep 10, 2010 at 7:32 AM, John Aldrich 
 jaldr...@blueridgecarpet.com wrote:

 Just reading on PC World about the new screen saver worm. Hoping Vipre
 Enterprise will protect us. J



 [image: John-Aldrich][image: Perception_2]



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin





 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

Re: [OT] Webcams (USB cameras)

2010-09-10 Thread Steven Peck

I have one of the Microsoft Cameras and just plugged it in my USB slot.  No
bloat

On Thu, Sep 9, 2010 at 9:04 PM, James Hill james.h...@superamart.com.auwrote:

 If you can't easily extract just the driver sometimes you can use one from
 http://catalog.update.microsoft.com/v7/site/


 -Original Message-
 From: Ben Scott [mailto:mailvor...@gmail.com]
 Sent: Friday, 10 September 2010 1:01 PM
 To: NT System Admin Issues
 Subject: Re: [OT] Webcams (USB cameras)

 [aggregate reply to multiple people]

 On Thu, Sep 9, 2010 at 10:39 PM, Andrew S. Baker asbz...@gmail.com
 wrote:
  Like James said, don't install the bloat.  Just the driver and you
  should be good.

  With the one Logitech gizmo we have, the driver and the bloat appeared to
 be tightly integrated.  I didn't try too hard to pick it apart; I'll take
 another look at it.

 On Thu, Sep 9, 2010 at 10:18 PM, James Hill james.h...@superamart.com.au
 wrote:
  But for Video conferencing at work ...

  While this is for work in the sense that I'm doing it and they're
 paying, it isn't really for work in that the owner mainly wants to talk to
 his kids while they're away at college.

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Will Vipre Enterprise protect us?

Ahh.well, I've warned my userbase about downloading/installing anything
without approval. Hopefully between that and updated Vipre defs, we'll be
safe. J

 

John-AldrichPerception_2

 

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Friday, September 10, 2010 11:22 AM
To: NT System Admin Issues
Subject: Re: Will Vipre Enterprise protect us?

 

This is true.  Its an example of something else Vipre is catching, that no
other a/v is.

--
ME2



On Fri, Sep 10, 2010 at 8:18 AM, Richard Stovall rich...@gmail.com wrote:

In the interest of maintaining a whole apples to apples kind of thing, it
doesn't appear that what ME2 referred to is the same nasty you asked about
(assuming you were asking about the Here you have email).

 

The ISC writeup links to a Virustotal page from yesterday that does not show
Vipre detecting the .scr malware on def version 6853.  ME2's link is to a
scan of an exe run on 8/24 with Vipre defs version 6785.

On Fri, Sep 10, 2010 at 11:03 AM, John Aldrich
jaldr...@blueridgecarpet.com wrote:

Great! That's good to know. J Since Vipre Home and Enterprise have the same
engine, I feel confident that we're covered now. J

 

Similar topic, on my home PC I tried to install an IE plugin the other day.
Vipre refused to let me do it, saying it was a Trojan. J I feel better
knowing I've got Vipre installed and I *will* be renewing it when the
license expires in December. J

 

John-AldrichPerception_2

 

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Friday, September 10, 2010 10:43 AM
To: NT System Admin Issues
Subject: Re: Will Vipre Enterprise protect us?

 

oops, here's a link to virus total reflecting its current status:

http://www.virustotal.com/file-scan/report.html?id=337c12c66cb5e898357d86161
7c21cd3f2c5519e78927b1f636eed14a52bff0c-1282678787

--
ME2

On Fri, Sep 10, 2010 at 7:42 AM, Micheal Espinola Jr
michealespin...@gmail.com wrote:

Sunbelt is the only anti-virus vendor that is catching a nasty scamware that
is making its rounds in San Diego right now.  Anti-malware apps are catching
it, but most home users dont run anti-malware in real-time.

--
ME2

 

On Fri, Sep 10, 2010 at 7:32 AM, John Aldrich jaldr...@blueridgecarpet.com
wrote:

Just reading on PC World about the new screen saver worm. Hoping Vipre
Enterprise will protect us. J

 

John-AldrichPerception_2

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~


~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

RE: OT - Creating deployment media with menu choice of OS, etc.

That's a cool tool. I went right out and have recommended it to 3 of my 
clients. Thanks for the link!

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Friday, September 10, 2010 10:36 AM
To: NT System Admin Issues
Subject: RE: OT - Creating deployment media with menu choice of OS, etc.

I'd also be remiss if I didn't mention an add-on for ConfigMgr 2007 (also runs 
without the integration) that allows a full deployment of the OS and also 
required apps.  A new version (3.2) was just released yesterday.

http://www.1e.com/softwareproducts/shopping/index.aspx

From: Mark Smith [mailto:winsysad...@gmail.com]
Sent: Friday, September 10, 2010 10:18 AM
To: NT System Admin Issues
Subject: Re: OT - Creating deployment media with menu choice of OS, etc.

Thank you everyone for all the great responses!
I'll check them out and let you know how it goes.



On Fri, Sep 10, 2010 at 7:26 AM, Rod Trent 
rodtr...@myitforum.commailto:rodtr...@myitforum.com wrote:
Plus, there are a couple good community add-ons to put a web-based interface on 
it.

From: Tony Patton [mailto:apco...@gmail.commailto:apco...@gmail.com]
Sent: Friday, September 10, 2010 5:43 AM

To: NT System Admin Issues
Subject: Re: OT - Creating deployment media with menu choice of OS, etc.

I recommend you take a look at M$ MDT 2010.

Does all you are asking.

http://technet.microsoft.com/en-us/solutionaccelerators/dd407791.aspx
On 9 September 2010 19:40, Mark Smith 
winsysad...@gmail.commailto:winsysad...@gmail.com wrote:
I would like to create bootable media (probably external USB drive) that would 
present a menu to select a flavor of Windows OS to install as well as which 
applications to install, such as MS Office, AntiVirus, etc. Then once selected, 
would perform an unattended install.
Looking for ideas on the easiest way to accomplish this.

Thanks!



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

ARIN or other IP lookup?

2010-09-10 Thread RichardMcClary

Greetings!

A few weeks ago, ARIN had a very nice web site.  I could open my book 
mark, enter the IP address (copy and paste) of a spam or scan source, and 
see where it came from. It would reference me to other similar agencies 
(RIPE, APNIC, etc) which I could then open, paste in the same IP, and 
finish chasing.

They (ARIN) seem to have change things a bit, and I can't figure out how 
to search for IPs anymore.  It almost looks like one needs to take out 
some sort of subscription to search IP addresses now.

Any hints, etc here?   Thanks...
--
Richard D. McClary
Systems Administrator, Information Technology Group 
ASPCA®
1717 S. Philo Rd, Ste 36
Urbana, IL  61802
 
richardmccl...@aspca.org
 
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org
 
The information contained in this e-mail, and any attachments hereto, is 
from The American Society for the Prevention of Cruelty to Animals® (ASPCA
®) and is intended only for use by the addressee(s) named herein and may 
contain legally privileged and/or confidential information. If you are not 
the intended recipient of this e-mail, you are hereby notified that any 
dissemination, distribution, copying or use of the contents of this 
e-mail, and any attachments hereto, is strictly prohibited. If you have 
received this e-mail in error, please immediately notify me by reply email 
and permanently delete the original and any copy of this e-mail and any 
printout thereof.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

Way up in the upper right, put the ip you're interested in into the box
labeled SEARCH Whois.

I also hate their new website.

On Fri, Sep 10, 2010 at 11:54 AM, richardmccl...@aspca.org wrote:


 Greetings!

 A few weeks ago, ARIN had a very nice web site.  I could open my book mark,
 enter the IP address (copy and paste) of a spam or scan source, and see
 where it came from. It would reference me to other similar agencies (RIPE,
 APNIC, etc) which I could then open, paste in the same IP, and finish
 chasing.

 They (ARIN) seem to have change things a bit, and I can't figure out how to
 search for IPs anymore.  It almost looks like one needs to take out some
 sort of subscription to search IP addresses now.

 Any hints, etc here?   Thanks...
 --
 Richard D. McClary
 Systems Administrator, Information Technology Group
 *ASPCA®*
 1717 S. Philo Rd, Ste 36
 Urbana, IL  61802

 richardmccl...@aspca.org

 P: 217-337-9761
 C: 217-417-1182
 F: 217-337-9761
 *www.aspca.org* http://www.aspca.org/


 The information contained in this e-mail, and any attachments hereto, is
 from The American Society for the Prevention of Cruelty to Animals® (ASPCA
 ®) and is intended only for use by the addressee(s) named herein and may
 contain legally privileged and/or confidential information. If you are not
 the intended recipient of this e-mail, you are hereby notified that any
 dissemination, distribution, copying or use of the contents of this e-mail,
 and any attachments hereto, is strictly prohibited. If you have received
 this e-mail in error, please immediately notify me by reply email and
 permanently delete the original and any copy of this e-mail and any printout
 thereof.


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ARIN or other IP lookup?

2010-09-10 Thread Shauna Hensala

https://www.arin.net/resources/index.html  upper right corner to search

To: ntsysadmin@lyris.sunbelt-software.com
Subject: ARIN or other IP lookup?
From: richardmccl...@aspca.org
Date: Fri, 10 Sep 2010 10:54:17 -0500

Greetings!

A few weeks ago, ARIN had a very nice
web site.  I could open my book mark, enter the IP address (copy and
paste) of a spam or scan source, and see where it came from. It would reference
me to other similar agencies (RIPE, APNIC, etc) which I could then open,
paste in the same IP, and finish chasing.

They (ARIN) seem to have change things
a bit, and I can't figure out how to search for IPs anymore.  It almost
looks like one needs to take out some sort of subscription to search IP
addresses now.

Any hints, etc here?   Thanks...

--

Richard D. McClary

Systems Administrator,
Information Technology Group

ASPCA®

1717 S. Philo Rd, Ste
36

Urbana, IL  61802

richardmccl...@aspca.org

P: 217-337-9761

C: 217-417-1182

F: 217-337-9761

www.aspca.org

The information contained
in this e-mail, and any attachments hereto, is from The American Society
for the Prevention of Cruelty to Animals® (ASPCA®)
and is intended only for use by the addressee(s) named herein and may contain
legally privileged and/or confidential information. If you are not the
intended recipient of this e-mail, you are hereby notified that any 
dissemination,
distribution, copying or use of the contents of this e-mail, and any attachments
hereto, is strictly prohibited. If you have received this e-mail in error,
please immediately notify me by reply email and permanently delete the
original and any copy of this e-mail and any printout thereof.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~

~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---

To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin   

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

ex2010 not delivering to yahoo.com addresses

Hi all,

So, we have recently installed exchange 2010 in our shop to get some 
experience with it.  i have some weird issue.  It seems that messages 
going to yahoo.com are sitting in the queue on the edge transport server 
and giving our users delayed message NDRs.  I have used telnet from the 
machine to send a message to yahoo without a problem.

If I track one of these messages using the new nifty tracking in OWA it 
tells me the messages have been handed off:

/Submitted
9/10/2010 10:37 AM
The message was submitted. Transferred
9/10/2010 10:37 AM
The message was successfully handed off to a different e-mail system. 
This is as far as we can track it.

/Any ideas what could could be causing this or what else I should be 
looking at?

This Exchange is a totally different beast from 2003.

Bill

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ARIN or other IP lookup?

I use a free little tool called Whois View from Softnik Technologies - so I 
don't have to deal with the changing websites. :-P

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]
Sent: Friday, September 10, 2010 11:54 AM
To: NT System Admin Issues
Subject: ARIN or other IP lookup?


Greetings!

A few weeks ago, ARIN had a very nice web site.  I could open my book mark, 
enter the IP address (copy and paste) of a spam or scan source, and see where 
it came from. It would reference me to other similar agencies (RIPE, APNIC, 
etc) which I could then open, paste in the same IP, and finish chasing.

They (ARIN) seem to have change things a bit, and I can't figure out how to 
search for IPs anymore.  It almost looks like one needs to take out some sort 
of subscription to search IP addresses now.

Any hints, etc here?   Thanks...
--
Richard D. McClary
Systems Administrator, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL  61802

richardmccl...@aspca.orgmailto:richardmccl...@aspca.org

P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.orghttp://www.aspca.org/


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread RichardMcClary

Thanks!  I guess I'd tried one page too far at the site.  When I seached 
on the blank on that page, I got a response that it could find no 
documents with that string of text.

Anyway, it says that IP address is with APNIC.  They (ARIN) no longer has 
a functional link to APNIC.  They have a hyperlink saying APNIC. 
Clicking this, though, only brings one to another page within ARIN.  It 
tells you that APNIC is officed in Australia.

rantSomeone worked really hard to make their new web site 
hateful!/rant.

Thanks again...
--
richard

Richard Stovall rich...@gmail.com wrote on 09/10/2010 10:56:55 AM:

 Way up in the upper right, put the ip you're interested in into the 
 box labeled SEARCH Whois.
 
 I also hate their new website.

 On Fri, Sep 10, 2010 at 11:54 AM, richardmccl...@aspca.org wrote:
 
 Greetings! 
 
 A few weeks ago, ARIN had a very nice web site.  I could open my 
 book mark, enter the IP address (copy and paste) of a spam or scan 
 source, and see where it came from. It would reference me to other 
 similar agencies (RIPE, APNIC, etc) which I could then open, paste 
 in the same IP, and finish chasing. 
 
 They (ARIN) seem to have change things a bit, and I can't figure out
 how to search for IPs anymore.  It almost looks like one needs to 
 take out some sort of subscription to search IP addresses now. 
 
 Any hints, etc here?   Thanks...
 -- 
 Richard D. McClary 
 Systems Administrator, Information Technology Group 
 ASPCA® 
 1717 S. Philo Rd, Ste 36 
 Urbana, IL  61802 
   
 richardmccl...@aspca.org 
   
 P: 217-337-9761 
 C: 217-417-1182 
 F: 217-337-9761 
 www.aspca.org 
   
 The information contained in this e-mail, and any attachments 
 hereto, is from The American Society for the Prevention of Cruelty to 
Animals®
 (ASPCA®) and is intended only for use by the addressee(s) named 
 herein and may contain legally privileged and/or confidential 
 information. If you are not the intended recipient of this e-mail, 
 you are hereby notified that any dissemination, distribution, 
 copying or use of the contents of this e-mail, and any attachments 
 hereto, is strictly prohibited. If you have received this e-mail in 
 error, please immediately notify me by reply email and permanently 
 delete the original and any copy of this e-mail and any printout 
thereof. 
   
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: http://lyris.sunbelt-software.
 com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: http://lyris.sunbelt-software.
 com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread James Winzenz

Sam Spade!

From: richardmccl...@aspca.org 
Sent: Friday, September 10, 2010 9:04 AM
To: NT System Admin Issues 
Subject: Re: ARIN or other IP lookup?

Thanks!  I guess I'd tried one page too far at the site.  When I seached on 
the blank on that page, I got a response that it could find no documents with 
that string of text. 

Anyway, it says that IP address is with APNIC.  They (ARIN) no longer has a 
functional link to APNIC.  They have a hyperlink saying APNIC.  Clicking 
this, though, only brings one to another page within ARIN.  It tells you that 
APNIC is officed in Australia. 

rantSomeone worked really hard to make their new web site hateful!/rant. 

Thanks again... 
-- 
richard 

Richard Stovall rich...@gmail.com wrote on 09/10/2010 10:56:55 AM:

 Way up in the upper right, put the ip you're interested in into the 
 box labeled SEARCH Whois. 

 I also hate their new website.

 On Fri, Sep 10, 2010 at 11:54 AM, richardmccl...@aspca.org wrote: 

 Greetings! 

 A few weeks ago, ARIN had a very nice web site.  I could open my 
 book mark, enter the IP address (copy and paste) of a spam or scan 
 source, and see where it came from. It would reference me to other 
 similar agencies (RIPE, APNIC, etc) which I could then open, paste 
 in the same IP, and finish chasing. 

 They (ARIN) seem to have change things a bit, and I can't figure out
 how to search for IPs anymore.  It almost looks like one needs to 
 take out some sort of subscription to search IP addresses now. 

 Any hints, etc here?   Thanks...
 -- 
 Richard D. McClary 
 Systems Administrator, Information Technology Group 
 ASPCA® 
 1717 S. Philo Rd, Ste 36 
 Urbana, IL  61802 

 richardmccl...@aspca.org 

 P: 217-337-9761 
 C: 217-417-1182 
 F: 217-337-9761 
 www.aspca.org 

 The information contained in this e-mail, and any attachments 
 hereto, is from The American Society for the Prevention of Cruelty to Animals®
 (ASPCA®) and is intended only for use by the addressee(s) named 
 herein and may contain legally privileged and/or confidential 
 information. If you are not the intended recipient of this e-mail, 
 you are hereby notified that any dissemination, distribution, 
 copying or use of the contents of this e-mail, and any attachments 
 hereto, is strictly prohibited. If you have received this e-mail in 
 error, please immediately notify me by reply email and permanently 
 delete the original and any copy of this e-mail and any printout thereof. 

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: http://lyris.sunbelt-software.
 com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin 

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: http://lyris.sunbelt-software.
 com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

Removing the links to the other registries is what I hate most about the new
site.

The good news is that APNIC's Whois lookup seems to work for most, if not
all, of the other registries.  Maybe we should just default to that one
instead of ARIN.

http://wq.apnic.net/apnic-bin/whois.pl

http://wq.apnic.net/apnic-bin/whois.pl

On Fri, Sep 10, 2010 at 12:04 PM, richardmccl...@aspca.org wrote:


 Thanks!  I guess I'd tried one page too far at the site.  When I seached
 on the blank on that page, I got a response that it could find no documents
 with that string of text.

 Anyway, it says that IP address is with APNIC.  They (ARIN) no longer has a
 functional link to APNIC.  They have a hyperlink saying APNIC.  Clicking
 this, though, only brings one to another page within ARIN.  It tells you
 that APNIC is officed in Australia.

 rantSomeone worked really hard to make their new web site hateful!/rant.

 Thanks again...
 --
 richard

 Richard Stovall rich...@gmail.com wrote on 09/10/2010 10:56:55 AM:

  Way up in the upper right, put the ip you're interested in into the
  box labeled SEARCH Whois.
 
  I also hate their new website.

  On Fri, Sep 10, 2010 at 11:54 AM, richardmccl...@aspca.org wrote:
 
  Greetings!
 
  A few weeks ago, ARIN had a very nice web site.  I could open my
  book mark, enter the IP address (copy and paste) of a spam or scan
  source, and see where it came from. It would reference me to other
  similar agencies (RIPE, APNIC, etc) which I could then open, paste
  in the same IP, and finish chasing.
 
  They (ARIN) seem to have change things a bit, and I can't figure out
  how to search for IPs anymore.  It almost looks like one needs to
  take out some sort of subscription to search IP addresses now.
 
  Any hints, etc here?   Thanks...
  --
  Richard D. McClary
  Systems Administrator, Information Technology Group
  ASPCA®
  1717 S. Philo Rd, Ste 36
  Urbana, IL  61802
 
  richardmccl...@aspca.org
 
  P: 217-337-9761
  C: 217-417-1182
  F: 217-337-9761
  www.aspca.org
 
  The information contained in this e-mail, and any attachments
  hereto, is from The American Society for the Prevention of Cruelty to
 Animals®
  (ASPCA®) and is intended only for use by the addressee(s) named
  herein and may contain legally privileged and/or confidential
  information. If you are not the intended recipient of this e-mail,
  you are hereby notified that any dissemination, distribution,
  copying or use of the contents of this e-mail, and any attachments
  hereto, is strictly prohibited. If you have received this e-mail in
  error, please immediately notify me by reply email and permanently
  delete the original and any copy of this e-mail and any printout thereof.

 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here: http://lyris.sunbelt-software.
  com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here: http://lyris.sunbelt-software.
  com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread Angus Scott-Fleming

On 10 Sep 2010 at 10:54, richardmccl...@aspca.org  wrote:

 Greetings! 
 
 A few weeks ago, ARIN had a very nice web site. I could open my book 
 mark, enter the IP address (copy and paste) of a spam or scan source, 
 and see where it came from. It would reference me to other similar 
 agencies (RIPE, APNIC, etc) which I could then open, paste in the same 
 IP, and finish chasing. 
 
 They (ARIN) seem to have change things a bit, and I can't figure out how 
 to search for IPs anymore. It almost looks like one needs to take out 
 some sort of subscription to search IP addresses now. 

Here's a bookmarklet which might help.  Highlight an IP address on a page and 
click the bookmarklet in your address bar:


= Included Stuff Follows =

javascript:if(frames.length0){F='%20(Open%20frame%20in%20new%20window%20first.)'}else{F=''}if(window.getSelection){Q=window.getSelection();}else%20if(document.getSelection){Q=document.getSelection();}else%20if(document.selection){Q=document.selection.createRange().text;}if(!Q%20||%20Q%20==%20''){void(Q=prompt('No%20text%20has%20been%20selected.'+F+'%20Search%20for:',''))};if(Q%20%20Q%20!=%20''){location.href='http://www.ip-adress.com/whois/'+encodeURIComponent(Q);}

= Included Stuff Ends =

Bookmarklet is all one line, you may need to copy and paste into a text editor 
to unwrap ;-)

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Will Vipre Enterprise protect us?

2010-09-10 Thread Roger Wright

We had at least one come in through the Barracuda yesterday.  VIPRE blocked
the execution of the link.  Yea!


Roger Wright
___

When it's GOOD there ain't nothin' like it, and when it's BAD there ain't
nothin' like it!




On Fri, Sep 10, 2010 at 10:32 AM, John Aldrich jaldr...@blueridgecarpet.com
 wrote:

  Just reading on PC World about the new screen saver worm. Hoping Vipre
 Enterprise will protect us. J



 [image: John-Aldrich][image: Perception_2]



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

RE: ex2010 not delivering to yahoo.com addresses

You need to look at the message tracking on the edge server itself. OWA/ECP 
can't talk outside of the domain boundary (it's a security boundary, and 
intentional).

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Bill Humphries [mailto:nt...@hedgedigger.com]
Sent: Friday, September 10, 2010 11:59 AM
To: NT System Admin Issues
Subject: ex2010 not delivering to yahoo.com addresses

Hi all,

So, we have recently installed exchange 2010 in our shop to get some experience 
with it.  i have some weird issue.  It seems that messages going to yahoo.com 
are sitting in the queue on the edge transport server and giving our users 
delayed message NDRs.  I have used telnet from the machine to send a message to 
yahoo without a problem.

If I track one of these messages using the new nifty tracking in OWA it tells 
me the messages have been handed off:

Submitted
9/10/2010 10:37 AM
The message was submitted. Transferred
9/10/2010 10:37 AM
The message was successfully handed off to a different e-mail system. This is 
as far as we can track it.

Any ideas what could could be causing this or what else I should be looking at?

This Exchange is a totally different beast from 2003.

Bill

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Dumb DL360 Question

I'm thinking this isnt a problem and they are probbaly designed for this but 
just wanted to be sure. It is ok to stack these 1U servers one on top of the 
other right? I just ask because the biggest vent is on the top of the thing. 
I've been leaving 1U in between but I'm running out of space.

James
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dumb DL360 Question

2010-09-10 Thread Steve Ens

Yes, they're designed to stack...

On Fri, Sep 10, 2010 at 11:52 AM, James Kerr cluster...@gmail.com wrote:

  I'm thinking this isnt a problem and they are probbaly designed for this
 but just wanted to be sure. It is ok to stack these 1U servers one on top of
 the other right? I just ask because the biggest vent is on the top of the
 thing. I've been leaving 1U in between but I'm running out of space.

 James

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Dumb DL360 Question

2010-09-10 Thread Mayo, Bill

We had these things packed in, one on top of the other, with no issues
for many years.  We have more recently moved to a blade center, so I
don't know if the current generation is different somehow.

From: James Kerr [mailto:cluster...@gmail.com] 
Sent: Friday, September 10, 2010 12:52 PM
To: NT System Admin Issues
Subject: Dumb DL360 Question

I'm thinking this isnt a problem and they are probbaly designed for this
but just wanted to be sure. It is ok to stack these 1U servers one on
top of the other right? I just ask because the biggest vent is on the
top of the thing. I've been leaving 1U in between but I'm running out of
space.

James

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dumb DL360 Question

rack em and stack em it is.
  - Original Message - 
  From: Mayo, Bill 
  To: NT System Admin Issues 
  Sent: Friday, September 10, 2010 12:53 PM
  Subject: RE: Dumb DL360 Question

  We had these things packed in, one on top of the other, with no issues for 
many years.  We have more recently moved to a blade center, so I don't know if 
the current generation is different somehow.

--
  From: James Kerr [mailto:cluster...@gmail.com] 
  Sent: Friday, September 10, 2010 12:52 PM
  To: NT System Admin Issues
  Subject: Dumb DL360 Question

  I'm thinking this isnt a problem and they are probbaly designed for this but 
just wanted to be sure. It is ok to stack these 1U servers one on top of the 
other right? I just ask because the biggest vent is on the top of the thing. 
I've been leaving 1U in between but I'm running out of space.

  James
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dumb DL360 Question

Weird.  A vent on the top of it?  I've never seen that on one and i've 
seen g3,g4,g5, g6 servers.


James Kerr wrote:
 rack em and stack em it is.

 - Original Message -
 *From:* Mayo, Bill mailto:bem...@pittcountync.gov
 *To:* NT System Admin Issues
 mailto:ntsysadmin@lyris.sunbelt-software.com
 *Sent:* Friday, September 10, 2010 12:53 PM
 *Subject:* RE: Dumb DL360 Question

 We had these things packed in, one on top of the other, with no
 issues for many years.  We have more recently moved to a blade
 center, so I don't know if the current generation is different
 somehow.

 
 *From:* James Kerr [mailto:cluster...@gmail.com]
 *Sent:* Friday, September 10, 2010 12:52 PM
 *To:* NT System Admin Issues
 *Subject:* Dumb DL360 Question

 I'm thinking this isnt a problem and they are probbaly designed
 for this but just wanted to be sure. It is ok to stack these 1U
 servers one on top of the other right? I just ask because the
 biggest vent is on the top of the thing. I've been leaving 1U in
 between but I'm running out of space.
  
 James

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com 
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ex2010 not delivering to yahoo.com addresses

Thanks, Michael. And it looks like message tracking using the gui is a 
known broken thing in 2010, huh?



Michael B. Smith wrote:


You need to look at the message tracking on the edge server itself. 
OWA/ECP can’t talk outside of the domain boundary (it’s a security 
boundary, and intentional).


Regards,

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

*From:* Bill Humphries [mailto:nt...@hedgedigger.com]
*Sent:* Friday, September 10, 2010 11:59 AM
*To:* NT System Admin Issues
*Subject:* ex2010 not delivering to yahoo.com addresses

Hi all,

So, we have recently installed exchange 2010 in our shop to get some 
experience with it. i have some weird issue. It seems that messages 
going to yahoo.com are sitting in the queue on the edge transport 
server and giving our users delayed message NDRs. I have used telnet 
from the machine to send a message to yahoo without a problem.


If I track one of these messages using the new nifty tracking in OWA 
it tells me the messages have been handed off:


/Submitted
9/10/2010 10:37 AM
The message was submitted. Transferred
9/10/2010 10:37 AM
The message was successfully handed off to a different e-mail system. 
This is as far as we can track it.


/Any ideas what could could be causing this or what else I should be 
looking at?


This Exchange is a totally different beast from 2003.

Bill

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com 
mailto:listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com 
mailto:listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ex2010 not delivering to yahoo.com addresses

I'll grant you that the user experience may be surprising, but message tracking 
works as it is intended to do.

GUI-based message tracking works within the Exchange Active Directory forest. 
Edge Transport servers are not part of the same Active Directory forest. 
Permissions and roles are not shared between the Exchange organization and Edge 
transport servers, since permissions are based on the Active Directory forest 
where the Exchange organization is installed.

The message was received by a hub transport server and handed off to an edge 
server. At that point, it was delivered to a different email system.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Friday, September 10, 2010 1:31 PM
To: NT System Admin Issues
Subject: Re: ex2010 not delivering to yahoo.com addresses

Thanks, Michael. And it looks like message tracking using the gui is a known 
broken thing in 2010, huh?


Michael B. Smith wrote:

 You need to look at the message tracking on the edge server itself. 
 OWA/ECP can't talk outside of the domain boundary (it's a security 
 boundary, and intentional).

 Regards,

 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com

 *From:* Bill Humphries [mailto:nt...@hedgedigger.com]
 *Sent:* Friday, September 10, 2010 11:59 AM
 *To:* NT System Admin Issues
 *Subject:* ex2010 not delivering to yahoo.com addresses

 Hi all,

 So, we have recently installed exchange 2010 in our shop to get some 
 experience with it. i have some weird issue. It seems that messages 
 going to yahoo.com are sitting in the queue on the edge transport 
 server and giving our users delayed message NDRs. I have used telnet 
 from the machine to send a message to yahoo without a problem.

 If I track one of these messages using the new nifty tracking in OWA 
 it tells me the messages have been handed off:

 /Submitted
 9/10/2010 10:37 AM
 The message was submitted. Transferred
 9/10/2010 10:37 AM
 The message was successfully handed off to a different e-mail system. 
 This is as far as we can track it.

 /Any ideas what could could be causing this or what else I should be 
 looking at?

 This Exchange is a totally different beast from 2003.

 Bill

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com 
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com 
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dumb DL360 Question

My current models are G5. Here is a photo of one. Those are the vents I'm 
referring to.

http://img2.zol.com.cn/product/23_450x337/793/ceGYO5z5TIe5s.jpg
  - Original Message - 
  From: Bill Humphries 
  To: NT System Admin Issues 
  Sent: Friday, September 10, 2010 1:20 PM
  Subject: Re: Dumb DL360 Question

  Weird.  A vent on the top of it?  I've never seen that on one and i've seen 
g3,g4,g5, g6 servers.

  James Kerr wrote: 
rack em and stack em it is.
  - Original Message - 
  From: Mayo, Bill 
  To: NT System Admin Issues 
  Sent: Friday, September 10, 2010 12:53 PM
  Subject: RE: Dumb DL360 Question

  We had these things packed in, one on top of the other, with no issues 
for many years.  We have more recently moved to a blade center, so I don't know 
if the current generation is different somehow.

--
  From: James Kerr [mailto:cluster...@gmail.com] 
  Sent: Friday, September 10, 2010 12:52 PM
  To: NT System Admin Issues
  Subject: Dumb DL360 Question

  I'm thinking this isnt a problem and they are probbaly designed for this 
but just wanted to be sure. It is ok to stack these 1U servers one on top of 
the other right? I just ask because the biggest vent is on the top of the 
thing. I've been leaving 1U in between but I'm running out of space.

  James
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ex2010 not delivering to yahoo.com addresses

So, does message tracking gui work on edge server in SP1?  I understand 
that it is outside of the forest and can't make use of AD, but it seems 
like tracking messages from an edge transport would be important for 
tracking down problems with email flow or delivery...and connecting to 
AD shouldn't be necessary to provide useful information.

Now to figure out how to use that Get-MessageTrackingLog commandlet.

Bill


Michael B. Smith wrote:
 I'll grant you that the user experience may be surprising, but message 
 tracking works as it is intended to do.

 GUI-based message tracking works within the Exchange Active Directory forest. 
 Edge Transport servers are not part of the same Active Directory forest. 
 Permissions and roles are not shared between the Exchange organization and 
 Edge transport servers, since permissions are based on the Active Directory 
 forest where the Exchange organization is installed.

 The message was received by a hub transport server and handed off to an edge 
 server. At that point, it was delivered to a different email system.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Bill Humphries [mailto:nt...@hedgedigger.com] 
 Sent: Friday, September 10, 2010 1:31 PM
 To: NT System Admin Issues
 Subject: Re: ex2010 not delivering to yahoo.com addresses

 Thanks, Michael. And it looks like message tracking using the gui is a known 
 broken thing in 2010, huh?


 Michael B. Smith wrote:
   
 You need to look at the message tracking on the edge server itself. 
 OWA/ECP can't talk outside of the domain boundary (it's a security 
 boundary, and intentional).

 Regards,

 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com

 *From:* Bill Humphries [mailto:nt...@hedgedigger.com]
 *Sent:* Friday, September 10, 2010 11:59 AM
 *To:* NT System Admin Issues
 *Subject:* ex2010 not delivering to yahoo.com addresses

 Hi all,

 So, we have recently installed exchange 2010 in our shop to get some 
 experience with it. i have some weird issue. It seems that messages 
 going to yahoo.com are sitting in the queue on the edge transport 
 server and giving our users delayed message NDRs. I have used telnet 
 from the machine to send a message to yahoo without a problem.

 If I track one of these messages using the new nifty tracking in OWA 
 it tells me the messages have been handed off:

 /Submitted
 9/10/2010 10:37 AM
 The message was submitted. Transferred
 9/10/2010 10:37 AM
 The message was successfully handed off to a different e-mail system. 
 This is as far as we can track it.

 /Any ideas what could could be causing this or what else I should be 
 looking at?

 This Exchange is a totally different beast from 2003.

 Bill

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com 
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com 
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


   


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ex2010 not delivering to yahoo.com addresses

Yes, from inside the Exchange Management Console on the Edge Server, in the 
Toolbox node, should be a Message-Tracking application that doesn't fire up ECP 
but runs as an MMC.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Bill Humphries [mailto:nt...@hedgedigger.com]
Sent: Friday, September 10, 2010 1:54 PM
To: NT System Admin Issues
Subject: Re: ex2010 not delivering to yahoo.com addresses

So, does message tracking gui work on edge server in SP1?  I understand that it 
is outside of the forest and can't make use of AD, but it seems like tracking 
messages from an edge transport would be important for tracking down problems 
with email flow or delivery...and connecting to AD shouldn't be necessary to 
provide useful information.

Now to figure out how to use that Get-MessageTrackingLog commandlet.

Bill


Michael B. Smith wrote:

I'll grant you that the user experience may be surprising, but message tracking 
works as it is intended to do.



GUI-based message tracking works within the Exchange Active Directory forest. 
Edge Transport servers are not part of the same Active Directory forest. 
Permissions and roles are not shared between the Exchange organization and Edge 
transport servers, since permissions are based on the Active Directory forest 
where the Exchange organization is installed.



The message was received by a hub transport server and handed off to an edge 
server. At that point, it was delivered to a different email system.



Regards,



Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com





-Original Message-

From: Bill Humphries [mailto:nt...@hedgedigger.com]

Sent: Friday, September 10, 2010 1:31 PM

To: NT System Admin Issues

Subject: Re: ex2010 not delivering to yahoo.com addresses



Thanks, Michael. And it looks like message tracking using the gui is a known 
broken thing in 2010, huh?





Michael B. Smith wrote:



You need to look at the message tracking on the edge server itself.

OWA/ECP can't talk outside of the domain boundary (it's a security

boundary, and intentional).



Regards,



Michael B. Smith



Consultant and Exchange MVP



http://TheEssentialExchange.com



*From:* Bill Humphries [mailto:nt...@hedgedigger.com]

*Sent:* Friday, September 10, 2010 11:59 AM

*To:* NT System Admin Issues

*Subject:* ex2010 not delivering to yahoo.com addresses



Hi all,



So, we have recently installed exchange 2010 in our shop to get some

experience with it. i have some weird issue. It seems that messages

going to yahoo.com are sitting in the queue on the edge transport

server and giving our users delayed message NDRs. I have used telnet

from the machine to send a message to yahoo without a problem.



If I track one of these messages using the new nifty tracking in OWA

it tells me the messages have been handed off:



/Submitted

9/10/2010 10:37 AM

The message was submitted. Transferred

9/10/2010 10:37 AM

The message was successfully handed off to a different e-mail system.

This is as far as we can track it.



/Any ideas what could could be causing this or what else I should be

looking at?



This Exchange is a totally different beast from 2003.



Bill



~ Finally, powerful endpoint security that ISN'T a resource hog! ~

~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
 ~



---

To manage subscriptions click here:

http://lyris.sunbelt-software.com/read/my_forums/

or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

mailto:listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~

~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
 ~



---

To manage subscriptions click here:

http://lyris.sunbelt-software.com/read/my_forums/

or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

mailto:listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin









~ Finally, powerful endpoint security that ISN'T a resource hog! ~

~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
  ~



---

To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~

~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
  ~



---

To manage subscriptions click here:

RE: Dumb DL360 Question

2010-09-10 Thread Steven M. Caesare

The vents in the 360's we have are on a sloped section of the back edge
of the case, which means they get air circulation even when stacked with
no space in between.

 

-sc

 

From: James Kerr [mailto:cluster...@gmail.com] 
Sent: Friday, September 10, 2010 12:52 PM
To: NT System Admin Issues
Subject: Dumb DL360 Question

 

I'm thinking this isnt a problem and they are probbaly designed for this
but just wanted to be sure. It is ok to stack these 1U servers one on
top of the other right? I just ask because the biggest vent is on the
top of the thing. I've been leaving 1U in between but I'm running out of
space.

 

James

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Dumb DL360 Question

2010-09-10 Thread Greg Olson

We run a few racks of 42 dl360 G3\G4's right on top of each other for the past 
four years with no issues.
-Greg

From: Steven M. Caesare [mailto:scaes...@caesare.com]
Sent: Friday, September 10, 2010 11:05 AM
To: NT System Admin Issues
Subject: RE: Dumb DL360 Question

The vents in the 360's we have are on a sloped section of the back edge of the 
case, which means they get air circulation even when stacked with no space in 
between.

-sc

From: James Kerr [mailto:cluster...@gmail.com]
Sent: Friday, September 10, 2010 12:52 PM
To: NT System Admin Issues
Subject: Dumb DL360 Question

I'm thinking this isnt a problem and they are probbaly designed for this but 
just wanted to be sure. It is ok to stack these 1U servers one on top of the 
other right? I just ask because the biggest vent is on the top of the thing. 
I've been leaving 1U in between but I'm running out of space.

James

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: W2k3 DHCP redundancy / high availability

2010-09-10 Thread Kurt Buff

netsh should do all he wants.

On Thu, Sep 9, 2010 at 15:38, Brian Desmond br...@briandesmond.com wrote:
 Can you just script setting up the 80/20 rule on the scopes? I think there
 is a dhcpcmd.exe …



 Thanks,

 Brian Desmond

 br...@briandesmond.com



 c - 312.731.3132





 From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com]
 Sent: Thursday, September 09, 2010 2:55 PM
 To: NT System Admin Issues
 Subject: W2k3 DHCP redundancy / high availability



 Ok, here goes…



 Present environment - pure Windows 2003 AD, with two DCs. One is virtual
 (vmware esx 3.5), 2003 Enterprise Edition. The other is physical, 2003
 Standard Edition (not sure why – I didn’t set it up). Virtual DC is running
 DHCP for our entire organization, and would be a pain to go through and
 setup split scopes (many sites, multiple vlans per site, and thus, multiple
 DHCP scopes for each site.) A year ago, we were using Cisco devices at each
 remote site to handle DHCP for each subnet. We performed a major network
 overhaul and had to centralize, so here we are.



 I’ve now been tasked with building redundancy for our DHCP services. Moving
 to Server 2008 is not an option right now. We MAY be able to upgrade the
 2003 Standard server to 2003 Enterprise, but that isn’t a given just yet.



 Issues…



 Can’t cluster, because of the Std Edition OS, (but even then, how would that
 impact AD  DNS?)

 Can’t backup from Primary and restore to Secondary, again, because of
 different OS (M$ says, “not supported” to backup from Enterprise and try to
 restore to Standard)

 As mentioned, split scopes would be a major admin pain (it wouldn’t be so
 bad if we had 2008, since there is a wizard in 2008, but I digress)



 So, the way I see it, I have a couple of options…



 Setup “secondary” as a “hot spare” but disable the DHCP service unless and
 until the primary becomes available. Use netsh dhcp server export
 c:\dhcpdatabase.txt all on a daily basis to ensure a valid “backup” of the
 primary, and copy that file over to the secondary as part of one scheduled
 task.



 -or-



 Setup secondary, authorize it, configure it, turn it on, (hear me out here)
 and setup IP Address Conflict Resolution at the server level on both
 servers, and let them “work it out” on their own. I realize that I wouldn’t
 have any lease synchronization, and that there is a slight risk of duplicate
 IP, but I can’t imagine there would be much. My WAN links are solid. Also,
 any scope or option changes made on the primary would have to be duplicated
 on the secondary…administrative overhead yes, but still less than dealing
 with split scope, IMO. Even then, couldn’t I just export from the primary
 after I’ve made changes and then import to the secondary? I know lease
 information is contained in the exported file…trying to decide whether or
 not that would be good or bad… if it wouldn’t be a problem, why not take it
 a step further and schedule an export/import from the primary to the
 secondary?



 What am I missing?



 Jonathan L. Raper, A+, MCSA, MCSE
 Technology Coordinator
 Eagle Physicians  Associates, PA
 jra...@eaglemds.com
 www.eaglemds.com





 

 Any medical information contained in this electronic message is CONFIDENTIAL
 and privileged. It is unlawful for unauthorized persons to view, copy,
 disclose, or disseminate CONFIDENTIAL information. This electronic message
 may contain information that is confidential and/or legally privileged. It
 is intended only for the use of the individual(s) and/or entity named as
 recipients in the message. If you are not an intended recipient of this
 message, please notify the sender immediately and delete this material from
 your computer. Do not deliver, distribute or copy this message, and do not
 disclose its contents or take any action in reliance on the information that
 it contains.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

New ISAT Discussion Group - Join me.

2010-09-10 Thread Stu Sjouwerman


I have started a new discussion group on LinkedIn. The topic is Internet 
Security Awareness Training (ISAT). Join me here:
http://www.linkedin.com/groupRegistration?gid=3394058

Warm regards,

Stu Sjouwerman

..
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread Ben Scott

On Fri, Sep 10, 2010 at 11:54 AM,  richardmccl...@aspca.org wrote:
 A few weeks ago, ARIN had a very nice web site.  I could open my book mark,
 enter the IP address (copy and paste) of a spam or scan source, and see
 where it came from.

  Being a command-line junkie, I use the WHOIS.EXE utility from
Sysinternals, which works much like the whois command from *nix.

http://technet.microsoft.com/en-us/sysinternals/bb897435.aspx

  For example:

BSCOTTwhois  12.15.29.130

Whois v1.01 - Domain information lookup utility
Sysinternals - www.sysinternals.com
Copyright (C) 2005 Mark Russinovich

Connecting to ORG.whois-servers.net...

Domain ID:D1494537-LROR
Domain Name:ASPCA.ORG
Created On:06-Jan-1996 05:00:00 UTC
Last Updated On:06-Jan-2010 01:23:40 UTC
Expiration Date:05-Jan-2011 05:00:00 UTC
Sponsoring Registrar:TierraNet Inc. dba DomainDiscover (R86-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:TNTN-290102
Registrant Name:Ayumi Stubbs
Registrant Organization:The American Society for the Prevention of Cruelty to A
Registrant Street1:424 E. 92ndSt
[...cut...]

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dumb DL360 Question

Yeah some of our other DLs have the sloped area, my 360s do not. However I just 
noticed on other servers we do have stacked that there is a gap of about 1/4 
so I guess that's enough to get the air out combined with the vents in the back.
  - Original Message - 
  From: Steven M. Caesare 
  To: NT System Admin Issues 
  Sent: Friday, September 10, 2010 2:04 PM
  Subject: RE: Dumb DL360 Question

  The vents in the 360's we have are on a sloped section of the back edge of 
the case, which means they get air circulation even when stacked with no space 
in between.

  -sc

  From: James Kerr [mailto:cluster...@gmail.com] 
  Sent: Friday, September 10, 2010 12:52 PM
  To: NT System Admin Issues
  Subject: Dumb DL360 Question

  I'm thinking this isnt a problem and they are probbaly designed for this but 
just wanted to be sure. It is ok to stack these 1U servers one on top of the 
other right? I just ask because the biggest vent is on the top of the thing. 
I've been leaving 1U in between but I'm running out of space.

  James

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dumb DL360 Question

Yeah some of our other DLs have the sloped area, my 360s do not. However I just 
noticed on other servers we do have stacked that there is a gap of about 1/4 
so I guess that's enough to get the air out combined with the vents in the back.
  - Original Message - 
  From: Steven M. Caesare 
  To: NT System Admin Issues 
  Sent: Friday, September 10, 2010 2:04 PM
  Subject: RE: Dumb DL360 Question

  The vents in the 360's we have are on a sloped section of the back edge of 
the case, which means they get air circulation even when stacked with no space 
in between.

  -sc

  From: James Kerr [mailto:cluster...@gmail.com] 
  Sent: Friday, September 10, 2010 12:52 PM
  To: NT System Admin Issues
  Subject: Dumb DL360 Question

  I'm thinking this isnt a problem and they are probbaly designed for this but 
just wanted to be sure. It is ok to stack these 1U servers one on top of the 
other right? I just ask because the biggest vent is on the top of the thing. 
I've been leaving 1U in between but I'm running out of space.

  James

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

  ---
  To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: W2k3 DHCP redundancy / high availability

2010-09-10 Thread Sean Martin

+1

Although I've never created scopes from scratch using netsh, I use it to
script changes to our scopes. Works well.

On Fri, Sep 10, 2010 at 10:14 AM, Kurt Buff kurt.b...@gmail.com wrote:

 netsh should do all he wants.

 On Thu, Sep 9, 2010 at 15:38, Brian Desmond br...@briandesmond.com
 wrote:
  Can you just script setting up the 80/20 rule on the scopes? I think
 there
  is a dhcpcmd.exe …
 
 
 
  Thanks,
 
  Brian Desmond
 
  br...@briandesmond.com
 
 
 
  c - 312.731.3132
 
 
 
 
 
  From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com]
  Sent: Thursday, September 09, 2010 2:55 PM
   To: NT System Admin Issues
  Subject: W2k3 DHCP redundancy / high availability
 
 
 
  Ok, here goes…
 
 
 
  Present environment - pure Windows 2003 AD, with two DCs. One is virtual
  (vmware esx 3.5), 2003 Enterprise Edition. The other is physical, 2003
  Standard Edition (not sure why – I didn’t set it up). Virtual DC is
 running
  DHCP for our entire organization, and would be a pain to go through and
  setup split scopes (many sites, multiple vlans per site, and thus,
 multiple
  DHCP scopes for each site.) A year ago, we were using Cisco devices at
 each
  remote site to handle DHCP for each subnet. We performed a major network
  overhaul and had to centralize, so here we are.
 
 
 
  I’ve now been tasked with building redundancy for our DHCP services.
 Moving
  to Server 2008 is not an option right now. We MAY be able to upgrade the
  2003 Standard server to 2003 Enterprise, but that isn’t a given just yet.
 
 
 
  Issues…
 
 
 
  Can’t cluster, because of the Std Edition OS, (but even then, how would
 that
  impact AD  DNS?)
 
  Can’t backup from Primary and restore to Secondary, again, because of
  different OS (M$ says, “not supported” to backup from Enterprise and try
 to
  restore to Standard)
 
  As mentioned, split scopes would be a major admin pain (it wouldn’t be so
  bad if we had 2008, since there is a wizard in 2008, but I digress)
 
 
 
  So, the way I see it, I have a couple of options…
 
 
 
  Setup “secondary” as a “hot spare” but disable the DHCP service unless
 and
  until the primary becomes available. Use netsh dhcp server export
  c:\dhcpdatabase.txt all on a daily basis to ensure a valid “backup” of
 the
  primary, and copy that file over to the secondary as part of one
 scheduled
  task.
 
 
 
  -or-
 
 
 
  Setup secondary, authorize it, configure it, turn it on, (hear me out
 here)
  and setup IP Address Conflict Resolution at the server level on both
  servers, and let them “work it out” on their own. I realize that I
 wouldn’t
  have any lease synchronization, and that there is a slight risk of
 duplicate
  IP, but I can’t imagine there would be much. My WAN links are solid.
 Also,
  any scope or option changes made on the primary would have to be
 duplicated
  on the secondary…administrative overhead yes, but still less than dealing
  with split scope, IMO. Even then, couldn’t I just export from the primary
  after I’ve made changes and then import to the secondary? I know lease
  information is contained in the exported file…trying to decide whether or
  not that would be good or bad… if it wouldn’t be a problem, why not take
 it
  a step further and schedule an export/import from the primary to the
  secondary?
 
 
 
  What am I missing?
 
 
 
  Jonathan L. Raper, A+, MCSA, MCSE
  Technology Coordinator
  Eagle Physicians  Associates, PA
  jra...@eaglemds.com
  www.eaglemds.com
 
 
 
 
 
  
 
  Any medical information contained in this electronic message is
 CONFIDENTIAL
  and privileged. It is unlawful for unauthorized persons to view, copy,
  disclose, or disseminate CONFIDENTIAL information. This electronic
 message
  may contain information that is confidential and/or legally privileged.
 It
  is intended only for the use of the individual(s) and/or entity named as
  recipients in the message. If you are not an intended recipient of this
  message, please notify the sender immediately and delete this material
 from
  your computer. Do not deliver, distribute or copy this message, and do
 not
  disclose its contents or take any action in reliance on the information
 that
  it contains.
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~

Re: ex2010 not delivering to yahoo.com addresses

Michael,

Do you know if there is a way to get useful tracking information using 
the commandlet since i'm not on SP1 yet?  I can run this: [PS] 
C:\Windows\system32Get-MessageTrackingLog -Start 09/10/2010 9:00AM 
-End 09/10/2010 5:00PM -Sender bhumphries@
chasinggremlins.com

This gives me this list of events::

EventId  Source   Sender
RecipientsMessageSubject
---  --   --
----
RECEIVE  SMTP bhumphr...@chasinggremlins.com
{humphries_b...@yahoo.com}test message
RECEIVE  SMTP bhumphr...@chasinggremlins.com
{b...@hedgedigger.com}test 10:42
SEND SMTP bhumphr...@chasinggremlins.com
{b...@hedgedigger.com}test 10:42
RECEIVE  SMTP bhumphr...@chasinggremlins.com
{bhumphr...@chasinggremlins.com}  Summary of junk emails blocked...
SEND SMTP bhumphr...@chasinggremlins.com
{bhumphr...@chasinggremlins.com}  Summary of junk emails blocked...

But I don't readily see any commands that would actually tell me why it 
isn't successfully getting a SEND for the yahoo email address.  Is there 
some other way to monitor this?  maybe I'm missing something available 
in the queue viewer?

Thanks for any help.

Michael B. Smith wrote:

 Yes, from inside the Exchange Management Console on the Edge Server, 
 in the Toolbox node, should be a Message-Tracking application that 
 doesn't fire up ECP but runs as an MMC.

  

 Regards,

  

 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com

  

 *From:* Bill Humphries [mailto:nt...@hedgedigger.com]
 *Sent:* Friday, September 10, 2010 1:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: ex2010 not delivering to yahoo.com addresses

  

 So, does message tracking gui work on edge server in SP1?  I 
 understand that it is outside of the forest and can't make use of AD, 
 but it seems like tracking messages from an edge transport would be 
 important for tracking down problems with email flow or delivery...and 
 connecting to AD shouldn't be necessary to provide useful information.

 Now to figure out how to use that Get-MessageTrackingLog commandlet.

 Bill


 Michael B. Smith wrote:

 I'll grant you that the user experience may be surprising, but message 
 tracking works as it is intended to do.
  
 GUI-based message tracking works within the Exchange Active Directory forest. 
 Edge Transport servers are not part of the same Active Directory forest. 
 Permissions and roles are not shared between the Exchange organization and 
 Edge transport servers, since permissions are based on the Active Directory 
 forest where the Exchange organization is installed.
  
 The message was received by a hub transport server and handed off to an edge 
 server. At that point, it was delivered to a different email system.
  
 Regards,
  
 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com
  
  
 -Original Message-
 From: Bill Humphries [mailto:nt...@hedgedigger.com] 
 Sent: Friday, September 10, 2010 1:31 PM
 To: NT System Admin Issues
 Subject: Re: ex2010 not delivering to yahoo.com addresses
  
 Thanks, Michael. And it looks like message tracking using the gui is a known 
 broken thing in 2010, huh?
  
  
 Michael B. Smith wrote:
   

 You need to look at the message tracking on the edge server itself. 

 OWA/ECP can't talk outside of the domain boundary (it's a security 

 boundary, and intentional).

  

 Regards,

  

 Michael B. Smith

  

 Consultant and Exchange MVP

  

 http://TheEssentialExchange.com

  

 *From:* Bill Humphries [mailto:nt...@hedgedigger.com]

 *Sent:* Friday, September 10, 2010 11:59 AM

 *To:* NT System Admin Issues

 *Subject:* ex2010 not delivering to yahoo.com addresses

  

 Hi all,

  

 So, we have recently installed exchange 2010 in our shop to get some 

 experience with it. i have some weird issue. It seems that messages 

 going to yahoo.com are sitting in the queue on the edge transport 

 server and giving our users delayed message NDRs. I have used telnet 

 from the machine to send a message to yahoo without a problem.

  

 If I track one of these messages using the new nifty tracking in OWA 

 it tells me the messages have been handed off:

  

 /Submitted

 9/10/2010 10:37 AM

 The message was submitted. Transferred

 9/10/2010 10:37 AM

 The message was successfully handed off to a different e-mail system. 

 This is as far as we can track it.

  

 /Any ideas what could could be causing this or what else I should be 

 looking at?

  

 This Exchange is a totally different beast from 2003.

  

 Bill

  

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

 ~

RE: dcpromo 2 old W2K dc's

2010-09-10 Thread pdw1914

30 days

From: br...@briandesmond.com
To: ntsysadmin@lyris.sunbelt-software.com
Subject: RE: dcpromo 2 old W2K dc's
Date: Thu, 9 Sep 2010 22:07:44 +

How long is “a while” in reference to how long they’ve been offline? 
Thanks,Brian desmondbr...@briandesmond.com c - 312.731.3132  From: 
pdw1...@hotmail.com [mailto:pdw1...@hotmail.com] 
Sent: Thursday, September 09, 2010 12:19 PM
To: NT System Admin Issues
Subject: dcpromo 2 old W2K dc's We're running two W2003 dc's but have not 
'upgraded' to W2003 AD; still running on W2K.  I have the 2 W2k dc's off-line 
right now.  I want to demote both.  My question is:  since the W2K dc's have 
been off-line for a while, should I bring them on-line and then leave it be for 
a while so the fRS can complete or I can bring it on-line and run dc-promo 
right away? Note that DNS is not running on the W2K dc's; that was moved to the 
W2003.~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~

~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---

To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin   

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: New ISAT Discussion Group - Join me.

2010-09-10 Thread Ziots, Edward

Joined. 

Z

Edward E. Ziots
CISSP, Network +, Security +
Network Engineer
Lifespan Organization
Email:ezi...@lifespan.org
Cell:401-639-3505


-Original Message-
From: Stu Sjouwerman [mailto:s...@sunbelt-software.com] 
Sent: Friday, September 10, 2010 2:21 PM
To: NT System Admin Issues
Subject: New ISAT Discussion Group - Join me.


I have started a new discussion group on LinkedIn. The topic is Internet

Security Awareness Training (ISAT). Join me here:
http://www.linkedin.com/groupRegistration?gid=3394058

Warm regards,

Stu Sjouwerman

..
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread roberto . grippi

Why don't you take into consideration www.dnsstuff.com
Part of their services are free.

Roberto Grippi


2010/9/10 Ben Scott mailvor...@gmail.com

 On Fri, Sep 10, 2010 at 11:54 AM,  richardmccl...@aspca.org wrote:
  A few weeks ago, ARIN had a very nice web site.  I could open my book
 mark,
  enter the IP address (copy and paste) of a spam or scan source, and see
  where it came from.

   Being a command-line junkie, I use the WHOIS.EXE utility from
 Sysinternals, which works much like the whois command from *nix.

 http://technet.microsoft.com/en-us/sysinternals/bb897435.aspx

  For example:

 BSCOTTwhois  12.15.29.130

 Whois v1.01 - Domain information lookup utility
 Sysinternals - www.sysinternals.com
 Copyright (C) 2005 Mark Russinovich

 Connecting to ORG.whois-servers.net...

 Domain ID:D1494537-LROR
 Domain Name:ASPCA.ORG
 Created On:06-Jan-1996 05:00:00 UTC
 Last Updated On:06-Jan-2010 01:23:40 UTC
 Expiration Date:05-Jan-2011 05:00:00 UTC
 Sponsoring Registrar:TierraNet Inc. dba DomainDiscover (R86-LROR)
 Status:CLIENT TRANSFER PROHIBITED
 Registrant ID:TNTN-290102
 Registrant Name:Ayumi Stubbs
 Registrant Organization:The American Society for the Prevention of Cruelty
 to A
 Registrant Street1:424 E. 92ndSt
 [...cut...]

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
Dr. Roberto Grippi

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Windows 7 Folder Redirection Issues

2010-09-10 Thread Wilhelm, Scott

I am using Windows 2008 R2 for my AD server, in which I have a GPO setup to 
redirect the My Documents folder to the users home folder.

I have set the folder redirection for my documents (User Config.-Windows 
Settings-Folder Redirection-Documents-Target folder location) to both 
“Redirect to the user’s home directory” and “Redirect to the following 
location”.  Whenever I select “Redirect to the user’s home directory”, it 
redirects the home folder to %HOMESHARE%%HOMEPATH%, which it doesn’t need 
%HOMEPATH appended to it.

If I set it to “Redirect to the user’s home directory”, which would be 
“//server/folder/%username%/” (and I have also entered it without the trailing 
/) or “H:/” which is their home drive.  Then, I apply it, and then click ok.  
When I go back into it, it’s changed to “Create a folder for each user under 
the root path”.  I then get the following error on the client machines:


Description:

Failed to apply policy and redirect folder Documents to 
\\SERVER\folder\stafftest\file:///\\SERVER\folder\stafftest\.

Redirection options=0x80001211.

The following error occurred: Can not create folder 
\\SERVER\folder\stafftestfile:///\\SERVER\folder\stafftest.

Error details: This security ID may not be assigned as the owner of this 
object.

.

Yes, the folder exists.  Yes, the user does have permission to it.  Not sure 
why it’s trying to create a new folder though.

I have checked through the GPO’s and there are no policies above that might be 
affecting this, other than the default domain policy, although it has no folder 
redirection settings.  This is a very inconsistent issue as I’ve seen it affect 
network admin accounts, but not some regular user accounts, and then the same 
account will be affected on one computer, but not another.  Very frustrating.

Has anyone seen this before?  Any ideas, suggestions?

Thank you,

Scott



---
Scott Wilhelm
Computer Technician
Massena Central School District
St. Lawrence-Lewis BOCES
(315) 764-3700 ext. 3046

“The harder I work, the luckier I get. “  -Samuel Goldwyn

‎Individual commitment to a group effort - that is what makes a team work, a 
company work, a society work, a civilization work. -Vince Lombardi


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: New ISAT Discussion Group - Join me.

2010-09-10 Thread Miller, Michael

Joined

-Original Message-
From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Friday, September 10, 2010 2:38 PM
To: NT System Admin Issues
Subject: RE: New ISAT Discussion Group - Join me.

Joined.

Z

Edward E. Ziots
CISSP, Network +, Security +
Network Engineer
Lifespan Organization
Email:ezi...@lifespan.org
Cell:401-639-3505

-Original Message-
From: Stu Sjouwerman [mailto:s...@sunbelt-software.com]
Sent: Friday, September 10, 2010 2:21 PM
To: NT System Admin Issues
Subject: New ISAT Discussion Group - Join me.

I have started a new discussion group on LinkedIn. The topic is Internet

Security Awareness Training (ISAT). Join me here:
http://www.linkedin.com/groupRegistration?gid=3394058

Warm regards,

Stu Sjouwerman

..
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

This message, and any response to it, may constitute a public record and
thus may be publicly available to anyone who requests it in accordance
with Chapter 149 of the Ohio Revised Code.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Network Timeout -- A Web Service

2010-09-10 Thread Andrew S. Baker

http://www.networktimeout.com/

Network Timeout is a free web service and community for IT enthusiasts and
professionals. If you’ve wasted time sifting through packet captures or
wished for better visibility into production applications, then this site is
for you.

They could have come up with a better name, but the technology is pretty
cool.  The parent company is:  http://www.extrahop.com/



*ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
*Exploiting Technology for Business Advantage...*
* *

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ex2010 not delivering to yahoo.com addresses

Sorry. That wasn't what you asked before. :-P :) Altho, if I was thinking 
straight, (I'm not - I'm writing coursework this week and for the next several 
weeks), I would've figured that out. Sorry.

You probably want to be looking at the connection logs, not message tracking. 
By default, they live at C:\Program Files\Microsoft\Exchange 
Server\V14\TransportRoles\Logs\Connectivity - and they are enabled by default.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Bill Humphries [mailto:nt...@hedgedigger.com]
Sent: Friday, September 10, 2010 2:36 PM
To: NT System Admin Issues
Subject: Re: ex2010 not delivering to yahoo.com addresses

Michael,

Do you know if there is a way to get useful tracking information using the 
commandlet since i'm not on SP1 yet?  I can run this: [PS] 
C:\Windows\system32Get-MessageTrackingLog -Start 09/10/2010 9:00AM -End 
09/10/2010 5:00PM -Sender bhumphries@
chasinggremlins.commailto:bhumphr...@%0bchasinggremlins.com

This gives me this list of events::

EventId  Source   SenderRecipients  
  MessageSubject
---  --   ----  
  --
RECEIVE  SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{humphries_b...@yahoo.commailto:humphries_b...@yahoo.com}test message
RECEIVE  SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{b...@hedgedigger.commailto:b...@hedgedigger.com}test 10:42
SEND SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{b...@hedgedigger.commailto:b...@hedgedigger.com}test 10:42
RECEIVE  SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com}  
Summary of junk emails blocked...
SEND SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com}  
Summary of junk emails blocked...

But I don't readily see any commands that would actually tell me why it isn't 
successfully getting a SEND for the yahoo email address.  Is there some other 
way to monitor this?  maybe I'm missing something available in the queue viewer?

Thanks for any help.

Michael B. Smith wrote:
Yes, from inside the Exchange Management Console on the Edge Server, in the 
Toolbox node, should be a Message-Tracking application that doesn't fire up ECP 
but runs as an MMC.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Bill Humphries [mailto:nt...@hedgedigger.com]
Sent: Friday, September 10, 2010 1:54 PM
To: NT System Admin Issues
Subject: Re: ex2010 not delivering to yahoo.com addresses

So, does message tracking gui work on edge server in SP1?  I understand that it 
is outside of the forest and can't make use of AD, but it seems like tracking 
messages from an edge transport would be important for tracking down problems 
with email flow or delivery...and connecting to AD shouldn't be necessary to 
provide useful information.

Now to figure out how to use that Get-MessageTrackingLog commandlet.

Bill


Michael B. Smith wrote:

I'll grant you that the user experience may be surprising, but message tracking 
works as it is intended to do.



GUI-based message tracking works within the Exchange Active Directory forest. 
Edge Transport servers are not part of the same Active Directory forest. 
Permissions and roles are not shared between the Exchange organization and Edge 
transport servers, since permissions are based on the Active Directory forest 
where the Exchange organization is installed.



The message was received by a hub transport server and handed off to an edge 
server. At that point, it was delivered to a different email system.



Regards,



Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com





-Original Message-

From: Bill Humphries [mailto:nt...@hedgedigger.com]

Sent: Friday, September 10, 2010 1:31 PM

To: NT System Admin Issues

Subject: Re: ex2010 not delivering to yahoo.com addresses



Thanks, Michael. And it looks like message tracking using the gui is a known 
broken thing in 2010, huh?





Michael B. Smith wrote:



You need to look at the message tracking on the edge server itself.

OWA/ECP can't talk outside of the domain boundary (it's a security

boundary, and intentional).



Regards,



Michael B. Smith



Consultant and Exchange MVP



http://TheEssentialExchange.com



*From:* Bill Humphries [mailto:nt...@hedgedigger.com]

*Sent:* Friday, September 10, 2010 11:59 AM

*To:* NT System Admin Issues

*Subject:* ex2010 not delivering to yahoo.com addresses



Hi all,



So, we have recently installed exchange 2010 in our shop to get some

experience with it. i have some weird issue. It seems that messages

Re: ex2010 not delivering to yahoo.com addresses

2010-09-10 Thread Andrew S. Baker

Yahoo employs greylisting of messages as part of their email security
approach.

I wouldn't mind if they'd do it on the first messages of the day, or first
set from that IP or whatever, but they seem to do it for every email.

You might want to enable domain keys or DKIM and see if they handle those
messages more expeditiously

*ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
*Exploiting Technology for Business Advantage...*
* *
On Fri, Sep 10, 2010 at 11:58 AM, Bill Humphries nt...@hedgedigger.comwrote:

  Hi all,

 So, we have recently installed exchange 2010 in our shop to get some
 experience with it.  i have some weird issue.  It seems that messages going
 to yahoo.com are sitting in the queue on the edge transport server and
 giving our users delayed message NDRs.  I have used telnet from the machine
 to send a message to yahoo without a problem.

 If I track one of these messages using the new nifty tracking in OWA it
 tells me the messages have been handed off:

 *Submitted
 9/10/2010 10:37 AM
 The message was submitted. Transferred
 9/10/2010 10:37 AM
 The message was successfully handed off to a different e-mail system. This
 is as far as we can track it.

 *Any ideas what could could be causing this or what else I should be
 looking at?

 This Exchange is a totally different beast from 2003.

 Bill

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ex2010 not delivering to yahoo.com addresses

Ha.  Thanks.  That put me in the right direction.  So, it looks like 
there was a DNS issue. 

SMTP,yahoo.com,,DNS server returned ErrorRetry reported by 0.0.0.0

I checked the settings and the person who setup the system had the 
secondary DNS server set to a decommissioned server's IP address.  I 
corrected that and also gave the VM a restart.  Mail flowing to  
yahoo.com correctly now.  I'm surprised that the secondary DNS would be 
causing the issue...and since I didn't test thinks before giving the 
server a bump, I can't really confirm that fixed it, rather than just 
the restart.

Bill

Michael B. Smith wrote:

 Sorry. That wasn't what you asked before. :-P J Altho, if I was 
 thinking straight, (I'm not -- I'm writing coursework this week and 
 for the next several weeks), I would've figured that out. Sorry.

  

 You probably want to be looking at the connection logs, not message 
 tracking. By default, they live at C:\Program Files\Microsoft\Exchange 
 Server\V14\TransportRoles\Logs\Connectivity -- and they are enabled by 
 default.

  

 Regards,

  

 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com

  

 *From:* Bill Humphries [mailto:nt...@hedgedigger.com]
 *Sent:* Friday, September 10, 2010 2:36 PM
 *To:* NT System Admin Issues
 *Subject:* Re: ex2010 not delivering to yahoo.com addresses

  

 Michael,

 Do you know if there is a way to get useful tracking information using 
 the commandlet since i'm not on SP1 yet?  I can run this: [PS] 
 C:\Windows\system32Get-MessageTrackingLog -Start 09/10/2010 9:00AM 
 -End 09/10/2010 5:00PM -Sender bhumphries@
 chasinggremlins.com mailto:bhumphr...@%0bchasinggremlins.com

 This gives me this list of events::

 EventId  Source   Sender
 RecipientsMessageSubject
 ---  --   --
 ----
 RECEIVE  SMTP bhumphr...@chasinggremlins.com 
 mailto:bhumphr...@chasinggremlins.com{humphries_b...@yahoo.com 
 mailto:humphries_b...@yahoo.com}test message
 RECEIVE  SMTP bhumphr...@chasinggremlins.com 
 mailto:bhumphr...@chasinggremlins.com{b...@hedgedigger.com 
 mailto:b...@hedgedigger.com}test 10:42
 SEND SMTP bhumphr...@chasinggremlins.com 
 mailto:bhumphr...@chasinggremlins.com{b...@hedgedigger.com 
 mailto:b...@hedgedigger.com}test 10:42
 RECEIVE  SMTP bhumphr...@chasinggremlins.com 
 mailto:bhumphr...@chasinggremlins.com
 {bhumphr...@chasinggremlins.com 
 mailto:bhumphr...@chasinggremlins.com}  Summary of junk emails 
 blocked...
 SEND SMTP bhumphr...@chasinggremlins.com 
 mailto:bhumphr...@chasinggremlins.com
 {bhumphr...@chasinggremlins.com 
 mailto:bhumphr...@chasinggremlins.com}  Summary of junk emails 
 blocked...

 But I don't readily see any commands that would actually tell me why 
 it isn't successfully getting a SEND for the yahoo email address.  Is 
 there some other way to monitor this?  maybe I'm missing something 
 available in the queue viewer?

 Thanks for any help.

 Michael B. Smith wrote:

 Yes, from inside the Exchange Management Console on the Edge Server, 
 in the Toolbox node, should be a Message-Tracking application that 
 doesn't fire up ECP but runs as an MMC.

  

 Regards,

  

 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com

  

 *From:* Bill Humphries [mailto:nt...@hedgedigger.com]
 *Sent:* Friday, September 10, 2010 1:54 PM
 *To:* NT System Admin Issues
 *Subject:* Re: ex2010 not delivering to yahoo.com addresses

  

 So, does message tracking gui work on edge server in SP1?  I 
 understand that it is outside of the forest and can't make use of AD, 
 but it seems like tracking messages from an edge transport would be 
 important for tracking down problems with email flow or delivery...and 
 connecting to AD shouldn't be necessary to provide useful information.

 Now to figure out how to use that Get-MessageTrackingLog commandlet.

 Bill


 Michael B. Smith wrote:

 I'll grant you that the user experience may be surprising, but message 
 tracking works as it is intended to do.
  
 GUI-based message tracking works within the Exchange Active Directory forest. 
 Edge Transport servers are not part of the same Active Directory forest. 
 Permissions and roles are not shared between the Exchange organization and 
 Edge transport servers, since permissions are based on the Active Directory 
 forest where the Exchange organization is installed.
  
 The message was received by a hub transport server and handed off to an edge 
 server. At that point, it was delivered to a different email system.
  
 Regards,
  
 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com
  
  
 -Original Message-
 From: Bill Humphries [mailto:nt...@hedgedigger.com] 
 Sent: Friday, September 10, 2010 1:31 PM
 To: NT System Admin Issues
 Subject: Re: ex2010 not

Sharepoint Services question

2010-09-10 Thread greg.sweers

I have a client with Sharepoint Services 3, running an internal site on port 
8043.  The site internally is name sp.domain.com which is hosted locally on 
their server as a cname.  To access their site internally you would open  
http://sp.domain.com:8043

They want to make this site external.  Once they install the SSL cert for the 
external name they want to use, is it as simple as adding it to the alternate 
access name list as https://sp.domain.com and making sure in IIS the host 
header is pointing to the IIS site that is running that site.  Its not in the 
default web site.

Thx

I have done this a few times before, but all of them have been in the default 
web site.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: Completely off topic

2010-09-10 Thread Kelsey, John

I recommend the Nine Steakhouse at the Palms.  DEE-LISH !!

From: Jeff Steward [mailto:jstew...@gmail.com] 
Sent: Thursday, September 09, 2010 8:55 AM
To: NT System Admin Issues
Subject: Re: OT: Completely off topic

I highly recommend Delmonico's Steakhouse in the  Venetian.  Pricey, but
*very* good.

-Jeff Steward

On Thu, Sep 9, 2010 at 1:13 AM, James Hill
james.h...@superamart.com.au wrote:

Thanks Brian.  Keen on the food recommendations.  I had the Getty on my
list too as I have heard it's good.

Vegas accommodation is locked in but we only have the first visit to LA
booked accommodation wise (and actually staying at Santa Monica).
Basically it's LA/santa monica (2 days) - Vegas (5 days) - LA (2days) -
Cruise/mexico (7 days) - LA (2days) - Home.

From: Brian Desmond [mailto:br...@briandesmond.com] 
Sent: Thursday, 9 September 2010 1:43 PM

To: NT System Admin Issues

Subject: RE: OT: Completely off topic

Add Hoover Dam to your Vegas list.

Do you like good (like really good) food? That's probably my favorite
thing to do (and spend money on) in both of these places. If you want
some food recommendations in LA let me know. I'd also look up when the
Food Trucks are all out in Venice (it's a couple days a month I think)
as they're a unique experience. 

In LA, I'd add The Getty, Venice, Santa Monica, possibly drive down to
San Diego (spend a night or two there it's really nice and totally
different - only like 90 mins away). The USS Midway is fun in San Diego,
you can actually take light rail to Tijuana also. Drive through like La
Jolla and such along the coast. In general driving along the coast (PCH)
is generally very pretty. Topanga Canyon north of LA is a fun drive. The
San Diego Zoo is one of the top zoos out there (though I haven't yet
been). Legoland and Disneyland are nearby to both if you're in to either
of those things. Hollywood walk of fame of course. Personally I think
you have too much time in both of these places. Are you open to
customizing a bit? 

Thanks,

Brian Desmond

br...@briandesmond.com

c - 312.731.3132

From: James Hill [mailto:james.h...@superamart.com.au] 
Sent: Wednesday, September 08, 2010 6:45 PM

To: NT System Admin Issues

Subject: RE: OT: Completely off topic

Haha.. ok on list it is.

I'll be on the West Coast.  Mainly after things to do in LA and Vegas.
Have 4-6 days in LA and 5 in Vegas so not a lot of time.  Will have a
car though.  After that I'm on a boat for 7 days down to Mexico and
back.

So far for LA:-

* Tar Pits

* Long Beach

* Universal Studios

* Eat something with cheese on it (I've heard it's really hard
to find in the U.S. J)

Vegas:-

* Grand Canyon (of course)

* cirque du soleil

* Obvious stuff like walking the strip and checking out each of
the big casinos

* Crazy as it sounds I'm more interested in the shows etc rather
than the gambling.

I'll be sure to bring some koala toys (after I remove the made in china
label).  I've heard I'll have to talk slow so that you Yanks can
understand me.

As for the crikey! comment I actually don't live that far from
Australia Zoo which was built by Steve Irwin (which is one of the few
people that ever uses that word these days)

Wouldn't mind jumping around like a fool in front of a Microsoft Kinect
if I can find one.

James.

From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Thursday, 9 September 2010 11:05 AM
To: NT System Admin Issues
Subject: Re: OT: Completely off topic

Crikey, mate!  If you want some tips from some of the locals on this
list, just ask.  We're already here!

And since you asked, here are a few:

1) North America is really, really large.  (Maybe even larger than
Australia!)  The farther north you go, the heavier clothing you'll need.

2) Always buy Americans a beer first.  After that they'll fall all over
themselves to return the kindness for the rest of the night.  And to
hear your funny accent.  Seriously.  You'll come out way ahead on this
one, and save a tonne of money.

3) 2) Does not work on people from Canada or Mexico.

4) Tell them your great grandfather was a hardened, unrepentant criminal
from England.  They expect to hear it anyway, even if he was a priest,
or an Aborigine, or a Prime Minister.

5) Bring your a Koala with you as an ice breaker.  Everyone has one,
right?

If I've missed anything, just ask.

Cheers, G'day, and all that stuff.

RS

On Wed, Sep 8, 2010 at 8:03 PM, James Hill
james.h...@superamart.com.au wrote:

I'm holidaying in North America next month and would like to get some
tips from some of the locals on this list.

I believe there is a completely off topic list somewhere.  If someone
would be kind enough to point me to it (off list of course) it would be
appreciated.

Unless of course it is like Fight Club.

James.

~ Finally, powerful endpoint security that

RE: OT: Completely off topic

2010-09-10 Thread Osborne, Richard

I liked the La Brea tar pits museum.

 

Griffith Park Observatory for views  movie nerddom (site of the finale
of Rebel Without A Cause).

 

Petersen Automotive Museum if you like cars.

 

Hollywood walk of fame.

 

From: Kelsey, John [mailto:jckel...@drmc.org] 
Sent: Friday, September 10, 2010 3:11 PM
To: NT System Admin Issues
Subject: RE: OT: Completely off topic

 

I recommend the Nine Steakhouse at the Palms.  DEE-LISH !!

 

From: Jeff Steward [mailto:jstew...@gmail.com] 
Sent: Thursday, September 09, 2010 8:55 AM
To: NT System Admin Issues
Subject: Re: OT: Completely off topic

 

I highly recommend Delmonico's Steakhouse in the  Venetian.  Pricey, but
*very* good.

 

-Jeff Steward

On Thu, Sep 9, 2010 at 1:13 AM, James Hill
james.h...@superamart.com.au wrote:

Thanks Brian.  Keen on the food recommendations.  I had the Getty on my
list too as I have heard it's good.

 

Vegas accommodation is locked in but we only have the first visit to LA
booked accommodation wise (and actually staying at Santa Monica).
Basically it's LA/santa monica (2 days) - Vegas (5 days) - LA (2days) -
Cruise/mexico (7 days) - LA (2days) - Home.

 

 

 

 

From: Brian Desmond [mailto:br...@briandesmond.com] 
Sent: Thursday, 9 September 2010 1:43 PM


To: NT System Admin Issues

Subject: RE: OT: Completely off topic

 

Add Hoover Dam to your Vegas list.

 

Do you like good (like really good) food? That's probably my favorite
thing to do (and spend money on) in both of these places. If you want
some food recommendations in LA let me know. I'd also look up when the
Food Trucks are all out in Venice (it's a couple days a month I think)
as they're a unique experience. 

 

In LA, I'd add The Getty, Venice, Santa Monica, possibly drive down to
San Diego (spend a night or two there it's really nice and totally
different - only like 90 mins away). The USS Midway is fun in San Diego,
you can actually take light rail to Tijuana also. Drive through like La
Jolla and such along the coast. In general driving along the coast (PCH)
is generally very pretty. Topanga Canyon north of LA is a fun drive. The
San Diego Zoo is one of the top zoos out there (though I haven't yet
been). Legoland and Disneyland are nearby to both if you're in to either
of those things. Hollywood walk of fame of course. Personally I think
you have too much time in both of these places. Are you open to
customizing a bit? 

 

 

 

Thanks,

Brian Desmond

br...@briandesmond.com

 

c - 312.731.3132

 

 

From: James Hill [mailto:james.h...@superamart.com.au] 
Sent: Wednesday, September 08, 2010 6:45 PM


To: NT System Admin Issues

Subject: RE: OT: Completely off topic

 

Haha.. ok on list it is.

 

I'll be on the West Coast.  Mainly after things to do in LA and Vegas.
Have 4-6 days in LA and 5 in Vegas so not a lot of time.  Will have a
car though.  After that I'm on a boat for 7 days down to Mexico and
back.

 

So far for LA:-

 

* Tar Pits

* Long Beach

* Universal Studios

* Eat something with cheese on it (I've heard it's really hard
to find in the U.S. J)

 

Vegas:-

 

* Grand Canyon (of course)

* cirque du soleil

* Obvious stuff like walking the strip and checking out each of
the big casinos

* Crazy as it sounds I'm more interested in the shows etc rather
than the gambling.

 

I'll be sure to bring some koala toys (after I remove the made in china
label).  I've heard I'll have to talk slow so that you Yanks can
understand me.

 

As for the crikey! comment I actually don't live that far from
Australia Zoo which was built by Steve Irwin (which is one of the few
people that ever uses that word these days)

 

Wouldn't mind jumping around like a fool in front of a Microsoft Kinect
if I can find one.

 

James.

 

 

 

From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Thursday, 9 September 2010 11:05 AM
To: NT System Admin Issues
Subject: Re: OT: Completely off topic

 

Crikey, mate!  If you want some tips from some of the locals on this
list, just ask.  We're already here!

 

And since you asked, here are a few:

 

1) North America is really, really large.  (Maybe even larger than
Australia!)  The farther north you go, the heavier clothing you'll need.

2) Always buy Americans a beer first.  After that they'll fall all over
themselves to return the kindness for the rest of the night.  And to
hear your funny accent.  Seriously.  You'll come out way ahead on this
one, and save a tonne of money.

3) 2) Does not work on people from Canada or Mexico.

4) Tell them your great grandfather was a hardened, unrepentant criminal
from England.  They expect to hear it anyway, even if he was a priest,
or an Aborigine, or a Prime Minister.

5) Bring your a Koala with you as an ice breaker.  Everyone has one,
right?

 

If I've missed anything, just ask.

 

Cheers, G'day, and all that stuff.

 

RS

 

On Wed, Sep 8, 2010 at 8:03 PM, James Hill
james.h...@superamart.com.au wrote:

RE: Sharepoint Services question

2010-09-10 Thread Erik Goldoff

Not sure of your infrastructure, but you might also want to consider port
forwarding from the external IP with standard SSL ( 443 ) to the internal at
port 8043.

Don’t know if better than what you plan, but maybe just a different way to
attack the same problem.

 

Erik Goldoff

IT  Consultant

Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '

From: greg.swe...@actsconsulting.net [mailto:greg.swe...@actsconsulting.net]

Sent: Friday, September 10, 2010 4:03 PM
To: NT System Admin Issues
Subject: Sharepoint Services question

 

I have a client with Sharepoint Services 3, running an internal site on port
8043.  The site internally is name sp.domain.com which is hosted locally on
their server as a cname.  To access their site internally you would open
http://sp.domain.com:8043

 

They want to make this site external.  Once they install the SSL cert for
the external name they want to use, is it as simple as adding it to the
alternate access name list as https://sp.domain.com and making sure in IIS
the host header is pointing to the IIS site that is running that site.  Its
not in the default web site.

 

Thx

 

I have done this a few times before, but all of them have been in the
default web site.  

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Sharepoint Services question

2010-09-10 Thread Kevin Lundy

It's been quite a while since I've looked at that, but if I recall, you
would do alternate access within WSS.  It should create the site in IIS.
Then go into IIS and create the cert req and later import the cert.

Sharepoint gets unhappy when IIS changes are made directly in IIS.  It's a
control freak :)

On Fri, Sep 10, 2010 at 4:03 PM, greg.swe...@actsconsulting.net wrote:

  I have a client with Sharepoint Services 3, running an internal site on
 port 8043.  The site internally is name sp.domain.com which is hosted
 locally on their server as a cname.  To access their site internally you
 would open  http://sp.domain.com:8043



 They want to make this site external.  Once they install the SSL cert for
 the external name they want to use, is it as simple as adding it to the
 alternate access name list as https://sp.domain.com and making sure in IIS
 the host header is pointing to the IIS site that is running that site.  Its
 not in the default web site.



 Thx



 I have done this a few times before, but all of them have been in the
 default web site.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: W2k3 DHCP redundancy / high availability

2010-09-10 Thread Raper, Jonathan - Eagle

Ok, guys - I hear ya - I'll split them up. Thanks for the feedback.

I had so many new vlans and associated DHCP pools that creating them manually 
would have driven me batty, so I actually did create almost all of my scopes 
from scratch by importing them. I don't recall having to modify any of them 
after the fact (other than some minor changes in the GUI, so I wasn't sure how 
it would work to change them.

If I remember correctly, don't I have to essentially pull the scope out and put 
the new one in, along with its associated exclusions?

Thanks,

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com
www.eaglemds.comBLOCKED::http://www.eaglemds.com/


From: Sean Martin [mailto:seanmarti...@gmail.com]
Sent: Friday, September 10, 2010 2:26 PM
To: NT System Admin Issues
Subject: Re: W2k3 DHCP redundancy / high availability

+1

Although I've never created scopes from scratch using netsh, I use it to script 
changes to our scopes. Works well.
On Fri, Sep 10, 2010 at 10:14 AM, Kurt Buff 
kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote:
netsh should do all he wants.

On Thu, Sep 9, 2010 at 15:38, Brian Desmond 
br...@briandesmond.commailto:br...@briandesmond.com wrote:
 Can you just script setting up the 80/20 rule on the scopes? I think there
 is a dhcpcmd.exe ...



 Thanks,

 Brian Desmond

 br...@briandesmond.commailto:br...@briandesmond.com



 c - 312.731.3132





 From: Raper, Jonathan - Eagle 
 [mailto:jra...@eaglemds.commailto:jra...@eaglemds.com]
 Sent: Thursday, September 09, 2010 2:55 PM
 To: NT System Admin Issues
 Subject: W2k3 DHCP redundancy / high availability



 Ok, here goes...



 Present environment - pure Windows 2003 AD, with two DCs. One is virtual
 (vmware esx 3.5), 2003 Enterprise Edition. The other is physical, 2003
 Standard Edition (not sure why - I didn't set it up). Virtual DC is running
 DHCP for our entire organization, and would be a pain to go through and
 setup split scopes (many sites, multiple vlans per site, and thus, multiple
 DHCP scopes for each site.) A year ago, we were using Cisco devices at each
 remote site to handle DHCP for each subnet. We performed a major network
 overhaul and had to centralize, so here we are.



 I've now been tasked with building redundancy for our DHCP services. Moving
 to Server 2008 is not an option right now. We MAY be able to upgrade the
 2003 Standard server to 2003 Enterprise, but that isn't a given just yet.



 Issues...



 Can't cluster, because of the Std Edition OS, (but even then, how would that
 impact AD  DNS?)

 Can't backup from Primary and restore to Secondary, again, because of
 different OS (M$ says, not supported to backup from Enterprise and try to
 restore to Standard)

 As mentioned, split scopes would be a major admin pain (it wouldn't be so
 bad if we had 2008, since there is a wizard in 2008, but I digress)



 So, the way I see it, I have a couple of options...



 Setup secondary as a hot spare but disable the DHCP service unless and
 until the primary becomes available. Use netsh dhcp server export
 c:\dhcpdatabase.txt all on a daily basis to ensure a valid backup of the
 primary, and copy that file over to the secondary as part of one scheduled
 task.



 -or-



 Setup secondary, authorize it, configure it, turn it on, (hear me out here)
 and setup IP Address Conflict Resolution at the server level on both
 servers, and let them work it out on their own. I realize that I wouldn't
 have any lease synchronization, and that there is a slight risk of duplicate
 IP, but I can't imagine there would be much. My WAN links are solid. Also,
 any scope or option changes made on the primary would have to be duplicated
 on the secondary...administrative overhead yes, but still less than dealing
 with split scope, IMO. Even then, couldn't I just export from the primary
 after I've made changes and then import to the secondary? I know lease
 information is contained in the exported file...trying to decide whether or
 not that would be good or bad... if it wouldn't be a problem, why not take it
 a step further and schedule an export/import from the primary to the
 secondary?



 What am I missing?



 Jonathan L. Raper, A+, MCSA, MCSE
 Technology Coordinator
 Eagle Physicians  Associates, PA
 jra...@eaglemds.commailto:jra...@eaglemds.com
 www.eaglemds.comhttp://www.eaglemds.com/





 

 Any medical information contained in this electronic message is CONFIDENTIAL
 and privileged. It is unlawful for unauthorized persons to view, copy,
 disclose, or disseminate CONFIDENTIAL information. This electronic message
 may contain information that is confidential and/or legally privileged. It
 is intended only for the use of the individual(s) and/or entity named as
 recipients in the message. If you are not an intended recipient of this
 message, please notify the

RE: iPad / LogMeIn

2010-09-10 Thread Alex Eckelberry

Fwiw, look at TeamViewer for the iPad...

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, September 02, 2010 5:50 PM
To: NT System Admin Issues
Subject: iPad / LogMeIn

Anyone here using LogMeIn from an iPad? I've been resisting trendy tech 
(smartphones and Apple anything) for a long time, but this just might put it 
over the top for me
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

OT: Paging, Bell and Intercom Systems?

2010-09-10 Thread Matthew W. Ross

I hate the intercom/bell system in our schools. Not that there is anything 
wrong with them, but they're troublesome, difficult to program, and very old.

I've got the opportunity to try a new system in a tiny school with only 4 
rooms. So I' have been looking at IP based systems. So far, I've found that 
they are mostly SIP phone systems with special (and very expensive) VOIP 
speakers. Is there a system that can use existing analog speakers, but the 
head-end is IP Addressable? Or perhaps there are cheaper VOIP 
speakers/adapters out there somewhere?

Can anybody here recommend for (or against) such a system? I _need_ the 
following features:

* Broadcasting (All Call)
* Medium to Complex bell schedules to specific zones.
* Two way communication with a specific room.

It's a long shot, but I figured I would ask.


--Matt Ross
Ephrata School District

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ex2010 not delivering to yahoo.com addresses

Seems very likely to be the issue. The way Windows handles DNS - well, you'd 
think it depended on it being right, or something! :-P

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Bill Humphries [mailto:nt...@hedgedigger.com]
Sent: Friday, September 10, 2010 3:41 PM
To: NT System Admin Issues
Subject: Re: ex2010 not delivering to yahoo.com addresses

Ha.  Thanks.  That put me in the right direction.  So, it looks like there was 
a DNS issue.

SMTP,yahoo.com,,DNS server returned ErrorRetry reported by 0.0.0.0

I checked the settings and the person who setup the system had the secondary 
DNS server set to a decommissioned server's IP address.  I corrected that and 
also gave the VM a restart.  Mail flowing to  yahoo.com correctly now.  I'm 
surprised that the secondary DNS would be causing the issue...and since I 
didn't test thinks before giving the server a bump, I can't really confirm that 
fixed it, rather than just the restart.

Bill

Michael B. Smith wrote:
Sorry. That wasn't what you asked before. :-P :) Altho, if I was thinking 
straight, (I'm not - I'm writing coursework this week and for the next several 
weeks), I would've figured that out. Sorry.

You probably want to be looking at the connection logs, not message tracking. 
By default, they live at C:\Program Files\Microsoft\Exchange 
Server\V14\TransportRoles\Logs\Connectivity - and they are enabled by default.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Bill Humphries [mailto:nt...@hedgedigger.com]
Sent: Friday, September 10, 2010 2:36 PM
To: NT System Admin Issues
Subject: Re: ex2010 not delivering to yahoo.com addresses

Michael,

Do you know if there is a way to get useful tracking information using the 
commandlet since i'm not on SP1 yet?  I can run this: [PS] 
C:\Windows\system32Get-MessageTrackingLog -Start 09/10/2010 9:00AM -End 
09/10/2010 5:00PM -Sender bhumphries@
chasinggremlins.commailto:bhumphr...@%0bchasinggremlins.com

This gives me this list of events::

EventId  Source   SenderRecipients  
  MessageSubject
---  --   ----  
  --
RECEIVE  SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{humphries_b...@yahoo.commailto:humphries_b...@yahoo.com}test message
RECEIVE  SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{b...@hedgedigger.commailto:b...@hedgedigger.com}test 10:42
SEND SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{b...@hedgedigger.commailto:b...@hedgedigger.com}test 10:42
RECEIVE  SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com}  
Summary of junk emails blocked...
SEND SMTP 
bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com
{bhumphr...@chasinggremlins.commailto:bhumphr...@chasinggremlins.com}  
Summary of junk emails blocked...

But I don't readily see any commands that would actually tell me why it isn't 
successfully getting a SEND for the yahoo email address.  Is there some other 
way to monitor this?  maybe I'm missing something available in the queue viewer?

Thanks for any help.

Michael B. Smith wrote:
Yes, from inside the Exchange Management Console on the Edge Server, in the 
Toolbox node, should be a Message-Tracking application that doesn't fire up ECP 
but runs as an MMC.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Bill Humphries [mailto:nt...@hedgedigger.com]
Sent: Friday, September 10, 2010 1:54 PM
To: NT System Admin Issues
Subject: Re: ex2010 not delivering to yahoo.com addresses

So, does message tracking gui work on edge server in SP1?  I understand that it 
is outside of the forest and can't make use of AD, but it seems like tracking 
messages from an edge transport would be important for tracking down problems 
with email flow or delivery...and connecting to AD shouldn't be necessary to 
provide useful information.

Now to figure out how to use that Get-MessageTrackingLog commandlet.

Bill


Michael B. Smith wrote:

I'll grant you that the user experience may be surprising, but message tracking 
works as it is intended to do.



GUI-based message tracking works within the Exchange Active Directory forest. 
Edge Transport servers are not part of the same Active Directory forest. 
Permissions and roles are not shared between the Exchange organization and Edge 
transport servers, since permissions are based on the Active Directory forest 
where the Exchange organization is installed.



The message was received by a hub transport server and handed off to an edge 
server. At that point, it was delivered to a different email system.



Regards,



Michael B. Smith

RE: Paging, Bell and Intercom Systems?

2010-09-10 Thread greg.sweers

Digitalacoustics.com

They have a bellconsole software which is fully customizable.  Two way good to 
go and Broadcasting.

We have it at two schools over 100 units in each and its very good.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Friday, September 10, 2010 5:01 PM
To: NT System Admin Issues
Subject: OT: Paging, Bell and Intercom Systems?

I hate the intercom/bell system in our schools. Not that there is anything 
wrong with them, but they're troublesome, difficult to program, and very old.

I've got the opportunity to try a new system in a tiny school with only 4 
rooms. So I' have been looking at IP based systems. So far, I've found that 
they are mostly SIP phone systems with special (and very expensive) VOIP 
speakers. Is there a system that can use existing analog speakers, but the 
head-end is IP Addressable? Or perhaps there are cheaper VOIP 
speakers/adapters out there somewhere?

Can anybody here recommend for (or against) such a system? I _need_ the 
following features:

* Broadcasting (All Call)
* Medium to Complex bell schedules to specific zones.
* Two way communication with a specific room.

It's a long shot, but I figured I would ask.


--Matt Ross
Ephrata School District

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Paging, Bell and Intercom Systems?

2010-09-10 Thread Raper, Jonathan - Eagle

I used to install school intercom systems, years ago, in a previous life.

Telecor, based in Canada, (our 51st state [1]), made an excellent product. I 
can't speak to their quality now, but it is still run by the same man, so I 
would almost stand behind it sight unseen. I used to know the president of the 
company, Peter Jova - he's a great guy, but haven't talked to him in probably 
15 years - maybe more.

http://www.telecor.com/IIandXL.htm

I don't know if the end devices are analog or IP based, but it is programmable 
via a web interface.

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.com
www.eaglemds.com

[1] Shamelessly borrowed from Steven Peck's comment from yesterday.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Friday, September 10, 2010 5:01 PM
To: NT System Admin Issues
Subject: OT: Paging, Bell and Intercom Systems?

I hate the intercom/bell system in our schools. Not that there is anything 
wrong with them, but they're troublesome, difficult to program, and very old.

I've got the opportunity to try a new system in a tiny school with only 4 
rooms. So I' have been looking at IP based systems. So far, I've found that 
they are mostly SIP phone systems with special (and very expensive) VOIP 
speakers. Is there a system that can use existing analog speakers, but the 
head-end is IP Addressable? Or perhaps there are cheaper VOIP 
speakers/adapters out there somewhere?

Can anybody here recommend for (or against) such a system? I _need_ the 
following features:

* Broadcasting (All Call)
* Medium to Complex bell schedules to specific zones.
* Two way communication with a specific room.

It's a long shot, but I figured I would ask.


--Matt Ross
Ephrata School District

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Any medical information contained in this electronic message is CONFIDENTIAL 
and privileged. It is unlawful for unauthorized persons to view, copy, 
disclose, or disseminate CONFIDENTIAL information. This electronic message may 
contain information that is confidential and/or legally privileged. It is 
intended only for the use of the individual(s) and/or entity named as 
recipients in the message. If you are not an intended recipient of this 
message, please notify the sender immediately and delete this material from 
your computer. Do not deliver, distribute or copy this message, and do not 
disclose its contents or take any action in reliance on the information that it 
contains.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: Completely off topic

2010-09-10 Thread Klint Price

When in San Diego I always try to take a trip to Julian for some of the best 
apple pie you will ever have.  There are 12 or so places to buy apple pie in 
this quiet very small township.

Bring your own cheese.  When I lived up north in Ontario for a few years I 
learned An apple pie without the cheese, is like a kiss without the squeeze.  
Cheddar is best. You don't taste the cheese, and it brings out the flavor in 
the apple.

La Jolla shores has some great areas to go cliff jumping if you so desire, and 
La Jolla shores has some nice beaches with decent waves and long declines into 
the ocean.  If you have little kids in tow, my favorite beach is at the Hotel 
Del Coronado because they go through with a beachcomber every night and clean 
out the seaweed and debris from the sand.

Old Town (in San Diego) is fun to roam around and has some good eateries too 
for some good southwest food.


From: Doug Hampshire [mailto:dhampsh...@gmail.com]
Sent: Thursday, September 09, 2010 5:12 AM
To: NT System Admin Issues
Subject: Re: OT: Completely off topic

No, don't go to the San Diego Zoo. If you're going to be in the San Diego area, 
go the the WIld Animal Park instead. It's run by the San Diego Zoo, but the 
animals are in very large open spaces and (mostly) live together. They do keep 
the lions out of the gazelle areas for obvious reasons.
On Wed, Sep 8, 2010 at 11:43 PM, Brian Desmond 
br...@briandesmond.commailto:br...@briandesmond.com wrote:
Add Hoover Dam to your Vegas list.

Do you like good (like really good) food? That's probably my favorite thing to 
do (and spend money on) in both of these places. If you want some food 
recommendations in LA let me know. I'd also look up when the Food Trucks are 
all out in Venice (it's a couple days a month I think) as they're a unique 
experience.

In LA, I'd add The Getty, Venice, Santa Monica, possibly drive down to San 
Diego (spend a night or two there it's really nice and totally different - only 
like 90 mins away). The USS Midway is fun in San Diego, you can actually take 
light rail to Tijuana also. Drive through like La Jolla and such along the 
coast. In general driving along the coast (PCH) is generally very pretty. 
Topanga Canyon north of LA is a fun drive. The San Diego Zoo is one of the top 
zoos out there (though I haven't yet been). Legoland and Disneyland are nearby 
to both if you're in to either of those things. Hollywood walk of fame of 
course. Personally I think you have too much time in both of these places. Are 
you open to customizing a bit?



Thanks,
Brian Desmond
br...@briandesmond.commailto:br...@briandesmond.com

c - 312.731.3132


From: James Hill 
[mailto:james.h...@superamart.com.aumailto:james.h...@superamart.com.au]
Sent: Wednesday, September 08, 2010 6:45 PM
To: NT System Admin Issues
Subject: RE: OT: Completely off topic

Haha.. ok on list it is.

I'll be on the West Coast.  Mainly after things to do in LA and Vegas.  Have 
4-6 days in LA and 5 in Vegas so not a lot of time.  Will have a car though.  
After that I'm on a boat for 7 days down to Mexico and back.

So far for LA:-


*Tar Pits

*Long Beach

*Universal Studios

*Eat something with cheese on it (I've heard it's really hard to find 
in the U.S. :))

Vegas:-


*Grand Canyon (of course)

*cirque du soleil

*Obvious stuff like walking the strip and checking out each of the big 
casinos

*Crazy as it sounds I'm more interested in the shows etc rather than 
the gambling.

I'll be sure to bring some koala toys (after I remove the made in china label). 
 I've heard I'll have to talk slow so that you Yanks can understand me.

As for the crikey! comment I actually don't live that far from Australia Zoo 
which was built by Steve Irwin (which is one of the few people that ever uses 
that word these days)

Wouldn't mind jumping around like a fool in front of a Microsoft Kinect if I 
can find one.

James.



From: Richard Stovall [mailto:rich...@gmail.commailto:rich...@gmail.com]
Sent: Thursday, 9 September 2010 11:05 AM
To: NT System Admin Issues

Subject: Re: OT: Completely off topic

Crikey, mate!  If you want some tips from some of the locals on this list, 
just ask.  We're already here!

And since you asked, here are a few:

1) North America is really, really large.  (Maybe even larger than Australia!)  
The farther north you go, the heavier clothing you'll need.
2) Always buy Americans a beer first.  After that they'll fall all over 
themselves to return the kindness for the rest of the night.  And to hear your 
funny accent.  Seriously.  You'll come out way ahead on this one, and save a 
tonne of money.
3) 2) Does not work on people from Canada or Mexico.
4) Tell them your great grandfather was a hardened, unrepentant criminal from 
England.  They expect to hear it anyway, even if he was a priest, or an 
Aborigine, or a Prime Minister.
5) Bring your a Koala with you as an ice breaker.  Everyone has one, right?

OT: Friday Funny (NSFW): Mongo DB is Web Scale