Re: Citrix web interface query

2010-11-01 Thread James Rankin
Yes, all clear - I'm pretty sure I checked it, there were no specific
domains specified, but I'll give it another check

Cheers,

On 30 October 2010 00:06, Webster carlwebs...@gmail.com wrote:

 In Web Interface Management Console:



 Click your site

 Click Authentication Methods

 Click on your selected method

 Click Properties

 Click General | Domain Restriction



 Do you have “Restrict to the following domains” selected?  If so, what
 domain(s) is/are there?



 For mine I have websterslab.com.  If I login as websterslab\cwebster, the
 online plugin will not pass-through the login credentials because they do
 not match what you specified.



 Same problem if you specify “websterslab” and the user logs in with
 websterslab.com\cwebster or, if you allow, cwebs...@websterslab.com, the
 pass-through will not pass-through because the domains do not match.



 Am I clear in what I am trying to explain what may be causing your issue?



 Thanks





 Carl Webster

 Citrix Technology Professional

 http://dabcc.com/Webster







 *From:* James Rankin [mailto:kz2...@googlemail.com]
 *Subject:* Re: Citrix web interface query



 It is just using pass-through for their currently logged-on credentials,
 they don't specify it. I'm starting to consider other alternatives now, such
 as trying to migrate these app servers to a legacy farm in the new domain

 On 29 October 2010 14:05, Webster carlwebs...@gmail.com wrote:

 Do you specify a domain in the sites or do the users enter the domain when
 they login?



 There is also an issue that if you specify a login domain as
 websterslab.com in the site settings but the user logs in websterslab\user
 the PNAgent (AKA online plugin) will NOT authenticate because websterslab !=
 websterslab.com.





 Webster



 *From:* James Rankin [mailto:kz2...@googlemail.com]
 *Subject:* Re: Citrix web interface query



 Yes, got all the appropriate entries in there. The logon works fine if I
 specify credentials from the old domains. It's just when I supply a username
 and password from the new domain - it barfs out the invalid credentials
 error.



 I can access file shares and such like in the old domains under a new
 domain userid, so I'm a bit confused as to why the PNAgent logon won't go.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

SBS 2003 storage upgrade

2010-11-01 Thread Glen Johnson
This is for our church so budget is really tight right now.
We have a 2003 sbs system, running exchange, quickbooks and a power church app.
Drive d holds the exchange database, all the user file shares and is almost 
full.
Currently the server has one 80gig drive partitioned as C: 20 gig, D: the rest.
Here is my plan to upgrade it.  Do you think it will work or are there 
better/simpler options.
I have a cheapio  IDE raid card and 2 larger drives.
I plan to shutdown the system, install the card and drives, boot and run the 
bios on the card to set up the two new drive as raid 1.
Then boot into windows so that the OS can find the new card and install the 
drivers.
I'll then set all the exchange services to manual or disabled, disable starting 
of the qb and power church software.
Shut down the system and then boot with my copy of UBCD, use one of the tools 
to copy the existing D partition to the new raid 1 array I've just created, 
resizing in the process.
When that is done, reboot the machine into windows, use disk manager to swap 
the existing D drive to the new larger one, make sure the shares are correct 
and then restart exchange, QB and power church.
This would leave C on the original drive, and d on the new larger array.  Not 
my first choice, but the two drives are free, they  but aren't large enough to 
hold C and D and still have much room to grow.

Or second scenario.
Same server, but I also have cheapio sata card and 2 even larger hard drives.
I'd like to clone the entire server to these two larger hard drives, expanding 
the c and d partitions and only end up with two drives in the system.
I know I can use the UBCD to clone and resize the drives, but I'm doubting 
windows would boot from the new controller and drives.
Any ideas or tried and true solutions would be appreciated.
Glen.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Two Win2K8 R2 DNS Servers

2010-11-01 Thread Andrew S. Baker
What server is each DNS server using as its primary DNS server?

If it is using the other server, that might cause your problem, if for some
reason, it's not failing over to the next one in the list in a timely
fashion.

Also, when you do an NSLOOKUP locally on each server, is it responding via
IPv6 or IPv4?

-ASB: http://XeeSM.com/AndrewBaker

Sent from my Motorola Droid
 On Oct 30, 2010 7:10 PM, Martin Blackstone mblackst...@gmail.com wrote:
 When one of the servers is down DNS becomes totally unreachable until they
 are both available.

 So two DC's both hosting DNS. Shut down one, and the other stops serving
DNS
 and DHCP. Once they are both up, everything comes back.



 Has anyone seen this?


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: SBS 2003 storage upgrade

2010-11-01 Thread Kennedy, Jim
I vote for plan three, it seems simpler.

Add the new drives and leave the old D drive in place and move user files or 
the exchange stores to that drive. Whichever is the largest. If it is the user 
files just robocopy them over then delete the old ones from the D drive leaving 
the new free space for the exchange stores.

If it is the exchange stores you want to movemake new stores on the new 
drive and move the mailboxes over and delete the old stores after you are done. 
You can schedule the mailbox move at 2 am. It will do it while everyone, 
including you are asleep.

From: Glen Johnson [mailto:gjohn...@vhcc.edu]
Sent: Monday, November 01, 2010 8:47 AM
To: NT System Admin Issues
Subject: SBS 2003 storage upgrade

This is for our church so budget is really tight right now.
We have a 2003 sbs system, running exchange, quickbooks and a power church app.
Drive d holds the exchange database, all the user file shares and is almost 
full.
Currently the server has one 80gig drive partitioned as C: 20 gig, D: the rest.
Here is my plan to upgrade it.  Do you think it will work or are there 
better/simpler options.
I have a cheapio  IDE raid card and 2 larger drives.
I plan to shutdown the system, install the card and drives, boot and run the 
bios on the card to set up the two new drive as raid 1.
Then boot into windows so that the OS can find the new card and install the 
drivers.
I'll then set all the exchange services to manual or disabled, disable starting 
of the qb and power church software.
Shut down the system and then boot with my copy of UBCD, use one of the tools 
to copy the existing D partition to the new raid 1 array I've just created, 
resizing in the process.
When that is done, reboot the machine into windows, use disk manager to swap 
the existing D drive to the new larger one, make sure the shares are correct 
and then restart exchange, QB and power church.
This would leave C on the original drive, and d on the new larger array.  Not 
my first choice, but the two drives are free, they  but aren't large enough to 
hold C and D and still have much room to grow.

Or second scenario.
Same server, but I also have cheapio sata card and 2 even larger hard drives.
I'd like to clone the entire server to these two larger hard drives, expanding 
the c and d partitions and only end up with two drives in the system.
I know I can use the UBCD to clone and resize the drives, but I'm doubting 
windows would boot from the new controller and drives.
Any ideas or tried and true solutions would be appreciated.
Glen.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: SBS 2003 storage upgrade

2010-11-01 Thread Daniel Rodriguez
On your 2nd scenario, I would install the drivers, first, so when you get
everything transfered Windows will see your card.

On Nov 1, 2010 8:47 AM, Glen Johnson gjohn...@vhcc.edu wrote:

 This is for our church so budget is really tight right now.

We have a 2003 sbs system, running exchange, quickbooks and a power church
app.

Drive d holds the exchange database, all the user file shares and is almost
full.

Currently the server has one 80gig drive partitioned as C: 20 gig, D: the
rest.

Here is my plan to upgrade it.  Do you think it will work or are there
better/simpler options.

I have a cheapio  IDE raid card and 2 larger drives.

I plan to shutdown the system, install the card and drives, boot and run the
bios on the card to set up the two new drive as raid 1.

Then boot into windows so that the OS can find the new card and install the
drivers.

I’ll then set all the exchange services to manual or disabled, disable
starting of the qb and power church software.

Shut down the system and then boot with my copy of UBCD, use one of the
tools to copy the existing D partition to the new raid 1 array I’ve just
created, resizing in the process.

When that is done, reboot the machine into windows, use disk manager to swap
the existing D drive to the new larger one, make sure the shares are correct
and then restart exchange, QB and power church.

This would leave C on the original drive, and d on the new larger array.
Not my first choice, but the two drives are free, they  but aren’t large
enough to hold C and D and still have much room to grow.



Or second scenario.

Same server, but I also have cheapio sata card and 2 even larger hard
drives.

I’d like to clone the entire server to these two larger hard drives,
expanding the c and d partitions and only end up with two drives in the
system.

I know I can use the UBCD to clone and resize the drives, but I’m doubting
windows would boot from the new controller and drives.

Any ideas or tried and true solutions would be appreciated.

Glen.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: SBS 2003 storage upgrade

2010-11-01 Thread Ben Scott
On Mon, Nov 1, 2010 at 8:47 AM, Glen Johnson gjohn...@vhcc.edu wrote:
 I’ll then set all the exchange services to manual or disabled, disable
 starting of the qb and power church software.

 Shut down the system and then boot with my copy of UBCD, use one of the
 tools to copy the existing D partition to the new raid 1 array I’ve just
 created, resizing in the process.

  As long as all services are stopped, you should be able to do the
file copy from Windows.  Just ROBOCOPY from D:\ to x:\, then use
Device Manager to swap the drive letters.

 I know I can use the UBCD to clone and resize the drives, but I’m doubting
 windows would boot from the new controller and drives.

  There's a way to install and enable additional boot-time drivers, so
you can migrate to a new storage controller.  You have  to do it in
advance of the change.  I know SYSPREP can do it, but that's not what
you want here.  Maybe someone else can chime in on this one.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: SBS 2003 storage upgrade

2010-11-01 Thread Ben Scott
On Mon, Nov 1, 2010 at 8:55 AM, Daniel Rodriguez drod...@gmail.com wrote:
 On your 2nd scenario, I would install the drivers, first, so when you get
 everything transfered Windows will see your card.

  IIRC, you have to do something special to tell Windows to load the
drivers at boot time.  It's not enough to just install them.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Citrix web interface query

2010-11-01 Thread Webster
Are your two domains in different forests?

 

 

Webster

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Subject: Re: Citrix web interface query

 

Yes, all clear - I'm pretty sure I checked it, there were no specific
domains specified, but I'll give it another check

Cheers,

On 30 October 2010 00:06, Webster carlwebs...@gmail.com wrote:

In Web Interface Management Console:

 

Click your site

Click Authentication Methods

Click on your selected method

Click Properties

Click General | Domain Restriction

 

Do you have Restrict to the following domains selected?  If so, what
domain(s) is/are there?

 

For mine I have websterslab.com.  If I login as websterslab\cwebster, the
online plugin will not pass-through the login credentials because they do
not match what you specified.

 

Same problem if you specify websterslab and the user logs in with
websterslab.com\cwebster or, if you allow, cwebs...@websterslab.com, the
pass-through will not pass-through because the domains do not match.

 

Am I clear in what I am trying to explain what may be causing your issue?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Citrix web interface query

2010-11-01 Thread James Rankin
Indeed they are

On 1 November 2010 14:08, Webster carlwebs...@gmail.com wrote:

 Are your two domains in different forests?





 Webster



 *From:* James Rankin [mailto:kz2...@googlemail.com]
 *Subject:* Re: Citrix web interface query



 Yes, all clear - I'm pretty sure I checked it, there were no specific
 domains specified, but I'll give it another check

 Cheers,

 On 30 October 2010 00:06, Webster carlwebs...@gmail.com wrote:

 In Web Interface Management Console:



 Click your site

 Click Authentication Methods

 Click on your selected method

 Click Properties

 Click General | Domain Restriction



 Do you have “Restrict to the following domains” selected?  If so, what
 domain(s) is/are there?



 For mine I have websterslab.com.  If I login as websterslab\cwebster, the
 online plugin will not pass-through the login credentials because they do
 not match what you specified.



 Same problem if you specify “websterslab” and the user logs in with
 websterslab.com\cwebster or, if you allow, cwebs...@websterslab.com, the
 pass-through will not pass-through because the domains do not match.



 Am I clear in what I am trying to explain what may be causing your issue?

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Citrix web interface query

2010-11-01 Thread Webster
Did you ask this question on EE also?  Just curious because someone asked
basically the same question there.  Try to figure a way to write an article
on this.

 

 

Webster

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Subject: Re: Citrix web interface query

 

Indeed they are

On 1 November 2010 14:08, Webster carlwebs...@gmail.com wrote:

Are your two domains in different forests?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Citrix web interface query

2010-11-01 Thread James Rankin
Not guilty...haven't raised a question on EE for about five years now.

On 1 November 2010 14:12, Webster carlwebs...@gmail.com wrote:

 Did you ask this question on EE also?  Just curious because someone asked
 basically the same question there.  Try to figure a way to write an article
 on this.





 Webster



 *From:* James Rankin [mailto:kz2...@googlemail.com]
 *Subject:* Re: Citrix web interface query



 Indeed they are

 On 1 November 2010 14:08, Webster carlwebs...@gmail.com wrote:

 Are your two domains in different forests?

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Citrix web interface query

2010-11-01 Thread Webster
Someone has asked essentially the same exact question on EE.  Gotta lab this
and write about it.  They can't get it to work either and I have never
worked with XenApp in multiple forests.

 

 

Webster

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Subject: Re: Citrix web interface query

 

Not guilty...haven't raised a question on EE for about five years now.

On 1 November 2010 14:12, Webster carlwebs...@gmail.com wrote:

Did you ask this question on EE also?  Just curious because someone asked
basically the same question there.  Try to figure a way to write an article
on this.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Patch Management

2010-11-01 Thread Stephen Wimberly
WSUS and SCCM 2007.  We can't beat the license agreement our company has!


On Thu, Oct 28, 2010 at 1:54 PM, Brumbaugh, Luke
luke.brumba...@butlerschein.com wrote:
 Now that I have figured out how to update adobe.

 My next question is what do you guys use for patch management.



 What do you think of EminentWare for wsus?

 Is there something better?





 Luke L. Brumbaugh

 Network Engineer

 Butler Animal Health Supply

 Ph:(614) 659-1736



 **

 CONFIDENTIALITY NOTICE - The information transmitted in this message is
 intended only for the person or entity to which it is addressed and may
 contain confidential and/or privileged material. Any review, retransmission,
 dissemination or other use of this information by persons or entities other
 than the intended recipient is prohibited. If you received this in error,
 please contact the sender and destroy all copies of this document. Thank
 you.

 Butler Schein Animal Health

 **

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



After Action Report RE: How'd this for a bad day? AKA bad me

2010-11-01 Thread David Lum
Now that the dust has settled, we know what happened. Our tech didn't 
completely disconnect the SAN connections (he unplugged them, but not far 
enough) when installing ESX v3.5 on a new physical host and it formatted a SAN 
drive instead of the local drive. If we had known this before powering off the 
VM's we could have VMotioned them to the other SAN, but at the time we didn't 
know this.

I still shouldn't have had all my eggs on one SAN (and now don't), and version 
4 of ESX doesn't allow this without having to click on some very prominent are 
you sure!?!?! boxes, whereas apparently v3.5 just throws it wherever and 
apparently making it easy to shoot yourself in the foot.

Dave

From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Friday, October 08, 2010 2:13 PM
To: NT System Admin Issues
Subject: RE: How'd this for a bad day? AKA bad me

Sounds like you should home the redundant sets of VMs on different SAN 
volumes/whatever?

Thanks,
Brian Desmond
br...@briandesmond.com

c - 312.731.3132


From: David Lum [mailto:david@nwea.org]
Sent: Friday, October 08, 2010 11:51 AM
To: NT System Admin Issues
Subject: How'd this for a bad day? AKA bad me

I have 7 production systems running on 3 different ESX boxes in an ESX cluster, 
and 2 different logical SAN volumes (sorry am not SAN savvy, I just know I have 
two different SAN volumes to choose from when making a VM).

Today, a SAN blows up and takes out half - our SharePoint server (heavily 
used), a Terminal Server , and an internal occasionally-used web server 
(Namescape rDirectory). Then somehow, when I was told to power down the other 4 
VM's so our VMWare guy could reboot a vCenter server, 3 of the 4 remaining VM's 
decided to go AWOL (a combination of missing and disconnected). That took 
out my other two Terminal Servers and another lightly used internal web server.

Did I mention I don't have the normal backups for these things because 
...well...I'm an idiot and didn't confirm our backup guy installed backup 
software on these servers as I stood them up (process error on my part since I 
should confirm it's on there). None of these store data - they all talk to a 
backend SQL and the Terminal Servers are used to run apps that are slow if they 
run the same apps over VPN. SharePoint we got back quick because we do have a 
staging equivalent of it, so it was repoint to a config and content DB, DNS 
change, and done.

I do have copious notes on how I built the others and can rebuild from scratch 
easily enough (I just finished the three TS boxes), but dude...six servers at 
once?

The most frustrating part was discovering that the 4 systems that had been 
powered off could have been migrated before power off and there would have 
been no issue with them - the power down nuked 'em.

Oh, and the lone surviving server - the PGP Universal Server that manages the 
encrypted machines. (Yes, the PGP machines will still boot w/out the server up, 
but still, I've been on this server 50% of my time over the last two weeks!).

Dave

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Vipre and DB req's

2010-11-01 Thread Phil Garven
Hi Joseph,

The Windows Internal Database is a customized / modified version of SQL Express 
2005 which is the version included with the Vipre installation. So installing 
Vipre using the Simple mode and letting is install it's own instance of SQL 
Express 2005 will result in pretty much what you're asking for.

Regards,

Phil Garven - Product Specialist - Sunbelt Exchange Archiver
GFI Software, formerly Sunbelt Software
www.sunbeltsoftware.comhttp://www.sunbeltsoftware.com
Tel: +1 877-757-4094

From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: Friday, October 29, 2010 2:56 PM
To: NT System Admin Issues
Subject: Vipre and DB req's

If you have 2008r2 w/ Windows Internal DB installed, can Vipre leverage this 
and simply install a new instance?
jlc

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

...

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Vipre and deployment

2010-11-01 Thread Phil Garven
The Uninstallers we create essentially just call the existing AV's built in 
uninstall process so it should be as effective as uninstalling the other AV 
through add / remove programs (we grab the uninstall string from the registry 
and run it) - however that often doesn't work as well as expected.

We do add some other code, for example where Symantec is configured to require 
a password to uninstall it we try to disable that requirement.

If you have an existing AV that is centrally managed and the management console 
has a method to uninstall it centrally which works then I would recommend using 
that before installing Vipre. This does leave the PC's without AV for a short 
period of time so it's best to do this when users are out - it requires reboots 
anyway.

After moving to Vipre, if you have something like SMS I would recommend 
searching for any machines that still have any traces of the old AV's still on 
them and clean them up manually - we often see old file system drivers still 
hooked in which can really slow PCs down

Regards,

Phil Garven - Product Specialist - Sunbelt Exchange Archiver
GFI Software, formerly Sunbelt Software
www.sunbeltsoftware.comhttp://www.sunbeltsoftware.com
Tel: +1 877-757-4094

From: Cameron [mailto:cameron.orl...@gmail.com]
Sent: Friday, October 29, 2010 2:08 PM
To: NT System Admin Issues
Subject: Re: Vipre and deployment

Unless the uninstaller has changed, it didn't work very well for us either with 
Symantec. It ended up being easier to remove it from each workstation and then 
push down the Vipre agent.



On Fri, Oct 29, 2010 at 1:10 PM, John Aldrich 
jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote:
I can't speak for Symantec, but at least for AVG 8.5, Vipre's uninstaller
didn't do a very good job of removing it, and several times I had to go to
the local machine and manually delete the service. YMMV, though.



From: Alex Eckelberry 
[mailto:al...@sunbelt-software.commailto:al...@sunbelt-software.com]
Sent: Friday, October 29, 2010 12:52 PM
To: NT System Admin Issues
Subject: RE: Vipre and deployment
http://www.sunbeltsoftware.com/Business/Agent-Uninstallers/



From: Holstrom, Don [mailto:dholst...@nbm.orgmailto:dholst...@nbm.org]
Sent: Friday, October 29, 2010 12:41 PM
To: NT System Admin Issues
Subject: RE: Vipre and deployment

We still use Symantec on all our workstations. Would love to move over to
Vipre. We have about a hundred workstations. Would I still have to go to all
the workstations to change from Symantec to Vipre or is there now a way to
do this from the server?

From: Joseph L. Casale 
[mailto:jcas...@activenetwerx.commailto:jcas...@activenetwerx.com]
Sent: Friday, October 29, 2010 11:56 AM
To: NT System Admin Issues
Subject: RE: Vipre and deployment

Yea, if I do it with the Console, I need to enable file and print services
on the wkst etc...
If I use a GPO, I don't.

From: Eric Wittersheim 
[mailto:eric.wittersh...@gmail.commailto:eric.wittersh...@gmail.com]
Sent: Friday, October 29, 2010 9:55 AM
To: NT System Admin Issues
Subject: Re: Vipre and deployment

You can deploy Vipre as an MSI from the console.  I suppose that you can
push the MSI with GP if you like.
On Fri, Oct 29, 2010 at 10:46 AM, Joseph L. Casale
jcas...@activenetwerx.commailto:jcas...@activenetwerx.com wrote:
For you guys with experience using Vipre (I presume it's come a long way by
now...) I am curious about a couple things.

I gave up on Avira, my first point of support was the var in Canada who
proved beyond a shadow of a doubt to be useless.
Sophos required far too much reconfiguration of the wkst's and didn't offer
their agent as an MSI so I could roll it out myself.
Awaiting info from Kasperksy...
Can the agents for Vipre be provided by MSI's so I don't have to change
anything on the wkst's except maybe a port rule between it and the mgmt host
after I push it via GP's?

Thanks!
jlc
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with 

Fax Service for on the fly use (with paid account)

2010-11-01 Thread HELP_PC
Does anybody know about a fax service that can be accessed from anywhere
on the Internet using a pre-paid account (I mean from any Pc using a
logon ID) ?
 
TIA
 
GuidoElia
HELPPC
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Fax Service for on the fly use (with paid account)

2010-11-01 Thread Raper, Jonathan - Eagle
https://www.j2.com/

I've used it. Free incoming as long as you don't need a toll free #.


Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com
www.eaglemds.comBLOCKED::http://www.eaglemds.com/


From: HELP_PC [mailto:g...@enter.it]
Sent: Monday, November 01, 2010 11:07 AM
To: NT System Admin Issues
Subject: Fax Service for on the fly use (with paid account)

Does anybody know about a fax service that can be accessed from anywhere on the 
Internet using a pre-paid account (I mean from any Pc using a logon ID) ?

TIA

GuidoElia
HELPPC


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Any medical information contained in this electronic message is CONFIDENTIAL 
and privileged. It is unlawful for unauthorized persons to view, copy, 
disclose, or disseminate CONFIDENTIAL information. This electronic message may 
contain information that is confidential and/or legally privileged. It is 
intended only for the use of the individual(s) and/or entity named as 
recipients in the message. If you are not an intended recipient of this 
message, please notify the sender immediately and delete this material from 
your computer. Do not deliver, distribute or copy this message, and do not 
disclose its contents or take any action in reliance on the information that it 
contains.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Fax Service for on the fly use (with paid account)

2010-11-01 Thread Kevin Lundy
www.efax.com




On Mon, Nov 1, 2010 at 11:07 AM, HELP_PC g...@enter.it wrote:

  Does anybody know about a fax service that can be accessed from anywhere
 on the Internet using a pre-paid account (I mean from any Pc using a logon
 ID) ?

 TIA

 *GuidoElia*
 *HELPPC*


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

R: Fax Service for on the fly use (with paid account)

2010-11-01 Thread HELP_PC
I see that most of them are based on reception of faxes (that I don't need ).
I need a service where I can send a fax to every country and from every 
country. Not quantities but individually. In many countries a fax has more 
legal value than an email even certified
 
GuidoElia
HELPPC
 

  _  

Da: Kevin Lundy [mailto:klu...@gmail.com] 
Inviato: lunedì 1 novembre 2010 16.13
A: NT System Admin Issues
Oggetto: Re: Fax Service for on the fly use (with paid account)


www.efax.com http://www.efax.com/  
 


 
On Mon, Nov 1, 2010 at 11:07 AM, HELP_PC g...@enter.it wrote:


Does anybody know about a fax service that can be accessed from anywhere on the 
Internet using a pre-paid account (I mean from any Pc using a logon ID) ?
 
TIA
 
GuidoElia
HELPPC
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Fax Service for on the fly use (with paid account)

2010-11-01 Thread Kevin Lundy
You can send from eFax.

On Mon, Nov 1, 2010 at 11:33 AM, HELP_PC g...@enter.it wrote:

  I see that most of them are based on reception of faxes (that I don't
 need ).
 I need a service where I can send a fax to every country and from every
 country. Not quantities but individually. In many countries a fax has more
 legal value than an email even certified

 *GuidoElia*
 *HELPPC*


  --
 *Da:* Kevin Lundy [mailto:klu...@gmail.com]
 *Inviato:* lunedì 1 novembre 2010 16.13
 *A:* NT System Admin Issues
 *Oggetto:* Re: Fax Service for on the fly use (with paid account)

   www.efax.com




 On Mon, Nov 1, 2010 at 11:07 AM, HELP_PC g...@enter.it wrote:

  Does anybody know about a fax service that can be accessed from anywhere
 on the Internet using a pre-paid account (I mean from any Pc using a logon
 ID) ?

 TIA

 *GuidoElia*
 *HELPPC*


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Exchange 2003 and BES 4 upgrade

2010-11-01 Thread Steve Ens
I'm starting my planning and looking for suggestions, etc.  My idea is to
create two new VM's with W2008R2 and install BESX on one and Exchange
2010sp1 on the other.  What is the preferred method, move the blackberry
users first and then the mailboxes or vice versa?  Is it kosher to move from
my BES to BESX?  I only really use a couple of different policies, so BESX
looks like a decent alternative to the full blown BES.  Any gotchas or ideas
appreciated.
Steve

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: VMWare ESXi

2010-11-01 Thread Fogarty, Richard R Mr CTR USA USASOC USA
Yeah, pulled that down this weekend and finally got it installed.  Just have
to brush up on my Linux as well as I want it to be storage for the whole
Windows domain environment.  Not sure just how to do that now.

 

From: Tony Patton [mailto:apco...@gmail.com] 
Sent: Sunday, October 31, 2010 3:43 PM
To: NT System Admin Issues
Subject: Re: VMWare ESXi

 

I did exactly that with Openfiler as a vm, you can download a VMWare
specific build from their site as far as I can remember.  I also have it
mounted back to the esxi box via nfs as I have my ISO's in the vm.  It loves
memory tho when copying files to/from it.

T

typed slowly on HTC Desire

On 30 Oct 2010 19:59, Fogarty, Richard R Mr CTR USA USASOC USA
rick.foga...@us.army.mil wrote:
 I have a Dell box that I'm using as a test ESXi server. It has some raw
 storage that isn't being used that I'd like to mount as a storage for the
 network. Anyone have any ideas on the best way to do that? I'm currently
 looking at the VMWare NAS appliances to download, but the VMWare site is
 having difficulties rendering them right now.
 
 
 
 Rick
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
blockedhttp://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
blockedhttp://lyris.sunbelt-software.com/read/my_forums/ 
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
blockedhttp://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
blockedhttp://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: SDM Software’s new GP Reporting Pak?

2010-11-01 Thread Joseph Heaton
Thought you were talking about Jeremy, until I clicked the link...

 Free, Bob r...@pge.com 10/29/2010 11:54 AM 
I am not using that tool in particular but have use others of theirs.
Pricing is negotiable with anybody J

 

I have known the principal of that endeavor for quite some time and
he’s beyond reproach IMHO  and as good as it gets WRT GPOs outside
MS.

 

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Friday, October 29, 2010 11:49 AM
To: NT System Admin Issues
Subject: OT: SDM Software’s new GP Reporting Pak? 

 

Anyone using this ? 

http://www.sdmsoftware.com/blog/ http://www.sdmsoftware.com/blog/  

If so, I'd like to hear feedback on how you like it. Looks like the
perfect tool for a project I'm working on. Just got off the phone with
the sales guy. Waiting on pricing. He told me it's licensed by the
number of GPOs in your environment. Thinking it might be pricey. 




Chris Bodnar, MCSE
Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com 
Phone: 610-807-6459
Fax: 610-807-6003 - This
message, and any attachments to it, may contain information that is
privileged, confidential, and exempt from disclosure under applicable
law. If the reader of this message is not the intended recipient, you
are notified that any use, dissemination, distribution, copying, or
communication of this message is strictly prohibited. If you have
received this message in error, please notify the sender immediately by
return e-mail and delete the message and any attachments. Thank you. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Random poll: GPO count

2010-11-01 Thread David Lum
Recent thread on SDMSoftware pricing per # of GPO’s makes me wonder…how many 
GPO’s do you guys have in your environment? We have 56! Very few of them are at 
the root level, but for example we have 10 GPO’s just to handle our Service 
Desk having local admin or remote desktop user membership for various systems. 
6 different WSUS GPO’s, etc.

350-ish users, 450-ish workstations and ~125 servers…
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Random poll: GPO count

2010-11-01 Thread Don Guyer
55-ish GPOs.

4000-ish users.

1000-ish workstations on domain.

Anywhere from 1-2000-ish laptops – not on domain.

 

When I first got here there were roughly 125 GPOs. Took us awhile but we 
widdled it down to current amount.

 

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com mailto:don.gu...@prufoxroach.com 

 

From: David Lum [mailto:david@nwea.org] 
Sent: Monday, November 01, 2010 3:00 PM
To: NT System Admin Issues
Subject: Random poll: GPO count

 

Recent thread on SDMSoftware pricing per # of GPO’s makes me wonder…how many 
GPO’s do you guys have in your environment? We have 56! Very few of them are at 
the root level, but for example we have 10 GPO’s just to handle our Service 
Desk having local admin or remote desktop user membership for various systems. 
6 different WSUS GPO’s, etc.

 

350-ish users, 450-ish workstations and ~125 servers…

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Random poll: GPO count

2010-11-01 Thread Sean Martin
Approximately 250 GPOs
~1700 Users
~ 2000 Client Devices
~ 600 servers (including 180 Citrix servers)

- Sean

On Mon, Nov 1, 2010 at 10:59 AM, David Lum david@nwea.org wrote:

  Recent thread on SDMSoftware pricing per # of GPO’s makes me wonder…how
 many GPO’s do you guys have in your environment? We have 56! Very few of
 them are at the root level, but for example we have 10 GPO’s just to handle
 our Service Desk having local admin or remote desktop user membership for
 various systems. 6 different WSUS GPO’s, etc.



 350-ish users, 450-ish workstations and ~125 servers…

 *David Lum** **// *SYSTEMS ENGINEER
 NORTHWEST EVALUATION ASSOCIATION
 (Desk) 971.222.1025 *// *(Cell) 503.267.9764





 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Outlook Weidness HELP!!

2010-11-01 Thread Dave Vantine
I am hoping someone can offer some suggestions to a very weird Outlook
problem I am having. When I open Outlook the performance is fine and I can
change from different folders I have and they open each folder immediately.
As time goes by changing from 1 folder to another gets slower and slower
where it can take upwards of 60 seconds to view the contents of a different
folder. I have tried this in both cached mode and no-cached mode without
much differencece. I get no response or the message that Outlook is not
responding though there is not a lot of CPU activity during this. If I close
Outlook it can take upwards of 60 seconds for the actual Outlook*32 process
to close down. Once it is closed if I reopen it everything is speedy for a
while but then begins getting slower and slower.

I deleted all of the outlook .dat files but this does not seemed to have
made any differences. I have removed most of the Outlook add-ins also
without any changes to the behavior. My Outlook is pretty much unusable
after it has been running for 30 minutes to an hour.

-- 
Thanks
Dave Vantine

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Outlook Weidness HELP!!

2010-11-01 Thread John Aldrich
Off the top of my head, this sounds like a memory problem, but I'd guess you
probably already thought of that. A Google search found that a lot of people
are having a similar problem. Although your situation was a bit vague on
details I Googled Outlook gets progressively slower and found a bunch of
hits. On the second page was this answer:
http://everyjoe.com/work/finally-a-real-tip-to-speed-up-outlook-2007-169/ 
Basically the solution involves starting Outlook as an Admin, going to the
Trust Center, then Addins and disabling all but indexing. 
Another suggestion for *temporarily* fixing it involves deleting the
outcmd.dat file. *shrug* Not sure if you've tried the first fix or not, but
it appears to be a common problem.



From: Dave Vantine [mailto:dvant...@gmail.com] 
Sent: Monday, November 01, 2010 3:14 PM
To: NT System Admin Issues
Subject: Outlook Weidness HELP!!

I am hoping someone can offer some suggestions to a very weird Outlook
problem I am having. When I open Outlook the performance is fine and I can
change from different folders I have and they open each folder immediately.
As time goes by changing from 1 folder to another gets slower and slower
where it can take upwards of 60 seconds to view the contents of a different
folder. I have tried this in both cached mode and no-cached mode without
much differencece. I get no response or the message that Outlook is not
responding though there is not a lot of CPU activity during this. If I close
Outlook it can take upwards of 60 seconds for the actual Outlook*32 process
to close down. Once it is closed if I reopen it everything is speedy for a
while but then begins getting slower and slower.
 
I deleted all of the outlook .dat files but this does not seemed to have
made any differences. I have removed most of the Outlook add-ins also
without any changes to the behavior. My Outlook is pretty much unusable
after it has been running for 30 minutes to an hour.
 
-- 
Thanks
Dave Vantine
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Outlook Weidness HELP!!

2010-11-01 Thread Raper, Jonathan - Eagle
Questions:


 1.  What version of Outlook?
 2.  Are you using it to connect to exchange or to POP accounts?


Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.comBLOCKED::mailto:%20jra...@eaglemds.com
www.eaglemds.comBLOCKED::http://www.eaglemds.com/


From: Dave Vantine [mailto:dvant...@gmail.com]
Sent: Monday, November 01, 2010 3:14 PM
To: NT System Admin Issues
Subject: Outlook Weidness HELP!!

I am hoping someone can offer some suggestions to a very weird Outlook problem 
I am having. When I open Outlook the performance is fine and I can change from 
different folders I have and they open each folder immediately. As time goes by 
changing from 1 folder to another gets slower and slower where it can take 
upwards of 60 seconds to view the contents of a different folder. I have tried 
this in both cached mode and no-cached mode without much differencece. I get no 
response or the message that Outlook is not responding though there is not a 
lot of CPU activity during this. If I close Outlook it can take upwards of 60 
seconds for the actual Outlook*32 process to close down. Once it is closed if I 
reopen it everything is speedy for a while but then begins getting slower and 
slower.

I deleted all of the outlook .dat files but this does not seemed to have made 
any differences. I have removed most of the Outlook add-ins also without any 
changes to the behavior. My Outlook is pretty much unusable after it has been 
running for 30 minutes to an hour.

--
Thanks
Dave Vantine

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Any medical information contained in this electronic message is CONFIDENTIAL 
and privileged. It is unlawful for unauthorized persons to view, copy, 
disclose, or disseminate CONFIDENTIAL information. This electronic message may 
contain information that is confidential and/or legally privileged. It is 
intended only for the use of the individual(s) and/or entity named as 
recipients in the message. If you are not an intended recipient of this 
message, please notify the sender immediately and delete this material from 
your computer. Do not deliver, distribute or copy this message, and do not 
disclose its contents or take any action in reliance on the information that it 
contains.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: A real puzzler...

2010-11-01 Thread Jon Harris
I have seen this with both Apple and Win 7 products taking an IP and because
of the way the firewall was configured not responding to ping's or several
other products.  I was only able to trace it back to a machine by killing
switch ports one at a time and resetting DHCP until the offending machine
was off the network.  There had to be an easier way but I was at the time
just in too much of a hurry to get the job done to look another way.

Just for your info/laugh the the Win 7 machine was the management system and
took the least amount of time to find.  I was moving it from one subnet to
another then remoting back in and discovered that I had no problem.  Put
that machine back in the original subnet and problem came back.


Jon

On Sun, Oct 31, 2010 at 8:35 PM, Kurt Buff kurt.b...@gmail.com wrote:

 The VM I'm standing up gets the error message that another machine has
 the IP address. The machine that seems to be responding is the DC.

 On Sat, Oct 30, 2010 at 23:09, Ken Schaefer k...@adopenstatic.com wrote:
  Is the error that another machine has the IP address?
  Or is the error that another NIC in the machine has the same IP address?
 
  Slightly different errors, but the later usually means you have a hidden
 NIC. The former means some other machine has the IP. You can also get around
 the latter error by unchecking the validate configuration checkbox.
 
  Cheers
  Ken
 
  -Original Message-
  From: Kurt Buff [mailto:kurt.b...@gmail.com]
  Sent: Sunday, 31 October 2010 8:27 AM
  To: NT System Admin Issues
  Subject: Re: A real puzzler...
 
  On Sat, Oct 30, 2010 at 17:23, Ben Scott mailvor...@gmail.com wrote:
  On Sat, Oct 30, 2010 at 7:01 PM, Kurt Buff kurt.b...@gmail.com wrote:
  I will try those commands, but can't really shut down the DC in the
  AU office - I don't have a way to start it remotely.
 
   Sure you do.  You phone the guys in the AU office and have them hit
  the power button.  HHOS.
 
   Or, if it's a managed switch, you could disable the switch port.
  Or, wait, didn't you say it's a VM?  Does your VM system have a way to
  disable the virtual switch port?
 
   I'd try the Dev Mgr idea someone else posted first, of course.  :)
 
  -- Ben
 
  The DC is not a VM - the machine that refuses the IP address is the VM.
 
  I'll try the other stuff first...
 
  Kurt
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: A real puzzler...

2010-11-01 Thread Kurt Buff
No Apple, but there are a few Win7 machines, and some Linux machines.

On Mon, Nov 1, 2010 at 12:30, Jon Harris jk.har...@gmail.com wrote:
 I have seen this with both Apple and Win 7 products taking an IP and because
 of the way the firewall was configured not responding to ping's or several
 other products.  I was only able to trace it back to a machine by killing
 switch ports one at a time and resetting DHCP until the offending machine
 was off the network.  There had to be an easier way but I was at the time
 just in too much of a hurry to get the job done to look another way.

 Just for your info/laugh the the Win 7 machine was the management system and
 took the least amount of time to find.  I was moving it from one subnet to
 another then remoting back in and discovered that I had no problem.  Put
 that machine back in the original subnet and problem came back.


 Jon

 On Sun, Oct 31, 2010 at 8:35 PM, Kurt Buff kurt.b...@gmail.com wrote:

 The VM I'm standing up gets the error message that another machine has
 the IP address. The machine that seems to be responding is the DC.

 On Sat, Oct 30, 2010 at 23:09, Ken Schaefer k...@adopenstatic.com wrote:
  Is the error that another machine has the IP address?
  Or is the error that another NIC in the machine has the same IP address?
 
  Slightly different errors, but the later usually means you have a hidden
  NIC. The former means some other machine has the IP. You can also get 
  around
  the latter error by unchecking the validate configuration checkbox.
 
  Cheers
  Ken
 
  -Original Message-
  From: Kurt Buff [mailto:kurt.b...@gmail.com]
  Sent: Sunday, 31 October 2010 8:27 AM
  To: NT System Admin Issues
  Subject: Re: A real puzzler...
 
  On Sat, Oct 30, 2010 at 17:23, Ben Scott mailvor...@gmail.com wrote:
  On Sat, Oct 30, 2010 at 7:01 PM, Kurt Buff kurt.b...@gmail.com wrote:
  I will try those commands, but can't really shut down the DC in the
  AU office - I don't have a way to start it remotely.
 
   Sure you do.  You phone the guys in the AU office and have them hit
  the power button.  HHOS.
 
   Or, if it's a managed switch, you could disable the switch port.
  Or, wait, didn't you say it's a VM?  Does your VM system have a way to
  disable the virtual switch port?
 
   I'd try the Dev Mgr idea someone else posted first, of course.  :)
 
  -- Ben
 
  The DC is not a VM - the machine that refuses the IP address is the VM.
 
  I'll try the other stuff first...
 
  Kurt
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: RE: VMWare ESXi

2010-11-01 Thread Tony Patton
I did that through the web interface, it was a bit kludgy at the time.  My
computer is in semi-storage at the minute otherwise I'd be able to check it
for you.  The forums can be very helpful, but can be hard to find what your
looking for at times.

I'll dig it up when I get a chance.

T

typed slowly on HTC Desire
On 1 Nov 2010 16:56, Fogarty, Richard R Mr CTR USA USASOC USA 
rick.foga...@us.army.mil wrote:
 Yeah, pulled that down this weekend and finally got it installed. Just
have
 to brush up on my Linux as well as I want it to be storage for the whole
 Windows domain environment. Not sure just how to do that now.



 From: Tony Patton [mailto:apco...@gmail.com]
 Sent: Sunday, October 31, 2010 3:43 PM
 To: NT System Admin Issues
 Subject: Re: VMWare ESXi



 I did exactly that with Openfiler as a vm, you can download a VMWare
 specific build from their site as far as I can remember. I also have it
 mounted back to the esxi box via nfs as I have my ISO's in the vm. It
loves
 memory tho when copying files to/from it.

 T

 typed slowly on HTC Desire

 On 30 Oct 2010 19:59, Fogarty, Richard R Mr CTR USA USASOC USA
 rick.foga...@us.army.mil wrote:
 I have a Dell box that I'm using as a test ESXi server. It has some raw
 storage that isn't being used that I'd like to mount as a storage for the
 network. Anyone have any ideas on the best way to do that? I'm currently
 looking at the VMWare NAS appliances to download, but the VMWare site is
 having difficulties rendering them right now.



 Rick


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
 blockedhttp://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 blockedhttp://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
 blockedhttp://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 blockedhttp://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Random poll: GPO count

2010-11-01 Thread Miller Bonnie L .
258 GPOs and counting
1800 staff, 14000+ students
6200 workstations
90+ servers

From: David Lum [mailto:david@nwea.org]
Sent: Monday, November 01, 2010 12:00 PM
To: NT System Admin Issues
Subject: Random poll: GPO count

Recent thread on SDMSoftware pricing per # of GPO’s makes me wonder…how many 
GPO’s do you guys have in your environment? We have 56! Very few of them are at 
the root level, but for example we have 10 GPO’s just to handle our Service 
Desk having local admin or remote desktop user membership for various systems. 
6 different WSUS GPO’s, etc.

350-ish users, 450-ish workstations and ~125 servers…
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: A real puzzler...

2010-11-01 Thread Kurt Buff
Here's what I see so far today after going to the control panel and
selecting Show hidden devices - I don't think I'm seeing any ghost
NICs:

DC in AU office (Dell 1850 - seems to be replying to ARP for
192.168.61.31, but is 192.168.61.30):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   Intel(R) Pro/1000 MT Network Connection #2 (disabled - this is the
one that picked up a DHCP address when plugged in)
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

VM (on ESXi4 box) in AU office (refuses to accept 192.168.61.30, says
another machine has IP address):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

VM (on ESX 3.5 box) in US office, has same MAC as DC in AU office.
Address is 192.168.10.82, has never had a 61.0/24 address, and isn't
seeing any ARP requests for it:
   Direct Parallel
   VMWare Accelerated AMD PCNet Adapter
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

I'm thinking of standing up a small XP VM, and assigning it the
problematic address, and see who answers.

Kurt

On Sat, Oct 30, 2010 at 09:26, Michael B. Smith mich...@smithcons.com wrote:
 Kurt -

 In device manager is an option to show hidden devices. Enable that, both on 
 the new server there and the old server there and see if you have a 
 ghost NIC. I bet you will. And that ghost NIC probably has the problem IP 
 address.

 Remove the ghost NIC and you'll remove the problem.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 
 From: Ralph Smith [...@gatewayindustries.org]
 Sent: Saturday, October 30, 2010 12:22 PM
 To: NT System Admin Issues
 Subject: RE: A real puzzler...

 Do you have an AV application on the server?  The reason I ask is I had
 some servers that exibited the exact symptoms you are describing after
 installing VIPRE Premium on them.  Removing VIPRE solved the problem.




 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, October 30, 2010 1:49 AM
 To: NT System Admin Issues
 Subject: A real puzzler...

 All,

 I'm in the US, and have a problem in our AU office that I'm having
 difficulty wrapping my brain around. I have a theory, but it is still a
 strange situation, and any feedback anyone can provide would be
 appreciated.

 The AU office has a server, which I've just recently stood up, using an
 address assigned by DHCP. This is not ideal, obviously, but the thing
 refuses to take the static IP address that it's slated to get
 (192.168.61.30.) It's a VM on a new ESXi server.

 When I try to assign it the static address, it keeps getting an error
 message that another machine has the address.

 However, when I ping the IP address that the machine refuses to use, I
 get no answer.

 When I use netmon on the VM in the AU office to capture ARP traffic, I
 get a MAC address that's for the DC. However, the DC has never had
 192.168.61.30 - it's been 192.168.61.31 all its life in the AU office.

 I've even fired up regedit on the DC to search for the IP address, and
 all I'm showing is the one it's supposed to have - 192.168.61.31

 I'm more than a little baffled by this one.

 One thing I should note, just because: The DC in the AU office is a
 machine that had been used in the US office about two years ago. We did
 a P2V on it, and the VM from that still lives on in the US office.
 They do share a MAC address (I don't know why, as I would have expected
 the the MAC to change when it got the virtual NIC), but AFAICT this
 shouldn't make a difference, since they are in different subnets
 entirely, with different addresses.

 Anyone have thoughts on this?

 Kurt

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 Confidentiality Notice:

 --



 This communication, including any attachments, may contain confidential 
 information and is intended only for the individual or entity to whom it is 
 addressed. Any review, dissemination, or copying of this communication by 
 anyone other than the intended recipient is strictly prohibited. If you are 
 not the intended recipient, please contact the sender by reply email, delete 
 and destroy all copies of the original message.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 

RE: A real puzzler...

2010-11-01 Thread Miller Bonnie L .
Did you run the command sequence first?  You won't see them without doing that. 
 Anything ghosted will have a bit of a grayed-out appearance:

Run cmd as administrator and type
set devmgr_show_nonpresent_devices=1enter
devmgmt.msc enter

When device manager opens, select to show hidden devices.

-Bonnie

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, November 01, 2010 1:28 PM
To: NT System Admin Issues
Subject: Re: A real puzzler...

Here's what I see so far today after going to the control panel and
selecting Show hidden devices - I don't think I'm seeing any ghost
NICs:

DC in AU office (Dell 1850 - seems to be replying to ARP for
192.168.61.31, but is 192.168.61.30):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   Intel(R) Pro/1000 MT Network Connection #2 (disabled - this is the
one that picked up a DHCP address when plugged in)
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

VM (on ESXi4 box) in AU office (refuses to accept 192.168.61.30, says
another machine has IP address):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

VM (on ESX 3.5 box) in US office, has same MAC as DC in AU office.
Address is 192.168.10.82, has never had a 61.0/24 address, and isn't
seeing any ARP requests for it:
   Direct Parallel
   VMWare Accelerated AMD PCNet Adapter
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

I'm thinking of standing up a small XP VM, and assigning it the
problematic address, and see who answers.

Kurt

On Sat, Oct 30, 2010 at 09:26, Michael B. Smith mich...@smithcons.com wrote:
 Kurt -

 In device manager is an option to show hidden devices. Enable that, both on 
 the new server there and the old server there and see if you have a 
 ghost NIC. I bet you will. And that ghost NIC probably has the problem IP 
 address.

 Remove the ghost NIC and you'll remove the problem.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 
 From: Ralph Smith [...@gatewayindustries.org]
 Sent: Saturday, October 30, 2010 12:22 PM
 To: NT System Admin Issues
 Subject: RE: A real puzzler...

 Do you have an AV application on the server?  The reason I ask is I had
 some servers that exibited the exact symptoms you are describing after
 installing VIPRE Premium on them.  Removing VIPRE solved the problem.




 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, October 30, 2010 1:49 AM
 To: NT System Admin Issues
 Subject: A real puzzler...

 All,

 I'm in the US, and have a problem in our AU office that I'm having
 difficulty wrapping my brain around. I have a theory, but it is still a
 strange situation, and any feedback anyone can provide would be
 appreciated.

 The AU office has a server, which I've just recently stood up, using an
 address assigned by DHCP. This is not ideal, obviously, but the thing
 refuses to take the static IP address that it's slated to get
 (192.168.61.30.) It's a VM on a new ESXi server.

 When I try to assign it the static address, it keeps getting an error
 message that another machine has the address.

 However, when I ping the IP address that the machine refuses to use, I
 get no answer.

 When I use netmon on the VM in the AU office to capture ARP traffic, I
 get a MAC address that's for the DC. However, the DC has never had
 192.168.61.30 - it's been 192.168.61.31 all its life in the AU office.

 I've even fired up regedit on the DC to search for the IP address, and
 all I'm showing is the one it's supposed to have - 192.168.61.31

 I'm more than a little baffled by this one.

 One thing I should note, just because: The DC in the AU office is a
 machine that had been used in the US office about two years ago. We did
 a P2V on it, and the VM from that still lives on in the US office.
 They do share a MAC address (I don't know why, as I would have expected
 the the MAC to change when it got the virtual NIC), but AFAICT this
 shouldn't make a difference, since they are in different subnets
 entirely, with different addresses.

 Anyone have thoughts on this?

 Kurt

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 Confidentiality Notice:

 --



 This communication, including any attachments, may contain confidential 
 information and is intended only for the individual or entity to whom it is 

Authentication

2010-11-01 Thread Jim Dandy
I just created an AD 2008 forest for my church.  Most of the computers
there are XP Home edition.  I have created domain accounts in the AD
forest with the same user name and password as they have on their XP
Home system.  Most of them can use domain resources without any
authentication to the server.  They just log on to their computer and it
works.  There are two computers where this is not the case.  After
logging on to XP, if they click Start | Run and type in \\server
file:///\\server  it prompts for a username and password.  You can
type in the same username and password that you used to log on to the
computer and you can then use resources on the server.  Can anyone
suggest why the same username  password works on some computers but not
others?

 

Thanks for your help.

 

Curt Finley

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: A real puzzler...

2010-11-01 Thread Kurt Buff
Yup - no ghosted NICs.

On Mon, Nov 1, 2010 at 13:39, Miller Bonnie L.
mille...@mukilteo.wednet.edu wrote:
 Did you run the command sequence first?  You won't see them without doing 
 that.  Anything ghosted will have a bit of a grayed-out appearance:

 Run cmd as administrator and type
        set devmgr_show_nonpresent_devices=1    enter
        devmgmt.msc             enter

 When device manager opens, select to show hidden devices.

 -Bonnie

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Monday, November 01, 2010 1:28 PM
 To: NT System Admin Issues
 Subject: Re: A real puzzler...

 Here's what I see so far today after going to the control panel and
 selecting Show hidden devices - I don't think I'm seeing any ghost
 NICs:

 DC in AU office (Dell 1850 - seems to be replying to ARP for
 192.168.61.31, but is 192.168.61.30):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   Intel(R) Pro/1000 MT Network Connection #2 (disabled - this is the
 one that picked up a DHCP address when plugged in)
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESXi4 box) in AU office (refuses to accept 192.168.61.30, says
 another machine has IP address):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESX 3.5 box) in US office, has same MAC as DC in AU office.
 Address is 192.168.10.82, has never had a 61.0/24 address, and isn't
 seeing any ARP requests for it:
   Direct Parallel
   VMWare Accelerated AMD PCNet Adapter
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 I'm thinking of standing up a small XP VM, and assigning it the
 problematic address, and see who answers.

 Kurt

 On Sat, Oct 30, 2010 at 09:26, Michael B. Smith mich...@smithcons.com wrote:
 Kurt -

 In device manager is an option to show hidden devices. Enable that, both 
 on the new server there and the old server there and see if you have a 
 ghost NIC. I bet you will. And that ghost NIC probably has the problem IP 
 address.

 Remove the ghost NIC and you'll remove the problem.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 
 From: Ralph Smith [...@gatewayindustries.org]
 Sent: Saturday, October 30, 2010 12:22 PM
 To: NT System Admin Issues
 Subject: RE: A real puzzler...

 Do you have an AV application on the server?  The reason I ask is I had
 some servers that exibited the exact symptoms you are describing after
 installing VIPRE Premium on them.  Removing VIPRE solved the problem.




 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, October 30, 2010 1:49 AM
 To: NT System Admin Issues
 Subject: A real puzzler...

 All,

 I'm in the US, and have a problem in our AU office that I'm having
 difficulty wrapping my brain around. I have a theory, but it is still a
 strange situation, and any feedback anyone can provide would be
 appreciated.

 The AU office has a server, which I've just recently stood up, using an
 address assigned by DHCP. This is not ideal, obviously, but the thing
 refuses to take the static IP address that it's slated to get
 (192.168.61.30.) It's a VM on a new ESXi server.

 When I try to assign it the static address, it keeps getting an error
 message that another machine has the address.

 However, when I ping the IP address that the machine refuses to use, I
 get no answer.

 When I use netmon on the VM in the AU office to capture ARP traffic, I
 get a MAC address that's for the DC. However, the DC has never had
 192.168.61.30 - it's been 192.168.61.31 all its life in the AU office.

 I've even fired up regedit on the DC to search for the IP address, and
 all I'm showing is the one it's supposed to have - 192.168.61.31

 I'm more than a little baffled by this one.

 One thing I should note, just because: The DC in the AU office is a
 machine that had been used in the US office about two years ago. We did
 a P2V on it, and the VM from that still lives on in the US office.
 They do share a MAC address (I don't know why, as I would have expected
 the the MAC to change when it got the virtual NIC), but AFAICT this
 shouldn't make a difference, since they are in different subnets
 entirely, with different addresses.

 Anyone have thoughts on this?

 Kurt

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 Confidentiality Notice:

 --



 This communication, 

Re: A real puzzler...

2010-11-01 Thread Kurt Buff
BTW - I don't think I mentioned it, but all of the Windows boxes are
Win2k3 R2 fully patched.

On Mon, Nov 1, 2010 at 13:48, Kurt Buff kurt.b...@gmail.com wrote:
 Yup - no ghosted NICs.

 On Mon, Nov 1, 2010 at 13:39, Miller Bonnie L.
 mille...@mukilteo.wednet.edu wrote:
 Did you run the command sequence first?  You won't see them without doing 
 that.  Anything ghosted will have a bit of a grayed-out appearance:

 Run cmd as administrator and type
        set devmgr_show_nonpresent_devices=1    enter
        devmgmt.msc             enter

 When device manager opens, select to show hidden devices.

 -Bonnie

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Monday, November 01, 2010 1:28 PM
 To: NT System Admin Issues
 Subject: Re: A real puzzler...

 Here's what I see so far today after going to the control panel and
 selecting Show hidden devices - I don't think I'm seeing any ghost
 NICs:

 DC in AU office (Dell 1850 - seems to be replying to ARP for
 192.168.61.31, but is 192.168.61.30):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   Intel(R) Pro/1000 MT Network Connection #2 (disabled - this is the
 one that picked up a DHCP address when plugged in)
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESXi4 box) in AU office (refuses to accept 192.168.61.30, says
 another machine has IP address):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESX 3.5 box) in US office, has same MAC as DC in AU office.
 Address is 192.168.10.82, has never had a 61.0/24 address, and isn't
 seeing any ARP requests for it:
   Direct Parallel
   VMWare Accelerated AMD PCNet Adapter
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 I'm thinking of standing up a small XP VM, and assigning it the
 problematic address, and see who answers.

 Kurt

 On Sat, Oct 30, 2010 at 09:26, Michael B. Smith mich...@smithcons.com 
 wrote:
 Kurt -

 In device manager is an option to show hidden devices. Enable that, both 
 on the new server there and the old server there and see if you have a 
 ghost NIC. I bet you will. And that ghost NIC probably has the problem IP 
 address.

 Remove the ghost NIC and you'll remove the problem.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 
 From: Ralph Smith [...@gatewayindustries.org]
 Sent: Saturday, October 30, 2010 12:22 PM
 To: NT System Admin Issues
 Subject: RE: A real puzzler...

 Do you have an AV application on the server?  The reason I ask is I had
 some servers that exibited the exact symptoms you are describing after
 installing VIPRE Premium on them.  Removing VIPRE solved the problem.




 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, October 30, 2010 1:49 AM
 To: NT System Admin Issues
 Subject: A real puzzler...

 All,

 I'm in the US, and have a problem in our AU office that I'm having
 difficulty wrapping my brain around. I have a theory, but it is still a
 strange situation, and any feedback anyone can provide would be
 appreciated.

 The AU office has a server, which I've just recently stood up, using an
 address assigned by DHCP. This is not ideal, obviously, but the thing
 refuses to take the static IP address that it's slated to get
 (192.168.61.30.) It's a VM on a new ESXi server.

 When I try to assign it the static address, it keeps getting an error
 message that another machine has the address.

 However, when I ping the IP address that the machine refuses to use, I
 get no answer.

 When I use netmon on the VM in the AU office to capture ARP traffic, I
 get a MAC address that's for the DC. However, the DC has never had
 192.168.61.30 - it's been 192.168.61.31 all its life in the AU office.

 I've even fired up regedit on the DC to search for the IP address, and
 all I'm showing is the one it's supposed to have - 192.168.61.31

 I'm more than a little baffled by this one.

 One thing I should note, just because: The DC in the AU office is a
 machine that had been used in the US office about two years ago. We did
 a P2V on it, and the VM from that still lives on in the US office.
 They do share a MAC address (I don't know why, as I would have expected
 the the MAC to change when it got the virtual NIC), but AFAICT this
 shouldn't make a difference, since they are in different subnets
 entirely, with different addresses.

 Anyone have thoughts on this?

 Kurt

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an 

Re: Authentication

2010-11-01 Thread Andrew S. Baker
What's different about the machines where this isn't working?

Is the case of those passwords identical to what you think it should be?

What are they using for DNS?


*ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker
*Exploiting Technology for Business Advantage...*
* *



On Mon, Nov 1, 2010 at 4:47 PM, Jim Dandy jda...@asmail.ucdavis.edu wrote:

 I just created an AD 2008 forest for my church.  Most of the computers
 there are XP Home edition.  I have created domain accounts in the AD forest
 with the same user name and password as they have on their XP Home system.
 Most of them can use domain resources without any authentication to the
 server.  They just log on to their computer and it works.  There are two
 computers where this is not the case.  After logging on to XP, if they click
 Start | Run and type in \\server it prompts for a username and password.
 You can type in the same username and password that you used to log on to
 the computer and you can then use resources on the server.  Can anyone
 suggest why the same username  password works on some computers but not
 others?



 Thanks for your help.



 Curt Finley



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Outlook Weidness HELP!!

2010-11-01 Thread Jonathan Link
Using Vipre?  It causes most of my odd problems with Outlook.

On Monday, November 1, 2010, Raper, Jonathan - Eagle
jra...@eaglemds.com wrote:








 Questions:


 What version of Outlook?
 Are you using it to connect to exchange or to POP accounts?



 Jonathan L. Raper, A+, MCSA, MCSE
 Technology Coordinator
 Eagle Physicians  Associates, PA
 jra...@eaglemds.com
 www.eaglemds.com






 From: Dave Vantine [mailto:dvant...@gmail.com]

 Sent: Monday, November 01, 2010 3:14 PM
 To: NT System Admin Issues
 Subject: Outlook Weidness HELP!!



 I am hoping someone can offer some suggestions to a very weird Outlook 
 problem I am having. When I open Outlook the performance is fine and I can 
 change from different
  folders I have and they open each folder immediately. As time goes by 
 changing from 1 folder to another gets slower and slower where it can take 
 upwards of 60 seconds to view the contents of a different folder. I have 
 tried this in both cached mode and no-cached
  mode without much differencece. I get no response or the message that 
 Outlook is not responding though there is not a lot of CPU activity during 
 this. If I close Outlook it can take upwards of 60 seconds for the actual 
 Outlook*32 process to close down. Once
  it is closed if I reopen it everything is speedy for a while but then begins 
 getting slower and slower.





 I deleted all of the outlook .dat files but this does not seemed to have made 
 any differences. I have removed most of the Outlook add-ins also without any 
 changes to
  the behavior. My Outlook is pretty much unusable after it has been running 
 for 30 minutes to an hour.





 --

 Thanks
 Dave Vantine

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 Any medical information contained in this electronic message is CONFIDENTIAL 
 and privileged. It is unlawful for unauthorized persons to view, copy, 
 disclose, or disseminate CONFIDENTIAL information. This electronic
  message may contain information that is confidential and/or legally 
 privileged. It is intended only for the use of the individual(s) and/or 
 entity named as recipients in the message. If you are not an intended 
 recipient of this message, please notify the sender
  immediately and delete this material from your computer. Do not deliver, 
 distribute or copy this message, and do not disclose its contents or take any 
 action in reliance on the information that it contains.


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: A real puzzler...

2010-11-01 Thread Miller Bonnie L .
Have you checked WINS/Lmhosts for duplicates or static entries?

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, November 01, 2010 1:54 PM
To: NT System Admin Issues
Subject: Re: A real puzzler...

BTW - I don't think I mentioned it, but all of the Windows boxes are
Win2k3 R2 fully patched.

On Mon, Nov 1, 2010 at 13:48, Kurt Buff kurt.b...@gmail.com wrote:
 Yup - no ghosted NICs.

 On Mon, Nov 1, 2010 at 13:39, Miller Bonnie L.
 mille...@mukilteo.wednet.edu wrote:
 Did you run the command sequence first?  You won't see them without doing 
 that.  Anything ghosted will have a bit of a grayed-out appearance:

 Run cmd as administrator and type
        set devmgr_show_nonpresent_devices=1    enter
        devmgmt.msc             enter

 When device manager opens, select to show hidden devices.

 -Bonnie

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Monday, November 01, 2010 1:28 PM
 To: NT System Admin Issues
 Subject: Re: A real puzzler...

 Here's what I see so far today after going to the control panel and
 selecting Show hidden devices - I don't think I'm seeing any ghost
 NICs:

 DC in AU office (Dell 1850 - seems to be replying to ARP for
 192.168.61.31, but is 192.168.61.30):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   Intel(R) Pro/1000 MT Network Connection #2 (disabled - this is the
 one that picked up a DHCP address when plugged in)
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESXi4 box) in AU office (refuses to accept 192.168.61.30, says
 another machine has IP address):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESX 3.5 box) in US office, has same MAC as DC in AU office.
 Address is 192.168.10.82, has never had a 61.0/24 address, and isn't
 seeing any ARP requests for it:
   Direct Parallel
   VMWare Accelerated AMD PCNet Adapter
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 I'm thinking of standing up a small XP VM, and assigning it the
 problematic address, and see who answers.

 Kurt

 On Sat, Oct 30, 2010 at 09:26, Michael B. Smith mich...@smithcons.com 
 wrote:
 Kurt -

 In device manager is an option to show hidden devices. Enable that, both 
 on the new server there and the old server there and see if you have a 
 ghost NIC. I bet you will. And that ghost NIC probably has the problem IP 
 address.

 Remove the ghost NIC and you'll remove the problem.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 
 From: Ralph Smith [...@gatewayindustries.org]
 Sent: Saturday, October 30, 2010 12:22 PM
 To: NT System Admin Issues
 Subject: RE: A real puzzler...

 Do you have an AV application on the server?  The reason I ask is I had
 some servers that exibited the exact symptoms you are describing after
 installing VIPRE Premium on them.  Removing VIPRE solved the problem.




 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, October 30, 2010 1:49 AM
 To: NT System Admin Issues
 Subject: A real puzzler...

 All,

 I'm in the US, and have a problem in our AU office that I'm having
 difficulty wrapping my brain around. I have a theory, but it is still a
 strange situation, and any feedback anyone can provide would be
 appreciated.

 The AU office has a server, which I've just recently stood up, using an
 address assigned by DHCP. This is not ideal, obviously, but the thing
 refuses to take the static IP address that it's slated to get
 (192.168.61.30.) It's a VM on a new ESXi server.

 When I try to assign it the static address, it keeps getting an error
 message that another machine has the address.

 However, when I ping the IP address that the machine refuses to use, I
 get no answer.

 When I use netmon on the VM in the AU office to capture ARP traffic, I
 get a MAC address that's for the DC. However, the DC has never had
 192.168.61.30 - it's been 192.168.61.31 all its life in the AU office.

 I've even fired up regedit on the DC to search for the IP address, and
 all I'm showing is the one it's supposed to have - 192.168.61.31

 I'm more than a little baffled by this one.

 One thing I should note, just because: The DC in the AU office is a
 machine that had been used in the US office about two years ago. We did
 a P2V on it, and the VM from that still lives on in the US office.
 They do share a MAC address (I don't know why, as I would have expected
 the the MAC to change when it got the virtual NIC), but AFAICT this
 shouldn't make a difference, since they are in different subnets
 entirely, with different addresses.

 Anyone have thoughts on this?

 Kurt

 ~ 

RE: Authentication

2010-11-01 Thread Jim Dandy
I have no idea what the difference is.  That's why I'm asking the
question.  Perhaps there is some registry (or other type) setting that
I'm unaware of that could be affecting this?

 

I'm not sure what your second question it.  The usernames and passwords
are the same on both the domain and the local machine.

 

I'm using the AD integrated DNS.

 

Curt

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Monday, November 01, 2010 1:56 PM
To: NT System Admin Issues
Subject: Re: Authentication

 

What's different about the machines where this isn't working?

 

Is the case of those passwords identical to what you think it should be?

 

What are they using for DNS?


 

ASB (My XeeSM Profile) http://XeeSM.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 





On Mon, Nov 1, 2010 at 4:47 PM, Jim Dandy jda...@asmail.ucdavis.edu
wrote:

I just created an AD 2008 forest for my church.  Most of the computers
there are XP Home edition.  I have created domain accounts in the AD
forest with the same user name and password as they have on their XP
Home system.  Most of them can use domain resources without any
authentication to the server.  They just log on to their computer and it
works.  There are two computers where this is not the case.  After
logging on to XP, if they click Start | Run and type in \\server
file:///\\server  it prompts for a username and password.  You can
type in the same username and password that you used to log on to the
computer and you can then use resources on the server.  Can anyone
suggest why the same username  password works on some computers but not
others?

 

Thanks for your help.

 

Curt Finley

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Authentication

2010-11-01 Thread Carl Houseman
Is it possible that these two computers had previously connected to this
server with a different username/password, and saved the credentials, and
those credentials no longer work?   Even if you don't think so, check it -
Start/Run control userpasswords2, on the Advanced tab click Manage
passwords.

 

Carl

 

From: Jim Dandy [mailto:jda...@asmail.ucdavis.edu] 
Sent: Monday, November 01, 2010 4:48 PM
To: NT System Admin Issues
Subject: Authentication

 

I just created an AD 2008 forest for my church.  Most of the computers there
are XP Home edition.  I have created domain accounts in the AD forest with
the same user name and password as they have on their XP Home system.  Most
of them can use domain resources without any authentication to the server.
They just log on to their computer and it works.  There are two computers
where this is not the case.  After logging on to XP, if they click Start |
Run and type in \\server file:///\\server  it prompts for a username and
password.  You can type in the same username and password that you used to
log on to the computer and you can then use resources on the server.  Can
anyone suggest why the same username  password works on some computers but
not others?

 

Thanks for your help.

 

Curt Finley


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Question on Granting service account read access to Domain Controller Eventlogs

2010-11-01 Thread Free, Bob
LOL. Leave it to Symantec to be different. I heard a rumor I may be
getting first-hand experience with it so I may want to pick your brain J

 

Rgds

 

--bob

 

From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Sunday, October 31, 2010 12:36 AM
To: NT System Admin Issues
Subject: RE: Question on Granting service account read access to Domain
Controller Eventlogs

 

Hi,

 

We're implementing SSIM (the Symantec product) and it pulls logs.
Apparently it scales...

 

Cheers

Ken

 

From: Free, Bob [mailto:r...@pge.com] 
Sent: Friday, 29 October 2010 11:09 PM
To: NT System Admin Issues
Subject: RE: Question on Granting service account read access to Domain
Controller Eventlogs

 

I have learned here over the years not to be overly presumptive hence
the caveat about not understanding the requirements which were a little
vague to me, particularly the fact that I didn't see an agent mentioned
J

 

That's also the opposite of the SIEM solutions and MSSPs I've ever
worked with as well, IME the endpoints push to the collector/aggregator
and as I said, I don't envision how an aggregator pulling logs scales
worth a darn so I asked the question. 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: A real puzzler...

2010-11-01 Thread Kurt Buff
I've checked WINS - that IP address doesn't exist in the WINS tables.

We don't use LMHOSTS - I disable that on all servers - I doubt anyone
has it on a workstation, either, but I don't have control over that.

Also, I've lied a bit, because I've been more than a bit distracted today...

There is a RAS Async Adapter that appears ghosted on each machine, but
I can't remove it - it says that it's necessary to boot the machine.

And, mea culpa, I tried again on all of the machines, and found that
there were two ghosted NICs on the VM in the US office, and
uninstalled them, but have not rebooted the US VM yet. That, so far,
hasn't solved the issue. I will see if I can reboot the VM in the US
office this evening. If that doesn't solve it, I will also change the
MAC address on the US VM, though as I've said before I don't see that
a duplicate MAC address on separate subnets should be a problem.

Kurt

On Mon, Nov 1, 2010 at 14:04, Miller Bonnie L.
mille...@mukilteo.wednet.edu wrote:
 Have you checked WINS/Lmhosts for duplicates or static entries?

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Monday, November 01, 2010 1:54 PM
 To: NT System Admin Issues
 Subject: Re: A real puzzler...

 BTW - I don't think I mentioned it, but all of the Windows boxes are
 Win2k3 R2 fully patched.

 On Mon, Nov 1, 2010 at 13:48, Kurt Buff kurt.b...@gmail.com wrote:
 Yup - no ghosted NICs.

 On Mon, Nov 1, 2010 at 13:39, Miller Bonnie L.
 mille...@mukilteo.wednet.edu wrote:
 Did you run the command sequence first?  You won't see them without doing 
 that.  Anything ghosted will have a bit of a grayed-out appearance:

 Run cmd as administrator and type
        set devmgr_show_nonpresent_devices=1    enter
        devmgmt.msc             enter

 When device manager opens, select to show hidden devices.

 -Bonnie

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Monday, November 01, 2010 1:28 PM
 To: NT System Admin Issues
 Subject: Re: A real puzzler...

 Here's what I see so far today after going to the control panel and
 selecting Show hidden devices - I don't think I'm seeing any ghost
 NICs:

 DC in AU office (Dell 1850 - seems to be replying to ARP for
 192.168.61.31, but is 192.168.61.30):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   Intel(R) Pro/1000 MT Network Connection #2 (disabled - this is the
 one that picked up a DHCP address when plugged in)
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESXi4 box) in AU office (refuses to accept 192.168.61.30, says
 another machine has IP address):
   Direct Parallel
   Intel(R) Pro/1000 MT Network Connection
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 VM (on ESX 3.5 box) in US office, has same MAC as DC in AU office.
 Address is 192.168.10.82, has never had a 61.0/24 address, and isn't
 seeing any ARP requests for it:
   Direct Parallel
   VMWare Accelerated AMD PCNet Adapter
   WAN Miniport (IP)
   WAN Miniport (L2TP)
   WAN Miniport (Network Monitor)
   WAN Miniport (PPPOE)
   WAN Miniport (PPTP)

 I'm thinking of standing up a small XP VM, and assigning it the
 problematic address, and see who answers.

 Kurt

 On Sat, Oct 30, 2010 at 09:26, Michael B. Smith mich...@smithcons.com 
 wrote:
 Kurt -

 In device manager is an option to show hidden devices. Enable that, both 
 on the new server there and the old server there and see if you have a 
 ghost NIC. I bet you will. And that ghost NIC probably has the problem 
 IP address.

 Remove the ghost NIC and you'll remove the problem.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 
 From: Ralph Smith [...@gatewayindustries.org]
 Sent: Saturday, October 30, 2010 12:22 PM
 To: NT System Admin Issues
 Subject: RE: A real puzzler...

 Do you have an AV application on the server?  The reason I ask is I had
 some servers that exibited the exact symptoms you are describing after
 installing VIPRE Premium on them.  Removing VIPRE solved the problem.




 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, October 30, 2010 1:49 AM
 To: NT System Admin Issues
 Subject: A real puzzler...

 All,

 I'm in the US, and have a problem in our AU office that I'm having
 difficulty wrapping my brain around. I have a theory, but it is still a
 strange situation, and any feedback anyone can provide would be
 appreciated.

 The AU office has a server, which I've just recently stood up, using an
 address assigned by DHCP. This is not ideal, obviously, but the thing
 refuses to take the static IP address that it's slated to get
 (192.168.61.30.) It's a VM on a new ESXi server.

 When I try to assign it the static address, it keeps getting an error
 message that another machine has 

Re: Question on Granting service account read access to Domain Controller Eventlogs

2010-11-01 Thread Sean Martin
Ugh, our Information Security team is implementing SSIM right now. I'm not
directly involved, other than having to provide upwards of 10TB for expected
storage requirements. I just shudder at anything branded Symantec
anymore

- Sean

On Mon, Nov 1, 2010 at 3:02 PM, Free, Bob r...@pge.com wrote:

  LOL. Leave it to Symantec to be different. I heard a rumor I may be
 getting first-hand experience with it so I may want to pick your brain J



 Rgds



 --bob



 *From:* Ken Schaefer [mailto:k...@adopenstatic.com]
 *Sent:* Sunday, October 31, 2010 12:36 AM

 *To:* NT System Admin Issues
 *Subject:* RE: Question on Granting service account read access to Domain
 Controller Eventlogs



 Hi,



 We’re implementing SSIM (the Symantec product) and it pulls logs.
 Apparently it scales…



 Cheers

 Ken



 *From:* Free, Bob [mailto:r...@pge.com]
 *Sent:* Friday, 29 October 2010 11:09 PM
 *To:* NT System Admin Issues
 *Subject:* RE: Question on Granting service account read access to Domain
 Controller Eventlogs



 I have learned here over the years not to be overly presumptive hence the
 caveat about not understanding the requirements which were a little vague to
 me, particularly the fact that I didn’t see an agent mentioned J



 That’s also the opposite of the SIEM solutions and MSSPs I’ve ever worked
 with as well, IME the endpoints push to the collector/aggregator and as I
 said, I don’t envision how an aggregator pulling logs scales worth a darn so
 I asked the question.



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Question on Granting service account read access to Domain Controller Eventlogs

2010-11-01 Thread Brian Desmond
But just look at the upsell opportunities. Now they're going to have to sell 
you something to manage that storage.

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132

From: Sean Martin [mailto:seanmarti...@gmail.com]
Sent: Monday, November 01, 2010 6:27 PM
To: NT System Admin Issues
Subject: Re: Question on Granting service account read access to Domain 
Controller Eventlogs

Ugh, our Information Security team is implementing SSIM right now. I'm not 
directly involved, other than having to provide upwards of 10TB for expected 
storage requirements. I just shudder at anything branded Symantec anymore

- Sean
On Mon, Nov 1, 2010 at 3:02 PM, Free, Bob r...@pge.commailto:r...@pge.com 
wrote:
LOL. Leave it to Symantec to be different. I heard a rumor I may be getting 
first-hand experience with it so I may want to pick your brain :)

Rgds

--bob

From: Ken Schaefer [mailto:k...@adopenstatic.commailto:k...@adopenstatic.com]
Sent: Sunday, October 31, 2010 12:36 AM

To: NT System Admin Issues
Subject: RE: Question on Granting service account read access to Domain 
Controller Eventlogs

Hi,

We're implementing SSIM (the Symantec product) and it pulls logs. Apparently it 
scales...

Cheers
Ken

From: Free, Bob [mailto:r...@pge.commailto:r...@pge.com]
Sent: Friday, 29 October 2010 11:09 PM
To: NT System Admin Issues
Subject: RE: Question on Granting service account read access to Domain 
Controller Eventlogs

I have learned here over the years not to be overly presumptive hence the 
caveat about not understanding the requirements which were a little vague to 
me, particularly the fact that I didn't see an agent mentioned :)

That's also the opposite of the SIEM solutions and MSSPs I've ever worked with 
as well, IME the endpoints push to the collector/aggregator and as I said, I 
don't envision how an aggregator pulling logs scales worth a darn so I asked 
the question.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Virtual Machine Disk Configuration

2010-11-01 Thread Mark Milo
Hi - I am having issues with disk busy' on my virtual server host. The host is 
a DL 580 connected via fiber to an EVA 4400 SAN. I understand that guest VM's 
should have disk layouts as per an equivalent physical machine but is it best 
practice to have a separate LUN per guest VM? If so what should the max 
utilization of the disk on that LUN be?
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Virtual Machine Disk Configuration

2010-11-01 Thread Richard Stovall
On Mon, Nov 1, 2010 at 8:33 PM, Mark Milo markmilo2...@gmail.com wrote:

 Hi - I am having issues with disk busy' on my virtual server host. The
 host is a DL 580 connected via fiber to an EVA 4400 SAN.


Where do you see this message?  On the VM?



 I understand that guest VM's should have disk layouts as per an equivalent
 physical machine...


I don't really know what you mean by that.  Can you elaborate a bit?



 ...but is it best practice to have a separate LUN per guest VM?


Not that I've ever heard of.   You'd have a management nightmare on your
hands pretty quickly if you had a large number of VMs.


If so what should the max utilization of the disk on that LUN be?


I don't know of a hard and fast number/rule, but if you're using
snapshot-based backup method (such as VCB) you definitely need free space on
the LUNs for the snapshots to grow until the backup is finished and the
snapshots can be eliminated.

What virtualization platform are you running?  What version?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Virtual Machine Disk Configuration

2010-11-01 Thread Mark Milo
The host is Windows 2008 R2 running Hyper V. The performance is monitored
via UPTIME monitoring software but I see similar high reading using perfmon
(%disk time).  Don't see any error messages at high utilization but the
exchange 2003 server is responding poorly when disk is busy. There are  15
guest machines on this particular host but most of them dont use too much in
the way of resources.

On Tue, Nov 2, 2010 at 11:51 AM, Richard Stovall rich...@gmail.com wrote:

 On Mon, Nov 1, 2010 at 8:33 PM, Mark Milo markmilo2...@gmail.com wrote:

 Hi - I am having issues with disk busy' on my virtual server host. The
 host is a DL 580 connected via fiber to an EVA 4400 SAN.


 Where do you see this message?  On the VM?



 I understand that guest VM's should have disk layouts as per an equivalent
 physical machine...


 I don't really know what you mean by that.  Can you elaborate a bit?



 ...but is it best practice to have a separate LUN per guest VM?


 Not that I've ever heard of.   You'd have a management nightmare on your
 hands pretty quickly if you had a large number of VMs.


 If so what should the max utilization of the disk on that LUN be?


 I don't know of a hard and fast number/rule, but if you're using
 snapshot-based backup method (such as VCB) you definitely need free space on
 the LUNs for the snapshots to grow until the backup is finished and the
 snapshots can be eliminated.

 What virtualization platform are you running?  What version?


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Virtual Machine Disk Configuration

2010-11-01 Thread Sean Martin
We'd need a lot more info. Start with your disk configuration. How many disks 
make up the storage pool or raid group the exchange lun is allocated from? Are 
there other luns allocated from the same pool? How many? Which exchange 
resources reside on the lun (stores, logs, etc.)?

Disk busy warnings buy themselves don't hold much weight, unless of course 
there are noticeable performances issues, which you alluded to. You'll want to 
capture disk queue and disk latency stats ( avg disk queue length and avg disk 
sec/reads and writes). Avg queue depth should below X (where X equals the 
number of physical disks. Read/write times should avg below 20ms and not spike 
above 50ms. 

I'd also recommend running the exbpa and the troubleshooting assistant. 

If you can gather I/O stats you may be able to determine if the disks can 
handle the load. If it doesn't appear Exchange is stressing your resources, you 
may need your SAN monitoring tools to determine if total I/O (assuming multiple 
luns share the same disks) are more than the disks can handle. I'm not familiar 
with EVAs, but overloading disks in a SAN can lead to cache flushing which 
could affect performance of the array itself.

- Sean


On Nov 1, 2010, at 5:08 PM, Mark Milo markmilo2...@gmail.com wrote:

 The host is Windows 2008 R2 running Hyper V. The performance is monitored via 
 UPTIME monitoring software but I see similar high reading using perfmon 
 (%disk time).  Don't see any error messages at high utilization but the 
 exchange 2003 server is responding poorly when disk is busy. There are  15 
 guest machines on this particular host but most of them dont use too much in 
 the way of resources.
 
 On Tue, Nov 2, 2010 at 11:51 AM, Richard Stovall rich...@gmail.com wrote:
 On Mon, Nov 1, 2010 at 8:33 PM, Mark Milo markmilo2...@gmail.com wrote:
 Hi - I am having issues with disk busy' on my virtual server host. The host 
 is a DL 580 connected via fiber to an EVA 4400 SAN.
 
 Where do you see this message?  On the VM?
 
  
 I understand that guest VM's should have disk layouts as per an equivalent 
 physical machine...
 
 I don't really know what you mean by that.  Can you elaborate a bit?
 
  
 ...but is it best practice to have a separate LUN per guest VM?
 
 Not that I've ever heard of.   You'd have a management nightmare on your 
 hands pretty quickly if you had a large number of VMs.
 
 
 If so what should the max utilization of the disk on that LUN be?
 
 I don't know of a hard and fast number/rule, but if you're using 
 snapshot-based backup method (such as VCB) you definitely need free space on 
 the LUNs for the snapshots to grow until the backup is finished and the 
 snapshots can be eliminated.
 
 What virtualization platform are you running?  What version?
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Virtual Machine Disk Configuration

2010-11-01 Thread Mark Milo
The san has 21 FC disks configured as a raid 5 array. There have two luns
configured from this array. All 15 guest machines are located on one of
these luns (including exchange). The performance hit appears mainly on
exchange but other servers are suffering as well. The interesting thing is
that IOPS for the entire lun holding the 15 VM's is only around 600 at the
time that the disk busy is around 95%. The disk queue for that lun is around
4 - I will need to set up longer term monitoring to get the read/write times
when the disk set gets busy (which is usually first thing in the morning)

On Tue, Nov 2, 2010 at 12:35 PM, Sean Martin seanmarti...@gmail.com wrote:

 We'd need a lot more info. Start with your disk configuration. How many
 disks make up the storage pool or raid group the exchange lun is allocated
 from? Are there other luns allocated from the same pool? How many? Which
 exchange resources reside on the lun (stores, logs, etc.)?

 Disk busy warnings buy themselves don't hold much weight, unless of course
 there are noticeable performances issues, which you alluded to. You'll want
 to capture disk queue and disk latency stats ( avg disk queue length and avg
 disk sec/reads and writes). Avg queue depth should below X (where X equals
 the number of physical disks. Read/write times should avg below 20ms and not
 spike above 50ms.

 I'd also recommend running the exbpa and the troubleshooting assistant.

 If you can gather I/O stats you may be able to determine if the disks can
 handle the load. If it doesn't appear Exchange is stressing your resources,
 you may need your SAN monitoring tools to determine if total I/O (assuming
 multiple luns share the same disks) are more than the disks can handle. I'm
 not familiar with EVAs, but overloading disks in a SAN can lead to cache
 flushing which could affect performance of the array itself.

 - Sean


 On Nov 1, 2010, at 5:08 PM, Mark Milo markmilo2...@gmail.com wrote:

 The host is Windows 2008 R2 running Hyper V. The performance is monitored
 via UPTIME monitoring software but I see similar high reading using perfmon
 (%disk time).  Don't see any error messages at high utilization but the
 exchange 2003 server is responding poorly when disk is busy. There are  15
 guest machines on this particular host but most of them dont use too much in
 the way of resources.

 On Tue, Nov 2, 2010 at 11:51 AM, Richard Stovall  rich...@gmail.com
 rich...@gmail.com wrote:

 On Mon, Nov 1, 2010 at 8:33 PM, Mark Milo  markmilo2...@gmail.com
 markmilo2...@gmail.com wrote:

 Hi - I am having issues with disk busy' on my virtual server host. The
 host is a DL 580 connected via fiber to an EVA 4400 SAN.


 Where do you see this message?  On the VM?



 I understand that guest VM's should have disk layouts as per an
 equivalent physical machine...


 I don't really know what you mean by that.  Can you elaborate a bit?



 ...but is it best practice to have a separate LUN per guest VM?


 Not that I've ever heard of.   You'd have a management nightmare on your
 hands pretty quickly if you had a large number of VMs.


 If so what should the max utilization of the disk on that LUN be?


 I don't know of a hard and fast number/rule, but if you're using
 snapshot-based backup method (such as VCB) you definitely need free space on
 the LUNs for the snapshots to grow until the backup is finished and the
 snapshots can be eliminated.

 What virtualization platform are you running?  What version?


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ 

RE: Virtual Machine Disk Configuration

2010-11-01 Thread Brian Desmond
Is there any sort of utilization stats on the EVA? Frankly I wouldn't expect 21 
spindles RAID5 to perform very well at all with a mixed workload like this.

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132

From: Mark Milo [mailto:markmilo2...@gmail.com]
Sent: Monday, November 01, 2010 9:14 PM
To: NT System Admin Issues
Subject: Re: Virtual Machine Disk Configuration

The san has 21 FC disks configured as a raid 5 array. There have two luns 
configured from this array. All 15 guest machines are located on one of these 
luns (including exchange). The performance hit appears mainly on exchange but 
other servers are suffering as well. The interesting thing is that IOPS for the 
entire lun holding the 15 VM's is only around 600 at the time that the disk 
busy is around 95%. The disk queue for that lun is around 4 - I will need to 
set up longer term monitoring to get the read/write times when the disk set 
gets busy (which is usually first thing in the morning)
On Tue, Nov 2, 2010 at 12:35 PM, Sean Martin 
seanmarti...@gmail.commailto:seanmarti...@gmail.com wrote:
We'd need a lot more info. Start with your disk configuration. How many disks 
make up the storage pool or raid group the exchange lun is allocated from? Are 
there other luns allocated from the same pool? How many? Which exchange 
resources reside on the lun (stores, logs, etc.)?

Disk busy warnings buy themselves don't hold much weight, unless of course 
there are noticeable performances issues, which you alluded to. You'll want to 
capture disk queue and disk latency stats ( avg disk queue length and avg disk 
sec/reads and writes). Avg queue depth should below X (where X equals the 
number of physical disks. Read/write times should avg below 20ms and not spike 
above 50ms.

I'd also recommend running the exbpa and the troubleshooting assistant.

If you can gather I/O stats you may be able to determine if the disks can 
handle the load. If it doesn't appear Exchange is stressing your resources, you 
may need your SAN monitoring tools to determine if total I/O (assuming multiple 
luns share the same disks) are more than the disks can handle. I'm not familiar 
with EVAs, but overloading disks in a SAN can lead to cache flushing which 
could affect performance of the array itself.

- Sean


On Nov 1, 2010, at 5:08 PM, Mark Milo 
markmilo2...@gmail.commailto:markmilo2...@gmail.com wrote:
The host is Windows 2008 R2 running Hyper V. The performance is monitored via 
UPTIME monitoring software but I see similar high reading using perfmon (%disk 
time).  Don't see any error messages at high utilization but the exchange 2003 
server is responding poorly when disk is busy. There are  15 guest machines on 
this particular host but most of them dont use too much in the way of resources.
On Tue, Nov 2, 2010 at 11:51 AM, Richard Stovall 
rich...@gmail.commailto:rich...@gmail.com wrote:
On Mon, Nov 1, 2010 at 8:33 PM, Mark Milo 
markmilo2...@gmail.commailto:markmilo2...@gmail.com wrote:
Hi - I am having issues with disk busy' on my virtual server host. The host is 
a DL 580 connected via fiber to an EVA 4400 SAN.

Where do you see this message?  On the VM?


I understand that guest VM's should have disk layouts as per an equivalent 
physical machine...

I don't really know what you mean by that.  Can you elaborate a bit?


...but is it best practice to have a separate LUN per guest VM?

Not that I've ever heard of.   You'd have a management nightmare on your hands 
pretty quickly if you had a large number of VMs.


If so what should the max utilization of the disk on that LUN be?

I don't know of a hard and fast number/rule, but if you're using snapshot-based 
backup method (such as VCB) you definitely need free space on the LUNs for the 
snapshots to grow until the backup is finished and the snapshots can be 
eliminated.

What virtualization platform are you running?  What version?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: 

Re: Virtual Machine Disk Configuration

2010-11-01 Thread Mark Milo
I don't have stats on the eva performance as yet. What would you suggest the
configuration should be for the main disk array? Just to clarify the disk
pool is Vraid5 while the disks for individual guest VM's have typically been
configured as raid 1 for operating system and log disks and raid 5 for data.

On Tue, Nov 2, 2010 at 2:04 PM, Brian Desmond br...@briandesmond.comwrote:

 *Is there any sort of utilization stats on the EVA? Frankly I wouldn’t
 expect 21 spindles RAID5 to perform very well at all with a mixed workload
 like this. *

 * *

 *Thanks,*

 *Brian Desmond*

 *br...@briandesmond.com*

 * *

 *c   – 312.731.3132*

 * *

 *From:* Mark Milo [mailto:markmilo2...@gmail.com]
 *Sent:* Monday, November 01, 2010 9:14 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Virtual Machine Disk Configuration



 The san has 21 FC disks configured as a raid 5 array. There have two luns
 configured from this array. All 15 guest machines are located on one of
 these luns (including exchange). The performance hit appears mainly on
 exchange but other servers are suffering as well. The interesting thing is
 that IOPS for the entire lun holding the 15 VM's is only around 600 at the
 time that the disk busy is around 95%. The disk queue for that lun is around
 4 - I will need to set up longer term monitoring to get the read/write times
 when the disk set gets busy (which is usually first thing in the morning)

 On Tue, Nov 2, 2010 at 12:35 PM, Sean Martin seanmarti...@gmail.com
 wrote:

 We'd need a lot more info. Start with your disk configuration. How many
 disks make up the storage pool or raid group the exchange lun is allocated
 from? Are there other luns allocated from the same pool? How many? Which
 exchange resources reside on the lun (stores, logs, etc.)?



 Disk busy warnings buy themselves don't hold much weight, unless of course
 there are noticeable performances issues, which you alluded to. You'll want
 to capture disk queue and disk latency stats ( avg disk queue length and avg
 disk sec/reads and writes). Avg queue depth should below X (where X equals
 the number of physical disks. Read/write times should avg below 20ms and not
 spike above 50ms.



 I'd also recommend running the exbpa and the troubleshooting assistant.



 If you can gather I/O stats you may be able to determine if the disks can
 handle the load. If it doesn't appear Exchange is stressing your resources,
 you may need your SAN monitoring tools to determine if total I/O (assuming
 multiple luns share the same disks) are more than the disks can handle. I'm
 not familiar with EVAs, but overloading disks in a SAN can lead to cache
 flushing which could affect performance of the array itself.



 - Sean




 On Nov 1, 2010, at 5:08 PM, Mark Milo markmilo2...@gmail.com wrote:

 The host is Windows 2008 R2 running Hyper V. The performance is monitored
 via UPTIME monitoring software but I see similar high reading using perfmon
 (%disk time).  Don't see any error messages at high utilization but the
 exchange 2003 server is responding poorly when disk is busy. There are  15
 guest machines on this particular host but most of them dont use too much in
 the way of resources.

 On Tue, Nov 2, 2010 at 11:51 AM, Richard Stovall rich...@gmail.com
 wrote:

 On Mon, Nov 1, 2010 at 8:33 PM, Mark Milo markmilo2...@gmail.com wrote:

 Hi - I am having issues with disk busy' on my virtual server host. The
 host is a DL 580 connected via fiber to an EVA 4400 SAN.



 Where do you see this message?  On the VM?





 I understand that guest VM's should have disk layouts as per an equivalent
 physical machine...



 I don't really know what you mean by that.  Can you elaborate a bit?





 ...but is it best practice to have a separate LUN per guest VM?



 Not that I've ever heard of.   You'd have a management nightmare on your
 hands pretty quickly if you had a large number of VMs.





 If so what should the max utilization of the disk on that LUN be?



 I don't know of a hard and fast number/rule, but if you're using
 snapshot-based backup method (such as VCB) you definitely need free space on
 the LUNs for the snapshots to grow until the backup is finished and the
 snapshots can be eliminated.



 What virtualization platform are you running?  What version?





 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that 

Re: Virtual Machine Disk Configuration

2010-11-01 Thread Richard Stovall
On the VMs, are you running multiple disks in guest-OS-based RAID
configurations underneath the EVA's vRAID5 protection, with all the VHDs on
the same LUN?

What is the exact config for the problematic Exchange server?

On Mon, Nov 1, 2010 at 11:25 PM, Mark Milo markmilo2...@gmail.com wrote:

 I don't have stats on the eva performance as yet. What would you suggest
 the configuration should be for the main disk array? Just to clarify the
 disk pool is Vraid5 while the disks for individual guest VM's have typically
 been configured as raid 1 for operating system and log disks and raid 5 for
 data.


 On Tue, Nov 2, 2010 at 2:04 PM, Brian Desmond br...@briandesmond.comwrote:

 *Is there any sort of utilization stats on the EVA? Frankly I wouldn’t
 expect 21 spindles RAID5 to perform very well at all with a mixed workload
 like this. *

 * *

 *Thanks,*

 *Brian Desmond*

 *br...@briandesmond.com*

 * *

 *c   – 312.731.3132*

 * *

 *From:* Mark Milo [mailto:markmilo2...@gmail.com]
 *Sent:* Monday, November 01, 2010 9:14 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Virtual Machine Disk Configuration



 The san has 21 FC disks configured as a raid 5 array. There have two luns
 configured from this array. All 15 guest machines are located on one of
 these luns (including exchange). The performance hit appears mainly on
 exchange but other servers are suffering as well. The interesting thing is
 that IOPS for the entire lun holding the 15 VM's is only around 600 at the
 time that the disk busy is around 95%. The disk queue for that lun is around
 4 - I will need to set up longer term monitoring to get the read/write times
 when the disk set gets busy (which is usually first thing in the morning)

 On Tue, Nov 2, 2010 at 12:35 PM, Sean Martin seanmarti...@gmail.com
 wrote:

 We'd need a lot more info. Start with your disk configuration. How many
 disks make up the storage pool or raid group the exchange lun is allocated
 from? Are there other luns allocated from the same pool? How many? Which
 exchange resources reside on the lun (stores, logs, etc.)?



 Disk busy warnings buy themselves don't hold much weight, unless of course
 there are noticeable performances issues, which you alluded to. You'll want
 to capture disk queue and disk latency stats ( avg disk queue length and avg
 disk sec/reads and writes). Avg queue depth should below X (where X equals
 the number of physical disks. Read/write times should avg below 20ms and not
 spike above 50ms.



 I'd also recommend running the exbpa and the troubleshooting assistant.



 If you can gather I/O stats you may be able to determine if the disks can
 handle the load. If it doesn't appear Exchange is stressing your resources,
 you may need your SAN monitoring tools to determine if total I/O (assuming
 multiple luns share the same disks) are more than the disks can handle. I'm
 not familiar with EVAs, but overloading disks in a SAN can lead to cache
 flushing which could affect performance of the array itself.



 - Sean




 On Nov 1, 2010, at 5:08 PM, Mark Milo markmilo2...@gmail.com wrote:

 The host is Windows 2008 R2 running Hyper V. The performance is monitored
 via UPTIME monitoring software but I see similar high reading using perfmon
 (%disk time).  Don't see any error messages at high utilization but the
 exchange 2003 server is responding poorly when disk is busy. There are  15
 guest machines on this particular host but most of them dont use too much in
 the way of resources.

 On Tue, Nov 2, 2010 at 11:51 AM, Richard Stovall rich...@gmail.com
 wrote:

 On Mon, Nov 1, 2010 at 8:33 PM, Mark Milo markmilo2...@gmail.com wrote:

 Hi - I am having issues with disk busy' on my virtual server host. The
 host is a DL 580 connected via fiber to an EVA 4400 SAN.



 Where do you see this message?  On the VM?





 I understand that guest VM's should have disk layouts as per an equivalent
 physical machine...



 I don't really know what you mean by that.  Can you elaborate a bit?





 ...but is it best practice to have a separate LUN per guest VM?



 Not that I've ever heard of.   You'd have a management nightmare on your
 hands pretty quickly if you had a large number of VMs.





 If so what should the max utilization of the disk on that LUN be?



 I don't know of a hard and fast number/rule, but if you're using
 snapshot-based backup method (such as VCB) you definitely need free space on
 the LUNs for the snapshots to grow until the backup is finished and the
 snapshots can be eliminated.



 What virtualization platform are you running?  What version?





 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~