Are printer-related registry keys are safe to remove?

2011-03-30 Thread James Rankin
There are two Registry keys - *HKCU\Software\Microsoft\Windows
NT\CurrentVersion\Devices\* and *HKCU\Software\Microsoft\Windows
NT\CurrentVersion\PrinterPorts - *that, in a terminal services environment,
seem to fill up with vast amounts of printers, apparently enumerated from
any user that has ever logged on. Now some older pieces of software seem to
look here for their printer settings, to the extent that when there are
approximately 500 entries in there, meaning that the printing from these
apps is very, very slow. According to an MS article these keys are for *user
preferences for print devices in Windows NT 4.0*, so, would I be right in
assuming I could simply remove all entries from these keys at logoff without
causing myself any problems?

TIA,



JR

-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

*IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is confidential,
privileged or unsuitable for overly sensitive persons with low self-esteem,
no sense of humour or irrational religious beliefs. If you are not the
intended recipient, any dissemination, distribution or copying of this email
is not authorised (either explicitly or implicitly) and constitutes an
irritating social faux pas.

Unless the word absquatulation has been used in its correct context
somewhere other than in this warning, it does not have any legal or no
grammatical use and may be ignored. No animals were harmed in the
transmission of this email, although the kelpie next door is living on
borrowed time, let me tell you. Those of you with an overwhelming fear of
the unknown will be gratified to learn that there is no hidden message
revealed by reading this warning backwards, so just ignore that Alert Notice
from Microsoft.

However, by pouring a complete circle of salt around yourself and your
computer you can ensure that no harm befalls you and your pets. If you have
received this email in error, please add some nutmeg and egg whites, whisk
and place in a warm oven for 40 minutes.*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OTish: SSDs and cool PCs

2011-03-30 Thread Paul Gordon
I just recently purchased an OCZ Revodrive (version 1) -
http://www.ocztechnology.com/ocz-revodrive-pci-express-ssd.html 

 

120GB, which is effectively a pair of 60GB SSDs in RAID0... RATED specs are
read 540MB/s, write 480MB/s 75,000 IOPS

 

The newer X2 revision of the card is even faster!! - something like 740MB/s
reads...

 

I can't speak to how much of that *theoretical* performance is actually
achieved in practice, but what I *can* say is that it makes an absolutely
huge difference to startup  app launch speeds... - from power on, my Win 7
Ultimate machine now takes longer to complete the BIOS POST than it does to
run the entire Win7 bootup process to the point of presenting the Press
C-A-D to logon message... somewhere between 15-20 seconds in total (about
8-10 seconds in the BIOS, around 8-10 seconds for boot).

 

The only downside - if there is one - is that AFAIK, no current RAID
solution for SSDs supports TRIM through to the drives, so you have to make
do without it. I did a lot of research because of this issue before I
purchased, and read a lot of other user reviews, tech site reviews etc...
and got the strong impression that overall, these drives really don't seem
to suffer performance degradation over time as a result of the lack of
TRIM... it seems the Sandforce controllers are very strong on their wear
levelling anyway, plus the added expedient of keeping a good portion of that
120GB unused (it's only my C: drive, I have a 1TB HDD as well for bulk
storage)

 

Only time will tell if that turns out to be the case, - but even if it did
degrade, this thing is S fast, that I think even if performance halved
it would still knock the pants of anything else!

 

Paul G.

 

 

From: Sam Cayze [mailto:sca...@gmail.com] 
Sent: 29 March 2011 18:45
To: NT System Admin Issues
Subject: RE: OTish: SSDs and cool PCs

 

40GB at US$89.  Wow.

 

The new SSD doubles sequential write speeds from its second generation
X25-M drive to 220MB/sec sequential writes. The drive simply maintains the
read throughput rate of the X25-M at up to 270 MB/sec

 

Is that pretty good in terms of SSD?  Curious if it's better to go this
route, or get a PCI-X SSD card and forego the disk controller bottleneck.

 

From: Stefan Jafs [mailto:stefan.j...@gmail.com] 
Sent: Tuesday, March 29, 2011 12:34 PM
To: NT System Admin Issues
Subject: Re: OTish: SSDs and cool PCs

 

I guess prices are dropping:

 

http://www.itworldcanada.com/news/intel-doubles-capacity-drops-price-in-ssd-
refresh/142814?sub=29878
http://www.itworldcanada.com/news/intel-doubles-capacity-drops-price-in-ssd
-refresh/142814?sub=29878utm_source=29878utm_medium=entinfrautm_campaign=
enews utm_source=29878utm_medium=entinfrautm_campaign=enews


Stefan

On Tue, Mar 29, 2011 at 12:06 PM, Sam Cayze sca...@gmail.com wrote:

Wow.  I might bite the bullet and buy one.

Looking around, looks like I can get a PCI-X SSD card that is big enough for
a boot drive+my docs for around $200.  I had no idea they were this cheap!

 

From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Monday, March 28, 2011 8:09 PM
To: NT System Admin Issues
Subject: RE: OTish: SSDs and cool PCs

 

Someone opens Windows Media Player / iTunes / Media Monkey. If your music
library is on your SSD, then populating the list of albums and cover art is
near instantaneous. 

Opening the Recent Item in Windows 7 (or the Start menu in previous
versions) is instantaneous

Search in Outlook is instantaneous (as is Windows search)

 

There are many benefits to just putting everything except the most bulky
storage onto an SSD. I even put my testing VMs on SSDs now (if I can)

 

Cheers

Ken

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Monday, 28 March 2011 8:55 PM
To: NT System Admin Issues
Subject: Re: OTish: SSDs and cool PCs

 

I would suspect that those of us on this list aren't the standard consumer.

We tend to fall into two types, those who become Luddites at home, and those
who manage sophisticated infrastructures at home.

I think significant time savings can be gained by having the OS on SSD, the
other stuff doesn't seem to need the same level of speed, but I could be
talking out of my hat.

On Mon, Mar 28, 2011 at 5:37 AM, Ken Schaefer k...@adopenstatic.com wrote:

Fair enough. However it seems that any modern SSD has enough redundancy plus
resiliency to survive tens of years of consumer use.

 

Cheers

Ken

 

From: Rene de Haas [mailto:rene.deh...@gmail.com] 
Sent: Monday, 28 March 2011 5:09 PM 


To: NT System Admin Issues

Subject: Re: OTish: SSDs and cool PCs

 

True, I imagine they are trying to make it last longer by not writing to it
so much.

On Sun, Mar 27, 2011 at 8:50 AM, Ken Schaefer k...@adopenstatic.com wrote:

Why?

 

I'd put as much stuff onto the SSD as you can - the performance difference
between an SSD and a mechanical drive is simply unbelievable.

 

Cheers

Ken

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Friday, 25 

Re: Are printer-related registry keys are safe to remove?

2011-03-30 Thread Ben Scott
On Wed, Mar 30, 2011 at 4:01 AM, James Rankin kz2...@googlemail.com wrote:
 There are two Registry keys - HKCU\Software\Microsoft\Windows
 NT\CurrentVersion\Devices\ and HKCU\Software\Microsoft\Windows
 NT\CurrentVersion\PrinterPorts - that, in a terminal services environment,
 seem to fill up with vast amounts of printers, apparently enumerated from
 any user that has ever logged on.

  Shouldn't anything under HKCU (HKEY_CURRENT_USER) be a per-user
setting, and not from any user who has ever logged on to your Terminal
Server?  Or is everyone logging on under one user account?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Are printer-related registry keys are safe to remove?

2011-03-30 Thread James Rankin
Both those keys just appear to fill up with every printer that has ever
mapped on the Terminal Server, every time it populates. It is full of
printers *from session x* corresponding to other users on the Terminal
Server. The user can't see them in Devices and Printers, but they are all
dropped into these keys.

The sooner I bin these damned roaming profiles the better

On 30 March 2011 11:55, Ben Scott mailvor...@gmail.com wrote:

 On Wed, Mar 30, 2011 at 4:01 AM, James Rankin kz2...@googlemail.com
 wrote:
  There are two Registry keys - HKCU\Software\Microsoft\Windows
  NT\CurrentVersion\Devices\ and HKCU\Software\Microsoft\Windows
  NT\CurrentVersion\PrinterPorts - that, in a terminal services
 environment,
  seem to fill up with vast amounts of printers, apparently enumerated from
  any user that has ever logged on.

   Shouldn't anything under HKCU (HKEY_CURRENT_USER) be a per-user
 setting, and not from any user who has ever logged on to your Terminal
 Server?  Or is everyone logging on under one user account?

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

*IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is confidential,
privileged or unsuitable for overly sensitive persons with low self-esteem,
no sense of humour or irrational religious beliefs. If you are not the
intended recipient, any dissemination, distribution or copying of this email
is not authorised (either explicitly or implicitly) and constitutes an
irritating social faux pas.

Unless the word absquatulation has been used in its correct context
somewhere other than in this warning, it does not have any legal or no
grammatical use and may be ignored. No animals were harmed in the
transmission of this email, although the kelpie next door is living on
borrowed time, let me tell you. Those of you with an overwhelming fear of
the unknown will be gratified to learn that there is no hidden message
revealed by reading this warning backwards, so just ignore that Alert Notice
from Microsoft.

However, by pouring a complete circle of salt around yourself and your
computer you can ensure that no harm befalls you and your pets. If you have
received this email in error, please add some nutmeg and egg whites, whisk
and place in a warm oven for 40 minutes.*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: URGENT: Interrupt chkdsk, not on boot drive - RESOLVED

2011-03-30 Thread Mike Leone
On 3/29/2011 11:49 PM, Richard Stovall wrote:
 Well then,
 
 Good luck tomorrow morning.  I suspect, and hope, that this will all
 have a happy, uneventful ending.

Luckily, it looks like it did ...

It was still going when I got here at 6:30AM (11 hrs later). So I
powered down; went to the SAN interface; deleted the whole drive;
powered backup. Went straight into Windows, no error messages, etc.
Looks like it's processing mail, too (altho with a 12 hour backlog, it
may take a while to clear out the queue).

Haven't looked at Disk Manager yet, or rescanned disks, etc. Waiting for
my boss to come in at 8AM, and then we'll re-create that SAN disk, and
show it to this server.

Thanks everybody for the advice.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
I've got a Win2008 R2 server that has decided that it is a yo-yo, and is
rebooting daily (at different times), sometimes twice within like 20
minutes. In Control Panel, I have Kernel memory dump chosen under
Write debugging information, with the value %SystemRoot%\MEMORY.DMP
(and checked off Overwrite any existing file).

But I never get any dump file - there are no files *.DMP anywhere on the
server. And I don't know why it's not writing one. I want to run one
through the WinDbg debugger, hopefully yo have it point at the problem
(bad device driver, I'm guessing).

The event log only says the previous shutdown was unexpected - never
lists any bugcheck values or anything. So I'm sort of flying blind at
this point.

What would cause the DMP file to never be written? How can I get a DMP
to analyze?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread James Rankin
You sure it's a BSOD? Could be a thermal condition, amongst many other
things. Does it have any ASR values set?

On 30 March 2011 13:37, Mike Leone oozerd...@gmail.com wrote:

 I've got a Win2008 R2 server that has decided that it is a yo-yo, and is
 rebooting daily (at different times), sometimes twice within like 20
 minutes. In Control Panel, I have Kernel memory dump chosen under
 Write debugging information, with the value %SystemRoot%\MEMORY.DMP
 (and checked off Overwrite any existing file).

 But I never get any dump file - there are no files *.DMP anywhere on the
 server. And I don't know why it's not writing one. I want to run one
 through the WinDbg debugger, hopefully yo have it point at the problem
 (bad device driver, I'm guessing).

 The event log only says the previous shutdown was unexpected - never
 lists any bugcheck values or anything. So I'm sort of flying blind at
 this point.

 What would cause the DMP file to never be written? How can I get a DMP
 to analyze?

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

*IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is confidential,
privileged or unsuitable for overly sensitive persons with low self-esteem,
no sense of humour or irrational religious beliefs. If you are not the
intended recipient, any dissemination, distribution or copying of this email
is not authorised (either explicitly or implicitly) and constitutes an
irritating social faux pas.

Unless the word absquatulation has been used in its correct context
somewhere other than in this warning, it does not have any legal or no
grammatical use and may be ignored. No animals were harmed in the
transmission of this email, although the kelpie next door is living on
borrowed time, let me tell you. Those of you with an overwhelming fear of
the unknown will be gratified to learn that there is no hidden message
revealed by reading this warning backwards, so just ignore that Alert Notice
from Microsoft.

However, by pouring a complete circle of salt around yourself and your
computer you can ensure that no harm befalls you and your pets. If you have
received this email in error, please add some nutmeg and egg whites, whisk
and place in a warm oven for 40 minutes.*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Christopher Bodnar
Doesn't sound like it's actually crashing. It's rebooting for some as yet 
unknown reason. I would check hardware issues first (bad memory, disk 
issues, power supply. etc.)




Chris Bodnar, MCSE, MCITP
Technical Support III
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003



From:   Mike Leone oozerd...@gmail.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date:   03/30/2011 08:38 AM
Subject:Win2008 R2 not writing crash dump file



I've got a Win2008 R2 server that has decided that it is a yo-yo, and is
rebooting daily (at different times), sometimes twice within like 20
minutes. In Control Panel, I have Kernel memory dump chosen under
Write debugging information, with the value %SystemRoot%\MEMORY.DMP
(and checked off Overwrite any existing file).

But I never get any dump file - there are no files *.DMP anywhere on the
server. And I don't know why it's not writing one. I want to run one
through the WinDbg debugger, hopefully yo have it point at the problem
(bad device driver, I'm guessing).

The event log only says the previous shutdown was unexpected - never
lists any bugcheck values or anything. So I'm sort of flying blind at
this point.

What would cause the DMP file to never be written? How can I get a DMP
to analyze?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win2008 R2 not writing crash dump file

2011-03-30 Thread Kennedy, Jim
Not a direct answer to your question but something to look at..did you just 
install the Feb updates...look for 393802 and MAYBE 2264207. One of them, 
probably the first one has some issues with video card drivers that were 
written badly. See if there are updates for your vid card drivers or remove 
those two updates.  HP is having a fair amount of trouble with this one, I had 
one server doing this. No newer vid card drivers available so I pulled those 
two updates and it is fine ever since.

-Original Message-
From: Mike Leone [mailto:oozerd...@gmail.com] 
Sent: Wednesday, March 30, 2011 8:38 AM
To: NT System Admin Issues
Subject: Win2008 R2 not writing crash dump file

I've got a Win2008 R2 server that has decided that it is a yo-yo, and is 
rebooting daily (at different times), sometimes twice within like 20 minutes. 
In Control Panel, I have Kernel memory dump chosen under Write debugging 
information, with the value %SystemRoot%\MEMORY.DMP (and checked off 
Overwrite any existing file).

But I never get any dump file - there are no files *.DMP anywhere on the 
server. And I don't know why it's not writing one. I want to run one through 
the WinDbg debugger, hopefully yo have it point at the problem (bad device 
driver, I'm guessing).

The event log only says the previous shutdown was unexpected - never lists any 
bugcheck values or anything. So I'm sort of flying blind at this point.

What would cause the DMP file to never be written? How can I get a DMP to 
analyze?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 8:39 AM, James Rankin wrote:
 You sure it's a BSOD? 

No, I'm not, actually.

 Could be a thermal condition, amongst many other
 things. Does it have any ASR values set?

Don't think so. Not sure how to check. Don't think we've set anything ..

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 8:43 AM, Christopher Bodnar wrote:
 Doesn't sound like it's actually crashing. It's rebooting for some as
 yet unknown reason. I would check hardware issues first (bad memory,
 disk issues, power supply. etc.)

That's what we're begining to believe, too. Since I get no DMP file, and
nothing in event log about bugcheck.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Ben Scott
On Wed, Mar 30, 2011 at 8:37 AM, Mike Leone oozerd...@gmail.com wrote:
 I've got a Win2008 R2 server that has decided that it is a yo-yo, and is
 rebooting daily (at different times), sometimes twice within like 20
 minutes. In Control Panel, I have Kernel memory dump chosen under
 Write debugging information, with the value %SystemRoot%\MEMORY.DMP
 (and checked off Overwrite any existing file).

  Turn off the auto-reboot-on-crash thing.  It's an option in the same
dialog box.

  IIRC, some STOP errors don't write info to disk because they blew up
in the I/O subsystem.  But you can always read the text off the blue
screen.

  If it still reboots, it's not a BugCheck.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread James Rankin
What flavour of system is it? On branded stuff (HP, Dell, IBM, etc.) you can
usually set threshholds within the management software to perform recovery
actions under certain conditions. If you have a functioning ILO/DRAC/other
management card, you can also sometimes replay the last restart, to see if
it actually was a BSOD or something else.

If you do have management software and agents loaded, it may be a good idea
to get the server to all its latest hardware patch levels.

On 30 March 2011 14:06, Mike Leone oozerd...@gmail.com wrote:

 On 3/30/2011 8:39 AM, James Rankin wrote:
  You sure it's a BSOD?

 No, I'm not, actually.

  Could be a thermal condition, amongst many other
  things. Does it have any ASR values set?

 Don't think so. Not sure how to check. Don't think we've set anything ..

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

*IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is confidential,
privileged or unsuitable for overly sensitive persons with low self-esteem,
no sense of humour or irrational religious beliefs. If you are not the
intended recipient, any dissemination, distribution or copying of this email
is not authorised (either explicitly or implicitly) and constitutes an
irritating social faux pas.

Unless the word absquatulation has been used in its correct context
somewhere other than in this warning, it does not have any legal or no
grammatical use and may be ignored. No animals were harmed in the
transmission of this email, although the kelpie next door is living on
borrowed time, let me tell you. Those of you with an overwhelming fear of
the unknown will be gratified to learn that there is no hidden message
revealed by reading this warning backwards, so just ignore that Alert Notice
from Microsoft.

However, by pouring a complete circle of salt around yourself and your
computer you can ensure that no harm befalls you and your pets. If you have
received this email in error, please add some nutmeg and egg whites, whisk
and place in a warm oven for 40 minutes.*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 8:51 AM, Kennedy, Jim wrote:
 Not a direct answer to your question but something to look
 at..did
you just install the Feb updates...

No. Not yet. We usually do Windows updates around the middle of the
following month, but we haven't done any to this server, since it
started rebooting daily right around the middle of the month ... and I
just looked through the list of installed updates, and don't see either
of those updates.

look for 393802 and MAYBE 2264207.
One of them, probably the first one has some issues with video card
drivers that were written badly. See if there are updates for your vid
card drivers or remove those two updates. HP is having a fair amount of
trouble with this one, I had one server doing this. No newer vid card
drivers available so I pulled those two updates and it is fine ever since.

I'll look to see if there are any newer drivers or HP firmware updates.

Thanks for the tip.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Deny roaming profile access at logon

2011-03-30 Thread James Rankin
I think this is probably a non-starter, but does anyone have any idea how I
might go about preventing a user's roaming profile from loading when they
log on to a particular server? Other users of the same server need their
roaming profile loaded, so the GPO for Always use local profile is no use,
as this is a system-wide setting.


TIA,



JRR

-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

*IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is confidential,
privileged or unsuitable for overly sensitive persons with low self-esteem,
no sense of humour or irrational religious beliefs. If you are not the
intended recipient, any dissemination, distribution or copying of this email
is not authorised (either explicitly or implicitly) and constitutes an
irritating social faux pas.

Unless the word absquatulation has been used in its correct context
somewhere other than in this warning, it does not have any legal or no
grammatical use and may be ignored. No animals were harmed in the
transmission of this email, although the kelpie next door is living on
borrowed time, let me tell you. Those of you with an overwhelming fear of
the unknown will be gratified to learn that there is no hidden message
revealed by reading this warning backwards, so just ignore that Alert Notice
from Microsoft.

However, by pouring a complete circle of salt around yourself and your
computer you can ensure that no harm befalls you and your pets. If you have
received this email in error, please add some nutmeg and egg whites, whisk
and place in a warm oven for 40 minutes.*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 9:10 AM, James Rankin wrote:
 What flavour of system is it? On branded stuff (HP, Dell, IBM, etc.) 

HP Proliant 380 G6.

 you can usually set threshholds within the management software to perform
 recovery actions under certain conditions. If you have a functioning
 ILO/DRAC/other management card, you can also sometimes replay the last
 restart, to see if it actually was a BSOD or something else.
 
 If you do have management software and agents loaded, it may be a good
 idea to get the server to all its latest hardware patch levels.

Yeah, that's our next step, I think.

 
 On 30 March 2011 14:06, Mike Leone oozerd...@gmail.com
 mailto:oozerd...@gmail.com wrote:
 
 On 3/30/2011 8:39 AM, James Rankin wrote:
  You sure it's a BSOD?
 
 No, I'm not, actually.
 
  Could be a thermal condition, amongst many other
  things. Does it have any ASR values set?
 
 Don't think so. Not sure how to check. Don't think we've set anything ..
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 
 
 -- 
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put
 into the machine wrong figures, will the right answers come out?' I am
 not able rightly to apprehend the kind of confusion of ideas that could
 provoke such a question.
 
 *IMPORTANT: This email is intended for the use of the individual
 addressee(s) named above and may contain information that is
 confidential, privileged or unsuitable for overly sensitive persons with
 low self-esteem, no sense of humour or irrational religious beliefs. If
 you are not the intended recipient, any dissemination, distribution or
 copying of this email is not authorised (either explicitly or
 implicitly) and constitutes an irritating social faux pas.
 
 Unless the word absquatulation has been used in its correct context
 somewhere other than in this warning, it does not have any legal or no
 grammatical use and may be ignored. No animals were harmed in the
 transmission of this email, although the kelpie next door is living on
 borrowed time, let me tell you. Those of you with an overwhelming fear
 of the unknown will be gratified to learn that there is no hidden
 message revealed by reading this warning backwards, so just ignore that
 Alert Notice from Microsoft.
 
 However, by pouring a complete circle of salt around yourself and your
 computer you can ensure that no harm befalls you and your pets. If you
 have received this email in error, please add some nutmeg and egg
 whites, whisk and place in a warm oven for 40 minutes.*
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Anyone recommendations for Cloud server hosting?

2011-03-30 Thread Ziots, Edward
Rack Space is very good about their hosting. 

 

MY big question is if you are using a Windows 2008 R2 server why not use
SQL Standard Edition instead of Express?, also with 1GB ram SQL/Windows
is going to get quite cramped for memory resources, and your application
etc etc might not really run optimally? 

 

Also, what type of Data is going to be hosted on the server ( PCI?
PII/PHI) has your management/security folks vetted the risk in
compliance to the federal regulations for the data that will be
contained within?

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: Chris Blair [mailto:chris_bl...@identisys.com] 
Sent: Wednesday, March 30, 2011 9:13 AM
To: NT System Admin Issues
Subject: Anyone recommendations for Cloud server hosting?

 

We need to move our cloud server hosting to a new company. We need to
run a Windows 2008 R2 server, with SQL express, 1gb ram, and 10gb disk
space. I have looked at a few, Server Intellect, Rack Space, and Amazon
S2. 

 

Any real work experiences? Any other recommendations?

 

 

Thanks,

Chris Blair

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Anyone recommendations for Cloud server hosting?

2011-03-30 Thread Martin Blackstone
+1 for Rackspace

 

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: Wednesday, March 30, 2011 6:25 AM
To: NT System Admin Issues
Subject: RE: Anyone recommendations for Cloud server hosting?

 

Rack Space is very good about their hosting. 

 

MY big question is if you are using a Windows 2008 R2 server why not use SQL
Standard Edition instead of Express?, also with 1GB ram SQL/Windows is going
to get quite cramped for memory resources, and your application etc etc
might not really run optimally? 

 

Also, what type of Data is going to be hosted on the server ( PCI? PII/PHI)
has your management/security folks vetted the risk in compliance to the
federal regulations for the data that will be contained within?

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: Chris Blair [mailto:chris_bl...@identisys.com] 
Sent: Wednesday, March 30, 2011 9:13 AM
To: NT System Admin Issues
Subject: Anyone recommendations for Cloud server hosting?

 

We need to move our cloud server hosting to a new company. We need to run a
Windows 2008 R2 server, with SQL express, 1gb ram, and 10gb disk space. I
have looked at a few, Server Intellect, Rack Space, and Amazon S2. 

 

Any real work experiences? Any other recommendations?

 

 

Thanks,

Chris Blair

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Deny roaming profile access at logon

2011-03-30 Thread Ben Scott
On Wed, Mar 30, 2011 at 9:14 AM, James Rankin kz2...@googlemail.com wrote:
 I think this is probably a non-starter, but does anyone have any idea how I
 might go about preventing a user's roaming profile from loading when they
 log on to a particular server?

  Is this for your Terminal Server with the printers problem?  If so,
isn't there a per-user Active Directory property to load a different
profile for Terminal Servers?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Win2008 R2 not writing crash dump file

2011-03-30 Thread Maglinger, Paul
I'd start with the simple stuff.  
Power cord in tight?  
Is the server in a clean server room?  If not (or even if it is), check
the fans and heat sinks for dust and clean it out.
Speaking of fans, are all of them running?  Air vents not blocked?

-Paul

-Original Message-
From: Mike Leone [mailto:oozerd...@gmail.com] 
Sent: Wednesday, March 30, 2011 7:38 AM
To: NT System Admin Issues
Subject: Win2008 R2 not writing crash dump file

I've got a Win2008 R2 server that has decided that it is a yo-yo, and is
rebooting daily (at different times), sometimes twice within like 20
minutes. In Control Panel, I have Kernel memory dump chosen under
Write debugging information, with the value %SystemRoot%\MEMORY.DMP
(and checked off Overwrite any existing file).

But I never get any dump file - there are no files *.DMP anywhere on the
server. And I don't know why it's not writing one. I want to run one
through the WinDbg debugger, hopefully yo have it point at the problem
(bad device driver, I'm guessing).

The event log only says the previous shutdown was unexpected - never
lists any bugcheck values or anything. So I'm sort of flying blind at
this point.

What would cause the DMP file to never be written? How can I get a DMP
to analyze?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Anyone recommendations for Cloud server hosting?

2011-03-30 Thread Chris Blair
Great questions.

We are using the cloud server to host a low traffic webpage for a branch of our 
company. We started off with SQL express, as recommended by the web development 
firm. If needed, we will upgrade to SQL Standard.



Thanks,
Chris Blair
952-697-6270
chris_bl...@identisys.commailto:chris_bl...@identisys.com

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Wednesday, March 30, 2011 8:25 AM
To: NT System Admin Issues
Subject: RE: Anyone recommendations for Cloud server hosting?

Rack Space is very good about their hosting.

MY big question is if you are using a Windows 2008 R2 server why not use SQL 
Standard Edition instead of Express?, also with 1GB ram SQL/Windows is going to 
get quite cramped for memory resources, and your application etc etc might not 
really run optimally?

Also, what type of Data is going to be hosted on the server ( PCI? PII/PHI) has 
your management/security folks vetted the risk in compliance to the federal 
regulations for the data that will be contained within?

Z

Edward E. Ziots
CISSP, Network +, Security +
Network Engineer
Lifespan Organization
Email:ezi...@lifespan.org
Cell:401-639-3505

From: Chris Blair [mailto:chris_bl...@identisys.com]
Sent: Wednesday, March 30, 2011 9:13 AM
To: NT System Admin Issues
Subject: Anyone recommendations for Cloud server hosting?

We need to move our cloud server hosting to a new company. We need to run a 
Windows 2008 R2 server, with SQL express, 1gb ram, and 10gb disk space. I have 
looked at a few, Server Intellect, Rack Space, and Amazon S2.

Any real work experiences? Any other recommendations?


Thanks,
Chris Blair


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Deny roaming profile access at logon

2011-03-30 Thread James Rankin
It's not the server with the printer issue, no (I have lots of issues
lately, my wife tells me the same thing too) :-)

Sorry, I should have been more specific - it's the TS roaming profile that I
am trying to avoid loading for a certain subset of users. Not a standard
roaming profile. I have not worked with fat clients for so long, I forget
they exist :-)

On 30 March 2011 14:37, Ben Scott mailvor...@gmail.com wrote:

 On Wed, Mar 30, 2011 at 9:14 AM, James Rankin kz2...@googlemail.com
 wrote:
  I think this is probably a non-starter, but does anyone have any idea how
 I
  might go about preventing a user's roaming profile from loading when they
  log on to a particular server?

   Is this for your Terminal Server with the printers problem?  If so,
 isn't there a per-user Active Directory property to load a different
 profile for Terminal Servers?

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

*IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is confidential,
privileged or unsuitable for overly sensitive persons with low self-esteem,
no sense of humour or irrational religious beliefs. If you are not the
intended recipient, any dissemination, distribution or copying of this email
is not authorised (either explicitly or implicitly) and constitutes an
irritating social faux pas.

Unless the word absquatulation has been used in its correct context
somewhere other than in this warning, it does not have any legal or no
grammatical use and may be ignored. No animals were harmed in the
transmission of this email, although the kelpie next door is living on
borrowed time, let me tell you. Those of you with an overwhelming fear of
the unknown will be gratified to learn that there is no hidden message
revealed by reading this warning backwards, so just ignore that Alert Notice
from Microsoft.

However, by pouring a complete circle of salt around yourself and your
computer you can ensure that no harm befalls you and your pets. If you have
received this email in error, please add some nutmeg and egg whites, whisk
and place in a warm oven for 40 minutes.*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Website Traffic Analyzer.

2011-03-30 Thread Stefan Jafs
I’m currently using Webtrends but getting fed-up with performance /
configuration / setup issues before I renew the maintenance, I wonder what
you guys are using?



I don’t need anything to sophisticated just visits and demographics are the
most important reports.


-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win2008 R2 not writing crash dump file

2011-03-30 Thread Paul Adams
Wow that sounds exactly like the problem we had with a DL380G6 about a
year ago.  HP shipped us a new mainboard before they figured it out.
Check your version of the ilo firmware.  If it's late 1.6x or early 1.7x
there were a lot of problems with random reboots exactly as you
describe.  We updated the firmware to 1.8x and it's been fine since
then.  Turning off ASR in HP system management helped but didn't
eliminate the problem altogether.  If you look in your event log and see
duplicate messages about the temperature and fan sensors you have a
likely culprit.

Good luck with it.  I had a second G6 server with similar problems that
ended up being an actual bad system board (acted like someone was
yanking both power cords at the same time) so I'd definitely open a case
with HP if you have warranty on it and have not done so already. 

Paul

The disclaimer below does not necessarily reflect my views but is
automagically generated by company elves.

-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Wednesday, March 30, 2011 9:40 AM
To: NT System Admin Issues
Subject: RE: Win2008 R2 not writing crash dump file

I'd start with the simple stuff.  
Power cord in tight?  
Is the server in a clean server room?  If not (or even if it is), check
the fans and heat sinks for dust and clean it out.
Speaking of fans, are all of them running?  Air vents not blocked?

-Paul

-Original Message-
From: Mike Leone [mailto:oozerd...@gmail.com]
Sent: Wednesday, March 30, 2011 7:38 AM
To: NT System Admin Issues
Subject: Win2008 R2 not writing crash dump file

I've got a Win2008 R2 server that has decided that it is a yo-yo, and is
rebooting daily (at different times), sometimes twice within like 20
minutes. In Control Panel, I have Kernel memory dump chosen under
Write debugging information, with the value %SystemRoot%\MEMORY.DMP
(and checked off Overwrite any existing file).

But I never get any dump file - there are no files *.DMP anywhere on the
server. And I don't know why it's not writing one. I want to run one
through the WinDbg debugger, hopefully yo have it point at the problem
(bad device driver, I'm guessing).

The event log only says the previous shutdown was unexpected - never
lists any bugcheck values or anything. So I'm sort of flying blind at
this point.

What would cause the DMP file to never be written? How can I get a DMP
to analyze?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Confidentiality Note: This message is intended for use only by the individual 
or entity to which it is addressed and may contain information that is 
privileged, confidential, and exempt from disclosure under applicable law. If 
the reader of this message is not the intended recipient or the employee or 
agent responsible for delivering the message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please contact the sender immediately and destroy the material in its 
entirety, whether electronic or hard copy. Thank you.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Win7 w/SP1 offline sync gives Access Denied

2011-03-30 Thread Miller Bonnie L .
So, shortly before I left yesterday I went through our GPOs that were applying 
to Win7 laptops.  The only one I thought might have anything to do with this 
turned out to be the culprit, but I'm not exactly sure why.  Since we won't be 
calling PSS at this point I may not find the answer to that, but here's what it 
was:

Since we started adding Win7 policies (back in October/November 2010) along 
with many other policies, we enabled the setting for \computer 
configuration\Administrative Templates\Offline Files Encrypt the Offline Files 
cache.  Yesterday as a test, I changed this to disabled, which decrypts the 
cache.  After after rebooting the machines with the access denied errors, 
everything started working again, so I changed it at the domain level and got 
the same results-things are now working normally again.

Question-does anyone know if this encryption is done using EFS?  It is not 
specified in the policy description.  We have disabled EFS at the domain level, 
as we don't want kids encrypting their files.  So, it makes sense to me that if 
it uses EFS but it is disabled at the domain, this would cause a potential 
conflict and could cause the access denied errors we were seeing.  What I 
don't understand is why the problem only starts after SP1 is applied, unless 
there is a problem with the RTM version applying this policy altogether.

Hopefully today will be a better day...

-Bonnie

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Tuesday, March 29, 2011 12:22 PM
To: NT System Admin Issues
Subject: Win7 w/SP1 offline sync gives Access Denied

Anyone else seeing this problem, or successfully syncing their offline files 
using a Win7 SP1 system in a domain?

User logs onto Win7 non-sp1, offline sync of files works fine.  Machine gets 
updated to SP1, same user (no changes) logs onto Win7 with SP1, offline sync 
throws access denied errors on all files.  Log off, take the same user 
account (same profile, etc) back to a non-SP1 machine and offline sync works 
fine.

We have quite a few Win7 systems now that have SP1, and are getting the same 
symptoms across multiple machines.  I've tried tons of stuff, including 
changing the back-end server from WS03 R2 to WS08 R2 SP1, taking DFS out of the 
equation, changing paths from DNS names to netbios names to IPs, removing ABE, 
setting ownership to the user, and setting both NTFS and share permissions to 
full control all the way down the tree on the server to Everyone.  As best I 
can tell, this is a client-side issue, but I'm not sure what else to look at.  
There are a few policies that control offline file behavior, and although 
nothing has changed from our non-sp1 setup, I'm happy to change something if it 
would help.

We're about to open a PSS call, but I'm fishing for other ideas as well.  
Searching around, I'm just not seeing other people reporting this problem.

Thanks,
-Bonnie

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Deny roaming profile access at logon

2011-03-30 Thread Tom Miller
Can't you change your current GPO to be more specific instead of authenticated 
users?  I have several XenApp GPOs that have different settings for different 
groups, and I use TS Roaming profiles in them.
 
Tom

 James Rankin kz2...@googlemail.com 3/30/2011 9:39 AM 
It's not the server with the printer issue, no (I have lots of issues lately, 
my wife tells me the same thing too) :-)

Sorry, I should have been more specific - it's the TS roaming profile that I am 
trying to avoid loading for a certain subset of users. Not a standard roaming 
profile. I have not worked with fat clients for so long, I forget they exist :-)

On 30 March 2011 14:37, Ben Scott mailvor...@gmail.com wrote:


On Wed, Mar 30, 2011 at 9:14 AM, James Rankin kz2...@googlemail.com wrote:
 I think this is probably a non-starter, but does anyone have any idea how I
 might go about preventing a user's roaming profile from loading when they
 log on to a particular server?

Is this for your Terminal Server with the printers problem? If so,
isn't there a per-user Active Directory property to load a different
profile for Terminal Servers?

-- Ben


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.

IMPORTANT: This email is intended for the use of the individual addressee(s) 
named above and may contain information that is confidential, privileged or 
unsuitable for overly sensitive persons with low self-esteem, no sense of 
humour or irrational religious beliefs. If you are not the intended recipient, 
any dissemination, distribution or copying of this email is not authorised 
(either explicitly or implicitly) and constitutes an irritating social faux pas.

Unless the word absquatulation has been used in its correct context somewhere 
other than in this warning, it does not have any legal or no grammatical use 
and may be ignored. No animals were harmed in the transmission of this email, 
although the kelpie next door is living on borrowed time, let me tell you. 
Those of you with an overwhelming fear of the unknown will be gratified to 
learn that there is no hidden message revealed by reading this warning 
backwards, so just ignore that Alert Notice from Microsoft.

However, by pouring a complete circle of salt around yourself and your computer 
you can ensure that no harm befalls you and your pets. If you have received 
this email in error, please add some nutmeg and egg whites, whisk and place in 
a warm oven for 40 minutes.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Confidentiality Notice:  This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure, or 
distribution is prohibited.  If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Deny roaming profile access at logon

2011-03-30 Thread James Rankin
It's a computer-level GPO for only allow local profiles. It only applies
to everyone, or not at all. Same goes for setting TS Profile via GPO. Unless
you know different...I've been struggling to understand why TS Profile was a
computer-level GPO for a while now.

On 30 March 2011 15:40, Tom Miller tmil...@hnncsb.org wrote:

  Can't you change your current GPO to be more specific instead of
 authenticated users?  I have several XenApp GPOs that have different
 settings for different groups, and I use TS Roaming profiles in them.

 Tom

  James Rankin kz2...@googlemail.com 3/30/2011 9:39 AM 

 It's not the server with the printer issue, no (I have lots of issues
 lately, my wife tells me the same thing too) :-)

 Sorry, I should have been more specific - it's the TS roaming profile that
 I am trying to avoid loading for a certain subset of users. Not a standard
 roaming profile. I have not worked with fat clients for so long, I forget
 they exist :-)

 On 30 March 2011 14:37, Ben Scott mailvor...@gmail.com wrote:

 On Wed, Mar 30, 2011 at 9:14 AM, James Rankin kz2...@googlemail.com
 wrote:
  I think this is probably a non-starter, but does anyone have any idea
 how I
  might go about preventing a user's roaming profile from loading when
 they
  log on to a particular server?

 Is this for your Terminal Server with the printers problem? If so,
 isn't there a per-user Active Directory property to load a different
 profile for Terminal Servers?

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.

 *IMPORTANT: This email is intended for the use of the individual
 addressee(s) named above and may contain information that is confidential,
 privileged or unsuitable for overly sensitive persons with low self-esteem,
 no sense of humour or irrational religious beliefs. If you are not the
 intended recipient, any dissemination, distribution or copying of this email
 is not authorised (either explicitly or implicitly) and constitutes an
 irritating social faux pas.

 Unless the word absquatulation has been used in its correct context
 somewhere other than in this warning, it does not have any legal or no
 grammatical use and may be ignored. No animals were harmed in the
 transmission of this email, although the kelpie next door is living on
 borrowed time, let me tell you. Those of you with an overwhelming fear of
 the unknown will be gratified to learn that there is no hidden message
 revealed by reading this warning backwards, so just ignore that Alert Notice
 from Microsoft.

 However, by pouring a complete circle of salt around yourself and your
 computer you can ensure that no harm befalls you and your pets. If you have
 received this email in error, please add some nutmeg and egg whites, whisk
 and place in a warm oven for 40 minutes.*

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

  Confidentiality Notice: This e-mail message, including attachments, is
 for the sole use of the intended recipient(s) and may contain confidential
 and privileged information. Any unauthorized review, use, disclosure, or
 distribution is prohibited. If you are not the intended recipient, please
 contact the sender by reply e-mail and destroy all copies of the original
 message.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

*IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is confidential,
privileged or unsuitable for overly sensitive persons with low self-esteem,
no sense of humour or irrational religious beliefs. If you are not the
intended recipient, any dissemination, distribution or copying of this email
is not authorised (either explicitly or 

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 10:08 AM, Paul Adams wrote:
 Wow that sounds exactly like the problem we had with a DL380G6 about a
 year ago.  HP shipped us a new mainboard before they figured it out.
 Check your version of the ilo firmware.  If it's late 1.6x or early 1.7x

2.05, it says. Good thought, tho.

Looks like the ROM BIOS is just slightly out of date (it's from Dec
2010), but otherwise, we look up to date, from what I can see of
firmware and drivers ...

 there were a lot of problems with random reboots exactly as you
 describe.  We updated the firmware to 1.8x and it's been fine since
 then.  Turning off ASR in HP system management helped but didn't
 eliminate the problem altogether.  If you look in your event log and see
 duplicate messages about the temperature and fan sensors you have a
 likely culprit.

Not seeing anything in the event logs, that's part of the problem. No
bugchecks, no alerts, no warnings, no nothing. All normal messages, then
The last system restart was unexpected.

 Good luck with it.  I had a second G6 server with similar problems that
 ended up being an actual bad system board (acted like someone was
 yanking both power cords at the same time) so I'd definitely open a case
 with HP if you have warranty on it and have not done so already. 

Yeah, I think that's what will have to be done. I think we need to boot
from SmartStart and run the diagnostics ...

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Anyone recommendations for Cloud server hosting?

2011-03-30 Thread Charlie Kaiser
I've used Rackspace and AWS. I'm pretty happy with AWS and their EC2
offerings these days. There's a lot you can do there, including having load
balancing, moving your entire server to a larger instance when you need
something beefier, and integrated backups to S2. Something about having an
image of your running server you can spin up in seconds is comforting.
There are occasional issues; I did some extensive domain-based
implementations with them and found some oddities around time sync and
Kerberos, but nothing I couldn't work around easily enough. Support is also
a bit slow; that's one area where Rackspace really excels. I currently run
AWS servers for several clients and we're pretty happy with it. I think
overall the self-manageability is more flexible with AWS than Rackspace. I
think they're cheaper, too...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***  


 -Original Message-
 From: Chris Blair [mailto:chris_bl...@identisys.com]
 Sent: Wednesday, March 30, 2011 6:13 AM
 To: NT System Admin Issues
 Subject: Anyone recommendations for Cloud server hosting?
 
 We need to move our cloud server hosting to a new company. We need to run
a Windows
 2008 R2 server, with SQL express, 1gb ram, and 10gb disk space. I have
looked at a few,
 Server Intellect, Rack Space, and Amazon S2.
 
 
 
 Any real work experiences? Any other recommendations?
 
 
 
 
 
 Thanks,
 
 Chris Blair
 
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Win7 w/SP1 offline sync gives Access Denied

2011-03-30 Thread Ben Scott
On Wed, Mar 30, 2011 at 10:26 AM, Miller Bonnie L.
mille...@mukilteo.wednet.edu wrote:
 What I don’t understand is why the problem only starts after SP1 is
 applied, unless there is a problem with the RTM version applying this policy
 altogether.

  Or, it could be it was a problem in RTM and it's just the diagnostic
was added in SP1.  That is, maybe it was failing silently before and
you just never knew?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Website Traffic Analyzer.

2011-03-30 Thread Sam Cayze
Cacti.

AWstats

Google Analytics.

 

-Sam

 

From: Stefan Jafs [mailto:stefan.j...@gmail.com] 
Sent: Wednesday, March 30, 2011 8:58 AM
To: NT System Admin Issues
Subject: Website Traffic Analyzer.

 

I'm currently using Webtrends but getting fed-up with performance /
configuration / setup issues before I renew the maintenance, I wonder what
you guys are using?

 

I don't need anything to sophisticated just visits and demographics are the
most important reports.



-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win7 w/SP1 offline sync gives Access Denied

2011-03-30 Thread Free, Bob
 Question-does anyone know if this encryption is done using EFS?

Yes, it is specified in the EFS documentation that EFS is used for the offline 
file cache. The policy interaction you describe is very interesting. From a 
purely theoretical POV, if I disable EFS at the Domain level, that should be 
it, period.

However there is a rapid publish KB that describes some unexpected behaviors 
with disabling/enabling EFS via policy 
http://support.microsoft.com/kb/960050/EN-US that may be germane to your 
situation.

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Wednesday, March 30, 2011 7:26 AM
To: NT System Admin Issues
Subject: RE: Win7 w/SP1 offline sync gives Access Denied

So, shortly before I left yesterday I went through our GPOs that were applying 
to Win7 laptops.  The only one I thought might have anything to do with this 
turned out to be the culprit, but I'm not exactly sure why.  Since we won't be 
calling PSS at this point I may not find the answer to that, but here's what it 
was:

Since we started adding Win7 policies (back in October/November 2010) along 
with many other policies, we enabled the setting for \computer 
configuration\Administrative Templates\Offline Files Encrypt the Offline Files 
cache.  Yesterday as a test, I changed this to disabled, which decrypts the 
cache.  After after rebooting the machines with the access denied errors, 
everything started working again, so I changed it at the domain level and got 
the same results-things are now working normally again.

Question-does anyone know if this encryption is done using EFS?  It is not 
specified in the policy description.  We have disabled EFS at the domain level, 
as we don't want kids encrypting their files.  So, it makes sense to me that if 
it uses EFS but it is disabled at the domain, this would cause a potential 
conflict and could cause the access denied errors we were seeing.  What I 
don't understand is why the problem only starts after SP1 is applied, unless 
there is a problem with the RTM version applying this policy altogether.

Hopefully today will be a better day...

-Bonnie

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Tuesday, March 29, 2011 12:22 PM
To: NT System Admin Issues
Subject: Win7 w/SP1 offline sync gives Access Denied

Anyone else seeing this problem, or successfully syncing their offline files 
using a Win7 SP1 system in a domain?

User logs onto Win7 non-sp1, offline sync of files works fine.  Machine gets 
updated to SP1, same user (no changes) logs onto Win7 with SP1, offline sync 
throws access denied errors on all files.  Log off, take the same user 
account (same profile, etc) back to a non-SP1 machine and offline sync works 
fine.

We have quite a few Win7 systems now that have SP1, and are getting the same 
symptoms across multiple machines.  I've tried tons of stuff, including 
changing the back-end server from WS03 R2 to WS08 R2 SP1, taking DFS out of the 
equation, changing paths from DNS names to netbios names to IPs, removing ABE, 
setting ownership to the user, and setting both NTFS and share permissions to 
full control all the way down the tree on the server to Everyone.  As best I 
can tell, this is a client-side issue, but I'm not sure what else to look at.  
There are a few policies that control offline file behavior, and although 
nothing has changed from our non-sp1 setup, I'm happy to change something if it 
would help.

We're about to open a PSS call, but I'm fishing for other ideas as well.  
Searching around, I'm just not seeing other people reporting this problem.

Thanks,
-Bonnie

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Website Traffic Analyzer.

2011-03-30 Thread Erik Goldoff
You might want to take a look at these two free versions to see if they meet
your need :

 

http://www.weblogexpert.com/lite.htm

 

 

http://www.mrunix.net/webalizer/

 

 

Erik Goldoff

IT  Consultant

Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '

From: Stefan Jafs [mailto:stefan.j...@gmail.com] 
Sent: Wednesday, March 30, 2011 9:58 AM
To: NT System Admin Issues
Subject: Website Traffic Analyzer.

 

I’m currently using Webtrends but getting fed-up with performance /
configuration / setup issues before I renew the maintenance, I wonder what
you guys are using?

 

I don’t need anything to sophisticated just visits and demographics are the
most important reports.



-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OTish: SSDs and cool PCs

2011-03-30 Thread Ken Schaefer
I have a Sony Vaio Z as my primary laptop. It has 4 x 64GB SSDs in a RAID0 
configuration. I've had it for 11 months now, and if there's been performance 
degradation (through lack of TRIM) it hasn't been enough for me to notice.

Cheers
Ken

From: Paul Gordon [mailto:paul_gor...@hotmail.com]
Sent: Wednesday, 30 March 2011 5:53 PM
To: NT System Admin Issues
Subject: RE: OTish: SSDs and cool PCs

I just recently purchased an OCZ Revodrive (version 1) -  
http://www.ocztechnology.com/ocz-revodrive-pci-express-ssd.html

120GB, which is effectively a pair of 60GB SSDs in RAID0... RATED specs are 
read 540MB/s, write 480MB/s 75,000 IOPS

The newer X2 revision of the card is even faster!! - something like 740MB/s 
reads...

I can't speak to how much of that *theoretical* performance is actually 
achieved in practice, but what I *can* say is that it makes an absolutely huge 
difference to startup  app launch speeds... - from power on, my Win 7 Ultimate 
machine now takes longer to complete the BIOS POST than it does to run the 
entire Win7 bootup process to the point of presenting the Press C-A-D to 
logon message... somewhere between 15-20 seconds in total (about 8-10 seconds 
in the BIOS, around 8-10 seconds for boot).

The only downside - if there is one - is that AFAIK, no current RAID solution 
for SSDs supports TRIM through to the drives, so you have to make do without 
it. I did a lot of research because of this issue before I purchased, and 
read a lot of other user reviews, tech site reviews etc... and got the strong 
impression that overall, these drives really don't seem to suffer performance 
degradation over time as a result of the lack of TRIM... it seems the Sandforce 
controllers are very strong on their wear levelling anyway, plus the added 
expedient of keeping a good portion of that 120GB unused (it's only my C: 
drive, I have a 1TB HDD as well for bulk storage)

Only time will tell if that turns out to be the case, - but even if it did 
degrade, this thing is S fast, that I think even if performance halved it 
would still knock the pants of anything else!

Paul G.


From: Sam Cayze [mailto:sca...@gmail.com]
Sent: 29 March 2011 18:45
To: NT System Admin Issues
Subject: RE: OTish: SSDs and cool PCs

40GB at US$89.  Wow.

The new SSD doubles sequential write speeds from its second generation X25-M 
drive to 220MB/sec sequential writes. The drive simply maintains the read 
throughput rate of the X25-M at up to 270 MB/sec

Is that pretty good in terms of SSD?  Curious if it's better to go this route, 
or get a PCI-X SSD card and forego the disk controller bottleneck.

From: Stefan Jafs [mailto:stefan.j...@gmail.com]
Sent: Tuesday, March 29, 2011 12:34 PM
To: NT System Admin Issues
Subject: Re: OTish: SSDs and cool PCs

I guess prices are dropping:

http://www.itworldcanada.com/news/intel-doubles-capacity-drops-price-in-ssd-refresh/142814?sub=29878utm_source=29878utm_medium=entinfrautm_campaign=enews

Stefan
On Tue, Mar 29, 2011 at 12:06 PM, Sam Cayze 
sca...@gmail.commailto:sca...@gmail.com wrote:
Wow.  I might bite the bullet and buy one.
Looking around, looks like I can get a PCI-X SSD card that is big enough for a 
boot drive+my docs for around $200.  I had no idea they were this cheap!

From: Ken Schaefer [mailto:k...@adopenstatic.commailto:k...@adopenstatic.com]
Sent: Monday, March 28, 2011 8:09 PM
To: NT System Admin Issues
Subject: RE: OTish: SSDs and cool PCs

Someone opens Windows Media Player / iTunes / Media Monkey. If your music 
library is on your SSD, then populating the list of albums and cover art is 
near instantaneous.
Opening the Recent Item in Windows 7 (or the Start menu in previous versions) 
is instantaneous
Search in Outlook is instantaneous (as is Windows search)

There are many benefits to just putting everything except the most bulky 
storage onto an SSD. I even put my testing VMs on SSDs now (if I can)

Cheers
Ken

From: Jonathan Link 
[mailto:jonathan.l...@gmail.commailto:jonathan.l...@gmail.com]
Sent: Monday, 28 March 2011 8:55 PM
To: NT System Admin Issues
Subject: Re: OTish: SSDs and cool PCs

I would suspect that those of us on this list aren't the standard consumer.
We tend to fall into two types, those who become Luddites at home, and those 
who manage sophisticated infrastructures at home.
I think significant time savings can be gained by having the OS on SSD, the 
other stuff doesn't seem to need the same level of speed, but I could be 
talking out of my hat.
On Mon, Mar 28, 2011 at 5:37 AM, Ken Schaefer 
k...@adopenstatic.commailto:k...@adopenstatic.com wrote:
Fair enough. However it seems that any modern SSD has enough redundancy plus 
resiliency to survive tens of years of consumer use...

Cheers
Ken

From: Rene de Haas [mailto:rene.deh...@gmail.commailto:rene.deh...@gmail.com]
Sent: Monday, 28 March 2011 5:09 PM

To: NT System Admin Issues
Subject: Re: OTish: SSDs and cool PCs

True, I imagine they are trying to make it last longer by not writing to it 

Re: Deny roaming profile access at logon

2011-03-30 Thread Tom Miller
That's right.  It's been a while since I created those GPOs.  My error.
What's the need to prevent a profile from loading?  Perhaps there is something 
else we could suggest.

 James Rankin kz2...@googlemail.com 3/30/2011 10:44 AM 
It's a computer-level GPO for only allow local profiles. It only applies to 
everyone, or not at all. Same goes for setting TS Profile via GPO. Unless you 
know different...I've been struggling to understand why TS Profile was a 
computer-level GPO for a while now.

On 30 March 2011 15:40, Tom Miller tmil...@hnncsb.org wrote:


Can't you change your current GPO to be more specific instead of authenticated 
users? I have several XenApp GPOs that have different settings for different 
groups, and I use TS Roaming profiles in them.
Tom

 James Rankin kz2...@googlemail.com 3/30/2011 9:39 AM 

It's not the server with the printer issue, no (I have lots of issues lately, 
my wife tells me the same thing too) :-)

Sorry, I should have been more specific - it's the TS roaming profile that I am 
trying to avoid loading for a certain subset of users. Not a standard roaming 
profile. I have not worked with fat clients for so long, I forget they exist :-)

On 30 March 2011 14:37, Ben Scott mailvor...@gmail.com wrote:


On Wed, Mar 30, 2011 at 9:14 AM, James Rankin kz2...@googlemail.com wrote:
 I think this is probably a non-starter, but does anyone have any idea how I
 might go about preventing a user's roaming profile from loading when they
 log on to a particular server?

Is this for your Terminal Server with the printers problem? If so,
isn't there a per-user Active Directory property to load a different
profile for Terminal Servers?

-- Ben


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.

IMPORTANT: This email is intended for the use of the individual addressee(s) 
named above and may contain information that is confidential, privileged or 
unsuitable for overly sensitive persons with low self-esteem, no sense of 
humour or irrational religious beliefs. If you are not the intended recipient, 
any dissemination, distribution or copying of this email is not authorised 
(either explicitly or implicitly) and constitutes an irritating social faux pas.

Unless the word absquatulation has been used in its correct context somewhere 
other than in this warning, it does not have any legal or no grammatical use 
and may be ignored. No animals were harmed in the transmission of this email, 
although the kelpie next door is living on borrowed time, let me tell you. 
Those of you with an overwhelming fear of the unknown will be gratified to 
learn that there is no hidden message revealed by reading this warning 
backwards, so just ignore that Alert Notice from Microsoft.

However, by pouring a complete circle of salt around yourself and your computer 
you can ensure that no harm befalls you and your pets. If you have received 
this email in error, please add some nutmeg and egg whites, whisk and place in 
a warm oven for 40 minutes.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.

IMPORTANT: This email is intended for the use of the individual addressee(s) 
named above and may contain information that is confidential, privileged or 
unsuitable for overly sensitive persons with low self-esteem, no 

Re: URGENT: Interrupt chkdsk, not on boot drive

2011-03-30 Thread Andrew S. Baker
And this is why I like to run a plain ol' CHKDSK the first time before I
commit to /F or /R or whatever.



 *ASB *(Professional Bio http://about.me/Andrew.S.Baker/bio)
 *Technology Services that Maximize Business Results...

 *



On Tue, Mar 29, 2011 at 9:54 PM, Ben Scott mailvor...@gmail.com wrote:

 On Tue, Mar 29, 2011 at 9:25 PM, Mike Leone oozerd...@gmail.com wrote:
  Yeah, this drive is mostly empty, too, so there's not a boatload of
  files to read through and verify. And it's at the Checking free space
  stage now, for 2 hours. So it *should* be done by the time I either go
  to bed, or wake up tomorrow.

  If you're getting Checking files and Checking free space, then
 you've run CHKDSK with the /R switch.  (Or something else ran it that
 way.)  /R tells CHKDSK to do read verification of the entire
 partition.  Checking free space means it is reading every block on
 the LUN that isn't being used for something else.  So the fact that
 the drive is empty won't help you.

 -- Ben



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Anyone recommendations for Cloud server hosting?

2011-03-30 Thread Andrew S. Baker
RackSpace is very good in this space.

What will you be doing?Microsoft or Amazon will work well here, too, for
most needs.



*ASB *(Professional Bio http://about.me/Andrew.S.Baker/bio)
 *Technology Services that Maximize Business Results...

 *



On Wed, Mar 30, 2011 at 9:13 AM, Chris Blair chris_bl...@identisys.comwrote:

 We need to move our cloud server hosting to a new company. We need to run a
 Windows 2008 R2 server, with SQL express, 1gb ram, and 10gb disk space. I
 have looked at a few, Server Intellect, Rack Space, and Amazon S2.



 Any real work experiences? Any other recommendations?





 Thanks,

 Chris Blair




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
My co-worker found an HP alert about Proliant DL360 G6s (like this)
where they can be subject to random reboots, exactly as we have been.
Apparently, it's a known issue with this model server shipped before Nov
2009. Has to do with system board revision earlier than 0S. If the
serial number is xxx947 or earlier, you may have it.

There's a Online Flash Component for Windows - System Programmable
Logic Device update available. (HP document ID: c01955503)

3 guesses as to what we're doing with that server this evening ... :-)

I'll keep the list posted.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Win2008 R2 not writing crash dump file

2011-03-30 Thread Kennedy, Jim
Nice. I would just do it now and blame it on the ongoing crash problem.  :)

-Original Message-
From: Mike Leone [mailto:oozerd...@gmail.com] 
Sent: Wednesday, March 30, 2011 12:57 PM
To: NT System Admin Issues
Subject: Re: Win2008 R2 not writing crash dump file

My co-worker found an HP alert about Proliant DL360 G6s (like this)
where they can be subject to random reboots, exactly as we have been.
Apparently, it's a known issue with this model server shipped before Nov
2009. Has to do with system board revision earlier than 0S. If the
serial number is xxx947 or earlier, you may have it.

There's a Online Flash Component for Windows - System Programmable
Logic Device update available. (HP document ID: c01955503)

3 guesses as to what we're doing with that server this evening ... :-)

I'll keep the list posted.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Jonathan Link
Or just do it now.  Planned outages, even during business hours are alwyas
better than unplanned ones.  You also seem to have an element of
unpredictability here, so...



On Wed, Mar 30, 2011 at 12:58 PM, Kennedy, Jim kennedy...@elyriaschools.org
 wrote:

 Nice. I would just do it now and blame it on the ongoing crash problem.  :)

 -Original Message-
 From: Mike Leone [mailto:oozerd...@gmail.com]
 Sent: Wednesday, March 30, 2011 12:57 PM
 To: NT System Admin Issues
  Subject: Re: Win2008 R2 not writing crash dump file

 My co-worker found an HP alert about Proliant DL360 G6s (like this)
 where they can be subject to random reboots, exactly as we have been.
 Apparently, it's a known issue with this model server shipped before Nov
 2009. Has to do with system board revision earlier than 0S. If the
 serial number is xxx947 or earlier, you may have it.

 There's a Online Flash Component for Windows - System Programmable
 Logic Device update available. (HP document ID: c01955503)

 3 guesses as to what we're doing with that server this evening ... :-)

 I'll keep the list posted.



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win7 w/SP1 offline sync gives Access Denied

2011-03-30 Thread Miller Bonnie L .
Thanks guys-it must be then that there was some kind of issue in RTM, and as 
Ben said, it was silently failing until SP1 applied.  We're not trying to 
re-enable EFS via GPO at another level (using Computer config\Windows 
settings\security settings\public key policies), so I don't think the article 
applies in this case, but that is good to know about.

From: Free, Bob [mailto:r...@pge.com]
Sent: Wednesday, March 30, 2011 8:08 AM
To: NT System Admin Issues
Subject: RE: Win7 w/SP1 offline sync gives Access Denied

 Question-does anyone know if this encryption is done using EFS?

Yes, it is specified in the EFS documentation that EFS is used for the offline 
file cache. The policy interaction you describe is very interesting. From a 
purely theoretical POV, if I disable EFS at the Domain level, that should be 
it, period.

However there is a rapid publish KB that describes some unexpected behaviors 
with disabling/enabling EFS via policy 
http://support.microsoft.com/kb/960050/EN-US that may be germane to your 
situation.

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Wednesday, March 30, 2011 7:26 AM
To: NT System Admin Issues
Subject: RE: Win7 w/SP1 offline sync gives Access Denied

So, shortly before I left yesterday I went through our GPOs that were applying 
to Win7 laptops.  The only one I thought might have anything to do with this 
turned out to be the culprit, but I'm not exactly sure why.  Since we won't be 
calling PSS at this point I may not find the answer to that, but here's what it 
was:

Since we started adding Win7 policies (back in October/November 2010) along 
with many other policies, we enabled the setting for \computer 
configuration\Administrative Templates\Offline Files Encrypt the Offline Files 
cache.  Yesterday as a test, I changed this to disabled, which decrypts the 
cache.  After after rebooting the machines with the access denied errors, 
everything started working again, so I changed it at the domain level and got 
the same results-things are now working normally again.

Question-does anyone know if this encryption is done using EFS?  It is not 
specified in the policy description.  We have disabled EFS at the domain level, 
as we don't want kids encrypting their files.  So, it makes sense to me that if 
it uses EFS but it is disabled at the domain, this would cause a potential 
conflict and could cause the access denied errors we were seeing.  What I 
don't understand is why the problem only starts after SP1 is applied, unless 
there is a problem with the RTM version applying this policy altogether.

Hopefully today will be a better day...

-Bonnie

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Tuesday, March 29, 2011 12:22 PM
To: NT System Admin Issues
Subject: Win7 w/SP1 offline sync gives Access Denied

Anyone else seeing this problem, or successfully syncing their offline files 
using a Win7 SP1 system in a domain?

User logs onto Win7 non-sp1, offline sync of files works fine.  Machine gets 
updated to SP1, same user (no changes) logs onto Win7 with SP1, offline sync 
throws access denied errors on all files.  Log off, take the same user 
account (same profile, etc) back to a non-SP1 machine and offline sync works 
fine.

We have quite a few Win7 systems now that have SP1, and are getting the same 
symptoms across multiple machines.  I've tried tons of stuff, including 
changing the back-end server from WS03 R2 to WS08 R2 SP1, taking DFS out of the 
equation, changing paths from DNS names to netbios names to IPs, removing ABE, 
setting ownership to the user, and setting both NTFS and share permissions to 
full control all the way down the tree on the server to Everyone.  As best I 
can tell, this is a client-side issue, but I'm not sure what else to look at.  
There are a few policies that control offline file behavior, and although 
nothing has changed from our non-sp1 setup, I'm happy to change something if it 
would help.

We're about to open a PSS call, but I'm fishing for other ideas as well.  
Searching around, I'm just not seeing other people reporting this problem.

Thanks,
-Bonnie

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ 

Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Jonathan Link
Is the physical security of the server so poor that you're using encryption
to protect the data at rest?
That's about the only situation I can see using encryption on a server which
then shares that data.

On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman c.house...@gmail.com wrote:

  Recently set up some encrypted storage on an SBS 2003 server using
 Truecrypt, just a simple encrypted container, no encryption of system
 drive.  The server is also running AVG 9 but the Truecrypt container folder
 has been excluded from RT scanning.  Two folders on the encrypted volume
 have been shared to the network for access by XP client machines.  I've done
 this on a Server 2003 without incident, but that server wasn't running any
 AV.



 Since Truecrypt was set up there have been 4 BSOD's, 3 of them were
 x107e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035
 (NO_MORE_IRP_STACK_LOCATIONS), all referencing *srv.sys*.   All of the
 BSODs coincide with clients accessing the share(s) on the encrypted volume.
  It could be reading or writing   For the case of the 0x35, I increased the
 DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about
 MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD
 since, it was today's 7e).



 So, I'm hoping somebody else has heard of this, but not that hopeful since
 Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.



 Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope
 that makes a difference.  Since both are open source, can I reasonably hope
 they are using different code that might be related to these crashes?



 Or if you have a preferred alternative for a (a) free means of (b)
 encrypting a subset of server storage so that storage is (c) available to
 network client users (d) without them thinking about it or having to type
 anything (other than entering the decryption password one time after each
 server restart), and that encryption (e) doesn't need or recommend the use
 of complex recovery mechanisms, and (f) know about or have a set-up tutorial
 for said encryption that is (g) faster to work through than setting up
 FreeOTFE, I'm all ears.



 [The (a) ... (g) in the above paragraph are required conditions for an
 alternative to overtake FreeOTFE as the next attempt at making this work...
 I'm open to all suggestions, but I have limited time with which to solve
 this and FreeOTFE looks like the least trouble to try.]



 TIA

 Carl

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win7 w/SP1 offline sync gives Access Denied

2011-03-30 Thread Miller Bonnie L .
Interesting—it might work now for you then.  Was there a kb on that?

I did take DFS out of the equation during testing and that didn’t seem to 
matter one iota—it would fail with a straight UNC path as well.

From: Crawford, Scott [mailto:crawfo...@evangel.edu]
Sent: Wednesday, March 30, 2011 10:18 AM
To: NT System Admin Issues
Subject: RE: Win7 w/SP1 offline sync gives Access Denied

EFS of offline files with DFS was failing for us pre-SP1. I haven't looked at 
it since SP1.




Sent from my Palm Pre on the Now Network from Sprint



On Mar 30, 2011 12:14 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote:
Thanks guys—it must be then that there was some kind of issue in RTM, and as 
Ben said, it was silently failing until SP1 applied.  We’re not trying to 
re-enable EFS via GPO at another level (using Computer config\Windows 
settings\security settings\public key policies), so I don’t think the article 
applies in this case, but that is good to know about.

From: Free, Bob [mailto:r...@pge.com]
Sent: Wednesday, March 30, 2011 8:08 AM
To: NT System Admin Issues
Subject: RE: Win7 w/SP1 offline sync gives Access Denied

 Question—does anyone know if this encryption is done using EFS?

Yes, it is specified in the EFS documentation that EFS is used for the offline 
file cache. The policy interaction you describe is very interesting. From a 
purely theoretical POV, if I disable EFS at the Domain level, that should be 
it, period.

However there is a rapid publish KB that describes some unexpected behaviors 
with disabling/enabling EFS via policy 
http://support.microsoft.com/kb/960050/EN-US that may be germane to your 
situation.

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Wednesday, March 30, 2011 7:26 AM
To: NT System Admin Issues
Subject: RE: Win7 w/SP1 offline sync gives Access Denied

So, shortly before I left yesterday I went through our GPOs that were applying 
to Win7 laptops.  The only one I thought might have anything to do with this 
turned out to be the culprit, but I’m not exactly sure why.  Since we won’t be 
calling PSS at this point I may not find the answer to that, but here’s what it 
was:

Since we started adding Win7 policies (back in October/November 2010) along 
with many other policies, we enabled the setting for \computer 
configuration\Administrative Templates\Offline Files “Encrypt the Offline Files 
cache”.  Yesterday as a test, I changed this to disabled, which decrypts the 
cache.  After after rebooting the machines with the “access denied” errors, 
everything started working again, so I changed it at the domain level and got 
the same results—things are now working “normally” again.

Question—does anyone know if this encryption is done using EFS?  It is not 
specified in the policy description.  We have disabled EFS at the domain level, 
as we don’t want kids encrypting their files.  So, it makes sense to me that if 
it uses EFS but it is disabled at the domain, this would cause a potential 
conflict and could cause the “access denied” errors we were seeing.  What I 
don’t understand is why the problem only starts after SP1 is applied, unless 
there is a problem with the RTM version applying this policy altogether.

Hopefully today will be a better day…

-Bonnie

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Tuesday, March 29, 2011 12:22 PM
To: NT System Admin Issues
Subject: Win7 w/SP1 offline sync gives Access Denied

Anyone else seeing this problem, or successfully syncing their offline files 
using a Win7 SP1 system in a domain?

User logs onto Win7 non-sp1, offline sync of files works fine.  Machine gets 
updated to SP1, same user (no changes) logs onto Win7 with SP1, offline sync 
throws “access denied” errors on all files.  Log off, take the same user 
account (same profile, etc) back to a non-SP1 machine and offline sync works 
fine.

We have quite a few Win7 systems now that have SP1, and are getting the same 
symptoms across multiple machines.  I’ve tried tons of stuff, including 
changing the back-end server from WS03 R2 to WS08 R2 SP1, taking DFS out of the 
equation, changing paths from DNS names to netbios names to IPs, removing ABE, 
setting ownership to the user, and setting both NTFS and share permissions to 
full control all the way down the tree on the server to “Everyone”.  As best I 
can tell, this is a client-side issue, but I’m not sure what else to look at.  
There are a few policies that control offline file behavior, and although 
nothing has changed from our non-sp1 setup, I’m happy to change something if it 
would help.

We’re about to open a PSS call, but I’m fishing for other ideas as well.  
Searching around, I’m just not seeing other people reporting this problem.

Thanks,
-Bonnie

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 

RE: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Carl Houseman
Yes and nothing will change that.  The data must remain reasonably secure if
the server is stolen.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Wednesday, March 30, 2011 1:39 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

 

Is the physical security of the server so poor that you're using encryption
to protect the data at rest?

That's about the only situation I can see using encryption on a server which
then shares that data.

On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman c.house...@gmail.com wrote:

Recently set up some encrypted storage on an SBS 2003 server using
Truecrypt, just a simple encrypted container, no encryption of system drive.
The server is also running AVG 9 but the Truecrypt container folder has been
excluded from RT scanning.  Two folders on the encrypted volume have been
shared to the network for access by XP client machines.  I've done this on a
Server 2003 without incident, but that server wasn't running any AV.

 

Since Truecrypt was set up there have been 4 BSOD's, 3 of them were
x107e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035
(NO_MORE_IRP_STACK_LOCATIONS), all referencing srv.sys.   All of the BSODs
coincide with clients accessing the share(s) on the encrypted volume.  It
could be reading or writing   For the case of the 0x35, I increased the
DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about
MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD
since, it was today's 7e).

 

So, I'm hoping somebody else has heard of this, but not that hopeful since
Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.

 

Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope
that makes a difference.  Since both are open source, can I reasonably hope
they are using different code that might be related to these crashes?

 

Or if you have a preferred alternative for a (a) free means of (b)
encrypting a subset of server storage so that storage is (c) available to
network client users (d) without them thinking about it or having to type
anything (other than entering the decryption password one time after each
server restart), and that encryption (e) doesn't need or recommend the use
of complex recovery mechanisms, and (f) know about or have a set-up tutorial
for said encryption that is (g) faster to work through than setting up
FreeOTFE, I'm all ears.

 

[The (a) ... (g) in the above paragraph are required conditions for an
alternative to overtake FreeOTFE as the next attempt at making this work...
I'm open to all suggestions, but I have limited time with which to solve
this and FreeOTFE looks like the least trouble to try.]

 

TIA

Carl

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Andrew S. Baker
Nope, I haven't seen that problem, although I am not using TrueCrypt on SBS
2003, just Windows 2003, Win7, Win2008 R2



 *ASB *(Professional Bio http://about.me/Andrew.S.Baker/bio)
 *Technology Services that Maximize Business Results...

 *



On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman c.house...@gmail.com wrote:

 Recently set up some encrypted storage on an SBS 2003 server using
 Truecrypt, just a simple encrypted container, no encryption of system
 drive.  The server is also running AVG 9 but the Truecrypt container folder
 has been excluded from RT scanning.  Two folders on the encrypted volume
 have been shared to the network for access by XP client machines.  I've done
 this on a Server 2003 without incident, but that server wasn't running any
 AV.



 Since Truecrypt was set up there have been 4 BSOD's, 3 of them were
 x107e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035
 (NO_MORE_IRP_STACK_LOCATIONS), all referencing *srv.sys*.   All of the
 BSODs coincide with clients accessing the share(s) on the encrypted volume.
  It could be reading or writing   For the case of the 0x35, I increased the
 DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about
 MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD
 since, it was today's 7e).



 So, I'm hoping somebody else has heard of this, but not that hopeful since
 Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.



 Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope
 that makes a difference.  Since both are open source, can I reasonably hope
 they are using different code that might be related to these crashes?



 Or if you have a preferred alternative for a (a) free means of (b)
 encrypting a subset of server storage so that storage is (c) available to
 network client users (d) without them thinking about it or having to type
 anything (other than entering the decryption password one time after each
 server restart), and that encryption (e) doesn't need or recommend the use
 of complex recovery mechanisms, and (f) know about or have a set-up tutorial
 for said encryption that is (g) faster to work through than setting up
 FreeOTFE, I'm all ears.



 [The (a) ... (g) in the above paragraph are required conditions for an
 alternative to overtake FreeOTFE as the next attempt at making this work...
 I'm open to all suggestions, but I have limited time with which to solve
 this and FreeOTFE looks like the least trouble to try.]



 TIA

 Carl




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Are printer-related registry keys are safe to remove?

2011-03-30 Thread Ken Cornetet
Yes, they are safe to remove.

I created a batch file with these two lines and call it from a group policy 
logoff script.

reg DELETE HKCU\Software\Microsoft\Windows NT\CurrentVersion\Devices /va /f
reg DELETE HKCU\Software\Microsoft\Windows NT\CurrentVersion\printerports /va 
/f

I will have to say, though, that this seems to make some user's Citrix session 
hang (they never logoff after closing their last app). I will probably move 
this to a logon script at some point.

Ken Cornetet 812.482.8499
To err is human - to moo, bovine.

From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Wednesday, March 30, 2011 4:01 AM
To: NT System Admin Issues
Subject: Are printer-related registry keys are safe to remove?

There are two Registry keys - HKCU\Software\Microsoft\Windows 
NT\CurrentVersion\Devices\ and HKCU\Software\Microsoft\Windows 
NT\CurrentVersion\PrinterPorts - that, in a terminal services environment, seem 
to fill up with vast amounts of printers, apparently enumerated from any user 
that has ever logged on. Now some older pieces of software seem to look here 
for their printer settings, to the extent that when there are approximately 500 
entries in there, meaning that the printing from these apps is very, very slow. 
According to an MS article these keys are for user preferences for print 
devices in Windows NT 4.0, so, would I be right in assuming I could simply 
remove all entries from these keys at logoff without causing myself any 
problems?

TIA,



JR

--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.

IMPORTANT: This email is intended for the use of the individual addressee(s) 
named above and may contain information that is confidential, privileged or 
unsuitable for overly sensitive persons with low self-esteem, no sense of 
humour or irrational religious beliefs. If you are not the intended recipient, 
any dissemination, distribution or copying of this email is not authorised 
(either explicitly or implicitly) and constitutes an irritating social faux pas.

Unless the word absquatulation has been used in its correct context somewhere 
other than in this warning, it does not have any legal or no grammatical use 
and may be ignored. No animals were harmed in the transmission of this email, 
although the kelpie next door is living on borrowed time, let me tell you. 
Those of you with an overwhelming fear of the unknown will be gratified to 
learn that there is no hidden message revealed by reading this warning 
backwards, so just ignore that Alert Notice from Microsoft.

However, by pouring a complete circle of salt around yourself and your computer 
you can ensure that no harm befalls you and your pets. If you have received 
this email in error, please add some nutmeg and egg whites, whisk and place in 
a warm oven for 40 minutes.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Jonathan Link
My condolences.  Were I in your shoes, I'd pull AVG off the server for a few
days.  Also, can you actually replicate the problem if you revert to the
original DfsIRPStackSize  for MUP?  You can then test whether or not it
really is an AVG/Truecrypt problem.



On Wed, Mar 30, 2011 at 1:45 PM, Carl Houseman c.house...@gmail.com wrote:

  Yes and nothing will change that.  The data must remain reasonably secure
 if the server is stolen.



 *From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
 *Sent:* Wednesday, March 30, 2011 1:39 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?



 Is the physical security of the server so poor that you're using encryption
 to protect the data at rest?

 That's about the only situation I can see using encryption on a server
 which then shares that data.

 On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman c.house...@gmail.com
 wrote:

 Recently set up some encrypted storage on an SBS 2003 server using
 Truecrypt, just a simple encrypted container, no encryption of system
 drive.  The server is also running AVG 9 but the Truecrypt container folder
 has been excluded from RT scanning.  Two folders on the encrypted volume
 have been shared to the network for access by XP client machines.  I've done
 this on a Server 2003 without incident, but that server wasn't running any
 AV.



 Since Truecrypt was set up there have been 4 BSOD's, 3 of them were
 x107e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035
 (NO_MORE_IRP_STACK_LOCATIONS), all referencing *srv.sys*.   All of the
 BSODs coincide with clients accessing the share(s) on the encrypted volume.
  It could be reading or writing   For the case of the 0x35, I increased the
 DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about
 MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD
 since, it was today's 7e).



 So, I'm hoping somebody else has heard of this, but not that hopeful since
 Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.



 Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope
 that makes a difference.  Since both are open source, can I reasonably hope
 they are using different code that might be related to these crashes?



 Or if you have a preferred alternative for a (a) free means of (b)
 encrypting a subset of server storage so that storage is (c) available to
 network client users (d) without them thinking about it or having to type
 anything (other than entering the decryption password one time after each
 server restart), and that encryption (e) doesn't need or recommend the use
 of complex recovery mechanisms, and (f) know about or have a set-up tutorial
 for said encryption that is (g) faster to work through than setting up
 FreeOTFE, I'm all ears.



 [The (a) ... (g) in the above paragraph are required conditions for an
 alternative to overtake FreeOTFE as the next attempt at making this work...
 I'm open to all suggestions, but I have limited time with which to solve
 this and FreeOTFE looks like the least trouble to try.]



 TIA

 Carl

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Deny roaming profile access at logon

2011-03-30 Thread Rankin, James R
I have been getting an error stating could not load profile when running 
published apps from a 2003 server. I thought it was because the 2008 R2 profile 
was incompatible, hence I was not wanting to load the roaming profile. However, 
thinking about it, I have just realised the error may be to do with the .v2 
that you need to append to the profile name for 2008. I will know for sure 
tomorrow, but I think creating a blank 2003 profile in a folder without the .v2 
extension may get rid of the errors. If it is that, thanks for making me think 
it through properly!

Typed frustratingly slowly on my BlackBerry® wireless device

-Original Message-
From: Tom Miller tmil...@hnncsb.org
Date: Wed, 30 Mar 2011 11:53:41 
To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
Reply-To: NT System Admin Issues 
ntsysadmin@lyris.sunbelt-software.comSubject: Re: Deny roaming profile access 
at logon

That's right.  It's been a while since I created those GPOs.  My error.
What's the need to prevent a profile from loading?  Perhaps there is something 
else we could suggest.

 James Rankin kz2...@googlemail.com 3/30/2011 10:44 AM 
It's a computer-level GPO for only allow local profiles. It only applies to 
everyone, or not at all. Same goes for setting TS Profile via GPO. Unless you 
know different...I've been struggling to understand why TS Profile was a 
computer-level GPO for a while now.

On 30 March 2011 15:40, Tom Miller tmil...@hnncsb.org wrote:


Can't you change your current GPO to be more specific instead of authenticated 
users? I have several XenApp GPOs that have different settings for different 
groups, and I use TS Roaming profiles in them.
Tom

 James Rankin kz2...@googlemail.com 3/30/2011 9:39 AM 

It's not the server with the printer issue, no (I have lots of issues lately, 
my wife tells me the same thing too) :-)

Sorry, I should have been more specific - it's the TS roaming profile that I am 
trying to avoid loading for a certain subset of users. Not a standard roaming 
profile. I have not worked with fat clients for so long, I forget they exist :-)

On 30 March 2011 14:37, Ben Scott mailvor...@gmail.com wrote:


On Wed, Mar 30, 2011 at 9:14 AM, James Rankin kz2...@googlemail.com wrote:
 I think this is probably a non-starter, but does anyone have any idea how I
 might go about preventing a user's roaming profile from loading when they
 log on to a particular server?

Is this for your Terminal Server with the printers problem? If so,
isn't there a per-user Active Directory property to load a different
profile for Terminal Servers?

-- Ben


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.

IMPORTANT: This email is intended for the use of the individual addressee(s) 
named above and may contain information that is confidential, privileged or 
unsuitable for overly sensitive persons with low self-esteem, no sense of 
humour or irrational religious beliefs. If you are not the intended recipient, 
any dissemination, distribution or copying of this email is not authorised 
(either explicitly or implicitly) and constitutes an irritating social faux pas.

Unless the word absquatulation has been used in its correct context somewhere 
other than in this warning, it does not have any legal or no grammatical use 
and may be ignored. No animals were harmed in the transmission of this email, 
although the kelpie next door is living on borrowed time, let me tell you. 
Those of you with an overwhelming fear of the unknown will be gratified to 
learn that there is no hidden message revealed by reading this warning 
backwards, so just ignore that Alert Notice from Microsoft.

However, by pouring a complete circle of salt around yourself and your computer 
you can ensure that no harm befalls you and your pets. If you have received 
this email in error, please add some nutmeg and egg whites, whisk and place in 
a warm oven for 40 minutes.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. 

RE: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Michael B. Smith
Lots of customers have data-at-rest encryption requirements. Otherwise, 
Microsoft wouldn't have bothered to develop BitLocker. :)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Wednesday, March 30, 2011 2:00 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

My condolences.  Were I in your shoes, I'd pull AVG off the server for a few 
days.  Also, can you actually replicate the problem if you revert to the 
original DfsIRPStackSize  for MUP?  You can then test whether or not it really 
is an AVG/Truecrypt problem.



On Wed, Mar 30, 2011 at 1:45 PM, Carl Houseman 
c.house...@gmail.commailto:c.house...@gmail.com wrote:
Yes and nothing will change that.  The data must remain reasonably secure if 
the server is stolen.

From: Jonathan Link 
[mailto:jonathan.l...@gmail.commailto:jonathan.l...@gmail.com]
Sent: Wednesday, March 30, 2011 1:39 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

Is the physical security of the server so poor that you're using encryption to 
protect the data at rest?
That's about the only situation I can see using encryption on a server which 
then shares that data.
On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman 
c.house...@gmail.commailto:c.house...@gmail.com wrote:
Recently set up some encrypted storage on an SBS 2003 server using Truecrypt, 
just a simple encrypted container, no encryption of system drive.  The server 
is also running AVG 9 but the Truecrypt container folder has been excluded from 
RT scanning.  Two folders on the encrypted volume have been shared to the 
network for access by XP client machines.  I've done this on a Server 2003 
without incident, but that server wasn't running any AV.

Since Truecrypt was set up there have been 4 BSOD's, 3 of them were x107e 
(SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035 
(NO_MORE_IRP_STACK_LOCATIONS), all referencing srv.sys.   All of the BSODs 
coincide with clients accessing the share(s) on the encrypted volume.  It could 
be reading or writing   For the case of the 0x35, I increased the 
DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about 
MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD 
since, it was today's 7e).

So, I'm hoping somebody else has heard of this, but not that hopeful since 
Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.

Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope that 
makes a difference.  Since both are open source, can I reasonably hope they are 
using different code that might be related to these crashes?

Or if you have a preferred alternative for a (a) free means of (b) encrypting a 
subset of server storage so that storage is (c) available to network client 
users (d) without them thinking about it or having to type anything (other than 
entering the decryption password one time after each server restart), and that 
encryption (e) doesn't need or recommend the use of complex recovery 
mechanisms, and (f) know about or have a set-up tutorial for said encryption 
that is (g) faster to work through than setting up FreeOTFE, I'm all ears.

[The (a) ... (g) in the above paragraph are required conditions for an 
alternative to overtake FreeOTFE as the next attempt at making this work... I'm 
open to all suggestions, but I have limited time with which to solve this and 
FreeOTFE looks like the least trouble to try.]

TIA
Carl

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 

Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Jonathan Link
So, is this your roundabout recommendation of suggesting an upgrade? :-)
IIRC Bitlocker wasn't available for SBS 2003

On Wed, Mar 30, 2011 at 2:02 PM, Michael B. Smith mich...@smithcons.comwrote:

  Lots of customers have data-at-rest encryption requirements. Otherwise,
 Microsoft wouldn’t have bothered to develop BitLocker. J



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
 *Sent:* Wednesday, March 30, 2011 2:00 PM

 *To:* NT System Admin Issues
 *Subject:* Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?



 My condolences.  Were I in your shoes, I'd pull AVG off the server for a
 few days.  Also, can you actually replicate the problem if you revert to the
 original DfsIRPStackSize  for MUP?  You can then test whether or not it
 really is an AVG/Truecrypt problem.





 On Wed, Mar 30, 2011 at 1:45 PM, Carl Houseman c.house...@gmail.com
 wrote:

 Yes and nothing will change that.  The data must remain reasonably secure
 if the server is stolen.



 *From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
 *Sent:* Wednesday, March 30, 2011 1:39 PM
 *To:* NT System Admin Issues
 *Subject:* Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?



 Is the physical security of the server so poor that you're using encryption
 to protect the data at rest?

 That's about the only situation I can see using encryption on a server
 which then shares that data.

 On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman c.house...@gmail.com
 wrote:

 Recently set up some encrypted storage on an SBS 2003 server using
 Truecrypt, just a simple encrypted container, no encryption of system
 drive.  The server is also running AVG 9 but the Truecrypt container folder
 has been excluded from RT scanning.  Two folders on the encrypted volume
 have been shared to the network for access by XP client machines.  I've done
 this on a Server 2003 without incident, but that server wasn't running any
 AV.



 Since Truecrypt was set up there have been 4 BSOD's, 3 of them were
 x107e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035
 (NO_MORE_IRP_STACK_LOCATIONS), all referencing *srv.sys*.   All of the
 BSODs coincide with clients accessing the share(s) on the encrypted volume.
  It could be reading or writing   For the case of the 0x35, I increased the
 DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about
 MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD
 since, it was today's 7e).



 So, I'm hoping somebody else has heard of this, but not that hopeful since
 Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.



 Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope
 that makes a difference.  Since both are open source, can I reasonably hope
 they are using different code that might be related to these crashes?



 Or if you have a preferred alternative for a (a) free means of (b)
 encrypting a subset of server storage so that storage is (c) available to
 network client users (d) without them thinking about it or having to type
 anything (other than entering the decryption password one time after each
 server restart), and that encryption (e) doesn't need or recommend the use
 of complex recovery mechanisms, and (f) know about or have a set-up tutorial
 for said encryption that is (g) faster to work through than setting up
 FreeOTFE, I'm all ears.



 [The (a) ... (g) in the above paragraph are required conditions for an
 alternative to overtake FreeOTFE as the next attempt at making this work...
 I'm open to all suggestions, but I have limited time with which to solve
 this and FreeOTFE looks like the least trouble to try.]



 TIA

 Carl

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 

Re: New Adobe Patches

2011-03-30 Thread Angus Scott-Fleming
On 22 Mar 2011 at 13:18, richardmccl...@aspca.org  wrote:

 OK, thanks... 
 
 There is also supposed to be a Reader 10.0.0.2 released as well 
 (according to that release notes link). Your link, when I move around 
 in its file structure, still has 10.0.0.1. 

The 10.0.2 patch is only for the Mac OS X version of Adobe Reader.  The Windows 
version of the 10.0.2 patch for Reader will be rolled out with the scheduled 
quarterly patch.  It appears from language in the bulletin that there *_is_* a 
patch for the full Acrobat product on Windows.

  Adobe - Security Bulletins: APSB11-06 
  - Security updates available for Adobe Reader and Acrobat
  http://www.adobe.com/support/security/bulletins/apsb11-06.html

Adobe recommends users of Adobe Reader X (10.0.1) for Macintosh update to 
Adobe Reader X (10.0.2). For users of Adobe Reader 9.4.2 for Windows and 
Macintosh, Adobe has made available the update, Adobe Reader 9.4.3.  Adobe 
recommends users of Adobe Acrobat X (10.0.1) for Windows and Macintosh 
update to Adobe Acrobat X (10.0.2).  Adobe recommends users of Adobe 
Acrobat 9.4.2 for Windows and Macintosh update to Adobe Acrobat 9.4.3. 
Because Adobe Reader X Protected Mode would prevent an exploit of this 
kind from executing, we are planning to address this issue in Adobe Reader 
X for Windows with the next quarterly security update for Adobe Reader, 
currently scheduled for June 14, 2011.

There is a link to the Acrobat download page on the bulletin.

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-895-3270
Security Blog: http://geoapps.com/



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Michael B. Smith
One may choose to read into it whatever one's heart desires. :-)

Sent from my HTC Tilt™ 2, a Windows® phone from ATT


From: Jonathan Link jonathan.l...@gmail.com
Sent: Wednesday, March 30, 2011 2:12 PM
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

So, is this your roundabout recommendation of suggesting an upgrade? :-)  IIRC 
Bitlocker wasn't available for SBS 2003

On Wed, Mar 30, 2011 at 2:02 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
Lots of customers have data-at-rest encryption requirements. Otherwise, 
Microsoft wouldn’t have bothered to develop BitLocker. :)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.comhttp://theessentialexchange.com/

From: Jonathan Link 
[mailto:jonathan.l...@gmail.commailto:jonathan.l...@gmail.com]
Sent: Wednesday, March 30, 2011 2:00 PM

To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

My condolences.  Were I in your shoes, I'd pull AVG off the server for a few 
days.  Also, can you actually replicate the problem if you revert to the 
original DfsIRPStackSize  for MUP?  You can then test whether or not it really 
is an AVG/Truecrypt problem.



On Wed, Mar 30, 2011 at 1:45 PM, Carl Houseman 
c.house...@gmail.commailto:c.house...@gmail.com wrote:
Yes and nothing will change that.  The data must remain reasonably secure if 
the server is stolen.

From: Jonathan Link 
[mailto:jonathan.l...@gmail.commailto:jonathan.l...@gmail.com]
Sent: Wednesday, March 30, 2011 1:39 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

Is the physical security of the server so poor that you're using encryption to 
protect the data at rest?
That's about the only situation I can see using encryption on a server which 
then shares that data.
On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman 
c.house...@gmail.commailto:c.house...@gmail.com wrote:
Recently set up some encrypted storage on an SBS 2003 server using Truecrypt, 
just a simple encrypted container, no encryption of system drive.  The server 
is also running AVG 9 but the Truecrypt container folder has been excluded from 
RT scanning.  Two folders on the encrypted volume have been shared to the 
network for access by XP client machines.  I've done this on a Server 2003 
without incident, but that server wasn't running any AV.

Since Truecrypt was set up there have been 4 BSOD's, 3 of them were x107e 
(SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035 
(NO_MORE_IRP_STACK_LOCATIONS), all referencing srv.sys.   All of the BSODs 
coincide with clients accessing the share(s) on the encrypted volume.  It could 
be reading or writing   For the case of the 0x35, I increased the 
DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about 
MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD 
since, it was today's 7e).

So, I'm hoping somebody else has heard of this, but not that hopeful since 
Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.

Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope that 
makes a difference.  Since both are open source, can I reasonably hope they are 
using different code that might be related to these crashes?

Or if you have a preferred alternative for a (a) free means of (b) encrypting a 
subset of server storage so that storage is (c) available to network client 
users (d) without them thinking about it or having to type anything (other than 
entering the decryption password one time after each server restart), and that 
encryption (e) doesn't need or recommend the use of complex recovery 
mechanisms, and (f) know about or have a set-up tutorial for said encryption 
that is (g) faster to work through than setting up FreeOTFE, I'm all ears.

[The (a) ... (g) in the above paragraph are required conditions for an 
alternative to overtake FreeOTFE as the next attempt at making this work... I'm 
open to all suggestions, but I have limited time with which to solve this and 
FreeOTFE looks like the least trouble to try.]

TIA
Carl

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe 

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 1:01 PM, Jonathan Link wrote:
 Or just do it now.  Planned outages, even during business hours are
 alwyas better than unplanned ones.  You also seem to have an element of
 unpredictability here, so...

True. However, the instructions are a bit scary - they say that the
patch may not work, if the motherboard is bad ... and then the flashing
would fail, and you wouldn't be able to boot the computer *at all*. :-(

So we think we'll do it Sat. This way, if it bricks the mobo, at least
we have a 4 hour turnaround for a new mobo 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: ADUC Pluggins?

2011-03-30 Thread Kurt Buff
I've found SpecOps free gpupdate tool to be useful.

On Wed, Mar 30, 2011 at 11:48, Sam Cayze sca...@gmail.com wrote:
 Any handy plugins avail for ADUC MMC?  I can’t help but think how handy it
 would be to have another option similar to ‘manage’ but instead be ‘connect
 to C$’



 -Sam

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Group Enumeration Issue

2011-03-30 Thread Phil Hershey
Tried promoting from global to universal, but it didn't help we
apparently have bigger AD issues, symptoms of which are starting to
bubble up.  No events in security event log, although the Default Domain
Controller audit policy clearly as logon events, account logon events
and other items set to monitor both successful and failed events.

 

(Tried to reply multiple times this morning, but kept being rejected by
the list server for send an attachment, although there was never one.)

 

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Tuesday, March 29, 2011 2:53 PM
To: NT System Admin Issues
Subject: RE: Group Enumeration Issue

 

Promote it.

Sent from my HTC Tilt 2, a Windows phone from ATT



From: Phil Hershey phers...@agia.com
Sent: Tuesday, March 29, 2011 5:27 PM
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Subject: RE: Group Enumeration Issue

Hi, Michael.

 

Global distribution.

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Tuesday, March 29, 2011 2:23 PM
To: NT System Admin Issues
Subject: RE: Group Enumeration Issue

 

What kind of group?

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Phil Hershey [mailto:phers...@agia.com] 
Sent: Tuesday, March 29, 2011 4:59 PM
To: NT System Admin Issues
Subject: Group Enumeration Issue

 

Odd problem that has just cropped up.  Domain with 4 DC's in 2 sites
that are T3 connected, only about 350 users, native 2003 mode.  We have
a problem with resolving the members of a single one of our ~100
distribution groups.  The server that holds all but one of the FSMO
roles correctly shows all the member groups and users for this DL.  If I
go to the Members tab for this DL on any of the other DCs, the members
box is empty.  However if you try and add one of the groups or users
that is actually already in this DL, you get a 'account name is already
a member of the local group' error.  REPLMON shows all successful
replications, and a REPADMIN /syncall DC /force all shows completion
without errors.  Seems like we've got a problem with versioning on the
DCs.  They're all Server 2003 32-bit Std Edition and fully patched.

 

Any ideas?

 

Thanks.

 

Phil Hershey

MCSE 2003: Security | MCITP - Enterprise Messaging Admin 2010

AGIA Insurance Services

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003? (UNCLASSIFIED)

2011-03-30 Thread Kent, Larry CTR US USA
Classification: UNCLASSIFIED
Caveats: FOUO

+1

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Wednesday, March 30, 2011 2:03 PM
To: NT System Admin Issues
Subject: RE: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

Lots of customers have data-at-rest encryption requirements. Otherwise,
Microsoft wouldn't have bothered to develop BitLocker. :-)

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Wednesday, March 30, 2011 2:00 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

 

My condolences.  Were I in your shoes, I'd pull AVG off the server for a
few days.  Also, can you actually replicate the problem if you revert to
the original DfsIRPStackSize  for MUP?  You can then test whether or not
it really is an AVG/Truecrypt problem.



 

On Wed, Mar 30, 2011 at 1:45 PM, Carl Houseman c.house...@gmail.com
wrote:

Yes and nothing will change that.  The data must remain reasonably
secure if the server is stolen.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Wednesday, March 30, 2011 1:39 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

 

Is the physical security of the server so poor that you're using
encryption to protect the data at rest?

That's about the only situation I can see using encryption on a server
which then shares that data.

On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman c.house...@gmail.com
wrote:

Recently set up some encrypted storage on an SBS 2003 server using
Truecrypt, just a simple encrypted container, no encryption of system
drive.  The server is also running AVG 9 but the Truecrypt container
folder has been excluded from RT scanning.  Two folders on the encrypted
volume have been shared to the network for access by XP client machines.
I've done this on a Server 2003 without incident, but that server wasn't
running any AV.

 

Since Truecrypt was set up there have been 4 BSOD's, 3 of them were
x107e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035
(NO_MORE_IRP_STACK_LOCATIONS), all referencing srv.sys.   All of the
BSODs coincide with clients accessing the share(s) on the encrypted
volume.  It could be reading or writing   For the case of the 0x35, I
increased the DfsIRPStackSize for MUP.sys even though the BSOD wasn't
complaining about MUP.sys.  Can't tell yet if that helped or not
(there's only been one BSOD since, it was today's 7e).

 

So, I'm hoping somebody else has heard of this, but not that hopeful
since Google hasn't heard of it.  I know I can open an incident at
Truecrypt.org.

 

Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and
hope that makes a difference.  Since both are open source, can I
reasonably hope they are using different code that might be related to
these crashes?

 

Or if you have a preferred alternative for a (a) free means of (b)
encrypting a subset of server storage so that storage is (c) available
to network client users (d) without them thinking about it or having to
type anything (other than entering the decryption password one time
after each server restart), and that encryption (e) doesn't need or
recommend the use of complex recovery mechanisms, and (f) know about or
have a set-up tutorial for said encryption that is (g) faster to work
through than setting up FreeOTFE, I'm all ears.

 

[The (a) ... (g) in the above paragraph are required conditions for an
alternative to overtake FreeOTFE as the next attempt at making this
work... I'm open to all suggestions, but I have limited time with which
to solve this and FreeOTFE looks like the least trouble to try.]

 

TIA

Carl

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
blockedhttp://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
blockedhttp://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com
blockedmailto:listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
blockedhttp://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
blockedhttp://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com
blockedmailto:listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
blockedhttp://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

Windows Desktop search 3.01 removal

2011-03-30 Thread Stefan Jafs
I have a server 2003 VM that was P2V'd a while ago, it from a different
division and has a whole bunch of c**p on it, ideally I would setup a new
server but in the mean time I was trying to do some cleanup, It has Windows
Desktop search 3.01 installed and I wanted to unistall, however it gives me
this long list of updates that has been installed after and warning that the
sky maybe falling if I continue.



Is this true or should I go ahead with the removal?

-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ADUC Pluggins?

2011-03-30 Thread Christopher Bodnar
Not a plug-in, but if you are looking to have more functionality, I can 
highly recommend DameWare's NT Utilities. The amount of options available 
is staggering. But not free.



Chris Bodnar, MCSE, MCITP
Technical Support III
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003



From:   Sam Cayze sca...@gmail.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date:   03/30/2011 02:48 PM
Subject:ADUC Pluggins?



Any handy plugins avail for ADUC MMC?  I can’t help but think how handy it 
would be to have another option similar to ‘manage’ but instead be 
‘connect to C$’
 
-Sam
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Group Enumeration Issue

2011-03-30 Thread Christopher Bodnar
Do a DCDIAG with the /e /i switches and look closely at the results. You 
should be seeing something there. 

Also do a repadmin /showrepl 




Chris Bodnar, MCSE, MCITP
Technical Support III
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003



From:   Phil Hershey phers...@agia.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date:   03/30/2011 03:26 PM
Subject:RE: Group Enumeration Issue



Tried promoting from global to universal, but it didn’t help we apparently 
have bigger AD issues, symptoms of which are starting to bubble up.  No 
events in security event log, although the Default Domain Controller audit 
policy clearly as logon events, account logon events and other items set 
to monitor both successful and failed events.
 
(Tried to reply multiple times this morning, but kept being rejected by 
the list server for send an attachment, although there was never one.)
 
 
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Tuesday, March 29, 2011 2:53 PM
To: NT System Admin Issues
Subject: RE: Group Enumeration Issue
 
Promote it.

Sent from my HTC Tilt 2, a Windows phone from ATT

From: Phil Hershey phers...@agia.com
Sent: Tuesday, March 29, 2011 5:27 PM
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Subject: RE: Group Enumeration Issue
Hi, Michael.
 
Global distribution.
 
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Tuesday, March 29, 2011 2:23 PM
To: NT System Admin Issues
Subject: RE: Group Enumeration Issue
 
What kind of group?
 
Regards,
 
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com
 
From: Phil Hershey [mailto:phers...@agia.com] 
Sent: Tuesday, March 29, 2011 4:59 PM
To: NT System Admin Issues
Subject: Group Enumeration Issue
 
Odd problem that has just cropped up.  Domain with 4 DC’s in 2 sites that 
are T3 connected, only about 350 users, native 2003 mode.  We have a 
problem with resolving the members of a single one of our ~100 
distribution groups.  The server that holds all but one of the FSMO roles 
correctly shows all the member groups and users for this DL.  If I go to 
the Members tab for this DL on any of the other DCs, the members box is 
empty.  However if you try and add one of the groups or users that is 
actually already in this DL, you get a ‘account name is already a member 
of the local group’ error.  REPLMON shows all successful replications, and 
a REPADMIN /syncall DC /force all shows completion without errors.  Seems 
like we’ve got a problem with versioning on the DCs.  They’re all Server 
2003 32-bit Std Edition and fully patched.
 
Any ideas?
 
Thanks.
 
Phil Hershey
MCSE 2003: Security | MCITP - Enterprise Messaging Admin 2010
AGIA Insurance Services
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ 

RE: Anyone recommendations for Cloud server hosting?

2011-03-30 Thread Alex Eckelberry
we use peak10 and like it.

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Wednesday, March 30, 2011 12:11 PM
To: NT System Admin Issues
Subject: Re: Anyone recommendations for Cloud server hosting?

RackSpace is very good in this space.

What will you be doing?Microsoft or Amazon will work well here, too, for 
most needs.




ASB (Professional Biohttp://about.me/Andrew.S.Baker/bio)
Technology Services that Maximize Business Results...




On Wed, Mar 30, 2011 at 9:13 AM, Chris Blair 
chris_bl...@identisys.commailto:chris_bl...@identisys.com wrote:
We need to move our cloud server hosting to a new company. We need to run a 
Windows 2008 R2 server, with SQL express, 1gb ram, and 10gb disk space. I have 
looked at a few, Server Intellect, Rack Space, and Amazon S2.

Any real work experiences? Any other recommendations?


Thanks,
Chris Blair


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Windows Desktop search 3.01 removal

2011-03-30 Thread Rankin, James R
Take a snapshot, take the plunge :-)

Typed frustratingly slowly on my BlackBerry® wireless device

-Original Message-
From: Stefan Jafs stefan.j...@gmail.com
Date: Wed, 30 Mar 2011 15:29:56 
To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
Reply-To: NT System Admin Issues 
ntsysadmin@lyris.sunbelt-software.comSubject: Windows Desktop search 3.01 
removal

I have a server 2003 VM that was P2V'd a while ago, it from a different
division and has a whole bunch of c**p on it, ideally I would setup a new
server but in the mean time I was trying to do some cleanup, It has Windows
Desktop search 3.01 installed and I wanted to unistall, however it gives me
this long list of updates that has been installed after and warning that the
sky maybe falling if I continue.



Is this true or should I go ahead with the removal?

-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Windows Desktop search 3.01 removal

2011-03-30 Thread Stefan Jafs
Yes from Googeling it seems it should be ok and I do have the luxury of the
snapshot, I'll go for it later after hours.

Thanks

Stefan

On Wed, Mar 30, 2011 at 4:11 PM, Rankin, James R kz2...@googlemail.comwrote:

 Take a snapshot, take the plunge :-)

 Typed frustratingly slowly on my BlackBerry® wireless device
 --
 *From: * Stefan Jafs stefan.j...@gmail.com
 *Date: *Wed, 30 Mar 2011 15:29:56 -0400
 *To: *NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
 *ReplyTo: * NT System Admin Issues 
 ntsysadmin@lyris.sunbelt-software.com
 *Subject: *Windows Desktop search 3.01 removal

 I have a server 2003 VM that was P2V'd a while ago, it from a different
 division and has a whole bunch of c**p on it, ideally I would setup a new
 server but in the mean time I was trying to do some cleanup, It has Windows
 Desktop search 3.01 installed and I wanted to unistall, however it gives me
 this long list of updates that has been installed after and warning that the
 sky maybe falling if I continue.



 Is this true or should I go ahead with the removal?

 --
 Stefan Jafs

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

VESA LCD monitor stands

2011-03-30 Thread John Aldrich
Anyone know where I can get some generic, VESA LCD monitor stands? I don't
want an arm, I just want to repurpose some flat-panel monitors we had
mounted on walls that we're no longer using and I no longer have the
mounting hardware for the monitors in question. I've got like a 19 and a
20-21 LCD I'd like to repurpose.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: VESA LCD monitor stands

2011-03-30 Thread N Parr
Monoprice.com 

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, March 30, 2011 3:33 PM
To: NT System Admin Issues
Subject: VESA LCD monitor stands

Anyone know where I can get some generic, VESA LCD monitor stands? I
don't want an arm, I just want to repurpose some flat-panel monitors we
had mounted on walls that we're no longer using and I no longer have the
mounting hardware for the monitors in question. I've got like a 19 and
a 20-21 LCD I'd like to repurpose.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: VESA LCD monitor stands

2011-03-30 Thread Sam Cayze
I have a bunch of Dell monitor stands I can't get rid of... want to buy them
for cheap? :)

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, March 30, 2011 3:33 PM
To: NT System Admin Issues
Subject: VESA LCD monitor stands

Anyone know where I can get some generic, VESA LCD monitor stands? I don't
want an arm, I just want to repurpose some flat-panel monitors we had
mounted on walls that we're no longer using and I no longer have the
mounting hardware for the monitors in question. I've got like a 19 and a
20-21 LCD I'd like to repurpose.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: VESA LCD monitor stands

2011-03-30 Thread John Aldrich
Would that the monitors were all Dell... :-(




-Original Message-
From: Sam Cayze [mailto:sca...@gmail.com] 
Sent: Wednesday, March 30, 2011 4:44 PM
To: NT System Admin Issues
Subject: RE: VESA LCD monitor stands

I have a bunch of Dell monitor stands I can't get rid of... want to buy them
for cheap? :)

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, March 30, 2011 3:33 PM
To: NT System Admin Issues
Subject: VESA LCD monitor stands

Anyone know where I can get some generic, VESA LCD monitor stands? I don't
want an arm, I just want to repurpose some flat-panel monitors we had
mounted on walls that we're no longer using and I no longer have the
mounting hardware for the monitors in question. I've got like a 19 and a
20-21 LCD I'd like to repurpose.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

2011-03-30 Thread Carl Houseman
Had the 0x35 BSOD before changing DfsIRPStackSize, haven't had one since,
but I have had 0x7e BSOD before and after that change.

Had the 0x7e BSOD before and after protecting the encrypted container folder
from AV RT scans.

Now I've disabled all AV RT scans and if it crashes again, I plan to pull
off AVG altogether.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Wednesday, March 30, 2011 2:00 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

 

My condolences.  Were I in your shoes, I'd pull AVG off the server for a few
days.  Also, can you actually replicate the problem if you revert to the
original DfsIRPStackSize  for MUP?  You can then test whether or not it
really is an AVG/Truecrypt problem.



 

On Wed, Mar 30, 2011 at 1:45 PM, Carl Houseman c.house...@gmail.com wrote:

Yes and nothing will change that.  The data must remain reasonably secure if
the server is stolen.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Wednesday, March 30, 2011 1:39 PM
To: NT System Admin Issues
Subject: Re: Anyone seen BSOD's when using TrueCrypt 7.0a on SBS 2003?

 

Is the physical security of the server so poor that you're using encryption
to protect the data at rest?

That's about the only situation I can see using encryption on a server which
then shares that data.

On Wed, Mar 30, 2011 at 1:34 PM, Carl Houseman c.house...@gmail.com wrote:

Recently set up some encrypted storage on an SBS 2003 server using
Truecrypt, just a simple encrypted container, no encryption of system drive.
The server is also running AVG 9 but the Truecrypt container folder has been
excluded from RT scanning.  Two folders on the encrypted volume have been
shared to the network for access by XP client machines.  I've done this on a
Server 2003 without incident, but that server wasn't running any AV.

 

Since Truecrypt was set up there have been 4 BSOD's, 3 of them were
x107e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) but one 0x0035
(NO_MORE_IRP_STACK_LOCATIONS), all referencing srv.sys.   All of the BSODs
coincide with clients accessing the share(s) on the encrypted volume.  It
could be reading or writing   For the case of the 0x35, I increased the
DfsIRPStackSize for MUP.sys even though the BSOD wasn't complaining about
MUP.sys.  Can't tell yet if that helped or not (there's only been one BSOD
since, it was today's 7e).

 

So, I'm hoping somebody else has heard of this, but not that hopeful since
Google hasn't heard of it.  I know I can open an incident at Truecrypt.org.

 

Meanwhile, I'm probably going to scrap Truecrypt and try FreeOTFE and hope
that makes a difference.  Since both are open source, can I reasonably hope
they are using different code that might be related to these crashes?

 

Or if you have a preferred alternative for a (a) free means of (b)
encrypting a subset of server storage so that storage is (c) available to
network client users (d) without them thinking about it or having to type
anything (other than entering the decryption password one time after each
server restart), and that encryption (e) doesn't need or recommend the use
of complex recovery mechanisms, and (f) know about or have a set-up tutorial
for said encryption that is (g) faster to work through than setting up
FreeOTFE, I'm all ears.

 

[The (a) ... (g) in the above paragraph are required conditions for an
alternative to overtake FreeOTFE as the next attempt at making this work...
I'm open to all suggestions, but I have limited time with which to solve
this and FreeOTFE looks like the least trouble to try.]

 

TIA

Carl

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ 

RE: VESA LCD monitor stands

2011-03-30 Thread John Aldrich
Thanks... Had to figure out where on their site to find it (even after a
search) but I found it. Not bad... Thanks!




-Original Message-
From: Sam Cayze [mailto:sca...@gmail.com] 
Sent: Wednesday, March 30, 2011 4:44 PM
To: NT System Admin Issues
Subject: RE: VESA LCD monitor stands

I have a bunch of Dell monitor stands I can't get rid of... want to buy them
for cheap? :)

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, March 30, 2011 3:33 PM
To: NT System Admin Issues
Subject: VESA LCD monitor stands

Anyone know where I can get some generic, VESA LCD monitor stands? I don't
want an arm, I just want to repurpose some flat-panel monitors we had
mounted on walls that we're no longer using and I no longer have the
mounting hardware for the monitors in question. I've got like a 19 and a
20-21 LCD I'd like to repurpose.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: ADUC Pluggins?

2011-03-30 Thread Sam Cayze
Pretty impressive, thanks.  For $290, looks like a no-brainer.

-Sam

 

 

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Wednesday, March 30, 2011 2:35 PM
To: NT System Admin Issues
Subject: Re: ADUC Pluggins?

 

Not a plug-in, but if you are looking to have more functionality, I can highly 
recommend DameWare's NT Utilities. The amount of options available is 
staggering. But not free. 



Chris Bodnar, MCSE, MCITP
Technical Support III
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 



From:Sam Cayze sca...@gmail.com 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:03/30/2011 02:48 PM 
Subject:ADUC Pluggins? 

  _  




Any handy plugins avail for ADUC MMC?  I can’t help but think how handy it 
would be to have another option similar to ‘manage’ but instead be ‘connect to 
C$’ 
  
-Sam 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Exporting from Lotus Notes (NSF) to Outlook (PST)

2011-03-30 Thread Ben N
Anyone have a tool they have used, free or not. I basically am looking to
get calendar/contacts from some ex-lotus notes users into Outlook/Exchange.
I'm hoping a good conversion tool can catch all the recurring appointments
correctly. Using more standard formats for exporting just won't cut it. We
really need native NSF to PST conversion.

-Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Exporting from Lotus Notes (NSF) to Outlook (PST)

2011-03-30 Thread Brian Desmond
Keep in mind some of the recurrence patterns supported by Notes simply aren't 
supported by Outlook/Exchange.

The Quest tools do a good job and can do NSF imports (instead of Domino) - I 
think they support PST export too.

Thanks,
Brian Desmond
br...@briandesmond.commailto:br...@briandesmond.com

c   - 312.731.3132

From: Ben N [mailto:bennordlan...@gmail.com]
Sent: Wednesday, March 30, 2011 4:05 PM
To: NT System Admin Issues
Subject: Exporting from Lotus Notes (NSF) to Outlook (PST)

Anyone have a tool they have used, free or not. I basically am looking to get 
calendar/contacts from some ex-lotus notes users into Outlook/Exchange. I'm 
hoping a good conversion tool can catch all the recurring appointments 
correctly. Using more standard formats for exporting just won't cut it. We 
really need native NSF to PST conversion.

-Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: VESA LCD monitor stands

2011-03-30 Thread Terry Dickson
We just purchased some kind of expensive ones from 3M they are available most 
office supply places they are MS110MB and they work pretty well, and have some 
nice features.

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Wednesday, March 30, 2011 3:33 PM
To: NT System Admin Issues
Subject: VESA LCD monitor stands

Anyone know where I can get some generic, VESA LCD monitor stands? I don't want 
an arm, I just want to repurpose some flat-panel monitors we had mounted on 
walls that we're no longer using and I no longer have the mounting hardware for 
the monitors in question. I've got like a 19 and a 20-21 LCD I'd like to 
repurpose.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 CONFIDENTIALITY NOTICE: This e-mail and any attachments are confidential. If 
you are not the intended recipient, you do not have permission to disclose, 
copy, distribute, or open any attachments. If you have received this e-mail in 
error, please notify us immediately by returning it to the sender and delete 
this copy from your system.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: ADUC Pluggins?

2011-03-30 Thread Harry Singh
+1 for Dameware. It's great.

On Wednesday, March 30, 2011, Sam Cayze sca...@gmail.com wrote:
 Pretty impressive, thanks.  For $290, looks like a no-brainer.-Sam  From: 
 Christopher Bodnar [mailto:christopher_bod...@glic.com]
 Sent: Wednesday, March 30, 2011 2:35 PM
 To: NT System Admin Issues
 Subject: Re: ADUC Pluggins? Not a plug-in, but if you are looking to have 
 more functionality, I can highly recommend DameWare's NT Utilities. The 
 amount of options available is staggering. But not free.



 Chris Bodnar, MCSE, MCITP
 Technical Support III
 Distributed Systems Service Delivery - Intel Services
 Guardian Life Insurance Company of America
 Email: christopher_bod...@glic.com
 Phone: 610-807-6459
 Fax: 610-807-6003



 From:        Sam Cayze sca...@gmail.com
 To:        NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
 Date:        03/30/2011 02:48 PM
 Subject:        ADUC Pluggins?


 Any handy plugins avail for ADUC MMC?  I can’t help but think how handy it 
 would be to have another option similar to ‘manage’ but instead be ‘connect 
 to C$’

 -Sam ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security 
 that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: ADUC Pluggins?

2011-03-30 Thread Christopher Bodnar
Another option in this category is Hyena:

http://www.systemtools.com/hyena/pricing.htm

I've used both, but prefer DameWare NT Utilities. 


Chris Bodnar, MCSE, MCITP
Technical Support III
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003



From:   Sam Cayze sca...@gmail.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date:   03/30/2011 04:58 PM
Subject:RE: ADUC Pluggins?



Pretty impressive, thanks.  For $290, looks like a no-brainer.
-Sam
 
 
From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Wednesday, March 30, 2011 2:35 PM
To: NT System Admin Issues
Subject: Re: ADUC Pluggins?
 
Not a plug-in, but if you are looking to have more functionality, I can 
highly recommend DameWare's NT Utilities. The amount of options available 
is staggering. But not free. 



Chris Bodnar, MCSE, MCITP
Technical Support III
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 



From:Sam Cayze sca...@gmail.com 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
 
Date:03/30/2011 02:48 PM 
Subject:ADUC Pluggins? 




Any handy plugins avail for ADUC MMC?  I can’t help but think how handy it 
would be to have another option similar to ‘manage’ but instead be 
‘connect to C$’ 
  
-Sam 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: ADUC Pluggins?

2011-03-30 Thread Jonathan
How about AD Reports by Maxpowersoft? Not a plungin and not free (licensed
by technician install), but very handy for reporting on AD, and not too
terribly expensive.

Jonathan A+, MCSA, MCSE

Thumb-typed from my HTC Droid Incredible (and yes, it really is) on the
Verizon network. Please excuse brevity and any misspellings.

On Mar 30, 2011 2:48 PM, Sam Cayze sca...@gmail.com wrote:
 Any handy plugins avail for ADUC MMC? I can't help but think how handy it
 would be to have another option similar to 'manage' but instead be
'connect
 to C$'



 -Sam


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Windows Desktop search 3.01 removal

2011-03-30 Thread Crawford, Scott
I've uninstalled that a few times in similar situations and not seen any 
problems.

From: Stefan Jafs [mailto:stefan.j...@gmail.com]
Sent: Wednesday, March 30, 2011 3:19 PM
To: NT System Admin Issues
Subject: Re: Windows Desktop search 3.01 removal

Yes from Googeling it seems it should be ok and I do have the luxury of the 
snapshot, I'll go for it later after hours.

Thanks

Stefan
On Wed, Mar 30, 2011 at 4:11 PM, Rankin, James R 
kz2...@googlemail.commailto:kz2...@googlemail.com wrote:
Take a snapshot, take the plunge :-)

Typed frustratingly slowly on my BlackBerry(r) wireless device


From: Stefan Jafs stefan.j...@gmail.commailto:stefan.j...@gmail.com
Date: Wed, 30 Mar 2011 15:29:56 -0400
To: NT System Admin 
Issuesntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com
ReplyTo: NT System Admin Issues 
ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com
Subject: Windows Desktop search 3.01 removal

I have a server 2003 VM that was P2V'd a while ago, it from a different 
division and has a whole bunch of c**p on it, ideally I would setup a new 
server but in the mean time I was trying to do some cleanup, It has Windows 
Desktop search 3.01 installed and I wanted to unistall, however it gives me 
this long list of updates that has been installed after and warning that the 
sky maybe falling if I continue.

Is this true or should I go ahead with the removal?

--
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



--
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Windows Desktop search 3.01 removal

2011-03-30 Thread Stefan Jafs
Ok, just did it and you where correct. no problems, time to delete the
snapshot, BTW gained back about 8 Gigs.

SJ

On Wed, Mar 30, 2011 at 7:37 PM, Crawford, Scott crawfo...@evangel.eduwrote:

  I’ve uninstalled that a few times in similar situations and not seen any
 problems.



 *From:* Stefan Jafs [mailto:stefan.j...@gmail.com]
 *Sent:* Wednesday, March 30, 2011 3:19 PM

 *To:* NT System Admin Issues
 *Subject:* Re: Windows Desktop search 3.01 removal



 Yes from Googeling it seems it should be ok and I do have the luxury of the
 snapshot, I'll go for it later after hours.



 Thanks



 Stefan

 On Wed, Mar 30, 2011 at 4:11 PM, Rankin, James R kz2...@googlemail.com
 wrote:

 Take a snapshot, take the plunge :-)

 Typed frustratingly slowly on my BlackBerry® wireless device
  --

 *From: *Stefan Jafs stefan.j...@gmail.com

 *Date: *Wed, 30 Mar 2011 15:29:56 -0400

 *To: *NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

 *ReplyTo: *NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
 

 *Subject: *Windows Desktop search 3.01 removal



 I have a server 2003 VM that was P2V'd a while ago, it from a different
 division and has a whole bunch of c**p on it, ideally I would setup a new
 server but in the mean time I was trying to do some cleanup, It has Windows
 Desktop search 3.01 installed and I wanted to unistall, however it gives me
 this long list of updates that has been installed after and warning that the
 sky maybe falling if I continue.



 Is this true or should I go ahead with the removal?


 --
 Stefan Jafs

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




 --
 Stefan Jafs

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win7 upgrade question

2011-03-30 Thread Michael B. Smith
I recommend you spend an hour or two looking at MDT 2010 Update 1 in detail 
(MDT - Microsoft Deployment Toolkit).

Not only will it do everything you want (and then some) - it's free.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Wednesday, March 30, 2011 8:12 PM
To: NT System Admin Issues
Subject: Win7 upgrade question

All,

We're on the cusp of getting a MSFT EA in place (it looking like 90%
sure, right now), and we've been ordering Dell laptops for lease with
Win7 Pro on them.

I want to get all of them up to Win7 Enterprise, and thought I had
read somewhere that it was just a matter of a key update.

I can't find any documentation on that, however, and our vendor rep
pointed me at this article:
http://technet.microsoft.com/en-us/library/dd772579%28WS.10%29.aspx

So, for those of you who know about this kind of thing, what would you do?

Right now I'm contemplating either something like this:
http://laplink.com/pcmover

or just doing an Anytime upgrade to Ultimate, and calling it good,
because the lease will run out before the OS EOLs.

Anyone have better thoughts on this?

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win7 upgrade question

2011-03-30 Thread Mike Hoffman
Win 7 Enterprise is not on the retail disks, when you get your agreement you 
will have access to download it. If you have TechNet access then you can start 
playing with the MDT and get the ISO from the same place.

You can go straight to SP1 on the builds and deploy from USB or over the net 
depending on what else you put on the build. You can certainly get rid of any 
OEM junk.

Mike

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: 31 March 2011 04:04
To: NT System Admin Issues
Subject: RE: Win7 upgrade question

I recommend you spend an hour or two looking at MDT 2010 Update 1 in detail 
(MDT - Microsoft Deployment Toolkit).

Not only will it do everything you want (and then some) - it's free.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Wednesday, March 30, 2011 8:12 PM
To: NT System Admin Issues
Subject: Win7 upgrade question

All,

We're on the cusp of getting a MSFT EA in place (it looking like 90% sure, 
right now), and we've been ordering Dell laptops for lease with
Win7 Pro on them.

I want to get all of them up to Win7 Enterprise, and thought I had read 
somewhere that it was just a matter of a key update.

I can't find any documentation on that, however, and our vendor rep pointed me 
at this article:
http://technet.microsoft.com/en-us/library/dd772579%28WS.10%29.aspx

So, for those of you who know about this kind of thing, what would you do?

Right now I'm contemplating either something like this:
http://laplink.com/pcmover

or just doing an Anytime upgrade to Ultimate, and calling it good, because the 
lease will run out before the OS EOLs.

Anyone have better thoughts on this?

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Win7 upgrade question

2011-03-30 Thread Kurt Buff
Excellent. Thank you very much.

Kurt

On Wed, Mar 30, 2011 at 20:03, Michael B. Smith mich...@smithcons.com wrote:
 I recommend you spend an hour or two looking at MDT 2010 Update 1 in detail 
 (MDT - Microsoft Deployment Toolkit).

 Not only will it do everything you want (and then some) - it's free.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Wednesday, March 30, 2011 8:12 PM
 To: NT System Admin Issues
 Subject: Win7 upgrade question

 All,

 We're on the cusp of getting a MSFT EA in place (it looking like 90%
 sure, right now), and we've been ordering Dell laptops for lease with
 Win7 Pro on them.

 I want to get all of them up to Win7 Enterprise, and thought I had
 read somewhere that it was just a matter of a key update.

 I can't find any documentation on that, however, and our vendor rep
 pointed me at this article:
 http://technet.microsoft.com/en-us/library/dd772579%28WS.10%29.aspx

 So, for those of you who know about this kind of thing, what would you do?

 Right now I'm contemplating either something like this:
 http://laplink.com/pcmover

 or just doing an Anytime upgrade to Ultimate, and calling it good,
 because the lease will run out before the OS EOLs.

 Anyone have better thoughts on this?

 Kurt

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Win7 upgrade question

2011-03-30 Thread Kurt Buff
Last time I had a Technet subscription was in, ummm - 1997, IIRC. I'll
have to look at that, and our budget, and see if we can fit it in.

Thanks.

On Wed, Mar 30, 2011 at 20:08, Mike Hoffman m...@drumbrae.net wrote:
 Win 7 Enterprise is not on the retail disks, when you get your agreement you 
 will have access to download it. If you have TechNet access then you can 
 start playing with the MDT and get the ISO from the same place.

 You can go straight to SP1 on the builds and deploy from USB or over the net 
 depending on what else you put on the build. You can certainly get rid of any 
 OEM junk.

 Mike

 -Original Message-
 From: Michael B. Smith [mailto:mich...@smithcons.com]
 Sent: 31 March 2011 04:04
 To: NT System Admin Issues
 Subject: RE: Win7 upgrade question

 I recommend you spend an hour or two looking at MDT 2010 Update 1 in detail 
 (MDT - Microsoft Deployment Toolkit).

 Not only will it do everything you want (and then some) - it's free.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Wednesday, March 30, 2011 8:12 PM
 To: NT System Admin Issues
 Subject: Win7 upgrade question

 All,

 We're on the cusp of getting a MSFT EA in place (it looking like 90% sure, 
 right now), and we've been ordering Dell laptops for lease with
 Win7 Pro on them.

 I want to get all of them up to Win7 Enterprise, and thought I had read 
 somewhere that it was just a matter of a key update.

 I can't find any documentation on that, however, and our vendor rep pointed 
 me at this article:
 http://technet.microsoft.com/en-us/library/dd772579%28WS.10%29.aspx

 So, for those of you who know about this kind of thing, what would you do?

 Right now I'm contemplating either something like this:
 http://laplink.com/pcmover

 or just doing an Anytime upgrade to Ultimate, and calling it good, because 
 the lease will run out before the OS EOLs.

 Anyone have better thoughts on this?

 Kurt

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin