Re: * My New Book Is Out: CYBERHEIST

2011-04-30 Thread Kevin Lundy
I just downloaded the PDF straight to my Nook.  Works fine.  Some
pagination is off meaning a few pages on the screen are just a couple
of lines.

On 4/29/11, Alex Eckelberry al...@sunbelt-software.com wrote:
 I have had little luck being able to read PDF material, at least on my
 smaller Kindle (perhaps the DX is better).

 Maybe there is a secret, but I haven't found it.  It apparently converts
 each page to a graphic.

 -Original Message-
 From: Gary Cordell [mailto:ga...@ers.tcoe.org]
 Sent: Friday, April 29, 2011 4:48 PM
 To: NT System Admin Issues
 Subject: RE: * My New Book Is Out: CYBERHEIST

 I have a Kindle, and it works very nicely for reading books. The screen is
 spooky though--looks like print on a page, not a computer screen.  I
 understand that you can ( I haven't tried it yet, so take it as hearsay for
 now)  email a pdf to a special Kindle address and the gnomes will translate
 it into Kindle format and return it to your Kindle. And that Kindle should
 read aloud any kindle format book to you.
 I will have to try this out this weekend... In my copious spare time of
 which I have none...
 Gary

 -Original Message-
 From: Crawford, Scott [mailto:crawfo...@evangel.edu]
 Sent: Friday, April 29, 2011 1:38 PM
 To: NT System Admin Issues
 Subject: *SPAM*RE: * My New Book Is Out: CYBERHEIST

 Tack on a smiley there :)

 -Original Message-
 From: Crawford, Scott [mailto:crawfo...@evangel.edu]
 Sent: Friday, April 29, 2011 3:36 PM
 To: NT System Admin Issues
 Subject: *SPAM*RE: * My New Book Is Out: CYBERHEIST

 And  a free audio book would be even better

 -Original Message-
 From: Roger Wright [mailto:rhw...@gmail.com]
 Sent: Friday, April 29, 2011 3:28 PM
 To: NT System Admin Issues
 Subject: *SPAM*Re: * My New Book Is Out: CYBERHEIST

 Agreed!  An audiobook would be great!


 Roger Wright
 ___

 I'm out of bed and dressed... what more do you want?





 On Fri, Apr 29, 2011 at 3:16 PM, N Parr npar...@mortonind.com wrote:
 You going to read it to us Stu?  I don't have time to read, listen to
 everything in the car on way to work and back.

 Eddard what are you thinking, you don't give Dire Wolves to children!

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, April 29, 2011 12:40 PM
 To: NT System Admin Issues
 Subject: Re: * My New Book Is Out: CYBERHEIST

 Thank you Stu.

 This is a great service.

 On Fri, Apr 29, 2011 at 09:21, Stu Sjouwerman s...@sunbelt-software.com
 wrote:

   * My New Book Is Out: CYBERHEIST

 Hi All, I'm very excited to announce my new book: CYBERHEIST. (Keep
 on reading for the special NTSYSADMIN subscriber offer at the end of
 this
 item):

 Why I wrote it? To increase executive level awareness that the bad
 guys have moved from simple identity theft to full fledged robbery of
 corporate bank accounts (non-profits are targets too), using phishing
 and social engineering.

 Most business owners, C-level executives and people in HR functions
 simply do not know this yet, but cyberheists are happening right now
 as we speak. Organized cyber crime has developed into a very well
 funded, sophisticated and technically skilled operation, and their
 results are very damaging. Unfortunately, management still has a
 false sense of security. With the rapid proliferation of social media
 and mobile computing, -people- are the new perimeter!

 The threat is there, and getting worse. Just have a look at this
 Google map overlaid with cases, and that is only the tip of the
 iceberg, there are hundreds more unreported cyberheist cases:
 http://www.knowbe4.com/resources/cyberheist-map/

 So, do you need some ammo to get more budget for your IT security?
 You need state-of the art endpoint protection, and I strongly
 recommend VIPRE for that, combined with end-user security awareness
 training.
 Please either forward this link to management and tell them to buy a
 copy. Or better yet, if you really want to make sure they get the
 message, get a copy yourself and give it to them. It's enlightening,
 and written for both IT and non-IT people. Everything is explained in
 normal terms to make sure we don't put anyone to sleep.

 Please do me a favor and tell all your friends? Thanks so much in
 advance!
 Oh, and check out the reviews written by your peers. (Thanks for your
 kind words, you know who you are!)

 Here is the paperback Version
 http://www.amazon.com/Cyberheist-financial-American-businesses-meltdo
 w
 n/
 dp/098348/

 This is the Kindle Version:
 http://www.amazon.com/Cyberheist-financial-American-businesses-ebook/
 dp/B004XDE20O/

 BUT...I have saved the best for last! Subscribers of NTSYSADMIN are
 eligible for a free copy of the e-book in PDF format. This is not
 just one chapter as a teaser. This is the whole darn book! Yes, you
 have to register, and you will receive CyberheistNews twice a month,
 but this is a complete no-brainer. GET IT NOW. This offer goes away very
 

RE: RPC/HTTPS

2011-04-30 Thread Level 5 Lists
I redid all the set-webservicesvirtualdirectory for internal and external url. 
Maybe its not a big deal, but I still don't understand 100%. If I turn off 
rpc/https , open outlook, it re-enables rpc/https and puts in mail.server.com , 
the connection status shows TCP/IP but only because I have the fast/slow 
networks boxes unchecked. Internally our dns does not have mail.domain.com and 
pinging it gives not found error. In the tcp/ip settings it shows 
mx-exchange.domain.com (the internal dns name) so even though rpc is set to 
mail.domain.com it still seems to be working ok. 

If I enable the fast/slow network checks, then I get prompted for pw (ntlm asks 
me 2x for pw and then changes back to BASIC) and then it connects for https. 
Again odd, because mail.domain.com does not answer internally via DNS. 

When I run the autodiscover tests everything seems fine, I get results from the 
internal and external side which look accurate. Once again, internally I do 
*not* have an autodiscover.domain.com so pinging autodiscover.domain.com yields 
nothing, so all this has to be coming from AD or the Exchange server. 

I guess ultimately everything is working, but its not working as expected so 
troubleshooting down the road could become an issue. Our intial finding was 
that DNS scavageng had deleted the internal DNS record (it was set to static 
manually), external dns record, and the autodiscover records which were all set 
to static. We have since deleted mail.domain.com, autodiscover.domain.com and 
had the server register itself instead of it being in there manually. This 
fixed the issue as far as mail and https , but curious as to why now everyone 
is getting rpc/https configuration as I haven't seen that anywhere else. 

Thanks


-Original Message-
From: Level 5 Lists 
Sent: Friday, April 29, 2011 10:07 PM
To: NT System Admin Issues
Subject: RE: RPC/HTTPS

Thanks this is a small shop , 50 users inside, 30 outside ... single exchange 
server, behind a spam appliance, we didn't do forefront etc, just rpc/https/owa 
NATed with a UCC cert. 

I ran that and I get:

Name: RPC (Default Web Site)


If I run it without the name value its just blank . In the GUI I have it set to 
the internal/external sitenames. Maybe this got messed up in the sp3 upgrade? 
And now a week or so later its causing issues?


-Original Message-
From: Damien Solodow [mailto:damien.solo...@harrison.edu]
Sent: Friday, April 29, 2011 5:55 PM
To: NT System Admin Issues
Subject: Re: RPC/HTTPS

Run this in EMS: get-outlookanywhere |fl name,internalurl,externalurl and see 
what you get. 
In general the two url fields should be the same, especially if you're using a 
client access array. 
--
Sent using BlackBerry


- Original Message -
From: Level 5 Lists [mailto:li...@levelfive.us]
Sent: Friday, April 29, 2011 05:30 PM
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Subject: RE: RPC/HTTPS

I did some poking around, it looks like my internal clients are connecting to 
mx-exchange.domain.com and then flipping into rpc/https mail.domain.com Im 
trying to figure out if all I need to do is set the outlookprovider for EXCH to 
MX-EXCHANGE.domain.com so they maintain that connectivity.

I guess on a different issue is why this started happening ... we did upgrade 
to sp3 about 10 days ago but this problem just showed up today.

Thanks


-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Friday, April 29, 2011 2:26 PM
To: NT System Admin Issues
Subject: RE: RPC/HTTPS

No that is correct. There are substantially more properties if you pipe it to 
FL. You need to look at the docs and see what flags to set to control the 
RPC/HTTPS behavior. I don't have the docs in front of me. 

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132


-Original Message-
From: Level 5 Lists [mailto:li...@levelfive.us]
Sent: Friday, April 29, 2011 12:34 PM
To: NT System Admin Issues
Subject: RE: RPC/HTTPS

Thanks Brian, the NTLM was what we had just found too, but obviously internally 
I don't want/need to use rpc ...

I did get-outlookprovider:

[PS] C:\Windows\System32get-outlookprovider

NameServer  CertPrincipalName   TTL
--  -   ---
EXCH1
EXPR1
WEB 1

Everything is blank, so presumably something is wrong ...  will do some 
homework ..


-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Friday, April 29, 2011 1:26 PM
To: NT System Admin Issues
Subject: RE: RPC/HTTPS

You can configure these preferences with the Set-OutlookProvider cmdlet.

As far as why they're getting prompted, you probably have Basic Auth instead of 
NTLM enabled for Outlook Anywhere. 

Thanks,
Brian 

RE: * My New Book Is Out: CYBERHEIST

2011-04-30 Thread Alex Eckelberry
Ahhh, I just finally installed Calibre.  This is an awesome program, and I'll 
see if it makes things better. 

Thanks for the tip 



-Original Message-
From: Bob Fronk [mailto:b...@btrfronk.com] 
Sent: Friday, April 29, 2011 10:36 PM
To: NT System Admin Issues
Subject: RE: * My New Book Is Out: CYBERHEIST

Convert the PDF to .mobi with Caliber first. Then transfer to your Kindle with 
the u...@free.kindle.com  address.

BF



-Original Message-
From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
Sent: Friday, April 29, 2011 10:09 PM
To: NT System Admin Issues
Subject: RE: * My New Book Is Out: CYBERHEIST

I have had little luck being able to read PDF material, at least on my smaller 
Kindle (perhaps the DX is better). 

Maybe there is a secret, but I haven't found it.  It apparently converts each 
page to a graphic. 

-Original Message-
From: Gary Cordell [mailto:ga...@ers.tcoe.org]
Sent: Friday, April 29, 2011 4:48 PM
To: NT System Admin Issues
Subject: RE: * My New Book Is Out: CYBERHEIST

I have a Kindle, and it works very nicely for reading books. The screen is 
spooky though--looks like print on a page, not a computer screen.  I understand 
that you can ( I haven't tried it yet, so take it as hearsay for now)  email a 
pdf to a special Kindle address and the gnomes will translate it into Kindle 
format and return it to your Kindle. And that Kindle should read aloud any 
kindle format book to you. 
I will have to try this out this weekend... In my copious spare time of which I 
have none...
Gary

-Original Message-
From: Crawford, Scott [mailto:crawfo...@evangel.edu]
Sent: Friday, April 29, 2011 1:38 PM
To: NT System Admin Issues
Subject: *SPAM*RE: * My New Book Is Out: CYBERHEIST

Tack on a smiley there :)

-Original Message-
From: Crawford, Scott [mailto:crawfo...@evangel.edu]
Sent: Friday, April 29, 2011 3:36 PM
To: NT System Admin Issues
Subject: *SPAM*RE: * My New Book Is Out: CYBERHEIST

And  a free audio book would be even better

-Original Message-
From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Friday, April 29, 2011 3:28 PM
To: NT System Admin Issues
Subject: *SPAM*Re: * My New Book Is Out: CYBERHEIST

Agreed!  An audiobook would be great!


Roger Wright
___

I'm out of bed and dressed... what more do you want?





On Fri, Apr 29, 2011 at 3:16 PM, N Parr npar...@mortonind.com wrote:
 You going to read it to us Stu?  I don't have time to read, listen to 
 everything in the car on way to work and back.

 Eddard what are you thinking, you don't give Dire Wolves to children!

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, April 29, 2011 12:40 PM
 To: NT System Admin Issues
 Subject: Re: * My New Book Is Out: CYBERHEIST

 Thank you Stu.

 This is a great service.

 On Fri, Apr 29, 2011 at 09:21, Stu Sjouwerman s...@sunbelt-software.com 
 wrote:

   * My New Book Is Out: CYBERHEIST

 Hi All, I'm very excited to announce my new book: CYBERHEIST. (Keep 
 on reading for the special NTSYSADMIN subscriber offer at the end of 
 this
 item):

 Why I wrote it? To increase executive level awareness that the bad 
 guys have moved from simple identity theft to full fledged robbery of 
 corporate bank accounts (non-profits are targets too), using phishing 
 and social engineering.

 Most business owners, C-level executives and people in HR functions 
 simply do not know this yet, but cyberheists are happening right now 
 as we speak. Organized cyber crime has developed into a very well 
 funded, sophisticated and technically skilled operation, and their 
 results are very damaging. Unfortunately, management still has a 
 false sense of security. With the rapid proliferation of social media 
 and mobile computing, -people- are the new perimeter!

 The threat is there, and getting worse. Just have a look at this 
 Google map overlaid with cases, and that is only the tip of the 
 iceberg, there are hundreds more unreported cyberheist cases:
 http://www.knowbe4.com/resources/cyberheist-map/

 So, do you need some ammo to get more budget for your IT security? 
 You need state-of the art endpoint protection, and I strongly 
 recommend VIPRE for that, combined with end-user security awareness training.
 Please either forward this link to management and tell them to buy a 
 copy. Or better yet, if you really want to make sure they get the 
 message, get a copy yourself and give it to them. It's enlightening, 
 and written for both IT and non-IT people. Everything is explained in 
 normal terms to make sure we don't put anyone to sleep.

 Please do me a favor and tell all your friends? Thanks so much in advance!
 Oh, and check out the reviews written by your peers. (Thanks for your 
 kind words, you know who you are!)

 Here is the paperback Version
 http://www.amazon.com/Cyberheist-financial-American-businesses-meltdo
 w
 n/
 dp/098348/

 This is the Kindle Version:
 

RE: adding second dc to site

2011-04-30 Thread Ken Schaefer
So, with the first DC down, and the second (new) DC up, what happens when you 
try to logon to a machine? Do you get no logon servers are available to 
service this request? or are you able to logon?

Cheers
Ken

-Original Message-
From: Jimmy Tran [mailto:jt...@teachtci.com] 
Sent: Saturday, 30 April 2011 10:08 PM
To: NT System Admin Issues
Subject: RE: adding second dc to site

Clients are using the active directory integrated dns service. The new dc is 
registered in the dhcp to be the first dns server.  The second dns server is 
the original windows server 2003 DC. DNS has all the proper srv records for 
both new and old domain controller.

Jimmy

Ken Schaefer k...@adopenstatic.com wrote:

How are the clients locating this DC? (e.g. what are they using for DNS?
Does that DNS server have the DC service records in it?)

Cheers
Ken

-Original Message-
From: Jimmy Tran [mailto:jt...@teachtci.com]
Sent: Saturday, 30 April 2011 11:28 AM
To: NT System Admin Issues
Subject: RE: adding second dc to site

Yes it is a gc

Bob Fronk b...@btrfronk.com wrote:

Did you make it a GC as well?

BF

-Original Message-
From: Jimmy Tran [mailto:jt...@teachtci.com]
Sent: Friday, April 29, 2011 7:25 PM
To: NT System Admin Issues
Subject: Re: adding second dc to site

Yes I allowed sufficient time after running repadmin /syncall.  I also verified 
the existing domain controllers had all the new 2008 attributes.
The new machine is also showing up in the correct site.

Jimmy

Jon Harris jk.har...@gmail.com wrote:

Possibly stupid questions but did you allow time for replication to occur 
before adding the 08 machine?  Is the new machine showing up as in the correct 
site?

Jon

On Fri, Apr 29, 2011 at 6:46 PM, Jimmy Tran jt...@teachtci.com wrote:

 The Win2K8 R2 machine was a member of the domain prior to promotion.
 I
ran
 adprep /forestprep and adprep /domainprep /gpprep on a DC that is
located in
 a different site which holds all 5 FSMO rols.

 Jimmy

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, April 29, 2011 3:40 PM
 To: NT System Admin Issues
 Subject: Re: adding second dc to site

 How exactly did you add the new server? Was the Win2k8 R2 machine a 
 member of the domain when you promoted it? Did you do the necessary 
 ADPrep on the Win2k3 DC beforehand?

 On Fri, Apr 29, 2011 at 15:26, Jimmy Tran jt...@teachtci.com wrote:
  Hi All
 
 
 
  I just added a second DC (server 2008r2) to my existing windows 
  server
 2003
  network.  When I look at security log on the new DC, I don't see any 
  activity from any other users or computers beside the DC itself
(auditing
  enabled).  I took down my primary DC in my site and the secondary DC
did
 not
  authenticate anyone/anything.  What could be wrong?  If there are 
  two
 DC's
  in one site, how can I get the authentication to work on both DCs?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin