PowerShell script to document a Citrix XenApp 5 Farm
Since I have gotten numerous requests for this from people who found the original e-mail via search engines, decided to send another e-mail for the final product. I released today to the Citrix community my PowerShell script. The article is here: http://carlwebster.com/documenting-a-citrix-xenapp-5-farm-with-microsoft-powershell/ And the scripts are here: ReadMe is here http://dl.dropbox.com/u/43555945/XA5_InventoryReadMe.txt I have placed an unsigned copy of the script at http://dl.dropbox.com/u/43555945/XA5_Inventory.ps1 . I have also placed a copy of the unsigned script with a TXT extension at http://dl.dropbox.com/u/43555945/XA5_Inventory.txt . I have placed a digitally signed copy of the script at http://dl.dropbox.com/u/43555945/XA5_Inventory_Signed.ps1 . I have also placed a copy of the digitally signed script with a TXT extension at http://dl.dropbox.com/u/43555945/XA5_Inventory_Signed.txt . I am also trying to finish up the companion XenApp 6.5 article and script. Again, many thanks to MBS for all his help with the PowerShell stuff. And more thanks than I can give to James Rankin for his immeasurable help with this XenApp 5 script. The script is as detailed as it is because of his very thorough testing. Thanks Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: PowerShell script to document a Citrix XenApp 5 Farm
Thanks for the thanks! On 3 October 2011 11:32, Webster webs...@carlwebster.com wrote: Since I have gotten numerous requests for this from people who found the original e-mail via search engines, decided to send another e-mail for the final product. ** ** I released today to the Citrix community my PowerShell script. The article is here: ** ** http://carlwebster.com/documenting-a-citrix-xenapp-5-farm-with-microsoft-powershell/ ** ** And the scripts are here: ReadMe is here http://dl.dropbox.com/u/43555945/XA5_InventoryReadMe.txt*** * I have placed an unsigned copy of the script at http://dl.dropbox.com/u/43555945/XA5_Inventory.ps1 . I have also placed a copy of the unsigned script with a TXT extension at http://dl.dropbox.com/u/43555945/XA5_Inventory.txt . I have placed a digitally signed copy of the script at http://dl.dropbox.com/u/43555945/XA5_Inventory_Signed.ps1 . I have also placed a copy of the digitally signed script with a TXT extension at http://dl.dropbox.com/u/43555945/XA5_Inventory_Signed.txt .** ** I am also trying to finish up the companion XenApp 6.5 article and script. ** ** Again, many thanks to MBS for all his help with the PowerShell stuff. And more thanks than I can give to James Rankin for his immeasurable help with this XenApp 5 script. The script is as detailed as it is because of his very thorough testing. ** ** Thanks ** ** ** ** Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com http://www.carlwebster.com/ ** ** ** ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. ** IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. * * The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them. However, if you pass them on via email, be sure to include a disclaimer regarding liability for transmission. * * In the event that the originator did not send this email to you, then please return it to us and attach a scanned-in picture of your mother's brother's wife wearing nothing but a kangaroo suit, and we will immediately refund you exactly half of what you paid for the can of Whiskas you bought when you went to Pets** ** At Home yesterday. * * We take no responsibility for non-receipt of this email because we are running Exchange 5.5 and everyone knows how glitchy that can be. In the event that you do get this message then please note that we take no responsibility for that either. Nor will we accept any liability, tacit or implied, for any damage you may or may not incur as a result of receiving, or not, as the case may be, from time to time, notwithstanding all liabilities implied or otherwise, ummm, hell, where was I...umm, no matter what happens, it is NOT, and NEVER WILL BE, OUR FAULT! * * The comments and opinions expressed herein are my own and NOT those of my employer, who, if he knew I was sending emails and surfing the seamier side of the Internet, would cut off my manhood and feed it to me for afternoon tea. * ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Outsourcing Exchange
Other than outsourced Exchange, what else has changed? Nothing. At. All. We've followed their recommendations and given some uses new machines with SSD drives, i5 processors, etc, no change. I have been forwarding your guys' comments to our team that's working this, so I really appreciate your guys' input! From PGP's documentation - wrappage (http://www.google.com/url?sa=tsource=webcd=2ved=0CDMQFjABurl=http%3A%2F%2Fdownload.pgp.com%2Fpdfs%2Fwhitepapers%2FHWDEW_WP.pdfei=F7GJTtq3LqriiAL39cmkDAusg=AFQjCNEmg2M8ZQVBWdVogIxSLCwCok7m7w) A boot sequence executes during the startup process of Microsoft® Windows, Apple Mac OS X, or Linux® operating systems. The boot system is the initial set of operations that the computer performs when it is switched on. A boot loader (or a bootstrap loader) is a short computer program that loads the main operating system for the computer. The boot loader first looks at a boot record or partition table, which is the logical area “zero” (or starting point) of the disk drive. Whole disk encryption modifies the zero point area of the drive. File System Basics During the boot process, the system initializes file systems. When a user requests access to a file (i.e., creates, opens, or deletes a file), the request is sent to the operating system input/output (I/O) manager, which forwards the request to the file system manager. The file system manager processes data in blocks. Life with Encryption: Business as Usual Most whole disk encryption software operates in conjunction with the file system architecture. It filters I/O operations for one or more file systems or file system volumes. When a drive is encrypted with whole disk encryption for the first time, it converts unencrypted drive blocks into encrypted blocks one at a time (Figure 2). Decrypted data is never available on the disk. When a user access a file, PGP Whole Disk Encryption decrypts the data in memory before it is presented for viewing. If the user makes any changes to the file, the data is encrypted in memory and written back to the relevant disk drive blocks just as it would be without encryption. Because PGP Whole Disk Encryption operates in conjunction with the file system, there is no additional wear and tear or performance impact beyond normal disk operation. As far as the user is concerned, it’s business as usual, and the underlying mechanism of encryption/decryption is completely transparent. Not quite as detailed as what Michael sent about Bitlocker -Original Message- From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Saturday, October 01, 2011 6:55 AM To: NT System Admin Issues Subject: RE: Outsourcing Exchange This is all rubbish. If PGP works a file system filter driver (Microsoft's API for AV etc for hooking into disk read/writes) then either PGP is corrupting the files (unlikely since you never had this problem before), or some other FSF driver is causing the problem (again unlikely, since you've never had this problem before), or something else is causing the problem. Other than outsourced Exchange, what else has changed? Cheers Ken -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Saturday, 1 October 2011 2:45 AM To: NT System Admin Issues Subject: RE: Outsourcing Exchange We have talked about Bitlocker, but there's no guarantee that will be any better. Heck our Exchange provider didn't know PGP was an issue, and 'll bet PGP is more prevalent than Bitlocker. We're being steered to Win7/Office 2010/Remove PGP as all being needed to help resolve these issues. At 500 employees at least 450 are on XP / Office 2007 and 300+ have PGP on them. The Win7/2010 end state is desirable, it's the compressed timeframe that isn't. Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Outsourcing Exchange
Did this issue show itself when they tested the outsourced solution on your first lot of guinea-pig users? or has it just shown up since a full migration? I'm still disinclined to believe that the PGP product is simply incompatible. Have they managed to prove this beyond a reasonable doubt yet? On 3 October 2011 14:01, David Lum david@nwea.org wrote: Other than outsourced Exchange, what else has changed? Nothing. At. All. We've followed their recommendations and given some uses new machines with SSD drives, i5 processors, etc, no change. I have been forwarding your guys' comments to our team that's working this, so I really appreciate your guys' input! From PGP's documentation - wrappage ( http://www.google.com/url?sa=tsource=webcd=2ved=0CDMQFjABurl=http%3A%2F%2Fdownload.pgp.com%2Fpdfs%2Fwhitepapers%2FHWDEW_WP.pdfei=F7GJTtq3LqriiAL39cmkDAusg=AFQjCNEmg2M8ZQVBWdVogIxSLCwCok7m7w ) A boot sequence executes during the startup process of Microsoft® Windows, Apple Mac OS X, or Linux® operating systems. The boot system is the initial set of operations that the computer performs when it is switched on. A boot loader (or a bootstrap loader) is a short computer program that loads the main operating system for the computer. The boot loader first looks at a boot record or partition table, which is the logical area “zero” (or starting point) of the disk drive. Whole disk encryption modifies the zero point area of the drive. File System Basics During the boot process, the system initializes file systems. When a user requests access to a file (i.e., creates, opens, or deletes a file), the request is sent to the operating system input/output (I/O) manager, which forwards the request to the file system manager. The file system manager processes data in blocks. Life with Encryption: Business as Usual Most whole disk encryption software operates in conjunction with the file system architecture. It filters I/O operations for one or more file systems or file system volumes. When a drive is encrypted with whole disk encryption for the first time, it converts unencrypted drive blocks into encrypted blocks one at a time (Figure 2). Decrypted data is never available on the disk. When a user access a file, PGP Whole Disk Encryption decrypts the data in memory before it is presented for viewing. If the user makes any changes to the file, the data is encrypted in memory and written back to the relevant disk drive blocks just as it would be without encryption. Because PGP Whole Disk Encryption operates in conjunction with the file system, there is no additional wear and tear or performance impact beyond normal disk operation. As far as the user is concerned, it’s business as usual, and the underlying mechanism of encryption/decryption is completely transparent. Not quite as detailed as what Michael sent about Bitlocker -Original Message- From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Saturday, October 01, 2011 6:55 AM To: NT System Admin Issues Subject: RE: Outsourcing Exchange This is all rubbish. If PGP works a file system filter driver (Microsoft's API for AV etc for hooking into disk read/writes) then either PGP is corrupting the files (unlikely since you never had this problem before), or some other FSF driver is causing the problem (again unlikely, since you've never had this problem before), or something else is causing the problem. Other than outsourced Exchange, what else has changed? Cheers Ken -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Saturday, 1 October 2011 2:45 AM To: NT System Admin Issues Subject: RE: Outsourcing Exchange We have talked about Bitlocker, but there's no guarantee that will be any better. Heck our Exchange provider didn't know PGP was an issue, and 'll bet PGP is more prevalent than Bitlocker. We're being steered to Win7/Office 2010/Remove PGP as all being needed to help resolve these issues. At 500 employees at least 450 are on XP / Office 2007 and 300+ have PGP on them. The Win7/2010 end state is desirable, it's the compressed timeframe that isn't. Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to
Re: Load Balancers?
I'm about to purchase two Citrix Netscalers for load balancing our Share Point farm, and Exchange when we go to that. It may be overkill though unless you have a Citrix infrastructure. Can't hurt to take a look. Pricing is based on the features you use. Paul Hutchings paul.hutchi...@mira.co.uk 10/3/2011 8:48 AM I’m starting to think and plan for adding a second Exchange 2010 server and setting up a DAG and CAS array. I know of Kemp, but I’m not familiar with any other vendor when it comes to load balancers. Obviously I can whack it into Google (and have) but on the face of it they all do what I currently want. Any personal recommendations (or nightmares) would be great. A virtual load balancer also sounds like an option as we have a vSphere cluster that should be able to run a pair of appliances in HA. Thanks, Paul MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Favorite switches anyone
Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Favorite switches anyone
HP. On Mon, Oct 3, 2011 at 9:12 AM, Tom Miller tmil...@hnncsb.org wrote: Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Load Balancers?
Netscalars are my current favorite from a price/performance standpoint. Also check out Radware. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Mon, Oct 3, 2011 at 9:44 AM, Tom Miller tmil...@hnncsb.org wrote: I'm about to purchase two Citrix Netscalers for load balancing our Share Point farm, and Exchange when we go to that. It may be overkill though unless you have a Citrix infrastructure. Can't hurt to take a look. Pricing is based on the features you use. Paul Hutchings paul.hutchi...@mira.co.uk 10/3/2011 8:48 AM I’m starting to think and plan for adding a second Exchange 2010 server and setting up a DAG and CAS array. ** ** I know of Kemp, but I’m not familiar with any other vendor when it comes to load balancers. Obviously I can whack it into Google (and have) but on the face of it they all do what I currently want. ** ** Any personal recommendations (or nightmares) would be great. ** ** A virtual load balancer also sounds like an option as we have a vSphere cluster that should be able to run a pair of appliances in HA. ** ** Thanks, Paul -- * * ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Favorite switches anyone
+1 From: Steve Ens [mailto:stevey...@gmail.com] Sent: October-03-11 10:35 AM To: NT System Admin Issues Subject: Re: Favorite switches anyone HP. On Mon, Oct 3, 2011 at 9:12 AM, Tom Miller tmil...@hnncsb.org wrote: Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Load Balancers?
I knew there was a reason I liked you ASB! :) Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Andrew S. Baker [mailto:asbz...@gmail.com] Subject: Re: Load Balancers? Netscalars are my current favorite from a price/performance standpoint. ASB ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Load Balancers?
F5 is the brand that I prefer, they're also generally the most expensive. The Kemp's do a good job and are priced very competitively. If all you're doing is Exchange and nothing complex I can't imagine why you'd need high end devices. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 7:48 AM To: NT System Admin Issues Subject: Load Balancers? I'm starting to think and plan for adding a second Exchange 2010 server and setting up a DAG and CAS array. I know of Kemp, but I'm not familiar with any other vendor when it comes to load balancers. Obviously I can whack it into Google (and have) but on the face of it they all do what I currently want. Any personal recommendations (or nightmares) would be great. A virtual load balancer also sounds like an option as we have a vSphere cluster that should be able to run a pair of appliances in HA. Thanks, Paul MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Fiber splice question
Ya, I don't think that's going to work. Not even sure how they were able to do that. Did they test the fiber before you (someone) signed off on the job? I'm thinking you're going to have to either break it again and splice with the same type of fiber, or run a whole new run. Personally, I'd lean towards the new run. Thomas Mullins tsmull...@wise.k12.va.us 10/3/2011 6:23 AM I hope this is not off topic too much. But, here goes: We had a piece of multimode fiber that was damaged at a local high school. This piece of fiber ran no more than 300 yards from the main building to a field house. The original piece of fiber was multimode. The local school had an outside company splice the damaged section. This company made the splice with single mode fiber. Multimode fiber has a diameter of about 62.5 microns, single mode fiber has a diameter of 8 to 10 microns. I have no idea if this is legal. This piece of fiber will not light up for me. The school purchased FX transceivers. To my knowledge, FX transceivers will work with both single and multi mode fiber. Thanks Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Fiber splice question
Agreed. You can't switch fiber types in the middle of the chain. I can't even imagine any company that does fiber doing something like that. From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Monday, October 03, 2011 11:09 AM To: NT System Admin Issues Subject: Re: Fiber splice question Ya, I don't think that's going to work. Not even sure how they were able to do that. Did they test the fiber before you (someone) signed off on the job? I'm thinking you're going to have to either break it again and splice with the same type of fiber, or run a whole new run. Personally, I'd lean towards the new run. Thomas Mullins tsmull...@wise.k12.va.us 10/3/2011 6:23 AM I hope this is not off topic too much. But, here goes: We had a piece of multimode fiber that was damaged at a local high school. This piece of fiber ran no more than 300 yards from the main building to a field house. The original piece of fiber was multimode. The local school had an outside company splice the damaged section. This company made the splice with single mode fiber. Multimode fiber has a diameter of about 62.5 microns, single mode fiber has a diameter of 8 to 10 microns. I have no idea if this is legal. This piece of fiber will not light up for me. The school purchased FX transceivers. To my knowledge, FX transceivers will work with both single and multi mode fiber. Thanks Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Favorite switches anyone
Okay I'll call them. Oh wait, the main number is no longer in service! But I will stick with HP I guess. Scott Schneider sschnei...@inscapesolutions.com 10/3/2011 10:40 AM +1 From: Steve Ens [mailto:stevey...@gmail.com] Sent: October-03-11 10:35 AM To: NT System Admin Issues Subject: Re: Favorite switches anyone HP. On Mon, Oct 3, 2011 at 9:12 AM, Tom Miller tmil...@hnncsb.org wrote: Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Load Balancers?
:) * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Mon, Oct 3, 2011 at 10:52 AM, Webster webs...@carlwebster.com wrote: I knew there was a reason I liked you ASB! J ** ** ** ** Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com http://www.carlwebster.com/ ** ** ** ** *From:* Andrew S. Baker [mailto:asbz...@gmail.com] *Subject:* Re: Load Balancers? ** ** Netscalars are my current favorite from a price/performance standpoint.*** * ** ** *ASB* ** ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Fiber splice question
Thanks Joseph, I doubt they tested it. I am checking with the principal to see who made the splice. Wireless should do a great job here. The field house is across a parking lot, almost perfect line of sight. Shane From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Monday, October 03, 2011 11:09 AM To: NT System Admin Issues Subject: Re: Fiber splice question Ya, I don't think that's going to work. Not even sure how they were able to do that. Did they test the fiber before you (someone) signed off on the job? I'm thinking you're going to have to either break it again and splice with the same type of fiber, or run a whole new run. Personally, I'd lean towards the new run. Thomas Mullins tsmull...@wise.k12.va.us 10/3/2011 6:23 AM I hope this is not off topic too much. But, here goes: We had a piece of multimode fiber that was damaged at a local high school. This piece of fiber ran no more than 300 yards from the main building to a field house. The original piece of fiber was multimode. The local school had an outside company splice the damaged section. This company made the splice with single mode fiber. Multimode fiber has a diameter of about 62.5 microns, single mode fiber has a diameter of 8 to 10 microns. I have no idea if this is legal. This piece of fiber will not light up for me. The school purchased FX transceivers. To my knowledge, FX transceivers will work with both single and multi mode fiber. Thanks Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Fiber splice question
Thanks Bill, I thought so, but I do not work with fiber very often. Shane From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Monday, October 03, 2011 11:13 AM To: NT System Admin Issues Subject: RE: Fiber splice question Agreed. You can't switch fiber types in the middle of the chain. I can't even imagine any company that does fiber doing something like that. From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Monday, October 03, 2011 11:09 AM To: NT System Admin Issues Subject: Re: Fiber splice question Ya, I don't think that's going to work. Not even sure how they were able to do that. Did they test the fiber before you (someone) signed off on the job? I'm thinking you're going to have to either break it again and splice with the same type of fiber, or run a whole new run. Personally, I'd lean towards the new run. Thomas Mullins tsmull...@wise.k12.va.usmailto:tsmull...@wise.k12.va.us 10/3/2011 6:23 AM I hope this is not off topic too much. But, here goes: We had a piece of multimode fiber that was damaged at a local high school. This piece of fiber ran no more than 300 yards from the main building to a field house. The original piece of fiber was multimode. The local school had an outside company splice the damaged section. This company made the splice with single mode fiber. Multimode fiber has a diameter of about 62.5 microns, single mode fiber has a diameter of 8 to 10 microns. I have no idea if this is legal. This piece of fiber will not light up for me. The school purchased FX transceivers. To my knowledge, FX transceivers will work with both single and multi mode fiber. Thanks Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Favorite switches anyone
We have some 8 port Cisco switches we have used in few cases. They have two port PoE. The model number is SD208P. Shane From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Monday, October 03, 2011 10:12 AM To: NT System Admin Issues Subject: Favorite switches anyone Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
MS Forefront Endpoint Protection
Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Favorite switches anyone
We use AdTran switches for our POE needs. John W. Cook System Administrator Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 -Original Message- From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] Sent: Monday, October 03, 2011 11:30 AM To: NT System Admin Issues Subject: RE: Favorite switches anyone We have some 8 port Cisco switches we have used in few cases. They have two port PoE. The model number is SD208P. Shane From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Monday, October 03, 2011 10:12 AM To: NT System Admin Issues Subject: Favorite switches anyone Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Migrating OpenLDAP users into AD
RE: This is a fairly common model and there's not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don't simply use the credentials supplied by the user to attempt to bind to AD. If it fails, obviously the credentials are wrong. Is the DN somehow needed to do the bind in the first place? I asked joe about this a few years ago and if I recall, he said it wasn't required (but, I may be mis-remembering.) From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Saturday, October 01, 2011 11:33 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD OK we're going round and round here. What you're describing cannot possibly work because it is not possible for UserA to validate UserB's password. The act of binding to the server is where that password validation happens. What you more than likely have is a hardcoded account which does a search to find if the authenticating user actually exists in the directory, and then it retrieves the user's DN and does a second bind with that value plus the supplied password. This is a fairly common model and there's not really anything wrong with it. Putting the users in your AD is fine, though any resource on your network secured for Authenticated Users or Everyone will be open for them. You can remove these accounts from Domain Users, though as a starter. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 11:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD It's not my choice, it's the way the software works. So many opensource ldap based apps sh!t the bed in that respect. If you're checking for a user, let -that user- initiate the bind, if he can't even do than clearly he shouldn't get access, but most are designed to use one hard coded account to bind. That being said, now I have to create a series of accounts given to customers to use with this app. Those accounts shouldn't have any rights in AD whatsoever but I thought it might be easier to manage them this way. jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 9:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Still not making sense to me here. Any user in AD can bind to a DC with valid creds. No extra permissions needed. This dedicated bind account though, what does it do? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 8:43 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Hey, Thanks for the reply. I should have been more specific, there is a dedicated bind account. It's the users that bind account is checking, they are in AD merely for the sake of unifying all the places I have accounts but have no use in AD or rights. This Linux based app will look here for them and verify the password. I could have it point to flat files but then I have two places to manage accounts. I just wondered how many perms I could remove from the user and still make it work... Thanks! jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 6:23 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD A bind is always performed in the context of the user making the request. That means you need to provide no extra permissions for this to occur. If the credentials supplied are valid, the bind will succeed. For straight read, chances are your service account needs no extra permissions, but, you'd have to describe what you're actually doing to say for sure. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 6:25 AM To: NT System Admin Issues Subject: Migrating OpenLDAP users into AD I want to move some users from another directory that are only for for and external app that does ldap auth against a non-windows setup. The thought was (long term) to delegate control of an OU to a manager. Aside from a lengthy gpo, anyone know a source which outlines what permissions must at least remain for this account to perform that type function, the app will simply perform a bind from a service account and check the pass. Thanks! jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage
RE: MS Forefront Endpoint Protection
We've rolled this out to probably 30-50K seats in the past 18 months or so across quite a few customers. It's gone well in each case and has generally saved a lot in terms of costs with customers who already have it as part of their licensing deal with MS. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Stefan Jafs [mailto:stefan.j...@gmail.com] Sent: Monday, October 03, 2011 10:35 AM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: MS Forefront Endpoint Protection
I'm using it here, but in a pretty limited scope for the time being. We're migrating from Novell to Windows AD, and we have SCCM setup in the new domain, along with about 30 or so servers, all with FEP installed. Client installation is extremely quick and painless, once the SCCM client gets installed. I've had a couple of issues with that phase, but nothing once that's done. Stefan Jafs stefan.j...@gmail.com 10/3/2011 8:34 AM Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Favorite switches anyone
Many years ago, before the cost of POE switches were sane, we purchased some Netgear FS726TP switches to power our POE IP Cameras. While Netgear is not HP or Cisco, I am happy to report that all 4 of these switches are still working without issue. Also, the lifetime warranty they offer isn't bad either. But, if we were re-purchasing the switches today, we would likely go HP... You might like the 2520 line from them: http://h17007.www1.hp.com/us/en/products/switches/HP_E2520_Switch_Series/index.aspx --Matt Ross Ephrata School District - Original Message - From: Tom Miller [mailto:tmil...@hnncsb.org] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Mon, 03 Oct 2011 07:12:18 -0700 Subject: Favorite switches anyone Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Favorite switches anyone
We use (and I prefer) Cisco switches as well. For client switches, we are currently using the 3560's. Not sure if they have a sub-24 port version or not. -Original Message- From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] Sent: Monday, October 03, 2011 11:30 AM To: NT System Admin Issues Subject: RE: Favorite switches anyone We have some 8 port Cisco switches we have used in few cases. They have two port PoE. The model number is SD208P. Shane From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Monday, October 03, 2011 10:12 AM To: NT System Admin Issues Subject: Favorite switches anyone Folks, I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. Anyone have any favorites? I've used 3COM/HP here for years. But...I tried to call HP for pre-sales support, and the 800 line on HP's web site is disconnected. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. So it does not have to be HP. Thanks, Tom Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Load Balancers?
+1 for Radware. Cost some $$$ though. No complaints with their products. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, October 03, 2011 7:23 AM To: NT System Admin Issues Subject: Re: Load Balancers? Netscalars are my current favorite from a price/performance standpoint. Also check out Radware. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market. On Mon, Oct 3, 2011 at 9:44 AM, Tom Miller tmil...@hnncsb.org wrote: I'm about to purchase two Citrix Netscalers for load balancing our Share Point farm, and Exchange when we go to that. It may be overkill though unless you have a Citrix infrastructure. Can't hurt to take a look. Pricing is based on the features you use. Paul Hutchings paul.hutchi...@mira.co.uk 10/3/2011 8:48 AM I'm starting to think and plan for adding a second Exchange 2010 server and setting up a DAG and CAS array. I know of Kemp, but I'm not familiar with any other vendor when it comes to load balancers. Obviously I can whack it into Google (and have) but on the face of it they all do what I currently want. Any personal recommendations (or nightmares) would be great. A virtual load balancer also sounds like an option as we have a vSphere cluster that should be able to run a pair of appliances in HA. Thanks, Paul _ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Migrating OpenLDAP users into AD
AD doesn't require it but generic LDAP directories usually do require a DN to bind with. ISVs use one code path to support AD and *LDAP (for better or worse) so that's why you get this. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 10:37 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD RE: This is a fairly common model and there's not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don't simply use the credentials supplied by the user to attempt to bind to AD. If it fails, obviously the credentials are wrong. Is the DN somehow needed to do the bind in the first place? I asked joe about this a few years ago and if I recall, he said it wasn't required (but, I may be mis-remembering.) From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Saturday, October 01, 2011 11:33 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD OK we're going round and round here. What you're describing cannot possibly work because it is not possible for UserA to validate UserB's password. The act of binding to the server is where that password validation happens. What you more than likely have is a hardcoded account which does a search to find if the authenticating user actually exists in the directory, and then it retrieves the user's DN and does a second bind with that value plus the supplied password. This is a fairly common model and there's not really anything wrong with it. Putting the users in your AD is fine, though any resource on your network secured for Authenticated Users or Everyone will be open for them. You can remove these accounts from Domain Users, though as a starter. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 11:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD It's not my choice, it's the way the software works. So many opensource ldap based apps sh!t the bed in that respect. If you're checking for a user, let -that user- initiate the bind, if he can't even do than clearly he shouldn't get access, but most are designed to use one hard coded account to bind. That being said, now I have to create a series of accounts given to customers to use with this app. Those accounts shouldn't have any rights in AD whatsoever but I thought it might be easier to manage them this way. jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 9:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Still not making sense to me here. Any user in AD can bind to a DC with valid creds. No extra permissions needed. This dedicated bind account though, what does it do? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 8:43 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Hey, Thanks for the reply. I should have been more specific, there is a dedicated bind account. It's the users that bind account is checking, they are in AD merely for the sake of unifying all the places I have accounts but have no use in AD or rights. This Linux based app will look here for them and verify the password. I could have it point to flat files but then I have two places to manage accounts. I just wondered how many perms I could remove from the user and still make it work... Thanks! jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 6:23 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD A bind is always performed in the context of the user making the request. That means you need to provide no extra permissions for this to occur. If the credentials supplied are valid, the bind will succeed. For straight read, chances are your service account needs no extra permissions, but, you'd have to describe what you're actually doing to say for sure. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 6:25 AM To: NT System Admin Issues Subject: Migrating OpenLDAP users into AD I want to move some users from another directory that are only for for and external app that does ldap auth against a
RE: MS Forefront Endpoint Protection
Lots of folks are migrating and getting positive results. From: Stefan Jafs [mailto:stefan.j...@gmail.com] Sent: Monday, October 03, 2011 11:35 AM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: MS Forefront Endpoint Protection
We switched to Forefront from Eset about 3 years ago and have had no complaints. It is easy to install and monitor and it stays relatively hidden to our users which we prefer. TVK From: Stefan Jafs [mailto:stefan.j...@gmail.com] Sent: Monday, October 03, 2011 10:35 AM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: MS Forefront Endpoint Protection
Do you have SCCM in place already? That's probably the biggest barrier IMO as it's not a next, next, done job and is, arguably, overkill if you just want to deploy Forefront. From: Stefan Jafs [stefan.j...@gmail.com] Sent: 03 October 2011 4:34 PM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: MS Forefront Endpoint Protection
Truesec has an product that you can use to manage Forefront clients without SCCM http://myitforum.com/myitforumwp/links/lite-management-solution-for-forefron t-endpoint-protection From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 12:43 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Do you have SCCM in place already? That's probably the biggest barrier IMO as it's not a next, next, done job and is, arguably, overkill if you just want to deploy Forefront. _ From: Stefan Jafs [stefan.j...@gmail.com] Sent: 03 October 2011 4:34 PM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin _ MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: MS Forefront Endpoint Protection
Thanks Rod, I've seen their website crop up before. No mention of pricing though which always has me wary. It looks interesting as we have ForeFront CALs under our licensing scheme, but I have no desire to rush into, or learn SCCM right now simply to take advantage of them. Problem is if a 3rd party management platform costs as much as renewing our current a/v... From: Rod Trent [rodtr...@myitforum.com] Sent: 03 October 2011 5:58 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Truesec has an product that you can use to manage Forefront clients without SCCM http://myitforum.com/myitforumwp/links/lite-management-solution-for-forefront-endpoint-protection From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 12:43 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Do you have SCCM in place already? That's probably the biggest barrier IMO as it's not a next, next, done job and is, arguably, overkill if you just want to deploy Forefront. From: Stefan Jafs [stefan.j...@gmail.com] Sent: 03 October 2011 4:34 PM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Ticket System: Recommendations, Blackberry App Ticket Support
Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: MS Forefront Endpoint Protection
Using sccm for a SINGLE thing is fairly easy. It's just when you try to use the entire platform that things get complicated... Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 12:58 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Thanks Rod, I've seen their website crop up before. No mention of pricing though which always has me wary. It looks interesting as we have ForeFront CALs under our licensing scheme, but I have no desire to rush into, or learn SCCM right now simply to take advantage of them. Problem is if a 3rd party management platform costs as much as renewing our current a/v... From: Rod Trent [rodtr...@myitforum.com] Sent: 03 October 2011 5:58 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Truesec has an product that you can use to manage Forefront clients without SCCM http://myitforum.com/myitforumwp/links/lite-management-solution-for-forefront-endpoint-protection From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]mailto:[mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 12:43 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Do you have SCCM in place already? That's probably the biggest barrier IMO as it's not a next, next, done job and is, arguably, overkill if you just want to deploy Forefront. From: Stefan Jafs [stefan.j...@gmail.com] Sent: 03 October 2011 4:34 PM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: MS Forefront Endpoint Protection
Yeah.particularly with something as comprehensive as ConfigMgr, take it slow. Roll out and use a single component at a time. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, October 03, 2011 1:02 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Using sccm for a SINGLE thing is fairly easy. It's just when you try to use the entire platform that things get complicated. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 12:58 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Thanks Rod, I've seen their website crop up before. No mention of pricing though which always has me wary. It looks interesting as we have ForeFront CALs under our licensing scheme, but I have no desire to rush into, or learn SCCM right now simply to take advantage of them. Problem is if a 3rd party management platform costs as much as renewing our current a/v... _ From: Rod Trent [rodtr...@myitforum.com] Sent: 03 October 2011 5:58 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Truesec has an product that you can use to manage Forefront clients without SCCM http://myitforum.com/myitforumwp/links/lite-management-solution-for-forefron t-endpoint-protection From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 12:43 PM To: NT System Admin Issues Subject: RE: MS Forefront Endpoint Protection Do you have SCCM in place already? That's probably the biggest barrier IMO as it's not a next, next, done job and is, arguably, overkill if you just want to deploy Forefront. _ From: Stefan Jafs [stefan.j...@gmail.com] Sent: 03 October 2011 4:34 PM To: NT System Admin Issues Subject: MS Forefront Endpoint Protection Is anyone using MS Endpoint protection, I'm thinking about switching from ESET, for 325 users. Anyone happy / unhappy, recommend not recommend? -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin _ MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
We are looking at SpiceWorks as it has a helpdesk function built in We are just scratching the scratching the surface here but comes recommended for less than 1000 users From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Does SysAid include a knowledge, so for example a tech resolved a OUTLOOK issue, we can look at the knowledge base in the future, to help support troubleshoot other users with same issues, or problems, or that user himself. On Mon, Oct 3, 2011 at 1:02 PM, Kennedy, Jim kennedy...@elyriaschools.orgwrote: Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. ** ** *From:* justino garcia [mailto:jgarciaitl...@gmail.com] *Sent:* Monday, October 03, 2011 1:01 PM *To:* NT System Admin Issues *Subject:* Ticket System: Recommendations, Blackberry App Ticket Support** ** ** ** Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
Yes, it asks at every closing if you want to add it to the knowledge base. It is a very solid well rounded product. We looked LONG and HARD to find one that did helpdesk and inventory together that didn't break the bank. It is an outstanding product from our perspective. They will hook you up with a full trial for a very long period. Outstanding people to work with. Bit of a time zone issue for us, they are in Israel but their regular support is open when we need them. Big high level issues like getting our trial extended when we were testing it sometimes took overnight. But really, overnight is no big deal. From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:08 PM To: NT System Admin Issues Subject: Re: Ticket System: Recommendations, Blackberry App Ticket Support Does SysAid include a knowledge, so for example a tech resolved a OUTLOOK issue, we can look at the knowledge base in the future, to help support troubleshoot other users with same issues, or problems, or that user himself. On Mon, Oct 3, 2011 at 1:02 PM, Kennedy, Jim kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote: Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. From: justino garcia [mailto:jgarciaitl...@gmail.commailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
I threw some huge hardware at SpiceWorks and never could get it to run at a decent speed when we tested it. Especially in the inventory section. From: John C Owen [mailto:jo...@innovativefoto.com] Sent: Monday, October 03, 2011 1:05 PM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support We are looking at SpiceWorks as it has a helpdesk function built in We are just scratching the scratching the surface here but comes recommended for less than 1000 users From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Did you migirate your tickets from another system (we want to migrate database from trackit)? Thanks On Mon, Oct 3, 2011 at 1:10 PM, Kennedy, Jim kennedy...@elyriaschools.orgwrote: I threw some huge hardware at SpiceWorks and never could get it to run at a decent speed when we tested it. Especially in the inventory section. ** ** *From:* John C Owen [mailto:jo...@innovativefoto.com] *Sent:* Monday, October 03, 2011 1:05 PM *To:* NT System Admin Issues *Subject:* RE: Ticket System: Recommendations, Blackberry App Ticket Support ** ** We are looking at SpiceWorks as it has a helpdesk function built in ** ** We are just scratching the scratching the surface here but comes recommended for less than 1000 users ** ** ** ** ** ** *From:* justino garcia [mailto:jgarciaitl...@gmail.com] *Sent:* Monday, October 03, 2011 1:01 PM *To:* NT System Admin Issues *Subject:* Ticket System: Recommendations, Blackberry App Ticket Support** ** ** ** Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
No, our previous system, especially the inventory, was so bad we just dumped it into the bit bucket. From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:23 PM To: NT System Admin Issues Subject: Re: Ticket System: Recommendations, Blackberry App Ticket Support Did you migirate your tickets from another system (we want to migrate database from trackit)? Thanks On Mon, Oct 3, 2011 at 1:10 PM, Kennedy, Jim kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote: I threw some huge hardware at SpiceWorks and never could get it to run at a decent speed when we tested it. Especially in the inventory section. From: John C Owen [mailto:jo...@innovativefoto.commailto:jo...@innovativefoto.com] Sent: Monday, October 03, 2011 1:05 PM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support We are looking at SpiceWorks as it has a helpdesk function built in We are just scratching the scratching the surface here but comes recommended for less than 1000 users From: justino garcia [mailto:jgarciaitl...@gmail.commailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Take a look at http://www.revelationhelpdesk.com. This was the most complete free system I could find. I have their free Cloud edition configured and it includes a knowledgebase. Though we haven't fully implemented it yet. the system is pretty easy for users and techs. Roger Wright ___ Camping is nature's way of promoting the motel business. - Dave Barry On Mon, Oct 3, 2011 at 1:00 PM, justino garcia jgarciaitl...@gmail.comwrote: Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
Try HelpSpot at http://www.helpspot.com/ De : Roger Wright [mailto:rhw...@gmail.com] Envoyé : 3 octobre 2011 13:33 À : NT System Admin Issues Objet : Re: Ticket System: Recommendations, Blackberry App Ticket Support Take a look at http://www.revelationhelpdesk.com. This was the most complete free system I could find. I have their free Cloud edition configured and it includes a knowledgebase. Though we haven't fully implemented it yet. the system is pretty easy for users and techs. Roger Wright ___ Camping is nature's way of promoting the motel business. - Dave Barry On Mon, Oct 3, 2011 at 1:00 PM, justino garcia jgarciaitl...@gmail.com wrote: Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
+1 We did the trial of SysAid Pro and liked the overall functionality and ease of use (for end users) that we purchased it. Don't know about the importing or moving from your current system to SysAid. Coop From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Monday, October 03, 2011 12:02 PM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. From: justino garcia [mailto:jgarciaitl...@gmail.com]mailto:[mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
How many machines are we talking about here? All local or some in remote locations? The ISP did not provide the IP of the device that was misbehaving? Shauna Hensala From: jaldr...@blueridgecarpet.com To: ntsysadmin@lyris.sunbelt-software.com Subject: Torpig/Anserin/Mebroot infection Date: Mon, 3 Oct 2011 13:22:56 -0400 So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Migrating OpenLDAP users into AD
Clear text only if your not secure ldap:) It is silly for all except some unique and rare setups where a bind user is the only one with the perms needed to extract some info that will later be utilized. I have seen this... From: Crawford, Scott [crawfo...@evangel.edu] Sent: Monday, October 03, 2011 11:32 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Ahh. That makes sense. But, I’m still allowed to be annoyed that I have to hard code clear text credentials in some config file, right? From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Monday, October 03, 2011 10:59 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD AD doesn’t require it but generic LDAP directories usually do require a DN to bind with. ISVs use one code path to support AD and *LDAP (for better or worse) so that’s why you get this. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 10:37 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD RE: This is a fairly common model and there’s not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don’t simply use the credentials supplied by the user to attempt to bind to AD. If it fails, obviously the credentials are wrong. Is the DN somehow needed to do the bind in the first place? I asked joe about this a few years ago and if I recall, he said it wasn’t required (but, I may be mis-remembering.) From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Saturday, October 01, 2011 11:33 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD OK we’re going round and round here. What you’re describing cannot possibly work because it is not possible for UserA to validate UserB’s password. The act of binding to the server is where that password validation happens. What you more than likely have is a hardcoded account which does a search to find if the authenticating user actually exists in the directory, and then it retrieves the user’s DN and does a second bind with that value plus the supplied password. This is a fairly common model and there’s not really anything wrong with it. Putting the users in your AD is fine, though any resource on your network secured for Authenticated Users or Everyone will be open for them. You can remove these accounts from Domain Users, though as a starter. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 11:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD It’s not my choice, it’s the way the software works. So many opensource ldap based apps sh!t the bed in that respect. If you’re checking for a user, let -that user- initiate the bind, if he can’t even do than clearly he shouldn’t get access, but most are designed to use one hard coded account to bind. That being said, now I have to create a series of accounts given to customers to use with this app. Those accounts shouldn’t have any rights in AD whatsoever but I thought it might be easier to manage them this way. jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 9:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Still not making sense to me here. Any user in AD can bind to a DC with valid creds. No extra permissions needed. This dedicated bind account though, what does it do? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 8:43 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Hey, Thanks for the reply. I should have been more specific, there is a dedicated bind account. It’s the users that bind account is checking, they are in AD merely for the sake of unifying all the places I have accounts but have no use in AD or rights. This Linux based app will look here for them and verify the password. I could have it point to flat files but then I have two places to manage accounts. I just wondered how many perms I could remove from the user and still make it work… Thanks! jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 6:23 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD A bind is always
RE: Migrating OpenLDAP users into AD
Yeah pretty much. I've had a few ISVs that I've worked with to make their integration work right but they're few and far between. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 12:33 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Ahh. That makes sense. But, I'm still allowed to be annoyed that I have to hard code clear text credentials in some config file, right? From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Monday, October 03, 2011 10:59 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD AD doesn't require it but generic LDAP directories usually do require a DN to bind with. ISVs use one code path to support AD and *LDAP (for better or worse) so that's why you get this. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 10:37 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD RE: This is a fairly common model and there's not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don't simply use the credentials supplied by the user to attempt to bind to AD. If it fails, obviously the credentials are wrong. Is the DN somehow needed to do the bind in the first place? I asked joe about this a few years ago and if I recall, he said it wasn't required (but, I may be mis-remembering.) From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Saturday, October 01, 2011 11:33 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD OK we're going round and round here. What you're describing cannot possibly work because it is not possible for UserA to validate UserB's password. The act of binding to the server is where that password validation happens. What you more than likely have is a hardcoded account which does a search to find if the authenticating user actually exists in the directory, and then it retrieves the user's DN and does a second bind with that value plus the supplied password. This is a fairly common model and there's not really anything wrong with it. Putting the users in your AD is fine, though any resource on your network secured for Authenticated Users or Everyone will be open for them. You can remove these accounts from Domain Users, though as a starter. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 11:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD It's not my choice, it's the way the software works. So many opensource ldap based apps sh!t the bed in that respect. If you're checking for a user, let -that user- initiate the bind, if he can't even do than clearly he shouldn't get access, but most are designed to use one hard coded account to bind. That being said, now I have to create a series of accounts given to customers to use with this app. Those accounts shouldn't have any rights in AD whatsoever but I thought it might be easier to manage them this way. jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 9:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Still not making sense to me here. Any user in AD can bind to a DC with valid creds. No extra permissions needed. This dedicated bind account though, what does it do? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 8:43 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Hey, Thanks for the reply. I should have been more specific, there is a dedicated bind account. It's the users that bind account is checking, they are in AD merely for the sake of unifying all the places I have accounts but have no use in AD or rights. This Linux based app will look here for them and verify the password. I could have it point to flat files but then I have two places to manage accounts. I just wondered how many perms I could remove from the user and still make it work... Thanks! jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 6:23 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD A bind is always
RE: Migrating OpenLDAP users into AD
Ahh. That makes sense. But, I'm still allowed to be annoyed that I have to hard code clear text credentials in some config file, right? From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Monday, October 03, 2011 10:59 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD AD doesn't require it but generic LDAP directories usually do require a DN to bind with. ISVs use one code path to support AD and *LDAP (for better or worse) so that's why you get this. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 10:37 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD RE: This is a fairly common model and there's not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don't simply use the credentials supplied by the user to attempt to bind to AD. If it fails, obviously the credentials are wrong. Is the DN somehow needed to do the bind in the first place? I asked joe about this a few years ago and if I recall, he said it wasn't required (but, I may be mis-remembering.) From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Saturday, October 01, 2011 11:33 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD OK we're going round and round here. What you're describing cannot possibly work because it is not possible for UserA to validate UserB's password. The act of binding to the server is where that password validation happens. What you more than likely have is a hardcoded account which does a search to find if the authenticating user actually exists in the directory, and then it retrieves the user's DN and does a second bind with that value plus the supplied password. This is a fairly common model and there's not really anything wrong with it. Putting the users in your AD is fine, though any resource on your network secured for Authenticated Users or Everyone will be open for them. You can remove these accounts from Domain Users, though as a starter. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 11:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD It's not my choice, it's the way the software works. So many opensource ldap based apps sh!t the bed in that respect. If you're checking for a user, let -that user- initiate the bind, if he can't even do than clearly he shouldn't get access, but most are designed to use one hard coded account to bind. That being said, now I have to create a series of accounts given to customers to use with this app. Those accounts shouldn't have any rights in AD whatsoever but I thought it might be easier to manage them this way. jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 9:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Still not making sense to me here. Any user in AD can bind to a DC with valid creds. No extra permissions needed. This dedicated bind account though, what does it do? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 8:43 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Hey, Thanks for the reply. I should have been more specific, there is a dedicated bind account. It's the users that bind account is checking, they are in AD merely for the sake of unifying all the places I have accounts but have no use in AD or rights. This Linux based app will look here for them and verify the password. I could have it point to flat files but then I have two places to manage accounts. I just wondered how many perms I could remove from the user and still make it work... Thanks! jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 6:23 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD A bind is always performed in the context of the user making the request. That means you need to provide no extra permissions for this to occur. If the credentials supplied are valid, the bind will succeed. For straight read, chances are your service account needs no extra permissions, but, you'd have to describe what you're actually doing to say for sure. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com
RE: Migrating OpenLDAP users into AD
I meant that the credentials are clear text in some .ini file. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Monday, October 03, 2011 12:58 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Clear text only if your not secure ldap:) It is silly for all except some unique and rare setups where a bind user is the only one with the perms needed to extract some info that will later be utilized. I have seen this... From: Crawford, Scott [crawfo...@evangel.edu] Sent: Monday, October 03, 2011 11:32 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Ahh. That makes sense. But, I'm still allowed to be annoyed that I have to hard code clear text credentials in some config file, right? From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Monday, October 03, 2011 10:59 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD AD doesn't require it but generic LDAP directories usually do require a DN to bind with. ISVs use one code path to support AD and *LDAP (for better or worse) so that's why you get this. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 10:37 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD RE: This is a fairly common model and there's not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don't simply use the credentials supplied by the user to attempt to bind to AD. If it fails, obviously the credentials are wrong. Is the DN somehow needed to do the bind in the first place? I asked joe about this a few years ago and if I recall, he said it wasn't required (but, I may be mis-remembering.) From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Saturday, October 01, 2011 11:33 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD OK we're going round and round here. What you're describing cannot possibly work because it is not possible for UserA to validate UserB's password. The act of binding to the server is where that password validation happens. What you more than likely have is a hardcoded account which does a search to find if the authenticating user actually exists in the directory, and then it retrieves the user's DN and does a second bind with that value plus the supplied password. This is a fairly common model and there's not really anything wrong with it. Putting the users in your AD is fine, though any resource on your network secured for Authenticated Users or Everyone will be open for them. You can remove these accounts from Domain Users, though as a starter. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 11:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD It's not my choice, it's the way the software works. So many opensource ldap based apps sh!t the bed in that respect. If you're checking for a user, let -that user- initiate the bind, if he can't even do than clearly he shouldn't get access, but most are designed to use one hard coded account to bind. That being said, now I have to create a series of accounts given to customers to use with this app. Those accounts shouldn't have any rights in AD whatsoever but I thought it might be easier to manage them this way. jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 9:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Still not making sense to me here. Any user in AD can bind to a DC with valid creds. No extra permissions needed. This dedicated bind account though, what does it do? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 8:43 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Hey, Thanks for the reply. I should have been more specific, there is a dedicated bind account. It's the users that bind account is checking, they are in AD merely for the sake of unifying all the places I have accounts but have no use in AD or rights. This Linux based app will look here for them and verify the password. I could have it point to flat files but then I have two places to manage accounts. I just wondered how many perms I could remove from the
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Thanks, So no one has ued webhelpdesk.com? On Mon, Oct 3, 2011 at 1:48 PM, Cameron Cooper ccoo...@aurico.com wrote: +1 We did the trial of SysAid Pro and liked the overall functionality and ease of use (for end users) that we purchased it. Don’t know about the importing or moving from your current system to SysAid. ** ** Coop ** ** *From:* Kennedy, Jim [mailto:kennedy...@elyriaschools.org] *Sent:* Monday, October 03, 2011 12:02 PM *To:* NT System Admin Issues *Subject:* RE: Ticket System: Recommendations, Blackberry App Ticket Support ** ** Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. ** ** *From:* justino garcia [mailto:jgarciaitl...@gmail.com] *Sent:* Monday, October 03, 2011 1:01 PM *To:* NT System Admin Issues *Subject:* Ticket System: Recommendations, Blackberry App Ticket Support** ** ** ** Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Migrating OpenLDAP users into AD
Thanks. At least I can be righteously indignant. From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Monday, October 03, 2011 12:59 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Yeah pretty much. I've had a few ISVs that I've worked with to make their integration work right but they're few and far between. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 12:33 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Ahh. That makes sense. But, I'm still allowed to be annoyed that I have to hard code clear text credentials in some config file, right? From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Monday, October 03, 2011 10:59 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD AD doesn't require it but generic LDAP directories usually do require a DN to bind with. ISVs use one code path to support AD and *LDAP (for better or worse) so that's why you get this. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, October 03, 2011 10:37 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD RE: This is a fairly common model and there's not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don't simply use the credentials supplied by the user to attempt to bind to AD. If it fails, obviously the credentials are wrong. Is the DN somehow needed to do the bind in the first place? I asked joe about this a few years ago and if I recall, he said it wasn't required (but, I may be mis-remembering.) From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Saturday, October 01, 2011 11:33 AM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD OK we're going round and round here. What you're describing cannot possibly work because it is not possible for UserA to validate UserB's password. The act of binding to the server is where that password validation happens. What you more than likely have is a hardcoded account which does a search to find if the authenticating user actually exists in the directory, and then it retrieves the user's DN and does a second bind with that value plus the supplied password. This is a fairly common model and there's not really anything wrong with it. Putting the users in your AD is fine, though any resource on your network secured for Authenticated Users or Everyone will be open for them. You can remove these accounts from Domain Users, though as a starter. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 11:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD It's not my choice, it's the way the software works. So many opensource ldap based apps sh!t the bed in that respect. If you're checking for a user, let -that user- initiate the bind, if he can't even do than clearly he shouldn't get access, but most are designed to use one hard coded account to bind. That being said, now I have to create a series of accounts given to customers to use with this app. Those accounts shouldn't have any rights in AD whatsoever but I thought it might be easier to manage them this way. jlc From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Friday, September 30, 2011 9:12 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Still not making sense to me here. Any user in AD can bind to a DC with valid creds. No extra permissions needed. This dedicated bind account though, what does it do? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]mailto:[mailto:jcas...@activenetwerx.com] Sent: Friday, September 30, 2011 8:43 PM To: NT System Admin Issues Subject: RE: Migrating OpenLDAP users into AD Hey, Thanks for the reply. I should have been more specific, there is a dedicated bind account. It's the users that bind account is checking, they are in AD merely for the sake of unifying all the places I have accounts but have no use in AD or rights. This Linux based app will look here for them and verify the password. I could have it point to flat files but then I have two places to manage accounts. I just wondered how many perms I could
RE: Ticket System: Recommendations, Blackberry App Ticket Support
RHE - is another web based...Rhesolution - not sure if it will meet all your criteria - used it in a previous job. Shauna Hensala Date: Mon, 3 Oct 2011 14:05:50 -0400 Subject: Re: Ticket System: Recommendations, Blackberry App Ticket Support From: jgarciaitl...@gmail.com To: ntsysadmin@lyris.sunbelt-software.com Thanks, So no one has ued webhelpdesk.com? On Mon, Oct 3, 2011 at 1:48 PM, Cameron Cooper ccoo...@aurico.com wrote: +1 We did the trial of SysAid Pro and liked the overall functionality and ease of use (for end users) that we purchased it. Don’t know about the importing or moving from your current system to SysAid. Coop From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Monday, October 03, 2011 12:02 PM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it?Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Outsourcing Exchange
I agree. And although we've also been using OST files all along, we have close to 100 laptops deployed here, all using PGP WDE, never a hint of an issue. I think the vendor has some broken widgets they haven't identified yet, though that's just an instinct. On Mon, Oct 3, 2011 at 6:06 AM, James Rankin kz2...@googlemail.com wrote: Did this issue show itself when they tested the outsourced solution on your first lot of guinea-pig users? or has it just shown up since a full migration? I'm still disinclined to believe that the PGP product is simply incompatible. Have they managed to prove this beyond a reasonable doubt yet? On 3 October 2011 14:01, David Lum david@nwea.org wrote: Other than outsourced Exchange, what else has changed? Nothing. At. All. We've followed their recommendations and given some uses new machines with SSD drives, i5 processors, etc, no change. I have been forwarding your guys' comments to our team that's working this, so I really appreciate your guys' input! From PGP's documentation - wrappage ( http://www.google.com/url?sa=tsource=webcd=2ved=0CDMQFjABurl=http%3A%2F%2Fdownload.pgp.com%2Fpdfs%2Fwhitepapers%2FHWDEW_WP.pdfei=F7GJTtq3LqriiAL39cmkDAusg=AFQjCNEmg2M8ZQVBWdVogIxSLCwCok7m7w ) A boot sequence executes during the startup process of Microsoft® Windows, Apple Mac OS X, or Linux® operating systems. The boot system is the initial set of operations that the computer performs when it is switched on. A boot loader (or a bootstrap loader) is a short computer program that loads the main operating system for the computer. The boot loader first looks at a boot record or partition table, which is the logical area “zero” (or starting point) of the disk drive. Whole disk encryption modifies the zero point area of the drive. File System Basics During the boot process, the system initializes file systems. When a user requests access to a file (i.e., creates, opens, or deletes a file), the request is sent to the operating system input/output (I/O) manager, which forwards the request to the file system manager. The file system manager processes data in blocks. Life with Encryption: Business as Usual Most whole disk encryption software operates in conjunction with the file system architecture. It filters I/O operations for one or more file systems or file system volumes. When a drive is encrypted with whole disk encryption for the first time, it converts unencrypted drive blocks into encrypted blocks one at a time (Figure 2). Decrypted data is never available on the disk. When a user access a file, PGP Whole Disk Encryption decrypts the data in memory before it is presented for viewing. If the user makes any changes to the file, the data is encrypted in memory and written back to the relevant disk drive blocks just as it would be without encryption. Because PGP Whole Disk Encryption operates in conjunction with the file system, there is no additional wear and tear or performance impact beyond normal disk operation. As far as the user is concerned, it’s business as usual, and the underlying mechanism of encryption/decryption is completely transparent. Not quite as detailed as what Michael sent about Bitlocker -Original Message- From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Saturday, October 01, 2011 6:55 AM To: NT System Admin Issues Subject: RE: Outsourcing Exchange This is all rubbish. If PGP works a file system filter driver (Microsoft's API for AV etc for hooking into disk read/writes) then either PGP is corrupting the files (unlikely since you never had this problem before), or some other FSF driver is causing the problem (again unlikely, since you've never had this problem before), or something else is causing the problem. Other than outsourced Exchange, what else has changed? Cheers Ken -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Saturday, 1 October 2011 2:45 AM To: NT System Admin Issues Subject: RE: Outsourcing Exchange We have talked about Bitlocker, but there's no guarantee that will be any better. Heck our Exchange provider didn't know PGP was an issue, and 'll bet PGP is more prevalent than Bitlocker. We're being steered to Win7/Office 2010/Remove PGP as all being needed to help resolve these issues. At 500 employees at least 450 are on XP / Office 2007 and 300+ have PGP on them. The Win7/2010 end state is desirable, it's the compressed timeframe that isn't. Dave ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage
RE: Ticket System: Recommendations, Blackberry App Ticket Support
+1 been using Sysaid at %NotDayJob% since v4. Picked it up initially for the inventory pieces and started using HelpDesk later. From: Cameron Cooper [mailto:ccoo...@aurico.com]mailto:[mailto:ccoo...@aurico.com] Sent: Monday, October 03, 2011 10:49 AM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support +1 We did the trial of SysAid Pro and liked the overall functionality and ease of use (for end users) that we purchased it. Don't know about the importing or moving from your current system to SysAid. Coop From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]mailto:[mailto:kennedy...@elyriaschools.org] Sent: Monday, October 03, 2011 12:02 PM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. From: justino garcia [mailto:jgarciaitl...@gmail.com]mailto:[mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Torpig/Anserin/Mebroot infection
Have you kicked off a VIPRE deep scan on these machines? Roger Wright ___ My short term goal is to make it through the day. My long term goal is to string a bunch of short term goals together. On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich jaldr...@blueridgecarpet.comwrote: So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. ** ** Anyone here able to provide a good how-to? I **did** Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ** ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
I did not receive notification from my ISP. I found out about it when I was corresponding with someone from work on my personal email address and the email kept getting held. I looked at *why* it was being held and the info was that it was being held by the CBL.ABUSEAT.ORG block list. They in turn told me that the external IP of our firewall was listed due to the Torpig/Anserin/Mebroot traffic. *shrug* I'm looking at probably 2-3 dozen computers total in one location. From: Shauna Hensala [mailto:she...@msn.com] Sent: Monday, October 03, 2011 1:53 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection How many machines are we talking about here? All local or some in remote locations? The ISP did not provide the IP of the device that was misbehaving? Shauna Hensala From: jaldr...@blueridgecarpet.com To: ntsysadmin@lyris.sunbelt-software.com Subject: Torpig/Anserin/Mebroot infection Date: Mon, 3 Oct 2011 13:22:56 -0400 So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I cant figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasnt able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I cant figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasnt able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
Not yet. I can do so though. John-AldrichThread-Count From: Roger Wright [mailto:rhw...@gmail.com] Sent: Monday, October 03, 2011 2:55 PM To: NT System Admin Issues Subject: Re: Torpig/Anserin/Mebroot infection Have you kicked off a VIPRE deep scan on these machines? Roger Wright ___ My short term goal is to make it through the day. My long term goal is to string a bunch of short term goals together. On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich jaldr...@blueridgecarpet.com wrote: So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can't figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn't able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg
Re: Torpig/Anserin/Mebroot infection
Are you using ASDM? Can't you filter the builtin realtime log viewer in a way that might show you the infected machines? (It's been a long time since I've used ASDM...) On Mon, Oct 3, 2011 at 2:59 PM, John Aldrich jaldr...@blueridgecarpet.comwrote: Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
I *do* have ASDM, but the log file does not seem to go back a very long ways, and this infection apparently only attempts to check-in every few hours as best I can tell from the frequency of the reports. From: Richard Stovall [mailto:rich...@gmail.com] Sent: Monday, October 03, 2011 3:10 PM To: NT System Admin Issues Subject: Re: Torpig/Anserin/Mebroot infection Are you using ASDM? Can't you filter the builtin realtime log viewer in a way that might show you the infected machines? (It's been a long time since I've used ASDM...) On Mon, Oct 3, 2011 at 2:59 PM, John Aldrich jaldr...@blueridgecarpet.com wrote: Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
How is syaid Support? On Mon, Oct 3, 2011 at 2:40 PM, David Lum david@nwea.org wrote: +1 been using Sysaid at %NotDayJob% since v4. Picked it up initially for the inventory pieces and started using HelpDesk later. ** ** *From:* Cameron Cooper [mailto:ccoo...@aurico.com] *Sent:* Monday, October 03, 2011 10:49 AM *To:* NT System Admin Issues *Subject:* RE: Ticket System: Recommendations, Blackberry App Ticket Support ** ** +1 We did the trial of SysAid Pro and liked the overall functionality and ease of use (for end users) that we purchased it. Don’t know about the importing or moving from your current system to SysAid. ** ** Coop ** ** *From:* Kennedy, Jim [mailto:kennedy...@elyriaschools.org] *Sent:* Monday, October 03, 2011 12:02 PM *To:* NT System Admin Issues *Subject:* RE: Ticket System: Recommendations, Blackberry App Ticket Support ** ** Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. ** ** *From:* justino garcia [mailto:jgarciaitl...@gmail.com] *Sent:* Monday, October 03, 2011 1:01 PM *To:* NT System Admin Issues *Subject:* Ticket System: Recommendations, Blackberry App Ticket Support** ** ** ** Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Ticket System: Recommendations, Blackberry App Ticket Support
Pretty outstanding. You can get to the coders and the owners if you need to. From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 3:16 PM To: NT System Admin Issues Subject: Re: Ticket System: Recommendations, Blackberry App Ticket Support How is syaid Support? On Mon, Oct 3, 2011 at 2:40 PM, David Lum david@nwea.orgmailto:david@nwea.org wrote: +1 been using Sysaid at %NotDayJob% since v4. Picked it up initially for the inventory pieces and started using HelpDesk later. From: Cameron Cooper [mailto:ccoo...@aurico.com]mailto:[mailto:ccoo...@aurico.com] Sent: Monday, October 03, 2011 10:49 AM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support +1 We did the trial of SysAid Pro and liked the overall functionality and ease of use (for end users) that we purchased it. Don't know about the importing or moving from your current system to SysAid. Coop From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]mailto:[mailto:kennedy...@elyriaschools.org] Sent: Monday, October 03, 2011 12:02 PM To: NT System Admin Issues Subject: RE: Ticket System: Recommendations, Blackberry App Ticket Support Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. From: justino garcia [mailto:jgarciaitl...@gmail.com]mailto:[mailto:jgarciaitl...@gmail.com] Sent: Monday, October 03, 2011 1:01 PM To: NT System Admin Issues Subject: Ticket System: Recommendations, Blackberry App Ticket Support Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Have anyone seen a use for the blackberry integration? On Mon, Oct 3, 2011 at 3:16 PM, Kennedy, Jim kennedy...@elyriaschools.orgwrote: Pretty outstanding. You can get to the coders and the owners if you need to. ** ** *From:* justino garcia [mailto:jgarciaitl...@gmail.com] *Sent:* Monday, October 03, 2011 3:16 PM *To:* NT System Admin Issues *Subject:* Re: Ticket System: Recommendations, Blackberry App Ticket Support ** ** How is syaid Support? On Mon, Oct 3, 2011 at 2:40 PM, David Lum david@nwea.org wrote: +1 been using Sysaid at %NotDayJob% since v4. Picked it up initially for the inventory pieces and started using HelpDesk later. *From:* Cameron Cooper [mailto:ccoo...@aurico.com] *Sent:* Monday, October 03, 2011 10:49 AM *To:* NT System Admin Issues *Subject:* RE: Ticket System: Recommendations, Blackberry App Ticket Support +1 We did the trial of SysAid Pro and liked the overall functionality and ease of use (for end users) that we purchased it. Don’t know about the importing or moving from your current system to SysAid. Coop *From:* Kennedy, Jim [mailto:kennedy...@elyriaschools.org] *Sent:* Monday, October 03, 2011 12:02 PM *To:* NT System Admin Issues *Subject:* RE: Ticket System: Recommendations, Blackberry App Ticket Support Very happy with SysAid here. They have apps for BB, Droids and Iphones. However, we have no experience using those apps we still just use the web based part of it. *From:* justino garcia [mailto:jgarciaitl...@gmail.com] *Sent:* Monday, October 03, 2011 1:01 PM *To:* NT System Admin Issues *Subject:* Ticket System: Recommendations, Blackberry App Ticket Support** ** Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
http://www.zendesk.com/product/blackberry On Mon, Oct 3, 2011 at 1:00 PM, justino garcia jgarciaitl...@gmail.comwrote: Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- -cynicalgeek- cynicalgeekatgmail.com -- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
Jus to confirm, you don't allow outbound SMTP from anything other than your corporate SMTP boxes do you? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 7:59 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
This is very interesting, can't wait to see that answer. I doubt it was on port 25, that Trojan looks to phone home with credentials of the infected user, it is not an email bot as far as I can tell. And the two open questions will be; 1) No matter what port it was on how did CBL know 2) When did CBL get into the non-email abuse gets your email blocked business. -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Jus to confirm, you don't allow outbound SMTP from anything other than your corporate SMTP boxes do you? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 7:59 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can't figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn't able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
you *should* be able to do virus scan of your network and identify the culprit. Shauna Hensala From: jaldr...@blueridgecarpet.com To: ntsysadmin@lyris.sunbelt-software.com Subject: RE: Torpig/Anserin/Mebroot infection Date: Mon, 3 Oct 2011 14:58:42 -0400 I did not receive notification from my ISP. I found out about it when I was corresponding with someone from work on my personal email address and the email kept getting held. I looked at *why* it was being held and the info was that it was being held by the CBL.ABUSEAT.ORG block list. They in turn told me that the external IP of our firewall was listed due to the Torpig/Anserin/Mebroot traffic. *shrug* I'm looking at probably 2-3 dozen computers total in one location. From: Shauna Hensala [mailto:she...@msn.com] Sent: Monday, October 03, 2011 1:53 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection How many machines are we talking about here? All local or some in remote locations? The ISP did not provide the IP of the device that was misbehaving? Shauna Hensala From: jaldr...@blueridgecarpet.com To: ntsysadmin@lyris.sunbelt-software.com Subject: Torpig/Anserin/Mebroot infection Date: Mon, 3 Oct 2011 13:22:56 -0400 So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Is ZENDESK only CLOUD Based, or can it be used in my own environment? On Mon, Oct 3, 2011 at 3:25 PM, Cynicalgeek cynicalg...@gmail.com wrote: http://www.zendesk.com/product/blackberry On Mon, Oct 3, 2011 at 1:00 PM, justino garcia jgarciaitl...@gmail.comwrote: Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- -cynicalgeek- cynicalgeekatgmail.com -- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
Looks like they are now listing you for non-email related bad activity. http://cbl.abuseat.org/lookup.cgi?ip=66.44.212.162.submit=Lookup From: Kennedy, Jim [kennedy...@elyriaschools.org] Sent: 03 October 2011 9:06 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection This is very interesting, can't wait to see that answer. I doubt it was on port 25, that Trojan looks to phone home with credentials of the infected user, it is not an email bot as far as I can tell. And the two open questions will be; 1) No matter what port it was on how did CBL know 2) When did CBL get into the non-email abuse gets your email blocked business. -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Jus to confirm, you don't allow outbound SMTP from anything other than your corporate SMTP boxes do you? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 7:59 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can't figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn't able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
We don't have a mail server here. Our ISP hosts our email for us, so yeah, we do allow SMTP out. I wonder if there's a way to force all port 25 traffic to one IP in the firewall? -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Jus to confirm, you don't allow outbound SMTP from anything other than your corporate SMTP boxes do you? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 7:59 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I cant figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasnt able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Only cloud based. It allows you to attach images to tickets, even from the iPhone (it may on Blackberry but I'm not sure.) On Mon, Oct 3, 2011 at 4:13 PM, justino garcia jgarciaitl...@gmail.comwrote: Is ZENDESK only CLOUD Based, or can it be used in my own environment? On Mon, Oct 3, 2011 at 3:25 PM, Cynicalgeek cynicalg...@gmail.com wrote: http://www.zendesk.com/product/blackberry On Mon, Oct 3, 2011 at 1:00 PM, justino garcia jgarciaitl...@gmail.comwrote: Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- -cynicalgeek- cynicalgeekatgmail.com -- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- -cynicalgeek- cynicalgeekatgmail.com -- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
I've got a deep scan scheduled for tonight. Hopefully it'll catch it, but according to the information on the CBL, it's not commonly caught that way... Pay very close attention: Most of these trojans have extremely poor detection rates in current Anti-Virus software... I did scan the likely suspects with Malware Bytes, but didn't see any infection. As I said, Vipre Enterprise will be deep-scanning tonight. From: Shauna Hensala [mailto:she...@msn.com] Sent: Monday, October 03, 2011 4:10 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection you *should* be able to do virus scan of your network and identify the culprit. Shauna Hensala From: jaldr...@blueridgecarpet.com To: ntsysadmin@lyris.sunbelt-software.com Subject: RE: Torpig/Anserin/Mebroot infection Date: Mon, 3 Oct 2011 14:58:42 -0400 I did not receive notification from my ISP. I found out about it when I was corresponding with someone from work on my personal email address and the email kept getting held. I looked at *why* it was being held and the info was that it was being held by the CBL.ABUSEAT.ORG block list. They in turn told me that the external IP of our firewall was listed due to the Torpig/Anserin/Mebroot traffic. *shrug* I'm looking at probably 2-3 dozen computers total in one location. From: Shauna Hensala [mailto:she...@msn.com] Sent: Monday, October 03, 2011 1:53 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection How many machines are we talking about here? All local or some in remote locations? The ISP did not provide the IP of the device that was misbehaving? Shauna Hensala From: jaldr...@blueridgecarpet.com To: ntsysadmin@lyris.sunbelt-software.com Subject: Torpig/Anserin/Mebroot infection Date: Mon, 3 Oct 2011 13:22:56 -0400 So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I cant figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasnt able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: video surveillance software recommendations
What are you using now? * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Mon, Oct 3, 2011 at 4:10 PM, Thomas Mullins tsmull...@wise.k12.va.uswrote: Good afternoon everyone, ** ** Does anyone have a recommendation for some video surveillance software? We have about 10 sites, and most sites have about 16 cameras. ** ** This project has landed in my lap. The software we are currently using is extremely buggy. Support has expired, and the cost to renew this software is extremely high. I am looking to migrate to a new product. Cost is a concern, but not the major concern. We need something we can count on.*** * ** ** Shane ** ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
You really don't want to be doing that, or if you must do it at least only allow it outbound to the IP of the mail server your PC's are supposed to be using. Looking at the CBL listing it appears they list you for activity other than SMTP traffic, so it may well be other traffic that's got you listed, but it still doesn't change the fact that you really don't want to allow unrestricted outbound SMTP from any/all IP's on your LAN. Ditto all other ports/protocols. If you don't already do so, start from a position of only allowing the ports required. From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 9:14 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection We don't have a mail server here. Our ISP hosts our email for us, so yeah, we do allow SMTP out. I wonder if there's a way to force all port 25 traffic to one IP in the firewall? -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Jus to confirm, you don't allow outbound SMTP from anything other than your corporate SMTP boxes do you? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 7:59 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I can’t figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasn’t able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the
RE: video surveillance software recommendations
We are using Video Insight. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, October 03, 2011 4:18 PM To: NT System Admin Issues Subject: Re: video surveillance software recommendations What are you using now? ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Mon, Oct 3, 2011 at 4:10 PM, Thomas Mullins tsmull...@wise.k12.va.usmailto:tsmull...@wise.k12.va.us wrote: Good afternoon everyone, Does anyone have a recommendation for some video surveillance software? We have about 10 sites, and most sites have about 16 cameras. This project has landed in my lap. The software we are currently using is extremely buggy. Support has expired, and the cost to renew this software is extremely high. I am looking to migrate to a new product. Cost is a concern, but not the major concern. We need something we can count on. Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
Thanks. On Mon, Oct 3, 2011 at 4:16 PM, Cynicalgeek cynicalg...@gmail.com wrote: Only cloud based. It allows you to attach images to tickets, even from the iPhone (it may on Blackberry but I'm not sure.) On Mon, Oct 3, 2011 at 4:13 PM, justino garcia jgarciaitl...@gmail.comwrote: Is ZENDESK only CLOUD Based, or can it be used in my own environment? On Mon, Oct 3, 2011 at 3:25 PM, Cynicalgeek cynicalg...@gmail.comwrote: http://www.zendesk.com/product/blackberry On Mon, Oct 3, 2011 at 1:00 PM, justino garcia jgarciaitl...@gmail.com wrote: Anyone using http://www.webhelpdesk.com/index.html, currently? How is your experience been from tech side, if you have used it? Does It offer good Knowledge Base? Anyone Recommend any other Ticket System, that include a knowledge base, supports blackberries (for Help Desk Tech, to open and close tickets), ? Also if they support importing or moving over our current track it database to X system. Anything beside track it, as it our current system and I am looking to move away from it. Recommendations Thanks -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- -cynicalgeek- cynicalgeekatgmail.com -- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- -cynicalgeek- cynicalgeekatgmail.com -- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
If Vipre does not find the culprit John, don't be shy to shoot us a support ticket request. We'll help find it. Support request page: www.gfi.com/supportform Indicate you need security response ticket will get to us faster. Tammy -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:19 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection You really don't want to be doing that, or if you must do it at least only allow it outbound to the IP of the mail server your PC's are supposed to be using. Looking at the CBL listing it appears they list you for activity other than SMTP traffic, so it may well be other traffic that's got you listed, but it still doesn't change the fact that you really don't want to allow unrestricted outbound SMTP from any/all IP's on your LAN. Ditto all other ports/protocols. If you don't already do so, start from a position of only allowing the ports required. From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 9:14 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection We don't have a mail server here. Our ISP hosts our email for us, so yeah, we do allow SMTP out. I wonder if there's a way to force all port 25 traffic to one IP in the firewall? -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Jus to confirm, you don't allow outbound SMTP from anything other than your corporate SMTP boxes do you? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 7:59 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I cant figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasnt able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:
RE: video surveillance software recommendations
Curious. What bugs are you seeing? Do you have IP cameras or analog to ip converters? We have a mix. What brand cameras if they are IP. I've heard some cameras work better than others. All our IP cameras are various model Axis. We are running ver 4.3.0.30 x32 with 85 cameras and it works well. My biggest complaint is they don't have an easy upgrade path to the X64 version. We had one issue where the embedded sql database reached the 4gig limit, but tech support worked tirelessly to find and resolve the problem. Turned out that the system had lost delete rights to the video folder and it couldn't delete old files. Fortunately we didn't run out of space. System is on a Dell pe-2950 with 6tb video storage. 2x ZEON 2.x cpu and 4 gig ram. OS is Win 2008. Like I said, I'd like to upgrade to win 2008r2 but they said we would loose our config and videos. I'm thinking that next year we will upgrade the server and start over with the 64bit version. From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] Sent: Monday, October 03, 2011 4:21 PM To: NT System Admin Issues Subject: RE: video surveillance software recommendations We are using Video Insight. From: Andrew S. Baker [mailto:asbz...@gmail.com]mailto:[mailto:asbz...@gmail.com] Sent: Monday, October 03, 2011 4:18 PM To: NT System Admin Issues Subject: Re: video surveillance software recommendations What are you using now? ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Mon, Oct 3, 2011 at 4:10 PM, Thomas Mullins tsmull...@wise.k12.va.usmailto:tsmull...@wise.k12.va.us wrote: Good afternoon everyone, Does anyone have a recommendation for some video surveillance software? We have about 10 sites, and most sites have about 16 cameras. This project has landed in my lap. The software we are currently using is extremely buggy. Support has expired, and the cost to renew this software is extremely high. I am looking to migrate to a new product. Cost is a concern, but not the major concern. We need something we can count on. Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Torpig/Anserin/Mebroot infection
On 3 Oct 2011 at 16:14, John Aldrich wrote: We don't have a mail server here. Our ISP hosts our email for us, so yeah, we do allow SMTP out. I wonder if there's a way to force all port 25 traffic to one IP in the firewall? There's usually a way to limit port-25 traffic to only one IP. It won't force the traffic (redirect it), but it will prevent infected machines from sending to port 25 elsewhere. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 Security Blog: http://geoapps.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Ticket System: Recommendations, Blackberry App Ticket Support
On 3 Oct 2011 at 13:05, John C Owen wrote: We are looking at SpiceWorks as it has a helpdesk function built in We are just scratching the scratching the surface here but comes recommended for less than 1000 users My biggest problem with Spiceworks is its inability to handle roaming computers -- i.e. laptops off the LAN -- with any success. When they fix that it'll be a great product. You can block the ads with a simple HOSTS fix, too. A -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 Security Blog: http://geoapps.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: video surveillance software recommendations
I am assuming you need an IP camera solution. If I am incorrect in my assumption, I apologize. We have used the Milestone XProtect product with good success for the past year. Cost is a concern for us, so we went with the Essentials edition, which basically boils down to $50 per camera licensing costs on a single server. With your larger environment, you may wish to use some of their higher-tier solutions. http://www.milestonesys.com/ --Matt Ross Ephrata School District - Original Message - From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Mon, 03 Oct 2011 13:10:27 -0700 Subject: video surveillance software recommendations Good afternoon everyone, Does anyone have a recommendation for some video surveillance software? We have about 10 sites, and most sites have about 16 cameras. This project has landed in my lap. The software we are currently using is extremely buggy. Support has expired, and the cost to renew this software is extremely high. I am looking to migrate to a new product. Cost is a concern, but not the major concern. We need something we can count on. Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: video surveillance software recommendations
Thanks Rebecca, I will check this out. Shane From: Rebecca Westhoff [mailto:rebec...@performancedesigns.com] Sent: Monday, October 03, 2011 4:39 PM To: NT System Admin Issues Subject: RE: video surveillance software recommendations We just installed EZ Watch Pro http://www.ezwatch.com/. Super easy to setup. We have 8 cameras connected but it has room to add more. Great remote access from my iPhone. You can group cameras by site for easy navigation. Rebecca From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] Sent: Monday, October 03, 2011 4:21 PM To: NT System Admin Issues Subject: RE: video surveillance software recommendations We are using Video Insight. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, October 03, 2011 4:18 PM To: NT System Admin Issues Subject: Re: video surveillance software recommendations What are you using now? ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Mon, Oct 3, 2011 at 4:10 PM, Thomas Mullins tsmull...@wise.k12.va.usmailto:tsmull...@wise.k12.va.us wrote: Good afternoon everyone, Does anyone have a recommendation for some video surveillance software? We have about 10 sites, and most sites have about 16 cameras. This project has landed in my lap. The software we are currently using is extremely buggy. Support has expired, and the cost to renew this software is extremely high. I am looking to migrate to a new product. Cost is a concern, but not the major concern. We need something we can count on. Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin This message and any attachments are intended only for the individual(s) to whom it is addressed. The content is confidential and may be privileged information. If you are neither the intended recipient nor the agent responsible for delivering the message to the intended recipient, you are hereby notified that any use, reproduction, or distribution of this communication is strictly prohibited and may be unlawful. If you are not the intended recipient of this message, please notify the sender by return e-mail and delete this transmission from your system. Any statements and/or views expressed that are not prescribed by Performance Designs, Inc. are that of the author and do not necessarily reflect those of Performance Designs, Inc. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
Create an internal SMTP relay (any Windows/Unix server will do) and block all outgoing smtp trafic to all except this server. -Message d'origine- De : Angus Scott-Fleming [mailto:angu...@geoapps.com] Envoyé : 3 octobre 2011 16:42 À : NT System Admin Issues Objet : Re: Torpig/Anserin/Mebroot infection On 3 Oct 2011 at 16:14, John Aldrich wrote: We don't have a mail server here. Our ISP hosts our email for us, so yeah, we do allow SMTP out. I wonder if there's a way to force all port 25 traffic to one IP in the firewall? There's usually a way to limit port-25 traffic to only one IP. It won't force the traffic (redirect it), but it will prevent infected machines from sending to port 25 elsewhere. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 Security Blog: http://geoapps.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Mise en garde concernant la confidentialité : Le présent message, comprenant tout fichier qui y est joint, est envoyé à l'intention exclusive de son destinataire; il est de nature confidentielle et peut constituer une information protégée par le secret professionnel. Si vous n'êtes pas le destinataire, nous vous avisons que toute impression, copie, distribution ou autre utilisation de ce message est strictement interdite. Si vous avez reçu ce courriel par erreur, veuillez en aviser immédiatement l'expéditeur par retour de courriel et supprimer le courriel. Merci! Confidentiality Warning: This message, including any attachment, is sent only for the use of the intended recipient; it is confidential and may constitute privileged information. If you are not the intended recipient, you are hereby notified that any printing, copying, distribution or other use of this message is strictly prohibited. If you have received this email in error, please notify the sender immediately by return email, and delete it. Thank you! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Torpig/Anserin/Mebroot infection
Thanks, Tammy! My thought was that it would be easy to find in the Cisco ASA logs... yeah, right! :D -Original Message- From: Tammy Stewart [mailto:copper...@personainternet.com] Sent: Monday, October 03, 2011 4:30 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection If Vipre does not find the culprit John, don't be shy to shoot us a support ticket request. We'll help find it. Support request page: www.gfi.com/supportform Indicate you need security response ticket will get to us faster. Tammy -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:19 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection You really don't want to be doing that, or if you must do it at least only allow it outbound to the IP of the mail server your PC's are supposed to be using. Looking at the CBL listing it appears they list you for activity other than SMTP traffic, so it may well be other traffic that's got you listed, but it still doesn't change the fact that you really don't want to allow unrestricted outbound SMTP from any/all IP's on your LAN. Ditto all other ports/protocols. If you don't already do so, start from a position of only allowing the ports required. From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 9:14 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection We don't have a mail server here. Our ISP hosts our email for us, so yeah, we do allow SMTP out. I wonder if there's a way to force all port 25 traffic to one IP in the firewall? -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Jus to confirm, you don't allow outbound SMTP from anything other than your corporate SMTP boxes do you? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 7:59 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Email blocklist: cbl.abuseat.org for attempting to make contact to a Torpig Command and Control server at 91.20.221.209, with contents unique to Torpig CC command protocols. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, October 03, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Torpig/Anserin/Mebroot infection Can you expand on blacklisted? Which blacklist and for what type of traffic? From: John Aldrich [jaldr...@blueridgecarpet.com] Sent: 03 October 2011 6:22 PM To: NT System Admin Issues Subject: Torpig/Anserin/Mebroot infection So, our external IP is blacklisted because apparently one of our machines is infected with a banking Trojan. Short of going to each and every individual machine on the network, the only thing I can think of to do is to set up logging of the ASA to a syslog server. I have downloaded and installed a trial version of Kiwi syslog, but I cant figure out how to configure it to forward the log files to my system. Anyone here able to provide a good how-to? I *did* Google, but apparently my Google-fu sucks, as I wasnt able to find instructions that made sense to me. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:
RE: video surveillance software recommendations
Thanks Matthew, We have the cameras. I will check this product out. Shane -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Monday, October 03, 2011 4:46 PM To: NT System Admin Issues Subject: Re: video surveillance software recommendations I am assuming you need an IP camera solution. If I am incorrect in my assumption, I apologize. We have used the Milestone XProtect product with good success for the past year. Cost is a concern for us, so we went with the Essentials edition, which basically boils down to $50 per camera licensing costs on a single server. With your larger environment, you may wish to use some of their higher-tier solutions. http://www.milestonesys.com/ --Matt Ross Ephrata School District - Original Message - From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Mon, 03 Oct 2011 13:10:27 -0700 Subject: video surveillance software recommendations Good afternoon everyone, Does anyone have a recommendation for some video surveillance software? We have about 10 sites, and most sites have about 16 cameras. This project has landed in my lap. The software we are currently using is extremely buggy. Support has expired, and the cost to renew this software is extremely high. I am looking to migrate to a new product. Cost is a concern, but not the major concern. We need something we can count on. Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Torpig/Anserin/Mebroot infection
On Mon October 3 2011, you wrote: On 3 Oct 2011 at 16:14, John Aldrich wrote: We don't have a mail server here. Our ISP hosts our email for us, so yeah, we do allow SMTP out. I wonder if there's a way to force all port 25 traffic to one IP in the firewall? There's usually a way to limit port-25 traffic to only one IP. It won't force the traffic (redirect it), but it will prevent infected machines from sending to port 25 elsewhere. That'll help with spam bots and such, but it wouldn't help in this case. :D -- Thanks, John Aldrich Blueridge Industries IT Manager ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Something hilarious to start your weeks off.
On Mon, Oct 3, 2011 at 9:15 AM, David Lum david@nwea.org wrote: Which somehow reminds me of a story of someone who wished he could name a troublesome server “mypants”, so when it went down…well… (Some versions of) SunOS/Solaris, by default, when told to ping a host XYZ, just report XYZ is alive if it gets a response. This led to a former cow-orker of mine naming a box elvis, just so he could ping it from a Sun. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Migrating OpenLDAP users into AD
On Mon, Oct 3, 2011 at 11:37 AM, Crawford, Scott crawfo...@evangel.edu wrote: RE: This is a fairly common model and there’s not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don’t simply use the credentials supplied by the user to attempt to bind to AD. I'm confident laziness is the most common reason, but for a minority of cases, some scenarios have a need to identify things in the directory independently of a user doing something against that directory. In other words, the server needs to look something up without having a user's credentials handy to do so. There may also be a performance/security thing. If you're dealing with a LDAP-Unix gateway (making your LDAP accounts look like traditional Unix accounts), authenticating each user doing something would require that many different LDAP connections, and arguably the host should cache them separately as well (since if you care to do this you presumably have users with different accesses to your directory). As having one account for the host that has read-only access, the host can just use one connection and cache for everybody. But whether either of these possibilities apply depends entirely on the scenario. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Fiber splice question
On Mon, Oct 3, 2011 at 9:23 AM, Thomas Mullins tsmull...@wise.k12.va.us wrote: The original piece of fiber was multimode. The local school had an outside company splice the damaged section. This company made the splice with single mode fiber. As others have said, (1) that won't work, and (2) never use that company for fiber work again. It is possible to go from one type to the other, *if* you use something called a mode conditioning cable, but I don't recall if you can go back again, and mode conditioning cables aren't used in splices. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Favorite switches anyone
On Mon, Oct 3, 2011 at 10:12 AM, Tom Miller tmil...@hnncsb.org wrote: I need some small 1 GB POE switches here for a separate wireless network. 12-16 ports per switch is all I need. HP ProCurve. Rock solid. Cost effective. Warrantied and supported forever. So far, ProCurve support has avoiding turning into the suck-fest that much of the rest of HP support has. My reseller somehow ordered the wrong switch model for me and now HP is being obsterperous about returning it. How is that your problem and not the reseller's problem? We normally buy our ProCurve's through a reseller, so we never have to talk to HP's craptacular sales organization. If the reseller screws up, the reseller fixes it. If we want to return something because we changed our mind, the reseller processes the return (and charges us a hefty restocking fee, but that's fair). -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: video surveillance software recommendations
On Mon, Oct 3, 2011 at 4:10 PM, Thomas Mullins tsmull...@wise.k12.va.us wrote: Does anyone have a recommendation for some video surveillance software? I can tell you *not* to buy anything from Honeywell or from Stanley Convergent Security. Beyond that, I dunno. Let me know if you find something good, so far it's been turtles all the way down here... -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Migrating OpenLDAP users into AD
Brian explained this properly a few posts back: applications built around generic LDAP must figure out the user's DN based on username/email/UPN that the user typed in, before an attempt to validate the supplied credential can be made. That's where the service account comes in... it just has to search out that user account. Non-AD LDAP servers do not have any common concept of letting a user bind with a bare username or UPN. Hey, AD-integrated apps have to do this too, and they have a credential squirreled away in a file somewhere--okay, it's heavily obfuscated, but the machine account secret isn't magic. Same deal with a Kerberos keystore. I would note that most non-AD LDAP DSAs allow anonymous to search by default. Requiring a bind before doing certain UNIX'y things (I'm looking at you, automountd) remains a bit kludgy. --Steve On Mon, Oct 3, 2011 at 10:22 PM, Ben Scott mailvor...@gmail.com wrote: On Mon, Oct 3, 2011 at 11:37 AM, Crawford, Scott crawfo...@evangel.edu wrote: RE: This is a fairly common model and there’s not really anything wrong with it. Why is it such a common model? I see it a lot too, and it always frustrates me that they don’t simply use the credentials supplied by the user to attempt to bind to AD. I'm confident laziness is the most common reason, but for a minority of cases, some scenarios have a need to identify things in the directory independently of a user doing something against that directory. In other words, the server needs to look something up without having a user's credentials handy to do so. There may also be a performance/security thing. If you're dealing with a LDAP-Unix gateway (making your LDAP accounts look like traditional Unix accounts), authenticating each user doing something would require that many different LDAP connections, and arguably the host should cache them separately as well (since if you care to do this you presumably have users with different accesses to your directory). As having one account for the host that has read-only access, the host can just use one connection and cache for everybody. But whether either of these possibilities apply depends entirely on the scenario. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
