Re: Can you have all members of and OU automatically not be members of Domain users

[Andrew S. Baker]

Sounds like they really need federated directories...

* *

*ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of
Technology for the SMB market…

*



On Fri, Nov 18, 2011 at 5:29 PM, Graeme Carstairs wrote:

> We have a project in hand that the client is looking for someway to do
> either of the following 2 optons for authenticating 3rd party contractors
> who need access to the system.
>
> 1. An authenticaiton database and system that doesnt store the user
> accounts in AD and uses an alternative user account system but still has
> the capability to allow access as if it was a main AD account to file
> shares, applications and even Exchange if requried.
> 2. A second domain for the 3rd party contractos with a trust.
> 3. Locked down OU, with the accounts not having domain users and was
> mentioned but not decided as absolutely must have "authenticated user"
> rights.
>
> I think 3 will be the easiest to manage on going, but the client has
> expressed that they would like it to be systematically controlled by the
> software and not just left to the people creating accounts in case
> something is missed.
>
> Does that help :)
>
> Graeme
>
>
> On 18 November 2011 21:51, Rankin, James R  wrote:
>
>> **
>> I'd love to hear what you need to do that for
>> Sent from my SR-71 Blackbird
>> --
>> *From: * Graeme Carstairs 
>> *Date: *Fri, 18 Nov 2011 21:28:04 +
>> *To: *NT System Admin Issues
>> *ReplyTo: * "NT System Admin Issues" <
>> ntsysadmin@lyris.sunbelt-software.com>
>> *Subject: *Can you have all members of and OU automatically not be
>> members of Domain users
>>
>> Hi There,
>>
>> The subject line says it all
>>
>> We are looking for away to systematically make and OU that if you create
>> a user in it, it will have a group say "SecGroup1" as its primary group,
>> and not have membership of Domain Users.
>>
>> The idea is for a specific OU that users created in it, will never be
>> members of Domain Users, and even if the membership is added to the user
>> once created will be removed, or be unable to be added.
>>
>> Thanks
>>
>> Graeme
>>
>>
>>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

R: Mevio?

[HELP_PC]

Image it and run Malwarebytes and Combofix


Guido Elia
HELPPC - HELPPC SERVICE

Da: Tammy Stewart [mailto:copper...@personainternet.com]
Inviato: sabato 19 novembre 2011 19.05
A: NT System Admin Issues
Oggetto: RE: Mevio?

Sounds a bit nasty -- I've run into a few of these lately.

What OS? and is it 32 or 64 bit?
Sounds like MBR infection - possibly mbr.sst.a or .b
It is commonly dropped with that & similar rogue AVs.

This program should tell you if the MBR is faked
http://ad13.geekstogo.com/MBRCheck.exe

 If you are running SonicWall it will report that file as conficker. It is 
a f/p detection 
All the tool does is check MBR, make log & gives you the ability to dump copy 
of the MBR and re-write the MBR if found infected.
If using the tool to fix MBR make sure if you have disk encryption enabled to 
disable that first or you may render system unbootable.

If 64 bit OS check also disk management. Possibly there is a whole new 
partition created by the infection that is loading before the OS.
If this is the case -- will need a bootable partition management tool to remove 
bad partition & reset the right one as active etc so it will boot. Infection 
set its partition to load before the others.

Tdsskiller might be able to detect the infection as well. (It cannot deal with 
the infection that creates the rootkit partition but usually can deal with MBR 
infection)

Process explorer -- if you double click the iexplore.exe process & look at 
tcp/ip tab you will see a ton of connections

Tammy



From: Len Hammond [mailto:lenhammo...@gmail.com]
Sent: November-18-11 5:06 PM
To: NT System Admin Issues
Subject: Mevio?

Got one word for the group...

Mevio

What is it and why would someone want it on a machine.

So far I'm finding info saying it is a virus (and I tend to think that's right) 
and some conflicting info suggesting that it is something related to iTunes and 
is a music and/or video playing source and software.

To the best of my knowledge, this "mevio" was not invited into this machine by 
the owner, I'm just trying to get it out of his way. It keeps popping up and 
wanting to be installed/validated. This machine also has reportedly been found 
after being idle overnight to be playing music out the speakers. They said it 
was like a radio station. Also, the process = iexplore.exe is always running 
without Internet Explorer being in the applications area in Task Manager or on 
the task bar. It does appear to have "arrived" at about the same time as a 
virus (trojan = AV Security 2012) that at this time seems to have been 
erradicated. Ultimately, I think this, being an older machine will probably get 
refurbished with a wipe & reinstall before going back into permanent service. 
But, in the meantime, I'd like to get the guy working without the interruptions.

Think I'll uninstall IE9 for a while and let him use Chrome, as IE seems to be 
the app that is causing the trouble, or IE has been compromised and the malware 
is causing the trouble through IE.

Ass always, thanks for the thoughts and help.
Len Hammond
CSI:Hartland, LLC

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Mevio?

[Tammy Stewart]

Sounds a bit nasty -- I've run into a few of these lately.

 

What OS? and is it 32 or 64 bit?

Sounds like MBR infection - possibly mbr.sst.a or .b 

It is commonly dropped with that & similar rogue AVs.

 

This program should tell you if the MBR is faked 

http://ad13.geekstogo.com/MBRCheck.exe

 

 If you are running SonicWall it will report that file as conficker. It
is a f/p detection 

All the tool does is check MBR, make log & gives you the ability to dump
copy of the MBR and re-write the MBR if found infected.

If using the tool to fix MBR make sure if you have disk encryption enabled
to disable that first or you may render system unbootable.

 

If 64 bit OS check also disk management. Possibly there is a whole new
partition created by the infection that is loading before the OS.

If this is the case -- will need a bootable partition management tool to
remove bad partition & reset the right one as active etc so it will boot.
Infection set its partition to load before the others.

 

Tdsskiller might be able to detect the infection as well. (It cannot deal
with the infection that creates the rootkit partition but usually can deal
with MBR infection)

 

Process explorer -- if you double click the iexplore.exe process & look at
tcp/ip tab you will see a ton of connections

 

Tammy

 

 

 

From: Len Hammond [mailto:lenhammo...@gmail.com] 
Sent: November-18-11 5:06 PM
To: NT System Admin Issues
Subject: Mevio?

 

Got one word for the group...

 

Mevio

 

What is it and why would someone want it on a machine.

 

So far I'm finding info saying it is a virus (and I tend to think that's
right) and some conflicting info suggesting that it is something related to
iTunes and is a music and/or video playing source and software.

 

To the best of my knowledge, this "mevio" was not invited into this machine
by the owner, I'm just trying to get it out of his way. It keeps popping up
and wanting to be installed/validated. This machine also has reportedly been
found after being idle overnight to be playing music out the speakers. They
said it was like a radio station. Also, the process = iexplore.exe is always
running without Internet Explorer being in the applications area in Task
Manager or on the task bar. It does appear to have "arrived" at about the
same time as a virus (trojan = AV Security 2012) that at this time seems to
have been erradicated. Ultimately, I think this, being an older machine will
probably get refurbished with a wipe & reinstall before going back into
permanent service. But, in the meantime, I'd like to get the guy working
without the interruptions.

 

Think I'll uninstall IE9 for a while and let him use Chrome, as IE seems to
be the app that is causing the trouble, or IE has been compromised and the
malware is causing the trouble through IE.

 

Ass always, thanks for the thoughts and help.
Len Hammond
CSI:Hartland, LLC

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Outlook Cached Mode with Exchange 2010

[Brian Desmond]

What makes it not feasible in your scenarios?

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Saturday, November 19, 2011 9:54 AM
To: NT System Admin Issues
Subject: Outlook Cached Mode with Exchange 2010

What do you all do regarding cached mode in Outlook with Exchange 2010?

We have a mix of use cases in our environment, ranging from the generic "One 
person uses the same computer every day" through to machines that are logged 
onto using a generic logon with several Outlook profiles created for the staff 
in those areas.

Because of this, enabling Cached Mode via Group Policy doesn't seem very 
sensible, but enabling it through Group Policy Preferences may be as the option 
would be there to switch it off if it was incorrectly targeted.

Before I look at doing anything I'd be interested to know your experiences of 
cached mode.

Thanks,
Paul

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Anybody else having large failure rates of Dell Power Supplys, SFF Model Optplex 390 and/or 790?

[Maglinger, Paul]

Check out www.thecapking.com .  I tried sourcing 
caps on my own and a lot of suppliers were out of stock. This guy had 
replacements that would work.  It's not just the voltage and temp rating.  You 
need to match the type, particularly in power supplies and monitors.  They can 
have bi-polar and high-frequency specs that you have to match up otherwise they 
will pop.

-Paul

From: Len Hammond [mailto:lenhammo...@gmail.com]
Sent: Friday, November 18, 2011 4:25 PM
To: NT System Admin Issues
Subject: Re: Anybody else having large failure rates of Dell Power Supplys, SFF 
Model Optplex 390 and/or 790?

Recently, I had a customer Dell monitor fail. Inspection revealed swollen 
capacitors in the power supply. My son has been seeing and replacing the same 
kind of swollen capacitors in Flat panel television power supplies with a good 
success rate. My guess is that this is a capacitor manufacturing issue (low 
quality or NO quality) and these capacitors are used in power supplies of many 
different products. They run for a while but fail prematurely, taking out the 
device they power. I'm trying to get a capacitor order together for next week 
so we can put a few devices back into service. We're going to try some 
capacitors with a slightly higher voltage rating and the same microfarad rating 
and see if we can get a little better service time out of them. Many of the TVs 
my son is seeing are less than a year old.

Len Hammond
CSI:Hartland, LLC
l...@csihartland.com

On Fri, Nov 18, 2011 at 4:49 PM, Orland, Kathleen 
mailto:korl...@rogers.com>> wrote:
I went through a spate of Dells (read skid) last year with every last one of
them going up in noise, sparks, flames, and smoke. They were all sent to me
by our head office for a desktop upgrade for my users. Not one Dell
survived. I didn't even keep a record of the model number or S/N because
they were all returned to H.O. for destruction. I'm trying to go through
emails, but I honestly can't recall off the top of my head what the model
number was (they were all the same).

-Original Message-
From: Matthew W. Ross 
[mailto:mr...@ephrataschools.org]
Sent: Friday, November 18, 2011 12:56 PM
To: NT System Admin Issues
Subject: Anybody else having large failure rates of Dell Power Supplys, SFF
Model Optplex 390 and/or 790?
We're having a very large failure rate of computer power supplies in 2 of
our brand new labs. These are 2 labs of 32 computers each... one lab is Dell
Optiplex 390 SFFs, the other is Dell Optiplex 790 SFFs. I think they use the
exact same PS.

Issues are either A) No power and no lights, B) Blinking yellow power lights
and won't turn on, or C) *Poof* smoke.

We have 8 failures in the past month out of 64 computers. I'm just curious
if anybody else on the list is seeing similar failures for recent SFF
dells...

Sales rep contacted, I'm awaiting response.


--Matt Ross
Ephrata School District

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Iphone and Excahnge notes

[Sam Cayze]

Our email client doesn't do notes either.
Myself and the rest of the company started using Evernote and Springpad as
Note replacents. None of us have looked back.

Sam
 On Nov 18, 2011 5:34 PM, "Hugo Hernandez"  wrote:

>  What are you guys using/doing to sync Exchange Outlook notes to the
> Iphone?  I know that with the release of IOS5 Tasks are now synced but
> there is still no native notes sync.  I’ve ran across several apps that
> claim to do the job but none that get great reviews.  Android has Touchdown
> and its a great app but I haven’t found an equivalent for the Iphone.  What
> are you guys using to sync notes to the Iphone?
>
> ** **
>
> Thanks,
>
> ** **
>
> Hugo Hernandez
>
> IT Manager
>
> * *
>
> FUTURE ADS LLC
>
> ** **
>
> * E-mail:* *h...@futureads.com
>
> The information contained in this email message is PRIVILEGED AND
> CONFIDENTIAL INFORMATION intended only for the use of the individual or
> entity it was directly addressed to. If the reader of this message is not
> the intended recipient, you are hereby notified that any dissemination,
> distribution or copy of this communication is strictly prohibited. If you
> have received this communication in error, please immediately notify us by
> email. Thank you.
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin