Re: Sophisticated Phising attempt?

2012-03-28 Thread Jonathan Link 
Following this up, I did eventually get a followup email and this is
legitimate.  There are some issues with the report, but that's all part of
the process I'm now in.



On Wed, Mar 28, 2012 at 8:45 AM, Jonathan Link wrote:

> I received an email purportedly to be from Microsoft about a Software
> Asset Management (SAM) license review (headers looked like it came from MS,
> but I'm not an expert).  They indicated that they were trying to contact me
> this week (it was sent on Tuesday, and the *only* prior contact was a
> misdirected phone call into one of our director's voicemail[1]).
>
> It includes 2 PDFs, one appears to be a report with our name on it, VLPS
> Report, and it appears to have some correct information as to the
> customerID.  There's a deployment summary spreadsheet and a USA FAQ
> 2012.pdf.  Included in the email are some instructions, a suggestion to use
> the Microsoft Assessment and Planning Toolkit to help complete the tasks.
> It includes an email address for msft...@microsoft.com or to contact
> another person at Microsoft.
>
> The person's display name for contacting me is foreign and has (Accenture)
> in parentheses.  It comes from a microsoft.com email address, however a
> reply back to that address generated an access denied NDR, but a reply to
> the other individual did not.  I haven't received an email (I also
> forwareded the email to the other address) in response, and I would have
> expected a faster turnaround.  The email address did contain a phone
> number, however that phone number, according to 800 notes, has been used in
> several scams in the past, trying to trick people into giving bank account
> information to receive a government grant.  A physical address is given,
> but it is the address to the Microsoft campus in Redmond.
>
> So, I cautiously viewed the documents on my iPhone.  One document, our
> apparent licensing report appears entirely legitimate.  I have had a weak
> password on the eopen site for a while, just hadn't bothered changing it.
> Second PDF (USA FAQ 2012[2]) is not viewable on my iPhone, it just displays
> whitespace, as does the excel file.  I'm going to take them to a sandboxed
> computer to view them later.  They also want information returned by April
> 16th.
>
> My other concern is some limited googling has suggested that this might be
> legitimate, that Microsoft has engaged in third parties to do this, and
> that there are variations of this process, but those could be cleverly
> built forums with shills indicating the process is legit, so I turn to this
> list for advice.  In the body of the email there aren't any instructions on
> where to send the information.  If the sender can only send email, having
> another address to receive this information seems to be necessary.
>
>
> [1] The voicemail was extremely static laden and had several gaps in it.
> [2] That's a poorly named FAQ and about the only poorly phrased or worded
> item in the email.
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Sophisticated Phising attempt?

2012-03-28 Thread Bob Fronk 
I just went through renewal and had contact from several consultants and 
"Microsoft" people (who are actually contractors).  Several claimed to have 
been "trying to contact me", when I had no messages from them.

In the past, I simply reviewed the information that our vendor sent me, 
increased or decreased license counts, added needed CALS or servers, and was 
done.  This time it took several conference calls with 5-6 people, some with 
MS, some consultants, plus my vendor (Dell).  Numerous emails to repeat 
information already given to someone else, two people wanting to provide 
"services" and wanting access to our system to run inventory tools.  It was a 
terrible experience and hope they get their act together.

BF

From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Wednesday, March 28, 2012 8:46 AM
To: NT System Admin Issues
Subject: Sophisticated Phising attempt?

I received an email purportedly to be from Microsoft about a Software Asset 
Management (SAM) license review (headers looked like it came from MS, but I'm 
not an expert).  They indicated that they were trying to contact me this week 
(it was sent on Tuesday, and the only prior contact was a misdirected phone 
call into one of our director's voicemail[1]).

It includes 2 PDFs, one appears to be a report with our name on it, VLPS 
Report, and it appears to have some correct information as to the customerID.  
There's a deployment summary spreadsheet and a USA FAQ 2012.pdf.  Included in 
the email are some instructions, a suggestion to use the Microsoft Assessment 
and Planning Toolkit to help complete the tasks.  It includes an email address 
for msft...@microsoft.com or to contact another 
person at Microsoft.

The person's display name for contacting me is foreign and has (Accenture) in 
parentheses.  It comes from a microsoft.com email 
address, however a reply back to that address generated an access denied NDR, 
but a reply to the other individual did not.  I haven't received an email (I 
also forwareded the email to the other address) in response, and I would have 
expected a faster turnaround.  The email address did contain a phone number, 
however that phone number, according to 800 notes, has been used in several 
scams in the past, trying to trick people into giving bank account information 
to receive a government grant.  A physical address is given, but it is the 
address to the Microsoft campus in Redmond.

So, I cautiously viewed the documents on my iPhone.  One document, our apparent 
licensing report appears entirely legitimate.  I have had a weak password on 
the eopen site for a while, just hadn't bothered changing it.  Second PDF (USA 
FAQ 2012[2]) is not viewable on my iPhone, it just displays whitespace, as does 
the excel file.  I'm going to take them to a sandboxed computer to view them 
later.  They also want information returned by April 16th.

My other concern is some limited googling has suggested that this might be 
legitimate, that Microsoft has engaged in third parties to do this, and that 
there are variations of this process, but those could be cleverly built forums 
with shills indicating the process is legit, so I turn to this list for advice. 
 In the body of the email there aren't any instructions on where to send the 
information.  If the sender can only send email, having another address to 
receive this information seems to be necessary.


[1] The voicemail was extremely static laden and had several gaps in it.
[2] That's a poorly named FAQ and about the only poorly phrased or worded item 
in the email.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: NTBackup will no longer run as a scheduled task

2012-03-28 Thread Ben Scott 
On Wed, Mar 28, 2012 at 12:45 PM, Richard McClary
 wrote:
> It took some research, but to deal with the issue of the job not finding the
> drive or media – apparently it is necessary to end the schedule string with
> the “/um” switch.

  In my experience, NTBACKUP is flat out broken without the /UM switch
(un-managed media mode).  (For command line operation.)

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: NTBackup will no longer run as a scheduled task

2012-03-28 Thread Richard McClary 
Big-time update (and hardly a Windows update and something that shows the 
necessity of "security")!

One of our programmers (a consultant, but the guy has set up some absolutely 
wonderful and necessary scripts for us) whacked the user profile which had the 
*.bks file.  That is what broke it in the first place.

It took some research, but to deal with the issue of the job not finding the 
drive or media - apparently it is necessary to end the schedule string with the 
"/um" switch.

So, I think editing a backup script (changing paths),  creating a new *.bks 
file, etc, it will hopefully run early tomorrow morning.

Thanks for your patience, and I'll try to remember to let all know.
--
richard

From: John C Owen [mailto:jo...@innovativefoto.com]
Sent: Wednesday, March 28, 2012 10:30 AM
To: NT System Admin Issues
Subject: RE: NTBackup will no longer run as a scheduled task

Any recent applied windows updates and security patches?

From: Richard McClary [mailto:richard.mccl...@aspca.org]
Sent: Wednesday, March 28, 2012 11:13 AM
To: NT System Admin Issues
Subject: NTBackup will no longer run as a scheduled task

Greetings!

We have a library of "substances" on a server (really old - Dell PE-2650).  It 
has an Adaptec card and a Dell StoreVault(?) LTO2 drive.  For years it has been 
backing the library pre-dawn, M-F using NTBackup as a Scheduled Task.

[Windows 2003 SP2]

This broke last week.  The Events log showed that the system was unable to find 
the script associated with the job...

OK, I go and create the script again (in NTBackup, but finishing with 
scheduling it to run weekly, each M-F).  I right click it and select "Run now". 
 NTBackup starts to open, then it vanishes.  I check EventLogs, and I see no 
errors.

I repeat the steps above running NTBackup manually,  The backup process runs 
with no issues.

Googling, I learned of "Scheduled Tasks" logs.  This is not useful:

"AnToxSubstances.job" (ntbackup.exe)
Started 3/28/2012 1:45:01 AM
"AnToxSubstances.job" (ntbackup.exe)
Finished 3/28/2012 1:45:17 AM
Result: The task completed with an exit code of (0).

Other scheduled tasks appear to be running successfully.

So, why is it when I create a job in NTBackup, it runs if I click "Run now"; 
but if I save it as a scheduled task (and then try to run it from the list of 
tasks), it fails immediately?

Again, this had been running with no such issues for several years (up until 
last week).

Thanks!
--
Richard D. McClary
Jr Infrastructure Architect, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL 61802
richard.mccl...@aspca.org
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~

Re: Switching IP's on Wireless clients

2012-03-28 Thread Ben Scott 
On Wed, Mar 28, 2012 at 10:37 AM, Stefan Jafs  wrote:
> Ok, so I have a few D-Link Wireless Access Point DAP-2553, I’m running out
> of IP’s on my internal network, 192.168.0.1 – 192.168.1.254, I have many
> users with wireless devices BB’s, iDevices, etc. I was thinking I could turn
> on DHCP in the D-link and give it an 10.10.x.x address. A few questions how
> would DHCP work over multiple AP’s would I have to change the modes? What
> would I do for gateway?

  You need to describe your network topology before we can give any
meaningful advice.  How are the different network devices connected
together?  How are addresses assigned currently?

  You should also go and read some threads in the archives, there have
been a lot of discussions about how IP networks work.  ...  Oh, hmmm,
I went to look up some past threads and realized you were one of the
people refusing to learn how IP networks work last time.  Well, you
might want to reconsider.  Yes, you really do need to know.

http://www.mail-archive.com/ntsysadmin@lyris.sunbelt-software.com/msg107418.html

http://www.mail-archive.com/ntsysadmin@lyris.sunbelt-software.com/msg107486.html

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: NTBackup will no longer run as a scheduled task

2012-03-28 Thread Maglinger, Paul 
You say you had to re-create the script.  Is it possible that you had command 
lines in quotes the first time around?

From: Richard McClary [mailto:richard.mccl...@aspca.org]
Sent: Wednesday, March 28, 2012 10:40 AM
To: NT System Admin Issues
Subject: RE: NTBackup will no longer run as a scheduled task

Just the usual monthly MS Update stuff.  Thing is, the failure occurred some 
time after the last update.

HOWEVER, not doing a dump-and-run, I found another set of logs.  I believe I 
have just now stumbled across a major clue.  The task does not find the tape 
drive...

I'll dig there and try to figure out why the scheduled jobs can't find it but 
running manually does find the drive.

Thanks!
--
richard

From: Cameron 
[mailto:cameron.orl...@gmail.com]
Sent: Wednesday, March 28, 2012 10:23 AM
To: NT System Admin Issues
Subject: Re: NTBackup will no longer run as a scheduled task

Any recent updates applied?
On Wed, Mar 28, 2012 at 11:13 AM, Richard McClary 
mailto:richard.mccl...@aspca.org>> wrote:
Greetings!

We have a library of "substances" on a server (really old - Dell PE-2650).  It 
has an Adaptec card and a Dell StoreVault(?) LTO2 drive.  For years it has been 
backing the library pre-dawn, M-F using NTBackup as a Scheduled Task.

[Windows 2003 SP2]

This broke last week.  The Events log showed that the system was unable to find 
the script associated with the job...

OK, I go and create the script again (in NTBackup, but finishing with 
scheduling it to run weekly, each M-F).  I right click it and select "Run now". 
 NTBackup starts to open, then it vanishes.  I check EventLogs, and I see no 
errors.

I repeat the steps above running NTBackup manually,  The backup process runs 
with no issues.

Googling, I learned of "Scheduled Tasks" logs.  This is not useful:

"AnToxSubstances.job" (ntbackup.exe)
Started 3/28/2012 1:45:01 AM
"AnToxSubstances.job" (ntbackup.exe)
Finished 3/28/2012 1:45:17 AM
Result: The task completed with an exit code of (0).

Other scheduled tasks appear to be running successfully.

So, why is it when I create a job in NTBackup, it runs if I click "Run now"; 
but if I save it as a scheduled task (and then try to run it from the list of 
tasks), it fails immediately?

Again, this had been running with no such issues for several years (up until 
last week).

Thanks!
--
Richard D. McClary
Jr Infrastructure Architect, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL 61802
richard.mccl...@aspca.org
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Switching IP's on Wireless clients

2012-03-28 Thread Andrew S. Baker 
Better yet, use something from the 172.16.x.x - 172.31.x.x block for your
/16 (or /22), so that you have less contention with other uses of
192.168.x.x

* *

*ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of
Technology for the SMB market…

*



On Wed, Mar 28, 2012 at 11:14 AM, Matthew W. Ross
wrote:

> You're either talking about routing (which would require something layer-3
> aware to deal with two subnets, 192.168.1.0/24 and 10.10.0.0/16) or
> nesting NATs (In which your 192.168.1.0/24 subnet has your 2nd router on
> the outward facing port, and internally to that router you have your
> 10.10.0.0/16 network).
>
> Routing would work, but it's not a cakewalk. You would need to configure
> some layer 3 switch or router to handle the routes.
>
> NAT nesting is not a good idea, as the nested network will not be visible
> to the rest of the network (among other potential problems this creates).
>
> I recommend you don't do either unless you really want to separate your
> network. Instead, take your current 192.168.1.0/24 network and make it a
> bigger subnet. Do the easy thing and just make it a 192.168.1.0/16network 
> (subnet 255.255.0.0) which will allow you to use the entire
> 192.168.x.x network.
>
> Of course, depending on your situation, perhaps you want to do things
> differently. YMMV, No refunds on free advice.
>
>
> --Matt Ross
> Ephrata School District
>
>
> - Original Message -
> From: Stefan Jafs
> [mailto:stefan.j...@gmail.com]
> To: NT System Admin Issues
> [mailto:ntsysadmin@lyris.sunbelt-software.com]
> Sent: Wed, 28 Mar 2012
> 07:37:06 -0700
> Subject: Switching IP's on Wireless clients
>
>
> > Ok, so I have a few D-Link Wireless Access Point DAP-2553, I’m running
> out
> > of IP’s on my internal network, 192.168.0.1 – 192.168.1.254, I have many
> > users with wireless devices BB’s, iDevices, etc. I was thinking I could
> > turn on DHCP in the D-link and give it an 10.10.x.x address. A few
> > questions how would DHCP work over multiple AP’s would I have to change
> > the
> > modes? What would I do for gateway?
> >
> >
> > --
> > Stefan Jafs
> >
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: NTBackup will no longer run as a scheduled task

2012-03-28 Thread Richard McClary 
Just the usual monthly MS Update stuff.  Thing is, the failure occurred some 
time after the last update.

HOWEVER, not doing a dump-and-run, I found another set of logs.  I believe I 
have just now stumbled across a major clue.  The task does not find the tape 
drive...

I'll dig there and try to figure out why the scheduled jobs can't find it but 
running manually does find the drive.

Thanks!
--
richard

From: Cameron [mailto:cameron.orl...@gmail.com]
Sent: Wednesday, March 28, 2012 10:23 AM
To: NT System Admin Issues
Subject: Re: NTBackup will no longer run as a scheduled task

Any recent updates applied?
On Wed, Mar 28, 2012 at 11:13 AM, Richard McClary 
mailto:richard.mccl...@aspca.org>> wrote:
Greetings!

We have a library of "substances" on a server (really old - Dell PE-2650).  It 
has an Adaptec card and a Dell StoreVault(?) LTO2 drive.  For years it has been 
backing the library pre-dawn, M-F using NTBackup as a Scheduled Task.

[Windows 2003 SP2]

This broke last week.  The Events log showed that the system was unable to find 
the script associated with the job...

OK, I go and create the script again (in NTBackup, but finishing with 
scheduling it to run weekly, each M-F).  I right click it and select "Run now". 
 NTBackup starts to open, then it vanishes.  I check EventLogs, and I see no 
errors.

I repeat the steps above running NTBackup manually,  The backup process runs 
with no issues.

Googling, I learned of "Scheduled Tasks" logs.  This is not useful:

"AnToxSubstances.job" (ntbackup.exe)
Started 3/28/2012 1:45:01 AM
"AnToxSubstances.job" (ntbackup.exe)
Finished 3/28/2012 1:45:17 AM
Result: The task completed with an exit code of (0).

Other scheduled tasks appear to be running successfully.

So, why is it when I create a job in NTBackup, it runs if I click "Run now"; 
but if I save it as a scheduled task (and then try to run it from the list of 
tasks), it fails immediately?

Again, this had been running with no such issues for several years (up until 
last week).

Thanks!
--
Richard D. McClary
Jr Infrastructure Architect, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL 61802
richard.mccl...@aspca.org
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: NTBackup will no longer run as a scheduled task

2012-03-28 Thread Guyer, Donald 
Isn't there a separate log somewhere for scheduled tasks? Google it.

Could also be an authentication failure.

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Cameron [mailto:cameron.orl...@gmail.com]
Sent: Wednesday, March 28, 2012 11:23 AM
To: NT System Admin Issues
Subject: Re: NTBackup will no longer run as a scheduled task

Any recent updates applied?
On Wed, Mar 28, 2012 at 11:13 AM, Richard McClary 
mailto:richard.mccl...@aspca.org>> wrote:
Greetings!

We have a library of "substances" on a server (really old - Dell PE-2650).  It 
has an Adaptec card and a Dell StoreVault(?) LTO2 drive.  For years it has been 
backing the library pre-dawn, M-F using NTBackup as a Scheduled Task.

[Windows 2003 SP2]

This broke last week.  The Events log showed that the system was unable to find 
the script associated with the job...

OK, I go and create the script again (in NTBackup, but finishing with 
scheduling it to run weekly, each M-F).  I right click it and select "Run now". 
 NTBackup starts to open, then it vanishes.  I check EventLogs, and I see no 
errors.

I repeat the steps above running NTBackup manually,  The backup process runs 
with no issues.

Googling, I learned of "Scheduled Tasks" logs.  This is not useful:

"AnToxSubstances.job" (ntbackup.exe)
Started 3/28/2012 1:45:01 AM
"AnToxSubstances.job" (ntbackup.exe)
Finished 3/28/2012 1:45:17 AM
Result: The task completed with an exit code of (0).

Other scheduled tasks appear to be running successfully.

So, why is it when I create a job in NTBackup, it runs if I click "Run now"; 
but if I save it as a scheduled task (and then try to run it from the list of 
tasks), it fails immediately?

Again, this had been running with no such issues for several years (up until 
last week).

Thanks!
--
Richard D. McClary
Jr Infrastructure Architect, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL 61802
richard.mccl...@aspca.org
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Confidentiality Notice:
This e-mail, including any attachments is the 
property of Catholic Health East and is intended 
for the sole use of the intended recipient(s).  
It may contain information that is privileged and 
confidential.  Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are 
not the intended recipient, please delete this message, and 
reply to the sender regarding the error in a separate email. 
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: NTBackup will no longer run as a scheduled task

2012-03-28 Thread John C Owen 
Any recent applied windows updates and security patches?

From: Richard McClary [mailto:richard.mccl...@aspca.org]
Sent: Wednesday, March 28, 2012 11:13 AM
To: NT System Admin Issues
Subject: NTBackup will no longer run as a scheduled task

Greetings!

We have a library of "substances" on a server (really old - Dell PE-2650).  It 
has an Adaptec card and a Dell StoreVault(?) LTO2 drive.  For years it has been 
backing the library pre-dawn, M-F using NTBackup as a Scheduled Task.

[Windows 2003 SP2]

This broke last week.  The Events log showed that the system was unable to find 
the script associated with the job...

OK, I go and create the script again (in NTBackup, but finishing with 
scheduling it to run weekly, each M-F).  I right click it and select "Run now". 
 NTBackup starts to open, then it vanishes.  I check EventLogs, and I see no 
errors.

I repeat the steps above running NTBackup manually,  The backup process runs 
with no issues.

Googling, I learned of "Scheduled Tasks" logs.  This is not useful:

"AnToxSubstances.job" (ntbackup.exe)
Started 3/28/2012 1:45:01 AM
"AnToxSubstances.job" (ntbackup.exe)
Finished 3/28/2012 1:45:17 AM
Result: The task completed with an exit code of (0).

Other scheduled tasks appear to be running successfully.

So, why is it when I create a job in NTBackup, it runs if I click "Run now"; 
but if I save it as a scheduled task (and then try to run it from the list of 
tasks), it fails immediately?

Again, this had been running with no such issues for several years (up until 
last week).

Thanks!
--
Richard D. McClary
Jr Infrastructure Architect, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL 61802
richard.mccl...@aspca.org
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: NTBackup will no longer run as a scheduled task

2012-03-28 Thread Cameron 
Any recent updates applied?

On Wed, Mar 28, 2012 at 11:13 AM, Richard McClary  wrote:

>  Greetings!
>
> ** **
>
> We have a library of “substances” on a server (really old – Dell
> PE-2650).  It has an Adaptec card and a Dell StoreVault(?) LTO2 drive.  For
> years it has been backing the library pre-dawn, M-F using NTBackup as a
> Scheduled Task.
>
> ** **
>
> [Windows 2003 SP2]
>
> ** **
>
> This broke last week.  The Events log showed that the system was unable to
> find the script associated with the job…
>
> ** **
>
> OK, I go and create the script again (in NTBackup, but finishing with
> scheduling it to run weekly, each M-F).  I right click it and select “Run
> now”.  NTBackup starts to open, then it vanishes.  I check EventLogs, and I
> see no errors.
>
> ** **
>
> I repeat the steps above running NTBackup manually,  The backup process
> runs with no issues.
>
> ** **
>
> Googling, I learned of “Scheduled Tasks” logs.  This is not useful:
>
> ** **
>
> "AnToxSubstances.job" (ntbackup.exe)
>
> Started 3/28/2012 1:45:01 AM
>
> "AnToxSubstances.job" (ntbackup.exe)
>
> Finished 3/28/2012 1:45:17 AM
>
> Result: The task completed with an exit code of (0).
>
> ** **
>
> Other scheduled tasks appear to be running successfully.
>
> ** **
>
> So, why is it when I create a job in NTBackup, it runs if I click “Run
> now”; but if I save it as a scheduled task (and then try to run it from the
> list of tasks), it fails immediately?
>
> ** **
>
> Again, this had been running with no such issues for several years (up
> until last week).
>
> ** **
>
> Thanks!
>
> --
>
> Richard D. McClary
>
> Jr Infrastructure Architect, Information Technology Group 
>
> *ASPCA®*
>
> 1717 S. Philo Rd, Ste 36
>
> Urbana, IL 61802
>
> richard.mccl...@aspca.org
>
> P: 217-337-9761
>
> C: 217-417-1182
>
> F: 217-337-9761
>
> www.aspca.org
>
> ** **
>
>
> The information contained in this e-mail, and any attachments hereto, is
> from The American Society for the Prevention of Cruelty to Animals®
> (ASPCA®) and is intended only for use by the addressee(s) named herein and
> may contain legally privileged and/or confidential information. If you are
> not the intended recipient of this e-mail, you are hereby notified that any
> dissemination, distribution, copying or use of the contents of this e-mail,
> and any attachments hereto, is strictly prohibited. If you have received
> this e-mail in error, please immediately notify me by reply email and
> permanently delete the original and any copy of this e-mail and any
> printout thereof.
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: BB curve 9300 installation

2012-03-28 Thread Gasper, Rick 
While I don't have a bb I can tell you on some phones there is a setting to 
prevent charging when plugged into a computer's USB port.

Rick

-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Tuesday, March 27, 2012 7:17 PM
To: NT System Admin Issues
Subject: Re: BB curve 9300 installation

On Tue, Mar 27, 2012 at 6:23 PM, Free, Bob  wrote:
>> The "something fancier" mode may need drivers, but the "ordinary USB flash 
>> drive" mode does not.
>
> AKA-  MTP vs MSC--Media Transfer Protocol (commonly referred to as 
> MTP) is part of the "Windows Media" framework vs USB mass-storage 
> device class (MSC)

  Windows has support for MTP out-of-the-box, though.  At least, none of the 
MTP cameras I've plugged into Windows needed anything special.
The Blackberry "something fancier" mode also does more than just MTP.
Things like tethering and device management also get presented as USB devices.  
That said, MTP may well be in there, too.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Switching IP's on Wireless clients

2012-03-28 Thread Matthew W. Ross 
You're either talking about routing (which would require something layer-3 
aware to deal with two subnets, 192.168.1.0/24 and 10.10.0.0/16) or nesting 
NATs (In which your 192.168.1.0/24 subnet has your 2nd router on the outward 
facing port, and internally to that router you have your 10.10.0.0/16 network).

Routing would work, but it's not a cakewalk. You would need to configure some 
layer 3 switch or router to handle the routes.

NAT nesting is not a good idea, as the nested network will not be visible to 
the rest of the network (among other potential problems this creates).

I recommend you don't do either unless you really want to separate your 
network. Instead, take your current 192.168.1.0/24 network and make it a bigger 
subnet. Do the easy thing and just make it a 192.168.1.0/16 network (subnet 
255.255.0.0) which will allow you to use the entire 192.168.x.x network.

Of course, depending on your situation, perhaps you want to do things 
differently. YMMV, No refunds on free advice.


--Matt Ross
Ephrata School District


- Original Message -
From: Stefan Jafs
[mailto:stefan.j...@gmail.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Wed, 28 Mar 2012
07:37:06 -0700
Subject: Switching IP's on Wireless clients


> Ok, so I have a few D-Link Wireless Access Point DAP-2553, I’m running out
> of IP’s on my internal network, 192.168.0.1 – 192.168.1.254, I have many
> users with wireless devices BB’s, iDevices, etc. I was thinking I could
> turn on DHCP in the D-link and give it an 10.10.x.x address. A few
> questions how would DHCP work over multiple AP’s would I have to change
> the
> modes? What would I do for gateway?
> 
> 
> -- 
> Stefan Jafs
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Sophisticated Phising attempt?

2012-03-28 Thread Ryan, Randy 
Had similar contact also.

I have been contacted via email and phone from someone in North Dakota about 
licenses several times and it was always the same guy.  It was a bit fishy at 
first, but further dealings with my MS vendor communicating with him showed him 
to be legit.  He was just informing me about renewals and never attempted to 
get me to renew thru him but rather with my vendor and had the names of the 
previous vendors.



From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Wednesday, March 28, 2012 8:01 AM
To: NT System Admin Issues
Subject: Re: Sophisticated Phising attempt?

[2] The poorly named FAQ IS about the only poorly phrased or worded item in the 
email.
On Wed, Mar 28, 2012 at 8:45 AM, Jonathan Link 
mailto:jonathan.l...@gmail.com>> wrote:
I received an email purportedly to be from Microsoft about a Software Asset 
Management (SAM) license review (headers looked like it came from MS, but I'm 
not an expert).  They indicated that they were trying to contact me this week 
(it was sent on Tuesday, and the only prior contact was a misdirected phone 
call into one of our director's voicemail[1]).

It includes 2 PDFs, one appears to be a report with our name on it, VLPS 
Report, and it appears to have some correct information as to the customerID.  
There's a deployment summary spreadsheet and a USA FAQ 2012.pdf.  Included in 
the email are some instructions, a suggestion to use the Microsoft Assessment 
and Planning Toolkit to help complete the tasks.  It includes an email address 
for msft...@microsoft.com or to contact another 
person at Microsoft.

The person's display name for contacting me is foreign and has (Accenture) in 
parentheses.  It comes from a microsoft.com email 
address, however a reply back to that address generated an access denied NDR, 
but a reply to the other individual did not.  I haven't received an email (I 
also forwareded the email to the other address) in response, and I would have 
expected a faster turnaround.  The email address did contain a phone number, 
however that phone number, according to 800 notes, has been used in several 
scams in the past, trying to trick people into giving bank account information 
to receive a government grant.  A physical address is given, but it is the 
address to the Microsoft campus in Redmond.

So, I cautiously viewed the documents on my iPhone.  One document, our apparent 
licensing report appears entirely legitimate.  I have had a weak password on 
the eopen site for a while, just hadn't bothered changing it.  Second PDF (USA 
FAQ 2012[2]) is not viewable on my iPhone, it just displays whitespace, as does 
the excel file.  I'm going to take them to a sandboxed computer to view them 
later.  They also want information returned by April 16th.

My other concern is some limited googling has suggested that this might be 
legitimate, that Microsoft has engaged in third parties to do this, and that 
there are variations of this process, but those could be cleverly built forums 
with shills indicating the process is legit, so I turn to this list for advice. 
 In the body of the email there aren't any instructions on where to send the 
information.  If the sender can only send email, having another address to 
receive this information seems to be necessary.


[1] The voicemail was extremely static laden and had several gaps in it.
[2] That's a poorly named FAQ and about the only poorly phrased or worded item 
in the email.




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Sophisticated Phising attempt?

2012-03-28 Thread Jonathan Link 
[2] The poorly named FAQ IS about the only poorly phrased or worded item in
the email.

On Wed, Mar 28, 2012 at 8:45 AM, Jonathan Link wrote:

> I received an email purportedly to be from Microsoft about a Software
> Asset Management (SAM) license review (headers looked like it came from MS,
> but I'm not an expert).  They indicated that they were trying to contact me
> this week (it was sent on Tuesday, and the *only* prior contact was a
> misdirected phone call into one of our director's voicemail[1]).
>
> It includes 2 PDFs, one appears to be a report with our name on it, VLPS
> Report, and it appears to have some correct information as to the
> customerID.  There's a deployment summary spreadsheet and a USA FAQ
> 2012.pdf.  Included in the email are some instructions, a suggestion to use
> the Microsoft Assessment and Planning Toolkit to help complete the tasks.
> It includes an email address for msft...@microsoft.com or to contact
> another person at Microsoft.
>
> The person's display name for contacting me is foreign and has (Accenture)
> in parentheses.  It comes from a microsoft.com email address, however a
> reply back to that address generated an access denied NDR, but a reply to
> the other individual did not.  I haven't received an email (I also
> forwareded the email to the other address) in response, and I would have
> expected a faster turnaround.  The email address did contain a phone
> number, however that phone number, according to 800 notes, has been used in
> several scams in the past, trying to trick people into giving bank account
> information to receive a government grant.  A physical address is given,
> but it is the address to the Microsoft campus in Redmond.
>
> So, I cautiously viewed the documents on my iPhone.  One document, our
> apparent licensing report appears entirely legitimate.  I have had a weak
> password on the eopen site for a while, just hadn't bothered changing it.
> Second PDF (USA FAQ 2012[2]) is not viewable on my iPhone, it just displays
> whitespace, as does the excel file.  I'm going to take them to a sandboxed
> computer to view them later.  They also want information returned by April
> 16th.
>
> My other concern is some limited googling has suggested that this might be
> legitimate, that Microsoft has engaged in third parties to do this, and
> that there are variations of this process, but those could be cleverly
> built forums with shills indicating the process is legit, so I turn to this
> list for advice.  In the body of the email there aren't any instructions on
> where to send the information.  If the sender can only send email, having
> another address to receive this information seems to be necessary.
>
>
> [1] The voicemail was extremely static laden and had several gaps in it.
> [2] That's a poorly named FAQ and about the only poorly phrased or worded
> item in the email.
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin