RE: A moment of silence for the passing of another giant

2012-04-12 Thread Nigel Parker
I guess its time to plug my website then 

http://www.commodorefree.com/

 

I still use Commodore vic20/c64 and commodore 128 along with an amiga
600 1200 and 400/040

Software did appear that allowed MSdos applications to run on the Amiga
without a board needing to be added 

Although I think from memory it took around 2 hours for me to install
MSdos on my Amiga under software emulation 

 

Commodore were way ahead of things 

Thanks to Jack this is why my hobby turned into a job 

 

Computers for the masses not the classes

 

Although if you read the magazine you will realise I still cant spell
(spent to much time on the c64 instead of school I guess)

 

Nigel Parker

Systems Engineer

Ultraframe (UK) Ltd

Tel:   01200 452329

Fax:   01200 452201

Web:   www.ultraframe.com  

Email: mailto:nigel.par...@ultraframe.co.uk
 

 

 

 

 

From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: 11 April 2012 20:20
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

didn't know about the 4mhz boost, but I did have a 256K RAM expander for
running GEOS :)

On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare
 wrote:

I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the
Berkely Softworks 512K RAM expansion unit to run GEOS. 

 

Was big pimpin' for the 8bit days.

 

-sc

 

From: James Hill [mailto:falc...@gmail.com] 
Sent: Tuesday, April 10, 2012 5:46 PM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

 

I sold my C64 so I could use the cash towards buying my Amiga.  I loved
that Amiga.

 

From: Guyer, Donald [mailto:dgu...@che.org] 
Sent: Wednesday, 11 April 2012 4:11 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

 

LOL

 

I sold my C64 years ago to a guy who had plans to make it into a HAM
radio of some sort.

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 2:00 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Even nostalgia has limits...

On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald  wrote:

Makes me want to start loading a game, using the cassette player

 

Go eat dinner

 

Then, go back and still have to wait for it to finish loading..

 

J

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played
Ultima).

 

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
wrote:

Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:

:(
 Vic-20 and C=64 were my first two personal computers

On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff mailto:kurt.b...@gmail.com>> wrote:

   Commodore founder Jack Tramiel dead at 83
 
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tr
amiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to listmana...@lyris.sunbeltsoftware.com

   


   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to listmana...@lyris.sunbeltsoftware.com



with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice:
This e-mail, including any at

R: A moment of silence for the passing of another giant

2012-04-12 Thread HELP_PC
And if Jack's partners had listened to him all the computer world could be now 
based on Amiga (neither PC Ibm nor Mac)

Guido Elia
HELPPC - HELPPC SERVICE

Da: Nigel Parker [mailto:nigel.par...@ultraframe.co.uk]
Inviato: giovedì 12 aprile 2012 12.00
A: NT System Admin Issues
Oggetto: RE: A moment of silence for the passing of another giant

I guess its time to plug my website then
http://www.commodorefree.com/

I still use Commodore vic20/c64 and commodore 128 along with an amiga 600 1200 
and 400/040
Software did appear that allowed MSdos applications to run on the Amiga without 
a board needing to be added
Although I think from memory it took around 2 hours for me to install MSdos on 
my Amiga under software emulation

Commodore were way ahead of things
Thanks to Jack this is why my hobby turned into a job

Computers for the masses not the classes

Although if you read the magazine you will realise I still cant spell (spent to 
much time on the c64 instead of school I guess)

Nigel Parker
Systems Engineer
Ultraframe (UK) Ltd
Tel:   01200 452329
Fax:   01200 452201
Web:   www.ultraframe.com
Email: mailto:nigel.par...@ultraframe.co.uk




From: Erik Goldoff [mailto:egold...@gmail.com]
Sent: 11 April 2012 20:20
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

didn't know about the 4mhz boost, but I did have a 256K RAM expander for 
running GEOS :)
On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare 
mailto:scaes...@caesare.com>> wrote:
I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine 
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the Berkely 
Softworks 512K RAM expansion unit to run GEOS.

Was big pimpin' for the 8bit days.

-sc

From: James Hill [mailto:falc...@gmail.com]
Sent: Tuesday, April 10, 2012 5:46 PM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

I sold my C64 so I could use the cash towards buying my Amiga.  I loved that 
Amiga.

From: Guyer, Donald [mailto:dgu...@che.org]
Sent: Wednesday, 11 April 2012 4:11 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

LOL

I sold my C64 years ago to a guy who had plans to make it into a HAM radio of 
some sort.

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 2:00 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Even nostalgia has limits...
On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald 
mailto:dgu...@che.org>> wrote:
Makes me want to start loading a game, using the cassette player

Go eat dinner

Then, go back and still have to wait for it to finish loading..

:)

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played Ultima).

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
mailto:nt...@hedgedigger.com>> wrote:
Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:
:(
 Vic-20 and C=64 were my first two personal computers
On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff 
mailto:kurt.b...@gmail.com> 
>> wrote:

   Commodore founder Jack Tramiel dead at 83
   
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tramiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to 
listmana...@lyris.sunbeltsoftware.com
   
>

   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
 
>

with the body: unsubscribe ntsysadm

Re: A moment of silence for the passing of another giant

2012-04-12 Thread Andrew S. Baker
GEOS -- pure, assembler awesomeness.  Sigh.

* *

*ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of
Technology for the SMB market…

*



On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare wrote:

> I bought the “Schnedler Systems” 4Mhz turbo accelerator for mine (
> http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the
> Berkely Softworks 512K RAM expansion unit to run GEOS. 
>
> ** **
>
> Was big pimpin’ for the 8bit days.
>
> ** **
>
> -sc
>
> ** **
>
> *From:* James Hill [mailto:falc...@gmail.com]
> *Sent:* Tuesday, April 10, 2012 5:46 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: A moment of silence for the passing of another giant
>
> ** **
>
> I sold my C64 so I could use the cash towards buying my Amiga.  I loved
> that Amiga.
>
> ** **
>
> *From:* Guyer, Donald [mailto:dgu...@che.org]
> *Sent:* Wednesday, 11 April 2012 4:11 AM
> *To:* NT System Admin Issues
> *Subject:* RE: A moment of silence for the passing of another giant
>
> ** **
>
> LOL
>
> ** **
>
> I sold my C64 years ago to a guy who had plans to make it into a HAM radio
> of some sort.
>
> ** **
>
> Regards,
>
> ** **
>
> Don Guyer
>
> Directory and Messaging Services
> Catholic Health East, ITSS
>
> ** **
>
> *From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
> *Sent:* Tuesday, April 10, 2012 2:00 PM
>
> *To:* NT System Admin Issues
> *Subject:* Re: A moment of silence for the passing of another giant
>
> ** **
>
> Even nostalgia has limits...
>
> On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald  wrote:
>
> Makes me want to start loading a game, using the cassette player….
>
>  
>
> Go eat dinner….
>
>  
>
> Then, go back and still have to wait for it to finish loading……….
>
>  
>
> J
>
>  
>
> Regards,
>
>  
>
> Don Guyer
>
> Directory and Messaging Services
> Catholic Health East, ITSS
>
>  
>
> *From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
> *Sent:* Tuesday, April 10, 2012 1:39 PM
> *To:* NT System Admin Issues
> *Subject:* Re: A moment of silence for the passing of another giant
>
>  
>
> Makes me want to go play Bard's Tale I-III or Ultima II-V (never played
> Ultima).
>
>  
>
> On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
> wrote:
>
> Mine too.  I have my Vic-20 and C=64 in the attic.
>
>
>
> Erik Goldoff wrote:
>
> :(
>  Vic-20 and C=64 were my first two personal computers
>
> On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff  kurt.b...@gmail.com>> wrote:
>
>Commodore founder Jack Tramiel dead at 83
>
> http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tramiel_dead_at_83
>
>Pet
>Vic20
>C64
>C128
>Amiga
>
>
>Landmarks, each of them, and though he didn't have a hand in all of
>them, he pushed the personal computer industry forward in a big way.
>
>
>Kurt
>
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here:
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>
>
>
>
>with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
>
> or send an email to listmana...@lyris.sunbeltsoftware.com  listmana...@lyris.sunbeltsoftware.com>
>
>
> with the body: unsubscribe ntsysadmin
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>  
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> Confidentiality Notice:
> This e-mail, including any attachments is the
> property of Catholic Health East and is intended
> for the sole use of the intended recipient(s).
> It may contain information that is privileged and
> confidential.  Any unauthorized review, use,
> disclosure, or distribution is prohibited. If you are
> not the intended recipient, please delete this message, and
> reply to the sender regarding the error in a separate email. 
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ 

PC power management

2012-04-12 Thread Tom Miller
Are any of you using power management products?  These would be products that 
remotely power on/off, enable monitor shutdown, and such.  Our KBox can take 
advantage of WOL, but I've found in testing that it's not always reliable with 
IP changes from DHCP.
 
We tested a few products and I like one called Greentrac.  This uses an agent 
and has been very reliable in testing the hosted version. Unfortunately, they 
run on Ubuntu and XenServer does not officially support that, and I'm not 
inclined to purchase VMWare for a single installation.   There is no other 
installation option.
 
Suggestions anyone?  I'm looking for products that shut down PCs after 
inactivity, starting at a certain time of the day, can put the monitor to 
sleep, can power on PC and power off.  
 
Recommendations appreciated.
 
Thanks
Tom

Confidentiality Notice:  This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure, or 
distribution is prohibited.  If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: A moment of silence for the passing of another giant

2012-04-12 Thread Jeff Frantz
Yes, GEOS was pretty damned amazing.  One can only imagine computing power 
today if software were so efficient.

I recall saving money as a kid ('80 or '81) to buy the 16K expansion for my 
VIC.  PaperMate (word processor for the PET) didn't allow for much text in 3K.  
It was $116.  Good times!

I still remember reading the COMPUTE! article from the CES where they described 
the Amiga Loraine with 4,096 colors.  If I recall correctly, they added 
something like, "no, that was not a misprint" because no one would have 
believed such a crazy number of colors.   I must have read that article a 
hundred times dreaming of such a machine.

-Jeff

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Thursday, April 12, 2012 7:27 AM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

GEOS -- pure, assembler awesomeness.  Sigh.
ASB

http://XeeMe.com/AndrewBaker

Harnessing the Advantages of Technology for the SMB market...



On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare 
mailto:scaes...@caesare.com>> wrote:
I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine 
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the Berkely 
Softworks 512K RAM expansion unit to run GEOS.

Was big pimpin' for the 8bit days.

-sc

From: James Hill [mailto:falc...@gmail.com]
Sent: Tuesday, April 10, 2012 5:46 PM

To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

I sold my C64 so I could use the cash towards buying my Amiga.  I loved that 
Amiga.

From: Guyer, Donald [mailto:dgu...@che.org]
Sent: Wednesday, 11 April 2012 4:11 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

LOL

I sold my C64 years ago to a guy who had plans to make it into a HAM radio of 
some sort.

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 2:00 PM

To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Even nostalgia has limits...
On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald 
mailto:dgu...@che.org>> wrote:
Makes me want to start loading a game, using the cassette player

Go eat dinner

Then, go back and still have to wait for it to finish loading..

:)

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played Ultima).

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
mailto:nt...@hedgedigger.com>> wrote:
Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:
:(
 Vic-20 and C=64 were my first two personal computers
On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff 
mailto:kurt.b...@gmail.com> 
>> wrote:

   Commodore founder Jack Tramiel dead at 83
   
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tramiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to 
listmana...@lyris.sunbeltsoftware.com
   
>

   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
 
>

with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~  

R: A moment of silence for the passing of another giant

2012-04-12 Thread HELP_PC
And I had a customer managing his warehouse with C64 an Superbase !

Guido Elia
HELPPC - HELPPC SERVICE

Da: Jeff Frantz [mailto:jfra...@itstechnologies.com]
Inviato: giovedì 12 aprile 2012 14.01
A: NT System Admin Issues
Oggetto: RE: A moment of silence for the passing of another giant

Yes, GEOS was pretty damned amazing.  One can only imagine computing power 
today if software were so efficient.

I recall saving money as a kid ('80 or '81) to buy the 16K expansion for my 
VIC.  PaperMate (word processor for the PET) didn't allow for much text in 3K.  
It was $116.  Good times!

I still remember reading the COMPUTE! article from the CES where they described 
the Amiga Loraine with 4,096 colors.  If I recall correctly, they added 
something like, "no, that was not a misprint" because no one would have 
believed such a crazy number of colors.   I must have read that article a 
hundred times dreaming of such a machine.

-Jeff

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Thursday, April 12, 2012 7:27 AM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

GEOS -- pure, assembler awesomeness.  Sigh.
ASB

http://XeeMe.com/AndrewBaker

Harnessing the Advantages of Technology for the SMB market...


On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare 
mailto:scaes...@caesare.com>> wrote:
I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine 
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the Berkely 
Softworks 512K RAM expansion unit to run GEOS.

Was big pimpin' for the 8bit days.

-sc

From: James Hill [mailto:falc...@gmail.com]
Sent: Tuesday, April 10, 2012 5:46 PM

To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

I sold my C64 so I could use the cash towards buying my Amiga.  I loved that 
Amiga.

From: Guyer, Donald [mailto:dgu...@che.org]
Sent: Wednesday, 11 April 2012 4:11 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

LOL

I sold my C64 years ago to a guy who had plans to make it into a HAM radio of 
some sort.

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 2:00 PM

To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Even nostalgia has limits...
On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald 
mailto:dgu...@che.org>> wrote:
Makes me want to start loading a game, using the cassette player

Go eat dinner

Then, go back and still have to wait for it to finish loading..

:)

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played Ultima).

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
mailto:nt...@hedgedigger.com>> wrote:
Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:
:(
 Vic-20 and C=64 were my first two personal computers
On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff 
mailto:kurt.b...@gmail.com> 
>> wrote:

   Commodore founder Jack Tramiel dead at 83
   
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tramiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to 
listmana...@lyris.sunbeltsoftware.com
   
>

   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
 
>

with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click her

RE: A moment of silence for the passing of another giant

2012-04-12 Thread Steven M. Caesare
Indeed.[1]

 

An interesting factoid is that GEOS actually started out as an embedded
OS targeted for an airline passenger "seatback console" that was based
on the 6502 series chipset.

 

When that fell through, Berkeley Softworks finally ended up re-purposing
their kernel by adding all of the necessary doodads to make it a
general-purpose OS and releasing it for the C=64.

In addition to the GeoProgrammer reference Guide, did anybody ever get
the "Hitchhikers Guide to GEOS"? It was the internal Berkeley Softworks
documentation on the kernel routines that eventually got published. It's
got hand written notes and corrections that would eventually have been
prettied up for publication... but the product never made it that far...

 

I have it as a PDF around somewhere...

 

-sc

 

[1] ((c)ASB).

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, April 12, 2012 7:27 AM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

GEOS -- pure, assembler awesomeness.  Sigh.


ASB

http://XeeMe.com/AndrewBaker

Harnessing the Advantages of Technology for the SMB market...





On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare
 wrote:

I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the
Berkely Softworks 512K RAM expansion unit to run GEOS. 

 

Was big pimpin' for the 8bit days.

 

-sc

 

From: James Hill [mailto:falc...@gmail.com] 
Sent: Tuesday, April 10, 2012 5:46 PM


To: NT System Admin Issues

Subject: RE: A moment of silence for the passing of another giant

 

I sold my C64 so I could use the cash towards buying my Amiga.  I loved
that Amiga.

 

From: Guyer, Donald [mailto:dgu...@che.org] 

Sent: Wednesday, 11 April 2012 4:11 AM

To: NT System Admin Issues

Subject: RE: A moment of silence for the passing of another giant

 

LOL

 

I sold my C64 years ago to a guy who had plans to make it into a HAM
radio of some sort.

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 2:00 PM


To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Even nostalgia has limits...

On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald  wrote:

Makes me want to start loading a game, using the cassette player

 

Go eat dinner

 

Then, go back and still have to wait for it to finish loading..

 

:-)

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played
Ultima).

 

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
wrote:

Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:

:(
 Vic-20 and C=64 were my first two personal computers

On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff mailto:kurt.b...@gmail.com>> wrote:

   Commodore founder Jack Tramiel dead at 83
 
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tr
amiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to listmana...@lyris.sunbeltsoftware.com

   


   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to listmana...@lyris.sunbeltsoftware.com



with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Confidentiality Notice:
This e-mail, including any attachments is the 
prope

RE: A moment of silence for the passing of another giant

2012-04-12 Thread Steven M. Caesare
Another  cool word processor was "PaperClip" for the C=64.

 

Even though the text screen on the  64 was only 40 characters wide,
Paperclip had a preview mode where you could see what a full 80-char
wide page layout would look like buy displaying a width-scaled WYSIWYG
representation on its 320x200 screen, including text effects like bold
and underlining.

 

Many a homework assignment was written on that thing.

 

-sc

 

From: Jeff Frantz [mailto:jfra...@itstechnologies.com] 
Sent: Thursday, April 12, 2012 8:01 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

 

Yes, GEOS was pretty damned amazing.  One can only imagine computing
power today if software were so efficient.

 

I recall saving money as a kid ('80 or '81) to buy the 16K expansion for
my VIC.  PaperMate (word processor for the PET) didn't allow for much
text in 3K.  It was $116.  Good times!

 

I still remember reading the COMPUTE! article from the CES where they
described the Amiga Loraine with 4,096 colors.  If I recall correctly,
they added something like, "no, that was not a misprint" because no one
would have believed such a crazy number of colors.   I must have read
that article a hundred times dreaming of such a machine.

 

-Jeff

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, April 12, 2012 7:27 AM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

GEOS -- pure, assembler awesomeness.  Sigh.


ASB

http://XeeMe.com/AndrewBaker

Harnessing the Advantages of Technology for the SMB market...

 

On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare
 wrote:

I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the
Berkely Softworks 512K RAM expansion unit to run GEOS. 

 

Was big pimpin' for the 8bit days.

 

-sc

 

From: James Hill [mailto:falc...@gmail.com] 
Sent: Tuesday, April 10, 2012 5:46 PM


To: NT System Admin Issues

Subject: RE: A moment of silence for the passing of another giant

 

I sold my C64 so I could use the cash towards buying my Amiga.  I loved
that Amiga.

 

From: Guyer, Donald [mailto:dgu...@che.org] 

Sent: Wednesday, 11 April 2012 4:11 AM

To: NT System Admin Issues

Subject: RE: A moment of silence for the passing of another giant

 

LOL

 

I sold my C64 years ago to a guy who had plans to make it into a HAM
radio of some sort.

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 2:00 PM


To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Even nostalgia has limits...

On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald  wrote:

Makes me want to start loading a game, using the cassette player

 

Go eat dinner

 

Then, go back and still have to wait for it to finish loading..

 

:-)

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played
Ultima).

 

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
wrote:

Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:

:(
 Vic-20 and C=64 were my first two personal computers

On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff mailto:kurt.b...@gmail.com>> wrote:

   Commodore founder Jack Tramiel dead at 83
 
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tr
amiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to listmana...@lyris.sunbeltsoftware.com

   


   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to listmana...@lyris.sunbeltsoftware.com



with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@

RE: A moment of silence for the passing of another giant

2012-04-12 Thread Steven M. Caesare
Heh... very cool. Don't do anything with the 64 now, but cool retro walk
down memory lane.. .thanks.

 

-sc

 

From: Nigel Parker [mailto:nigel.par...@ultraframe.co.uk] 
Sent: Thursday, April 12, 2012 6:00 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

 

I guess its time to plug my website then 

http://www.commodorefree.com/

 

I still use Commodore vic20/c64 and commodore 128 along with an amiga
600 1200 and 400/040

Software did appear that allowed MSdos applications to run on the Amiga
without a board needing to be added 

Although I think from memory it took around 2 hours for me to install
MSdos on my Amiga under software emulation 

 

Commodore were way ahead of things 

Thanks to Jack this is why my hobby turned into a job 

 

Computers for the masses not the classes

 

Although if you read the magazine you will realise I still cant spell
(spent to much time on the c64 instead of school I guess)

 

Nigel Parker

Systems Engineer

Ultraframe (UK) Ltd

Tel:   01200 452329

Fax:   01200 452201

Web:   www.ultraframe.com

Email: mailto:nigel.par...@ultraframe.co.uk

 

 

 

 

From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: 11 April 2012 20:20
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

didn't know about the 4mhz boost, but I did have a 256K RAM expander for
running GEOS :)

On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare
 wrote:

I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the
Berkely Softworks 512K RAM expansion unit to run GEOS. 

 

Was big pimpin' for the 8bit days.

 

-sc

 

From: James Hill [mailto:falc...@gmail.com] 
Sent: Tuesday, April 10, 2012 5:46 PM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

 

I sold my C64 so I could use the cash towards buying my Amiga.  I loved
that Amiga.

 

From: Guyer, Donald [mailto:dgu...@che.org] 
Sent: Wednesday, 11 April 2012 4:11 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

 

LOL

 

I sold my C64 years ago to a guy who had plans to make it into a HAM
radio of some sort.

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 2:00 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Even nostalgia has limits...

On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald  wrote:

Makes me want to start loading a game, using the cassette player

 

Go eat dinner

 

Then, go back and still have to wait for it to finish loading..

 

:-)

 

Regards,

 

Don Guyer

Directory and Messaging Services
Catholic Health East, ITSS

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

 

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played
Ultima).

 

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
wrote:

Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:

:(
 Vic-20 and C=64 were my first two personal computers

On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff mailto:kurt.b...@gmail.com>> wrote:

   Commodore founder Jack Tramiel dead at 83
 
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tr
amiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to listmana...@lyris.sunbeltsoftware.com

   


   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to listmana...@lyris.sunbeltsoftware.com



with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: A moment of silence for the passing of another giant

2012-04-12 Thread Ben Scott
On Thu, Apr 12, 2012 at 8:00 AM, Jeff Frantz
 wrote:
> Yes, GEOS was pretty damned amazing.  One can only imagine computing power
> today if software were so efficient.

  GEOS even made it to IBM-PC land.  I ran PC/GEOS for years.  GUI,
multi-tasking, multi-threading, long file names, continuous session
state preservation, object-oriented... on top of MS-DOS 3.3 on an 8088
with 640 KB of RAM.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: A moment of silence for the passing of another giant

2012-04-12 Thread Maglinger, Paul
We had a hardware store here that ran their business on a C-64 for a lng 
time.

From: HELP_PC [mailto:g...@enter.it]
Sent: Thursday, April 12, 2012 7:10 AM
To: NT System Admin Issues
Subject: R: A moment of silence for the passing of another giant

And I had a customer managing his warehouse with C64 an Superbase !

Guido Elia
HELPPC - HELPPC SERVICE

Da: Jeff Frantz 
[mailto:jfra...@itstechnologies.com]
Inviato: giovedì 12 aprile 2012 14.01
A: NT System Admin Issues
Oggetto: RE: A moment of silence for the passing of another giant

Yes, GEOS was pretty damned amazing.  One can only imagine computing power 
today if software were so efficient.

I recall saving money as a kid ('80 or '81) to buy the 16K expansion for my 
VIC.  PaperMate (word processor for the PET) didn't allow for much text in 3K.  
It was $116.  Good times!

I still remember reading the COMPUTE! article from the CES where they described 
the Amiga Loraine with 4,096 colors.  If I recall correctly, they added 
something like, "no, that was not a misprint" because no one would have 
believed such a crazy number of colors.   I must have read that article a 
hundred times dreaming of such a machine.

-Jeff

From: Andrew S. Baker 
[mailto:asbz...@gmail.com]
Sent: Thursday, April 12, 2012 7:27 AM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

GEOS -- pure, assembler awesomeness.  Sigh.
ASB

http://XeeMe.com/AndrewBaker

Harnessing the Advantages of Technology for the SMB market...


On Wed, Apr 11, 2012 at 2:55 PM, Steven M. Caesare 
mailto:scaes...@caesare.com>> wrote:
I bought the "Schnedler Systems" 4Mhz turbo accelerator for mine 
(http://vintagetech.netii.net/DRIVERS/TURBO-MASTER-CPU.jpg) and the Berkely 
Softworks 512K RAM expansion unit to run GEOS.

Was big pimpin' for the 8bit days.

-sc

From: James Hill [mailto:falc...@gmail.com]
Sent: Tuesday, April 10, 2012 5:46 PM

To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

I sold my C64 so I could use the cash towards buying my Amiga.  I loved that 
Amiga.

From: Guyer, Donald [mailto:dgu...@che.org]
Sent: Wednesday, 11 April 2012 4:11 AM
To: NT System Admin Issues
Subject: RE: A moment of silence for the passing of another giant

LOL

I sold my C64 years ago to a guy who had plans to make it into a HAM radio of 
some sort.

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 2:00 PM

To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Even nostalgia has limits...
On Tue, Apr 10, 2012 at 1:58 PM, Guyer, Donald 
mailto:dgu...@che.org>> wrote:
Makes me want to start loading a game, using the cassette player

Go eat dinner

Then, go back and still have to wait for it to finish loading..

:)

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Tuesday, April 10, 2012 1:39 PM
To: NT System Admin Issues
Subject: Re: A moment of silence for the passing of another giant

Makes me want to go play Bard's Tale I-III or Ultima II-V (never played Ultima).

On Tue, Apr 10, 2012 at 1:24 PM, Bill Humphries 
mailto:nt...@hedgedigger.com>> wrote:
Mine too.  I have my Vic-20 and C=64 in the attic.



Erik Goldoff wrote:
:(
 Vic-20 and C=64 were my first two personal computers
On Tue, Apr 10, 2012 at 12:14 PM, Kurt Buff 
mailto:kurt.b...@gmail.com> 
>> wrote:

   Commodore founder Jack Tramiel dead at 83
   
http://www.computerworld.com/s/article/9225995/Commodore_founder_Jack_Tramiel_dead_at_83

   Pet
   Vic20
   C64
   C128
   Amiga


   Landmarks, each of them, and though he didn't have a hand in all of
   them, he pushed the personal computer industry forward in a big way.


   Kurt

   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
   ~   ~

   ---
   To manage subscriptions click here:
   http://lyris.sunbelt-software.com/read/my_forums/
   or send an email to 
listmana...@lyris.sunbeltsoftware.com
   
>

   with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com

RE: Perfmon data Difference in blg & csv format

2012-04-12 Thread Haritwal, Dhiraj
Can anyone suggest on this? Appreciate your valuable comments.

 

Regards,

Dhiraj

 

 

 

From: Haritwal, Dhiraj [mailto:dhiraj.harit...@ap.sony.com] 
Sent: Monday, April 09, 2012 19:25
To: NT System Admin Issues
Subject: Perfmon data Difference in blg & csv format

 

Hi,

 

I have captured 1 week "%processor Time" for a Windows server 2008. now
in Graph it's showing max as 60% but when I convert .blg file into .csv
with Relog, showing max as 92%. Which one is correct? why 92% max not
showing in graph? it was using default threashold 15 sec.

 

 

Regards,

 

Dhiraj

 



---
This email is confidential and intended only for the use of the individual or 
entity named above and may contain information that is privileged. If you are 
not the intended recipient, you are notified that any dissemination, 
distribution or copying of this email is strictly prohibited. If you have 
received this email in error, please notify us immediately by return email or 
telephone and destroy the original message. - This mail is sent via Sony Asia 
Pacific Mail Gateway.
---

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC power management

2012-04-12 Thread Michael B. Smith
System Center 2012 Configuration Manager.
From: Tom Miller [mailto:tmil...@hnncsb.org]
Sent: Thursday, April 12, 2012 7:41 AM
To: NT System Admin Issues
Subject: PC power management

Are any of you using power management products?  These would be products that 
remotely power on/off, enable monitor shutdown, and such.  Our KBox can take 
advantage of WOL, but I've found in testing that it's not always reliable with 
IP changes from DHCP.

We tested a few products and I like one called Greentrac.  This uses an agent 
and has been very reliable in testing the hosted version. Unfortunately, they 
run on Ubuntu and XenServer does not officially support that, and I'm not 
inclined to purchase VMWare for a single installation.   There is no other 
installation option.

Suggestions anyone?  I'm looking for products that shut down PCs after 
inactivity, starting at a certain time of the day, can put the monitor to 
sleep, can power on PC and power off.

Recommendations appreciated.

Thanks
Tom


Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Perfmon data Difference in blg & csv format

2012-04-12 Thread Michael B. Smith
The issue is one of scale. Perfmon (the graph on your PC window) can't display 
the entirety of the data (that is, if you have 20,000 data points, it doesn't 
build a graph with all of those data points and then shrink the graph). Instead 
perfmon looks at how many pixels it has to display a graph, calculates how many 
data points that is, and picks that many data points. On average, in general, 
that works out OK.

If you have significant outliers - which is the case in your case example - it 
doesn't work out OK. The CSV is accurate.

...If you have follow-on questions, please post them on this mailing list so 
that others can benefit from the discussion.

From: Haritwal, Dhiraj [mailto:dhiraj.harit...@ap.sony.com]
Sent: Thursday, April 12, 2012 9:24 AM
To: NT System Admin Issues
Subject: RE: Perfmon data Difference in blg & csv format

Can anyone suggest on this? Appreciate your valuable comments.

Regards,
Dhiraj



From: Haritwal, Dhiraj 
[mailto:dhiraj.harit...@ap.sony.com]
Sent: Monday, April 09, 2012 19:25
To: NT System Admin Issues
Subject: Perfmon data Difference in blg & csv format

Hi,

I have captured 1 week "%processor Time" for a Windows server 2008. now in 
Graph it's showing max as 60% but when I convert .blg file into .csv with 
Relog, showing max as 92%. Which one is correct? why 92% max not showing in 
graph? it was using default threashold 15 sec.


Regards,

Dhiraj

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: A moment of silence for the passing of another giant

2012-04-12 Thread Steven M. Caesare
Yup.

They had Apple ][ versions as well.

-sc

> -Original Message-
> From: Ben Scott [mailto:mailvor...@gmail.com]
> Sent: Thursday, April 12, 2012 9:09 AM
> To: NT System Admin Issues
> Subject: Re: A moment of silence for the passing of another giant
> 
> On Thu, Apr 12, 2012 at 8:00 AM, Jeff Frantz 
> wrote:
> > Yes, GEOS was pretty damned amazing.  One can only imagine computing
> > power today if software were so efficient.
> 
>   GEOS even made it to IBM-PC land.  I ran PC/GEOS for years.  GUI, multi-
> tasking, multi-threading, long file names, continuous session state
> preservation, object-oriented... on top of MS-DOS 3.3 on an 8088 with 640 KB
> of RAM.
> 
> -- Ben
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Deploy MSI via SMS

2012-04-12 Thread Bob Fronk
PDQ Deploy works for some things that are difficult via GPO or when you want to 
just hit a few machines that are in different OUs or maybe just a single 
machine.  The price is right to try it.

BF

From: David Lum [mailto:david@nwea.org]
Sent: Wednesday, April 11, 2012 3:25 PM
To: NT System Admin Issues
Subject: Deploy MSI via SMS

Should be easy right? When I run the MSI directly, is asks for two questions: 
Accept the agreement, and user name/organization. How can I package it so 
running the MSI accepts defaults? Do I need to use something like ORCA (an MSI 
tool), or are there switches I'm too dumb to figure out they infer "use 
defaults"?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Deploy MSI via SMS

2012-04-12 Thread David Lum
Thanks everyone for your answers! I'll let you know what I end up with on this 
one (you know, for the community good)

Dave

From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Wednesday, April 11, 2012 5:16 PM
To: NT System Admin Issues
Subject: RE: Deploy MSI via SMS

Depends on which software it is, but there should be options (command line) to 
suppress those notifications.

From: David Lum [mailto:david@nwea.org]
Sent: Wednesday, April 11, 2012 12:25 PM
To: NT System Admin Issues
Subject: Deploy MSI via SMS

Should be easy right? When I run the MSI directly, is asks for two questions: 
Accept the agreement, and user name/organization. How can I package it so 
running the MSI accepts defaults? Do I need to use something like ORCA (an MSI 
tool), or are there switches I'm too dumb to figure out they infer "use 
defaults"?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: GPO Reporting

2012-04-12 Thread Christopher Bodnar
http://www.sdmsoftware.com/products/group-policy-reporting-pak/



Christopher Bodnar 
Enterprise Achitect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com 







From:   James Kerr 
To: "NT System Admin Issues" 
Date:   04/12/2012 10:08 AM
Subject:GPO Reporting



Heh guys,

I'm looking for a way to have some kind of report that would look into 
specified GPOs and list the settings they have. Specifically, I'm trying 
to look at a list of GPOs and determine what drive maps they have. Thanks 
for any assistance.

James
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

Re: GPO Reporting

2012-04-12 Thread James Rankin
Right-click the GPO, choose Save Report?

On 12 April 2012 15:00, James Kerr  wrote:

> Heh guys,
>
> I'm looking for a way to have some kind of report that would look into
> specified GPOs and list the settings they have. Specifically, I'm trying to
> look at a list of GPOs and determine what drive maps they have. Thanks for
> any assistance.
>
> James
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>



-- 
http://appsensebigot.blogspot.co.uk

IMPORTANT INFORMATION/DISCLAIMER

I certainly don't have time to monitor the content of e-mail sent and
received via this account for the purposes of ensuring compliance with
anyone's policies and procedures. I am pretty sure that somewhere in UK
legislation there is some politically-correct drivel that stipulates I must
never send or store e-mails or attachments that are obscene, indecent,
sexist, racist, defamatory, abusive, in breach of copyright, encrypted,
amusing, overly long, slightly opinionated, anonymous, likely to harm
animals or hurt the feelings of an as-yet-unspecified or as-yet-nonexistent
minority (such as extraterrestrial eggplants). Emails of this nature sent
in or out of this account may be intercepted and stopped by the system, but
it's a long shot. This being the UK, even if I was prosecuted for breach of
said email guidelines, I'd probably walk with a suspended sentence anyway,
but if I'd forgotten to pay my car insurance, I'd most certainly be hung,
drawn and quartered.

I am not responsible for any changes made to the message after it has been
sent, in more or less the same way that cyclozine manufacturers aren't
responsible for drug addicts mixing it with methadone and overdosing, so
I'm glad I cleared the confusion up there nice and early. Where opinions
are expressed, they are not necessarily mine. However, I don't make a habit
of expressing other people's opinions for them, so you shouldn't take that
statement as an indication that I am in the business of providing an
opinion-expressing service. In the event that I did, this discourse would
provide no guarantee that I would do it anyway, but I don't, so I won't.

This e-mail and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you are not the intended addressee, or the person responsible for
delivering it to them, aside from the fact that you've clearly got some
level of unauthorised access to their account or are at least engaged in
some sort of fraud, I'm obliged to tell you that may not copy, forward
disclose or otherwise use it or any part of it in any way. To do so may be
unlawful, and as you're already breaking the law, I am sure that bombshell
makes you quake in your boots and turn yourself over to law enforcement
immediately. If you receive this e-mail by mistake, please advise the
sender immediately. That would be me, and as I am clearly prone to sending
emails to completely the wrong person, I should instantly be stripped of my
status as a technical consultant and sent to do something more becoming of
my stupidity, such as appearing on Big Brother, the X Factor or "insert
country name here"'s Got Talent.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OTish VPN tunnel on the quick and cheap. SOLVED

2012-04-12 Thread Kennedy, Jim
So I sat down this morning and to my left was a pile of old lynsys home routers 
that my co-workers brought in as openWRT candidates. On my screen was Hamachi 
that looked interesting. But to my right was my sandbox Win7 machine and it hit 
me. Dude, just slam in another NIC, VPN it into our existing VPN setup and use 
ICS.  Took about 5 minutes to set up, another 15 to test and I sent it off to 
be installed.

Thank you everyone, there were some very good workable solutions.


From: Kennedy, Jim
Sent: Wednesday, April 11, 2012 3:27 PM
To: NT System Admin Issues
Subject: OTish VPN tunnel on the quick and cheap.

Need two simple cheap devices to fire up a point to point VPN tunnel. Cable 
modem at a small remote office back to a cable modem at the main office that we 
will tap into our primary network. Low traffic and very temporary. Suggestions?



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Free eBook: Introducing SQL Server 2012

2012-04-12 Thread Ben Scott
On Thu, Apr 12, 2012 at 9:42 AM, Michael B. Smith  wrote:
> I haven’t read this yet myself, I just downloaded it, but I thought it might
> have wide interest.
>
> http://blogs.msdn.com/b/microsoft_press/archive/2012/03/15/free-ebook-introducing-microsoft-sql-server-2012.aspx

  Oh.  That does look like it might be valuable.  We don't use MS-SQL
here (yet) but it could happen at any time.  Thanks, MBS!

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: PC power management

2012-04-12 Thread Free, Bob
Our desktop team settled on a product called Night Watchman. I believe it meets 
all your requirements. I know very little about it other than the fact there is 
a web page that I can power up my remote desktop from if I need it :)
From: Tom Miller [mailto:tmil...@hnncsb.org]
Sent: Thursday, April 12, 2012 4:41 AM
To: NT System Admin Issues
Subject: PC power management

Are any of you using power management products?  These would be products that 
remotely power on/off, enable monitor shutdown, and such.  Our KBox can take 
advantage of WOL, but I've found in testing that it's not always reliable with 
IP changes from DHCP.

We tested a few products and I like one called Greentrac.  This uses an agent 
and has been very reliable in testing the hosted version. Unfortunately, they 
run on Ubuntu and XenServer does not officially support that, and I'm not 
inclined to purchase VMWare for a single installation.   There is no other 
installation option.

Suggestions anyone?  I'm looking for products that shut down PCs after 
inactivity, starting at a certain time of the day, can put the monitor to 
sleep, can power on PC and power off.

Recommendations appreciated.

Thanks
Tom


Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Changing the IP of the only DC in the domain

2012-04-12 Thread Damien Solodow
Just make sure you update DNS with the new IP, and make sure that the DC is 
looking at either its new IP or localhost for DNS resolution.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE

From: Heaton, Joseph@DFG [mailto:jhea...@dfg.ca.gov]
Sent: Thursday, April 12, 2012 10:50 AM
To: NT System Admin Issues
Subject: Changing the IP of the only DC in the domain

I've set up a domain for a proof-of-concept.  I only built a single Win2k8R2 
DC.  I'm now being asked to change the IP subnet for the domain.  I've found 
lots of articles talking about how easy it is to change the IP of a DC, but is 
it the same if it is the only DC?

Thanks,

Joe Heaton

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Changing the IP of the only DC in the domain

2012-04-12 Thread Ben Scott
On Thu, Apr 12, 2012 at 10:49 AM, Heaton, Joseph@DFG  wrote:
> I’ve set up a domain for a proof-of-concept.  I only built a single Win2k8R2
> DC.  I’m now being asked to change the IP subnet for the domain.  I’ve found
> lots of articles talking about how easy it is to change the IP of a DC, but
> is it the same if it is the only DC?

  As far as Active Directory itself goes, that is fine.

  If your DNS is set-up for automatic updates, the A records will be
updated automatically.  If you're doing DNS manually, you'll need to
manually change the records.

  If that DC is acting as the sole DNS server for its clients (a
common scenario), you will need to adjust the clients to look to the
new IP address for their DNS servers.  If you're using DHCP, that's
easy.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: OTish VPN tunnel on the quick and cheap. SOLVED

2012-04-12 Thread Jonathan Link
10 connection limit still in Workstation OS's?  I have no idea if that's
still the case, but it could be a problem that rears its ugly head...

On Thu, Apr 12, 2012 at 10:36 AM, Kennedy, Jim  wrote:

>  So I sat down this morning and to my left was a pile of old lynsys home
> routers that my co-workers brought in as openWRT candidates. On my screen
> was Hamachi that looked interesting. But to my right was my sandbox Win7
> machine and it hit me. Dude, just slam in another NIC, VPN it into our
> existing VPN setup and use ICS.  Took about 5 minutes to set up, another 15
> to test and I sent it off to be installed.
>
> ** **
>
> Thank you everyone, there were some very good workable solutions.
>
> ** **
>
> ** **
>
> *From:* Kennedy, Jim
> *Sent:* Wednesday, April 11, 2012 3:27 PM
> *To:* NT System Admin Issues
> *Subject:* OTish VPN tunnel on the quick and cheap.
>
> ** **
>
> Need two simple cheap devices to fire up a point to point VPN tunnel.
> Cable modem at a small remote office back to a cable modem at the main
> office that we will tap into our primary network. Low traffic and very
> temporary. Suggestions?
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: GPO Reporting

2012-04-12 Thread Brian Desmond
Yep - call Darren @ sdmsoftware.com. He's got the tools to do this right.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Free, Bob [mailto:r...@pge.com]
Sent: Thursday, April 12, 2012 9:38 AM
To: NT System Admin Issues
Subject: RE: GPO Reporting

There are free scripts provided with GPMC that will pull reports on the cheap 
that you could massage. The one called getreportsforallgpos.wsf (from memory, 
you need to verify exact name) will dump them all into html files in a jiffy.

If you need a more elegant solution, I'd definitely look at Darren's offerings 
that Chris pointed out. From what I've seen it does a better job of reporting 
in many ways than the full featured GPO management tools and I toy with the 
idea of trying to augment the tools I use with it.

From: James Kerr [mailto:cluster...@gmail.com]
Sent: Thursday, April 12, 2012 7:01 AM
To: NT System Admin Issues
Subject: [dkim-failure] GPO Reporting

Heh guys,

I'm looking for a way to have some kind of report that would look into 
specified GPOs and list the settings they have. Specifically, I'm trying to 
look at a list of GPOs and determine what drive maps they have. Thanks for any 
assistance.

James

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC power management

2012-04-12 Thread Brian Desmond
Many of my customers are doing this with SCCM.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Tom Miller [mailto:tmil...@hnncsb.org]
Sent: Thursday, April 12, 2012 6:41 AM
To: NT System Admin Issues
Subject: PC power management

Are any of you using power management products?  These would be products that 
remotely power on/off, enable monitor shutdown, and such.  Our KBox can take 
advantage of WOL, but I've found in testing that it's not always reliable with 
IP changes from DHCP.

We tested a few products and I like one called Greentrac.  This uses an agent 
and has been very reliable in testing the hosted version. Unfortunately, they 
run on Ubuntu and XenServer does not officially support that, and I'm not 
inclined to purchase VMWare for a single installation.   There is no other 
installation option.

Suggestions anyone?  I'm looking for products that shut down PCs after 
inactivity, starting at a certain time of the day, can put the monitor to 
sleep, can power on PC and power off.

Recommendations appreciated.

Thanks
Tom


Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OTish VPN tunnel on the quick and cheap. SOLVED

2012-04-12 Thread Kennedy, Jim
20 on Win 7. That will be plenty for this application, but tyvm for looking out 
for me.

From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Thursday, April 12, 2012 11:38 AM
To: NT System Admin Issues
Subject: Re: OTish VPN tunnel on the quick and cheap. SOLVED

10 connection limit still in Workstation OS's?  I have no idea if that's still 
the case, but it could be a problem that rears its ugly head...
On Thu, Apr 12, 2012 at 10:36 AM, Kennedy, Jim 
mailto:kennedy...@elyriaschools.org>> wrote:
So I sat down this morning and to my left was a pile of old lynsys home routers 
that my co-workers brought in as openWRT candidates. On my screen was Hamachi 
that looked interesting. But to my right was my sandbox Win7 machine and it hit 
me. Dude, just slam in another NIC, VPN it into our existing VPN setup and use 
ICS.  Took about 5 minutes to set up, another 15 to test and I sent it off to 
be installed.

Thank you everyone, there were some very good workable solutions.


From: Kennedy, Jim
Sent: Wednesday, April 11, 2012 3:27 PM
To: NT System Admin Issues
Subject: OTish VPN tunnel on the quick and cheap.

Need two simple cheap devices to fire up a point to point VPN tunnel. Cable 
modem at a small remote office back to a cable modem at the main office that we 
will tap into our primary network. Low traffic and very temporary. Suggestions?



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: OTish VPN tunnel on the quick and cheap. SOLVED

2012-04-12 Thread Jonathan Link
Don't be so generous!
I was only thinking about myself. :-)  Just found out might have a similar
situation sometime soon.  Or not.  Who knows?

On Thu, Apr 12, 2012 at 11:45 AM, Kennedy, Jim  wrote:

>  20 on Win 7. That will be plenty for this application, but tyvm for
> looking out for me.
>
> ** **
>
> *From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
> *Sent:* Thursday, April 12, 2012 11:38 AM
>
> *To:* NT System Admin Issues
> *Subject:* Re: OTish VPN tunnel on the quick and cheap. SOLVED
>
> ** **
>
> 10 connection limit still in Workstation OS's?  I have no idea if that's
> still the case, but it could be a problem that rears its ugly head...
>
> On Thu, Apr 12, 2012 at 10:36 AM, Kennedy, Jim <
> kennedy...@elyriaschools.org> wrote:
>
> So I sat down this morning and to my left was a pile of old lynsys home
> routers that my co-workers brought in as openWRT candidates. On my screen
> was Hamachi that looked interesting. But to my right was my sandbox Win7
> machine and it hit me. Dude, just slam in another NIC, VPN it into our
> existing VPN setup and use ICS.  Took about 5 minutes to set up, another 15
> to test and I sent it off to be installed.
>
>  
>
> Thank you everyone, there were some very good workable solutions.
>
>  
>
>  
>
> *From:* Kennedy, Jim
> *Sent:* Wednesday, April 11, 2012 3:27 PM
> *To:* NT System Admin Issues
> *Subject:* OTish VPN tunnel on the quick and cheap.
>
>  
>
> Need two simple cheap devices to fire up a point to point VPN tunnel.
> Cable modem at a small remote office back to a cable modem at the main
> office that we will tap into our primary network. Low traffic and very
> temporary. Suggestions?
>
>  
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OTish VPN tunnel on the quick and cheap. SOLVED

2012-04-12 Thread Kennedy, Jim
Fyi, you can reg hack the limits. The 20 is an eula thing.

From: Jonathan Link [jonathan.l...@gmail.com]
Sent: Thursday, April 12, 2012 12:07 PM
To: NT System Admin Issues
Subject: Re: OTish VPN tunnel on the quick and cheap. SOLVED

Don't be so generous!
I was only thinking about myself. :-)  Just found out might have a similar 
situation sometime soon.  Or not.  Who knows?

On Thu, Apr 12, 2012 at 11:45 AM, Kennedy, Jim 
mailto:kennedy...@elyriaschools.org>> wrote:
20 on Win 7. That will be plenty for this application, but tyvm for looking out 
for me.

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Thursday, April 12, 2012 11:38 AM

To: NT System Admin Issues
Subject: Re: OTish VPN tunnel on the quick and cheap. SOLVED

10 connection limit still in Workstation OS's?  I have no idea if that's still 
the case, but it could be a problem that rears its ugly head...
On Thu, Apr 12, 2012 at 10:36 AM, Kennedy, Jim 
mailto:kennedy...@elyriaschools.org>> wrote:
So I sat down this morning and to my left was a pile of old lynsys home routers 
that my co-workers brought in as openWRT candidates. On my screen was Hamachi 
that looked interesting. But to my right was my sandbox Win7 machine and it hit 
me. Dude, just slam in another NIC, VPN it into our existing VPN setup and use 
ICS.  Took about 5 minutes to set up, another 15 to test and I sent it off to 
be installed.

Thank you everyone, there were some very good workable solutions.


From: Kennedy, Jim
Sent: Wednesday, April 11, 2012 3:27 PM
To: NT System Admin Issues
Subject: OTish VPN tunnel on the quick and cheap.

Need two simple cheap devices to fire up a point to point VPN tunnel. Cable 
modem at a small remote office back to a cable modem at the main office that we 
will tap into our primary network. Low traffic and very temporary. Suggestions?



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Changing the IP of the only DC in the domain

2012-04-12 Thread Ziots, Edward
Agreed, either that or restart the netlogon process. 

 

Z

 

Edward Ziots

CISSP, Security +, Network +

Security Engineer

Lifespan Organization

ezi...@lifespan.org

 

From: Webster [mailto:webs...@carlwebster.com] 
Sent: Thursday, April 12, 2012 11:07 AM
To: NT System Admin Issues
Subject: RE: Changing the IP of the only DC in the domain

 

Sure, change IP and reboot.

 

 

Carl Webster

Consultant and Citrix Technology Professional

http://www.CarlWebster.com  

 

From: Heaton, Joseph@DFG [mailto:jhea...@dfg.ca.gov] 
Subject: Changing the IP of the only DC in the domain

 

I've set up a domain for a proof-of-concept.  I only built a single
Win2k8R2 DC.  I'm now being asked to change the IP subnet for the
domain.  I've found lots of articles talking about how easy it is to
change the IP of a DC, but is it the same if it is the only DC?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Free eBook: Introducing SQL Server 2012

2012-04-12 Thread Ziots, Edward
Ditto, appreciate it J 

 

Z

 

Edward Ziots

CISSP, Security +, Network +

Security Engineer

Lifespan Organization

ezi...@lifespan.org

 

From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Thursday, April 12, 2012 11:03 AM
To: NT System Admin Issues
Subject: RE: Free eBook: Introducing SQL Server 2012

 

Thanks Michael!  Forwarded to our DBAs.

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Thursday, April 12, 2012 8:43 AM
To: NT System Admin Issues
Subject: Free eBook: Introducing SQL Server 2012

 

I haven't read this yet myself, I just downloaded it, but I thought it
might have wide interest.

 

http://blogs.msdn.com/b/microsoft_press/archive/2012/03/15/free-ebook-in
troducing-microsoft-sql-server-2012.aspx

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://theessentialexchange.com/

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OTish VPN tunnel on the quick and cheap. SOLVED

2012-04-12 Thread Mathew Shember
I vaguely remember a situation where you can get a 10 connection limit with 
windows 7.  I think it involved where the person upgraded from Vista to win 7.

A clean install solved it..


From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Thursday, April 12, 2012 9:06 AM
To: NT System Admin Issues
Subject: Re: OTish VPN tunnel on the quick and cheap. SOLVED

Don't be so generous!
I was only thinking about myself. :-)  Just found out might have a similar 
situation sometime soon.  Or not.  Who knows?
On Thu, Apr 12, 2012 at 11:45 AM, Kennedy, Jim 
mailto:kennedy...@elyriaschools.org>> wrote:
20 on Win 7. That will be plenty for this application, but tyvm for looking out 
for me.

From: Jonathan Link 
[mailto:jonathan.l...@gmail.com]
Sent: Thursday, April 12, 2012 11:38 AM

To: NT System Admin Issues
Subject: Re: OTish VPN tunnel on the quick and cheap. SOLVED

10 connection limit still in Workstation OS's?  I have no idea if that's still 
the case, but it could be a problem that rears its ugly head...
On Thu, Apr 12, 2012 at 10:36 AM, Kennedy, Jim 
mailto:kennedy...@elyriaschools.org>> wrote:
So I sat down this morning and to my left was a pile of old lynsys home routers 
that my co-workers brought in as openWRT candidates. On my screen was Hamachi 
that looked interesting. But to my right was my sandbox Win7 machine and it hit 
me. Dude, just slam in another NIC, VPN it into our existing VPN setup and use 
ICS.  Took about 5 minutes to set up, another 15 to test and I sent it off to 
be installed.

Thank you everyone, there were some very good workable solutions.


From: Kennedy, Jim
Sent: Wednesday, April 11, 2012 3:27 PM
To: NT System Admin Issues
Subject: OTish VPN tunnel on the quick and cheap.

Need two simple cheap devices to fire up a point to point VPN tunnel. Cable 
modem at a small remote office back to a cable modem at the main office that we 
will tap into our primary network. Low traffic and very temporary. Suggestions?



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Free eBook: Introducing SQL Server 2012

2012-04-12 Thread Scot Parsons
According to this, it is also available for free at the Kindle Store. 

http://blogs.msdn.com/b/microsoft_press/archive/2012/04/05/quick-news-the-only-tech-book-currently-in-the-top-100-free-list.aspx


-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Thursday, April 12, 2012 10:51 AM
To: NT System Admin Issues
Subject: Re: Free eBook: Introducing SQL Server 2012

On Thu, Apr 12, 2012 at 9:42 AM, Michael B. Smith  wrote:
> I haven't read this yet myself, I just downloaded it, but I thought it 
> might have wide interest.
>
> http://blogs.msdn.com/b/microsoft_press/archive/2012/03/15/free-ebook-
> introducing-microsoft-sql-server-2012.aspx

  Oh.  That does look like it might be valuable.  We don't use MS-SQL here 
(yet) but it could happen at any time.  Thanks, MBS!

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Changing the IP of the only DC in the domain

2012-04-12 Thread Webster
You would also need to ipconfig /registerdns if you do not restart the DC.  If 
this test server is a VM, you can reboot the VM faster than typing in the 
commands to register the proper DNS stuff.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Subject: RE: Changing the IP of the only DC in the domain

Agreed, either that or restart the netlogon process.

Z

Edward Ziots
CISSP, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org

From: Webster 
[mailto:webs...@carlwebster.com]
Subject: RE: Changing the IP of the only DC in the domain

Sure, change IP and reboot.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com

From: Heaton, Joseph@DFG [mailto:jhea...@dfg.ca.gov]
Subject: Changing the IP of the only DC in the domain

I've set up a domain for a proof-of-concept.  I only built a single Win2k8R2 
DC.  I'm now being asked to change the IP subnet for the domain.  I've found 
lots of articles talking about how easy it is to change the IP of a DC, but is 
it the same if it is the only DC?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Domain local vs. global vs. universal

2012-04-12 Thread Brian Desmond
In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn't me), but 
for this function I needed to add a domain local group to it and for course, 
that's not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it's used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn't mean it's right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Changing the IP of the only DC in the domain

2012-04-12 Thread Heaton, Joseph@DFG
I rebooted.  It is a VM, and there's nothing going on in the domain anyway, so 
was quick, painless, and done.

Thanks everyone for their inputs.

Joe Heaton
ITB - Windows Server Support

From: Webster [mailto:webs...@carlwebster.com]
Sent: Thursday, April 12, 2012 9:40 AM
To: Heaton, Joseph@DFG; NT System Admin Issues
Subject: RE: Changing the IP of the only DC in the domain

You would also need to ipconfig /registerdns if you do not restart the DC.  If 
this test server is a VM, you can reboot the VM faster than typing in the 
commands to register the proper DNS stuff.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com

From: Ziots, Edward 
[mailto:ezi...@lifespan.org]
Subject: RE: Changing the IP of the only DC in the domain

Agreed, either that or restart the netlogon process.

Z

Edward Ziots
CISSP, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org

From: Webster 
[mailto:webs...@carlwebster.com]
Subject: RE: Changing the IP of the only DC in the domain

Sure, change IP and reboot.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com

From: Heaton, Joseph@DFG [mailto:jhea...@dfg.ca.gov]
Subject: Changing the IP of the only DC in the domain

I've set up a domain for a proof-of-concept.  I only built a single Win2k8R2 
DC.  I'm now being asked to change the IP subnet for the domain.  I've found 
lots of articles talking about how easy it is to change the IP of a DC, but is 
it the same if it is the only DC?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Post-update reboot detection

2012-04-12 Thread Richard Stovall
About 2/3 of the way down the page at
http://exodusdev.com/products/whyreboot there are some links to MS KB
articles about this.  The page seems a little dated, but perhaps the links
might be a good jumping off point.

On Thu, Apr 12, 2012 at 1:28 PM, Micheal Espinola Jr <
michealespin...@gmail.com> wrote:

> Hi everyone,
>
> I'm currently researching a scriptable way to detect if a system has a
> post-update pending reboot status.  So far the only clearly identifiable
> marker I have found is existance of the registry key:
>
>
>  
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
>> Update\RebootRequired
>
>
>
> I was curious if anyone has worked on anything like this before, and would
> be able to share some insight or ideas/methods.  Thanks!
>
> --
> Espi
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: PC power management

2012-04-12 Thread Stephen Wimberly
I use SCCM, but I've done all of this with free products, it just
depends on how automated you'd like to get with it.

shut down PCs after inactivity,
   Shutdown Screensaver (configure local or delivery via almost any
management product)

starting at a certain time of the day,
   BIOS settings to wake (Most Enterprise desktops, like Dell
Optiplex, can be managed remotely or via management products)

can put the monitor to sleep,
   Sleep settings on the monitor can be configured locally or via most
any desktop management product.)

can power on PC
   wol.exe (Executed from a machine running on the same subnet where
the machine is configured in BIOS and Network card to respond to a
wake on lan broadcast.  If the WMI layer is healthy and the drivers
are "correct" this is almost 95% accurate.  Since it's a broadcast it
should not matter what the machine's last IP address was.  Some
software attempts an IP specific address, which can usually get
through a router, but I've had much better luck with broadcast as long
as you have a machine on in the same subnet and can use something like
psexec.)

and power off.
   Shutdown.exe (Execute local or from a remote machine with admin
rights using "shutdown.exe /s /m \\remote"

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Jonathan
Not sure where to begin on this - I guess it is possible that I've got two
new (refurbed) drives that are bad, but I'm leaning toward it being a fluke
or known bug or compatibility issue. I've Googled till I'm blue in the
face, and I've searched the archives of this list going back more than a
year. We can't retire this server just yet, and I can't P2V it right now.
We're looking to decommission it this year, and replace it with newer
hardware, so for the moment, I'm stuck with it.

Also, I inherited itit long predated my existence at this company. I
had a drive failure in the RAID1, so I bought two reburb units from a major
channel partner (we are a VAR). The hope was to replace one drive, let it
rebuild, then add the second drive as a hot spare so I wouldn't be in this
bind again. Alas, BOTH of the refurb drives register in the System
Management Homepage with a status of Predictive Failure, Replace Drive. I
know I've read about false positives with S.M.A.R.T. Status under certain
OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't find
anything along those lines right now when I need it. Also, with this being
a COMPAQ branded server, I'm not 100% certain of what I'm looking at on the
HP site, as everything referenced looks like a HP branded server. I wasn't
dealing with HP at the time of the HP Compaq merger, and I never did
anything with Compaq servers...

I welcome any suggestions offered to get this unit functioning without
drive array errors (if that is possible). Having the drive listed as being
in a degraded state doesn't give me any warm fuzzies, and it is
unfortunately a critical server, so I can't just say, "It's probably not
really an issue." Of course, I can't be guaranteed that there is a valid
backup of this server, and even if there is, getting it back online might
be practically impossible, because like I said, it predates me
significantly and the individuals who configured it are no longer with the
organization and the software application is no longer supported. I do have
original media, but I'd rather not go that route if I don't have to

Configuration:

Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1 configuration
with no hot spare (like I said, I inherited it)
Running Windows Server 2000 w/SP4 and all available updates
BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23 Mar
2004), but the rev history does not show anything related to SCSI drives or
controllers
ROM Version from the System Management Homepage is 04/02/2001, Family
386P17, Type 03
Storage Controller is listed as "Compaq Integrated Smart Array Controller"
Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate
anything that would implicate a false positive for SMART failure
Storage Controller Firmware version is 1.46A - looks like 1.50B dated 22
Oct 2002 is the latest, but can't find any rev notes that tell me what the
fixes are between 1.46A and 1.50B
Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware version
HPB4 and has service hours total of 63,040 hours - this appears to be the
latest firmware for this drive per HP* Document ID: *c00776070
Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
BF0368A4CA has firmware version HPB5 and has service hours total of 19
(yes, nineteen) hours - there is an update HPB5 (C) Dated 18 Jul 2007, but
again, no details in the rev history
Port 2 Drive 2 - New hot spare presently not inserted - (listed as
"Predictive Failure/Replace Drive") COMPAQ BF03685A35 has firmware version
HPB6 and has service hours total of 28,009 hours - there is an update HPB8
(C) Dated 18 Jul 2007, but again, no details in the rev history
HP system Management Homepage version is 2.0.2.106, 2.1.10.186 (C) (29 Jan
2008) is the latest one listed for this server/OS combination
HP Array Configuration Utility is v 7.61.2.0, which appears to be the latest
HP Array Diagnostic Utility is v 7.60.18.0, which appears to be the latest

This is the only site I've found from HP that comes close to matching my
server:

http://h20565.www2.hp.com/portal/site/hpsc/public/psi/swdHome/?sp4ts.oid=3292422

It is for a HP ProLiant DL380 P1000-256KB 128MB Rack Server, and what I
have is a Compaq ProLiant DL380 P733-256KB 128MB Rack Server...

Thanks,

-- 
Jonathan, A+, MCSA, MCSE

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
I too am looking into this for a coming migration I've been asked to design for 
a customer.  What's the impact to GC's by making everything Universal Groups?  
Especially in a multi domain, multi forest environment?
 
-lc


>
> From: Brian Desmond 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 12:02 PM
>Subject: RE: Domain local vs. global vs. universal
> 
>
> 
>In a single domain forest (or even many multi-domain domain forests today), I 
>would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>for this function I needed to add a domain local group to it and for course, 
>that’s not possible. Someplace I heard in AD pretty much every group you use 
>should be domain local unless it’s used for Exchange in which case you use 
>Universal.  All groups I create are domain local and it simply works, but I 
>know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus from 
>you guys. Comments?
>David Lum
>Systems Engineer //NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Domain local vs. global vs. universal

2012-04-12 Thread David Lum
Sotechnically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What's happening behind the scenes? 
Universal's get copied to GC's and others don't, but what else?

Dave

From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn't me), but 
for this function I needed to add a domain local group to it and for course, 
that's not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it's used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn't mean it's right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Richard Stovall
Order 3 *new* drives, have them overnighted, then proceed with your
original plan.

http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives


On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:

> Not sure where to begin on this - I guess it is possible that I've got two
> new (refurbed) drives that are bad, but I'm leaning toward it being a fluke
> or known bug or compatibility issue. I've Googled till I'm blue in the
> face, and I've searched the archives of this list going back more than a
> year. We can't retire this server just yet, and I can't P2V it right now.
> We're looking to decommission it this year, and replace it with newer
> hardware, so for the moment, I'm stuck with it.
>
> Also, I inherited itit long predated my existence at this company. I
> had a drive failure in the RAID1, so I bought two reburb units from a major
> channel partner (we are a VAR). The hope was to replace one drive, let it
> rebuild, then add the second drive as a hot spare so I wouldn't be in this
> bind again. Alas, BOTH of the refurb drives register in the System
> Management Homepage with a status of Predictive Failure, Replace Drive. I
> know I've read about false positives with S.M.A.R.T. Status under certain
> OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't find
> anything along those lines right now when I need it. Also, with this being
> a COMPAQ branded server, I'm not 100% certain of what I'm looking at on the
> HP site, as everything referenced looks like a HP branded server. I wasn't
> dealing with HP at the time of the HP Compaq merger, and I never did
> anything with Compaq servers...
>
> I welcome any suggestions offered to get this unit functioning without
> drive array errors (if that is possible). Having the drive listed as being
> in a degraded state doesn't give me any warm fuzzies, and it is
> unfortunately a critical server, so I can't just say, "It's probably not
> really an issue." Of course, I can't be guaranteed that there is a valid
> backup of this server, and even if there is, getting it back online might
> be practically impossible, because like I said, it predates me
> significantly and the individuals who configured it are no longer with the
> organization and the software application is no longer supported. I do have
> original media, but I'd rather not go that route if I don't have to
>
> Configuration:
>
> Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1
> configuration with no hot spare (like I said, I inherited it)
> Running Windows Server 2000 w/SP4 and all available updates
> BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23
> Mar 2004), but the rev history does not show anything related to SCSI
> drives or controllers
> ROM Version from the System Management Homepage is 04/02/2001, Family
> 386P17, Type 03
> Storage Controller is listed as "Compaq Integrated Smart Array Controller"
> Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
> version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate
> anything that would implicate a false positive for SMART failure
> Storage Controller Firmware version is 1.46A - looks like 1.50B dated 22
> Oct 2002 is the latest, but can't find any rev notes that tell me what the
> fixes are between 1.46A and 1.50B
> Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware version
> HPB4 and has service hours total of 63,040 hours - this appears to be the
> latest firmware for this drive per HP* Document ID: *c00776070
> Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
> BF0368A4CA has firmware version HPB5 and has service hours total of 19
> (yes, nineteen) hours - there is an update HPB5 (C) Dated 18 Jul 2007, but
> again, no details in the rev history
> Port 2 Drive 2 - New hot spare presently not inserted - (listed as
> "Predictive Failure/Replace Drive") COMPAQ BF03685A35 has firmware
> version HPB6 and has service hours total of 28,009 hours - there is an
> update HPB8 (C) Dated 18 Jul 2007, but again, no details in the rev history
> HP system Management Homepage version is 2.0.2.106, 2.1.10.186 (C) (29 Jan
> 2008) is the latest one listed for this server/OS combination
> HP Array Configuration Utility is v 7.61.2.0, which appears to be the
> latest
> HP Array Diagnostic Utility is v 7.60.18.0, which appears to be the latest
>
> This is the only site I've found from HP that comes close to matching my
> server:
>
>
> http://h20565.www2.hp.com/portal/site/hpsc/public/psi/swdHome/?sp4ts.oid=3292422
>
> It is for a HP ProLiant DL380 P1000-256KB 128MB Rack Server, and what I
> have is a Compaq ProLiant DL380 P733-256KB 128MB Rack Server...
>
> Thanks,
>
> --
> Jonathan, A+, MCSA, MCSE
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_fo

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
>From my reading that's basically it.  But do GC's always get them, or only 
>when enabled for universal group caching?
 
-lc


>
> From: David Lum 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 1:12 PM
>Subject: RE: Domain local vs. global vs. universal
> 
>
>So….technically what is happening when you click that little radio button to 
>change group type Local/Global/Universal? What’s happening behind the scenes? 
>Universal’s get copied to GC’s and others don’t, but what else?
> 
>Dave
> 
>From:Brian Desmond [mailto:br...@briandesmond.com] 
>Sent: Thursday, April 12, 2012 10:03 AM
>To: NT System Admin Issues
>Subject: RE: Domain local vs. global vs. universal
> 
>In a single domain forest (or even many multi-domain domain forests today), I 
>would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>for this function I needed to add a domain local group to it and for course, 
>that’s not possible. Someplace I heard in AD pretty much every group you use 
>should be domain local unless it’s used for Exchange in which case you use 
>Universal.  All groups I create are domain local and it simply works, but I 
>know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus from 
>you guys. Comments?
>David Lum
>Systems Engineer //NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread John C Owen
+1 on the new drives

Also, I would NOT update the BIOS or add any other patches until the new drives 
are in place and you get a good backup

From: Richard Stovall [mailto:rich...@gmail.com]
Sent: Thursday, April 12, 2012 2:16 PM
To: NT System Admin Issues
Subject: Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

Order 3 *new* drives, have them overnighted, then proceed with your original 
plan.

http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives


On Thu, Apr 12, 2012 at 2:03 PM, Jonathan 
mailto:ncm...@gmail.com>> wrote:
Not sure where to begin on this - I guess it is possible that I've got two new 
(refurbed) drives that are bad, but I'm leaning toward it being a fluke or 
known bug or compatibility issue. I've Googled till I'm blue in the face, 
and I've searched the archives of this list going back more than a year. We 
can't retire this server just yet, and I can't P2V it right now. We're looking 
to decommission it this year, and replace it with newer hardware, so for the 
moment, I'm stuck with it.

Also, I inherited itit long predated my existence at this company. I had a 
drive failure in the RAID1, so I bought two reburb units from a major channel 
partner (we are a VAR). The hope was to replace one drive, let it rebuild, then 
add the second drive as a hot spare so I wouldn't be in this bind again. Alas, 
BOTH of the refurb drives register in the System Management Homepage with a 
status of Predictive Failure, Replace Drive. I know I've read about false 
positives with S.M.A.R.T. Status under certain OS/Firmware/Driver/MS Update 
scenarios, but for the life of me I can't find anything along those lines right 
now when I need it. Also, with this being a COMPAQ branded server, I'm not 100% 
certain of what I'm looking at on the HP site, as everything referenced looks 
like a HP branded server. I wasn't dealing with HP at the time of the HP Compaq 
merger, and I never did anything with Compaq servers...

I welcome any suggestions offered to get this unit functioning without drive 
array errors (if that is possible). Having the drive listed as being in a 
degraded state doesn't give me any warm fuzzies, and it is unfortunately a 
critical server, so I can't just say, "It's probably not really an issue." Of 
course, I can't be guaranteed that there is a valid backup of this server, and 
even if there is, getting it back online might be practically impossible, 
because like I said, it predates me significantly and the individuals who 
configured it are no longer with the organization and the software application 
is no longer supported. I do have original media, but I'd rather not go that 
route if I don't have to

Configuration:

Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1 configuration 
with no hot spare (like I said, I inherited it)
Running Windows Server 2000 w/SP4 and all available updates
BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23 Mar 
2004), but the rev history does not show anything related to SCSI drives or 
controllers
ROM Version from the System Management Homepage is 04/02/2001, Family 386P17, 
Type 03
Storage Controller is listed as "Compaq Integrated Smart Array Controller"
Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest version 
appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate anything 
that would implicate a false positive for SMART failure
Storage Controller Firmware version is 1.46A - looks like 1.50B dated 22 Oct 
2002 is the latest, but can't find any rev notes that tell me what the fixes 
are between 1.46A and 1.50B
Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware version HPB4 
and has service hours total of 63,040 hours - this appears to be the latest 
firmware for this drive per HP Document ID: c00776070
Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ BF0368A4CA 
has firmware version HPB5 and has service hours total of 19 (yes, nineteen) 
hours - there is an update HPB5 (C) Dated 18 Jul 2007, but again, no details in 
the rev history
Port 2 Drive 2 - New hot spare presently not inserted - (listed as "Predictive 
Failure/Replace Drive") COMPAQ BF03685A35 has firmware version HPB6 and has 
service hours total of 28,009 hours - there is an update HPB8 (C) Dated 18 Jul 
2007, but again, no details in the rev history
HP system Management Homepage version is 2.0.2.106, 2.1.10.186 (C) (29 Jan 
2008) is the latest one listed for this server/OS combination
HP Array Configuration Utility is v 7.61.2.0, which appears to be the latest
HP Array Diagnostic Utility is v 7.60.18.0, which appears to be the latest

This is the only site I've found from HP that comes close to matching my server:

http://h20565.www2.hp.com/portal/site/hpsc/public/psi/swdHome/?sp4ts.oid=3292422

It is for a HP ProLiant DL380 P1000-256KB 128MB Rack Server, and what I have is 
a Compaq ProLiant DL380 P733-256KB 128MB Rack Server...

Thanks,

--
Jonathan, A

Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
Understanding group types:
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Understanding caching of universal groups:

http://technet.microsoft.com/en-us/magazine/ff797984.aspx

 - Will





On Thu, Apr 12, 2012 at 13:32, Lora Cates  wrote:

> From my reading that's basically it.  But do GC's always get them, or only
> when enabled for universal group caching?
>
> -lc
>
>   --
> *From:* David Lum 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 1:12 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
> So….technically what is happening when you click that little radio button
> to change group type Local/Global/Universal? What’s happening behind the
> scenes? Universal’s get copied to GC’s and others don’t, but what else?
>
> Dave
>
> *From:* Brian Desmond [mailto:br...@briandesmond.com]
> *Sent:* Thursday, April 12, 2012 10:03 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
> *In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. ***
> *  *
> *Thanks,*
> *Brian Desmond*
> *br...@briandesmond.com*
> *  *
> *w – 312.625.1438 | c   – 312.731.3132*
> *  *
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
> Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
> Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
> *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Domain local vs. global vs. universal

2012-04-12 Thread Free, Bob
Volumes have been written about this. There are even those who  disagree 
with Brian's recommendation. I'm not saying any of it is good or bad but a lot 
of smart folks have argued pros and cons of various methodologies over the 
years. You might want to read up on it a little for your own edification.

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:12 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

Sotechnically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What's happening behind the scenes? 
Universal's get copied to GC's and others don't, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn't me), but 
for this function I needed to add a domain local group to it and for course, 
that's not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it's used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn't mean it's right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread William Robbins
Agreed.

 - Will





On Thu, Apr 12, 2012 at 13:16, Richard Stovall  wrote:

> Order 3 *new* drives, have them overnighted, then proceed with your
> original plan.
>
> http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives
>
>
> On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:
>
>> Not sure where to begin on this - I guess it is possible that I've got
>> two new (refurbed) drives that are bad, but I'm leaning toward it being a
>> fluke or known bug or compatibility issue. I've Googled till I'm blue
>> in the face, and I've searched the archives of this list going back more
>> than a year. We can't retire this server just yet, and I can't P2V it right
>> now. We're looking to decommission it this year, and replace it with newer
>> hardware, so for the moment, I'm stuck with it.
>>
>> Also, I inherited itit long predated my existence at this company. I
>> had a drive failure in the RAID1, so I bought two reburb units from a major
>> channel partner (we are a VAR). The hope was to replace one drive, let it
>> rebuild, then add the second drive as a hot spare so I wouldn't be in this
>> bind again. Alas, BOTH of the refurb drives register in the System
>> Management Homepage with a status of Predictive Failure, Replace Drive. I
>> know I've read about false positives with S.M.A.R.T. Status under certain
>> OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't find
>> anything along those lines right now when I need it. Also, with this being
>> a COMPAQ branded server, I'm not 100% certain of what I'm looking at on the
>> HP site, as everything referenced looks like a HP branded server. I wasn't
>> dealing with HP at the time of the HP Compaq merger, and I never did
>> anything with Compaq servers...
>>
>> I welcome any suggestions offered to get this unit functioning without
>> drive array errors (if that is possible). Having the drive listed as being
>> in a degraded state doesn't give me any warm fuzzies, and it is
>> unfortunately a critical server, so I can't just say, "It's probably not
>> really an issue." Of course, I can't be guaranteed that there is a valid
>> backup of this server, and even if there is, getting it back online might
>> be practically impossible, because like I said, it predates me
>> significantly and the individuals who configured it are no longer with the
>> organization and the software application is no longer supported. I do have
>> original media, but I'd rather not go that route if I don't have to
>>
>> Configuration:
>>
>> Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1
>> configuration with no hot spare (like I said, I inherited it)
>> Running Windows Server 2000 w/SP4 and all available updates
>> BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23
>> Mar 2004), but the rev history does not show anything related to SCSI
>> drives or controllers
>> ROM Version from the System Management Homepage is 04/02/2001, Family
>> 386P17, Type 03
>> Storage Controller is listed as "Compaq Integrated Smart Array Controller"
>> Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
>> version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate
>> anything that would implicate a false positive for SMART failure
>> Storage Controller Firmware version is 1.46A - looks like 1.50B dated 22
>> Oct 2002 is the latest, but can't find any rev notes that tell me what the
>> fixes are between 1.46A and 1.50B
>> Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware
>> version HPB4 and has service hours total of 63,040 hours - this appears
>> to be the latest firmware for this drive per HP* Document ID: *c00776070
>> Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
>> BF0368A4CA has firmware version HPB5 and has service hours total of 19
>> (yes, nineteen) hours - there is an update HPB5 (C) Dated 18 Jul 2007, but
>> again, no details in the rev history
>> Port 2 Drive 2 - New hot spare presently not inserted - (listed as
>> "Predictive Failure/Replace Drive") COMPAQ BF03685A35 has firmware
>> version HPB6 and has service hours total of 28,009 hours - there is an
>> update HPB8 (C) Dated 18 Jul 2007, but again, no details in the rev history
>> HP system Management Homepage version is 2.0.2.106, 2.1.10.186 (C) (29
>> Jan 2008) is the latest one listed for this server/OS combination
>> HP Array Configuration Utility is v 7.61.2.0, which appears to be the
>> latest
>> HP Array Diagnostic Utility is v 7.60.18.0, which appears to be the latest
>>
>> This is the only site I've found from HP that comes close to matching my
>> server:
>>
>>
>> http://h20565.www2.hp.com/portal/site/hpsc/public/psi/swdHome/?sp4ts.oid=3292422
>>
>> It is for a HP ProLiant DL380 P1000-256KB 128MB Rack Server, and what I
>> have is a Compaq ProLiant DL380 P733-256KB 128MB Rack Server...
>>
>> Thanks,
>>
>> --
>> Jonathan, A+, MCSA, MCSE
>>
>> ~ Finally, powerful endpoint security that ISN'T a res

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this can 
be enabled on any DC, correct?  Is there any reason to not have every DC also 
be a GC?
 
-lc


>
> From: William Robbins 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 1:37 PM
>Subject: Re: Domain local vs. global vs. universal
> 
>
>Understanding group types:
>http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx 
>
>
>Understanding caching of universal groups:
>
>
>http://technet.microsoft.com/en-us/magazine/ff797984.aspx 
>
> - Will
>
>
>
>
>
>
>
>
>On Thu, Apr 12, 2012 at 13:32, Lora Cates  wrote:
>
>From my reading that's basically it.  But do GC's always get them, or only 
>when enabled for universal group caching?
>> 
>>-lc
>>
>>
>>>
>>> From: David Lum 
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 1:12 PM
>>>
>>>Subject: RE: Domain local vs. global vs. universal
>>> 
>>>
>>>
>>>So….technically what is happening when you click that little radio button to 
>>>change group type Local/Global/Universal? What’s happening behind the 
>>>scenes? Universal’s get copied to GC’s and others don’t, but what else?
>>> 
>>>Dave
>>> 
>>>From:Brian Desmond [mailto:br...@briandesmond.com] 
>>>Sent: Thursday, April 12, 2012 10:03 AM
>>>To: NT System Admin Issues
>>>Subject: RE: Domain local vs. global vs. universal
>>> 
>>>In a single domain forest (or even many multi-domain domain forests today), 
>>>I would just do all uni groups. 
>>> 
>>>Thanks,
>>>Brian Desmond
>>>br...@briandesmond.com
>>> 
>>>w – 312.625.1438 | c   – 312.731.3132
>>> 
>>>From:David Lum [mailto:david@nwea.org] 
>>>Sent: Thursday, April 12, 2012 11:28 AM
>>>To: NT System Admin Issues
>>>Subject: Domain local vs. global vs. universal
>>> 
>>>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>>>for this function I needed to add a domain local group to it and for course, 
>>>that’s not possible. Someplace I heard in AD pretty much every group you use 
>>>should be domain local unless it’s used for Exchange in which case you use 
>>>Universal.  All groups I create are domain local and it simply works, but I 
>>>know that doesn’t mean it’s right.
>>> 
>>>Before sending a note to the SE team on this I wanted to get a consensus 
>>>from you guys. Comments?
>>>David Lum
>>>Systems Engineer //NWEATM
>>>Office 503.548.5229//Cell (voice/text) 503.267.9764
>>> 
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>>
>>>
>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>~   ~
>>
>>---
>>To manage subscriptions click here: 
>>http://lyris.sunbelt-software.com/read/my_forums/
>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>with the body: unsubscribe ntsysadmin
>
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
Recommendations do vary largely depending on requirement's...which are
lacking in the OP, but since the OP was about "right" in a general sense it
makes any recommendations subjective.  :)

 - Will





On Thu, Apr 12, 2012 at 13:38, Free, Bob  wrote:

>  Volumes have been written about this. There are even those who 
> disagree with Brian’s recommendation. I’m not saying any of it is good or
> bad but a lot of smart folks have argued pros and cons of various
> methodologies over the years. You might want to read up on it a little for
> your own edification.
>
> ** **
>
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:12 AM
>
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
>  ** **
>
> So….technically what is happening when you click that little radio button
> to change group type Local/Global/Universal? What’s happening behind the
> scenes? Universal’s get copied to GC’s and others don’t, but what else?***
> *
>
> ** **
>
> Dave
>
> ** **
>
> *From:* Brian Desmond [mailto:br...@briandesmond.com]
> *Sent:* Thursday, April 12, 2012 10:03 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
> ** **
>
> *In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. ***
>
> * *
>
> *Thanks,*
>
> *Brian Desmond*
>
> *br...@briandesmond.com*
>
> * *
>
> *w – 312.625.1438 | c   – 312.731.3132*
>
> * *
>
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
> ** **
>
> Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
> ** **
>
> Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
>
> *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
>From the article ma'am:

When you enable this feature on a domain operating in Windows Server 2003
or higher functional level, any domain controller can resolve logon
requests locally without having to go through the global catalog server.

As to the DC/GC query, like I stated earlier, it depends on your
infrastructure and design requirements...and phase of the moon.  (Save the
Infrastructure FSMO, if you have multiple DC's, etc etc etc.)

 - Will





On Thu, Apr 12, 2012 at 13:48, Lora Cates  wrote:

> Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear
> this can be enabled on any DC, correct?  Is there any reason to not have
> every DC also be a GC?
>
> -lc
>
>   --
> *From:* William Robbins 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 1:37 PM
> *Subject:* Re: Domain local vs. global vs. universal
>
> Understanding group types:
> http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx
>
> Understanding caching of universal groups:
>
> http://technet.microsoft.com/en-us/magazine/ff797984.aspx
>
>  - Will
>
>
>
>
>
> On Thu, Apr 12, 2012 at 13:32, Lora Cates wrote:
>
> From my reading that's basically it.  But do GC's always get them, or only
> when enabled for universal group caching?
>
> -lc
>
>   --
> *From:* David Lum 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 1:12 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
> So….technically what is happening when you click that little radio button
> to change group type Local/Global/Universal? What’s happening behind the
> scenes? Universal’s get copied to GC’s and others don’t, but what else?
>
> Dave
>
> *From:* Brian Desmond [mailto:br...@briandesmond.com]
> *Sent:* Thursday, April 12, 2012 10:03 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
> *In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. ***
> *  *
> *Thanks,*
> *Brian Desmond*
> *br...@briandesmond.com*
> *  *
> *w – 312.625.1438 | c   – 312.731.3132*
> *  *
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
> Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
> Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
> *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerf

Re: Domain local vs. global vs. universal

2012-04-12 Thread Patrick Salmon
Every DC except the one holding the Infrastructure Master FSMO role. Only
because you must have the role somewhere, and it can only reside on a DC.
And no, other than that no reason at all that I can think of.

Pat.

On Thu, Apr 12, 2012 at 2:48 PM, Lora Cates wrote:

> Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear
> this can be enabled on any DC, correct?  Is there any reason to not have
> every DC also be a GC?
>
> -lc
>
>   --
> *From:* William Robbins 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 1:37 PM
> *Subject:* Re: Domain local vs. global vs. universal
>
> Understanding group types:
> http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx
>
> Understanding caching of universal groups:
>
> http://technet.microsoft.com/en-us/magazine/ff797984.aspx
>
>  - Will
>
>
>
>
>
> On Thu, Apr 12, 2012 at 13:32, Lora Cates wrote:
>
> From my reading that's basically it.  But do GC's always get them, or only
> when enabled for universal group caching?
>
> -lc
>
>   --
> *From:* David Lum 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 1:12 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
> So….technically what is happening when you click that little radio button
> to change group type Local/Global/Universal? What’s happening behind the
> scenes? Universal’s get copied to GC’s and others don’t, but what else?
>
> Dave
>
> *From:* Brian Desmond [mailto:br...@briandesmond.com]
> *Sent:* Thursday, April 12, 2012 10:03 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
> *In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. ***
> *  *
> *Thanks,*
> *Brian Desmond*
> *br...@briandesmond.com*
> *  *
> *w – 312.625.1438 | c   – 312.731.3132*
> *  *
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
> Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
> Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
> *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@l

RE: Domain local vs. global vs. universal

2012-04-12 Thread John Cook
It depends! ;-)
How many users do you have
How many servers do  you have
How many sites do you have
What kind of bandwidth do you have between sites

In our case we have 5 sites of which 3 have DC/GCs and one of those sites 
(datacenter where Exchange lives) has a redundant DC/GC. We have pretty good 
bandwidth and with only 240 users with about 100 in the main site replication 
isn’t an issue.
YMMV

 John W. Cook
Network Operations Manager
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 2:48 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this can 
be enabled on any DC, correct?  Is there any reason to not have every DC also 
be a GC?

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:37 PM
Subject: Re: Domain local vs. global vs. universal

Understanding group types:
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Understanding caching of universal groups:

http://technet.microsoft.com/en-us/magazine/ff797984.aspx

 - Will

[http://sale.images.woot.com/Air_Quothhs7Detail.png]


On Thu, Apr 12, 2012 at 13:32, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
From my reading that's basically it.  But do GC's always get them, or only when 
enabled for universal group caching?

-lc

From: David Lum mailto:david@nwea.org>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:12 PM

Subject: RE: Domain local vs. global vs. universal

So….technically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What’s happening behind the scenes? 
Universal’s get copied to GC’s and others don’t, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage

RE: Domain local vs. global vs. universal

2012-04-12 Thread Webster
If you are in a very large, distributed. multi-domain AD environment with 
dubious WAN links you may not want every DC to be a GC or even every DC running 
DNS.  That would be a lot of replication traffic.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Subject: Re: Domain local vs. global vs. universal

Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this can 
be enabled on any DC, correct?  Is there any reason to not have every DC also 
be a GC?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Domain local vs. global vs. universal

2012-04-12 Thread Brian Desmond
Nothing really happens when you toggle that button other than an update to the 
groupType (IIRC that's the one) attribute. Replication is smart enough in a 
multi-domain environment on GCs to sync the membership into the GC's database.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Free, Bob [mailto:r...@pge.com]
Sent: Thursday, April 12, 2012 1:38 PM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

Volumes have been written about this. There are even those who  disagree 
with Brian's recommendation. I'm not saying any of it is good or bad but a lot 
of smart folks have argued pros and cons of various methodologies over the 
years. You might want to read up on it a little for your own edification.

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:12 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

Sotechnically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What's happening behind the scenes? 
Universal's get copied to GC's and others don't, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn't me), but 
for this function I needed to add a domain local group to it and for course, 
that's not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it's used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn't mean it's right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: [dkim-failure] Re: Domain local vs. global vs. universal

2012-04-12 Thread Free, Bob
Indeed(r)

I resisted the urge to regurgitate the age-old more info link :)

oops, it leaked in

http://kb.ultratech-llc.com/~moreinfo.txt


From: William Robbins [mailto:dangerw...@gmail.com]
Sent: Thursday, April 12, 2012 11:52 AM
To: NT System Admin Issues
Subject: [dkim-failure] Re: Domain local vs. global vs. universal

Recommendations do vary largely depending on requirement's...which are lacking 
in the OP, but since the OP was about "right" in a general sense it makes any 
recommendations subjective.  :)

 - Will

[http://sale.images.woot.com/Air_Quothhs7Detail.png]


On Thu, Apr 12, 2012 at 13:38, Free, Bob mailto:r...@pge.com>> 
wrote:
Volumes have been written about this. There are even those who  disagree 
with Brian's recommendation. I'm not saying any of it is good or bad but a lot 
of smart folks have argued pros and cons of various methodologies over the 
years. You might want to read up on it a little for your own edification.

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:12 AM

To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

Sotechnically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What's happening behind the scenes? 
Universal's get copied to GC's and others don't, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn't me), but 
for this function I needed to add a domain local group to it and for course, 
that's not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it's used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn't mean it's right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 
503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Domain local vs. global vs. universal

2012-04-12 Thread Brian Desmond
GCs always get uni group membership. Universal Group Caching is generally 
speaking not something you want.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 1:33 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

From my reading that's basically it.  But do GC's always get them, or only when 
enabled for universal group caching?

-lc

From: David Lum mailto:david@nwea.org>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:12 PM
Subject: RE: Domain local vs. global vs. universal


So….technically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What’s happening behind the scenes? 
Universal’s get copied to GC’s and others don’t, but what else?

Dave

From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Domain local vs. global vs. universal

2012-04-12 Thread Brian Desmond
Well the impact is that all uni group membership changes replicate to every GC. 
If you’ve got concerns around WAN utilization, availability, latency, etc., 
then this could be worth looking at. In quite a lot of scenarios, the WAN 
issues that existed circa Windows 2000 don’t exist anymore which makes this a 
less interesting discussion point. Without knowing about your customer’s 
environment and scale it’s hard to say.

I would say that it’s highly unlikely that I would design a new multi-domain 
forest except for some pretty isolated and specific design requirements these 
days.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 1:05 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

I too am looking into this for a coming migration I've been asked to design for 
a customer.  What's the impact to GC's by making everything Universal Groups?  
Especially in a multi domain, multi forest environment?

-lc

From: Brian Desmond mailto:br...@briandesmond.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 12:02 PM
Subject: RE: Domain local vs. global vs. universal


In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Domain local vs. global vs. universal

2012-04-12 Thread Brian Desmond
This isn't entirely true. In a single domain forest, the IM has nothing to do 
and every DC should be a GC anyway.

In a multi-domain forest, if every DC is a GC, then the IM has nothing to do 
also.

In a Windows 2008 R2 forest, with the Recycle Bin enabled, the IM has nothing 
to do.

So, that leaves you with a multi-domain forest where every DC in a given domain 
isn't a GC. In this scenario you need to worry about IM placement in that 
domain.


Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Patrick Salmon [mailto:psal...@gmail.com]
Sent: Thursday, April 12, 2012 2:09 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

Every DC except the one holding the Infrastructure Master FSMO role. Only 
because you must have the role somewhere, and it can only reside on a DC. And 
no, other than that no reason at all that I can think of.

Pat.
On Thu, Apr 12, 2012 at 2:48 PM, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this can 
be enabled on any DC, correct?  Is there any reason to not have every DC also 
be a GC?

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:37 PM
Subject: Re: Domain local vs. global vs. universal

Understanding group types:
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Understanding caching of universal groups:

http://technet.microsoft.com/en-us/magazine/ff797984.aspx

 - Will



On Thu, Apr 12, 2012 at 13:32, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
>From my reading that's basically it.  But do GC's always get them, or only 
>when enabled for universal group caching?

-lc

From: David Lum mailto:david@nwea.org>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:12 PM

Subject: RE: Domain local vs. global vs. universal

Sotechnically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What's happening behind the scenes? 
Universal's get copied to GC's and others don't, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn't me), but 
for this function I needed to add a domain local group to it and for course, 
that's not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it's used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn't mean it's right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with 

RE: Domain local vs. global vs. universal

2012-04-12 Thread Brian Desmond
UGC gets enabled on a DC which isn’t a GC. It’s got a lot of side effects and 
strange behaviors. Without a really good reason you should not be going down 
that path.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 1:48 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this can 
be enabled on any DC, correct?  Is there any reason to not have every DC also 
be a GC?

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:37 PM
Subject: Re: Domain local vs. global vs. universal

Understanding group types:
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Understanding caching of universal groups:

http://technet.microsoft.com/en-us/magazine/ff797984.aspx

 - Will

[http://sale.images.woot.com/Air_Quothhs7Detail.png]


On Thu, Apr 12, 2012 at 13:32, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
From my reading that's basically it.  But do GC's always get them, or only when 
enabled for universal group caching?

-lc

From: David Lum mailto:david@nwea.org>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:12 PM

Subject: RE: Domain local vs. global vs. universal

So….technically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What’s happening behind the scenes? 
Universal’s get copied to GC’s and others don’t, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

-

Re: Free eBook: Introducing SQL Server 2012

2012-04-12 Thread Don Kuhlman
Thanks for sharing Mr. MBS

 
Thanks Michael!  Forwarded to our DBAs.
 
From:Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Thursday, April 12, 2012 8:43 AM
To: NT System Admin Issues
Subject: Free eBook: Introducing SQL Server 2012
 
I haven’t read this yet myself, I just downloaded it, but I thought it might 
have wide interest.
 
http://blogs.msdn.com/b/microsoft_press/archive/2012/03/15/free-ebook-introducing-microsoft-sql-server-2012.aspx
 
Regards,
 
Michael B. Smith
Consultant and Exchange MVP
http://theessentialexchange.com/
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Jonathan
and.short of buying new drives?

Not so sure mgmt will go for spending $1,000 on a 10 year old server that
is slated for decom

(yeah, I know, I know)...

Jonathan

On Thu, Apr 12, 2012 at 2:42 PM, William Robbins wrote:

> Agreed.
>
>  - Will
>
>
>
>
>
> On Thu, Apr 12, 2012 at 13:16, Richard Stovall  wrote:
>
>> Order 3 *new* drives, have them overnighted, then proceed with your
>> original plan.
>>
>> http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives
>>
>>
>> On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:
>>
>>> Not sure where to begin on this - I guess it is possible that I've got
>>> two new (refurbed) drives that are bad, but I'm leaning toward it being a
>>> fluke or known bug or compatibility issue. I've Googled till I'm blue
>>> in the face, and I've searched the archives of this list going back more
>>> than a year. We can't retire this server just yet, and I can't P2V it right
>>> now. We're looking to decommission it this year, and replace it with newer
>>> hardware, so for the moment, I'm stuck with it.
>>>
>>> Also, I inherited itit long predated my existence at this company. I
>>> had a drive failure in the RAID1, so I bought two reburb units from a major
>>> channel partner (we are a VAR). The hope was to replace one drive, let it
>>> rebuild, then add the second drive as a hot spare so I wouldn't be in this
>>> bind again. Alas, BOTH of the refurb drives register in the System
>>> Management Homepage with a status of Predictive Failure, Replace Drive. I
>>> know I've read about false positives with S.M.A.R.T. Status under certain
>>> OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't find
>>> anything along those lines right now when I need it. Also, with this being
>>> a COMPAQ branded server, I'm not 100% certain of what I'm looking at on the
>>> HP site, as everything referenced looks like a HP branded server. I wasn't
>>> dealing with HP at the time of the HP Compaq merger, and I never did
>>> anything with Compaq servers...
>>>
>>> I welcome any suggestions offered to get this unit functioning without
>>> drive array errors (if that is possible). Having the drive listed as being
>>> in a degraded state doesn't give me any warm fuzzies, and it is
>>> unfortunately a critical server, so I can't just say, "It's probably not
>>> really an issue." Of course, I can't be guaranteed that there is a valid
>>> backup of this server, and even if there is, getting it back online might
>>> be practically impossible, because like I said, it predates me
>>> significantly and the individuals who configured it are no longer with the
>>> organization and the software application is no longer supported. I do have
>>> original media, but I'd rather not go that route if I don't have to
>>>
>>> Configuration:
>>>
>>> Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1
>>> configuration with no hot spare (like I said, I inherited it)
>>> Running Windows Server 2000 w/SP4 and all available updates
>>> BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23
>>> Mar 2004), but the rev history does not show anything related to SCSI
>>> drives or controllers
>>> ROM Version from the System Management Homepage is 04/02/2001, Family
>>> 386P17, Type 03
>>> Storage Controller is listed as "Compaq Integrated Smart Array
>>> Controller"
>>> Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
>>> version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate
>>> anything that would implicate a false positive for SMART failure
>>> Storage Controller Firmware version is 1.46A - looks like 1.50B dated 22
>>> Oct 2002 is the latest, but can't find any rev notes that tell me what the
>>> fixes are between 1.46A and 1.50B
>>> Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware
>>> version HPB4 and has service hours total of 63,040 hours - this appears
>>> to be the latest firmware for this drive per HP* Document ID: *c00776070
>>> Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
>>> BF0368A4CA has firmware version HPB5 and has service hours total of 19
>>> (yes, nineteen) hours - there is an update HPB5 (C) Dated 18 Jul 2007, but
>>> again, no details in the rev history
>>> Port 2 Drive 2 - New hot spare presently not inserted - (listed as
>>> "Predictive Failure/Replace Drive") COMPAQ BF03685A35 has firmware
>>> version HPB6 and has service hours total of 28,009 hours - there is an
>>> update HPB8 (C) Dated 18 Jul 2007, but again, no details in the rev history
>>> HP system Management Homepage version is 2.0.2.106, 2.1.10.186 (C) (29
>>> Jan 2008) is the latest one listed for this server/OS combination
>>> HP Array Configuration Utility is v 7.61.2.0, which appears to be the
>>> latest
>>> HP Array Diagnostic Utility is v 7.60.18.0, which appears to be the
>>> latest
>>>
>>> This is the only site I've found from HP that comes close to matching my
>>> server:
>>>
>>>
>>> http:/

RE: PC power management

2012-04-12 Thread Rod Trent
Works from an iphone, too
-- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.

"Free, Bob"  wrote:

Our desktop team settled on a product called Night Watchman. I believe it meets 
all your requirements. I know very little about it other than the fact there is 
a web page that I can power up my remote desktop from if I need it J

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Thursday, April 12, 2012 4:41 AM
To: NT System Admin Issues
Subject: PC power management

 

Are any of you using power management products?  These would be products that 
remotely power on/off, enable monitor shutdown, and such.  Our KBox can take 
advantage of WOL, but I've found in testing that it's not always reliable with 
IP changes from DHCP.

 

We tested a few products and I like one called Greentrac.  This uses an agent 
and has been very reliable in testing the hosted version. Unfortunately, they 
run on Ubuntu and XenServer does not officially support that, and I'm not 
inclined to purchase VMWare for a single installation.   There is no other 
installation option.

 

Suggestions anyone?  I'm looking for products that shut down PCs after 
inactivity, starting at a certain time of the day, can put the monitor to 
sleep, can power on PC and power off.  

 

Recommendations appreciated.

 

Thanks

Tom

 

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: [dkim-failure] Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
Quite.  :)

 - Will





On Thu, Apr 12, 2012 at 14:15, Free, Bob  wrote:

>  Indeed®
>
> ** **
>
> I resisted the urge to regurgitate the age-old more info link J
>
> ** **
>
> oops, it leaked in
>
> ** **
>
> http://kb.ultratech-llc.com/~moreinfo.txt
>
> ** **
>
> ** **
>
> *From:* William Robbins [mailto:dangerw...@gmail.com]
> *Sent:* Thursday, April 12, 2012 11:52 AM
>
> *To:* NT System Admin Issues
> *Subject:* [dkim-failure] Re: Domain local vs. global vs. universal
>
> ** **
>
> Recommendations do vary largely depending on requirement's...which are
> lacking in the OP, but since the OP was about "right" in a general sense it
> makes any recommendations subjective.  :)
>
>  - Will
>
>  ** **
>
> 
>
>
>
> 
>
> On Thu, Apr 12, 2012 at 13:38, Free, Bob  wrote:
>
> Volumes have been written about this. There are even those who 
> disagree with Brian’s recommendation. I’m not saying any of it is good or
> bad but a lot of smart folks have argued pros and cons of various
> methodologies over the years. You might want to read up on it a little for
> your own edification.
>
>  
>
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:12 AM
>
>
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
>  
>
> So….technically what is happening when you click that little radio button
> to change group type Local/Global/Universal? What’s happening behind the
> scenes? Universal’s get copied to GC’s and others don’t, but what else?***
> *
>
>  
>
> Dave
>
>  
>
> *From:* Brian Desmond [mailto:br...@briandesmond.com]
> *Sent:* Thursday, April 12, 2012 10:03 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
>  
>
> *In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. *
>
> * *
>
> *Thanks,*
>
> *Brian Desmond*
>
> *br...@briandesmond.com*
>
> * *
>
> *w – 312.625.1438 | c   – 312.731.3132*
>
> * *
>
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
>  
>
> Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
>  
>
> Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
>
> *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
>  
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Apologies, asked question before reading article.  (Face, meet palm)
 
-lc


>
> From: William Robbins 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 2:04 PM
>Subject: Re: Domain local vs. global vs. universal
> 
>
>From the article ma'am:
>
>
>When you enable this feature on a domain operating in Windows Server 2003 or 
>higher functional level, any domain controllercan resolve logon requests 
>locally without having to go through the global catalog server. 
>
>
>As to the DC/GC query, like I stated earlier, it depends on your 
>infrastructure and design requirements...and phase of the moon.  (Save the 
>Infrastructure FSMO, if you have multiple DC's, etc etc etc.)
>
> - Will
>
>
>
>
>
>
>
>
>On Thu, Apr 12, 2012 at 13:48, Lora Cates  wrote:
>
>Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this 
>can be enabled on any DC, correct?  Is there any reason to not have every DC 
>also be a GC?
>> 
>>-lc
>>
>>
>>>
>>> From: William Robbins 
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 1:37 PM
>>>Subject: Re: Domain local vs. global vs. universal
>>> 
>>>
>>>Understanding group types:
>>>http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx 
>>>
>>>
>>>Understanding caching of universal groups:
>>>
>>>
>>>http://technet.microsoft.com/en-us/magazine/ff797984.aspx 
>>>
>>> - Will
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>On Thu, Apr 12, 2012 at 13:32, Lora Cates  wrote:
>>>
>>>From my reading that's basically it.  But do GC's always get them, or only 
>>>when enabled for universal group caching?
 
-lc


>
> From: David Lum 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 1:12 PM
>
>Subject: RE: Domain local vs. global vs. universal
> 
>
>
>So….technically what is happening when you click that little radio button 
>to change group type Local/Global/Universal? What’s happening behind the 
>scenes? Universal’s get copied to GC’s and others don’t, but what else?
> 
>Dave
> 
>From:Brian Desmond [mailto:br...@briandesmond.com] 
>Sent: Thursday, April 12, 2012 10:03 AM
>To: NT System Admin Issues
>Subject: RE: Domain local vs. global vs. universal
> 
>In a single domain forest (or even many multi-domain domain forests 
>today), I would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), 
>but for this function I needed to add a domain local group to it and for 
>course, that’s not possible. Someplace I heard in AD pretty much every 
>group you use should be domain local unless it’s used for Exchange in 
>which case you use Universal.  All groups I create are domain local and it 
>simply works, but I know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus 
>from you guys. Comments?
>David Lum
>Systems Engineer //NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
>>>
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~ 

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
information gathering phase myself as I haven't quite been here 12 days yet, 
and only found this list recently.  So I'll apologize in advance for my faux 
pas.

Basically I was hired to consolidate a plethora of disparate AD domains/forests 
in several geographically dispersed hospital groups into a single forest.  I 
still haven't met with the networking folks, so I don't know what shape the WAN 
is in.  My predecessor went so far as to set up the CompanyX.com parent domain 
and it's empty save the defaults, there is also a child domain of 
US.companyX.com with what appears to be the users from corporate.  I've read 
several debates regarding an empty root.  Is there a consensus on yea vs. nay?

Speaking of reading, and apologies for any offense, are you this Brian Desmond? 
 Active Directory: Designing, Deploying, and Running Active Directory, Fourth 
Edition
-lc


>
> From: Brian Desmond 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 2:16 PM
>Subject: RE: Domain local vs. global vs. universal
> 
>
> 
>Well the impact is that all uni group membership changes replicate to every 
>GC. If you’ve got concerns around WAN utilization, availability, latency, 
>etc., then this could be worth looking at. In quite a lot of scenarios, the 
>WAN issues that existed circa Windows 2000 don’t exist anymore which makes 
>this a less interesting discussion point. Without knowing about your 
>customer’s environment and scale it’s hard to say.
> 
>I would say that it’s highly unlikely that I would design a new multi-domain 
>forest except for some pretty isolated and specific design requirements these 
>days. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
>Sent: Thursday, April 12, 2012 1:05 PM
>To: NT System Admin Issues
>Subject: Re: Domain local vs. global vs. universal
> 
>I too am looking into this for a coming migration I've been asked to design 
>for a customer.  What's the impact to GC's by making everything Universal 
>Groups?  Especially in a multi domain, multi forest environment?
> 
>-lc
>
>
> 
>From:Brian Desmond 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 12:02 PM
>Subject: RE: Domain local vs. global vs. universal
>
>
>
>In a single domain forest (or even many multi-domain domain forests today), I 
>would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>for this function I needed to add a domain local group to it and for course, 
>that’s not possible. Someplace I heard in AD pretty much every group you use 
>should be domain local unless it’s used for Exchange in which case you use 
>Universal.  All groups I create are domain local and it simply works, but I 
>know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus from 
>you guys. Comments?
>David Lum
>Systems Engineer //NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 

Re: GPO Reporting

2012-04-12 Thread James Kerr
Yeah my budget is zero dollars on this unfortunately.

On Thu, Apr 12, 2012 at 11:28 AM, Brian Desmond wrote:

>  *Yep – call Darren @ sdmsoftware.com. He’s got the tools to do this
> right. *
>
> * *
>
> *Thanks,*
>
> *Brian Desmond*
>
> *br...@briandesmond.com*
>
> * *
>
> *w – 312.625.1438 | c   – 312.731.3132*
>
> * *
>
> *From:* Free, Bob [mailto:r...@pge.com]
> *Sent:* Thursday, April 12, 2012 9:38 AM
>
> *To:* NT System Admin Issues
> *Subject:* RE: GPO Reporting
>
>  ** **
>
> There are free scripts provided with GPMC that will pull reports on the
> cheap that you could massage. The one called getreportsforallgpos.wsf (from
> memory, you need to verify exact name) will dump them all into html files
> in a jiffy.
>
> ** **
>
> If you need a more elegant solution, I’d definitely look at Darren’s
> offerings that Chris pointed out. From what I’ve seen it does a better job
> of reporting in many ways than the full featured GPO management tools and I
> toy with the idea of trying to augment the tools I use with it.
>
> ** **
>
> *From:* James Kerr [mailto:cluster...@gmail.com ]
> *Sent:* Thursday, April 12, 2012 7:01 AM
> *To:* NT System Admin Issues
> *Subject:* [dkim-failure] GPO Reporting
>
> ** **
>
> Heh guys,
>
> I'm looking for a way to have some kind of report that would look into
> specified GPOs and list the settings they have. Specifically, I'm trying to
> look at a list of GPOs and determine what drive maps they have. Thanks for
> any assistance.
>
> James
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Jonathan Link
Seldom are there technological solutions for behavioral issues.

  ---Ed Crowley


If management isn't going to sign off on the new drives, then perhaps they
need to accelerate the procurement of new servers.  If they don't do that,
then they need to sign off and acknowledge the risks of their choice.  Of
course, they've likely created the situation you're now dealing with by
refusing to update that equipment years ago in the first place...  So good
luck, honestly!

On Thu, Apr 12, 2012 at 3:34 PM, Jonathan  wrote:

> and.short of buying new drives?
>
> Not so sure mgmt will go for spending $1,000 on a 10 year old server that
> is slated for decom
>
> (yeah, I know, I know)...
>
> Jonathan
>
>
> On Thu, Apr 12, 2012 at 2:42 PM, William Robbins wrote:
>
>> Agreed.
>>
>>  - Will
>>
>>
>>
>>
>>
>> On Thu, Apr 12, 2012 at 13:16, Richard Stovall  wrote:
>>
>>> Order 3 *new* drives, have them overnighted, then proceed with your
>>> original plan.
>>>
>>> http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives
>>>
>>>
>>> On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:
>>>
 Not sure where to begin on this - I guess it is possible that I've got
 two new (refurbed) drives that are bad, but I'm leaning toward it being a
 fluke or known bug or compatibility issue. I've Googled till I'm blue
 in the face, and I've searched the archives of this list going back more
 than a year. We can't retire this server just yet, and I can't P2V it right
 now. We're looking to decommission it this year, and replace it with newer
 hardware, so for the moment, I'm stuck with it.

 Also, I inherited itit long predated my existence at this company.
 I had a drive failure in the RAID1, so I bought two reburb units from a
 major channel partner (we are a VAR). The hope was to replace one drive,
 let it rebuild, then add the second drive as a hot spare so I wouldn't be
 in this bind again. Alas, BOTH of the refurb drives register in the System
 Management Homepage with a status of Predictive Failure, Replace Drive. I
 know I've read about false positives with S.M.A.R.T. Status under certain
 OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't find
 anything along those lines right now when I need it. Also, with this being
 a COMPAQ branded server, I'm not 100% certain of what I'm looking at on the
 HP site, as everything referenced looks like a HP branded server. I wasn't
 dealing with HP at the time of the HP Compaq merger, and I never did
 anything with Compaq servers...

 I welcome any suggestions offered to get this unit functioning without
 drive array errors (if that is possible). Having the drive listed as being
 in a degraded state doesn't give me any warm fuzzies, and it is
 unfortunately a critical server, so I can't just say, "It's probably not
 really an issue." Of course, I can't be guaranteed that there is a valid
 backup of this server, and even if there is, getting it back online might
 be practically impossible, because like I said, it predates me
 significantly and the individuals who configured it are no longer with the
 organization and the software application is no longer supported. I do have
 original media, but I'd rather not go that route if I don't have to

 Configuration:

 Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1
 configuration with no hot spare (like I said, I inherited it)
 Running Windows Server 2000 w/SP4 and all available updates
 BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23
 Mar 2004), but the rev history does not show anything related to SCSI
 drives or controllers
 ROM Version from the System Management Homepage is 04/02/2001, Family
 386P17, Type 03
 Storage Controller is listed as "Compaq Integrated Smart Array
 Controller"
 Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
 version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate
 anything that would implicate a false positive for SMART failure
 Storage Controller Firmware version is 1.46A - looks like 1.50B dated
 22 Oct 2002 is the latest, but can't find any rev notes that tell me what
 the fixes are between 1.46A and 1.50B
 Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware
 version HPB4 and has service hours total of 63,040 hours - this
 appears to be the latest firmware for this drive per HP* Document ID: *
 c00776070
 Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
 BF0368A4CA has firmware version HPB5 and has service hours total of 19
 (yes, nineteen) hours - there is an update HPB5 (C) Dated 18 Jul 2007, but
 again, no details in the rev history
 Port 2 Drive 2 - New hot spare presently not inserted - (listed as
 "Predictive Failu

Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
It happens...just don't let it happen again or there will be lashes
assessed.  :P

 - Will

On Thu, Apr 12, 2012 at 14:55, Lora Cates  wrote:

> Apologies, asked question before reading article.  (Face, meet palm)
>
> -lc
>
>   --
> *From:* William Robbins 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 2:04 PM
> *Subject:* Re: Domain local vs. global vs. universal
>
> From the article ma'am:
>
> When you enable this feature on a domain operating in Windows Server 2003
> or higher functional level, any domain controller can resolve logon
> requests locally without having to go through the global catalog server.
>
> As to the DC/GC query, like I stated earlier, it depends on your
> infrastructure and design requirements...and phase of the moon.  (Save the
> Infrastructure FSMO, if you have multiple DC's, etc etc etc.)
>
>  - Will
>
>
>
>
>
> On Thu, Apr 12, 2012 at 13:48, Lora Cates wrote:
>
> Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear
> this can be enabled on any DC, correct?  Is there any reason to not have
> every DC also be a GC?
>
> -lc
>
>   --
> *From:* William Robbins 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 1:37 PM
> *Subject:* Re: Domain local vs. global vs. universal
>
> Understanding group types:
> http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx
>
> Understanding caching of universal groups:
>
> http://technet.microsoft.com/en-us/magazine/ff797984.aspx
>
>  - Will
>
>
>
>
>
> On Thu, Apr 12, 2012 at 13:32, Lora Cates wrote:
>
> From my reading that's basically it.  But do GC's always get them, or only
> when enabled for universal group caching?
>
> -lc
>
>   --
> *From:* David Lum 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 1:12 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
> So….technically what is happening when you click that little radio button
> to change group type Local/Global/Universal? What’s happening behind the
> scenes? Universal’s get copied to GC’s and others don’t, but what else?
>
> Dave
>
> *From:* Brian Desmond [mailto:br...@briandesmond.com]
> *Sent:* Thursday, April 12, 2012 10:03 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Domain local vs. global vs. universal
>
> *In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. ***
> *  *
> *Thanks,*
> *Brian Desmond*
> *br...@briandesmond.com*
> *  *
> *w – 312.625.1438 | c   – 312.731.3132*
> *  *
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
> Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
> Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
> *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an emai

Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Richard Stovall
Using the link I sent, 3 new HP 36GB 15K drives shipped for next morning
10:30 AM delivery to Virginia are $428.21 all in.

Don't really know where the $1,000 price tag is coming from unless the
drives specified above won't work for some reason.

If your management won't spring for new ones, I've got a room full of them
(10K) that I'll send for $100 bucks a piece.  Ground shipping included.  :)

Seriously, explain the difference between $1,000 bucks now and all the time
later required to rebuild the thing from backups.

On Thu, Apr 12, 2012 at 3:34 PM, Jonathan  wrote:

> and.short of buying new drives?
>
> Not so sure mgmt will go for spending $1,000 on a 10 year old server that
> is slated for decom
>
> (yeah, I know, I know)...
>
> Jonathan
>
>
> On Thu, Apr 12, 2012 at 2:42 PM, William Robbins wrote:
>
>> Agreed.
>>
>>  - Will
>>
>>
>>
>>
>>
>> On Thu, Apr 12, 2012 at 13:16, Richard Stovall  wrote:
>>
>>> Order 3 *new* drives, have them overnighted, then proceed with your
>>> original plan.
>>>
>>> http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives
>>>
>>>
>>> On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:
>>>
 Not sure where to begin on this - I guess it is possible that I've got
 two new (refurbed) drives that are bad, but I'm leaning toward it being a
 fluke or known bug or compatibility issue. I've Googled till I'm blue
 in the face, and I've searched the archives of this list going back more
 than a year. We can't retire this server just yet, and I can't P2V it right
 now. We're looking to decommission it this year, and replace it with newer
 hardware, so for the moment, I'm stuck with it.

 Also, I inherited itit long predated my existence at this company.
 I had a drive failure in the RAID1, so I bought two reburb units from a
 major channel partner (we are a VAR). The hope was to replace one drive,
 let it rebuild, then add the second drive as a hot spare so I wouldn't be
 in this bind again. Alas, BOTH of the refurb drives register in the System
 Management Homepage with a status of Predictive Failure, Replace Drive. I
 know I've read about false positives with S.M.A.R.T. Status under certain
 OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't find
 anything along those lines right now when I need it. Also, with this being
 a COMPAQ branded server, I'm not 100% certain of what I'm looking at on the
 HP site, as everything referenced looks like a HP branded server. I wasn't
 dealing with HP at the time of the HP Compaq merger, and I never did
 anything with Compaq servers...

 I welcome any suggestions offered to get this unit functioning without
 drive array errors (if that is possible). Having the drive listed as being
 in a degraded state doesn't give me any warm fuzzies, and it is
 unfortunately a critical server, so I can't just say, "It's probably not
 really an issue." Of course, I can't be guaranteed that there is a valid
 backup of this server, and even if there is, getting it back online might
 be practically impossible, because like I said, it predates me
 significantly and the individuals who configured it are no longer with the
 organization and the software application is no longer supported. I do have
 original media, but I'd rather not go that route if I don't have to

 Configuration:

 Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1
 configuration with no hot spare (like I said, I inherited it)
 Running Windows Server 2000 w/SP4 and all available updates
 BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23
 Mar 2004), but the rev history does not show anything related to SCSI
 drives or controllers
 ROM Version from the System Management Homepage is 04/02/2001, Family
 386P17, Type 03
 Storage Controller is listed as "Compaq Integrated Smart Array
 Controller"
 Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
 version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate
 anything that would implicate a false positive for SMART failure
 Storage Controller Firmware version is 1.46A - looks like 1.50B dated
 22 Oct 2002 is the latest, but can't find any rev notes that tell me what
 the fixes are between 1.46A and 1.50B
 Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware
 version HPB4 and has service hours total of 63,040 hours - this
 appears to be the latest firmware for this drive per HP* Document ID: *
 c00776070
 Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
 BF0368A4CA has firmware version HPB5 and has service hours total of 19
 (yes, nineteen) hours - there is an update HPB5 (C) Dated 18 Jul 2007, but
 again, no details in the rev history
 Port 2 Drive 2 - New hot spare present

RE: Post-update reboot detection

2012-04-12 Thread Heaton, Joseph@DFG
SCCM :)

Joe Heaton
ITB - Windows Server Support

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Thursday, April 12, 2012 10:28 AM
To: Heaton, Joseph@DFG; NT System Admin Issues
Subject: Post-update reboot detection

Hi everyone,

I'm currently researching a scriptable way to detect if a system has a 
post-update pending reboot status.  So far the only clearly identifiable marker 
I have found is existance of the registry key:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto 
Update\RebootRequired


I was curious if anyone has worked on anything like this before, and would be 
able to share some insight or ideas/methods.  Thanks!

--
Espi



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Blast From The Antivirus Past - You may have seen this classic:

2012-04-12 Thread Stu Sjouwerman
Remember MS-DOS Version 6? It was released March 1993. The new 6.0 had a lot of 
new stuff including a basic anti-virus program and a disk defragmenter. Other 
improvements were in the memory management area by the addition of MEMMAKER.

Now, how did you get your anti-virus updates? You had to buy them! Here is a 
3-page PDF that shows how. First the instructions how to get a user ID. Grab 
your 9600 baud modem and dial their Bulletin Board System (BBS). Next follow 
the download instructions to get your AV updates. The third page is the promo 
where they sold you on getting a whopping whole TWO anti-virus updates for as 
little as $9.95 each. Add the sales tax on top of that. Oh boy, what a deal.

Here is my blog post with the link:

http://blog.knowbe4.com/blast-from-the-antivirus-past

Warm regards,
Stu

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: [dkim-failure] Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Well though I think intended partly in jest, that was a good article.  Thanks.  

Like I mentioned before, I'm still gathering info myself, and this topic was 
apropos to the research and planning I'll be doing to consolidate AD gone wild 
here.
 
-lc


>
> From: "Free, Bob" 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 2:15 PM
>Subject: RE: [dkim-failure] Re: Domain local vs. global vs. universal
> 
>
> 
>Indeed®
> 
>I resisted the urge to regurgitate the age-old more info link J
> 
>oops, it leaked in
> 
>http://kb.ultratech-llc.com/~moreinfo.txt
> 
> 
>From:William Robbins [mailto:dangerw...@gmail.com] 
>Sent: Thursday, April 12, 2012 11:52 AM
>To: NT System Admin Issues
>Subject: [dkim-failure] Re: Domain local vs. global vs. universal
> 
>Recommendations do vary largely depending on requirement's...which are lacking 
>in the OP, but since the OP was about "right" in a general sense it makes any 
>recommendations subjective.  :)
>
> - Will
> 
>
>
>
>On Thu, Apr 12, 2012 at 13:38, Free, Bob  wrote:
>Volumes have been written about this. There are even those who  disagree 
>with Brian’s recommendation. I’m not saying any of it is good or bad but a lot 
>of smart folks have argued pros and cons of various methodologies over the 
>years. You might want to read up on it a little for your own edification.
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:12 AM
>
>To: NT System Admin Issues
>Subject: RE: Domain local vs. global vs. universal
> 
>So….technically what is happening when you click that little radio button to 
>change group type Local/Global/Universal? What’s happening behind the scenes? 
>Universal’s get copied to GC’s and others don’t, but what else?
> 
>Dave
> 
>From:Brian Desmond [mailto:br...@briandesmond.com] 
>Sent: Thursday, April 12, 2012 10:03 AM
>To: NT System Admin Issues
>Subject: RE: Domain local vs. global vs. universal
> 
>In a single domain forest (or even many multi-domain domain forests today), I 
>would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>for this function I needed to add a domain local group to it and for course, 
>that’s not possible. Someplace I heard in AD pretty much every group you use 
>should be domain local unless it’s used for Exchange in which case you use 
>Universal.  All groups I create are domain local and it simply works, but I 
>know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus from 
>you guys. Comments?
>David Lum
>Systems Engineer // NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog

Re: Domain local vs. global vs. universal

2012-04-12 Thread Cameron
http://briandesmond.com/



On Thu, Apr 12, 2012 at 4:08 PM, Lora Cates wrote:

>  Well I've inherited what I'll kindly refer to as a "mess."  I'm still in
> the information gathering phase myself as I haven't quite been here 12 days
> yet, and only found this list recently.  So I'll apologize in advance for
> my faux pas.
>
> Basically I was hired to consolidate a plethora of disparate AD
> domains/forests in several geographically dispersed hospital groups into a
> single forest.  I still haven't met with the networking folks, so I don't
> know what shape the WAN is in.  My predecessor went so far as to set up the
> CompanyX.com parent domain and it's empty save the defaults, there is
> also a child domain of US.companyX.com  with
> what appears to be the users from corporate.  I've read several debates
> regarding an empty root.  Is there a consensus on yea vs. nay?
>
> Speaking of reading, and apologies for any offense, are you this Brian
> Desmond?  Active Directory: Designing, Deploying, and Running Active
> Directory, Fourth Edition
> -lc
>
>   --
> *From:* Brian Desmond 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 2:16 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
>   *Well the impact is that all uni group membership changes replicate to
> every GC. If you’ve got concerns around WAN utilization, availability,
> latency, etc., then this could be worth looking at. In quite a lot of
> scenarios, the WAN issues that existed circa Windows 2000 don’t exist
> anymore which makes this a less interesting discussion point. Without
> knowing about your customer’s environment and scale it’s hard to say.*
> * *
> *I would say that it’s highly unlikely that I would design a new
> multi-domain forest except for some pretty isolated and specific design
> requirements these days. *
> * *
>  *Thanks,*
> *Brian Desmond*
> *br...@briandesmond.com*
> * *
> *w – 312.625.1438 | c   – 312.731.3132*
> * *
>  *From:* Lora Cates [mailto:lora.ca...@rocketmail.com]
> *Sent:* Thursday, April 12, 2012 1:05 PM
>
> *To:* NT System Admin Issues
> *Subject:* Re: Domain local vs. global vs. universal
>
>   I too am looking into this for a coming migration I've been asked to
> design for a customer.  What's the impact to GC's by making everything
> Universal Groups?  Especially in a multi domain, multi forest environment?
>
>  -lc
>   --
>  *From:* Brian Desmond 
>
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 12:02 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
>
>*In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. *
>  * *
>  *Thanks,*
>  *Brian Desmond*
>  *br...@briandesmond.com*
>  * *
>  *w – 312.625.1438 | c   – 312.731.3132*
>  * *
>   *From:* David Lum [mailto:david@nwea.org ]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
>  Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
>  Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
>  *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
>

Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
I'm not entering into the "empty root" arena again.  :)  I will answer the
last query.  He is that Brian Desmond...which is why I shan't enter that
arena again.

 - Will





On Thu, Apr 12, 2012 at 15:08, Lora Cates  wrote:

> Well I've inherited what I'll kindly refer to as a "mess."  I'm still in
> the information gathering phase myself as I haven't quite been here 12 days
> yet, and only found this list recently.  So I'll apologize in advance for
> my faux pas.
>
> Basically I was hired to consolidate a plethora of disparate AD
> domains/forests in several geographically dispersed hospital groups into a
> single forest.  I still haven't met with the networking folks, so I don't
> know what shape the WAN is in.  My predecessor went so far as to set up the
> CompanyX.com parent domain and it's empty save the defaults, there is
> also a child domain of US.companyX.com with what appears to be the users
> from corporate.  I've read several debates regarding an empty root.  Is
> there a consensus on yea vs. nay?
>
> Speaking of reading, and apologies for any offense, are you this Brian
> Desmond?  Active Directory: Designing, Deploying, and Running Active
> Directory, Fourth Edition
> -lc
>
>   --
> *From:* Brian Desmond 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 2:16 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
>   *Well the impact is that all uni group membership changes replicate to
> every GC. If you’ve got concerns around WAN utilization, availability,
> latency, etc., then this could be worth looking at. In quite a lot of
> scenarios, the WAN issues that existed circa Windows 2000 don’t exist
> anymore which makes this a less interesting discussion point. Without
> knowing about your customer’s environment and scale it’s hard to say.*
> *  *
> *I would say that it’s highly unlikely that I would design a new
> multi-domain forest except for some pretty isolated and specific design
> requirements these days. *
> *  *
>  *Thanks,*
> *Brian Desmond*
> *br...@briandesmond.com*
> *  *
> *w – 312.625.1438 | c   – 312.731.3132*
>  *  *
>  *From:* Lora Cates [mailto:lora.ca...@rocketmail.com]
> *Sent:* Thursday, April 12, 2012 1:05 PM
>
> *To:* NT System Admin Issues
> *Subject:* Re: Domain local vs. global vs. universal
>
>  I too am looking into this for a coming migration I've been asked to
> design for a customer.  What's the impact to GC's by making everything
> Universal Groups?  Especially in a multi domain, multi forest environment?
>
>  -lc
>--
>  *From:* Brian Desmond 
>
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 12:02 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
>
>*In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. *
>  * *
>   *Thanks,*
>  *Brian Desmond*
>  *br...@briandesmond.com*
>  * *
>  *w – 312.625.1438 | c   – 312.731.3132*
>   * *
>   *From:* David Lum [mailto:david@nwea.org ]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
>  Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
>  Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
>  *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptio

RE: GPO Reporting

2012-04-12 Thread Guyer, Donald
Might be enough to get you what you need for now:

http://www.scriptlogic.com/products/gpoadmin/

Regards,

Don Guyer
Directory and Messaging Services
Catholic Health East, ITSS

From: James Kerr [mailto:cluster...@gmail.com]
Sent: Thursday, April 12, 2012 4:11 PM
To: NT System Admin Issues
Subject: Re: GPO Reporting

Yeah my budget is zero dollars on this unfortunately.
On Thu, Apr 12, 2012 at 11:28 AM, Brian Desmond 
mailto:br...@briandesmond.com>> wrote:
Yep - call Darren @ sdmsoftware.com. He's got the tools to do this right.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Free, Bob [mailto:r...@pge.com]
Sent: Thursday, April 12, 2012 9:38 AM

To: NT System Admin Issues
Subject: RE: GPO Reporting

There are free scripts provided with GPMC that will pull reports on the cheap 
that you could massage. The one called getreportsforallgpos.wsf (from memory, 
you need to verify exact name) will dump them all into html files in a jiffy.

If you need a more elegant solution, I'd definitely look at Darren's offerings 
that Chris pointed out. From what I've seen it does a better job of reporting 
in many ways than the full featured GPO management tools and I toy with the 
idea of trying to augment the tools I use with it.

From: James Kerr [mailto:cluster...@gmail.com]
Sent: Thursday, April 12, 2012 7:01 AM
To: NT System Admin Issues
Subject: [dkim-failure] GPO Reporting

Heh guys,

I'm looking for a way to have some kind of report that would look into 
specified GPOs and list the settings they have. Specifically, I'm trying to 
look at a list of GPOs and determine what drive maps they have. Thanks for any 
assistance.

James

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Confidentiality Notice:
This e-mail, including any attachments is the 
property of Catholic Health East and is intended 
for the sole use of the intended recipient(s).  
It may contain information that is privileged and 
confidential.  Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are 
not the intended recipient, please delete this message, and 
reply to the sender regarding the error in a separate email.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Domain local vs. global vs. universal

2012-04-12 Thread Free, Bob
Lora meet Brian Desmond, author, Directory Services MVP, Conference Speaker and 
all around GoodGuy™

Consensus on empty root these days is pretty much against unless you have a 
really good reason.

I have 2 forests built that way in the past here back when that was the 
prescriptive guidance but the last one I did was a single domain.

Many discussions on activdir over the years on the subject, one fairly 
recently.  If you want to see some prolonged discussions look in the archives 
there.

google ‘empty forest root site:activedir.org’

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 1:09 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
information gathering phase myself as I haven't quite been here 12 days yet, 
and only found this list recently.  So I'll apologize in advance for my faux 
pas.

Basically I was hired to consolidate a plethora of disparate AD domains/forests 
in several geographically dispersed hospital groups into a single forest.  I 
still haven't met with the networking folks, so I don't know what shape the WAN 
is in.  My predecessor went so far as to set up the CompanyX.com parent domain 
and it's empty save the defaults, there is also a child domain of 
US.companyX.com with what appears to be the users from corporate.  I've read 
several debates regarding an empty root.  Is there a consensus on yea vs. nay?

Speaking of reading, and apologies for any offense, are you this Brian Desmond? 
 Active Directory: Designing, Deploying, and Running Active Directory, Fourth 
Edition
-lc

From: Brian Desmond mailto:br...@briandesmond.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 2:16 PM
Subject: RE: Domain local vs. global vs. universal


Well the impact is that all uni group membership changes replicate to every GC. 
If you’ve got concerns around WAN utilization, availability, latency, etc., 
then this could be worth looking at. In quite a lot of scenarios, the WAN 
issues that existed circa Windows 2000 don’t exist anymore which makes this a 
less interesting discussion point. Without knowing about your customer’s 
environment and scale it’s hard to say.

I would say that it’s highly unlikely that I would design a new multi-domain 
forest except for some pretty isolated and specific design requirements these 
days.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: Lora Cates 
[mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 1:05 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

I too am looking into this for a coming migration I've been asked to design for 
a customer.  What's the impact to GC's by making everything Universal Groups?  
Especially in a multi domain, multi forest environment?

-lc

From: Brian Desmond mailto:br...@briandesmond.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 12:02 PM
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com

RE: [dkim-failure] Re: GPO Reporting

2012-04-12 Thread Free, Bob
Maybe you could get the trial and prove the value?

Otherwise my offer of getreportsforallgpos.wsf for free from MS still stands :-]

You might find the capability in SCM, I don't use it because I have a 
commercial GPO product but it looks pretty interesting. Our desktop guy uses it 
in his offline dev forest and what I've seen over some conf calls looked 
interesting.

http://www.grouppolicy.biz/2012/04/security-compliance-manager-scm-v2-5-out-now/


From: James Kerr [mailto:cluster...@gmail.com]
Sent: Thursday, April 12, 2012 1:11 PM
To: NT System Admin Issues
Subject: [dkim-failure] Re: GPO Reporting

Yeah my budget is zero dollars on this unfortunately.
On Thu, Apr 12, 2012 at 11:28 AM, Brian Desmond 
mailto:br...@briandesmond.com>> wrote:
Yep - call Darren @ sdmsoftware.com. He's got the tools to do this right.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Free, Bob [mailto:r...@pge.com]
Sent: Thursday, April 12, 2012 9:38 AM

To: NT System Admin Issues
Subject: RE: GPO Reporting

There are free scripts provided with GPMC that will pull reports on the cheap 
that you could massage. The one called getreportsforallgpos.wsf (from memory, 
you need to verify exact name) will dump them all into html files in a jiffy.

If you need a more elegant solution, I'd definitely look at Darren's offerings 
that Chris pointed out. From what I've seen it does a better job of reporting 
in many ways than the full featured GPO management tools and I toy with the 
idea of trying to augment the tools I use with it.

From: James Kerr [mailto:cluster...@gmail.com]
Sent: Thursday, April 12, 2012 7:01 AM
To: NT System Admin Issues
Subject: [dkim-failure] GPO Reporting

Heh guys,

I'm looking for a way to have some kind of report that would look into 
specified GPOs and list the settings they have. Specifically, I'm trying to 
look at a list of GPOs and determine what drive maps they have. Thanks for any 
assistance.

James

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Jonathan
Like I saidI know, I know...

On Thu, Apr 12, 2012 at 4:16 PM, Jonathan Link wrote:

> Seldom are there technological solutions for behavioral issues.
>
>   ---Ed Crowley
>
>
> If management isn't going to sign off on the new drives, then perhaps they
> need to accelerate the procurement of new servers.  If they don't do that,
> then they need to sign off and acknowledge the risks of their choice.  Of
> course, they've likely created the situation you're now dealing with by
> refusing to update that equipment years ago in the first place...  So good
> luck, honestly!
>
> On Thu, Apr 12, 2012 at 3:34 PM, Jonathan  wrote:
>
>> and.short of buying new drives?
>>
>> Not so sure mgmt will go for spending $1,000 on a 10 year old server that
>> is slated for decom
>>
>> (yeah, I know, I know)...
>>
>> Jonathan
>>
>>
>> On Thu, Apr 12, 2012 at 2:42 PM, William Robbins wrote:
>>
>>> Agreed.
>>>
>>>  - Will
>>>
>>>
>>>
>>>
>>>
>>> On Thu, Apr 12, 2012 at 13:16, Richard Stovall wrote:
>>>
 Order 3 *new* drives, have them overnighted, then proceed with your
 original plan.

 http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives


 On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:

> Not sure where to begin on this - I guess it is possible that I've got
> two new (refurbed) drives that are bad, but I'm leaning toward it being a
> fluke or known bug or compatibility issue. I've Googled till I'm blue
> in the face, and I've searched the archives of this list going back more
> than a year. We can't retire this server just yet, and I can't P2V it 
> right
> now. We're looking to decommission it this year, and replace it with newer
> hardware, so for the moment, I'm stuck with it.
>
> Also, I inherited itit long predated my existence at this company.
> I had a drive failure in the RAID1, so I bought two reburb units from a
> major channel partner (we are a VAR). The hope was to replace one drive,
> let it rebuild, then add the second drive as a hot spare so I wouldn't be
> in this bind again. Alas, BOTH of the refurb drives register in the System
> Management Homepage with a status of Predictive Failure, Replace Drive. I
> know I've read about false positives with S.M.A.R.T. Status under certain
> OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't 
> find
> anything along those lines right now when I need it. Also, with this being
> a COMPAQ branded server, I'm not 100% certain of what I'm looking at on 
> the
> HP site, as everything referenced looks like a HP branded server. I wasn't
> dealing with HP at the time of the HP Compaq merger, and I never did
> anything with Compaq servers...
>
> I welcome any suggestions offered to get this unit functioning without
> drive array errors (if that is possible). Having the drive listed as being
> in a degraded state doesn't give me any warm fuzzies, and it is
> unfortunately a critical server, so I can't just say, "It's probably not
> really an issue." Of course, I can't be guaranteed that there is a valid
> backup of this server, and even if there is, getting it back online might
> be practically impossible, because like I said, it predates me
> significantly and the individuals who configured it are no longer with the
> organization and the software application is no longer supported. I do 
> have
> original media, but I'd rather not go that route if I don't have to
>
> Configuration:
>
> Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1
> configuration with no hot spare (like I said, I inherited it)
> Running Windows Server 2000 w/SP4 and all available updates
> BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B)
> (23 Mar 2004), but the rev history does not show anything related to SCSI
> drives or controllers
> ROM Version from the System Management Homepage is 04/02/2001, Family
> 386P17, Type 03
> Storage Controller is listed as "Compaq Integrated Smart Array
> Controller"
> Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
> version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't 
> notate
> anything that would implicate a false positive for SMART failure
> Storage Controller Firmware version is 1.46A - looks like 1.50B dated
> 22 Oct 2002 is the latest, but can't find any rev notes that tell me what
> the fixes are between 1.46A and 1.50B
> Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware
> version HPB4 and has service hours total of 63,040 hours - this
> appears to be the latest firmware for this drive per HP* Document ID:
> *c00776070
> Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
> BF0368A4CA has firmware version HPB5 and has service ho

Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Jonathan
DOH! I was looking at the wrong partmore than double the price of the
CORRECT one @ $125 each.

My mistakeI'm under the weather, and was in a hurry to boot...

Thanks,

Jonathan

On Thu, Apr 12, 2012 at 4:28 PM, Richard Stovall  wrote:

> Using the link I sent, 3 new HP 36GB 15K drives shipped for next morning
> 10:30 AM delivery to Virginia are $428.21 all in.
>
> Don't really know where the $1,000 price tag is coming from unless the
> drives specified above won't work for some reason.
>
> If your management won't spring for new ones, I've got a room full of them
> (10K) that I'll send for $100 bucks a piece.  Ground shipping included.  :)
>
> Seriously, explain the difference between $1,000 bucks now and all the
> time later required to rebuild the thing from backups.
>
> On Thu, Apr 12, 2012 at 3:34 PM, Jonathan  wrote:
>
>> and.short of buying new drives?
>>
>> Not so sure mgmt will go for spending $1,000 on a 10 year old server that
>> is slated for decom
>>
>> (yeah, I know, I know)...
>>
>> Jonathan
>>
>>
>> On Thu, Apr 12, 2012 at 2:42 PM, William Robbins wrote:
>>
>>> Agreed.
>>>
>>>  - Will
>>>
>>>
>>>
>>>
>>>
>>> On Thu, Apr 12, 2012 at 13:16, Richard Stovall wrote:
>>>
 Order 3 *new* drives, have them overnighted, then proceed with your
 original plan.

 http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives


 On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:

> Not sure where to begin on this - I guess it is possible that I've got
> two new (refurbed) drives that are bad, but I'm leaning toward it being a
> fluke or known bug or compatibility issue. I've Googled till I'm blue
> in the face, and I've searched the archives of this list going back more
> than a year. We can't retire this server just yet, and I can't P2V it 
> right
> now. We're looking to decommission it this year, and replace it with newer
> hardware, so for the moment, I'm stuck with it.
>
> Also, I inherited itit long predated my existence at this company.
> I had a drive failure in the RAID1, so I bought two reburb units from a
> major channel partner (we are a VAR). The hope was to replace one drive,
> let it rebuild, then add the second drive as a hot spare so I wouldn't be
> in this bind again. Alas, BOTH of the refurb drives register in the System
> Management Homepage with a status of Predictive Failure, Replace Drive. I
> know I've read about false positives with S.M.A.R.T. Status under certain
> OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't 
> find
> anything along those lines right now when I need it. Also, with this being
> a COMPAQ branded server, I'm not 100% certain of what I'm looking at on 
> the
> HP site, as everything referenced looks like a HP branded server. I wasn't
> dealing with HP at the time of the HP Compaq merger, and I never did
> anything with Compaq servers...
>
> I welcome any suggestions offered to get this unit functioning without
> drive array errors (if that is possible). Having the drive listed as being
> in a degraded state doesn't give me any warm fuzzies, and it is
> unfortunately a critical server, so I can't just say, "It's probably not
> really an issue." Of course, I can't be guaranteed that there is a valid
> backup of this server, and even if there is, getting it back online might
> be practically impossible, because like I said, it predates me
> significantly and the individuals who configured it are no longer with the
> organization and the software application is no longer supported. I do 
> have
> original media, but I'd rather not go that route if I don't have to
>
> Configuration:
>
> Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1
> configuration with no hot spare (like I said, I inherited it)
> Running Windows Server 2000 w/SP4 and all available updates
> BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B)
> (23 Mar 2004), but the rev history does not show anything related to SCSI
> drives or controllers
> ROM Version from the System Management Homepage is 04/02/2001, Family
> 386P17, Type 03
> Storage Controller is listed as "Compaq Integrated Smart Array
> Controller"
> Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
> version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't 
> notate
> anything that would implicate a false positive for SMART failure
> Storage Controller Firmware version is 1.46A - looks like 1.50B dated
> 22 Oct 2002 is the latest, but can't find any rev notes that tell me what
> the fixes are between 1.46A and 1.50B
> Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware
> version HPB4 and has service hours total of 63,040 hours - this
> appears to be th

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
My, my!  What happens were I to like it?  ;)
 
-lc


>
> From: William Robbins 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 3:26 PM
>Subject: Re: Domain local vs. global vs. universal
> 
>
>It happens...just don't let it happen again or there will be lashes assessed.  
>:P
>
> - Will
>
>
>On Thu, Apr 12, 2012 at 14:55, Lora Cates  wrote:
>Apologies, asked question before reading article.  (Face, meet palm)
>> 
>>-lc
>>
>>
>>>
>>> From: William Robbins 
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 2:04 PM
>>>Subject: Re: Domain local vs. global vs. universal
>>> 
>>>
>>>From the article ma'am:
>>>
>>>
>>>When you enable this feature on a domain operating in Windows Server 2003 or 
>>>higher functional level, any domain controllercan resolve logon requests 
>>>locally without having to go through the global catalog server. 
>>>
>>>
>>>As to the DC/GC query, like I stated earlier, it depends on your 
>>>infrastructure and design requirements...and phase of the moon.  (Save the 
>>>Infrastructure FSMO, if you have multiple DC's, etc etc etc.)
>>>
>>> - Will
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>On Thu, Apr 12, 2012 at 13:48, Lora Cates  wrote:
>>>
>>>Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this 
>>>can be enabled on any DC, correct?  Is there any reason to not have every DC 
>>>also be a GC?
 
-lc


>
> From: William Robbins 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 1:37 PM
>Subject: Re: Domain local vs. global vs. universal
> 
>
>Understanding group types:
>http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx 
>
>
>Understanding caching of universal groups:
>
>
>http://technet.microsoft.com/en-us/magazine/ff797984.aspx 
>
> - Will
>
>
>
>
>
>
>
>
>On Thu, Apr 12, 2012 at 13:32, Lora Cates  
>wrote:
>
>From my reading that's basically it.  But do GC's always get them, or only 
>when enabled for universal group caching?
>> 
>>-lc
>>
>>
>>>
>>> From: David Lum 
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 1:12 PM
>>>
>>>Subject: RE: Domain local vs. global vs. universal
>>> 
>>>
>>>
>>>So….technically what is happening when you click that little radio 
>>>button to change group type Local/Global/Universal? What’s happening 
>>>behind the scenes? Universal’s get copied to GC’s and others don’t, but 
>>>what else?
>>> 
>>>Dave
>>> 
>>>From:Brian Desmond [mailto:br...@briandesmond.com] 
>>>Sent: Thursday, April 12, 2012 10:03 AM
>>>To: NT System Admin Issues
>>>Subject: RE: Domain local vs. global vs. universal
>>> 
>>>In a single domain forest (or even many multi-domain domain forests 
>>>today), I would just do all uni groups. 
>>> 
>>>Thanks,
>>>Brian Desmond
>>>br...@briandesmond.com
>>> 
>>>w – 312.625.1438 | c   – 312.731.3132
>>> 
>>>From:David Lum [mailto:david@nwea.org] 
>>>Sent: Thursday, April 12, 2012 11:28 AM
>>>To: NT System Admin Issues
>>>Subject: Domain local vs. global vs. universal
>>> 
>>>Today I found a global group in my AD (created by an SE that wasn’t me), 
>>>but for this function I needed to add a domain local group to it and for 
>>>course, that’s not possible. Someplace I heard in AD pretty much every 
>>>group you use should be domain local unless it’s used for Exchange in 
>>>which case you use Universal.  All groups I create are domain local and 
>>>it simply works, but I know that doesn’t mean it’s right.
>>> 
>>>Before sending a note to the SE team on this I wanted to get a consensus 
>>>from you guys. Comments?
>>>David Lum
>>>Systems Engineer //NWEATM
>>>Office 503.548.5229//Cell (voice/text) 503.267.9764
>>> 
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>

Re: Blast From The Antivirus Past - You may have seen this classic:

2012-04-12 Thread Lora Cates
I remember that!  I don't recall that many people going for it though.  :)  
Wasn't that the stripped down version of the Norton A/V?
 
-lc


>
> From: Stu Sjouwerman 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 3:32 PM
>Subject: Blast From The Antivirus Past - You may have seen this classic:
> 
>Remember MS-DOS Version 6? It was released March 1993. The new 6.0 had a lot 
>of new stuff including a basic anti-virus program and a disk defragmenter. 
>Other improvements were in the memory management area by the addition of 
>MEMMAKER.
>
>Now, how did you get your anti-virus updates? You had to buy them! Here is a 
>3-page PDF that shows how. First the instructions how to get a user ID. Grab 
>your 9600 baud modem and dial their Bulletin Board System (BBS). Next follow 
>the download instructions to get your AV updates. The third page is the promo 
>where they sold you on getting a whopping whole TWO anti-virus updates for as 
>little as $9.95 each. Add the sales tax on top of that. Oh boy, what a deal.
>
>Here is my blog post with the link:
>
>http://blog.knowbe4.com/blast-from-the-antivirus-past
>
>Warm regards,
>Stu
>
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>
>
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Blast From The Antivirus Past - You may have seen this classic:

2012-04-12 Thread Crawford, Scott
Love it.

But, if I'm reading correctly, the signatures were free, but they only detected 
and you'd need to update the AV program to clean them. If so, it amounts to 10 
bux to clean to infections.

Either way, it's a fun find. "series of hexadecimal codes" :)

-Original Message-
From: Stu Sjouwerman [mailto:s...@sunbelt-software.com] 
Sent: Thursday, April 12, 2012 3:32 PM
To: NT System Admin Issues
Subject: Blast From The Antivirus Past - You may have seen this classic:

Remember MS-DOS Version 6? It was released March 1993. The new 6.0 had a lot of 
new stuff including a basic anti-virus program and a disk defragmenter. Other 
improvements were in the memory management area by the addition of MEMMAKER.

Now, how did you get your anti-virus updates? You had to buy them! Here is a 
3-page PDF that shows how. First the instructions how to get a user ID. Grab 
your 9600 baud modem and dial their Bulletin Board System (BBS). Next follow 
the download instructions to get your AV updates. The third page is the promo 
where they sold you on getting a whopping whole TWO anti-virus updates for as 
little as $9.95 each. Add the sales tax on top of that. Oh boy, what a deal.

Here is my blog post with the link:

http://blog.knowbe4.com/blast-from-the-antivirus-past

Warm regards,
Stu

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Michael Brummet
Hi Jonathan,

 

My company sells computer spare parts, and we currently have p/n BF036863B5
in stock, available New/Bulk, for $38.00 each. This price includes free
ground shipping. If you would like more information, feel free to contact
myself at 877-909-4609 x7113.

 

Michael Brummet
System Administrator
Midwest Information Technology Group, Inc. 

Direct Dial: 217-214-7113
email: mbrum...@mitg.com

HTTP://PARTS.MITG.COM

The information contained in this e-mail message is PRIVILEGED AND
CONFIDENTIAL, and is intended for the use of the addressee and no one else.
If you are not the intended recipient, please do not read, distribute,
reproduce or use this e-mail message (or the attachments) and notify the
sender of the mistaken transmission.  Thank you.

 

From: Jonathan [mailto:ncm...@gmail.com] 
Sent: Thursday, April 12, 2012 2:34 PM
To: NT System Admin Issues
Subject: Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

 

and.short of buying new drives?

Not so sure mgmt will go for spending $1,000 on a 10 year old server that is
slated for decom

(yeah, I know, I know)...

Jonathan

On Thu, Apr 12, 2012 at 2:42 PM, William Robbins 
wrote:

Agreed.

 - Will

 





On Thu, Apr 12, 2012 at 13:16, Richard Stovall  wrote:

Order 3 *new* drives, have them overnighted, then proceed with your original
plan.

 

http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives


 

On Thu, Apr 12, 2012 at 2:03 PM, Jonathan  wrote:

Not sure where to begin on this - I guess it is possible that I've got two
new (refurbed) drives that are bad, but I'm leaning toward it being a fluke
or known bug or compatibility issue. I've Googled till I'm blue in the
face, and I've searched the archives of this list going back more than a
year. We can't retire this server just yet, and I can't P2V it right now.
We're looking to decommission it this year, and replace it with newer
hardware, so for the moment, I'm stuck with it.

Also, I inherited itit long predated my existence at this company. I had
a drive failure in the RAID1, so I bought two reburb units from a major
channel partner (we are a VAR). The hope was to replace one drive, let it
rebuild, then add the second drive as a hot spare so I wouldn't be in this
bind again. Alas, BOTH of the refurb drives register in the System
Management Homepage with a status of Predictive Failure, Replace Drive. I
know I've read about false positives with S.M.A.R.T. Status under certain
OS/Firmware/Driver/MS Update scenarios, but for the life of me I can't find
anything along those lines right now when I need it. Also, with this being a
COMPAQ branded server, I'm not 100% certain of what I'm looking at on the HP
site, as everything referenced looks like a HP branded server. I wasn't
dealing with HP at the time of the HP Compaq merger, and I never did
anything with Compaq servers...

I welcome any suggestions offered to get this unit functioning without drive
array errors (if that is possible). Having the drive listed as being in a
degraded state doesn't give me any warm fuzzies, and it is unfortunately a
critical server, so I can't just say, "It's probably not really an issue."
Of course, I can't be guaranteed that there is a valid backup of this
server, and even if there is, getting it back online might be practically
impossible, because like I said, it predates me significantly and the
individuals who configured it are no longer with the organization and the
software application is no longer supported. I do have original media, but
I'd rather not go that route if I don't have to

Configuration:

Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1 configuration
with no hot spare (like I said, I inherited it)
Running Windows Server 2000 w/SP4 and all available updates
BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23 Mar
2004), but the rev history does not show anything related to SCSI drives or
controllers
ROM Version from the System Management Homepage is 04/02/2001, Family
386P17, Type 03
Storage Controller is listed as "Compaq Integrated Smart Array Controller"
Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest
version appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate
anything that would implicate a false positive for SMART failure
Storage Controller Firmware version is 1.46A - looks like 1.50B dated 22 Oct
2002 is the latest, but can't find any rev notes that tell me what the fixes
are between 1.46A and 1.50B
Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware version
HPB4 and has service hours total of 63,040 hours - this appears to be the
latest firmware for this drive per HP Document ID: c00776070
Port 2 drive 1 (listed as "Predictive Failure/Replace Drive") COMPAQ
BF0368A4CA has firmware version HPB5 and has service hours total of 19 (yes,
nineteen) hours - there is an update HPB5 (C) Dated 18 Jul 2007, but again,
no details in the rev history
Port 2 Drive 2 - New hot

Re: Domain local vs. global vs. universal

2012-04-12 Thread Webster
Eye lashes?

Sent from my Verizon Wireless Phone

William Robbins wrote:
It happens...just don't let it happen again or there will be lashes assessed.  
:P

 - Will

On Thu, Apr 12, 2012 at 14:55, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
Apologies, asked question before reading article.  (Face, meet palm)

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 2:04 PM
Subject: Re: Domain local vs. global vs. universal

>From the article ma'am:

When you enable this feature on a domain operating in Windows Server 2003 or 
higher functional level, any domain controller can resolve logon requests 
locally without having to go through the global catalog server.

As to the DC/GC query, like I stated earlier, it depends on your infrastructure 
and design requirements...and phase of the moon.  (Save the Infrastructure 
FSMO, if you have multiple DC's, etc etc etc.)

 - Will

[X]



On Thu, Apr 12, 2012 at 13:48, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this can 
be enabled on any DC, correct?  Is there any reason to not have every DC also 
be a GC?

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:37 PM
Subject: Re: Domain local vs. global vs. universal

Understanding group types:
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Understanding caching of universal groups:

http://technet.microsoft.com/en-us/magazine/ff797984.aspx

 - Will

[X]



On Thu, Apr 12, 2012 at 13:32, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
>From my reading that's basically it.  But do GC's always get them, or only 
>when enabled for universal group caching?

-lc

From: David Lum mailto:david@nwea.org>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:12 PM

Subject: RE: Domain local vs. global vs. universal

So….technically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What’s happening behind the scenes? 
Universal’s get copied to GC’s and others don’t, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/m

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Thanks.  Yeah I sorted that out for myself after looking at his mail domain 
name.  :)
 
-lc


>
> From: Cameron 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 3:42 PM
>Subject: Re: Domain local vs. global vs. universal
> 
>
>http://briandesmond.com/
>
>
> 
>On Thu, Apr 12, 2012 at 4:08 PM, Lora Cates  wrote:
>
>Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
>information gathering phase myself as I haven't quite been here 12 days yet, 
>and only found this list recently.  So I'll apologize in advance for my faux 
>pas.
>>
>>
>>Basically I was hired to consolidate a plethora of disparate AD 
>>domains/forests in several geographically dispersed hospital groups into a 
>>single forest.  I still haven't met with the networking folks, so I don't 
>>know what shape the WAN is in.  My predecessor went so far as to set up the 
>>CompanyX.com parent domain and it's empty save the defaults, there is also a 
>>child domain of US.companyX.com with what appears to be the users from 
>>corporate.  I've read several debates regarding an empty root.  Is there a 
>>consensus on yea vs. nay?
>>
>>
>>Speaking of reading, and apologies for any offense, are you this Brian 
>>Desmond?  Active Directory: Designing, Deploying, and Running Active 
>>Directory, Fourth Edition
>>-lc
>>
>>
>>>
>>> From: Brian Desmond 
>>>
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 2:16 PM 
>>>
>>>Subject: RE: Domain local vs. global vs. universal
>>>
>>>
>>>Well the impact is that all uni group membership changes replicate to every 
>>>GC. If you’ve got concerns around WAN utilization, availability, latency, 
>>>etc., then this could be worth looking at. In quite a lot of scenarios, the 
>>>WAN issues that existed circa Windows 2000 don’t exist anymore which makes 
>>>this a less interesting discussion point. Without knowing about your 
>>>customer’s environment and scale it’s hard to say.
>>> 
>>>I would say that it’s highly unlikely that I would design a new multi-domain 
>>>forest except for some pretty isolated and specific design requirements 
>>>these days. 
>>> 
>>>Thanks,
>>>Brian Desmond
>>>br...@briandesmond.com
>>> 
>>>w – 312.625.1438 | c   – 312.731.3132
>>> 
>>>From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
>>>Sent: Thursday, April 12, 2012 1:05 PM 
>>>
>>>To: NT System Admin Issues
>>>
>>>Subject: Re: Domain local vs. global vs. universal
>>> 
>>>I too am looking into this for a coming migration I've been asked to design 
>>>for a customer.  What's the impact to GC's by making everything Universal 
>>>Groups?  Especially in a multi domain, multi forest environment?
>>> 
>>>-lc
>>>
>>>
>>> 
>>>From:Brian Desmond  
>>>
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 12:02 PM 
>>>
>>>Subject: RE: Domain local vs. global vs. universal
>>>
>>>
>>>
>>>In a single domain forest (or even many multi-domain domain forests today), 
>>>I would just do all uni groups. 
>>> 
>>>Thanks,
>>>Brian Desmond
>>>br...@briandesmond.com
>>> 
>>>w – 312.625.1438 | c   – 312.731.3132
>>> 
>>>From:David Lum [mailto:david@nwea.org] 
>>>Sent: Thursday, April 12, 2012 11:28 AM
>>>To: NT System Admin Issues
>>>Subject: Domain local vs. global vs. universal
>>> 
>>>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>>>for this function I needed to add a domain local group to it and for course, 
>>>that’s not possible. Someplace I heard in AD pretty much every group you use 
>>>should be domain local unless it’s used for Exchange in which case you use 
>>>Universal.  All groups I create are domain local and it simply works, but I 
>>>know that doesn’t mean it’s right.
>>> 
>>>Before sending a note to the SE team on this I wanted to get a consensus 
>>>from you guys. Comments?
>>>David Lum
>>>Systems Engineer //NWEATM
>>>Office 503.548.5229//Cell (voice/text) 503.267.9764
>>> 
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>> 
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.c

RE: [dkim-failure] Re: Domain local vs. global vs. universal

2012-04-12 Thread Free, Bob
Totally in jest, very old behavior.

Some many years ago the standard come back here was “What OS & What SP” or 
“more info please”  when more info was required to formulate an effective 
answer.

Being the detail oriented fellow he is, Andrew came up with that article ☺

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 1:41 PM
To: NT System Admin Issues
Subject: Re: [dkim-failure] Re: Domain local vs. global vs. universal

Well though I think intended partly in jest, that was a good article.  Thanks.

Like I mentioned before, I'm still gathering info myself, and this topic was 
apropos to the research and planning I'll be doing to consolidate AD gone wild 
here.

-lc

From: "Free, Bob" mailto:r...@pge.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 2:15 PM
Subject: RE: [dkim-failure] Re: Domain local vs. global vs. universal


Indeed®

I resisted the urge to regurgitate the age-old more info link ☺

oops, it leaked in

http://kb.ultratech-llc.com/~moreinfo.txt


From: William Robbins 
[mailto:dangerw...@gmail.com]
Sent: Thursday, April 12, 2012 11:52 AM
To: NT System Admin Issues
Subject: [dkim-failure] Re: Domain local vs. global vs. universal

Recommendations do vary largely depending on requirement's...which are lacking 
in the OP, but since the OP was about "right" in a general sense it makes any 
recommendations subjective.  :)

 - Will


On Thu, Apr 12, 2012 at 13:38, Free, Bob mailto:r...@pge.com>> 
wrote:
Volumes have been written about this. There are even those who  disagree 
with Brian’s recommendation. I’m not saying any of it is good or bad but a lot 
of smart folks have argued pros and cons of various methodologies over the 
years. You might want to read up on it a little for your own edification.

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:12 AM

To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

So….technically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What’s happening behind the scenes? 
Universal’s get copied to GC’s and others don’t, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com

Re: PC power management

2012-04-12 Thread Rod Trent
A couple things missing from that, which SCCM alone cannot do is to 
automatically preserve data and computing instances when shutting down and 
starting up, and allow the end user to delay or set their own shut down 
policies according to workload.

Another issue is true reporting.  SCCM does not know about specific computer 
models, it just has general info. So if you're looking for proper cost savings 
reports due to implementing power management, it's more of a guess.

Stephen Wimberly  wrote:

>I use SCCM, but I've done all of this with free products, it just
>depends on how automated you'd like to get with it.
>
>shut down PCs after inactivity,
>   Shutdown Screensaver (configure local or delivery via almost any
>management product)
>
>starting at a certain time of the day,
>   BIOS settings to wake (Most Enterprise desktops, like Dell
>Optiplex, can be managed remotely or via management products)
>
>can put the monitor to sleep,
>   Sleep settings on the monitor can be configured locally or via most
>any desktop management product.)
>
>can power on PC
>   wol.exe (Executed from a machine running on the same subnet where
>the machine is configured in BIOS and Network card to respond to a
>wake on lan broadcast.  If the WMI layer is healthy and the drivers
>are "correct" this is almost 95% accurate.  Since it's a broadcast it
>should not matter what the machine's last IP address was.  Some
>software attempts an IP specific address, which can usually get
>through a router, but I've had much better luck with broadcast as long
>as you have a machine on in the same subnet and can use something like
>psexec.)
>
>and power off.
>   Shutdown.exe (Execute local or from a remote machine with admin
>rights using "shutdown.exe /s /m \\remote"
>
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here:
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin

-- 
Sent from Kaiten Mail for Android. Please excuse my brevity.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
So I take it you lost?  :)  What, dare I ask, was your position on said matter 
in the arena?
 
-lc


>
> From: William Robbins 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 3:45 PM
>Subject: Re: Domain local vs. global vs. universal
> 
>
>I'm not entering into the "empty root" arena again.  :)  I will answer the 
>last query.  He is that Brian Desmond...which is why I shan't enter that arena 
>again.
>
> - Will
>
>
>
>
>
>
>
>
>On Thu, Apr 12, 2012 at 15:08, Lora Cates  wrote:
>
>Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
>information gathering phase myself as I haven't quite been here 12 days yet, 
>and only found this list recently.  So I'll apologize in advance for my faux 
>pas.
>>
>>
>>Basically I was hired to consolidate a plethora of disparate AD 
>>domains/forests in several geographically dispersed hospital groups into a 
>>single forest.  I still haven't met with the networking folks, so I don't 
>>know what shape the WAN is in.  My predecessor went so far as to set up the 
>>CompanyX.com parent domain and it's empty save the defaults, there is also a 
>>child domain of US.companyX.com with what appears to be the users from 
>>corporate.  I've read several debates regarding an empty root.  Is there a 
>>consensus on yea vs. nay?
>>
>>
>>Speaking of reading, and apologies for any offense, are you this Brian 
>>Desmond?  Active Directory: Designing, Deploying, and Running Active 
>>Directory, Fourth Edition
>>-lc
>>
>>
>>>
>>> From: Brian Desmond 
>>>
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 2:16 PM
>>>
>>>Subject: RE: Domain local vs. global vs. universal
>>> 
>>>
>>>Well the impact is that all uni group membership changes replicate to every 
>>>GC. If you’ve got concerns around WAN utilization, availability, latency, 
>>>etc., then this could be worth looking at. In quite a lot of scenarios, the 
>>>WAN issues that existed circa Windows 2000 don’t exist anymore which makes 
>>>this a less interesting discussion point. Without knowing about your 
>>>customer’s environment and scale it’s hard to say.
>>> 
>>>I would say that it’s highly unlikely that I would design a new multi-domain 
>>>forest except for some pretty isolated and specific design requirements 
>>>these days. 
>>> 
>>>Thanks,
>>>Brian Desmond
>>>br...@briandesmond.com
>>> 
>>>w – 312.625.1438 | c   – 312.731.3132
>>> 
>>>From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
>>>Sent: Thursday, April 12, 2012 1:05 PM
>>>
>>>To: NT System Admin Issues
>>>
>>>Subject: Re: Domain local vs. global vs. universal
>>> 
>>>I too am looking into this for a coming migration I've been asked to design 
>>>for a customer.  What's the impact to GC's by making everything Universal 
>>>Groups?  Especially in a multi domain, multi forest environment?
>>> 
>>>-lc
>>>
>>>
>>> 
>>>From:Brian Desmond 
>>>
>>>To: NT System Admin Issues  
>>>Sent: Thursday, April 12, 2012 12:02 PM
>>>
>>>Subject: RE: Domain local vs. global vs. universal
>>>
>>>
>>>
>>>In a single domain forest (or even many multi-domain domain forests today), 
>>>I would just do all uni groups. 
>>> 
>>>Thanks,
>>>Brian Desmond
>>>br...@briandesmond.com
>>> 
>>>w – 312.625.1438 | c   – 312.731.3132
>>> 
>>>From:David Lum [mailto:david@nwea.org] 
>>>Sent: Thursday, April 12, 2012 11:28 AM
>>>To: NT System Admin Issues
>>>Subject: Domain local vs. global vs. universal
>>> 
>>>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>>>for this function I needed to add a domain local group to it and for course, 
>>>that’s not possible. Someplace I heard in AD pretty much every group you use 
>>>should be domain local unless it’s used for Exchange in which case you use 
>>>Universal.  All groups I create are domain local and it simply works, but I 
>>>know that doesn’t mean it’s right.
>>> 
>>>Before sending a note to the SE team on this I wanted to get a consensus 
>>>from you guys. Comments?
>>>David Lum
>>>Systems Engineer //NWEATM
>>>Office 503.548.5229//Cell (voice/text) 503.267.9764
>>> 
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~   ~
>>>
>>>---
>>>To manage subscriptions click here: 
>>>http://lyris.sunbelt-software.com/read/my_forums/
>>>or send an email to listmana...@lyris.sunbeltsoftware.com
>>>with the body: unsubscribe ntsysadmin
>>> 
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>~ 

RE: Start an install when an Uninstall completes?

2012-04-12 Thread Michael B. Smith
System Center Configuration Manager. :)

No clue how it does it. I would probably look at the registry.

From: Sam Cayze [mailto:sca...@gmail.com]
Sent: Thursday, April 12, 2012 4:50 PM
To: NT System Admin Issues
Subject: Start an install when an Uninstall completes?

Anyone scripted this yet?

Product 1 is installed.
Product 2 needs to be installed.
Product 1 has to be uninstalled before Product 2 can be installed.

Hoping to roll the MSI /x and MSI /i commands into one script.  Does MSIEXEC 
have some controls for this? Or should I programmatically read the Event Log in 
a repeating loop until the successful uninstall event is posted.  Or maybe scan 
the HKLM\Sofware***\Uninstall registry to see if Product 1 is still in there?

Ideas of what might be the cleanest and most reliable?  I feel like I'm missing 
something very obvious :-\

TIA,

Sam

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Domain local vs. global vs. universal

2012-04-12 Thread Brian Desmond
That'd be me.

Empty root doesn't really add any value anymore. I do a single domain (root 
only) forest usually for new customers. For customers who are consolidating, we 
will often consolidate them to the largest child domain so you end up with a 
small empty root and then a giant child domain. The overhead here is minimal 
compared to the cost of migrating out of the largest child.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Cameron [mailto:cameron.orl...@gmail.com]
Sent: Thursday, April 12, 2012 3:43 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

http://briandesmond.com/



On Thu, Apr 12, 2012 at 4:08 PM, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
information gathering phase myself as I haven't quite been here 12 days yet, 
and only found this list recently.  So I'll apologize in advance for my faux 
pas.

Basically I was hired to consolidate a plethora of disparate AD domains/forests 
in several geographically dispersed hospital groups into a single forest.  I 
still haven't met with the networking folks, so I don't know what shape the WAN 
is in.  My predecessor went so far as to set up the CompanyX.com parent domain 
and it's empty save the defaults, there is also a child domain of 
US.companyX.com with what appears to be the users from 
corporate.  I've read several debates regarding an empty root.  Is there a 
consensus on yea vs. nay?

Speaking of reading, and apologies for any offense, are you this Brian Desmond? 
 Active Directory: Designing, Deploying, and Running Active Directory, Fourth 
Edition
-lc

From: Brian Desmond mailto:br...@briandesmond.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 2:16 PM

Subject: RE: Domain local vs. global vs. universal

Well the impact is that all uni group membership changes replicate to every GC. 
If you've got concerns around WAN utilization, availability, latency, etc., 
then this could be worth looking at. In quite a lot of scenarios, the WAN 
issues that existed circa Windows 2000 don't exist anymore which makes this a 
less interesting discussion point. Without knowing about your customer's 
environment and scale it's hard to say.

I would say that it's highly unlikely that I would design a new multi-domain 
forest except for some pretty isolated and specific design requirements these 
days.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Lora Cates 
[mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 1:05 PM

To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

I too am looking into this for a coming migration I've been asked to design for 
a customer.  What's the impact to GC's by making everything Universal Groups?  
Especially in a multi domain, multi forest environment?

-lc

From: Brian Desmond mailto:br...@briandesmond.com>>

To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 12:02 PM

Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn't me), but 
for this function I needed to add a domain local group to it and for course, 
that's not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it's used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn't mean it's right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 
503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listman

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Cool, thanks!  I'll be sure to take a look at the activedir.org site.
 
-lc


>
> From: "Free, Bob" 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 3:58 PM
>Subject: RE: Domain local vs. global vs. universal
> 
>
> 
>Lora meet Brian Desmond, author, Directory Services MVP, Conference Speaker 
>and all around GoodGuy™
> 
>Consensus on empty root these days is pretty much against unless you have a 
>really good reason. 
> 
>I have 2 forests built that way in the past here back when that was the 
>prescriptive guidance but the last one I did was a single domain. 
> 
>Many discussions on activdir over the years on the subject, one fairly 
>recently.  If you want to see some prolonged discussions look in the archives 
>there. 
> 
>google ‘empty forest root site:activedir.org’
> 
>From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
>Sent: Thursday, April 12, 2012 1:09 PM
>To: NT System Admin Issues
>Subject: Re: Domain local vs. global vs. universal
> 
>Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
>information gathering phase myself as I haven't quite been here 12 days yet, 
>and only found this list recently.  So I'll apologize in advance for my faux 
>pas.
> 
>Basically I was hired to consolidate a plethora of disparate AD 
>domains/forests in several geographically dispersed hospital groups into a 
>single forest.  I still haven't met with the networking folks, so I don't know 
>what shape the WAN is in.  My predecessor went so far as to set up the 
>CompanyX.com parent domain and it's empty save the defaults, there is also a 
>child domain of US.companyX.com with what appears to be the users from 
>corporate.  I've read several debates regarding an empty root.  Is there a 
>consensus on yea vs. nay?
> 
>Speaking of reading, and apologies for any offense, are you this Brian 
>Desmond?  Active Directory: Designing, Deploying, and Running Active 
>Directory, Fourth Edition
>-lc
>
>
> 
>From:Brian Desmond 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 2:16 PM
>Subject: RE: Domain local vs. global vs. universal
>
>
>
>Well the impact is that all uni group membership changes replicate to every 
>GC. If you’ve got concerns around WAN utilization, availability, latency, 
>etc., then this could be worth looking at. In quite a lot of scenarios, the 
>WAN issues that existed circa Windows 2000 don’t exist anymore which makes 
>this a less interesting discussion point. Without knowing about your 
>customer’s environment and scale it’s hard to say.
> 
>I would say that it’s highly unlikely that I would design a new multi-domain 
>forest except for some pretty isolated and specific design requirements these 
>days. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
>Sent: Thursday, April 12, 2012 1:05 PM
>To: NT System Admin Issues
>Subject: Re: Domain local vs. global vs. universal
> 
>I too am looking into this for a coming migration I've been asked to design 
>for a customer.  What's the impact to GC's by making everything Universal 
>Groups?  Especially in a multi domain, multi forest environment?
> 
>-lc
>
>
> 
>From:Brian Desmond 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 12:02 PM
>Subject: RE: Domain local vs. global vs. universal
> 
>In a single domain forest (or even many multi-domain domain forests today), I 
>would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>for this function I needed to add a domain local group to it and for course, 
>that’s not possible. Someplace I heard in AD pretty much every group you use 
>should be domain local unless it’s used for Exchange in which case you use 
>Universal.  All groups I create are domain local and it simply works, but I 
>know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus from 
>you guys. Comments?
>David Lum
>Systems Engineer //NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.

RE: Domain local vs. global vs. universal

2012-04-12 Thread Free, Bob
Will would be one happy fella once again.

From: Lora Cates [mailto:lora.ca...@rocketmail.com]
Sent: Thursday, April 12, 2012 2:17 PM
To: NT System Admin Issues
Subject: Re: Domain local vs. global vs. universal

My, my!  What happens were I to like it?  ;)

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 3:26 PM
Subject: Re: Domain local vs. global vs. universal


It happens...just don't let it happen again or there will be lashes assessed.  
:P

 - Will

On Thu, Apr 12, 2012 at 14:55, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
Apologies, asked question before reading article.  (Face, meet palm)

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 2:04 PM
Subject: Re: Domain local vs. global vs. universal

From the article ma'am:

When you enable this feature on a domain operating in Windows Server 2003 or 
higher functional level, any domain controller can resolve logon requests 
locally without having to go through the global catalog server.

As to the DC/GC query, like I stated earlier, it depends on your infrastructure 
and design requirements...and phase of the moon.  (Save the Infrastructure 
FSMO, if you have multiple DC's, etc etc etc.)
 - Will



On Thu, Apr 12, 2012 at 13:48, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear this can 
be enabled on any DC, correct?  Is there any reason to not have every DC also 
be a GC?

-lc

From: William Robbins mailto:dangerw...@gmail.com>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:37 PM
Subject: Re: Domain local vs. global vs. universal

Understanding group types:
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Understanding caching of universal groups:

http://technet.microsoft.com/en-us/magazine/ff797984.aspx

 - Will



On Thu, Apr 12, 2012 at 13:32, Lora Cates 
mailto:lora.ca...@rocketmail.com>> wrote:
From my reading that's basically it.  But do GC's always get them, or only when 
enabled for universal group caching?

-lc

From: David Lum mailto:david@nwea.org>>
To: NT System Admin Issues 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Sent: Thursday, April 12, 2012 1:12 PM

Subject: RE: Domain local vs. global vs. universal

So….technically what is happening when you click that little radio button to 
change group type Local/Global/Universal? What’s happening behind the scenes? 
Universal’s get copied to GC’s and others don’t, but what else?

Dave

From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, April 12, 2012 10:03 AM
To: NT System Admin Issues
Subject: RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I 
would just do all uni groups.

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal

Today I found a global group in my AD (created by an SE that wasn’t me), but 
for this function I needed to add a domain local group to it and for course, 
that’s not possible. Someplace I heard in AD pretty much every group you use 
should be domain local unless it’s used for Exchange in which case you use 
Universal.  All groups I create are domain local and it simply works, but I 
know that doesn’t mean it’s right.

Before sending a note to the SE team on this I wanted to get a consensus from 
you guys. Comments?
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscrip

Re: Blast From The Antivirus Past - You may have seen this classic:

2012-04-12 Thread William Robbins
Central Point Software:   http://en.wikipedia.org/wiki/MSAV

 - Will





On Thu, Apr 12, 2012 at 16:20, Lora Cates  wrote:

> I remember that!  I don't recall that many people going for it though.  :)
>  Wasn't that the stripped down version of the Norton A/V?
>
> -lc
>
>   --
> *From:* Stu Sjouwerman 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 3:32 PM
> *Subject:* Blast From The Antivirus Past - You may have seen this classic:
>
> Remember MS-DOS Version 6? It was released March 1993. The new 6.0 had a
> lot of new stuff including a basic anti-virus program and a disk
> defragmenter. Other improvements were in the memory management area by the
> addition of MEMMAKER.
>
> Now, how did you get your anti-virus updates? You had to buy them! Here is
> a 3-page PDF that shows how. First the instructions how to get a user ID.
> Grab your 9600 baud modem and dial their Bulletin Board System (BBS). Next
> follow the download instructions to get your AV updates. The third page is
> the promo where they sold you on getting a whopping whole TWO anti-virus
> updates for as little as $9.95 each. Add the sales tax on top of that. Oh
> boy, what a deal.
>
> Here is my blog post with the link:
>
> http://blog.knowbe4.com/blast-from-the-antivirus-past
>
> Warm regards,
> Stu
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
>
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Ah, found you.

http://www.activedir.org/ListArchives/tabid/55/forumid/1/postid/43510/view/topic/Default.aspx

 
-lc


>
> From: Lora Cates 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 4:40 PM
>Subject: Re: Domain local vs. global vs. universal
> 
>
>So I take it you lost?  :)  What, dare I ask, was your position on said matter 
>in the arena?
> 
>-lc
>
>
>>
>> From: William Robbins 
>>To: NT System Admin Issues  
>>Sent: Thursday, April 12, 2012 3:45 PM
>>Subject: Re: Domain local vs. global vs. universal
>> 
>>
>>I'm not entering into the "empty root" arena again.  :)  I will answer the 
>>last query.  He is that Brian Desmond...which is why I shan't enter that 
>>arena again.
>>
>> - Will
>>
>>
>>
>>
>>
>>
>>
>>
>>On Thu, Apr 12, 2012 at 15:08, Lora Cates  wrote:
>>
>>Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
>>information gathering phase myself as I haven't quite been here 12 days yet, 
>>and only found this list recently.  So I'll apologize in advance for my faux 
>>pas.
>>>
>>>
>>>Basically I was hired to consolidate a plethora of disparate AD 
>>>domains/forests in several geographically dispersed hospital groups into a 
>>>single forest.  I still haven't met with the networking folks, so I don't 
>>>know what shape the WAN is in.  My predecessor went so far as to set up the 
>>>CompanyX.com parent domain and it's empty save the defaults, there is also a 
>>>child domain of US.companyX.com with what appears to be the users from 
>>>corporate.  I've read several debates regarding an empty root.  Is there a 
>>>consensus on yea vs. nay?
>>>
>>>
>>>Speaking of reading, and apologies for any offense, are you this Brian 
>>>Desmond?  Active Directory: Designing, Deploying, and Running Active 
>>>Directory, Fourth Edition
>>>-lc
>>>
>>>

 From: Brian Desmond 

To: NT System Admin Issues  
Sent: Thursday, April 12, 2012 2:16 PM

Subject: RE: Domain local vs. global vs. universal
 

Well the impact is that all uni group membership changes replicate to every 
GC. If you’ve got concerns around WAN utilization, availability, latency, 
etc., then this could be worth looking at. In quite a lot of scenarios, the 
WAN issues that existed circa Windows 2000 don’t exist anymore which makes 
this a less interesting discussion point. Without knowing about your 
customer’s environment and scale it’s hard to say.
 
I would say that it’s highly unlikely that I would design a new 
multi-domain forest except for some pretty isolated and specific design 
requirements these days. 
 
Thanks,
Brian Desmond
br...@briandesmond.com
 
w – 312.625.1438 | c   – 312.731.3132
 
From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
Sent: Thursday, April 12, 2012 1:05 PM

To: NT System Admin Issues

Subject: Re: Domain local vs. global vs. universal
 
I too am looking into this for a coming migration I've been asked to design 
for a customer.  What's the impact to GC's by making everything Universal 
Groups?  Especially in a multi domain, multi forest environment?
 
-lc


 
From:Brian Desmond 

To: NT System Admin Issues  
Sent: Thursday, April 12, 2012 12:02 PM

Subject: RE: Domain local vs. global vs. universal



In a single domain forest (or even many multi-domain domain forests today), 
I would just do all uni groups. 
 
Thanks,
Brian Desmond
br...@briandesmond.com
 
w – 312.625.1438 | c   – 312.731.3132
 
From:David Lum [mailto:david@nwea.org] 
Sent: Thursday, April 12, 2012 11:28 AM
To: NT System Admin Issues
Subject: Domain local vs. global vs. universal
 
Today I found a global group in my AD (created by an SE that wasn’t me), 
but for this function I needed to add a domain local group to it and for 
course, that’s not possible. Someplace I heard in AD pretty much every 
group you use should be domain local unless it’s used for Exchange in which 
case you use Universal.  All groups I create are domain local and it simply 
works, but I know that doesn’t mean it’s right.
 
Before sending a note to the SE team on this I wanted to get a consensus 
from you guys. Comments?
David Lum
Systems Engineer //NWEATM
Office 503.548.5229//Cell (voice/text) 503.267.9764
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security th

RE: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

2012-04-12 Thread Webster
If you upgrade your brain with an SSD, you will boot much faster.  :)


Carl Webster

Consultant and Citrix Technology Professional

http://www.CarlWebster.com


From: Jonathan [ncm...@gmail.com]
Sent: Thursday, April 12, 2012 4:12 PM
To: NT System Admin Issues
Subject: Re: Compaq ProLiant DL380R01 S.M.A.R.T. Predictive failure

DOH! I was looking at the wrong partmore than double the price of the 
CORRECT one @ $125 each.

My mistakeI'm under the weather, and was in a hurry to boot...

Thanks,

Jonathan

On Thu, Apr 12, 2012 at 4:28 PM, Richard Stovall 
mailto:rich...@gmail.com>> wrote:
Using the link I sent, 3 new HP 36GB 15K drives shipped for next morning 10:30 
AM delivery to Virginia are $428.21 all in.

Don't really know where the $1,000 price tag is coming from unless the drives 
specified above won't work for some reason.

If your management won't spring for new ones, I've got a room full of them 
(10K) that I'll send for $100 bucks a piece.  Ground shipping included.  :)

Seriously, explain the difference between $1,000 bucks now and all the time 
later required to rebuild the thing from backups.

On Thu, Apr 12, 2012 at 3:34 PM, Jonathan 
mailto:ncm...@gmail.com>> wrote:
and.short of buying new drives?

Not so sure mgmt will go for spending $1,000 on a 10 year old server that is 
slated for decom

(yeah, I know, I know)...

Jonathan


On Thu, Apr 12, 2012 at 2:42 PM, William Robbins 
mailto:dangerw...@gmail.com>> wrote:
Agreed.

 - Will

[X]



On Thu, Apr 12, 2012 at 13:16, Richard Stovall 
mailto:rich...@gmail.com>> wrote:
Order 3 *new* drives, have them overnighted, then proceed with your original 
plan.

http://discountechnology.com/Products/HP-Compaq-SCSI-Hard-Drives


On Thu, Apr 12, 2012 at 2:03 PM, Jonathan 
mailto:ncm...@gmail.com>> wrote:
Not sure where to begin on this - I guess it is possible that I've got two new 
(refurbed) drives that are bad, but I'm leaning toward it being a fluke or 
known bug or compatibility issue. I've Googled till I'm blue in the face, 
and I've searched the archives of this list going back more than a year. We 
can't retire this server just yet, and I can't P2V it right now. We're looking 
to decommission it this year, and replace it with newer hardware, so for the 
moment, I'm stuck with it.

Also, I inherited itit long predated my existence at this company. I had a 
drive failure in the RAID1, so I bought two reburb units from a major channel 
partner (we are a VAR). The hope was to replace one drive, let it rebuild, then 
add the second drive as a hot spare so I wouldn't be in this bind again. Alas, 
BOTH of the refurb drives register in the System Management Homepage with a 
status of Predictive Failure, Replace Drive. I know I've read about false 
positives with S.M.A.R.T. Status under certain OS/Firmware/Driver/MS Update 
scenarios, but for the life of me I can't find anything along those lines right 
now when I need it. Also, with this being a COMPAQ branded server, I'm not 100% 
certain of what I'm looking at on the HP site, as everything referenced looks 
like a HP branded server. I wasn't dealing with HP at the time of the HP Compaq 
merger, and I never did anything with Compaq servers...

I welcome any suggestions offered to get this unit functioning without drive 
array errors (if that is possible). Having the drive listed as being in a 
degraded state doesn't give me any warm fuzzies, and it is unfortunately a 
critical server, so I can't just say, "It's probably not really an issue." Of 
course, I can't be guaranteed that there is a valid backup of this server, and 
even if there is, getting it back online might be practically impossible, 
because like I said, it predates me significantly and the individuals who 
configured it are no longer with the organization and the software application 
is no longer supported. I do have original media, but I'd rather not go that 
route if I don't have to

Configuration:

Two 36GB Ultra 320 SCSI Hot Pluggable hard drives in a RAID 1 configuration 
with no hot spare (like I said, I inherited it)
Running Windows Server 2000 w/SP4 and all available updates
BIOS Date is 04/02/01 - newest version appears to be 2002.12.18 (B) (23 Mar 
2004), but the rev history does not show anything related to SCSI drives or 
controllers
ROM Version from the System Management Homepage is 04/02/2001, Family 386P17, 
Type 03
Storage Controller is listed as "Compaq Integrated Smart Array Controller"
Storage Controller Driver Date/Version is 10/21/2002, 5.14.0.0 Latest version 
appears to be 5.14.0.0 (E) (13 Apr 2006) but rev notes don't notate anything 
that would implicate a false positive for SMART failure
Storage Controller Firmware version is 1.46A - looks like 1.50B dated 22 Oct 
2002 is the latest, but can't find any rev notes that tell me what the fixes 
are between 1.46A and 1.50B
Port 2 Drive 0 (listed as healthy) COMPAQ BF036863B5 has firmware version H

Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
Only for you Webster.

 - Will





On Thu, Apr 12, 2012 at 16:31, Webster  wrote:

>  Eye lashes?
>
> Sent from my Verizon Wireless Phone
>
> William Robbins wrote:
> It happens...just don't let it happen again or there will be lashes
> assessed.  :P
>
>  - Will
>
> On Thu, Apr 12, 2012 at 14:55, Lora Cates wrote:
>
>>  Apologies, asked question before reading article.  (Face, meet palm)
>>
>> -lc
>>
>>   --
>> *From:* William Robbins 
>>  *To:* NT System Admin Issues 
>> *Sent:* Thursday, April 12, 2012 2:04 PM
>> *Subject:* Re: Domain local vs. global vs. universal
>>
>>  From the article ma'am:
>>
>>  When you enable this feature on a domain operating in Windows Server
>> 2003 or higher functional level, any domain controller can resolve logon
>> requests locally without having to go through the global catalog server.
>>
>>   As to the DC/GC query, like I stated earlier, it depends on your
>> infrastructure and design requirements...and phase of the moon.  (Save the
>> Infrastructure FSMO, if you have multiple DC's, etc etc etc.)
>>
>>   - Will
>>
>>
>>
>>
>>
>>  On Thu, Apr 12, 2012 at 13:48, Lora Cates wrote:
>>
>>   Ah ha!  Thank you , my misunderstanding on caching.  Just so I'm clear
>> this can be enabled on any DC, correct?  Is there any reason to not have
>> every DC also be a GC?
>>
>>  -lc
>>
>>   --
>> *From:* William Robbins 
>> *To:* NT System Admin Issues 
>> *Sent:* Thursday, April 12, 2012 1:37 PM
>> *Subject:* Re: Domain local vs. global vs. universal
>>
>>   Understanding group types:
>> http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx
>>
>>  Understanding caching of universal groups:
>>
>>   http://technet.microsoft.com/en-us/magazine/ff797984.aspx
>>
>>  - Will
>>
>>
>>
>>
>>
>>  On Thu, Apr 12, 2012 at 13:32, Lora Cates wrote:
>>
>>   From my reading that's basically it.  But do GC's always get them, or
>> only when enabled for universal group caching?
>>
>>  -lc
>>
>>--
>> *From:* David Lum 
>>  *To:* NT System Admin Issues 
>> *Sent:* Thursday, April 12, 2012 1:12 PM
>>
>> *Subject:* RE: Domain local vs. global vs. universal
>>
>>   So….technically what is happening when you click that little radio
>> button to change group type Local/Global/Universal? What’s happening behind
>> the scenes? Universal’s get copied to GC’s and others don’t, but what else?
>>
>> Dave
>>
>>  *From:* Brian Desmond [mailto:br...@briandesmond.com]
>> *Sent:* Thursday, April 12, 2012 10:03 AM
>> *To:* NT System Admin Issues
>> *Subject:* RE: Domain local vs. global vs. universal
>>
>> *In a single domain forest (or even many multi-domain domain forests
>> today), I would just do all uni groups. ***
>> * *
>>  *Thanks,*
>> *Brian Desmond*
>> *br...@briandesmond.com*
>> * *
>> *w – 312.625.1438 | c   – 312.731.3132*
>>  * *
>>  *From:* David Lum [mailto:david@nwea.org]
>> *Sent:* Thursday, April 12, 2012 11:28 AM
>> *To:* NT System Admin Issues
>> *Subject:* Domain local vs. global vs. universal
>>
>> Today I found a global group in my AD (created by an SE that wasn’t me),
>> but for this function I needed to add a domain local group to it and for
>> course, that’s not possible. Someplace I heard in AD pretty much every
>> group you use should be domain local unless it’s used for Exchange in which
>> case you use Universal.  All groups I create are domain local and it simply
>> works, but I know that doesn’t mean it’s right.
>>
>> Before sending a note to the SE team on this I wanted to get a consensus
>> from you guys. Comments?
>> *David Lum*
>> Systems Engineer // NWEATM
>> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>>
>>
>>  ~ Finally, powerful endpoint security that ISN'T a resource
>> hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or 

Re: Domain local vs. global vs. universal

2012-04-12 Thread William Robbins
Wow...

First you don't read the articles I send, now you infer I'm a loser?
 Harsh.  :)

 - Will





On Thu, Apr 12, 2012 at 16:40, Lora Cates  wrote:

> So I take it you lost?  :)  What, dare I ask, was your position on said
> matter in the arena?
>
> -lc
>
>   --
> *From:* William Robbins 
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 3:45 PM
> *Subject:* Re: Domain local vs. global vs. universal
>
> I'm not entering into the "empty root" arena again.  :)  I will answer the
> last query.  He is that Brian Desmond...which is why I shan't enter that
> arena again.
>
>  - Will
>
>
>
>
>
> On Thu, Apr 12, 2012 at 15:08, Lora Cates wrote:
>
> Well I've inherited what I'll kindly refer to as a "mess."  I'm still in
> the information gathering phase myself as I haven't quite been here 12 days
> yet, and only found this list recently.  So I'll apologize in advance for
> my faux pas.
>
> Basically I was hired to consolidate a plethora of disparate AD
> domains/forests in several geographically dispersed hospital groups into a
> single forest.  I still haven't met with the networking folks, so I don't
> know what shape the WAN is in.  My predecessor went so far as to set up the
> CompanyX.com parent domain and it's empty save the defaults, there is
> also a child domain of US.companyX.com with what appears to be the users
> from corporate.  I've read several debates regarding an empty root.  Is
> there a consensus on yea vs. nay?
>
> Speaking of reading, and apologies for any offense, are you this Brian
> Desmond?  Active Directory: Designing, Deploying, and Running Active
> Directory, Fourth Edition
> -lc
>
>   --
> *From:* Brian Desmond 
> *To:* NT System Admin Issues 
>  *Sent:* Thursday, April 12, 2012 2:16 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
>   *Well the impact is that all uni group membership changes replicate to
> every GC. If you’ve got concerns around WAN utilization, availability,
> latency, etc., then this could be worth looking at. In quite a lot of
> scenarios, the WAN issues that existed circa Windows 2000 don’t exist
> anymore which makes this a less interesting discussion point. Without
> knowing about your customer’s environment and scale it’s hard to say.*
> *  *
> *I would say that it’s highly unlikely that I would design a new
> multi-domain forest except for some pretty isolated and specific design
> requirements these days. *
> *  *
>  *Thanks,*
> *Brian Desmond*
> *br...@briandesmond.com*
> *  *
> *w – 312.625.1438 | c   – 312.731.3132*
>  *  *
>  *From:* Lora Cates [mailto:lora.ca...@rocketmail.com]
> *Sent:* Thursday, April 12, 2012 1:05 PM
>
> *To:* NT System Admin Issues
> *Subject:* Re: Domain local vs. global vs. universal
>
>  I too am looking into this for a coming migration I've been asked to
> design for a customer.  What's the impact to GC's by making everything
> Universal Groups?  Especially in a multi domain, multi forest environment?
>
>  -lc
>--
>  *From:* Brian Desmond 
>
> *To:* NT System Admin Issues 
> *Sent:* Thursday, April 12, 2012 12:02 PM
>
> *Subject:* RE: Domain local vs. global vs. universal
>
>
>*In a single domain forest (or even many multi-domain domain forests
> today), I would just do all uni groups. *
>  * *
>   *Thanks,*
>  *Brian Desmond*
>  *br...@briandesmond.com*
>  * *
>  *w – 312.625.1438 | c   – 312.731.3132*
>   * *
>   *From:* David Lum [mailto:david@nwea.org ]
> *Sent:* Thursday, April 12, 2012 11:28 AM
> *To:* NT System Admin Issues
> *Subject:* Domain local vs. global vs. universal
>
>  Today I found a global group in my AD (created by an SE that wasn’t me),
> but for this function I needed to add a domain local group to it and for
> course, that’s not possible. Someplace I heard in AD pretty much every
> group you use should be domain local unless it’s used for Exchange in which
> case you use Universal.  All groups I create are domain local and it simply
> works, but I know that doesn’t mean it’s right.
>
>  Before sending a note to the SE team on this I wanted to get a consensus
> from you guys. Comments?
>  *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>   ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>   ~ Finally, powerful endpoint

Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Well it's a pleasure to "meet" you sir.  The books you've co-authored as well 
as your partner's JoeWare, have saved my collective bacon a few times, so thank 
you.  :)

It's looking like I'm going to follow the latter scenario as the largest child 
also houses the Exchange 2003 environment.  Sorry if I hit a scab between you 
and Mr. Robbins.  :)
 
-lc


>
> From: Brian Desmond 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 4:58 PM
>Subject: RE: Domain local vs. global vs. universal
> 
>
> 
>That’d be me. 
> 
>Empty root doesn’t really add any value anymore. I do a single domain (root 
>only) forest usually for new customers. For customers who are consolidating, 
>we will often consolidate them to the largest child domain so you end up with 
>a small empty root and then a giant child domain. The overhead here is minimal 
>compared to the cost of migrating out of the largest child. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:Cameron [mailto:cameron.orl...@gmail.com] 
>Sent: Thursday, April 12, 2012 3:43 PM
>To: NT System Admin Issues
>Subject: Re: Domain local vs. global vs. universal
> 
>http://briandesmond.com/
>
>
> 
>On Thu, Apr 12, 2012 at 4:08 PM, Lora Cates  wrote:
>Well I've inherited what I'll kindly refer to as a "mess."  I'm still in the 
>information gathering phase myself as I haven't quite been here 12 days yet, 
>and only found this list recently.  So I'll apologize in advance for my faux 
>pas.
> 
>Basically I was hired to consolidate a plethora of disparate AD 
>domains/forests in several geographically dispersed hospital groups into a 
>single forest.  I still haven't met with the networking folks, so I don't know 
>what shape the WAN is in.  My predecessor went so far as to set up the 
>CompanyX.com parent domain and it's empty save the defaults, there is also a 
>child domain of US.companyX.com with what appears to be the users from 
>corporate.  I've read several debates regarding an empty root.  Is there a 
>consensus on yea vs. nay?
> 
>Speaking of reading, and apologies for any offense, are you this Brian 
>Desmond?  Active Directory: Designing, Deploying, and Running Active 
>Directory, Fourth Edition
>-lc
>
>
> 
>From:Brian Desmond 
>To:NT System Admin Issues  
>Sent:Thursday, April 12, 2012 2:16 PM 
>
>Subject: RE: Domain local vs. global vs. universal
> 
>Well the impact is that all uni group membership changes replicate to every 
>GC. If you’ve got concerns around WAN utilization, availability, latency, 
>etc., then this could be worth looking at. In quite a lot of scenarios, the 
>WAN issues that existed circa Windows 2000 don’t exist anymore which makes 
>this a less interesting discussion point. Without knowing about your 
>customer’s environment and scale it’s hard to say.
> 
>I would say that it’s highly unlikely that I would design a new multi-domain 
>forest except for some pretty isolated and specific design requirements these 
>days. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
>Sent: Thursday, April 12, 2012 1:05 PM 
>
>To: NT System Admin Issues
>Subject:Re: Domain local vs. global vs. universal
> 
>I too am looking into this for a coming migration I've been asked to design 
>for a customer.  What's the impact to GC's by making everything Universal 
>Groups?  Especially in a multi domain, multi forest environment?
> 
>-lc
>
>
> 
>From:Brian Desmond  
>
>To: NT System Admin Issues  
>Sent:Thursday, April 12, 2012 12:02 PM 
>
>Subject: RE: Domain local vs. global vs. universal
> 
>In a single domain forest (or even many multi-domain domain forests today), I 
>would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>for this function I needed to add a domain local group to it and for course, 
>that’s not possible. Someplace I heard in AD pretty much every group you use 
>should be domain local unless it’s used for Exchange in which case you use 
>Universal.  All groups I create are domain local and it simply works, but I 
>know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus from 
>you guys. Comments?
>David Lum
>Systems Engineer // NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an 

Re: [dkim-failure] Re: Domain local vs. global vs. universal

2012-04-12 Thread Lora Cates
Tis a good behavior, and you'll have to trust I typically do better.  Was just 
caught up in asking hypothetical vs. "real" world questions to enlighten 
myself.  :)

Andrew, or as it appears he prefers ASB, has lots of good information there, 
thanks again!
 
-lc


>
> From: "Free, Bob" 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 4:34 PM
>Subject: RE: [dkim-failure] Re: Domain local vs. global vs. universal
> 
>
> 
>Totally in jest, very old behavior. 
> 
>Some many years ago the standard come back here was “What OS & What SP” or 
>“more info please”  when more info was required to formulate an effective 
>answer. 
> 
>Being the detail oriented fellow he is, Andrew came up with that article J
> 
>From:Lora Cates [mailto:lora.ca...@rocketmail.com] 
>Sent: Thursday, April 12, 2012 1:41 PM
>To: NT System Admin Issues
>Subject: Re: [dkim-failure] Re: Domain local vs. global vs. universal
> 
>Well though I think intended partly in jest, that was a good article.  Thanks. 
> 
> 
>Like I mentioned before, I'm still gathering info myself, and this topic was 
>apropos to the research and planning I'll be doing to consolidate AD gone wild 
>here.
> 
>-lc
>
>
> 
>From:"Free, Bob" 
>To: NT System Admin Issues  
>Sent: Thursday, April 12, 2012 2:15 PM
>Subject: RE: [dkim-failure] Re: Domain local vs. global vs. universal
>
>
>
>Indeed®
> 
>I resisted the urge to regurgitate the age-old more info link J
> 
>oops, it leaked in
> 
>http://kb.ultratech-llc.com/~moreinfo.txt
> 
> 
>From:William Robbins [mailto:dangerw...@gmail.com] 
>Sent: Thursday, April 12, 2012 11:52 AM
>To: NT System Admin Issues
>Subject: [dkim-failure] Re: Domain local vs. global vs. universal
> 
>Recommendations do vary largely depending on requirement's...which are lacking 
>in the OP, but since the OP was about "right" in a general sense it makes any 
>recommendations subjective.  :)
>
> - Will
> 
> 
>On Thu, Apr 12, 2012 at 13:38, Free, Bob  wrote:
>Volumes have been written about this. There are even those who  disagree 
>with Brian’s recommendation. I’m not saying any of it is good or bad but a lot 
>of smart folks have argued pros and cons of various methodologies over the 
>years. You might want to read up on it a little for your own edification.
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:12 AM
>
>To: NT System Admin Issues
>Subject: RE: Domain local vs. global vs. universal
> 
>So….technically what is happening when you click that little radio button to 
>change group type Local/Global/Universal? What’s happening behind the scenes? 
>Universal’s get copied to GC’s and others don’t, but what else?
> 
>Dave
> 
>From:Brian Desmond [mailto:br...@briandesmond.com] 
>Sent: Thursday, April 12, 2012 10:03 AM
>To: NT System Admin Issues
>Subject: RE: Domain local vs. global vs. universal
> 
>In a single domain forest (or even many multi-domain domain forests today), I 
>would just do all uni groups. 
> 
>Thanks,
>Brian Desmond
>br...@briandesmond.com
> 
>w – 312.625.1438 | c   – 312.731.3132
> 
>From:David Lum [mailto:david@nwea.org] 
>Sent: Thursday, April 12, 2012 11:28 AM
>To: NT System Admin Issues
>Subject: Domain local vs. global vs. universal
> 
>Today I found a global group in my AD (created by an SE that wasn’t me), but 
>for this function I needed to add a domain local group to it and for course, 
>that’s not possible. Someplace I heard in AD pretty much every group you use 
>should be domain local unless it’s used for Exchange in which case you use 
>Universal.  All groups I create are domain local and it simply works, but I 
>know that doesn’t mean it’s right.
> 
>Before sending a note to the SE team on this I wanted to get a consensus from 
>you guys. Comments?
>David Lum
>Systems Engineer //NWEATM
>Office 503.548.5229//Cell (voice/text) 503.267.9764
> 
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>---
>To manage subscriptions click here: 
>http://lyris.sunbelt-software.com/read/my_forums/
>or send an email to listmana...@lyris.sunbeltsoftware.com
>with the body: unsubscribe ntsysadmin
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~ 

  1   2   >