Re: GPO Printers always showing as default

2013-01-04 Thread Oliver Marshall
Already set to Replace :(


On 4 January 2013 07:34, James Hill falc...@gmail.com wrote:

 Is the GPP set to create, update or replace?

 ** **

 If it isn’t already set it to replace and see if that helps.

 ** **

 James.

 ** **

 *From:* Oliver Marshall [mailto:oliver.marsh...@g2support.com]
 *Sent:* Thursday, 3 January 2013 8:52 PM
 *To:* NT System Admin Issues
 *Subject:* GPO Printers always showing as default

 ** **

 Hi

 We have a windows 2008 server with a group policy object that installs a
 network printer for people. This is set to *not* make this printer the
 default.

 However several users are reporting that each time they log on this
 network printer is configured as the default over their local printer. Not
 all users by any means. The users can set their local printers back to
 default but when they next log on the network printer is default again.

 Interestingly, at least one of the affected users has only started having
 this problem since moving to a new Windows 7 workstation. They used to have
 a Windows XP machine using Group Policy Client Side Preferences addin and
 the printer worked fine. Since Windows 7 they have had this issue.

 Is there anything anyone can think of that may be causing this?

 The server is windows 2008 r2 64 bit. The printer is applied in the User 
 Preferences  Control Panel Settings  Printers section of the GPO object.

 Olly


 [image: Image removed by sender.]

 [image: Image removed by sender.]

 Network Support
 Online Backups
 Server Management

 Tel: 0845 307 3443
 Web: http://www.g2support.com
 Twitter: g2support http://twitter.com/home?status=@g2support
 Google+: http://www.g2support.com/plus
 Facebook: http://www.facebook.com/g2support
 Mail: Unit H, Hove Technology Centre, Hove, Sussex, BN3 7ES

 Have you said something nice about us to a friend or colleague ? Let us
 say thanks. Find out more at www.g2support.com/referral

 G2 Support LLP is registered at Mill House, 103 Holmes Avenue, HOVE
 BN3 7LE. Our registered company number is OC316341.

 ** **

 [image: Image removed by sender.]   [image: Image removed by sender.]   
 [image:
 Image removed by sender.]

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


-- 
Network Support
Online Backups
Server Management

Tel: 0845 307 3443
Web: http://www.g2support.com
Twitter: g2support http://twitter.com/home?status=@g2support
Google+: http://www.g2support.com/plus
Facebook: http://www.facebook.com/g2support
Mail: Unit H, Hove Technology Centre, Hove, Sussex, BN3 7ES

Have you said something nice about us to a friend or colleague ? Let us say 
thanks. Find out more at www.g2support.com/referral

G2 Support LLP is registered at Mill House, 103 Holmes Avenue, HOVE
BN3 7LE. Our registered company number is OC316341.

  

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin~WRD000.jpgimage001.jpg

RE: GPO Printers always showing as default

2013-01-04 Thread James Hill
Whenever GPP is causing me headaches I turn on logging and go through the
detail.  Hopefully it will help you.

 

http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-pr
eferences-debug-logging-using-the-rsat.aspx

 

James.

 

From: Oliver Marshall [mailto:oliver.marsh...@g2support.com] 
Sent: Friday, 4 January 2013 8:15 PM
To: NT System Admin Issues
Subject: Re: GPO Printers always showing as default

 

Already set to Replace :(

 

On 4 January 2013 07:34, James Hill falc...@gmail.com
mailto:falc...@gmail.com  wrote:

Is the GPP set to create, update or replace?

 

If it isn't already set it to replace and see if that helps.

 

James.

 

From: Oliver Marshall [mailto:oliver.marsh...@g2support.com
mailto:oliver.marsh...@g2support.com ] 
Sent: Thursday, 3 January 2013 8:52 PM
To: NT System Admin Issues
Subject: GPO Printers always showing as default

 

Hi

We have a windows 2008 server with a group policy object that installs a
network printer for people. This is set to *not* make this printer the
default. 

However several users are reporting that each time they log on this network
printer is configured as the default over their local printer. Not all users
by any means. The users can set their local printers back to default but
when they next log on the network printer is default again.

Interestingly, at least one of the affected users has only started having
this problem since moving to a new Windows 7 workstation. They used to have
a Windows XP machine using Group Policy Client Side Preferences addin and
the printer worked fine. Since Windows 7 they have had this issue. 

Is there anything anyone can think of that may be causing this?

The server is windows 2008 r2 64 bit. The printer is applied in the User 
Preferences  Control Panel Settings  Printers section of the GPO object. 

Olly







Network Support
Online Backups
Server Management


Tel: 0845 307 3443 tel:0845%20307%203443 
Web: http://www.g2support.com http://www.g2support.com/ 
Twitter: g2support http://twitter.com/home?status=@g2support 
Google+: http://www.g2support.com/plus
Facebook: http://www.facebook.com/g2support
Mail: Unit H, Hove Technology Centre, Hove, Sussex, BN3 7ES

Have you said something nice about us to a friend or colleague ? Let us say
thanks. Find out more at www.g2support.com/referral
http://www.g2support.com/referral 

G2 Support LLP is registered at Mill House, 103 Holmes Avenue, HOVE
BN3 7LE. Our registered company number is OC316341.

 

  

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
mailto:listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
mailto:listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin

 







Network Support
Online Backups
Server Management


Tel: 0845 307 3443
Web: http://www.g2support.com http://www.g2support.com/ 
Twitter: g2support http://twitter.com/home?status=@g2support 
Google+: http://www.g2support.com/plus
Facebook: http://www.facebook.com/g2support
Mail: Unit H, Hove Technology Centre, Hove, Sussex, BN3 7ES

Have you said something nice about us to a friend or colleague ? Let us say
thanks. Find out more at www.g2support.com/referral
http://www.g2support.com/referral 

G2 Support LLP is registered at Mill House, 103 Holmes Avenue, HOVE
BN3 7LE. Our registered company number is OC316341.

 

  

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
mailto:listmana...@lyris.sunbeltsoftware.com 
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin~WRD000.jpgimage001.jpgimage002.jpg

Re: Enterprise task scheduler

2013-01-04 Thread Maglinger, Paul
Sorry for the late entry. You might check I-S-E Enterprise Schedule. We've been 
using it for over 5 years and have been pleased with it. 

- Paul

Sent from my iPad

On Jan 3, 2013, at 6:41 PM, Adam Meixler ad...@interlink1.com wrote:

 Simply because 
 http://social.technet.microsoft.com/Forums/en-US/scogeneral/thread/3eab8fa3-c30c-4c29-91a4-92d03e5c69f4/
  was one of the first notes I read while investigating this
 
 From: Steven Peck [sep...@gmail.com]
 Sent: Thursday, January 03, 2013 1:03 PM
 To: NT System Admin Issues
 Subject: Re: Enterprise task scheduler
 
 Why would it not be used for Task Scheduling?
 http://technet.microsoft.com/en-us/library/hh420338
 
 Not saying it's the best, just wondering why you can't use it for that.  If 
 you already have System Center suite then it's something you can try for 
 'free'.
 
 
 
 On Wed, Jan 2, 2013 at 3:09 PM, Kurt Buff 
 kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote:
 Yep - Opalis. Shame that - there aren't many packages in that spot.
 
 Winbatch might be your better bet, in that case. It's been a long time
 since I played with those products, too.
 
 Kurt
 
 On Wed, Jan 2, 2013 at 1:08 PM, Adam Meixler 
 ad...@interlink1.commailto:ad...@interlink1.com wrote:
 I had thought the same thing! (was Opalis?)
 
 Some googling seems to suggest that it's not meant for Task Scheduling any 
 more. It can be made to do it, but its strong suit is repeatable Jobs rather 
 than scheduled tasks now.
 
 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com]
 Sent: Wednesday, January 02, 2013 3:30 PM
 To: NT System Admin Issues
 Subject: Re: Enterprise task scheduler
 
 It's been a lot of years since I touched it (more than 10!) and it's since 
 been acquired by MSFT and rolled into the SC suite, but Orchestrator comes 
 to mind...
 
 Might be worth a look.
 
 Kurt
 
 On Wed, Jan 2, 2013 at 10:33 AM, Adam Meixler 
 ad...@interlink1.commailto:ad...@interlink1.com wrote:
 Happy New Year everyone!
 
 
 
 I was hoping to get The Lists opinion on a good, un-bloated enterprise
 task scheduler. Right now we have about a thousand tasks scattered
 across different servers using the windows scheduled task service and
 it’s just not doing it for us.
 
 
 
 It’d be nice if jobs could be pushed down to workers as they were
 available vs. being scheduled on specific instances, but we at least
 want a central control of these jobs.
 
 
 
 We’re open to any ideas that don’t involve CA
 
 
 
 Thanks all
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 

Re: Time sync

2013-01-04 Thread Eric Wittersheim
We run the product from Meinberg.  It works very well except on HV guests.

On Fri, Jan 4, 2013 at 8:10 AM, Richard McClary
richard.mccl...@aspca.orgwrote:

 Greetings!

 ** **

 I’m sure I and many others have asked this (but are still stumped).  Ken
 S’s reply yesterday pointing to ultimately a chain of TechNet articles has
 shed some light and will start us digging.

 ** **

 Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322)
 – mainly meant to make Kerberos v5 work.

 ** **

 Our issue is, W32Time lets things drift enough for weird things to occur
 in our medical records.

 ** **

 We have a veterinary toxicology consulting hotline.  Because things get
 out of sync a bit, we frequently have medical records opening before a
 client’s telephone call is received.

 ** **

 The article referenced above essentially says to go find an alternative to
 W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has
 anyone on the list used (and would recommend) anything on that list to fix
 the “record created prior to the call” situation?  (
 http://www.nist.gov/pml/div688/grp40/softwarelist.cfm) 

 ** **

 Thank you…

 --

 richard

 ** **


 The information contained in this e-mail, and any attachments hereto, is
 from The American Society for the Prevention of Cruelty to Animals®
 (ASPCA®) and is intended only for use by the addressee(s) named herein and
 may contain legally privileged and/or confidential information. If you are
 not the intended recipient of this e-mail, you are hereby notified that any
 dissemination, distribution, copying or use of the contents of this e-mail,
 and any attachments hereto, is strictly prohibited. If you have received
 this e-mail in error, please immediately notify me by reply email and
 permanently delete the original and any copy of this e-mail and any
 printout thereof.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Enterprise task scheduler

2013-01-04 Thread Michael B. Smith
Honestly, I'm not sure I see a difference between repeatable jobs and scheduled 
tasks, other than nomenclature. :)

I use Orchestrator for this at a couple of clients and it seems to work just 
fine and the reports are sweet. YMMV.

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Wednesday, January 2, 2013 6:09 PM
To: NT System Admin Issues
Subject: Re: Enterprise task scheduler

Yep - Opalis. Shame that - there aren't many packages in that spot.

Winbatch might be your better bet, in that case. It's been a long time since I 
played with those products, too.

Kurt

On Wed, Jan 2, 2013 at 1:08 PM, Adam Meixler ad...@interlink1.com wrote:
 I had thought the same thing! (was Opalis?)

 Some googling seems to suggest that it's not meant for Task Scheduling any 
 more. It can be made to do it, but its strong suit is repeatable Jobs rather 
 than scheduled tasks now.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Wednesday, January 02, 2013 3:30 PM
 To: NT System Admin Issues
 Subject: Re: Enterprise task scheduler

 It's been a lot of years since I touched it (more than 10!) and it's since 
 been acquired by MSFT and rolled into the SC suite, but Orchestrator comes to 
 mind...

 Might be worth a look.

 Kurt

 On Wed, Jan 2, 2013 at 10:33 AM, Adam Meixler ad...@interlink1.com wrote:
 Happy New Year everyone!



 I was hoping to get The Lists opinion on a good, un-bloated 
 enterprise task scheduler. Right now we have about a thousand tasks 
 scattered across different servers using the windows scheduled task 
 service and it’s just not doing it for us.



 It’d be nice if jobs could be pushed down to workers as they were 
 available vs. being scheduled on specific instances, but we at least 
 want a central control of these jobs.



 We’re open to any ideas that don’t involve CA



 Thanks all

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Time sync

2013-01-04 Thread Ken Cornetet
We run the Meinberg NTP port as well. We will soon start migrating from VMWare 
(where the Meinberg NTP port works great) to HyperV. Care to elaborate on what 
you mean by except on HV guests?

From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com]
Sent: Friday, January 04, 2013 9:24 AM
To: NT System Admin Issues
Subject: Re: Time sync

We run the product from Meinberg.  It works very well except on HV guests.
On Fri, Jan 4, 2013 at 8:10 AM, Richard McClary 
richard.mccl...@aspca.orgmailto:richard.mccl...@aspca.org wrote:
Greetings!

I'm sure I and many others have asked this (but are still stumped).  Ken S's 
reply yesterday pointing to ultimately a chain of TechNet articles has shed 
some light and will start us digging.

Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322) - 
mainly meant to make Kerberos v5 work.

Our issue is, W32Time lets things drift enough for weird things to occur in our 
medical records.

We have a veterinary toxicology consulting hotline.  Because things get out of 
sync a bit, we frequently have medical records opening before a client's 
telephone call is received.

The article referenced above essentially says to go find an alternative to 
W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has 
anyone on the list used (and would recommend) anything on that list to fix the 
record created prior to the call situation?  
(http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)

Thank you...
--
richard



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Time sync

2013-01-04 Thread Kennedy, Jim
Here is how I do it.

I use the standard domain structure and have the PDC emulator sync to a good 
outside source.  But the one thing I added was a scheduled task on every server 
that runs twice a day to stop and start the time service. That has helped 
dramatically, I can't remember the last time (pun intended) we had a time sync 
issue.

From: Richard McClary [mailto:richard.mccl...@aspca.org]
Sent: Friday, January 04, 2013 9:11 AM
To: NT System Admin Issues
Subject: Time sync

Greetings!

I'm sure I and many others have asked this (but are still stumped).  Ken S's 
reply yesterday pointing to ultimately a chain of TechNet articles has shed 
some light and will start us digging.

Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322) - 
mainly meant to make Kerberos v5 work.

Our issue is, W32Time lets things drift enough for weird things to occur in our 
medical records.

We have a veterinary toxicology consulting hotline.  Because things get out of 
sync a bit, we frequently have medical records opening before a client's 
telephone call is received.

The article referenced above essentially says to go find an alternative to 
W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has 
anyone on the list used (and would recommend) anything on that list to fix the 
record created prior to the call situation?  
(http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)

Thank you...
--
richard



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Occasional local admin needed

2013-01-04 Thread Kennedy, Jim
Do a domain account as you describe and set the account to expire tomorrow.  
When they need it you re-enable it and set it to expire again the next day. 
Still manual intervention on your part but the automatic expire solves the 
ongoing access issue.

From: David Lum [mailto:david@nwea.org]
Sent: Friday, January 04, 2013 10:41 AM
To: NT System Admin Issues
Subject: Occasional local admin needed

How would you guys handle this? I have a server that the developers use that 
they occasionally (once a month or so) need local admin access for to 
install/upgrade an app or feature they use. This is a new-ish server that 
previously I have just added a user (it's the same one each time) to the local 
admin group then a week later took them out, but that's cumbersome and I become 
the single point of failure on remembering to back them out.

I could 1. create a special AD account for this user to be local admin, or 2. 
create an  AD group, put this person in it, then GPO that group into local 
admins on that server.

Suggestions?
David Lum
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Occasional local admin needed

2013-01-04 Thread Brian Desmond
How about you create an AD Group, nest the AD group in local admins, and add 
the relevant users? GPOs and extra accounts for a dev box like this sounds like 
substantial unnecessary overhead.

Thanks,
Brian Desmond
br...@briandesmond.commailto:br...@briandesmond.com

w - 312.625.1438 | c - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Friday, January 4, 2013 9:40 AM
To: NT System Admin Issues
Subject: Occasional local admin needed

How would you guys handle this? I have a server that the developers use that 
they occasionally (once a month or so) need local admin access for to 
install/upgrade an app or feature they use. This is a new-ish server that 
previously I have just added a user (it's the same one each time) to the local 
admin group then a week later took them out, but that's cumbersome and I become 
the single point of failure on remembering to back them out.

I could 1. create a special AD account for this user to be local admin, or 2. 
create an  AD group, put this person in it, then GPO that group into local 
admins on that server.

Suggestions?
David Lum
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Occasional local admin needed

2013-01-04 Thread Guyer, Don
I would use an AD account, placed in the local admins group and then 
enable/disable as needed.

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.orgmailto:dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.
[cid:image001.jpg@01CDEA6A.558CB490]

From: David Lum [mailto:david@nwea.org]
Sent: Friday, January 04, 2013 10:40 AM
To: NT System Admin Issues
Subject: Occasional local admin needed

How would you guys handle this? I have a server that the developers use that 
they occasionally (once a month or so) need local admin access for to 
install/upgrade an app or feature they use. This is a new-ish server that 
previously I have just added a user (it's the same one each time) to the local 
admin group then a week later took them out, but that's cumbersome and I become 
the single point of failure on remembering to back them out.

I could 1. create a special AD account for this user to be local admin, or 2. 
create an  AD group, put this person in it, then GPO that group into local 
admins on that server.

Suggestions?
David Lum
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Confidentiality Notice:
This e-mail, including any attachments is the 
property of Catholic Health East and is intended 
for the sole use of the intended recipient(s).  
It may contain information that is privileged and 
confidential.  Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are 
not the intended recipient, please delete this message, and 
reply to the sender regarding the error in a separate email.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmininline: image001.jpg

Re: Time sync

2013-01-04 Thread Christopher Bodnar
How far is your drift? What it the tolerance for drift in the application? 


Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com 







From:   Richard McClary richard.mccl...@aspca.org
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date:   01/04/2013 09:11 AM
Subject:Time sync



Greetings!
 
I’m sure I and many others have asked this (but are still stumped).  Ken 
S’s reply yesterday pointing to ultimately a chain of TechNet articles has 
shed some light and will start us digging.
 
Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322
) – mainly meant to make Kerberos v5 work.
 
Our issue is, W32Time lets things drift enough for weird things to occur 
in our medical records.
 
We have a veterinary toxicology consulting hotline.  Because things get 
out of sync a bit, we frequently have medical records opening before a 
client’s telephone call is received.
 
The article referenced above essentially says to go find an alternative to 
W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has 
anyone on the list used (and would recommend) anything on that list to fix 
the “record created prior to the call” situation?  (
http://www.nist.gov/pml/div688/grp40/softwarelist.cfm) 
 
Thank you…
--
richard
 


The information contained in this e-mail, and any attachments hereto, is 
from The American Society for the Prevention of Cruelty to Animals® 
(ASPCA®) and is intended only for use by the addressee(s) named herein and 
may contain legally privileged and/or confidential information. If you are 
not the intended recipient of this e-mail, you are hereby notified that 
any dissemination, distribution, copying or use of the contents of this 
e-mail, and any attachments hereto, is strictly prohibited. If you have 
received this e-mail in error, please immediately notify me by reply email 
and permanently delete the original and any copy of this e-mail and any 
printout thereof. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
image/jpeg

RE: Time sync

2013-01-04 Thread Chinnery, Paul
Slightly OT, Ken, but why are you moving away from VM?  Cost or something else 
that HyperV gives you that VM doesn't?


Paul Chinnery
Network Admin
Memorial Medical Center
231.845.2319



From: Ken Cornetet [mailto:ken.corne...@kimball.com]
Sent: Friday, January 04, 2013 10:30 AM
To: NT System Admin Issues
Subject: RE: Time sync

We run the Meinberg NTP port as well. We will soon start migrating from VMWare 
(where the Meinberg NTP port works great) to HyperV. Care to elaborate on what 
you mean by except on HV guests?

From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com]
Sent: Friday, January 04, 2013 9:24 AM
To: NT System Admin Issues
Subject: Re: Time sync

We run the product from Meinberg.  It works very well except on HV guests.
On Fri, Jan 4, 2013 at 8:10 AM, Richard McClary 
richard.mccl...@aspca.orgmailto:richard.mccl...@aspca.org wrote:
Greetings!

I'm sure I and many others have asked this (but are still stumped).  Ken S's 
reply yesterday pointing to ultimately a chain of TechNet articles has shed 
some light and will start us digging.

Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322) - 
mainly meant to make Kerberos v5 work.

Our issue is, W32Time lets things drift enough for weird things to occur in our 
medical records.

We have a veterinary toxicology consulting hotline.  Because things get out of 
sync a bit, we frequently have medical records opening before a client's 
telephone call is received.

The article referenced above essentially says to go find an alternative to 
W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has 
anyone on the list used (and would recommend) anything on that list to fix the 
record created prior to the call situation?  
(http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)

Thank you...
--
richard



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Occasional local admin needed

2013-01-04 Thread Ziots, Edward
Restricted Group GPO or do it via GPP...

 

Z

 

Edward E. Ziots, CISSP, Security +, Network +

Security Engineer

Lifespan Organization

ezi...@lifespan.org

 

From: David Lum [mailto:david@nwea.org] 
Sent: Friday, January 04, 2013 10:40 AM
To: NT System Admin Issues
Subject: Occasional local admin needed

 

How would you guys handle this? I have a server that the developers use
that they occasionally (once a month or so) need local admin access for
to install/upgrade an app or feature they use. This is a new-ish server
that previously I have just added a user (it's the same one each time)
to the local admin group then a week later took them out, but that's
cumbersome and I become the single point of failure on remembering to
back them out.

 

I could 1. create a special AD account for this user to be local admin,
or 2. create an  AD group, put this person in it, then GPO that group
into local admins on that server.

 

Suggestions?

David Lum 
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Time sync

2013-01-04 Thread Steve Kradel
How much time skew are we talking about here?  While MSFT will only
support w32tm accuracy within 1-2 seconds, in practice I have found it
to be stable within a tenth of a second or less, and would not feel
compelled to look into very-high-accuracy NTP clients for regular
non-scientific applications.  Do you have separate systems recording
the timestamps of an incoming call and the creation of a linked
medical record, or are things unreliable even on a single host?

--Steve

On Fri, Jan 4, 2013 at 9:10 AM, Richard McClary
richard.mccl...@aspca.org wrote:
 Greetings!



 I’m sure I and many others have asked this (but are still stumped).  Ken S’s
 reply yesterday pointing to ultimately a chain of TechNet articles has shed
 some light and will start us digging.



 Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322)
 – mainly meant to make Kerberos v5 work.



 Our issue is, W32Time lets things drift enough for weird things to occur in
 our medical records.



 We have a veterinary toxicology consulting hotline.  Because things get out
 of sync a bit, we frequently have medical records opening before a client’s
 telephone call is received.



 The article referenced above essentially says to go find an alternative to
 W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has
 anyone on the list used (and would recommend) anything on that list to fix
 the “record created prior to the call” situation?
 (http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)



 Thank you…

 --

 richard





 The information contained in this e-mail, and any attachments hereto, is
 from The American Society for the Prevention of Cruelty to Animals® (ASPCA®)
 and is intended only for use by the addressee(s) named herein and may
 contain legally privileged and/or confidential information. If you are not
 the intended recipient of this e-mail, you are hereby notified that any
 dissemination, distribution, copying or use of the contents of this e-mail,
 and any attachments hereto, is strictly prohibited. If you have received
 this e-mail in error, please immediately notify me by reply email and
 permanently delete the original and any copy of this e-mail and any printout
 thereof.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: LAptops

2013-01-04 Thread Matthew W. Ross
Which drivers are you missing?

Alas, as with Windows 2000, XP may be loosing driver support for some 
components. If you know exactly which components you are missing drivers for, 
you can sometimes go directly to the manufacturer of the components for 
drivers. Also, on occasion, you can find the same components in a different 
model of PC that does have XP versions of the drivers. YMMV.


--Matt Ross
Ephrata School District


- Original Message -
From: Nigel Parker
[mailto:nigel.par...@ultraframe.co.uk]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 04 Jan 2013
07:40:52 -0800
Subject: LAptops


 Hi 
 Has anyone purchased any Dell Dell Vostro 2520 laptops 
 And put windows xp on them 
 
 We run XP as we have software that will not run on windows 7 at the
 moment due to cost we cant upgrade this so we are stuck on XP 
 On dells site they don't list drivers for xp (I know some of the
 latitude systems are supported with xp but its all down to cost as they
 are more expensive and I have a budget to work with)
 
 Just wondered if anyone had found xp drivers and was running one of the
 vostro 2520 machines with windows xp 
 
 
 Nigel Parker
 Systems Engineer
 Ultraframe (UK) Ltd
 Tel:   01200 452329
 Fax:   01200 452201
 Web:   www.ultraframe.com
 Email: mailto:nigel.par...@ultraframe.co.uk
 
 
 
 
 
 Please consider the environment before printing this e-mail.
 
 The statements and opinions expressed in this email are my own and may not
 represent those of Ultraframe (UK) Ltd.
 This email is subject to copyright and the information contained in it is
 confidential and may be legally privileged. It is sent out only for intended
 recipient(s). Access to this email by anyone else is unauthorised. If you
 are not an intended recipient, any disclosure, copying, distribution or
 other use or any action taken or omitted to be taken in reliance on it, is
 prohibited and unlawful.
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Time sync

2013-01-04 Thread Ziots, Edward
I was thinking the same thing. Actually IMHO VM still does more than
Hyper-V does...

 

Z

 

Edward E. Ziots, CISSP, Security +, Network +

Security Engineer

Lifespan Organization

ezi...@lifespan.org

 

From: Chinnery, Paul [mailto:pa...@mmcwm.com] 
Sent: Friday, January 04, 2013 11:23 AM
To: NT System Admin Issues
Subject: RE: Time sync

 

Slightly OT, Ken, but why are you moving away from VM?  Cost or
something else that HyperV gives you that VM doesn't?

 

 

Paul Chinnery

Network Admin

Memorial Medical Center

231.845.2319

 

 

 

From: Ken Cornetet [mailto:ken.corne...@kimball.com] 
Sent: Friday, January 04, 2013 10:30 AM
To: NT System Admin Issues
Subject: RE: Time sync

 

We run the Meinberg NTP port as well. We will soon start migrating from
VMWare (where the Meinberg NTP port works great) to HyperV. Care to
elaborate on what you mean by except on HV guests?

 

From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] 
Sent: Friday, January 04, 2013 9:24 AM
To: NT System Admin Issues
Subject: Re: Time sync

 

We run the product from Meinberg.  It works very well except on HV
guests.

On Fri, Jan 4, 2013 at 8:10 AM, Richard McClary
richard.mccl...@aspca.org wrote:

Greetings!

 

I'm sure I and many others have asked this (but are still stumped).  Ken
S's reply yesterday pointing to ultimately a chain of TechNet articles
has shed some light and will start us digging.

 

Microsoft admits W32Time is sloppy
(http://support.microsoft.com/kb/939322) - mainly meant to make Kerberos
v5 work.

 

Our issue is, W32Time lets things drift enough for weird things to occur
in our medical records.

 

We have a veterinary toxicology consulting hotline.  Because things get
out of sync a bit, we frequently have medical records opening before a
client's telephone call is received.

 

The article referenced above essentially says to go find an alternative
to W32Time.  NIST has gathered a list of time sync software.  QUESTION:
has anyone on the list used (and would recommend) anything on that list
to fix the record created prior to the call situation?
(http://www.nist.gov/pml/div688/grp40/softwarelist.cfm) 

 

Thank you...

--

richard

 

 


The information contained in this e-mail, and any attachments hereto, is
from The American Society for the Prevention of Cruelty to Animals(r)
(ASPCA(r)) and is intended only for use by the addressee(s) named herein
and may contain legally privileged and/or confidential information. If
you are not the intended recipient of this e-mail, you are hereby
notified that any dissemination, distribution, copying or use of the
contents of this e-mail, and any attachments hereto, is strictly
prohibited. If you have received this e-mail in error, please
immediately notify me by reply email and permanently delete the original
and any copy of this e-mail and any printout thereof. 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Occasional local admin needed

2013-01-04 Thread Tim Vander Kooi
That is what we do for users who have these types of needs.
TVK

From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Friday, January 4, 2013 9:54 AM
To: NT System Admin Issues
Subject: RE: Occasional local admin needed

How about you create an AD Group, nest the AD group in local admins, and add 
the relevant users? GPOs and extra accounts for a dev box like this sounds like 
substantial unnecessary overhead.

Thanks,
Brian Desmond
br...@briandesmond.commailto:br...@briandesmond.com

w - 312.625.1438 | c - 312.731.3132

From: David Lum [mailto:david@nwea.org]
Sent: Friday, January 4, 2013 9:40 AM
To: NT System Admin Issues
Subject: Occasional local admin needed

How would you guys handle this? I have a server that the developers use that 
they occasionally (once a month or so) need local admin access for to 
install/upgrade an app or feature they use. This is a new-ish server that 
previously I have just added a user (it's the same one each time) to the local 
admin group then a week later took them out, but that's cumbersome and I become 
the single point of failure on remembering to back them out.

I could 1. create a special AD account for this user to be local admin, or 2. 
create an  AD group, put this person in it, then GPO that group into local 
admins on that server.

Suggestions?
David Lum
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Replacement for SteadyState

2013-01-04 Thread Jonathan Link
I know our local school district uses Deep Freeze.


On Fri, Jan 4, 2013 at 11:36 AM, Bambi J Saastad 
bambi.j.saas...@seagate.com wrote:

 Hello
 I was wondering if any of you could suggest a replacement for SteadyState.
 I have a roomful of pc's that the factory users use for browsing etc that
 I am replacing with Windows 7 Pro that need to be locked down.

 Can anyone suggest a product that does the same thing, wipe out any
 changes on reboot?

 TIA
 B



  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Replacement for SteadyState

2013-01-04 Thread Christopher Bodnar
Have you looked at this document yet?

http://www.microsoft.com/en-us/download/details.aspx?id=24373

Also, have you considered going to Thin Clients and using RDS? 

Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com 







From:   Bambi J Saastad bambi.j.saas...@seagate.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date:   01/04/2013 12:04 PM
Subject:Replacement for SteadyState



Hello
I was wondering if any of you could suggest a replacement for SteadyState.
I have a roomful of pc's that the factory users use for browsing etc that 
I am replacing with Windows 7 Pro that need to be locked down.

Can anyone suggest a product that does the same thing, wipe out any 
changes on reboot?

TIA
B



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage/jpeg

RE: Time sync

2013-01-04 Thread Richard McClary
Thanks to all so far!

The drift goes off into minutes apart.

I presume somewhere in those TechNet articles is something (registry hack to 
workstations via GPO) that can have servers and workstations sync with the DC 
every 1-2 hours?  (At first skimming, it's not all that clear.)

Thanks again

-Original Message-
From: Steve Kradel [mailto:skra...@zetetic.net] 
Sent: Friday, January 04, 2013 10:32 AM
To: NT System Admin Issues
Subject: Re: Time sync

How much time skew are we talking about here?  While MSFT will only support 
w32tm accuracy within 1-2 seconds, in practice I have found it to be stable 
within a tenth of a second or less, and would not feel compelled to look into 
very-high-accuracy NTP clients for regular non-scientific applications.  Do you 
have separate systems recording the timestamps of an incoming call and the 
creation of a linked medical record, or are things unreliable even on a single 
host?

--Steve

On Fri, Jan 4, 2013 at 9:10 AM, Richard McClary richard.mccl...@aspca.org 
wrote:
 Greetings!



 I'm sure I and many others have asked this (but are still stumped).  
 Ken S's reply yesterday pointing to ultimately a chain of TechNet 
 articles has shed some light and will start us digging.



 Microsoft admits W32Time is sloppy 
 (http://support.microsoft.com/kb/939322)
 - mainly meant to make Kerberos v5 work.



 Our issue is, W32Time lets things drift enough for weird things to 
 occur in our medical records.



 We have a veterinary toxicology consulting hotline.  Because things 
 get out of sync a bit, we frequently have medical records opening 
 before a client's telephone call is received.



 The article referenced above essentially says to go find an 
 alternative to W32Time.  NIST has gathered a list of time sync 
 software.  QUESTION:  has anyone on the list used (and would 
 recommend) anything on that list to fix the record created prior to the 
 call situation?
 (http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)



 Thank you...

 --

 richard





 The information contained in this e-mail, and any attachments hereto, 
 is from The American Society for the Prevention of Cruelty to Animals(r) 
 (ASPCA(r)) and is intended only for use by the addressee(s) named herein 
 and may contain legally privileged and/or confidential information. If 
 you are not the intended recipient of this e-mail, you are hereby 
 notified that any dissemination, distribution, copying or use of the 
 contents of this e-mail, and any attachments hereto, is strictly 
 prohibited. If you have received this e-mail in error, please 
 immediately notify me by reply email and permanently delete the 
 original and any copy of this e-mail and any printout thereof.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Replacement for SteadyState

2013-01-04 Thread Michael B. Smith
Boot from VHD with a differencing disk.

From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com]
Sent: Friday, January 4, 2013 11:36 AM
To: NT System Admin Issues
Subject: Replacement for SteadyState

Hello
I was wondering if any of you could suggest a replacement for SteadyState.
I have a roomful of pc's that the factory users use for browsing etc that I am 
replacing with Windows 7 Pro that need to be locked down.

Can anyone suggest a product that does the same thing, wipe out any changes on 
reboot?

TIA
B



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Replacement for SteadyState

2013-01-04 Thread Matthew W. Ross
SteadyState died with Vista, as I'm sure you're aware.

The top dog in this field is Deep Freeze.

I also have used the products by FotresGrand, in particular Fortres 101 (which 
is not exactly the same as Deep Freeze or SteadyState, but they do sell a 
product called Clean Slate which does what you want, I believe.)


--Matt Ross
Ephrata School District


- Original Message -
From: Bambi J Saastad
[mailto:bambi.j.saas...@seagate.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 04 Jan 2013
08:36:04 -0800
Subject: Replacement for SteadyState


 Hello
 I was wondering if any of you could suggest a replacement for SteadyState.
 I have a roomful of pc's that the factory users use for browsing etc that I
 am replacing with Windows 7 Pro that need to be locked down.
 
 Can anyone suggest a product that does the same thing, wipe out any changes
 on reboot?
 
 TIA
 B
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Replacement for SteadyState

2013-01-04 Thread Vicky Spelshaus
The campus I support has been using Faronics DeepFreeze in our labs for
several years.

http://www.faronics.com/

On Fri, Jan 4, 2013 at 10:36 AM, Bambi J Saastad 
bambi.j.saas...@seagate.com wrote:

 Hello
 I was wondering if any of you could suggest a replacement for SteadyState.
 I have a roomful of pc's that the factory users use for browsing etc that
 I am replacing with Windows 7 Pro that need to be locked down.

 Can anyone suggest a product that does the same thing, wipe out any
 changes on reboot?

 TIA
 B



  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




-- 
Organization and good planning are just crutches for people that can't
handle stress and caffeine. - unknown

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Replacement for SteadyState

2013-01-04 Thread Glen Johnson
Not free, but we could not function at the school without DeepFreeze.

From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com]
Sent: Friday, January 04, 2013 11:36 AM
To: NT System Admin Issues
Subject: Replacement for SteadyState

Hello
I was wondering if any of you could suggest a replacement for SteadyState.
I have a roomful of pc's that the factory users use for browsing etc that I am 
replacing with Windows 7 Pro that need to be locked down.

Can anyone suggest a product that does the same thing, wipe out any changes on 
reboot?

TIA
B



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Replacement for SteadyState

2013-01-04 Thread John Cook
http://www.steadierstate.com/  It's a Minassi creation

 John W. Cook
Network Operations Manager
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4

From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com]
Sent: Friday, January 04, 2013 11:36 AM
To: NT System Admin Issues
Subject: Replacement for SteadyState

Hello
I was wondering if any of you could suggest a replacement for SteadyState.
I have a roomful of pc's that the factory users use for browsing etc that I am 
replacing with Windows 7 Pro that need to be locked down.

Can anyone suggest a product that does the same thing, wipe out any changes on 
reboot?

TIA
B



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



CONFIDENTIALITY STATEMENT: The information transmitted, or contained or 
attached to or with this Notice is intended only for the person or entity to 
which it is addressed and may contain Protected Health Information (PHI), 
confidential and/or privileged material. Any review, transmission, 
dissemination, or other use of, and taking any action in reliance upon this 
information by persons or entities other than the intended recipient without 
the express written consent of the sender are prohibited. This information may 
be protected by the Health Insurance Portability and Accountability Act of 1996 
(HIPAA), and other Federal and Florida laws. Improper or unauthorized use or 
disclosure of this information could result in civil and/or criminal penalties.
Consider the environment. Please don't print this e-mail unless you really need 
to.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Replacement for SteadyState

2013-01-04 Thread Paul Gordon
Or this:   http://www.steadierstate.com/

 

Paul G.

 

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: 04 January 2013 17:09
To: NT System Admin Issues
Subject: Re: Replacement for SteadyState

 

Have you looked at this document yet? 

 http://www.microsoft.com/en-us/download/details.aspx?id=24373
http://www.microsoft.com/en-us/download/details.aspx?id=24373 

Also, have you considered going to Thin Clients and using RDS? 


Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise
Architecture and Engineering Services 


Tel 610-807-6459  
3900 Burgess Place, Bethlehem, PA 18017 
 mailto: christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

 http://www.guardianlife.com/ www.guardianlife.com 








From:Bambi J Saastad bambi.j.saas...@seagate.com 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:01/04/2013 12:04 PM 
Subject:Replacement for SteadyState 

  _  




Hello 
I was wondering if any of you could suggest a replacement for SteadyState. 
I have a roomful of pc's that the factory users use for browsing etc that I
am replacing with Windows 7 Pro that need to be locked down. 

Can anyone suggest a product that does the same thing, wipe out any changes
on reboot?

TIA
B 



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpg

RE: Replacement for SteadyState

2013-01-04 Thread Mike Hoffman
There's an article here about doing it:

http://www.windowsitpro.com/article/windows-power-tools/replicating-steadystate-windows-7-129192

Mike

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: 04 January 2013 17:13
To: NT System Admin Issues
Subject: RE: Replacement for SteadyState

Boot from VHD with a differencing disk.

From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com]
Sent: Friday, January 4, 2013 11:36 AM
To: NT System Admin Issues
Subject: Replacement for SteadyState

Hello
I was wondering if any of you could suggest a replacement for SteadyState.
I have a roomful of pc's that the factory users use for browsing etc that I am 
replacing with Windows 7 Pro that need to be locked down.

Can anyone suggest a product that does the same thing, wipe out any changes on 
reboot?

TIA
B


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Time sync

2013-01-04 Thread Free, Bob
If it's minutes, something's wrong. My experience is much the same as Steve's. 
Other than some very specialized applications, w32time is sufficient. We do 
have a very intricate Time Synchronization Network with multiple atomic clocks 
and other sources but it's not needed on the majority of windows clients. We 
used to run the ntp.org software on the NT DCs in lieu of timeserv but w32time 
has been sufficient since we moved to AD. My DCs in the domain I just checked 
are all within 15 ms of Stratum 1, actually only one is over 10ms. My laptop is 
on VPN over LTE and hasn't been in the office in months and it is only +70ms 
from Stratum 2.

Biggest problem I've had over the years is with meddlers who *think* they know 
better and fool around with it. Usually setting things back to default and 
w32tm /resync fixes it.

-Original Message-
From: Steve Kradel [mailto:skra...@zetetic.net] 
Sent: Friday, January 04, 2013 8:32 AM
To: NT System Admin Issues
Subject: Re: Time sync

How much time skew are we talking about here?  While MSFT will only support 
w32tm accuracy within 1-2 seconds, in practice I have found it to be stable 
within a tenth of a second or less, and would not feel compelled to look into 
very-high-accuracy NTP clients for regular non-scientific applications.  Do you 
have separate systems recording the timestamps of an incoming call and the 
creation of a linked medical record, or are things unreliable even on a single 
host?

--Steve

On Fri, Jan 4, 2013 at 9:10 AM, Richard McClary richard.mccl...@aspca.org 
wrote:
 Greetings!



 I'm sure I and many others have asked this (but are still stumped).  
 Ken S's reply yesterday pointing to ultimately a chain of TechNet 
 articles has shed some light and will start us digging.



 Microsoft admits W32Time is sloppy 
 (http://support.microsoft.com/kb/939322)
 - mainly meant to make Kerberos v5 work.



 Our issue is, W32Time lets things drift enough for weird things to 
 occur in our medical records.



 We have a veterinary toxicology consulting hotline.  Because things 
 get out of sync a bit, we frequently have medical records opening 
 before a client's telephone call is received.



 The article referenced above essentially says to go find an 
 alternative to W32Time.  NIST has gathered a list of time sync 
 software.  QUESTION:  has anyone on the list used (and would 
 recommend) anything on that list to fix the record created prior to the 
 call situation?
 (http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)



 Thank you...

 --

 richard





 The information contained in this e-mail, and any attachments hereto, 
 is from The American Society for the Prevention of Cruelty to Animals(r) 
 (ASPCA(r)) and is intended only for use by the addressee(s) named herein 
 and may contain legally privileged and/or confidential information. If 
 you are not the intended recipient of this e-mail, you are hereby 
 notified that any dissemination, distribution, copying or use of the 
 contents of this e-mail, and any attachments hereto, is strictly 
 prohibited. If you have received this e-mail in error, please 
 immediately notify me by reply email and permanently delete the 
 original and any copy of this e-mail and any printout thereof.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



PGE is committed to protecting our customers' privacy. 
To learn more, please visit http://www.pge.com/about/company/privacy/customer/

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Replacement for SteadyState

2013-01-04 Thread Mike Hoffman
15 years ago we did something similar with Windows NT and the article blow 
explains the principal for Windows 7. If you can then use Windows 8 and you can 
build a system with a completely VHD based environment. If you add a Windows PE 
partition and a differencing disk then you can either lock down the machine, or 
allow for an open machine and a restore after a reboot.

One day I'll reply to a post and it will appear within an hour!! - can I claim 
the first Frikin Lyris of the year?

Mike

From: Mike Hoffman [mailto:m...@drumbrae.net]
Sent: 04 January 2013 18:02
To: NT System Admin Issues
Subject: RE: Replacement for SteadyState

There's an article here about doing it:

http://www.windowsitpro.com/article/windows-power-tools/replicating-steadystate-windows-7-129192

Mike

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: 04 January 2013 17:13
To: NT System Admin Issues
Subject: RE: Replacement for SteadyState

Boot from VHD with a differencing disk.

From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com]
Sent: Friday, January 4, 2013 11:36 AM
To: NT System Admin Issues
Subject: Replacement for SteadyState

Hello
I was wondering if any of you could suggest a replacement for SteadyState.
I have a roomful of pc's that the factory users use for browsing etc that I am 
replacing with Windows 7 Pro that need to be locked down.

Can anyone suggest a product that does the same thing, wipe out any changes on 
reboot?

TIA
B


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

OT- Programmer/Developer Analyst job NW Wash

2013-01-04 Thread S Powell
thought we'd throw this up here:

The North Sound Mental Health Administration is seeking a qualified
professional to function as a Programmer/Developer Analyst.  This
position will design, code, test, debut, and document features
throughout the Consumer Information System. Implement the development
and production of electronic data interchanges of health care
information and ensure efficient data transaction processing using
Microsoft SQL Server.  Expand and refine web-based interfaces to
person specific data. Requires Bachelor’s degree in computer science
(or related curriculum) and 3+ years programming experience.  Starting
salary range is $52,842 - $58,293 DOE, plus a generous benefit
package.  Preference given to applications received by February 4,
2013.  NSMHA is an Equal Opportunity Employer.  Visit
www.nsmha.org/jobs for full job description and application. Send
cover letter, resume and application to: Human Resources, 117 N. 1st
Street, Suite 8, Mount Vernon, WA  98273 or to ns...@nsmha.org.



-
Sub ubi semper ubi

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Time sync

2013-01-04 Thread Ken Cornetet
Cost.

HyperV give something that VMWare doesn't? I laughed so hard I think I peed 
myself a little...  Sheesh, you can't even extend disks on a running virtual 
under HyperV.

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Friday, January 04, 2013 11:43 AM
To: NT System Admin Issues
Subject: RE: Time sync

I was thinking the same thing. Actually IMHO VM still does more than Hyper-V 
does...

Z

Edward E. Ziots, CISSP, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.orgmailto:ezi...@lifespan.org

From: Chinnery, Paul [mailto:pa...@mmcwm.com]
Sent: Friday, January 04, 2013 11:23 AM
To: NT System Admin Issues
Subject: RE: Time sync

Slightly OT, Ken, but why are you moving away from VM?  Cost or something else 
that HyperV gives you that VM doesn't?


Paul Chinnery
Network Admin
Memorial Medical Center
231.845.2319



From: Ken Cornetet [mailto:ken.corne...@kimball.com]
Sent: Friday, January 04, 2013 10:30 AM
To: NT System Admin Issues
Subject: RE: Time sync

We run the Meinberg NTP port as well. We will soon start migrating from VMWare 
(where the Meinberg NTP port works great) to HyperV. Care to elaborate on what 
you mean by except on HV guests?

From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com]
Sent: Friday, January 04, 2013 9:24 AM
To: NT System Admin Issues
Subject: Re: Time sync

We run the product from Meinberg.  It works very well except on HV guests.
On Fri, Jan 4, 2013 at 8:10 AM, Richard McClary 
richard.mccl...@aspca.orgmailto:richard.mccl...@aspca.org wrote:
Greetings!

I'm sure I and many others have asked this (but are still stumped).  Ken S's 
reply yesterday pointing to ultimately a chain of TechNet articles has shed 
some light and will start us digging.

Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322) - 
mainly meant to make Kerberos v5 work.

Our issue is, W32Time lets things drift enough for weird things to occur in our 
medical records.

We have a veterinary toxicology consulting hotline.  Because things get out of 
sync a bit, we frequently have medical records opening before a client's 
telephone call is received.

The article referenced above essentially says to go find an alternative to 
W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has 
anyone on the list used (and would recommend) anything on that list to fix the 
record created prior to the call situation?  
(http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)

Thank you...
--
richard



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: 

Re: Trying to install RDS on Server 2012, as a VM under VMware ESX 5.0 ..

2013-01-04 Thread Michael Leone
On Thu, Jan 3, 2013 at 3:55 PM, Andrew S. Baker asbz...@gmail.com wrote:
 Are you sure you want to install a virtual host inside another virtual host?

I'm not, but the boss is ... at least for a proof-of-concept. Citrix
Presentation Manager works perfectly under ESXi, so some nested
virtialization (apparently that's the term for this type of setup)
works fine.

 I haven't attempted to install RDS as yet under 2012.  I might give that a
 go this weekend under Hyper-V and see...

I've found ways to do it, but apparently it's a lot easier under
VMware 5.1. Upgrading is a pain, but I guess I will do that first.
Mind you, running Hyper-V in a VM under ESXi is still not supported,
but it's supposed to work ..

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Trying to install RDS on Server 2012, as a VM under VMware ESX 5.0 ..

2013-01-04 Thread Michael Leone
On Fri, Jan 4, 2013 at 2:46 AM, James Hill falc...@gmail.com wrote:
 You can install a Remote Desktop Session Host on a VM (whether it is Hyper
 V, or Vmware etc), that is supported.

 You can't (well it isn't supported though there are hack methods) install
 VDI on a VM which is what you have attempted to do.

I see ... (well, sorta ...)

 When you run the Add Roles and Features Wizard select the first option Role
 based or feature-based installation.  In the next step select the server
 and then in the next step (Roles) select the Remote Desktop Services (and
 whichever components you wish to use).  This will give you the Remote
 Desktop Session Host etc which is what you after.  It should install just
 fine then.

It did! Excellent! Thanks so much for the hint ...

 The guide you have followed is for a VDI installation and hence it uses the
 second option in the Add Roles and Features Wizard.

I see I will need to read more. Years ago (like 5-6), I used to run a
Win2003 Terminal Server, and we used to set up a full desktop of apps
for our users (at my old company). Here, we want to publish just the
one app, apparently - we do not want a full desktop for the users.

At least now I have something more to play around with. This is all a
proof-of-concept - if we can get it to work, we will replace our
Citrix Presentation Managers VMs with 2012 and RDS. Total user base
for this app is *maybe* 100 users total; the most I've ever seen on
Citrix simultaneously is like 50 or so.

Guess I should dig more into RemoteApp, as well ...

Thanks so much, you've really helped me!


 James.

 -Original Message-
 From: Michael Leone [mailto:oozerd...@gmail.com]
 Sent: Friday, 4 January 2013 1:52 AM
 To: NT System Admin Issues
 Subject: Trying to install RDS on Server 2012, as a VM under VMware ESX 5.0
 ..

 So I seem to be stumped. We have some old Citrix Presentation Manager
 servers running on Win 2003 that my boss would like to retire, and replace
 with Remote Desktop Services under Server 2012. The catch is that these
 servers would  VMs, running under VMware ESXi 5.0 (that's what the current
 Citirix servers are). If you install all the latest ESXi 5.0 patches, then
 you can run Server 2012 VMs. That part is running fine.

 But I can't seem to install RDS. (the last time I used even Terminal
 Services was on Win 2003, over 5 years back). Following this blog post

 http://technet.microsoft.com/en-us/magazine/jj554307.aspx

 I am trying to install RDS. But it keeps failing on RD Virtualization Host
 step - all it says is that it failed. The other 2 steps (Connection Broker
 and Web Services) installed fine.

 I don't see anything in the Event log that is telling me WHY it failed. I am
 seeing Event 9645 from source MSSQL$MICROSOFT##WID.
 Message is An error occurred in the service broker manager, Error 3602,
 State: 145.

 And I can't seem to track down what this means. The online Event log help is
 no help (it never seems to be, for me). I haven't found it in eventid.net,
 and Google isn't showing me anything close to my situation.

 So let's start at the beginning:

 1. Is this even possible - can you run RDS on Server 2012 as a VM under ESXi
 5.0? Or is that trying to run one virtualization technology
 (Hyper-V) under a different virtualization technology (ESXi)?
 (eventually we want to publish an application or two, not a lot, and no need
 of a full desktop, as I understand it). I know MS says you shouldn't (or
 can't) run Hyper-V inside of Hyper-V, but it doesn't seem to say anything
 about Hyper-V inside any other virtualization - ESXi, XenApp, etc.

 2. If it is possible, what am I missing? The article didn't mention any
 pre-requisites I don't have. I have Server 2012 as a domain member in my Win
 2008 R2 AD domain.

 So far, I am not liking Server 2012. :-) (and I haven't started in on that
 Metro interface ...)

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Time sync

2013-01-04 Thread Eric Wittersheim
Ken,

On HV guests the time snch feature really doesn't work.  I contacted
Meinberg and they told me that their product is not made to run on a Guest
OS.  VMware or HV.  Our experience with NTP on HV guests is that there is
way too much fluctuation and the time never stays within the limits.  When
you look at the server's clock the time is always what it should be.  So it
is getting off by 500ms or whatever the limit is.

On Fri, Jan 4, 2013 at 9:29 AM, Ken Cornetet ken.corne...@kimball.comwrote:

 We run the Meinberg NTP port as well. We will soon start migrating from
 VMWare (where the Meinberg NTP port works great) to HyperV. Care to
 elaborate on what you mean by “except on HV guests”?

 ** **

 *From:* Eric Wittersheim [mailto:eric.wittersh...@gmail.com]
 *Sent:* Friday, January 04, 2013 9:24 AM
 *To:* NT System Admin Issues
 *Subject:* Re: Time sync

 ** **

 We run the product from Meinberg.  It works very well except on HV guests.
 

 On Fri, Jan 4, 2013 at 8:10 AM, Richard McClary richard.mccl...@aspca.org
 wrote:

 Greetings!

  

 I’m sure I and many others have asked this (but are still stumped).  Ken
 S’s reply yesterday pointing to ultimately a chain of TechNet articles has
 shed some light and will start us digging.

  

 Microsoft admits W32Time is sloppy (http://support.microsoft.com/kb/939322)
 – mainly meant to make Kerberos v5 work.

  

 Our issue is, W32Time lets things drift enough for weird things to occur
 in our medical records.

  

 We have a veterinary toxicology consulting hotline.  Because things get
 out of sync a bit, we frequently have medical records opening before a
 client’s telephone call is received.

  

 The article referenced above essentially says to go find an alternative to
 W32Time.  NIST has gathered a list of time sync software.  QUESTION:  has
 anyone on the list used (and would recommend) anything on that list to fix
 the “record created prior to the call” situation?  (
 http://www.nist.gov/pml/div688/grp40/softwarelist.cfm) 

  

 Thank you…

 --

 richard

  

 ** **


 The information contained in this e-mail, and any attachments hereto, is
 from The American Society for the Prevention of Cruelty to Animals®
 (ASPCA®) and is intended only for use by the addressee(s) named herein and
 may contain legally privileged and/or confidential information. If you are
 not the intended recipient of this e-mail, you are hereby notified that any
 dissemination, distribution, copying or use of the contents of this e-mail,
 and any attachments hereto, is strictly prohibited. If you have received
 this e-mail in error, please immediately notify me by reply email and
 permanently delete the original and any copy of this e-mail and any
 printout thereof. 

 ** **

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ** **

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Trying to install RDS on Server 2012, as a VM under VMware ESX 5.0 ..

2013-01-04 Thread Michael Leone
So in further narrowing this down with my boss, here's what we want:
(that I know of, so far)

- want to access the app from a web browser
- client OSes will be many XP w/SP3, some Win 7
- do not want clients to see a full desktop, only the one crappy app
they need to access
- and, just to make it more interesting, the app is a traditional,
fat, full client-server app, that uses too much bandwidth to run
remotely, hence the need to run this way
- the app has it's own security, own IDs and passwords, separate from
our domain logins

So it looks like I want Remote Desktop Web Access, so the clients can
connect using a web browser. Not sure if that means I also then need
to set up RemoteApp on the server, so that when they do connect, they
will see only the one app I have published, and can only execute
that. Sounds like it, from the skimming I've done so far.

Right now, what we happens is: you (the client) start a browser
session. We have a load balancer, which routes you to a Ctirix XenApp
server, where you authenticate with a domain ID, and then it shows you
the one and only app you can run. Choosing it then prompts you for the
application security (ID and password). Then you see the rest - entry
screens, etc.

I should be able to replace all the Citrix parts with Server 2012 and
RDS, and the users should just be able to toodle right along. (well,
the web interface to choose the app will change, but other than that,
it should be all the same to the end users).

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Time sync

2013-01-04 Thread Steve Kradel
Hmm, could be your VM host has the wrong time, and is jamming that bad
time into its guests occasionally.  Disable the host-guest time sync
and, provided w32tm is set up properly, you may find everything is
good.

Also it wouldn't hurt to make sure the host has a solid time
configuration, as *fully* disabling host-guest sync, at least under
VMWare, takes a little more poking than one might think.

Definitely would sort this out before considering 3rd party NTP
solutions... anything more than a couple seconds of skew isn't w32tm's
fault.

--Steve

On Fri, Jan 4, 2013 at 12:11 PM, Richard McClary
richard.mccl...@aspca.org wrote:
 Thanks to all so far!

 The drift goes off into minutes apart.

 I presume somewhere in those TechNet articles is something (registry hack to 
 workstations via GPO) that can have servers and workstations sync with the DC 
 every 1-2 hours?  (At first skimming, it's not all that clear.)

 Thanks again

 -Original Message-
 From: Steve Kradel [mailto:skra...@zetetic.net]
 Sent: Friday, January 04, 2013 10:32 AM
 To: NT System Admin Issues
 Subject: Re: Time sync

 How much time skew are we talking about here?  While MSFT will only support 
 w32tm accuracy within 1-2 seconds, in practice I have found it to be stable 
 within a tenth of a second or less, and would not feel compelled to look into 
 very-high-accuracy NTP clients for regular non-scientific applications.  Do 
 you have separate systems recording the timestamps of an incoming call and 
 the creation of a linked medical record, or are things unreliable even on a 
 single host?

 --Steve

 On Fri, Jan 4, 2013 at 9:10 AM, Richard McClary richard.mccl...@aspca.org 
 wrote:
 Greetings!



 I'm sure I and many others have asked this (but are still stumped).
 Ken S's reply yesterday pointing to ultimately a chain of TechNet
 articles has shed some light and will start us digging.



 Microsoft admits W32Time is sloppy
 (http://support.microsoft.com/kb/939322)
 - mainly meant to make Kerberos v5 work.



 Our issue is, W32Time lets things drift enough for weird things to
 occur in our medical records.



 We have a veterinary toxicology consulting hotline.  Because things
 get out of sync a bit, we frequently have medical records opening
 before a client's telephone call is received.



 The article referenced above essentially says to go find an
 alternative to W32Time.  NIST has gathered a list of time sync
 software.  QUESTION:  has anyone on the list used (and would
 recommend) anything on that list to fix the record created prior to the 
 call situation?
 (http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)



 Thank you...

 --

 richard





 The information contained in this e-mail, and any attachments hereto,
 is from The American Society for the Prevention of Cruelty to Animals(r)
 (ASPCA(r)) and is intended only for use by the addressee(s) named herein
 and may contain legally privileged and/or confidential information. If
 you are not the intended recipient of this e-mail, you are hereby
 notified that any dissemination, distribution, copying or use of the
 contents of this e-mail, and any attachments hereto, is strictly
 prohibited. If you have received this e-mail in error, please
 immediately notify me by reply email and permanently delete the
 original and any copy of this e-mail and any printout thereof.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 The information contained in this e-mail, and any attachments hereto, is from 
 The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and 
 is intended only for use by the addressee(s) named herein and may contain 
 legally privileged and/or confidential information. If you are not the 
 intended recipient of this e-mail, you are hereby notified that any 
 dissemination, distribution, copying or use of the contents of this e-mail, 
 and any attachments hereto, is strictly prohibited. If you have received this 
 e-mail in error, please immediately notify me by reply email and permanently 
 delete the original and any copy of this e-mail and any printout thereof.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 

Re: Occasional local admin needed

2013-01-04 Thread Steve Kradel
The restricted group GPO won't take effect on the regular refresh
schedule, because the GPO itself will not have changed... IIRC it will
take closer to one day to notice that the once-compliant local group
is out of whack.

I think I'd just use a domain group nested into the machine's
builtin\administrators, and make sure to set a reminder to clear that
group after a little while.  Of course that's still assuming the users
won't give themselves extra access in the meantime.

--Steve

On Fri, Jan 4, 2013 at 11:42 AM, Crawford, Scott crawfo...@evangel.edu wrote:
 Better suggestions have already been given, but I’ll throw this out as a
 possibility. Use restricted groups in a GPO to set who should normally be an
 admin. Then when the dev needs admin, add them to the administrators group
 on the local machine.  Once they’re logged in, they’ll have the admin SID in
 their token and will be able to stay logged in as long as necessary.  But,
 within 45 minutes, the GPO refreshes and removes them from the group.



 From: David Lum [mailto:david@nwea.org]
 Sent: Friday, January 04, 2013 9:40 AM


 To: NT System Admin Issues
 Subject: Occasional local admin needed



 How would you guys handle this? I have a server that the developers use that
 they occasionally (once a month or so) need local admin access for to
 install/upgrade an app or feature they use. This is a new-ish server that
 previously I have just added a user (it’s the same one each time) to the
 local admin group then a week later took them out, but that’s cumbersome and
 I become the single point of failure on remembering to back them out.



 I could 1. create a special AD account for this user to be local admin, or
 2. create an  AD group, put this person in it, then GPO that group into
 local admins on that server.



 Suggestions?

 David Lum
 Sr. Systems Engineer // NWEATM
 Office 503.548.5229 // Cell (voice/text) 503.267.9764



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Time sync

2013-01-04 Thread Steven Peck
The drift is to far.
We peer servers to DC's, DC's to vPDC
The DC's all peer to our routers and the routers are chained to each other
and the root outside source we use.  Our servers are within seconds.

We do not sync with the hosts.

On Fri, Jan 4, 2013 at 12:48 PM, Steve Kradel skra...@zetetic.net wrote:

 Hmm, could be your VM host has the wrong time, and is jamming that bad
 time into its guests occasionally.  Disable the host-guest time sync
 and, provided w32tm is set up properly, you may find everything is
 good.

 Also it wouldn't hurt to make sure the host has a solid time
 configuration, as *fully* disabling host-guest sync, at least under
 VMWare, takes a little more poking than one might think.

 Definitely would sort this out before considering 3rd party NTP
 solutions... anything more than a couple seconds of skew isn't w32tm's
 fault.

 --Steve

 On Fri, Jan 4, 2013 at 12:11 PM, Richard McClary
 richard.mccl...@aspca.org wrote:
  Thanks to all so far!
 
  The drift goes off into minutes apart.
 
  I presume somewhere in those TechNet articles is something (registry
 hack to workstations via GPO) that can have servers and workstations sync
 with the DC every 1-2 hours?  (At first skimming, it's not all that clear.)
 
  Thanks again
 
  -Original Message-
  From: Steve Kradel [mailto:skra...@zetetic.net]
  Sent: Friday, January 04, 2013 10:32 AM
  To: NT System Admin Issues
  Subject: Re: Time sync
 
  How much time skew are we talking about here?  While MSFT will only
 support w32tm accuracy within 1-2 seconds, in practice I have found it to
 be stable within a tenth of a second or less, and would not feel compelled
 to look into very-high-accuracy NTP clients for regular non-scientific
 applications.  Do you have separate systems recording the timestamps of an
 incoming call and the creation of a linked medical record, or are things
 unreliable even on a single host?
 
  --Steve
 
  On Fri, Jan 4, 2013 at 9:10 AM, Richard McClary 
 richard.mccl...@aspca.org wrote:
  Greetings!
 
 
 
  I'm sure I and many others have asked this (but are still stumped).
  Ken S's reply yesterday pointing to ultimately a chain of TechNet
  articles has shed some light and will start us digging.
 
 
 
  Microsoft admits W32Time is sloppy
  (http://support.microsoft.com/kb/939322)
  - mainly meant to make Kerberos v5 work.
 
 
 
  Our issue is, W32Time lets things drift enough for weird things to
  occur in our medical records.
 
 
 
  We have a veterinary toxicology consulting hotline.  Because things
  get out of sync a bit, we frequently have medical records opening
  before a client's telephone call is received.
 
 
 
  The article referenced above essentially says to go find an
  alternative to W32Time.  NIST has gathered a list of time sync
  software.  QUESTION:  has anyone on the list used (and would
  recommend) anything on that list to fix the record created prior to
 the call situation?
  (http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)
 
 
 
  Thank you...
 
  --
 
  richard
 
 
 
 
 
  The information contained in this e-mail, and any attachments hereto,
  is from The American Society for the Prevention of Cruelty to Animals(r)
  (ASPCA(r)) and is intended only for use by the addressee(s) named herein
  and may contain legally privileged and/or confidential information. If
  you are not the intended recipient of this e-mail, you are hereby
  notified that any dissemination, distribution, copying or use of the
  contents of this e-mail, and any attachments hereto, is strictly
  prohibited. If you have received this e-mail in error, please
  immediately notify me by reply email and permanently delete the
  original and any copy of this e-mail and any printout thereof.
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
 
  The information contained in this e-mail, and any attachments hereto, is
 from The American Society for the Prevention of Cruelty to Animals®
 (ASPCA®) and is intended only for use by the addressee(s) named herein and
 may contain legally privileged and/or confidential information. If you are
 not the intended recipient of this e-mail, you are hereby notified that any
 dissemination, distribution, copying or use of the contents of this e-mail,
 and any attachments hereto, is strictly prohibited. If you have received
 this e-mail in error, please 

Re: Enterprise task scheduler

2013-01-04 Thread Steven Peck
That was where I was confused as well.

On Fri, Jan 4, 2013 at 6:51 AM, Michael B. Smith mich...@smithcons.comwrote:

 Honestly, I'm not sure I see a difference between repeatable jobs and
 scheduled tasks, other than nomenclature. :)

 I use Orchestrator for this at a couple of clients and it seems to work
 just fine and the reports are sweet. YMMV.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Wednesday, January 2, 2013 6:09 PM
 To: NT System Admin Issues
 Subject: Re: Enterprise task scheduler

 Yep - Opalis. Shame that - there aren't many packages in that spot.

 Winbatch might be your better bet, in that case. It's been a long time
 since I played with those products, too.

 Kurt

 On Wed, Jan 2, 2013 at 1:08 PM, Adam Meixler ad...@interlink1.com wrote:
  I had thought the same thing! (was Opalis?)
 
  Some googling seems to suggest that it's not meant for Task Scheduling
 any more. It can be made to do it, but its strong suit is repeatable Jobs
 rather than scheduled tasks now.
 
  -Original Message-
  From: Kurt Buff [mailto:kurt.b...@gmail.com]
  Sent: Wednesday, January 02, 2013 3:30 PM
  To: NT System Admin Issues
  Subject: Re: Enterprise task scheduler
 
  It's been a lot of years since I touched it (more than 10!) and it's
 since been acquired by MSFT and rolled into the SC suite, but Orchestrator
 comes to mind...
 
  Might be worth a look.
 
  Kurt
 
  On Wed, Jan 2, 2013 at 10:33 AM, Adam Meixler ad...@interlink1.com
 wrote:
  Happy New Year everyone!
 
 
 
  I was hoping to get The Lists opinion on a good, un-bloated
  enterprise task scheduler. Right now we have about a thousand tasks
  scattered across different servers using the windows scheduled task
  service and it’s just not doing it for us.
 
 
 
  It’d be nice if jobs could be pushed down to workers as they were
  available vs. being scheduled on specific instances, but we at least
  want a central control of these jobs.
 
 
 
  We’re open to any ideas that don’t involve CA
 
 
 
  Thanks all
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Trying to install RDS on Server 2012, as a VM under VMware ESX 5.0 ..

2013-01-04 Thread James Hill
Yes you can do all of that with Server 2012 (can do it with Server 2008 R2
as well) and RemoteApp is required.  Install all the RDS roles except for
the virtualisation host.

James.

-Original Message-
From: Michael Leone [mailto:oozerd...@gmail.com] 
Sent: Saturday, 5 January 2013 6:43 AM
To: NT System Admin Issues
Subject: Re: Trying to install RDS on Server 2012, as a VM under VMware ESX
5.0 ..

So in further narrowing this down with my boss, here's what we want:
(that I know of, so far)

- want to access the app from a web browser
- client OSes will be many XP w/SP3, some Win 7
- do not want clients to see a full desktop, only the one crappy app they
need to access
- and, just to make it more interesting, the app is a traditional, fat, full
client-server app, that uses too much bandwidth to run remotely, hence the
need to run this way
- the app has it's own security, own IDs and passwords, separate from our
domain logins

So it looks like I want Remote Desktop Web Access, so the clients can
connect using a web browser. Not sure if that means I also then need to set
up RemoteApp on the server, so that when they do connect, they will see only
the one app I have published, and can only execute that. Sounds like it,
from the skimming I've done so far.

Right now, what we happens is: you (the client) start a browser session. We
have a load balancer, which routes you to a Ctirix XenApp server, where you
authenticate with a domain ID, and then it shows you the one and only app
you can run. Choosing it then prompts you for the application security (ID
and password). Then you see the rest - entry screens, etc.

I should be able to replace all the Citrix parts with Server 2012 and RDS,
and the users should just be able to toodle right along. (well, the web
interface to choose the app will change, but other than that, it should be
all the same to the end users).

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Re: Time sync

2013-01-04 Thread Steven Peck
Oh, I should mention the PBX gets time from the routers as well, etc.  We
do insurance and if the phones and customer call center apps and the time
clock apps are off by more then a second or two we all have to go to
irritating meetings




On Fri, Jan 4, 2013 at 12:59 PM, Steven Peck sep...@gmail.com wrote:

 The drift is to far.
 We peer servers to DC's, DC's to vPDC
 The DC's all peer to our routers and the routers are chained to each other
 and the root outside source we use.  Our servers are within seconds.

 We do not sync with the hosts.

 On Fri, Jan 4, 2013 at 12:48 PM, Steve Kradel skra...@zetetic.net wrote:

 Hmm, could be your VM host has the wrong time, and is jamming that bad
 time into its guests occasionally.  Disable the host-guest time sync
 and, provided w32tm is set up properly, you may find everything is
 good.

 Also it wouldn't hurt to make sure the host has a solid time
 configuration, as *fully* disabling host-guest sync, at least under
 VMWare, takes a little more poking than one might think.

 Definitely would sort this out before considering 3rd party NTP
 solutions... anything more than a couple seconds of skew isn't w32tm's
 fault.

 --Steve

 On Fri, Jan 4, 2013 at 12:11 PM, Richard McClary
 richard.mccl...@aspca.org wrote:
  Thanks to all so far!
 
  The drift goes off into minutes apart.
 
  I presume somewhere in those TechNet articles is something (registry
 hack to workstations via GPO) that can have servers and workstations sync
 with the DC every 1-2 hours?  (At first skimming, it's not all that clear.)
 
  Thanks again
 
  -Original Message-
  From: Steve Kradel [mailto:skra...@zetetic.net]
  Sent: Friday, January 04, 2013 10:32 AM
  To: NT System Admin Issues
  Subject: Re: Time sync
 
  How much time skew are we talking about here?  While MSFT will only
 support w32tm accuracy within 1-2 seconds, in practice I have found it to
 be stable within a tenth of a second or less, and would not feel compelled
 to look into very-high-accuracy NTP clients for regular non-scientific
 applications.  Do you have separate systems recording the timestamps of an
 incoming call and the creation of a linked medical record, or are things
 unreliable even on a single host?
 
  --Steve
 
  On Fri, Jan 4, 2013 at 9:10 AM, Richard McClary 
 richard.mccl...@aspca.org wrote:
  Greetings!
 
 
 
  I'm sure I and many others have asked this (but are still stumped).
  Ken S's reply yesterday pointing to ultimately a chain of TechNet
  articles has shed some light and will start us digging.
 
 
 
  Microsoft admits W32Time is sloppy
  (http://support.microsoft.com/kb/939322)
  - mainly meant to make Kerberos v5 work.
 
 
 
  Our issue is, W32Time lets things drift enough for weird things to
  occur in our medical records.
 
 
 
  We have a veterinary toxicology consulting hotline.  Because things
  get out of sync a bit, we frequently have medical records opening
  before a client's telephone call is received.
 
 
 
  The article referenced above essentially says to go find an
  alternative to W32Time.  NIST has gathered a list of time sync
  software.  QUESTION:  has anyone on the list used (and would
  recommend) anything on that list to fix the record created prior to
 the call situation?
  (http://www.nist.gov/pml/div688/grp40/softwarelist.cfm)
 
 
 
  Thank you...
 
  --
 
  richard
 
 
 
 
 
  The information contained in this e-mail, and any attachments hereto,
  is from The American Society for the Prevention of Cruelty to
 Animals(r)
  (ASPCA(r)) and is intended only for use by the addressee(s) named
 herein
  and may contain legally privileged and/or confidential information. If
  you are not the intended recipient of this e-mail, you are hereby
  notified that any dissemination, distribution, copying or use of the
  contents of this e-mail, and any attachments hereto, is strictly
  prohibited. If you have received this e-mail in error, please
  immediately notify me by reply email and permanently delete the
  original and any copy of this e-mail and any printout thereof.
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
  ---
  To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
 
  The information contained in this e-mail, and any attachments hereto,
 is from The American Society for the Prevention of Cruelty to Animals®
 (ASPCA®) and is intended only for use by the addressee(s) named herein and
 may contain legally 

RE: Time sync

2013-01-04 Thread Bourque Daniel
I presume that you have at least 2 redondant, stable, time sources for your 
telecom eqpt and that you use them to redistribute time to your PDC and others 
non windows material.  I also assume you have specific Stratum level define for 
your time sources and that you are not deasy chaining your router NTP too many 
level...
 
One solution would be to install a real NTP client on all the windows stations 
and servers part of your insurance setup (no need for the non critical stuff).  
With this, you could make sure the sync is every 2 hours for example.  As long 
as the DC don't drift too much, there would be no problem with auth.   If they 
are drifting, well, here is your problem...
 
PS: With your VM, where do you take the time?  From ESX or from the PDC/DC 
servers?
 
Here, we have 2 GPS base NTP source (Stratum 1) feeding the Cisco 6509 or Main 
router of each site (Stratum 2).  In turn, they redistribute time in their site 
using the same anycast address.  That way, an eqpt can allways reach one good 
time source. 
 
I also run the Meinberg NTP Time source Monitor to check my PC station agains 
all the NTP source (stratum 1 and 2)  I have defined in those sites.  If any 
timesource offset more then 100msec, It generate an e-mail alert.




De : Steven Peck [mailto:sep...@gmail.com] 
Envoyé : 4 janvier 2013 16:25
À : NT System Admin Issues
Objet : Re: Time sync


Oh, I should mention the PBX gets time from the routers as well, etc.  We do 
insurance and if the phones and customer call center apps and the time clock 
apps are off by more then a second or two we all have to go to irritating 
meetings
 


 
On Fri, Jan 4, 2013 at 12:59 PM, Steven Peck sep...@gmail.com wrote:


The drift is to far.  
We peer servers to DC's, DC's to vPDC
The DC's all peer to our routers and the routers are chained to each 
other and the root outside source we use.  Our servers are within seconds.
 
We do not sync with the hosts.


On Fri, Jan 4, 2013 at 12:48 PM, Steve Kradel skra...@zetetic.net 
wrote:


Hmm, could be your VM host has the wrong time, and is jamming 
that bad
time into its guests occasionally.  Disable the host-guest 
time sync
and, provided w32tm is set up properly, you may find everything 
is
good.

Also it wouldn't hurt to make sure the host has a solid time
configuration, as *fully* disabling host-guest sync, at least 
under
VMWare, takes a little more poking than one might think.

Definitely would sort this out before considering 3rd party NTP
solutions... anything more than a couple seconds of skew isn't 
w32tm's
fault.

--Steve


On Fri, Jan 4, 2013 at 12:11 PM, Richard McClary
richard.mccl...@aspca.org wrote:
 Thanks to all so far!

 The drift goes off into minutes apart.

 I presume somewhere in those TechNet articles is something 
(registry hack to workstations via GPO) that can have servers and workstations 
sync with the DC every 1-2 hours?  (At first skimming, it's not all that clear.)

 Thanks again


 -Original Message-
 From: Steve Kradel [mailto:skra...@zetetic.net]

 Sent: Friday, January 04, 2013 10:32 AM
 To: NT System Admin Issues
 Subject: Re: Time sync


 How much time skew are we talking about here?  While MSFT 
will only support w32tm accuracy within 1-2 seconds, in practice I have found 
it to be stable within a tenth of a second or less, and would not feel 
compelled to look into very-high-accuracy NTP clients for regular 
non-scientific applications.  Do you have separate systems recording the 
timestamps of an incoming call and the creation of a linked medical record, or 
are things unreliable even on a single host?

 --Steve


 On Fri, Jan 4, 2013 at 9:10 AM, Richard McClary 
richard.mccl...@aspca.org wrote:
 Greetings!



 I'm sure I and many others have asked this (but are still 
stumped).
 Ken S's reply yesterday pointing to ultimately a chain of 
TechNet
 articles has shed some light and will start us digging.



 Microsoft admits W32Time is sloppy
 (http://support.microsoft.com/kb/939322)
 - mainly meant to make Kerberos v5 

RE: LAptops

2013-01-04 Thread Jon Harris

Last time I worked with the Vostro line they claimed they were for Corp type of 
work but lack of a docking station for them made them more for road warriors.  
That said I would reconsider the Latitude line and look at getting something 
that you could run with XP mode.  I have not worked enough with Windows 8 yet 
to say anything about working with a VM on that platform.  I have run several 
packages that claimed to only run in XP and would not install in 7 but ran just 
fine from XP mode. Jon
  Subject: LAptops
 Date: Fri, 4 Jan 2013 15:40:52 +
 From: nigel.par...@ultraframe.co.uk
 To: ntsysadmin@lyris.sunbelt-software.com
 
 Hi 
 Has anyone purchased any Dell Dell Vostro 2520 laptops 
 And put windows xp on them 
 
 We run XP as we have software that will not run on windows 7 at the
 moment due to cost we cant upgrade this so we are stuck on XP 
 On dells site they don't list drivers for xp (I know some of the
 latitude systems are supported with xp but its all down to cost as they
 are more expensive and I have a budget to work with)
 
 Just wondered if anyone had found xp drivers and was running one of the
 vostro 2520 machines with windows xp 
 
 
 Nigel Parker
 Systems Engineer
 Ultraframe (UK) Ltd
 Tel:   01200 452329
 Fax:   01200 452201
 Web:   www.ultraframe.com
 Email: mailto:nigel.par...@ultraframe.co.uk
 
 
 
 
 
 Please consider the environment before printing this e-mail.
 
 The statements and opinions expressed in this email are my own and may not 
 represent those of Ultraframe (UK) Ltd.
 This email is subject to copyright and the information contained in it is 
 confidential and may be legally privileged. It is sent out only for intended 
 recipient(s). Access to this email by anyone else is unauthorised. If you are 
 not an intended recipient, any disclosure, copying, distribution or other use 
 or any action taken or omitted to be taken in reliance on it, is prohibited 
 and unlawful.
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Enterprise task scheduler

2013-01-04 Thread Ken Schaefer
I'd hazard a guess that task scheduling includes the ability to run 'repeatable 
jobs' at a set time. Repeatable jobs on the other hand could be as simple as a 
VBScript file - but VBS files don't run themselves at a set time per day (and 
all the reporting, delegation etc. that comes with that type of app)

Cheers
Ken

From: Steven Peck [mailto:sep...@gmail.com]
Sent: Saturday, 5 January 2013 8:01 AM
To: NT System Admin Issues
Subject: Re: Enterprise task scheduler

That was where I was confused as well.
On Fri, Jan 4, 2013 at 6:51 AM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
Honestly, I'm not sure I see a difference between repeatable jobs and scheduled 
tasks, other than nomenclature. :)

I use Orchestrator for this at a couple of clients and it seems to work just 
fine and the reports are sweet. YMMV.

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com]
Sent: Wednesday, January 2, 2013 6:09 PM
To: NT System Admin Issues
Subject: Re: Enterprise task scheduler
Yep - Opalis. Shame that - there aren't many packages in that spot.

Winbatch might be your better bet, in that case. It's been a long time since I 
played with those products, too.

Kurt
On Wed, Jan 2, 2013 at 1:08 PM, Adam Meixler 
ad...@interlink1.commailto:ad...@interlink1.com wrote:
 I had thought the same thing! (was Opalis?)

 Some googling seems to suggest that it's not meant for Task Scheduling any 
 more. It can be made to do it, but its strong suit is repeatable Jobs rather 
 than scheduled tasks now.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com]
 Sent: Wednesday, January 02, 2013 3:30 PM
 To: NT System Admin Issues
 Subject: Re: Enterprise task scheduler

 It's been a lot of years since I touched it (more than 10!) and it's since 
 been acquired by MSFT and rolled into the SC suite, but Orchestrator comes to 
 mind...

 Might be worth a look.

 Kurt

 On Wed, Jan 2, 2013 at 10:33 AM, Adam Meixler 
 ad...@interlink1.commailto:ad...@interlink1.com wrote:
 Happy New Year everyone!



 I was hoping to get The Lists opinion on a good, un-bloated
 enterprise task scheduler. Right now we have about a thousand tasks
 scattered across different servers using the windows scheduled task
 service and it's just not doing it for us.



 It'd be nice if jobs could be pushed down to workers as they were
 available vs. being scheduled on specific instances, but we at least
 want a central control of these jobs.



 We're open to any ideas that don't involve CA



 Thanks all

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 

RE: Time sync

2013-01-04 Thread Ken Schaefer
Can ESX support 64  vCPUs or 4TB RAM per guest yet? Or 64 hosts per cluster? 
Seems like there are all sorts of corner cases where one product has 
functionality the other doesn't yet. For 99% of things they are feature 
compatible. It's all about the management and operations tools now. Hypervisors 
are almost commoditised, and will be within the next version or two.

Cheers
Ken

From: Ken Cornetet [mailto:ken.corne...@kimball.com]
Sent: Saturday, 5 January 2013 6:26 AM
To: NT System Admin Issues
Subject: RE: Time sync

Cost.

HyperV give something that VMWare doesn't? I laughed so hard I think I peed 
myself a little...  Sheesh, you can't even extend disks on a running virtual 
under HyperV.

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Friday, January 04, 2013 11:43 AM
To: NT System Admin Issues
Subject: RE: Time sync

I was thinking the same thing. Actually IMHO VM still does more than Hyper-V 
does...

Z

Edward E. Ziots, CISSP, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.orgmailto:ezi...@lifespan.org



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin