Re: Servers in remote locations

[Don Ely]

I'll add that if you can...  Look into the Cisco 3945. You can put a UCS
blade with plenty of RAM, disk and processor, 48 port POE switch and T1,
ADSL or 4g cards in it. I call it network in a box or NIB. Sweet setup and
simplifies things.
On Feb 26, 2013 11:53 AM, "Andrew S. Baker"  wrote:

> L
> et me take a moment to jump on the virtualization bandwagon... :)
>
> It makes the management and the recovery (more important) much easier.
>
>
>
>
>
> *ASB
> **http://XeeMe.com/AndrewBaker* *
> **Providing Virtual CIO Services (IT Operations & Information Security)
> for the SMB market…***
>
>
>
>
>
> On Tue, Feb 26, 2013 at 12:23 PM, Tim Vander Kooi wrote:
>
>> I have got a number of servers at remote locations which are currently
>> serving as RODC and file and print servers. It is time to upgrade the
>> hardware that they are running on and I am curious with hypervisors and the
>> technology of today if people think it is of value to replace the existing
>> servers with servers running 2 separate virtual servers: 1 RODC, DNS, DHCP,
>> and 1 file & print; or would you run it all as one physical server with all
>> roles installed? The existing servers are 2008R2 and the new ones will be
>> 2012. Ideas?
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Servers in remote locations

[Ken Schaefer]

I probably sound like a broken record, but what requirements and constraints do 
you have?

E.g. I did a project to deploy something like this to ~600 branch sites. In 
that case, the SCCM, AD, File & Print and Wintel teams are all separate, so 
that was a key consideration in designing the end state.

In your case, what are the key considerations?
a) Who's supporing this infrastructure? (one team? or many?) And how is it 
supported? (onsite? remote, and if remote, is it relying on in-band or do you 
have out-of-band?)
b) What's your software licensing model?
c) What's the current track record of incidents for your servers? Do you often 
have the print queues or file shares causing issues? Do you have a lot of 
hardware failures?

As others have pointed out, virtualising does have benefits. But given the 
workloads, unless you have hardware failure, I don't particularly see restoring 
an RODC or backing up a file server (assuming you have access to some kind of 
replication technology) particularly hard. Virtualisation also has overheads - 
managing more software instances, potentially juggling storage etc

Cheers
Ken


From: Tim Vander Kooi [tvanderk...@expl.com]
Sent: Wednesday, February 27, 2013 4:23 AM
To: NT System Admin Issues
Subject: Servers in remote locations

I have got a number of servers at remote locations which are currently serving 
as RODC and file and print servers. It is time to upgrade the hardware that 
they are running on and I am curious with hypervisors and the technology of 
today if people think it is of value to replace the existing servers with 
servers running 2 separate virtual servers: 1 RODC, DNS, DHCP, and 1 file & 
print; or would you run it all as one physical server with all roles installed? 
The existing servers are 2008R2 and the new ones will be 2012. Ideas?
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Servers in remote locations

[Jon Harris]

Personally I would go the one physical running Hyper-V and two virtual servers 
splitting the work.  Unless you prefer to go the VMware route and do the same.  
I would take the free version of VMware and save the money.  I have never had 
or heard of any good experiences with running a file/print server on a DC and 
would avoid that as much as I could.  I don't think you would have any great 
issue with getting both of these to play well as virtuals and depending on the 
level and licensing of the physical server OS you could even split it to 3 
virtuals putting the print server on it's own. Jon
 > From: tvanderk...@expl.com
> To: ntsysadmin@lyris.sunbelt-software.com
> Subject: Servers in remote locations
> Date: Tue, 26 Feb 2013 12:23:46 -0500
> 
> I have got a number of servers at remote locations which are currently 
> serving as RODC and file and print servers. It is time to upgrade the 
> hardware that they are running on and I am curious with hypervisors and the 
> technology of today if people think it is of value to replace the existing 
> servers with servers running 2 separate virtual servers: 1 RODC, DNS, DHCP, 
> and 1 file & print; or would you run it all as one physical server with all 
> roles installed? The existing servers are 2008R2 and the new ones will be 
> 2012. Ideas?
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Color me skeptical

[Kurt Buff]

http://www.theverge.com/2013/2/22/4013406/i-used-google-glass-its-the-future-with-monthly-updates

On several levels, including:

o- Too many areas without network capability - where I live, anyway.

o- Voice interaction. Really? No thanks.

o- Privacy. Do I really want Google to know that much about me? They
already know too much.

Don't get me wrong - this is amazing technology. But, I don't have to
say yes to everything that comes along


Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Seagate STAR401 BlackArmor NAS 400

[Andrew S. Baker]

I have my home NAS in RAID5 (4x2TB), and let me tell you it takes a long
time to rebuild.

I'm willing to risk a larger rebuild window for more storage (at home), so
no RAID6 there -- this time, anyway.





*ASB
**http://XeeMe.com/AndrewBaker* *
**Providing Virtual CIO Services (IT Operations & Information Security) for
the SMB market…***





On Tue, Feb 26, 2013 at 3:24 PM, Richard Stovall  wrote:

> I have no experience with the Seagate NASes either.  Personally, for this
> use case, I wouldn't consider something that doesn't support some manner of
> dual disk failure protection such as RAID 6.*  I'd also be looking for
> something with a minimum of 5 bays so I could have at least one hot spare
> online.
>
> * I suppose I did drink the "RAID 5 is dead" Kool-Aid much discussed a
> while back.
>
>
> On Tue, Feb 26, 2013 at 2:51 PM, Andrew S. Baker wrote:
>
>> No personal experience, but those reviews give me pause.
>>
>>
>>
>>
>>
>> *ASB
>> **http://XeeMe.com/AndrewBaker* *
>> **Providing Virtual CIO Services (IT Operations & Information Security)
>> for the SMB market…***
>>
>>
>>
>>
>>
>> On Tue, Feb 26, 2013 at 11:34 AM, Glen Johnson  wrote:
>>
>>>  Speaking of storage and remote access to it, anyone have experience
>>> with one of these units?
>>>
>>> Newegg has what looks to me, like a pretty good deal.  12tb raw storage
>>> for $700.
>>>
>>> Our church is looking to replace/update a sbs2003 server.
>>>
>>> At present, they are only using it to share files and one printer among
>>> about 10 users.
>>>
>>> The printer is not usb, but sharing it directly over the network is
>>> doable.
>>>
>>> They have used exchange, but their email is hosted off site, so really
>>> no need for exchange.
>>>
>>> I think the deal, with 4 x 3tb drives should support them for quite some
>>> time, as they current server only have 160gig storage.
>>>
>>>
>>> http://www.newegg.com/Product/Product.aspx?Item=N82E16822148615&nm_mc=EMC-IGNEFL022613&cm_mmc=EMC-IGNEFL022613-_-EMC-022613-Index-_-NetworkStorageNAS-_-22148615-LM1A
>>> 
>>>
>>> ** **
>>>
>>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>> ~   ~
>>>
>>> ---
>>> To manage subscriptions click here:
>>> http://lyris.sunbelt-software.com/read/my_forums/
>>> or send an email to listmana...@lyris.sunbeltsoftware.com
>>> with the body: unsubscribe ntsysadmin
>>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Powershell witth Quest - listing group memberships of users

[Steven Peck]

.memberOF outputs an array and arrays don't play well with other types of
info with just a straight select-object

I used to use Get-QadUser JDoe | Get-QADMemberOf for this type of stuff

Haven't actually had to solve this problem in a while now though.



On Tue, Feb 26, 2013 at 12:36 PM, Michael Leone  wrote:

> On Tue, Feb 26, 2013 at 2:56 PM, Michael Leone 
> wrote:
> > I am unsure what I am doing wrong. I want a list of all my user
> > accounts, and I want the contents of the "MemberOf" property, among
> > other things.
> >
> > Get-QADuser -SizeLimit 0 | Select
> >
> givenName,LastName,DisplayName,mail,ParentContainer,SAMAccountName,homeDirectory,AccountIsDisabled,MemberOf,NestedMemberOf,AllMemberOf
> >
> > I sort this, and export to CSV. When I import the CSV into Excel, the
> > "MemberOf", "NestedMemberOf" and "AllMemberOf" are showing as
> > "System.String[]".
> >
> > What am I doing wrong? I want that "MemberOf" to actually list what
> > groups the user is a member of.
>
> So here is where I am. I am trying to output into an Excel spreadsheet:
>
> $AllUsers = Get-QADUser -SizeLimit 0 LeoneM | Select
>
> givenName,LastName,DisplayName,description,mail,ParentContainer,SAMAccountName,homeDirectory,AccountIsDisabled,MemberOf,NestedMemberOf,AllMemberOf
> | sort AccountIsDisabled,LastName,FirstName
>
> ForEach ($User in $AllUsers)
> {
>
> $Cells.Item($CurrentRow, $CurrentCol) = $User.displayName
> $CurrentCol++
>
> $ListOfGroups = Get-QADMemberOf $User.sAMAccountName
> $Cells.Item($CurrentRow, $CurrentCol) = $ListOfGroups
>
> Write-Host $User.displayName $ListOfGroups
>
> $CurrentRow++
> $CurrentCol = 1
> }
>
> And my $ListOfGroups writes out on my screen, but does NOT get written
> into the spreadsheet.
>
> What's that about?
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Powershell witth Quest - listing group memberships of users

[Michael Leone]

On Tue, Feb 26, 2013 at 2:56 PM, Michael Leone  wrote:
> I am unsure what I am doing wrong. I want a list of all my user
> accounts, and I want the contents of the "MemberOf" property, among
> other things.
>
> Get-QADuser -SizeLimit 0 | Select
> givenName,LastName,DisplayName,mail,ParentContainer,SAMAccountName,homeDirectory,AccountIsDisabled,MemberOf,NestedMemberOf,AllMemberOf
>
> I sort this, and export to CSV. When I import the CSV into Excel, the
> "MemberOf", "NestedMemberOf" and "AllMemberOf" are showing as
> "System.String[]".
>
> What am I doing wrong? I want that "MemberOf" to actually list what
> groups the user is a member of.

So here is where I am. I am trying to output into an Excel spreadsheet:

$AllUsers = Get-QADUser -SizeLimit 0 LeoneM | Select
givenName,LastName,DisplayName,description,mail,ParentContainer,SAMAccountName,homeDirectory,AccountIsDisabled,MemberOf,NestedMemberOf,AllMemberOf
| sort AccountIsDisabled,LastName,FirstName

ForEach ($User in $AllUsers)
{

$Cells.Item($CurrentRow, $CurrentCol) = $User.displayName
$CurrentCol++

$ListOfGroups = Get-QADMemberOf $User.sAMAccountName
$Cells.Item($CurrentRow, $CurrentCol) = $ListOfGroups

Write-Host $User.displayName $ListOfGroups

$CurrentRow++
$CurrentCol = 1
}

And my $ListOfGroups writes out on my screen, but does NOT get written
into the spreadsheet.

What's that about?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Seagate STAR401 BlackArmor NAS 400

[Richard Stovall]

I have no experience with the Seagate NASes either.  Personally, for this
use case, I wouldn't consider something that doesn't support some manner of
dual disk failure protection such as RAID 6.*  I'd also be looking for
something with a minimum of 5 bays so I could have at least one hot spare
online.

* I suppose I did drink the "RAID 5 is dead" Kool-Aid much discussed a
while back.


On Tue, Feb 26, 2013 at 2:51 PM, Andrew S. Baker  wrote:

> No personal experience, but those reviews give me pause.
>
>
>
>
>
> *ASB
> **http://XeeMe.com/AndrewBaker* *
> **Providing Virtual CIO Services (IT Operations & Information Security)
> for the SMB market…***
>
>
>
>
>
> On Tue, Feb 26, 2013 at 11:34 AM, Glen Johnson  wrote:
>
>>  Speaking of storage and remote access to it, anyone have experience
>> with one of these units?
>>
>> Newegg has what looks to me, like a pretty good deal.  12tb raw storage
>> for $700.
>>
>> Our church is looking to replace/update a sbs2003 server.
>>
>> At present, they are only using it to share files and one printer among
>> about 10 users.
>>
>> The printer is not usb, but sharing it directly over the network is
>> doable.
>>
>> They have used exchange, but their email is hosted off site, so really no
>> need for exchange.
>>
>> I think the deal, with 4 x 3tb drives should support them for quite some
>> time, as they current server only have 160gig storage.
>>
>>
>> http://www.newegg.com/Product/Product.aspx?Item=N82E16822148615&nm_mc=EMC-IGNEFL022613&cm_mmc=EMC-IGNEFL022613-_-EMC-022613-Index-_-NetworkStorageNAS-_-22148615-LM1A
>> 
>>
>> ** **
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: SemiOT: Cisco 2504 WLC tips?

[Kurt Buff]

Not the way I read it, but it's not well written, so I could easily be
wrong, and sincerely hope you're correct. That would simplify things a
great deal.

Thanks,

Kurt

On Tue, Feb 26, 2013 at 11:46 AM, Patrick Salmon  wrote:
> Not quite correct. As I understand it, only control and management traffic
> goes between the WLC & AP. Everything else (ie client traffic) goes direct.
>
> If you have any AP's hanging off the PoE port and need to free one up think
> about using a power injector instead. Not ideal and may not be suitable to
> the location of the AP, but definitely an option.
>
> On Tue, Feb 26, 2013 at 1:11 PM, Kurt Buff  wrote:
>>
>> Thanks for the input.
>>
>> I knew about the conversion from autonomous to lightweight, and have
>> the manual that describes the process, as noted below.
>>
>> I already have in place the necessary VLANs - one each for management
>> (which is shared among all switches), production wireless and guest
>> wireless. VoIP never touches the WAPs - that's on another VLAN
>> entirely. I'm assuming that the current management VLAN is a
>> reasonable choice for managing the WLC and WAPS.
>>
>> I'm just talking aloud for the rest of this - it's wandering pretty
>> far OT for the list, though some might not mind...
>>
>> Unfortunately I can't do the lag for the WLC directly on our L3 switch
>> - it's a 48 port HP 3400cl, and it's completely full, including the
>> three PoE switches used for the WAPs. However, I have a 48 port gb
>> switch that sits between the L3 switch and the firewall that has
>> plenty of ports free, though, so that might be where I place the lag
>> for the WLC.
>>
>> This presents another set of choices:
>>
>> o- I can leave the PoE switches on the L3 switch, and put the WLC in
>> the intermediary switch - this seems less than ideal, as it would
>> force a round trip for the wireless data, since all WAP traffic passes
>> through the WLC
>> or
>> o- I could move the PoE switches to the intermediary switch along with
>> the WLC and either
>>  o- Limit connectivity for the WAPs to the current single gb
>> connection between the L3 switch and the intermediary switch.
>>  or
>>  o- After moving the three PoE switches off of the L3 to the
>> intermediary switch, reconfigured the connection between the L3 switch
>> and the intermediary as a 3-port lag
>>
>> Also, according to the manuals, I'm have to set up a new DHCP scope
>> for the management VLAN - prior to this all of the equipment on that
>> VLAN has had their IP addresses set statically (including the WAPs).
>> I'm not entirely happy with that, but I haven't yet seen a way around
>> it.
>>
>> Kurt
>>
>>
>> On Tue, Feb 26, 2013 at 6:50 AM, Glen Johnson  wrote:
>> > We did this a few years back with a 5508 controller and several aps.
>> > Basically, you will need one vlan for the aps to talk to the controller.
>> > You will have to convert the access points to light weight aps.
>> > That wasn't very intuitive, so here is a link.
>> >
>> > http://www.cisco.com/en/US/docs/wireless/controller/7.2/configuration/guide/cg_lwap.html#wp1345331
>> >
>> > The controller handles the routing between the ap vlan and the other
>> > vlan's that the clients will use.
>> > What we did is set 4 ports on the controller in a lag, connected to 4
>> > ports on our core switch.  You will need 7.4 or higher code on the 2504 to
>> > support lag with its 4 ports.
>> > The allowed vlans on this port group are, the controller to ap vlan,
>> > data vlan for laptops, open access vlan for the public and voice vlan for 
>> > ip
>> > phones.
>> > Good luck.
>>
>> >
>> >
>> > -Original Message-
>> > From: Kurt Buff [mailto:kurt.b...@gmail.com]
>> > Sent: Monday, February 25, 2013 9:00 PM
>> > To: NT System Admin Issues
>> > Subject: SemiOT: Cisco 2504 WLC tips?
>> >
>> > All,
>> >
>> > I'm the happy recipient of this beastie, and I'm reading through a bunch
>> > of manuals for it, trying to figure out a good approach for transforming 
>> > our
>> > 15 x 1240AG WAPs into a cohesive group, rather than managing them
>> > individually.
>> >
>> > The WAPs are spread across three HP 2800 PWR switches, and carry three
>> > VLANs each (one is the management VLAN (wired side only) and two are
>> > broadcast with different SSIDs - a guest network and a production network,
>> > both using WPA PSK).
>> >
>> > First step is to get one of the WAPs talking to the WLC, then once
>> > that's working, change over the rest, and then I'm going to introduce 
>> > 802.1x
>> > in a new SSID, and start switching all of the production wireless to it, 
>> > and
>> > (I hope, depending on whether or not our barcode scanners will support
>> > 802.1x) eliminate the extra SSID.
>> >
>> > But, I'm finding I have some questions that the manuals aren't
>> > addressing. For instance, the unit has two standard 1g ports and 2 PoE 1g
>> > ports. One needs to be the management port, but should I connect the other
>> > ports to each of my three switches? Each o

Powershell witth Quest - listing group memberships of users

[Michael Leone]

I am unsure what I am doing wrong. I want a list of all my user
accounts, and I want the contents of the "MemberOf" property, among
other things.

Get-QADuser -SizeLimit 0 | Select
givenName,LastName,DisplayName,mail,ParentContainer,SAMAccountName,homeDirectory,AccountIsDisabled,MemberOf,NestedMemberOf,AllMemberOf

I sort this, and export to CSV. When I import the CSV into Excel, the
"MemberOf", "NestedMemberOf" and "AllMemberOf" are showing as
"System.String[]".

What am I doing wrong? I want that "MemberOf" to actually list what
groups the user is a member of.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Seagate STAR401 BlackArmor NAS 400

[Andrew S. Baker]

No personal experience, but those reviews give me pause.





*ASB
**http://XeeMe.com/AndrewBaker* *
**Providing Virtual CIO Services (IT Operations & Information Security) for
the SMB market…***





On Tue, Feb 26, 2013 at 11:34 AM, Glen Johnson  wrote:

>  Speaking of storage and remote access to it, anyone have experience with
> one of these units?
>
> Newegg has what looks to me, like a pretty good deal.  12tb raw storage
> for $700.
>
> Our church is looking to replace/update a sbs2003 server.
>
> At present, they are only using it to share files and one printer among
> about 10 users.
>
> The printer is not usb, but sharing it directly over the network is doable.
> 
>
> They have used exchange, but their email is hosted off site, so really no
> need for exchange.
>
> I think the deal, with 4 x 3tb drives should support them for quite some
> time, as they current server only have 160gig storage.
>
>
> http://www.newegg.com/Product/Product.aspx?Item=N82E16822148615&nm_mc=EMC-IGNEFL022613&cm_mmc=EMC-IGNEFL022613-_-EMC-022613-Index-_-NetworkStorageNAS-_-22148615-LM1A
> 
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Servers in remote locations

[Steven Peck]

We have two ESXi hosts and an external drive array for even the small
offices with 1-3 guests.  Windows 2012 wasn't out in the release cycle for
hardware refresh and we have a large ESXi install base now.  We're looking
at HyperV but change is slow if at all :)

Getting Engineers onsite if there are issues is problematic enough that the
additional costs in hardware makes up for it if we have to have one local
visit.
On Tue, Feb 26, 2013 at 10:08 AM, Michael B. Smith wrote:

> I've recently helped a company build out several branch offices and one to
> deploy a remote datacenter.
>
> We virtualized everything. Absolutely everything.
>
> -Original Message-
> From: Tim Vander Kooi [mailto:tvanderk...@expl.com]
> Sent: Tuesday, February 26, 2013 12:24 PM
> To: NT System Admin Issues
> Subject: Servers in remote locations
>
> I have got a number of servers at remote locations which are currently
> serving as RODC and file and print servers. It is time to upgrade the
> hardware that they are running on and I am curious with hypervisors and the
> technology of today if people think it is of value to replace the existing
> servers with servers running 2 separate virtual servers: 1 RODC, DNS, DHCP,
> and 1 file & print; or would you run it all as one physical server with all
> roles installed? The existing servers are 2008R2 and the new ones will be
> 2012. Ideas?
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: SemiOT: Cisco 2504 WLC tips?

[Patrick Salmon]

Not quite correct. As I understand it, only control and management traffic
goes between the WLC & AP. Everything else (ie client traffic) goes direct.

If you have any AP's hanging off the PoE port and need to free one up think
about using a power injector instead. Not ideal and may not be suitable to
the location of the AP, but definitely an option.

On Tue, Feb 26, 2013 at 1:11 PM, Kurt Buff  wrote:

> Thanks for the input.
>
> I knew about the conversion from autonomous to lightweight, and have
> the manual that describes the process, as noted below.
>
> I already have in place the necessary VLANs - one each for management
> (which is shared among all switches), production wireless and guest
> wireless. VoIP never touches the WAPs - that's on another VLAN
> entirely. I'm assuming that the current management VLAN is a
> reasonable choice for managing the WLC and WAPS.
>
> I'm just talking aloud for the rest of this - it's wandering pretty
> far OT for the list, though some might not mind...
>
> Unfortunately I can't do the lag for the WLC directly on our L3 switch
> - it's a 48 port HP 3400cl, and it's completely full, including the
> three PoE switches used for the WAPs. However, I have a 48 port gb
> switch that sits between the L3 switch and the firewall that has
> plenty of ports free, though, so that might be where I place the lag
> for the WLC.
>
> This presents another set of choices:
>
> o- I can leave the PoE switches on the L3 switch, and put the WLC in
> the intermediary switch - this seems less than ideal, as it would
> force a round trip for the wireless data, since all WAP traffic passes
> through the WLC
> or
> o- I could move the PoE switches to the intermediary switch along with
> the WLC and either
>  o- Limit connectivity for the WAPs to the current single gb
> connection between the L3 switch and the intermediary switch.
>  or
>  o- After moving the three PoE switches off of the L3 to the
> intermediary switch, reconfigured the connection between the L3 switch
> and the intermediary as a 3-port lag
>
> Also, according to the manuals, I'm have to set up a new DHCP scope
> for the management VLAN - prior to this all of the equipment on that
> VLAN has had their IP addresses set statically (including the WAPs).
> I'm not entirely happy with that, but I haven't yet seen a way around
> it.
>
> Kurt
>
>
> On Tue, Feb 26, 2013 at 6:50 AM, Glen Johnson  wrote:
> > We did this a few years back with a 5508 controller and several aps.
> > Basically, you will need one vlan for the aps to talk to the controller.
> > You will have to convert the access points to light weight aps.
> > That wasn't very intuitive, so here is a link.
> >
> http://www.cisco.com/en/US/docs/wireless/controller/7.2/configuration/guide/cg_lwap.html#wp1345331
> >
> > The controller handles the routing between the ap vlan and the other
> vlan's that the clients will use.
> > What we did is set 4 ports on the controller in a lag, connected to 4
> ports on our core switch.  You will need 7.4 or higher code on the 2504 to
> support lag with its 4 ports.
> > The allowed vlans on this port group are, the controller to ap vlan,
> data vlan for laptops, open access vlan for the public and voice vlan for
> ip phones.
> > Good luck.
> >
> >
> > -Original Message-
> > From: Kurt Buff [mailto:kurt.b...@gmail.com]
> > Sent: Monday, February 25, 2013 9:00 PM
> > To: NT System Admin Issues
> > Subject: SemiOT: Cisco 2504 WLC tips?
> >
> > All,
> >
> > I'm the happy recipient of this beastie, and I'm reading through a bunch
> of manuals for it, trying to figure out a good approach for transforming
> our 15 x 1240AG WAPs into a cohesive group, rather than managing them
> individually.
> >
> > The WAPs are spread across three HP 2800 PWR switches, and carry three
> VLANs each (one is the management VLAN (wired side only) and two are
> broadcast with different SSIDs - a guest network and a production network,
> both using WPA PSK).
> >
> > First step is to get one of the WAPs talking to the WLC, then once
> that's working, change over the rest, and then I'm going to introduce
> 802.1x in a new SSID, and start switching all of the production wireless to
> it, and (I hope, depending on whether or not our barcode scanners will
> support 802.1x) eliminate the extra SSID.
> >
> > But, I'm finding I have some questions that the manuals aren't
> addressing. For instance, the unit has two standard 1g ports and 2 PoE 1g
> ports. One needs to be the management port, but should I connect the other
> ports to each of my three switches? Each of the switches has a connection
> to my layer3 switch. Should I connect the management port to the L3 switch,
> and out the WLC between the switches and the L3 switch, or should I just
> connect the 3 non-management ports to the switches?
> >
> > Does anyone have some pointers on setting this up?
> >
> > So far, I've found and read most or all of each of these:
> >
> > Cisco2500SeriesWirelessContro

RE: Servers in remote locations

[Art DeKneef]

Server/VM ratios depend on Server OS version.

I think you are thinking of Server 2008 R2 Standard which does give you 4 VMs 
per server license.

However that has changed in Server 2012 Standard. You are only allowed 2 VMs 
per server license. Server 2012 Datacenter gives you unlimited. While unlimited 
based on the specs of your hardware.

-Original Message-
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] 
Sent: Tuesday, February 26, 2013 11:04 AM
To: NT System Admin Issues
Subject: RE: Servers in remote locations

Yea, run VM's. No reason not to and lots of little reasons why you should.

" I'd run 2VM's if licensing isn't an issue."

Licensing shouldn't be an issue, IIRC you can run 4 VM's under one server 
license.

-Original Message-
From: David Lum [mailto:david@nwea.org]
Sent: Tuesday, February 26, 2013 1:00 PM
To: NT System Admin Issues
Subject: RE: Servers in remote locations

I use VM's whenever possible, even if it's a 1:1. Moves/upgrades are simply 
much easier. I'd run 2VM's if licensing isn't an issue.

Dave

-Original Message-
From: Tim Vander Kooi [mailto:tvanderk...@expl.com]
Sent: Tuesday, February 26, 2013 9:24 AM
To: NT System Admin Issues
Subject: Servers in remote locations

I have got a number of servers at remote locations which are currently serving 
as RODC and file and print servers. It is time to upgrade the hardware that 
they are running on and I am curious with hypervisors and the technology of 
today if people think it is of value to replace the existing servers with 
servers running 2 separate virtual servers: 1 RODC, DNS, DHCP, and 1 file & 
print; or would you run it all as one physical server with all roles installed? 
The existing servers are 2008R2 and the new ones will be 2012. Ideas?
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: SemiOT: Cisco 2504 WLC tips?

[Kurt Buff]

Thanks for the input.

I knew about the conversion from autonomous to lightweight, and have
the manual that describes the process, as noted below.

I already have in place the necessary VLANs - one each for management
(which is shared among all switches), production wireless and guest
wireless. VoIP never touches the WAPs - that's on another VLAN
entirely. I'm assuming that the current management VLAN is a
reasonable choice for managing the WLC and WAPS.

I'm just talking aloud for the rest of this - it's wandering pretty
far OT for the list, though some might not mind...

Unfortunately I can't do the lag for the WLC directly on our L3 switch
- it's a 48 port HP 3400cl, and it's completely full, including the
three PoE switches used for the WAPs. However, I have a 48 port gb
switch that sits between the L3 switch and the firewall that has
plenty of ports free, though, so that might be where I place the lag
for the WLC.

This presents another set of choices:

o- I can leave the PoE switches on the L3 switch, and put the WLC in
the intermediary switch - this seems less than ideal, as it would
force a round trip for the wireless data, since all WAP traffic passes
through the WLC
or
o- I could move the PoE switches to the intermediary switch along with
the WLC and either
 o- Limit connectivity for the WAPs to the current single gb
connection between the L3 switch and the intermediary switch.
 or
 o- After moving the three PoE switches off of the L3 to the
intermediary switch, reconfigured the connection between the L3 switch
and the intermediary as a 3-port lag

Also, according to the manuals, I'm have to set up a new DHCP scope
for the management VLAN - prior to this all of the equipment on that
VLAN has had their IP addresses set statically (including the WAPs).
I'm not entirely happy with that, but I haven't yet seen a way around
it.

Kurt


On Tue, Feb 26, 2013 at 6:50 AM, Glen Johnson  wrote:
> We did this a few years back with a 5508 controller and several aps.
> Basically, you will need one vlan for the aps to talk to the controller.
> You will have to convert the access points to light weight aps.
> That wasn't very intuitive, so here is a link.
> http://www.cisco.com/en/US/docs/wireless/controller/7.2/configuration/guide/cg_lwap.html#wp1345331
>
> The controller handles the routing between the ap vlan and the other vlan's 
> that the clients will use.
> What we did is set 4 ports on the controller in a lag, connected to 4 ports 
> on our core switch.  You will need 7.4 or higher code on the 2504 to support 
> lag with its 4 ports.
> The allowed vlans on this port group are, the controller to ap vlan, data 
> vlan for laptops, open access vlan for the public and voice vlan for ip 
> phones.
> Good luck.
>
>
> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Sent: Monday, February 25, 2013 9:00 PM
> To: NT System Admin Issues
> Subject: SemiOT: Cisco 2504 WLC tips?
>
> All,
>
> I'm the happy recipient of this beastie, and I'm reading through a bunch of 
> manuals for it, trying to figure out a good approach for transforming our 15 
> x 1240AG WAPs into a cohesive group, rather than managing them individually.
>
> The WAPs are spread across three HP 2800 PWR switches, and carry three VLANs 
> each (one is the management VLAN (wired side only) and two are broadcast with 
> different SSIDs - a guest network and a production network, both using WPA 
> PSK).
>
> First step is to get one of the WAPs talking to the WLC, then once that's 
> working, change over the rest, and then I'm going to introduce 802.1x in a 
> new SSID, and start switching all of the production wireless to it, and (I 
> hope, depending on whether or not our barcode scanners will support 802.1x) 
> eliminate the extra SSID.
>
> But, I'm finding I have some questions that the manuals aren't addressing. 
> For instance, the unit has two standard 1g ports and 2 PoE 1g ports. One 
> needs to be the management port, but should I connect the other ports to each 
> of my three switches? Each of the switches has a connection to my layer3 
> switch. Should I connect the management port to the L3 switch, and out the 
> WLC between the switches and the L3 switch, or should I just connect the 3 
> non-management ports to the switches?
>
> Does anyone have some pointers on setting this up?
>
> So far, I've found and read most or all of each of these:
>
> Cisco2500SeriesWirelessControllerDeploymentGuide
> Cisco2500SeriesWirelessControllerGettingStartedGuide
> CiscoWirelessLANControllerConfigurationGuide7_2
> ConvertAutonomousWAPstoLightweightMode7_2
>
> I have browsed through these:
>
> CiscoWirelessControlSystemConfigurationGuide_Release7.0.172.0
> CiscoLocationApplianceConfigurationGuide_Release6.0
>
>
> Haven't touched these yet:
> CiscoLocationApplianceConfigurationGuide_Release6.0
> Cisco_SBA_BN_WirelessLANCleanAirDeploymentGuide-Aug2012
>
> Any thoughts, on or off list, would be appreciated - even if it's a 

RE: Servers in remote locations

[Michael B. Smith]

I've recently helped a company build out several branch offices and one to 
deploy a remote datacenter.

We virtualized everything. Absolutely everything.

-Original Message-
From: Tim Vander Kooi [mailto:tvanderk...@expl.com] 
Sent: Tuesday, February 26, 2013 12:24 PM
To: NT System Admin Issues
Subject: Servers in remote locations

I have got a number of servers at remote locations which are currently serving 
as RODC and file and print servers. It is time to upgrade the hardware that 
they are running on and I am curious with hypervisors and the technology of 
today if people think it is of value to replace the existing servers with 
servers running 2 separate virtual servers: 1 RODC, DNS, DHCP, and 1 file & 
print; or would you run it all as one physical server with all roles installed? 
The existing servers are 2008R2 and the new ones will be 2012. Ideas?
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Servers in remote locations

[Kennedy, Jim]

Yea, run VM's. No reason not to and lots of little reasons why you should.

" I'd run 2VM's if licensing isn't an issue."

Licensing shouldn't be an issue, IIRC you can run 4 VM's under one server 
license.

-Original Message-
From: David Lum [mailto:david@nwea.org] 
Sent: Tuesday, February 26, 2013 1:00 PM
To: NT System Admin Issues
Subject: RE: Servers in remote locations

I use VM's whenever possible, even if it's a 1:1. Moves/upgrades are simply 
much easier. I'd run 2VM's if licensing isn't an issue.

Dave

-Original Message-
From: Tim Vander Kooi [mailto:tvanderk...@expl.com]
Sent: Tuesday, February 26, 2013 9:24 AM
To: NT System Admin Issues
Subject: Servers in remote locations

I have got a number of servers at remote locations which are currently serving 
as RODC and file and print servers. It is time to upgrade the hardware that 
they are running on and I am curious with hypervisors and the technology of 
today if people think it is of value to replace the existing servers with 
servers running 2 separate virtual servers: 1 RODC, DNS, DHCP, and 1 file & 
print; or would you run it all as one physical server with all roles installed? 
The existing servers are 2008R2 and the new ones will be 2012. Ideas?
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Servers in remote locations

[David Lum]

I use VM's whenever possible, even if it's a 1:1. Moves/upgrades are simply 
much easier. I'd run 2VM's if licensing isn't an issue.

Dave

-Original Message-
From: Tim Vander Kooi [mailto:tvanderk...@expl.com] 
Sent: Tuesday, February 26, 2013 9:24 AM
To: NT System Admin Issues
Subject: Servers in remote locations

I have got a number of servers at remote locations which are currently serving 
as RODC and file and print servers. It is time to upgrade the hardware that 
they are running on and I am curious with hypervisors and the technology of 
today if people think it is of value to replace the existing servers with 
servers running 2 separate virtual servers: 1 RODC, DNS, DHCP, and 1 file & 
print; or would you run it all as one physical server with all roles installed? 
The existing servers are 2008R2 and the new ones will be 2012. Ideas?
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: This can't be right (2008R2 -> 2012)

[Glen Johnson]

+10,.  Updated 2 hosts over the weekend.
Now converting guests to vhdx, at least the ones I can shutdown during the day.

On a related note, when we started all the vhd were created as 127gig dynamic 
disks.
Is it possible to convert them to fixed size but shrink them to about 10 or 20 
percent above current usage.
Say I have a 20gig vhd.  I'd like to convert it to a 40gig fixed vhdx.

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: Tuesday, February 26, 2013 12:15 PM
To: NT System Admin Issues
Subject: Re: This can't be right (2008R2 -> 2012)

2012 Hyper V is awesome

On Tue, Feb 26, 2013 at 11:10 AM, David Lum 
mailto:david@nwea.org>> wrote:
That hadn't occurred to me :), I burned the ISO.

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: Tuesday, February 26, 2013 9:01 AM
To: NT System Admin Issues
Subject: Re: This can't be right (2008R2 -> 2012)

Odd, didn't think that the 2012 server install disk actually came on a CD 
anymore.  I've just used the ISO so far.  Right click, mount and then run setup.

On Tue, Feb 26, 2013 at 10:38 AM, David Lum 
mailto:david@nwea.org>> wrote:
I upgraded my personal lab server from 2008 R2 to Server 2012 last night. The 
server is mainly a Hyper-V and not much else.


1.   Inserted 2012 CD

2.   Chose "upgrade"

3.   Entered 2012 Key

4.   Server reboots a couple of times then gives me the logon screen

Everything works as before, just now with 2012 OS, even LogMeIn came over with 
no issue.

Since when do server OS upgrades actually work as advertised? :) Once the new 
server was up I flipped my VM's to VHDX. Way too easy.
David Lum
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 
503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Recommendations for DNS/SSL provider

[Damien Solodow]

I really like what I'm seeing for DigiCert, but my concern is that the price 
point may be an issue given that our current (or RapidSSL) are significantly 
lower.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE

From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Tuesday, February 26, 2013 11:37 AM
To: NT System Admin Issues
Subject: RE: Recommendations for DNS/SSL provider

DigiCert for certs hands down. I can't comment on DNS providers.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c - 312.731.3132

From: Damien Solodow [mailto:damien.solo...@harrison.edu]
Sent: Monday, February 25, 2013 2:25 PM
To: NT System Admin Issues
Subject: Recommendations for DNS/SSL provider

Currently we are using GoDaddy for our SSL certs, domain registration and 
parking/forwarding of some domains.
Our main DNS zones are hosted internally, but we use them to point/redirect 
various domains to our main ones.

There is currently some discussion about moving away from them due to various 
concerns around them (not just technical issues).

I wanted to see of anyone had suggestions/recommendations on alternatives that 
aren't going to trigger a huge price jump.
Are we going to be better off having a provider/company for SSL and another for 
DNS, or are there good options that provide both?

As far as certificates, so far I'm liking the looks of DigiCert and RapidSSL 
but am open to options.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE
500 North Meridian St
Suite 500
Indianapolis, IN 46204-1213
www.harrison.edu


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Java 7-15 failures.

[Ziots, Edward]

So true ASB


Hello All,



We had yet another look into Oracle's Java SE 7 software that was released by 
the company on Feb 19, 2013. As a result, we have discovered two new security 
issues (numbered 54 and 55), which when combined together can be successfully 
used to gain a complete Java security sandbox bypass in the environment of Java 
SE 7 Update 15 (1.7.0_15-b03).



Following our Disclosure Policy [1], we provided Oracle with a brief technical 
description of the issues found along with a working Proof of Concept code that 
illustrates their impact.



Both new issues are specific to Java SE 7 only. They allow to abuse the 
Reflection API in a particularly interesting way.



Without going into further details, everything indicates that a ball is in 
Oracle's court. Again.



Thank you.



Best Regards

Adam Gowdiak



-

Security Explorations

http://www.security-explorations.com

"We bring security research to the new level"

-



References:

[1] Security Explorations - Disclosure Policy

 http://www.security-explorations.com/en/disclosure-policy.html




Edward E. Ziots, CISSP, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org

This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]


From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Tuesday, February 26, 2013 8:46 AM
To: NT System Admin Issues
Subject: Re: Java 7-15 failures.

Have no fear: at the rate that Java exploits and vulnerabilities are being 
found in Java, they'll be providing more updates shortly.  Maybe they'll fix 
that problem, or maybe more people will get the impetus to work around them.






ASB
http://XeeMe.com/AndrewBaker
Providing Virtual CIO Services (IT Operations & Information Security) for the 
SMB market...




On Mon, Feb 25, 2013 at 9:31 PM, Jon Harris 
mailto:jk.har...@live.com>> wrote:
I am having similar issues.  I just wish I did not need this crapware for work.

Jon

> From: kennedy...@elyriaschools.org
> To: 
> ntsysadmin@lyris.sunbelt-software.com

> Subject: RE: Java 7-15 failures.
> Date: Mon, 25 Feb 2013 17:23:12 +

>
> I am seeing the IE activation issue on multiple machines myself when I get 
> the exe to work.
>
> -Original Message-
> From: Sam Cayze [mailto:sca...@gmail.com]
> Sent: Monday, February 25, 2013 12:20 PM
> To: NT System Admin Issues
> Subject: RE: Java 7-15 failures.
>
> No issues with the actual installer... But I'm having a heck of time having 
> the IE pluggin actually work after an upgrade. It's getting tiresome trying 
> to fix this after each update. IE says the add-on is enabled and all that 
> jazz. But no Java will actually load in IE. Haven't pinpointed the actually 
> fix yet, but it usually requires a mix of rebooting, disabling, re-enabling 
> plugins, and re-installing java.
>
>
> -Original Message-
> From: Kennedy, Jim 
> [mailto:kennedy...@elyriaschools.org]
> Sent: Friday, February 22, 2013 3:14 PM
> To: NT System Admin Issues
> Subject: RE: Java 7-15 failures.
>
> Not sure how to say this...but glad to hear that. So it isn't just me, there 
> are others. So there is hope Java will release a fixed patch.
>
> -Original Message-
> From: Joseph L. Casale 
> [mailto:jcas...@activenetwerx.com]
> Sent: Friday, February 22, 2013 3:55 PM
> To: NT System Admin Issues
> Subject: RE: Java 7-15 failures.
>
> Ditto here, sigh...
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to 
> listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to 
> listmana...@lyris.sunbeltsoftware.com
> with the body: 

Re: This can't be right (2008R2 -> 2012)

[Steve Ens]

2012 Hyper V is awesome


On Tue, Feb 26, 2013 at 11:10 AM, David Lum  wrote:

>  That hadn’t occurred to me J, I burned the ISO.
>
> ** **
>
> *From:* Steve Ens [mailto:stevey...@gmail.com]
> *Sent:* Tuesday, February 26, 2013 9:01 AM
> *To:* NT System Admin Issues
> *Subject:* Re: This can't be right (2008R2 -> 2012)
>
> ** **
>
> Odd, didn't think that the 2012 server install disk actually came on a CD
> anymore.  I've just used the ISO so far.  Right click, mount and then run
> setup.
>
> ** **
>
> On Tue, Feb 26, 2013 at 10:38 AM, David Lum  wrote:***
> *
>
> I upgraded my personal lab server from 2008 R2 to Server 2012 last night.
> The server is mainly a Hyper-V and not much else.
>
>  
>
> 1.   Inserted 2012 CD
>
> 2.   Chose “upgrade”
>
> 3.   Entered 2012 Key
>
> 4.   Server reboots a couple of times then gives me the logon screen**
> **
>
>  
>
> Everything works as before, just now with 2012 OS, even LogMeIn came over
> with no issue.
>
>  
>
> Since when do server OS upgrades actually work as advertised? J Once the
> new server was up I flipped my VM’s to VHDX. Way too easy.
>
> *David Lum*
> Sr. Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
>  
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: This can't be right (2008R2 -> 2012)

[David Lum]

That hadn't occurred to me :), I burned the ISO.

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: Tuesday, February 26, 2013 9:01 AM
To: NT System Admin Issues
Subject: Re: This can't be right (2008R2 -> 2012)

Odd, didn't think that the 2012 server install disk actually came on a CD 
anymore.  I've just used the ISO so far.  Right click, mount and then run setup.

On Tue, Feb 26, 2013 at 10:38 AM, David Lum 
mailto:david@nwea.org>> wrote:
I upgraded my personal lab server from 2008 R2 to Server 2012 last night. The 
server is mainly a Hyper-V and not much else.


1.   Inserted 2012 CD

2.   Chose "upgrade"

3.   Entered 2012 Key

4.   Server reboots a couple of times then gives me the logon screen

Everything works as before, just now with 2012 OS, even LogMeIn came over with 
no issue.

Since when do server OS upgrades actually work as advertised? :) Once the new 
server was up I flipped my VM's to VHDX. Way too easy.
David Lum
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 
503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: This can't be right (2008R2 -> 2012)

[Steve Ens]

Odd, didn't think that the 2012 server install disk actually came on a CD
anymore.  I've just used the ISO so far.  Right click, mount and then run
setup.


On Tue, Feb 26, 2013 at 10:38 AM, David Lum  wrote:

>  I upgraded my personal lab server from 2008 R2 to Server 2012 last
> night. The server is mainly a Hyper-V and not much else.
>
> ** **
>
> **1.   **Inserted 2012 CD
>
> **2.   **Chose “upgrade”
>
> **3.   **Entered 2012 Key
>
> **4.   **Server reboots a couple of times then gives me the logon
> screen
>
> ** **
>
> Everything works as before, just now with 2012 OS, even LogMeIn came over
> with no issue.
>
> ** **
>
> Since when do server OS upgrades actually work as advertised? J Once the
> new server was up I flipped my VM’s to VHDX. Way too easy.
>
> *David Lum*
> Sr. Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Communications slow between two servers

[Jeff Frantz]

Verify duplex settings.  A long time ago I had an HP server and a Cisco switch 
with both sides having auto-detecting speed and duplex.  Weird things happened 
when transferring large quantities of data because the NIC thought the 
connection was full duplex and the switch thought it was half.  Forcing both 
sides to full duplex resolved the issue.

-Jeff

From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: Tuesday, February 26, 2013 10:43 AM
To: NT System Admin Issues
Subject: Re: Communications slow between two servers

I'm not familiar with Smart Sync, so can't comment on that. But can you 
reproduce the problem outside of that software? For example do you see the same 
slowness if you use RoboCopy or DFSR?

Take a look at this post:

http://social.technet.microsoft.com/Forums/en-US/winserverfiles/thread/e55022a4-db65-4dc9-a2f1-96b7f5d8e2fa

Even though you aren't using DFSR, it might give you some ideas. Specifically 
I'd look at the TCP off-load value . That might help.
Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com

[cid:image001.jpg@01CE1416.C8CC47B0]

The Guardian Life Insurance Company of America

www.guardianlife.com







From:Eric Brouwer 
To:"NT System Admin Issues" 
Date:02/26/2013 10:18 AM
Subject:Communications slow between two servers




Greetings,

I have an odd communications issue that I just can't pin down.  I have two 
existing servers, X and Y.  X will be replaced by a new server, Z.  Then Y will 
be replaced by X, and Y decommissioned.  These are rather simple file servers.

When we brought Z online, we copied data from X to Z via Smart Sync and got 
fantastic transfer speeds.  When we went to copy from Y to X, however, speeds 
are horrible.  What should take several hours is taking days.  We then tested 
communications between Y and Z and speeds are great again.

All servers are on the same switch and reside in the same rack.  Why would 2 
servers communicate so slowly?

X to Z = fast
Y to X = slow
Y to Z = Fast

Results are the same whether we "push" or "pull" data.

Thank you,

Eric

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

RE: Recommendations for DNS/SSL provider

[Brian Desmond]

DigiCert for certs hands down. I can't comment on DNS providers.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c - 312.731.3132

From: Damien Solodow [mailto:damien.solo...@harrison.edu]
Sent: Monday, February 25, 2013 2:25 PM
To: NT System Admin Issues
Subject: Recommendations for DNS/SSL provider

Currently we are using GoDaddy for our SSL certs, domain registration and 
parking/forwarding of some domains.
Our main DNS zones are hosted internally, but we use them to point/redirect 
various domains to our main ones.

There is currently some discussion about moving away from them due to various 
concerns around them (not just technical issues).

I wanted to see of anyone had suggestions/recommendations on alternatives that 
aren't going to trigger a huge price jump.
Are we going to be better off having a provider/company for SSL and another for 
DNS, or are there good options that provide both?

As far as certificates, so far I'm liking the looks of DigiCert and RapidSSL 
but am open to options.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE
500 North Meridian St
Suite 500
Indianapolis, IN 46204-1213
www.harrison.edu


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Communications slow between two servers

[Kennedy, Jim]

"TCP offload/chimney settings?"

It's always that. Don't know why it even still exists.

From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu]
Sent: Tuesday, February 26, 2013 11:25 AM
To: NT System Admin Issues
Subject: RE: Communications slow between two servers

And NIC firmware?  TCP offload/chimney settings?

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: Tuesday, February 26, 2013 7:46 AM
To: NT System Admin Issues
Subject: Re: Communications slow between two servers

NIC drivers?

On Tue, Feb 26, 2013 at 8:57 AM, Eric Brouwer 
mailto:ithelp.e...@gmail.com>> wrote:
Greetings,
I have an odd communications issue that I just can't pin down.  I have two 
existing servers, X and Y.  X will be replaced by a new server, Z.  Then Y will 
be replaced by X, and Y decommissioned.  These are rather simple file servers.

When we brought Z online, we copied data from X to Z via Smart Sync and got 
fantastic transfer speeds.  When we went to copy from Y to X, however, speeds 
are horrible.  What should take several hours is taking days.  We then tested 
communications between Y and Z and speeds are great again.
All servers are on the same switch and reside in the same rack.  Why would 2 
servers communicate so slowly?
X to Z = fast
Y to X = slow
Y to Z = Fast
Results are the same whether we "push" or "pull" data.

Thank you,

Eric


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Communications slow between two servers

[Randal, Phil]

The devil's in the detail.

Which OS?

Scalable networking pack on 2003 SP2 can cause these issues.  Try turning off 
TCP offload, Receive Side Scaling, etc, and see if that improves anything.

Oh, and check duplex settings on server and switch.

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.uk

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: 26 February 2013 15:46
To: NT System Admin Issues
Subject: Re: Communications slow between two servers

NIC drivers?

On Tue, Feb 26, 2013 at 8:57 AM, Eric Brouwer 
mailto:ithelp.e...@gmail.com>> wrote:
Greetings,
I have an odd communications issue that I just can't pin down.  I have two 
existing servers, X and Y.  X will be replaced by a new server, Z.  Then Y will 
be replaced by X, and Y decommissioned.  These are rather simple file servers.

When we brought Z online, we copied data from X to Z via Smart Sync and got 
fantastic transfer speeds.  When we went to copy from Y to X, however, speeds 
are horrible.  What should take several hours is taking days.  We then tested 
communications between Y and Z and speeds are great again.
All servers are on the same switch and reside in the same rack.  Why would 2 
servers communicate so slowly?
X to Z = fast
Y to X = slow
Y to Z = Fast
Results are the same whether we "push" or "pull" data.

Thank you,

Eric


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

"Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Communications slow between two servers

[Kennedy, Jim]

X has AV installed?

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: Tuesday, February 26, 2013 11:04 AM
To: NT System Admin Issues
Subject: Re: Communications slow between two servers

NIC drivers?

On Tue, Feb 26, 2013 at 8:57 AM, Eric Brouwer 
mailto:ithelp.e...@gmail.com>> wrote:
Greetings,
I have an odd communications issue that I just can't pin down.  I have two 
existing servers, X and Y.  X will be replaced by a new server, Z.  Then Y will 
be replaced by X, and Y decommissioned.  These are rather simple file servers.

When we brought Z online, we copied data from X to Z via Smart Sync and got 
fantastic transfer speeds.  When we went to copy from Y to X, however, speeds 
are horrible.  What should take several hours is taking days.  We then tested 
communications between Y and Z and speeds are great again.
All servers are on the same switch and reside in the same rack.  Why would 2 
servers communicate so slowly?
X to Z = fast
Y to X = slow
Y to Z = Fast
Results are the same whether we "push" or "pull" data.

Thank you,

Eric


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Communications slow between two servers

[Maglinger, Paul]

Anti-virus?

From: Eric Brouwer [mailto:ithelp.e...@gmail.com]
Sent: Tuesday, February 26, 2013 8:58 AM
To: NT System Admin Issues
Subject: Communications slow between two servers

Greetings,
I have an odd communications issue that I just can't pin down.  I have two 
existing servers, X and Y.  X will be replaced by a new server, Z.  Then Y will 
be replaced by X, and Y decommissioned.  These are rather simple file servers.

When we brought Z online, we copied data from X to Z via Smart Sync and got 
fantastic transfer speeds.  When we went to copy from Y to X, however, speeds 
are horrible.  What should take several hours is taking days.  We then tested 
communications between Y and Z and speeds are great again.
All servers are on the same switch and reside in the same rack.  Why would 2 
servers communicate so slowly?
X to Z = fast
Y to X = slow
Y to Z = Fast
Results are the same whether we "push" or "pull" data.

Thank you,

Eric


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: 50GB free storage from Box.com

[Webster]

You can look all you want but you can't do anything until you buy one. :) 


Thanks


Webster


> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Subject: Re: 50GB free storage from Box.com
> 
> Though my comment was meant to be snarky, that's actually interesting.
> 
> I may have to look at those units
> 
> Kurt
> 
> On Tue, Feb 26, 2013 at 5:44 AM, Andrew S. Baker 
> wrote:
> >
> > The Synology SAN/NAS devices have a mobile app that you can use to
> easily access your own storage from those devices remotely.
> >
> > FTP is okay, but sometimes you want to do more than simply transfer files
> around.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Communications slow between two servers

[Christopher Bodnar]

I'm not familiar with Smart Sync, so can't comment on that. But can you 
reproduce the problem outside of that software? For example do you see the 
same slowness if you use RoboCopy or DFSR? 

Take a look at this post:

http://social.technet.microsoft.com/Forums/en-US/winserverfiles/thread/e55022a4-db65-4dc9-a2f1-96b7f5d8e2fa

Even though you aren't using DFSR, it might give you some ideas. 
Specifically I'd look at the TCP off-load value . That might help. 


Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com 







From:   Eric Brouwer 
To: "NT System Admin Issues" 
Date:   02/26/2013 10:18 AM
Subject:Communications slow between two servers



Greetings,

I have an odd communications issue that I just can't pin down.  I have two 
existing servers, X and Y.  X will be replaced by a new server, Z.  Then Y 
will be replaced by X, and Y decommissioned.  These are rather simple file 
servers.

When we brought Z online, we copied data from X to Z via Smart Sync and 
got fantastic transfer speeds.  When we went to copy from Y to X, however, 
speeds are horrible.  What should take several hours is taking days.  We 
then tested communications between Y and Z and speeds are great again.

All servers are on the same switch and reside in the same rack.  Why would 
2 servers communicate so slowly?

X to Z = fast
Y to X = slow
Y to Z = Fast

Results are the same whether we "push" or "pull" data.

Thank you,

Eric

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

Re: 50GB free storage from Box.com

[Kurt Buff]

Though my comment was meant to be snarky, that's actually interesting.

I may have to look at those units

Kurt

On Tue, Feb 26, 2013 at 5:44 AM, Andrew S. Baker  wrote:
>
> The Synology SAN/NAS devices have a mobile app that you can use to easily 
> access your own storage from those devices remotely.
>
> FTP is okay, but sometimes you want to do more than simply transfer files 
> around.
>
>
>
>
>
> ASB
> http://XeeMe.com/AndrewBaker
> Providing Virtual CIO Services (IT Operations & Information Security) for the 
> SMB market…
>
>
>
>
>
> On Mon, Feb 25, 2013 at 8:41 PM, Kurt Buff  wrote:
>>
>> On Mon, Feb 25, 2013 at 5:37 PM, Angus Scott-Fleming
>>  wrote:
>> > On 13 Feb 2013 at 16:21, James Rankin  wrote:
>> >
>> >> I have a free 8TB in my home-based solution :-)
>> >
>> > [Sorry about the "Late to the thread" post -- been offline at a golf 
>> > tourney
>> > ;-)]
>> >
>> > What cloud software do you use to access that from your iDevices, 
>> > Androids, and
>> > Macs?
>>
>> Well, if it were me, it'd be ftp...
>>
>> Kurt
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here: 
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Need help with VBscript

[Christopher Bodnar]

Take a look at these:

http://blogs.msdn.com/b/astebner/archive/2007/03/14/mailbag-what-version-of-the-net-framework-is-included-in-what-version-of-the-os.aspx

http://stackoverflow.com/questions/1164495/windows-7-default-net-framework



Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com 







From:   Tammy George 
To: "NT System Admin Issues" 
Date:   02/26/2013 09:53 AM
Subject:RE: Need help with VBscript



BTW - is this also the case for Vista & XP?  i.e. version 2.0 is 
installed?
 
 
 
From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: February-26-13 10:31 AM
To: NT System Admin Issues
Subject: RE: Need help with VBscript
 
Yes, all Windows 7 systems come with 2.0 , 3.0 and 3.5 installed 

If your install only requires 2.0 or higher, then check for 2.0 and you 
should be fine. 


Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 


The Guardian Life Insurance Company of America

www.guardianlife.com 






From:Tammy George  
To:"NT System Admin Issues" 
 
Date:02/26/2013 09:17 AM 
Subject:RE: Need help with VBscript 




Thanks, Christopher. 
  
I did see that and then wondered if 2.0 is installed on all systems and 
couldn’t find an answer.  Windows 7 comes with .NET 3.5 OOB and my system 
also has 2.0.  Is that the case with all Windows 7 systems?  i.e. Is it 
sufficient to do a check for 2.0 or do I need to check for all versions 
from 2.0 onward? 
  
  
  
  
  
From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: February-26-13 10:06 AM
To: NT System Admin Issues
Subject: Re: Need help with VBscript 
  
First hit on Google: 

http://stackoverflow.com/questions/4394607/vbscript-to-check-if-net-2-0-is-installed
 


Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 


The Guardian Life Insurance Company of America

www.guardianlife.com 







From:Tammy George  
To:"NT System Admin Issues"  
Date:02/26/2013 08:58 AM 
Subject:Need help with VBscript 
 





Hello. 
 
I have a VBScript which calls an .exe in order to install something.  We 
created the VBScript in order to run the .exe with elevated privileges as 
well as send us an email each time it’s run reporting success or failure. 
 
We’ve discovered that if users don’t have .NET Framework version 2.0 or 
greater, the install fails.   Is it possible for the VBScript to check if 
version 2.0 or greater is installed?  If it’s not, I’ll then run the 
install.   
 
Thanks in advance! 
- Tammy 
 
 
 
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 
- This message, and any 
attachments to it, may contain information that is privileged, 
confidential, and exempt from disclosure under applicable law. If the 
reader of this message is not the intended recipient, you are notified 
that any use, dissemination, distribution, copying, or communication of 
this message is strictly prohibited. If you have received this message in 
error, please notify the sender immediately by return e-mail and delete 
the message and any attachments. Thank you. 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ 

RE: SemiOT: Cisco 2504 WLC tips?

[Glen Johnson]

We did this a few years back with a 5508 controller and several aps.
Basically, you will need one vlan for the aps to talk to the controller.
You will have to convert the access points to light weight aps.
That wasn't very intuitive, so here is a link.
http://www.cisco.com/en/US/docs/wireless/controller/7.2/configuration/guide/cg_lwap.html#wp1345331

The controller handles the routing between the ap vlan and the other vlan's 
that the clients will use.
What we did is set 4 ports on the controller in a lag, connected to 4 ports on 
our core switch.  You will need 7.4 or higher code on the 2504 to support lag 
with its 4 ports.
The allowed vlans on this port group are, the controller to ap vlan, data vlan 
for laptops, open access vlan for the public and voice vlan for ip phones.
Good luck.


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, February 25, 2013 9:00 PM
To: NT System Admin Issues
Subject: SemiOT: Cisco 2504 WLC tips?

All,

I'm the happy recipient of this beastie, and I'm reading through a bunch of 
manuals for it, trying to figure out a good approach for transforming our 15 x 
1240AG WAPs into a cohesive group, rather than managing them individually.

The WAPs are spread across three HP 2800 PWR switches, and carry three VLANs 
each (one is the management VLAN (wired side only) and two are broadcast with 
different SSIDs - a guest network and a production network, both using WPA PSK).

First step is to get one of the WAPs talking to the WLC, then once that's 
working, change over the rest, and then I'm going to introduce 802.1x in a new 
SSID, and start switching all of the production wireless to it, and (I hope, 
depending on whether or not our barcode scanners will support 802.1x) eliminate 
the extra SSID.

But, I'm finding I have some questions that the manuals aren't addressing. For 
instance, the unit has two standard 1g ports and 2 PoE 1g ports. One needs to 
be the management port, but should I connect the other ports to each of my 
three switches? Each of the switches has a connection to my layer3 switch. 
Should I connect the management port to the L3 switch, and out the WLC between 
the switches and the L3 switch, or should I just connect the 3 non-management 
ports to the switches?

Does anyone have some pointers on setting this up?

So far, I've found and read most or all of each of these:

Cisco2500SeriesWirelessControllerDeploymentGuide
Cisco2500SeriesWirelessControllerGettingStartedGuide
CiscoWirelessLANControllerConfigurationGuide7_2
ConvertAutonomousWAPstoLightweightMode7_2

I have browsed through these:

CiscoWirelessControlSystemConfigurationGuide_Release7.0.172.0
CiscoLocationApplianceConfigurationGuide_Release6.0


Haven't touched these yet:
CiscoLocationApplianceConfigurationGuide_Release6.0
Cisco_SBA_BN_WirelessLANCleanAirDeploymentGuide-Aug2012

Any thoughts, on or off list, would be appreciated - even if it's a pointer to 
a Cisco list or forum.

Thanks,

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Recommendations for DNS/SSL provider

[Damien Solodow]

The issues raised by the team member who started the discussion center around 
some of their practices (obnoxious/exploitive commercials, support for SOPA, 
etc). I'm not really seeing those as business driving decisions, but there are 
other issues that do annoy me like their less than friendly website, the 
required intermediate certificates, and the fact that most things seem to have 
two sets of SSL instructions, one for GoDaddy and one for everyone else. :)

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Monday, February 25, 2013 9:52 PM
To: NT System Admin Issues
Subject: RE: Recommendations for DNS/SSL provider



> There is currently some discussion about moving away from them due to 
>various  concerns around them (not just technical issues).



Alright, you can't just leave us there:) What's the issue? I have a few 
companies setup with them?


jlc
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Need help with VBscript

[Tammy George]

BTW - is this also the case for Vista & XP?  i.e. version 2.0 is installed?



From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: February-26-13 10:31 AM
To: NT System Admin Issues
Subject: RE: Need help with VBscript

Yes, all Windows 7 systems come with 2.0 , 3.0 and 3.5 installed

If your install only requires 2.0 or higher, then check for 2.0 and you should 
be fine.

Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com

[cid:image001.jpg@01CE140D.3A30A540]

The Guardian Life Insurance Company of America

www.guardianlife.com







From:Tammy George 
To:"NT System Admin Issues" 
Date:02/26/2013 09:17 AM
Subject:RE: Need help with VBscript




Thanks, Christopher.

I did see that and then wondered if 2.0 is installed on all systems and 
couldn’t find an answer.  Windows 7 comes with .NET 3.5 OOB and my system also 
has 2.0.  Is that the case with all Windows 7 systems?  i.e. Is it sufficient 
to do a check for 2.0 or do I need to check for all versions from 2.0 onward?





From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: February-26-13 10:06 AM
To: NT System Admin Issues
Subject: Re: Need help with VBscript

First hit on Google:

http://stackoverflow.com/questions/4394607/vbscript-to-check-if-net-2-0-is-installed
Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com

[cid:image001.jpg@01CE140D.3A30A540]

The Guardian Life Insurance Company of America

www.guardianlife.com








From:Tammy George 
mailto:tammy.geo...@acadiau.ca>>
To:"NT System Admin Issues" 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Date:02/26/2013 08:58 AM
Subject:Need help with VBscript






Hello.

I have a VBScript which calls an .exe in order to install something.  We 
created the VBScript in order to run the .exe with elevated privileges as well 
as send us an email each time it’s run reporting success or failure.

We’ve discovered that if users don’t have .NET Framework version 2.0 or 
greater, the install fails.   Is it possible for the VBScript to check if 
version 2.0 or greater is installed?  If it’s not, I’ll then run the install.

Thanks in advance!
- Tammy





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

- This message, and any attachments to 
it, may contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, you are notified that any use, dissemination, distribution, 
copying, or communication of this message is strictly prohibited. If you have 
received this message in error, please notify the sender immediately by return 
e-mail and delete the message and any attachments. Thank you.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
<>

RE: Need help with VBscript

[Tammy George]

Thank you!



From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: February-26-13 10:31 AM
To: NT System Admin Issues
Subject: RE: Need help with VBscript

Yes, all Windows 7 systems come with 2.0 , 3.0 and 3.5 installed

If your install only requires 2.0 or higher, then check for 2.0 and you should 
be fine.

Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com

[cid:image001.jpg@01CE140C.8B881F00]

The Guardian Life Insurance Company of America

www.guardianlife.com







From:Tammy George 
mailto:tammy.geo...@acadiau.ca>>
To:"NT System Admin Issues" 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Date:02/26/2013 09:17 AM
Subject:RE: Need help with VBscript




Thanks, Christopher.

I did see that and then wondered if 2.0 is installed on all systems and 
couldn’t find an answer.  Windows 7 comes with .NET 3.5 OOB and my system also 
has 2.0.  Is that the case with all Windows 7 systems?  i.e. Is it sufficient 
to do a check for 2.0 or do I need to check for all versions from 2.0 onward?





From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: February-26-13 10:06 AM
To: NT System Admin Issues
Subject: Re: Need help with VBscript

First hit on Google:

http://stackoverflow.com/questions/4394607/vbscript-to-check-if-net-2-0-is-installed
Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com

[cid:image001.jpg@01CE140C.8B881F00]

The Guardian Life Insurance Company of America

www.guardianlife.com








From:Tammy George 
mailto:tammy.geo...@acadiau.ca>>
To:"NT System Admin Issues" 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Date:02/26/2013 08:58 AM
Subject:Need help with VBscript






Hello.

I have a VBScript which calls an .exe in order to install something.  We 
created the VBScript in order to run the .exe with elevated privileges as well 
as send us an email each time it’s run reporting success or failure.

We’ve discovered that if users don’t have .NET Framework version 2.0 or 
greater, the install fails.   Is it possible for the VBScript to check if 
version 2.0 or greater is installed?  If it’s not, I’ll then run the install.

Thanks in advance!
- Tammy





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

- This message, and any attachments to 
it, may contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, you are notified that any use, dissemination, distribution, 
copying, or communication of this message is strictly prohibited. If you have 
received this message in error, please notify the sender immediately by return 
e-mail and delete the message and any attachments. Thank you.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
<>

RE: Need help with VBscript

[Christopher Bodnar]

Yes, all Windows 7 systems come with 2.0 , 3.0 and 3.5 installed

If your install only requires 2.0 or higher, then check for 2.0 and you 
should be fine. 



Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com 







From:   Tammy George 
To: "NT System Admin Issues" 
Date:   02/26/2013 09:17 AM
Subject:RE: Need help with VBscript



Thanks, Christopher.
 
I did see that and then wondered if 2.0 is installed on all systems and 
couldn’t find an answer.  Windows 7 comes with .NET 3.5 OOB and my system 
also has 2.0.  Is that the case with all Windows 7 systems?  i.e. Is it 
sufficient to do a check for 2.0 or do I need to check for all versions 
from 2.0 onward?
 
 
 
 
 
From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: February-26-13 10:06 AM
To: NT System Admin Issues
Subject: Re: Need help with VBscript
 
First hit on Google: 

http://stackoverflow.com/questions/4394607/vbscript-to-check-if-net-2-0-is-installed
 



Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 


The Guardian Life Insurance Company of America

www.guardianlife.com 






From:Tammy George  
To:"NT System Admin Issues"  
Date:02/26/2013 08:58 AM 
Subject:Need help with VBscript 




Hello. 
  
I have a VBScript which calls an .exe in order to install something.  We 
created the VBScript in order to run the .exe with elevated privileges as 
well as send us an email each time it’s run reporting success or failure. 
  
We’ve discovered that if users don’t have .NET Framework version 2.0 or 
greater, the install fails.   Is it possible for the VBScript to check if 
version 2.0 or greater is installed?  If it’s not, I’ll then run the 
install. 
  
Thanks in advance! 
- Tammy 
  
  
  
  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
<><>

RE: Need help with VBscript

[Tammy George]

Thanks, Christopher.

I did see that and then wondered if 2.0 is installed on all systems and 
couldn’t find an answer.  Windows 7 comes with .NET 3.5 OOB and my system also 
has 2.0.  Is that the case with all Windows 7 systems?  i.e. Is it sufficient 
to do a check for 2.0 or do I need to check for all versions from 2.0 onward?





From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: February-26-13 10:06 AM
To: NT System Admin Issues
Subject: Re: Need help with VBscript

First hit on Google:

http://stackoverflow.com/questions/4394607/vbscript-to-check-if-net-2-0-is-installed

Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com

[cid:image001.jpg@01CE140A.31F8A3D0]

The Guardian Life Insurance Company of America

www.guardianlife.com







From:Tammy George 
mailto:tammy.geo...@acadiau.ca>>
To:"NT System Admin Issues" 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Date:02/26/2013 08:58 AM
Subject:Need help with VBscript




Hello.

I have a VBScript which calls an .exe in order to install something.  We 
created the VBScript in order to run the .exe with elevated privileges as well 
as send us an email each time it’s run reporting success or failure.

We’ve discovered that if users don’t have .NET Framework version 2.0 or 
greater, the install fails.   Is it possible for the VBScript to check if 
version 2.0 or greater is installed?  If it’s not, I’ll then run the install.

Thanks in advance!
- Tammy





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
<>

Re: Need help with VBscript

[Christopher Bodnar]

First hit on Google:

http://stackoverflow.com/questions/4394607/vbscript-to-check-if-net-2-0-is-installed



Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise 
Architecture and Engineering Services 
Tel 610-807-6459 
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com 







From:   Tammy George 
To: "NT System Admin Issues" 
Date:   02/26/2013 08:58 AM
Subject:Need help with VBscript



Hello.
 
I have a VBScript which calls an .exe in order to install something.  We 
created the VBScript in order to run the .exe with elevated privileges as 
well as send us an email each time it’s run reporting success or failure.
 
We’ve discovered that if users don’t have .NET Framework version 2.0 or 
greater, the install fails.   Is it possible for the VBScript to check if 
version 2.0 or greater is installed?  If it’s not, I’ll then run the 
install. 
 
Thanks in advance!
- Tammy
 
 
 
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
<>

Re: Java 7-15 failures.

[Andrew S. Baker]

Have no fear: at the rate that Java exploits and vulnerabilities are being
found in Java, they'll be providing more updates shortly.  Maybe they'll
fix that problem, or maybe more people will get the impetus to work around
them.





*ASB
**http://XeeMe.com/AndrewBaker* *
**Providing Virtual CIO Services (IT Operations & Information Security) for
the SMB market…***





On Mon, Feb 25, 2013 at 9:31 PM, Jon Harris  wrote:

>  I am having similar issues.  I just wish I did not need this crapware for
> work.
>
> Jon
>
> > From: kennedy...@elyriaschools.org
> > To: ntsysadmin@lyris.sunbelt-software.com
>
> > Subject: RE: Java 7-15 failures.
> > Date: Mon, 25 Feb 2013 17:23:12 +
>
> >
> > I am seeing the IE activation issue on multiple machines myself when I
> get the exe to work.
> >
> > -Original Message-
> > From: Sam Cayze [mailto:sca...@gmail.com]
> > Sent: Monday, February 25, 2013 12:20 PM
> > To: NT System Admin Issues
> > Subject: RE: Java 7-15 failures.
> >
> > No issues with the actual installer... But I'm having a heck of time
> having the IE pluggin actually work after an upgrade. It's getting tiresome
> trying to fix this after each update. IE says the add-on is enabled and all
> that jazz. But no Java will actually load in IE. Haven't pinpointed the
> actually fix yet, but it usually requires a mix of rebooting, disabling,
> re-enabling plugins, and re-installing java.
> >
> >
> > -Original Message-
> > From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
> > Sent: Friday, February 22, 2013 3:14 PM
> > To: NT System Admin Issues
> > Subject: RE: Java 7-15 failures.
> >
> > Not sure how to say this...but glad to hear that. So it isn't just me,
> there are others. So there is hope Java will release a fixed patch.
> >
> > -Original Message-
> > From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
> > Sent: Friday, February 22, 2013 3:55 PM
> > To: NT System Admin Issues
> > Subject: RE: Java 7-15 failures.
> >
> > Ditto here, sigh...
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
> >
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
> >
> > ---
> > To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> > ~  ~
> >
> > ---
> > To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
> >
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Recommendations for DNS/SSL provider

[Jeff Frantz]

I've used DNS Made Easy for 7 or 8 years with no issues.  For SSL, I was using 
Thawte which is part of VeriSign.  As soon as Symantec bought VeriSign, I 
bailed on the impending doom and now use Network Solutions SSL certs.  Network 
Solutions SSL prices are reasonable.  I've found if you have a Network 
Solutions account, log in and browse around the SSL area.  Then in a day or two 
you'll get a nice discount offer email to save of anywhere from 20%-50% on 
their certificates.

-Jeff

From: Damien Solodow [mailto:damien.solo...@harrison.edu]
Sent: Monday, February 25, 2013 3:25 PM
To: NT System Admin Issues
Subject: Recommendations for DNS/SSL provider

Currently we are using GoDaddy for our SSL certs, domain registration and 
parking/forwarding of some domains.
Our main DNS zones are hosted internally, but we use them to point/redirect 
various domains to our main ones.

There is currently some discussion about moving away from them due to various 
concerns around them (not just technical issues).

I wanted to see of anyone had suggestions/recommendations on alternatives that 
aren't going to trigger a huge price jump.
Are we going to be better off having a provider/company for SSL and another for 
DNS, or are there good options that provide both?

As far as certificates, so far I'm liking the looks of DigiCert and RapidSSL 
but am open to options.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE
500 North Meridian St
Suite 500
Indianapolis, IN 46204-1213
www.harrison.edu


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin