Re: OpenCandy -- spyware/adware or misunderstood?

[John Aldrich]

On Sat October 8 2011, you wrote:
> On Sat, Oct 8, 2011 at 2:00 PM, Greg Sweers  wrote:
> > Per them all their partners are required to provide an EULA that each
> > person has to accept before installing any new software.  I do
> > classify this myself as adware since that is precisely what its
> > doing.  ..I don't classify it as malware where they don't notify you
> > of installs and such and do a lot of subterfuge as you phrased it.
> 
>   Yah, it's an interesting concept.  It's certainly adware
> (advertisements in software), but different from the usual
> implementation, where you see ads while the program you asked for is
> running normally.  OpenCandy is supposedly only seen during
> installation of the program you asked for.
> 
>   If, as the purveyors claim, it's only used during installation
> (while waiting for the program you downloaded to install), it's
> relatively unobtrusive.  If, as the purveyors claim, it sends no
> identifying information out to others, it's also relatively harmless.
> If, as the purveyors claim, anyone using OpenCandy clearly identifies
> what it is and does, then it's also honest and above-board.
> 
>   PDFCreator adopted OpenCandy a year or three back.  There was a big
> kerfuffle in the user community about it.  The publishers of
> PDFCreator responded by offering an alternate installer without it.
> The prominent download link on this home page gives you the OpenCandy
> version; the other-downloads section has the sugar-free variety.
> 
>   Advertisements by themselves are not necessarily evil (advertising
> pays for a lot of things many people enjoy), but on the Internet and
> computer they often get used in disingenuous or unethical ways.
> Examples include advertisements that pop-up when you didn't ask for
> it, or track your activity.
> 
>   One thing that occurs to me is that many versions of Microsoft
> Windows also feature advertisements during installation.  So if you
> have a problem with using OpenCandy because you see ads during an
> install, then in fairness you should also stop using MS Windows.
> 
My main problem is that it *doesn't* go away like it's supposed to when 
it's done installing the app you requested. According to the OpenCandy, 
it's supposed to install the app, show you some optional software and then 
delete itself when it's done installing all the software.  On my computer, 
it didn't. I don't know what it did or didn't do since I last used it to 
install something. I installed two programs which are identified as using 
that, and I do not recall ever seeing anything about OpenCandy during those 
installs. Granted, I wasn't looking for it, but I still think it's a bit 
wrong to "hide" it from the end-user.
At least in previous versions it DID create a unique identifier for your 
computer. Granted they *say* that the new version doesn't do that, but do 
you REALLY trust these folks? I sure don't. 

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: OpenCandy -- spyware/adware or misunderstood?

[John Aldrich]

On Sat October 8 2011, you wrote:
> Hi John,
> 
> In my case (just a home user) it was on my system from installing
> "Winamp".
> 
> Neil ¦¬D
> 
Yeah. As soon as I saw that on the list, I removed WinAmp. I've got another 
app that I'm going to try out in it's place, called SnackAmp. Not sure I 
like it much. I might have to stick to just using Windows Media Player 
under Windows and XMMS under Linux. :(

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: OpenCandy -- spyware/adware or misunderstood?

[John Aldrich]

On Sat October 8 2011, you wrote:
> Interesting retort from opencandy.
> http://www.opencandy.com/2011/03/04/the-story-behind-the-opencandy-and-m
> icrosoft-adware-debacle/
> 
> Per them all their partners are required to provide an EULA that each
> person has to accept before installing any new software.  I do classify
> this myself as adware since that is precisely what its doing.  ..I
> don't classify it as malware where they don't notify you of installs
> and such and do a lot of subterfuge as you phrased it. You had to
> accept the opencandy eula to install it at some point either through a
> partner affiliation or direct EULA.
> 
> "There is no such thing as a free lunch" this includes programs
> 
Actually, there is free software... just some of the stuff that comes 
packaged with OpenCandy isn't completely free...

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

OpenCandy -- spyware/adware or misunderstood?

[John Aldrich]

I was scanning my system at home with Microsoft's Standalone System Scanner 
and it found OpenCandy on my system, which I'd never heard of before. Come 
to find out it's a piece of software that comes bundled with a lot of 
freeware apps that offers to install some 3rd party app for you while you're 
installing the app you originally downloaded.
To me, that sounds like adware. What do y'all think? I understand a need by 
programmers to get paid for their software but to my way of thinking, this 
subterfuge stinks!
-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Not really. I don't do much with the firewall as I don't know much about
Cisco. I rely on an outside consultant/vendor to handle any changes
necessary for us.

 

John-AldrichThread-Count

 

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Friday, October 07, 2011 12:34 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

 

John, do you do any sort of DNS or URL filtering at your firewall to
control/restrict outbound traffic?

  _  

From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 07 October 2011 4:02 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Well, I was using the bootable CD, so any infection on the computer should
not affect the machine in question. I'm guessing it's just old hardware that
isn't up to the job. I might take a USB cd up to a couple of 'em, but
honestly I'm not really worried about it on those machines. We have that IP
range blocked in the firewall, so it's not as big a deal as it might have
been.

 

OTOH, I am glad I used that bootable CD as some of the computers were really
infested beyond what I would have expected with Vipre installed.

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 10:25 AM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Did it successfully install the software and NOT allow you to update the
definition files?

 

This is a good sign of an infected computer.

 

On Thu, Oct 6, 2011 at 6:31 PM, John Aldrich 
wrote:

What do you do if the machine won't run it? I have two machines that both
think the CD I just made is like 5 years old, and they won't allow me to
update the definitions or anything :(
Neither one is really "critical" but I can't replace 'em right now...




From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Yeah... give the one from Microsoft a try:  
http://connect.microsoft.com/systemsweeper


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:
Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an 

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Installed a copy of MBAM on one of the PCs which would not work with the
"live" CD and it's now scanning.

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 11:23 AM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Yes.

On Fri, Oct 7, 2011 at 11:21 AM, John Aldrich 
wrote:

I'm assuming you mean one of the computers that was unable to use the CD?

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 11:12 AM


To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Try to boot normally and update Malwarebytes now.

On Fri, Oct 7, 2011 at 11:02 AM, John Aldrich 
wrote:

Well, I was using the bootable CD, so any infection on the computer should
not affect the machine in question. I'm guessing it's just old hardware that
isn't up to the job. I might take a USB cd up to a couple of 'em, but
honestly I'm not really worried about it on those machines. We have that IP
range blocked in the firewall, so it's not as big a deal as it might have
been.

 

OTOH, I am glad I used that bootable CD as some of the computers were really
infested beyond what I would have expected with Vipre installed.

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 10:25 AM


To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Did it successfully install the software and NOT allow you to update the
definition files?

 

This is a good sign of an infected computer.

 

On Thu, Oct 6, 2011 at 6:31 PM, John Aldrich 
wrote:

What do you do if the machine won't run it? I have two machines that both
think the CD I just made is like 5 years old, and they won't allow me to
update the definitions or anything :(
Neither one is really "critical" but I can't replace 'em right now...




From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Yeah... give the one from Microsoft a try:  
http://connect.microsoft.com/systemsweeper


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:
Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIP

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Working on *installing* it on one of those computers.

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 11:23 AM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Yes.

On Fri, Oct 7, 2011 at 11:21 AM, John Aldrich 
wrote:

I'm assuming you mean one of the computers that was unable to use the CD?

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 11:12 AM


To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Try to boot normally and update Malwarebytes now.

On Fri, Oct 7, 2011 at 11:02 AM, John Aldrich 
wrote:

Well, I was using the bootable CD, so any infection on the computer should
not affect the machine in question. I'm guessing it's just old hardware that
isn't up to the job. I might take a USB cd up to a couple of 'em, but
honestly I'm not really worried about it on those machines. We have that IP
range blocked in the firewall, so it's not as big a deal as it might have
been.

 

OTOH, I am glad I used that bootable CD as some of the computers were really
infested beyond what I would have expected with Vipre installed.

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 10:25 AM


To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Did it successfully install the software and NOT allow you to update the
definition files?

 

This is a good sign of an infected computer.

 

On Thu, Oct 6, 2011 at 6:31 PM, John Aldrich 
wrote:

What do you do if the machine won't run it? I have two machines that both
think the CD I just made is like 5 years old, and they won't allow me to
update the definitions or anything :(
Neither one is really "critical" but I can't replace 'em right now...




From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Yeah... give the one from Microsoft a try:  
http://connect.microsoft.com/systemsweeper


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:
Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
h

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Yeah. these are older computers. thought maybe it was the speed of the
computer. *shrug* As I said, I'm not seeing any hits on the firewall for
that IP range, so maybe I got it already.

 

John-AldrichThread-Count

 

From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: Friday, October 07, 2011 9:42 AM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

bad disc clamp in CD ROM drive, preventing proper rotational speed to read
the disk ???

(guessing the machines that won't read are NOT brand new)

On Fri, Oct 7, 2011 at 9:13 AM, Roger Wright  wrote:

Hmmm... Not sure what would cause this.  I've only booted from it one time
and didn't have a problem.   


Roger Wright
___

My short term goal is to make it through the day.  

My long term goal is to string a bunch of short term goals together.

 





On Thu, Oct 6, 2011 at 6:31 PM, John Aldrich 
wrote:

What do you do if the machine won't run it? I have two machines that both
think the CD I just made is like 5 years old, and they won't allow me to
update the definitions or anything :(
Neither one is really "critical" but I can't replace 'em right now...




From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Yeah... give the one from Microsoft a try:  
http://connect.microsoft.com/systemsweeper


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:
Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

I'm assuming you mean one of the computers that was unable to use the CD?

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 11:12 AM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Try to boot normally and update Malwarebytes now.

On Fri, Oct 7, 2011 at 11:02 AM, John Aldrich 
wrote:

Well, I was using the bootable CD, so any infection on the computer should
not affect the machine in question. I'm guessing it's just old hardware that
isn't up to the job. I might take a USB cd up to a couple of 'em, but
honestly I'm not really worried about it on those machines. We have that IP
range blocked in the firewall, so it's not as big a deal as it might have
been.

 

OTOH, I am glad I used that bootable CD as some of the computers were really
infested beyond what I would have expected with Vipre installed.

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 10:25 AM


To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Did it successfully install the software and NOT allow you to update the
definition files?

 

This is a good sign of an infected computer.

 

On Thu, Oct 6, 2011 at 6:31 PM, John Aldrich 
wrote:

What do you do if the machine won't run it? I have two machines that both
think the CD I just made is like 5 years old, and they won't allow me to
update the definitions or anything :(
Neither one is really "critical" but I can't replace 'em right now...




From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Yeah... give the one from Microsoft a try:  
http://connect.microsoft.com/systemsweeper


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:
Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions cli

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Well, I was using the bootable CD, so any infection on the computer should
not affect the machine in question. I'm guessing it's just old hardware that
isn't up to the job. I might take a USB cd up to a couple of 'em, but
honestly I'm not really worried about it on those machines. We have that IP
range blocked in the firewall, so it's not as big a deal as it might have
been.

 

OTOH, I am glad I used that bootable CD as some of the computers were really
infested beyond what I would have expected with Vipre installed.

 

John-AldrichThread-Count

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Friday, October 07, 2011 10:25 AM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Did it successfully install the software and NOT allow you to update the
definition files?

 

This is a good sign of an infected computer.

 

On Thu, Oct 6, 2011 at 6:31 PM, John Aldrich 
wrote:

What do you do if the machine won't run it? I have two machines that both
think the CD I just made is like 5 years old, and they won't allow me to
update the definitions or anything :(
Neither one is really "critical" but I can't replace 'em right now...




From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Yeah... give the one from Microsoft a try:  
http://connect.microsoft.com/systemsweeper


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:
Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forum

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

What do you do if the machine won’t run it? I have two machines that both
think the CD I just made is like 5 years old, and they won't allow me to
update the definitions or anything :(
Neither one is really "critical" but I can't replace 'em right now...



From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Yeah... give the one from Microsoft a try:  
http://connect.microsoft.com/systemsweeper


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:
Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




--
-cynicalgeek-
cynicalgeekgmail.com
--
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage 

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Thanks! I'll give that a shot.

 

John-AldrichThread-Count

 

From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Thursday, October 06, 2011 3:56 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Yeah... give the one from Microsoft a try:  

 <http://connect.microsoft.com/systemsweeper>
http://connect.microsoft.com/systemsweeper


Roger Wright
___

My short term goal is to make it through the day.  

My long term goal is to string a bunch of short term goals together.

 





On Thu, Oct 6, 2011 at 3:28 PM, John Aldrich 
wrote:

Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com]
Sent: Thursday, October 06, 2011 3:16 PM

To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




--
-cynicalgeek-
cynicalgeekgmail.com
--
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Well, we blocked the IPs of the C&C server at the firewall, and
theoretically, I should have had some hits on the firewall overnight, but I
never did, so I don't know what's going on. Unless/until I can find
something to point me towards a good way to find this sucker, I'm going to
call it "resolved."

I did contact Sunbelt, but the tech I got seemed to think I'd already
identified the infected PC. I think the only way I'm likely to identify the
machine in question is to boot off removable media and scan the hard drive
of every machine that has been turned on during the time the infection was
detected (about a dozen or two.) Do y'all know of any good free/trialware
that one can download a bootable ISO for to scan for this bug?



From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Thursday, October 06, 2011 3:16 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

So you have no root cause but it is resolved?
On Thu, Oct 6, 2011 at 2:57 PM, John Aldrich 
wrote:
Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com]
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
-cynicalgeek-
cynicalgeekgmail.com
--
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Nope. I managed to get the ASA logging to a Linux box successfully, but it's
not showing any hits on the relevant IP address. *shrug* I don't know if
running Malware Bytes on a few machines cleaned it or not. I didn't find
anything major on those machines, so I doubt that was it. I suppose it could
be a false-positive. Don't know.



From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Thursday, October 06, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

John,

How'd you make out with this issue?  Determine the source yet?


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Delayed Startup for Exchange services?

[John Aldrich]

Could you go into service manager and set the Exchange services to be
dependant on DNS? That might fix the problem, although one might wonder why
DNS is taking so long to start.



From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Thursday, October 06, 2011 10:05 AM
To: NT System Admin Issues
Subject: Re: Delayed Startup for Exchange services?

You need DNS to be working.
On Thu, Oct 6, 2011 at 5:51 AM, Oliver Marshall
 wrote:
We have a problem with an SBS2011 server when it reboots. After the reboot
all the Exchange services fail to start seemingly because the DNS server
isn’t up yet. We get a load of alerts saying that the exchange services
can’t find any AD servers and a few other services which log on using
specific accounts also fail to start with logon errors. If you want a few
mins then they happily start up. 
 
Is there anything wrong with setting the Exchange services to delayed start?
Would that, do you think, have any knock on effects?
 
Olly
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
-cynicalgeek-
cynicalgeekgmail.com
--
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Needing to encrypt a file

[John Aldrich]

As previously stated: GnuPG should do the trick.




-Original Message-
From: Greg Sweers [mailto:gswe...@acts360.com] 
Sent: Tuesday, October 04, 2011 2:26 PM
To: NT System Admin Issues
Subject: RE: Needing to encrypt a file

Its an Italian Medical organization that has him login, create an account, 
setup the information about his organization and then downloads a file to his 
desktop that he has to encrypt with their requirements.  Once he does that he 
can then upload documents to their system for review... Haven't ever seen 
anything like it before.

Sorry when I said signature, its really just signing the file digitally and 
uploading it back to their servers.  Their instructions just indicate to sign 
the file offline using our encryption software... But it has to be in pkcs#7


Greg Sweers
CEO
ACTS360.com
P.O. Box 1193
Brandon, FL 33509
813-657-0849 Office
813-758-6850 Cell
813-341-1270 Fax

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Tuesday, October 04, 2011 1:20 PM
To: NT System Admin Issues
Subject: Re: Needing to encrypt a file

On Tue, Oct 4, 2011 at 10:06, Greg Sweers  wrote:
> Have a customer that is needing to encrypt his signature. The 
> organization wants it in PKCS#7, any suggestions on programs or ideas 
> to get it done today.. They do not want to create a PKI infrastructure 
> locally.
>
> Thx

What is meant by "encrypt his signature", and what process are they trying to 
further? Why the requirement for PKCS#7, vs. something else?

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Torpig/Anserin/Mebroot infection

[John Aldrich]

On Mon October 3 2011, you wrote:
> On 3 Oct 2011 at 16:14, John Aldrich  wrote:
> > We don't have a mail server here. Our ISP hosts our email for us, so
> > yeah, we do allow SMTP out. I wonder if there's a way to force all
> > port 25 traffic to one IP in the firewall?
> 
> There's usually a way to limit port-25 traffic to only one IP.  It won't
> force the traffic (redirect it), but it will prevent infected machines
> from sending to port 25 elsewhere.
> 
That'll help with spam bots and such, but it wouldn't help in this case. :D

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Thanks, Tammy! My thought was that it would be easy to find in the Cisco ASA
logs... yeah, right! :D




-Original Message-
From: Tammy Stewart [mailto:copper...@personainternet.com] 
Sent: Monday, October 03, 2011 4:30 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

If Vipre does not find the culprit John, don't be shy to shoot us a support
ticket request.
We'll help find it.

Support request page:
www.gfi.com/supportform

Indicate you need security response & ticket will get to us faster.

Tammy

-Original Message-
From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Monday, October 03, 2011 4:19 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

You really don't want to be doing that, or if you must do it at least only
allow it outbound to the IP of the mail server your PC's are supposed to be
using.

Looking at the CBL listing it appears they list you for activity other than
SMTP traffic, so it may well be other traffic that's got you listed, but it
still doesn't change the fact that you really don't want to allow
unrestricted outbound SMTP from any/all IP's on your LAN.

Ditto all other ports/protocols.  If you don't already do so, start from a
position of only allowing the ports required.
________
From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 03 October 2011 9:14 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

We don't have a mail server here. Our ISP hosts our email for us, so yeah,
we do allow SMTP out. I wonder if there's a way to force all port 25 traffic
to one IP in the firewall?




-Original Message-
From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Monday, October 03, 2011 4:04 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Jus to confirm, you don't allow outbound SMTP from anything other than your
corporate SMTP boxes do you?

From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 03 October 2011 7:59 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Email blocklist: cbl.abuseat.org for "attempting to make contact to a Torpig
Command and Control server at 91.20.221.209, with contents unique to Torpig
C&C command protocols."



From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Monday, October 03, 2011 1:54 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Can you expand on "blacklisted"?  Which blacklist and for what type of
traffic?

From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 03 October 2011 6:22 PM
To: NT System Admin Issues
Subject: Torpig/Anserin/Mebroot infection
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.

Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a 

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

I've got a deep scan scheduled for tonight. Hopefully it'll catch it, but
according to the information on the CBL, it's not commonly caught that
way... "Pay very close attention: Most of these trojans have extremely poor
detection rates in current Anti-Virus software..." I did scan the "likely
suspects" with Malware Bytes, but didn't see any infection. As I said, Vipre
Enterprise will be deep-scanning tonight.



From: Shauna Hensala [mailto:she...@msn.com] 
Sent: Monday, October 03, 2011 4:10 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

you *should* be able to do virus scan of your network and identify the
culprit.


Shauna Hensala



> From: jaldr...@blueridgecarpet.com
> To: ntsysadmin@lyris.sunbelt-software.com
> Subject: RE: Torpig/Anserin/Mebroot infection
> Date: Mon, 3 Oct 2011 14:58:42 -0400
> 
> I did not receive notification from my ISP. I found out about it when I
was
> corresponding with someone from work on my personal email address and the
> email kept getting held. I looked at *why* it was being held and the info
> was that it was being held by the CBL.ABUSEAT.ORG block list. They in turn
> told me that the external IP of our firewall was listed due to the
> Torpig/Anserin/Mebroot traffic. *shrug*
> 
> I'm looking at probably 2-3 dozen computers total in one location.
> 
> 
> 
> From: Shauna Hensala [mailto:she...@msn.com] 
> Sent: Monday, October 03, 2011 1:53 PM
> To: NT System Admin Issues
> Subject: RE: Torpig/Anserin/Mebroot infection
> 
> How many machines are we talking about here?  All local or some in remote
> locations?  The ISP did not provide the IP of the device that was
> misbehaving?
> 
> 
> Shauna Hensala
> 
> 
> 
> 
> From: jaldr...@blueridgecarpet.com
> To: ntsysadmin@lyris.sunbelt-software.com
> Subject: Torpig/Anserin/Mebroot infection
> Date: Mon, 3 Oct 2011 13:22:56 -0400
> So, our external IP is blacklisted because apparently one of our machines
is
> infected with a banking Trojan. Short of going to each and every
individual
> machine on the network, the only thing I can think of to do is to set up
> logging of the ASA to a syslog server. I have downloaded and installed a
> trial version of Kiwi syslog, but I can’t figure out how to configure it
to
> forward the log files to my system.
>  
> Anyone here able to provide a good how-to? I *did* Google, but apparently
my
> Google-fu sucks, as I wasn’t able to find instructions that made sense to
> me.
>  
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~  ~
> 
> ---
> To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

We don't have a mail server here. Our ISP hosts our email for us, so yeah,
we do allow SMTP out. I wonder if there's a way to force all port 25 traffic
to one IP in the firewall?




-Original Message-
From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Monday, October 03, 2011 4:04 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Jus to confirm, you don't allow outbound SMTP from anything other than your
corporate SMTP boxes do you?
____
From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 03 October 2011 7:59 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Email blocklist: cbl.abuseat.org for "attempting to make contact to a Torpig
Command and Control server at 91.20.221.209, with contents unique to Torpig
C&C command protocols."



From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Monday, October 03, 2011 1:54 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Can you expand on "blacklisted"?  Which blacklist and for what type of
traffic?
____
From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 03 October 2011 6:22 PM
To: NT System Admin Issues
Subject: Torpig/Anserin/Mebroot infection
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.

Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

I *do* have ASDM, but the log file does not seem to go back a very long ways, 
and this infection apparently only attempts to check-in every few hours as best 
I can tell from the frequency of the reports.



From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Monday, October 03, 2011 3:10 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

Are you using ASDM?  Can't you filter the builtin realtime log viewer in a way 
that might show you the infected machines?  (It's been a long time since I've 
used ASDM...)
On Mon, Oct 3, 2011 at 2:59 PM, John Aldrich  
wrote:
Email blocklist: cbl.abuseat.org for "attempting to make contact to a Torpig
Command and Control server at 91.20.221.209, with contents unique to Torpig
C&C command protocols."



From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Monday, October 03, 2011 1:54 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection
Can you expand on "blacklisted"?  Which blacklist and for what type of
traffic?
____
From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 03 October 2011 6:22 PM
To: NT System Admin Issues
Subject: Torpig/Anserin/Mebroot infection
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Not yet.  I can do so though.

 

John-AldrichThread-Count

 

From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Monday, October 03, 2011 2:55 PM
To: NT System Admin Issues
Subject: Re: Torpig/Anserin/Mebroot infection

 

Have you kicked off a VIPRE deep scan on these machines?


Roger Wright
___

My short term goal is to make it through the day.  

My long term goal is to string a bunch of short term goals together.

 





On Mon, Oct 3, 2011 at 1:22 PM, John Aldrich 
wrote:

So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can't figure out how to configure it to
forward the log files to my system.

 

Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn't able to find instructions that made sense to
me.

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><>

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

Email blocklist: cbl.abuseat.org for "attempting to make contact to a Torpig
Command and Control server at 91.20.221.209, with contents unique to Torpig
C&C command protocols." 



From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Monday, October 03, 2011 1:54 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

Can you expand on "blacklisted"?  Which blacklist and for what type of
traffic?
________
From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 03 October 2011 6:22 PM
To: NT System Admin Issues
Subject: Torpig/Anserin/Mebroot infection
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Torpig/Anserin/Mebroot infection

[John Aldrich]

I did not receive notification from my ISP. I found out about it when I was
corresponding with someone from work on my personal email address and the
email kept getting held. I looked at *why* it was being held and the info
was that it was being held by the CBL.ABUSEAT.ORG block list. They in turn
told me that the external IP of our firewall was listed due to the
Torpig/Anserin/Mebroot traffic. *shrug*

I'm looking at probably 2-3 dozen computers total in one location.



From: Shauna Hensala [mailto:she...@msn.com] 
Sent: Monday, October 03, 2011 1:53 PM
To: NT System Admin Issues
Subject: RE: Torpig/Anserin/Mebroot infection

How many machines are we talking about here?  All local or some in remote
locations?  The ISP did not provide the IP of the device that was
misbehaving?


Shauna Hensala




From: jaldr...@blueridgecarpet.com
To: ntsysadmin@lyris.sunbelt-software.com
Subject: Torpig/Anserin/Mebroot infection
Date: Mon, 3 Oct 2011 13:22:56 -0400
So, our external IP is blacklisted because apparently one of our machines is
infected with a banking Trojan. Short of going to each and every individual
machine on the network, the only thing I can think of to do is to set up
logging of the ASA to a syslog server. I have downloaded and installed a
trial version of Kiwi syslog, but I can’t figure out how to configure it to
forward the log files to my system.
 
Anyone here able to provide a good how-to? I *did* Google, but apparently my
Google-fu sucks, as I wasn’t able to find instructions that made sense to
me.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

USB KVM switch that works with Linux and wireless Logitech keyboard/mouse

[John Aldrich]

I've bought two IOGear KVM switches so far. The first one was a PS/2 only 
and didn't work with my Dell machine since it's USB-only and it didn't work 
with the PS2->USB adapter. Then I bought another IOGear, this time a USB 
one and it wouldn't pass the unifying receiver from my Wireless Logitech 
keyboard and mouse. When I tried to use the keyboard and mouse with the 
IOgear KVM, it said "no unifying receiver found", plus it wouldn't see my 
Linux box at all. :( So, for those two reasons I'm sending it back.

Does anyone have a KVM that will work with a Logitech unifying receiver for 
my wireless keyboard and mouse AND will see my Linux box? The IOGear didn't 
even detect it as being an active port! Oh, one other thing... I like the 
price point of the IOGear, even if their equipment doesn't work, so I'd 
prefer something in the $50 price range.
-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Anti-virus boot-up disks?

[John Aldrich]

Exactly... You shut down the PC in question, disable writing on the Flash
Drive (moot point, but still...for those paranoid people out there *grin*)
boot off the flash drive and do your scan. Where's the danger???



From: Steven Peck [mailto:sep...@gmail.com] 
Sent: Tuesday, September 13, 2011 11:51 AM
To: NT System Admin Issues
Subject: Re: Anti-virus boot-up disks?

You are booting into a completely different OS and not launching any
applictions to do this scan.  I am not sure I understand the level of
paronoia.
Steven Peck
http://www.blkmtn.org

 
On Tue, Sep 13, 2011 at 8:41 AM, John Cook  wrote:
My point exactly – a CD/DVD is 100% safe. I can’t tell you how many times
I’ve had users call in telling me their wireless isn’t working on their
laptop only to find out they’ve accidentally hit the slider on the side of
the computer that turns it off. It happens, even to IT people (especially
when they are under pressure to fix several high priority things). I’m not
against using a USB drive but for safety it’s my second choice. And a DVD
costs me about $.20, maybe less. 
 
 John W. Cook
System Administrator
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4
 
From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Tuesday, September 13, 2011 11:31 AM

To: NT System Admin Issues
Subject: Re: Anti-virus boot-up disks?
 
Well, I guess if it's read-only, a virus would have a hell of a job copying
itself to it. But if the virus is already present when you set the switch to
read-only, then it will still execute, I should think.
On 13 September 2011 16:28, John Aldrich 
wrote:
I have never used a flash drive with a write-protect switch. Does anyone on
the list have any experience with those and know whether or not a virus
would be able to bypass that? Just curious how effective it would be in
keeping viruses at bay. That being said, if you're booting off it, I don't
really see a huge issue as you're not going to be running anything off the
hard drive, so at least in theory, you shouldn't need to worry about viruses
that may be on the hard drive.



From: Ken Schaefer [mailto:k...@adopenstatic.com]
Sent: Tuesday, September 13, 2011 11:25 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?
Quick check of Amazon.com seems to show:

2GB drive for $10
http://www.amazon.com/Flash-Drive-write-protect-switch/dp/B005KL31E6

8GB drive for $20.99
http://www.amazon.com/RiDATA-Flash-Drive-Slider-Drives/dp/B000RGDA5E/ref=pd_
cp_e_4

32GB drive for $57.99
http://www.amazon.com/Ritek-Ridata-Twister-Protection-RDEZ32G-TW-LIG0/dp/B00
2G9TWUM

Sure, you can get a DVD for less than a dollar, but for the prices above,
I’d just get the flash drive and the ease of use that comes with that.

Cheers
Ken

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Tuesday, 13 September 2011 9:57 PM
To: NT System Admin Issues
Subject: Re: Anti-virus boot-up disks?

They are lots more expensive than CD/DVDs, however.  Not that this is
automatically a non-starter, but it speaks to Mr. Cook's earlier point.

I'd sooner get a USB DVD drive, even though they are slightly less portable.

ASB
http://XeeMe.com/AndrewBaker
Harnessing the Advantages of Technology for the SMB market…

On Tue, Sep 13, 2011 at 9:12 AM, John Aldrich 
wrote:
There are USB sticks with a switch that is supposed to make them read-only
until you flip the switch again. I don't know how that works or how well,
but I know that there are flash drives with a write-protect switch on 'em.
You can find 'em on NewEgg and probably elsewhere. I just checked on NewEgg
to make sure I wasn't misremembering.



From: John Cook [mailto:john.c...@pfsf.org]
Sent: Tuesday, September 13, 2011 8:59 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?

Did not and here’s why – I have yet to hear about any guaranteed way to make
a USB drive unwriteable on any machine you plug it into short of having a
manufacturer burn the data to one and ship it to you in which case you’re
paying 25x more for the same effect a non rewritable CD/DVD gives you. If
anyone knows of a way to do it (and I’m not talking about a reg hack on a
machine or a program that disables the functionality on a computer) please
share.

 John W. Cook
System Administrator
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Tuesday, September 13, 2011 8:27 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?

Thanks, anyone tried this on a USB stick?

Z

Edward E. Ziots
CISSP, Network +, Security +
Security Engineer
Lifespan Organization
Email:ezi...@lifespan.org
Cell:401-639-3505
From: G.Waleed Kavalec [mailto:kava...@gmail.com]
Sent: Monday, September 1

RE: Anti-virus boot-up disks?

[John Aldrich]

I have never used a flash drive with a write-protect switch. Does anyone on
the list have any experience with those and know whether or not a virus
would be able to bypass that? Just curious how effective it would be in
keeping viruses at bay. That being said, if you're booting off it, I don't
really see a huge issue as you're not going to be running anything off the
hard drive, so at least in theory, you shouldn't need to worry about viruses
that may be on the hard drive.



From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Tuesday, September 13, 2011 11:25 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?

Quick check of Amazon.com seems to show:

2GB drive for $10
http://www.amazon.com/Flash-Drive-write-protect-switch/dp/B005KL31E6

8GB drive for $20.99
http://www.amazon.com/RiDATA-Flash-Drive-Slider-Drives/dp/B000RGDA5E/ref=pd_
cp_e_4

32GB drive for $57.99
http://www.amazon.com/Ritek-Ridata-Twister-Protection-RDEZ32G-TW-LIG0/dp/B00
2G9TWUM

Sure, you can get a DVD for less than a dollar, but for the prices above,
I’d just get the flash drive and the ease of use that comes with that.

Cheers
Ken

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Tuesday, 13 September 2011 9:57 PM
To: NT System Admin Issues
Subject: Re: Anti-virus boot-up disks?

They are lots more expensive than CD/DVDs, however.  Not that this is
automatically a non-starter, but it speaks to Mr. Cook's earlier point.

I'd sooner get a USB DVD drive, even though they are slightly less portable.

ASB
http://XeeMe.com/AndrewBaker
Harnessing the Advantages of Technology for the SMB market…

On Tue, Sep 13, 2011 at 9:12 AM, John Aldrich 
wrote:
There are USB sticks with a switch that is supposed to make them read-only
until you flip the switch again. I don't know how that works or how well,
but I know that there are flash drives with a write-protect switch on 'em.
You can find 'em on NewEgg and probably elsewhere. I just checked on NewEgg
to make sure I wasn't misremembering.



From: John Cook [mailto:john.c...@pfsf.org]
Sent: Tuesday, September 13, 2011 8:59 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?

Did not and here’s why – I have yet to hear about any guaranteed way to make
a USB drive unwriteable on any machine you plug it into short of having a
manufacturer burn the data to one and ship it to you in which case you’re
paying 25x more for the same effect a non rewritable CD/DVD gives you. If
anyone knows of a way to do it (and I’m not talking about a reg hack on a
machine or a program that disables the functionality on a computer) please
share.

 John W. Cook
System Administrator
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Tuesday, September 13, 2011 8:27 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?

Thanks, anyone tried this on a USB stick?

Z

Edward E. Ziots
CISSP, Network +, Security +
Security Engineer
Lifespan Organization
Email:ezi...@lifespan.org
Cell:401-639-3505
From: G.Waleed Kavalec [mailto:kava...@gmail.com]
Sent: Monday, September 12, 2011 3:18 PM
To: NT System Admin Issues
Subject: Re: Anti-virus boot-up disks?

Excellent!

Thank you.

On Mon, Sep 12, 2011 at 1:31 PM, John Cook  wrote:
The Microsoft system sweeper standalone seemed to work well when I tested
it.
http://connect.microsoft.com/systemsweeper
 
 John W. Cook
System Administrator
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4
 
From: G.Waleed Kavalec [mailto:kava...@gmail.com]
Sent: Monday, September 12, 2011 2:13 PM
To: NT System Admin Issues
Subject: Anti-virus boot-up disks?
 
Best boot-to virus clean-up options.
 
Friends like to bring me their contaminated laptops, and I mostly
clean-install over them.
 
I know AV exists that let you boot to a clean-up disk, who has favorites?
 
Thanks

 
--
G. Waleed Kavalec
-
Whether you are talking engineering, electricity, or human beings... the
place where the most power is concentrated is the place where the worst
things happen.
Ask any 10 pound plutonium sphere.
  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to lis

RE: Anti-virus boot-up disks?

[John Aldrich]

There are USB sticks with a switch that is supposed to make them read-only
until you flip the switch again. I don't know how that works or how well,
but I know that there are flash drives with a write-protect switch on 'em.
You can find 'em on NewEgg and probably elsewhere. I just checked on NewEgg
to make sure I wasn't misremembering.



From: John Cook [mailto:john.c...@pfsf.org] 
Sent: Tuesday, September 13, 2011 8:59 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?

Did not and here’s why – I have yet to hear about any guaranteed way to make
a USB drive unwriteable on any machine you plug it into short of having a
manufacturer burn the data to one and ship it to you in which case you’re
paying 25x more for the same effect a non rewritable CD/DVD gives you. If
anyone knows of a way to do it (and I’m not talking about a reg hack on a
machine or a program that disables the functionality on a computer) please
share. 

 John W. Cook
System Administrator
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: Tuesday, September 13, 2011 8:27 AM
To: NT System Admin Issues
Subject: RE: Anti-virus boot-up disks?

Thanks, anyone tried this on a USB stick? 

Z

Edward E. Ziots
CISSP, Network +, Security +
Security Engineer
Lifespan Organization
Email:ezi...@lifespan.org
Cell:401-639-3505


From: G.Waleed Kavalec [mailto:kava...@gmail.com] 
Sent: Monday, September 12, 2011 3:18 PM
To: NT System Admin Issues
Subject: Re: Anti-virus boot-up disks?

Excellent!

Thank you.

On Mon, Sep 12, 2011 at 1:31 PM, John Cook  wrote:
The Microsoft system sweeper standalone seemed to work well when I tested
it.
http://connect.microsoft.com/systemsweeper 
 
 John W. Cook
System Administrator
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4
 
From: G.Waleed Kavalec [mailto:kava...@gmail.com] 
Sent: Monday, September 12, 2011 2:13 PM
To: NT System Admin Issues
Subject: Anti-virus boot-up disks?
 
Best boot-to virus clean-up options.
 
Friends like to bring me their contaminated laptops, and I mostly
clean-install over them.
 
I know AV exists that let you boot to a clean-up disk, who has favorites?
 
Thanks

 
-- 
G. Waleed Kavalec
-
Whether you are talking engineering, electricity, or human beings... the
place where the most power is concentrated is the place where the worst
things happen.
Ask any 10 pound plutonium sphere.
 
 
 
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
attached to or with this Notice is intended only for the person or entity to
which it is addressed and may contain Protected Health Information (PHI),
confidential and/or privileged material. Any review, transmission,
dissemination, or other use of, and taking any action in reliance upon this
information by persons or entities other than the intended recipient without
the express written consent of the sender are prohibited. This information
may be protected by the Health Insurance Portability and Accountability Act
of 1996 (HIPAA), and other Federal and Florida laws. Improper or
unauthorized use or disclosure of this information could result in civil
and/or criminal penalties.
Consider the environment. Please don't print this e-mail unless you really
need to.
This email and any attached files are confidential and intended solely for
the intended recipient(s). If you are not the named recipient you should not
read, distribute, copy or alter this email. Any views or opinions expressed
in this email are those of the author and do not represent those of the
company. Warning: Although precautions have been taken to make sure no
viruses are present in this email, the company cannot accept responsibility
for any loss or damage that arise from the use of this email or attachments.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
G. Waleed Kavalec
-
Whether you are talking engineering, electricity, or human beings... the
place where the most power is concentrated is the place where the worst
things happen.
Ask any 10 pound plutoniu

RE: appremover

[John Aldrich]

Well, I tried it yesterday on a private customer's system that had a version
of Norton/Symantec on it and it seems to have gotten rid of it. :D



From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: Thursday, September 08, 2011 8:16 AM
To: NT System Admin Issues
Subject: Re: appremover

amazingly, based on an 18th month contract I finished last April, the McAfee
8.7 Enterprise VirusScan installer included an uninstaller that did, in
*most* cases, properly uninstall whatever major competing AV already
installed.  I did have to have them update their INI file to properly take
care of SEP 11 ( back in early 2010 ) but no real issues after that not
counting systems with munged permissions.
 
YMMV
On Wed, Sep 7, 2011 at 9:35 PM, Micheal Espinola Jr
 wrote:
I've never heard of it.  But, knowing how difficult it can potentially get
to remove an antivirus product, I have little faith in a product that claims
to do it all for multiple vendors.

I would rather get the remover from the vendor of what I want/need to
remove.  And I would only do that, if the normal uninstall routine failed to
work.

--
Espi




On Wed, Sep 7, 2011 at 11:28 AM, John Aldrich 
wrote:
Anyone ever used Appremover to get rid of an unwanted antivirus app? I know
from past experience that getting rid of some antivirus apps is like pulling
hen's teeth (Symantec/Norton in particular.) According to the review on
CNET's download.com this program detects and completely gets rid of these
antivirus/anti-malware apps so you can reinstall or install a new one.

Since I'm probably going to be installing Vipre on a private client's PC
this evening which currently has some sort of Symantec on it, I thought I'd
try to find the Symantec uninstaller again. Imagine my surprise when I found
mention of this product on Symantec's forums as a replacement for Symantec's
proprietary uninstaller tool.






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

appremover

[John Aldrich]

Anyone ever used Appremover to get rid of an unwanted antivirus app? I know
from past experience that getting rid of some antivirus apps is like pulling
hen's teeth (Symantec/Norton in particular.) According to the review on
CNET's download.com this program detects and completely gets rid of these
antivirus/anti-malware apps so you can reinstall or install a new one.

Since I'm probably going to be installing Vipre on a private client's PC
this evening which currently has some sort of Symantec on it, I thought I'd
try to find the Symantec uninstaller again. Imagine my surprise when I found
mention of this product on Symantec's forums as a replacement for Symantec's
proprietary uninstaller tool.






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Reconfiguring an existing email on a Blackberry

[John Aldrich]

Yeah. He's using AT&T's BIS, I'm guessing.  Actually he wants to read mail
on his Blackberry, but delete it using Outlook. He doesn't need to save
copies of sent messages on the server. He does NOT want to have to do any
maintenance. It's a hassle for him (senior admin, one of the corporate
owners) to log in every few weeks to delete his sent messages, deleted
items, etc.

I will advise him to just find an AT&T store and have them delete the email
account and set it back up from scratch as a POP3 account. Thanks. 

 

 

From: William Robbins [mailto:dangerw...@gmail.com] 
Sent: Wednesday, September 07, 2011 12:40 PM
To: NT System Admin Issues
Subject: Re: Reconfiguring an existing email on a Blackberry

 

Have to have BIS...not a server though.  BIS = Blackberry Internet Service.
If he's getting mail, he's got BIS.

So does he never access his mailbox with anything other than BB?   If so
then he should be able to go into his mail client and delete Sent Items from
there.

IIRC it's also an option on the device to delete messages on the server and
device.


But I expect he doesn't want to actually have to do any maintenance and
likes to keep sent items "Just in case."

I echo Gary's statement about contacting the carrier support for this.


 - WJR



On Wed, Sep 7, 2011 at 10:59, John Aldrich 
wrote:

One of my users has a Blackberry through AT&T which is configured to check
his email through IMAP. However, that leads to email building up in his
"sent" folder on the server (which we do not own or control and for which we
pay by the MB stored, so I limit the email folder size.) I have tried to
figure out how to reconfigure his email on the blackberry to use POP3
instead of IMAP, but I can't seem to get it to allow me to change it.

 

I'm not sure which Blackberry he has, other than it's one of the newer ones
with the touch-screen and the keyboard the slides out at the bottom of the
phone.

 

I *did* Google that specific question. I also tried to set up a new email
account on his phone, but the phone won't let me as that email address is
already configured on there. Should I just tell him to go to the AT&T store
and have them set it up from scratch or is there an easy way to do this? We
do NOT have a BES/BIS server and no plans to get one at this time. Also, as
previously mentioned, we do NOT run our own mail server.

 

John-AldrichThread-Count

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><>

RE: Anyone deal with cannon scanner, and failed scans to pc?

[John Aldrich]

Retrevo? Try this:

http://www.retrevo.com/support/Canon-5020-Copiers-manual/id/23385dj783/t/2/ 

 

John-AldrichThread-Count

 

From: justino garcia [mailto:jgarciaitl...@gmail.com] 
Sent: Wednesday, September 07, 2011 10:56 AM
To: NT System Admin Issues
Subject: Re: Anyone deal with cannon scanner, and failed scans to pc?

 

I am trying to look for user guide or manaual, but I don't see it.
I looked here
http://www.usa.canon.com/cusa/support/office/b_w_imagerunner_copiers/imageru
nner_5000_6000_5000i_5020_5020i_6020_6020i/imagerunner_5000i#Features

and in google, but no idea.

Any idea were Else I can look for this user guide or manaual?

Thanks

On Wed, Sep 7, 2011 at 10:38 AM, justino garcia 
wrote:

Does the PC need "Cannon Network Scan Gear" software, or can it be used to a
SMB share.
I am not onsite, I am troubleshooting remotely..

Canon Image Runner 5020

On Wed, Sep 7, 2011 at 10:29 AM, justino garcia 
wrote:

Local Scan to folder...

On Wed, Sep 7, 2011 at 10:24 AM, Steve Ens  wrote:

That is scan to email if I remember correctly or do they have the local scan
setup?

 

On Wed, Sep 7, 2011 at 9:11 AM, justino garcia 
wrote:

A)  Canon Image Runner 5020
B) Connected via Network.
I am going to look at logs soon.

 

On Wed, Sep 7, 2011 at 9:26 AM, Cameron  wrote:

Any error messages in the scanner logs?



 

On Wed, Sep 7, 2011 at 9:13 AM, Ben Scott  wrote:

On Wed, Sep 7, 2011 at 9:00 AM, justino garcia 
wrote:
> Since installed user been able to scan, just yesterday user is unable to
> scan documents to her pc.
> Pc can ping and access the webinterface of the scanner, but scan jobs are
> not working ??

 What model scanner?

 What version and Service Pack of Windows?

 What browser and version?

 Explain "unable to scan documents".  What steps are you doing, what
is the expected behavior, what is the actual behavior?  Any error
message?

 Does the problem happen for the same user account on other PCs?

 Does the problem happen for different user accounts on the same PC?

-- Ben


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin





-- 
Justin
IT-TECH

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><>

RE: Email Problem

[John Aldrich]

Both. I didn't have a TV growing up... :D I recognized it from a TV show,
but couldn't recall which one. I took a stab in the dark. Guess I missed the
mark. :D



-Original Message-
From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] 
Sent: Tuesday, September 06, 2011 2:32 PM
To: NT System Admin Issues
Subject: RE: Email Problem

wow...  That line is from GI Joe, not Captain Planet.

Are we really that old, or are you that young?

>>> John Aldrich  9/6/2011 8:46 AM >>>
Who do you think you are??? Captain Planet? :D




-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Tuesday, September 06, 2011 11:34 AM
To: NT System Admin Issues
Subject: Re: Email Problem

and knowing is half the battle.

John Aldrich wrote:
> Well, I think it may have been an HTML issue... :D I should know better
than
> to use HTML email anyway. :D
>
>
>
>
> -Original Message-
> From: Matthew B Ames [mailto:matthew.a...@qinetiq.com] 
> Sent: Tuesday, September 06, 2011 11:17 AM
> To: NT System Admin Issues
> Subject: RE: Email Problem
>
> I have seen that feature in Outlook 2003 before, when the emails where
HTML
> formatted.  Normally when that happened my calendar entries would appear
on
> the calendar but be blank.  Opening the email to read and it appeared
blank,
> but hit forward or reply and the contents would appear (or at least some
of
> the content appeared, long emails would still get truncated).
>
> In our environment it was when some patches has been rolled out via Radia.
> Either a reboot, or re-registering Word/Outlook fixed it, iirc.
>
> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
> Sent: 06 September 2011 16:11
> To: NT System Admin Issues
> Subject: RE: Email Problem
>
> I think I may have resolved the strangeness...I just sent a test reply and
> was able to see the body. Thanks!
>
>
>
>
> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
> Sent: Tuesday, September 06, 2011 11:08 AM
> To: NT System Admin Issues
> Subject: RE: Email Problem
>
> Nothin' but a little alcohol. :D I'm using a linux-based email client at
> home and Outlook 2007 at work. I'm pretty sure there were some recent
> updates to my email client at home and I suspect that might have affected
> the way Outlook is seeing the messages.
>
>
>
> From: Steve Ens [mailto:stevey...@gmail.com] 
> Sent: Tuesday, September 06, 2011 11:00 AM
> To: NT System Admin Issues
> Subject: Re: Email Problem
>
> Did you take any medication over the weekend?
> On Tue, Sep 6, 2011 at 9:54 AM, John Aldrich

> wrote:
> I replied from home this weekend, but when I got here, and looked at the
> messages I sent out, the bodies were blank. Does anyone else see that, or
am
> I hallucinating?
>
>
>
> From: William Robbins [mailto:dangerw...@gmail.com] 
> Sent: Sunday, September 04, 2011 12:26 PM
> To: NT System Admin Issues
> Subject: Re: Email Problem
> You do realize, of course, that this error doesn't necessarily indicate a
> problem with your outbound mail server...right?
>
> Now then...from what I can garner from your typically sparse data...If you
> one-off these messages it works OK, it's only when he bulk mails...so do
the
> end recipients ever get the message after waiting 72 hours, or have you
> never been able to wait that long?  Do they ever get duplicates after 72
> hours?
>
> How many recipients are we talking about anyway?  100, 1000, ONE MILLION
> USERS?  Inquiring minds want to know.
>
> As to your salient question, where to start looking: 
>
> How internet email works:  http://email.about.com/cs/standards/a/smtp.htm 
>
> Understanding SMTP Error Messages: 
> http://email.about.com/cs/standards/a/smtp_error_code.htm 
>  - WJR
>
> 2011/9/3 John Aldrich 
> On Fri September 2 2011, you wrote:
>   
>> Research the specific SMTP status code and message you are receiving
>> back. "Delayed" can mean different things.  You/he received a specific
>> error message.  Be specific with us, or look it up.
>>
>> 
> All I have is the following:
> 
> Warning: message 1QyPNV-xd-UY delayed 72 hours
>
> This message was created automatically by mail delivery software.
> A message that you sent has not yet been delivered to one or more of its
> recipients after more than 72 hours on the queue on 
>
> The message identifier is: 1QyPNV-xd-UY
> The subject of the message is: National Account-Paychex
> The date of the message is:Tue, 30 Aug 2011 10:33:24 -0400
>
> The addresses to which the message has not yet been delivered are:
> [snip list of email add

RE: Email Problem

[John Aldrich]

Who do you think you are??? Captain Planet? :D




-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Tuesday, September 06, 2011 11:34 AM
To: NT System Admin Issues
Subject: Re: Email Problem

and knowing is half the battle.

John Aldrich wrote:
> Well, I think it may have been an HTML issue... :D I should know better
than
> to use HTML email anyway. :D
>
>
>
>
> -Original Message-
> From: Matthew B Ames [mailto:matthew.a...@qinetiq.com] 
> Sent: Tuesday, September 06, 2011 11:17 AM
> To: NT System Admin Issues
> Subject: RE: Email Problem
>
> I have seen that feature in Outlook 2003 before, when the emails where
HTML
> formatted.  Normally when that happened my calendar entries would appear
on
> the calendar but be blank.  Opening the email to read and it appeared
blank,
> but hit forward or reply and the contents would appear (or at least some
of
> the content appeared, long emails would still get truncated).
>
> In our environment it was when some patches has been rolled out via Radia.
> Either a reboot, or re-registering Word/Outlook fixed it, iirc.
>
> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
> Sent: 06 September 2011 16:11
> To: NT System Admin Issues
> Subject: RE: Email Problem
>
> I think I may have resolved the strangeness...I just sent a test reply and
> was able to see the body. Thanks!
>
>
>
>
> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
> Sent: Tuesday, September 06, 2011 11:08 AM
> To: NT System Admin Issues
> Subject: RE: Email Problem
>
> Nothin' but a little alcohol. :D I'm using a linux-based email client at
> home and Outlook 2007 at work. I'm pretty sure there were some recent
> updates to my email client at home and I suspect that might have affected
> the way Outlook is seeing the messages.
>
>
>
> From: Steve Ens [mailto:stevey...@gmail.com] 
> Sent: Tuesday, September 06, 2011 11:00 AM
> To: NT System Admin Issues
> Subject: Re: Email Problem
>
> Did you take any medication over the weekend?
> On Tue, Sep 6, 2011 at 9:54 AM, John Aldrich

> wrote:
> I replied from home this weekend, but when I got here, and looked at the
> messages I sent out, the bodies were blank. Does anyone else see that, or
am
> I hallucinating?
>
>
>
> From: William Robbins [mailto:dangerw...@gmail.com]
> Sent: Sunday, September 04, 2011 12:26 PM
> To: NT System Admin Issues
> Subject: Re: Email Problem
> You do realize, of course, that this error doesn't necessarily indicate a
> problem with your outbound mail server...right?
>
> Now then...from what I can garner from your typically sparse data...If you
> one-off these messages it works OK, it's only when he bulk mails...so do
the
> end recipients ever get the message after waiting 72 hours, or have you
> never been able to wait that long?  Do they ever get duplicates after 72
> hours?
>
> How many recipients are we talking about anyway?  100, 1000, ONE MILLION
> USERS?  Inquiring minds want to know.
>
> As to your salient question, where to start looking: 
>
> How internet email works:  http://email.about.com/cs/standards/a/smtp.htm
>
> Understanding SMTP Error Messages: 
> http://email.about.com/cs/standards/a/smtp_error_code.htm
>  - WJR
>
> 2011/9/3 John Aldrich 
> On Fri September 2 2011, you wrote:
>   
>> Research the specific SMTP status code and message you are receiving
>> back. "Delayed" can mean different things.  You/he received a specific
>> error message.  Be specific with us, or look it up.
>>
>> 
> All I have is the following:
> 
> Warning: message 1QyPNV-xd-UY delayed 72 hours
>
> This message was created automatically by mail delivery software.
> A message that you sent has not yet been delivered to one or more of its
> recipients after more than 72 hours on the queue on 
>
> The message identifier is: 1QyPNV-xd-UY
> The subject of the message is: National Account-Paychex
> The date of the message is:Tue, 30 Aug 2011 10:33:24 -0400
>
> The addresses to which the message has not yet been delivered are:
> [snip list of email addresses]
> No action is required on your part. Delivery attempts will continue for
> some time, and this warning may be repeated at intervals if the message
> remains undelivered. Eventually the mail delivery software will give up,
> and when that happens, the message will be returned to you.
> 
>
> Note that I created an Outlook Distribution list that contains all the
> email addresses in that list of recipients who had not yet received the
> message and sent them a message. 

RE: Email Problem

[John Aldrich]

Well, I think it may have been an HTML issue... :D I should know better than
to use HTML email anyway. :D




-Original Message-
From: Matthew B Ames [mailto:matthew.a...@qinetiq.com] 
Sent: Tuesday, September 06, 2011 11:17 AM
To: NT System Admin Issues
Subject: RE: Email Problem

I have seen that feature in Outlook 2003 before, when the emails where HTML
formatted.  Normally when that happened my calendar entries would appear on
the calendar but be blank.  Opening the email to read and it appeared blank,
but hit forward or reply and the contents would appear (or at least some of
the content appeared, long emails would still get truncated).

In our environment it was when some patches has been rolled out via Radia.
Either a reboot, or re-registering Word/Outlook fixed it, iirc.

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: 06 September 2011 16:11
To: NT System Admin Issues
Subject: RE: Email Problem

I think I may have resolved the strangeness...I just sent a test reply and
was able to see the body. Thanks!




-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Tuesday, September 06, 2011 11:08 AM
To: NT System Admin Issues
Subject: RE: Email Problem

Nothin' but a little alcohol. :D I'm using a linux-based email client at
home and Outlook 2007 at work. I'm pretty sure there were some recent
updates to my email client at home and I suspect that might have affected
the way Outlook is seeing the messages.



From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Tuesday, September 06, 2011 11:00 AM
To: NT System Admin Issues
Subject: Re: Email Problem

Did you take any medication over the weekend?
On Tue, Sep 6, 2011 at 9:54 AM, John Aldrich 
wrote:
I replied from home this weekend, but when I got here, and looked at the
messages I sent out, the bodies were blank. Does anyone else see that, or am
I hallucinating?



From: William Robbins [mailto:dangerw...@gmail.com]
Sent: Sunday, September 04, 2011 12:26 PM
To: NT System Admin Issues
Subject: Re: Email Problem
You do realize, of course, that this error doesn't necessarily indicate a
problem with your outbound mail server...right?

Now then...from what I can garner from your typically sparse data...If you
one-off these messages it works OK, it's only when he bulk mails...so do the
end recipients ever get the message after waiting 72 hours, or have you
never been able to wait that long?  Do they ever get duplicates after 72
hours?

How many recipients are we talking about anyway?  100, 1000, ONE MILLION
USERS?  Inquiring minds want to know.

As to your salient question, where to start looking: 

How internet email works:  http://email.about.com/cs/standards/a/smtp.htm

Understanding SMTP Error Messages: 
http://email.about.com/cs/standards/a/smtp_error_code.htm
 - WJR

2011/9/3 John Aldrich 
On Fri September 2 2011, you wrote:
> Research the specific SMTP status code and message you are receiving
> back. "Delayed" can mean different things.  You/he received a specific
> error message.  Be specific with us, or look it up.
>
All I have is the following:

Warning: message 1QyPNV-xd-UY delayed 72 hours

This message was created automatically by mail delivery software.
A message that you sent has not yet been delivered to one or more of its
recipients after more than 72 hours on the queue on 

The message identifier is:     1QyPNV-xd-UY
The subject of the message is: National Account-Paychex
The date of the message is:    Tue, 30 Aug 2011 10:33:24 -0400

The addresses to which the message has not yet been delivered are:
[snip list of email addresses]
No action is required on your part. Delivery attempts will continue for
some time, and this warning may be repeated at intervals if the message
remains undelivered. Eventually the mail delivery software will give up,
and when that happens, the message will be returned to you.


Note that I created an Outlook Distribution list that contains all the
email addresses in that list of recipients who had not yet received the
message and sent them a message. Within 24 hours, all of them had confirmed
that they had received the message from me.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint se

RE: Email Problem

[John Aldrich]

I think I may have resolved the strangeness...I just sent a test reply and
was able to see the body. Thanks!




-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Tuesday, September 06, 2011 11:08 AM
To: NT System Admin Issues
Subject: RE: Email Problem

Nothin' but a little alcohol. :D I'm using a linux-based email client at
home and Outlook 2007 at work. I'm pretty sure there were some recent
updates to my email client at home and I suspect that might have affected
the way Outlook is seeing the messages.



From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Tuesday, September 06, 2011 11:00 AM
To: NT System Admin Issues
Subject: Re: Email Problem

Did you take any medication over the weekend?
On Tue, Sep 6, 2011 at 9:54 AM, John Aldrich 
wrote:
I replied from home this weekend, but when I got here, and looked at the
messages I sent out, the bodies were blank. Does anyone else see that, or am
I hallucinating?



From: William Robbins [mailto:dangerw...@gmail.com]
Sent: Sunday, September 04, 2011 12:26 PM
To: NT System Admin Issues
Subject: Re: Email Problem
You do realize, of course, that this error doesn't necessarily indicate a
problem with your outbound mail server...right?

Now then...from what I can garner from your typically sparse data...If you
one-off these messages it works OK, it's only when he bulk mails...so do the
end recipients ever get the message after waiting 72 hours, or have you
never been able to wait that long?  Do they ever get duplicates after 72
hours?

How many recipients are we talking about anyway?  100, 1000, ONE MILLION
USERS?  Inquiring minds want to know.

As to your salient question, where to start looking: 

How internet email works:  http://email.about.com/cs/standards/a/smtp.htm

Understanding SMTP Error Messages: 
http://email.about.com/cs/standards/a/smtp_error_code.htm
 - WJR

2011/9/3 John Aldrich 
On Fri September 2 2011, you wrote:
> Research the specific SMTP status code and message you are receiving
> back. "Delayed" can mean different things.  You/he received a specific
> error message.  Be specific with us, or look it up.
>
All I have is the following:

Warning: message 1QyPNV-xd-UY delayed 72 hours

This message was created automatically by mail delivery software.
A message that you sent has not yet been delivered to one or more of its
recipients after more than 72 hours on the queue on 

The message identifier is:     1QyPNV-xd-UY
The subject of the message is: National Account-Paychex
The date of the message is:    Tue, 30 Aug 2011 10:33:24 -0400

The addresses to which the message has not yet been delivered are:
[snip list of email addresses]
No action is required on your part. Delivery attempts will continue for
some time, and this warning may be repeated at intervals if the message
remains undelivered. Eventually the mail delivery software will give up,
and when that happens, the message will be returned to you.


Note that I created an Outlook Distribution list that contains all the
email addresses in that list of recipients who had not yet received the
message and sent them a message. Within 24 hours, all of them had confirmed
that they had received the message from me.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Email Problem

[John Aldrich]

On Tue September 6 2011, you wrote:
> I read 'em. Stay off the mushrooms.
> 
> On 6 September 2011 15:54, John Aldrich 
wrote:
> > I replied from home this weekend, but when I got here, and looked at
> > the messages I sent out, the bodies were blank. Does anyone else see
> > that, or am
> > I hallucinating?
> > 
> > 
> > 
> > From: William Robbins [mailto:dangerw...@gmail.com]
> > Sent: Sunday, September 04, 2011 12:26 PM
> > To: NT System Admin Issues
> > Subject: Re: Email Problem
> > 
> > You do realize, of course, that this error doesn't necessarily
> > indicate a problem with your outbound mail server...right?
> > 
> > Now then...from what I can garner from your typically sparse data...If
> > you one-off these messages it works OK, it's only when he bulk
> > mails...so do the
> > end recipients ever get the message after waiting 72 hours, or have
> > you never been able to wait that long?  Do they ever get duplicates
> > after 72 hours?
> > 
> > How many recipients are we talking about anyway?  100, 1000, ONE
> > MILLION USERS?  Inquiring minds want to know.
> > 
> > As to your salient question, where to start looking:
> > 
> > How internet email works: 
> > http://email.about.com/cs/standards/a/smtp.htm
> > 
> > Understanding SMTP Error Messages:
> > http://email.about.com/cs/standards/a/smtp_error_code.htm
> > 
> >  - WJR
> > 
> > 2011/9/3 John Aldrich 
> > 
> > On Fri September 2 2011, you wrote:
> > > Research the specific SMTP status code and message you are receiving
> > > back. "Delayed" can mean different things.  You/he received a
> > > specific error message.  Be specific with us, or look it up.
> > 
> > All I have is the following:
> > 
> > Warning: message 1QyPNV-xd-UY delayed 72 hours
> > 
> > This message was created automatically by mail delivery software.
> > A message that you sent has not yet been delivered to one or more of
> > its recipients after more than 72 hours on the queue on 
> > 
> > The message identifier is: 1QyPNV-xd-UY
> > The subject of the message is: National Account-Paychex
> > The date of the message is:Tue, 30 Aug 2011 10:33:24 -0400
> > 
> > The addresses to which the message has not yet been delivered are:
> > [snip list of email addresses]
> > No action is required on your part. Delivery attempts will continue
> > for some time, and this warning may be repeated at intervals if the
> > message remains undelivered. Eventually the mail delivery software
> > will give up, and when that happens, the message will be returned to
> > you.
> > 
> > 
> > Note that I created an Outlook Distribution list that contains all the
> > email addresses in that list of recipients who had not yet received
> > the message and sent them a message. Within 24 hours, all of them had
> > confirmed that they had received the message from me.
> > --
> > Thanks,
> > John Aldrich
> > Blueridge Industries
> > IT Manager
> > 
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> > 
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
> > 
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> > 
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
> > 
> > 
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> > 
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin

Testing some tweaks. Sorry for any inconvenience. Thanks!

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Email Problem

[John Aldrich]

Nothin' but a little alcohol. :D I'm using a linux-based email client at
home and Outlook 2007 at work. I'm pretty sure there were some recent
updates to my email client at home and I suspect that might have affected
the way Outlook is seeing the messages.



From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Tuesday, September 06, 2011 11:00 AM
To: NT System Admin Issues
Subject: Re: Email Problem

Did you take any medication over the weekend?
On Tue, Sep 6, 2011 at 9:54 AM, John Aldrich 
wrote:
I replied from home this weekend, but when I got here, and looked at the
messages I sent out, the bodies were blank. Does anyone else see that, or am
I hallucinating?



From: William Robbins [mailto:dangerw...@gmail.com]
Sent: Sunday, September 04, 2011 12:26 PM
To: NT System Admin Issues
Subject: Re: Email Problem
You do realize, of course, that this error doesn't necessarily indicate a
problem with your outbound mail server...right?

Now then...from what I can garner from your typically sparse data...If you
one-off these messages it works OK, it's only when he bulk mails...so do the
end recipients ever get the message after waiting 72 hours, or have you
never been able to wait that long?  Do they ever get duplicates after 72
hours?

How many recipients are we talking about anyway?  100, 1000, ONE MILLION
USERS?  Inquiring minds want to know.

As to your salient question, where to start looking: 

How internet email works:  http://email.about.com/cs/standards/a/smtp.htm

Understanding SMTP Error Messages: 
http://email.about.com/cs/standards/a/smtp_error_code.htm
 - WJR

2011/9/3 John Aldrich 
On Fri September 2 2011, you wrote:
> Research the specific SMTP status code and message you are receiving
> back. "Delayed" can mean different things.  You/he received a specific
> error message.  Be specific with us, or look it up.
>
All I have is the following:

Warning: message 1QyPNV-xd-UY delayed 72 hours

This message was created automatically by mail delivery software.
A message that you sent has not yet been delivered to one or more of its
recipients after more than 72 hours on the queue on 

The message identifier is:     1QyPNV-xd-UY
The subject of the message is: National Account-Paychex
The date of the message is:    Tue, 30 Aug 2011 10:33:24 -0400

The addresses to which the message has not yet been delivered are:
[snip list of email addresses]
No action is required on your part. Delivery attempts will continue for
some time, and this warning may be repeated at intervals if the message
remains undelivered. Eventually the mail delivery software will give up,
and when that happens, the message will be returned to you.


Note that I created an Outlook Distribution list that contains all the
email addresses in that list of recipients who had not yet received the
message and sent them a message. Within 24 hours, all of them had confirmed
that they had received the message from me.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Email Problem

[John Aldrich]

Yep. That's exactly the case. OL2k7 at work and KMail at home. I think there
were some recent updates to KMail, and those updates might have an impact on
the compatibility between Outlook 2007 and Kmail. *sigh* Gotta love when
open-source stuff breaks the closed-source stuff. :D



-Original Message-
From: Matthew B Ames [mailto:matthew.a...@qinetiq.com] 
Sent: Tuesday, September 06, 2011 11:02 AM
To: NT System Admin Issues
Subject: RE: Email Problem

I can see the body of the messages you sent from home.  I assume you use
Outlook 2007 at work, and KMail at home.

I am reading your messages at work using Outlook 2010.

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: 06 September 2011 15:54
To: NT System Admin Issues
Subject: RE: Email Problem

I replied from home this weekend, but when I got here, and looked at the
messages I sent out, the bodies were blank. Does anyone else see that, or am
I hallucinating?



From: William Robbins [mailto:dangerw...@gmail.com] 
Sent: Sunday, September 04, 2011 12:26 PM
To: NT System Admin Issues
Subject: Re: Email Problem

You do realize, of course, that this error doesn't necessarily indicate a
problem with your outbound mail server...right?

Now then...from what I can garner from your typically sparse data...If you
one-off these messages it works OK, it's only when he bulk mails...so do the
end recipients ever get the message after waiting 72 hours, or have you
never been able to wait that long?  Do they ever get duplicates after 72
hours?

How many recipients are we talking about anyway?  100, 1000, ONE MILLION
USERS?  Inquiring minds want to know.

As to your salient question, where to start looking:  

How internet email works:  http://email.about.com/cs/standards/a/smtp.htm

Understanding SMTP Error Messages: 
http://email.about.com/cs/standards/a/smtp_error_code.htm

 - WJR

2011/9/3 John Aldrich 
On Fri September 2 2011, you wrote:
> Research the specific SMTP status code and message you are receiving
> back. "Delayed" can mean different things.  You/he received a specific
> error message.  Be specific with us, or look it up.
>
All I have is the following:

Warning: message 1QyPNV-xd-UY delayed 72 hours

This message was created automatically by mail delivery software.
A message that you sent has not yet been delivered to one or more of its
recipients after more than 72 hours on the queue on 

The message identifier is:     1QyPNV-xd-UY
The subject of the message is: National Account-Paychex
The date of the message is:    Tue, 30 Aug 2011 10:33:24 -0400

The addresses to which the message has not yet been delivered are:
[snip list of email addresses]
No action is required on your part. Delivery attempts will continue for
some time, and this warning may be repeated at intervals if the message
remains undelivered. Eventually the mail delivery software will give up,
and when that happens, the message will be returned to you.


Note that I created an Outlook Distribution list that contains all the
email addresses in that list of recipients who had not yet received the
message and sent them a message. Within 24 hours, all of them had confirmed
that they had received the message from me.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

This email and any attachments to it may be confidential and are
intended solely for the use of the individual to whom it is addressed.
If you are not the intended recipient of this email, you must neither
take any action based upon its contents, nor copy or show it to anyone.
Please contact the sender if you believe you have received this email in
error. QinetiQ may monitor email traffic data and also the content of
email for the purposes of security. QinetiQ Limited (Registered in
England & Wales: Company Number: 3796233) Registered office: Cody Technology

Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com.

RE: Email Problem

[John Aldrich]

Hmm... interesting. Ok. Thanks!



From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Tuesday, September 06, 2011 10:59 AM
To: NT System Admin Issues
Subject: Re: Email Problem

I read 'em. Stay off the mushrooms.
On 6 September 2011 15:54, John Aldrich 
wrote:
I replied from home this weekend, but when I got here, and looked at the
messages I sent out, the bodies were blank. Does anyone else see that, or am
I hallucinating?



From: William Robbins [mailto:dangerw...@gmail.com]
Sent: Sunday, September 04, 2011 12:26 PM
To: NT System Admin Issues
Subject: Re: Email Problem
You do realize, of course, that this error doesn't necessarily indicate a
problem with your outbound mail server...right?

Now then...from what I can garner from your typically sparse data...If you
one-off these messages it works OK, it's only when he bulk mails...so do the
end recipients ever get the message after waiting 72 hours, or have you
never been able to wait that long?  Do they ever get duplicates after 72
hours?

How many recipients are we talking about anyway?  100, 1000, ONE MILLION
USERS?  Inquiring minds want to know.

As to your salient question, where to start looking: 

How internet email works:  http://email.about.com/cs/standards/a/smtp.htm

Understanding SMTP Error Messages: 
http://email.about.com/cs/standards/a/smtp_error_code.htm
 - WJR

2011/9/3 John Aldrich 
On Fri September 2 2011, you wrote:
> Research the specific SMTP status code and message you are receiving
> back. "Delayed" can mean different things.  You/he received a specific
> error message.  Be specific with us, or look it up.
>
All I have is the following:

Warning: message 1QyPNV-xd-UY delayed 72 hours

This message was created automatically by mail delivery software.
A message that you sent has not yet been delivered to one or more of its
recipients after more than 72 hours on the queue on 

The message identifier is:     1QyPNV-xd-UY
The subject of the message is: National Account-Paychex
The date of the message is:    Tue, 30 Aug 2011 10:33:24 -0400

The addresses to which the message has not yet been delivered are:
[snip list of email addresses]
No action is required on your part. Delivery attempts will continue for
some time, and this warning may be repeated at intervals if the message
remains undelivered. Eventually the mail delivery software will give up,
and when that happens, the message will be returned to you.


Note that I created an Outlook Distribution list that contains all the
email addresses in that list of recipients who had not yet received the
message and sent them a message. Within 24 hours, all of them had confirmed
that they had received the message from me.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



-- 
"On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question."

* IMPORTANT INFORMATION/DISCLAIMER *

This document should be read only by those persons to whom it is addressed.
If you have received this message it was obviously addressed to you and
therefore you can read it, even it we didn't mean to send it to you.
However, if the contents of this email make no sense whatsoever then you
probably were not the intended recipient, or, alternatively, you are a
mindless cretin; either way, you should immediately kill yourself and
destroy your computer (not necessarily in that order). Once you have taken
this action, please contact us.. no, sorry, you can't use your computer,
because you just destroyed it, and possibly also committed suicide
afterwards, but I am starting to digress.. 
The originator of this email is not liable for the transmission of the
information contained in this communication. Or are they? Either way it's a
pretty dull legal query and frankly one I&#

RE: Email Problem

[John Aldrich]

I replied from home this weekend, but when I got here, and looked at the
messages I sent out, the bodies were blank. Does anyone else see that, or am
I hallucinating?



From: William Robbins [mailto:dangerw...@gmail.com] 
Sent: Sunday, September 04, 2011 12:26 PM
To: NT System Admin Issues
Subject: Re: Email Problem

You do realize, of course, that this error doesn't necessarily indicate a
problem with your outbound mail server...right?

Now then...from what I can garner from your typically sparse data...If you
one-off these messages it works OK, it's only when he bulk mails...so do the
end recipients ever get the message after waiting 72 hours, or have you
never been able to wait that long?  Do they ever get duplicates after 72
hours?

How many recipients are we talking about anyway?  100, 1000, ONE MILLION
USERS?  Inquiring minds want to know.

As to your salient question, where to start looking:  

How internet email works:  http://email.about.com/cs/standards/a/smtp.htm

Understanding SMTP Error Messages: 
http://email.about.com/cs/standards/a/smtp_error_code.htm

 - WJR

2011/9/3 John Aldrich 
On Fri September 2 2011, you wrote:
> Research the specific SMTP status code and message you are receiving
> back. "Delayed" can mean different things.  You/he received a specific
> error message.  Be specific with us, or look it up.
>
All I have is the following:

Warning: message 1QyPNV-xd-UY delayed 72 hours

This message was created automatically by mail delivery software.
A message that you sent has not yet been delivered to one or more of its
recipients after more than 72 hours on the queue on 

The message identifier is:     1QyPNV-xd-UY
The subject of the message is: National Account-Paychex
The date of the message is:    Tue, 30 Aug 2011 10:33:24 -0400

The addresses to which the message has not yet been delivered are:
[snip list of email addresses]
No action is required on your part. Delivery attempts will continue for
some time, and this warning may be repeated at intervals if the message
remains undelivered. Eventually the mail delivery software will give up,
and when that happens, the message will be returned to you.


Note that I created an Outlook Distribution list that contains all the
email addresses in that list of recipients who had not yet received the
message and sent them a message. Within 24 hours, all of them had confirmed
that they had received the message from me.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Email Problem

[John Aldrich]

On Sun September 4 2011, you wrote:
> You do realize, of course, that this error doesn't necessarily indicate
> a problem with your outbound mail server...right?
> 
> Now then...from what I can garner from your typically sparse data...If
> you one-off these messages it works OK, it's only when he bulk
> mails...so do the end recipients ever get the message after waiting 72
> hours, or have you never been able to wait that long?  Do they ever get
> duplicates after 72 hours?
> 
> How many recipients are we talking about anyway?  100, 1000, ONE MILLION
> USERS?  Inquiring minds want to know.
> 
> As to your salient question, where to start looking:
> How internet email works: 
> http://email.about.com/cs/standards/a/smtp.htm
> 
> Understanding SMTP Error Messages:
> http://email.about.com/cs/standards/a/smtp_error_code.htm
> 
Thanks. I do understand how internet email works. I used to work for an ISP 
and got all that explained to me. 

As for the number of email addresses...umm... maybe 10-12 emails. As far as 
I know they never receive the emails, but that's a very good question. I'll 
have to investigate.

I created a distribution list with those particular email addresses on it 
and sent a test message to that distribution list. Virtually everyone 
received the email within 24 hours. There are a few "stragglers" (I got one 
reply yesterday several days after I sent the original email. I'm tempted 
to think that was just a case of the user not checking their email 
regularly.) So, it's not a case of a message to one of those users getting 
through, it's a case of my test message to that distribution list that I 
created getting through. 
Unfortunately the sales manager in question was not in the office this past 
week. When he gets back in I'll see if he's got a distribution list and see 
if maybe there's something wrong with the distribution list he's got 
(assuming he's got one.)
As for the terseness of my original message, I don't want to burden the 
list with useless information and I didn't see how listing the email 
addresses was going to help, although looking back, I suppose I could have 
"munged" the email addresses or at least given an indication of how many 
there were. 

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Email Problem

[John Aldrich]

On Fri September 2 2011, you wrote:
> Research the specific SMTP status code and message you are receiving
> back. "Delayed" can mean different things.  You/he received a specific
> error message.  Be specific with us, or look it up.
> 
All I have is the following:

Warning: message 1QyPNV-xd-UY delayed 72 hours

This message was created automatically by mail delivery software.
A message that you sent has not yet been delivered to one or more of its
recipients after more than 72 hours on the queue on 

The message identifier is: 1QyPNV-xd-UY
The subject of the message is: National Account-Paychex
The date of the message is:Tue, 30 Aug 2011 10:33:24 -0400

The addresses to which the message has not yet been delivered are:
[snip list of email addresses]
No action is required on your part. Delivery attempts will continue for
some time, and this warning may be repeated at intervals if the message
remains undelivered. Eventually the mail delivery software will give up,
and when that happens, the message will be returned to you.


Note that I created an Outlook Distribution list that contains all the 
email addresses in that list of recipients who had not yet received the 
message and sent them a message. Within 24 hours, all of them had confirmed 
that they had received the message from me.
-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Placement and spacing of server racks

[John Aldrich]

I can't say much about my current situation as we only have one rack.
However, at a previous position, we had a *bunch* of racks literally
side-by-side jammed so close together you couldn't fit a sheet of paper
between them. Of course, those racks had open bottoms with forced-air
cooling coming up from the raised floor (about 6" or so off "ground" level,
presumably for cabling and ventilation.) Granted these were running older
servers (old Compaq Proliants - quad PII Xeons, IIRC in some of them) so the
cooling might not have been as critical as it is with newer CPUs. That being
said, it was almost always cold enough to hang meat in there (OK, not
really.. more like about 60-65 degrees F.)

 

YMMV. I look forward to what others say

 

John-AldrichThread-Count

 

From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] 
Sent: Friday, September 02, 2011 4:21 PM
To: NT System Admin Issues
Cc: Augusta_Kimble/as...@aspca.org
Subject: Placement and spacing of server racks

 

Greetings! 

Our server room is finally getting some badly needed upgrades (including the
removal of a partial wall, more power, and a real server room cooling unit).


We currently have three server racks.  Once this renovation project is
complete, we will be adding two fairly full server racks.  We are hoping to
have these upgrades keep the room adequate for another 5 years.  So,
depending on the recommendations of rack spacing, it may be necessary to
take out another wall and expand into what is currently an office. 

So, the questions are: 

1. How closely together do you space your server racks?  That is, how much
space between each rack? 

2. How far out from the walls to you have them (both for air flow and for
rear access)? 

I believe the current dimensions of the room would allow 7 racks (and we are
already claiming space for 5) along one wall and with room for another 1-2
on another wall.  Your recommendations may force us to re-consider. 

Thank you... 
-- 
richard 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><>

RE: Email Problem

[John Aldrich]

I'll check with our ISP and see if they can shed light on things. Not real
hopeful, but thanks.

 

John-AldrichThread-Count

 

From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Friday, September 02, 2011 3:53 PM
To: NT System Admin Issues
Subject: Re: Email Problem

 

So what you're saying is the server is out-house?  that might explain the
issues you are experiencing.  Sometime the logs are not flushed and you can
lose data.

On Fri, Sep 2, 2011 at 2:18 PM, John Aldrich 
wrote:

WHAT Linux client? He's got Windows XP on his laptop and Outlook 2007. The
server is not in-house (I wish!) Rather our ISP is hosting our email and so
we use their server.

 

John-AldrichThread-Count

 

From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Friday, September 02, 2011 1:44 PM


To: NT System Admin Issues

Subject: Re: Email Problem

 

Why isn't he using the Linux client rather than the Outlook server to send
the message?  This might be the issue right there.

On Fri, Sep 2, 2011 at 12:20 PM, John Aldrich 
wrote:

I have one user, a sales manager, who occasionally has problems sending
email to a large number of people. The email goes out fine, but then 48
hours or so later he gets a message that the email he sent out to all those
people was "delayed." Not every time, just some of the time. 

 

Outlook 2007 (I think.could be 2003) and POP3 email for everyone. Not
everyone on the sales manager's list is local, in fact almost all are spread
out around the country, and when I email the same group of people from my
desktop it works without a single glitch. That being said, most of the time
his emails go through without a hitch either.

 

Any suggestions where to start looking? This has happened in the past and
all I have been able to do is just shrug my shoulders and tell him I was
unable to reproduce the problem and if I can't reproduce it, it's darn
difficult to troubleshoot.

 

John-AldrichThread-Count

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~


~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><><><><><>

RE: Email Problem

[John Aldrich]

WHAT Linux client? He's got Windows XP on his laptop and Outlook 2007. The
server is not in-house (I wish!) Rather our ISP is hosting our email and so
we use their server.

 

John-AldrichThread-Count

 

From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Friday, September 02, 2011 1:44 PM
To: NT System Admin Issues
Subject: Re: Email Problem

 

Why isn't he using the Linux client rather than the Outlook server to send
the message?  This might be the issue right there.

On Fri, Sep 2, 2011 at 12:20 PM, John Aldrich 
wrote:

I have one user, a sales manager, who occasionally has problems sending
email to a large number of people. The email goes out fine, but then 48
hours or so later he gets a message that the email he sent out to all those
people was "delayed." Not every time, just some of the time. 

 

Outlook 2007 (I think.could be 2003) and POP3 email for everyone. Not
everyone on the sales manager's list is local, in fact almost all are spread
out around the country, and when I email the same group of people from my
desktop it works without a single glitch. That being said, most of the time
his emails go through without a hitch either.

 

Any suggestions where to start looking? This has happened in the past and
all I have been able to do is just shrug my shoulders and tell him I was
unable to reproduce the problem and if I can't reproduce it, it's darn
difficult to troubleshoot.

 

John-AldrichThread-Count

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><><><>

RE: Email Problem

[John Aldrich]

Yes. Going through "our" system (actually our ISP's servers, to which I have
limited access.)

 

John-AldrichThread-Count

 

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Friday, September 02, 2011 1:42 PM
To: NT System Admin Issues
Subject: RE: Email Problem

 

I'm not clear from your email whether he's sending the mail through your
mail system? 

 

If so, start with the logs.  If not, run.

  _____  

From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 02 September 2011 6:20 PM
To: NT System Admin Issues
Subject: Email Problem

I have one user, a sales manager, who occasionally has problems sending
email to a large number of people. The email goes out fine, but then 48
hours or so later he gets a message that the email he sent out to all those
people was "delayed." Not every time, just some of the time. 

 

Outlook 2007 (I think.could be 2003) and POP3 email for everyone. Not
everyone on the sales manager's list is local, in fact almost all are spread
out around the country, and when I email the same group of people from my
desktop it works without a single glitch. That being said, most of the time
his emails go through without a hitch either.

 

Any suggestions where to start looking? This has happened in the past and
all I have been able to do is just shrug my shoulders and tell him I was
unable to reproduce the problem and if I can't reproduce it, it's darn
difficult to troubleshoot.

 

John-AldrichThread-Count

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

  _  

MIRA Ltd

 

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England

Registered in England and Wales No. 402570

VAT Registration  GB 100 1464 84

 

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><><><>

RE: The U in UPS stands for...?

[John Aldrich]

ROFL! :D

 

John-AldrichThread-Count

 

From: William Robbins [mailto:dangerw...@gmail.com] 
Sent: Thursday, September 01, 2011 2:01 PM
To: NT System Admin Issues
Subject: Re: The U in UPS stands for...?

 

I know where he lives actually...lots of places for bodies.

 - WJR



On Thu, Sep 1, 2011 at 12:54, John Aldrich 
wrote:

Hmm. What's your address again, Webster? ;D

 

John-AldrichThread-Count

 

From: Webster [mailto:webs...@carlwebster.com] 
Sent: Thursday, September 01, 2011 1:46 PM


To: NT System Admin Issues
Subject: RE: The U in UPS stands for...?

 

I have five 1500VA units and one 1000VA unit in my home office.

 

Carl Webster

Consultant and Citrix Technology Professional

http://www.CarlWebster.com <http://www.carlwebster.com/> 

 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Thursday, September 01, 2011 12:29 PM
To: NT System Admin Issues
Subject: RE: The U in UPS stands for...?

 

That's just WRONG! J

 

John-AldrichThread-Count

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 01, 2011 1:19 PM
To: NT System Admin Issues
Subject: Re: The U in UPS stands for...?

 

I have a 1500AVR under my desk at %work%, and I just obtain two 1500VA
(model CP1500PFCLCD) units at home.



ASB


http://XeeMe.com/AndrewBaker


Harnessing the Advantages of Technology for the SMB market.

 

On Wed, Aug 10, 2011 at 9:30 PM, Ben Scott  wrote:

On Wed, Aug 10, 2011 at 9:22 PM, Andrew S. Baker  wrote:
> So far, I'm liking CyberPower devices.

 What model(s)?


-- Ben

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><><><><>

RE: The U in UPS stands for...?

[John Aldrich]

Oh, I agree. I was just thinking that TWO 1500 VA UPSs was too many for one
person and ASB needed to "share the wealth" J

 

John-AldrichThread-Count

 

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Thursday, September 01, 2011 2:00 PM
To: NT System Admin Issues
Subject: RE: The U in UPS stands for...?

 

John, trust me, have your PC or at least one PC with all your management
tools and "comfort zone" on a UPS.  It results in a lot less running around
like a headless chicken in the event of a power failure.

  _  

From: John Aldrich [jaldr...@blueridgecarpet.com]
Sent: 01 September 2011 6:28 PM
To: NT System Admin Issues
Subject: RE: The U in UPS stands for...?

That's just WRONG! J

 

John-AldrichThread-Count

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 01, 2011 1:19 PM
To: NT System Admin Issues
Subject: Re: The U in UPS stands for...?

 

I have a 1500AVR under my desk at %work%, and I just obtain two 1500VA
(model CP1500PFCLCD) units at home.



ASB


 <http://XeeMe.com/AndrewBaker> http://XeeMe.com/AndrewBaker


Harnessing the Advantages of Technology for the SMB market.

 

On Wed, Aug 10, 2011 at 9:30 PM, Ben Scott  wrote:

On Wed, Aug 10, 2011 at 9:22 PM, Andrew S. Baker  wrote:
> So far, I'm liking CyberPower devices.

 What model(s)?


-- Ben

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

  _  

MIRA Ltd

 

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England

Registered in England and Wales No. 402570

VAT Registration  GB 100 1464 84

 

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><><><>

RE: The U in UPS stands for...?

[John Aldrich]

Hmm. What's your address again, Webster? ;D

 

John-AldrichThread-Count

 

From: Webster [mailto:webs...@carlwebster.com] 
Sent: Thursday, September 01, 2011 1:46 PM
To: NT System Admin Issues
Subject: RE: The U in UPS stands for...?

 

I have five 1500VA units and one 1000VA unit in my home office.

 

Carl Webster

Consultant and Citrix Technology Professional

http://www.CarlWebster.com <http://www.carlwebster.com/> 

 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Thursday, September 01, 2011 12:29 PM
To: NT System Admin Issues
Subject: RE: The U in UPS stands for...?

 

That's just WRONG! J

 

John-AldrichThread-Count

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 01, 2011 1:19 PM
To: NT System Admin Issues
Subject: Re: The U in UPS stands for...?

 

I have a 1500AVR under my desk at %work%, and I just obtain two 1500VA
(model CP1500PFCLCD) units at home.



ASB


 <http://XeeMe.com/AndrewBaker> http://XeeMe.com/AndrewBaker


Harnessing the Advantages of Technology for the SMB market.

 

On Wed, Aug 10, 2011 at 9:30 PM, Ben Scott  wrote:

On Wed, Aug 10, 2011 at 9:22 PM, Andrew S. Baker  wrote:
> So far, I'm liking CyberPower devices.

 What model(s)?


-- Ben

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><><><>

RE: The U in UPS stands for...?

[John Aldrich]

That's just WRONG! J

 

John-AldrichThread-Count

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Thursday, September 01, 2011 1:19 PM
To: NT System Admin Issues
Subject: Re: The U in UPS stands for...?

 

I have a 1500AVR under my desk at %work%, and I just obtain two 1500VA
(model CP1500PFCLCD) units at home.



ASB


  http://XeeMe.com/AndrewBaker


Harnessing the Advantages of Technology for the SMB market.





On Wed, Aug 10, 2011 at 9:30 PM, Ben Scott  wrote:

On Wed, Aug 10, 2011 at 9:22 PM, Andrew S. Baker  wrote:
> So far, I'm liking CyberPower devices.

 What model(s)?


-- Ben



 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<><>

RE: KVM (WAS RE: Looking for cable)

[John Aldrich]

Great! Glad to hear that. Makes me feel better about ordering it. :D



From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Wednesday, August 31, 2011 3:30 PM
To: NT System Admin Issues
Subject: Re: KVM (WAS RE: Looking for cable)

I have a 2-port and a 4-port IOGear KVM with PS/2 connections. Both have
worked flawlessly for years.  Not that I'd want one in my server room, but
for desktop configs they've been great.


Roger Wright
___
My short term goal is to make it through the day.  
My long term goal is to string a bunch of short term goals together.



On Wed, Aug 31, 2011 at 2:48 PM, John Aldrich 
wrote:

Do you guys like IOGear? I found this on NewEgg and it looks pretty good...
had 4 eggs out of 5 and 194 ratings. Sounds pretty good to me.


From: Mike Sullivan [mailto:neog...@gmail.com]
Sent: Wednesday, August 31, 2011 2:33 PM
To: NT System Admin Issues
Subject: Re: Looking for cable

I think you need to replace your aging and possibly flaking PS/2 KVM as
well. 
On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich
 wrote:
I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks







--
Thank you,
Mike Sullivan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: KVM (WAS RE: Looking for cable)

[John Aldrich]

Thanks. I went ahead and bought that (4-port) model. I figure if it tears up
within 3 years, they'll fix/replace it. If it lasts more than 3 years
(probably) I've got my money's worth out of it. :D




-Original Message-
From: Guyer, Don [mailto:don.gu...@fiserv.com] 
Sent: Wednesday, August 31, 2011 3:03 PM
To: NT System Admin Issues
Subject: RE: KVM (WAS RE: Looking for cable)

This is the one my buddy is running:

http://www.newegg.com/Product/Product.aspx?Item=N82E16817107419

I think you hit CTRL-CTRL to change it, or something like that.

Don Guyer
Windows Systems Engineer
RIM Operations Engineering Distributed - A Team, Tier 2
Enterprise Technology Group
Fiserv
don.gu...@fiserv.com
Office: 1-800-523-7282 x 1673
Fax: 610-233-0404
www.fiserv.com



-Original Message-----
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, August 31, 2011 2:56 PM
To: NT System Admin Issues
Subject: RE: KVM (WAS RE: Looking for cable)

Whoops...forgot the link:
http://www.newegg.com/Product/Product.aspx?Item=N82E16817399001




-Original Message-----
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, August 31, 2011 2:48 PM
To: NT System Admin Issues
Subject: KVM (WAS RE: Looking for cable)


Do you guys like IOGear? I found this on NewEgg and it looks pretty good...
had 4 eggs out of 5 and 194 ratings. Sounds pretty good to me.


From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Wednesday, August 31, 2011 2:33 PM
To: NT System Admin Issues
Subject: Re: Looking for cable

I think you need to replace your aging and possibly flaking PS/2 KVM as
well. 
On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich
 wrote:
I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Thank you,
Mike Sullivan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: KVM (WAS RE: Looking for cable)

[John Aldrich]

Yeah...Not bad. I like the idea of replaceable cables in case the cable goes
bad...although I suppose that if it goes out within 3 years, they
fix/replace it. After that, just replace it. :D




-Original Message-
From: Guyer, Don [mailto:don.gu...@fiserv.com] 
Sent: Wednesday, August 31, 2011 3:03 PM
To: NT System Admin Issues
Subject: RE: KVM (WAS RE: Looking for cable)

This is the one my buddy is running:

http://www.newegg.com/Product/Product.aspx?Item=N82E16817107419

I think you hit CTRL-CTRL to change it, or something like that.

Don Guyer
Windows Systems Engineer
RIM Operations Engineering Distributed - A Team, Tier 2
Enterprise Technology Group
Fiserv
don.gu...@fiserv.com
Office: 1-800-523-7282 x 1673
Fax: 610-233-0404
www.fiserv.com



-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, August 31, 2011 2:56 PM
To: NT System Admin Issues
Subject: RE: KVM (WAS RE: Looking for cable)

Whoops...forgot the link:
http://www.newegg.com/Product/Product.aspx?Item=N82E16817399001




-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, August 31, 2011 2:48 PM
To: NT System Admin Issues
Subject: KVM (WAS RE: Looking for cable)


Do you guys like IOGear? I found this on NewEgg and it looks pretty good...
had 4 eggs out of 5 and 194 ratings. Sounds pretty good to me.


From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Wednesday, August 31, 2011 2:33 PM
To: NT System Admin Issues
Subject: Re: Looking for cable

I think you need to replace your aging and possibly flaking PS/2 KVM as
well. 
On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich
 wrote:
I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Thank you,
Mike Sullivan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: KVM (WAS RE: Looking for cable)

[John Aldrich]

Whoops...forgot the link:
http://www.newegg.com/Product/Product.aspx?Item=N82E16817399001




-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, August 31, 2011 2:48 PM
To: NT System Admin Issues
Subject: KVM (WAS RE: Looking for cable)


Do you guys like IOGear? I found this on NewEgg and it looks pretty good...
had 4 eggs out of 5 and 194 ratings. Sounds pretty good to me.


From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Wednesday, August 31, 2011 2:33 PM
To: NT System Admin Issues
Subject: Re: Looking for cable

I think you need to replace your aging and possibly flaking PS/2 KVM as
well. 
On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich
 wrote:
I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Thank you,
Mike Sullivan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Looking for cable

[John Aldrich]

Yeah... After the suggestion to chuck the old Belkin KVM, I got to thinking
"why not." Any particular brand of KVM y'all like? Belkin used to be the
name to buy for "prosumer" stuff. Are they still the brand to beat?



From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Wednesday, August 31, 2011 2:35 PM
To: NT System Admin Issues
Subject: Re: Looking for cable

+1
PS/2  It's a great way to lock up your machine.  That was it's selling
point, right?
On Wed, Aug 31, 2011 at 2:32 PM, Mike Sullivan  wrote:
I think you need to replace your aging and possibly flaking PS/2 KVM as
well. 

On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich
 wrote:
I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Thank you,
Mike Sullivan


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

KVM (WAS RE: Looking for cable)

[John Aldrich]

Do you guys like IOGear? I found this on NewEgg and it looks pretty good...
had 4 eggs out of 5 and 194 ratings. Sounds pretty good to me.


From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Wednesday, August 31, 2011 2:33 PM
To: NT System Admin Issues
Subject: Re: Looking for cable

I think you need to replace your aging and possibly flaking PS/2 KVM as
well. 
On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich
 wrote:
I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Thank you,
Mike Sullivan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Looking for cable

[John Aldrich]

Yeah… Could be, but at this point, the keyboard and mouse are cheaper. :D I
guess I'll have a look-see at what KVMs are available. My windows machine is
currently using a USB->PS2 adapter as it's USB-only. I suspect my Linux box
wouldn't care whether it was USB-only or not. Have to try it and see, I
guess. 



From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Wednesday, August 31, 2011 2:33 PM
To: NT System Admin Issues
Subject: Re: Looking for cable

I think you need to replace your aging and possibly flaking PS/2 KVM as
well. 
On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich
 wrote:
I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Thank you,
Mike Sullivan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Looking for cable

[John Aldrich]

I'm looking to replace my aging (and flaky) separate wireless Keyboard and
wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to
get a new keyboard and mouse combo, but they all seem to be USB-only these
days. Is anyone aware of a place where one can purchase a single USB (F) to
dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1
USB M) all day long, but in my searching on the web I have not found any
such adapter as I am trying to find.

Thanks






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: When DNS for your ISP goes down...

[John Aldrich]

I concur with the suggestion for someone like DynDNS. At least with them
it's free, or at least it was for us. ISTR there is a certain amount of
hosts over which it requires a paid (inexpensive) account.



From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Wednesday, August 31, 2011 12:26 PM
To: NT System Admin Issues
Subject: Re: When DNS for your ISP goes down...

Thank you for your replies. We will be checking out the DNS hosting
companies recommended here along with our registrar's DNS. 
On Wed, Aug 31, 2011 at 9:13 AM, Ben Scott  wrote:
On Wed, Aug 31, 2011 at 11:10 AM, Mike Sullivan  wrote:
> I do actually have a question here. Was there anything I could have done
to
> get us up and running?

 At that stage in the game?  Unlikely.

 But now that you've learned the lesson, you can take steps to
prevent a re-occurrence.  DNS is designed with distributed redundancy
in mind.

 Getting a dedicated DNS hosting company, as others have suggested,
is a good idea.  That way your names are not tied to your feed, your
web server, or anything else.  It makes switching all those much
easier, and a dedicated host is less likely to screw up like this.
Many registrars include basic DNS hosting with your registration.

 Run a nameserver of your own.  Or more than one, if you have
multiple sites/feeds.  You can slave it to the hosting company's
nameservers, or some DNS hosts offer "slave service" packages.  List
your nameserver(s) along with the hosting company's servers in the
registration delegation.  Now you've got multiple companies, sites,
servers, and likely even DNS implementations serving your records.

 For example, at our local Linux User Group, our co-lo'ed server is
the master nameserver, but we also get slave service from Dyn Inc
(http://www.dyn.com/).  So our registered nameservers look like:

       VIPRE Anti-phishing found a known bad URL in your email message. It
was deleted or quarantined, depending on your settings, and replaced with
this message. The anti-phishing setting is located in File>Settings under
the Email Protection tab..
       ns4.mydyndns.org.
       ns5.mydyndns.org.
       ns2.mydyndns.org.
       ns3.mydyndns.org.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Thank you,
Mike Sullivan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: How to determine a host's IP range

[John Aldrich]

Looks like it's hosted by Akamai, which might explain why you can't get an 
answer from the folks running the course. 



From: Damien Solodow [mailto:damien.solo...@harrison.edu] 
Sent: Tuesday, August 30, 2011 8:51 AM
To: NT System Admin Issues
Subject: Re: How to determine a host's IP range

Do a dig or nslookup on the host; the results will contain all the currently 
published IP addresses for it. 
-- 
Sent using BlackBerry 

 
From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] 
Sent: Tuesday, August 30, 2011 08:40 AM
To: NT System Admin Issues  
Subject: How to determine a host's IP range 
 
Good morning everyone,

Our students have an online class that uses a lot of videos.  When ran through 
the general student proxy, the quality of these videos is very bad.  In the 
past when we have these issues, we would route traffic to these hosts out a NAT 
gateway.  Then we would tell IE not to proxy for that host.  This may not be 
the best way,  but it works for our situation.

This particular host media.pearsoncmg.com uses a round robin type of DNS.  If 
you do a DNS lookup today, you may get 64.211.144.100.  Then another class will 
get something like 69.31.16.217.  We have contacted the people who run the 
course, and they will not give us the IP range.   Is there a way I can get that 
information across the net?

Thanks
Shane

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: hard drive repair/data recovery vendor

[John Aldrich]

If you could find the same *exact* model hard drive, you could swap out the
circuit board. A buddy of mine did that awhile back on a hard drive and it
worked. As I say, you'd have to get the same, exact make/model hard drive,
but it should work. Failing that, I'm not sure...  



From: Hank . [mailto:hgedr...@gmail.com] 
Sent: Friday, August 26, 2011 2:54 PM
To: NT System Admin Issues
Subject: hard drive repair/data recovery vendor

I remember someone mentioning a company they were happy with.

I have a WD400 IDE drive that was in a system in a location that had an
electrical hit. It has a small database on it that wasn't backed up.

The drive electronics are toast (drive doesn't appear in the BIOS in a test
system)

Any suggestions for a company  appreciated.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Earthquake!!!!!!

[John Aldrich]

I did not feel a thing here in north-central Georgia mountains.



From: Jeff Bunting [mailto:bunting.j...@gmail.com] 
Sent: Tuesday, August 23, 2011 2:59 PM
To: NT System Admin Issues
Subject: Re: Earthquake!!

felt a little tremor down in Roanoke...
On Tue, Aug 23, 2011 at 2:42 PM, Michael B. Smith  wrote:
It’s centered just 25 miles east of me. Yes, I felt it. ☺
 
http://earthquake.usgs.gov/earthquakes/recenteqsus/Quakes/usc0005ild.php
 
Regards,
 
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com
 
From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Tuesday, August 23, 2011 2:41 PM
To: NT System Admin Issues
Subject: OT: Earthquake!!
 
Anyone on east coast feel it?  We did here in Pennsylvania. 


Chris Bodnar, MCSE, MCITP
Technical Support III
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 - This message, and 
any attachments to it, may contain information that is privileged, 
confidential, and exempt from disclosure under applicable law. If the reader of 
this message is not the intended recipient, you are notified that any use, 
dissemination, distribution, copying, or communication of this message is 
strictly prohibited. If you have received this message in error, please notify 
the sender immediately by return e-mail and delete the message and any 
attachments. Thank you. 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Dell Contact

[John Aldrich]

Yeah. I wish I still had my first rep...she was great! Haven't had much to do 
with my current rep.



From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Tuesday, August 23, 2011 11:34 AM
To: NT System Admin Issues
Subject: Re: Dell Contact

Maybe some good news.
Finding a Dallas focused rep should be easier, as they changed their account 
management to a geographically based system.  Of course, I'm not in Dallas, and 
I got shafted in the transition, in multiple ways...
 
Moved from a great rep to a bad rep (oh so horrible), and have been basically 
told that I need to use the Premier site better.  So, my recommendation is to 
find a rep tell him the quantity you're planning to purchase, get premier site 
access and do it yourself.  Run it through the rep to get discounts on shipping 
or other possible freebies based on the size of the order (I often get free 
shipping on notebooks when I do my bulk purchase).


 
On Tue, Aug 23, 2011 at 11:18 AM, Sherry Abercrombie 
 wrote:
I know, they change weekly almost………
 
From: Webster [mailto:webs...@carlwebster.com] 
Sent: Tuesday, August 23, 2011 10:09 AM

To: NT System Admin Issues
Subject: RE: Dell Contact
 
 You haven’t been around here long have you? ☺
 
 
Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com
 
 
From: Sherry Abercrombie [mailto:sabercrom...@nhdallas.com] 
Sent: Tuesday, August 23, 2011 9:44 AM
To: NT System Admin Issues
Subject: Dell Contact
 
Anyone have a good Dell contact for the Dallas/Fort Worth area.  We’re looking 
to make a substantial laptop purchase and I need to talk to someone about that.
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


This information may contain information that is privileged, confidential and 
exempt from disclosure under applicable law. If you are not the intended 
recipient, you are hereby notified that any disclosure, photocopying or 
distribution of these contents is unauthorized and prohibited. If you have 
received this in error, please notify the sender immediately and destroy all 
copies.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Dell Contact

[John Aldrich]

Tell me about it. I think my contact DID change twice in one week recently. 
Literally!



From: Sherry Abercrombie [mailto:sabercrom...@nhdallas.com] 
Sent: Tuesday, August 23, 2011 11:18 AM
To: NT System Admin Issues
Subject: RE: Dell Contact

I know, they change weekly almost………

From: Webster [mailto:webs...@carlwebster.com] 
Sent: Tuesday, August 23, 2011 10:09 AM
To: NT System Admin Issues
Subject: RE: Dell Contact

 You haven’t been around here long have you? ☺


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Sherry Abercrombie [mailto:sabercrom...@nhdallas.com] 
Sent: Tuesday, August 23, 2011 9:44 AM
To: NT System Admin Issues
Subject: Dell Contact

Anyone have a good Dell contact for the Dallas/Fort Worth area.  We’re looking 
to make a substantial laptop purchase and I need to talk to someone about that.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


This information may contain information that is privileged, confidential and 
exempt from disclosure under applicable law. If you are not the intended 
recipient, you are hereby notified that any disclosure, photocopying or 
distribution of these contents is unauthorized and prohibited. If you have 
received this in error, please notify the sender immediately and destroy all 
copies.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Why not failwords?

[John Aldrich]

Yep. Biometrics-only or biometrics in conjunction with a PIN/password are 
really the best way to go. We *have* the technology to do this.



From: James Hill [mailto:j.h...@coffeeclub.com.au] 
Sent: Thursday, August 18, 2011 7:03 PM
To: NT System Admin Issues
Subject: RE: Why not failwords?

I still think passwords have to die.  There are better options.

From: Hilderbrand, Doug [mailto:doug.hilderbr...@craneaerospace.com] 
Sent: Friday, 19 August 2011 3:25 AM
To: NT System Admin Issues
Subject: Why not failwords?

I was just reading all those emails about making hard to crack passwords 
(Almost but not quite OT: Passwords). I like Steve Gibson’s analysis of why 
long passwords are harder to brute force crack than shorter complex ones. But, 
I wonder…

Why hasn’t anyone implemented fail words? Two or more passwords associated with 
your account or whatever. One you use for normal access and is as hard to crack 
as you can make it and still be memorable. Then another password that would be 
easy(er) to crack that triggers some event? Here are a few scenarios I can 
think of off the top of my head:

[] Bank manager forced to open the vault at gunpoint. Use the failword. Opens 
the vault and rings the silent alarm.
[] Someone tries to login to your PayPal or bank account and tries your 
failword. They get the usual bad password result, but you get a text message on 
your cell phone.
[] Someone tries to unlock your iPhone. They try the failword and it gets 
locked until you send it a special email or text or 24 hours expire, etc. 

Is there some reason this is a bad idea? I can’t think of any…

Doug Hilderbrand | Systems Analyst, Information Technology | Crane Aerospace & 
Electronics

Check out the new Crane Aerospace Electronics Newsroom!
Like us on Facebook!
We value your opinion!  How may we serve you better? Please click the survey 
link to tell us how we are doing: 
http://www.craneae.com/surveys/satisfaction.htm 
Your feedback is of the utmost importance to us. Thank you for your time.
Crane Aerospace & Electronics Confidentiality Statement:
The information contained in this email message may be privileged and is 
confidential information intended only for the use of the recipient, or any 
employee or agent responsible to deliver it to the intended recipient. Any 
unauthorized use, distribution or copying of this information is strictly 
prohibited and may be unlawful. If you have received this communication in 
error, please notify the sender immediately and destroy the original message 
and all attachments from your electronic files.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Looking for web site developing companies

[John Aldrich]

Try Netahawk, Dubuque and Packett. They have two offices in Virginia:
RICHMOND OFFICE
One East Cary Street
Richmond, VA 23219
804-783-8140 / 800-847-2674
F 804-783-0098

ROANOKE OFFICE
410 South Jefferson Street
Roanoke, VA 24011
540-345-5403 / 866-677-9817
F 540-345-5414

They do fairly complex sites. Granted they are not SP-based, but still
pretty nice. They don't work cheap, though.



From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Thursday, August 18, 2011 3:28 PM
To: NT System Admin Issues
Subject: Looking for web site developing companies

Hi Folks,
 
I'm looking for recommendations for companies that do web site development. 
We maintain a number of web sites here for our various .org sites.  
 
I and my team don't have the time to completely redesign our sites.  We can
maintain and update, but I'd prefer to use a specialized service to assist
with design and occasional support once design is implemented.  We are
implementing an internal Share Point portal, so I'd prefer a SP-based design
since we already use SP.
 
We are in Virginia, are state and non-profit.  If anyone has any
recommendations, please let me know.
 
Tom

Confidentiality Notice: This e-mail message, including attachments, is for
the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure, or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message. 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Strange Outlook problem

[John Aldrich]

Thanks, Ben. That's a very good idea. I'll do that when I get access to his
machine. This user is (like most) not very computer-literate. I don't trust
him to be able to follow instructions. :D




-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Wednesday, August 17, 2011 3:47 PM
To: NT System Admin Issues
Subject: Re: Strange Outlook problem

On Wed, Aug 17, 2011 at 3:15 PM, John Aldrich
 wrote:
> I have ONE user who's complaining that his email (POP3) in Outlook is
> delayed by a day, but ONLY from the work POP server.

  Have him forward a copy of one of the messages **WITH FULL HEADERS**
to you and the examine said headers to figure out what's going on.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Strange Outlook problem

[John Aldrich]

Yeah... VERY true... as Greg House, M.D. says "Everybody lies.":D I'll have
to check and see when he gets home and I get a chance to log into his
machine and see what's up.




-Original Message-
From: N Parr [mailto:npar...@mortonind.com] 
Sent: Wednesday, August 17, 2011 4:08 PM
To: NT System Admin Issues
Subject: RE: Strange Outlook problem

True, maybe he's sorting them in to another folder or it is a totally
different profile.  He didn't say.  I like to apply KISS methodology
first.  Besides, we only have the word of the user and John at this
point saying his personal email isn't delayed.

-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Wednesday, August 17, 2011 2:48 PM
To: NT System Admin Issues
Subject: Re: Strange Outlook problem

On Wed, Aug 17, 2011 at 3:19 PM, N Parr  wrote:
> Tell him to hit the little plus arrow next to Date: Today.

  That wouldn't explain why his other email account gets mail on time.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Strange Outlook problem

[John Aldrich]

Messages *received* are supposedly being delayed on his home PC. HE has a
smart phone and it downloads the email "on-time" and Webmail (on the server,
of course) shows the email in a timely fashion as well. I wonder if maybe
the solution isn't as easy as N Parr suggested. I sure hope so. :D



From: Sam Cayze [mailto:sca...@gmail.com] 
Sent: Wednesday, August 17, 2011 3:45 PM
To: NT System Admin Issues
Subject: RE: Strange Outlook problem

Is the email he sends delayed, or the email he receives delayed?  My guess
is his pop or smtp connection is being blocked by a firewall, but when he
moves locations, it’s finally being accepting and the messages go through.

Sam

From: N Parr [mailto:npar...@mortonind.com] 
Sent: Wednesday, August 17, 2011 2:20 PM
To: NT System Admin Issues
Subject: RE: Strange Outlook problem

Tell him to hit the little plus arrow next to Date: Today.



-Original Message-----
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Wednesday, August 17, 2011 2:15 PM
To: NT System Admin Issues
Subject: Strange Outlook problem

I have ONE user who's complaining that his email (POP3) in Outlook is
delayed by a day, but ONLY from the work POP server. His personal email, he
says, is NOT delayed and he can log into webmail and see it and it's coming
to his Smart Phone on time, but Outlook is delayed by a day.
Unfortunately, this is one of those "field" users who I have never actually
met in person and since he's a sales rep, he's almost never at home.
I did ask him to call me when he's at home so I can use TeamViewer (thank
you whoever it was who recommended that!) to log into his computer and see
what's going on.
I've never heard of such a strange problem before. Have any of you guys seen
this sort of thing before? I am really not even sure where to start looking
for the cause of his problem, especially since no one else is reporting
problems (myself included -- all my email is "on-time.")






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Strange Outlook problem

[John Aldrich]

Hmm... you think that's all it is? Hopefully that'll be the problem and
it'll be an easy fix. :D I didn't even think of that as my email is always
expanded by default. :D



From: N Parr [mailto:npar...@mortonind.com] 
Sent: Wednesday, August 17, 2011 3:20 PM
To: NT System Admin Issues
Subject: RE: Strange Outlook problem

Tell him to hit the little plus arrow next to Date: Today.



-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Wednesday, August 17, 2011 2:15 PM
To: NT System Admin Issues
Subject: Strange Outlook problem

I have ONE user who's complaining that his email (POP3) in Outlook is
delayed by a day, but ONLY from the work POP server. His personal email, he
says, is NOT delayed and he can log into webmail and see it and it's coming
to his Smart Phone on time, but Outlook is delayed by a day.
Unfortunately, this is one of those "field" users who I have never actually
met in person and since he's a sales rep, he's almost never at home.
I did ask him to call me when he's at home so I can use TeamViewer (thank
you whoever it was who recommended that!) to log into his computer and see
what's going on.
I've never heard of such a strange problem before. Have any of you guys seen
this sort of thing before? I am really not even sure where to start looking
for the cause of his problem, especially since no one else is reporting
problems (myself included -- all my email is "on-time.")






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Strange Outlook problem

[John Aldrich]

I have ONE user who's complaining that his email (POP3) in Outlook is
delayed by a day, but ONLY from the work POP server. His personal email, he
says, is NOT delayed and he can log into webmail and see it and it's coming
to his Smart Phone on time, but Outlook is delayed by a day.
Unfortunately, this is one of those "field" users who I have never actually
met in person and since he's a sales rep, he's almost never at home.
I did ask him to call me when he's at home so I can use TeamViewer (thank
you whoever it was who recommended that!) to log into his computer and see
what's going on.
I've never heard of such a strange problem before. Have any of you guys seen
this sort of thing before? I am really not even sure where to start looking
for the cause of his problem, especially since no one else is reporting
problems (myself included -- all my email is "on-time.")






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Looking for Position

[John Aldrich]

Yeah... I was wondering too! :D



From: William Robbins [mailto:dangerw...@gmail.com] 
Sent: Monday, August 15, 2011 1:55 PM
To: NT System Admin Issues
Subject: Re: Looking for Position

ROFLMAO...


I kept trying to figure out how that made sense.  

 - WJR

On Mon, Aug 15, 2011 at 12:53, N Parr  wrote:
Sorry hit reply on wrong email.

-Original Message-
From: N Parr [mailto:npar...@mortonind.com]
Sent: Monday, August 15, 2011 12:52 PM
To: NT System Admin Issues
Subject: RE: Looking for Position

No you will get that when you port your # at the store.  Has to be at the
same time.  We will reimburse for that also.

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Monday, August 15, 2011 12:37 PM
To: NT System Admin Issues
Subject: RE: Looking for Position

That sucks! Best of luck finding something!



From: Guyer, Don [mailto:don.gu...@fiserv.com]
Sent: Monday, August 15, 2011 10:30 AM
To: NT System Admin Issues
Subject: OT: Looking for Position

Everyone,

    I was just notified that my position will be cut, effective
the end of September. If anyone hears of anything open in the Southeastern
area of PA, please contact me offline at don.gu...@comcast.net.

Thanks,

Don Guyer
Windows Systems Engineer
RIM Operations Engineering Distributed - A Team, Tier 2 Enterprise
Technology Group Fiserv don.gu...@fiserv.com
Office: 1-800-523-7282 x 1673
Fax: 610-233-0404
www.fiserv.com


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Looking for Position

[John Aldrich]

That sucks! Best of luck finding something!



From: Guyer, Don [mailto:don.gu...@fiserv.com] 
Sent: Monday, August 15, 2011 10:30 AM
To: NT System Admin Issues
Subject: OT: Looking for Position

Everyone,

    I was just notified that my position will be cut, effective
the end of September. If anyone hears of anything open in the Southeastern
area of PA, please contact me offline at don.gu...@comcast.net.

Thanks,

Don Guyer
Windows Systems Engineer
RIM Operations Engineering Distributed – A Team, Tier 2
Enterprise Technology Group
Fiserv
don.gu...@fiserv.com
Office: 1-800-523-7282 x 1673
Fax: 610-233-0404
www.fiserv.com


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: DHCP Server and multiple subnets

[John Aldrich]

I'm no expert, but we did that at a previous job, and I think the secret was
the gateway it was coming from. I didn't actually set it up, but that's what
I recall being the key.




-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Friday, August 12, 2011 11:44 AM
To: NT System Admin Issues
Subject: DHCP Server and multiple subnets

Hey list, quick question for ya as my googlefu is not coming up with
concrete answers:

Can a single DHCP server serve up two separate subnets? How does the DHCP
server decide which subnet to place the client (besides reservations)? Does
it just auto-magically figure it out based on where the broadcast is coming
from, or is there other trickery involved?


--Matt Ross
Ephrata School District

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Cloud Based AV

[John Aldrich]

They have some nice tools though... I'm thinking HJT here. 'Course they
didn't come up with that, they just bought the company that did. :D



From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, August 05, 2011 11:19 AM
To: NT System Admin Issues
Subject: Re: Cloud Based AV

I left Trend years ago (~2006) for that very reason, and they've only gotten
worse, IMO.


ASB
http://about.me/Andrew.S.Baker
Harnessing the Advantages of Technology for the SMB market…


On Fri, Aug 5, 2011 at 11:13 AM, Martin Blackstone 
wrote:
You know, I’m so sick of Trend I could scream. I don’t think their products
are half of what they used to be and they haven’t really brought much to the
table of late.
We seem to be suffering more and more malware infections that Trend just
skips over.
We have Intune in a small 10 unit  deployment right now and it finds things
that Trend just glossed over.
 
From: David Lum [mailto:david@nwea.org] 
Sent: Friday, August 05, 2011 7:50 AM

To: NT System Admin Issues
Subject: RE: Cloud Based AV
 
Have you contacted Trend or checked their KB? I know I once had to reset
something on the Trend server to make sure they still reported into the
console even though they were set to get updates from Trend (Smart scan)
instead of the local server.
 
Dave
 
From: Martin Blackstone [mailto:mblackst...@gmail.com] 
Sent: Friday, August 05, 2011 7:24 AM

To: NT System Admin Issues
Subject: RE: Cloud Based AV
 
Right. That’s what we use today.
The problem is that reporting gets all messed up over time because nobody is
phoning home.
 
 
From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Friday, August 05, 2011 7:20 AM
To: NT System Admin Issues
Subject: Re: Cloud Based AV
 
Trend does this too...
On Fri, Aug 5, 2011 at 9:16 AM, Cameron  wrote:
Vipre? If I'm not mistaken you can set it so that the device will look to
the cloud if it can't connect to the mother ship!


 
On Fri, Aug 5, 2011 at 10:08 AM, Martin Blackstone 
wrote:
Other than MS with Intune, who else is offering a cloud based corporate AV
solution.
With so many remote users that rarely report back to the mother ship, I want
something out in the cloud to keep them up to date.
Thoughts?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Dell BMC

[John Aldrich]

John, thank you! A million times, THANK YOU! Dell's instructions didn't make
a heck of a lot of sense and then the hassle I got from some folks here when
I tried to get help didn't make things any less confusing!




-Original Message-
From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] 
Sent: Wednesday, August 03, 2011 11:46 AM
To: NT System Admin Issues
Subject: RE: Dell BMC

Don't feel bad--I had a time figuring it out myself. I knew there was some
way to remotely power on/off my Dell servers, but had no clue how to
actually do it.

The workstation you're controlling from needs the BMB/IPMI tool installed on
it. Once it has it, drop to a command prompt and go here:

C:\Program Files\Dell\SysMgt\bmc

(Or wherever you installed it.)

Then run:

ipmitool -I lan -H [your server] -U [your username] -a chassis power status

To query the server for its power status. You'll be prompted for your
password, although I think you may be able to put that in the command line
as well.

If the server is off, use this to turn it on:

ipmitool -I lan -H [your server] -U [your username] -a chassis power on

Now, I may be alone in this, but I always have to run each command twice.
The first time I run it, I get:

Authentication type NONE not supported
Activate Session command failed
Error: Unable to establish LAN session
Unable to get Chassis Power Status

Then I immediately run it a second time, and it works that time. Happens to
me every single time.


John



-----Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, August 03, 2011 10:57 AM
To: NT System Admin Issues
Subject: RE: Dell BMC

Michael, et al:
Yes, I realize I have a HUGE knowledge gap (big enough to drive at least one
semi through.) I'm not exactly a dummy though. Still this stuff is really
confusing to me. Yes, I read through the MSDN article. Didn't make a lot of
sense to me. I know Dell has "extended" the commands for BMC. All I really
want is the ability to power-cycle the server remotely, which, according to
the Dell documentation, I should be able to do. Much more than that I can't
say as the documentation, to me, is very confusing. In one place it suggests
you should be able to use Hyperterminal to access the BMC (although it
states something about the basic/free Hyperterminal having some
limitations.) In another place it talks about using special OpenManage
software to access it. Really confusing for me. Clearly Hyperterminal isn't
working, or I still need to do some more to configure the server (I think I
saw someplace about making changes in the BIOS settings) or both. 

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Wednesday, August 03, 2011 10:43 AM
To: NT System Admin Issues
Subject: RE: Dell BMC

John, did you google "ipmi windows" like I suggested yesterday?

The first hit is an article that discusses the difference between BMC and
IPMI and what the capabilities of each are. The next several hits provide
links to tools for properly using BMC and IPMI - free ones, even. In good
English, even. And did I mention they were free?

There is a server component (drivers plus WMI interfaces for Windows, plus
many of the tools can be run locally). There is a client component (the
various tools, especially IPMIview which is run remotely).

And did I mention they were free? Oh, and all the documentation I mention is
free too.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Gary Slinger [mailto:gary.slin...@gmail.com]
Sent: Wednesday, August 03, 2011 10:32 AM
To: NT System Admin Issues
Subject: Re: Dell BMC

You're not really in a position to criticise. 

-Original Message-
From: "John Aldrich" 
Date: Wed, 3 Aug 2011 10:28:46
To: NT System Admin Issues
Reply-To: "NT System Admin Issues" 
Subject: RE: Dell BMC

Thanks. I'm beginning to think you may be right about having to use the IPMI
tool, because of some info I found when I actually *found* the BMC software
to download. Unfortunately it's all written in such a way that it's hard to
make heads or tails of it. I'm not even sure, from what I read in the
instructions, that the software is supposed to be installed on the
workstation. The way Dell wrote the software it sounds like you're supposed
to install the software on the *server!* *sigh* That wouldn't be much help,
so I'm pretty sure you're supposed to install it on the "management
workstation" to control the server. Gotta love folks who write instructions
that look like they got translated into Spanish, then into Chinese, then to
Greek then Russian before getting translated BACK to English! SHEESH!



-Original Message-
From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us]
Sent: Wednesday, August 03, 20

RE: Dell BMC

[John Aldrich]

No, I didn't. Thanks for pointing that out.




-Original Message-
From: Damien Solodow [mailto:damien.solo...@harrison.edu] 
Sent: Wednesday, August 03, 2011 1:28 PM
To: NT System Admin Issues
Subject: RE: Dell BMC

John, did you see the reply in thread from John Hornbuckle? He included some
pretty straight-forward instructions that he said worked for him. Quoted
below for convenience:

>Don't feel bad--I had a time figuring it out myself. I knew there was some
way to remotely power on/off my Dell servers, but had no clue how to
actually do >it.

>The workstation you're controlling from needs the BMB/IPMI tool installed
on it. Once it has it, drop to a command prompt and go here:

>C:\Program Files\Dell\SysMgt\bmc (Or wherever you installed it.)

>Then run:

>ipmitool -I lan -H [your server] -U [your username] -a chassis power status

>To query the server for its power status. You'll be prompted for your
password, although I think you may be able to put that in the command line
as well.

>If the server is off, use this to turn it on:

>ipmitool -I lan -H [your server] -U [your username] -a chassis power on

>Now, I may be alone in this, but I always have to run each command twice.
The first time I run it, I get:

>Authentication type NONE not supported
>Activate Session command failed
>Error: Unable to establish LAN session
>Unable to get Chassis Power Status

>Then I immediately run it a second time, and it works that time. Happens to
me every single time.

>John

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE


-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Wednesday, August 03, 2011 1:21 PM
To: NT System Admin Issues
Subject: RE: Dell BMC

Dear Ms. Hensala:
I AM TRYING to figure it out. I find the verbiage in the instructions highly
confusing. As I mentioned, the Dell info speaks at one point of using
Hyperterm to access the BMC and then other times it speaks of using
OpenManage. I don't know if it's one or the other or whether it's both or
what. I was *hoping* that someone here had used it before and could speak to
how to configure it. Since no one here seems to have any first-hand
knowledge of how to use it, I withdraw my question. I'm SO sorry to have
bothered you. Back to the regular flame wars. Asbestos suit on!



From: Shauna Hensala [mailto:she...@msn.com]
Sent: Wednesday, August 03, 2011 1:16 PM
To: NT System Admin Issues
Subject: RE: Dell BMC

I think at some point one has to take responsibility for becoming qualified
to do the work they are being paid to perform and stop asking to be hand fed
information. This is largely an integrity issue.  We are all busy and we all
have the same amount of time.  You can choose how to spend it - and saying
we are too busy to learn is a huge cop out.  Saying there is no $$ for
training is a cop out as there are abundant free resources.  At some point
you have to wonder about motivation and ability.

I have not and would not attack like a hyena but that does not mean that I
do not grow increasingly weary and annoyed with the lack of initiative.

Shauna Hensala




Date: Wed, 3 Aug 2011 13:03:33 -0400
Subject: Re: Dell BMC
From: jonathan.l...@gmail.com
To: ntsysadmin@lyris.sunbelt-software.com
Perhaps.
Or more likely, some people don't want help, no matter how much they ask for
it.


 
On Wed, Aug 3, 2011 at 12:57 PM, Paul Hutchings 
wrote:
>From where I'm sitting it is, or as good as.  Reminds me of a pack of
Hyena's sometimes and soon as one goes in for the kill others soon follow.
 
Personally I think it's plain wrong but that's just my view.
From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: 03 August 2011 17:00

To: NT System Admin Issues
Subject: Re: Dell BMC

 
It's not every single post.
 
Just sayin'.
On Wed, Aug 3, 2011 at 11:55 AM, Joseph Heaton  wrote:
Gary,

While I normally respect and appreciate your contributions here, this is
realy getting old.  Can't we move beyond harping on every single post the
guy makes?

>>> Gary Slinger  08/03/11 8:51 AM >>>
"I'm not exactly a dummy though".
Can we get a vote on that?


-Original Message-
From: "John Aldrich" 
Date: Wed, 3 Aug 2011 10:57:26
To: NT System Admin Issues
Reply-To: "NT System Admin Issues" 
Subject: RE: Dell BMC

Michael, et al:
Yes, I realize I have a HUGE knowledge gap (big enough to drive at least one
semi through.) I'm not exactly a dummy though. Still this stuff is really
confusing to me. Yes, I read through the MSDN article. Didn't make a lot of
sense to me. I know Dell has "extended" the commands for BMC. All I really
want is the ability to power-cycle the server remotely, which, according to
the Dell documentation, I should be able t

RE: Dell BMC

[John Aldrich]

Dear Ms. Hensala:
I AM TRYING to figure it out. I find the verbiage in the instructions highly
confusing. As I mentioned, the Dell info speaks at one point of using
Hyperterm to access the BMC and then other times it speaks of using
OpenManage. I don't know if it's one or the other or whether it's both or
what. I was *hoping* that someone here had used it before and could speak to
how to configure it. Since no one here seems to have any first-hand
knowledge of how to use it, I withdraw my question. I'm SO sorry to have
bothered you. Back to the regular flame wars. Asbestos suit on!



From: Shauna Hensala [mailto:she...@msn.com] 
Sent: Wednesday, August 03, 2011 1:16 PM
To: NT System Admin Issues
Subject: RE: Dell BMC

I think at some point one has to take responsibility for becoming qualified
to do the work they are being paid to perform and stop asking to be hand fed
information. This is largely an integrity issue.  We are all busy and we all
have the same amount of time.  You can choose how to spend it - and saying
we are too busy to learn is a huge cop out.  Saying there is no $$ for
training is a cop out as there are abundant free resources.  At some point
you have to wonder about motivation and ability.

I have not and would not attack like a hyena but that does not mean that I
do not grow increasingly weary and annoyed with the lack of initiative.

Shauna Hensala




Date: Wed, 3 Aug 2011 13:03:33 -0400
Subject: Re: Dell BMC
From: jonathan.l...@gmail.com
To: ntsysadmin@lyris.sunbelt-software.com
Perhaps.
Or more likely, some people don't want help, no matter how much they ask for
it.


 
On Wed, Aug 3, 2011 at 12:57 PM, Paul Hutchings 
wrote:
>From where I’m sitting it is, or as good as.  Reminds me of a pack of
Hyena’s sometimes and soon as one goes in for the kill others soon follow.
 
Personally I think it’s plain wrong but that’s just my view.
From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: 03 August 2011 17:00

To: NT System Admin Issues
Subject: Re: Dell BMC

 
It's not every single post.
 
Just sayin'.
On Wed, Aug 3, 2011 at 11:55 AM, Joseph Heaton  wrote:
Gary,

While I normally respect and appreciate your contributions here, this is
realy getting old.  Can't we move beyond harping on every single post the
guy makes?

>>> Gary Slinger  08/03/11 8:51 AM >>>
"I'm not exactly a dummy though".
Can we get a vote on that?


-Original Message-
From: "John Aldrich" 
Date: Wed, 3 Aug 2011 10:57:26
To: NT System Admin Issues
Reply-To: "NT System Admin Issues" 
Subject: RE: Dell BMC

Michael, et al:
Yes, I realize I have a HUGE knowledge gap (big enough to drive at least one
semi through.) I'm not exactly a dummy though. Still this stuff is really
confusing to me. Yes, I read through the MSDN article. Didn't make a lot of
sense to me. I know Dell has "extended" the commands for BMC. All I really
want is the ability to power-cycle the server remotely, which, according to
the Dell documentation, I should be able to do. Much more than that I can't
say as the documentation, to me, is very confusing. In one place it suggests
you should be able to use Hyperterminal to access the BMC (although it
states something about the basic/free Hyperterminal having some
limitations.) In another place it talks about using special OpenManage
software to access it. Really confusing for me. Clearly Hyperterminal isn't
working, or I still need to do some more to configure the server (I think I
saw someplace about making changes in the BIOS settings) or both.

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Wednesday, August 03, 2011 10:43 AM
To: NT System Admin Issues
Subject: RE: Dell BMC

John, did you google "ipmi windows" like I suggested yesterday?

The first hit is an article that discusses the difference between BMC and
IPMI and what the capabilities of each are. The next several hits provide
links to tools for properly using BMC and IPMI - free ones, even. In good
English, even. And did I mention they were free?

There is a server component (drivers plus WMI interfaces for Windows, plus
many of the tools can be run locally). There is a client component (the
various tools, especially IPMIview which is run remotely).

And did I mention they were free? Oh, and all the documentation I mention is
free too.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Gary Slinger [mailto:gary.slin...@gmail.com]
Sent: Wednesday, August 03, 2011 10:32 AM
To: NT System Admin Issues

Subject: Re: Dell BMC

You're not really in a position to criticise.

-Original Message-
From: "John Aldrich" 
Date: Wed, 3 Aug 2011 10:28:46
To: NT System Admin Issues
Reply-To: "NT System Admin Issues" 
Subject: RE: Dell

RE: Dell BMC

[John Aldrich]

Michael, et al:
Yes, I realize I have a HUGE knowledge gap (big enough to drive at least one
semi through.) I'm not exactly a dummy though. Still this stuff is really
confusing to me. Yes, I read through the MSDN article. Didn't make a lot of
sense to me. I know Dell has "extended" the commands for BMC. All I really
want is the ability to power-cycle the server remotely, which, according to
the Dell documentation, I should be able to do. Much more than that I can't
say as the documentation, to me, is very confusing. In one place it suggests
you should be able to use Hyperterminal to access the BMC (although it
states something about the basic/free Hyperterminal having some
limitations.) In another place it talks about using special OpenManage
software to access it. Really confusing for me. Clearly Hyperterminal isn't
working, or I still need to do some more to configure the server (I think I
saw someplace about making changes in the BIOS settings) or both. 

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Wednesday, August 03, 2011 10:43 AM
To: NT System Admin Issues
Subject: RE: Dell BMC

John, did you google "ipmi windows" like I suggested yesterday?

The first hit is an article that discusses the difference between BMC and
IPMI and what the capabilities of each are. The next several hits provide
links to tools for properly using BMC and IPMI - free ones, even. In good
English, even. And did I mention they were free?

There is a server component (drivers plus WMI interfaces for Windows, plus
many of the tools can be run locally). There is a client component (the
various tools, especially IPMIview which is run remotely).

And did I mention they were free? Oh, and all the documentation I mention is
free too.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Gary Slinger [mailto:gary.slin...@gmail.com] 
Sent: Wednesday, August 03, 2011 10:32 AM
To: NT System Admin Issues
Subject: Re: Dell BMC

You're not really in a position to criticise. 

-Original Message-
From: "John Aldrich" 
Date: Wed, 3 Aug 2011 10:28:46 
To: NT System Admin Issues
Reply-To: "NT System Admin Issues" 
Subject: RE: Dell BMC

Thanks. I'm beginning to think you may be right about having to use the IPMI
tool, because of some info I found when I actually *found* the BMC software
to download. Unfortunately it's all written in such a way that it's hard to
make heads or tails of it. I'm not even sure, from what I read in the
instructions, that the software is supposed to be installed on the
workstation. The way Dell wrote the software it sounds like you're supposed
to install the software on the *server!* *sigh* That wouldn't be much help,
so I'm pretty sure you're supposed to install it on the "management
workstation" to control the server. Gotta love folks who write instructions
that look like they got translated into Spanish, then into Chinese, then to
Greek then Russian before getting translated BACK to English! SHEESH!



-Original Message-
From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] 
Sent: Wednesday, August 03, 2011 8:19 AM
To: NT System Admin Issues
Subject: RE: Dell BMC

As far as I know, you can't telnet into it--you have to use the IPMI tool to
connect.

Although I think that uses the DRAC, not the BMC.

It works well. I just started using it here a month or two ago on a couple
of my servers. I can remotely power them up or down with the tool.



John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.us




-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Tuesday, August 02, 2011 5:27 PM
To: NT System Admin Issues
Subject: Dell BMC

Anyone have any experience with Dell's Baseboard Management Controller? I'm
getting mixed information from Dell. I can't seem to get ahold of anyone in
Tech Support via email. I may have to call them when I'm in front of the
server so I can get them to help me set it up.

I got instructions from my sales rep's Storage Specialist on how to set it
up, and I thought I'd set it up right. I hit CTL+E when the prompt for
"configure remote access" came up and gave it a static IP and enabled IPMI
over LAN. Still can't telnet to that IP address. It responds to a PING on
that IP address, but no telnet/web connection allowed. Just times out.

If anyone has any experience with this, can you chime in? If not, I guess
I'll give Dell a call eventually.

Thanks!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbel

RE: Dell BMC

[John Aldrich]

Thanks. I'm beginning to think you may be right about having to use the IPMI
tool, because of some info I found when I actually *found* the BMC software
to download. Unfortunately it's all written in such a way that it's hard to
make heads or tails of it. I'm not even sure, from what I read in the
instructions, that the software is supposed to be installed on the
workstation. The way Dell wrote the software it sounds like you're supposed
to install the software on the *server!* *sigh* That wouldn't be much help,
so I'm pretty sure you're supposed to install it on the "management
workstation" to control the server. Gotta love folks who write instructions
that look like they got translated into Spanish, then into Chinese, then to
Greek then Russian before getting translated BACK to English! SHEESH!



-Original Message-
From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] 
Sent: Wednesday, August 03, 2011 8:19 AM
To: NT System Admin Issues
Subject: RE: Dell BMC

As far as I know, you can't telnet into it--you have to use the IPMI tool to
connect.

Although I think that uses the DRAC, not the BMC.

It works well. I just started using it here a month or two ago on a couple
of my servers. I can remotely power them up or down with the tool.



John Hornbuckle
MIS Department
Taylor County School District
www.taylor.k12.fl.us




-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Tuesday, August 02, 2011 5:27 PM
To: NT System Admin Issues
Subject: Dell BMC

Anyone have any experience with Dell's Baseboard Management Controller? I'm
getting mixed information from Dell. I can't seem to get ahold of anyone in
Tech Support via email. I may have to call them when I'm in front of the
server so I can get them to help me set it up.

I got instructions from my sales rep's Storage Specialist on how to set it
up, and I thought I'd set it up right. I hit CTL+E when the prompt for
"configure remote access" came up and gave it a static IP and enabled IPMI
over LAN. Still can't telnet to that IP address. It responds to a PING on
that IP address, but no telnet/web connection allowed. Just times out.

If anyone has any experience with this, can you chime in? If not, I guess
I'll give Dell a call eventually.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dell BMC

[John Aldrich]

On Tue August 2 2011, you wrote:
> I'm not familiar with the Dell one, but I am with the HP equivalent.
> 
> First, are you sure there isn't an IP conflict? Unlikely, but possible.
> Second, try running nmap against the IP and see what ports it says are
> open. If you're not familiar with nmap, it's free, easy to install, and
> for basic use like this very simple.
> 
Pretty sure it's not a conflict. I'd have to change the IP and then check 
and see. :D I've got a couple linux boxen so I should be able to run NMAP 
against the IP and see what it shows.

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Dell BMC

[John Aldrich]

On Tue August 2 2011, you wrote:
> What's the OS of the server? I had a similiar issue recently, although
> Dell has renamed the BMC to iDRAC, and needed to update the firmware
> via Service Console on my ESX 4.1 server.
> 
> If it's windows, download the firmware update package for the BMC, apply
> it, reboot and see if that works out.
> 
Yeah... I already downloaded the latest firmware (I think) and applied it. I 
have not rebooted... doing that now.  Server is 2003 R2. I'm not wanting to 
remote into it, the BMC supposedly has some sort of terminal emulation 
which will allow things like power-cycling or rebooting or shutting down 
the server w/o using the o/s. That's all I'm interested in doing.

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Dell BMC

[John Aldrich]

Anyone have any experience with Dell's Baseboard Management Controller? I'm
getting mixed information from Dell. I can't seem to get ahold of anyone in
Tech Support via email. I may have to call them when I'm in front of the
server so I can get them to help me set it up.

I got instructions from my sales rep's Storage Specialist on how to set it
up, and I thought I'd set it up right. I hit CTL+E when the prompt for
"configure remote access" came up and gave it a static IP and enabled IPMI
over LAN. Still can't telnet to that IP address. It responds to a PING on
that IP address, but no telnet/web connection allowed. Just times out.

If anyone has any experience with this, can you chime in? If not, I guess
I'll give Dell a call eventually.

Thanks!






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Error message in logs

[John Aldrich]

Thanks. I do have a PDF writer installed. I never thought about that. That's
a very good point. I, too, believe that Google is your friend. I try to use
it as much as possible, but sometimes you have to know *exactly* the correct
phrase to search or you won't get any useful results. *shrug* YMMV, but
that's how I rock. I will start doing things like printing web pages to PDF
that way I'll have them for future reference.



From: Gasper, Rick [mailto:rickgas...@kings.edu] 
Sent: Tuesday, August 02, 2011 10:07 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

John,
Take a look at the TechNet subscription.
IT will have working copies of most Microsoft software. The cost is $250 for
the plus (I think). You will truly benefit by having it. That way if you
want to *test* OneNote, you can.  Also how does your company purchase it's
Office licenses? YOU don't have to share that info, but you could update
that to include OneNote.
 
Another option would be to install a PDF writer on your system (there are
free ones). Write out you notes with Word, WordPad or notepad then print to
the PDF. Not as slick as OneNote, but it does the same thing. I'll often
send solutions that I see here to my notebook for later review.
 
The one thing I teach my IT classes is that you cannot know everything, but
if you can find the answers you can look like you do.
 
 
Rick Gasper 
Manager, Network Services 
King's College 
133 N. River St 
Wilkes-Barre PA  18711 
PH: 570-208-5845 
Fax: 570-208-6072 
Cell: 570-760-0335 
rickgas...@kings.edu 
 
 
Don't become a phishing victim!! 
King's College and other reputable organizations will never use email to
request that you reply with your password, Social Security number or
confidential personal information.
 
 
 
 
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Tuesday, August 02, 2011 9:49 AM
To: NT System Admin Issues
Subject: RE: Error message in logs
 
Ahh... I wondered what OneNote was for. :D Now I know. I don't have it on my
system, but I know some of the systems with the more expensive versions of
Office have it.
 
 
 
 
-Original Message-
From: Gasper, Rick [mailto:rickgas...@kings.edu]
Sent: Tuesday, August 02, 2011 9:39 AM
To: NT System Admin Issues
Subject: RE: Error message in logs
 
Great suggestion. I use MS OneNote to do just that. Every time I run across
an issue that I have not seen, I try to put it into an OneNote notebook.
That way I can search.
 
There is no effort learning how to use it, because you can print directly to
OneNote.
 
 
 
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Monday, August 01, 2011 5:10 PM
To: NT System Admin Issues
Subject: RE: Error message in logs
 
For the record, I found the error with a little more searching. It turns out
that I appear to have had a corrupted Local GPO Database, and simply
renaming the old one and creating a new one fixed it. Thanks.
 
 
 
From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Monday, August 01, 2011 5:05 PM
To: NT System Admin Issues
Subject: Re: Error message in logs
 
You should verify that before making any assumptions.  Are you familiar with
the expressions that "assumptions make an ass out of you and me?"   ( ass /
u / me ) This is an expression that Systems Administrators live by.
Learn it, live it, love it.
 
Its bad ju-ju to come to a support list with unverified assumptions.  Do
your due diligence before posting questions and answers that aren't rooted
in your own facts.
 
--
Espi
 
 
 
 
On Mon, Aug 1, 2011 at 5:43 AM, John Aldrich 
wrote:
I concur with that diagnosis. But that's the strange part. AFAIK there *are*
no GPOs. At least none that I have created and installed. I suppose one of
the supporting vendors could have done so. Guess I'll have to fire up GPEDIT
and see what the heck is going on.
 
 
 
From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:39 AM
To: NT System Admin Issues
Subject: Re: Error message in logs
 
Sounds like a problem with Group Policy Objects. What sort of GPOs do you
have applied to this server?
On 1 August 2011 13:32, John Aldrich  wrote:
I'm getting an error message in my log files on Server 2003. The log entry
is as follows:
Security policies were propagated with warning. 0xb : An attempt was made to
load a program with an incorrect format.
 
The error message says to search Microsoft for "troubleshooing 1202 events."
Well, apparently my search is f-ed up right now, because I can't FIND
anything on Microsoft's websites about this error! The closest I can come is
a KB article from Windows 2000 Server which includes commands that don't
work in Windows 2003 (registry editing and then issuing a "secpol
/enforce..." command, which is invalid in Windows 2003.)
 
When I look at the security log file

RE: Error message in logs

[John Aldrich]

Ahh... I wondered what OneNote was for. :D Now I know. I don't have it on my
system, but I know some of the systems with the more expensive versions of
Office have it.




-Original Message-
From: Gasper, Rick [mailto:rickgas...@kings.edu] 
Sent: Tuesday, August 02, 2011 9:39 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Great suggestion. I use MS OneNote to do just that. Every time I run across
an issue that I have not seen, I try to put it into an OneNote notebook.
That way I can search.

There is no effort learning how to use it, because you can print directly to
OneNote.



-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Monday, August 01, 2011 5:10 PM
To: NT System Admin Issues
Subject: RE: Error message in logs

For the record, I found the error with a little more searching. It turns out
that I appear to have had a corrupted Local GPO Database, and simply
renaming the old one and creating a new one fixed it. Thanks.



From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Monday, August 01, 2011 5:05 PM
To: NT System Admin Issues
Subject: Re: Error message in logs

You should verify that before making any assumptions.  Are you familiar with
the expressions that "assumptions make an ass out of you and me?"   ( ass /
u / me ) This is an expression that Systems Administrators live by.
Learn it, live it, love it.

Its bad ju-ju to come to a support list with unverified assumptions.  Do
your due diligence before posting questions and answers that aren't rooted
in your own facts.

--
Espi




On Mon, Aug 1, 2011 at 5:43 AM, John Aldrich 
wrote:
I concur with that diagnosis. But that's the strange part. AFAIK there *are*
no GPOs. At least none that I have created and installed. I suppose one of
the supporting vendors could have done so. Guess I'll have to fire up GPEDIT
and see what the heck is going on.



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:39 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

Sounds like a problem with Group Policy Objects. What sort of GPOs do you
have applied to this server?
On 1 August 2011 13:32, John Aldrich  wrote:
I'm getting an error message in my log files on Server 2003. The log entry
is as follows:
Security policies were propagated with warning. 0xb : An attempt was made to
load a program with an incorrect format.

The error message says to search Microsoft for "troubleshooing 1202 events."
Well, apparently my search is f-ed up right now, because I can't FIND
anything on Microsoft's websites about this error! The closest I can come is
a KB article from Windows 2000 Server which includes commands that don't
work in Windows 2003 (registry editing and then issuing a "secpol
/enforce..." command, which is invalid in Windows 2003.)

When I look at the security log file, I see the following error: "Saturday,
July 30, 2011 9:23:58 AM Error 11: An attempt was made to load a program
with an incorrect format.
       Error creating database.
Configuration engine was initialized with one or more errors."

Anyone know what the hell is going on here and how do I fix it? I've *tried*
Googling, and that's not producing many results. Matter of fact, Google is
how I found the Windows 2003 issue.

It seems oddly coincidental that similar errors occur on whichever of my
servers has Vipre Enterprise Server at the moment. Could be coincidence, but
could be related, in my mind. I will add this information to the ticket I
have open with Sunbelt and see if they have any suggestions.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



--
"On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question."

* IMPORTANT INFORMATION/DISCLAIMER *

This document should be read only by those persons to whom it is addressed.
If you have received this message it was obviously addressed to you and
therefore you can read it, even it we didn't mean to send it to you.
However, if the contents of this email make no sense whatsoever then you
probably were not the intended recipient, or, alternatively, you are a
mindless cretin; either way, you should immediately kill yourself and
destroy your computer (not necessarily in that order). Once you have taken
this action, please contact us.. no, sorry, you can't use your computer,
because you

Re: Lab Resources and other educational things

[John Aldrich]

On Mon August 1 2011, you wrote:
> You aren't doing much between 1 to 4 AM are you? :)
> 
Nope, just sleeping. :D

-- 
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Error message in logs

[John Aldrich]

For the record, I found the error with a little more searching. It turns out
that I appear to have had a corrupted Local GPO Database, and simply
renaming the old one and creating a new one fixed it. Thanks.



From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Monday, August 01, 2011 5:05 PM
To: NT System Admin Issues
Subject: Re: Error message in logs

You should verify that before making any assumptions.  Are you familiar with
the expressions that "assumptions make an ass out of you and me?"   ( ass /
u / me ) This is an expression that Systems Administrators live by.  
Learn it, live it, love it.

Its bad ju-ju to come to a support list with unverified assumptions.  Do
your due diligence before posting questions and answers that aren't rooted
in your own facts.

--
Espi




On Mon, Aug 1, 2011 at 5:43 AM, John Aldrich 
wrote:
I concur with that diagnosis. But that's the strange part. AFAIK there *are*
no GPOs. At least none that I have created and installed. I suppose one of
the supporting vendors could have done so. Guess I'll have to fire up GPEDIT
and see what the heck is going on.



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:39 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

Sounds like a problem with Group Policy Objects. What sort of GPOs do you
have applied to this server?
On 1 August 2011 13:32, John Aldrich  wrote:
I'm getting an error message in my log files on Server 2003. The log entry
is as follows:
Security policies were propagated with warning. 0xb : An attempt was made
to load a program with an incorrect format.

The error message says to search Microsoft for "troubleshooing 1202
events." Well, apparently my search is f-ed up right now, because I can't
FIND anything on Microsoft's websites about this error! The closest I can
come is a KB article from Windows 2000 Server which includes commands that
don't work in Windows 2003 (registry editing and then issuing a "secpol
/enforce..." command, which is invalid in Windows 2003.)

When I look at the security log file, I see the following error: "Saturday,
July 30, 2011 9:23:58 AM
Error 11: An attempt was made to load a program with an incorrect format.
       Error creating database.
Configuration engine was initialized with one or more errors."

Anyone know what the hell is going on here and how do I fix it? I've *tried*
Googling, and that's not producing many results. Matter of fact, Google is
how I found the Windows 2003 issue.

It seems oddly coincidental that similar errors occur on whichever of my
servers has Vipre Enterprise Server at the moment. Could be coincidence,
but could be related, in my mind. I will add this information to the ticket
I have open with Sunbelt and see if they have any suggestions.
--
Thanks,
John Aldrich
Blueridge Industries
IT Manager

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



--
"On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question."

* IMPORTANT INFORMATION/DISCLAIMER *

This document should be read only by those persons to whom it is addressed.
If you have received this message it was obviously addressed to you and
therefore you can read it, even it we didn't mean to send it to you.
However, if the contents of this email make no sense whatsoever then you
probably were not the intended recipient, or, alternatively, you are a
mindless cretin; either way, you should immediately kill yourself and
destroy your computer (not necessarily in that order). Once you have taken
this action, please contact us.. no, sorry, you can't use your computer,
because you just destroyed it, and possibly also committed suicide
afterwards, but I am starting to digress..
The originator of this email is not liable for the transmission of the
information contained in this communication. Or are they? Either way it's a
pretty dull legal query and frankly one I'm not going to dwell on. But
should you have nothing better to do, please feel free to ruminate on it,
and please pass on any concrete conclusions should you find them. However,
if you pass them on via email, be sure to include a disclaimer regarding
liability for transmission.
In the event that the originator did not send this email to you, then please
return it to us and attach a scanned-in picture of your mother's brother's
wife wearing nothing but a kangaroo suit, and 

RE: Lab Resources and other educational things

[John Aldrich]

Very good stuff. Thanks, all! I will try to make time (between crises) to do
some studying.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Lab Resources and other educational things

[John Aldrich]

Just confirming what I believe to be the case... Technet is a non-free
resource, correct? If so, that's, unfortunately, something I, personally,
can't afford at this time. If there's a way to get Technet for free, I'd
certainly love to hear about it!



From: Eldridge, Dave [mailto:d...@parkviewmc.com] 
Sent: Monday, August 01, 2011 12:42 PM
To: NT System Admin Issues
Subject: RE: Lab Resources and other educational things

Good start.

Technet. Gets you free “real” copies of every Microsoft software with no
expiration. 


From: Steven Peck [mailto:sep...@gmail.com] 
Sent: Monday, August 01, 2011 10:38 AM
To: NT System Admin Issues
Subject: Lab Resources and other educational things

Let's start a new thread.
 
Lab Resources and test environments.
 
Microsoft has some nice stuff at their virtual labs.  This is all free. It's
not in depth but can often provide a nice overview 'this is how it looks
like' environment before doing something if you have no resources.  You can
do them several times. I generally download the pdf lab and do the lab
once.  
http://www.microsoft.com/events/vlabs/default.mspx
 
I have an older HP Media Center Pavilion system with 8GB ram at home.  I run
WIndows 2008r2 with HyperV on it with the base system being a DC.  I can get
4 to 5 very slow guests up on it but frankly don't care about the speed.  I
have 3 320GB drives I run guests on.
http://www.microsoft.com/windowsserver2008/en/us/hyperv-faq.aspx
NOTE:  You can download time limited iso's from Microsoft.  The downside is
you have to rebuild your environment every 120 days.
http://www.microsoft.com/windowsserver2008/en/us/trial-software.aspx
Get good at scripting setups for your environment and this is less painful
then it could be.  (user account creation/password, etc)
Currently I blew up my test lab and it's getting rebuilt.
 
If I need to expand my guests, I run Virtual Box on my own system which I
game with.  It's a few years old but can get 2-3 guests up if I don't task
them much. 
http://www.virtualbox.org/
 
Your own domain name.  They are cheap.  It's useful to have something that
is 'yours'.  Nothing teaches you like getting something real to interact on
the Internet.
 
Steven Peck
http://www.blkmtn.org
 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
This e-mail contains the thoughts and opinions of the sender and does not
represent official Parkview Medical Center policy.
This communication is intended only for the recipient(s) named above, may be
confidential and/or legally privileged: and, must be treated as such in
accordance with state and federal laws. If you are not the intended
recipient, you are hereby notified that any use of this communication, or
any of its contents, is prohibited. If you have received this communication
in error, please return to sender and delete the message from your computer
system.{token}
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Training (was RE: Error message in logs)

[John Aldrich]

Well, if I can ever manage to get things calmed down a bit, where there
isn't a crisis every few minutes, I'll work on it. Thank you. Right now, I'm
just a *tiny* bit overwhelmed (understatement).



From: Kevin Lundy [mailto:klu...@gmail.com] 
Sent: Monday, August 01, 2011 12:25 PM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

For somethings, you don't even need to setup old PCs.  MS has lots of free
training available.  Some with virtual labs.  There are excelent white
papers, KB articles, free books, free chapters from not free books,
excellent affordable books with lab exercises.
 
Like many others have stated, I haven't received company training in years. 
I've invested in myself - without paying for classes.  All it takes is
desire and time.  
 
The opportunity has arisen ... you now need to invest in yourself (again,
that can just be your time and effort, not $)
On Mon, Aug 1, 2011 at 12:14 PM, James Rankin  wrote:
Training ain't all about money. You can learn most everything you need to
know about GPOs from a small lab which could be set up on a couple of old
PCs, coupled with some online docs. I know you also said you were low on
spare time, but when things are quiet I usually tinker with some test stuff,
which is how I'm trying to learn my XenApp 6.5 skills at the moment.
On 1 August 2011 17:08, John Aldrich  wrote:
Agreed. Not ENTIRELY the community, at least. I admit, I am frustrated and
overloaded here. That being said, is it REALLY too much to ask that we NOT
continue flogging a particular dead horse? I know I need more training. I
have no money for said training, and it's extremely frustrating when people
insist on posting "that's elementary. You should just go get more training."
That sort of reply is NOT helpful.



From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Monday, August 01, 2011 12:03 PM

To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

John, are you starting to notice a pattern here?
 
You have a problem.  Someone helps you, probably not as well as you'd like,
or in the manner you like, and offers some unsolicited comment about the way
you ask for help, or your reputation for accepting help, etc.
You rant.
Someone explains things.
You calm down.
 
This has been a pretty common cycle, and the frequency with which it repeats
should be telling that the fault is not on the community. 
On Mon, Aug 1, 2011 at 11:54 AM, John Aldrich 
wrote:
Thank you, Andrew, for your reasoned words. I am extremely frustrated and
overloaded with work right now, and when people insist on saying "pay for
your own training" when I *specifically* requested that we cease flogging
that particular deceased equine, I lash out.

I would like to apologize to the list in general. However, my point remains:
I have no money, whatsoever, for training. I am doing good to pay my bills
as it is. Thank you for understanding.

Should conditions change such that I can afford to pay my bills, eat AND
keep a roof over my head as well as pay for training, I will do so. Please
let's not continue with "sometimes you just have to pay for your own
training" for the time being. Please.

This has been a VERY hectic Monday and it's not even half over yet. Sorry
for any hard feelings. I have tried to take to heart the need to try to find
the answers on my own. Obviously some folks didn't notice that I had not had
much luck searching, but I did try. Thank you.



From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Monday, August 01, 2011 11:41 AM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

Biting the hands that feed you is always bad policy.

If you insist on taking that approach, you might consider doing so off-line
so you don't destroy what little sympathy appears to remain for you on this
list.

Unless, of course, your real goal is just to annoy and create confusion, in
which case, carry on.

ASB
http://about.me/Andrew.S.Baker
Harnessing the Advantages of Technology for the SMB market…


On Mon, Aug 1, 2011 at 11:11 AM, John Aldrich 
wrote:
Apparently you didn't read my initial post. I DID Google. I found a page
that applied to Windows 2000, but supposedly said it applied to 2003 as
well. Guess what. It didn't. I posted on here and CONTINUED to search. I
finally found another page that refers to a different KB article that
explains that it's likely a corrupt local GPO. So, yes, I did do "due
diligence."  Sorry if I didn't do enough for you or do it fast
enough! 




-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov]
Sent: Monday, August 01, 2011 10:56 AM
To: NT System Admin Issues
Subject: RE: Training (was RE: Error message in logs)

That does not mean that the list should then provide that training to
you for free.  I will not speak in broad generali

RE: Training (was RE: Error message in logs)

[John Aldrich]

Let me ask you this... how would you set it up so that you don't run the
risk of messing up your "real" domain? I'm guessing set up a small LAN and
keep it disconnected?



From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Monday, August 01, 2011 12:15 PM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

Training ain't all about money. You can learn most everything you need to
know about GPOs from a small lab which could be set up on a couple of old
PCs, coupled with some online docs. I know you also said you were low on
spare time, but when things are quiet I usually tinker with some test stuff,
which is how I'm trying to learn my XenApp 6.5 skills at the moment.
On 1 August 2011 17:08, John Aldrich  wrote:
Agreed. Not ENTIRELY the community, at least. I admit, I am frustrated and
overloaded here. That being said, is it REALLY too much to ask that we NOT
continue flogging a particular dead horse? I know I need more training. I
have no money for said training, and it's extremely frustrating when people
insist on posting "that's elementary. You should just go get more training."
That sort of reply is NOT helpful.



From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Monday, August 01, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

John, are you starting to notice a pattern here?
 
You have a problem.  Someone helps you, probably not as well as you'd like,
or in the manner you like, and offers some unsolicited comment about the way
you ask for help, or your reputation for accepting help, etc.
You rant.
Someone explains things.
You calm down.
 
This has been a pretty common cycle, and the frequency with which it repeats
should be telling that the fault is not on the community. 
On Mon, Aug 1, 2011 at 11:54 AM, John Aldrich 
wrote:
Thank you, Andrew, for your reasoned words. I am extremely frustrated and
overloaded with work right now, and when people insist on saying "pay for
your own training" when I *specifically* requested that we cease flogging
that particular deceased equine, I lash out.

I would like to apologize to the list in general. However, my point remains:
I have no money, whatsoever, for training. I am doing good to pay my bills
as it is. Thank you for understanding.

Should conditions change such that I can afford to pay my bills, eat AND
keep a roof over my head as well as pay for training, I will do so. Please
let's not continue with "sometimes you just have to pay for your own
training" for the time being. Please.

This has been a VERY hectic Monday and it's not even half over yet. Sorry
for any hard feelings. I have tried to take to heart the need to try to find
the answers on my own. Obviously some folks didn't notice that I had not had
much luck searching, but I did try. Thank you.



From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Monday, August 01, 2011 11:41 AM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

Biting the hands that feed you is always bad policy.

If you insist on taking that approach, you might consider doing so off-line
so you don't destroy what little sympathy appears to remain for you on this
list.

Unless, of course, your real goal is just to annoy and create confusion, in
which case, carry on.

ASB
http://about.me/Andrew.S.Baker
Harnessing the Advantages of Technology for the SMB market…


On Mon, Aug 1, 2011 at 11:11 AM, John Aldrich 
wrote:
Apparently you didn't read my initial post. I DID Google. I found a page
that applied to Windows 2000, but supposedly said it applied to 2003 as
well. Guess what. It didn't. I posted on here and CONTINUED to search. I
finally found another page that refers to a different KB article that
explains that it's likely a corrupt local GPO. So, yes, I did do "due
diligence."  Sorry if I didn't do enough for you or do it fast
enough! 




-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov]
Sent: Monday, August 01, 2011 10:56 AM
To: NT System Admin Issues
Subject: RE: Training (was RE: Error message in logs)

That does not mean that the list should then provide that training to
you for free.  I will not speak in broad generalizations, but, in
regards to your most recent emergency, you could have found out most of
the information you solicited from the list on the internet for free.
There is an expectation that you will put some good faith effort into
solving your own problems before coming to the list.

There are some great, intelligent, experienced folks on this list, and
they really try to help.  The least we can all do when coming for
assistance is to try and do some basic troubleshooting and research on
our own, so as not to waste other people's time and annoy them.  This
cannot turn into a newbie support list, or all those aforementioned
fol

RE: Training (was RE: Error message in logs)

[John Aldrich]

Thank you, James. I will keep that in mind should the opportunity arise.



From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Monday, August 01, 2011 12:15 PM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

Training ain't all about money. You can learn most everything you need to
know about GPOs from a small lab which could be set up on a couple of old
PCs, coupled with some online docs. I know you also said you were low on
spare time, but when things are quiet I usually tinker with some test stuff,
which is how I'm trying to learn my XenApp 6.5 skills at the moment.
On 1 August 2011 17:08, John Aldrich  wrote:
Agreed. Not ENTIRELY the community, at least. I admit, I am frustrated and
overloaded here. That being said, is it REALLY too much to ask that we NOT
continue flogging a particular dead horse? I know I need more training. I
have no money for said training, and it's extremely frustrating when people
insist on posting "that's elementary. You should just go get more training."
That sort of reply is NOT helpful.



From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Monday, August 01, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

John, are you starting to notice a pattern here?
 
You have a problem.  Someone helps you, probably not as well as you'd like,
or in the manner you like, and offers some unsolicited comment about the way
you ask for help, or your reputation for accepting help, etc.
You rant.
Someone explains things.
You calm down.
 
This has been a pretty common cycle, and the frequency with which it repeats
should be telling that the fault is not on the community. 
On Mon, Aug 1, 2011 at 11:54 AM, John Aldrich 
wrote:
Thank you, Andrew, for your reasoned words. I am extremely frustrated and
overloaded with work right now, and when people insist on saying "pay for
your own training" when I *specifically* requested that we cease flogging
that particular deceased equine, I lash out.

I would like to apologize to the list in general. However, my point remains:
I have no money, whatsoever, for training. I am doing good to pay my bills
as it is. Thank you for understanding.

Should conditions change such that I can afford to pay my bills, eat AND
keep a roof over my head as well as pay for training, I will do so. Please
let's not continue with "sometimes you just have to pay for your own
training" for the time being. Please.

This has been a VERY hectic Monday and it's not even half over yet. Sorry
for any hard feelings. I have tried to take to heart the need to try to find
the answers on my own. Obviously some folks didn't notice that I had not had
much luck searching, but I did try. Thank you.



From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Monday, August 01, 2011 11:41 AM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

Biting the hands that feed you is always bad policy.

If you insist on taking that approach, you might consider doing so off-line
so you don't destroy what little sympathy appears to remain for you on this
list.

Unless, of course, your real goal is just to annoy and create confusion, in
which case, carry on.

ASB
http://about.me/Andrew.S.Baker
Harnessing the Advantages of Technology for the SMB market…


On Mon, Aug 1, 2011 at 11:11 AM, John Aldrich 
wrote:
Apparently you didn't read my initial post. I DID Google. I found a page
that applied to Windows 2000, but supposedly said it applied to 2003 as
well. Guess what. It didn't. I posted on here and CONTINUED to search. I
finally found another page that refers to a different KB article that
explains that it's likely a corrupt local GPO. So, yes, I did do "due
diligence."  Sorry if I didn't do enough for you or do it fast
enough! 




-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov]
Sent: Monday, August 01, 2011 10:56 AM
To: NT System Admin Issues
Subject: RE: Training (was RE: Error message in logs)

That does not mean that the list should then provide that training to
you for free.  I will not speak in broad generalizations, but, in
regards to your most recent emergency, you could have found out most of
the information you solicited from the list on the internet for free.
There is an expectation that you will put some good faith effort into
solving your own problems before coming to the list.

There are some great, intelligent, experienced folks on this list, and
they really try to help.  The least we can all do when coming for
assistance is to try and do some basic troubleshooting and research on
our own, so as not to waste other people's time and annoy them.  This
cannot turn into a newbie support list, or all those aforementioned
folks are going to leave.  Please stop abusing this list so that it can
remain the valuable resource it is.

Bill Mayo

---

RE: Training (was RE: Error message in logs)

[John Aldrich]

Agreed. Not ENTIRELY the community, at least. I admit, I am frustrated and
overloaded here. That being said, is it REALLY too much to ask that we NOT
continue flogging a particular dead horse? I know I need more training. I
have no money for said training, and it's extremely frustrating when people
insist on posting "that's elementary. You should just go get more training."
That sort of reply is NOT helpful.



From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Monday, August 01, 2011 12:03 PM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

John, are you starting to notice a pattern here?
 
You have a problem.  Someone helps you, probably not as well as you'd like,
or in the manner you like, and offers some unsolicited comment about the way
you ask for help, or your reputation for accepting help, etc.
You rant.
Someone explains things.
You calm down.
 
This has been a pretty common cycle, and the frequency with which it repeats
should be telling that the fault is not on the community. 
On Mon, Aug 1, 2011 at 11:54 AM, John Aldrich 
wrote:
Thank you, Andrew, for your reasoned words. I am extremely frustrated and
overloaded with work right now, and when people insist on saying "pay for
your own training" when I *specifically* requested that we cease flogging
that particular deceased equine, I lash out.

I would like to apologize to the list in general. However, my point remains:
I have no money, whatsoever, for training. I am doing good to pay my bills
as it is. Thank you for understanding.

Should conditions change such that I can afford to pay my bills, eat AND
keep a roof over my head as well as pay for training, I will do so. Please
let's not continue with "sometimes you just have to pay for your own
training" for the time being. Please.

This has been a VERY hectic Monday and it's not even half over yet. Sorry
for any hard feelings. I have tried to take to heart the need to try to find
the answers on my own. Obviously some folks didn't notice that I had not had
much luck searching, but I did try. Thank you.



From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Monday, August 01, 2011 11:41 AM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

Biting the hands that feed you is always bad policy.

If you insist on taking that approach, you might consider doing so off-line
so you don't destroy what little sympathy appears to remain for you on this
list.

Unless, of course, your real goal is just to annoy and create confusion, in
which case, carry on.

ASB
http://about.me/Andrew.S.Baker
Harnessing the Advantages of Technology for the SMB market…


On Mon, Aug 1, 2011 at 11:11 AM, John Aldrich 
wrote:
Apparently you didn't read my initial post. I DID Google. I found a page
that applied to Windows 2000, but supposedly said it applied to 2003 as
well. Guess what. It didn't. I posted on here and CONTINUED to search. I
finally found another page that refers to a different KB article that
explains that it's likely a corrupt local GPO. So, yes, I did do "due
diligence."  Sorry if I didn't do enough for you or do it fast
enough! 




-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov]
Sent: Monday, August 01, 2011 10:56 AM
To: NT System Admin Issues
Subject: RE: Training (was RE: Error message in logs)

That does not mean that the list should then provide that training to
you for free.  I will not speak in broad generalizations, but, in
regards to your most recent emergency, you could have found out most of
the information you solicited from the list on the internet for free.
There is an expectation that you will put some good faith effort into
solving your own problems before coming to the list.

There are some great, intelligent, experienced folks on this list, and
they really try to help.  The least we can all do when coming for
assistance is to try and do some basic troubleshooting and research on
our own, so as not to waste other people's time and annoy them.  This
cannot turn into a newbie support list, or all those aforementioned
folks are going to leave.  Please stop abusing this list so that it can
remain the valuable resource it is.

Bill Mayo

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Monday, August 01, 2011 10:26 AM
To: NT System Admin Issues
Subject: Training (was RE: Error message in logs)


Guys, I DO understand where you're coming from. Really. But do you not
recall my diatribe last week about not having any money to pay for
training?
I wasn't speaking JUST about my employer, I was speaking about myself
too. I really don't have the money for training. I am living paycheck to
paycheck and STILL coming up short every month, so I really don't want
to hear about "pay for training yourself!" And trust me, I'm not livin

RE: Training (was RE: Error message in logs)

[John Aldrich]

Thank you, Andrew, for your reasoned words. I am extremely frustrated and
overloaded with work right now, and when people insist on saying "pay for
your own training" when I *specifically* requested that we cease flogging
that particular deceased equine, I lash out.

I would like to apologize to the list in general. However, my point remains:
I have no money, whatsoever, for training. I am doing good to pay my bills
as it is. Thank you for understanding. 

Should conditions change such that I can afford to pay my bills, eat AND
keep a roof over my head as well as pay for training, I will do so. Please
let's not continue with "sometimes you just have to pay for your own
training" for the time being. Please.

This has been a VERY hectic Monday and it's not even half over yet. Sorry
for any hard feelings. I have tried to take to heart the need to try to find
the answers on my own. Obviously some folks didn't notice that I had not had
much luck searching, but I did try. Thank you.



From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Monday, August 01, 2011 11:41 AM
To: NT System Admin Issues
Subject: Re: Training (was RE: Error message in logs)

Biting the hands that feed you is always bad policy.

If you insist on taking that approach, you might consider doing so off-line
so you don't destroy what little sympathy appears to remain for you on this
list.

Unless, of course, your real goal is just to annoy and create confusion, in
which case, carry on.

ASB
http://about.me/Andrew.S.Baker
Harnessing the Advantages of Technology for the SMB market…


On Mon, Aug 1, 2011 at 11:11 AM, John Aldrich 
wrote:
Apparently you didn't read my initial post. I DID Google. I found a page
that applied to Windows 2000, but supposedly said it applied to 2003 as
well. Guess what. It didn't. I posted on here and CONTINUED to search. I
finally found another page that refers to a different KB article that
explains that it's likely a corrupt local GPO. So, yes, I did do "due
diligence."  Sorry if I didn't do enough for you or do it fast
enough! 




-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov]
Sent: Monday, August 01, 2011 10:56 AM
To: NT System Admin Issues
Subject: RE: Training (was RE: Error message in logs)

That does not mean that the list should then provide that training to
you for free.  I will not speak in broad generalizations, but, in
regards to your most recent emergency, you could have found out most of
the information you solicited from the list on the internet for free.
There is an expectation that you will put some good faith effort into
solving your own problems before coming to the list.

There are some great, intelligent, experienced folks on this list, and
they really try to help.  The least we can all do when coming for
assistance is to try and do some basic troubleshooting and research on
our own, so as not to waste other people's time and annoy them.  This
cannot turn into a newbie support list, or all those aforementioned
folks are going to leave.  Please stop abusing this list so that it can
remain the valuable resource it is.

Bill Mayo

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Monday, August 01, 2011 10:26 AM
To: NT System Admin Issues
Subject: Training (was RE: Error message in logs)


Guys, I DO understand where you're coming from. Really. But do you not
recall my diatribe last week about not having any money to pay for
training?
I wasn't speaking JUST about my employer, I was speaking about myself
too. I really don't have the money for training. I am living paycheck to
paycheck and STILL coming up short every month, so I really don't want
to hear about "pay for training yourself!" And trust me, I'm not living
high on the hog.
There's no champagne and caviar or expensive cars, etc. If you really
want me to get training, give me the money and I'll gladly go get
training.
Really, just tell me where to find the money and I'll do it.

Thanks!


-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Monday, August 01, 2011 10:05 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

+10,000,000

I think the last time I had an employer pay for my training was in, uh,
1995 or so?


-Original Message-
From: Webster [mailto:webs...@carlwebster.com]
Sent: Monday, August 01, 2011 10:02 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Sometimes YOU have to invest YOUR own money in YOUR own training.  Pays
off in the LONG term.

Just my $0.02US worth of advice.


Carl Webster
Consultant and Citrix Technology Professional http://www.CarlWebster.com


> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> Subject: RE: Error message in logs
>
> Ok, I take it back. There are some GPOs, but they a

RE: Training (was RE: Error message in logs)

[John Aldrich]

Apparently you didn't read my initial post. I DID Google. I found a page
that applied to Windows 2000, but supposedly said it applied to 2003 as
well. Guess what. It didn't. I posted on here and CONTINUED to search. I
finally found another page that refers to a different KB article that
explains that it's likely a corrupt local GPO. So, yes, I did do "due
diligence."  Sorry if I didn't do enough for you or do it fast
enough! 




-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov] 
Sent: Monday, August 01, 2011 10:56 AM
To: NT System Admin Issues
Subject: RE: Training (was RE: Error message in logs)

That does not mean that the list should then provide that training to
you for free.  I will not speak in broad generalizations, but, in
regards to your most recent emergency, you could have found out most of
the information you solicited from the list on the internet for free.
There is an expectation that you will put some good faith effort into
solving your own problems before coming to the list.

There are some great, intelligent, experienced folks on this list, and
they really try to help.  The least we can all do when coming for
assistance is to try and do some basic troubleshooting and research on
our own, so as not to waste other people's time and annoy them.  This
cannot turn into a newbie support list, or all those aforementioned
folks are going to leave.  Please stop abusing this list so that it can
remain the valuable resource it is.

Bill Mayo

-----Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Monday, August 01, 2011 10:26 AM
To: NT System Admin Issues
Subject: Training (was RE: Error message in logs)


Guys, I DO understand where you're coming from. Really. But do you not
recall my diatribe last week about not having any money to pay for
training?
I wasn't speaking JUST about my employer, I was speaking about myself
too. I really don't have the money for training. I am living paycheck to
paycheck and STILL coming up short every month, so I really don't want
to hear about "pay for training yourself!" And trust me, I'm not living
high on the hog.
There's no champagne and caviar or expensive cars, etc. If you really
want me to get training, give me the money and I'll gladly go get
training.
Really, just tell me where to find the money and I'll do it.

Thanks!


-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Monday, August 01, 2011 10:05 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

+10,000,000

I think the last time I had an employer pay for my training was in, uh,
1995 or so?


-Original Message-
From: Webster [mailto:webs...@carlwebster.com]
Sent: Monday, August 01, 2011 10:02 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Sometimes YOU have to invest YOUR own money in YOUR own training.  Pays
off in the LONG term.

Just my $0.02US worth of advice.


Carl Webster
Consultant and Citrix Technology Professional http://www.CarlWebster.com


> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> Subject: RE: Error message in logs
> 
> Ok, I take it back. There are some GPOs, but they are in the nature of

> password policy. I didn't realize those were "GPOs." (Yes, I realize 
> I'm woefully undereducated, but I have neither the time nor the money 
> to do anything about it at this point, so let's skip that whole 
> diatribe, shall
> we???)


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint

Training (was RE: Error message in logs)

[John Aldrich]

Guys, I DO understand where you're coming from. Really. But do you not
recall my diatribe last week about not having any money to pay for training?
I wasn't speaking JUST about my employer, I was speaking about myself too. I
really don't have the money for training. I am living paycheck to paycheck
and STILL coming up short every month, so I really don't want to hear about
"pay for training yourself!" And trust me, I'm not living high on the hog.
There's no champagne and caviar or expensive cars, etc. If you really want
me to get training, give me the money and I'll gladly go get training.
Really, just tell me where to find the money and I'll do it.

Thanks!


-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Monday, August 01, 2011 10:05 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

+10,000,000

I think the last time I had an employer pay for my training was in, uh, 1995
or so?


-Original Message-
From: Webster [mailto:webs...@carlwebster.com] 
Sent: Monday, August 01, 2011 10:02 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Sometimes YOU have to invest YOUR own money in YOUR own training.  Pays off
in the LONG term.

Just my $0.02US worth of advice.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> Subject: RE: Error message in logs
> 
> Ok, I take it back. There are some GPOs, but they are in the nature of
> password policy. I didn't realize those were "GPOs." (Yes, I realize I'm
> woefully undereducated, but I have neither the time nor the money to do
> anything about it at this point, so let's skip that whole diatribe, shall
> we???)


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Error message in logs

[John Aldrich]

Thank you, Webster. IF I HAD THE MONEY, I WOULD! TRUST me! Due to
circumstances beyond my control, I routinely have more month than money,
speaking strictly from a personal standpoint, so thus have no way to fund
training!!! My employer does not have the funds for training either, so
that's out as well. Once I have this crisis resolved I will try and take
time to read the aforementioned document on GPOs.




-Original Message-
From: Webster [mailto:webs...@carlwebster.com] 
Sent: Monday, August 01, 2011 10:02 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Sometimes YOU have to invest YOUR own money in YOUR own training.  Pays off
in the LONG term.

Just my $0.02US worth of advice.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


> -Original Message-
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> Subject: RE: Error message in logs
> 
> Ok, I take it back. There are some GPOs, but they are in the nature of
> password policy. I didn't realize those were "GPOs." (Yes, I realize I'm
> woefully undereducated, but I have neither the time nor the money to do
> anything about it at this point, so let's skip that whole diatribe, shall
> we???)


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Error message in logs

[John Aldrich]

Thanks. The command, "secedit /refreshpolicy machine_policy /enforce" does
not work on Win2003. Someone at Microsoft might want to update that page to
show the current command. 


-Original Message-
From: Damien Solodow [mailto:damien.solo...@harrison.edu] 
Sent: Monday, August 01, 2011 10:10 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Pop open a command prompt and do "gpupdate /force"

Also, the KB article you mention still applies to 2003. 

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Monday, August 01, 2011 10:07 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Rick, thanks for trying to help me learn. I will try to take the time to
study this later. Unfortunately, right now I'm in "crisis mode" and need
help figuring out how to fix this problem. I found the following article,
but as I mentioned, it applies to Windows 2000 Server, not 2003, so it
doesn't really apply. Can anyone enlighten me as to how to reapply the
policies WITHOUT rebooting, please?




-Original Message-
From: Gasper, Rick [mailto:rickgas...@kings.edu]
Sent: Monday, August 01, 2011 9:18 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Yo may have to sign up for that site.

Do a google for the these terms: group policy tutorials you will find a lot
of info.

If you need help after you have done that let us know.


Rick Gasper
Manager, Network Services
King's College
133 N. River St
Wilkes-Barre PA  18711
PH: 570-208-5845
Fax: 570-208-6072
Cell: 570-760-0335
rickgas...@kings.edu


Don't become a phishing victim!!
King's College and other reputable organizations will never use email to
request that you reply with your password, Social Security number or
confidential personal information.





-Original Message-
From: Gasper, Rick [mailto:rickgas...@kings.edu]
Sent: Monday, August 01, 2011 9:15 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Try here:
http://searchwindowsserver.techtarget.com/tutorial/Microsoft-Group-Policy-Tu
torial

I used google and typed in Basic group policy tutorials

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Monday, August 01, 2011 9:12 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

I ran the command "gpresult" at the command prompt. Was that what I was
supposed to do? Gpedit.msc didn't have a "results wizard" option, nor could
I find one in ADUC. This is what I get for the "applied group policy
objects":
Applied Group Policy Objects
-
Default Domain Controllers Policy
Default Domain Policy
Local Group Policy

Also, where do I *find* these GPOs? Pretend I have no clue what I'm doing
(because, really, I don't!!!) I have looked in ADUC and I don't see them.
Thanks!



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:54 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

Just fire up the GP Management Console and run the Results Wizard, it'll
tell you all the GPOs that are applying to that server.
On 1 August 2011 13:51, John Aldrich  wrote:
Negative. No "legal GPOs." I looked at the local policy. I'll go look at
domain policy.



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:47 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

There'll be the Default Domain Policy, at least. Unless you have blocked
inheritance on the OU?

Some of the Google hits indicate issues with a Legal Notice GPO with a
carriage return in it. IIRC the only way to do this effectively is by
editing the binary data, so it might be something beyond the scope of a
standard GPO. You don't have one of those setup?
On 1 August 2011 13:43, John Aldrich  wrote:
I concur with that diagnosis. But that's the strange part. AFAIK there *are*
no GPOs. At least none that I have created and installed. I suppose one of
the supporting vendors could have done so. Guess I'll have to fire up GPEDIT
and see what the heck is going on.



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:39 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

Sounds like a problem with Group Policy Objects. What sort of GPOs do you
have applied to this server?
On 1 August 2011 13:32, John Aldrich  wrote:
I'm getting an error message in my log files on Server 2003. The log entry
is as follows:
Security policies were propagated with warning. 0xb : An attempt was made to
load a program with an incorrect format.

The error message says to search Microsoft for "troubleshooing 1202 events."
Well, apparently my search is f-ed up right now,

RE: Error message in logs

[John Aldrich]

Ok, I think I found the answer. Here's the information I found. How safe is
this to apply to a DC?
http://support.microsoft.com/kb/278316/

Could I just copy the local GPO database from another DC?




-Original Message-
From: Gasper, Rick [mailto:rickgas...@kings.edu] 
Sent: Monday, August 01, 2011 9:18 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Yo may have to sign up for that site.

Do a google for the these terms: group policy tutorials you will find a lot
of info.

If you need help after you have done that let us know.


Rick Gasper
Manager, Network Services
King's College
133 N. River St
Wilkes-Barre PA  18711
PH: 570-208-5845
Fax: 570-208-6072
Cell: 570-760-0335
rickgas...@kings.edu


Don't become a phishing victim!!
King's College and other reputable organizations will never use email to
request that you reply with your password, Social Security number or
confidential personal information.





-Original Message-
From: Gasper, Rick [mailto:rickgas...@kings.edu]
Sent: Monday, August 01, 2011 9:15 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

Try here:
http://searchwindowsserver.techtarget.com/tutorial/Microsoft-Group-Policy-Tu
torial

I used google and typed in Basic group policy tutorials

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Monday, August 01, 2011 9:12 AM
To: NT System Admin Issues
Subject: RE: Error message in logs

I ran the command "gpresult" at the command prompt. Was that what I was
supposed to do? Gpedit.msc didn't have a "results wizard" option, nor could
I find one in ADUC. This is what I get for the "applied group policy
objects":
Applied Group Policy Objects
-
Default Domain Controllers Policy
Default Domain Policy
Local Group Policy

Also, where do I *find* these GPOs? Pretend I have no clue what I'm doing
(because, really, I don't!!!) I have looked in ADUC and I don't see them.
Thanks!



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:54 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

Just fire up the GP Management Console and run the Results Wizard, it'll
tell you all the GPOs that are applying to that server.
On 1 August 2011 13:51, John Aldrich  wrote:
Negative. No "legal GPOs." I looked at the local policy. I'll go look at
domain policy.



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:47 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

There'll be the Default Domain Policy, at least. Unless you have blocked
inheritance on the OU?

Some of the Google hits indicate issues with a Legal Notice GPO with a
carriage return in it. IIRC the only way to do this effectively is by
editing the binary data, so it might be something beyond the scope of a
standard GPO. You don't have one of those setup?
On 1 August 2011 13:43, John Aldrich  wrote:
I concur with that diagnosis. But that's the strange part. AFAIK there *are*
no GPOs. At least none that I have created and installed. I suppose one of
the supporting vendors could have done so. Guess I'll have to fire up GPEDIT
and see what the heck is going on.



From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Monday, August 01, 2011 8:39 AM
To: NT System Admin Issues
Subject: Re: Error message in logs

Sounds like a problem with Group Policy Objects. What sort of GPOs do you
have applied to this server?
On 1 August 2011 13:32, John Aldrich  wrote:
I'm getting an error message in my log files on Server 2003. The log entry
is as follows:
Security policies were propagated with warning. 0xb : An attempt was made to
load a program with an incorrect format.

The error message says to search Microsoft for "troubleshooing 1202 events."
Well, apparently my search is f-ed up right now, because I can't FIND
anything on Microsoft's websites about this error! The closest I can come is
a KB article from Windows 2000 Server which includes commands that don't
work in Windows 2003 (registry editing and then issuing a "secpol
/enforce..." command, which is invalid in Windows 2003.)

When I look at the security log file, I see the following error: "Saturday,
July 30, 2011 9:23:58 AM Error 11: An attempt was made to load a program
with an incorrect format.
   Error creating database.
Configuration engine was initialized with one or more errors."

Anyone know what the hell is going on here and how do I fix it? I've *tried*
Googling, and that's not producing many results. Matter of fact, Google is
how I found the Windows 2003 issue.

It seems oddly coincidental that similar errors occur on whichever of my
servers has Vipre Enterprise Server at the moment. Could be coincidence, but
could be related, in my mind. I