RE: Communications slow between two servers

[Randal, Phil]

The devil's in the detail.

Which OS?

Scalable networking pack on 2003 SP2 can cause these issues.  Try turning off 
TCP offload, Receive Side Scaling, etc, and see if that improves anything.

Oh, and check duplex settings on server and switch.

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: 26 February 2013 15:46
To: NT System Admin Issues
Subject: Re: Communications slow between two servers

NIC drivers?

On Tue, Feb 26, 2013 at 8:57 AM, Eric Brouwer 
ithelp.e...@gmail.commailto:ithelp.e...@gmail.com wrote:
Greetings,
I have an odd communications issue that I just can't pin down.  I have two 
existing servers, X and Y.  X will be replaced by a new server, Z.  Then Y will 
be replaced by X, and Y decommissioned.  These are rather simple file servers.

When we brought Z online, we copied data from X to Z via Smart Sync and got 
fantastic transfer speeds.  When we went to copy from Y to X, however, speeds 
are horrible.  What should take several hours is taking days.  We then tested 
communications between Y and Z and speeds are great again.
All servers are on the same switch and reside in the same rack.  Why would 2 
servers communicate so slowly?
X to Z = fast
Y to X = slow
Y to Z = Fast
Results are the same whether we push or pull data.

Thank you,

Eric


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Advice on migrating WSUS 3.0 SP2 from Win2003 32bit to Win2008 R2

[Randal, Phil]

It's also worth installing KB2734608 as soon as you've installed WSUS 3.0SP2.

Cheers,

Phil


-Original Message-
From: Michael Leone [mailto:oozerd...@gmail.com]
Sent: 05 February 2013 20:38
To: NT System Admin Issues
Subject: Re: Advice on migrating WSUS 3.0 SP2 from Win2003 32bit to Win2008 R2

So the boss figures that if we are creating a new database, we might as well 
install SQL Server 2008 R2 Express, and use that (locally). So we'll go with 
that, I guess.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: MS site?

[Randal, Phil]

It's not happy.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: 01 February 2013 14:54
To: NT System Admin Issues
Subject: MS site?

Anyone else having trouble getting to this link?

http://support.microsoft.comhttp://support.microsoft.com/
Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.commailto:

[cid:image001.jpg@01CE008D.2C64B7F0]

The Guardian Life Insurance Company of America

www.guardianlife.comhttp://www.guardianlife.com/



- This message, and any attachments to 
it, may contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, you are notified that any use, dissemination, distribution, 
copying, or communication of this message is strictly prohibited. If you have 
received this message in error, please notify the sender immediately by return 
e-mail and delete the message and any attachments. Thank you.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmininline: image001.jpg

RE: MS site?

[Randal, Phil]

It lies, it's not just me :)

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: Webster [mailto:webs...@carlwebster.com]
Sent: 01 February 2013 15:01
To: NT System Admin Issues
Subject: RE: MS site?

http://www.downforeveryoneorjustme.com/support.microsoft.com


Thanks


Webster

From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: Friday, February 01, 2013 8:54 AM
To: NT System Admin Issues
Subject: MS site?

Anyone else having trouble getting to this link?

http://support.microsoft.comhttp://support.microsoft.com/

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Been a long day today, but I won...

[Randal, Phil]

Someone's blocking ICMP Fragmentation Needed messages on your firewall(s), then?

A common firewall admin beginner's mistake :-)

http://packetlife.net/blog/2008/aug/18/path-mtu-discovery/

Cheers,

Phil

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: 30 January 2013 06:42
To: NT System Admin Issues
Subject: Been a long day today, but I won...

So, it's month end, and our UK office is noticing that emails are not 
processing outbound from their office. All of their emails come through the US 
server, to be delivered wherever, and there are some big emails (4-8mbytes) 
with proposals and orders and such, and they're getting desperate. Lots of 
little emails are stuck in queue too, though if left alone they seem to trickle 
out, while the big messages go to retry status.

It's already been a long day for me, having been woken up at 3am because they 
switched over to a new DSL provider, and couldn't log into the router to set up 
the PPOA configuration. (pay attention - that's a clue...)

While I'm trying to troubleshoot this, the nominal IT manager above me is 
freaking out and deleting messages from the outbound queue on the UK Exchange 
server, restarting services multiple times, rebooting the UK server, and 
generally showing all of the patience and investigative skill of a 4yo.

I leave the office at 18:00 to pick up my son at daycare, and arrive home and 
start ignoring everything else except the problem with Exchange. (I have a very 
good wife, and I deeply appreciate her patience with me!)

I get frustrated, and turn up logging on a bunch of Exchange services, then 
bounce both the UK and US servers remotely, just so I have a clean starting 
point in the logs.

Finally I notice a 4000 message from MSExchangeTransport on the US server 
(along with some 4006 messages from the same source on the UK server), and hit 
paydirt.

EventID.net turns up reference to MTU sizes.

I adjust the firewall in our UK office from 1500 to 1450, and transport of my 
test message with a 12mbyte text attachment flies through.

I test once more with the same attachment, just to be sure.

Success.

I am now going to bed.

Good night.

Kurt

PS - I'll turn down the logging tomorrow, when I have a few minutes to breathe 
at work.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Been a long day today, but I won...

[Randal, Phil]

You'd need to ensure that incoming  ICMP can't fragment (type 3, code 4) 
messages get through.

Cheers,

Phil

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: 30 January 2013 15:26
To: NT System Admin Issues
Subject: Re: Been a long day today, but I won...

No icmp is blocked - hell, nothing is blocked outbound, which I'm unhappy with, 
but have to follow policy.

Don't know why it wasn't detected.

Kurt

On Wed, Jan 30, 2013 at 3:30 AM, Randal, Phil phil.ran...@hoopleltd.co.uk 
wrote:
 Someone's blocking ICMP Fragmentation Needed messages on your firewall(s), 
 then?

 A common firewall admin beginner's mistake :-)

 http://packetlife.net/blog/2008/aug/18/path-mtu-discovery/

 Cheers,

 Phil

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: 30 January 2013 06:42
 To: NT System Admin Issues
 Subject: Been a long day today, but I won...

 So, it's month end, and our UK office is noticing that emails are not 
 processing outbound from their office. All of their emails come through the 
 US server, to be delivered wherever, and there are some big emails 
 (4-8mbytes) with proposals and orders and such, and they're getting 
 desperate. Lots of little emails are stuck in queue too, though if left alone 
 they seem to trickle out, while the big messages go to retry status.

 It's already been a long day for me, having been woken up at 3am 
 because they switched over to a new DSL provider, and couldn't log 
 into the router to set up the PPOA configuration. (pay attention - 
 that's a clue...)

 While I'm trying to troubleshoot this, the nominal IT manager above me is 
 freaking out and deleting messages from the outbound queue on the UK Exchange 
 server, restarting services multiple times, rebooting the UK server, and 
 generally showing all of the patience and investigative skill of a 4yo.

 I leave the office at 18:00 to pick up my son at daycare, and arrive 
 home and start ignoring everything else except the problem with 
 Exchange. (I have a very good wife, and I deeply appreciate her 
 patience with me!)

 I get frustrated, and turn up logging on a bunch of Exchange services, then 
 bounce both the UK and US servers remotely, just so I have a clean starting 
 point in the logs.

 Finally I notice a 4000 message from MSExchangeTransport on the US server 
 (along with some 4006 messages from the same source on the UK server), and 
 hit paydirt.

 EventID.net turns up reference to MTU sizes.

 I adjust the firewall in our UK office from 1500 to 1450, and transport of my 
 test message with a 12mbyte text attachment flies through.

 I test once more with the same attachment, just to be sure.

 Success.

 I am now going to bed.

 Good night.

 Kurt

 PS - I'll turn down the logging tomorrow, when I have a few minutes to 
 breathe at work.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 “Any opinion expressed in this e-mail or any attached files are those of the 
 individual and not necessarily those of Hoople Ltd. You should be aware that 
 Hoople Ltd. monitors its email service. This e-mail and any attached files 
 are confidential and intended solely for the use of the addressee. This 
 communication may contain material protected by law from being passed on. If 
 you are not the intended recipient and have received this e-mail in error, 
 you are advised that any use, dissemination, forwarding, printing or copying 
 of this e-mail is strictly prohibited. If you have received this e-mail in 
 error please contact the sender immediately and destroy all copies of it.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Max Password Age

[Randal, Phil]

As far as I know, they'll all end up with expired passwords.

Easiest workaround is to reduce the max password age by one day every day for 
the next 30 days.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: Heaton, Joseph@Wildlife [mailto:joseph.hea...@wildlife.ca.gov]
Sent: 09 January 2013 15:36
To: NT System Admin Issues
Subject: Max Password Age

If my policy currently is 90 days, and I then shorten that to 60 days, does the 
clock reset to 0, or will everyone that's in the 60-89 day window going to have 
expired passwords?


Thanks,


Joe Heaton
Enterprise Server Support
CA Department of Fish and Wildlife
1807 13th Street, Suite 201
Sacramento, CA  95811
Desk:  (916) 557-3422



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Window 8 on your PC

[Randal, Phil]

Correct me if I'm wrong, but the 'log out' 'button' being hidden the way it is 
in Windows 8 and Server 2012 will be a nightmare for terminal server admins.

Ugh.

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

-Original Message-
From: James Hill [mailto:falc...@gmail.com]
Sent: 21 November 2012 08:44
To: NT System Admin Issues
Subject: RE: Window 8 on your PC

The location of log off and the shutdown menu are both a nuisance.

I have a 6 year old and a 4 year old that were placed in front of Windows 8 and 
were installing apps from the store, playing games etc without any tuition.  I 
showed them how to do a shutdown and that was about it.

James.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Wednesday, 21 November 2012 8:08 AM
To: NT System Admin Issues
Subject: Re: Window 8 on your PC

We won't be deploying it this school year, that's for sure. It's just too late 
and we would get a lot of negative feedback. Also we tend to hold off on such 
deployments until the product has a little shake-down time and we get a break 
to do upgrades.

Personally, I'm not looking forward to 8 on the desktop in a lab environment. 
One nitpick of my own: It's very difficult to log off, which is something every 
7-18 year old in our schools will have to do. While some know that you can 
quickly find a logout with Ctrl-Alt-Del, most don't. Last, most of the software 
run by our users aren't in the DCIM* interface. So really, there isn't a 
feature that is yet pushing us to Win8 yet.

I have seen start-button replacements, like Start8, but we like to go with the 
Officially supported versions of things if we can. Thus, if Microsoft makes it 
an option to stick people to the Desktop and give them a way to launch 
programs/logoff, I'll give it another try.

(* DCIM - Don't call it Metro)


--Matt Ross
Ephrata School District


- Original Message -
From: David Lum
[mailto:david@nwea.org]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 20 Nov 2012
13:07:38 -0800
Subject: Window 8 on your PC


 Are you guys changing your Windows 8 UI to be more like Win7 or
 leaving it as-is and learning new tricks?
 David Lum
 Sr. Systems Engineer // NWEATM
 Office 503.548.5229 // Cell (voice/text) 503.267.9764


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Window 8 on your PC

[Randal, Phil]

The users will jus disconnect rather than logging out.

Phil

-- 
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk


-Original Message-
From: James Hill [mailto:falc...@gmail.com] 
Sent: 21 November 2012 10:50
To: NT System Admin Issues
Subject: RE: Window 8 on your PC

Are you saying it will be difficult for the admins to use or difficult for the 
admins as users won't be able to work it out?

The admins should be able to quickly work it out and after that it is easy.

Users have always(since remote desktop was invented) either not known how to 
log off or couldn't be bothered.   They just click on the X and disconnect (so 
us admins have to configure session timeouts etc to eventually log off the 
session).  So no changes in that area for Server 2012 for the users imo.

James.

-Original Message-
From: Randal, Phil [mailto:phil.ran...@hoopleltd.co.uk]
Sent: Wednesday, 21 November 2012 7:49 PM
To: NT System Admin Issues
Subject: RE: Window 8 on your PC

Correct me if I'm wrong, but the 'log out' 'button' being hidden the way it is 
in Windows 8 and Server 2012 will be a nightmare for terminal server admins.

Ugh.

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

-Original Message-
From: James Hill [mailto:falc...@gmail.com]
Sent: 21 November 2012 08:44
To: NT System Admin Issues
Subject: RE: Window 8 on your PC

The location of log off and the shutdown menu are both a nuisance.

I have a 6 year old and a 4 year old that were placed in front of Windows 8 and 
were installing apps from the store, playing games etc without any tuition.  I 
showed them how to do a shutdown and that was about it.

James.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Wednesday, 21 November 2012 8:08 AM
To: NT System Admin Issues
Subject: Re: Window 8 on your PC

We won't be deploying it this school year, that's for sure. It's just too late 
and we would get a lot of negative feedback. Also we tend to hold off on such 
deployments until the product has a little shake-down time and we get a break 
to do upgrades.

Personally, I'm not looking forward to 8 on the desktop in a lab environment. 
One nitpick of my own: It's very difficult to log off, which is something every 
7-18 year old in our schools will have to do. While some know that you can 
quickly find a logout with Ctrl-Alt-Del, most don't. Last, most of the software 
run by our users aren't in the DCIM* interface. So really, there isn't a 
feature that is yet pushing us to Win8 yet.

I have seen start-button replacements, like Start8, but we like to go with the 
Officially supported versions of things if we can. Thus, if Microsoft makes it 
an option to stick people to the Desktop and give them a way to launch 
programs/logoff, I'll give it another try.

(* DCIM - Don't call it Metro)


--Matt Ross
Ephrata School District


- Original Message -
From: David Lum
[mailto:david@nwea.org]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 20 Nov 2012
13:07:38 -0800
Subject: Window 8 on your PC


 Are you guys changing your Windows 8 UI to be more like Win7 or 
 leaving it as-is and learning new tricks?
 David Lum
 Sr. Systems Engineer // NWEATM
 Office 503.548.5229 // Cell (voice/text) 503.267.9764


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing

RE: Window 8 on your PC

[Randal, Phil]

Fabulous! 

But it should have been a standard feature.

Cheers,

Phil

-- 
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk


-Original Message-
From: Steve Burkett [mailto:steve.burk...@stemcor.com] 
Sent: 21 November 2012 10:50
To: NT System Admin Issues
Subject: RE: Window 8 on your PC

You can create a Shutdown/Restart/Logoff tile for the Start screen with a bit 
of PowerShell:
http://gallery.technet.microsoft.com/scriptcenter/Create-a-ShutdownRestartLog-37c8111d


-Original Message-
From: Randal, Phil [mailto:phil.ran...@hoopleltd.co.uk]
Sent: 21 November 2012 09:49
To: NT System Admin Issues
Subject: RE: Window 8 on your PC

Correct me if I'm wrong, but the 'log out' 'button' being hidden the way it is 
in Windows 8 and Server 2012 will be a nightmare for terminal server admins.

Ugh.

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

-Original Message-
From: James Hill [mailto:falc...@gmail.com]
Sent: 21 November 2012 08:44
To: NT System Admin Issues
Subject: RE: Window 8 on your PC

The location of log off and the shutdown menu are both a nuisance.

I have a 6 year old and a 4 year old that were placed in front of Windows 8 and 
were installing apps from the store, playing games etc without any tuition.  I 
showed them how to do a shutdown and that was about it.

James.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Wednesday, 21 November 2012 8:08 AM
To: NT System Admin Issues
Subject: Re: Window 8 on your PC

We won't be deploying it this school year, that's for sure. It's just too late 
and we would get a lot of negative feedback. Also we tend to hold off on such 
deployments until the product has a little shake-down time and we get a break 
to do upgrades.

Personally, I'm not looking forward to 8 on the desktop in a lab environment. 
One nitpick of my own: It's very difficult to log off, which is something every 
7-18 year old in our schools will have to do. While some know that you can 
quickly find a logout with Ctrl-Alt-Del, most don't. Last, most of the software 
run by our users aren't in the DCIM* interface. So really, there isn't a 
feature that is yet pushing us to Win8 yet.

I have seen start-button replacements, like Start8, but we like to go with the 
Officially supported versions of things if we can. Thus, if Microsoft makes it 
an option to stick people to the Desktop and give them a way to launch 
programs/logoff, I'll give it another try.

(* DCIM - Don't call it Metro)


--Matt Ross
Ephrata School District


- Original Message -
From: David Lum
[mailto:david@nwea.org]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Tue, 20 Nov 2012
13:07:38 -0800
Subject: Window 8 on your PC


 Are you guys changing your Windows 8 UI to be more like Win7 or 
 leaving it as-is and learning new tricks?
 David Lum
 Sr. Systems Engineer // NWEATM
 Office 503.548.5229 // Cell (voice/text) 503.267.9764


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here

RE: SSH (PuTTY) session from Windows2008R2

[Randal, Phil]

Which version of puTTY are you using?

If  0.62, try that version.

If it's 0.62, does the latest development snapshot make any difference?

I vaguely remember having similar sorts of issues with older versions of puTTY 
on Windows 2K8 R2.

Cheers,

Phil
--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: Richard McClary [mailto:richard.mccl...@aspca.org]
Sent: 09 November 2012 16:23
To: NT System Admin Issues
Subject: RE: SSH (PuTTY) session from Windows2008R2

Thanks...


1.   It connects for a few seconds, displaying SSH-1.99-Cisco-1.25.  I 
never get a login prompt.  Any keystroke (or doing nothing for about 5 seconds) 
results in Connection to host lost.)

2.   More playing here has shown that it the situation is not consistent.  
I can connect to my NetApp storage appliances using PuTTY (on the same Win2008 
server), right after being denied access to the Cisco switch stack.

3.   The switch not allowing access from a Windows2008 server via SSH (but 
allowing it through Win7 and below) is a stack of Cisco Catalyst 3750 switches. 
 Current firmware is 12.2(55)SE1-IP-BASE-CRYPTO

4.   So far, have not found anything useful at the Cisco site about this.

5.   A possible clue...  using telnet address 22 shows the SSH version 
of the remote system.  The Cisco, as mentioned, shows SSH-1.99.  The NetApp 
and firewall systems all show SSH-2.0.

From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Friday, November 09, 2012 10:06 AM
To: NT System Admin Issues
Subject: RE: SSH (PuTTY) session from Windows2008R2

Will the Windows client let you telnet ipaddress 22 ?

From: Richard McClary [mailto:richard.mccl...@aspca.org]
Sent: Friday, November 09, 2012 9:41 AM
To: NT System Admin Issues
Subject: SSH (PuTTY) session from Windows2008R2

Greetings!

We use PuTTY for SSH sessions to manage various devices.  An issue has recently 
been discovered by us here...

We have no problem logging in to our Cisco Catalyst 3750 switch stack via SSH 
from machines running Windows XP, Windows 7, or Windows 2003.  However, if we 
are logged into a Windows 2008R2 system...

Using PuTTY, we connect to the switch stack and get a login box.  After 
providing user name and password, we are denied access.

Using telnet (MS version enabled in the Features page of Control 
Panel/Applications), we can log in with no problem.

My preliminary Google searches seem to indicate that although SSH clients and 
servers are not a part of Windows 2008, it is supported.  So far, nothing 
regarding this inability to log in to other systems using SSH.  Again, this is 
weird as a telnet session from the same Windows 2008 machine gives access.

Anyone???  Thanks!!!
--
Richard D. McClary
Jr Infrastructure Architect, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL 61802
richard.mccl...@aspca.orgmailto:richard.mccl...@aspca.org
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.orghttp://www.aspca.org/



The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those 

RE: McAfee debacle

[Randal, Phil]

Last time McAfee screwed up in a big way with its DAT updates was April 21st, 
2010.

I blogged about it (in a personal capacity) here:

http://www.rebee.clara.net/blog/archives/2010/04/entry_174.html

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: 21 August 2012 18:17
To: NT System Admin Issues
Subject: Re: McAfee debacle

I don't think it was that recently that the previous one occurred (too 
lazy/busy to search today), but they have had a few major ones in the past 2 
years or so.
ASB

http://XeeMe.com/AndrewBaker

Harnessing the Advantages of Technology for the SMB market...



On Tue, Aug 21, 2012 at 1:06 PM, Louis, Joe 
jlo...@guardianalarm.commailto:jlo...@guardianalarm.com wrote:
http://www.scmagazineuk.com/mcafees-defected-update-causes-user-chaos/article/255393/

Wasn't there another recent problem with dat files from McAfee?

This KB was updated today
https://kc.mcafee.com/corporate/index?page=contentid=KB76004



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: 2003 R2 hotfix, but I think it's the wrong one...

[Randal, Phil]

Try here:

http://support.microsoft.com/kb/958802

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: 14 August 2012 15:42
To: NT System Admin Issues
Subject: RE: 2003 R2 hotfix, but I think it's the wrong one...

That fix is included in SP2...


Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Monday, August 13, 2012 6:34 PM
To: NT System Admin Issues
Subject: 2003 R2 hotfix, but I think it's the wrong one...

I'm running into this exact issue:

The permissions on Folder_name are incorrectly ordered, which may cause some 
entries to be ineffective

described here:

http://support.microsoft.com/kb/925332

That page as a hotfix for dfsr.exe, but it's dated 2006-10-03, and on this 
machine the timestamp for the file is 2007-02-17.

My googling reveals nothing further - the server is fully patched, too.

These are manually created subdirectories, and clicking on OK to reorder the 
ACLs does work, but I'd like to get this fixed - I've got end-users creating 
subdirectories and complaining about it.

Has anyone run into this and have a fix for it?

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Powershell Variables

[Randal, Phil]

$foo=bar
$bar=22

Invoke-expression  ($+$foo)

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: 29 May 2012 15:40
To: NT System Admin Issues
Subject: Powershell Variables

How does one leverage the evaluated output from some expression as the name of 
a new variable?

For example (simplified):

$foo = bar
$bar = 22

Write-host $$foo
 22

Thanks!
jlc

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Determine adobe Flash version via CMD or script

[Randal, Phil]

Close, but the name's still Macromedia.

Peek in

HKLM\Software\Macromedia\FlashPlayerActiveX\CurrentVersion
HKLM\Software\Macromedia\FlashPlayerPlugin\CurrentVersion

Cheers,

Phil
--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: 17 May 2012 17:45
To: NT System Admin Issues
Subject: Re: Determine adobe Flash version via CMD or script

I was going to suggest the following cmd...

wmic product where name like Adobe%' get name,version

...but it didn't work for me when I tested it. Shockwave, Reader and Air all 
show up, but not the Flash plugin. Odd.


--Matt Ross
Ephrata School District


- Original Message -
From: David Lum
[mailto:david@nwea.org]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Thu, 17 May 2012
09:27:32 -0700
Subject: Determine adobe Flash version via CMD or script


 Everything I find tells me how to do this at the machine via web
 browser, I need to do it via batch and collect the results into a
 .CSV. Can it be done via VBS?
 David Lum
 Systems Engineer // NWEATM
 Office 503.548.5229 // Cell (voice/text) 503.267.9764


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: MakeTxt.exe or Equivalent

[Randal, Phil]

A trivial Powershell script should be able to do this.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

-Original Message-
From: Robert Jackson [mailto:r...@walkermartyn.co.uk]
Sent: 16 May 2012 12:44
To: NT System Admin Issues
Subject: RE: MakeTxt.exe or Equivalent

Hi Ben,

Many thanks for the reply. We dynamically build up a %PATH% location and store 
into a variable. At this point the content of that variable is a string that 
occupies a number of lines. The contents of the variable are then passed 
through MakeTxt.exe and the resultant output is a variable of the %PATH% 
location expressed as a single line of text..

-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Wednesday 16 May 2012 12:28
To: NT System Admin Issues
Subject: r...@walkermartyn.co.uk - Re: MakeTxt.exe or Equivalent - Bayesian 
Filter detected spam

On Wed, May 16, 2012 at 7:03 AM, Robert Jackson r...@walkermartyn.co.uk
wrote:
 We are using a program MakeTxt.exe to strip out CR/LF's from a path
 string we build up.

  Can you please give some context for that.  I don't really get what's going 
on.

  The FOR built-in command can be used to read lines from a file and 
concatenate them into a single line, if that's what you're after.

 ... Windows 2008 R2 server and find that I cannot use the program as
 it is not compatible with 64bit.

  It's probably an old 16-bit DOS program.

 As far as I can see, I cannot select the compatibility options for the
 .exe as they are all greyed out.

  This is a hardware limitation.  When in long mode (64-bit mode),
x86 processors cannot execute 16-bit code.  AMD decided it was time to make a 
break from the world of 16-bit when they designed their 64-bit
x86 extensions.  (And Intel copied AMD.)

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin





The information in this internet E-mail is confidential and is intended solely 
for the addressee. Access, copying or re-use of information in it by anyone 
else is unauthorised. Any views or opinions presented are solely those of the 
author and do not necessarily represent those of Walker Martyn Ltd or any of 
its affiliates. If you are not the intended recipient please contact  
administra...@walkermartyn.co.uk

Walker Martyn Ltd, company number SC197533. Company is registered in Scotland 
and has its registered office at 1 Park Circus Place, Glasgow G3 6AH, UK.





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: MS12-034

[Randal, Phil]

Nope, but I am having problems with KB2604110 and KB2656407 being repeatedly 
offered to my XP box.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: 09 May 2012 16:33
To: NT System Admin Issues
Subject: MS12-034

Anyone have issues rolling this one out?

http://www.askwoody.com/2012/problem-with-ms12-034-kb-2676562-patch/

Christopher Bodnar
Enterprise Achitect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.commailto:

[cid:image001.jpg@01CD2E10.245C8510]

The Guardian Life Insurance Company of America

www.guardianlife.comhttp://www.guardianlife.com/



- This message, and any attachments to 
it, may contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, you are notified that any use, dissemination, distribution, 
copying, or communication of this message is strictly prohibited. If you have 
received this message in error, please notify the sender immediately by return 
e-mail and delete the message and any attachments. Thank you.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmininline: image001.jpg

RE: Server 2008 R2 and SBS 2011 DNS cache problems

[Randal, Phil]

Also take a look at this:

Server Failure error message and DNS name resolution of external websites 
fails on a DNS server that is running Windows Server 2008 R2

http://support.microsoft.com/kb/2648326/

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: Jimmy Tran [mailto:jt...@teachtci.com]
Sent: 26 April 2012 03:32
To: NT System Admin Issues
Subject: RE: Server 2008 R2 and SBS 2011 DNS cache problems

I will to look at the firewall and router to see if that DNS packet size can be 
changed.  Is this even possible?  Please excuse my ignorance.

I did check my Netgear router at home and it's a no go so it looks like I'll be 
disabling EDNS at home.

From: Webster 
[mailto:webs...@carlwebster.com]mailto:[mailto:webs...@carlwebster.com]
Sent: Wednesday, April 25, 2012 3:19 PM
To: NT System Admin Issues
Subject: RE: Server 2008 R2 and SBS 2011 DNS cache problems

Mark Minasi will strongly disagree with you.  In his AD classes he says 
disabling EDNS is the wrong thing to do.  Fix your router and or firewall and 
let EDNS do its thing.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.comhttp://www.carlwebster.com/

From: Jimmy Tran [mailto:jt...@teachtci.com]mailto:[mailto:jt...@teachtci.com]
Subject: Server 2008 R2 and SBS 2011 DNS cache problems

At the office I've been noticing a log of bad packets on my DNS server with 
the error 5501, The DNS server encountered a bad packet from 2.22.230.194.  
Packet processing leads beyond packet length. The event data contains the DNS 
packet.. When this happens, the page I'm trying to visit looks to be broken or 
have some styling issues.  When I clear the DNS cache, it works properly again.

This also happens on my home SBS 2011 machine.  Visits to Dell, Skype and 
GoDaddy constantly have this problem.  I finally decided to do some research 
and it looks to be an issue with EDns.  I'm not sure if anyone else has 
experienced this issue but here is the fix.  I just thought I would share what 
I learned today.

Open command prompt as administrator and run dnscmd /config /EnableEDNSProbes 
0.  This instantly fixed my Web/DNS problems.  Here is the link to the article 
I found: 
http://weblogs.asp.net/owscott/archive/2009/09/15/windows-server-2008-r2-dns-issues.aspx

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: File copy performance - XP vs Win7

[Randal, Phil]

Another possible issue could be this:

The SACK option is always set to true even if network adapter does not 
support SACK for offloaded connections in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2525390

Cheers,

Phil
--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: 07 March 2012 13:36
To: NT System Admin Issues
Subject: RE: File copy performance - XP vs Win7

Pretty easy to find out what is going on if you took a packet-sniff on the XP 
box and on the Windows 7 box to the endpoint. It could also be related to SMB 
V1 vs V2 (Windows 7) settings and whether or not the server is Windows 2003 ( 
V1) vs Windows 2008 V2.

Z

Edward Ziots
CISSP, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.orgmailto:ezi...@lifespan.org

From: Richard McClary 
[mailto:richard.mccl...@aspca.org]mailto:[mailto:richard.mccl...@aspca.org]
Sent: Tuesday, March 06, 2012 4:05 PM
To: NT System Admin Issues
Subject: RE: File copy performance - XP vs Win7

It was once about 40 minutes; it's now 90-100 minutes.  Again, all that has 
changed is the machine to which the file is copied.  (As someone else asked, 
the new machine does in fact use the same network jack, same switch port, and 
same cable as the old machine.)

Anyway, this has now simply become a curiosity.  We have been directed to find 
an alternative to copying backup files to a person's desktop machine and 
burning to DVD (I can think of a couple already), so thanks to all who answered.
--
richard

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Tuesday, March 06, 2012 2:50 PM
To: NT System Admin Issues
Subject: Re: File copy performance - XP vs Win7

I haven't seen any mention of actual recorded time for the backups involved.

How much time did it take before?

How much is it taking now?
ASB

http://XeeMe.com/AndrewBaker

Harnessing the Advantages of Technology for the SMB market...


On Tue, Mar 6, 2012 at 2:08 PM, Richard McClary 
richard.mccl...@aspca.orgmailto:richard.mccl...@aspca.org wrote:
Greetings!

Our DBA created a backup system for our DB2 databases where a VM (running DB2 
for the tools) would back up our medical records database (on another server), 
create ZIP files (the zip script was set to create zip files from the database 
backup in 4 Gb chunks), then copy those chunks to a user's desktop PC.  The 
principle user of that PC would then burn the ZIP files onto DVDs for storage.

The zip files total a bit over 5 Gb.

Back when the target PC was my own, I had a Dell PWS-390 running XP Pro SP3, 
32-bit.

The target PC is now an Optiplex 990 running Windows 7 Pro, 64-bit.

Our DBA says the copy from the backup system to the target PC seems to take 
twice as long copying to the Win 7 machine than it did to the Win XP machine.  
Any ideas as to what might be slowing down the copy process?  (FWIW, the 
motherboard on that PWS-390 failed a couple of months back, so a side-by-side 
test would require scrounging up a still-functional PWS-390, installing XP, 
etc.)

Thanks!
--
richard
--
Richard D. McClary
Jr Infrastructure Architect, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL 61802
richard.mccl...@aspca.orgmailto:richard.mccl...@aspca.org
P: 217-337-9761tel:217-337-9761
C: 217-417-1182tel:217-417-1182
F: 217-337-9761tel:217-337-9761
www.aspca.orghttp://www.aspca.org/



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource 

RE: Interesting change password failure

[Randal, Phil]

You may need to increase IRPStackSize parameter under this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters

Create a DWORD value IRPStackSize and try the decimal value 20.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: James Rankin [mailto:kz2...@googlemail.com]
Sent: 23 February 2012 15:29
To: NT System Admin Issues
Subject: Interesting change password failure

Got a Windows 2008 R2 server here, that every time a local (not domain) user is 
asked to change their password at logon, the error comes up not enough server 
storage is available to process this command. Resources are fine, load is low, 
no issue changing passwords from the Windows Security box once logged in. Seems 
rather strange. Anyone ever seen this happen before?

TIA,




JRR

--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.

* IMPORTANT INFORMATION/DISCLAIMER *

This document should be read only by those persons to whom it is addressed. If 
you have received this message it was obviously addressed to you and therefore 
you can read it, even it we didn't mean to send it to you. However, if the 
contents of this email make no sense whatsoever then you probably were not the 
intended recipient, or, alternatively, you are a mindless cretin; either way, 
you should immediately kill yourself and destroy your computer (not necessarily 
in that order). Once you have taken this action, please contact us.. no, sorry, 
you can't use your computer, because you just destroyed it, and possibly also 
committed suicide afterwards, but I am starting to digress..

The originator of this email is not liable for the transmission of the 
information contained in this communication. Or are they? Either way it's a 
pretty dull legal query and frankly one I'm not going to dwell on. But should 
you have nothing better to do, please feel free to ruminate on it, and please 
pass on any concrete conclusions should you find them. However, if you pass 
them on via email, be sure to include a disclaimer regarding liability for 
transmission.

In the event that the originator did not send this email to you, then please 
return it to us and attach a scanned-in picture of your mother's brother's wife 
wearing nothing but a kangaroo suit, and we will immediately refund you exactly 
half of what you paid for the can of Whiskas you bought when you went to Pets 
At Home yesterday.

We take no responsibility for non-receipt of this email because we are running 
Exchange 5.5 and everyone knows how glitchy that can be. In the event that you 
do get this message then please note that we take no responsibility for that 
either. Nor will we accept any liability, tacit or implied, for any damage you 
may or may not incur as a result of receiving, or not, as the case may be, from 
time to time, notwithstanding all liabilities implied or otherwise, ummm, hell, 
where was I...umm, no matter what happens, it is NOT, and NEVER WILL BE, OUR 
FAULT!

The comments and opinions expressed herein are my own and NOT those of my 
employer, who, if he knew I was sending emails and surfing the seamier side of 
the Internet, would cut off my manhood and feed it to me for afternoon tea.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Interesting change password failure

[Randal, Phil]

Which may bring us back to IRPStackSize:

Antivirus software may cause Event ID 
2011http://support.microsoft.com/kb/177078

Check your system log for 2011 errors.

Cheers,

Phil
--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: James Rankin [mailto:kz2...@googlemail.com]
Sent: 23 February 2012 17:07
To: NT System Admin Issues
Subject: Re: Interesting change password failure

Its Mcafee, i might disable that tomorrow as I have a spare server coming in to 
the farm
On 23 February 2012 16:53, Mike Sullivan 
neog...@gmail.commailto:neog...@gmail.com wrote:
What AV software are you using? I've read that this has been an issue with 
NOD32 and Kaspersky but that was a few years ago and it involved SBS 2003 and 
Windows Server 2003 on the back end. Uninstalling the client on the end user 
machine allowed the password change. Maybe you can find something on the AV 
vendor's site?

On Thu, Feb 23, 2012 at 7:29 AM, James Rankin 
kz2...@googlemail.commailto:kz2...@googlemail.com wrote:
Got a Windows 2008 R2 server here, that every time a local (not domain) user is 
asked to change their password at logon, the error comes up not enough server 
storage is available to process this command. Resources are fine, load is low, 
no issue changing passwords from the Windows Security box once logged in. Seems 
rather strange. Anyone ever seen this happen before?

TIA,




JRR

--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.

* IMPORTANT INFORMATION/DISCLAIMER *

This document should be read only by those persons to whom it is addressed. If 
you have received this message it was obviously addressed to you and therefore 
you can read it, even it we didn't mean to send it to you. However, if the 
contents of this email make no sense whatsoever then you probably were not the 
intended recipient, or, alternatively, you are a mindless cretin; either way, 
you should immediately kill yourself and destroy your computer (not necessarily 
in that order). Once you have taken this action, please contact us.. no, sorry, 
you can't use your computer, because you just destroyed it, and possibly also 
committed suicide afterwards, but I am starting to digress..

The originator of this email is not liable for the transmission of the 
information contained in this communication. Or are they? Either way it's a 
pretty dull legal query and frankly one I'm not going to dwell on. But should 
you have nothing better to do, please feel free to ruminate on it, and please 
pass on any concrete conclusions should you find them. However, if you pass 
them on via email, be sure to include a disclaimer regarding liability for 
transmission.

In the event that the originator did not send this email to you, then please 
return it to us and attach a scanned-in picture of your mother's brother's wife 
wearing nothing but a kangaroo suit, and we will immediately refund you exactly 
half of what you paid for the can of Whiskas you bought when you went to Pets 
At Home yesterday.

We take no responsibility for non-receipt of this email because we are running 
Exchange 5.5 and everyone knows how glitchy that can be. In the event that you 
do get this message then please note that we take no responsibility for that 
either. Nor will we accept any liability, tacit or implied, for any damage you 
may or may not incur as a result of receiving, or not, as the case may be, from 
time to time, notwithstanding all liabilities implied or otherwise, ummm, hell, 
where was I...umm, no matter what happens, it is NOT, and NEVER WILL BE, OUR 
FAULT!

The comments and opinions expressed herein are my own and NOT those of my 
employer, who, if he knew I was sending emails and surfing the seamier side of 
the Internet, would cut off my manhood and feed it to me for afternoon tea.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



--
Thank you,
Mike Sullivan



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not 

RE: supereseded patches/hotfixes

[Randal, Phil]

This one's cool as well:

http://www.mskbfiles.com/tcpip.sys.php

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: Jeff Bunting [mailto:bunting.j...@gmail.com]
Sent: 16 February 2012 18:18
To: NT System Admin Issues
Subject: Re: supereseded patches/hotfixes

Thanks, Ed.  I didn't realize that info was included, and nicely highlighted.  
Very nice!

However, I was primarily interested in KB2553549, which I suppose is a 
non-security hotfix.  I thought there had been an update released late last 
year that corrected this problem, but I'm beginning to think I may be wrong.

Jeff


On Thu, Feb 16, 2012 at 12:55 PM, ed ziots 
ezi...@hotmail.commailto:ezi...@hotmail.com wrote:
http://technet.microsoft.com/en-us/security/bulletin

You can query what you need across all the platforms there. Been using that for 
a while to keep my patching specifications up to date.

Z

Edward E. Ziots
Senior Informational Security Engineer
CISSP,Security +,Network+



Date: Thu, 16 Feb 2012 11:34:28 -0500
Subject: supereseded patches/hotfixes
From: bunting.j...@gmail.commailto:bunting.j...@gmail.com
To: 
ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com


Wondering if anyone knows of a queryable online resource that would let me know 
if a particular windows update or hotfix has been superseded by something 
newer?  I know WSUS used to show this info, but we're not using it in this 
environment, and IIRC, it isn't searchable.

I know KB articles will mention when an update supersedes a previous one, but 
I've found that searching doesn't necessarily return the most current one.

Thanks,
Jeff
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Home Antivirus

[Randal, Phil]

Avast!

A good product, good price (for home users), and excellent support forums.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

From: Carl Houseman [mailto:c.house...@gmail.com]
Sent: 14 February 2012 06:59
To: NT System Admin Issues
Subject: RE: Home Antivirus

Haven't noticed AVG being that bad on CPU lately, but that might be because I 
rarely watch it run on single cores.   But with lower CPU intensity comes 
lesser detection.  See the virusbtn RAP chart.  MSSE has not been in the same 
league with the other well-known names (the well known names that score well) 
for a while.  It's stayed in the same general spot while the others have 
improved.

However, I'd take it MSSE in a heartbeat over McAfee or Norton.


From: Rod Trent 
[mailto:rodtr...@myitforum.com]mailto:[mailto:rodtr...@myitforum.com]
Sent: Monday, February 13, 2012 9:23 PM
To: NT System Admin Issues
Subject: Re: Home Antivirus

AVG is too processor intensive. For security and low profile MSE works great.
MMF mmfree...@ameritech.netmailto:mmfree...@ameritech.net wrote:
Any comments on AVG? I’ve been using it for several years and it hasn’t failed 
me yet!

MMF

From: Cynicalgeekmailto:cynicalg...@gmail.com
Sent: Monday, February 13, 2012 7:27 PM
To: NT System Admin Issuesmailto:ntsysadmin@lyris.sunbelt-software.com
Subject: Re: Home Antivirus

The same things that infect MSSE also infect McAfee, Norton, et al.

If you're going the paid route, supposedly Kaspersky is the absolute best.

I've been using MSSE for almost 2.5 years and have been very pleased.

On Mon, Feb 13, 2012 at 8:03 PM, Ben Scott 
mailvor...@gmail.commailto:mailvor...@gmail.com wrote:
On Mon, Feb 13, 2012 at 7:45 PM, Richard Stovall 
rich...@gmail.commailto:rich...@gmail.com wrote:
 Hurry up!  Time's almost out on the deal to get McAfee free for 3PCs.
 http://preview.tinyurl.com/77u2zry
Receive a $55 prepaid card by mail from McAfee! Expires on 2/15/12 

So in two days, the Internet will be a safer place.  ;-)

If I'm going the free AV route, I'd prolly go MS Security
Essentials.  While it's limited in features, it does stop malware and
spyware, and updates happen with Windows Update.  For all of WU's
problems, other things all seem to suck more.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



--
-cynicalgeek-
cynicalgeekatgmail.comhttp://gmail.com
--

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

--
Sent from Kaiten Mail for Android. Please excuse my brevity.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, 

RE: Size of this NT admin list

[Randal, Phil]

So that makes it 29, right?  :-)

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk

-Original Message-
From: Richard Stovall [mailto:rich...@gmail.com]
Sent: 18 January 2012 16:49
To: NT System Admin Issues
Subject: Re: Size of this NT admin list

+1

On Wed, Jan 18, 2012 at 11:34 AM, James Rankin kz2...@googlemail.com wrote:
 28


 On 18 January 2012 16:30, David Lum david@nwea.org wrote:

 Anyone know how many people are subscribed to this list?

 David Lum
 Systems Engineer // NWEATM
 Office 503.548.5229 // Cell (voice/text) 503.267.9764



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put
 into the machine wrong figures, will the right answers come out?' I am
 not able rightly to apprehend the kind of confusion of ideas that
 could provoke such a question.

 * IMPORTANT INFORMATION/DISCLAIMER *

 This document should be read only by those persons to whom it is addressed.
 If you have received this message it was obviously addressed to you
 and therefore you can read it, even it we didn't mean to send it to you.
 However, if the contents of this email make no sense whatsoever then
 you probably were not the intended recipient, or, alternatively, you
 are a mindless cretin; either way, you should immediately kill
 yourself and destroy your computer (not necessarily in that order).
 Once you have taken this action, please contact us.. no, sorry, you
 can't use your computer, because you just destroyed it, and possibly
 also committed suicide afterwards, but I am starting to digress..

 The originator of this email is not liable for the transmission of the
 information contained in this communication. Or are they? Either way
 it's a pretty dull legal query and frankly one I'm not going to dwell
 on. But should you have nothing better to do, please feel free to
 ruminate on it, and please pass on any concrete conclusions should you
 find them. However, if you pass them on via email, be sure to include
 a disclaimer regarding liability for transmission.

 In the event that the originator did not send this email to you, then
 please return it to us and attach a scanned-in picture of your
 mother's brother's wife wearing nothing but a kangaroo suit, and we
 will immediately refund you exactly half of what you paid for the can
 of Whiskas you bought when you went to Pets At Home yesterday.

 We take no responsibility for non-receipt of this email because we are
 running Exchange 5.5 and everyone knows how glitchy that can be. In
 the event that you do get this message then please note that we take
 no responsibility for that either. Nor will we accept any liability,
 tacit or implied, for any damage you may or may not incur as a result
 of receiving, or not, as the case may be, from time to time,
 notwithstanding all liabilities implied or otherwise, ummm, hell,
 where was I...umm, no matter what happens, it is NOT, and NEVER WILL BE, OUR 
 FAULT!

 The comments and opinions expressed herein are my own and NOT those of
 my employer, who, if he knew I was sending emails and surfing the
 seamier side of the Internet, would cut off my manhood and feed it to
 me for afternoon tea.



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd, Herefordshire Council, 
Herefordshire Primary Care Trust, Wye Valley NHS Trust or 2gether NHS 
Foundation Trust. You should be aware that Hoople Ltd, Herefordshire Council, 
Herefordshire Primary Care Trust, Wye Valley NHS Trust  2gether NHS Foundation 
Trust monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, 

RE: Annoying DNS issue

[Randal, Phil]

Does KB2508835 fix the issue?
DNS Server service does not resolve some external DNS names after it works for 
a while in Windows Server 2008 R2
Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: pran...@herefordshire.gov.uk

From: Jimmy Tran [mailto:jt...@teachtci.com]
Sent: 05 December 2011 16:54
To: NT System Admin Issues
Subject: RE: Annoying DNS issue

This is happened to me recently.  Same setup as yours but the specific DNS 
entry would fail from all workstations (XP/7/OS10.6).  I never really got it 
resolved except for clearing the DNS cache as well.  I hope a solutions 
arises...

Jimmy

From: pierre.camill...@fosterclark.commailto:pierre.camill...@fosterclark.com 
[mailto:pierre.camill...@fosterclark.com]mailto:[mailto:pierre.camill...@fosterclark.com]
Sent: Monday, December 05, 2011 6:27 AM
To: NT System Admin Issues
Subject: Annoying DNS issue

Hi All

Our current AD domain is running under Windows Server 2008 R2 and our 
workstation clients are Windows XP Pro. At times (2/3 times a day) I am having 
to clear the DNS cache of our domain server because certain users would be 
unable to access certain websites such as for example HSBCNET.com. They can 
access other websites without any problems whatsover but somehow certain 
websites require the DNS cache to be cleared. Weird.
Any idea what could be causing this to happen?

TIA
Pierre

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd, Herefordshire Council, 
Herefordshire Primary Care Trust, Wye Valley NHS Trust or 2gether NHS 
Foundation Trust. You should be aware that Hoople Ltd, Herefordshire Council, 
Herefordshire Primary Care Trust, Wye Valley NHS Trust  2gether NHS Foundation 
Trust monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Modern equivalent to BGinfo

[Randal, Phil]

I use backinfo.exe, which works happily on 2008 R2:

http://blogs.technet.com/b/johnbaker/archive/2006/02/15/419644.aspx

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: 04 October 2011 15:22
To: NT System Admin Issues
Subject: Modern equivalent to BGinfo

Hey guys,
Anyone use something to print stats to a desktop about a server such as ip etc 
thats up to date with 2008r2 etc similar to the old bginfo?

I have a series of lab boxes this could be helpful with...

jlc

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Herefordshire Council, Herefordshire 
Primary Care Trust or 2gether NHS Foundation Trust. You should be aware that 
Herefordshire Council, Herefordshire Primary Care Trust  2gether NHS 
Foundation Trust monitors its email service. This e-mail and any attached files 
are confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it. Please 
consider the environment before printing this e-mail.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: MS Patch fallout

[Randal, Phil]

I only mentioned the SNP issue because itbit us hard here, with Terminal 
Services being inaccessible after a reboot being the most obvious symptom; a 
second reboot worked, usually.

Turning off TCP offload / Receive Side Scaling in the network card properties 
might help too, especially on Broadcom cards, whose drivers  have been 
notoriously buggy.

As we’d done all that already, and only recently discovered the KB950224 
horfix, I can’t say whether that solves it.

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Don Kuhlman [mailto:drkuhl...@yahoo.com]
Sent: 22 August 2011 17:14
To: NT System Admin Issues
Subject: Re: MS Patch fallout

Selective here - but I will look into that one and see if it's on the other 
server.

Thanks

From: Ray rz...@qwest.netmailto:rz...@qwest.net
To: NT System Admin Issues 
ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com
Sent: Monday, August 22, 2011 9:31 AM
Subject: RE: MS Patch fallout
Thanks.  Can’t say we were selective.   We installed what came down.

From: Randal, Phil 
[mailto:pran...@herefordshire.gov.uk]mailto:[mailto:pran...@herefordshire.gov.uk]
Sent: Monday, August 22, 2011 7:19 AM
To: NT System Admin Issues
Subject: RE: MS Patch fallout

That sounds like the old Scalable Networking Pack bug, introduced in Windows 
2003 SP2.

Have you been selectively applying Windows Updates?

The Scalable Networking Pack should have been turned off by

http://support.microsoft.com/kb/948496

which did come down via Windows Update, many moons ago.

This hotfix might help:

http://support.microsoft.com/kb/KB950224

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Ray [mailto:rz...@qwest.net]mailto:[mailto:rz...@qwest.net]
Sent: 22 August 2011 15:06
To: NT System Admin Issues
Subject: RE: MS Patch fallout

Happens to us often.  Usually requires another reboot.

From: Don Kuhlman 
[mailto:drkuhl...@yahoo.com]mailto:[mailto:drkuhl...@yahoo.com]
Sent: Monday, August 22, 2011 6:32 AM
To: NT System Admin Issues
Subject: MS Patch fallout

Hi folks. Has anyone seen any issues with the Microsoft August patches 
affecting RDP access on Windows 2003 servers or terminal servers?
Getting issues after patching yesterday with some 2003 servers won't allow RDP 
access now.
Thanks
Don K
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
“Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Herefordshire Council or Herefordshire 
Primary Care Trust. You should be aware that Herefordshire Council  
Herefordshire Primary Care Trust monitors its email service. This e-mail and 
any attached files are confidential and intended solely for the use of the 
addressee. This communication may contain material protected by law from being 
passed on. If you are not the intended recipient and have received this e-mail 
in error, you are advised that any use, dissemination, forwarding, printing or 
copying of this e-mail is strictly prohibited. If you have received this e-mail 
in error please contact the sender immediately and destroy all copies of it. 
Please consider the environment before printing this e-mail.”
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource

RE: MS Patch fallout

[Randal, Phil]

That sounds like the old Scalable Networking Pack bug, introduced in Windows 
2003 SP2.

Have you been selectively applying Windows Updates?

The Scalable Networking Pack should have been turned off by

http://support.microsoft.com/kb/948496

which did come down via Windows Update, many moons ago.

This hotfix might help:

http://support.microsoft.com/kb/KB950224

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Ray [mailto:rz...@qwest.net]
Sent: 22 August 2011 15:06
To: NT System Admin Issues
Subject: RE: MS Patch fallout

Happens to us often.  Usually requires another reboot.

From: Don Kuhlman 
[mailto:drkuhl...@yahoo.com]mailto:[mailto:drkuhl...@yahoo.com]
Sent: Monday, August 22, 2011 6:32 AM
To: NT System Admin Issues
Subject: MS Patch fallout

Hi folks. Has anyone seen any issues with the Microsoft August patches 
affecting RDP access on Windows 2003 servers or terminal servers?
Getting issues after patching yesterday with some 2003 servers won't allow RDP 
access now.
Thanks
Don K

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Herefordshire Council or Herefordshire 
Primary Care Trust. You should be aware that Herefordshire Council  
Herefordshire Primary Care Trust monitors its email service. This e-mail and 
any attached files are confidential and intended solely for the use of the 
addressee. This communication may contain material protected by law from being 
passed on. If you are not the intended recipient and have received this e-mail 
in error, you are advised that any use, dissemination, forwarding, printing or 
copying of this e-mail is strictly prohibited. If you have received this e-mail 
in error please contact the sender immediately and destroy all copies of it. 
Please consider the environment before printing this e-mail.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Drive mapping via login script

[Randal, Phil]

Ifmember.exe is cool, but see here:

http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-windows.html

There comes a point where it's easier to do it in Kixtart than mess about like 
this...

Cheers,

Phil

-- 
Phil Randal | Infrastructure Engineer 
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division 
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT 
Tel: 01432 260160

-Original Message-
From: pettersen.mar...@little-rock.med.va.gov 
[mailto:pettersen.mar...@little-rock.med.va.gov] 
Sent: 08 August 2011 17:21
To: NT System Admin Issues
Subject: Re: Drive mapping via login script

IFMEMBER.EXE can parse out Group memberships and is a part of several Windows 
Resource Kits.
 
usage: ifmember.exe [/verbose]
[/list] groupname ...
/verbose will print out all matches.
/list will print out all groups user is a member of.
Return Code shows number of groups this user is a member of.
Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Herefordshire Council.
You should be aware that Herefordshire Council monitors its email service.
This e-mail and any attached files are confidential and intended solely for the 
use of the addressee. This communication may contain material protected by law 
from being passed on. If you are not the intended recipient and have received 
this e-mail in error, you are advised that any use, dissemination, forwarding, 
printing or copying of this e-mail is strictly prohibited. If you have received 
this e-mail in error please contact the sender immediately and destroy all 
copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Fw: VMware vSphere 5 Licensing and Pricing Update

[Randal, Phil]

Alan Renouf has a handy vSphere PowerCLI script to check your entitlements:

http://www.virtu-al.net/2011/08/03/vsphere-5-license-entitlement-changes/

In the current 2.0 script, there's a calculation bug, so you'll need to change 
$v5EntPlus.vRamGB to $vRAM on lines 627 and 630.

I've added a comment (awaiting moderation) to his blog to that effect.

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Jonathan [mailto:ncm...@gmail.com]
Sent: 03 August 2011 23:03
To: NT System Admin Issues
Subject: Re: Fw: VMware vSphere 5 Licensing and Pricing Update


Gary, you beat me to the punch! I was just getting ready to send that to the 
list as well.

Bottom line, the vRAM entitlement per CPU has been increased, and you won't be 
charged for vRAM allocated to a single VM above 96 Gigs. If you have 2 CPU 
licenses of Enterprise Plus, that gets you 192 Gigs of pooled vRAM. If you need 
to allocate more than the pooled amount to powered on VMs, then you'll need 
additional licensing. Also, the high water mark is now based on a 12 month 
average.

Cheers,

Jonathan A+, MCSA, MCSE

Thumb-typed from my HTC Droid Incredible (and yes, it really is) on the Verizon 
network. Please excuse brevity and any misspellings.

On Aug 3, 2011 5:43 PM, Gary Slinger 
gary.slin...@gmail.commailto:gary.slin...@gmail.com wrote:
 Now that it's public, this may be of interest, given the gnashing of teeth 
 recently.

 G

 --Original Message--
 From: The VMware Team
 To: Gary Slinger
 ReplyTo: The VMware Team
 Subject: VMware vSphere 5 Licensing and Pricing Update
 Sent: Aug 3, 2011 17:40

 View this email on mobile devices | View the online version
 VMware vSphere 5 Licensing  Pricing Update Dear VMware Partner,
 On July 12, 2011, VMware announced our new Cloud Infrastructure Suite. The 
 launch featured vSphere 5, the newest version of our flagship product.
 As many of you know, as part of this announcement, we introduced changes to 
 the vSphere licensing model in order to align costs with the benefits of 
 virtualization rather than with the physical attributes of individual 
 servers. While our goal was to provide a licensing model based on consumption 
 and value rather than physical components and capacity, we strived to make 
 the new model as non-disruptive as possible.
 These changes generated much debate in the blogosphere, in conversations with 
 our partners and customers, and across VMware communities. Some of the 
 discussion had to do with confusion around the changes. We have been watching 
 the blog commentaries carefully, and we have been listening to the partner 
 and customer conversations very intently. A great deal of feedback was 
 provided that examined the impact of the new licensing model on every 
 possible use case and scenario, and equally importantly, reflected our 
 partners' and customers' intense passion for VMware.
 Our success depends on the active involvement of our channel partners. We are 
 a company built on partner and customer goodwill, and we've taken your 
 feedback in earnest. Our primary objective is to do right by our customers, 
 so we are announcing three changes to the vSphere 5 licensing model that 
 address the most recurring areas of your feedback.
 *   We've increased vRAM entitlements for all vSphere editions, including the 
 doubling of the entitlements for vSphere Enterprise and Enterprise Plus. This 
 change addresses concerns about future-looking business cases that were based 
 on future hardware capabilities and the previous vSphere licensing model.  
 Below is a comparison of the previously announced and the new vSphere 5 vRAM 
 enti
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: {Disarmed} Re: RE: vSphere 5 - Big License Changes

[Randal, Phil]

Alan Renouf has written a handy Powershell/PowerCLI  script to check your 
licensing and vRAM usage against the vSphere 5 licensing model:

http://www.virtu-al.net/2011/07/14/vsphere-5-license-entitlements/

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Jonathan [mailto:ncm...@gmail.com]
Sent: 15 July 2011 11:29
To: NT System Admin Issues
Subject: {Disarmed} Re: RE: vSphere 5 - Big License Changes


That is correct. The pooled vRAM is charged based on vRAM allocation to powered 
on VMs. If you run vCenter Operations Manager, it will tell you where you are 
over allocated, and give you the baseline data to justify any changes you might 
want to make. If the machines are not powered on, then they don't count against 
you.

Jonathan A+, MCSA, MCSE

Thumb-typed from my HTC Droid Incredible (and yes, it really is) on the Verizon 
network. Please excuse brevity and any misspellings.
On Jul 14, 2011 2:08 PM, Blackman, Woody 
wblack...@occ.cccd.edumailto:wblack...@occ.cccd.edu wrote:
I believe you still have to comply with the v5 license model even with the 
downgrade option.

From: Kramer, Jack 
[mailto:jack.kra...@ur.msu.edumailto:jack.kra...@ur.msu.edu]
Sent: Thursday, July 14, 2011 10:51 AM

To: NT System Admin Issues
Subject: Re: vSphere 5 - Big License Changes




Remember, there are downgrade rights - you can buy vSphere 5 licenses and 
downgrade to the 4.1 ...


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ MailScanner has detected a possible fraud attempt from 
www.sunbeltsoftware.c claiming to be 
http://www.sunbeltsoftware.c.http://www.sunbeltsoftware.c...

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: vSphere 5 - Big License Changes

[Randal, Phil]

Great way to drive customers into optimising their VM sizes and removing RAM, 
more like.

In our environment we'd need 7 more Enterprise Plus licences, so I'm not 
terribly amused.

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: 13 July 2011 13:12
To: NT System Admin Issues
Subject: RE: vSphere 5 - Big License Changes

Great way for vmware to drive customers to Hyper-V.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.uk]mailto:[mailto:paul.hutchi...@mira.co.uk]
Sent: Wednesday, July 13, 2011 3:39 AM
To: NT System Admin Issues
Subject: vSphere 5 - Big License Changes

http://blogs.softchoice.com/advisor/2011/07/12/big-changes-in-licensing-model-for-vmware-vsphere-5-vmware/

Note how licensing is moving to be CPU based but limited by vRam.

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: vSphere 5 - Big License Changes

[Randal, Phil]

I don't have a problem with paying a licence fee for every installed copy of 
the software, but I strongly challenge the right of any software vendor to 
charge self-imposed taxes on their customers' hardware.

This sort of licensing should be illegal, IMHO.

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Webster [mailto:carlwebs...@gmail.com]
Sent: 13 July 2011 13:57
To: NT System Admin Issues
Subject: RE: vSphere 5 - Big License Changes

One analyst says for some large VMware shops with large VMs this could 
quadruple their VMware licensing costs.

Another analyst says VMware is sending a clear message to SMBs, You can't 
afford us.

Like MBS, I am NOT a VMware person.  This is just my $0.02US worth.


Webster

From: Michael B. Smith 
[mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com]
Subject: RE: vSphere 5 - Big License Changes

Great way for vmware to drive customers to Hyper-V.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.uk]mailto:[mailto:paul.hutchi...@mira.co.uk]
Subject: vSphere 5 - Big License Changes

http://blogs.softchoice.com/advisor/2011/07/12/big-changes-in-licensing-model-for-vmware-vsphere-5-vmware/

Note how licensing is moving to be CPU based but limited by vRam.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Home AV for user with XPx64

[Randal, Phil]

I'll second that.  Avast has been uperior to AVG for the last decade or so, so 
I've never understood why the latter is so widely used :-p

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: 31 May 2011 16:24
To: NT System Admin Issues
Subject: RE: Home AV for user with XPx64

I was an AVG user for years and years. They started nagging a bit too much plus 
the updates were getting cumbersome. I switched to Avast a few months ago and I 
am very happy. You have register the free version with an email, but so far not 
a single email or nag.

From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: Tuesday, May 31, 2011 11:18 AM
To: NT System Admin Issues
Subject: Home AV for user with XPx64

Hey guys,
I got a home user I just redeployed a box for, anyone have a preference for a 
nagless home AV?
I always use MSE, but there isn't an XP64 client, Avira has popup adverts that 
I don't want to be bothered about, AVG Free looks like it supports XPx64?
Since I don't use AVG, anyone know if it runs nagless?

Thanks!
jlc

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Herefordshire Council.
You should be aware that Herefordshire Council monitors its email service.
This e-mail and any attached files are confidential and intended solely for the 
use of the addressee. This communication may contain material protected by law 
from being passed on. If you are not the intended recipient and have received 
this e-mail in error, you are advised that any use, dissemination, forwarding, 
printing or copying of this e-mail is strictly prohibited. If you have received 
this e-mail in error please contact the sender immediately and destroy all 
copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Antivirus Vendor Replacement

[Randal, Phil]

Big issue is manageability in a corporate environment.

All products have their quirks.  Would be nice to see a good feature matrix 
prepared by a non-vendor.

McAfee ain't so crappy anymore with VSE 8.8, though we're getting too many 
false positives with Artemis, even at a low sensitivity level.

Sophos is good on detection; it's one of the first to detect the latest round 
of DHL email malware being spammed out in great quantities at the moment.

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Weatherford, Chad [mailto:cweatherf...@scvl.com]
Sent: 11 March 2011 16:00
To: NT System Admin Issues
Subject: Antivirus Vendor Replacement

We are looking to replace our current AV (McCrappy Total Protection for 
Endpoint) with something that is more light weight AND catches all of the bugs. 
I was pretty excited about Trend and LANDesk's Kaspersky engine...until either 
testing or listening to SE's describe the product.

I would appreciate any and all feedback on the AV vendor you use and if you 
recommend them.



Chad Weatherford | Network/Security Administrator | Shoe Carnival, Inc. | 
*:812.867.8314 | 7: 812.471.9866 | *: 
cweatherf...@scvl.commailto:cweatherf...@scvl.com


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Brian Krebs on security

[Randal, Phil]

Krebs didn't say wait a while before you install, he said don't install.

Tut.

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: David Lum [mailto:david@nwea.org]
Sent: 28 February 2011 14:06
To: NT System Admin Issues
Subject: Brian Krebs on security

Susan Bradley - a name I trust - posted the below to the patch management list. 
I have heard of Brian and read a few of his posts, have any of you had any 
direct interactions with this guy?

What I'm really asking is if I should weigh his opinion similar to Susan, or 
Michael B Smith, and a few others?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 503.548.5229 // (Cell) 503.267.9764


-Original Message-
From: Susan Bradley [mailto:sbrad...@pacbell.net]
Sent: Saturday, February 26, 2011 1:27 PM
To: Patch Management Mailing List
Subject: Re: Can't backup Win 7 computer after installing.

Before You Install Windows 7 Service Pack 1 - Krebs on Security:
http://krebsonsecurity.com/2011/02/before-you-install-windows-7-service-pack-1/


On 2/26/2011 1:12 PM, Fred Dunn wrote:
 This is generally the accepted Best Practice for Service Packs.
 Aside from that even at the Analysts own computer (unless it a standard
 load and has remained in that pristine state) you can wait as long as you
 want but at the personal computer level all are different and you could
 still hit a new bug a year from now.

 FD

 -Original Message-
 From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us]
 Sent: Friday, February 25, 2011 8:06 PM
 To: Patch Management Mailing List
 Subject: RE: Can't backup Win 7 computer after installing.

 I doubt that too many on this list deploys an OS service pack on a large
 scale without testing first. My process, for example, is to first install on
 my own personal and work machines (I have quite a mix of different machine
 types), then to have my technicians install it within our department, then
 to spread out from there in increasingly larger batches.

 While I would never push out a service pack to the 2,000+ machines in my
 enterprise without first testing and monitoring mailing lists like this one,
 I have no qualms about installing it on a small scale shortly after release.
 Statistically speaking, this is a pretty safe move. Yes, we see people who
 run into problems--but those problems are generally the exception rather
 than the rule, and people tend to speak up more when things DON'T work than
 when they DO. If suspect that if we polled the members of this list, we'd
 find that the overwhelming majority of machines that SP1 has been installed
 on are working perfectly. I can't concur with your assertion that Microsoft
 has a poor track record with service pack releases in recent years, but
 perhaps I've just been luckier than most.


 John Hornbuckle
 MIS Department
 Taylor County School District
 www.taylor.k12.fl.ushttp://www.taylor.k12.fl.us



 -Original Message-
 From: DANIEL CARROLL [mailto:dcarr...@cableone.net] On Behalf Of Dan Carroll
 Sent: Friday, February 25, 2011 8:28 PM
 To: Patch Management Mailing List
 Subject: RE: Can't backup Win 7 computer after installing.

 I am just beside myself; sitting here reading about all the problems with
 Win-7 SP-1.
 I will never understand why so many feel they need to be the first to
 install a Service Pack a microsecond after M$ releases it.
 Have we learned nothing thru the years about M$, and especially Windows
 Service Packs.
 My God people.
 Do we all jump in the pool before we check to see if there is water in it?
 I will NOT be installing SP-1 for as long as I can.
 I have already implemented the SP blocking reg entry.
 I do appreciate those who do jump in the shallow end, as they relieve me of
 the burden of discovering and repairing/undoing/patching all the problems.
 Thank you.




 NOTICE: Florida has a broad public records law. Most written communications
 to or from this entity are public records that will be disclosed to the
 public and the media upon request. E-mail communications may be subject to
 public disclosure.


 ---
 When posting or replying to messages on this list, please send all
 emails in plain text format.  HTML formatted messages will not be accepted.

 PatchManagement.org is hosted by Shavlik Technologies

 To unsubscribe send a blank email to
 leave-patchmanagem...@patchmanagement.orgmailto:leave-patchmanagem...@patchmanagement.org
 If you are unable to unsubscribe via this email address, please email
 owner-patchmanagem...@patchmanagement.orgmailto:owner-patchmanagem...@patchmanagement.org



 ---
 When posting or replying to messages on this list, please send all
 emails in plain text format.  HTML formatted messages will not be accepted.

 PatchManagement.org is hosted by Shavlik Technologies

 To unsubscribe send a 

RE: vSphere 4.1 U1

[Randal, Phil]

In our environment, I'm seeing VMs not prompting for the upgraded tools.

Best to open VMware tools, check about and if it doesn't say Copyright © 
1998-2011 then the tools need updating. It's easier to visually check for the 
year 2011 than remember obscure build numbers.

Cheers,

Phil

From: John Cook [mailto:john.c...@pfsf.org]
Sent: 24 February 2011 18:43
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1


1.   You can set the autoupdate on each guest to tell you when an update is 
available but you have to initiate it on each vm.

From: Harry Singh [mailto:hbo...@gmail.com]
Sent: Thursday, February 24, 2011 1:41 PM
To: NT System Admin Issues
Cc: Damien Solodow
Subject: Re: vSphere 4.1 U1

I can't remember if there is a feature in Vmware, but I believe there is a 
script out there that can update the tools en masse. I know VMware Tools checks 
for upgrades, but can't remember if it does the actual install when there is an 
upgrade available.

On Thu, Feb 24, 2011 at 1:38 PM, Damien Solodow 
damien.solo...@harrison.edumailto:damien.solo...@harrison.edu wrote:
You definitely do.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.217.6851 (fax)
HARRISON COLLEGE

From: Martin Blackstone 
[mailto:mblackst...@gmail.commailto:mblackst...@gmail.com]
Sent: Thursday, February 24, 2011 1:36 PM

To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1

You will probably need to upgrade the VMWare tools on the guests.


From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.ukmailto:paul.hutchi...@mira.co.uk]
Sent: Thursday, February 24, 2011 10:19 AM
To: NT System Admin Issues
Subject: vSphere 4.1 U1

Anyone applied it and had anything other than “next, next, reboot, done”?

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


CONFIDENTIALITY STATEMENT: The information transmitted, or contained or 
attached to or with this Notice is intended only for the person or entity to 
which it is addressed and may contain Protected Health Information (PHI), 
confidential and/or privileged material. Any review, transmission, 
dissemination, or other use of, and taking any action in reliance upon this 
information by persons or entities other than the intended recipient without 
the express written consent of the sender are prohibited. This information may 
be protected by the Health Insurance Portability and Accountability Act of 1996 
(HIPAA), and other Federal and Florida laws. Improper or unauthorized use or 
disclosure of this information could result in civil and/or criminal penalties.
Consider the environment. Please don't print this e-mail unless you really need 
to.


This email and any attached files are confidential and intended solely for the 
intended recipient(s). If you are not the named recipient you should not read, 
distribute, copy or alter this email. Any views or opinions expressed in this 
email are those of the author and do not represent those of the company. 
Warning: Although precautions have been taken to make sure no viruses are 
present in this email, the company cannot accept responsibility for 

RE: vSphere 4.1 U1

[Randal, Phil]

There was a bug in VMware tools which could result in loss of network settings 
on upgrade to hardware V7 in some circumstances.

Supposedly fixed in the latest tools, but I haven't tried any V4 - V7 updates 
recently.

If you want to be safe, follow this sequence:

snapshot
install latest tools and reboot
shut down
snapshot
upgrade hardware version
start VM
pray to your favourite $deity
wait for drivers to install
reboot
test
(forget to) delete the snapshots

You will, of course, have to redo any MS NLB when you change hardware versions 
(because the underlying adapters have vanished and been replaced).

Cheers,

Phil

-Original Message-
From: Damien Solodow [mailto:damien.solo...@harrison.edu] 
Sent: 24 February 2011 18:58
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1

The tools upgrade does update the NIC drivers, but that's generally
trivial.
What it might have been is the VM hardware version upgrade that you
should do when upgrading from 3.x to 4.x. That can bite you fairly
easily.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.217.6851 (fax)
HARRISON COLLEGE

-Original Message-
From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] 
Sent: Thursday, February 24, 2011 1:54 PM
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1

I'm not the main VMWare guy here, but I do remember that we had some
pretty major issues with upgrading the VMWare tools recently, mostly on
the older XP guests, but ended up with some others also.  Something to
do with the tools upgrade messing with the NIC drivers, I think, but not
positive.

 Martin Blackstone mblackst...@gmail.com 2/24/2011 10:35 AM 
You will probably need to upgrade the VMWare tools on the guests.

 

 

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Thursday, February 24, 2011 10:19 AM
To: NT System Admin Issues
Subject: vSphere 4.1 U1

 

Anyone applied it and had anything other than next, next, reboot,
done?

  _  

MIRA Ltd

 

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England

Registered in England and Wales No. 402570

VAT Registration  GB 100 1464 84

 

The contents of this e-mail are confidential and are solely for the use
of the intended recipient.  If you receive this e-mail in error, please
delete it and notify us either by e-mail, telephone or fax.  You should
not copy, forward or otherwise disclose the content of the e-mail as
this is prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: vSphere 4.1 U1

[Randal, Phil]

vCenter thinks they're ok too, even when they're not the latest.  Possibly only 
occurs on esx(i) hosts which have had VMware tools updated with update manager, 
but are waiting for the rest of Update 1 to go on.

I've seen others on the net mention the same problem.

Cheers,

Phil

From: Garcia-Moran, Carlos [mailto:cgarciamo...@spragueenergy.com]
Sent: 24 February 2011 20:48
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1

You can check the status of the VM tools on the Virtual center / vSphere hosts 
on the Virtual Machine Tab under the “vmware tools status” header, you can also 
get it with a couple of PowerShell scripts


From: Randal, Phil [mailto:pran...@herefordshire.gov.uk]
Sent: Thursday, February 24, 2011 3:43 PM
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1

In our environment, I'm seeing VMs not prompting for the upgraded tools.

Best to open VMware tools, check about and if it doesn't say Copyright © 
1998-2011 then the tools need updating. It's easier to visually check for the 
year 2011 than remember obscure build numbers.

Cheers,

Phil

From: John Cook [mailto:john.c...@pfsf.org]
Sent: 24 February 2011 18:43
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1


1.   You can set the autoupdate on each guest to tell you when an update is 
available but you have to initiate it on each vm.

From: Harry Singh [mailto:hbo...@gmail.com]
Sent: Thursday, February 24, 2011 1:41 PM
To: NT System Admin Issues
Cc: Damien Solodow
Subject: Re: vSphere 4.1 U1

I can't remember if there is a feature in Vmware, but I believe there is a 
script out there that can update the tools en masse. I know VMware Tools checks 
for upgrades, but can't remember if it does the actual install when there is an 
upgrade available.

On Thu, Feb 24, 2011 at 1:38 PM, Damien Solodow 
damien.solo...@harrison.edumailto:damien.solo...@harrison.edu wrote:
You definitely do.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.217.6851 (fax)
HARRISON COLLEGE

From: Martin Blackstone 
[mailto:mblackst...@gmail.commailto:mblackst...@gmail.com]
Sent: Thursday, February 24, 2011 1:36 PM

To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1

You will probably need to upgrade the VMWare tools on the guests.


From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.ukmailto:paul.hutchi...@mira.co.uk]
Sent: Thursday, February 24, 2011 10:19 AM
To: NT System Admin Issues
Subject: vSphere 4.1 U1

Anyone applied it and had anything other than “next, next, reboot, done”?

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


CONFIDENTIALITY STATEMENT: The information transmitted, or contained or 
attached to or with this Notice is intended only for the person or entity to 
which it is addressed and may contain Protected Health Information (PHI), 
confidential and/or privileged material. Any review, transmission, 
dissemination, or other use of, and taking any action in reliance upon this 
information by persons or entities other than the intended recipient without 
the express written consent of the sender are prohibited

RE: vSphere 4.1 U1

[Randal, Phil]

Mine too, but I don't give the orders here.

Phil

From: Steven Peck [mailto:sep...@gmail.com]
Sent: 24 February 2011 20:58
To: NT System Admin Issues
Subject: Re: vSphere 4.1 U1

  You will, of course, have to redo any MS NLB when you change hardware 
versions
here, let me fix that
  You will, of course, just want to delete any MS NLB you have

Just a personal preference :)
On Thu, Feb 24, 2011 at 12:52 PM, Randal, Phil 
pran...@herefordshire.gov.ukmailto:pran...@herefordshire.gov.uk wrote:
There was a bug in VMware tools which could result in loss of network settings 
on upgrade to hardware V7 in some circumstances.

Supposedly fixed in the latest tools, but I haven't tried any V4 - V7 updates 
recently.

If you want to be safe, follow this sequence:

snapshot
install latest tools and reboot
shut down
snapshot
upgrade hardware version
start VM
pray to your favourite $deity
wait for drivers to install
reboot
test
(forget to) delete the snapshots

You will, of course, have to redo any MS NLB when you change hardware versions 
(because the underlying adapters have vanished and been replaced).

Cheers,

Phil

-Original Message-
From: Damien Solodow 
[mailto:damien.solo...@harrison.edumailto:damien.solo...@harrison.edu]
Sent: 24 February 2011 18:58
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1
The tools upgrade does update the NIC drivers, but that's generally
trivial.
What it might have been is the VM hardware version upgrade that you
should do when upgrading from 3.x to 4.x. That can bite you fairly
easily.
DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.217.6851 (fax)
HARRISON COLLEGE
-Original Message-
From: Joseph Heaton [mailto:jhea...@dfg.ca.govmailto:jhea...@dfg.ca.gov]
Sent: Thursday, February 24, 2011 1:54 PM
To: NT System Admin Issues
Subject: RE: vSphere 4.1 U1
I'm not the main VMWare guy here, but I do remember that we had some
pretty major issues with upgrading the VMWare tools recently, mostly on
the older XP guests, but ended up with some others also.  Something to
do with the tools upgrade messing with the NIC drivers, I think, but not
positive.

 Martin Blackstone mblackst...@gmail.commailto:mblackst...@gmail.com 
 2/24/2011 10:35 AM 
You will probably need to upgrade the VMWare tools on the guests.





From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.ukmailto:paul.hutchi...@mira.co.uk]
Sent: Thursday, February 24, 2011 10:19 AM
To: NT System Admin Issues
Subject: vSphere 4.1 U1



Anyone applied it and had anything other than next, next, reboot,
done?

 _

MIRA Ltd



Watling Street, Nuneaton, Warwickshire, CV10 0TU, England

Registered in England and Wales No. 402570

VAT Registration  GB 100 1464 84



The contents of this e-mail are confidential and are solely for the use
of the intended recipient.  If you receive this e-mail in error, please
delete it and notify us either by e-mail, telephone or fax.  You should
not copy, forward or otherwise disclose the content of the e-mail as
this is prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage

RE: How do you deploy AV?

[Randal, Phil]

The latest McAfee ePO is a lot better in this regard, with duplicate GUID 
detection.

Easiest way is to install the McAfee agent and Virusscan, stop the McAfee 
Framework service, and delete the AgentGUID key in your image.

Then each cloned box will get a new AgentGUID on startup of the Framework 
service.

Simple.

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Rene de Haas [mailto:rene.deh...@gmail.com]
Sent: 18 February 2011 02:18
To: NT System Admin Issues
Subject: Re: How do you deploy AV?

When I last used McAfee (about 1.5 years ago) ePO didn't like that.
On Thu, Feb 17, 2011 at 11:26 PM, David Lum 
david@nwea.orgmailto:david@nwea.org wrote:
Does anyone here deploy new systems with using some image and have AV on it 
already?

Dave

-Original Message-
From: Roger Wright [mailto:rhw...@gmail.commailto:rhw...@gmail.com]
Sent: Thursday, February 17, 2011 2:04 PM
To: NT System Admin Issues
Subject: Re: How do you deploy AV?

Our VIPRE packages are deployed via Group Policy.  In the event of a
problem we can also deploy/update/remove via the VIPRE Admin Console.


Roger Wright
___

The internet is a great way to get on the net. - Bob Dole




On Thu, Feb 17, 2011 at 11:39 AM, David Lum 
david@nwea.orgmailto:david@nwea.org wrote:
 What methods do you guys use to deploy AV to systems and what process do you
 follow to make sure your live endpoints are compliant?

 David Lum // SYSTEMS ENGINEER
 NORTHWEST EVALUATION ASSOCIATION
 (Desk) 503.548.5229 // (Cell) 503.267.9764



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Herefordshire Council.
You should be aware that Herefordshire Council monitors its email service.
This e-mail and any attached files are confidential and intended solely for the 
use of the addressee. This communication may contain material protected by law 
from being passed on. If you are not the intended recipient and have received 
this e-mail in error, you are advised that any use, dissemination, forwarding, 
printing or copying of this e-mail is strictly prohibited. If you have received 
this e-mail in error please contact the sender immediately and destroy all 
copies of it.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: IE9 RC released

[Randal, Phil]

Firefox not viable?  Strange.

Try firefox 4.0b11.

Cheers,

Phil
--
Phil Randal | Infrastructure Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: Steven Peck [mailto:sep...@gmail.com]
Sent: 11 February 2011 17:44
To: NT System Admin Issues
Subject: Re: IE9 RC released

Much dislike for chrome.  I use it for now as firefox is not viable anymore but 
anticipate moving to ie9 if the performance stuff holds out.
On Fri, Feb 11, 2011 at 9:10 AM, Martin Blackstone 
mblackst...@gmail.commailto:mblackst...@gmail.com wrote:
Im so over IE. Chrome for life! :)


From: Steven Peck [mailto:sep...@gmail.commailto:sep...@gmail.com]
Sent: Friday, February 11, 2011 9:08 AM

To: NT System Admin Issues
Subject: Re: IE9 RC released

Well, when something works, you have to nit pick on the marketing guys or your 
favorite product might not fare well against renewed competition.

Steven Peck
http://www.blkmtn.org
On Fri, Feb 11, 2011 at 8:13 AM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
Well, if that's all you can find to complain about, it must be pretty good! ;-)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Sam Cayze [mailto:sca...@gmail.commailto:sca...@gmail.com]
Sent: Friday, February 11, 2011 11:03 AM

To: NT System Admin Issues
Subject: RE: IE9 RC released

Hrmf, still doing false advertising... 
http://windows.microsoft.com/en-US/internet-explorer/products/ie-9/compare-browsers

I recall not too long ago they highlighted that IE was the only browser to 
support standards such as HTML 5.  Blatant Lie.
Right on the IE9 website it said: Internet Explorer 9 Beta is the only web 
browser that supports modern web standards such as HTML5



From: Malcolm Reitz 
[mailto:malcolm.re...@live.commailto:malcolm.re...@live.com]
Sent: Thursday, February 10, 2011 12:00 PM
To: NT System Admin Issues
Subject: IE9 RC released

Get it at www.beautyoftheweb.comhttp://www.beautyoftheweb.com. It looks good 
for the whole 10 minutes I've been running it...


-Malcolm



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: free PDF printer

[Randal, Phil]

Just for the record, how to install PDFCreator without the annoying toolbar:

http://www.appdeploy.com/packages/detail.asp?id=1991

Cheers,

Phil

-- 
Phil Randal | Infrastructure Engineer 
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office | 
I.C.T. Services Division 
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT 
Tel: 01432 260160

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: 19 January 2011 15:05
To: NT System Admin Issues
Subject: RE: free PDF printer

Well my *thought* was, I'd try the first thing I could find on download.com 
that had the highest rating and if that didn't work, I'd use whatever the 
consensus of opinion on the list was. Sorry for bothering YOU, Erik.




-Original Message-
From: Erik Goldoff [mailto:egold...@gmail.com]
Sent: Wednesday, January 19, 2011 9:59 AM
To: NT System Admin Issues
Subject: RE: free PDF printer

I'm amazed that you even bothered the list for something you needed an 
immediate answer for, and  would not wait for even the quickest of replies ...


Wolf !

Wolf !

Wolf !





Erik Goldoff
IT  Consultant
Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '



-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Wednesday, January 19, 2011 9:56 AM
To: NT System Admin Issues
Subject: RE: free PDF printer

Yep. As I said, the user was completely down. Her email crashed as soon as she 
opened it. According to Microsoft, the problem was an incompatibility with 
Adobe Creator. So, I grabbed the highest rated (by both users and CNET
editors) PDF creator app and installed it.




-Original Message-
From: Erik Goldoff [mailto:egold...@gmail.com]
Sent: Wednesday, January 19, 2011 8:30 AM
To: NT System Admin Issues
Subject: RE: free PDF printer

In the NINE minutes from when you posted your question to when I posted the 
link ???

(sigh)


Erik Goldoff
IT  Consultant
Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '



-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, January 18, 2011 4:52 PM
To: NT System Admin Issues
Subject: RE: free PDF printer

I'd already installed the other one... :-)




-Original Message-
From: Erik Goldoff [mailto:egold...@gmail.com]
Sent: Tuesday, January 18, 2011 4:06 PM
To: NT System Admin Issues
Subject: RE: free PDF printer

Hope what you found works for you, but I'm confused ...
It was quicker to go to search CNet than click the link for PDFCreator in my 
reply ?


Erik Goldoff
IT  Consultant
Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '


-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, January 18, 2011 3:10 PM
To: NT System Admin Issues
Subject: RE: free PDF printer

Well I was in a hurry so I went to CNET Downloads and found PDF Redirect.
I'm gonna give that a shot and if it doesn't make the user happy, I'll try PDF 
Creator. PDF Redirect had the best reviews for both CNET Editors and end-users 
so hopefully it'll work ok.



From: Jim Holmgren [mailto:jholmg...@xlhealth.com]
Sent: Tuesday, January 18, 2011 2:32 PM
To: NT System Admin Issues
Subject: RE: free PDF printer

+1 for PDF Creator.


Jim Holmgren
Senior Manager, Infrastructure Services
XLHealth Corporation
The Warehouse at Camden Yards
351 West Camden Street, Suite 100
Baltimore, MD 21201
410.625.2200 (main)
443.524.8573 (direct)
443-506.2400 (cell)
www.xlhealth.com



From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: Tuesday, January 18, 2011 2:31 PM
To: NT System Admin Issues
Subject: Re: free PDF printer

I have been using PDF Creator with good success for some time now. 
http://sourceforge.net/projects/pdfcreator/


 
On Tue, Jan 18, 2011 at 2:22 PM, John Aldrich jaldr...@blueridgecarpet.com
wrote:
What do you guys like for creating PDFs? ISTR that someone recommended
PrimoPDF. Is that still a good one or is there something better? It appears
one of my users is having problems with incompatibility between her Outlook
(2000) and Adobe Acrobat. WHY it's just now showing up is a mystery to me,
but it is Anyway, if ya'll could let me know what you think is the best
FREE PDF maker, I'd appreciate it.





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe 

RE: SNMP from w2K ex2k

[Randal, Phil]

This link may be helpful:

  http://snmpboy.rte.microsoft.com/

It details how to use MRTG
(http://people.ee.ethz.ch/~oetiker/webtools/mrtg/)
to monitor NT 4 / Win 2000 servers.  Check out the numerous resources on the
MRTG pages too.

Cheers,

Phil

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: 27 September 2001 06:57
 To: NT System Admin Issues
 Subject: Re: SNMP from w2K ex2k
 
 
 
 Here's a good place to start for trap generation stuff:
 http://www.ncomtech.com/download.htm
 
 General SNMP on NT info:
 http://www.wtcs.org/snmp4tpc/
 
 John Monahan
 Senior Consultant Enterprise Solutions
 Computech Resources, Inc.
 Office: 952-833-0930 ext 109
 Cell: 952-484-5435
 http://www.compures.com
 
 
 
   
 
 Dave Holton   
 
 DHolton@systems-   To: NT 
 System Admin Issues [EMAIL PROTECTED]  
 group.net  cc:   
 
 Subject: SNMP 
 from w2K ex2k   
 09/26/2001 09:42  
 
 AM
 
 Please respond to 
 
 NT System Admin  
 
 Issues   
 
   
 
   
 
 
 
 
 
 Does anyone know a good resource to help me find what SNMP traps I can
 collect from Microsoft systems, and what the options are for 
 collecting
 this
 info. I know there is a resource kit util that sends event 
 log messages as
 SNMP traps.
 
 Any info would be helpful, thanks in advance
 
 __
 Dave Holton
 
 
 **
 The information in this e-mail is confidential and may be
 legally privileged. It is intended solely for the addressee
 and access to the e-mail by anyone else is unauthorised.
 If you are not the intended recipient, any disclosure,
 copying, distribution or any action taken or omitted to be
 taken in reliance on it, is prohibited and may be unlawful.
 When addressed to our clients, any opinions or advice
 contained in this e-mail are subject to the terms and
 conditions expressed in the governing client engagement
 letter or contract.
 
 If you have received this email in error please notify:
 [EMAIL PROTECTED]
 **
 
 
 Want to unsub? Do that here:
 http://www.w2knews.com/rd/rd.cfm?id=unsub
 Need a good FAQ? Try this one first:
 http://www.ultratech-llc.com/KB/
 
 Does anyone know a good resource to help me find what SNMP traps I can
 collect from Microsoft systems, and what the options are for 
 collecting
 this info. I know there is a resource kit util that sends event log
 messages as SNMP traps.
 
 
 
 
 
 Any info would be helpful, thanks in advance
 
 
 
 
 
 __
 
 
 Dave Holton
 
 
 
 
 **
 The information in this e-mail is confidential and may be
 legally privileged. It is intended solely for the addressee
 and access to the e-mail by anyone else is unauthorised.
 If you are not the intended recipient, any disclosure,
 copying, distribution or any action taken or omitted to be
 taken in reliance on it, is prohibited and may be unlawful.
 When addressed to our clients, any opinions or advice
 contained in this e-mail are subject to the terms and
 conditions expressed in the governing client engagement
 letter or contract.
 
 If you have received this email in error please notify:
 [EMAIL PROTECTED]
 **
 Want to unsub? Do that here:
 http://www.w2knews.com/rd/rd.cfm?id=unsub
 Need a good FAQ? Try this one first:
 http://www.ultratech-llc.com/KB/
 
 
 
 
 
 
 
 
 Want to unsub? Do that here:
 http://www.w2knews.com/rd/rd.cfm?id=unsub
 Need a good FAQ? Try this one first:
 

RE: Market share of NT4, 2000, netware, and unix

[Randal, Phil]

It is extremely difficult to measure the market share taken by the free
operating systems such as GNU/Linux - I can legally download one copy of
Redhat Linux 7.1 (for example) and install it on all my servers.  How is
that going to show in the market share statistics?

Cheers,

Phil

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Derrenbacker, L. Jonathan [mailto:[EMAIL PROTECTED]]
 Sent: 26 September 2001 12:42
 To: NT System Admin Issues
 Subject: Market share of NT4, 2000, netware, and unix
 
 
 Does anyone know what percent of market share each of these 
 have in North
 America NT4, W2k, netware, and unix. 
 
 Is this about right NT4 55% Win2k 5% netware 5% unix 45% ?
 
 Want to unsub? Do that here:
 http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsys
admintext_mode=0lang=english
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/

Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/

RE: Exchange 5.5 admin

[Randal, Phil]

SP4 
has some updates for Exchange Admin too.

Phil
-Phil 
RandalNetwork EngineerHerefordshire CouncilHereford, UK 


  -Original Message-From: Dave Holton 
  [mailto:[EMAIL PROTECTED]]Sent: 26 September 2001 
  13:58To: NT System Admin IssuesSubject: RE: Exchange 5.5 
  admin
  
  Yes it is ... 
  although It only runs on NT4 workstation and 
  above.
  
  Install from Exchange 
  server CD and just select exchange admin ...
  
  
  __
  Dave 
  Holton, 
  Consultant
  
  -Original 
  Message-From: Neil 
  Harvey [mailto:[EMAIL PROTECTED]] Sent: 26 September 2001 14:03To: NT System Admin IssuesSubject: Exchange 5.5 
  admin
  
  
  Does anyone know ifit 
  possible to run the exchange administrator program on a client PC to remotely 
  administer the server.
  Want to unsub? Do that 
  here:http://www.w2knews.com/rd/rd.cfm?id=unsubNeed a good FAQ? Try 
  this one 
  first:http://www.ultratech-llc.com/KB/**The 
  information in this e-mail is confidential and may be legally privileged. 
  It is intended solely for the addressee and access to the e-mail by anyone 
  else is unauthorised. If you are not the intended recipient, any 
  disclosure, copying, distribution or any action taken or omitted to be 
  taken in reliance on it, is prohibited and may be unlawful. When 
  addressed to our clients, any opinions or advice contained in this e-mail 
  are subject to the terms and conditions expressed in the governing client 
  engagement letter or contract.If you have received this email in 
  error please notify: 
  [EMAIL PROTECTED]**Want 
  to unsub? Do that here:http://www.w2knews.com/rd/rd.cfm?id=unsubNeed a 
  good FAQ? Try this one 
first:http://www.ultratech-llc.com/KB/
Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/

RE: Exchange 5.5 and GroupShield

[Randal, Phil]

It is supposedly fixed in Hotfix 7 for Groupshield 4.5.

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english

RE: Installing IIS Patches

[Randal, Phil]

Try 
this...

http://www.microsoft.com/technet/security/bulletin/MS01-044.asp.
Phil
-Phil 
RandalNetwork EngineerHerefordshire CouncilHereford, UK 

  -Original Message-From: Greenhalgh, Tim 
  [mailto:[EMAIL PROTECTED]]Sent: 24 September 2001 
  15:19To: NT System Admin IssuesSubject: Installing IIS 
  Patches
  
  Dear 
  All,
  
  Is there an easy way to install 
  all the IIS patches in one step? 
  I don't restart the server between each patch but it's a real pain 
  installing several patches at once. 
  There must be an easier way.
  
  Thanks in 
  advance,
  
  TimWant 
  to unsub? Do that 
  here:http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english
Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english

RE: MS Security Rollup

[Randal, Phil]

Check here:

http://support.microsoft.com/support/kb/articles/q299/4/44.asp?ID=299444

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Rich Waldrop [mailto:[EMAIL PROTECTED]]
 Sent: 25 September 2001 14:03
 To: NT System Admin Issues
 Subject: RE: MS Security Rollup
 
 
 Lee,
 
 Check the Archives for specifics but a lot of people were encountering
 issues with the rollup
 
 -Original Message-
 From: Lee, Damon [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 25, 2001 7:29 AM
 To: NT System Admin Issues
 Subject: MS Security Rollup
 
 
 Hello all,
 
 Has anyone encountered any problems using the post MS SP6a 
 Security Rollup
 Package?
 
 Damon
 
 Want to unsub? Do that here:
 http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsys
admintext_mod
e=0lang=english


Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mod
e=0lang=english

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english

RE: Another F(*^ virus! (OT)

[Randal, Phil]

Title: RE: Another F(*&^ virus! (OT)



Sorry 
to be pedantic, but a login script is a pull, not a push, and if your users 
habitually
don't 
log out the login script ain't going to get run in a hurry.

Phil
-Phil 
RandalNetwork EngineerHerefordshire CouncilHereford, UK 

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 
  15:01To: NT System Admin IssuesSubject: RE: Another 
  F(*^ virus! (OT)
  I haven't worked with any of the other packages, so I can't 
  compare. It seems to do ok, although they don't have any "ALERT" system, 
  and always seem to be the last to get a definition out. I still don't know if 
  they have the Vote virus covered.
  They automatically create a logon script to push the defs to 
  the desktop, so as long as you make sure the server gets updated before 
  everyone logs on it works fine. Our work hours make this a 
  non-issue. Remote users have a problem with the speed. 
  I do know that I gave up on active desktop scanning. It 
  slowed my workstations down too much. I've been lucky that my folks get 
  a lot of e-mail, but aren't big on downloading files. So I'm 
  scanning Exchange and Outlook. Personally, I think way too many of the 
  virii are being caught at the desktop rather than the Exchange server. 
  They also have no filtering/blocking.
  As soon as I can free up some money I'll most likely dump the 
  Panda for Exchange and get Sybari. 
Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english

RE: MS Security Rollup

[Randal, Phil]

Before, reboot, then hotfix

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Kevin Lundy [mailto:[EMAIL PROTECTED]]
 Sent: 25 September 2001 15:17
 To: NT System Admin Issues
 Subject: RE: MS Security Rollup
 
 
 You install the SoftPaq before the hot fix, or after the 
 hotfix but before
 rebooting?
 
 -Original Message-
 From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 25, 2001 10:11 AM
 To: NT System Admin Issues
 Subject: RE: MS Security Rollup
 
 
 I always DL and install the latest SoftPaq before doing this fix. For
 me, that has avoided this issue all together.
 
 -Original Message-
 From: Clark, Steve [mailto:[EMAIL PROTECTED]] 
 Sent: Tuesday, September 25, 2001 6:43 AM
 To: NT System Admin Issues
 Subject: RE: MS Security Rollup
 
 
 There's a note on the MS site indicating what to do before you run the
 rollup. The directions basically say to update everything in 
 CIM before
 you do the patch.
 
 Once that's done - it should be a snap.
 
 Steve Clark
 Clark Systems Support, LLC
 AVIEN Charter Member
 Who's watching your network?
 www.clarksupport.com
   301-610-9584 voice
   240-465-0323 Efax
 
 -Original Message-
 From: Chris Adrian [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 25, 2001 9:24 AM
 To: NT System Admin Issues
 Subject: RE: MS Security Rollup
 
 Damon
 
 Yeah, I had big problems on Compaq servers with array controllers. The
 rollup package overwrites scsiport.sys with a newer file 
 which does not
 work correctly with certain array controllers giving lovely 
 blue screens
 when you restart (Stop 0xA Blue Screen Error). Caused major
 panic with us until I found out what it was and used ERD Commander to
 copy the older file back into place. Now boots fine.
 
 
 Chris Adrian
 IT Department
 Scotland On Line
 
 
 -Original Message-
 From: Lee, Damon [mailto:[EMAIL PROTECTED]]
 Sent: 25 September 2001 13:29
 To: NT System Admin Issues
 Subject: MS Security Rollup
 
 
 Hello all,
 
 Has anyone encountered any problems using the post MS SP6a Security
 Rollup Package?
 
 Damon
 
 Want to unsub? Do that here:
 http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsys
admintext
_mod
e=0lang=english



Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext
_mod
e=0?=english

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext
_mode=0lang=english


Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mod
e=0lang=english

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mod
e=0lang=english

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english

RE: ie6 vs. ie5.5

[Randal, Phil]

Requirements are here:

  http://www.microsoft.com/windows/ie/evaluation/sysreqs/default.asp

It says it runs on Windows 98, Windows Me, Windows NT 4.0 with Service Pack
6a (SP6a) and higher, or Windows 2000

Cheers,

Phil
-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
 Sent: 21 September 2001 15:09
 To: NT System Admin Issues
 Subject: RE: ie6 vs. ie5.5
 
 
 That is how I did it as well and used the IEAK to set it up.
 We tested it in 98 and W2K but never tested W95, as I forgot we still
 have a few old timer boxes around. 
 When we went to deploy, it said that 95 isn't supported. So we went to
 Window Update and it wasn't there either. Just IE55-SP2
 
 -Original Message-
 From: Mark Dowling [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, September 21, 2001 6:52 AM
 To: NT System Admin Issues
 Subject: Re: ie6 vs. ie5.5
 
 
 Martin
 
 [IE6 not running on 95]
 
 I thought so too but if you try downloading the full IE6 for 
 deployment,
 you get four OS options:
 
 98
 NT
 2000/XP
 95
 
 Now I only d/led 98 and 2000 as that's all I wanted at the 
 moment and I
 needed the bandwidth for other stuff but...
 
 Mark Dowling
 Sirius Information Systems,
 Enterprise House, Marina Commercial Park, Cork, Ireland
 +353-21-4316899 [fax 4316880] [EMAIL PROTECTED]
 
 - Original Message -
 From: Martin Blackstone [EMAIL PROTECTED]
 To: NT System Admin Issues [EMAIL PROTECTED]
 Sent: Thursday, September 20, 2001 9:18 PM
 Subject: RE: ie6 vs. ie5.5
 
 
 Go for it. We did 60 Wks yesterday with no issues.
 We are not doing the servers at this time.
 
 As a side note, apparently IE6 does not run on Win95.
 
 -Original Message-
 From: Jon Hill [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, September 20, 2001 11:53 AM
 To: NT System Admin Issues
 Subject: ie6 vs. ie5.5
 
 
 I'm using nimda as an excuse to upgrade my firm from ie 5.01 (yes, I
 could apply the patch but I'd rather just go whole hog and 
 get this over
 with).
 
 Since ie6 hasn't been out all that long, I'm a little leery 
 of using it.
 Any advice?  My environment:  NT4sp6a (some sp5), Office 2000, 128MB.
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: Nimda and HTML Files

[Randal, Phil]

Check out this document:

  http://www.incidents.org/react/nimdaprint.php

The details you want are half way through...

Phil

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Mark Kelsay [mailto:[EMAIL PROTECTED]]
 Sent: 21 September 2001 16:35
 To: NT System Admin Issues
 Subject: Nimda and HTML Files
 
 
 I have read that nimda appends two lines of code to htm, html 
 and asp files.
 Does anyone know what those two lines of code are or where I 
 can find out?  
 
 TIA,
 
 Mark Kelsay
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: Nimda and HTML Files

[Randal, Phil]

That's why I posted a url to the info :-)

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]
 Sent: 21 September 2001 17:15
 To: NT System Admin Issues
 Subject: RE: Nimda and HTML Files
 
 
 Yikes!!  I got a bunch of antigen messages after including 
 that code in the
 email.  Looks like a lot of people are scanning for it.
 
 -Original Message-
 From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]
 Sent: Friday, September 21, 2001 12:13 PM
 To: NT System Admin Issues
 Subject: RE: Nimda and HTML Files
 
 
 This is what it adds at the end of .htm, .html, and .asp files:
 
 HTML CODE REMOVED
 
 It is only one line; I haven't seen anything else.
 
 Jeff
 
 -Original Message-
 From: Mark Kelsay [mailto:[EMAIL PROTECTED]]
 Sent: Friday, September 21, 2001 11:35 AM
 To: NT System Admin Issues
 Subject: Nimda and HTML Files
 
 
 I have read that nimda appends two lines of code to htm, html 
 and asp files.
 Does anyone know what those two lines of code are or where I 
 can find out?  
 
 TIA,
 
 Mark Kelsay
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: IE5.5 SP2 Download for corporation

[Randal, Phil]

When you run IE5Setup.exe there's an advanced button or something similar
which lets you download only - you can then select which OSes you wish to
download for.  Did it here, and it is really quite painless.

Phil

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Stefan Jafs [mailto:[EMAIL PROTECTED]]
 Sent: 20 September 2001 17:12
 To: NT System Admin Issues
 Subject: IE5.5 SP2 Download for corporation
 
 
 How do I download the complete SP2 for IE5.5 from Microsoft? I would
 like to do one download for automatic distribution instead of all 40
 workstations downloading it using Windows Update? I can't 
 seem to find a
 complete download on Microsoft's web site.
 
 Stefan
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: IIS disabled but proxy enabled? how to...

[Randal, Phil]

Support for Linux is second to none, free of charge via the web, irc and
mailing lists.

Would you like to tell me of a mailing list where I can discuss and resolve
NT Kernel bugs with the developers?  No such animal exists, I'll hazard a
guess :-)

Phil

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Rocky Stefano [mailto:[EMAIL PROTECTED]]
 Sent: 19 September 2001 14:11
 To: NT System Admin Issues
 Subject: RE: IIS disabled but proxy enabled? how to...
 
 
 
 And then what? When it breaks or gives you some weird message 
 I hope you
 bought a support contract for it because after all its free
 
 
 
 -Original Message-
 From: netdtek [mailto:[EMAIL PROTECTED]]
 Sent: September 19, 2001 4:24 AM
 To: NT System Admin Issues
 Subject: RE: IIS disabled but proxy enabled? how to...
 
 
 
 I say why not.  Wall Street did it, he can too.  I'm about ready to
 setup a Linux machine myself.  Find myself a nice GUI shell...
 
 -Original Message-
 From: Rocky Stefano [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 18, 2001 10:34 PM
 To: NT System Admin Issues
 Subject: RE: IIS disabled but proxy enabled? how to...
 
 
 He has a point. Even a devout MS bigot has got to be pissed at the
 number of
 patches they have had to install over the last year. Not to 
 mention how
 many
 applications don't work as advertised. If he can't do MS 
 you're going to
 send him to a linux package?
 
 
 
 -Original Message-
 From: Kelly Borndale [mailto:[EMAIL PROTECTED]]
 Sent: September 19, 2001 1:20 AM
 To: NT System Admin Issues
 Subject: Re: IIS disabled but proxy enabled? how to...
 
 
 
 You may want to watch your attitude first off -this is an NT sys admin
 list,
 we all have jobs because we support MS products.
 
 There are plenty of free proxy servers and web servers.  Check out
 http://www.debian.org/ or any Linux site, as well.
 
 -K
 - Original Message -
 From: Matthew Western [EMAIL PROTECTED]
 To: NT System Admin Issues [EMAIL PROTECTED]
 Sent: Wednesday, September 19, 2001 12:23 AM
 Subject: IIS disabled but proxy enabled? how to...
 
 
  Hi People,
  We like the rest of the world are getting annoyed at microsnot.  How
 do i
  disable all web server IIS junk and keep the MX proxy enabled?  if i
 disable
  the IIS in services it kills proxy too...  i've already broken one
 proxy
  trying to do this.
  regards
  Matthew
 
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: NT Server 4.0 rollup fix?

[Randal, Phil]

The post SP6A security fix is linked to from Microsoft's Nimda page here:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
topics/nimda.asp

Cheers,

Phil

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Eric Brouwer [mailto:[EMAIL PROTECTED]]
 Sent: 19 September 2001 15:15
 To: NT System Admin Issues
 Subject: NT Server 4.0 rollup fix?
 
 
 I know there is the IIS hotfix rollup file, but is there on 
 for NT Server
 4.0 SP6a?
 
 Eric
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: IIS paches

[Randal, Phil]

http://www.microsoft.com/security

Check in there - latest IIS patches were dated August 2001

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Mal Sasalu [mailto:[EMAIL PROTECTED]]
 Sent: 19 September 2001 16:35
 To: NT System Admin Issues
 Subject: IIS paches
 
 
 Hi all,
 Is there a way I can find all the patches released for IIS 5.0 at one
 place/package on the net? I have lost the track.
 Mal
 
 Mal Sasalu
 Information Systems  Facilities
 Phone: (403) 295-4914 NovAtel Inc.
 Fax:  (403) 295-45011120 
 68th Avenue NE
 [EMAIL PROTECTED]
 Calgary, AB  T2E 8S5
  
 http://www.novatel.ca
 
  -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]] 
 Sent: Wednesday, September 19, 2001 9:30 AM
 To:   NT System Admin Issues
 Subject:  RE: Spontaneous Lockouts (Event 644)
 
 
 LOL: We share our pain!
 
 --Charles
 
 
  
 
 JSlattery@ar.
 
 navy.mil To: NT System 
 Admin Issues
 
  
 [EMAIL PROTECTED]   
 09/19/2001   cc:
 
 11:05 AM Subject: RE: 
 Spontaneous Lockouts
 (Event 644) 
Please
 
 respond to
 
 NT System
 
 Admin Issues
 
  
 
  
 
 
 
 
 
 Thanks!!! (He happened to have BOTH of those situations.)
 
 I LOVE this list!
 
 Jimbo
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
  Sent: Wednesday, September 19, 2001 11:07 AM
  To: NT System Admin Issues
  Subject: Re: Spontaneous Lockouts (Event 644)
 
 
 
  Yep, it will happen if the users password just expired (or
  was changed)
  and.
   (1) The user logged on at another workstation and forgot
  to logoff
  yesterday.
or
   (2) The user is using their profile to run services.
 
  hth
  --Charles
 
 
 
 
  JSlattery@ar.
 
  navy.mil To: NT System
  Admin Issues
 
  [EMAIL PROTECTED]
  09/19/2001   cc:
 
  10:50 AM Subject:
  Spontaneous Lockouts (Event 644)
 Please
 
  respond to
 
  NT System
 
  Admin Issues
 
 
 
 
 
 
 
 
 
  Having a user that keeps being locked out without attempting
  to log in multiple times.
 
  NT4 SP 6a
  2000 Workstation on the desktop
  Using Exchange 5.5 and Outlook 2k for mail. (He first notices the
  lockout when he tries to open email and get's a login prompt.)
 
  Anyone ever run into this one before??
 
  Thanks in advance for all of your help
 
  Jim Slattery
  Network Guy
  [EMAIL PROTECTED]
 
  They that can give up essential liberty to obtain a little 
 temporary
  safety
  deserve neither liberty nor safety. -- Benjamin Franklin 
 (1706-1790)
 
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: WARNING: Hacker Alert

[Randal, Phil]

Looks like a new worm to me.  Probably planted on all those
Code Red compromised servers :-(

Phil

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Jason Morris [mailto:[EMAIL PROTECTED]]
 Sent: 18 September 2001 15:59
 To: NT System Admin Issues
 Subject: RE: WARNING: Hacker Alert
 
 
 CodeRed seems to have dwindled to nothing on my logs. But it's being
 replaced with the EXACT same lines you have below, and they 
 stay consistent
 with the code red 2 methods of attacking the more local subnets.
 
 Jason Morris CCDA CCNP
 Network Administrator
 MJMC, Inc.
 708-225-2350
 [EMAIL PROTECTED]
 
 
 -Original Message-
 From: Jason Morris [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 18, 2001 9:50 AM
 To: NT System Admin Issues
 Cc: '[EMAIL PROTECTED]'
 Subject: RE: WARNING: Hacker Alert
 
 
 Yes. It seems to be systems I have previously monitored 
 hitting me with
 codered attacks. I bet someone is activating all of their children.
 
 Jason Morris CCDA CCNP
 Network Administrator
 MJMC, Inc.
 708-225-2350
 [EMAIL PROTECTED]
 
 
 -Original Message-
 From: xylog [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 18, 2001 9:45 AM
 To: NT System Admin Issues
 Subject: WARNING: Hacker Alert
 
 
 All my public facing web servers at home and at my office have shown a
 huge continuous hacking activity. Has anyone seen similar? I fear this
 may be code red related or automated. Please comment if you have seen
 similar. Here is an excerpt from one logfile:
 
 63.101.9.107, -, 9/18/01, 10:36:21, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 145,
 0, 500, 87, GET,
 /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system
 32/cmd.exe
 , /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:28, W3SVC4, DC1DIIS01, x.x.x.x, 0, 97,
 604, 404, 3, GET, /scripts/..Á../winnt/system32/cmd.exe, /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:28, W3SVC4, DC1DIIS01, x.x.x.x, 0, 97,
 604, 404, 3, GET, /scripts/winnt/system32/cmd.exe, /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:32, W3SVC4, DC1DIIS01, x.x.x.x, 0, 97,
 604, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:32, W3SVC4, DC1DIIS01, x.x.x.x, 0, 97,
 604, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:32, W3SVC4, DC1DIIS01, x.x.x.x, 0, 98,
 0, 500, 87, GET, /scripts/..%5c../winnt/system32/cmd.exe, /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:32, W3SVC4, DC1DIIS01, x.x.x.x, 0, 96,
 0, 500, 87, GET, /scripts/..%5c../winnt/system32/cmd.exe, /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:32, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 100,
 0, 500, 87, GET, /scripts/..%5c../winnt/system32/cmd.exe, /c+dir,
 63.101.9.107, -, 9/18/01, 10:36:33, W3SVC4, DC1DIIS01, x.x.x.x, 0, 96,
 0, 500, 87, GET, /scripts/..%2f../winnt/system32/cmd.exe, /c+dir,
 64.156.252.27, -, 9/18/01, 10:36:42, W3SVC4, DC1DIIS01, x.x.x.x, 156,
 41, 13975, 200, 0, GET, /mpf-flow/flow/login.cfm, -,
 63.101.171.231, -, 9/18/01, 10:37:02, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 72,
 604, 404, 3, GET, /scripts/root.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:02, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 70,
 604, 404, 3, GET, /MSADC/root.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:02, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 80,
 604, 404, 3, GET, /c/winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:02, W3SVC4, DC1DIIS01, x.x.x.x, 15,
 80, 604, 404, 3, GET, /d/winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:06, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 96,
 0, 500, 87, GET, /scripts/..%5c../winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:09, W3SVC4, DC1DIIS01, x.x.x.x, 0,
 117, 0, 500, 87, GET,
 /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:09, W3SVC4, DC1DIIS01, x.x.x.x, 0,
 117, 0, 500, 87, GET,
 /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:09, W3SVC4, DC1DIIS01, x.x.x.x, 0,
 145, 0, 500, 87, GET,
 /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system
 32/cmd.exe
 , /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:09, W3SVC4, DC1DIIS01, x.x.x.x, 15,
 97, 604, 404, 3, GET, /scripts/..Á../winnt/system32/cmd.exe, /c+dir,
 64.156.252.27, -, 9/18/01, 10:37:12, W3SVC4, DC1DIIS01, x.x.x.x, 156,
 41, 13975, 200, 0, GET, /mpf-flow/flow/login.cfm, -,
 63.101.171.231, -, 9/18/01, 10:37:12, W3SVC4, DC1DIIS01, x.x.x.x, 16,
 97, 604, 404, 3, GET, /scripts/winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:12, W3SVC4, DC1DIIS01, x.x.x.x, 16,
 97, 604, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:13, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 97,
 604, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:13, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 98,
 0, 500, 87, GET, /scripts/..%5c../winnt/system32/cmd.exe, /c+dir,
 63.101.171.231, -, 9/18/01, 10:37:13, W3SVC4, DC1DIIS01, 
 x.x.x.x, 0, 96,
 0, 

RE: WARNING: Hacker Alert

[Randal, Phil]

From NTBugTraq:

There have been numerous reports of IIS attacks being generated by
machines over a broad range of IP addresses. These infected
machines are using a wide variety of attacks which attempt to exploit
already known and patched vulnerabilities against IIS.

It appears that the attacks can come both from email and from the
network.

A new worm, being called w32.nimda.amm, is being sent around. The
attachment is called README.EXE and comes as a MIME-type of
audio/x-wav together with some html parts. There appears to be no
text in this message when it is displayed by Outlook when in
Auto-Preview mode (always a good indication there's something not
quite right with an email.)

The network attacks against IIS boxes are a wide variety of attacks.
Amongst them appear to be several attacks that assume the machine is
compromised by Code Red II (looking for ROOT.EXE in the /scripts and
/msadc directory, as well as an attempt to use the /c and /d virtual
roots to get to CMD.EXE). Further, it attempts to exploit numerous
other known IIS vulnerabilities.

One thing to note is the attempt to execute TFTP.EXE to download a
file called ADMIN.DLL from (presumably) some previously compromised
box.

Anyone who discovers a compromised machine (a machine with ADMIN.DLL
in the /scripts directory), please forward me a copy of that .dll
ASAP.

Also, look for TFTP traffic (UDP69). As a safeguard, consider doing
the following;

edit %systemroot/system32/drivers/etc/services.

change the line;

tftp 69/udp

to;

tftp 0/udp

thereby disabling the TFTP client. W2K has TFTP.EXE protected by
Windows File Protection so can't be removed.

More information as it arises.

Cheers,
Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor

-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

 -Original Message-
 From: Kevin Lundy [mailto:[EMAIL PROTECTED]]
 Sent: 18 September 2001 16:28
 To: NT System Admin Issues
 Subject: RE: WARNING: Hacker Alert
 
 
 http://www.nipc.gov/warnings/advisories/2001/01-021.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm