RE: RT devices?

[Trees, Ray]

We have several being used with ActiveSync and they worked with our standard 
policy, not sure what option’s you might have enabled.

From: Pete Howard [mailto:pchow...@yahoo.com]
Sent: Wednesday, March 20, 2013 9:05 AM
To: NT System Admin Issues
Subject: Re: RT devices?

I have one user with a personal RT in a BYOD scenario that cant connect in 
tthrough activesync and it appears this is a very common problem. Hope to see a 
fix from MS soon on this. Activesync policy is set to allownonprovisionable 
devices with minimal other restrictions and has worked for 100s of device types 
over the years. just not RT..yet


From: Mark Kelsay mark.kel...@confused.commailto:mark.kel...@confused.com
To: NT System Admin Issues 
ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, March 20, 2013 11:12 AM
Subject: RE: RT devices?

We have looked briefly at the RT devices for our on-call team but ruled them 
out straight away.  We use a Sonicwall remote access device and after speaking 
with them we have found out that Microsoft have not written any APIs for 
companies like Sonicwall to create remote access software, so no chance of SSL 
/ IPSEC VPN.

This is the response from Sonicwall:

“Unfortunately, the Microsoft Windows 8 RT Operating System doesn’t include SSL 
or IPSec VPN APIs to allow vendors such as Dell SonicWALL to support adding VPN 
clients to their devices. This is a current limitation with this OS. I know 
Dell now have “full blown” Windows 8 tablets available now, which might be a 
better option.”

Also the only way to install software is from the application site, so no 
bespoke software can be installed.


Cheers,
Mark



From: Ryan Finnesey [mailto:r...@finnesey.com]
Sent: 20 March 2013 03:42
To: NT System Admin Issues
Subject: RT devices?

I am curious to know if anyone is thinking or has deployed RT devices to their 
end users.

Cheers
Ryan

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

_
This message has been checked for all known viruses by bluesource. For further 
information visit www.blue-source.comhttp://www.blue-source.com/

powered by Messagelabs


** This email is sent for and on behalf of Inspop.comhttp://inspop.com/ 
Limited **

Authorised and regulated by the Financial Services Authority. Registration no. 
310635.

Inspop.com Limited [also trading as Confused.comhttp://confused.com/] is 
registered in England and Wales at 3rd Floor, Greyfriars House, Greyfriars 
Road, Cardiff, CF10 3AL [Reg. No. 03857130]. Any opinions expressed in this 
email are those of the individual and not necessarily the company. This email 
and any files transmitted with it, including replies and forwarded copies 
[which may contain alterations] subsequently transmitted from the Company, are 
confidential and solely for the use of the intended recipient. It may contain 
material protected by attorney-client privilege. If you are not the intended 
recipient or the person responsible for delivering to the intended recipient, 
be advised that you have received this email in error and that any use is 
strictly prohibited.

If you have received this email in error please notify the Information Security 
Officer by telephone on +44 [0] 29 2043 4372. Please then delete this email and 
destroy any copies of it. This email has been swept for viruses before leaving 
our system.

Security Warning: Please note that this email has been created in the knowledge 
that Internet email is not a 100% secure communications medium. We advise that 
you understand and accept this lack of security when emailing us.

Viruses: Although we have taken steps to ensure that this email and any 
attachments are free from any virus, we advise that in keeping with good 
computing practice the recipient should ensure they are actually virus free.
We may monitor the content of E-mails sent and received via our network for 
viruses or unauthorised use and for other lawful business purposes.


This e-mail has been scanned for all viruses by Messagelabs. The
service is powered by MessageLabs. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

RE: RT devices?

[Trees, Ray]

We ended up configuring VPN using the built in VPN support on the RT to a Cisco 
ASA and it does support IKEv2 which I haven't switched to quite yet.

From: Mark Kelsay [mailto:mark.kel...@confused.com]
Sent: Wednesday, March 20, 2013 8:12 AM
To: NT System Admin Issues
Subject: RE: RT devices?

We have looked briefly at the RT devices for our on-call team but ruled them 
out straight away.  We use a Sonicwall remote access device and after speaking 
with them we have found out that Microsoft have not written any APIs for 
companies like Sonicwall to create remote access software, so no chance of SSL 
/ IPSEC VPN.

This is the response from Sonicwall:

Unfortunately, the Microsoft Windows 8 RT Operating System doesn't include SSL 
or IPSec VPN APIs to allow vendors such as Dell SonicWALL to support adding VPN 
clients to their devices. This is a current limitation with this OS. I know 
Dell now have full blown Windows 8 tablets available now, which might be a 
better option.

Also the only way to install software is from the application site, so no 
bespoke software can be installed.


Cheers,
Mark



From: Ryan Finnesey [mailto:r...@finnesey.com]
Sent: 20 March 2013 03:42
To: NT System Admin Issues
Subject: RT devices?

I am curious to know if anyone is thinking or has deployed RT devices to their 
end users.

Cheers
Ryan


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

_
This message has been checked for all known viruses by bluesource. For further 
information visit www.blue-source.comhttp://www.blue-source.com

powered by Messagelabs


** This email is sent for and on behalf of Inspop.com Limited **

Authorised and regulated by the Financial Services Authority. Registration no. 
310635.

Inspop.com Limited [also trading as Confused.com] is registered in England 
and Wales at 3rd Floor, Greyfriars House, Greyfriars Road, Cardiff, CF10 3AL 
[Reg. No. 03857130]. Any opinions expressed in this email are those of the 
individual and not necessarily the company. This email and any files 
transmitted with it, including replies and forwarded copies [which may contain 
alterations] subsequently transmitted from the Company, are confidential and 
solely for the use of the intended recipient. It may contain material protected 
by attorney-client privilege. If you are not the intended recipient or the 
person responsible for delivering to the intended recipient, be advised that 
you have received this email in error and that any use is strictly prohibited.

If you have received this email in error please notify the Information Security 
Officer by telephone on +44 [0] 29 2043 4372. Please then delete this email and 
destroy any copies of it. This email has been swept for viruses before leaving 
our system.

Security Warning: Please note that this email has been created in the knowledge 
that Internet email is not a 100% secure communications medium. We advise that 
you understand and accept this lack of security when emailing us.

Viruses: Although we have taken steps to ensure that this email and any 
attachments are free from any virus, we advise that in keeping with good 
computing practice the recipient should ensure they are actually virus free.
We may monitor the content of E-mails sent and received via our network for 
viruses or unauthorised use and for other lawful business purposes.


This e-mail has been scanned for all viruses by Messagelabs. The
service is powered by MessageLabs. 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
-
Key Technology, Inc. Disclaimer Notice - The information and attachment(s) 
contained in this communication are intended for the addressee only, and may be 
confidential and/or legally privileged. If you have received this communication 
in error, please contact the sender immediately, and delete this communication 
from any computer or network system. Any interception, review, printing, 
copying, re-transmission, dissemination, or other use of, or taking of any 
action upon this information by persons or entities other than the intended 
recipient is strictly 

RE: Manage JAVA updates

[Ray]

This Java thing is a support nightmare.  Our state rolled out a new
personnel app that's java-based.  So every state employee now has to connect
to this thing.  And of course it does a Java check, and of course it tells
users that they have old versions that should be removed, or that they need
the latest version.   They get the option to update the latest version.
And OUR agency blocks downloads for non-IT staff.   And so the calls just
keep coming. 

 

The simplest solution would've been to just open the downloads for java to
everyone until the state and/or app developer comes up with a better
solution.  But the people in charge of the network think that's a bad ideas
because they know that java can affect CiscoWorks (used by exactly 1 person)
and the HP ILO boards, also used by at best some of the IT staff.   

 

From: David Lum [mailto:david@nwea.org] 
Sent: Monday, March 18, 2013 7:02 AM
To: NT System Admin Issues
Subject: RE: Manage JAVA updates

 

At two locations (%dayjob% and my biggest personal biz client) I use VMWare
vCenter Protect (was Shavlik) to patch Java and other non-MS titles. I also
notice GFI Vipre Business Premium (used at my other personal biz client)
also does patching of Java and a few Adobe items (Flash, Shockwave, etc.),
as well as Firefox and Chrome and a few other products.

 

vCenter Protect v9 (beta just came out) has cloud-managed agents that you
can manage via your local vCenter Protect console, means you can now manage
systems that never or rarely VPN in, all they need is an Internet
connection, you can even install their agents via Internet. I just watched
the webinar on v9 this morning:

http://www.shavlik.com/webinars/shavlik-video/resources.aspx?id=221257297600
1

 

Dave

 

From: Tom Miller [mailto:tominyorkt...@gmail.com] 
Sent: Monday, March 18, 2013 6:49 AM
To: NT System Admin Issues
Subject: Re: Manage JAVA updates

 

System Center Essentials 2007, but I plan to update that to 2010, since that
version is pretty much useless for anything.  

On Mon, Mar 18, 2013 at 9:04 AM, Christopher Bodnar
christopher_bod...@glic.com wrote:

What are you using now for patching? 


Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise
Architecture and Engineering Services 


Tel 610-807-6459  
3900 Burgess Place, Bethlehem, PA 18017 
christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

www.guardianlife.com http://www.guardianlife.com/  








From:Tom Miller tominyorkt...@gmail.com 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:03/18/2013 09:01 AM 
Subject:Manage JAVA updates 

  _  




Anyone have any suggestions for managing JAVA updates in a corporate
environment?  At my last job we used the kbox as it was part of the patch
stream, but the product I use  now does not include JAVA as part of the
stream.  I'd like to be able to control when updates are performed, do to it
silently, and to turn off that annoying prompt to install the Ask toolbar. 
  
Thanks, 
Tom 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpg

RE: OT: MCM certification

[Ray]

If it’s going to be competing with the cost of a college degree it’s crazy.  

 

From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Thursday, February 14, 2013 3:28 PM
To: NT System Admin Issues
Subject: RE: OT: MCM certification

 

I suppose one issue is that for every person that says “$20,000 is too much, it 
should be $10,000 and lots more people would do it”, there’s another person 
that will say “$10,000 is too much, it should be $5,000 and lots more people 
would do it”, and so on.

 

Cheers

Ken

 

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Friday, 15 February 2013 7:45 AM
To: NT System Admin Issues
Subject: Re: OT: MCM certification

 

Don't want to keep on this thread, it's obvious that most of you are in 
disagreement with me. I'm OK with that. But to your comment: 

I think I get who the certification is targeting. My point is that I think 
there is a larger population out there that might be interested in and possibly 
be valid candidates for, this  certification in mid sized shops, but the cost 
is prohibitive. And I understand that there has to be a fee for this. And I 
even agree that MS isn't really making money off this. But just doing some 
basic numbers (I may be way off on these figures so don't crucify me on this). 
If there are 4 sessions a year in any given track (SQL, Messaging, DS, 
etc...)That's 100 people that need to pay for the course. Thats' $1.4milliion. 
Even say they cut this in half, they would only be reducing their revenue by 
$750K per track. In terms of MS, that is peanuts. This is not a revenue stream 
for MS, they are just trying to recoup some of the costs. But this would open 
it up to a much larger pool of potential candidates. 


Christopher Bodnar 
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services 


Tel 610-807-6459  
3900 Burgess Place, Bethlehem, PA 18017 
 mailto: christopher_bod...@glic.com 




The Guardian Life Insurance Company of America

 http://www.guardianlife.com/ www.guardianlife.com 








From:Andrew S. Baker asbz...@gmail.com 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:02/14/2013 02:59 PM 
Subject:Re: OT: MCM certification 

  _  




Chris, if you look at who that certification is targeting, the ROI is very, 
very straightforward. 

Lowering the price wouldn't lower the barrier that much, and the cost of the 
overall process must come from somewhere. 

  

  


ASB
 http://xeeme.com/AndrewBaker http://XeeMe.com/AndrewBaker
Providing Virtual CIO Services (IT Operations  Information Security) for the 
SMB market…

  



On Wed, Feb 13, 2013 at 10:20 AM, Christopher Bodnar 
christopher_bod...@glic.com wrote: 
Was reading this yesterday: 

 http://blogs.metcorpconsulting.com/tech/?p=1101 
http://blogs.metcorpconsulting.com/tech/?p=1101 

And got to thinking about this again. It still bothers me that the road to this 
certification is artificially blocked by monetary constraints. I think the 
certification is difficult enough without adding that as a factor to reduce the 
overall numbers just to increase the value of this certification. Maybe I'm 
in the minority, but I know I wont' even consider this certification, just 
based on the cost. Not that I think I would pass, or that I even think I'm 
ready for something like this. I don't work for MS and I'm not a consultant. 
Which from what I've seen are the 2 primary groups of people seeking this 
certification. My employer would never consider this strictly based on cost and 
ROI. 

Anyone else of the same opinion? Or am I way off base here? 




Chris 



 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpg

RE: Patch management recommendations

[Ray]

I'm just glad I no longer have to travel there for games.  It's a pitstop on
our way to Las Vegas. 

-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org] 
Sent: Thursday, January 17, 2013 5:17 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

It is indeed an odd town. But when you're a falconer, it's one of the best
places in the US to live...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, January 17, 2013 3:38 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

There is that. Kind of an odd town though. My kids played sports against
Kingman.  

-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org]
Sent: Thursday, January 17, 2013 10:44 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

Everything's remote. Most clients in California, but cost of living is
better here... :-)

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, January 17, 2013 7:53 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

In Kingman? Wow. 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Patch management recommendations

[Ray]

In Kingman? Wow. 

Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a
failure for many reasons. I work for basically an ADC subnet, and I try to
manually touch every machine (about 200) on a regular basis. 

Obviously that's not practical for everyone.  

-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org] 
Sent: Wednesday, January 16, 2013 4:03 PM
To: NT System Admin Issues
Subject: Patch management recommendations

I work for a consulting firm that manages a variety of SMB clients. As we
increase our client load and the size of the clients (moving from the 3-10
seat to the 50-1000 seat clients) we are implementing more advanced products
for a variety of tasks.

We are currently looking at patch management solutions. Our current paradigm
is a mix of WSUS and manual intervention, but it's not enough, obviously. I
haven't used a centralized patch management system for around 5-6 years
(used to use early versions of Shavlik) so I haven't been keeping up with
the market. We're now looking for something that does 3rd party apps, not
just MS stuff, so WSUS is off the table. Our clients are all on MS
platforms, though; almost no *nix or Apple.

I don't envision a one-size-fits-all product. I expect that we'll want a
variety of solutions tailored to the size and complexity of the client. And
I have no illusions about the ease of patch management given any product.
:-)
My boss would love an MSP-style of centrally managed product that can handle
all our clients, but my belief is that trying to go that route is much more
difficult than doing per-client implementations, especially without
dedicated patch management admins.


Having said all that, is anyone working with patch management systems that
they really like for this space? Also, any you really DON'T like?

Thanks!

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***




~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Patch management recommendations

[Ray]

Completely false as I'm doing it now and did it in my previous 2 jobs.   

 

If I had to wait for my domain admins to finally get it to work right we'd
have been several hundred patches behind.   The additional advantage, since
I'm not in a nice pristine homogenous environment, is a hands on review of
what's on the PC, do some maintenance, etc.   

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, January 17, 2013 8:21 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Fixed that for you...

 

-Original Message-
From: Ray [mailto:rz...@qwest.net] 
Sent: Thursday, January 17, 2013 9:53 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

In Kingman? Wow. 

 

Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a
failure for many reasons. I work for basically an ADC subnet, and I try to
manually touch every machine (about 200) on a regular basis. 

 

Obviously that's not practical for everyone anyone.  

 

-Original Message-

From: Charlie Kaiser [ mailto:charl...@golden-eagle.org
mailto:charl...@golden-eagle.org]

Sent: Wednesday, January 16, 2013 4:03 PM

To: NT System Admin Issues

Subject: Patch management recommendations

 

I work for a consulting firm that manages a variety of SMB clients. As we
increase our client load and the size of the clients (moving from the 3-10
seat to the 50-1000 seat clients) we are implementing more advanced products
for a variety of tasks.

 

We are currently looking at patch management solutions. Our current paradigm
is a mix of WSUS and manual intervention, but it's not enough, obviously. I
haven't used a centralized patch management system for around 5-6 years
(used to use early versions of Shavlik) so I haven't been keeping up with
the market. We're now looking for something that does 3rd party apps, not
just MS stuff, so WSUS is off the table. Our clients are all on MS
platforms, though; almost no *nix or Apple.

 

I don't envision a one-size-fits-all product. I expect that we'll want a
variety of solutions tailored to the size and complexity of the client. And
I have no illusions about the ease of patch management given any product.

:-)

My boss would love an MSP-style of centrally managed product that can handle
all our clients, but my belief is that trying to go that route is much more
difficult than doing per-client implementations, especially without
dedicated patch management admins.

 

 

 

Having said all that, is anyone working with patch management systems that
they really like for this space? Also, any you really DON'T like?

 

Thanks!

 

***

Charlie Kaiser

 mailto:charl...@golden-eagle.org charl...@golden-eagle.org

Kingman, AZ

***

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 

---

To manage subscriptions click here:

 http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to  mailto:listmana...@lyris.sunbeltsoftware.com
listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 

---

To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to  mailto:listmana...@lyris.sunbeltsoftware.com
listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Patch management recommendations

[Ray]

Of course there's a larger problem, none of which is within my control.   

 

They've been screwing around with SCCM for several years, including using MS
(Premier?) consulting. Now they're trying to get 2012 to work. 

 

Not worth the effort at this point.  

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, January 17, 2013 10:29 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Well, there's a larger problem then that needs to be addressed.  These
things should be automated. Patching using ConfigMgr is not that tough, and
getting it to work right is not that tough, either.  Maybe offer your help
to get it working.  It'll save you a lot of time and ensure that your
endpoints are secure today, instead of having to wait for you to get around
to each PC.  All of those maintenance tasks and PC reviews can be automated,
too.

 

From: Ray [mailto:rz...@qwest.net] 
Sent: Thursday, January 17, 2013 12:15 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Completely false as I'm doing it now and did it in my previous 2 jobs.   

 

If I had to wait for my domain admins to finally get it to work right we'd
have been several hundred patches behind.   The additional advantage, since
I'm not in a nice pristine homogenous environment, is a hands on review of
what's on the PC, do some maintenance, etc.   

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, January 17, 2013 8:21 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Fixed that for you...

 

-Original Message-
From: Ray [mailto:rz...@qwest.net] 
Sent: Thursday, January 17, 2013 9:53 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

In Kingman? Wow. 

 

Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a
failure for many reasons. I work for basically an ADC subnet, and I try to
manually touch every machine (about 200) on a regular basis. 

 

Obviously that's not practical for everyone anyone.  

 

-Original Message-

From: Charlie Kaiser [ mailto:charl...@golden-eagle.org
mailto:charl...@golden-eagle.org]

Sent: Wednesday, January 16, 2013 4:03 PM

To: NT System Admin Issues

Subject: Patch management recommendations

 

I work for a consulting firm that manages a variety of SMB clients. As we
increase our client load and the size of the clients (moving from the 3-10
seat to the 50-1000 seat clients) we are implementing more advanced products
for a variety of tasks.

 

We are currently looking at patch management solutions. Our current paradigm
is a mix of WSUS and manual intervention, but it's not enough, obviously. I
haven't used a centralized patch management system for around 5-6 years
(used to use early versions of Shavlik) so I haven't been keeping up with
the market. We're now looking for something that does 3rd party apps, not
just MS stuff, so WSUS is off the table. Our clients are all on MS
platforms, though; almost no *nix or Apple.

 

I don't envision a one-size-fits-all product. I expect that we'll want a
variety of solutions tailored to the size and complexity of the client. And
I have no illusions about the ease of patch management given any product.

:-)

My boss would love an MSP-style of centrally managed product that can handle
all our clients, but my belief is that trying to go that route is much more
difficult than doing per-client implementations, especially without
dedicated patch management admins.

 

 

 

Having said all that, is anyone working with patch management systems that
they really like for this space? Also, any you really DON'T like?

 

Thanks!

 

***

Charlie Kaiser

 mailto:charl...@golden-eagle.org charl...@golden-eagle.org

Kingman, AZ

***

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 

---

To manage subscriptions click here:

 http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to  mailto:listmana...@lyris.sunbeltsoftware.com
listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 

---

To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to  mailto:listmana...@lyris.sunbeltsoftware.com
listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http

RE: Patch management recommendations

[Ray]

There is that. Kind of an odd town though. My kids played sports against
Kingman.  

-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org] 
Sent: Thursday, January 17, 2013 10:44 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

Everything's remote. Most clients in California, but cost of living is
better here... :-)

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, January 17, 2013 7:53 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

In Kingman? Wow. 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Patch management recommendations

[Ray]

Thanks.  I don't know who they've been working with.  I'm not on that team.
I have no idea how far along they've gotten.  Remote control and imaging was
their 1st priorities. 

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, January 17, 2013 3:43 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Wow.I feel sorry for you, man.  Your life could be a lot easier.  Frankly,
I'm not surprised MS consulting can't get it working.  We were having a
discussion about this last week.  MCS has about as much time to ramp up on
the new products as everyone else, a lot of it has to be done on their own.
So, unless you get a top consultant or a real go-getter, you're better off
doing it on your own.

 

If you do have problems with their org, let me know and I can escalate.  I'd
just need to know who you're working with.  If you're willing to do that,
email me offline.

 

From: Ray [mailto:rz...@qwest.net] 
Sent: Thursday, January 17, 2013 5:35 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Of course there's a larger problem, none of which is within my control.   

 

They've been screwing around with SCCM for several years, including using MS
(Premier?) consulting. Now they're trying to get 2012 to work. 

 

Not worth the effort at this point.  

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, January 17, 2013 10:29 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Well, there's a larger problem then that needs to be addressed.  These
things should be automated. Patching using ConfigMgr is not that tough, and
getting it to work right is not that tough, either.  Maybe offer your help
to get it working.  It'll save you a lot of time and ensure that your
endpoints are secure today, instead of having to wait for you to get around
to each PC.  All of those maintenance tasks and PC reviews can be automated,
too.

 

From: Ray [mailto:rz...@qwest.net] 
Sent: Thursday, January 17, 2013 12:15 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Completely false as I'm doing it now and did it in my previous 2 jobs.   

 

If I had to wait for my domain admins to finally get it to work right we'd
have been several hundred patches behind.   The additional advantage, since
I'm not in a nice pristine homogenous environment, is a hands on review of
what's on the PC, do some maintenance, etc.   

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, January 17, 2013 8:21 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

Fixed that for you...

 

-Original Message-
From: Ray [mailto:rz...@qwest.net] 
Sent: Thursday, January 17, 2013 9:53 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

 

In Kingman? Wow. 

 

Anyway, AZ Dept of Corrections tries to use SCCM. I'd say it's been a
failure for many reasons. I work for basically an ADC subnet, and I try to
manually touch every machine (about 200) on a regular basis. 

 

Obviously that's not practical for everyone anyone.  

 

-Original Message-

From: Charlie Kaiser [ mailto:charl...@golden-eagle.org
mailto:charl...@golden-eagle.org]

Sent: Wednesday, January 16, 2013 4:03 PM

To: NT System Admin Issues

Subject: Patch management recommendations

 

I work for a consulting firm that manages a variety of SMB clients. As we
increase our client load and the size of the clients (moving from the 3-10
seat to the 50-1000 seat clients) we are implementing more advanced products
for a variety of tasks.

 

We are currently looking at patch management solutions. Our current paradigm
is a mix of WSUS and manual intervention, but it's not enough, obviously. I
haven't used a centralized patch management system for around 5-6 years
(used to use early versions of Shavlik) so I haven't been keeping up with
the market. We're now looking for something that does 3rd party apps, not
just MS stuff, so WSUS is off the table. Our clients are all on MS
platforms, though; almost no *nix or Apple.

 

I don't envision a one-size-fits-all product. I expect that we'll want a
variety of solutions tailored to the size and complexity of the client. And
I have no illusions about the ease of patch management given any product.

:-)

My boss would love an MSP-style of centrally managed product that can handle
all our clients, but my belief is that trying to go that route is much more
difficult than doing per-client implementations, especially without
dedicated patch management admins.

 

 

 

Having said all that, is anyone working with patch management systems that
they really like for this space? Also, any you really DON'T like?

 

Thanks!

 

***

Charlie Kaiser

 mailto:charl...@golden-eagle.org charl...@golden-eagle.org

Kingman, AZ

***

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http

RE: System/file monitoring

[Ray]

Not yet.  Thanks! 

 

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Tuesday, September 25, 2012 5:18 AM
To: NT System Admin Issues
Subject: RE: System/file monitoring

 

Have you looked at this? 

 http://www.varonis.com/products/datadvantage/windows/index.html
http://www.varonis.com/products/datadvantage/windows/index.html 






Chris 








From:Ray rz...@qwest.net 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:09/24/2012 05:45 PM 
Subject:RE: System/file monitoring 

  _  




Auditing has been enabled. The MS logfiles are just too chatty. But
filesystemwatcher looks interesting. Thanks. 

-Original Message-
From: Joseph L. Casale [ mailto:jcas...@activenetwerx.com
mailto:jcas...@activenetwerx.com] 
Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues
Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]
Sent: Monday, September 24, 2012 2:09 PM
To: NT System Admin Issues
Subject: System/file monitoring

I tried a trial version of this:  http://www.poweradmin.com/file-sight/
http://www.poweradmin.com/file-sight/ =
which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something better.

TIA


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

- This message, and any attachments
to it, may contain information that is privileged, confidential, and exempt
from disclosure under applicable law. If the reader of this message is not
the intended recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited. If you have received this message in error, please notify the
sender immediately by return e-mail and delete the message and any
attachments. Thank you. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

[Ray]

I couldn't even find a price.  The demo says in a couple hours our
engineers will help get you up and running.

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Tuesday, September 25, 2012 10:12 AM
To: NT System Admin Issues
Subject: Re: System/file monitoring

 

Varonis is a strong player here, but the price will probably be higher.
OTOH, I did suggest TripWire which is not known for low prices in the
enterprise space. :)



ASB


http://XeeMe.com/AndrewBaker


Harnessing the Advantages of Technology for the SMB market.





On Tue, Sep 25, 2012 at 8:18 AM, Christopher Bodnar
christopher_bod...@glic.com wrote:

Have you looked at this? 

 http://www.varonis.com/products/datadvantage/windows/index.html
http://www.varonis.com/products/datadvantage/windows/index.html 






Chris 








From:Ray rz...@qwest.net 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:09/24/2012 05:45 PM 
Subject:RE: System/file monitoring 

  _  





Auditing has been enabled. The MS logfiles are just too chatty. But
filesystemwatcher looks interesting. Thanks. 

-Original Message-
From: Joseph L. Casale [

 mailto:jcas...@activenetwerx.com mailto:jcas...@activenetwerx.com] 

Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues

Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]

Sent: Monday, September 24, 2012 2:09 PM


To: NT System Admin Issues

Subject: System/file monitoring

I tried a trial version of this: 

 http://www.poweradmin.com/file-sight/
http://www.poweradmin.com/file-sight/ =


which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something better.

TIA

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

System/file monitoring

[Ray]

I tried a trial version of this: http://www.poweradmin.com/file-sight/ =
which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them. 

Just curious if anyone's using something better.   

TIA


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

[Ray]

Auditing has been enabled. The MS logfiles are just too chatty. But
filesystemwatcher looks interesting. Thanks. 

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues
Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]
Sent: Monday, September 24, 2012 2:09 PM
To: NT System Admin Issues
Subject: System/file monitoring

I tried a trial version of this: http://www.poweradmin.com/file-sight/ =
which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something better.

TIA


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Death of the Desktops?

[Ray Zorz]

My son is at the South Dakota School of Mines. Every student has a tablet PC 
which allows them to do the stylus things as well as the keyboard things.   

-Original Message-
From: Ben M. Schorr [mailto:b...@rolandschorr.com] 
Sent: Friday, August 24, 2012 11:38 AM
To: NT System Admin Issues
Subject: RE: Death of the Desktops?

I agree with Greg.  I think there's always (at least for the foreseeable 
future) going to be a role for desktop machines though I think SOME desktop 
clients are going to be replaced with docked mobile devices.

It may be that 10 years from now most of us are using some sort of tablet that, 
as Greg suggests, slips into a docking station with a real keyboard and large 
monitor(s).

Ben M. Schorr
Chief Executive Officer
__
Roland Schorr  Tower
www.rolandschorr.com

-Original Message-
From: Greg Olson [mailto:gol...@markettools.com]
Sent: Friday, August 24, 2012 11:07 AM
To: NT System Admin Issues
Subject: RE: Death of the Desktops?

The desktop isn’t going anywhere really, it's just evolving. What will probably 
fade out (except for high-end needs) is the dedicated non-mobile desktop pc. I 
can easily see were your tablet\phone\whatever  has enough processing and 
graphic power to be sitting in a dock in the office, with full keyboard and 
mouse support, and then is lifted out and taken with you on the go. There will 
always be room for the places that have users that do not need this (Call 
centers, retail, etc) so it never will truly die out.

-Greg 
  

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Friday, August 24, 2012 10:42 AM
To: NT System Admin Issues
Subject: Re: Death of the Desktops?

Spreadsheets creation and data entry, page layout, photo processing, writing, 
presentation creation - those and more are far more difficult on anything 
without a keyboard and mouse.

Kurt

On Fri, Aug 24, 2012 at 9:46 AM, Rankin, James R kz2...@googlemail.com wrote:
 Can you imagine writing technical documents or doing CAD on a tablet? 
 Sure the percentages may change, but the desktop will not go away anytime 
 soon.
 It might run on a thin client, but there's still a place for a desktop
 - even if virtual.

 Pundits have been predicting things like the death of Citrix and 
 the year of the Linux desktop for a long while. I haven't noticed 
 either of them happening.

 YMMV, IMO, etc.
 ---Blackberried
 
 From: Roger Wright rhw...@gmail.com
 Date: Fri, 24 Aug 2012 12:40:41 -0400
 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
 ReplyTo: NT System Admin Issues 
 ntsysadmin@lyris.sunbelt-software.com
 Subject: Death of the Desktops?

 There are a number of pundits pushing the notion that desktop 
 computing is facing certain death, and especially for desktop 
 computers as we've known them up to now.  Indeed, there are more 
 portable offerings available than desktop machine options, but with a higher 
 price/performance/feature ratio.
 I'm not sure I buy it, especially for many business environments where 
 access to legacy apps is critical.  But it does give me something to 
 consider as we face our annual equipment refresh cycle.

 What are your thoughts?


 Roger Wright
 ___

 If I could choose any way to destroy the world, I'd delete Google.




 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful 

RE: SOPHOS VERSION 10

[Ray Zorz]

We about 5,000 workstations using Sophos.   I am responsible for about 100
of them, and we're not seeing any problems.  The team that's ultimately
responsible for the whole 5,000 hasn't seen any issues either. 

 

From: Kelsey, John [mailto:jckel...@drmc.org] 
Sent: Monday, August 13, 2012 9:38 AM
To: NT System Admin Issues
Subject: RE: SOPHOS VERSION 10

 

The 'update' process for signatures/definitions just kills the machine
performance now.  We have a few medical applications that actually crash
whenever a Sophos update applies.  Our VM workstations become almost
unusable when an update applies.  On the previous version there was little
to no impact.

 

Like McKayla Maroney.I'm not impressed. :/

 

From: Stefan Jafs [mailto:stefan.j...@gmail.com] 
Sent: Friday, August 10, 2012 11:32 AM
To: NT System Admin Issues
Subject: Re: SOPHOS VERSION 10

 

What strangeness?

I';m currently in the midst of switching 250 users from ESET to Sophos
however I'm going right to v10, no problems at all so far with my test users
and some servers.

 

Stefan

On Thu, Aug 9, 2012 at 11:23 PM, Kelsey, John jckel...@drmc.org wrote:

We are seeing all kinds of strangeness now with v10 that we didn't have
before. :(


-Original Message-
From: Nigel Parker [mailto:nigel.par...@ultraframe.co.uk]

Sent: Tuesday, August 07, 2012 6:34 AM
To: NT System Admin Issues

Subject: RE: SOPHOS VERSION 10

Sophos
Interestingly this has now cleared itself up!


-Original Message-
From: Nigel Parker [mailto:nigel.par...@ultraframe.co.uk]
Sent: 03 August 2012 09:24
To: NT System Admin Issues
Subject: SOPHOS VERSION 10

Anyone else running sophos and this morning found the machines have upgraded
to version 10 Now where it used to take 3 seconds to open network documents
it takes about 3 hours !!!

Whats happening

Nigel Parker
Systems Engineer
Ultraframe (UK) Ltd
Tel:   01200 452329
Fax:   01200 452201
Web:   www.ultraframe.com
Email: mailto:nigel.par...@ultraframe.co.uk




Please consider the environment before printing this e-mail.

The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Please consider the environment before printing this e-mail.

The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




This email and any attached files are confidential and intended solely for
the intended recipient(s). If you are not the named recipient you should not
read, distribute, copy or alter this email. Any views or opinions expressed
in this email are those of the author and do not represent those of the
company. Warning: Although precautions have been taken to make sure no
viruses are present in this email, the company cannot accept responsibility
for any loss or damage that arise from the use of this email or attachments.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Stefan Jafs

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

This email and any attached files 

RE: SOPHOS VERSION 10

[Ray Zorz]

We've been on it for a couple years, so this was an upgrade most of us
didn't even notice. 

 

From: Kelsey, John [mailto:jckel...@drmc.org] 
Sent: Monday, August 13, 2012 9:56 AM
To: NT System Admin Issues
Subject: RE: SOPHOS VERSION 10

 

Interesting..did you upgrade from 9.7 or install 10.0 fresh?

 

From: Ray Zorz [mailto:rz...@qwest.net] 
Sent: Monday, August 13, 2012 12:45 PM
To: NT System Admin Issues
Subject: RE: SOPHOS VERSION 10

 

We about 5,000 workstations using Sophos.   I am responsible for about 100
of them, and we're not seeing any problems.  The team that's ultimately
responsible for the whole 5,000 hasn't seen any issues either. 

 

From: Kelsey, John [mailto:jckel...@drmc.org] 
Sent: Monday, August 13, 2012 9:38 AM
To: NT System Admin Issues
Subject: RE: SOPHOS VERSION 10

 

The 'update' process for signatures/definitions just kills the machine
performance now.  We have a few medical applications that actually crash
whenever a Sophos update applies.  Our VM workstations become almost
unusable when an update applies.  On the previous version there was little
to no impact.

 

Like McKayla Maroney.I'm not impressed. :/

 

From: Stefan Jafs [mailto:stefan.j...@gmail.com] 
Sent: Friday, August 10, 2012 11:32 AM
To: NT System Admin Issues
Subject: Re: SOPHOS VERSION 10

 

What strangeness?

I';m currently in the midst of switching 250 users from ESET to Sophos
however I'm going right to v10, no problems at all so far with my test users
and some servers.

 

Stefan

On Thu, Aug 9, 2012 at 11:23 PM, Kelsey, John jckel...@drmc.org wrote:

We are seeing all kinds of strangeness now with v10 that we didn't have
before. :(


-Original Message-
From: Nigel Parker [mailto:nigel.par...@ultraframe.co.uk]

Sent: Tuesday, August 07, 2012 6:34 AM
To: NT System Admin Issues

Subject: RE: SOPHOS VERSION 10

Sophos
Interestingly this has now cleared itself up!


-Original Message-
From: Nigel Parker [mailto:nigel.par...@ultraframe.co.uk]
Sent: 03 August 2012 09:24
To: NT System Admin Issues
Subject: SOPHOS VERSION 10

Anyone else running sophos and this morning found the machines have upgraded
to version 10 Now where it used to take 3 seconds to open network documents
it takes about 3 hours !!!

Whats happening

Nigel Parker
Systems Engineer
Ultraframe (UK) Ltd
Tel:   01200 452329
Fax:   01200 452201
Web:   www.ultraframe.com
Email: mailto:nigel.par...@ultraframe.co.uk




Please consider the environment before printing this e-mail.

The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Please consider the environment before printing this e-mail.

The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

This email and any attached files are confidential and intended solely for
the intended recipient(s). If you are not the named recipient you should not
read, distribute, copy or alter this email. Any views or opinions expressed
in this email are those of the author and do not represent those of the
company. Warning: Although precautions have been taken to make sure no
viruses are present in this email, the company cannot accept responsibility
for any loss or damage that arise from the use of this email or attachments.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email

RE: Crazy User Tricks #47

[Ray]

We've had upper management folks that did that, particularly in the
groupwise days.  By policy we were supposed to keep stuff cleaned out, but
being special, he had to have a special policy created. 

 

Then of course he moved to another facility, with a new post office, and
they were all gone.   My boss spent days trying to recover the damn things.


 

From: Stephen Holtz [mailto:ste...@addisonreserve.cc] 
Sent: Wednesday, July 25, 2012 9:23 AM
To: NT System Admin Issues
Subject: RE: Crazy User Tricks #47

 

Keeping mail in the deleted items folder must be an honored tradition.  I
was once converting from ccmail (yes a long time ago) to exchange 5.5 and
the GM of the company had over 10k items in his deleted items folder.  I
asked him why and he said in case he needs them again.  Next time I run into
that I will use Kim's response.

 

Stephen L. Holtz, MCSE, MCT
Director of Information Technology
Addison Reserve Country Club
7201 Addison Reserve Blvd.
Delray Beach, Fl. 33446
Ph: 561-455-1220
Cell: 561-441-0646

www.addisonreserve.cc http://www.addisonreserve.cc/ 

Description: ARLogoDescription: PlatinumClub

Proudly recognized as a 5-Star

Platinum Club of America.

 

This e-mail, and any attachments thereto, is intended only for use by the
addressee(s) named herein and may contain legally privileged and/or
confidential information. If you are not the intended recipient of this
e-mail, you are hereby notified that any dissemination, distribution or
copying of this e-mail, and any attachments thereto, is strictly prohibited.
If you have received this e-mail in error, please notify me by replying to
this message and permanently delete the original and any copy of this e-mail
and any printout thereof.

 

From: Kim Longenbaugh [mailto:k...@colonialsavings.com] 
Sent: Wednesday, July 25, 2012 11:40 AM
To: NT System Admin Issues
Subject: RE: Crazy User Tricks #47

 

Our users like to save their stuff in Deleted Items.  They have thousands of
neatly organized folders there.  Then they call and complain that important
messages have disappeared.  When I ask if they keep their task records in
the trash can at home, they don't understand why I ask.

 

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: Wednesday, July 25, 2012 10:05 AM
To: NT System Admin Issues
Subject: RE: Crazy User Tricks #47

 

Wows that is an Email Pack rat alrighty.

 

I am sure that the PST's was in the users profile directories bloating there
profile and each was the 2GB+?

 

See that one before 

 

Z

 

Edward E. Ziots, CISSP, Security +, Network +

Security Engineer

Lifespan Organization

ezi...@lifespan.org

 

From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Wednesday, July 25, 2012 10:53 AM
To: NT System Admin Issues
Subject: Crazy User Tricks #47

 

Just ran across a user complaining that Outlook has been taking a long time
to open.  Investigation revealed he had 61 PST files and all were attached.
I've seen 4 or 5, but never 61!


Roger Wright
___

Geocaching:  Hide, Hunt, Find  Repeat - It's FUN!

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.jpgimage002.jpg

RE: OT:windows phone and outlook notes

[Trees, Ray]

Strange, I can't find that option but it would be very handy.

From: Steven Peck [mailto:sep...@gmail.com]
Sent: Wednesday, May 02, 2012 8:34 PM
To: NT System Admin Issues
Subject: Re: OT:windows phone and outlook notes

And for OneNote

Go into Outlook Notes,
Select them all
Right Click and
'Send to OneNote'

No add on needed :)

On Wed, May 2, 2012 at 4:34 PM, Rod Trent 
rodtr...@myitforum.commailto:rodtr...@myitforum.com wrote:
Incidentally, I went into my Outlook Notes area, chose all notes, and used the 
Evernote add-in for Outlook and exported everything to Evernote.  Quick and 
easy.

One other thing for synching Outlook notes, if you use Android.  I keep Outlook 
synched with Android using CompanionLink.

http://www.companionlink.com/


From: Steven M. Caesare 
[mailto:scaes...@caesare.commailto:scaes...@caesare.com]
Sent: Wednesday, May 02, 2012 7:22 PM

To: NT System Admin Issues
Subject: RE: OT:windows phone and outlook notes

That's what I've been using as well...

-sc

From: Rod Trent [mailto:rodtr...@myitforum.commailto:rodtr...@myitforum.com]
Sent: Wednesday, May 02, 2012 7:16 PM
To: NT System Admin Issues
Subject: RE: OT:windows phone and outlook notes

That's why I use Evernote.  Evernote works the same across Android, iOS, 
Windows - even the Windows 8 app (downloadable from the Windows 8 market).

OneNote is great coupled with Outlook and Exchange, but when you use multiple 
devices, it's not a great solution.   Evernote does notes and more.


From: Steven M. Caesare 
[mailto:scaes...@caesare.com]mailto:[mailto:scaes...@caesare.com]
Sent: Wednesday, May 02, 2012 6:59 PM
To: NT System Admin Issues
Subject: RE: OT:windows phone and outlook notes

I wish the Android version wasn't so feature stripped.

-sc

From: Micheal Espinola Jr 
[mailto:michealespin...@gmail.com]mailto:[mailto:michealespin...@gmail.com]
Sent: Wednesday, May 02, 2012 6:55 PM
To: NT System Admin Issues
Subject: Re: OT:windows phone and outlook notes

OneNote is surprisingly awesome.  I'm a converted true believer.

--
Espi


On Wed, May 2, 2012 at 3:48 PM, Trees, Ray 
rtr...@key.netmailto:rtr...@key.net wrote:
   I'm using OneNote as well and found that I like the flexibility and 
formatting.  I have copied most of my notes from Outlook into OneNote so I have 
them.

-Original Message-
From: Bill Humphries 
[mailto:nt...@hedgedigger.commailto:nt...@hedgedigger.com]
Sent: Wednesday, May 02, 2012 11:55 AM
To: NT System Admin Issues
Subject: OT:windows phone and outlook notes
Hey guys, anyone here using windows phone found a reasonable solution for 
syncing exchange/outlook notes to your phone?  I'm really missing this and my 
google-fu is failing me.
Since I'm so OT anyway, I'll go ahead and day I'm really liking the windows 
phone interface, just missing some of my favorite apps right now.

Bill
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
-
Key Technology, Inc. Disclaimer Notice - The information and attachment(s) 
contained in this communication are intended for the addressee only, and may be 
confidential and/or legally privileged. If you have received this communication 
in error, please contact the sender immediately, and delete this communication 
from any computer or network system. Any interception, review, printing, 
copying, re-transmission, dissemination, or other use of, or taking of any 
action upon this information by persons or entities other than the intended 
recipient is strictly prohibited by law and may subject them to criminal or 
civil liability. Key Technology, Inc. is not liable for the improper and/or 
incomplete transmission of the information contained in this communication or 
for any delay in its receipt.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http

RE: OT:windows phone and outlook notes

[Trees, Ray]

I'm using OneNote as well and found that I like the flexibility and 
formatting.  I have copied most of my notes from Outlook into OneNote so I have 
them.

-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Wednesday, May 02, 2012 11:55 AM
To: NT System Admin Issues
Subject: OT:windows phone and outlook notes

Hey guys, anyone here using windows phone found a reasonable solution for 
syncing exchange/outlook notes to your phone?  I'm really missing this and my 
google-fu is failing me.

Since I'm so OT anyway, I'll go ahead and day I'm really liking the windows 
phone interface, just missing some of my favorite apps right now.

Bill

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
-
Key Technology, Inc. Disclaimer Notice - The information and attachment(s) 
contained in this communication are intended for the addressee only, and may be 
confidential and/or legally privileged. If you have received this communication 
in error, please contact the sender immediately, and delete this communication 
from any computer or network system. Any interception, review, printing, 
copying, re-transmission, dissemination, or other use of, or taking of any 
action upon this information by persons or entities other than the intended 
recipient is strictly prohibited by law and may subject them to criminal or 
civil liability. Key Technology, Inc. is not liable for the improper and/or 
incomplete transmission of the information contained in this communication or 
for any delay in its receipt.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Help desk software

[Ray]

I know this has come up before, but I have a few variables not everyone
would have.  I have users on a restricted VLAN (and finally a child domain
so they're at least logging onto the network) with no internet access or
email. I also have staff with internet and exchange.  All of them can get to
a centralized server. I just need basic ticketing.



  


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Help desk software

[Ray]

Thanks!

-Original Message-
From: Cameron Cooper [mailto:ccoo...@aurico.com] 
Sent: Friday, March 16, 2012 12:01 PM
To: NT System Admin Issues
Subject: RE: Help desk software

Check out SysAid.  We tried their free edition before upgrading to the Pro
edition.  It's very easy from install to use.  Their support is great as
well.

Regards,

Cameron


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Friday, March 16, 2012 12:42 PM
To: NT System Admin Issues
Subject: Help desk software

I know this has come up before, but I have a few variables not everyone
would have.  I have users on a restricted VLAN (and finally a child domain
so they're at least logging onto the network) with no internet access or
email. I also have staff with internet and exchange.  All of them can get to
a centralized server. I just need basic ticketing.






~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


CONFIDENTIALITY NOTICE: This email message is intended only for the person
or entity to which it is addressed and may contain confidential material.
Any unauthorized review, use, disclosure, downloading, copying or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply email and permanently delete all copies of the
original message. If you are the intended recipient but do not wish to
receive communications through this medium, please advise the sender
immediately.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Help desk software

[Ray]

Thanks! 

-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Friday, March 16, 2012 2:40 PM
To: NT System Admin Issues
Subject: Re: Help desk software

If you have an internal webserver or don't mind building one, you can use
this.  Free is a nice price. 

http://www.troubleticketexpress.com/

Ray wrote:
 I know this has come up before, but I have a few variables not 
 everyone would have.  I have users on a restricted VLAN (and finally a 
 child domain so they're at least logging onto the network) with no 
 internet access or email. I also have staff with internet and 
 exchange.  All of them can get to a centralized server. I just need basic
ticketing.



   


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

   


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC lifecycle?

[Ray]

We don't have a policy, but we're trying for about  4 years. 

 

From: Justin Thomas [mailto:jat...@gmail.com] 
Sent: Friday, March 09, 2012 3:42 PM
To: NT System Admin Issues
Subject: Re: PC lifecycle?

 

two years

On Fri, Mar 9, 2012 at 2:12 PM, David Mazzaccaro
david.mazzacc...@hudsonmobility.com wrote:

How long do you folks keep PCs and laptops in your organizations?

4? 5? 6 years?

My oldest are a few from 2006.

I am thinking I should start replacing after they hit 5 years (4 years if
heavy user/issues).

I know it will depend on the business environment.I'm just trying to get
some idea as to what others do.

Thx


.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 

Probable Contrarian

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Windows File Archive

[Ray]

I had no interest in computers (Business degree) when I moved west in 1978. I 
got a temp job doing things like dipping transistor leads in solder, or 
straigtening the leads out. That job to a second temp job fixing printers for 
Ramada Inn's computer division. Learned to fix other pieces equipment (hard 
drives, chip level board repair), then moved to a new support team supporting 
hotels. Turned out I had a knack for troubleshooting hardware and software. 
Went from there to supporting a Wang-based time and billing product for law 
firms.

Somewhere along the line my career veered away from supporting software to 
being more of a generic IT guy, often being the whole department which 
required dealing more with MS stuff than vertical markets. Meh. 

 
-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, March 09, 2012 5:49 PM
To: NT System Admin Issues
Subject: Re: Windows File Archive

Well, it's different than how I did it.

I was working in a reasonably responsible customer service position in the 
credit department of a fairly large organization when I received notification 
that there was an opening on the data processing/mainframe helpdesk. I jumped 
on that immediately

The hiring manager knew I was interested in computers, but cared more about my 
phone skills - she asked me several questions designed to elicit my ability to 
give directions and understand people as they operated line printers and 3270 
terminals and cash registers and suchlike. Those customer service skills, 
augmented by a never-completed 2-year programming curriculum from a few years 
before that, which included some JCL, 360 assembler, COBOL, Fortran RPG III, 
etc., got me hired. Aside from running a few bits of JCL, I never took 
advantage of the programming I learned, but later got involved with supporting 
folks running MS Office products on IBM PS/2s, stringing
cat3 cables for 16mbit TokenRing and SNA for Win3.1and Novell 3.11.

The rest, as they say, is history. She and a couple of other managers there 
were among the best I ever had, too. I have thanked each one of them over the 
years after I left that firm, and I still miss them.

Kurt

On Fri, Mar 9, 2012 at 12:58, David Lum david@nwea.org wrote:
 ... It's just that one fateful day, I was told, You're good at fixing 
 computers; you are now our systems administrator!.

 And that's different than the rest of us...how? :-)

 Dave

 -Original Message-
 From: Richard McClary [mailto:richard.mccl...@aspca.org]
 Sent: Friday, March 09, 2012 9:55 AM
 To: NT System Admin Issues
 Subject: RE: Windows File Archive

 +1

 I have no right to call myself a peer.  I am a research biologist by 
 training.  It's just that one fateful day, I was told, You're good at fixing 
 computers; you are now our systems administrator!.

 I cannot adequately express how much I have learned from this forum and how 
 helpful it has been!  Ben and ASB have been especially helpful.

 I've been chided by them and others on occasion, and I admit I deserved it. 
  Still, again, some who subscribe to this forum are folks whose organization 
 have tossed them in over their heads.

 That's one blanket statement.  As to another blanket statement, I did not see 
 the really abusive language until Stu quoted the message.  No, such language 
 is definitely NOT acceptable to me and to countless others!
 --
 Richard D. McClary
 Jr Infrastructure Architect, Information Technology Group
 ASPCA(r)
 1717 S. Philo Rd, Ste 36
 Urbana, IL 61802
 richard.mccl...@aspca.org
 P: 217-337-9761
 C: 217-417-1182
 F: 217-337-9761
 www.aspca.org


 -Original Message-
 From: Ben Scott [mailto:mailvor...@gmail.com]
 Sent: Friday, March 09, 2012 10:54 AM
 To: NT System Admin Issues
 Subject: Re: Windows File Archive

 On Fri, Mar 9, 2012 at 10:37 AM, William Robbins dangerw...@gmail.com wrote:
 Knowing others here as well I can safely say it's acceptable to them 
 as well.

  Please don't presume to speak for unspecified others in a blanket statement.

 -- Ben

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 The information contained in this e-mail, and any attachments hereto, is from 
 The American Society for the Prevention of Cruelty to Animals?? (ASPCA??) and 
 is intended only for use by the addressee(s) named herein and may contain 
 legally privileged and/or confidential information. If you are not the 
 intended recipient of this e-mail, you are hereby notified that any 
 dissemination, distribution, copying or use of the contents of this e-mail, 
 and any attachments hereto, is strictly prohibited. If you have received this 
 e-mail in error, please immediately notify me by reply email and 

RE: Favorite corporate PCs?

[Ray]

Obviously every situation is different.  I look at $50 savings per machines
x 2.5k/month as a significant savings, enough so that I could buy extras.
I'm usually less concerned about IT aggravation than getting the end user
up and running as fast as possible.   

 

From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Saturday, March 03, 2012 4:47 AM
To: NT System Admin Issues
Subject: RE: Favorite corporate PCs?

 

I have ~80k client machines - replace 2.5k/month. We have a couple of the
big vendors as suppliers. Obviously we're not going to a local business for
our supply.

 

But even when I was in smaller places where people would buy machines from
one of the local vendors - you couldn't get the same technology for more
than 12 months (and often less). The motherboard, NIC, video card, sound
card - something would change. Then new drivers would have to be put into
the standard build, tested, distributed etc. And that all consumes valuable
tech time that could be spent doing something else. Not worth it to save $50
on a PC

 

Cheers

Ken

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Thursday, 1 March 2012 3:55 AM
To: NT System Admin Issues
Subject: Re: Favorite corporate PCs?

 

I've been on both sides of this over the past 17 years and have heard all of
the question answer sessions before.

 

Go with a local business who has a good reputation and uses either true
Intel boards or ASUS boards.

 

Is Dell's tech support/replacement part solution that wonderful that
justifies the overpriced computer?

 

Have you *EVER* gotten a replacement part from Dell that wasn't s refurb?

 

I had servers on Gold or Platinum support and when a RAID array drive is
sent out for replacement it is a refurb.  Does that seem fair to you?

 

 

On Wed, Feb 29, 2012 at 1:59 PM, John Cook john.c...@pfsf.org wrote:

Local business go out of business at inopportune times and there is much
more to the vendor relationship with Dell than just buying a box. 

John W. Cook 
Systems Administrator 
Partnership for Strong Families


 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Wednesday, February 29, 2012 01:27 PM


To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 

Subject: Re: Favorite corporate PCs? 
 

Why not support a local business instead of buying overpriced Dell
computers? 

 

On Wed, Feb 29, 2012 at 12:24 PM, Tom Miller tmil...@hnncsb.org wrote:

We purchase a number of PCs each month as part of a rotation cycle.  I've
been a Dell customer for years, but lately don't think Dell has been
offering the best price we can get (we are non-profit and state/GSA,
although non-profit pricing is usually better).  So I'm looking around.  For
desktops I'm not too picky as long as specs are similar.  

 

HP?  Lenovo?  Big Lots?

 

Thanks,

Tom

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Favorite corporate PCs?

[Ray]

State contract here too.  We’ve been phasing Dells out for HP for servers and 
desktops. 

From: Ralph Smith [mailto:m...@gatewayindustries.org] 
Sent: Wednesday, February 29, 2012 11:02 AM
To: NT System Admin Issues
Subject: RE: Favorite corporate PCs?

 

Same here – non-profit, all Dell.  We also decided to stick with Dell to stay 
standardized.  I looked around last year and didn’t see a big enough price 
savings to make me want to move away from Dell.  We did find that we could get 
better pricing on Dell from one of our vendors (Zones) so we have been 
purchasing Dell desktops through them for the last several months.

 

From: John Cook [mailto:john.c...@pfsf.org] 
Sent: Wednesday, February 29, 2012 12:39 PM
To: NT System Admin Issues
Subject: Re: Favorite corporate PCs?

 

We're about the same as you, NP on State Dell contract. Honestly we asked 
ourselves this question about 2 yrs ago and we decided that it would cause way 
more stress on the support staff and cost more in the long run to not be 
standardized. YMMV 
John W. Cook 
Systems Administrator 
Partnership for Strong Families
 

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Wednesday, February 29, 2012 12:24 PM
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Subject: Favorite corporate PCs? 
 

We purchase a number of PCs each month as part of a rotation cycle.  I've been 
a Dell customer for years, but lately don't think Dell has been offering the 
best price we can get (we are non-profit and state/GSA, although non-profit 
pricing is usually better).  So I'm looking around.  For desktops I'm not too 
picky as long as specs are similar.  

 

HP?  Lenovo?  Big Lots?

 

Thanks,

Tom

 

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

  _  

CONFIDENTIALITY STATEMENT: The information transmitted, or contained or 
attached to or with this Notice is intended only for the person or entity to 
which it is addressed and may contain Protected Health Information (PHI), 
confidential and/or privileged material. Any review, transmission, 
dissemination, or other use of, and taking any action in reliance upon this 
information by persons or entities other than the intended recipient without 
the express written consent of the sender are prohibited. This information may 
be protected by the Health Insurance Portability and Accountability Act of 1996 
(HIPAA), and other Federal and Florida laws. Improper or unauthorized use or 
disclosure of this information could result in civil and/or criminal penalties.
Consider the environment. Please don't print this e-mail unless you really need 
to.

This email and any attached files are confidential and intended solely for the 
intended recipient(s). If you are not the named recipient you should not read, 
distribute, copy or alter this email. Any views or opinions expressed in this 
email are those of the author and do not represent those of the company. 
Warning: Although precautions have been taken to make sure no viruses are 
present in this email, the company cannot accept responsibility for any loss or 
damage that arise from the use of this email or attachments.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Favorite corporate PCs?

[Ray]

I've done the white box thing at least twice.  The good news they saved me
money.  The bad news they went out of business.  

 

From: Cynicalgeek [mailto:cynicalg...@gmail.com] 
Sent: Wednesday, February 29, 2012 11:27 AM
To: NT System Admin Issues
Subject: Re: Favorite corporate PCs?

 

Why not support a local business instead of buying overpriced Dell
computers?

 

On Wed, Feb 29, 2012 at 12:24 PM, Tom Miller tmil...@hnncsb.org wrote:

We purchase a number of PCs each month as part of a rotation cycle.  I've
been a Dell customer for years, but lately don't think Dell has been
offering the best price we can get (we are non-profit and state/GSA,
although non-profit pricing is usually better).  So I'm looking around.  For
desktops I'm not too picky as long as specs are similar.  

 

HP?  Lenovo?  Big Lots?

 

Thanks,

Tom

 

Confidentiality Notice: This e-mail message, including attachments, is for
the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure, or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin





 

-- 
-cynicalgeek-
cynicalgeekatgmail.com
--

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Another tablets question

[Ray]

Our agency made a small effort into reviewing tablets. We struggle with agency 
data going out of the building. Currently we have people that use a laptops but 
use the Cisco VPN to connect, so little data resides on the laptop.  

Tablets could be a better solution, but I seem to remember that the Androids 
didn’t work with the Cisco VPN. I would think the Win7 tablets would work.

-Original Message-
From: Terry Dickson [mailto:te...@treasurer.state.ks.us] 
Sent: Thursday, February 23, 2012 7:15 AM
To: NT System Admin Issues
Subject: re: Another tablets question

I am not recommending this, but a few months ago I saw a Viewsonic 10 Tablet 
demonstrated.  The unique thing about that one was the dual OS, it had Android, 
and Windown 7.  The time to switch between the two was a matter of less than 10 
seconds.  I have yet to get a demonstrator, even though I have repeatedly 
asked, but I am still interested.  I am probably going to try out an ASUS 
tablet in the next two weeks to see how they work with our environment.  The 
Asus also runs windows 7.  If you want a real interesting option look at the 
Yoga by lenovo.  It is not due out for a few months and will run windows 8 but 
it is pretty cool from the online reviews I have seen.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Another tablets question

[Ray]

Yes, so I’ve heard.  Not too interested in going the Apple route however.

 

From: Troy Adkins [mailto:tadk...@house.virginia.gov] 
Sent: Thursday, February 23, 2012 7:48 AM
To: NT System Admin Issues
Subject: RE: Another tablets question

 

iPads do work with the Cisco VPN. 

Troy Adkins
Network Administrator
Virginia House of Delegates
General Assembly Bldg. Room 815
804.698.1567 (O)
804.771.7917 (F)
tadk...@house.virginia.gov
 http://legis.virginia.gov/ http://legis.virginia.gov 



From:Ray rz...@qwest.net 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:02/23/2012 09:39 AM 
Subject:RE: Another tablets question 

  _  




Our agency made a small effort into reviewing tablets. We struggle with agency 
data going out of the building. Currently we have people that use a laptops but 
use the Cisco VPN to connect, so little data resides on the laptop.  

Tablets could be a better solution, but I seem to remember that the Androids 
didn’t work with the Cisco VPN. I would think the Win7 tablets would work.

-Original Message-
From: Terry Dickson [ mailto:te...@treasurer.state.ks.us 
mailto:te...@treasurer.state.ks.us] 
Sent: Thursday, February 23, 2012 7:15 AM
To: NT System Admin Issues
Subject: re: Another tablets question

I am not recommending this, but a few months ago I saw a Viewsonic 10 Tablet 
demonstrated.  The unique thing about that one was the dual OS, it had Android, 
and Windown 7.  The time to switch between the two was a matter of less than 10 
seconds.  I have yet to get a demonstrator, even though I have repeatedly 
asked, but I am still interested.  I am probably going to try out an ASUS 
tablet in the next two weeks to see how they work with our environment.  The 
Asus also runs windows 7.  If you want a real interesting option look at the 
Yoga by lenovo.  It is not due out for a few months and will run windows 8 but 
it is pretty cool from the online reviews I have seen.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~  
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:  
http://lyris.sunbelt-software.com/read/my_forums/ 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:  
http://lyris.sunbelt-software.com/read/my_forums/ 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Another tablets question

[Trees, Ray]

We have a few Samsung Series 7 Slate's here and we really like 
them.  The upside is that they are pretty small and lightweight and run the 
full Windows OS as well as have a dock where you can have one at work and one 
at home that minimizes what you have to carry with you.  The downside is that 
traveling you need to bring your keyboard/mouse and working on your lap with 
those does not work very well.  If only they would do something like the ASUS 
Transformer with one of these Samsung Slates it would be almost perfect.

From: Steven Peck [mailto:sep...@gmail.com]
Sent: Thursday, February 23, 2012 12:18 PM
To: NT System Admin Issues
Subject: Re: Another tablets question

Certain people in upper management have them.  They gave one to our CEO but he 
grew frustrated with it and gave it back.  It does do email really well and 
they have the Citrix receiver and such for 'work' stuff but he found to do any 
serious work through the receiver was frustrating and kept his laptop.
Personally, I am waiting until this fall/winter to take my plunge in tablet 
land (and cannot wait until Consumer Preview release next week to nuke and 
reload my home machine).

One of our VMware sales people used to do this 'iPad theater' when he came in 
to the meetings.  he would get his iPad out with the case and set it up with 
his keyboard, then connect to his iPhone and hit the back end VDI solution so 
he could 'take notes'.  So I started giving him ads to latops and ATT wireless 
recievers that were cheaper then his solution so eventually he stoped making it 
a production.
1.  iPad battery life! (you just asked for an outlet for your iPhone cause it's 
battery was dying)
2.  weight (you are carrying an additional keyboard)
3.  cost (you are ignoring the backend license costs)
4.  convienience (soft keyboard takes up half the screen which is the only size 
option and I see you squinting, a lot)

We spend a lot of money on VMware but sometimes they don't listen well to what 
our goals are so need reminders. Of course, that is often true for any vendor.

NOTE:  I freely admit there are scenerios where his use case does work, 
however, in our enviornment it only does so for a very small percentage of 
users at this time so I feel free to have fun with vendors.  They do play back. 
:)

I believe we have something frmo Good Technologies to manage data on them.

Steven Peck
http://www.blkmtn.org





On Thu, Feb 23, 2012 at 3:39 AM, Tom Miller 
tmil...@hnncsb.orgmailto:tmil...@hnncsb.org wrote:
Hi All,

I'm about to purchase a few tablets for testing.  I already have an iPad and it 
works fine for accessing e-mail (I use NotifyLink to deliver e-mail and 
calendaring to phones/tablets) as well as using the Citrix agent for accessing 
our XenApp resources.

Anyone have any suggestions for others?  I understand the Galaxy and Xoom are 
pretty good.  Important to me are management for business, ease of use for the 
end user, ease of management, and features for the corporate user.  I'm not 
sure how the iPads can be easily managed in the corporate world either.   I'd 
really like a tablet that could somehow log into my AD network and access file 
resources, too.  Connection to our A/V systems for projector use would be a 
bonus.

Comments and suggestions welcome.


Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
office:  757-788-0528tel:757-788-0528
mobile:  757-503-0600tel:757-503-0600


Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
/pre-brKey Technology, Inc. 
Disclaimer Notice - The information and attachment(s) contained in this 
communication are intended for the addressee only, and may be confidential 
and/or legally privileged. If you have received this communication in error, 
please contact the sender immediately, and delete this communication from any 
computer or network system. Any 

RE: Allowing or not Allowing iTunes on corporate computers????

[Ray]

On top of the backups, we have bandwidth issues, so cutting down on traffic
is always important for us.  A website with streaming commercials can be an
issue for us.   We're gradually taking away more and more stuff not deemed
business-worthy.  

 

From: Sam Cayze [mailto:sca...@gmail.com] 
Sent: Tuesday, February 14, 2012 12:38 PM
To: NT System Admin Issues
Subject: RE: Allowing or not Allowing iTunes on corporate computers

 

Can't Apple products finally sync over the air yet?  Didn't they announce
that not too long ago?

Is iTunes still even needed?

 

 

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Tuesday, February 14, 2012 1:16 PM
To: NT System Admin Issues
Subject: Re: Allowing or not Allowing iTunes on corporate computers

 

Regardless of the issues of streaming, let me fill you on on some things
about Apple products - especially when related to iTunes:  They are worse
than Adobe.

 

1.  Their update process can break easily, more often on 64bit.  I'm not
saying it common, but its easy.  And its not easy to fix.  IME it frequently
requires a manual wipe of some kind.

 

2.  They cache all of their installation files.  Just like what Adobe Reader
and related products do, they save/store install files of every single
downloaded upgrade that they process (firmware as well).  As well as
multiple backups of devices that are attached/synched, and other crap.  If
you are space-strapped, and have finite backup/sync windows - your processes
can be seriously impacted.

 

I've seen backups impacted by 10GB of older/cached upgrades of Apple
products per user.  It just keeps growing over time until you manually
delete it.  I've been a bit of a backup whore recently, so this in turn has
made me a disk-space analyst as well.   I am extremely annoyed with Apple,
Adobe, and Quickbooks especially.  Some of it can be easily compensated for
with scripts.  Some of it, not so easily scripted without non-builtin tools.

--
Espi

 

 

On Sun, Feb 12, 2012 at 2:38 PM, justino garcia jgarciaitl...@gmail.com
wrote:

iTunes removal has come up in our office.

What is norm are you allowing iTunes on the network?

-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Mobile phone management

[Ray]

Our agency is phasing out BB's too. Then they realized they needed more
control over the smartphones, so they're using Good. 

 

Jury's still out on it.   I'm still using the BB. 

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Friday, February 10, 2012 3:43 PM
To: NT System Admin Issues
Subject: RE: Mobile phone management

 

Athena is amazing.and the integration with both ConfigMgr 2007 and 2012 is
rich.

 

 

 

From: Heaton, Joseph@DFG [mailto:jhea...@dfg.ca.gov] 
Sent: Friday, February 10, 2012 4:47 PM
To: NT System Admin Issues
Subject: RE: Mobile phone management

 

That's what I meant when I said it's going away.  It's currently a separate
product, and will be going away as a separate product.  I have looked at
that, as we will be going to 2012 at some point, but I don't think it's
going to have enough functionality.  I've looked very briefly at the website
for airwatch, and am now looking at the site for apperian.  I will add
Athena to the list to look at.

 

Thanks,

 

Joe Heaton

ITB - Windows Server Support

 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Friday, February 10, 2012 1:16 PM
To: Heaton, Joseph@DFG; NT System Admin Issues
Subject: RE: Mobile phone management

 

No necessarily going away, but integrating with ConfigMgr 2012.  You'll be
able to manage apps and settings.  ConfigMgr 2012 will only support those
devices that can sync through Exchange Active Sync.

 

However, if you need more capability (and more devices) than ConfigMgr 2012
will offer (which will be the case for the majority) you'll want to look at
a 3rd party like Athena from Odyssey Software. 

 

 

Rod Trent http://myitforum.com/myitforumwp/community/members/rodtrent/ 

 http://www.myitforum.com/ Description: myITSMButton
http://twitter.com/rodtrent Description: TwitterButton
http://www.facebook.com/rodtrent Description: Facebookbutton
http://www.linkedin.com/profile/view?id=2881785 Description:
LinkedInButton

 

From: Heaton, Joseph@DFG [mailto:jhea...@dfg.ca.gov] 
Sent: Friday, February 10, 2012 3:46 PM
To: NT System Admin Issues
Subject: Mobile phone management

 

How are you guys managing mobile devices?  We are currently pretty much only
Blackberry, but when we move to Active Directory and Exchange, BES is not
coming with us, so we're going to be using Androids, iPhones, and Windows
Mobile.  I've looked very briefly at Mobile Device Manager, but that's going
away with Config Mgr 2012, which we will be upgrading to at some point.  We
will obviously want remote wipe function, and someone just mentioned FIPS to
me, also, which is an encryption?

 

Any help would be greatly appreciated, and I will go back and hit Google
again, while I wait.

 

Thanks,

 

Joe

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftwarecom/Business/VIPRE-Enterprise/
http://wwwsunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadminimage001.pngimage002.pngimage003.pngimage004.png

RE: Who in your org creates server shares?

[Ray]

In our agency it would depend on where the share will reside.  We have a
central office and we have offices.  The local offices have their own
non-domain admin IT people that can create shares on their servers as
necessary.  The domain admin team handles the big central office shares.
In theory, a department manager puts in a request for a new share, and who
needs access to it.  A group is created and members added.  Additional
membership requests must be approved by the dept manager that made the
original request. 

 

This all sounds reasonable until we realized that nobody wrote down who
requested what when.   I started at least putting comments on the shares and
groups to help keep track of this.  We stopped allowing individuals to have
access.   Sounds like you're doing what I had started to do. 

 

We were also a Novell shop, so some of this was leftovers. 

 

I am no longer on that domain admin team, having moved to one of the
offices.  My predecessor was completely clueless about shares, permissions,
etc. and I'm still bumping in some odd workarounds.

 

From: David Lum [mailto:david@nwea.org] 
Sent: Thursday, February 09, 2012 8:04 AM
To: NT System Admin Issues
Subject: RE: Who in your org creates server shares?

 

This was one _HUGE_ plus of the existing ACL's being wiped out - we
previously had hundreds (yes, multiple hundreds, lol) of this user is on
this folders ACL list because the SD guys were never told that if a folder
needed a specific ACL they needed to create a group and assign the group to
the new folder's ACL. I ran an ACL report on our primary file share a couple
years ago and almost needed a Depends because of what I found

 

After last week's ACL wipeout debacle I had a quick 30 minute meeting with
them explaining:

1.   If a folder needs a different permission set than the one above it,
create a group, assign that group to the folder and turn off inheritance if
necessary (yes, even if it's just one user).

2.   Groups for this should be Domain Local and no other kind

3.   In the description in AD, be explicit about where that group has
access to - at any time someone should be able to look at the description an
know exactly what that group does/has access to.

 

This was followed by looking at the groups in AD and showing them what's in
there. As I am diligent (some say anal, as I will fire e-mails to SD and SE
teams when I see unsatisfactory info like no or crappy descriptions) about
using the description field in AD I was able to show them that see, with
what's in AD we can recreate the ACL structure just by looking at groups.
Most Pre-Lum era groups had blank fields and others simply had For access
to files and they seemed to understand once I showed them, as I heard more
than one Aaahhh..

 

Based on the feedback here - thanks guys! - I am going to change our process
so SD no longer creates shares, only server folks.

 

Dave

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Wednesday, February 08, 2012 3:24 PM
To: NT System Admin Issues
Subject: RE: Who in your org creates server shares?

 

That sounds much better.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Steven Peck [mailto:sep...@gmail.com] 
Sent: Wednesday, February 08, 2012 6:12 PM
To: NT System Admin Issues
Subject: Re: Who in your org creates server shares?

 

A 'Group' can get a share.  An individual cannot.  In general, a 'project'
also cannot get a share.  Group shares have a form (ticket) and
justification and two owners and are tied to an AD group membership for
permission access (read_only, create) and a quota.

 

A project is welcome to a SharePoint site.

On Wed, Feb 8, 2012 at 2:54 PM, Michael B. Smith mich...@smithcons.com
wrote:

I'm shocked that your end-users get to decide what shares they want.

 

How do they justify them?

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: David Lum [mailto:david@nwea.org] 
Sent: Wednesday, February 08, 2012 5:46 PM
To: NT System Admin Issues
Subject: Who in your org creates server shares?

 

Do you guys have the server guys create the actual shares, or is it the
desktop support guys? 

 

I ask because for end users our desktop currently folks do it, but we are
moving to Win2K8 R2 DFS so share creation is a little different but
certainly not complex enough that they can't do it. Just wondered how you
guys handle it.

David Lum 
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ 

RE: Printer/Copier/MFP Contract Renewal

[Ray]

Our parent agency uses Toshiba's, which seem to be fine until of course they
aren't.  We seemed to have a couple that were chronically broken, and the
vendor should've just replaced them. 

 

Our division for some reason has switched to Ricoh's.  Too early to tell on
their reliability. 

 

From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Thursday, February 09, 2012 10:36 AM
To: NT System Admin Issues
Subject: Re: Printer/Copier/MFP Contract Renewal

 

I have to second Ben's opinion on the copiers. We currently have two
different vendors and one is far and away better than the other. Both brand
copiers have their issues but I would want to go with the better vendor for
the support. FYI, in my situation the better vendor supports the Toshiba
copiers and the other vendor support Konica-Minolta. 

On Thu, Feb 9, 2012 at 9:00 AM, Ben Scott mailvor...@gmail.com wrote:

On Thu, Feb 9, 2012 at 11:40 AM, Paul Hutchings
paul.hutchi...@mira.co.uk wrote:
 Right now I'll keep it a very broad question - who have you had good and
bad
 experiences with?

 This is a perennial question on this list.  :-)  The consensus seems
to be that all printers suck, and it's the local vendor's service and
support which matter far more.  That's certainly my experience.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin





 

-- 

Thank you,

Mike Sullivan



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Remote software

[Ray]

Due to some DNS issues in our agency, it would be great if remote control
worked by IP address too. 

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, January 26, 2012 8:07 AM
To: NT System Admin Issues
Subject: RE: Remote software

Incidentally, ConfigMgr 2012 adds some great new features to the Remote
Control component.  Some have been added back from previous versions.

http://myitforum.com/myitforumwp/2012/01/25/configmgr-2012-brings-back-ctrla
ltdel-to-remote-control-other-things/ 

-Original Message-
From: Michael Leone [mailto:oozerd...@gmail.com]
Sent: Thursday, January 26, 2012 9:19 AM
To: NT System Admin Issues
Subject: Re: Remote software

We're a LANDesk shop, especially for end-user support. My developers also
like RDP to their servers. And since most of my servers are virtualized,
if need be, I can just access the console via vCenter, as well.

On Wed, Jan 25, 2012 at 10:15 AM, Richard Stovall rich...@gmail.com wrote:
 What's everyone's favorite tool for remote access to your users'
 workstations.  I have a new satellite office that does not have an IT 
 person on staff.  I'm looking for something along the lines of VNC or 
 Dameware where the remote agent software is running all the time.  I 
 also need to be able to see all the active agents on an admin console 
 and begin a remote session from there.

 Thanks,
 RS

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Backing / auto save up any open Microsoft Office document

[Ray]

http://support.microsoft.com/kb/316951 = more on trying to recover. 

 

http://www.gmayor.com/automatically_backup.htm =  looks like a couple macros
to help make copies. 

 

From: justino garcia [mailto:jgarciaitl...@gmail.com] 
Sent: Wednesday, November 16, 2011 8:52 AM
To: NT System Admin Issues
Subject: Re: Backing / auto save up any open Microsoft Office document

 

Yea for emergency recovery, or if you get out document correctly..

On Tue, Nov 15, 2011 at 3:24 PM, Ray rz...@qwest.net wrote:

http://support.microsoft.com/kb/107686 = guess that depends on whether
you're looking for multiple copies or just sort of a emergency recovery.
Last time I looked at this, the autosave is pretty worthless if you get out
of the document correctly.   

 

 

From: justino garcia [mailto:jgarciaitl...@gmail.com] 
Sent: Tuesday, November 15, 2011 11:59 AM


To: NT System Admin Issues

Subject: Re: Backing / auto save up any open Microsoft Office document

 

Okay thanks for help...

On Tue, Nov 15, 2011 at 1:43 PM, Kurt Buff kurt.b...@gmail.com wrote:

On Tue, Nov 15, 2011 at 10:34, justino garcia jgarciaitl...@gmail.com
wrote:
 Are thier any products that do this on workstations company wide.  For
 example, a user said he was typing a long report, made some edits, but
some
 how lost all the corrections he made, due to document getting corrupt or
he
 did not click save ?

 I know backing up all workstations is not a  good solution because of
space
 constraints, but on currently open working documents?


 Any solution software or policy wise to avoid lost work?

I'll bet you could put a reg entry for all of the Office product to do
an autosave every minute in a GPO and deploy that. Haven't done that
myself, though.

Kurt


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Backing / auto save up any open Microsoft Office document

[Ray]

http://support.microsoft.com/kb/107686 = guess that depends on whether
you're looking for multiple copies or just sort of a emergency recovery.
Last time I looked at this, the autosave is pretty worthless if you get out
of the document correctly.   

 

 

From: justino garcia [mailto:jgarciaitl...@gmail.com] 
Sent: Tuesday, November 15, 2011 11:59 AM
To: NT System Admin Issues
Subject: Re: Backing / auto save up any open Microsoft Office document

 

Okay thanks for help...

On Tue, Nov 15, 2011 at 1:43 PM, Kurt Buff kurt.b...@gmail.com wrote:

On Tue, Nov 15, 2011 at 10:34, justino garcia jgarciaitl...@gmail.com
wrote:
 Are thier any products that do this on workstations company wide.  For
 example, a user said he was typing a long report, made some edits, but
some
 how lost all the corrections he made, due to document getting corrupt or
he
 did not click save ?

 I know backing up all workstations is not a  good solution because of
space
 constraints, but on currently open working documents?


 Any solution software or policy wise to avoid lost work?

I'll bet you could put a reg entry for all of the Office product to do
an autosave every minute in a GPO and deploy that. Haven't done that
myself, though.

Kurt


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Antivirus Recommendations?

[Ray]

We dumped McAfee for Sophos.  At the time, we evaluated several, including
Kapersky and Vipre.   At the time we thought Sophos had the better
management console, but I was a bit concerned about their support.   Their
best people seemed to be the pre-installation people, not the on-going
support people. 

 

We were most impressed with Kaspersky's support at the time, and Sophos was
definitely more money.  I think Sophos does an ok job on effectiveness, but
apparently our team that administers it put it in a set it and forget
mode, and let things get out of date.   

 

But that was 2+ years ago so many things have probably changed.  

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Friday, November 11, 2011 5:36 AM
To: NT System Admin Issues
Subject: Re: Antivirus Recommendations?

 

SCCM to deploy it? Didn't realise that. Nasty.

 

I'm still a fan of Vipre, and Trend's offering isn't too bad, although the
detection rates were not vastly impressive. I tend to look at things from a
XenApp/RDS point of view though so I may dismissing some products that would
be perfectly fine for you on a traditional fat client machine.

On 11 November 2011 12:27, Paul Hutchings paul.hutchi...@mira.co.uk wrote:

We actually have Forefront licenses via an MS agreement, I just don't think
I want to try and get my teeth into SCCM right now just to administer it (I
appreciate that SCCM does all manner of things but YKWIM, it's a bit of a
monster).

 

We do all the defence in depth stuff regards perimiter scanning, URL
blocking etc.

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: 11 November 2011 12:20
To: NT System Admin Issues
Subject: Re: Antivirus Recommendations?

 

I haven't dealt much with AV over the last year, but I liked Vipre
Enterprise last time I did. However we did move from Symantec so anything
would probably have been a vast improvement.

 

I notice a lot of people are fans of the MS offerings now (Forefront,
Security Essentials, etc, don't know the exact current brand names). Truth
be known is that no AV can provide 100% coverage, and the ones that provide
advanced heuristic detection are usually the ones with the bigger
footprints. I'm personally a fan of coupling up your reactive AV with
something like AppLocker from MS, if you're an AD shop, and obviously some
good event log monitoring procedures. Defense-in-depth is usually the only
way to stay fairly safe.

 

YMMV, etc.

On 11 November 2011 12:11, Paul Hutchings paul.hutchi...@mira.co.uk wrote:

Our Avira Antivir license is up for renewal in a couple of months.  Whilst
we've had no significant issues, I want to look at a couple of other options
so that even if we stay with Avira it's for the right technical reasons.

 

We have around 550 PC's, a mix of Windows XP, Windows Vista, Windows 7,
predominantly 32bit with some x64.

 

I'd be looking for a mixture of good centralised management (this almost
always seems to rule out many vendors) combined with low client footprint -
and something that is totally hands off from the end user perspective and
that just works. 

 

Suggestions?

 

Thanks,

Paul

  _  

MIRA Ltd

 

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England

Registered in England and Wales No. 402570

VAT Registration  GB 100 1464 84

 

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

* IMPORTANT INFORMATION/DISCLAIMER *

This document should be read only by those persons to whom it is addressed.
If you have received this message it was obviously addressed to you and
therefore you can read it, even it we didn't mean to send it to you.
However, if the contents of this email make no sense whatsoever then you
probably were not the intended recipient, or, alternatively, you are a
mindless cretin; either way, you should immediately kill yourself and
destroy your computer (not necessarily in that order). Once you have taken
this action, please contact us.. no, sorry, you can't use your computer,
because you just destroyed it, and possibly also committed suicide
afterwards, but I am starting to digress.. 

The originator of this email is not liable for the transmission of the
information contained 

RE: Antivirus Recommendations?

[Ray]

SCCM sucked for us bigtime, even after bringing in MS.  In our case, the
lack of standardization caused a whole lot of issues in the field.  IIRC,
SCCM counts on WMI, and we had all kinds of problems trying to get that to
work correctly on a lot of workstations.   

 

I think it's even mediocre at the one thing we really wanted - remote
administration.

 

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Friday, November 11, 2011 5:46 AM
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

 

A couple of consultant days and we'd be over the cost of any a/v licenses,
so I don't have many issues with not using sccm just yet as I figure diving
in and screwing it up will potentially cost us more.

 

It's annoying as I'd quite like to try it, but I don't want to lose several
days just to get to the point where I can do so.

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: 11 November 2011 12:34
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

 

There are one or two third parties that offer management for Forefront
without SCCM.

 

That being said, and I don't know how large your organization is, but you
may find it MUCH cheaper to pay a consultant to come in for a few days to
help you set up SCCM (just for patching) than to sign a license for a
different A/V.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://theessentialexchange.com/

  _  

From: Paul Hutchings [paul.hutchi...@mira.co.uk]
Sent: Friday, November 11, 2011 7:27 AM
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

We actually have Forefront licenses via an MS agreement, I just don't think
I want to try and get my teeth into SCCM right now just to administer it (I
appreciate that SCCM does all manner of things but YKWIM, it's a bit of a
monster).

 

We do all the defence in depth stuff regards perimiter scanning, URL
blocking etc.

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: 11 November 2011 12:20
To: NT System Admin Issues
Subject: Re: Antivirus Recommendations?

 

I haven't dealt much with AV over the last year, but I liked Vipre
Enterprise last time I did. However we did move from Symantec so anything
would probably have been a vast improvement.

 

I notice a lot of people are fans of the MS offerings now (Forefront,
Security Essentials, etc, don't know the exact current brand names). Truth
be known is that no AV can provide 100% coverage, and the ones that provide
advanced heuristic detection are usually the ones with the bigger
footprints. I'm personally a fan of coupling up your reactive AV with
something like AppLocker from MS, if you're an AD shop, and obviously some
good event log monitoring procedures. Defense-in-depth is usually the only
way to stay fairly safe.

 

YMMV, etc.

On 11 November 2011 12:11, Paul Hutchings paul.hutchi...@mira.co.uk wrote:

Our Avira Antivir license is up for renewal in a couple of months.  Whilst
we've had no significant issues, I want to look at a couple of other options
so that even if we stay with Avira it's for the right technical reasons.

 

We have around 550 PC's, a mix of Windows XP, Windows Vista, Windows 7,
predominantly 32bit with some x64.

 

I'd be looking for a mixture of good centralised management (this almost
always seems to rule out many vendors) combined with low client footprint -
and something that is totally hands off from the end user perspective and
that just works. 

 

Suggestions?

 

Thanks,

Paul

  _  

MIRA Ltd

 

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England

Registered in England and Wales No. 402570

VAT Registration  GB 100 1464 84

 

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

* IMPORTANT INFORMATION/DISCLAIMER *

This document should be read only by those persons to whom it is addressed.
If you have received this message it was obviously addressed to you and
therefore you can read it, even it we didn't mean to send it to you.
However, if the contents of this email make no sense whatsoever then you
probably were not the intended recipient, or, alternatively, you are a
mindless cretin; either way, you should 

RE: Antivirus Recommendations?

[Ray]

We installed via script.  As soon as a machine joined the domain it
installs.   

 

From: pdw1...@hotmail.com [mailto:pdw1...@hotmail.com] 
Sent: Friday, November 11, 2011 10:10 AM
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

 

We also went with Sophos a couple of years back.  I agree with what Jim says
except for easy deployment.  I find it to be bit of a pain.  Others may have
the same issue because I was talking to the Sophos salesman this morning and
he said version 10 coming out next month has a much better deployment
scheme.

Note to Jim:  I can't just type in a server or pc name like I did with
Vipre, I have to search by IP or search by domain, it brings up duplicate
names in the Unmanaged computers window.  And, what's worse, the many of the
computers in that window already have a\v on them.  

  _  

From: jholmg...@xlhealth.com
To: ntsysadmin@lyris.sunbelt-software.com
Subject: RE: Antivirus Recommendations?
Date: Fri, 11 Nov 2011 12:46:06 +

We went through this exercise about a 14 months ago.  We chose Sophos.   I
have not regretted it one bit.  Easy to deploy, centrally managed,
relatively small footprint.and best of all - it actually WORKS.

 

Jim

 

Jim Holmgren

Director of Technology Infrastructure

XLHealth Corporation

The Warehouse at Camden Yards

351 West Camden Street, Suite 100

Baltimore, MD 21201 

410.625.2200 (main)

443.524.8573 (direct)

443-506.2400 (cell)

 http://www.xlhealth.com/ www.xlhealth.com

 

 

 

itente, y destruye cualquier copia existente del mensaje original.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Antivirus Recommendations?

[Ray]

I'm not sure where the guy came from.  We pay for premium support, and our
TAM called him in. 

 

Wasn't my project.   

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, November 11, 2011 4:45 PM
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

 

Honestly, and I see this more and more - Microsoft Consulting Services (MCS)
is the wrong team to bring in.

 

If you are going to bring in a consultant, bring in a firm or subject matter
expert who KNOWS a particular topic. MCS rarely will.

 

There are a number of great solutions to dealing with the WMI problems that
you may see with SCCM. This is long covered well documented and there are
lots of companies (including mine, but that's just an example) who know how
to handle these issues.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Ray [mailto:rz...@qwest.net] 
Sent: Friday, November 11, 2011 6:10 PM
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

 

SCCM sucked for us bigtime, even after bringing in MS.  In our case, the
lack of standardization caused a whole lot of issues in the field.  IIRC,
SCCM counts on WMI, and we had all kinds of problems trying to get that to
work correctly on a lot of workstations.   

 

I think it's even mediocre at the one thing we really wanted - remote
administration.

 

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] 
Sent: Friday, November 11, 2011 5:46 AM
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

 

A couple of consultant days and we'd be over the cost of any a/v licenses,
so I don't have many issues with not using sccm just yet as I figure diving
in and screwing it up will potentially cost us more.

 

It's annoying as I'd quite like to try it, but I don't want to lose several
days just to get to the point where I can do so.

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: 11 November 2011 12:34
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

 

There are one or two third parties that offer management for Forefront
without SCCM.

 

That being said, and I don't know how large your organization is, but you
may find it MUCH cheaper to pay a consultant to come in for a few days to
help you set up SCCM (just for patching) than to sign a license for a
different A/V.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://theessentialexchange.com/

  _  

From: Paul Hutchings [paul.hutchi...@mira.co.uk]
Sent: Friday, November 11, 2011 7:27 AM
To: NT System Admin Issues
Subject: RE: Antivirus Recommendations?

We actually have Forefront licenses via an MS agreement, I just don't think
I want to try and get my teeth into SCCM right now just to administer it (I
appreciate that SCCM does all manner of things but YKWIM, it's a bit of a
monster).

 

We do all the defence in depth stuff regards perimiter scanning, URL
blocking etc.

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: 11 November 2011 12:20
To: NT System Admin Issues
Subject: Re: Antivirus Recommendations?

 

I haven't dealt much with AV over the last year, but I liked Vipre
Enterprise last time I did. However we did move from Symantec so anything
would probably have been a vast improvement.

 

I notice a lot of people are fans of the MS offerings now (Forefront,
Security Essentials, etc, don't know the exact current brand names). Truth
be known is that no AV can provide 100% coverage, and the ones that provide
advanced heuristic detection are usually the ones with the bigger
footprints. I'm personally a fan of coupling up your reactive AV with
something like AppLocker from MS, if you're an AD shop, and obviously some
good event log monitoring procedures. Defense-in-depth is usually the only
way to stay fairly safe.

 

YMMV, etc.

On 11 November 2011 12:11, Paul Hutchings paul.hutchi...@mira.co.uk wrote:

Our Avira Antivir license is up for renewal in a couple of months.  Whilst
we've had no significant issues, I want to look at a couple of other options
so that even if we stay with Avira it's for the right technical reasons.

 

We have around 550 PC's, a mix of Windows XP, Windows Vista, Windows 7,
predominantly 32bit with some x64.

 

I'd be looking for a mixture of good centralised management (this almost
always seems to rule out many vendors) combined with low client footprint -
and something that is totally hands off from the end user perspective and
that just works. 

 

Suggestions?

 

Thanks,

Paul

  _  

MIRA Ltd

 

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England

Registered in England and Wales No. 402570

VAT Registration  GB 100 1464 84

 

The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail

RE: web filtering

[Ray]

We use Webmarshall.   No idea about price or effectiveness.  

 

From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Tuesday, November 08, 2011 9:47 AM
To: NT System Admin Issues
Subject: Re: web filtering

 

I have a BarelyCuda and it works well for me...

On Tue, Nov 8, 2011 at 10:39 AM, pdw1...@hotmail.com wrote:

I've finally gotten a budget to put in place a web filtering platform.  I've
looked at three so far: Websense, iPrism and Barracuda.  Of those, I like
Websense but it was too costly and no one liked Barracuda.  iPrism is
looking good so far but I'd like to demo a few more.  
I'm not opposed to a cloud-based service either.
If you are using a web-filtering product, can you tell me what it is and
whether you feel it is worth the price you pay?
I've been reading some reviews on different products, but a review is
secondary to what actual users experience.  
Thanks!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: web filtering

[Ray]

Can't say I've heard of any major problems with it.   But at this point I'm
more of an end user rather than having any responsibility for it. 

 

From: Matthew B Ames [mailto:matthew.a...@qinetiq.com] 
Sent: Tuesday, November 08, 2011 10:13 AM
To: NT System Admin Issues
Subject: RE: web filtering

 

*snap*

 

I know that when WebMarshall decides it can't talk to a DC it blocks
internet access.  Otherwise I rarely see it blocking anything for me (but I
don't search for bad things at work!).  We have ours blocking .exe's and the
like, it also allows for different max sizes of download during the day (I
guess to prevent us developers  from downloading ISOs all day long and
breaking the WAN).

 

From: Ray [mailto:rz...@qwest.net] 
Sent: 08 November 2011 16:56
To: NT System Admin Issues
Subject: RE: web filtering

 

We use Webmarshall.   No idea about price or effectiveness.  

 

From: Steve Ens [mailto:stevey...@gmail.com] 
Sent: Tuesday, November 08, 2011 9:47 AM
To: NT System Admin Issues
Subject: Re: web filtering

 

I have a BarelyCuda and it works well for me...

On Tue, Nov 8, 2011 at 10:39 AM, pdw1...@hotmail.com wrote:

I've finally gotten a budget to put in place a web filtering platform.  I've
looked at three so far: Websense, iPrism and Barracuda.  Of those, I like
Websense but it was too costly and no one liked Barracuda.  iPrism is
looking good so far but I'd like to demo a few more.  
I'm not opposed to a cloud-based service either.
If you are using a web-filtering product, can you tell me what it is and
whether you feel it is worth the price you pay?
I've been reading some reviews on different products, but a review is
secondary to what actual users experience.  
Thanks!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

This email and any attachments to it may be confidential and are intended
solely for the use of the individual to whom it is addressed. If you are not
the intended recipient of this email, you must neither take any action based
upon its contents, nor copy or show it to anyone. Please contact the sender
if you believe you have received this email in error. QinetiQ may monitor
email traffic data and also the content of email for the purposes of
security. QinetiQ Limited (Registered in England  Wales: Company Number:
3796233) Registered office: Cody Technology Park, Ively Road, Farnborough,
Hampshire, GU14 0LX http://www.qinetiq.com.
 http://www.qinetiq.com http://www.qinetiq.com

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: AD Account Management Tool

[Ray]

http://www.namescape.com/ = might have what you're looking for.

-Original Message-
From: Bonner, John [mailto:johnbon...@centura.org] 
Sent: Friday, November 04, 2011 12:52 PM
To: NT System Admin Issues
Subject: AD Account Management Tool

Hello,
 
My company is looking to custom develop (I am a developer on the team) a
solution that I think has to have been developed already. From a very high
overview we basically need to do two things. Create AD accounts with groups
etc, or manage AD accounts. From there we have some third party systems that
we need to do configuring with. Currently say a manager hires a new person.
He submits a ticket for an account to be created...and you know the rest.
 
So what we end up with is several FTE's who do nothing all day long but
repetitive account maintenance tasks. We were thinking of building something
using workflows for these repetitive tasks. Now I know there may need to be
some custom/integration coding but surely someone out there has sells a tool
/ interface that handles the majority of this workflow.
 
So I guess that is my question. What tools / products might you know of that
provide this core workflow style capability that we can then catapult off
for the integration / loose ends  programming?
 

TIA
JB


*
This communication is for the use of the intended recipient only.  It may
contain information that is privileged and confidential.  If you are not the
intended recipient of this communication, any disclosure, copying, further
distribution or use thereof is prohibited.  If you have received this
communication in error, please advise me by return e-mail or by telephone
and delete/destroy it.

*

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC going to Verisign

[Ray]

It's an XP box. Yes, still playing with it.

-Original Message-
From: Benjamin Zachary [mailto:li...@levelfive.us] 
Sent: Monday, October 31, 2011 10:30 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

Right, that is definitely odd, maybe something with UAC or similar from
being local vs domain ??? try run as admin and all the different options (I
would presume you played with all these already..)

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Tuesday, November 01, 2011 12:37 AM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

Might work. Thanks. Still annoying that I figured it out once and now am
stumped so far.  

-Original Message-
From: Benjamin Zachary [mailto:li...@levelfive.us]
Sent: Monday, October 31, 2011 8:42 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

This may sound like a silly workaround but what about getting the dns name
and resolving it to 127.0.0.1 in DNS or a hosts file? This way it just
errors out the lookup quickly and continues.

-Original Message-
From: Ken Schaefer [mailto:k...@adopenstatic.com]
Sent: Monday, October 31, 2011 11:09 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

From where I sit, the most obvious thing is that there is a Verisign
certificate in use by the app (is TLS/SSL used? Or maybe code signing?) The
PC is attempting to connect to Verisign's CRL, to see whether the cert has
been revoked or not. When that eventually times out, the application loads.

Cheers
Ken

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Tuesday, 1 November 2011 2:02 AM
To: NT System Admin Issues
Subject: PC going to Verisign

We are an Epicor shop. I have a number of people residing on a VLAN that has
no internet connectivity. They also logon locally (no domain account). On a
PC with no internet, from clicking on the icon to getting the Epicor login
screen would take 90+ seconds. On a PC with an internet, this takes maybe 10
seconds.  I loaded a program called ShowTraffic to see what kind of
traffic was happening on the PC.  I noticed there were attempts to go to
Verisign.  This would happen several times before the logon screen would
finally come up. 

I managed to figure out that if I unchecked the Check for Publishers
Certificate Revocation under IE Advanced Settings, Epicor would load just as
fast as a workstation with internet connectivity. I came up with a reghack
and made sure these PC's were now unchecked. 

I'm guessing most of you cringed above when I said that people were logging
on locally. The security is of course unacceptable, and I'm finally able to
do something about it.  A child domain has been created which will give
these people domain accounts, and as such allow me to lock down and monitor
their PC's. Unfortunately, even with the above box unchecked, I'm back to
90+ seconds and ShowTraffic shows these PC's going back out to Verisign.  

Any idea how I can figure out why these pc's are behaving differently on
this child domain? 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC going to Verisign

[Ray]

If you mean have the policies been applied, yes. The setting is changing in
the registry. 

-Original Message-
From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Monday, October 31, 2011 10:39 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

Have you done an RSOP?

Cheers
Ken


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Tuesday, 1 November 2011 12:35 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

Yes, but why does turning off check for publishers revocation work in
local mode but not on the child domain?

-Original Message-
From: Ken Schaefer [mailto:k...@adopenstatic.com]
Sent: Monday, October 31, 2011 8:09 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

From where I sit, the most obvious thing is that there is a Verisign
certificate in use by the app (is TLS/SSL used? Or maybe code signing?) The
PC is attempting to connect to Verisign's CRL, to see whether the cert has
been revoked or not. When that eventually times out, the application loads.

Cheers
Ken

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Tuesday, 1 November 2011 2:02 AM
To: NT System Admin Issues
Subject: PC going to Verisign

We are an Epicor shop. I have a number of people residing on a VLAN that has
no internet connectivity. They also logon locally (no domain account). On a
PC with no internet, from clicking on the icon to getting the Epicor login
screen would take 90+ seconds. On a PC with an internet, this takes maybe 10
seconds.  I loaded a program called ShowTraffic to see what kind of
traffic was happening on the PC.  I noticed there were attempts to go to
Verisign.  This would happen several times before the logon screen would
finally come up. 

I managed to figure out that if I unchecked the Check for Publishers
Certificate Revocation under IE Advanced Settings, Epicor would load just as
fast as a workstation with internet connectivity. I came up with a reghack
and made sure these PC's were now unchecked. 

I'm guessing most of you cringed above when I said that people were logging
on locally. The security is of course unacceptable, and I'm finally able to
do something about it.  A child domain has been created which will give
these people domain accounts, and as such allow me to lock down and monitor
their PC's. Unfortunately, even with the above box unchecked, I'm back to
90+ seconds and ShowTraffic shows these PC's going back out to Verisign.  

Any idea how I can figure out why these pc's are behaving differently on
this child domain? 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC going to Verisign

[Ray]

Good stuff. Thanks.  We're not on that version anymore, and it doesn’t explain 
why simply unchecking the box in IE solves the problem when logging on locally, 
or even on the domain, but not on the child domain. 

But it does provide a possible workaround. 

-Original Message-
From: Jim Mediger [mailto:j...@holaday.com] 
Sent: Tuesday, November 01, 2011 6:51 AM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

Have you seen this?

AnswerBook #: 9702MPS
Product: Vantage

Added: 11/07/2008
Version: 8.03.405a

Changed: 02/19/2009
Module: technical

Summary:
Client takes up to 2 minutes to startup if not connected to the Internet.

Details:
8.03.4xx

PROBLEM:
Excessive client startup times of 1.5 to 2 minutes on the Vantage client on PCs 
that DO NOT have access to the internet. PCs that do have access to the 
internet experience normal delays of 5-10 seconds. This timing is after 
clicking OK to the username/password dialog box.

A network trace while running the Vantage client has revealed that mfgsys.exe 
is repeatedly trying to get to the site crl.verisign.net using the TCP 
protocol. The inability to get to this site is leading to the 1.5 to 2 minute 
login delay.

SOLUTION:
It is not the Vantage application that is calling crl.verisign.net. This is a 
known issue with .NET and Microsoft's Secure Computing Initiative and does not

Basically, all commercial software is supposed to be Digitally Signed with a 
Certificate provided by one of a few Certificate Providers. This certificate 
tells the end user that the software being run was provided by a known, and 
trusted, entity. In order to verify that the Certificate is valid and still 
trusted, the .Net runtime calls out to the crl.verisign.net page to get the 
updated Certificate Revocation List. That is basically a list of Certificates 
that had been valid and are now no longer valid - either because the license 
was not renewed or because the Digital Certificate was compromised 
(stolen/lost/allowed to roam wild). The list itself has an expiration so every 
so often it is refreshed - causing a slight delay in startup.

On systems that do not have Internet connectivity - for whatever reason - the 
list is requested each time a .NET application starts up (conditions apply). 
The .NET runtime really wants this list, so it will wait for about 2 minutes 
before it times out and allows the system to operate with a provisional 
license (this is where the whole Secure Computing Initiative starts to fall 
apart). As there have been so many complaints about this behavior, Microsoft 
added a switch that can be applied to a .NET application that will by-pass the 
Certificate check (another chink in the Secure Computing armor) and just 
provide a provisional runtime allowance.

The .NET feature that verifies the license came in with .NET 2.0 and the 
ability to by-pass was added in a .NET hotfix that should be part of .NET 2.0 
SP1. The customer should not get the Hotfix by itself - they should get SP1 of 
.NET 2.0.
NOTE: Installing .NET 3.0 and .NET 3.0 SP1 would not include the .NET 2.0 SP1

Once .NET 2.0 SP1 is installed, the following information needs to be added to 
the mfgsys.exe.config file on the client system that does not have Internet 
access. This is NOT something that Epicor will do as it breaks the Secure 
Computing model, but it is available to the customers. Also, here is the 
Microsoft Knowledge Base article on this issue: 
http://support.microsoft.com/kb/936707

Add the following line to the runtime section. If they do not have a 
runtime section they will need to add that also. It is possible that the 
customer will not have a mfgsys.exe.config file and they can use the attached 
as a sample for editing an existing version or they can just use this file. It 
should be placed in the client directory with the Mfgsys.exe executable. (See 
below of sample config file)

?xml version=1.0 encoding=utf-8 ?
configuration
runtime
generatePublisherEvidence enabled=false/ /runtime system.diagnostics 
switches
!-- Exception handling switches --
!--Valid values are 0=Off; 1=Errors; 2=Warnings; 3=Info; 4=Verbose -- add 
name=LogException value=0 / add name=DialogException value=0 / add 
name=DeregistrationException value=0 / add name=DashboardException 
value=0 /
!-- Performance monitoring switches (only respond to SwitchLevel.Verbose)-- 
add name=FormLoad value=0 / add name=TransactionLoad value=0 / add 
name=NotifyAll value=0 /
!-- Help Browser tracing (only responds to SwitchLevel.Info)-- add 
name=TraceHelp value=0 /
!-- Deployment logging --
add name=DeploymentLogging value=4 /
!-- Data Tracing (only responds to SwitchLevel.Verbose) -- add 
name=DataTrace value=0 /
!-- DataTraceFullDataSets (only responds to SwitchLevel.Verbose) --
!-- If Data Tracing is turned on, do we write out full contents of datasets? 
-- add name=DataTraceFullDataSets value=0 / /switches 
/system.diagnostics

Jim

-Original Message-
From: Ray [mailto:rz

PC going to Verisign

[Ray]

We are an Epicor shop. I have a number of people residing on a VLAN that has
no internet connectivity. They also logon locally (no domain account). On a
PC with no internet, from clicking on the icon to getting the Epicor login
screen would take 90+ seconds. On a PC with an internet, this takes maybe 10
seconds.  I loaded a program called ShowTraffic to see what kind of
traffic was happening on the PC.  I noticed there were attempts to go to
Verisign.  This would happen several times before the logon screen would
finally come up. 

I managed to figure out that if I unchecked the Check for Publishers
Certificate Revocation under IE Advanced Settings, Epicor would load just as
fast as a workstation with internet connectivity. I came up with a reghack
and made sure these PC's were now unchecked. 

I'm guessing most of you cringed above when I said that people were logging
on locally. The security is of course unacceptable, and I'm finally able to
do something about it.  A child domain has been created which will give
these people domain accounts, and as such allow me to lock down and monitor
their PC's. Unfortunately, even with the above box unchecked, I'm back to
90+ seconds and ShowTraffic shows these PC's going back out to Verisign.  

Any idea how I can figure out why these pc's are behaving differently on
this child domain? 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC going to Verisign

[Ray]

I'm pretty much stuck with Epicor, so I need to make the most of it. Or maybe 
it's the least of it. 

Can't see any attempts at getting to Verisign until I get logged in so I can 
fire up the app. But it's fairly obvious that turning on/off that one setting 
makes a difference except when I'm not in the child domain. 

We have these special workstations all over the state, and they have to 
connect to the main office. There's a share plus of course the Epicor server. 
Not a great security model.

I'm continuing to do some testing.  

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, October 31, 2011 1:04 PM
To: NT System Admin Issues
Subject: Re: PC going to Verisign

On Mon, Oct 31, 2011 at 11:02, Ray rz...@qwest.net wrote:
 We are an Epicor shop.

I'm sorry to hear that. Truly.

 I have a number of people residing on a VLAN that has no internet 
 connectivity. They also logon locally (no domain account). On a PC 
 with no internet, from clicking on the icon to getting the Epicor 
 login screen would take 90+ seconds. On a PC with an internet, this 
 takes maybe 10 seconds.  I loaded a program called ShowTraffic to 
 see what kind of traffic was happening on the PC.  I noticed there 
 were attempts to go to Verisign.  This would happen several times 
 before the logon screen would finally come up.

 I managed to figure out that if I unchecked the Check for Publishers 
 Certificate Revocation under IE Advanced Settings, Epicor would load 
 just as fast as a workstation with internet connectivity. I came up 
 with a reghack and made sure these PC's were now unchecked.

 I'm guessing most of you cringed above when I said that people were 
 logging on locally.

Not really. It depends on the other measures in place - in particular, if they 
don't have Internet access, it's probably just fine. Locking down and 
monitoring a PC doesn't exactly depend on having a machine a member of a 
domain, but it does make it a little harder.

 The security is of course unacceptable, and I'm finally able to do 
 something about it.  A child domain has been created which will give 
 these people domain accounts, and as such allow me to lock down and 
 monitor their PC's. Unfortunately, even with the above box unchecked, 
 I'm back to
 90+ seconds and ShowTraffic shows these PC's going back out to Verisign.

 Any idea how I can figure out why these pc's are behaving differently 
 on this child domain?

Are the machines still trying to talk with Verisign during login? If so, can 
you figure out what they're really looking for? I'm guessing here, but if 
they're trying to talk with Verisign, something in your environment is probably 
handing them a cert whose root is at Verisign.
Do you have any idea what that would be? For instance, is there a cert 
installed on the server running the Epicor product? Do you have a CA in your 
environment and can you use an internal cert for whatever application is being 
sought, vs. one from Verisign?

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC going to Verisign

[Ray]

Yes, but why does turning off check for publishers revocation work in
local mode but not on the child domain?

-Original Message-
From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Monday, October 31, 2011 8:09 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

From where I sit, the most obvious thing is that there is a Verisign
certificate in use by the app (is TLS/SSL used? Or maybe code signing?) The
PC is attempting to connect to Verisign's CRL, to see whether the cert has
been revoked or not. When that eventually times out, the application loads.

Cheers
Ken

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Tuesday, 1 November 2011 2:02 AM
To: NT System Admin Issues
Subject: PC going to Verisign

We are an Epicor shop. I have a number of people residing on a VLAN that has
no internet connectivity. They also logon locally (no domain account). On a
PC with no internet, from clicking on the icon to getting the Epicor login
screen would take 90+ seconds. On a PC with an internet, this takes maybe 10
seconds.  I loaded a program called ShowTraffic to see what kind of
traffic was happening on the PC.  I noticed there were attempts to go to
Verisign.  This would happen several times before the logon screen would
finally come up. 

I managed to figure out that if I unchecked the Check for Publishers
Certificate Revocation under IE Advanced Settings, Epicor would load just as
fast as a workstation with internet connectivity. I came up with a reghack
and made sure these PC's were now unchecked. 

I'm guessing most of you cringed above when I said that people were logging
on locally. The security is of course unacceptable, and I'm finally able to
do something about it.  A child domain has been created which will give
these people domain accounts, and as such allow me to lock down and monitor
their PC's. Unfortunately, even with the above box unchecked, I'm back to
90+ seconds and ShowTraffic shows these PC's going back out to Verisign.  

Any idea how I can figure out why these pc's are behaving differently on
this child domain? 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PC going to Verisign

[Ray]

Might work. Thanks. Still annoying that I figured it out once and now am
stumped so far.  

-Original Message-
From: Benjamin Zachary [mailto:li...@levelfive.us] 
Sent: Monday, October 31, 2011 8:42 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

This may sound like a silly workaround but what about getting the dns name
and resolving it to 127.0.0.1 in DNS or a hosts file? This way it just
errors out the lookup quickly and continues.

-Original Message-
From: Ken Schaefer [mailto:k...@adopenstatic.com]
Sent: Monday, October 31, 2011 11:09 PM
To: NT System Admin Issues
Subject: RE: PC going to Verisign

From where I sit, the most obvious thing is that there is a Verisign
certificate in use by the app (is TLS/SSL used? Or maybe code signing?) The
PC is attempting to connect to Verisign's CRL, to see whether the cert has
been revoked or not. When that eventually times out, the application loads.

Cheers
Ken

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Tuesday, 1 November 2011 2:02 AM
To: NT System Admin Issues
Subject: PC going to Verisign

We are an Epicor shop. I have a number of people residing on a VLAN that has
no internet connectivity. They also logon locally (no domain account). On a
PC with no internet, from clicking on the icon to getting the Epicor login
screen would take 90+ seconds. On a PC with an internet, this takes maybe 10
seconds.  I loaded a program called ShowTraffic to see what kind of
traffic was happening on the PC.  I noticed there were attempts to go to
Verisign.  This would happen several times before the logon screen would
finally come up. 

I managed to figure out that if I unchecked the Check for Publishers
Certificate Revocation under IE Advanced Settings, Epicor would load just as
fast as a workstation with internet connectivity. I came up with a reghack
and made sure these PC's were now unchecked. 

I'm guessing most of you cringed above when I said that people were logging
on locally. The security is of course unacceptable, and I'm finally able to
do something about it.  A child domain has been created which will give
these people domain accounts, and as such allow me to lock down and monitor
their PC's. Unfortunately, even with the above box unchecked, I'm back to
90+ seconds and ShowTraffic shows these PC's going back out to Verisign.  

Any idea how I can figure out why these pc's are behaving differently on
this child domain? 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: AV and malware protection?

[Ray]

I think the model is continuing towards “hope” that our several layers work
well enough.  The new corporate buzzword is “productivity”, and that
translates to less people doing more work.  In our case our routers and
firewall is outsourced.  Monitoring the AV/Malware stuff is based more on
hope than diligence as headcount was cut. 

   

 

 

From: Alan Davies [mailto:adav...@cls-services.com] 
Sent: Tuesday, October 11, 2011 4:27 AM
To: NT System Admin Issues
Subject: RE: AV and malware protection?

 

Agree wholeheartedly for the majority of threats.  The only exception I'd
make is for APT (sorry to mention buzzwords!!).  Security through obscurity
can be a very valid defence against undirected attacks (and probably most
directed ones too), but a little social engineering, insider knowledge, etc.
and it doesn't matter so much anymore.  Stuxnet was a good example.  What
matters are the real controls in place, your people and your processes.

 

On your last comment Marc, I do worry how we are ever going to get to a
scenario where businesses in general are well protected since only very few,
through either extraordinary diligence of their own doing, or through
regulatory necessity, make that time or care about that level of knowledge
(aka funds!).  PCI perhaps is at least a start in terms of introducing some
of these concepts to otherwise unregulated verticals.

 

 

 

a

 

  _  

From: Marc Maiffret [mailto:mmaiff...@eeye.com] 
Sent: 11 October 2011 01:28
To: NT System Admin Issues
Subject: RE: AV and malware protection?

The reality is that most IT environments are all using one of the 2-4
popular AV products. One of the 5-6 popular network firewalls. This makes it
so that the ease at which an attacker can setup a test lab to mimic the
average business and ensure their attack will be successful is a very easy
thing.

 

In order to be successful in today’s IT security environment you need to
customize security to your specific environment. If you spend even a
reasonable amount of time customizing your security at the OS and network
level you can prevent the vast majority of attacks. This is not opinion but
fact.

 

Problem is that most people in IT have not been given the time or education
by management to be able to do this successfully so alas everyone just
installs a product and hopes it works. Likewise the attacker installs the
product, makes sure their exploit works, and does not abide by hope.

 

Now of course you could have the time and knowledge and not a product that
allows for customization. But that is a different thing all together. 

 

-Marc

 

Signed,

Marc Maiffret

Founder/CTO

eEye Digital Security

WEB: http://www.eEye.com

BLOG: http://blog.eeye.com

TWITTER: http://twitter.com/#!/marcmaiffret

 

 

From: Alan Davies [mailto:adav...@cls-services.com] 
Sent: Monday, October 10, 2011 2:01 AM
To: NT System Admin Issues
Subject: RE: AV and malware protection?

 

Huge +1 to that.  Anyone who says product x is the best, is, at best,
correct for a short period of time!  All AV is poor - I seem to remember
about 70% protection is as high as any product gets by some measurements.

 

Why on earth would you encourage users not to use IE!?  Again, FUD mostly -
IE is one of, if not the most secure browser out there out of the box.
Firefox not so great.  Now I agree that you can add various addons to change
the game, mostly at the expense of functionality, but these also require
management and understanding - something that normal users will not have!
Top  browsers all managed well equal a fairly level playing ground.

 

 

 

a

 

  _  

From: Mike Gill [mailto:lis...@canbyfoursquare.com] 
Sent: 07 October 2011 19:50
To: NT System Admin Issues
Subject: RE: AV and malware protection?

I have seen exploits on systems with just about every (fully updated) AV
product heard of. There is no product that will win every time playing this
cat and mouse game. I run MSE on my personal systems. Vipre and Nod32 on
client computers. I encourage users not to use IE.

 

-- 
Mike

 

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Friday, October 07, 2011 11:26 AM
To: NT System Admin Issues
Subject: Re: AV and malware protection?

 

Yep, the current version.  From what I have seen done to it by web-based
exploit infections, I would classify the product as a joke.

I thought it was decent before, but I currently have no faith in it.  This
being part of the scenario of users, using IE, getting hit with drive-by's,
those drive-by's pulling down more crap, and ultimately owning the system
with rootkits.  

IMO, MSE has been worthless in these situations.

--
Espi

 




WARNING:

The information in this email and any attachments is confidential and may be
legally privileged.

 

If you are not the named addressee, you must not use, copy or disclose this
email (including any attachments) or the 

RE: VIPRE Alternatives?

[Ray]

We're running Sophos.  We liked the console vs Kaspersky.  Not overly
impressed with their post-installation support.  Kaspersky support during
our trial period was better. 

 

From: G.Waleed Kavalec [mailto:kava...@gmail.com] 
Sent: Wednesday, August 24, 2011 10:55 AM
To: NT System Admin Issues
Subject: Re: VIPRE Alternatives?

 

We have done well with Kaspersky.  

 

I'm curious about Sonicwall.

 

On Wed, Aug 24, 2011 at 12:21 PM, Roger Wright rhw...@gmail.com wrote:

I have been, and continue to be, a big fan of GFI's VIPRE product for
several years.  Although not perfect, it has provided effective protection,
ease of management and deployment at an acceptable cost.  But I need to take
a look at possible alternatives this fall.  At this time I'm considering
Kaspersky, Trend, and Sophos, and also checking into Sonicwall's endpoint
product.

 

I'd appreciate comments from anyone who has gone through similar vetting
when considering VIPRE alternatives.



Roger Wright
___

My short term goal is to make it through the day.  

My long term goal is to string a bunch of short term goals together.

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin





 

-- 

G. Waleed Kavalec

__

Remember Remember this Coming November
The Debt Crisis Treason and Plot
I know of No Reason the Republican Treason
Should EVER be Forgot !

 

  

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: VIPRE Alternatives?

[Ray]

Me too.  Serious suckage.  

 

From: Sherry Abercrombie [mailto:sabercrom...@nhdallas.com] 
Sent: Wednesday, August 24, 2011 1:09 PM
To: NT System Admin Issues
Subject: RE: VIPRE Alternatives?

 

Nice Kim.  

 

I still have nightmares about Mcafee EPO's mgmt. console.

 

From: Kim Longenbaugh [mailto:k...@colonialsavings.com] 
Sent: Wednesday, August 24, 2011 3:04 PM
To: NT System Admin Issues
Subject: RE: VIPRE Alternatives?

 

Our boss made us do evals of ESET, Trend, Symantec, and McAfee with the
thought in mind of replacing Vipre.

The others, in particular, Symantec and McAfee, had a WAY bigger footprint
than Vipre.

 

We still have Vipre.  

 

From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Wednesday, August 24, 2011 2:58 PM
To: NT System Admin Issues
Subject: Re: VIPRE Alternatives?

 

Yep, looks like it's McAfee.  But might check it out to see how the
management process works.  I would hope they've gotten the footprint down
from the bloat of the previous ViruScan versions.


Roger Wright
___

My short term goal is to make it through the day.  

My long term goal is to string a bunch of short term goals together.

 

 

On Wed, Aug 24, 2011 at 1:57 PM, Jonathan Link jonathan.l...@gmail.com
wrote:

IIRC, the last time I worked with Sonicwall's stuff it was rebranded
McAffee...

 

On Wed, Aug 24, 2011 at 1:55 PM, G.Waleed Kavalec kava...@gmail.com wrote:

We have done well with Kaspersky.  

 

I'm curious about Sonicwall.

 

On Wed, Aug 24, 2011 at 12:21 PM, Roger Wright rhw...@gmail.com wrote:

I have been, and continue to be, a big fan of GFI's VIPRE product for
several years.  Although not perfect, it has provided effective protection,
ease of management and deployment at an acceptable cost.  But I need to take
a look at possible alternatives this fall.  At this time I'm considering
Kaspersky, Trend, and Sophos, and also checking into Sonicwall's endpoint
product.

 

I'd appreciate comments from anyone who has gone through similar vetting
when considering VIPRE alternatives.



Roger Wright
___

My short term goal is to make it through the day.  

My long term goal is to string a bunch of short term goals together.

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin





 

-- 

G. Waleed Kavalec

__

Remember Remember this Coming November
The Debt Crisis Treason and Plot
I know of No Reason the Republican Treason
Should EVER be Forgot !

 

  

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

  _  

This information may contain information that is privileged, confidential
and exempt from disclosure under applicable law. If you are not the intended
recipient, you are hereby notified that any disclosure, photocopying or
distribution of these contents is unauthorized and prohibited. If you have
received this in error, please notify the sender immediately and destroy all
copies.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: 

RE: MS Patch fallout

[Ray]

Happens to us often.  Usually requires another reboot. 

 

From: Don Kuhlman [mailto:drkuhl...@yahoo.com] 
Sent: Monday, August 22, 2011 6:32 AM
To: NT System Admin Issues
Subject: MS Patch fallout

 

Hi folks. Has anyone seen any issues with the Microsoft August patches
affecting RDP access on Windows 2003 servers or terminal servers?

Getting issues after patching yesterday with some 2003 servers won't allow
RDP access now.

Thanks

Don K

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: MS Patch fallout

[Ray]

Thanks.  Can't say we were selective.   We installed what came down.  

 

From: Randal, Phil [mailto:pran...@herefordshire.gov.uk] 
Sent: Monday, August 22, 2011 7:19 AM
To: NT System Admin Issues
Subject: RE: MS Patch fallout

 

That sounds like the old Scalable Networking Pack bug, introduced in Windows
2003 SP2.

 

Have you been selectively applying Windows Updates?

 

The Scalable Networking Pack should have been turned off by

 

http://support.microsoft.com/kb/948496

 

which did come down via Windows Update, many moons ago.

 

This hotfix might help:

 

http://support.microsoft.com/kb/KB950224

 

Cheers,

 

Phil

-- 
Phil Randal | Infrastructure Engineer 
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office
| I.C.T. Services Division 
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT 
Tel: 01432 260160

 

From: Ray [mailto:rz...@qwest.net] 
Sent: 22 August 2011 15:06
To: NT System Admin Issues
Subject: RE: MS Patch fallout

 

Happens to us often.  Usually requires another reboot. 

 

From: Don Kuhlman [mailto:drkuhl...@yahoo.com] 
Sent: Monday, August 22, 2011 6:32 AM
To: NT System Admin Issues
Subject: MS Patch fallout

 

Hi folks. Has anyone seen any issues with the Microsoft August patches
affecting RDP access on Windows 2003 servers or terminal servers?

Getting issues after patching yesterday with some 2003 servers won't allow
RDP access now.

Thanks

Don K

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Any opinion expressed in this e-mail or any attached files are those of the
individual and not necessarily those of Herefordshire Council or
Herefordshire Primary Care Trust. You should be aware that Herefordshire
Council  Herefordshire Primary Care Trust monitors its email service. This
e-mail and any attached files are confidential and intended solely for the
use of the addressee. This communication may contain material protected by
law from being passed on. If you are not the intended recipient and have
received this e-mail in error, you are advised that any use, dissemination,
forwarding, printing or copying of this e-mail is strictly prohibited. If
you have received this e-mail in error please contact the sender immediately
and destroy all copies of it. Please consider the environment before
printing this e-mail. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: What do you do when things go quiet?

[Ray]

I’ve found that all too often, users have “accepted” various “truths”, like
system speed, and various awkward (for lack of a better term) procedures as
being “just the way it is”.   I’ve often thought the hardest part of my job
was trying to get users to think outside the box a bit.   I actually had
some success walking around and listening to tell tale sounds of
frustration.  

 

When I worked for companies that had a help ticket system, I liked to review
the tickets to see if there were some problems that constantly resurfaced.


 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Monday, August 15, 2011 11:11 AM
To: NT System Admin Issues
Subject: Re: What do you do when things go quiet?

 

Unless you've been extremely well funded and well staffed up to this point,
there are many, many things which have been done sub-optimally, if at all,
and could stand to be refined or improved.   Even if that isn't the case,
there are improvements to be had in terms of processes, automation, disaster
recovery, etc.

This question is difficult to answer more specifically without a concrete
scenario (real or hypothetical)

What I would do very much depends on what has needed to be done up to this
time.  And, it is not every improvement that costs $$$ or £££


 


ASB


http://about.me/Andrew.S.Baker


Harnessing the Advantages of Technology for the SMB market…





2011/8/15 Paul Hutchings paul.hutchi...@mira.co.uk

When you finish a major project and there's nothing specific on the horizon,
what sort of things do you do to improve the services that you offer your
customers?

 

I'm conscious of how I word this as I certainly don't want to come across as
complacent or as if there isn't a constant trickle of things to be getting
on with, but some things can't be done simply due to money (upgrade entire
business to Windows 7  Office 2010 isn't going to happen) you can reach a
point where, until the next bunch of patches and updates come along, the SAN
works, vSphere works, Windows works, plus there are limits on what you can
do in working hours due to impact.

 

I can always find a stream of things to do such as researching future
replacement hardware/software but I'm interested in the things you do to
improve the services you offer the business and your users/customers.

 

I've probably not worded that fantastically, but hopefully you get the idea.

  _  

MIRA Ltd

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Drive mapping via login script

[Ray]

Everyone's environment is different.  We have about 6000 users, spread
around the state, with about 20 sites, most with their own servers.   Each
site has their own .bat, because it wasn't worth trying to figure out how to
map local drives and also drives back to the Home office.   

 

We have sensitive data, and we have various committees/projects with people
coming/going.  It was just easier to adjust their group membership.  When we
hire someone new, we ask who their access should resemble, and we just have
put them in the proper groups rather than trying to figure out what folders
they have access to.  

 

Haven't looked at GPP.   I've changed positions and that kind of stuff is
out of my hands now.  

 

From: David Lum [mailto:david@nwea.org] 
Sent: Tuesday, August 09, 2011 6:03 AM
To: NT System Admin Issues
Subject: RE: Drive mapping via login script

 

Nothing is broken, but we don't have any mappings assigned based on group
membership currently so IMO it's not scalable. I wanted to get a feel for
what others are doing and not change something to later hear hey Lum, you
should have asked and not gone down that path.. If all I need to do is add
IFMEMBER functionality then that's the path of least resistance, easily done
and looks like a viable option. GPP also looks doable and has some cool
factor to it though.

 

Oddly, it's usually paths of least resistance I usually have the biggest
doubts about: sure I can do that, but how does that scale, or work
flexibility-wise when a change or audit needs to happen? is usually my next
question. Putting a user name on a folder ACL instead of creating a group
and adding a user to said group and assigning the group is  the model I
generally reference. Easy to do the former if you have 10 people and a
couple of folders you want to manage, no so good if you have 500 users and
50+ different folder ACL's.

 

I appreciate everyone's input!

 

Dave

 

From: Ray [mailto:rz...@qwest.net] 
Sent: Monday, August 08, 2011 3:56 PM
To: NT System Admin Issues
Subject: RE: Drive mapping via login script

 

We use .bat files and if member.   So what doesn't work? 

 

From: kz2...@googlemail.com [mailto:kz2...@googlemail.com] 
Sent: Monday, August 08, 2011 7:54 AM
To: NT System Admin Issues
Subject: Re: Drive mapping via login script

 

Group policy preferences or AppSense. Never seen any heavy logon lag as a
result of either.

Sent from my POS BlackBerry wireless device, which may wipe itself at any
moment

  _  

From: Cameron cameron.orl...@gmail.com 

Date: Mon, 8 Aug 2011 10:48:21 -0400

To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

ReplyTo: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com

Subject: Re: Drive mapping via login script

 

I use Kix for all my drive mapping (mostly group-based) here.

On Mon, Aug 8, 2011 at 10:09 AM, David Lum david@nwea.org wrote:

We use regular .BAT files here for drive mappings, but this doesn't work for
group-based mappings. In my past life I have used KiXtart which I suppose
can implement here easily enough (been 3 years since I really toyed with it
though). I have done some testing of mapping via GPO and it seems to add a
bit of time to the login.

 

What do you guys use? 

David Lum 
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security

RE: Drive mapping via login script

[Ray]

Can't say the timeout issue has been a problem for us in the last 5 years
I've been here. Our scripts are fairly simple and we do try to document. 

We've had more problems with machines not getting policies than not getting
running their login scripts.  

-Original Message-
From: Steve Kradel [mailto:skra...@zetetic.net] 
Sent: Tuesday, August 09, 2011 7:02 AM
To: NT System Admin Issues
Subject: Re: Drive mapping via login script

I'm a big fan of GPP for drive mappings, and a huge opponent of login
scripts unless said login scripts are *absolutely necessary*.  The reason
for this is that login scripts have an almost irresistible tendency to turn
into huge, undocumented, incomprehensible masses of
copy+pasted spaghetti code, and are usually written for expediency of
doing a task and moving on (must map this folder for a subset of finance
users) rather than weighing the security, cost, time, or fault-tolerance of
how it is done.

To put it another way, how many login script authors consider the timeout on
mapping a drive to a misrouted target, or how long the user must wait if
half a dozen drives time out in succession (maybe these could be attempted
in parallel, or asynchronously to bringing up the desktop)?  Are login
scripts kept under source code control, or reviewed by peers?  The answer is
usually no...

--Steve

On Tue, Aug 9, 2011 at 9:03 AM, David Lum david@nwea.org wrote:
 Nothing is broken, but we don’t have any mappings assigned based on 
 group membership currently so IMO it’s not scalable. I wanted to get a 
 feel for what others are doing and not change something to later hear 
 “hey Lum, you should have asked and not gone down that path…”. If all 
 I need to do is add IFMEMBER functionality then that’s the path of 
 least resistance, easily done and looks like a viable option. GPP also
looks doable and has some “cool”
 factor to it though…



 Oddly, it’s usually paths of least resistance I usually have the 
 biggest doubts about: “sure I can do that, but how does that scale, or 
 work flexibility-wise when a change or audit needs to happen?” is 
 usually my next question. Putting a user name on a folder ACL instead 
 of creating a group and adding a user to said group and assigning the 
 group is  the model I generally reference. Easy to do the former if 
 you have 10 people and a couple of folders you want to manage, no so 
 good if you have 500 users and
 50+ different folder ACL’s.



 I appreciate everyone’s input!



 Dave



 From: Ray [mailto:rz...@qwest.net]
 Sent: Monday, August 08, 2011 3:56 PM

 To: NT System Admin Issues
 Subject: RE: Drive mapping via login script



 We use .bat files and “if member”.   So what doesn’t work?



 From: kz2...@googlemail.com [mailto:kz2...@googlemail.com]
 Sent: Monday, August 08, 2011 7:54 AM

 To: NT System Admin Issues
 Subject: Re: Drive mapping via login script



 Group policy preferences or AppSense. Never seen any heavy logon lag 
 as a result of either.

 Sent from my POS BlackBerry wireless device, which may wipe itself at 
 any moment

 

 From: Cameron cameron.orl...@gmail.com

 Date: Mon, 8 Aug 2011 10:48:21 -0400

 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

 ReplyTo: NT System Admin Issues 
 ntsysadmin@lyris.sunbelt-software.com

 Subject: Re: Drive mapping via login script



 I use Kix for all my drive mapping (mostly group-based) here.

 On Mon, Aug 8, 2011 at 10:09 AM, David Lum david@nwea.org wrote:

 We use regular .BAT files here for drive mappings, but this doesn't 
 work for group-based mappings. In my past life I have used KiXtart 
 which I suppose can implement here easily enough (been 3 years since I 
 really toyed with it though). I have done some testing of mapping via 
 GPO and it seems to add a bit of time to the login.



 What do you guys use?

 David Lum
 Systems Engineer // NWEATM
 Office 503.548.5229 // Cell (voice/text) 503.267.9764





~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Drive mapping via login script

[Ray]

We use .bat files and if member.   So what doesn't work? 

 

From: kz2...@googlemail.com [mailto:kz2...@googlemail.com] 
Sent: Monday, August 08, 2011 7:54 AM
To: NT System Admin Issues
Subject: Re: Drive mapping via login script

 

Group policy preferences or AppSense. Never seen any heavy logon lag as a
result of either.

Sent from my POS BlackBerry wireless device, which may wipe itself at any
moment

  _  

From: Cameron cameron.orl...@gmail.com 

Date: Mon, 8 Aug 2011 10:48:21 -0400

To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com

ReplyTo: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com

Subject: Re: Drive mapping via login script

 

I use Kix for all my drive mapping (mostly group-based) here.

On Mon, Aug 8, 2011 at 10:09 AM, David Lum david@nwea.org wrote:

We use regular .BAT files here for drive mappings, but this doesn't work for
group-based mappings. In my past life I have used KiXtart which I suppose
can implement here easily enough (been 3 years since I really toyed with it
though). I have done some testing of mapping via GPO and it seems to add a
bit of time to the login.

 

What do you guys use? 

David Lum 
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: PMI PMP Certification

[Ray]

I don't remember when it became necessary to have PM's.   We used to just
get 'er done.   Now the formality of it seems to slow down the process.  Of
course, in my experience, it could just be lousy PM's working with lousy
tech people.

 

From: David Lum [mailto:david@nwea.org] 
Sent: Tuesday, August 02, 2011 9:29 AM
To: NT System Admin Issues
Subject: RE: PMI PMP Certification

 

Too many projects fail because technical people like to do technical work,
and not project management.

 

Hear hear. Part of my challenge here at %dayjob% is I love the technical
challenges but dislike any kind of large multi-department project
management. I love being the technical lead in a project but want very
little to do with the PM portion.

 

I'm Grog. Want me to plan a tribal move and figure out the best place to
move and coordinate everyone? Don't ask me. Tell me what area to go hunt so
we can eat during and after the move and I'll make that happen and we will
eat well.

 

 

From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Tuesday, August 02, 2011 8:50 AM
To: NT System Admin Issues
Subject: RE: PMI PMP Certification

 

It is not the PMs job to decide whether something is technically possible or
not. That comes down to the devs and architects. Whoever is the responsible
dev (whether that be a senior or junior) states what is possible. If they
are liars or incompetent and give the wrong info, then they shouldn't have a
job in the first place.

 

The PM needs to work with all the stakeholders to ensure that the project is
successful. Writing code is 10% of a successful project in an enterprise
environment. Whilst your senior dev may have more responsibility for
making technical calls for the application, they don't have the expertise to
handle the operational requirements, infrastructure requirements, network
requirements, storage requirements, security integration (which all come
from other technical towers), or typically the inclination to do all the
project documentation (scope, deliverable, risks/issues, management
reporting), or even write minutes or call meetings.

 

Too many projects fail because technical people like to do technical work,
and not project management. Many projects also fail due to bad project
management. But IT has many cowboys and generally useless people, unlike
more established industries.

 

Cheers

Ken

 

From: Tigran K [mailto:tigr...@gmail.com] 
Sent: Tuesday, 2 August 2011 10:37 AM
To: NT System Admin Issues
Subject: Re: PMI PMP Certification

 

The model you layout is exactly the problem. Contract dev from anywhere who
doesn't have vested interest in the project or any oversight can be the
single deciding factor for the project. No matter how good a PM is they
can't tell if the project is going down the right path when it comes to
development because they just don't understand. A Dev can tell a PM that
some thing is impossible. The PM won't know how to question that Dev to see
if it really is impossible or not.

 

With my model a Dev Lead would be able to see problems before they come up
and direct the project. And if you have a Tech Lead who knows how to do
that. Somebody that doesn't code but directs instead then you don't really
need a PM.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: non-local admin revisited

[Ray]

You're going to create user/id passwords they'll all know anyway to do
runas?  

 

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] 
Sent: Tuesday, July 19, 2011 10:54 AM
To: NT System Admin Issues
Subject: RE: non-local admin revisited

 

Create a domain group called IT Local Admins and add the domain IT Admin
accounts you create to it.  Then add that group to the computers using
restricted groups. Remember, restricted groups REPLACES everything in the
local admin group when you apply that GPO. It does not add.it replaces.

 

From: David Lum [mailto:david@nwea.org] 
Sent: Tuesday, July 19, 2011 1:32 PM
To: NT System Admin Issues
Subject: RE: non-local admin revisited

 

A local admin account?  So 50 IT folks would have 50 different local admin
accounts? Other than the deny log on locally what keeps them from creating
an admin account while logged in as admin?

 

Win 7 makes alternate credentials easy enough at least.

 

Dave.

 

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] 
Sent: Tuesday, July 19, 2011 10:20 AM
To: NT System Admin Issues
Subject: RE: non-local admin revisited

 

+1

 

From: Don Ely [mailto:don@gmail.com] 
Sent: Tuesday, July 19, 2011 1:19 PM
To: NT System Admin Issues
Subject: Re: non-local admin revisited

 

Provide them with an admin account and show them how to use run-as...  I
also disable logon locally where I can get away with it so they don't
cheat...

On Tue, Jul 19, 2011 at 10:10 AM, David Lum david@nwea.org wrote:

How do you bigger org's handle IT staff (DBA's and the like) not being local
admins on their systems? Invariably they are used to throwing on whatever
they want and in some ways this helps the Help desk so they're not called to
install stuff the user can install.

 

As we move to Windows 7 my recommendation is to yank local admin perms at
the same time (yes everyone is local admin on their XP systems currently),
but I foresee pushback from Service Desk and IT folks.

David Lum 
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: New to MS System Center, Where to start?

[Ray]

I don't think 500 is too much for a single server. Of course the specs are
important as well as the links. 

SCCM has been a bit of a disappointment for our agency of about 5,000
workstations. We've had MS folks here multiple times trying to get it to
work correctly. Some of it has been MS support not really knowing how some
things were supposed to be set up (Site Codes for example), some of it has
been our links, and some of it has been the lack of PC standards in our
agency. SCCM seems to rely heavily on components like WMI that can be
finicky with various permissions. 

That being said, YMMV.  If you've had better control of the PC's than we've
had, you may not run into this kind of stuff.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Thursday, July 07, 2011 10:04 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Good question. Would I want to support every workstation in the district?
(Aka, about 500 windows machines...) Or would that be overkill for a single
server?


--Matt Ross
Ephrata School District


- Original Message -
From: Rod Trent
[mailto:rodtr...@myitforum.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Thu, 07 Jul 2011
10:01:28 -0700
Subject: RE: New to MS System Center, Where to start?


 :) Where to start...?
 
 How many clients will be supporting through ConfigMgr?
 
 -Original Message-
 From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
 Sent: Thursday, July 07, 2011 12:50 PM
 To: NT System Admin Issues
 Subject: New to MS System Center, Where to start?
 
 Hey everybody.
 
 I have a server which has been freed up from it's previous duty. 
 Trying to find something productive for it's use, I'm looking at the 
 possibility of running System Center on it.
 
 Now, I'm totally new to any of the System Center stuff, so I'm 
 ignorant of much of it's uses.
 
 We at this school district will be subscribing to the MS EES program 
 when it becomes available (October 1st). This program will allow all 
 of our computers to run the most updated versions of Windows and 
 Office, as well as provide the CALs for several programs we had not 
 had the resources to purchase before. In particular, we will now have 
 CALs for System Center Configuration Manager and System Center Client
Management Suite.
 
 So, I'm diving in. I've just erased said spare server, installed 
 Win2k8R2SP1 (Say that 5 times fast) and I'm about to try to install 
 Configuration Manager 2007. Anything I should be aware of? Anything I
should look out for?
 
 Thanks in advance.
 
 
 --Matt Ross
 Ephrata School District
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: gmail outages

[Ray]

Haven't had any problems with my gmail account. 

-Original Message-
From: IS Technical [mailto:ist...@intsolcan.com] 
Sent: Thursday, July 07, 2011 10:08 AM
To: NT System Admin Issues
Subject: gmail outages

Can anyone tell me if there have been any major Gmail outages in the last
week. One if my customers uses gmail on his home system and claims that
service has been down or intermittent in the last week.

I haven't seen any news confirming this on the usual websites I monitor for
this kind of news.

Thanks.


Regards,
Charles

---
   Charles Figueiredo PhD 
   Integrated Solutions - Enhancing Small Business Systems
---



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: New to MS System Center, Where to start?

[Ray]

Apparently everything in the MS world doesn't rely on WMI or we would've
known we were going to have major issues.

Yes, we looked at 3rd party resources. The project really wasn't mine, and
now I have even less to do with it.

I did hear, however, that they're bringing in another MS consultant via
Premium Support. 

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, July 07, 2011 10:35 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Everything in the Windows world relies on WMI...

WMI can be finicky, but only when the repository becomes corrupted due to
various means (like improper imaging).

Have you consulted the 3rd party resources for SCCM?

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:24 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

I don't think 500 is too much for a single server. Of course the specs are
important as well as the links. 

SCCM has been a bit of a disappointment for our agency of about 5,000
workstations. We've had MS folks here multiple times trying to get it to
work correctly. Some of it has been MS support not really knowing how some
things were supposed to be set up (Site Codes for example), some of it has
been our links, and some of it has been the lack of PC standards in our
agency. SCCM seems to rely heavily on components like WMI that can be
finicky with various permissions. 

That being said, YMMV.  If you've had better control of the PC's than we've
had, you may not run into this kind of stuff.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, July 07, 2011 10:04 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Good question. Would I want to support every workstation in the district?
(Aka, about 500 windows machines...) Or would that be overkill for a single
server?


--Matt Ross
Ephrata School District


- Original Message -
From: Rod Trent
[mailto:rodtr...@myitforum.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Thu, 07 Jul 2011
10:01:28 -0700
Subject: RE: New to MS System Center, Where to start?


 :) Where to start...?
 
 How many clients will be supporting through ConfigMgr?
 
 -Original Message-
 From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
 Sent: Thursday, July 07, 2011 12:50 PM
 To: NT System Admin Issues
 Subject: New to MS System Center, Where to start?
 
 Hey everybody.
 
 I have a server which has been freed up from it's previous duty. 
 Trying to find something productive for it's use, I'm looking at the 
 possibility of running System Center on it.
 
 Now, I'm totally new to any of the System Center stuff, so I'm 
 ignorant of much of it's uses.
 
 We at this school district will be subscribing to the MS EES program 
 when it becomes available (October 1st). This program will allow all 
 of our computers to run the most updated versions of Windows and 
 Office, as well as provide the CALs for several programs we had not 
 had the resources to purchase before. In particular, we will now have 
 CALs for System Center Configuration Manager and System Center Client
Management Suite.
 
 So, I'm diving in. I've just erased said spare server, installed
 Win2k8R2SP1 (Say that 5 times fast) and I'm about to try to install 
 Configuration Manager 2007. Anything I should be aware of? Anything I
should look out for?
 
 Thanks in advance.
 
 
 --Matt Ross
 Ephrata School District
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com

RE: New to MS System Center, Where to start?

[Ray]

The guy who was handling the project spent a lot of time in MyITforum.

No longer my problem. I'm in another part of the agency now.   

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, July 07, 2011 10:57 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

You might be able to fix a lot of those issues *and* help the MS consultant
by having the person dealing with ConfigMgr to jump out to myITforum.

ConfigMgr is a piece of technology that will definitely let you know you
have problems you didn't even know about or hadn't even considered.

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:48 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Apparently everything in the MS world doesn't rely on WMI or we would've
known we were going to have major issues.

Yes, we looked at 3rd party resources. The project really wasn't mine, and
now I have even less to do with it.

I did hear, however, that they're bringing in another MS consultant via
Premium Support. 

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Thursday, July 07, 2011 10:35 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Everything in the Windows world relies on WMI...

WMI can be finicky, but only when the repository becomes corrupted due to
various means (like improper imaging).

Have you consulted the 3rd party resources for SCCM?

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:24 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

I don't think 500 is too much for a single server. Of course the specs are
important as well as the links. 

SCCM has been a bit of a disappointment for our agency of about 5,000
workstations. We've had MS folks here multiple times trying to get it to
work correctly. Some of it has been MS support not really knowing how some
things were supposed to be set up (Site Codes for example), some of it has
been our links, and some of it has been the lack of PC standards in our
agency. SCCM seems to rely heavily on components like WMI that can be
finicky with various permissions. 

That being said, YMMV.  If you've had better control of the PC's than we've
had, you may not run into this kind of stuff.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, July 07, 2011 10:04 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Good question. Would I want to support every workstation in the district?
(Aka, about 500 windows machines...) Or would that be overkill for a single
server?


--Matt Ross
Ephrata School District


- Original Message -
From: Rod Trent
[mailto:rodtr...@myitforum.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Thu, 07 Jul 2011
10:01:28 -0700
Subject: RE: New to MS System Center, Where to start?


 :) Where to start...?
 
 How many clients will be supporting through ConfigMgr?
 
 -Original Message-
 From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
 Sent: Thursday, July 07, 2011 12:50 PM
 To: NT System Admin Issues
 Subject: New to MS System Center, Where to start?
 
 Hey everybody.
 
 I have a server which has been freed up from it's previous duty. 
 Trying to find something productive for it's use, I'm looking at the 
 possibility of running System Center on it.
 
 Now, I'm totally new to any of the System Center stuff, so I'm 
 ignorant of much of it's uses.
 
 We at this school district will be subscribing to the MS EES program 
 when it becomes available (October 1st). This program will allow all 
 of our computers to run the most updated versions of Windows and 
 Office, as well as provide the CALs for several programs we had not 
 had the resources to purchase before. In particular, we will now have 
 CALs for System Center Configuration Manager and System Center Client
Management Suite.
 
 So, I'm diving in. I've just erased said spare server, installed
 Win2k8R2SP1 (Say that 5 times fast) and I'm about to try to install 
 Configuration Manager 2007. Anything I should be aware of? Anything I
should look out for?
 
 Thanks in advance.
 
 
 --Matt Ross
 Ephrata School District
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana

RE: New to MS System Center, Where to start?

[Ray]

Like I said, we had lots of various WMI issues, but didn't know it until
rolling out SCCM.  

I'm no longer on that team. I didn't even know they were still having a
problem and bringing in MS again. Other than remote control, which is
mediocre at best, I don't use it for anything. 

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Thursday, July 07, 2011 10:55 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

WMI is one of the key resources used just about everywhere within Windows.
It may be hidden by lots of command line programs, but it's often the
underlying technology they are using. Not always, but often.

SCCM does use it heavily as well. In fact, current versions install a
specific WMI provider that is used for querying and updating the SCCM DB. (I
don't know what 2012 does - I haven't had time to do much with it besides
read a couple of documents.)

Microsoft does, of course, have some great SCCM people; and if you have
premium support that's certainly the place to start. Both Avanade and
Accenture have infrastructure groups that do nothing but System Center - and
they have some FABULOUS people. And there are a fair number of independent
SCCM consultants, including SCCM MVPs, that are pretty bright too. :-)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:48 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Apparently everything in the MS world doesn't rely on WMI or we would've
known we were going to have major issues.

Yes, we looked at 3rd party resources. The project really wasn't mine, and
now I have even less to do with it.

I did hear, however, that they're bringing in another MS consultant via
Premium Support. 

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Thursday, July 07, 2011 10:35 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Everything in the Windows world relies on WMI...

WMI can be finicky, but only when the repository becomes corrupted due to
various means (like improper imaging).

Have you consulted the 3rd party resources for SCCM?

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:24 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

I don't think 500 is too much for a single server. Of course the specs are
important as well as the links. 

SCCM has been a bit of a disappointment for our agency of about 5,000
workstations. We've had MS folks here multiple times trying to get it to
work correctly. Some of it has been MS support not really knowing how some
things were supposed to be set up (Site Codes for example), some of it has
been our links, and some of it has been the lack of PC standards in our
agency. SCCM seems to rely heavily on components like WMI that can be
finicky with various permissions. 

That being said, YMMV.  If you've had better control of the PC's than we've
had, you may not run into this kind of stuff.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, July 07, 2011 10:04 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Good question. Would I want to support every workstation in the district?
(Aka, about 500 windows machines...) Or would that be overkill for a single
server?


--Matt Ross
Ephrata School District


- Original Message -
From: Rod Trent
[mailto:rodtr...@myitforum.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Thu, 07 Jul 2011
10:01:28 -0700
Subject: RE: New to MS System Center, Where to start?


 :) Where to start...?
 
 How many clients will be supporting through ConfigMgr?
 
 -Original Message-
 From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
 Sent: Thursday, July 07, 2011 12:50 PM
 To: NT System Admin Issues
 Subject: New to MS System Center, Where to start?
 
 Hey everybody.
 
 I have a server which has been freed up from it's previous duty. 
 Trying to find something productive for it's use, I'm looking at the 
 possibility of running System Center on it.
 
 Now, I'm totally new to any of the System Center stuff, so I'm 
 ignorant of much of it's uses.
 
 We at this school district will be subscribing to the MS EES program 
 when it becomes available (October 1st). This program will allow all 
 of our computers to run the most updated versions of Windows and 
 Office, as well as provide the CALs for several programs we had not 
 had the resources to purchase before. In particular, we will now have 
 CALs for System Center Configuration Manager and System Center Client
Management Suite.
 
 So, I'm diving in. I've just erased said spare server, installed
 Win2k8R2SP1 (Say that 5 times fast) and I'm about

RE: New to MS System Center, Where to start?

[Ray]

LOL! No, I didn't start this thread. I'm sure Matt Ross is learning a few
things. 

We were on Zenworks until dumping Novell.  

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Thursday, July 07, 2011 11:32 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Is this a nice way of telling us to be quiet now?  :)

Incidentally -- remote control in SMS (2003 and below) was phenomenal.
Microsoft made the mistake in ConfigMgr 2007 to eliminate an integrated RC
component and rely more on Windows RDP.  ConfigMgr 2012 brings back a full
RC component.

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 2:08 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Like I said, we had lots of various WMI issues, but didn't know it until
rolling out SCCM.  

I'm no longer on that team. I didn't even know they were still having a
problem and bringing in MS again. Other than remote control, which is
mediocre at best, I don't use it for anything. 

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 07, 2011 10:55 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

WMI is one of the key resources used just about everywhere within Windows.
It may be hidden by lots of command line programs, but it's often the
underlying technology they are using. Not always, but often.

SCCM does use it heavily as well. In fact, current versions install a
specific WMI provider that is used for querying and updating the SCCM DB. (I
don't know what 2012 does - I haven't had time to do much with it besides
read a couple of documents.)

Microsoft does, of course, have some great SCCM people; and if you have
premium support that's certainly the place to start. Both Avanade and
Accenture have infrastructure groups that do nothing but System Center - and
they have some FABULOUS people. And there are a fair number of independent
SCCM consultants, including SCCM MVPs, that are pretty bright too. :-)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:48 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Apparently everything in the MS world doesn't rely on WMI or we would've
known we were going to have major issues.

Yes, we looked at 3rd party resources. The project really wasn't mine, and
now I have even less to do with it.

I did hear, however, that they're bringing in another MS consultant via
Premium Support. 

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Thursday, July 07, 2011 10:35 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Everything in the Windows world relies on WMI...

WMI can be finicky, but only when the repository becomes corrupted due to
various means (like improper imaging).

Have you consulted the 3rd party resources for SCCM?

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:24 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

I don't think 500 is too much for a single server. Of course the specs are
important as well as the links. 

SCCM has been a bit of a disappointment for our agency of about 5,000
workstations. We've had MS folks here multiple times trying to get it to
work correctly. Some of it has been MS support not really knowing how some
things were supposed to be set up (Site Codes for example), some of it has
been our links, and some of it has been the lack of PC standards in our
agency. SCCM seems to rely heavily on components like WMI that can be
finicky with various permissions. 

That being said, YMMV.  If you've had better control of the PC's than we've
had, you may not run into this kind of stuff.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, July 07, 2011 10:04 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Good question. Would I want to support every workstation in the district?
(Aka, about 500 windows machines...) Or would that be overkill for a single
server?


--Matt Ross
Ephrata School District


- Original Message -
From: Rod Trent
[mailto:rodtr...@myitforum.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Thu, 07 Jul 2011
10:01:28 -0700
Subject: RE: New to MS System Center, Where to start?


 :) Where to start...?
 
 How many clients will be supporting through ConfigMgr?
 
 -Original Message-
 From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
 Sent: Thursday, July 07, 2011 12:50 PM
 To: NT System Admin Issues
 Subject: New to MS System Center, Where to start?
 
 Hey everybody.
 
 I have a server which has been freed up from

RE: New to MS System Center, Where to start?

[Ray]

Thanks. 

 

From: Steven Peck [mailto:sep...@gmail.com] 
Sent: Thursday, July 07, 2011 11:31 AM
To: NT System Admin Issues
Subject: Re: New to MS System Center, Where to start?

 

While Ray is not on the team he might want to pass this tool along onthe
remote chance they are not aware of it
http://sourceforge.net/projects/smsclictr/

 

Our SCCM guys used it to remiediate a lot of things in the earlier days.

On Thu, Jul 7, 2011 at 11:31 AM, Rod Trent rodtr...@myitforum.com wrote:

Is this a nice way of telling us to be quiet now?  :)

Incidentally -- remote control in SMS (2003 and below) was phenomenal.
Microsoft made the mistake in ConfigMgr 2007 to eliminate an integrated RC
component and rely more on Windows RDP.  ConfigMgr 2012 brings back a full
RC component.


-Original Message-
From: Ray [mailto:rz...@qwest.net]

Sent: Thursday, July 07, 2011 2:08 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Like I said, we had lots of various WMI issues, but didn't know it until
rolling out SCCM.

I'm no longer on that team. I didn't even know they were still having a
problem and bringing in MS again. Other than remote control, which is
mediocre at best, I don't use it for anything.

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 07, 2011 10:55 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

WMI is one of the key resources used just about everywhere within Windows.
It may be hidden by lots of command line programs, but it's often the
underlying technology they are using. Not always, but often.

SCCM does use it heavily as well. In fact, current versions install a
specific WMI provider that is used for querying and updating the SCCM DB. (I
don't know what 2012 does - I haven't had time to do much with it besides
read a couple of documents.)

Microsoft does, of course, have some great SCCM people; and if you have
premium support that's certainly the place to start. Both Avanade and
Accenture have infrastructure groups that do nothing but System Center - and
they have some FABULOUS people. And there are a fair number of independent
SCCM consultants, including SCCM MVPs, that are pretty bright too. :-)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:48 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Apparently everything in the MS world doesn't rely on WMI or we would've
known we were going to have major issues.

Yes, we looked at 3rd party resources. The project really wasn't mine, and
now I have even less to do with it.

I did hear, however, that they're bringing in another MS consultant via
Premium Support.

-Original Message-
From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Thursday, July 07, 2011 10:35 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Everything in the Windows world relies on WMI...

WMI can be finicky, but only when the repository becomes corrupted due to
various means (like improper imaging).

Have you consulted the 3rd party resources for SCCM?

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, July 07, 2011 1:24 PM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

I don't think 500 is too much for a single server. Of course the specs are
important as well as the links.

SCCM has been a bit of a disappointment for our agency of about 5,000
workstations. We've had MS folks here multiple times trying to get it to
work correctly. Some of it has been MS support not really knowing how some
things were supposed to be set up (Site Codes for example), some of it has
been our links, and some of it has been the lack of PC standards in our
agency. SCCM seems to rely heavily on components like WMI that can be
finicky with various permissions.

That being said, YMMV.  If you've had better control of the PC's than we've
had, you may not run into this kind of stuff.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Thursday, July 07, 2011 10:04 AM
To: NT System Admin Issues
Subject: RE: New to MS System Center, Where to start?

Good question. Would I want to support every workstation in the district?
(Aka, about 500 windows machines...) Or would that be overkill for a single
server?


--Matt Ross
Ephrata School District


- Original Message -
From: Rod Trent
[mailto:rodtr...@myitforum.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Thu, 07 Jul 2011
10:01:28 -0700
Subject: RE: New to MS System Center, Where to start?


 :) Where to start...?

 How many clients will be supporting through ConfigMgr?

 -Original Message-
 From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
 Sent: Thursday, July 07

RE: Anyone else seeing the Google interface changes?

[Ray]

Yup.  Don't like the Bing results, so I'm not switching from google any time
soon.

 

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Saturday, July 02, 2011 9:33 AM
To: NT System Admin Issues
Subject: Re: Anyone else seeing the Google interface changes?

 

Not trying to be a Google fan-boy here, but I'd say thats a matter of
opinion.  I still compare the two search engines occasionally with the help
of Firefox add-ons, and I still find the Google results are more relevant.

If Google is making their interface look more like Bing - whatever. I
preferred Google from the beginning for its straight-forward simplicity, and
second for its increasingly better results. Ultimately that position became
reversed as search engines improved, and now I want the best results
possible.

Everyone is always copying and borrowing appearances.  As long as its fast
and intuitive, I'm cool with it - but I prefer Google's plainer and less
distracting appearance.

As with the great Microsoft/Apple debates; in the end, I still say its whats
under the hood that counts.  Until Bing starts showing better results than
Google, I could care less who looks like what.  I'll change the theme or use
Greasemonkey so it looks how I want it to.

And back to the debate at-hand:  I have seen evidence that suggests and/or
proves that Bing was trolling Google. Going off-of Microsoft's response,
Bing cheats their relevance matching and will return obscure results because
of the actions of end-users.  Do you know what that results in?  Websites
dedicated to making fun of similar problems, such as 'autocompleteme'.

And I'd still like to see how Microsoft's response directly correlates with
what Google was able to establish.

--
Espi

 

 





On Sat, Jul 2, 2011 at 8:24 AM, Crawford, Scott crawfo...@evangel.edu
wrote:

Let's assume they are.  I say that's great. If all Bing did was search
google and curate the results, it would be worth using over google.

 

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Friday, July 01, 2011 6:27 PM


To: NT System Admin Issues
Subject: Re: Anyone else seeing the Google interface changes?

 

Thats because Bing is searching Google results.

--
Espi

 

 

 

On Fri, Jul 1, 2011 at 11:30 AM, Steven Peck sep...@gmail.com wrote:

Well, their picture choice also sucked.  The default image I got made for
poor page usuability as the background contrast with the text entry was
inconsistent on the images I got.  I also wasn't interested in picking a
picture.

 

I switched to bing several months ago when it was giving the same or
slightly better results for what I search for 90% of the time.  It's gotten
better for me since.  The few times I try Google on a bing fail, I fail
there about half the time.

 

I like the competition.  It's making it better for the rest of us.

On Fri, Jul 1, 2011 at 11:18 AM, Ralph Smith m...@gatewayindustries.org
wrote:

Because they add these features without giving you a choice, like the page
previews that pop up next to search results and can't be permanently
disabled.  It annoys me so much I've pretty much stopped using Google
search.

 

From: Steven Peck [mailto:sep...@gmail.com] 
Sent: Friday, July 01, 2011 1:53 PM


To: NT System Admin Issues

Subject: Re: Anyone else seeing the Google interface changes?

 

That's because they did it so poorly :)

On Fri, Jul 1, 2011 at 10:50 AM, Webster carlwebs...@gmail.com wrote:

But they did the nice picture thing a while back and removed it after the
loud chorus of angry users.

 

 

Webster

 

From: Steven Peck [mailto:sep...@gmail.com] 

Subject: Re: Anyone else seeing the Google interface changes?

 

So, GMail changes look ok.  Google layout looks more and more like bing
every day now.  Just missing the nice picture. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~


~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an 

RE: OT: Capturing video from YouTube?

[Ray]

There are several options out there. If you sign up for 
www.giveawayoftheday.com you'll get a daily email with a commercial product 
they give away for free. One of the best parts is the reviews, which often give 
you some good hints for free alternatives. 

MediaAvatar works for me.  

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, June 13, 2011 9:36 AM
To: NT System Admin Issues
Subject: Re: OT: Capturing video from YouTube?

If you use Firefox, the FLV Downloader plugin works very well - it even lets 
you choose an MP4 download, if one is available.

On Mon, Jun 13, 2011 at 09:10, James Rankin kz2...@googlemail.com wrote:
 Is there any way to snag a video from YouTube or other online site? 
 I know there are various copyright issues attached to this, but it's 
 just that one of my little lads is obsessed with planes (mostly the 
 F14, for some reason) and loves to watch a particular video of it. 
 It's just that booting up my laptop, attaching it to the TV, switching 
 the TV to VGA mode, and then firing up the video for him is a bit of a 
 chore, and I was just wondering if anyone knew any way it could be 
 streamlined.


 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put 
 into the machine wrong figures, will the right answers come out?' I am 
 not able rightly to apprehend the kind of confusion of ideas that 
 could provoke such a question.

 IMPORTANT: The information in this email is CONFIDENTIAL. If its 
 contents are disclosed in any way my lawyers will swoop down from 
 black helicopters like Seal Team Six and drag you away with a black 
 bag over your head. They will then take you to a secret prison and 
 make you fight to the death with other people who dared to share this 
 email. You will be given a large bowie knife and a supply of 
 methamphetamines while I watch the said deathmatch and wager vast sums 
 of money on who will be the winner. If the fight becomes boring or 
 there is a stalemate, I will release rabid dogs and my two-stone cat 
 into the arena to liven things up a bit. If these animals become in 
 any way docile, I will squirt them with water pistols until they become a bit 
 more temperamental.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Antivirus Center

[Ray]

+1 for teamviewer.

-Original Message-
From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Thursday, May 05, 2011 7:02 AM
To: NT System Admin Issues
Subject: Re: Antivirus Center

I learned it from here as well.  It's from the LogMeIn company.

Of all the remote access tools out there, I like TeamViewer best.
Being able to reboot into safe mode and auto-reconnect is great, and TV has
the smoothest screen action.  However, it's not free for commercial use so I
can only use it to support family and friends (unless accepting homemade
cookies in exchange for services constitutes payment - grin).


Roger Wright
___

I'm out of bed and dressed... what more do you want?





On Thu, May 5, 2011 at 9:52 AM, David Lum david@nwea.org wrote:
 Thanks for this Roger!

 It never ceases to amaze me the little tidbits I find from this list...

 Dave

 -Original Message-
 From: Roger Wright [mailto:rhw...@gmail.com]
 Sent: Thursday, May 05, 2011 6:26 AM
 To: NT System Admin Issues
 Subject: Re: Antivirus Center

 www.join.me is a free alternative to logmein.


 Roger Wright
 ___

 I'm out of bed and dressed... what more do you want?





 On Wed, May 4, 2011 at 3:43 PM, John Aldrich 
 jaldr...@blueridgecarpet.com wrote:
 Well, he's already shipping it out, and he's frustrated, I'm
frustrated...
 wish I could get the company to spring for a logmein account.. 
 *sigh*




 -Original Message-
 From: Tammy Stewart [mailto:copper...@personainternet.com]
 Sent: Wednesday, May 04, 2011 3:32 PM
 To: NT System Admin Issues
 Subject: RE: Antivirus Center

 No Problem John,

 Figured autoruns might be easier to walk users through -- You might 
 also be able to remote access the box in safe mode with networking 
 too. (I know shipping costs are deadly)

 Tammy

 -Original Message-
 From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
 Sent: Wednesday, May 04, 2011 3:29 PM
 To: NT System Admin Issues
 Subject: RE: Antivirus Center

 Thanks! Will do! 'Preciate it, Tammy! :D




 -Original Message-
 From: Tammy Stewart [mailto:copper...@personainternet.com]
 Sent: Wednesday, May 04, 2011 3:23 PM
 To: NT System Admin Issues
 Subject: RE: Antivirus Center

 Hi John,

 Log onto a different account -- that one is normally profile specific.
 Log off first user though or you risk infecting the next account.
 If only one account on the machine -- try safe mode admin account or 
 safe mode user account (threat shouldn't run in safe mode)

 Decent writeup on this one..
 http://www.bleepingcomputer.com/virus-removal/remove-antivirus-center

 Can omit MBAM though if desired.

 I use autoruns from sysinternals -- I LOVE that tool!
 http://technet.microsoft.com/en-us/sysinternals/bb963902

 Once you grab that app  initial scan is done hit the users menu at 
 top choose infected user. Reg path  file path should be there. 
 (either a user run key or runonce under the logon tab in autoruns)

 Since Rescue didn't nail it -- found samples can be uploaded here:

 http://www.sunbeltsecurity.com/threat

 We'll be sure to get it in the defs.

 Cheers!

 Tammy

 -Original Message-
 From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
 Sent: Wednesday, May 04, 2011 2:56 PM
 To: NT System Admin Issues
 Subject: RE: Antivirus Center

 No, Vipre is NOT installed. User has McAfee AND AVG on there... I 
 know that McAfee gets installed by default with Acrobat Reader and  
 other Adobe products...



 From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]
 Sent: Wednesday, May 04, 2011 2:42 PM
 To: NT System Admin Issues
 Subject: Re: Antivirus Center


 If VIPRE is installed, then call!  Tammy knows the entire boot 
 process, and she can probably figure out what is loading what.

 Some bugs disable the task manager, the CLI, and the ability to boot 
 into SafeMode.

 Note that some of these bugs will scamble the registry, so no 
 applications can run anymore.  She has fixed that one as well.
 --
 richard



 John Aldrich jaldr...@blueridgecarpet.com
 05/04/2011 01:22 PM
 Please respond to
 NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com

 To
 NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
  Press this button if the To is a fax number. Enter in the fax 
 number like 123-456-7890.
 cc

 Subject
 Antivirus Center







 I just had a remote user infected with Antivirus Center fake 
 antivirus. I had him try to run Vipre Rescue, but it didn't find 
 anything. Any idea why VR didn't find it?



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint 
 security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions 

RE: Employee Self-Service

[Ray]

You can look at www.namescape.com   We’ll be checking them out some more
soon.  We’re just now finishing up our groupwise to exchange migration, so
this will be on the radar in the not-too-distant future.

 

From: Jim Holmgren [mailto:jholmg...@xlhealth.com] 
Sent: Tuesday, April 12, 2011 11:01 AM
To: NT System Admin Issues
Subject: RE: Employee Self-Service

 

That’s good enough for me to give it a close look – and the price is right
too -  Thanks man!

 

Jim

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Tuesday, April 12, 2011 1:45 PM
To: NT System Admin Issues
Subject: RE: Employee Self-Service

 

Exchange 2010 is my favorite.

 

For purchased tools, I like http://www.directory-update.com/

 

That being said, it’s from Jim McBee (a personal friend and Exchange MVP) so
I’m biased.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Jim Holmgren [mailto:jholmg...@xlhealth.com] 
Sent: Tuesday, April 12, 2011 1:36 PM
To: NT System Admin Issues
Subject: Employee Self-Service

 

Hi All,

Looking for recommendations on tools to allow our employees to update parts
of their AD/GAL entry on their own– specifically phone numbers for this
instance – and was wondering if anyone had any recommendations for a web
tool.   I see plenty of them via Google, just curious if anyone has a
favorite. 

 

Thanks!

Jim

 

 

Jim Holmgren

Senior Manager, Infrastructure Services

XLHealth Corporation

The Warehouse at Camden Yards

351 West Camden Street, Suite 100

Baltimore, MD 21201 

410.625.2200 (main)

443.524.8573 (direct)

443-506.2400 (cell)

 http://www.xlhealth.com www.xlhealth.com

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole
use of the intended recipient(s) and may contain confidential and/or
protected health information. Under the Federal Law (HIPAA), the intended
recipient is obligated to keep this information secure and confidential. Any
disclosure to third parties without authorization from the member of as
permitted by law is prohibited and punishable under Federal Law. If you are
not the intended recipient, please contact the sender by reply e-mail and
destroy all copies of the original message. 

NOTA DE CONFIDENCIALIDAD: Este mensaje incluyendo cualquier anejo es para
uso exclusivo del (los) destinatario (s) y puede incluir informaci?n
confidencial y/o informaci?n de salud protegida. La Ley Federal (HIPAA)
establece que el destinatario est? obligado a mantener la informaci?n
confidencial y sequra. HIPAA proh?be y castiga cualquier divulgaci?n a
terceras personas sin autorizaci?n del afiliado o permitido por ley. Si
usted no es el destinatario, redirija esta mensaje al remitente, y destruye
cualquier copia existente del mensaje original. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole
use of the intended recipient(s) and may contain confidential and/or
protected health information. Under the Federal Law (HIPAA), the intended
recipient is obligated to keep this information secure and confidential. Any
disclosure to third parties without authorization from the member of as
permitted by law is prohibited and punishable under Federal Law. If you are
not the intended recipient, please contact the sender by reply e-mail and
destroy all copies of the original message. 

NOTA DE CONFIDENCIALIDAD: Este mensaje incluyendo cualquier anejo es para
uso exclusivo del (los) destinatario (s) y puede incluir información
confidencial y/o información de salud protegida. La Ley Federal (HIPAA)
establece que el destinatario está obligado a mantener la información
confidencial y sequra. HIPAA prohíbe y castiga cualquier divulgación a
terceras personas sin autorización del afiliado o permitido por ley. Si
usted no es el destinatario, redirija esta mensaje al remitente, y destruye
cualquier copia existente del mensaje original. 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ 

RE: PDF Reader recap

[Ray]

+2 - Our agency has standardized on it. 

-Original Message-
From: IS Technical [mailto:ist...@intsolcan.com] 
Sent: Wednesday, March 23, 2011 10:38 AM
To: NT System Admin Issues
Subject: Re: PDF Reader recap

+1

On Tue, 22 Mar 2011 16:38:11 -0400, Bill Humphries wrote:

I like PDF-Xchange viewer.  Fast and has lots of 
advanced features.

Bill

Erik Goldoff wrote:
 There was a relatively recent discussion on PDF 
readers that I'm 
 unable to search right now... I use FoxIT reader on my 
home XP system, 
 but wonder what you recommend for a free reliable PDF 
reader for a 
 Win7 system here.
 Thanks

 ~ Finally, powerful endpoint security that ISN'T a 
resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-
Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
listmana...@lyris.sunbeltsoftware.com 
 mailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a 
resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-
Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Regards,
Charles

---
   Charles Figueiredo PhD 
   Integrated Solutions - Enhancing Small Business Systems
---



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: [OT] Obama birth certificate

[Ray]

Section 1 of Article Two of the United States Constitution sets forth the
eligibility requirements for serving as President of the United States:

 No person except a natural born Citizen, or a Citizen of the United
States, at the time of the Adoption of this Constitution, shall be eligible
to the Office of President; neither shall any Person be eligible to that
Office who shall not have attained to the Age of thirty-five Years, and been
fourteen Years a Resident within the United States.  

The grandfather provision of the natural born Citizen clause provided an
exception to the natural born requirement for those persons who were
citizens at the time of the adoption of the Constitution. (The first several
Presidents prior to Martin van Buren as well as potential Presidential
candidates such as Alexander Hamilton were born as British subjects in
British America before the American Revolution and this grandfather clause
would cover them.)[1]


-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Thursday, March 17, 2011 7:17 PM
To: NT System Admin Issues
Subject: Re: [OT] Obama birth certificate

On Thu, Mar 17, 2011 at 9:52 PM, Ray rz...@qwest.net wrote:
 But the term natural born has been up to interpretation.  ...
 ... under the strictest of interpretations, the child of a serviceman, 
 diplomat, or even Peace Corp worker, born out of the US, [is not 
 natural born].

  The definition of natural born is not specified in the US Constitution.
It is, however, specified to ridiculous lengths by the US Code (Federal
law).  Broadly speaking, the child of a US citizen is a US citizen by birth.
There are exceptions.  Service in the duty of the country is considered to
meet requirements for residence of parentage.  You can read the gory details
if you want:

http://www.law.cornell.edu/uscode/8/usc_sup_01_8_10_12_20_III_30_I.html

  One can argue that that's not what natural born *should* mean, but for
purposes of interpreting US law, that's what it *does* mean.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: [OT] Obama birth certificate

[Ray]

Don't confuse the birthers with facts. 

Wonder if they'd have put this much effort in dismissing McCain as a
natural born citizen had he been elected. 

-Original Message-
From: Ben Schorr [mailto:b...@rolandschorr.com] 
Sent: Thursday, March 17, 2011 10:01 AM
To: NT System Admin Issues
Subject: RE: [OT] Obama birth certificate

And the now-former Governor of Hawaii, Republican Linda Lingle, who was a
supporter of G.W. Bush and campaigned for John McCain, has publicly stated
that there is no legitimate dispute and that Obama's Hawaii birth
certificate is valid and proper.

Ben M. Schorr
Chief Executive Officer
__
Roland Schorr  Tower
1188 Bishop Street. Suite 1701
Honolulu HI. 96813
Mobile:  808-782-6306
Fax: 808-533-3677
www.rolandschorr.com
b...@rolandschorr.com

 From: Ben Scott [mailto:mailvor...@gmail.com]
 Sent: Thursday, March 17, 2011 09:54
 To: NT System Admin Issues
 Subject: [OT] Obama birth certificate
 
   As much as I hate to do this, this meme *really* needs to die.  If 
 nothing else, it detracts from legitimate debate about policies.
 
 On Thu, Mar 17, 2011 at 11:48 AM, Kim Longenbaugh 
 k...@colonialsavings.com wrote:
  The admittedly off-topic discussion was about the constitutional 
  requirements for being president, one of which is being a 
  natural-born US citizen, which is typically verified by a birth 
  certificate.  There is still considerable debate about whether that 
  requirement was met in the last election.
 
   There is misinformation and willful ignorance.  I'm not sure that 
 qualifies as debate.
 
   The state of Hawaii has officially said they have a certified record 
 of birth on file.
 
 http://hawaii.gov/health/vital-records/obama.html
 
   Images of the birth certificate have been published.
 
 http://www.factcheck.org/elections-2008/born_in_the_usa.html
 
   Images of birth notices in newspapers have been published.
 
 http://whatreallyhappened.com/WRHARTICLES/obamabirth.php
 
 -- Ben
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: http://lyris.sunbelt- 
 software.com/read/my_forums/ or send an email to 
 listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: [OT] Obama birth certificate

[Ray]

But the term “natural born” has been up to interpretation.  Goldwater was
born in a territory.  McCain was born on a base.  A non-citizen can have a
baby here and it can become president, but under the strictest of
interpretations, the child of a serviceman, diplomat, or even Peace Corp
worker, born out of the US, cannot.  

 

And while I understand some people think a military base is actually “US
soil”, it doesn’t mean it qualifies as “natural born”.

 

Luckily we’ve not really had to have all that challenged. 

 

From: Jon Harris [mailto:jk.har...@gmail.com] 
Sent: Thursday, March 17, 2011 5:54 PM
To: NT System Admin Issues
Subject: Re: [OT] Obama birth certificate

 

I know this from my wife becoming a citizen a few years ago.  The only thing
she can not become is the President.  The Passport is only given to
citizens.  It does not matter where you are born only if you are a citizen.
The reason the Federal government has the requirement of natural born
citizen for the president was the fear of outsiders coming here and taking
over control.  Keep in mind the Constitution was written less than 20 years
after a very bloody and costly war with a very superior power.  A power that
was still trying to force their will on people NOT from their country and
was even kidnapping US citizens and forcing them to serve on their war ships
that were attacking our shipping.  The president is more than a figure head
and acts and the top war making person.  He/she can not declare a war but
they can send in troops and make war.  I a lot of people at the time and
still today would not trust someone that has no vested interest in the US to
become the president.  Add to that getting the Constitution changed is a
nightmare most of those in power do not want to do.  Things like term
limits, making them accountable for their actions, restricting what they
can/could get away with, etc.  Another consideration is past mistakes that
cost the nation big time like Prohibition.  Then there is perception.
Perceptions like Europe trying to force the US to get rid of the Death
Penalty.  Telling us it is wrong is one thing restricting our ability to get
what is thought of as a more humane way to put people to death just makes
for anger and noncompliance.  Most of the people in this country descend
from people that were forced to leave their homeland.  Right or wrong many
remember our roots and really don't like being told by the descendants of
those that forced our ancestors out of their homeland to do something.

 

Jon Harris

On Thu, Mar 17, 2011 at 2:21 PM, Miguel Gonzalez
miguel_3_gonza...@yahoo.es wrote:

And the point is? :-)

Sorry guys but I don't think that the US is that different to other federal
countries. I'm coming from a federal country myself (Spain) and there are
many other federal countries (and co-federal like Switzerland) in the world.
That means that every region, lander or state (choose your name) can have
different laws. But they can't never be against the constitution. Every
federal country has a Court for watching if any new law can be the
constitutional rights.

What the US constitution is saying is that that there is a difference
between having an US passport (second class) and having it and being born in
the US (first class).That was my point.

The fact that you can be a governor (or not) but not an US president was
irrelevant but just a curiosity :)

Miguel



--- El jue, 17/3/11, Kennedy, Jim kennedy...@elyriaschools.org escribió:

 De: Kennedy, Jim kennedy...@elyriaschools.org
 Asunto: RE: [OT] Obama birth certificate

 Para: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com

 Fecha: jueves, 17 de marzo, 2011 14:01


 I think it points more towards the autonomy of the States.
 For many things, the States can do as they wish. The US born
 requirement for our President was part of our founding
 Constitution.  Another part of that Constitution
 delegates a great deal of self-rule to the individual
 States. As they became States they were able to decide that
 issue for themselves. Even now if a State wanted to require
 you to be US born to be a governor they certainly could pass
 a State Constitutional amendment to do so.



 -Original Message-
 From: Miguel Gonzalez [mailto:miguel_3_gonza...@yahoo.es]



 It's quite curious that you can be a governor of a State
 not being born in the US but you can't elect that person as
 US president. This states clear that there are first and
 second class US passports.

 Miguel



 ~ Finally, powerful endpoint security that ISN'T a resource
 hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ 
 ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To 

RE: Antivirus Vendor Replacement

[Ray]

We use a startup script to deploy Sophos. 

 

From: Jim Holmgren [mailto:jholmg...@xlhealth.com] 
Sent: Friday, March 11, 2011 3:03 PM
To: NT System Admin Issues
Subject: RE: Antivirus Vendor Replacement

 

We use SCCM to deploy most of ours.  You can also go to the SophosUpdate
share on the Update Manager and manually install the client.

 

Jim

 

From: pdw1...@hotmail.com [mailto:pdw1...@hotmail.com] 
Sent: Friday, March 11, 2011 3:49 PM
To: NT System Admin Issues
Subject: RE: Antivirus Vendor Replacement

 


We've had Sophos up and running for about 6 weeks now.  It does use up more
resources than Vipre, though.

Jim-I have yet to find a way to deploy the agent w/o using the console.
With Vipre it was easy to create an agent and then use that to deploy on a
single machine.  Sophos is a bit of a pain (from what I've experienced) on
deploying to one pc.

  _  

Subject: RE: Antivirus Vendor Replacement
Date: Fri, 11 Mar 2011 11:56:45 -0500
From: jholmg...@xlhealth.com
To: ntsysadmin@lyris.sunbelt-software.com

+1 for Sophos.   

 

I’m a big fan – easy deployment, easy to manage via console, catches a ton
of stuff that Symantec did not and I got great pricing from our local VAR.

 

 

Jim Holmgren

Senior Manager, Infrastructure Services

XLHealth Corporation

The Warehouse at Camden Yards

351 West Camden Street, Suite 100

Baltimore, MD 21201 

410.625.2200 (main)

443.524.8573 (direct)

443-506.2400 (cell)

www.xlhealth.com

 

 

 

From: Randal, Phil [mailto:pran...@herefordshire.gov.uk] 
Sent: Friday, March 11, 2011 11:49 AM
To: NT System Admin Issues
Subject: RE: Antivirus Vendor Replacement

 

Big issue is manageability in a corporate environment.

 

All products have their quirks.  Would be nice to see a good feature matrix
prepared by a non-vendor.

 

McAfee ain’t so crappy anymore with VSE 8.8, though we’re getting too many
false positives with Artemis, even at a low sensitivity level.

 

Sophos is good on detection; it’s one of the first to detect the latest
round of “DHL” email malware being spammed out in great quantities at the
moment.

 

Cheers,

 

Phil

-- 
Phil Randal | Infrastructure Engineer 
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's Office
| I.C.T. Services Division 
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT 
Tel: 01432 260160

 

From: Weatherford, Chad [mailto:cweatherf...@scvl.com] 
Sent: 11 March 2011 16:00
To: NT System Admin Issues
Subject: Antivirus Vendor Replacement

 

We are looking to replace our current AV (McCrappy Total Protection for
Endpoint) with something that is more light weight AND catches all of the
bugs. I was pretty excited about Trend and LANDesk’s Kaspersky engine…until
either testing or listening to SE’s describe the product.

 

I would appreciate any and all feedback on the AV vendor you use and if you
recommend them.

 

 

 

Chad Weatherford | Network/Security Administrator | Shoe Carnival, Inc. |
(:812.867.8314 | 7: 812.471.9866 | *: cweatherf...@scvl.com

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole
use of the intended recipient(s) and may contain confidential and/or
protected health information. Under the Federal Law (HIPAA), the intended
recipient is obligated to keep this information secure and confidential. Any
disclosure to third parties without authorization from the member of as
permitted by law is prohibited and punishable under Federal Law. If you are
not the intended recipient, please contact the sender by reply e-mail and
destroy all copies of the original message. 

NOTA DE CONFIDENCIALIDAD: Este mensaje incluyendo cualquier anejo es para
uso exclusivo del (los) destinatario (s) y puede incluir información
confidencial y/o información de salud protegida. La Ley Federal (HIPAA)
establece que el destinatario está obligado a mantener la información
confidencial y sequra. HIPAA prohíbe y castiga cualquier divulgación a
terceras personas sin autorización del afiliado o permitido por ley. Si
usted no es el destinatario, 

RE: Word 2007 only prints to default tray

[Ray]

So it's related to her id? 

 

There's some application data under docs/settings, like maybe normal.dot.

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonmobility.com] 
Sent: Wednesday, March 02, 2011 12:35 PM
To: NT System Admin Issues
Subject: Word 2007 only prints to default tray

 

I have a user who can't print from Word 2007 to any specific tray on the
printer (other than the default tray).

Word always goes to the default tray, no matter what tray you tell it to go
to.

This happens for all Word documents.

All other office apps are printing properly to any tray you select.

I checked page setup, and it is selected default (automatically select).

However, if I log on to her computer as me, I can print from Word to any
tray just fine.

Any ideas?

 


.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: How do you deploy AV?

[Ray]

We pushed Sophos originally via OU, then decided to go with a startup script
instead.

   

From: Jim Holmgren [mailto:jholmg...@xlhealth.com] 
Sent: Thursday, February 17, 2011 1:25 PM
To: NT System Admin Issues
Subject: RE: How do you deploy AV?

 

Sophos will hook into AD OUs.  As soon as we add a PC to an OU, Sophos will
push itself to it.   It also works well with SCCM.

 

 

Jim Holmgren

Senior Manager, Infrastructure Services

XLHealth Corporation

The Warehouse at Camden Yards

351 West Camden Street, Suite 100

Baltimore, MD 21201 

410.625.2200 (main)

443.524.8573 (direct)

443-506.2400 (cell)

www.xlhealth.com

 

 

 

From: Sean Rector [mailto:sean.rec...@vaopera.org] 
Sent: Thursday, February 17, 2011 12:00 PM
To: NT System Admin Issues
Subject: RE: How do you deploy AV?

 

+1

 

Sean Rector, MCSE

 

From: John Leto [mailto:jo...@colonialsavings.com] 
Sent: Thursday, February 17, 2011 11:41 AM
To: NT System Admin Issues
Subject: RE: How do you deploy AV?

 

We deploy ours via the Vipre console and then verify compliance from the
console.

 

From: David Lum [mailto:david@nwea.org] 
Sent: Thursday, February 17, 2011 10:39 AM
To: NT System Admin Issues
Subject: How do you deploy AV?

 

What methods do you guys use to deploy AV to systems and what process do you
follow to make sure your live endpoints are compliant?

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 503.548.5229 // (Cell) 503.267.9764

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Information Technology Manager
Virginia Opera Association 

E-Mail:  mailto:sean.rec...@vaopera.org sean.rec...@vaopera.org
Phone:(757) 213-4548 (direct line)
{+}

Subscriptions and tickets are on sale now! 
The Valkyrie   |   Madama Butterfly

Visit us online at  http://www.vaopera.org/ www.VaOpera.org or call
1-866-OPERA-VA

The vision of Virginia Opera is to enrich lives through the powerful
integration of music, voice and human drama.

  _  

This e-mail and any attached files are confidential and intended solely for
the intended recipient(s). Unless otherwise specified, persons unnamed as
recipients may not read, distribute, copy or alter this e-mail. Any views or
opinions expressed in this e-mail belong to the author and may not
necessarily represent those of Virginia Opera. Although precautions have
been taken to ensure no viruses are present, Virginia Opera cannot accept
responsibility for any loss or damage that may arise from the use of this
e-mail or attachments.

{*}

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole
use of the intended recipient(s) and may contain confidential and/or
protected health information. Under the Federal Law (HIPAA), the intended
recipient is obligated to keep this information secure and confidential. Any
disclosure to third parties without authorization from the member of as
permitted by law is prohibited and punishable under Federal Law. If you are
not the intended recipient, please contact the sender by reply e-mail and
destroy all copies of the original message. 

NOTA DE CONFIDENCIALIDAD: Este mensaje incluyendo cualquier anejo es para
uso exclusivo del (los) destinatario (s) y puede incluir información
confidencial y/o información de salud protegida. La Ley Federal (HIPAA)
establece que el destinatario está obligado a mantener la información
confidencial y sequra. HIPAA prohíbe y castiga cualquier divulgación a
terceras personas sin autorización del afiliado o permitido por ley. Si
usted no es el destinatario, redirija esta mensaje al remitente, y destruye
cualquier copia existente del mensaje original. 


~ Finally, powerful endpoint security that ISN'T a 

RE: Free FTP sites

[Ray]

We could use one too.  We have shops that need to get various print-ready
files and e-mail isn't the solution. 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonmobility.com] 
Sent: Friday, February 11, 2011 10:31 AM
To: NT System Admin Issues
Subject: RE: Free FTP sites

 

www.Adrive.com

They offer 50GB free online storage - I *think* FTP access is free as well.

 

 

From: Holstrom, Don [mailto:dholst...@nbm.org] 
Sent: Friday, February 11, 2011 11:58 AM
To: NT System Admin Issues
Subject: Free FTP sites

 

Anyone having good luck with a free outside FTP site? We are setting one up
next week, but one of my users wants one right now.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Free FTP sites

[Ray]

Never heard of it.  The request just came in.   

 

From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: Friday, February 11, 2011 10:50 AM
To: NT System Admin Issues
Subject: RE: Free FTP sites

 

Are the services like yousendit.com not a viable alternative for you ?

 

Erik Goldoff

IT  Consultant

Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '

From: Ray [mailto:rz...@qwest.net] 
Sent: Friday, February 11, 2011 12:39 PM
To: NT System Admin Issues
Subject: RE: Free FTP sites

 

We could use one too.  We have shops that need to get various print-ready
files and e-mail isn't the solution. 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonmobility.com] 
Sent: Friday, February 11, 2011 10:31 AM
To: NT System Admin Issues
Subject: RE: Free FTP sites

 

www.Adrive.com

They offer 50GB free online storage - I *think* FTP access is free as well.

 

 

From: Holstrom, Don [mailto:dholst...@nbm.org] 
Sent: Friday, February 11, 2011 11:58 AM
To: NT System Admin Issues
Subject: Free FTP sites

 

Anyone having good luck with a free outside FTP site? We are setting one up
next week, but one of my users wants one right now.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: desktop network switches

[Ray]

Absolutely.  It's not always as easy it sounds, depending on distance,
construction, etc.   

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Monday, February 07, 2011 3:59 AM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

 

Install extra cabling is a solution that has greater expense, and requires
far more permission that install unmanaged switch in most circumstances.

 

There are plenty of valid scenarios where you will not have the opportunity
to add more network drops to a location, and for which the temporary or
permanent deployment of unmanaged switches will be entirely reasonable.


 

ASB (Find me online via About.Me http://about.me/Andrew.S.Baker/bio ) 
Exploiting Technology for Business Advantage...

 





On Sun, Feb 6, 2011 at 10:49 PM, James Hill james.h...@superamart.com.au
wrote:

I'm with Kurt.  Unmanaged switches are just trouble.  Do it properly and
install extra cabling.

Unmanaged switches have a habit of multiplying.  I've been caught out one
too many times by a hidden one under a desk somewhere, usually when imaging
an entire floor with multicast or something when I don't have the time for
trouble.

I've even seen one of these switches go nuts and flood a core switch so much
it brought the network to its knees.


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]

Sent: Sunday, 6 February 2011 5:19 AM
To: NT System Admin Issues

Subject: Re: OT: desktop network switches

It's not just one mistake.

I don't know what it is about my user population, but at least a couple of
times a year, and sometimes more often, I have to go chasing down some idiot
(usually a software developer or hardware engineer) who has connected a
little switch to itself, or to another little switch.

I'm really tired of it.

Kurt

On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
 So because someone made a mistake you're condemning using them?

 -Original Message-

 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, February 04, 2011 1:45 PM
 To: NT System Admin Issues

 Subject: Re: OT: desktop network switches

 Don't. Just don't.

 Pull another run of cable if you have to.

 Desktop switches are just wrong.

 I speak from much experience here.


 Just last month, we shuffled a bunch of folks around, and the facilities
guy was moving PCs and printers, and noticed that there was a loose cable
attached to a 5-port switch. So, not knowing what else to do with it, he
plugged it into the 5 port switch. Which meant that both ends of the cable
were in the same dumb, unmanaged, switch.
 That's your basic layer2 loop, right there.

 It killed performance for lots of people, until I tracked it down.

 I've had this happen so many times with stupid 5 and 8 port switches that
if I could rip them all out I would do so in less time than it takes to
write about it.

 But, we now have so many of them, because our wiring is so sparse, that I
can't. Yet. It's a major line item in the IT CAPEX budget for next year.

 Kurt

 On Fri, Feb 4, 2011 at 11:00, John Aldrich jaldr...@blueridgecarpet.com
wrote:
 One of my users just claimed an unused laser printer for his office
(Acct.
 Manager) that has a network port on it as well as the usual USB. He'd
 like to be able to network it so he can print to it from the AS/400.
 What do you guys recommend for a small (4-5 port) network switch?
 To anyone who wants to know, this is for real, looking for
 recommendations for a RIGHT NOW purchase, not next time. :-)

 Thanks!


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Refurbished/inexpensive Windows PCs

[Ray]

New PC's from places like Tiger are pretty inexpensive. I got my last pc
from Best Buy because I could get it with 18-months no-interest. 

-Original Message-
From: Ames Matthew B [mailto:mba...@qinetiq.com] 
Sent: Monday, February 07, 2011 7:08 AM
To: NT System Admin Issues
Subject: RE: Refurbished/inexpensive Windows PCs

Sorry to hear of your split up.  (Hoping that VPNing into the office from
her PC wasn't the last straw!)

Dell Factory outlet is a good place to pick up a well spec'd machine at a
good price.  Normally a good range of machines from basic cheapo home
offerings up to business class workstations/xps units.  Some will even come
with screens.

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: 07 February 2011 14:03
To: NT System Admin Issues
Subject: OT: Refurbished/inexpensive Windows PCs

It looks like I'm going to be needing to get my own Windows machine sooner
rather than later, as my wife and I are splitting up and I need a Windows
machine to be able to 1) Run the windows games I like (Wild Tangent games,
mainly) and 2) use the Windows machine to access the VPN here at the office
and 3) use Windows programs to burn video compilations I have of my Dad for
my family.

Where do you guys go for your inexpensive refurbished PCs? I'd prefer
something name-brand, which will take an extra hard drive, etc. 

Thanks





~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
This email and any attachments to it may be confidential and are intended
solely for the use of the individual to whom it is addressed. If you are not
the intended recipient of this email, you must neither take any action based
upon its contents, nor copy or show it to anyone. Please contact the sender
if you believe you have received this email in error. QinetiQ may monitor
email traffic data and also the content of email for the purposes of
security. QinetiQ Limited (Registered in England  Wales: Company Number:
3796233) Registered office: 85 Buckingham Gate, London SW1E 6PD
http://www.qinetiq.com.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: desktop network switches

[Ray]

It's easy to be critical. But business reality in some shops require more 
flexibility.  Spending thousands of dollars when $50 will take care of the 
problem seems like good business sense. 

Maybe I just don't understand IT's role in business. Making things less 
inconvenient for IT isn't always at the top of my list.  


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, February 07, 2011 7:59 AM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

Required? Sometimes.

More expensive up front? Yes.

Valid or reasonable? I disagree.

IMHO, being forced to use these tiny unmanaged switches shows a decided lack of 
foresight on someone's part, and a lack of understanding of their larger costs.

Unless, perhaps, you're temporizing until a complete wireless solution is being 
readied. :)

Kurt

On Mon, Feb 7, 2011 at 02:59, Andrew S. Baker asbz...@gmail.com wrote:
 Install extra cabling is a solution that has greater expense, and 
 requires far more permission that install unmanaged switch in most 
 circumstances.
 There are plenty of valid scenarios where you will not have the 
 opportunity to add more network drops to a location, and for which the 
 temporary or permanent deployment of unmanaged switches will be entirely 
 reasonable.

 ASB (Find me online via About.Me)
 Exploiting Technology for Business Advantage...




 On Sun, Feb 6, 2011 at 10:49 PM, James Hill 
 james.h...@superamart.com.au
 wrote:

 I'm with Kurt.  Unmanaged switches are just trouble.  Do it properly 
 and install extra cabling.

 Unmanaged switches have a habit of multiplying.  I've been caught out 
 one too many times by a hidden one under a desk somewhere, usually 
 when imaging an entire floor with multicast or something when I don't 
 have the time for trouble.

 I've even seen one of these switches go nuts and flood a core switch 
 so much it brought the network to its knees.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Sunday, 6 February 2011 5:19 AM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 It's not just one mistake.

 I don't know what it is about my user population, but at least a 
 couple of times a year, and sometimes more often, I have to go 
 chasing down some idiot (usually a software developer or hardware 
 engineer) who has connected a little switch to itself, or to another little 
 switch.

 I'm really tired of it.

 Kurt

 On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
  So because someone made a mistake you're condemning using them?
 
  -Original Message-
  From: Kurt Buff [mailto:kurt.b...@gmail.com]
  Sent: Friday, February 04, 2011 1:45 PM
  To: NT System Admin Issues
  Subject: Re: OT: desktop network switches
 
  Don't. Just don't.
 
  Pull another run of cable if you have to.
 
  Desktop switches are just wrong.
 
  I speak from much experience here.
 
 
  Just last month, we shuffled a bunch of folks around, and the 
  facilities guy was moving PCs and printers, and noticed that there 
  was a loose cable attached to a 5-port switch. So, not knowing what 
  else to do with it, he plugged it into the 5 port switch. Which 
  meant that both ends of the cable were in the same dumb, unmanaged, switch.
  That's your basic layer2 loop, right there.
 
  It killed performance for lots of people, until I tracked it down.
 
  I've had this happen so many times with stupid 5 and 8 port 
  switches that if I could rip them all out I would do so in less 
  time than it takes to write about it.
 
  But, we now have so many of them, because our wiring is so sparse, 
  that I can't. Yet. It's a major line item in the IT CAPEX budget for next 
  year.
 
  Kurt
 
  On Fri, Feb 4, 2011 at 11:00, John Aldrich 
  jaldr...@blueridgecarpet.com wrote:
  One of my users just claimed an unused laser printer for his 
  office (Acct.
  Manager) that has a network port on it as well as the usual USB. 
  He'd like to be able to network it so he can print to it from the AS/400.
  What do you guys recommend for a small (4-5 port) network switch?
  To anyone who wants to know, this is for real, looking for 
  recommendations for a RIGHT NOW purchase, not next time. :-)
 
  Thanks!
 

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http

RE: OT: desktop network switches

[Ray]

Yes, I know the possible horror stories. Stuff happens, and is just as often
caused by a network admin. 

So yes, it can be just as simple as $50 vs $xxx. 


-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov] 
Sent: Monday, February 07, 2011 10:30 AM
To: NT System Admin Issues
Subject: RE: OT: desktop network switches

While I recognize the need to not waste money and be flexible, it isn't as
simple as $50 vs $.  If your whole business goes down because somebody
caused a spanning tree loop with an unmanaged switch, does that make
business sense?  Again, sometimes you have to do what you have to do, but
buying the cheapest solution available does not necessarily save money in
the long run. 

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Monday, February 07, 2011 12:04 PM
To: NT System Admin Issues
Subject: RE: OT: desktop network switches

It's easy to be critical. But business reality in some shops require more
flexibility.  Spending thousands of dollars when $50 will take care of the
problem seems like good business sense. 

Maybe I just don't understand IT's role in business. Making things less
inconvenient for IT isn't always at the top of my list.  


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Monday, February 07, 2011 7:59 AM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

Required? Sometimes.

More expensive up front? Yes.

Valid or reasonable? I disagree.

IMHO, being forced to use these tiny unmanaged switches shows a decided lack
of foresight on someone's part, and a lack of understanding of their larger
costs.

Unless, perhaps, you're temporizing until a complete wireless solution is
being readied. :)

Kurt

On Mon, Feb 7, 2011 at 02:59, Andrew S. Baker asbz...@gmail.com wrote:
 Install extra cabling is a solution that has greater expense, and 
 requires far more permission that install unmanaged switch in most
circumstances.
 There are plenty of valid scenarios where you will not have the 
 opportunity to add more network drops to a location, and for which the

 temporary or permanent deployment of unmanaged switches will be
entirely reasonable.

 ASB (Find me online via About.Me)
 Exploiting Technology for Business Advantage...




 On Sun, Feb 6, 2011 at 10:49 PM, James Hill 
 james.h...@superamart.com.au
 wrote:

 I'm with Kurt.  Unmanaged switches are just trouble.  Do it properly 
 and install extra cabling.

 Unmanaged switches have a habit of multiplying.  I've been caught out

 one too many times by a hidden one under a desk somewhere, usually 
 when imaging an entire floor with multicast or something when I don't

 have the time for trouble.

 I've even seen one of these switches go nuts and flood a core switch 
 so much it brought the network to its knees.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Sunday, 6 February 2011 5:19 AM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 It's not just one mistake.

 I don't know what it is about my user population, but at least a 
 couple of times a year, and sometimes more often, I have to go 
 chasing down some idiot (usually a software developer or hardware
 engineer) who has connected a little switch to itself, or to another
little switch.

 I'm really tired of it.

 Kurt

 On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
  So because someone made a mistake you're condemning using them?
 
  -Original Message-
  From: Kurt Buff [mailto:kurt.b...@gmail.com]
  Sent: Friday, February 04, 2011 1:45 PM
  To: NT System Admin Issues
  Subject: Re: OT: desktop network switches
 
  Don't. Just don't.
 
  Pull another run of cable if you have to.
 
  Desktop switches are just wrong.
 
  I speak from much experience here.
 
 
  Just last month, we shuffled a bunch of folks around, and the 
  facilities guy was moving PCs and printers, and noticed that there 
  was a loose cable attached to a 5-port switch. So, not knowing what

  else to do with it, he plugged it into the 5 port switch. Which 
  meant that both ends of the cable were in the same dumb, unmanaged,
switch.
  That's your basic layer2 loop, right there.
 
  It killed performance for lots of people, until I tracked it down.
 
  I've had this happen so many times with stupid 5 and 8 port 
  switches that if I could rip them all out I would do so in less 
  time than it takes to write about it.
 
  But, we now have so many of them, because our wiring is so sparse, 
  that I can't. Yet. It's a major line item in the IT CAPEX budget
for next year.
 
  Kurt
 
  On Fri, Feb 4, 2011 at 11:00, John Aldrich 
  jaldr...@blueridgecarpet.com wrote:
  One of my users just claimed an unused laser printer for his 
  office (Acct.
  Manager) that has a network port on it as well as the usual USB. 
  He'd like to be able to network it so he can print to it from the
AS/400.
  What do you guys recommend for a small (4-5 port

RE: OT: desktop network switches

[Ray]

Yup.  I worked with some historic buildings in the past too.  They're not
too keen on more cutting\drilling etc.

 

From: Ben Schorr [mailto:b...@rolandschorr.com] 
Sent: Monday, February 07, 2011 10:39 AM
To: NT System Admin Issues
Subject: RE: OT: desktop network switches

 

Indeed - we've been down that road ourselves a time or two. I'm not sure
you've dealt with a difficult infrastructure environment until you've had to
provided data and telecom on a battleship (yes, really).  Running 200 feet
of cable to the nearest managed switch -- which may involve drilling new
punch-thru holes in steel (and occasionally armored) bulkheads -- in that
environment is not something we undertake lightly (or cheaply).

 

On many occasions new offices have been provisioned with inexpensive
temporary switches until we can determine that it's worth it to us to bring
in something more heavy-duty.  And you can forget about wireless - even
802.11N has a range of about 40 feet in that environment. Most of their
users have to walk outside to get a usable signal on their mobile phones.

 

Ben M. Schorr
Chief Executive Officer
__
Roland Schorr  Tower
 http://www.rolandschorr.com/ www.rolandschorr.com
 mailto:b...@rolandschorr.com b...@rolandschorr.com

Twitter:  http://www.twitter.com/bschorr http://www.twitter.com/bschorr

Facebook:  http://www.facebook.com/rolandschorr
http://www.facebook.com/rolandschorr 

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Monday, February 07, 2011 08:15
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

 

Given all the constraints you complain about experiencing in your current
place of employment, Kurt, I'm surprised you would suggest that someone else
needing to make do in some fashion, and not having the budget or approval to
run more cable through an old, union run facility, to support the addition
of two people into an office on a temporary basis[1], represents some sort
of gross negligence on the part of the either the admin or management.

 

Also, just because you have had a bad experience with a technology does not
render it hideously untenable for the rest of the known world.

 

I envy your Utopian habitat, with neither budgetary nor timing constraints.


 

ASB (Find me online via About.Me http://about.me/Andrew.S.Baker/bio ) 
Exploiting Technology for Business Advantage...

 [1] Just to name ONE common issue

 

On Mon, Feb 7, 2011 at 9:59 AM, Kurt Buff kurt.b...@gmail.com wrote:

Required? Sometimes.

More expensive up front? Yes.

Valid or reasonable? I disagree.

IMHO, being forced to use these tiny unmanaged switches shows a
decided lack of foresight on someone's part, and a lack of
understanding of their larger costs.

Unless, perhaps, you're temporizing until a complete wireless solution
is being readied. :)

Kurt


On Mon, Feb 7, 2011 at 02:59, Andrew S. Baker asbz...@gmail.com wrote:
 Install extra cabling is a solution that has greater expense, and
requires
 far more permission that install unmanaged switch in most circumstances.
 There are plenty of valid scenarios where you will not have the
opportunity
 to add more network drops to a location, and for which the temporary or
 permanent deployment of unmanaged switches will be entirely reasonable.

 ASB (Find me online via About.Me)
 Exploiting Technology for Business Advantage...





 On Sun, Feb 6, 2011 at 10:49 PM, James Hill james.h...@superamart.com.au
 wrote:

 I'm with Kurt.  Unmanaged switches are just trouble.  Do it properly and
 install extra cabling.

 Unmanaged switches have a habit of multiplying.  I've been caught out one
 too many times by a hidden one under a desk somewhere, usually when
imaging
 an entire floor with multicast or something when I don't have the time
for
 trouble.

 I've even seen one of these switches go nuts and flood a core switch so
 much it brought the network to its knees.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Sunday, 6 February 2011 5:19 AM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 It's not just one mistake.

 I don't know what it is about my user population, but at least a couple
of
 times a year, and sometimes more often, I have to go chasing down some
idiot
 (usually a software developer or hardware engineer) who has connected a
 little switch to itself, or to another little switch.

 I'm really tired of it.

 Kurt

 On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
  So because someone made a mistake you're condemning using them?
 
  -Original Message-
  From: Kurt Buff [mailto:kurt.b...@gmail.com]
  Sent: Friday, February 04, 2011 1:45 PM
  To: NT System Admin Issues
  Subject: Re: OT: desktop network switches
 
  Don't. Just don't.
 
  Pull another run of cable if you have to.
 
  Desktop switches are just wrong.
 
  I speak from much experience here.
 
 
  Just last month, we shuffled a bunch of folks around

RE: OT: desktop network switches

[Ray]

Do you get paid hourly or are you salaried?  If salary, they're paying you 
anyway. Even if hourly, and you get OT, it's not really a burdened rate. They 
don't pay more for your insurance if you work 40 or 80 hours. 

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, February 07, 2011 10:49 AM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

I have backed up my words with real world examples.

As I stated before, I have lots of experience with folks creating layer 2 loops 
with small unmanaged switches over the past 9+ years at my position. If it 
costs even one hour of my time tracking these down for each incident (and it's 
usually more than that), the money spent is well worth it to both me and the 
business.

It happens about twice a year, and sometimes more frequently. At a fully 
burdened hourly rate of approximately $75.00/hour just for my time, not to 
mention the time of all of the people affected who can't do their jobs for at 
least an hour at a time, it is stunningly bad business *NOT* to have pulled 
sufficient cable and bought sufficient ports to support the requirements of the 
environment.

Kurt

On Mon, Feb 7, 2011 at 07:57, Andrew S. Baker asbz...@gmail.com wrote:
Notice that I did say Required? Sometimes.
 And then proceeded to articulate yourself right into a corner.

You and Andrew, however, sometimes over-interpret my words.
 Use less words, and use them in the same manner as the rest of the 
 planet, and you'll find them harder to over-interpret[1].
 And back up your words with real-world examples, and others will find 
 more opportunity for agreement.

 ASB (Find me online via About.Me)
 Exploiting Technology for Business Advantage...

 [1] I won't even ask...



 On Mon, Feb 7, 2011 at 10:46 AM, Kurt Buff kurt.b...@gmail.com wrote:

 Life *is* usually as cut and dried as I make it out to be. You and 
 Andrew, however, sometimes over-interpret my words.

 Notice that I did say Required? Sometimes.

 In particular, my time as a sysadmin is almost always worth more than 
 the difference between a cheap 5/8 port switch and a couple of ports 
 on, and some cabling to reach, a managed switch.

 Kurt

 On Mon, Feb 7, 2011 at 07:15, Jeff Steward jstew...@gmail.com wrote:
  Life is rarely so cut and dried as you make it out to be.  As with 
  any decision, there are multiple inputs and risk assessments to be 
  made and sometimes, using an inexpensive unmanaged switch is the right 
  choice.
  -Jeff Steward
 
  On Mon, Feb 7, 2011 at 9:59 AM, Kurt Buff kurt.b...@gmail.com wrote:
 
  Required? Sometimes.
 
  More expensive up front? Yes.
 
  Valid or reasonable? I disagree.
 
  IMHO, being forced to use these tiny unmanaged switches shows a 
  decided lack of foresight on someone's part, and a lack of 
  understanding of their larger costs.
 
  Unless, perhaps, you're temporizing until a complete wireless 
  solution is being readied. :)
 
  Kurt
 
  On Mon, Feb 7, 2011 at 02:59, Andrew S. Baker asbz...@gmail.com
  wrote:
   Install extra cabling is a solution that has greater expense, 
   and requires far more permission that install unmanaged switch 
   in most circumstances.
   There are plenty of valid scenarios where you will not have the 
   opportunity to add more network drops to a location, and for 
   which the temporary or permanent deployment of unmanaged 
   switches will be entirely reasonable.
  
   ASB (Find me online via About.Me) Exploiting Technology for 
   Business Advantage...
  
  
  
  
   On Sun, Feb 6, 2011 at 10:49 PM, James Hill 
   james.h...@superamart.com.au
   wrote:
  
   I'm with Kurt.  Unmanaged switches are just trouble.  Do it 
   properly and install extra cabling.
  
   Unmanaged switches have a habit of multiplying.  I've been 
   caught out one too many times by a hidden one under a desk 
   somewhere, usually when imaging an entire floor with multicast 
   or something when I don't have the time for trouble.
  
   I've even seen one of these switches go nuts and flood a core 
   switch so much it brought the network to its knees.
  
   -Original Message-
   From: Kurt Buff [mailto:kurt.b...@gmail.com]
   Sent: Sunday, 6 February 2011 5:19 AM
   To: NT System Admin Issues
   Subject: Re: OT: desktop network switches
  
   It's not just one mistake.
  
   I don't know what it is about my user population, but at least 
   a couple of times a year, and sometimes more often, I have to 
   go chasing down some idiot (usually a software developer or 
   hardware engineer) who has connected a little switch to itself, 
   or to another little switch.
  
   I'm really tired of it.
  
   Kurt
  
   On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
So because someone made a mistake you're condemning using them?
   
-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Friday, February 04, 2011 1:45 PM
To: NT System Admin Issues
Subject: Re

RE: OT: desktop network switches

[Ray]

Actually I'm saying that it's my job as an IT guy to make the call. I'm
saying that depending on the situation the cure might be worse than the
disease.

There's plenty of IT people out there that think locking down a pc so tight
that it takes a user 10 minutes to login and 2 minutes between screens
because OMG they once got hit with ILOVEYOU or some other
virus/malware/spyware/etc and look at the lost productivity. So they've
incrementally caused a lack of productivity every minute of every day
because of what might happen again. 

Like I said, we have to weigh the options. They're not all cut/dry. 

And I'm sure we all have horror stories, some of which we created ourselves.

-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov] 
Sent: Monday, February 07, 2011 3:19 PM
To: NT System Admin Issues
Subject: RE: OT: desktop network switches

Your argument seems to be that, because bad things can happen no matter what
you do, that you may as well not worry about doing anything that prevents a
clueless end user from bringing the whole business down.  As an IT
professional, it is generally your job to support the needs of your business
in the most economical fashion possible.  It is also your job to make sure
the right people understand the tradeoffs between saving money and operating
your business.  While a network admin can absolutely mess up and bring
everything down, a properly configured, managed network is going to ensure
that doesn't happen just because you plugged a cable in the wrong place.

If everyone in your organization understands that your business might become
non-functional because someone plugged a cable into the wrong place so that
you can save $950, so be it.  If, however, they decide that nobody being
able to do their job, take orders, or whatever for an hour while you run
around looking at $50 switches in everybody's office for the rogue cable was
worth significantly more than $950, they might rightfully question why you
did nothing to prevent it.  So, while it might *sometimes* be as simple as
that, if you have made this decision without the appropriate people in your
organization understanding the risks, you might find yourself unemployed.

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Monday, February 07, 2011 4:55 PM
To: NT System Admin Issues
Subject: RE: OT: desktop network switches

Yes, I know the possible horror stories. Stuff happens, and is just as often
caused by a network admin. 

So yes, it can be just as simple as $50 vs $xxx. 


-Original Message-
From: Mayo, Bill [mailto:bem...@pittcountync.gov]
Sent: Monday, February 07, 2011 10:30 AM
To: NT System Admin Issues
Subject: RE: OT: desktop network switches

While I recognize the need to not waste money and be flexible, it isn't as
simple as $50 vs $.  If your whole business goes down because somebody
caused a spanning tree loop with an unmanaged switch, does that make
business sense?  Again, sometimes you have to do what you have to do, but
buying the cheapest solution available does not necessarily save money in
the long run. 

-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Monday, February 07, 2011 12:04 PM
To: NT System Admin Issues
Subject: RE: OT: desktop network switches

It's easy to be critical. But business reality in some shops require more
flexibility.  Spending thousands of dollars when $50 will take care of the
problem seems like good business sense. 

Maybe I just don't understand IT's role in business. Making things less
inconvenient for IT isn't always at the top of my list.  


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Monday, February 07, 2011 7:59 AM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

Required? Sometimes.

More expensive up front? Yes.

Valid or reasonable? I disagree.

IMHO, being forced to use these tiny unmanaged switches shows a decided lack
of foresight on someone's part, and a lack of understanding of their larger
costs.

Unless, perhaps, you're temporizing until a complete wireless solution is
being readied. :)

Kurt

On Mon, Feb 7, 2011 at 02:59, Andrew S. Baker asbz...@gmail.com wrote:
 Install extra cabling is a solution that has greater expense, and 
 requires far more permission that install unmanaged switch in most
circumstances.
 There are plenty of valid scenarios where you will not have the 
 opportunity to add more network drops to a location, and for which the

 temporary or permanent deployment of unmanaged switches will be
entirely reasonable.

 ASB (Find me online via About.Me)
 Exploiting Technology for Business Advantage...




 On Sun, Feb 6, 2011 at 10:49 PM, James Hill 
 james.h...@superamart.com.au
 wrote:

 I'm with Kurt.  Unmanaged switches are just trouble.  Do it properly 
 and install extra cabling.

 Unmanaged switches have a habit of multiplying.  I've been caught out

 one too many times by a hidden one under a desk somewhere

RE: OT: desktop network switches

[Ray]

So the burdened rate argument doesn't fly.

Whatever works for you, great.  

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, February 07, 2011 4:02 PM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

I'm salaried, and OT doesn't count, until it's too much OT. But, there's also 
the opportunity costs involved, and not just for me. Down time is not 
productive time, and it's far more than just my time at stake.

Kurt

On Mon, Feb 7, 2011 at 14:56, Ray rz...@qwest.net wrote:
 Do you get paid hourly or are you salaried?  If salary, they're paying you 
 anyway. Even if hourly, and you get OT, it's not really a burdened rate. They 
 don't pay more for your insurance if you work 40 or 80 hours.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Monday, February 07, 2011 10:49 AM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 I have backed up my words with real world examples.

 As I stated before, I have lots of experience with folks creating layer 2 
 loops with small unmanaged switches over the past 9+ years at my position. If 
 it costs even one hour of my time tracking these down for each incident (and 
 it's usually more than that), the money spent is well worth it to both me and 
 the business.

 It happens about twice a year, and sometimes more frequently. At a fully 
 burdened hourly rate of approximately $75.00/hour just for my time, not to 
 mention the time of all of the people affected who can't do their jobs for at 
 least an hour at a time, it is stunningly bad business *NOT* to have pulled 
 sufficient cable and bought sufficient ports to support the requirements of 
 the environment.

 Kurt

 On Mon, Feb 7, 2011 at 07:57, Andrew S. Baker asbz...@gmail.com wrote:
Notice that I did say Required? Sometimes.
 And then proceeded to articulate yourself right into a corner.

You and Andrew, however, sometimes over-interpret my words.
 Use less words, and use them in the same manner as the rest of the 
 planet, and you'll find them harder to over-interpret[1].
 And back up your words with real-world examples, and others will find 
 more opportunity for agreement.

 ASB (Find me online via About.Me)
 Exploiting Technology for Business Advantage...

 [1] I won't even ask...



 On Mon, Feb 7, 2011 at 10:46 AM, Kurt Buff kurt.b...@gmail.com wrote:

 Life *is* usually as cut and dried as I make it out to be. You and 
 Andrew, however, sometimes over-interpret my words.

 Notice that I did say Required? Sometimes.

 In particular, my time as a sysadmin is almost always worth more 
 than the difference between a cheap 5/8 port switch and a couple of 
 ports on, and some cabling to reach, a managed switch.

 Kurt

 On Mon, Feb 7, 2011 at 07:15, Jeff Steward jstew...@gmail.com wrote:
  Life is rarely so cut and dried as you make it out to be.  As with 
  any decision, there are multiple inputs and risk assessments to be 
  made and sometimes, using an inexpensive unmanaged switch is the right 
  choice.
  -Jeff Steward
 
  On Mon, Feb 7, 2011 at 9:59 AM, Kurt Buff kurt.b...@gmail.com wrote:
 
  Required? Sometimes.
 
  More expensive up front? Yes.
 
  Valid or reasonable? I disagree.
 
  IMHO, being forced to use these tiny unmanaged switches shows a 
  decided lack of foresight on someone's part, and a lack of 
  understanding of their larger costs.
 
  Unless, perhaps, you're temporizing until a complete wireless 
  solution is being readied. :)
 
  Kurt
 
  On Mon, Feb 7, 2011 at 02:59, Andrew S. Baker asbz...@gmail.com
  wrote:
   Install extra cabling is a solution that has greater expense, 
   and requires far more permission that install unmanaged switch
   in most circumstances.
   There are plenty of valid scenarios where you will not have the 
   opportunity to add more network drops to a location, and for 
   which the temporary or permanent deployment of unmanaged 
   switches will be entirely reasonable.
  
   ASB (Find me online via About.Me) Exploiting Technology for 
   Business Advantage...
  
  
  
  
   On Sun, Feb 6, 2011 at 10:49 PM, James Hill 
   james.h...@superamart.com.au
   wrote:
  
   I'm with Kurt.  Unmanaged switches are just trouble.  Do it 
   properly and install extra cabling.
  
   Unmanaged switches have a habit of multiplying.  I've been 
   caught out one too many times by a hidden one under a desk 
   somewhere, usually when imaging an entire floor with multicast 
   or something when I don't have the time for trouble.
  
   I've even seen one of these switches go nuts and flood a core 
   switch so much it brought the network to its knees.
  
   -Original Message-
   From: Kurt Buff [mailto:kurt.b...@gmail.com]
   Sent: Sunday, 6 February 2011 5:19 AM
   To: NT System Admin Issues
   Subject: Re: OT: desktop network switches
  
   It's not just one mistake.
  
   I don't know what it is about my user population, but at least 
   a couple of times

RE: Patch management, revisited

[Ray]

The success of SCCM would have to depend on your environment.  If you're in
an environment with multiple locations that have had some level of autonomy
on hardware purchases, and imaging, and patch management, it could be a
nightmare.  It seems to rely heavily on WMI.   Speed is an issue too, so if
your WAN suck, you'll have issues. 

 

On top of that, MS support is at best inconsistent on how this is supposed
to work if you have multiple sites.  The only way we finally got a whole lot
of this to finally work was thru our TAM and whatever that support team is
called.  They spent days at our site trying to get it to work. 

 

I would hope most sites aren't as fundamentally screwed up as ours was
however. 

 

I agree that the product has an amazing amount of power.  

 

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, February 04, 2011 11:50 AM
To: NT System Admin Issues
Subject: RE: Patch management, revisited

 

If you don't do third party patches, SCCM is _almost_ exactly like WSUS. It
is based on the WSUS engine as a matter of fact, and you have to install
WSUS on the Software Update Point. J

 

Doing the SCCM installation can be a little finicky; but once you set it up
- it just RUNS.

 

The challenge with SCCM in my eyes is that it can do SO MUCH, that unless
you break it up into pieces (which is what I do when I teach classes on it),
it can seem utterly overwhelming.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Jonathan [mailto:ncm...@gmail.com] 
Sent: Friday, February 04, 2011 1:43 PM
To: NT System Admin Issues
Subject: Patch management, revisited

 

Ok, guys  gals, I've sifted through the threads for the past year searching
on patch management and SCCM, and not found exactly what I'm looking for...

 

In my new gig, the team gets to choose what we will use to handle patches
and updates, as there is nothing set in stone right now. Two options have
been mentioned by the team: SCCM and Big Fix. I don't know anything about
Big Fix, except hat they were just recently gobbled up by IBM and are now
part of Tivoli. What I've heard about SCCM is that it is a bear to learn and
manage. Right now we've got between 700 and 1,000 nodes (including servers,
both virtual and physical), and potentially slated for continued growth.
Some of the engineers have laptops that are NOT members of AD, and they run
as local Admins. That is probably NOT going to change. Also, we may or may
not be looking at needing to handle 3rd party updates as well. I've run
WSUS, but only for a few hundred nodes, and really only for windows OS
updates and nothing else.

 

Finally, we need decent reporting tools that can provide us with compliance
reports on where we stand with patch management.

 

I've seen Shavlik, Kace/K-Box, WSUS, SCCM,  GFI LANGuard all mentioned
here...

 

1. Am I missing anything any products that I should be looking into?

2. Are any of these apps not well suited for the numbers of nodes I'm
talking about (either over or under-powered for 700-2000 nodes)?

3. What's going to be the easiest learning curve/least administrative
overhead?

 

Thanks,

-- 
Jonathan, A+, MCSA, MCSE

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Dedupe Thoughts?

[Ray]

It's all about your level of paranoia.  Our building, for example, has had 2
roof collapses in 5 years.  The 2nd one took out the sprinkler system, which
flooded the building.  A lot of equipment didn't survive.  

 

I can't take my disks offsite.  Tape isn't going away anytime soon. 

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Friday, February 04, 2011 1:09 PM
To: NT System Admin Issues
Subject: Re: Dedupe Thoughts?

 

There's a flaw in your parenthetical observation.  If the disk fails in a
d2d backup, and the tape is backing up from the backup disk, then the tape
is worthless as far as a secondary backup.


 

On Fri, Feb 4, 2011 at 2:59 PM, Paul Hutchings paul.hutchi...@mira.co.uk
wrote:

Fair point on the flexibility, it just seemed a little costly for a poor
mans solution.

My own personal opinion, stick with an aux copy on tape for that warm fuzzy
feeling when you're standing in the burning embers and need to know you've
access to a good backup (or when the disks fail or you mess up) - once the
d2d backup is done your backup window doesn't matter so you can take as long
as you like to do the aux copy to tape.

Do check out how BE does dedupe and synthetic full backups - one of the big
selling points of D2D and dedupe is this incremental forever business
where you take your initial known, good, full backup, and from that point
onwards you only ever take incrementals and let the backup software
construct fulls from your initial full, plus the incrementals.


-Original Message-
From: Roger Wright [mailto:rhw...@gmail.com]

Sent: 04 February 2011 19:53
To: NT System Admin Issues

Subject: Re: Dedupe Thoughts?

Yep, definitely would want to exit the tape scene as soon as possible.
 I was really looking at the Synology for the flexibility of either eSATA or
NAS connectivity.  There may be even more cost-effective solutions, but
we've had great luck so far with the one Synology NAS we purchased.


Roger Wright
___

The internet is a great way to get on the net. - Bob Dole




On Fri, Feb 4, 2011 at 2:27 PM, Paul Hutchings paul.hutchi...@mira.co.uk
wrote:
 How come you're looking at NAS rather than just shovelling a few 2tb
 drives in your backup server?

 I'm looking into doing something very similar myself (we use
 Commvault/Simpana) and the rule of thumb on disk space, assuming
 you're not paying per Tb stored, is disk is cheap, and with dedupe
 rates what they are for average data, you'd be mad not to shovel in as
 much as you can afford and leave tape as the very last resort.

 -Original Message-
 From: Roger Wright [mailto:rhw...@gmail.com]
 Sent: 04 February 2011 18:08
 To: NT System Admin Issues
 Subject: Dedupe Thoughts?

 I'm looking at some options for a poor man's deduplication system
 for backups.  A Data Domain or Exagrid solution would be preferred but
 not feasible at this time.

 We're currently backing up a little over 4 TB to LTO3 tape and have
 outgrown our backup window, library capacity, and RTO.

 I'm thinking of using BE 2010's Deduplication option for the engine
 and something like the Synology DS1511+ with 5 - 2GB drives for 8 TB
 of storage (w/RAID5 or just a hot spare).  Then I could offload to
 tape for off-site storage or script replication to another unit at a
 branch office.

 Any best practices thoughts for sizing the storage for the deduped data?
 Does it just depend on the ratio achieved and the storage and the
 number of backup sets retained?  One nice thing about the Synology
 system is it can be easily expanded to up to 15 disks.

 A Data Domain or Exagrid solution would be preferred but not feasible
 at this time.


 Roger Wright
 ___

 The internet is a great way to get on the net. - Bob Dole

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 --
 MIRA Ltd

 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84

 The contents of this e-mail are confidential and are solely for the use of
the intended recipient.  If you receive this e-mail in error, please delete
it and notify us either by e-mail, telephone or fax.  You should not copy,
forward or otherwise disclose the content of the e-mail as this is
prohibited.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage 

RE: OT: desktop network switches

[Ray]

Heck yeah.  We have those all the time.  

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, February 04, 2011 1:57 PM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

 

I'm pretty sure I'm not going to be able to agree with that.

 

There are plenty of occasions or situations that simply call for a 5-port or
8-port switch.


 

ASB (Find me online via About.Me http://about.me/Andrew.S.Baker/bio ) 
Exploiting Technology for Business Advantage...

 





On Fri, Feb 4, 2011 at 3:48 PM, Kurt Buff kurt.b...@gmail.com wrote:

*ALL* switches should be managed, and include things like spanning
tree controls, ssh remote configuration, snmp.

Death to dumb switches.


On Fri, Feb 4, 2011 at 12:46, John Aldrich jaldr...@blueridgecarpet.com
wrote:
 Hmm...nifty. I'll keep that in mind, should the need arise for a managed
 switch like that.




 -Original Message-
 From: Ben Scott [mailto:mailvor...@gmail.com]
 Sent: Friday, February 04, 2011 3:42 PM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 On Fri, Feb 4, 2011 at 2:39 PM, John Aldrich
 jaldr...@blueridgecarpet.com wrote:
 Typically I've been very happy with Netgear switches, but the ones
 I've been able to find are almost $50 for a 5-port switch. I'm seeing
 some no-name brand ... about $35.

  You've spent more than $15 worth of time trying to save that $15,
 and for very dubious results.  Buy the $50 known-good Netgear and move
 on to your next problem.

  For unmanaged switches, I, too, like the NetGear models with the
 all-metal housing.  Compact, durable, robust.  Keyhole notches for
 wall mounting.  Aesthetics compatible with a business environment.
 You can put stuff on top of them and it won't roll off.

  For managed switches, in a small space, I use the HP (formerly 3Com)
 Intellijack.  They mount in a wall box, replacing the passive
 wallplate, and can run off PoE.

 -- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: desktop network switches

[Ray]

So because someone made a mistake you're condemning using them?

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, February 04, 2011 1:45 PM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

Don't. Just don't.

Pull another run of cable if you have to.

Desktop switches are just wrong.

I speak from much experience here.


Just last month, we shuffled a bunch of folks around, and the facilities guy 
was moving PCs and printers, and noticed that there was a loose cable attached 
to a 5-port switch. So, not knowing what else to do with it, he plugged it into 
the 5 port switch. Which meant that both ends of the cable were in the same 
dumb, unmanaged, switch.
That's your basic layer2 loop, right there.

It killed performance for lots of people, until I tracked it down.

I've had this happen so many times with stupid 5 and 8 port switches that if I 
could rip them all out I would do so in less time than it takes to write about 
it.

But, we now have so many of them, because our wiring is so sparse, that I 
can't. Yet. It's a major line item in the IT CAPEX budget for next year.

Kurt

On Fri, Feb 4, 2011 at 11:00, John Aldrich jaldr...@blueridgecarpet.com wrote:
 One of my users just claimed an unused laser printer for his office (Acct.
 Manager) that has a network port on it as well as the usual USB. He'd 
 like to be able to network it so he can print to it from the AS/400.
 What do you guys recommend for a small (4-5 port) network switch?
 To anyone who wants to know, this is for real, looking for 
 recommendations for a RIGHT NOW purchase, not next time. :-)

 Thanks!






 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Dedupe Thoughts?

[Ray]

So you're hoping that the window to back up (tape) the backup (d2d) isn't
too long to run into the backup (d2d)?

 

My shop currently survives with a single tape on a single Ultrium 2 drive.
At some point I may have to jump to a either an Autoloader or go to Ultrium
4 or 5.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Saturday, February 05, 2011 7:12 AM
To: NT System Admin Issues
Subject: Re: Dedupe Thoughts?

 

No, I backup to disk, and then to tape (RDX, in truth) and then offsite.  So
I understand the paranoia. However, my point was, that if you're relying on
the extended window of moving disk to tape, and the disk backup doesn't
happen for some reason, your tape backup will be missing the previous
backup...



 

On Sat, Feb 5, 2011 at 8:43 AM, Ray rz...@qwest.net wrote:

It's all about your level of paranoia.  Our building, for example, has had 2
roof collapses in 5 years.  The 2nd one took out the sprinkler system, which
flooded the building.  A lot of equipment didn't survive.  

 

I can't take my disks offsite.  Tape isn't going away anytime soon. 

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Friday, February 04, 2011 1:09 PM 


To: NT System Admin Issues

Subject: Re: Dedupe Thoughts? 

 

There's a flaw in your parenthetical observation.  If the disk fails in a
d2d backup, and the tape is backing up from the backup disk, then the tape
is worthless as far as a secondary backup.


 

On Fri, Feb 4, 2011 at 2:59 PM, Paul Hutchings paul.hutchi...@mira.co.uk
wrote:

Fair point on the flexibility, it just seemed a little costly for a poor
mans solution.

My own personal opinion, stick with an aux copy on tape for that warm fuzzy
feeling when you're standing in the burning embers and need to know you've
access to a good backup (or when the disks fail or you mess up) - once the
d2d backup is done your backup window doesn't matter so you can take as long
as you like to do the aux copy to tape.

Do check out how BE does dedupe and synthetic full backups - one of the big
selling points of D2D and dedupe is this incremental forever business
where you take your initial known, good, full backup, and from that point
onwards you only ever take incrementals and let the backup software
construct fulls from your initial full, plus the incrementals.

 

-Original Message-
From: Roger Wright [mailto:rhw...@gmail.com]

Sent: 04 February 2011 19:53
To: NT System Admin Issues

Subject: Re: Dedupe Thoughts?

Yep, definitely would want to exit the tape scene as soon as possible.
 I was really looking at the Synology for the flexibility of either eSATA or
NAS connectivity.  There may be even more cost-effective solutions, but
we've had great luck so far with the one Synology NAS we purchased.



Roger Wright
___

The internet is a great way to get on the net. - Bob Dole





On Fri, Feb 4, 2011 at 2:27 PM, Paul Hutchings paul.hutchi...@mira.co.uk
wrote:
 How come you're looking at NAS rather than just shovelling a few 2tb
 drives in your backup server?

 I'm looking into doing something very similar myself (we use
 Commvault/Simpana) and the rule of thumb on disk space, assuming
 you're not paying per Tb stored, is disk is cheap, and with dedupe
 rates what they are for average data, you'd be mad not to shovel in as
 much as you can afford and leave tape as the very last resort.

 -Original Message-
 From: Roger Wright [mailto:rhw...@gmail.com]
 Sent: 04 February 2011 18:08
 To: NT System Admin Issues
 Subject: Dedupe Thoughts?

 I'm looking at some options for a poor man's deduplication system
 for backups.  A Data Domain or Exagrid solution would be preferred but
 not feasible at this time.

 We're currently backing up a little over 4 TB to LTO3 tape and have
 outgrown our backup window, library capacity, and RTO.

 I'm thinking of using BE 2010's Deduplication option for the engine
 and something like the Synology DS1511+ with 5 - 2GB drives for 8 TB
 of storage (w/RAID5 or just a hot spare).  Then I could offload to
 tape for off-site storage or script replication to another unit at a
 branch office.

 Any best practices thoughts for sizing the storage for the deduped data?
 Does it just depend on the ratio achieved and the storage and the
 number of backup sets retained?  One nice thing about the Synology
 system is it can be easily expanded to up to 15 disks.

 A Data Domain or Exagrid solution would be preferred but not feasible
 at this time.


 Roger Wright
 ___

 The internet is a great way to get on the net. - Bob Dole

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 --
 MIRA Ltd

 Watling Street, Nuneaton

RE: RE: Patch management, revisited

[Ray]

The one word I'd use is patience. 

 

We have about 15 sites (mostly prisons) across the state.  

 

I've heard about various scripts that'll help with the client health
issue.  Start deploying them. 

 

Step 2 would probably be install the master.  There seems to be endless
variations on how, and how often, you want the workstations to communicate
with the server.  

 

Then I'd start trying to deploy the secondary sites.   

 

From: Jonathan [mailto:ncm...@gmail.com] 
Sent: Saturday, February 05, 2011 7:54 AM
To: NT System Admin Issues
Subject: Re: RE: Patch management, revisited

 

Ray - you make a good point. We're covering 13 locations across the US, with
varying WAN connectivity. Also, number of sites are the result of past
acquisitions, so there has been a high level of site autonomy. We are the
first internal IT department for the org to work toward standardization.

This should be fun!

Given the multiple locations, literally from NC to CA and CT to SC, and the
history of autonomy among sites, any other thoughts/recommendations on how
to tackle this?

Jonathan - Thumb typed from my HTC Droid Incredible (and yes, it really is)
on the Verizon network.

On Feb 5, 2011 8:32 AM, Ray rz...@qwest.net wrote:
 The success of SCCM would have to depend on your environment. If you're in
 an environment with multiple locations that have had some level of
autonomy
 on hardware purchases, and imaging, and patch management, it could be a
 nightmare. It seems to rely heavily on WMI. Speed is an issue too, so if
 your WAN suck, you'll have issues. 
 
 
 
 On top of that, MS support is at best inconsistent on how this is supposed
 to work if you have multiple sites. The only way we finally got a whole
lot
 of this to finally work was thru our TAM and whatever that support team is
 called. They spent days at our site trying to get it to work. 
 
 
 
 I would hope most sites aren't as fundamentally screwed up as ours was
 however. 
 
 
 
 I agree that the product has an amazing amount of power. 
 
 
 
 
 
 From: Michael B. Smith [mailto:mich...@smithcons.com] 
 Sent: Friday, February 04, 2011 11:50 AM
 To: NT System Admin Issues
 Subject: RE: Patch management, revisited
 
 
 
 If you don't do third party patches, SCCM is _almost_ exactly like WSUS.
It
 is based on the WSUS engine as a matter of fact, and you have to install
 WSUS on the Software Update Point. J
 
 
 
 Doing the SCCM installation can be a little finicky; but once you set it
up
 - it just RUNS.
 
 
 
 The challenge with SCCM in my eyes is that it can do SO MUCH, that unless
 you break it up into pieces (which is what I do when I teach classes on
it),
 it can seem utterly overwhelming.
 
 
 
 Regards,
 
 
 
 Michael B. Smith
 
 Consultant and Exchange MVP
 
 http://TheEssentialExchange.com
 
 
 
 From: Jonathan [mailto:ncm...@gmail.com] 
 Sent: Friday, February 04, 2011 1:43 PM
 To: NT System Admin Issues
 Subject: Patch management, revisited
 
 
 
 Ok, guys  gals, I've sifted through the threads for the past year
searching
 on patch management and SCCM, and not found exactly what I'm looking
for...
 
 
 
 In my new gig, the team gets to choose what we will use to handle patches
 and updates, as there is nothing set in stone right now. Two options have
 been mentioned by the team: SCCM and Big Fix. I don't know anything about
 Big Fix, except hat they were just recently gobbled up by IBM and are now
 part of Tivoli. What I've heard about SCCM is that it is a bear to learn
and
 manage. Right now we've got between 700 and 1,000 nodes (including
servers,
 both virtual and physical), and potentially slated for continued growth.
 Some of the engineers have laptops that are NOT members of AD, and they
run
 as local Admins. That is probably NOT going to change. Also, we may or may
 not be looking at needing to handle 3rd party updates as well. I've run
 WSUS, but only for a few hundred nodes, and really only for windows OS
 updates and nothing else.
 
 
 
 Finally, we need decent reporting tools that can provide us with
compliance
 reports on where we stand with patch management.
 
 
 
 I've seen Shavlik, Kace/K-Box, WSUS, SCCM,  GFI LANGuard all mentioned
 here...
 
 
 
 1. Am I missing anything any products that I should be looking into?
 
 2. Are any of these apps not well suited for the numbers of nodes I'm
 talking about (either over or under-powered for 700-2000 nodes)?
 
 3. What's going to be the easiest learning curve/least administrative
 overhead?
 
 
 
 Thanks,
 
 -- 
 Jonathan, A+, MCSA, MCSE
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise

RE: OT: desktop network switches

[Ray]

We've had problems too. Last time was an IT guy doing something similar with 
his managed switch.


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Saturday, February 05, 2011 12:19 PM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

It's not just one mistake.

I don't know what it is about my user population, but at least a couple of 
times a year, and sometimes more often, I have to go chasing down some idiot 
(usually a software developer or hardware engineer) who has connected a little 
switch to itself, or to another little switch.

I'm really tired of it.

Kurt

On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
 So because someone made a mistake you're condemning using them?

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, February 04, 2011 1:45 PM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 Don't. Just don't.

 Pull another run of cable if you have to.

 Desktop switches are just wrong.

 I speak from much experience here.


 Just last month, we shuffled a bunch of folks around, and the facilities guy 
 was moving PCs and printers, and noticed that there was a loose cable 
 attached to a 5-port switch. So, not knowing what else to do with it, he 
 plugged it into the 5 port switch. Which meant that both ends of the cable 
 were in the same dumb, unmanaged, switch.
 That's your basic layer2 loop, right there.

 It killed performance for lots of people, until I tracked it down.

 I've had this happen so many times with stupid 5 and 8 port switches that if 
 I could rip them all out I would do so in less time than it takes to write 
 about it.

 But, we now have so many of them, because our wiring is so sparse, that I 
 can't. Yet. It's a major line item in the IT CAPEX budget for next year.

 Kurt

 On Fri, Feb 4, 2011 at 11:00, John Aldrich jaldr...@blueridgecarpet.com 
 wrote:
 One of my users just claimed an unused laser printer for his office (Acct.
 Manager) that has a network port on it as well as the usual USB. He'd 
 like to be able to network it so he can print to it from the AS/400.
 What do you guys recommend for a small (4-5 port) network switch?
 To anyone who wants to know, this is for real, looking for 
 recommendations for a RIGHT NOW purchase, not next time. :-)

 Thanks!






 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: desktop network switches

[Ray]

I think my switch guy says we have over 1000. No guarantees unless you 
configured them all yourself.

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Saturday, February 05, 2011 3:09 PM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

But, with a properly configured managed switch, spanning tree will limit the 
headache.

On Sat, Feb 5, 2011 at 11:22, Ray rz...@qwest.net wrote:
 We've had problems too. Last time was an IT guy doing something similar with 
 his managed switch.


 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, February 05, 2011 12:19 PM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 It's not just one mistake.

 I don't know what it is about my user population, but at least a couple of 
 times a year, and sometimes more often, I have to go chasing down some idiot 
 (usually a software developer or hardware engineer) who has connected a 
 little switch to itself, or to another little switch.

 I'm really tired of it.

 Kurt

 On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
 So because someone made a mistake you're condemning using them?

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, February 04, 2011 1:45 PM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 Don't. Just don't.

 Pull another run of cable if you have to.

 Desktop switches are just wrong.

 I speak from much experience here.


 Just last month, we shuffled a bunch of folks around, and the facilities guy 
 was moving PCs and printers, and noticed that there was a loose cable 
 attached to a 5-port switch. So, not knowing what else to do with it, he 
 plugged it into the 5 port switch. Which meant that both ends of the cable 
 were in the same dumb, unmanaged, switch.
 That's your basic layer2 loop, right there.

 It killed performance for lots of people, until I tracked it down.

 I've had this happen so many times with stupid 5 and 8 port switches that if 
 I could rip them all out I would do so in less time than it takes to write 
 about it.

 But, we now have so many of them, because our wiring is so sparse, that I 
 can't. Yet. It's a major line item in the IT CAPEX budget for next year.

 Kurt

 On Fri, Feb 4, 2011 at 11:00, John Aldrich jaldr...@blueridgecarpet.com 
 wrote:
 One of my users just claimed an unused laser printer for his office (Acct.
 Manager) that has a network port on it as well as the usual USB. 
 He'd like to be able to network it so he can print to it from the AS/400.
 What do you guys recommend for a small (4-5 port) network switch?
 To anyone who wants to know, this is for real, looking for 
 recommendations for a RIGHT NOW purchase, not next time. :-)

 Thanks!






 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read

RE: OT: desktop network switches

[Ray]

Thanks. No longer my concern however. 

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Saturday, February 05, 2011 4:10 PM
To: NT System Admin Issues
Subject: Re: OT: desktop network switches

RANCID is a wonderful thing in this kind of environment, if you use Cisco.

On Sat, Feb 5, 2011 at 14:44, Ray rz...@qwest.net wrote:
 I think my switch guy says we have over 1000. No guarantees unless you 
 configured them all yourself.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, February 05, 2011 3:09 PM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 But, with a properly configured managed switch, spanning tree will limit the 
 headache.

 On Sat, Feb 5, 2011 at 11:22, Ray rz...@qwest.net wrote:
 We've had problems too. Last time was an IT guy doing something similar with 
 his managed switch.


 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Saturday, February 05, 2011 12:19 PM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 It's not just one mistake.

 I don't know what it is about my user population, but at least a couple of 
 times a year, and sometimes more often, I have to go chasing down some idiot 
 (usually a software developer or hardware engineer) who has connected a 
 little switch to itself, or to another little switch.

 I'm really tired of it.

 Kurt

 On Sat, Feb 5, 2011 at 05:47, Ray rz...@qwest.net wrote:
 So because someone made a mistake you're condemning using them?

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, February 04, 2011 1:45 PM
 To: NT System Admin Issues
 Subject: Re: OT: desktop network switches

 Don't. Just don't.

 Pull another run of cable if you have to.

 Desktop switches are just wrong.

 I speak from much experience here.


 Just last month, we shuffled a bunch of folks around, and the facilities 
 guy was moving PCs and printers, and noticed that there was a loose cable 
 attached to a 5-port switch. So, not knowing what else to do with it, he 
 plugged it into the 5 port switch. Which meant that both ends of the cable 
 were in the same dumb, unmanaged, switch.
 That's your basic layer2 loop, right there.

 It killed performance for lots of people, until I tracked it down.

 I've had this happen so many times with stupid 5 and 8 port switches that 
 if I could rip them all out I would do so in less time than it takes to 
 write about it.

 But, we now have so many of them, because our wiring is so sparse, that I 
 can't. Yet. It's a major line item in the IT CAPEX budget for next year.

 Kurt

 On Fri, Feb 4, 2011 at 11:00, John Aldrich jaldr...@blueridgecarpet.com 
 wrote:
 One of my users just claimed an unused laser printer for his office (Acct.
 Manager) that has a network port on it as well as the usual USB.
 He'd like to be able to network it so he can print to it from the AS/400.
 What do you guys recommend for a small (4-5 port) network switch?
 To anyone who wants to know, this is for real, looking for 
 recommendations for a RIGHT NOW purchase, not next time. :-)

 Thanks!






 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ 
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here