RE: Exchange 5.5 admin

2001-09-26 Thread Roger Seielstad

yup, but it has to be either NT or Win2k.

Run the install from the Exchange server CD, choose custom install, and just
install the Admin component (and Books Online would be good to have, too).
Then install the same Exchange service pack that you have on your server(s)
on the machine, and you're good to go.

Roger
Iron Chef - Migration
-- 
Roger D. Seielstad - MCSE MCT 
Senior Systems Administrator 
Peregrine Systems 
Atlanta, GA 
http://www.peregrine.com 
-Original Message-
From: Neil Harvey [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 26, 2001 9:03 AM
To: NT System Admin Issues
Subject: Exchange 5.5 admin


Does anyone know if it possible to run the exchange administrator program on
a client PC to remotely administer the server.
Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/

Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/




RE: [LIST ADMIN MESSAGE] New on NTSYSADMIN?

2001-09-26 Thread Roger Seielstad

You should only need one rule:
Anything sent to [EMAIL PROTECTED] should get moved to
the folder of your choosing.

[text] added to the subject line munge up some other things, and we had them
removed over a year ago.

Alternately, if you are an Exchange user, sub a public folder to the list to
receive all the mail, and then sub yourself with the nomail option. Read it
from the PF and respond from your own account. Issue solved.

Roger
Iron Chef - Migration
-- 
Roger D. Seielstad - MCSE MCT 
Senior Systems Administrator 
Peregrine Systems 
Atlanta, GA 
http://www.peregrine.com 
-Original Message-
From: Craig Cameron [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 26, 2001 8:24 AM
To: NT System Admin Issues
Subject: RE: [LIST ADMIN MESSAGE] New on NTSYSADMIN?


Any chance we can have a [NTADMIN] type part in the subject header to ease
outlook sorting.

I currently have three rules which pick out the messages.

Craig

-Original Message-
From: Stu Sjouwerman [mailto:[EMAIL PROTECTED]]
Sent: 26 September 2001 12:28
To: NT System Admin Issues
Cc: stuhome
Subject: [LIST ADMIN MESSAGE] New on NTSYSADMIN?
Importance: High


New on NTSYSADMIN?

Here are a few Administrivia pointers.

1) Lurk for a week before you dive into threads.
2) SecureIIS nailed down our Lyris server a bit too much. Unsubs were
sometimes
impossible. We think we got that fixed now.
3) Check Andrew Baker's FAQ before you ask a question. I have added it to
the footer.
4) Filter all postings into a folder with an outlook rule. Sort by thread.
Delete whole threads
that are not interesting.
5) We have a searchable archive. You can get there via the unsub link in
the footer.

And remember these golden rules:

ON TOPIC, NO NOISE, and FRIENDLY.

Thanks.

Stu






Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mod
e=0lang=english
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/

Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/


 
This E-Mail is confidential and is intended for the addressee only. If you
are not the intended recipient, you must not /par disclose or use the
information contained in it. If you received this e-Mail in error, please
contact the sender /par immediately and delete the document. This e-Mail is
for information purposes only and is not intended to be relied upon /par or
used as a substitute for the medical advice of physicians. Specific advice
should always be sought on any individual /par matter, in particular matters
relating to the addressee's health and any symptoms that may require
diagnosis or medical /par attention. /par



Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/




RE: Anyone know of a linux VPN server that will allow Windows cli nts to connect ?

2001-09-26 Thread Roger Seielstad

Nothing specifically for Linux, although I believe they exist.

OpenBSD (openbsd.org) has the necessary functionality built in.

Alternately, let the Linux box run as a firewall, and have it port forward
the necessary stuff for IPSec to a protected Win2k VPN server.

--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Scott Wilson [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, September 26, 2001 12:14 PM
 To: NT System Admin Issues
 Subject: Anyone know of a linux VPN server that will allow Windows
 clints to connect ?
 
 
 Anyone know of a linux VPN server that will allow Windows clints to
 connect.?
 Thanks
 
 Want to unsub? Do that here:
 http://www.w2knews.com/rd/rd.cfm?id=unsub
 Need a good FAQ? Try this one first:
 http://www.ultratech-llc.com/KB/
 

Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/




RE: Ideas for firewall

2001-09-24 Thread Roger Seielstad

support

Then again, I've heard they don't have the best support.

--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Andrey Ilichov [mailto:[EMAIL PROTECTED]]
 Sent: Monday, September 24, 2001 10:24 AM
 To: NT System Admin Issues
 Subject: RE: Ideas for firewall
 
 
 Well, it`s realy easy to configure.
 But, from other side, it just Linux with Ipchance, so why pay more?
 
   -Original Message-
   From: Troy Rambo /278 Systems Specialist
 [mailto:[EMAIL PROTECTED]] 
   Sent: Monday, September 24, 2001 7:15 PM
   To: NT System Admin Issues
   Subject: RE: Ideas for firewall
   
   
   Watchguard Firebox II or III

   Very easy to configure.

   www.watchguard.com http://www.watchguard.com 
 
   -Original Message-
   From: Steve Woods [mailto:[EMAIL PROTECTED]]
   Sent: Monday, September 24, 2001 9:15 AM
   To: NT System Admin Issues
   Subject: RE: Ideas for firewall
   
   
   Try www.smoothwall.org http://www.smoothwall.org  . It
 rivals the big expensive boxes.
 
   -Original Message-
   From: Martijn Eindhoven
 [mailto:[EMAIL PROTECTED]]
   Sent: Monday, September 24, 2001 1:55 AM
   To: NT System Admin Issues
   Subject: Ideas for firewall
   
   
   Hey Guys,
   
   I'm looking for a good firewall for about 50 w2k
 servers. What do you guys think is the best setup, per server or one
 dedicated firewall.
   And what is according to you guys the best
 firewall, i'm thinkin of a stateful one. 
   
   
   
 
   Met vriendelijke groet,
   
   
   M. Eindhoven
   W2K System Administrator
   Bevelander Internet Services B.V. 
   Folkstoneweg 10 
   1118 LM SCHIPHOL Zuidoost 
   Tel : 020 40 53 900 
   Fax : 020 40 53 910 
   http://www.bevelander.nl
 http://www.bevelander.nl/ 
   
 = 
   This communication contains information which is
 confidential and 
   may also be privileged. It is for the exclusive
 use of the 
   intended recipient(s). If you are not the
 intended recipient(s), 
   please note that any distribution, copying or
 use of this 
   communication or the information in it is
 strictly prohibited. 
   If you have received this communication in
 error, please notify 
   the sender immediately and then destroy any
 copies of it. 
   
 =
   
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
   
 
   
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
   
 
   http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
   
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: SQL authentication

2001-09-14 Thread Roger Seielstad

DOn't backup up SQL server using an agent - continue to use the built in SQL
backup. Back the resulting file up using normal backup procedures. Most
backup software allow you to specify what account to use to backup what
machine.

--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Terence Choy [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, September 13, 2001 3:15 PM
 To: NT System Admin Issues
 Subject: RE: SQL authentication
 
 
 ediadmin is a member of local Administrators group and does 
 have backup
 permission on the stand-alone workgroup computer.  All BE 
 services and SQL
 Server service are using ediadmin to logon.
 
 -Original Message-
 From: Diane Beckham [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, September 13, 2001 9:34 AM
 To: NT System Admin Issues
 Subject: RE: SQL authentication
 
 
 Are you sure that ediadmin user has backup permissions on the 
 stand-alone
 server?  And have you used that user name and password in BE 
 as the user?
 Under the Services applette have to checked all the BE 
 services to make sure
 they all use the ediadmin user and password as the administrator?
 
 Diane
 
 -Original Message-
 From: Terence Choy [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, September 12, 2001 6:21 PM
 To: NT System Admin Issues
 Subject: RE: SQL authentication
 
 
 I guess do the SQL 7 internal backup to disk and then back up 
 the back-up
 files is another way.  Since I have BE SQL Agent, I would 
 like to exploit an
 alternative to back up the databases.
 The reason the standalone SQL 7 computer cannot join the 
 domain is it has an
 application, Gentran for NT Server.  This is a EDI mapping 
 software from
 Sterling Software and it uses MS SQL Server.  I have tried to join the
 computer to a domain but that cause problems to Gentran.  I 
 have talked to
 Sterling about this and they advised to run Gentran in a standalone
 environment.
 I created a user, ediadmin, in the domain with the same username and
 password in the standalone SQL 7 computer.  When I logon the 
 backup SQL 2000
 member server as ediadmin, I am able to attach to the SQL7 
 computer in the
 SQL 2000 Enterprise Manager and perform all functions to the 
 databases in
 SQL7.  However, I cannot use ediadmin to attach to MS SQL 
 Server in the
 BackupExec Selection tab inside the Job Definition tab.  
 Hence, SQL Agent in
 BE won't work.  BTW, all BE services and SQL Server service 
 are logon as
 ediadmin.  Any suggestions?
 
 -Original Message-
 From: Diane Beckham [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, September 12, 2001 5:22 PM
 To: NT System Admin Issues
 Subject: RE: SQL authentication
 
 
 Do you have the SQL Server 7 doing it's own backups 
 internally?  If you do,
 then you don't need to back up the SQL 7 databases, just 
 backup the backups.
 
 
 Can you explain in more detail your statement about not being 
 able to join
 the domain because the main application won't work.  What 
 application.  If
 your SQL server is a stand alone server can you add a user 
 with the same
 name from the domain as a user on your stand alone server and give it
 permission as backup operator?
 
 Diane
 
 -Original Message-
 From: Terence Choy [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, September 12, 2001 12:34 PM
 To: NT System Admin Issues
 Subject: SQL authentication
 
 
 Hi,
 I have a MS SQL question and I understand this is not the 
 forum for it, but
 I would really appreciate if someone will help here or point 
 me to the right
 places!  Here is my situation:
 A standalone NT4 computer loaded with SQL 7 (can't join the 
 domain because
 the main application in this computer won't work).
 A NT4 member server loaded with Veritas 8.6 and SQL 2000 for backup
 operation.
 
 I need to backup the SQL 7 databases in the standalone 
 machine by using the
 backup member server.  The problem is I cannot connect to the SQL 7
 databases from the member server.  When I tried in the SQL 
 2000 Enterprise
 Manager to create a new SQL Server group for the standalone 
 computer with
 SQL 7, it failed to connect by either using the Windows NT 
 authentication or
 the SQL Server authentication.  What do I miss?  TIA.
 
 Terence Choy
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Question for Stu:

2001-09-14 Thread Roger Seielstad
Title: Message



I'd 
worry about all those candles in Alaska melting the ice.

Oh, 
wait - there aren't that many people in Alaska... ;)

Roger
-- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com 

  -Original Message-From: Sean Martin 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, September 14, 
  2001 12:41 PMTo: NT System Admin IssuesSubject: RE: 
  Question for Stu:
  If we all light 
  candles at 7:00 pm in ourown parts of the country, by 10:00 pm 
  EST,
  the 
  whole country will be lit up with the light of 
  hope.
  
  
  So Alaska and 
  Hawaii don't count?
  
  Regards,
  
  Sean Martin, 
  MCSENetwork AdministratorRibelin Lowell  
  CompanyInsurance Brokers, Inc.3111 C Street, Suite 300Anchorage, 
  Alaska 99503Ph: (907) 561-1250Fax: (907) 561-4315Cell: (907) 
  229-0885Email: [EMAIL PROTECTED]
  
-Original Message-From: Don Ely 
[mailto:[EMAIL PROTECTED]]Sent: Friday, September 14, 2001 
8:03 AMTo: NT System Admin IssuesSubject: RE: Question 
for Stu:
Here ya go 
Jeff!

Subject: WE STAND UNITED   Friday Night at 7:00 p.m. (starting EST), step out 
your door, stop your  car, or step out of your 
establishment and light a candle. We will show the  world that Americans are strong and 
united together against terrorism.  Please pass 
this to everyone on your e-mail list. We need to reach everyone  across the United States 
quickly. If we all light candles at 7:00 pm in our  own parts of the country, by 10:00 
pm EST, the whole country will be lit up 
 with the light of hope. The message: WE STAND UNITED - 
WE WILL NOT TOLERATE  
TERRORISM. We need press to cover this-- we need the world to see. 
   

  
  -Original Message-From: Rogers, Jeff 
  L (OM) [mailto:[EMAIL PROTECTED]] Sent: Friday, 
  September 14, 2001 8:57 AMTo: NT System Admin 
  IssuesSubject: RE: Question for Stu:
  Okay, I've heard there is to be a candle lighting tonight, 
  nationwide. I've heard conflicting times: 1900 (7:00 p.m. for those 
  who need to type a lot G) and 2300 all local times. I've 
  also heard Eastern Standard Time. Could anyone on the list help me 
  with this?
  
-Original Message-From: Stu Sjouwerman 
[mailto:[EMAIL PROTECTED]]Sent: Friday, September 14, 
2001 10:57To: NT System Admin IssuesSubject: RE: 
Question for Stu:
ok!

  -Original Message-From: Rogers, Jeff L 
  (OM) [mailto:[EMAIL PROTECTED]]Sent: Friday, 
  September 14, 2001 11:53 AMTo: NT System Admin 
  IssuesSubject: Question for Stu:
  Stu, I have a bit of a dilemma. I need some 
  information verified regarding a national event tonight. Please, 
  may I ask it to the NG, to see if anyone here could verify it, or 
  confirm times? Thank you!
  ~ Jeff Rogers, [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
  Operation  Maintenance Information Technology Services - Room 20 
  1501 S. Oak Champaign, IL 
  61820 Desk: 
  217-244-8013 Pager: 217-265-3682 
   
   Work like you don't need the 
  money.  Love like you've 
  never been hurt.  Dance like 
  nobody is watching.  
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  DO NOT read, copy or disseminate this communication 
  unless you are the intended addressee. This e-mail communication contains 
  confidential and/or privileged information intended only for the addressee. If 
  you have received this communication in error, please call us immediately at 
  (907) 561-1250 and ask to speak to the sender of the communication. Also, 
  please e-mail the sender and notify the sender immediately that you have 
  received the communication in error.
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





New Worm on the loose

2001-08-27 Thread Roger Seielstad

Sorry about the cross posting.

We don't have a lot of specifics on it, but there appears to be a new worm
on the loose. The payload is a typical Melissa-style worm, where its only
action is to send mail to all members of the GAL, with the following
message:
Hi, how are you ? I am fine here. Please read the page
http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack
you. Forword this mail to help all your friends too.

Its plain text, and carries no executables with it, but I haven't visited
the website yet. More info to follow, but there is zero information on the
web about it at this point.

Roger
--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Port for w32time

2001-08-21 Thread Roger Seielstad

IIRC, its 123/TCP, but I could be wrong.

--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Stefan Jafs [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, August 21, 2001 9:39 AM
 To: NT System Admin Issues
 Subject: Port for w32time
 
 
 
 I'm getting errors that w32time could not get to the NTP Server. Is
 there a port that needs to be open on my router?
 
 I'm using 2k Server.
 
 Stefan Jafs
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: OWA/SSL/ACE/WLBS

2001-08-21 Thread Roger Seielstad

In my copious spare time I need to set the same thing up.

Since you don't specify, I'm guessing that you're using a second network for
the load balance stuff. Make sure that there isn't a default gateway set for
the nics on that network. There should only be one default gateway on any
machine. I'll bet dollars to donuts this is the issue.

You might want to go as far as making the back network a /30 network (2
hosts). That might also help.

One last ditch effort (and I strongly suggest you don't put this setup in
production) is to create a static route for the ACE server on each server,
to the appropriate network interface. In general, host routes take
precedence over network routes, so it will always use that route.

--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Bibel, Laura Y. [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, August 21, 2001 5:32 PM
 To: NT System Admin Issues
 Subject: RE: OWA/SSL/ACE/WLBS
 
 
 I should have left out the SSL acronym as it's not set up yet. 
 
 A co-worker has a case open with RSA, but we haven't gotten a 
 resolution
 yet. Have you done it? We know it's an issue with multiple 
 NICs, we can't
 get it set right to only talk out of a particular NIC. 
 
 
 Laura Bibel
 Allegheny Energy: Information Services
 Voice (724) 830-5966 Fax (724) 853-3600
 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 
 
 
 -Original Message-
 From: David N. Precht [mailto:[EMAIL PROTECTED]]
 Sent: Monday, August 20, 2001 6:51 PM
 To: NT System Admin Issues
 Subject: RE: OWA/SSL/ACE/WLBS
 
 
 Have you tried to work with RSA's tech support ?
 https://knowledge.rsasecurity.com/formslogin.asp
 What form of SSL ?
 
 -Original Message-
 From: Bibel, Laura Y. [mailto:[EMAIL PROTECTED]]
 Sent: Monday, August 20, 2001 18:40
 To: NT System Admin Issues
 Subject: OWA/SSL/ACE/WLBS
 
 
 Has anyone successfully set up Outlook Web Access in a W2K 
 Windows Load
 Balancing environment and used SSL for encryption and ACE SecurID for
 additional authentication? We're having trouble with the ACE 
 agent talking
 over the correct IP address.
 
 
 Laura Bibel
 Allegheny Energy: Information Services
 Voice (724) 830-5966 Fax (724) 853-3600
 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 _
 
 Do You Yahoo!?
 
 Get your free @yahoo.com address at http://mail.yahoo.com
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Web Hosting

2001-08-20 Thread Roger Seielstad

Nope.. I try to limit hosting activities to people like
http://www.infovue.net

Roger
--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Erik Brown [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 3:04 PM
 To: NT System Admin Issues
 Subject: Web Hosting
 
 
 Has anyone had any dealings with or know anything about the 
 hosting company
 Tansinc Network?
 
 Thanks,
 Erik
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: End of My Rope with WINS

2001-08-20 Thread Roger Seielstad

TO be more precise - it will work with clients alternately registering, but
every additional registration point makes it exponentially uglier.

--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Jay Kulsh [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 3:47 PM
 To: NT System Admin Issues
 Subject: Re: End of My Rope with WINS
 
 
 You wrote -
 
 All clients and other domain controllers are set up using 
 their local wins
 server as primary and the remote wins server as secondary. Is 
 this OK?
 
 According to Roger S and many others, it is not Ok. You 
 should have same
 WINS server as primary for all subnets. Secondary server can be local
 servers. Primary server would then only push, reducing the 
 chance of any
 corruption. (This way WINS configuration approximates DNS 
 configuration.)
 
 Jay
 ___
 Jay Kulsh
 
 
 - Original Message -
 From: Scott Erwin [EMAIL PROTECTED]
 To: NT System Admin Issues [EMAIL PROTECTED]
 Sent: Friday, August 17, 2001 11:39 AM
 Subject: End of My Rope with WINS
 
 
 
  NT4 Network. I have two buildings, each on their own 
 network connected by
  fiber. Pinging with ip address and netbios name between 
 networks is no
  problem and searching for computers using netbios names 
 works too. There
 is
  a WINS server on each network configured as push and pull 
 partners of each
  other. Each WINS server is its own Primary and Secondary. 
 Browsing with
  Network Neighborhood is intermittent. Sometimes Network A 
 sees Network B,
  sometimes it can't (and vice versa). I've never had 
 simultaneous browsing.
 I
  have never gotten a WINS error in the event viewer. I do 
 get successful
  push/pull entries.
 
  All clients and other domain controllers are set up using 
 their local wins
  server as primary and the remote wins server as secondary. 
 Is this OK?
 
  All the required entries seem to be there [1C], [1Eh], [OOh], etc...
 
  I don't know what else to check for, and am close to deleting both
 databases
  and starting over.
 
 
  Any advice?
  Scott
 
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Guidelines for W2K Pro PageFile Size

2001-08-20 Thread Roger Seielstad

I use an approximation of twice RAM, but usually stop once it hits about
750MB (no good reason, I just do).

I always set it to be a static size, since you're inducing overhead when it
expands at the same time the system is already under load.

Roger
-- 
Roger D. Seielstad - MCSE MCT 
Senior Systems Administrator 
Peregrine Systems 
Atlanta, GA 
http://www.peregrine.com 
-Original Message-
From: Jim Underwood [mailto:[EMAIL PROTECTED]]
Sent: Saturday, August 18, 2001 3:57 PM
To: NT System Admin Issues
Subject: Guidelines for W2K Pro PageFile Size


I'm looking for guidelines/recommendations for setting the pagefile size on
a W2K Pro SP2 machine.

My guideline for NT used to be to set both MIN and MAX = (2 * PhysicalRAM) +
16

I just bought 512MB SDRAM (only $80!!! for 2 Kingston 256M ECC sticks) , so
this works out to be quite a good size pagefile:  1040

Interestingly enough, the W2K default setting is 768 - 1536.

So, for W2K is it still best to set MIN and MAX to the same value?
Is there a formula that's best to use?
Or is it best to let W2K set it's own values?

I know about setting the location of the pagefile:
-- Only one PF per physical disk
-- Create separate PFs on separate physical disks
-- Best on non-RAID or RAID 1
-- Avoid putting on RAID 5
Best Regards, 
JMU 


Jim Underwood
Apollo Information Systems, Inc.
Houston, TX 77058 
EMail:  [EMAIL PROTECTED]


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: audit

2001-08-17 Thread Roger Seielstad

And if you listen to silly advice from a public forum, foo on you.

Certain institutions (including financialinstitutions) usually subject
themselves to audits to earn certain certifications, such as SAS70. These
certifications ensure the other companies they deal with that they meet a
certain minimum set of criteria for infosec practices, physical access
control, etc. Its a fairly detailed audit, and I could easily see why a
credit union would want to pursue something like it.

One of our divisions runs a SAS70 certified network, because of the business
they are in. There were a LOT of things that came out of it that were very
much needed improvements. I would say less than 10% fell into the fluff
category.

Roger
--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Jeff Herr [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 2:04 PM
 To: NT System Admin Issues
 Subject: RE: audit
 
 
 auditors are usually untrained in all aspects of network issues.
 they usually come in and try to raise suspicion in order to 
 validate their
 VALUE ADDED.
 
 if your management buys it, too bad for you.
 
 if your management questions it, good for them, give them 
 good solid answers
 to alleviate their fears.
 
 make them all happy and re-evaluate your security 
 environ..reduce the
 allowed logon windowsmaybe bump all off from 11pm to 5amas an
 added security measure.
 
 
 your management has auditors in there to do a job.like it or not.
 go along with themshow your boss your bigger than they are.
 
 
 
 -Original Message-
 From: Shirley Laliberte [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, August 14, 2001 7:04 AM
 To: NT System Admin Issues
 Subject: audit
 
 
 Our auditors just wrote us up.  
 Here's their statement The credit Union is not utilizing time/day
 restrictions in Windows.  These setting restrict users from 
 gaining network
 access during non-business hours. If not set appropriately, 
 these accounts
 can be exploited to gain unauthorized access to the network.
 
 We have not dial up connections to the network.  The only 
 thing we have
 setup is to allow a connection to the Exchange server for 
 internet email.
 We have eight digit passwords and an account is locked out 
 after 3 invalid
 attempts.  
 
 I don't believe having logon hour restrictions will improve 
 security but I
 would like other opinions.
 
 Opinions???
 
 Shirley Laliberte
 Quincy Municipal Credit Union
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: NT TIME SYNCHRONIZATION with Unix Boxes

2001-08-15 Thread Roger Seielstad
Title: RE: NT TIME SYNCHRONIZATION with Unix Boxes



Look 
at the Unix utility xntpd which does the same thing as 
Tardis

-- Roger D. Seielstad - MCSE MCT Senior Network Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com 

  -Original Message-From: Gan Kim Teng 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, August 14, 
  2001 11:32 PMTo: NT System Admin IssuesSubject: RE: NT 
  TIME SYNCHRONIZATION with Unix Boxes
  G' Day 
  Any input is much appreciate. 
  Yes it is the cheap solution for NT 4.0. I did purchase the 
  licenses for Tardis 2000 NT V1.3.(US$6 each) We have 
  32 NT 4.0 Server  divided into 5 subnets(asp project) with Firewall in 
  placed. Firewall rule must allow NPT port 123 to go through. I able to 
  synchronise all NT Servers without any problem. Please select a server which 
  is most accurate to act as Main Time server. Servers timing accuracy depend on 
  their crystals.
  I do have a problem for all the NT 4.0 servers to synchronise 
  with those Unix boxes-IBM Aix  Sun Solaris. 
  cheers gan 
  -Original Message- From: Dean 
  Cunningham [mailto:[EMAIL PROTECTED]] 
  Sent: Wednesday, August 15, 2001 4:52 AM To: NT System Admin Issues Subject: RE: NT TIME 
  SYNCHRONIZATION 
  Yes and it is free, used it for years with no problem. 
  
  -Original Message- From: 
  Adrian Cooper [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 15 August 2001 4:18 a.m. To: 
  NT System Admin Issues Subject: Re: NT TIME 
  SYNCHRONIZATION 
  - Original Message - From: 
  "Murray Freeman" [EMAIL PROTECTED] Sent: 
  Tuesday, August 14, 2001 5:07 PM 
  Tardis: 
  http://www.kaska.demon.co.uk/ 
  
  Adrian Cooper. 
   What software do you recommend for synchronizing your 
  servers to the correct  
  time? Our login scripts to our workstations syncs to the servers, and 
  I've  noticed our servers are losing time faster 
  than I thought.   
  Murray   http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
   
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
  *** 
  This e-mail is not an official statement 
  of the Waikato Regional Council 
  unless otherwise stated. Visit our website http://www.ew.govt.nz 
  *** 
  
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: chronic problems

2001-08-15 Thread Roger Seielstad

A few things.

First, double check the chair and desk setups, to make sure you've got good
support and are sitting correctly. I would bet that your monitor isn't in
the right place. Most of the suggestions for combating carpal tunnel apply
here.

Second, switch to the natural style keyboards (I'm partial to the
Microsoft Natural Pro, but the Natural Elite isn't bad), and you might want
to consider a trackball instead of a mouse (I love the Logitech Trackman
Wheel that I have). I've been using both for about 2 months and have less
arm/wrist problems, which in turn affects your shoulders and neck.

Third, review your chiropractor - if he/she did not take any X-Rays, or if
he/she made you stand on a pair of scales (to see if you have uneven weight
distribution), find a different chiropractor. I would suggest looking for
one who has extensive background in sports medicine.

Fourth, change your work habits slightly. Take short breaks every 30-45
minutes, even to just get up, walk around for 1 minute, and sit down again.

Fifth, look at your bed - change the number of pillows (probably need less)
or look at using an orthopedic pillow. The problem might not be work, but
the different posture at work might bring out the symptoms that aren't
apparent when you're at home drinking beer and eating Cheetos on the couch.

--
Roger D. Seielstad - MCSE MCT
Senior Network Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


 -Original Message-
 From: Paul Green [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, August 15, 2001 11:10 AM
 To: NT System Admin Issues
 Subject: OT: chronic problems
 
 
 Anyone know how to shake the chronic neck discomfort?  It's my job to
 sit here, write code and administer this network, yet the 
 neck/shoulder
 discomfort has been with me for 10 months, and seems to get better on
 the weekends (when I'm not working), then Monday afternoon and Tuesday
 it starts back up again.  I've changed everything from desks 
 to chairs.
 I even stretch all the time.  Doesn't help.  Been to chiropractic for
 the last 4 months, message therapy, physical therapy for 3 months,
 acupuncture for crying out loud, and nothing helps.  Yes,  I 
 get plenty
 of exercise, I'm on a summer league baseball team..  Even had 
 an MRI and
 they told me everything was fine.  Only way I can get it to 
 feel better,
 is if I'm not working.  But I have to make a living somehow 
 eh?  College
 students need all the bee.. money they can get =)   21 
 years old is
 too young for this crap.  Am I just allergic to work?
 
 Anyone?  Please?  For the love of god?  .. Figured I would ask here
 since back/neck/shoulder problems are no stranger to people in the IT
 industry :)
 
 
 Paul 
 
   _  
 
 Outgoing mail is certified Virus Free.
 Checked by AVG anti-virus system (www.grisoft.com). 
 Version: 6.0.268 / Virus Database: 140 - Release Date: 8/7/2001
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Unknown IP address Help

2001-08-13 Thread Roger Seielstad

THe 169.254.0.0/16 address range was set aside for something called APIPA
(or something like that). In a nutshell, its local DHCP in case the machine
can't find a network. You've got a machine that doesn't think its on the
network.

Roger
-- 
Roger D. Seielstad - MCSE MCT 
Senior Network Administrator 
Peregrine Systems 
Atlanta, GA 
http://www.peregrine.com 
-Original Message-
From: Roger VanOrman [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 1:53 PM
To: NT System Admin Issues
Subject: Unknown IP address Help


Has anyone seen or no of a reason our servers would all be trying to access
169.254.101.152 port 138?  We tried to do a lookup on it but get no results.
Anyone seen this or know of a way we can trace it back to the process?
Thanks 

Roger VanOrman
Network Assistant
Darr Equipment Co.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm