Re: Powershell Eventlog Reporting

[Rubens Almeida]

Joseph, here's a very old and crude code I wrote when I was starting
with PowerShell and needed to find very specific events:
# Start of script
$FinalArray = @()
[string]$ServerName = $Args[0]
$BackInTime = 
[System.Management.ManagementDateTimeConverter]::ToDMTFDateTime((Get-Date).AddHours(-48))
$EventFilter = "Logfile='Application' AND EventCode='1221' AND
TimeWritten>='$BackInTime'"
Write-host (Get-Date –f "-MMM-dd HH:mm:ss") "- Checking events
1221 (DB WhiteSpace) on" $ServerName.ToUpper() "during the last 48
hours..."
$All1221 = gwmi Win32_NTLogEvent -ComputerName $ServerName -Filter $EventFilter
If ($All1221.Count -gt 0) {
ForEach ($Event in $All1221) {
$EventItem = New-Object System.Object
$EventItem | Add-Member -type NoteProperty -name "Time_Written"
-value ([WMI]'').ConvertToDateTime($Event.TimeWritten)
$EventItem | Add-Member -type NoteProperty -name "SG_MBS" -value
$Event.InsertionStrings[1]
$EventItem | Add-Member -type NoteProperty -name "WhiteSpace_MB"
-value ("{0:N0}" -f ([int32] $Event.InsertionStrings[0]))
$FinalArray += $EventItem
}
$FinalArray | sort SG_MBS | ft -auto
Write-host "Total events found in the last 48 hours:" $FinalArray.Count
}
Else { write-host "No 1221 events found in the last 48 hours!"}
# End of script


Hope that helps you.

Regards,

Rubens



On Thu, May 24, 2012 at 2:36 PM, Michael B. Smith  wrote:
> Oh. No. Not from there.
>
> In the raw event log entry (which you can get from WMI), you'll see 
> InsertionStrings, ReplacementStrings, and the Message. You can SOMETIMES get 
> what you want form ReplacementStrings. But more often than not you will still 
> be looking at painful regex's or just flat out string processing (which is 
> what I normally do).
>
> -Original Message-
> From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
> Sent: Thursday, May 24, 2012 12:32 PM
> To: NT System Admin Issues
> Subject: RE: Powershell Eventlog Reporting
>
> Sorry Michael,
> The Message is a string, which makes for large capturing regex's, total 
> pain...
> I had hoped the Member|Account name was accessible from with the Message 
> property...
>
> An example output:
>
> Get-WinEvent Security |?{ $_.Id -eq 4729 } |fl
>
> TimeCreated  : 5/24/2012 9:40:16 AM
> ProviderName : Microsoft-Windows-Security-Auditing
> Id           : 4729
> Message      : A member was removed from a security-enabled global group.
>
>               Subject:
>                   Security ID:        
> S-1-5-21-2887164728-1639811974-4180998483-500
>                   Account Name:        Administrator
>                   Account Domain:        FOO
>                   Logon ID:        0x332ab
>
>               Member:
>                   Security ID:        
> S-1-5-21-2887164728-1639811974-4180998483-1109
>                   Account Name:        CN=user,OU=1,OU=a,DC=foo,DC=local
>
>               Group:
>                   Security ID:        
> S-1-5-21-2887164728-1639811974-4180998483-5135
>                   Group Name:        Grp_Test
>                   Group Domain:        FOO
>
>               Additional Information:
>                   Privileges:        -
> 
> From: Michael B. Smith [mich...@smithcons.com]
> Sent: Thursday, May 24, 2012 10:10 AM
> To: NT System Admin Issues
> Subject: RE: Powershell Eventlog Reporting
>
> I don't understand what you are asking?
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
>   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Cron for Windows 2008

[Rubens Almeida]

Sorry for the late response, but here's a quick and dirt piece of code
I call psget.ps1

#stinger is used here as an example only
$yourURL = 
"http://downloadcenter.mcafee.com/products/mcafee-avert/stinger/stinger.exe";
$yourFile = "c:\temp\stinger.exe"
$webclient = New-Object Net.WebClient
$webclient.DownloadFile($yourURL,$yourFile)
echo "Your download is now complete!"

Hope that helps!

Rubens

On Thu, Feb 2, 2012 at 12:58 AM, Harry Singh  wrote:
> I'd for one be very interested in knowing what is the PS equivalent to wget.
>
> On Wednesday, February 1, 2012, Richard Stovall  wrote:
>> I used to run wget from a powershell script using a scheduled task.  (Then
>> I figured out how to do the same thing with just powershell and got rid of
>> wget.)
>>
>> On Wed, Feb 1, 2012 at 7:18 PM, Rod Trent  wrote:
>>
>> Need to run a wget command.
>>
>>
>>
>>
>>
>> Rod Trent
>>
>>
>> 
>
>>
>>
>>
>> From: Michael B. Smith [mailto:mich...@smithcons.com]
>> Sent: Wednesday, February 01, 2012 6:01 PM
>>
>> To: NT System Admin Issues
>> Subject: RE: Cron for Windows 2008
>>
>>
>>
>> I gotta ask – what’s wrong with Task Scheduler? It was basically
>> re-written for LH and has lots of nice features and functionality now…
>>
>>
>>
>> Regards,
>>
>>
>>
>> Michael B. Smith
>>
>> Consultant and Exchange MVP
>>
>> http://TheEssentialExchange.com
>>
>>
>>
>> From: Rod Trent [mailto:rodtr...@myitforum.com]
>> Sent: Wednesday, February 01, 2012 5:53 PM
>> To: NT System Admin Issues
>> Subject: Cron for Windows 2008
>>
>>
>>
>> Anyone running Cron jobs on Windows 2008?
>>
>>
>>
>> I need a good, stable Cron app.  Hopefully something that can be run as a
>> service, but not required.
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>> ---
>> To manage subscriptions click here:
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Size of this NT admin list

[Rubens Almeida]

Some times it's 43 :)
On Jan 18, 2012 2:34 PM, "David Lum"  wrote:

> Anyone know how many people are subscribed to this list?
>
> *David Lum*
> Systems Engineer // NWEATM
> Office 503.548.5229 //* *Cell (voice/text) 503.267.9764
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: PowerShell, search entire forest?

[Rubens Almeida]

Hi Chris,

I got a lot of clients running Posh 1.0 and Quest CMDlets and every time I
need to search a forest, this is how I do it:

get-qaduser  -IAP -SearchScope "Subtree" -SearchRoot
"DC=domain,DC=com"  -SizeLimit 0 -UseGlobalCatalog

I always point the -SearchRoot to the forest root and it works for me. Hope
that helps.

Regards,


On Mon, Sep 26, 2011 at 10:26 AM, Christopher Bodnar <
christopher_bod...@glic.com> wrote:

> I'm searching for a number of groups, and they can be located in any of the
> domains in our forest (root and 5 child domains). Is there a switch to have
> it search the entire forest? I know I can write something that will cycle
> through each domain until it finds it, but thought there would be something
> native to do this. I'm using the Quest CMDLETS. I've tried different
> combinations of -searchRoot and -Service with no luck so far.
>
>
>
> Thanks,
>
> Chris Bodnar, MCSE, MCITP
> Technical Support III
> Distributed Systems Service Delivery - Intel Services
> Guardian Life Insurance Company of America
> Email: christopher_bod...@glic.com
> Phone: 610-807-6459
> Fax: 610-807-6003 - This message,
> and any attachments to it, may contain information that is privileged,
> confidential, and exempt from disclosure under applicable law. If the reader
> of this message is not the intended recipient, you are notified that any
> use, dissemination, distribution, copying, or communication of this message
> is strictly prohibited. If you have received this message in error, please
> notify the sender immediately by return e-mail and delete the message and
> any attachments. Thank you.
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: IIS 6 SMTP virtual server relay restrictions

[Rubens Almeida]

Maybe this can help:
http://support.microsoft.com/kb/935635

Regards,

Rubens

On Thu, Aug 25, 2011 at 7:45 PM, Christopher Bodnar <
christopher_bod...@glic.com> wrote:

> Anyone still out there?
>
> I've got 4 boxes that I need to add about 40 IP addresses to the Relay
> Restrictions list. I can't find any syntax to do this with ADSUTIL.VBS
>
> This is not Exchange just IIS 6 with an SMTP virtual server. So it's my
> understanding that you can't use IpSec.vbs
>
> Really don't want to do this manually through the GUI.
>
> Any help appreciated.
>
> thanks,
>
>
> Chris Bodnar, MCSE, MCITP
> Technical Support III
> Distributed Systems Service Delivery - Intel Services
> Guardian Life Insurance Company of America
> Email: christopher_bod...@glic.com
> Phone: 610-807-6459
> Fax: 610-807-6003 - This message,
> and any attachments to it, may contain information that is privileged,
> confidential, and exempt from disclosure under applicable law. If the reader
> of this message is not the intended recipient, you are notified that any
> use, dissemination, distribution, copying, or communication of this message
> is strictly prohibited. If you have received this message in error, please
> notify the sender immediately by return e-mail and delete the message and
> any attachments. Thank you.
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Some ideas to add to your Secure Awareness training material

[Rubens Almeida]

I'd like the IPv6 material please :)

On Wed, Aug 17, 2011 at 1:57 PM, Ziots, Edward  wrote:

>  Courtesy of SANS. 
>
> ** **
>
> http://www.securingthehuman.org/resources/newsletters/ouch
>
> ** **
>
> Also if anyone needs some nice cheat sheets on IPV6, Incident Response,
> Windump, TCpdump, etc etc see me offline, I got a ton of them from my last
> sans training to share with everyone. 
>
> ** **
>
> Z
>
> ** **
>
> Edward E. Ziots
>
> CISSP, Network +, Security +
>
> Security Engineer
>
> Lifespan Organization
>
> Email:ezi...@lifespan.org
>
> Cell:401-639-3505
>
> [image: CISSP_logo]
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

Re: Do you have a IT blog?

[Rubens Almeida]

Sorry... here it's:

http://rcalmeida.net

On Mon, Aug 1, 2011 at 3:01 PM, Joseph L. Casale
 wrote:
> Link? :)
>
> -Original Message-
> From: Rubens Almeida [mailto:rubensalme...@gmail.com]
> Sent: Monday, August 01, 2011 11:29 AM
> To: NT System Admin Issues
> Subject: Re: Do you have a IT blog?
>
> I do. In Portuguese tho. I mostly post about powershell snippets,
> useful Virtualization stuff, and some cases I face on my %dayjob%.
> Like Joseph, I'm preparing a wiki session to cover some very specific
> matters that my students bring to class and the solution on a
> step-by-step model.
>
> On Mon, Aug 1, 2011 at 2:20 PM, Joseph L. Casale
>  wrote:
>> While I don't publically blog, I have a private wiki I use for all my 
>> documentation etc.
>> Every time I do something less than trivial or where a lookup on the net 
>> wouldn't be
>> faster than logging in, I document it. I use Dokuwiki which keeps txt files 
>> as a backend
>> and has a great code interpreter and slews of plugins.
>>
>> -Original Message-
>> From: Jon D [mailto:rekcahp...@gmail.com]
>> Sent: Monday, August 01, 2011 11:14 AM
>> To: NT System Admin Issues
>> Subject: Do you have a IT blog?
>>
>> Just curious if anyone here has an IT related blog?
>> I was thinking about starting one. Looking for inspiration.
>>
>>
>>
>>
>> .
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>> ---
>> To manage subscriptions click here: 
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>> ---
>> To manage subscriptions click here: 
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>>
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Do you have a IT blog?

[Rubens Almeida]

I do. In Portuguese tho. I mostly post about powershell snippets,
useful Virtualization stuff, and some cases I face on my %dayjob%.
Like Joseph, I'm preparing a wiki session to cover some very specific
matters that my students bring to class and the solution on a
step-by-step model.

On Mon, Aug 1, 2011 at 2:20 PM, Joseph L. Casale
 wrote:
> While I don't publically blog, I have a private wiki I use for all my 
> documentation etc.
> Every time I do something less than trivial or where a lookup on the net 
> wouldn't be
> faster than logging in, I document it. I use Dokuwiki which keeps txt files 
> as a backend
> and has a great code interpreter and slews of plugins.
>
> -Original Message-
> From: Jon D [mailto:rekcahp...@gmail.com]
> Sent: Monday, August 01, 2011 11:14 AM
> To: NT System Admin Issues
> Subject: Do you have a IT blog?
>
> Just curious if anyone here has an IT related blog?
> I was thinking about starting one. Looking for inspiration.
>
>
>
>
> .
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Free tool for querying remote Windows Event Logs

[Rubens Almeida]

LogParser comes to mind when I have to deal with remote event logs...

On Wed, Jul 27, 2011 at 3:07 PM, Steve Kradel  wrote:
> Hi list,
>
> I'm pleased to have something new to share that I think a lot of you
> will find useful; having been frustrated by the slow speed of
> EventCombMT and the ponderous behavior of the Event Log MMC snap-in
> when trying to do everyday things like diagnose account lockouts and
> AD object changes, I knew there had to be a better way...
>
> If you're on a Server 2008+ [*] environment and don't mind breaking
> out a command shell window, here is that better way:
> http://zetetic.net/products/events
>
> As a sample use case, the command "ZeShell -e
> delete,after=20-july-2011" will scan all of your domain's read-write
> domain controllers, in parallel, for AD object deletions since July
> 20.  Or you can give it a list of event IDs in the familiar
> "1,2,3,5-10" format.  Just type "ZeShell -?" for details.  You'll need
> to be in the "Event Log Readers" group (or have Admin or DA access)
> for each machine you want to query.
>
> Please try it out, kick the tires, let me know what you think!  I
> promise you will find this to be *much* faster than the built-in log
> viewer.  We're absolutely open to ideas and suggestions too.
>
> Thanks,
> Steve
>
> [*] This tool is also able to query the Event Log on 2003 / XP hosts,
> but it will not do so with the same speed and efficiency as querying
> Server 2008, Vista, Win7, or newer, due to limitations of the older
> eventing service.
>
> --
> skra...@zetetic.net
> Philadelphia, PA
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Print screen utility

[Rubens Almeida]

http://www.faststone.org/FSCaptureDetail.htm

On Tue, Jun 21, 2011 at 9:35 AM, John Aldrich
 wrote:
> Do any of you have a favorite "print screen" utility to allow you to dump
> the contents of your screen to the printer? We have an intranet web page
> that updates frequently and it doesn't print well in Chrome. I don't know
> if it's Chrome or the web page or a combination thereof (I suspect it's
> more a combination, as it prints pretty well in IE.)
>
> Anyway, management likes to print screenshots of the website, and I need to
> find something to help them. Looking on the Chrome web store I see a couple
> different apps and looking on download.com I see a couple apps as well.
>
> Just wondering if you guys have a "favorite" app that you use for this sort
> thing. Bonus points if it is a Google Chrome extension/app. :D
> --
> Thanks,
> John Aldrich
> Blueridge Industries
> IT Manager
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: file copying

[Rubens Almeida]

If you prefer something more GUI oriented rather than robocopy take a
look at RichCopy.

On Fri, Jun 17, 2011 at 9:25 AM, Ziots, Edward  wrote:
> I usually use the Robocopy 2010 version via the command-line, I found
> the GUI to be a bit cludgy.
>
> Z
>
> Edward E. Ziots
> CISSP, Network +, Security +
> Security Engineer
> Lifespan Organization
> Email:ezi...@lifespan.org
> Cell:401-639-3505
>
>
> -Original Message-
> From: Ben Scott [mailto:mailvor...@gmail.com]
> Sent: Friday, June 17, 2011 8:14 AM
> To: NT System Admin Issues
> Subject: Re: file copying
>
> On Thu, Jun 16, 2011 at 9:31 PM, Level 5 Lists 
> wrote:
>> I have a client that we need to migrate about 2tb of data. I recently
> used
>> xcopy gui but it didn't seem to bring a lot of permissions over and I
> had to
>> go back through and redo it.
>
>  ROBOCOPY.
>
>  Use the /COPYALL switch to include DACLs (permissions), along with
> everything else file-related (SACLs (auditing) might be of interest).
>
>  My usual command line for something like this is:
>
>        ROBOCOPY /E /COPYALL /DCOPY:T /NFL /NDL /R:0 /B
>
>  /E = Copy subdirs, including empty ones.
>
>  /DCOPY:T = For directories, copy timestamps.  Otherwise all the
> directories end up showing a last modified of today.
>
>  /NFL /NDL = I suppress file and directory lists because I just want
> to know about problems.  I already know it's going to be copying
> files.  Silence is golden.  But if something goes *wrong*, I want that
> to stick out, and not immediately scroll off the screen.
>
>  /R:0 = In most cases, I don't find retries to be useful, so I
> disable them.  Usually if a file can't be copied trying again in 30
> seconds won't help, and the delay slows everything down considerably.
>
>  /B = Request "backup semantics".  That preserves the "last accessed"
> timestamps on the originals.
>
> -- Ben
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: File Copier with GUI?

[Rubens Almeida]

Has anyone tried RichCopy? They say it's like a graphical interface of
robocopy...

http://technet.microsoft.com/en-us/magazine/2009.04.utilityspotlight.aspx

On Mon, Feb 21, 2011 at 6:27 PM, Andrew S. Baker  wrote:
> For me, these aren't one-off problems... They happen often enough, with only
> minor detail differences.
> I have a script (acopy.bat) that I use to copy files from one location to
> another.  You could call it as follows:
> for %v in (dir1 dir2 dir3 dir4) do acopy
> "\\source\share\%~v" "\\destination\share\%~v"
>
> http://KB.UltraTech-llc.com/Scripts/?File=aCopy.BAT
>
> It is based on XCOPY
> ...OR...
> You could use XCOPY/ROBOCOPY to copy everything and exclude the folders or
> file types that you don't care about.
>
> Easy enough to put together in 10-15 min, max
>
> In contrast, this thread is now over an hour old.
>
> ASB (Find me online via About.Me)
> Exploiting Technology for Business Advantage...
>
>
>
>
> On Mon, Feb 21, 2011 at 3:20 PM, Paul Hutchings 
> wrote:
>>
>> You know the scenario, you need to copy a few hundred gigs worth of
>> specific sub directories from A to B.
>>
>>
>>
>> Robocopy is probably ideal but it’s a PITA to script all those folder
>> paths for a one-time operation, and if you do a ctrl-select and set the copy
>> off from Windows Explorer you can be pretty sure you’re going to walk in the
>> next day to find it’s got a problem with a single file half way through so
>> it’s cancelled the whole operation (with no real clue what and why it
>> happened).
>>
>>
>>
>> So, what do you use?
>>
>>
>>
>> I’ve tried Rich Copy which looks great, but in reality it just doesn’t
>> seem to work very well with multiple source folders.
>>
>>
>>
>> Thanks,
>>
>> Paul
>>
>> 
>> MIRA Ltd
>>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Blogging software

[Rubens Almeida]

maybe Dotnetnuke can do the trick.

On Wed, Dec 1, 2010 at 8:25 AM, Nigel Parker
 wrote:
> HELP
> I have been asked to find some Free blogging software we can run in
> house on out intranet server
> The server is running windows 2000 and Iis
>
> Can anyone recommend anything
> Thanks
>
> Nigel Parker
>
> Systems Engineer
> Ultraframe (UK) Ltd
> Tel:   01200 452329
> Fax:   01200 452201
> Web:   
> Email: 
>
>
> Please consider the environment before printing this e-mail
>
> The statements and opinions expressed in this email are my own and may not 
> represent those of Ultraframe (UK) Ltd.
> This email is subject to copyright and the information contained in it is 
> confidential and may be legally privileged. It is sent out only for intended 
> recipient(s). Access to this email by anyone else is unauthorised. If you are 
> not an intended recipient, any disclosure, copying, distribution or other use 
> or any action taken or omitted to be taken in reliance on it, is prohibited 
> and unlawful.
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Port testing

[Rubens Almeida]

I'd use Microsoft's portqry or nmap.

On Wed, Dec 1, 2010 at 4:06 PM, David Lum  wrote:
> W2K8 R2 server, how can I test for an open port on another machine?
> Specifically I need to see if ServerA can talk to port xxx on ServerB. I
> thought you could use telnet..but using it to check DNS when I type TELNET
>  53 I get could not open port, yet DNS resolution works. If I do
> the same from my Win7 PC I get the expected result…
>
> David Lum // SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 // (Cell) 503.267.9764
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: IT Solutions for a tiny Deployment

[Rubens Almeida]

Lotus Sametime maybe...

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Powershell Question

[Rubens Almeida]

I think you can try this:

$sfDesktop = [Environment]::GetFolderPath("Desktop")
If(!(test-path $sfDesktop)) {
write-host "Something's wrong"
}
Else {
write-host "It worked"
}

On Tue, Sep 7, 2010 at 3:50 PM, Joseph L. Casale
 wrote:
> Hey Rubens,
> I am not too concerned with how I get the value, but more on how to trap if 
> it doesn't enumerate correctly.
> Once I start looping through all the special folders of interest, I don't 
> want to send something wrong into the routine that follows.
>
> Thanks!
> jlc
>
> -Original Message-
> From: Rubens Almeida [mailto:rubensalme...@gmail.com]
> Sent: Tuesday, September 07, 2010 12:46 PM
> To: NT System Admin Issues
> Subject: Re: Powershell Question
>
> I'd try something like this:
>
> $sfDesktop = $env:USERPROFILE + "\desktop"
>
> On Tue, Sep 7, 2010 at 3:36 PM, Joseph L. Casale
>  wrote:
>> Hey Guys,
>>
>> What's the most simple and elegant way to trap for the following variable
>> assignment:
>>
>> Eg. $sfDesktop = [Environment]::GetFolderPath("Desktop")
>>
>>
>>
>> Should I assign it like this, and test for a proper value when using (skip
>> otherwise while I cycle through all the ones I need to)? If so, how do you
>> test the value for it having been properly assigned?
>>
>>
>>
>> Sorry, ps noob here.
>>
>> Thanks!
>> jlc
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Powershell Question

[Rubens Almeida]

I'd try something like this:

$sfDesktop = $env:USERPROFILE + "\desktop"

On Tue, Sep 7, 2010 at 3:36 PM, Joseph L. Casale
 wrote:
> Hey Guys,
>
> What’s the most simple and elegant way to trap for the following variable
> assignment:
>
> Eg. $sfDesktop = [Environment]::GetFolderPath("Desktop")
>
>
>
> Should I assign it like this, and test for a proper value when using (skip
> otherwise while I cycle through all the ones I need to)? If so, how do you
> test the value for it having been properly assigned?
>
>
>
> Sorry, ps noob here…
>
> Thanks!
> jlc
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Finding a huge file dump from June...

[Rubens Almeida]

That's a nice one-liner Michael! Another nice trick to my PoSh black book!

On Tue, Aug 3, 2010 at 4:22 PM, Michael B. Smith  wrote:
> get-childitem k:\groups -force -recurse |? {$_.CreationTime.ToString() -match 
> "^2010-06-2[0-9]" } | format-table creationtime,length,fullname -auto
>
> Or select-string.
>
> No need to drop to findstr.
>
> Regards,
>
> Michael B. Smith
> Consultant and Exchange MVP
> http://TheEssentialExchange.com
>
>
> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Sent: Tuesday, August 03, 2010 3:07 PM
> To: NT System Admin Issues
> Subject: Re: Finding a huge file dump from June...
>
> I tested this against a small directory, and am now running this:
>
> PS K:\> get-childitem k:\groups -force -recurse | format-table 
> creationtime,length,fullname -auto | findstr ^2010-06-2 | findstr /v
> ^2010-06-20 | findstr /v ^2010-06-21 | findstr /v ^2010-06-22 | findstr /v 
> ^2010-06-23 | findstr /v 2010-06-27 | findstr /v
> ^2010-06-28 | findstr /v ^2010-06-29 >  out.txt
>
> Your hint with 'fullname' was the last piece of the puzzle.
>
> I really need to start reading my powershell books - putting them underneath 
> my pillow just isn't cutting it...
>
> Need. More. Time.
>
> Kurt
>
> On Mon, Aug 2, 2010 at 20:52, Rubens Almeida  wrote:
>> PowerShell... and here's one of my favorites one-liners to find big files:
>>
>> dir c:\temp -force -recurse | sort length -desc | format-table
>> creationtime,lastwritetime,lastaccesstime,length,fullname -auto
>>
>> You can sort the results replacing the length by any of the properties
>> after format-table
>>
>> On Mon, Aug 2, 2010 at 9:48 PM, Kurt Buff  wrote:
>>> All,
>>>
>>> On our file server we have a single 1.5tb partition - it's on a SAN.
>>> Over the course of 4 days recently it went from about 30% free to
>>> about 13% free - someone slammed around 200gb onto the file server.
>>>
>>> I have a general idea of where it might be - there are two top-level
>>> directories that are over 200gb each.
>>>
>>> However, windirstat hasn't been completely helpful, as I can't seem
>>> to isolate which files were loaded during those days, and none of the
>>> files that I've been looking at were huge - no ISO or VHD files worth
>>> mentioning, etc..
>>>
>>> I also am pretty confident that there are a *bunch* of duplicate
>>> files on those directories.
>>>
>>> So, I'm looking for a couple of things:
>>>
>>> 1) A way to get a directory listing that supports a time/date stamp
>>> (my choice of atime, mtime or ctime) size and a complete path name
>>> for each file/directory on a single line - something like:
>>>
>>>     2009-01-08  16:12   854,509
>>> K:\Groups\training\On-Site_Special_Training\Customer1.doc
>>>
>>> I've tried every trick I can think of for the 'dir' command and it
>>> won't do what I want, and the 'ls' command from gunuwin32 doesn't
>>> seem to want to do this either. Is there a powershell one-liner that
>>> can do this for me perhaps?
>>>
>>> 2) A recommendation for a duplicate file finder - cheap or free would
>>> be preferred.
>>>
>>> Kurt
>>>
>>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>>> <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>> <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
> <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: Finding a huge file dump from June...

[Rubens Almeida]

You can also replace FindStr with native PowerShell CMDLet
Select-String! I've even created me a nice alias to it suggestively
called "grep" ;)

On Tue, Aug 3, 2010 at 4:07 PM, Kurt Buff  wrote:
> I tested this against a small directory, and am now running this:
>
> PS K:\> get-childitem k:\groups -force -recurse | format-table
> creationtime,length,fullname -auto | findstr ^2010-06-2 | findstr /v
> ^2010-06-20 | findstr /v ^2010-06-21 | findstr /v ^2010-06-22 |
> findstr /v ^2010-06-23 | findstr /v 2010-06-27 | findstr /v
> ^2010-06-28 | findstr /v ^2010-06-29 >  out.txt
>
> Your hint with 'fullname' was the last piece of the puzzle.
>
> I really need to start reading my powershell books - putting them
> underneath my pillow just isn't cutting it...
>
> Need. More. Time.
>
> Kurt
>
> On Mon, Aug 2, 2010 at 20:52, Rubens Almeida  wrote:
>> PowerShell... and here's one of my favorites one-liners to find big files:
>>
>> dir c:\temp -force -recurse | sort length -desc | format-table
>> creationtime,lastwritetime,lastaccesstime,length,fullname -auto
>>
>> You can sort the results replacing the length by any of the properties
>> after format-table
>>
>> On Mon, Aug 2, 2010 at 9:48 PM, Kurt Buff  wrote:
>>> All,
>>>
>>> On our file server we have a single 1.5tb partition - it's on a SAN.
>>> Over the course of 4 days recently it went from about 30% free to
>>> about 13% free - someone slammed around 200gb onto the file server.
>>>
>>> I have a general idea of where it might be - there are two top-level
>>> directories that are over 200gb each.
>>>
>>> However, windirstat hasn't been completely helpful, as I can't seem to
>>> isolate which files were loaded during those days, and none of the
>>> files that I've been looking at were huge - no ISO or VHD files worth
>>> mentioning, etc..
>>>
>>> I also am pretty confident that there are a *bunch* of duplicate files
>>> on those directories.
>>>
>>> So, I'm looking for a couple of things:
>>>
>>> 1) A way to get a directory listing that supports a time/date stamp
>>> (my choice of atime, mtime or ctime) size and a complete path name for
>>> each file/directory on a single line - something like:
>>>
>>>     2009-01-08  16:12   854,509
>>> K:\Groups\training\On-Site_Special_Training\Customer1.doc
>>>
>>> I've tried every trick I can think of for the 'dir' command and it
>>> won't do what I want, and the 'ls' command from gunuwin32 doesn't seem
>>> to want to do this either. Is there a powershell one-liner that can do
>>> this for me perhaps?
>>>
>>> 2) A recommendation for a duplicate file finder - cheap or free would
>>> be preferred.
>>>
>>> Kurt
>>>
>>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: Finding a huge file dump from June...

[Rubens Almeida]

PowerShell... and here's one of my favorites one-liners to find big files:

dir c:\temp -force -recurse | sort length -desc | format-table
creationtime,lastwritetime,lastaccesstime,length,fullname -auto

You can sort the results replacing the length by any of the properties
after format-table

On Mon, Aug 2, 2010 at 9:48 PM, Kurt Buff  wrote:
> All,
>
> On our file server we have a single 1.5tb partition - it's on a SAN.
> Over the course of 4 days recently it went from about 30% free to
> about 13% free - someone slammed around 200gb onto the file server.
>
> I have a general idea of where it might be - there are two top-level
> directories that are over 200gb each.
>
> However, windirstat hasn't been completely helpful, as I can't seem to
> isolate which files were loaded during those days, and none of the
> files that I've been looking at were huge - no ISO or VHD files worth
> mentioning, etc..
>
> I also am pretty confident that there are a *bunch* of duplicate files
> on those directories.
>
> So, I'm looking for a couple of things:
>
> 1) A way to get a directory listing that supports a time/date stamp
> (my choice of atime, mtime or ctime) size and a complete path name for
> each file/directory on a single line - something like:
>
>     2009-01-08  16:12   854,509
> K:\Groups\training\On-Site_Special_Training\Customer1.doc
>
> I've tried every trick I can think of for the 'dir' command and it
> won't do what I want, and the 'ls' command from gunuwin32 doesn't seem
> to want to do this either. Is there a powershell one-liner that can do
> this for me perhaps?
>
> 2) A recommendation for a duplicate file finder - cheap or free would
> be preferred.
>
> Kurt
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Lotus Approach Files

[Rubens Almeida]

Symphony: free, opens a lot of file types and if you can't find the
type you need, there's always the plugins:

http://symphony.lotus.com/


On Mon, Aug 2, 2010 at 5:08 PM, James Kerr  wrote:
> We have an old database that is being used by a company we now own. They are
> using an old version of smart suite to use the Approach database. Is there a
> new version of this software that I can buy or some kind of software that
> will work because the install files for the program are not complete so I
> cant install it on any PCs anymore.
>
> James
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Utterly OT - World Cup

[Rubens Almeida]

Sorry again, but the greatest F1 driver was Ayrton Senna (from
Brazil). Then the others like Alain Prost, Nigel Mansell and Michael
Schumacher!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Utterly OT - World Cup

[Rubens Almeida]

Sorry to ruin the party but, Brazil is going to kick a** on this FIFA
World Cup, even with that big knuckle head coach leaving behind two
great players!
I think It'll be nice to celebrate victory for the sixth time! :)
Go Brazil, go!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Anyone having issues with BB?

[Rubens Almeida]

Sweet, thanks Ben! And thanks everybody for the help, we figured out
the issue was something local.

Rubens

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Anyone having issues with BB?

[Rubens Almeida]

Got several users around the world complaining about BB devices not
send/receiving emails.
Anyone else seeing this?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Quest ActiveRoles

[Rubens Almeida]

I don't know how we'd manage an AD with nearly 89k objects without it!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Riverbed Steelhead appliances v. Cisco WAAS v. Citrix Branch repeater

[Rubens Almeida]

I've seen problems involving Riverbed accelerators, Outlook 2003 and
Exchange 2003. Lots of events 9646 on Exchange servers saying users
had hit the 32 sessions limit. Turns out the problem was one Riverbed
feature that kept MAPI sessions open to optimize mail traffic. Once
that was disabled the problems were resolved. Other than that it works
nice.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Interesting article on Microsoft anti-virus free not being free..

[Rubens Almeida]

No cookie for me either (from Brazil)

On Wed, Mar 17, 2010 at 5:01 PM, Rod Trent  wrote:
> Comes from a site: called “Threat Chaos”.
>
>
>
> http://www.threatchaos.com/images/FreeIsNotFreeDL.pdf
>
>
>
> For me…the link is no longer valid.  Anyone else see that?
>
>
>
> From: David Lum [mailto:david@nwea.org]
> Sent: Wednesday, March 17, 2010 3:50 PM
> To: NT System Admin Issues
> Subject: Interesting article on Microsoft anti-virus free not being free..
>
>
>
> Sunbelt will be interested in this, and maybe you too:
>
> http://www.zdnetasia.com/whitepaper/when-free-is-not-free-hidden-costs-in-microsoft-security-solutions_wp-1021019.htm
>
>
>
> What jumped out at me: “Microsoft customers interviewed for our research
> reported that getting premium support for the Forefront security solutions
> to resolve issues on a timely basis required them to upgrade their support
> contract for all of the products bundled in ECAL, it could not be broken out
> separately.”
>
>
>
> However it does have a pretty strong anti-Microsoft slant to it, which
> always makes me suspicious. Still, it has points to consider.
>
> David Lum // SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 // (Cell) 503.267.9764
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Block single port in lab environment

[Rubens Almeida]

IPSec is your friend, always!

http://support.microsoft.com/kb/813878

Regards!

Rubens

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: System Uptime and event log

[Rubens Almeida]

Powershell! Not tested yet, but it can give you an idea on how to
build your script based on your own needs:

#$ErrorActionPreference = "SilentlyContinue"
$StrServerName = $Args[0].ToString()

#Check the System Uptime
$wmiInfo = gwmi -class Win32_OperatingSystem -namespace root\cimv2
-computer $ServerName
$LastBootTime = $wmiInfo.ConvertToDateTime($wmiInfo.Lastbootuptime)
[TimeSpan]$SystemUptime = New-TimeSpan $LastBootTime $(get-date)
Write-host "The server" $ServerName.ToUpper() "has been up for"
$SystemUptime.days "day(s)," $SystemUptime.hours "hour(s),"
$SystemUptime.minutes "minute(s)," $SystemUptime.seconds "Second(s)"

$EventLogger = New-Object -type System.Diagnostics.Eventlog
-argumentlist System, $ServerName
$EventLogger.Source = "Windows PowerShell"
if ($SystemUptime.hours -lt 1) { $EventLogger.WriteEntry("The system
has been up for less than 1 hour.","Information") }
elseif ($SystemUptime.minutes -lt 5) { $EventLogger.WriteEntry("The
system has been up for less than 5 minutes.","Information") }
else { $EventLogger.WriteEntry("The system has been up more than 1
hour and 5 minutes.","Information") }


Hope that helps! Regards,

Rubens

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Remote access card

[Rubens Almeida]

Guys, thank you very much for your help!
I'm going with the Peppercon eRIC - Remote Access PCI Card.
That's what I was looking for but there was a disturbance on the force
and my google-fu was failing on me!
Regards,

Rubens

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Remote access card

[Rubens Almeida]

It's for a white box , not IBM/Dell/HP hardware.

On Tue, Oct 27, 2009 at 11:39 AM, Erik Goldoff  wrote:
> depends on your server hardware ... iLO is for the HP Proliant line, DRAC is
> for the Dell PowerEdge line, etc ...
>
> On Tue, Oct 27, 2009 at 8:49 AM, Rubens Almeida 
> wrote:
>>
>> Good morning folks! Can you recommend any generic RAC card? (like a
>> DRAC, RSA or ILO)
>> Any info will be appreciated. Thanks!
>>
>> Rubens
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: OT: Early Friday Funny

[Rubens Almeida]

Not available in Brazil :(

On Tue, Oct 6, 2009 at 5:29 PM, Roger Wright  wrote:
> Bring it!  http://media.mtvnservices.com/mgid:cms:mvideo:cmt.com:40319
>
> Roger Wright
> ___
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Question about a folder under C:\Windows

[Rubens Almeida]

And never, under any circumstances get rid of the folder %windir%\$hf_mig$!

Regards,

Rubens Almeida

On Mon, Sep 28, 2009 at 3:50 PM, Steven M. Caesare  wrote:
> Careful with that.
>
>
>
> There are dependencies there for future things (think removing/re-adding a
> windows component), that you may not realize.
>
>
>
> -sc
>
>
>
> From: Sam Cayze [mailto:sam.ca...@rollouts.com]
> Sent: Monday, September 28, 2009 2:29 PM
> To: NT System Admin Issues
> Subject: RE: Question about a folder under C:\Windows
>
>
>
> "It's best to not touch folders within the .\Windows directory to try to
> reclaim disk space."
>
>
>
> You can safely delete all the update install folders for Windows Update and
> Service Packs if your machine is running stable and you doubt you will ever
> need to uninstall them.
>
>
>
> Frees up a LOT of space.
>
>
>
> Sam
>
>
>
> 
>
> From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]
> Sent: Monday, September 28, 2009 1:17 PM
> To: NT System Admin Issues
> Subject: Re: Question about a folder under C:\Windows
>
> As hinted, the Install Clean-up Tool is essentially MSIZAP with a GUI.  It's
> best to use it by:
>
> 1. Use the Conrol Panel Add/Remove programs to unistall applications, then
>
> 2. Run the Installer Clean-Up tool, and select any apps you believe should
> have been removed.  (Add/Remove sometimes leaves pieces behihd, depending on
> how well written the app was.)
>
> 3. Check your file system - some pieces get left behind in the .\Program
> Files directory.
>
> Do NOT use the clean-up tool first in order to uninstall apps!  That will do
> a great job of making the Add/Remove control panel applet unusable for that
> app.
>
> Back to the original "problem"...  It's best to not touch folders within the
> .\Windows directory to try to reclaim disk space.  (There is probably a
> .\Windows\temp folder, but I've never seen much in those folders.)  Use
> something like WinTree, WinDirStat, etc to locate big files or folders.
>  Some browser caches can get to be pretty big.  If a machine has multiple
> users, some of those profiles (some of which are local caches of a roaming
> user) can approach Gbs in size.  I've seen machines with several crash dump
> files in the root directory.  (Some crash dump files also end up in an
> administrators local settings profile instead of the rood.)
> --
> richard
>
> Ben Scott  wrote on 09/28/2009 01:05:59 PM:
>
>> On Mon, Sep 28, 2009 at 12:32 PM, Joseph Heaton 
>> wrote:
>> > The c:\windows\installer folder.  On the system I'm looking at it
>> is a hidden system folder.  Does anyone know the function of this
>> folder, and whether or not the contents can be cleared?
>>
>>   That folder is part of the -- wait for it -- Windows Installer.
>> (Also called "Microsoft Installer" or MSI.)  The folder gets used to
>> store a number of things, including database information about
>> installed packages, cached patches for (re)installation, program icons
>> (stored as .EXE files), temporary files during install, and other
>> mysterious stuff.  It typically uses opaque IDs rather than
>> human-readable names.  It's your classic Microsoft big-ball-of-mud.
>>
>>   You don't want to go "pruning" in there without specific direction.
>> If you remove a file related to a currently-installed package, then
>> future attempts at upgrading, repairing, or removing that package may
>> fail.  For example, patches are cached so they can be re-applied or
>> reversed during future operations, and database info tells MSI exactly
>> what to do during an uninstall.
>>
>>   However, it is also quite possible for stale files to accumulate in
>> there.  Unfortunately, since it's a rather opaque data store, it's
>> hard to know what's needed and what isn't.
>>
>>   The MSIZAP utility has a command, G, to "remove orphaned cached
>> Windows Installer data files".  Exactly how it determines what an
>> orphan is, I don't know, but it's supposedly safe as long as you don't
>> use the "!" modifier to force things.  I don't know if it's
>> comprehensive -- I don't know if "MSIZAP G" will find all possible
>> stale/orphan files.  I suspect not.
>>
>>   The other options in MSIZAP generally remove information from the
>> MSI store without actually touching package files on your system.  In
>> other words, indiscriminate use of MSIZAP will just remove the
>> *record* of an install, not the install itself.  You have been warned.
>>
>>   The MSIZAP tool comes with the "Windows Installer Cleanup Utility".
>> You can get it from MSKB 290301.
>>
>> -- Ben
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: DHCP scope usage alert vbs, without MOM

[Rubens Almeida]

Maybe this can help you to create an entry on the event logs:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/event_commandline.mspx?mfr=true



On Thu, Jul 30, 2009 at 11:39 AM, James Rankin wrote:

> I was just wondering how that was donein about 2001 we managed to set
> up a batch file to execute on a certain event on some NT4 servers, and I had
> just about given up racking my brains about how to do it again should the
> need arise. Saved me some Googling :-)
>
> 2009/7/30 Charlie Kaiser 
>
> Is it 2008? If so, you can attach a task to the event via the eventvwr
>> interface; if it's 2003, you can use eventtriggers to do it. It's
>> self-explanatory in 08; here's a good article about 03...
>>
>> http://www.computerperformance.co.uk/Logon/VBScript/eventtriggers.htm
>>
>> ***
>> Charlie Kaiser
>> charl...@golden-eagle.org
>> Kingman, AZ
>> ***
>>
>> > -Original Message-
>> > From: Okan Bostan [mailto:bosta...@itu.edu.tr]
>> > Sent: Thursday, July 30, 2009 5:37 AM
>> > To: NT System Admin Issues
>> > Subject: DHCP scope usage alert vbs, without MOM
>> >
>> > Hi List,
>> >
>> >
>> >
>> > I want to write a script that will e-mail me if there is no
>> > free IP addresses on one of the scopes. I googled it but I
>> > can't find good solutions.
>> >
>> > One way is to use netsh "show mibinfo. This command gives all
>> > the usage about the scopes,but I need to parse it from a file.
>> >
>> >
>> >
>> > We all know DHCP server  already checks the usage of scope
>> > and creates an event log if the scope is full, I want to
>> > modify this trigger so I can edit and mail the situation.
>> >
>> >
>> >
>> > Any suggestions?
>> >
>> >
>> >
>> > Thanks.
>> >
>> >
>> >
>> >
>> >
>> >
>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>
>
>
> --
> "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
> the machine wrong figures, will the right answers come out?' I am not able
> rightly to apprehend the kind of confusion of ideas that could provoke such
> a question."
>
> http://raythestray.blogspot.com
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Computer Security groups

[Rubens Almeida]

I suppose you already tried to control the group membership using a
GPO... right?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Computer Security groups

[Rubens Almeida]

what about this?
gpupdate /force

regards,

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: copying large amount of files

[Rubens Almeida]

Robocopy?

On Thu, Jul 23, 2009 at 5:02 PM, James Kerr wrote:
> Looking for a utility copy about 300GB from one server to another tonight.
> Any recommondations? This is a one time thing nothing that I will
> do regularly. Any recommondations?
>
> James
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: OT: Facebook dislikes you guys

[Rubens Almeida]

cool! thanks!

On Wed, Jul 22, 2009 at 9:10 PM, Sherry Abercrombie wrote:
> Systems Admins
>
> On Wed, Jul 22, 2009 at 6:07 PM, Andrew Laya  wrote:
>>
>> Please do share...  what is the group name?
>>
>> thx,
>> Andrew.
>>
>>
>> On Wed, Jul 22, 2009 at 8:03 PM, Gavin Wilby 
>> wrote:
>>>
>>> ooo - lovely, cheers 
>>>
>>> Gavin.
>>>
>>> Sherry Abercrombie wrote:
>>>>
>>>> There is one already.  Invitation to join sent to you & others;)
>>>>
>>>> On Wed, Jul 22, 2009 at 5:42 PM, Gavin Wilby >>> <mailto:gavin.wi...@gmail.com>> wrote:
>>>>
>>>>    You know, we could make a NT.S.A group??
>>>>
>>>>    Gavin.
>>>>
>>>>    Sherry Abercrombie wrote:
>>>>
>>>>        +2, another request sent to ya.
>>>>
>>>>        On Wed, Jul 22, 2009 at 5:19 PM, Rubens Almeida
>>>>        mailto:rubensalme...@gmail.com>
>>>>        <mailto:rubensalme...@gmail.com
>>>>        <mailto:rubensalme...@gmail.com>>> wrote:
>>>>
>>>>           Sent you another one, just in case :)
>>>>
>>>>           On Wed, Jul 22, 2009 at 7:51 PM, Gavin
>>>>        Wilbymailto:gavin.wi...@gmail.com>
>>>>           <mailto:gavin.wi...@gmail.com
>>>>        <mailto:gavin.wi...@gmail.com>>> wrote:
>>>>           > Just sent you a new one - see what happens!
>>>>           >
>>>>           > Gavin.
>>>>           >
>>>>           > Sam Cayze wrote:
>>>>           >>
>>>>           >> Ok, not really, but this is weird...
>>>>           >> WAY back in the day during a long thread about social
>>>>           networking, I was
>>>>           >> honored to have a bunch of you try to add me to your
>>>>        Facebook
>>>>           friends list.
>>>>           >> Sweet, right?
>>>>           >> But, I have never been able to 'Accept' the invitations
>>>> from
>>>>           you guys;
>>>>           >> when I try, it just brings me back to my Profile page when
>>>> I
>>>>           click on it.
>>>>           >> I forgot about it for ages, but just now I randomly got an
>>>>           email reminding
>>>>           >> me to add you guys... but I still can't!
>>>>           >> What's is going on?
>>>>           >>
>>>>           >> Sam Cayze
>>>>           >> Information Technology Administrator
>>>>           >> /*ROLLOUTS
>>>>           >> *//*ONSITE • ON DEMAND*/*//*
>>>>           >>
>>>>           >> 952.279.6218...Direct Dial
>>>>           >> 612.386.3946...Mobile
>>>>           >> 877.471.6495...eFax
>>>>           >> www.Rollouts.com <http://www.Rollouts.com>
>>>>        <http://www.Rollouts.com>
>>>>
>>>>           http://www.Rollouts.com>
>>>>           >> www.e-Technicians.net <http://www.e-Technicians.net>
>>>>        <http://www.e-Technicians.net>
>>>>
>>>>           <http://www.e-technicians.net/>
>>>>           >>
>>>>           >> CONFIDENTIALITY NOTICE: This email and any attachment(s)
>>>> are
>>>>           intended only
>>>>           >> for the designated recipient(s). Rollouts Incorporated
>>>>           prohibits use,
>>>>           >> distribution or transmittal by or to an unintended
>>>> recipient
>>>>           without
>>>>           >> Rollouts' express written approval. If you are not the
>>>>        intended
>>>>           recipient,
>>>>           >> please delete this email and notify Rollouts.
>>>>           >>
>>>>           >>
>>>>           >>
>>>>           >
>>>>           >
>>>>           > ~ Finally, powerful endpoint security that ISN'T a
>>>>        resource hog! ~
>>>>           > ~
>>>>        <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>>>           >
>>>>
>>>>           ~ Finally, powerful endpoint security that ISN'T a resource
>>>>        hog! ~
>>>>           ~
>>>>        <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>>>
>>>>
>>>>
>>>>
>>>>        --        Sherry Abercrombie
>>>>
>>>>        "Any sufficiently advanced technology is indistinguishable
>>>>        from magic."
>>>>        Arthur C. Clarke
>>>>
>>>>
>>>>
>>>>
>>>>    ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>>>    ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Sherry Abercrombie
>>>>
>>>> "Any sufficiently advanced technology is indistinguishable from magic."
>>>> Arthur C. Clarke
>>>> Sent from Hurst, TX, United States
>>>>
>>>>
>>>>
>>>
>>>
>>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>>
>>
>>
>
>
> --
> Sherry Abercrombie
>
> "Any sufficiently advanced technology is indistinguishable from magic."
> Arthur C. Clarke
> Sent from Hurst, TX, United States
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: OT: Facebook dislikes you guys

[Rubens Almeida]

Sent you another one, just in case :)

On Wed, Jul 22, 2009 at 7:51 PM, Gavin Wilby wrote:
> Just sent you a new one - see what happens!
>
> Gavin.
>
> Sam Cayze wrote:
>>
>> Ok, not really, but this is weird...
>> WAY back in the day during a long thread about social networking, I was
>> honored to have a bunch of you try to add me to your Facebook friends list.
>> Sweet, right?
>> But, I have never been able to 'Accept' the invitations from you guys;
>> when I try, it just brings me back to my Profile page when I click on it.
>> I forgot about it for ages, but just now I randomly got an email reminding
>> me to add you guys... but I still can't!
>> What's is going on?
>>
>> Sam Cayze
>> Information Technology Administrator
>> /*ROLLOUTS
>> *//*ONSITE • ON DEMAND*/*//*
>>
>> 952.279.6218...Direct Dial
>> 612.386.3946...Mobile
>> 877.471.6495...eFax
>> www.Rollouts.com http://www.Rollouts.com>
>> www.e-Technicians.net 
>>
>> CONFIDENTIALITY NOTICE: This email and any attachment(s) are intended only
>> for the designated recipient(s). Rollouts Incorporated prohibits use,
>> distribution or transmittal by or to an unintended recipient without
>> Rollouts' express written approval. If you are not the intended recipient,
>> please delete this email and notify Rollouts.
>>
>>
>>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Script or Batch File to Restart a Windows Server after a set period of time

[Rubens Almeida]

What about that? It's cheap at least!

http://logos3d.com/dev/2009/03/13/the-son-of-itappmonrobotthe-daily-wtf/

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Stickers

[Rubens Almeida]

I have these:
http://www.nsoftware.com/powershell/promo/

On Wed, Apr 22, 2009 at 12:29 AM, Joseph L. Casale
 wrote:
>>I am surrounded by Linux and Mac FanBoys, and they all have stickers.
>
> Just come out of the closet and join us. Life will be so much happier :)
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: 64bit Print Server

[Rubens Almeida]

Have you seen this?
http://www.microsoft.com/windowsserver2003/techinfo/overview/x64printdriver.mspx

On Tue, Apr 14, 2009 at 5:57 PM, Andy Ognenoff  wrote:
> I'm sure this is a no brainer for most but I'm new to Windows print
> management (finally migrating from Netware 6 - woohoo!)
>
> I have a new Windows 2003 R2 64bit print server and I'm trying to add 32bit
> drivers for a generic text only printer (dot matrix) using the built in
> Windows drivers.  It works fine to add the 64bit version since that's what
> is on the print server but the 32bit ones need a location of the driver
> files, as expected.
>
> Understanding that I probably need to load those from a 32bit machine, I
> installed the print management snap-in on my WinXP box and I can connect to
> the print server and see all the printers, ports and installed drivers but I
> don't get the options for adding new drivers.  I logged in as a domain admin
> and still nothing.  Is there a setting I need to configure to allow full
> remote printer administration or what am I missing?
>
> TIA,
>
>  - Andy O.
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Exchange Reporting

[Rubens Almeida]

Our client uses this:
http://www.stealthbits.com/solutions/exchange.html

Really nice tool!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Email List

[Rubens Almeida]

I'm starting to be scarred... I think I'm the only Rubens on this list!!!

On Fri, Apr 3, 2009 at 1:06 PM, David Lum  wrote:
> OK Sherry you’re freaking me out…
>
>
>
> From: Sherry Abercrombie [mailto:saber...@gmail.com]
> Sent: Friday, April 03, 2009 8:44 AM
> To: NT System Admin Issues
> Subject: Re: Email List
>
>
>
> Wow, imagine if there were two Sherry's or two Jonathan's or two Don's, wow,
> that would be absolutely an amazing thing wouldn't it?
>
> On Fri, Apr 3, 2009 at 10:27 AM, Jonathan Link 
> wrote:
>
> We had two Mike's on this list?  Who could imagine such a strange and
> wondrous occurrence?
>
>
>
> On Fri, Apr 3, 2009 at 11:23 AM, Don Ely  wrote:
>
> Whomever now owns your Yahoo mailbox
>
>
>
> On Fri, Apr 3, 2009 at 8:20 AM, mse...@ont.com  wrote:
>
> I did not ask to be unsuscribed. Who emailed you to unsubscribe me?
>
> Regards,
>
> Mike Semon
>
> Original Message:
> -
> From: Donald Bittenbender dona...@sunbelt-software.com
> Date: Fri, 3 Apr 2009 11:13:29 -0400
> To: ntsysadmin@lyris.sunbelt-software.com, mwcj...@yahoo.com
> Subject: RE: Email List
>
> Hello Mike, you had signed up for the NTSysAdmin list. I have gone ahead
> and manually unsubscribed you. You'll receive no further emails. J
>
>
>
> --
>
> Donald Bittenbender
>
> IT Developer/DBA
>
> Sunbelt Software
>
> (727) 562-0101 x291
>
> ---
>
> The end of bloated AntiVirus as you know it,
> http://www.sunbeltsoftware.com/Home-Home-Office/VIPRE/
>
> --
>
> Enterprise Spam + Virus Protection
> http://www.sunbeltsoftware.com/Business/Ninja-Email-Security/
>
>
>
> From: Mike [mailto:mwcj...@yahoo.com]
> Sent: Thursday, April 02, 2009 11:11 PM
> To: NT System Admin Issues
> Subject: Email List
>
>
>
> Please take me off of your Email List.
>
>
>
>
>
>
>
>
> ..
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> 
> mail2web - Check your email from the web at
> http://link.mail2web.com/mail2web
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> --
> Sherry Abercrombie
>
> "Any sufficiently advanced technology is indistinguishable from magic."
> Arthur C. Clarke
> Sent from Haslet, TX, United States
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: McAfee ePO agent vuln scanner (was RE: Conficker detector)

[Rubens Almeida]

Not sure if you guys have this on your Conficker tool kit, but here's
the Stinger to detect it:
http://vil.nai.com/vil/conficker_stinger/Stinger_Coficker.exe

Funny thing is, it can't be found on the regular Stinger site :)

Regards,

RCAlmeida

On Fri, Apr 3, 2009 at 12:10 PM, Ziots, Edward  wrote:
> Thanks for that tidbit, between that and the conficker scanner that really
> works, ( as compared to Mcafee which isn’t catching jack diddly) making my
> life a lot better.
>
>
>
> Z
>
>
>
> Edward Ziots
>
> Network Engineer
>
> Lifespan Organization
>
> MCSE,MCSA,MCP+I, ME, CCA, Security +, Network +
>
> ezi...@lifespan.org
>
> Phone:401-639-3505
>
> 
>
> From: David Lum [mailto:david@nwea.org]
> Sent: Friday, April 03, 2009 9:34 AM
> To: NT System Admin Issues
> Subject: McAfee ePO agent vuln scanner (was RE: Conficker detector)
>
>
>
> Man I love this list - it makes me look so involved in my job. You McAfee
> users see this one?
>
> http://www.eeye.com/html/downloads/other/ePOScanner.html
>
>
>
> Scans for vulnerabilities in the McAfee AGENT. Sweet! I had a couple...
>
> David Lum // SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 // (Cell) 503.267.9764
>
> -Original Message-
> From: Jim Majorowicz [mailto:jmajorow...@gmail.com]
> Sent: Thursday, April 02, 2009 3:44 PM
> To: NT System Admin Issues
> Subject: RE: Conflicker detector
>
>
>
> Hi Jenny!
>
>
>
> -Original Message-
>
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
>
> Sent: Tuesday, March 31, 2009 10:06 AM
>
> To: NT System Admin Issues
>
> Subject: Re: Conflicker detector
>
>
>
> Is yours the same as mine? 867-5309?
>
>
>
> Heh.
>
>
>
> On Tue, Mar 31, 2009 at 07:14, Steven M. Caesare 
> wrote:
>
>> Ditto on the email...
>
>>
>
>> I may have typo'd my phone # though... ;-)
>
>>
>
>> -sc
>
>>
>
>> -Original Message-
>
>> From: Andy Ognenoff [mailto:andyognen...@gmail.com]
>
>> Sent: Tuesday, March 31, 2009 9:54 AM
>
>> To: NT System Admin Issues
>
>> Subject: RE: Conflicker detector
>
>>
>
>> And I got 2 emails and a call from sales people minutes after
>
>> downloading
>
>> it.
>
>>
>
>>  - Andy O.
>
>>
>
>>>-Original Message-
>
>>>From: Erik Goldoff [mailto:egold...@gmail.com]
>
>>>Sent: Tuesday, March 31, 2009 7:52 AM
>
>>>To: NT System Admin Issues
>
>>>Subject: RE: Conflicker detector
>
>>>
>
>>>
>
>>>eEye won't let you use your Gmail email address, Hm
>
>>>
>
>>>
>
>>>Erik Goldoff
>
>>>IT  Consultant
>
>>>Systems, Networks, & Security
>
>>>
>
>>>
>
>>>-Original Message-
>
>>>From: Jon D [mailto:rekcahp...@gmail.com]
>
>>>Sent: Tuesday, March 31, 2009 8:26 AM
>
>>>To: NT System Admin Issues
>
>>>Subject: Re: Conflicker detector
>
>>>
>
>>>FYI - eEye has a free conflicker scanner:
>
>>>"Conficker Worm Free Scanner
>
>>>This free scanner is designed to identify infected hosts remotely and
>
>>>anonymously without causing any disruption in business continuity."
>
>>>
>
>>>http://www.eeye.com/html/downloads/other/ConfickerScanner.html
>
>>>
>
>>>
>
>>>Jon
>
>>>
>
>>>
>
>>>
>
>>>.
>
>>>
>
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>
>>>  ~
>
>>>
>
>>>
>
>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>
>>>~   ~
>
>>
>
>>
>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>
>> ~   ~
>
>>
>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>
>> ~   ~
>
>>
>
>>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>
> ~   ~
>
>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>
> ~   ~
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Setting Windows theme by the registry?

[Rubens Almeida]

I second disabling the Themes service using a specific GPO for that.

On Tue, Mar 31, 2009 at 6:09 PM, Mike Gill  wrote:
> Disable the Themes service altogether. You'll get the Classic desktop.
>
> --
> Mike Gill
>
> -Original Message-
> From: Craig Gauss [mailto:gau...@rhahealthcare.org]
> Sent: Tuesday, March 31, 2009 8:28 AM
> To: NT System Admin Issues
> Subject: Setting Windows theme by the registry?
>
> We recently found out one of our applications does not work well with
> anything besides the Windows Classic theme.  Of course users love to go
> in and change everything they possibly can so the decision has been made
> to lock the themes down.  I found the registry key to disable the tab
> but not sure on the registry key to set it to Windows Classic.
>
> After Googling for a bit I found it is in the following key,
> software/microsoft/windows/currentversion/ThemeManager, but I didnt see
> anywhere with the specific themes documented as to what value they need
> to be.
>
> Any ideas?
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Redundant Print Servers

[Rubens Almeida]

Poor man solution:
A weekly printmig job runs on all print servers backing all the
printer queues up. The job send the results to a share on a file
server. If a print server goes down, its printmig backup is restored
into another print server, the clients are instructed to point their
printing to the other box. Once the old server gets back online
another restore of its printmig files takes place and life goes on and
on.

regards,

Rubens


On Tue, Mar 31, 2009 at 5:24 PM, Sean Rector  wrote:
> We don’t do this, but I’d like to implement option A…so I’m interested in
> hearing this, too.
>
>
>
> Sean Rector, MCSE
>
>
>
> From: Michael B. Smith [mailto:mich...@owa.smithcons.com]
> Sent: Tuesday, March 31, 2009 4:17 PM
> To: NT System Admin Issues
> Subject: Redundant Print Servers
>
>
>
> So…what is everyone doing for redundant print servers?
>
>
>
> (That is, one server hosting all printers goes down, the other takes over;
> alternately, two servers share the load usually until one crashes and the
> other takes over?)
>
>
>
> I can think of a couple of ways to handle this, but I’d like to know what
> “everyone else” is doing…
>
>
>
> Regards,
>
>
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
>
> My blog: http://TheEssentialExchange.com/blogs/michael
>
> Monitoring Exchange w/OpsMgr now available http://snurl.com/45ppf
>
>
>
>
>
>
>
> Information Technology Manager
> Virginia Opera Association
>
> E-Mail: sean.rec...@vaopera.org
> Phone:    (757) 213-4548 (direct line)
> {+}
>
>> 2008-2009 Season:  The Barber of Seville
>> Recently Announced:  Virginia Opera's 35th Anniversary Season 2009-2010
> Visit us online at www.vaopera.org or call 1-866-OPERA-VA
> 
> This e-mail and any attached files are confidential and intended solely for
> the intended recipient(s). Unless otherwise specified, persons unnamed as
> recipients may not read, distribute, copy or alter this e-mail. Any views or
> opinions expressed in this e-mail belong to the author and may not
> necessarily represent those of Virginia Opera. Although precautions have
> been taken to ensure no viruses are present, Virginia Opera cannot accept
> responsibility for any loss or damage that may arise from the use of this
> e-mail or attachments.
>
> {*}
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Laptop

[Rubens Almeida]

Not that I am aware of, but that probably exists. Unfortunately I
don't have any Lenovo's tech support on my sametime :(

On Wed, Mar 4, 2009 at 4:58 PM, Liu, David (G2DD)  wrote:
> Other than the fact that theres new BIOS update almost every month I'd
> agree that it keeps Lenovo lappies running just fine.
>
> On tat thought, does anyone know if there's an enterprise level update
> sver that can be set up to approve/push out updates for Lenovo laptops ?
>
>
> -Original Message-
> From: Rubens Almeida [mailto:rubensalme...@gmail.com]
> Sent: Wednesday, March 04, 2009 2:50 PM
> To: NT System Admin Issues
> Subject: Re: Laptop
>
> I've been a ThinkPad user for tha last 4 years, and a thumbs up rule
> is to have your bios and drivers always up to date.
> ThinkVantage System Update handles both jobs perfectly and it's one of
> the very first things I install when I get my brand new TP:
>
> http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&;
> lndocid=TVSU-UPDATE
>
> Hope that helps :)
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: Laptop

[Rubens Almeida]

I've been a ThinkPad user for tha last 4 years, and a thumbs up rule
is to have your bios and drivers always up to date.
ThinkVantage System Update handles both jobs perfectly and it's one of
the very first things I install when I get my brand new TP:

http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=TVSU-UPDATE

Hope that helps :)

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Firefox 3.0 Download Day

[Rubens Almeida]

That's a good question! I was wondering what you guys use to manage
and distribute the extensions. I mean, at least those to make FF more
safer than IE (noscript, adblockplus, filterset.g, ie view lite,
etc)...

On Tue, Jun 17, 2008 at 10:17 PM, Liu, David <[EMAIL PROTECTED]> wrote:
> Question for those who are deploying FF in the enterprise:
>
> 1. how are you managing FF upgrades, via GPO? Unless you plan on
> repackaging FF on your own, FrontMotion is not always up to date in
> terms of msi's.
>
> 2. from security perspective, IEs can be patched internally via WSUS
> quite readily with the push of a few buttons. Patching FF on the other
> hand is not so easy and FF vulnerabilities in the last year has become
> more & more frequent. Granted there are equal if not more holes in IE
> but at least we know that once released via WU or WSUS it can be
> deployed easily.
>
> 3. In terms of ability to centrally administer/config browser FF, its
> also quite lacking. The config adm from Frontmotion is not quite as
> extensive as the ie adms's. I'm surprised that there is no config
> settings for setting FF bookmarks & allowing admins to dynamically
> update them & push them out to users.
>
>> -Original Message-
>> From: Martin Blackstone [mailto:[EMAIL PROTECTED]
>> Sent: Tuesday, June 17, 2008 10:24 AM
>> To: NT System Admin Issues
>> Subject: RE: Firefox 3.0 Download Day
>>
>> I'm not a huge FF fan either, but there are millions who are.
>> Ill download it and install it and play with it, but I doubt I will
> use
>> it
>> much.
>> I think this is a great marketing idea for Firefox. It's fun and
> people
>> will
>> do it.
>> I give them kudos for the idea.
>>
>> -Original Message-
>> From: Rod Trent [mailto:[EMAIL PROTECTED]
>> Sent: Tuesday, June 17, 2008 7:08 AM
>> To: NT System Admin Issues
>> Subject: RE: Firefox 3.0 Download Day
>>
>> Nah, I just don't like to use things based on hype.
>>
>> I know, I know.  Hype pretty much runs the industry these days (ex.
>> iPhone),
>> but following the crowd gives me a bad feeling.
>>
>> Plus, I've never had much luck with Firefox, so I don't see the
>> benefit.
>> It's slow, eats away at memory, etc.
>>
>> Now, Opera, on the other hand.  No hype.  Great product.  That's the
>> only
>> 3rd party browser I would recommend.
>>
>> -Original Message-
>> From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
>> Sent: Tuesday, June 17, 2008 9:53 AM
>> To: NT System Admin Issues
>> Subject: Re: Firefox 3.0 Download Day
>>
>> Because Rod doesn't like anyone to use anything non-Microsoft.  It
>> scares him.  ;-)
>>
>>
>> On Tue, Jun 17, 2008 at 9:43 AM, Martin Blackstone
>> <[EMAIL PROTECTED]> wrote:
>> > Why? Seriously. Why?
>> >
>> > -Original Message-
>> > From: Rod Trent [mailto:[EMAIL PROTECTED]
>> > Sent: Tuesday, June 17, 2008 5:55 AM
>> > To: NT System Admin Issues
>> > Subject: RE: Firefox 3.0 Download Day
>> >
>> > Don't do it.
>> >
>> > Like sheep to the slaughter.
>> >
>> > -Original Message-
>> > From: Peter van Houten [mailto:[EMAIL PROTECTED]
>> > Sent: Tuesday, June 17, 2008 7:53 AM
>> > To: NT System Admin Issues
>> > Subject: Firefox 3.0 Download Day
>> >
>> > Today is supposed to be the official release day for Firefox 3.0 and
>> > Mozilla are trying to set a record for the number of downloads.  The
>> > Firefox home page is slightly out of date but the full 3.0 download
>> is
>> > here for those that are interested:
>> >
>> > ftp://releases.mozilla.org/pub/mozilla.org/firefox/releases/3.0
>> >
>> >
>> > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> > ~   ~
>> >
>> >
>> >
>> > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> > ~   ~
>> >
>> >
>> > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> > ~   ~
>> >
>>
>>
>>
>> --
>> ME2
>>
>> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> ~   ~
>>
>>
>>
>> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> ~   ~
>>
>>
>> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> ~   ~
>
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~   ~
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Problems moving large files after XP SP3 installation

[Rubens Almeida]

I'd give Robocopy a try, on my experience it never failed.

On Fri, May 23, 2008 at 11:28 AM, Tim Evans <[EMAIL PROTECTED]> wrote:
> While I haven't tried move a large folder with many files, I've had no
> problems move large individual ISO file here.
>
> ...Tim
>
>
>> -Original Message-
>> From: Reimer, Mark [mailto:[EMAIL PROTECTED]
>> Sent: Friday, May 23, 2008 6:51 AM
>> To: NT System Admin Issues
>> Subject: RE: Problems moving large files after XP SP3 installation
>>
>> I've only got a few machines with XP SP3 so far (more coming). But for
>> any major moves, I use robocopy. Do you have access to that?
>>
>> Mark
>>
>> -Original Message-
>> From: Bryan Garmon [mailto:[EMAIL PROTECTED]
>> Sent: Friday, May 23, 2008 6:43 AM
>> To: NT System Admin Issues
>> Subject: RE: Problems moving large files after XP SP3 installation
>>
>> Well thanks for the asides - I take it that means no one else has
>> actually seen this problem?
>>
>> -Original Message-
>> From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
>> Sent: Friday, May 23, 2008 12:03 AM
>> To: NT System Admin Issues
>> Subject: Re: Problems moving large files after XP SP3 installation
>>
>> LOL
>>
>> On Thu, May 22, 2008 at 8:39 PM, Sam Cayze <[EMAIL PROTECTED]>
>> wrote:
>> > And I thought MS wasn't going to be incorporating any Vista features
>> > into XP SP3?!
>> >
>> >
>> > -Original Message-
>> > From: Bryan Garmon [mailto:[EMAIL PROTECTED]
>> > Sent: Thursday, May 22, 2008 7:25 PM
>> > To: NT System Admin Issues
>> > Subject: Problems moving large files after XP SP3 installation
>> >
>> >  I installed XP SP3 on several desktops and laptops shortly after it
>> > was released to Windows Update. I didn't have any issues on the
>> > installation, but I thought it was odd when I tried to move a folder
>> > that had more than 1GIG of data from one hard drive to another and
> it
>> > failed with the error "cannot move file." I tried this using My
>> > Computer and dragging the folder from its current location to a
>> > different location.
>> >
>> > Today I'm transferring data from two different XP SP3 machines using
>> a
>>
>> > mapped network drive and I'm running into the same problem. The only
>> > solution I've found is to move smaller sets of folders - which is a
>> > real pain.
>> >
>> > Has anyone else had this problem after installing XP Sp3?
>> >
>> >
>> >
>> >
>> > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> > ~   ~
>> >
>> > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> > ~   ~
>> >
>>
>>
>>
>> --
>> ME2
>>
>> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> ~   ~
>>
>>
>> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> ~   ~
>>
>> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
>> ~   ~
>
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~   ~
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: R: Adding groups as members of groups

[Rubens Almeida]

Please forgive my tired brain, it's 4AM over here :)
But if you know of an existent group that's included on all folders'
ACL then your idea will work. Otherwise I don't see how to do that
without adding a new entry to the current permissions list on all the
folders tree. Another utility that comes in mind is admnalow.exe but
it's a little more intrusive. Hope that helps.

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Adding groups as members of groups

[Rubens Almeida]

Windows 2003 Resource Kit includes a utility called XCACLS. It can add
the security group entry without messing with the existent ones on the
ACL. Hope that helps.
Regards,

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Waaaay non-tech OT: Shameless Shook promotion

[Rubens Almeida]

don't mess with Jesus! you can get into trouble dude!!!

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Waaaay non-tech OT: Shameless Shook promotion

[Rubens Almeida]

ohh boy... that's no good...

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Waaaay non-tech OT: Shameless Shook promotion

[Rubens Almeida]

There it is, uou got your Brazilian vote  :)
And I miss Petra! Where are all my vinyls ?

On Fri, May 16, 2008 at 12:31 PM, Andy Shook
<[EMAIL PROTECTED]> wrote:
> List,
>
> My church band (I'm the drummer) is in a contest for airtime on a regional
> radio station.  Would you puh-lease take a second, click the link, listen to
> the clip and vote for my band; Eternal Church in Fort Mill, SC.
>
>
>
> http://www.newlife919.com/rocks-2008-5.htm
>
>
>
> Thanks so much and I really think this needs to be in this weeks edition of
> WServer News…Stu.
>
>
>
> Shook
>
>
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Modify NTFS Perms

[Rubens Almeida]

or as your last resort, you can google for a utility called "admnalow.exe"

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Desktop Backup Con't

[Rubens Almeida]

One of our major clients use Connected from IronMountain. They have
users all over the world and it have worked pretty well so far.
Regards,

Rubens

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Is there a way to remotely gather the version and service pack of a Microsoft Exchange Server?

[Rubens Almeida]

The easiest way I found to do that was using PowerShell:

gwmi -class ExchangeServerState -namespace
root\cimv2\applications\exchange -computername ANYEXCHSERVER |
select-object Name,version | ft -auto -hide >> "AllExchServers.txt"

And if you want to filter by version and sp levels:
gwmi -class ExchangeServerState -namespace
root\cimv2\applications\exchange -computername ANYEXCHSERVER -filter
"Version>'6944'" | select-object Name,version | ft -auto -hide >>
"AllE2k3Servers.txt"

Here you can find details about versions and its sp levels:
http://support.microsoft.com/?kbid=158530

Hope that helps

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: We handing out xobni accounts?

[Rubens Almeida]

please can I have one too?

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Naming convention for Servers

[Rubens Almeida]

This model works quite well for world wide enterprises, but with a
little of creativity you can make it easier and fit to small shops
too:

2 characters to country: "US", "BR"azil, "SP"ain, "CA"nada)
3 characters to city: SPO = Sao Paulo, HOU = Houston, VAN = Vancouver
3 characters to function: MSG = Exchange, SQL, WEB, APP =
Applications, PRT = Printing
3 numbers to unique ID: 001, 099, 133, 899

Ex:
BRSPOMSG001 = Exchange server #1 at Sao Paulo, Brazil
USHOUSQL002 = Database server #2 at Houston, US
CAVANWEB099 = Web server # 99 at Vancouver, Canada
SPMADAPP133 = Application server # 133 at Madrid, Spain

Depending on the number of servers you believe will accommodate the
next 5 years growth, you can use 3 or even 2 numbers to designate the
unique ID. If you shop is country wide "only" you can use the first
two letters to designate the state.
Hope that helps ;)

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: find mp3's on c drive

[Rubens Almeida]

Or perhaps something like this:

http://www.myitforum.com/articles/11/view.asp?id=11547

Regards,

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Script to query list of remote servers for drives & free space

[Rubens Almeida]

Same script but with a visually better output:

gc "computers.txt" | % { "Server: " + $_; "Drive`tSize`tFree"; gwmi
–computername $_ win32_logicaldisk -filter "drivetype=3" | % {
$_.deviceid +"`t"+ [System.Math]::Round($_.size/1GB,2) +"`t"+
[System.Math]::Round($_.freespace/1GB,2) } }

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Script to query list of remote servers for drives & free space

[Rubens Almeida]

Here's a starting point:

get-content "c:\scripts\computers.txt" | ForEach-Object { gwmi
Win32_LogicalDisk -filter drivetype=3 -computer $_ | select-object
DeviceID,VolumeName,Size,FreeSpace | ft -auto }

Hope that helps :)

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: power management over the net

[Rubens Almeida]

Dell -> DRAC
http://accessories.us.dell.com/sna/products/Server_Applications/productdetail.aspx?c=us&l=en&s=biz&cs=555&sku=313-6179

IBM -> RSA
http://www-304.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-50116&brandind=508

HP -> ILO
http://h18013.www1.hp.com/products/quickspecs/10861_div/10861_div.html

Regards,

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Tool to change Permissions..

[Rubens Almeida]

Here's what I do on those situations:
admnalow will do the first part of the trick
(http://www.google.com/search?hl=en&q=admnalow)
then you can use any of the resource kit utilities: XCACLS or CACLS.
Best of all, it's all free ;)

Regards,

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: RAID failure monitoring

[Rubens Almeida]

Sam got the Dell stuff well covered, and as for the IBM side:
- a RSA card (the IBM version of DRAC/ILO cards)
- the ServeRAID Manager software will show you everything you need to
know about the disk subsystem, and if you want to have something more
structured you can try IBM Director to see all those beautyfull
alerts.

Regards,

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Rouge Computer

[Rubens Almeida]

nmap or gfi languard will do the job ;)

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: pdf995

[Rubens Almeida]

I second cutepdf, it works like a champ!

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: NTFS take ownership question

[Rubens Almeida]

I'd say you should run a checkdisk real quick then run admnalow on that drive!

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Remote server won't allow management

[Rubens Almeida]

Some times GenControl works for me in situations like these:
http://www.gensortium.com/products/gencontrol.html

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Robocopy Brain Fart

[Rubens Almeida]

I'm not a GUI fan but sometimes you need a jump start, so here's my
little contribution to the folks looking for a easily way getting
familiar to Robocopy:
http://technet.microsoft.com/en-us/magazine/cc160891.aspx
Hope that helps ;)

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: chkdsk says no problems, but lots of files are missing

[Rubens Almeida]

I think you can give SpinRite a try: http://www.grc.com/spinrite.htm
Usually it resolve all my filesystem problems.

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Sysadmin book recommendations (was: monitoring your servers thoroughly)

[Rubens Almeida]

This book is a great source of information if you want to become a SysAdmin:
"The Practice of System and Network Administration"
Enjoy ;)

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Moving Files/shares to new server

[Rubens Almeida]

I'd go with robocopy, (lab first to get yourself familiar with it, if
this is the case) and put it to spit logs (the more detailed the
best), then you can export the registry keys with all the shares from
one box to another, cycle the server service and you're ready to go.
personally I don't like wizards, usually they work fine just for small
environments. There's no control about what's going on behind the
curtain with a wizard.

On Tue, Feb 26, 2008 at 2:30 PM, Reimer, Mark <[EMAIL PROTECTED]> wrote:
>
>
> Hi folks,
>
> This was brought up last November or so. But I have an opinion question.
>
> I have a number of files and shares (I'm guessing 100 shares or so). There
> seems to be two main ways.
>
> 1. Robocopy and some form of share moving, either with permcopy, rmtshare,
> or registry export | import (if the drive letters match).
>
> 2. Use File Server Migration Tool from MS.
>
> Which do you prefer?
>
> I'm going from Win2K3 to Win2K3, and have about 200GB.
>
> Thoughts?
>
> Thanks.
>
> Mark
>
>
>
>
>
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Access to site...

[Rubens Almeida]

Both sites responding to me, btw I'm in Brazil.

On Feb 18, 2008 6:58 PM, Tom Strader <[EMAIL PROTECTED]> wrote:
>
>
>
> Can someone test these two sites to see if they come up?
>
> http://www.blumenthalcenter.org
>
> and
>
> http://www.carolinatix.org
>
> Thanks!!!
>
>
> Sincerely,
>
> Tom Strader
> Server Systems Administrator
> NC Blumenthal Performing Arts Center
> 704.379.1285 Office | 704.444.2098 Fax
>  http://www.linkedin.com/in/tstrader
> "There are seldom good technological solutions to behavioral problems."
>
>
>
>
>
>
>
>

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~