RE: SirCam Virus Problem Exchange Server

2001-09-24 Thread Sullivan, Glenn 

Install some Email Virus protection, and let it deal with the infected
messages.  Or block that domain at your internet mail connector.

Trend ScanMail is a good antivirus package, and you can easily block a
particular domain, or even a single user from a domain, in your IMC
properties box.

Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.


-Original Message-
From: Murray Freeman [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 11:22 AM
To: NT System Admin Issues
Subject: SirCam Virus Problem Exchange Server


Our webmaster seems to have found a "friend" who apparently doesn't know she
has the SirCam virus. We're being sent hundreds of emails from this one
account to our webmaster. We've set up a rule to forward all these emails to
our webmasters delete folder, but apparently that's creating problems as
well. Our webmaster doesn't want us to shut down that alias, so does anyone
have any other ideas to somehow eliminate the problem. All the email is
coming from an address at HOME.COM.

Murray

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: Is there any way to know for sure? More Nimda stuff.

2001-09-21 Thread Sullivan, Glenn 

It looks like a little guys head, with Grey skin, black hair, and a light
blue shirt, but so does everyone else's account...

(sorry, I couldn't resist.  And it's Friday...)

Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.


-Original Message-
From: Clark, Steve [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 2:44 PM
To: NT System Admin Issues
Subject: RE: Is there any way to know for sure? More Nimda stuff.


What does the guest account look like?

Steve Clark
Clark Systems Support, LLC
AVIEN Charter Member
www.clarksupport.com
301-610-9584 voice
240-465-0323 Efax

-Original Message-
From: Jay Woody [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 2:40 PM
To: NT System Admin Issues
Subject: Is there any way to know for sure? More Nimda stuff.

Maybe I am being paranoid.  I have a server that the eeye scanner says is
not vulnerable, I don't see any .eml files on it and when I scan for files
changed since the 18th, there are no .exes.  However, when I look at the
task list, it shows 2 CMD.EXEs open.  I have one open but not two.  Am I
being weird here?  The second CMD.EXE un-nerves me, but I can't find any
other sign of infection.  Is there any one, "sure fire" way to KNOW that the
box has been hit?  Is there one registry entry or file or something that the
virus ALWAYS does so I can see if the box is hit?

I am thinking about re-building it, just in case, but if I can leave it up,
I would obviously prefer that.  Any ideas?

JayW


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: NT 2000 Anti Virus for Server edition desktops

2001-09-21 Thread Sullivan, Glenn 

Trend Server Protect.

http://www.antivirus.com

Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.


-Original Message-
From: Steve Kelsay [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 10:08 AM
To: NT System Admin Issues
Subject: NT 2000 Anti Virus for Server edition desktops


My developers are running NT 2000 Server edition on their machines for
development reasons. (This allows them to develop and step through debugging
completely through multi-tier components all on one machine)

I have found that they do not have any virus protection on their machines,
because the standard editions do not run on servers.

Can anyone make a product recommendation for a product that will not
necessarily include the entire enterprise support and admin overhead (and
cost) for servers that actually SERVE something?

Perhaps a desktop version of something reliable that will run servers as
well?

As you can expect, I am panicked at this point! 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: Jetdirect substitute

2001-09-07 Thread Sullivan, Glenn 
Title: Message



Print 
the test page, by pushing the little button in the back...
 
Glenn Sullivan, MCSE+I  MCDBA David Clark Company Inc. 

  -Original Message-From: Allen Crawford 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, September 07, 2001 3:04 
  PMTo: NT System Admin IssuesSubject: RE: Jetdirect 
  substitute
  
  Ok, 
  one more question.  How do you 
  find the original IP address of the JetDirect card (i.e. when you buy a new 
  one)?  I currently use telnet to 
  make my changes as well, but I have to use JetAdmin (or WebJetAdmin) to find 
  the original IP (which is usually assigned via DHCP).  After that I make it a static IP so I 
  can always telnet to it when I need to make 
  changes.
   
  -Original 
  Message-From: Jim Busick 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, September 07, 2001 2:01 
  PMTo: NT System Admin 
  IssuesSubject: RE: Jetdirect 
  substitute
   
  telnet
  
  -Original 
  Message-From: Allen 
  Crawford [mailto:[EMAIL PROTECTED]]Sent: Friday, September 07, 2001 11:56 
  AMTo: NT System Admin 
  IssuesSubject: RE: Jetdirect 
  substitute
  How do 
  you configure the JetDirect cards then?
   
  -Original 
  Message-From: Sean 
  Martin [mailto:[EMAIL PROTECTED]]Sent: Friday, September 07, 2001 12:30 
  PMTo: NT System Admin 
  IssuesSubject: RE: Jetdirect 
  substitute
   
  I just didn't like 
  JetAdmin so I switched to TCP/IP printing.
   
  Regards,
   
  Sean Martin, 
  MCSENetwork 
  AdministratorRibelin 
  Lowell & CompanyInsurance Brokers, 
  Inc.3111 C Street, Suite 300Anchorage, 
  Alaska 99503Ph: (907) 561-1250Fax: 
  (907) 561-4315Cell: (907) 
  229-0885Email: [EMAIL PROTECTED]
  
  -Original 
  Message-From: Jim 
  Holmgren [mailto:[EMAIL PROTECTED]]Sent: Friday, September 07, 2001 9:26 
  AMTo: NT System Admin 
  IssuesSubject: RE: Jetdirect 
  substitute
  We 'geared 
  up' for it by using TCP/IP printing instead of the JetAdmin 
  app.
   
  -Jim
   
   
  Jim Holmgren 
  MCSE, CCNA 
  [EMAIL PROTECTED] 
  Network 
  Engineer 
  Advertising.com 
  
  Anytime, 
  anywhere, any Internet channel-- we touch tens of millions online each 
  day. 
  Advertising.com-- 
  Superior Technology, Superior Performance. 
  
   
  
  -Original 
  Message-From: Juned 
  Shaikh [mailto:[EMAIL PROTECTED]]Sent: Friday, September 07, 2001 10:12 
  AMTo: NT System Admin 
  IssuesSubject: Jetdirect 
  substitute
  Hi 
  guys,
   
  I heard that HP 
  is discontinuing Jetdirect and is goign to roll-out 
  some something else? Has anybody heard about this.. How are you guys 
  gearing up for that. We had some unresolve issues with Jetdirect on MCluster 
  servers. Thanks,
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  ***The 
  information transmitted in this email is intended only forthe person(s) or 
  entity to which it is addressed and maycontain confidential and/or 
  privileged material. Any review, retransmission, dissemination or other 
  use of, or taking ofany action in reliance upon, this information by 
  persons orentities other than the intended recipient is prohibited.If 
  you received this email in error, please contact thesender and permanently 
  delete the email from any computer. 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  DO NOT read, copy or 
  disseminate this communication unless you are the intended addressee. This 
  e-mail communication contains confidential and/or privileged information 
  intended only for the addressee. If you have received this communication in 
  error, please call us immediately at (907) 561-1250 and ask to speak to the 
  sender of the communication. Also, please e-mail the sender and notify the 
  sender immediately that you have received the communication in 
  error.
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: Slightly OT: Win2K Video Capture Cards

2001-09-06 Thread Sullivan, Glenn 

Thanks for the info...

To answer your question, I don't think so.  We are a manufacturer of
Communications Systems for high noise environments, like planes, boats,
trains, fire trucks, nascar, etc...  We also make the Shuttle
Launch/Re-entry suits.

Check out the web page if you are interested:
http://www.DavidClark.com

It's not fancy, but it's functional...

Thanks again for the help.  Keep it coming, if you have different
suggestions than what has been presented already.

Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.


-Original Message-
From: Brian Steele [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 06, 2001 10:17 AM
To: NT System Admin Issues
Subject: Re: Slightly OT: Win2K Video Capture Cards


Just in case no-one's piped up with a solution yet...!


The ATI TV Wonder tuner card ($70) can be used to capture stills. Dead easy,
just select the video-in instead of cable-in, then use the camera icon to
grab any pics.  Alternatively, you can the digital VCR utility to record the
entire video signal to disk, then go back and grab and stills that you want.
The ATI TV Wonder VE can what you want as well, for

For more info,

http://www.ati.com/na/pages/products/pc/tv_wonder/index.html


Of course, being able to watch cable-TV on the PC comes in handy too at
times :-).

Not sure about the quality though - if you want, I can try grabbing a few
pics off my camera and send you the images so you can judge the quality for
yourself.

Note: Once properly set up, the ATI Multimedia Utilities are easy to use.
However, ATI's driver installation process seem to be in permanent beta
mode, so expect a few "issues" when trying to install them.  Once installed
though, they seem to work well.

My card was provided with older drivers that don't support W2K.  However,
you can download drivers that do support W2K from their website.

http://support.ati.com/products/pc/tuners/atitvwonder_drivers.html


Alternatively, you could simply use one of ATI's All-In-Wonder cards that
works as a normal video card as well as providing video/still capturing
facilities.  That way you can get the still-capturing without having to add
an extra card to the system.


Regards,
Brian

PS: Totally OT: Is your David Clark the creator of DUMAX?


- Original Message -
From: "Sullivan, Glenn" <[EMAIL PROTECTED]>
To: "NT System Admin Issues" <[EMAIL PROTECTED]>
Sent: Thursday, September 06, 2001 9:36 AM
Subject: Slightly OT: Win2K Video Capture Cards


> Can anyone suggest a good video capture card for a Windows 2000 Pro
machine,
> where the normal everyday user is NOT an admin?  It doesn't need to
capture
> video, just good quality stills off of a video signal.
>
> Our Materials Lab is purchasing a "video camera" for their stereoscope
> (read: microscope) that has a video signal feed, and they would like to be
> able to capture high quality stills.
>
> TIA for any help y'all can provide...
>
> Glenn Sullivan, MCSE+I  MCDBA
> David Clark Company Inc.
>
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

Slightly OT: Win2K Video Capture Cards

2001-09-06 Thread Sullivan, Glenn 

Can anyone suggest a good video capture card for a Windows 2000 Pro machine,
where the normal everyday user is NOT an admin?  It doesn't need to capture
video, just good quality stills off of a video signal.

Our Materials Lab is purchasing a "video camera" for their stereoscope
(read: microscope) that has a video signal feed, and they would like to be
able to capture high quality stills.

TIA for any help y'all can provide...

Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

OT:HP Magneto-Optical Drive

2001-08-24 Thread Sullivan, Glenn 


I don't suppose any of you are in central Massachusetts, and have a VAX with
a Magneto-Optical drive that will read HP Magneto-Optical cartridges...

We have some OLD data that I'm trying to restore, but our drive is failing
slowly-but-surely...

I know, it's a long show, and WAY off topic...


Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

RE: Access to Terminal Server

2001-08-23 Thread Sullivan, Glenn 



D'oh... my bad.
 
http://www.w2knews.com/
 
Sorry,
Glenn Sullivan, MCSE+I  MCDBA David Clark Company Inc. 

  -Original Message-From: David N. Precht 
  [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 23, 2001 1:34 
  PMTo: NT System Admin IssuesSubject: RE: Access to 
  Terminal Server
  Would be nice to see , yet I get : 
  The page cannot be displayed
  Gotta love it 
  .
  
-Original Message-From: Sullivan, Glenn 
[mailto:[EMAIL PROTECTED]]Sent: Thursday, August 23, 2001 
09:58To: NT System Admin IssuesSubject: RE: Access to 
Terminal Server
Go 
to http://www.win2knews.com and sign 
up...
Glenn Sullivan, MCSE+I  MCDBA 
David Clark Company Inc. 

  -Original Message-From: Correa, Andre 
  [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 23, 2001 9:48 
  AMTo: NT System Admin IssuesSubject: RE: Access to 
  Terminal Server
  
  I 
  have been looking for that very piece of 
  information.
   
  How 
  do I sign up for the W2K news email 
  letter?
   
  -Original 
  Message-From: John 
  Brozycki [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 23, 2001 9:21 
  AMTo: NT System Admin 
  IssuesSubject: RE: 
  Access to Terminal Server
   
  If you get Stu's W2K news email 
  newsletter he just sent one out this morning that had a snippet from Mark 
  Minasi explaining how to do this very thing.  Here's the quote from 
  Mark Minasi:
  How to let 
  Non-Domain Admins connect to a Win2K Server via Terminal Services in 
  Remote Admin mode? Here's what Mark Minasi found out: I really 
  like Terminal Services for Windows 2000 in the "Remote Administration" 
  mode; it lets up to two people use Terminal Services to remotely control a 
  Windows 2000 Server, and doesn't require me to buy any Terminal Server 
  client licenses. But when you select "Remote Administration" mode for 
  Terminal Services, then Terminal Services only lets members of the Domain 
  Admins group log into Terminal Services. I wanted to let regular 
  old users log in, but didn't know how. While teaching a class for a large 
  communications company this month, I found out how. Open Terminal 
  Services Configuration (it's in Administrative Tools) In the command 
  pane (the left-hand pane of the MMC console), click on "Connections." 
  In the right-hand pane, you'll see an icon representing a connection 
  (a hard disk atop a network connection) and the words "RDP-Tcp," "tcp," 
  and "Microsoft RDP 5.0." Double-click the icon to bring up its Properties 
  dialog, or just right-click the icon and choose "Properties." You'll see a 
  property page labeled "RDP-Tcp Properties." Click the "Permissions" 
  tab. Note that right now, the tab shows only the System account and 
  the local Administrators group. Add any person or group that you like, and 
  they'll be able to log onto the server via Terminal Services. 
  
  At 11:45 AM 8/17/2001 
  -0400, you wrote:
    Sorry for not mentioning this 
  the first time, but Terminal Services is in Admin Mode. In order to 
  accomplish this before, I had to give others Admin rights. Now I don't 
  have to, I can just give them through policies what they need to 
  do.Thanks.Terry Caleb-- Original Message 
  --From: "Kevin Miller" 
  <[EMAIL PROTECTED]>Reply-To: "NT System Admin 
  Issues" <[EMAIL PROTECTED]>Date: Fri, 17 Aug 
  2001 11:34:25 -0700>Checking I have a locked down Demo 
  account with no rights logining>into a remote mode TS? I think 
  anyone can login as long as they have the>check box done..  
  >>Or am I just smoking crack?>>Kevinm QWSZC, 
  VRY+Y, NFH, SAD-VF, 
  DERSDESDFG>~~~>More 
  letters after my name makes me 
  Smarter.>~~~>please 
  respond back to rent this ad space for your 
  needs>>>-Original Message->From: Kevin 
  Lundy [mailto:[EMAIL PROTECTED]] >Sent: Friday, 
  August 17, 2001 8:31 AM>To: NT System Admin Issues>Subject: 
  RE: Access to Terminal Server>>>I think the issue may 
  be in how Terry originally installed TS - in>remote admin mode 
  maybe instead of application server?  If remote admin>mode, I 
  don't think there is any way around the admin permissions ->that's 
  one of MS's way of ensuring you don't bypass proper 
  licensing.>>-Original Message->F

RE: Access to Terminal Server

2001-08-23 Thread Sullivan, Glenn 



Go to 
http://www.win2knews.com and sign 
up...
Glenn Sullivan, MCSE+I  MCDBA David Clark Company Inc. 

  -Original Message-From: Correa, Andre 
  [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 23, 2001 9:48 
  AMTo: NT System Admin IssuesSubject: RE: Access to 
  Terminal Server
  
  I have 
  been looking for that very piece of 
  information.
   
  How do 
  I sign up for the W2K news email letter?
   
  -Original 
  Message-From: John 
  Brozycki [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 23, 2001 9:21 
  AMTo: NT System Admin 
  IssuesSubject: RE: Access to 
  Terminal Server
   
  If 
  you get Stu's W2K news email newsletter he just sent one out this morning that 
  had a snippet from Mark Minasi explaining how to do this very thing.  
  Here's the quote from Mark Minasi:
  How to let 
  Non-Domain Admins connect to a Win2K Server via Terminal Services in Remote 
  Admin mode? Here's what Mark Minasi found out: I really like Terminal 
  Services for Windows 2000 in the "Remote Administration" mode; it lets up to 
  two people use Terminal Services to remotely control a Windows 2000 Server, 
  and doesn't require me to buy any Terminal Server client licenses. But when 
  you select "Remote Administration" mode for Terminal Services, then Terminal 
  Services only lets members of the Domain Admins group log into Terminal 
  Services. I wanted to let regular old users log in, but didn't know 
  how. While teaching a class for a large communications company this month, I 
  found out how. Open Terminal Services Configuration (it's in 
  Administrative Tools) In the command pane (the left-hand pane of the MMC 
  console), click on "Connections." In the right-hand pane, you'll see an 
  icon representing a connection (a hard disk atop a network connection) and the 
  words "RDP-Tcp," "tcp," and "Microsoft RDP 5.0." Double-click the icon to 
  bring up its Properties dialog, or just right-click the icon and choose 
  "Properties." You'll see a property page labeled "RDP-Tcp Properties." 
  Click the "Permissions" tab. Note that right now, the tab shows only 
  the System account and the local Administrators group. Add any person or group 
  that you like, and they'll be able to log onto the server via Terminal 
  Services. 
  At 11:45 AM 8/17/2001 -0400, 
  you wrote:
    Sorry for not mentioning this the 
  first time, but Terminal Services is in Admin Mode. In order to accomplish 
  this before, I had to give others Admin rights. Now I don't have to, I can 
  just give them through policies what they need to do.Thanks.Terry 
  Caleb-- Original Message 
  --From: "Kevin Miller" 
  <[EMAIL PROTECTED]>Reply-To: "NT System Admin Issues" 
  <[EMAIL PROTECTED]>Date: Fri, 17 Aug 2001 
  11:34:25 -0700>Checking I have a locked down Demo account with 
  no rights logining>into a remote mode TS? I think anyone can login as 
  long as they have the>check box done..  >>Or am I 
  just smoking crack?>>Kevinm QWSZC, VRY+Y, NFH, SAD-VF, 
  DERSDESDFG>~~~>More 
  letters after my name makes me 
  Smarter.>~~~>please 
  respond back to rent this ad space for your 
  needs>>>-Original Message->From: Kevin 
  Lundy [mailto:[EMAIL PROTECTED]] >Sent: Friday, 
  August 17, 2001 8:31 AM>To: NT System Admin Issues>Subject: RE: 
  Access to Terminal Server>>>I think the issue may be in 
  how Terry originally installed TS - in>remote admin mode maybe instead 
  of application server?  If remote admin>mode, I don't think there 
  is any way around the admin permissions ->that's one of MS's way of 
  ensuring you don't bypass proper licensing.>>-Original 
  Message->From: Kevin Miller [mailto:[EMAIL PROTECTED]]>Sent: 
  Friday, August 17, 2001 2:28 PM>To: NT System Admin 
  Issues>Subject: RE: Access to Terminal 
  Server>>>Just give the user logon to TS rights in there 
  AD profile.>>Kevinm QWSZC, VRY+Y, NFH, SAD-VF, 
  DERSDESDFG>~~~>More 
  letters after my name makes me 
  Smarter.>~~~>please 
  respond back to rent this ad space for your 
  needs>>>-Original Message->From: Terry [mailto:[EMAIL PROTECTED]] 
  >Sent: Friday, August 17, 2001 8:16 AM>To: NT System Admin 
  Issues>Subject: Access to Terminal Server>>>  
  I am not at a location now that permits me to look back into the 
  past>posts, so I am sorry if this has come up recently. I need to be 
  able to>give access to a server through Terminal Services, WITHOUT 
  giving>administrator rights to that account.>  Anyone done 
  this?>>TIA>Terry Caleb>>http://www.sunbelt-software.com/ntsysadmin_list_charter.htm>>>http://www.sunbelt-software.com/ntsysadmin_list_charter.htm>>http://www.sunbelt-software.com/ntsysadmin_list_charter.htm>>>http://www.sunbelt-software.com/ntsysadmin_list_charte

RE: Code Red Rant

2001-08-23 Thread Sullivan, Glenn 

You could start blocking those ranges of IP's at your firewall... or not put
the box on a live network until it is patched...

Just suggestions; I feel your pain, I really do...

Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.


-Original Message-
From: Luke Brumbaugh [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 23, 2001 9:48 AM
To: NT System Admin Issues
Subject: OT:Code Red Rant


Last night I am building a test box for 2000 AD.  I had to format a 2nd
drive to load AD and stuff.  It was going to take a while so I left and went
home.  When I got in this morning, I had messages from other people saying
that they had got the code red.  I hadn't even got to the updates yet.  What
a pain!  So now I am rebuilding.  Will other people please fix this.  It is
such a pain, our logs are filled with hundreds of ip addresses trying to
infect us.  We got spam abuse, why can't we have a place that puts people's
ip in for not fixing their virus problems!




Luke L. Brumbaugh
System Administrator,MCSE
Ultryx Corporation


Enterprise Channel Management Software for Manufacturers 
Visit us at http://www.ultryx.com 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

FaxMaker for Exchange

2001-08-22 Thread Sullivan, Glenn 

I am getting ready to implement FaxMaker for Exchange for all of my users,
include our Win2K terminal server.  Does anyone have any insight into how to
get the FaxMaker submit forms working on a terminal server?  I have
installed the FAXMaker Terminal Server client, but can't get the forms to
work, and their tech support is no help.

Anyone?

Glenn Sullivan, MCSE+I  MCDBA
David Clark Company Inc.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm