Enough Please (WAS: RE: What's Your Phone?)

[VIPCS]

Guys (and Ladies):

 

This is supposed to be a “NT” System Admins issues mailing list.  Can you
please take this discussion to a separate mailing list?  We received 98 new
messages this morning, and most of them were follow-ups to this thread.

 

(And yes, we deleted them unread, but it is still frustrating to have to
pick and chose messages to delete.)

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: Wednesday, January 05, 2011 11:44 AM
To: NT System Admin Issues
Subject: RE: What's Your Phone?

 

Damn, sounds like a deal to me…  Kenai River means wild caught, means better
flavor !

 

Salmon smoked best low, low heat about 4 to 6 hours I only use a mild salt
not much other spice needed, unless a quick soy-maple marinade first.

 

Erik Goldoff

IT  Consultant

Systems, Networks,  Security 

'  Security is an ongoing process, not a one time event ! '

From: Sean Martin [mailto:seanmarti...@gmail.com] 
Sent: Wednesday, January 05, 2011 11:36 AM
To: NT System Admin Issues
Subject: Re: What's Your Phone?

 

You guys are killing me with all of this food talk and it's only 7:30am
here.

 

So which one of you Smoker experts is good with salmon? I'll make somebody a
deal. I've got a freezer full of salmon filets (Kenai River Red Salmon -
Alaska). I can cook fish, but I've never been into smoking it. I'll send
someone a box full of filets, cover the shipping, if you smoke it and send
me back half of it...the other half you keep for yourself. Sound reasonable?

 

 

- Sean

On Wed, Jan 5, 2011 at 7:25 AM, Raper, Jonathan - Eagle
jra...@eaglemds.com wrote:

Sounds like frying a turkey… mmm

 

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
jra...@eaglemds.com
www.eaglemds.com 

  _  

From: Alan Davies [mailto:adav...@cls-services.com] 
Sent: Wednesday, January 05, 2011 11:02 AM 


To: NT System Admin Issues
Subject: RE: What's Your Phone?

 

Not tried it, but I'm sure it could be nice.  I saw a show on cowboys once
where they deep-fry these huge cuts of steak out in the wilds in a massive
cauldron of oil on a fire.  Sounds odd, but makes sense with the very high
temperature sealing it instantly.  Nom nom nom 

 

 

  _  

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: 05 January 2011 14:41
To: NT System Admin Issues
Subject: Re: What's Your Phone?

I can and do cook steak on a smoker. :-)

On Wed, Jan 5, 2011 at 9:37 AM, Alan Davies adav...@cls-services.com
wrote:

That is true ... but I thought once upon a time we were talking about just
cooking a steak! ;o)



-Original Message-
From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: 05 January 2011 14:36
To: NT System Admin Issues
Subject: Re: What's Your Phone?

That would be a grill. Which isn't anything close to a smoker.

On Wednesday, January 5, 2011, Alan Davies adav...@cls-services.com wrote:
 I meant the trend to spend a lot on outdoor cooking facilities!  Most BBQs
over here are £15 BQ jobs .. which are absolutely fine as long as you don't
expect them to last 10 years out in the wind and rain!


 a

 -Original Message-
 From: James Kerr [mailto:cluster...@gmail.com]
 Sent: 05 January 2011 13:23
 To: NT System Admin Issues
 Subject: Re: What's Your Phone?

 Caja Chinas are not American, they are Cuban and many Cubans make them
themselves.

 James

 - Original Message -
 From: Alan Davies adav...@cls-services.com
 To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
 Sent: Wednesday, January 05, 2011 5:40 AM
 Subject: RE: What's Your Phone?


 Good Lord!  Here was me thinking $700 was a tad expensive for an egg
 and you come out with a $1200 cooking table!  Must be an American thing




 a

 -Original Message-
 From: Scot Parsons [mailto:spars...@scetv.org]
 Sent: 04 January 2011 20:11
 To: NT System Admin Issues
 Subject: RE: What's Your Phone?

 I cook my pigs in a box.

 http://lacajachina.com/



 -Original Message-
 From: Bill Humphries [mailto:nt...@hedgedigger.com]
 Sent: Tuesday, January 04, 2011 2:24 PM
 To: NT System Admin Issues
 Subject: Re: What's Your Phone?

 my family refers to my smoked pork butt as meat candy.  i usually
 chop it and they eat it off the platter like finger food.

 Bill


 Steve Ens wrote:
 I'd like to see your smoked pork shoulder.  Recipe that is.  I make a
 mean batch as well. We could have NT list cookoff.  Stu, will Sunbelt
 sponsor something like this?

 On Tue, Jan 4, 2011 at 11:33 AM, Charlie Kaiser
 charl...@golden-eagle.org mailto:charl...@golden-eagle.org wrote:

 +1. I'm definitely the chef in the household. I'll put my smoked
 pork
 shoulder and BBQ sauce up against anyone's... :-)

 ***
 Charlie Kaiser
 charl...@golden-eagle.org mailto:charl...@golden-eagle.org
 Kingman, AZ
 ***


  -Original Message-
  From

RE: wiping drives in a RAID

[VIPCS]

But that is not a satisfactory solution for ensuring non-recovery of data.
Jeffrey once met some Air Force forensics experts who claimed to be able to
recover data from hard drive magnetic platters that had been physically
mangled and missing substantial segments of the platters.

While that action might eliminate casual data recovery, the question is
really:  What is the level of data recovery that you want to protect
against? 

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Tuesday, January 04, 2011 9:05 AM
To: NT System Admin Issues
Subject: RE: wiping drives in a RAID

One of our sys admins uses a .45 and a .223.  I think our method provides
more satisfaction and stress relief.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Monday, January 03, 2011 6:05 PM
To: NT System Admin Issues
Subject: RE: wiping drives in a RAID

Dban won't get to the metadata parts of the drive, but those don't store
sensitive info, just controller data.
What specific errors are you getting?

Bottom line, if the data is sensitive, I have two 50 ton presses in the back
I use:)
jlc

-Original Message-
From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] 
Sent: Monday, January 03, 2011 4:38 PM
To: NT System Admin Issues
Subject: wiping drives in a RAID

We have some servers that we are going to survey, and they will go find a
new home.  We want to wipe the drives before we send them out.

Specifics:

Dell Poweredge 2850s, with RAID 5.  

We have DBAN, but we're getting hardware errors when we try to start it.  I
don't know if DBAN would see the drives anyway, as I don't think it would
talk to the RAID controller, to be able to see the drives.

What do you guys use in this type of scenario?

Thanks,

Joe



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: wiping drives in a RAID

[VIPCS]

There are DoD standards for degaussers, since degaussing is an approved
method for wiping drives.  However, as you say, the Radio Shack product
probably does not meet those standards!

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Roger Wright [mailto:rhw...@gmail.com] 
Sent: Tuesday, January 04, 2011 10:28 AM
To: NT System Admin Issues
Subject: Re: wiping drives in a RAID

 

I doubt it meets DoD standards, but I've used one of these for years on all
discarded drives.  It consistently removes any partitions, formatting, and
scambles the data.

 

http://cgi.ebay.com/Radio-Shack-LARGE-Bulk-Tape-Eraser-44-233A-BOX-MANUAL-/3
60319177434



Roger Wright
___

Never make hard what you can make easy. - Fred W. Frailey






On Tue, Jan 4, 2011 at 10:13 AM, VIPCS vi...@stny.rr.com wrote:

But that is not a satisfactory solution for ensuring non-recovery of data.
Jeffrey once met some Air Force forensics experts who claimed to be able to
recover data from hard drive magnetic platters that had been physically
mangled and missing substantial segments of the platters.

While that action might eliminate casual data recovery, the question is
really:  What is the level of data recovery that you want to protect
against?

Sincerely,

Jeffrey and Mary Jane Harris
VIPCS


-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
Sent: Tuesday, January 04, 2011 9:05 AM
To: NT System Admin Issues
Subject: RE: wiping drives in a RAID

One of our sys admins uses a .45 and a .223.  I think our method provides
more satisfaction and stress relief.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: Monday, January 03, 2011 6:05 PM
To: NT System Admin Issues
Subject: RE: wiping drives in a RAID

Dban won't get to the metadata parts of the drive, but those don't store
sensitive info, just controller data.
What specific errors are you getting?

Bottom line, if the data is sensitive, I have two 50 ton presses in the back
I use:)
jlc

-Original Message-
From: Joseph Heaton [mailto:jhea...@dfg.ca.gov]
Sent: Monday, January 03, 2011 4:38 PM
To: NT System Admin Issues
Subject: wiping drives in a RAID

We have some servers that we are going to survey, and they will go find a
new home.  We want to wipe the drives before we send them out.

Specifics:

Dell Poweredge 2850s, with RAID 5.

We have DBAN, but we're getting hardware errors when we try to start it.  I
don't know if DBAN would see the drives anyway, as I don't think it would
talk to the RAID controller, to be able to see the drives.

What do you guys use in this type of scenario?

Thanks,

Joe



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Redirect folders to network

[VIPCS]

It was Jeffrey's understanding that a server file quota applies to ALL files
owned by a user on that server, not whether they are in a home folder or a
roaming profile folder.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Stephen Wimberly [mailto:riverside...@gmail.com] 
Sent: Friday, December 31, 2010 1:31 PM
To: NT System Admin Issues
Subject: Re: Redirect folders to network

 

I love both roaming profiles and folder redirection, but have been burned by
offline files in the past (Windows 2000 server and pro) and just don't want
to go there again even though improvements have been made!

We like the Keep It Simple principal, we redirect the My Documents folder to
the user's mapped home directory found on the profiles tab within their
Active Directory object.  (This way we can offer server space for normal
employees, but not contractors).  Our users can always look to see if their
My Documents match the contents of their mapped drive, this way it
instills in them that these files are not on the local computer.

We suggest that our Laptop users create a Local Folder for files that they
need to travel with.  It is up to them to keep these in sync with server
copies so there is a backed up version.

If you do roaming profiles without redirecting the My Documents folder, you
may find yourself 'roaming' a good many files at login or logoff which could
slow things down considerably.  Plus you can put a quota on the user's
shared drive, but not on a roaming profile share!

Food for thought.

My next goal is to understand and implement Microsoft Direct Access so our
laptop users aren't really far from a server copy at any time, of course
this means I'll be able to get to them for support as well. ;)

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Redirect folders to network

[VIPCS]

Any particular reason you are not just creating roaming profiles for users?
Or instructing users to store their documents on a home directory on a
server?

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Chris Blair [mailto:chris_bl...@identisys.com] 
Sent: Tuesday, December 28, 2010 3:21 PM
To: NT System Admin Issues
Subject: Redirect folders to network

 

XP workstations, 2003 R2 Native AD.

 

We are testing redirecting the My Documents folder to the network. The main
objective is to capture important data on the workstations for backup. I did
some checks on workstations and found a good number of people are storing
documents, in folders, on their desktop. I know this can be redirected as
well. 

 

Any pros/cons to redirecting the desktop and making it available offline?

 

Any other solutions I should look at instead of directing folders in
general?

 

Thanks! 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: NTL M and bootable DOS CD

[VIPCS]

Several things:

 

Using DOS requires the presence of LM Hashes for password (because that is
all that DOS understands).  If you require passwords longer than 15
characters (or users use passwords longer than 15 characters), LM hashes are
not generated.

 

Second, there is a group policy to not generate LM hashes for shorter
passwords that can be configured.  If this group policy is set, DOS
connections will still not be available because the DOS clients cannot
generate the proper hash for the server.

 

Third, leaving LM hashes leaves your network open to an easier brut force
attack because the LM hashes are actually stored as 7-bit sub hashes, and
rainbow tables can easily do a lookup on the hashes.  You should download
ophcrack (or have your security people do it), and the LM rainbow tables,
and see how trivial it is to crack those passwords.

 

In summary, these guys need to be dragged into the 21st century.  The
Windows Deployment kit and SCCM should provide all the tools they need to
easily re-engineer their processes or create new ones.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Monday, December 27, 2010 10:33 AM
To: NT System Admin Issues
Subject: OT: NTL M and bootable DOS CD

 

Sorry, just venting: 

OK, so we implemented our new SCCM infrastructure about 9 months ago (all
W2K8 servers). Almost done with the migration from our old SMS 2003
infrastructure (W2K3 R2 servers). I get a request from our desktop guys last
week to create a few shares on the new SCCM servers to hold the workstation
images. No problem. So I get a call from the desktop guys saying they can't
access the new shares. I ask them how they are being accessed. They say from
a bootable DOS CD. I thought them meant WinPE, so I tested that, and
verified there are no issues. Go  back to the desktop guys and they say, no
it's really DOS 6.22 using NDIS 2.0. So I start looking into it and found
that the old SMS servers have a GPO setting that allows NTLM connections,
the rest of the network doesn't. I was not aware of this. Our currently
policy is to allow NTLMv2 only, and refuse LM and NTLM. I ask them if they
can move to WinPE. They tell me the engineering involved will be too much
work. So now the question is. do I put up a fight and go to our Security
group and tell them I want to keep NTLMv2, and have the desktops guys
re-engineer the process? My guess is that I'll be over ruled, and be forced
to allow NTLM for the new SCCM servers.   

Uggg. 



Chris Bodnar, MCSE
Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 - This message,
and any attachments to it, may contain information that is privileged,
confidential, and exempt from disclosure under applicable law. If the reader
of this message is not the intended recipient, you are notified that any
use, dissemination, distribution, copying, or communication of this message
is strictly prohibited. If you have received this message in error, please
notify the sender immediately by return e-mail and delete the message and
any attachments. Thank you. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Share permissions question

[VIPCS]

Why not create a few test documents, a share, a test group and test this
yourself?

 

If the groups already exist, and the users assigned the permissions are
already members of the group(s), you are just transferring the permissions
from users to groups, and the permissions should automatically update the
next time they access the share.  Otherwise, they will need to log off and
log back on. 

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com] 
Sent: Monday, December 27, 2010 10:32 AM
To: NT System Admin Issues
Subject: Share permissions question

 

I am planning on making changes to a network file share that will impact a
set of health users. I will be removing inherited permissions and assigning
group permissions to the share and child folders. My question is .will
the users have to logout and login to get access back after the changes are
applied? I am not sure if the security token assigned to the users before
the change will still be good. As the security permissions will not change
for the users access to the share and child folders. The change is to assign
access by group instead of individual user ID.

-- 
T. Todd Lemmiksoo

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: NTL M and bootable DOS CD

[VIPCS]

And if you had know about this issue before they began their current
deployment, and told them they needed to re-engineer their process, they
would have had some excuse why they could not do it then.

 

(Second law of thermodynamics - simplified form - You cannot win.  You
cannot break even.  It even applies to IT.)

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Monday, December 27, 2010 12:31 PM
To: NT System Admin Issues
Cc: NT System Admin Issues
Subject: Re: OT: NTL M and bootable DOS CD

 

I'm definitely going to try and fight this, from a security perspective it's
a no brainer. The issue will be that the desktop group will say this will
push back the deployment of existing systems by a month while they engineer
a new process. Almost no way to fight that unless our group is willing to
take over the responsibility of doing that work, which we could easily do.
Just hate knowing that those guys will put up this road block on something
that should take them less than a day to do. I'd love for their management
to step in and say  you know what? You are right. we need to redo this
process and it's not going to take us a month to do it. we'll have it done
by end of the week! Never going to happen. 




Chris Bodnar, MCSE
Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 



From:Kurt Buff kurt.b...@gmail.com 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:12/27/2010 11:37 AM 
Subject:Re: OT: NTL M and bootable DOS CD 

  _  




Uh, you've already proved that your way works.

I'd call a meeting, go over their setup with them and identify the
points that need improving.

I'll bet that the re-engineering isn't really all that much, and that
the end result will actually be faster and better installs.

Kurt

On Mon, Dec 27, 2010 at 07:32, Christopher Bodnar
christopher_bod...@glic.com wrote:
 Sorry, just venting:

 OK, so we implemented our new SCCM infrastructure about 9 months ago (all
 W2K8 servers). Almost done with the migration from our old SMS 2003
 infrastructure (W2K3 R2 servers). I get a request from our desktop guys
last
 week to create a few shares on the new SCCM servers to hold the
workstation
 images. No problem. So I get a call from the desktop guys saying they
can't
 access the new shares. I ask them how they are being accessed. They say
from
 a bootable DOS CD. I thought them meant WinPE, so I tested that, and
 verified there are no issues. Go  back to the desktop guys and they say,
no
 it's really DOS 6.22 using NDIS 2.0. So I start looking into it and found
 that the old SMS servers have a GPO setting that allows NTLM connections,
 the rest of the network doesn't. I was not aware of this. Our currently
 policy is to allow NTLMv2 only, and refuse LM and NTLM. I ask them if they
 can move to WinPE. They tell me the engineering involved will be too much
 work. So now the question is. do I put up a fight and go to our
Security
 group and tell them I want to keep NTLMv2, and have the desktops guys
 re-engineer the process? My guess is that I'll be over ruled, and be
forced
 to allow NTLM for the new SCCM servers.

 Uggg.



 Chris Bodnar, MCSE
 Systems Engineer
 Distributed Systems Service Delivery - Intel Services
 Guardian Life Insurance Company of America
 Email: christopher_bod...@glic.com
 Phone: 610-807-6459
 Fax: 610-807-6003 - This message,
 and any attachments to it, may contain information that is privileged,
 confidential, and exempt from disclosure under applicable law. If the
reader
 of this message is not the intended recipient, you are notified that any
 use, dissemination, distribution, copying, or communication of this
message
 is strictly prohibited. If you have received this message in error, please
 notify the sender immediately by return e-mail and delete the message and
 any attachments. Thank you.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~  http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe

RE: OT: NTL M and bootable DOS CD

[VIPCS]

Chris,

 

Just tell your management it will an auditable SOX finding.  That should get
their attention.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Monday, December 27, 2010 1:09 PM
To: NT System Admin Issues
Subject: RE: OT: NTL M and bootable DOS CD

 

Good luck Edward, and let me know how it turns out for you. Again, I'm going
to try and fight this, but knowing our management, I'm not optimistic about
my chances of winning. 


Chris Bodnar, MCSE
Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 



From:Ziots, Edward ezi...@lifespan.org 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:12/27/2010 12:57 PM 
Subject:RE: OT: NTL M and bootable DOS CD 

  _  




Chris, we are seeing the same thing here with our techs, saying there boot
disks aren't working after they change their passwords, since we are Win2k8
R2 DFL/FFL, the authentication requirement default is higher than the NTLM
and LM hashes of old, which I can agree that they need to get there boot
disks or deployment process up to the 21st century. 
  
IN same boat as you, not changing domain wide settings to allow folks to
ghost stuff with old boot disk, there are better tools ( WIM, WINPE etc etc)

  
Z 
  
Edward E. Ziots 
CISSP, Network +, Security + 
Network Engineer 
Lifespan Organization 
Email:ezi...@lifespan.org 
Cell:401-639-3505 
  
From: Christopher Bodnar [ mailto:christopher_bod...@glic.com
mailto:christopher_bod...@glic.com] 
Sent: Monday, December 27, 2010 12:31 PM
To: NT System Admin Issues
Cc: NT System Admin Issues
Subject: Re: OT: NTL M and bootable DOS CD 
  
I'm definitely going to try and fight this, from a security perspective it's
a no brainer. The issue will be that the desktop group will say this will
push back the deployment of existing systems by a month while they engineer
a new process. Almost no way to fight that unless our group is willing to
take over the responsibility of doing that work, which we could easily do.
Just hate knowing that those guys will put up this road block on something
that should take them less than a day to do. I'd love for their management
to step in and say  you know what? You are right. we need to redo this
process and it's not going to take us a month to do it. we'll have it done
by end of the week! Never going to happen. 




Chris Bodnar, MCSE
Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 



From:Kurt Buff kurt.b...@gmail.com 
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Date:12/27/2010 11:37 AM 
Subject:Re: OT: NTL M and bootable DOS CD 

 

  _  





Uh, you've already proved that your way works.

I'd call a meeting, go over their setup with them and identify the
points that need improving.

I'll bet that the re-engineering isn't really all that much, and that
the end result will actually be faster and better installs.

Kurt

On Mon, Dec 27, 2010 at 07:32, Christopher Bodnar
christopher_bod...@glic.com wrote:
 Sorry, just venting:

 OK, so we implemented our new SCCM infrastructure about 9 months ago (all
 W2K8 servers). Almost done with the migration from our old SMS 2003
 infrastructure (W2K3 R2 servers). I get a request from our desktop guys
last
 week to create a few shares on the new SCCM servers to hold the
workstation
 images. No problem. So I get a call from the desktop guys saying they
can't
 access the new shares. I ask them how they are being accessed. They say
from
 a bootable DOS CD. I thought them meant WinPE, so I tested that, and
 verified there are no issues. Go  back to the desktop guys and they say,
no
 it's really DOS 6.22 using NDIS 2.0. So I start looking into it and found
 that the old SMS servers have a GPO setting that allows NTLM connections,
 the rest of the network doesn't. I was not aware of this. Our currently
 policy is to allow NTLMv2 only, and refuse LM and NTLM. I ask them if they
 can move to WinPE. They tell me the engineering involved will be too much
 work. So now the question is. do I put up a fight and go to our
Security
 group and tell them I want to keep NTLMv2, and have the desktops guys
 re-engineer the process? My guess is that I'll be over ruled, and be
forced
 to allow NTLM for the new SCCM servers.

 Uggg.



 Chris Bodnar, MCSE
 Systems Engineer
 Distributed Systems Service Delivery - Intel Services
 Guardian Life Insurance Company of America
 Email: christopher_bod...@glic.com
 Phone: 610-807-6459
 Fax: 610-807-6003 - This message,
 and any attachments to it, may contain information

RE: new HP desktop: standards? we don't need no stinkin' standards...

[VIPCS]

Surprisingly, at least at Dell, the systems offered by the Home division are
actually better (except for the basic warranty) than the equivalent systems
offered by the Small Business Division:  Intel 2010 processors, larger
drives, more memory, and in some cases, 64-bit OSes.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Damien Solodow [mailto:damien.solo...@harrison.edu] 
Sent: Monday, December 27, 2010 2:20 PM
To: NT System Admin Issues
Subject: RE: new HP desktop: standards? we don't need no stinkin'
standards...

Was this a business model desktop or a home one? :)

Honestly I haven't seen PCs with PS2 ports for a while now, so not
really surprised on that part.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.217.6851 (fax)
HARRISON COLLEGE

-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Monday, December 27, 2010 2:14 PM
To: NT System Admin Issues
Subject: new HP desktop: standards? we don't need no stinkin'
standards...

So, I just ordered a new desktop for an accounting firm client.  It's a
nice desktop that includes dual monitor support without an add-on
graphics card.  This saves some time and money for the client since they
have gone paperless and everyone needs dual monitors.

Two standards missing:

1: No ps/2 ports.  Not a huge deal since so many keyboards are now usb.
2:Included keyboard  is a short model that does not include a number
pad.  Desktop keyboard without the num-pad.  Totally a waste of plastics
and silicon in an accounting firm.

But they did manage to load 25 wild tangent sponsored games on the
desktop.

Bill

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: AD Mess!

[VIPCS]

Do DC1 and DC2 show connections to DC3?  Does DC3 show up in the Domain
Controllers OU in AD when looking at DC1 or DC2?

 

If there are no references to DC3 on DC1 or DC2, then remove DC3 from the
network, and force a demotion on DC3, then try promoting it again to a DC.

 

If there are references to DC3, then you will need to do a metadata cleanup
to remove those references, since DC3's information is too old to try and
force an update, and again, the best thing to do is simply force a demotion
(after doing a cleanup) and start over.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Kelli Sterley [mailto:kjsterley.li...@gmail.com] 
Sent: Thursday, December 23, 2010 11:07 AM
To: NT System Admin Issues
Subject: AD Mess!

 

Not sure if this should go here or the AD list but i'll start here ...

 

Once again I am trying to clean up a mess left by the people before me ...

 

I have 2 Win2003R2 DC's (DC1 and DC2).  They are working and replicating
fine.  I also have a Win2008 that was attempted to join the DC 's (DC3).
According to what I know, dcpromo was ran on it but it was never rebooted.
So I rebooted it.  Now when I look at the Sites and Services I do not see
what I see on the other 2 DC's.  DC1 and DC2 have all three servers listed
under the Server folder and the NTDS settings showing they all have
connections that are replicating.  However when I look at DC3, it is looking
at old information (an old DC that was demoted) and has all together
incorrect information.  So my powers that be said .. remove it.  Now when
I try to run dcpromo, I get errors.  The first I was able to fix but this
error I can not seem to find much information on and what I do read isn't
clear.  

The operation failed because:

Active Directory Domain Services could not transfer the remaining data in
directory partition CN=Schema,CN=Configuration,DC=domain,DC=local to Active
Directory Domain Controller DC1.domain.local.

The distinguished name specified for this replication operation is invaild

 

Any help would be great, I'd rather not force remove the server from the DC
position but if it's the only option I'll have no choice.

 

KS

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Buffalo - was Re: Home RAID enclosure recommendations?

[VIPCS]

There are various sites on the Internet on how to obtain root access to the
device, and then you can do various things, such as flashing it with the
iSCSI firmware, and use iSCSI to connect to the device.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Don Kuhlman [mailto:drkuhl...@yahoo.com] 
Sent: Thursday, December 23, 2010 2:11 PM
To: NT System Admin Issues
Subject: Re: Buffalo - was Re: Home RAID enclosure recommendations?

 

Thanks Andrew. I'm going to try and repurpose it for something and then
pursue other options.

 

I appreciate all the input!

 

Don 

 

  _  

From: Andrew S. Baker asbz...@gmail.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wed, December 22, 2010 5:07:30 PM
Subject: Re: Buffalo - was Re: Home RAID enclosure recommendations?

I had my Terrastation participating in the domain, but it is flaky.
Sometimes it loses its connection and needs to be reset. 

 

I finally gave up and set it up with local permissions.

 

All in all, I wouldn't get another buffalo for this function.


 

ASB (My XeeSM Profile) http://xeesm.com/AndrewBaker  
Exploiting Technology for Business Advantage...
 





On Wed, Dec 22, 2010 at 9:37 AM, Don Kuhlman drkuhl...@yahoo.com wrote:

Sorry to jump this thread, but speaking of Buffalo NAS - does anyone have
any good information (besides the Buffalo doc and website) on how to get an
LS-QL Linkstation Quad to work in an Active Directory environment as a
shared target for users to connect to via their domain login?

 

I set it up using their doc to put in the domain name (for the workgroup),
DC's IP address, DNS IP, made an open share on it that users are supposed to
be able to map to so they get added to the access list and still couldn't
connect to it.

 

I searched their forums and knowledge base then called support and they were
less than helpful. The guy said that there's an issue with Windows Server
2008 and it's the OS's fault(even though it doesn't work from an XP
workstation, 2000 server or 2008 server), then said that we have network
issues which is why we can't access the drive from the server or any other
client on the lan.

 

This morning the thing isn't even pingable so I can't access it via the web
interface...

 

Thanks

 

Don K

 

  _  

From: David Lum david@nwea.org
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wed, December 22, 2010 8:17:15 AM
Subject: RE: Home RAID enclosure recommendations?

I have Cavalry USB 2.0/eSATA RAID1 externals drive and being just external
SATA it's just as fast as an internal SATA drive. If eSATA is OK just do a
web search for eSATA RAID1 external

 

I have Buffalo NAS at clients as just extra storage and both solutions work
well.

 

Dave

 

 

 

From: Jim Slattery [mailto:slattery_...@hotmail.com] 
Sent: Wednesday, December 22, 2010 5:57 AM
To: NT System Admin Issues
Subject: OT: Home RAID enclosure recommendations?

 

I recently started taking a lot of photos and videos, and I'm realizing that
my current storage solution at home isn't going to cut it very soon.

Does anyone have a recommendation for a good price/performance RAID
enclosure (or populated solution) for home use? I'd like to have 3-4TB
available if possible.

Thanks, and Happy Holidays!

Jim

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Buffalo - was Re: Home RAID enclosure recommendations?

[VIPCS]

Jeffrey has a Terastation II that he uses as a system backup storage device
for a project he works on.  It is just better than having a bricked unit -

 

Two hard drives replaced in two years

The whole unit replaced once

Abysmally slow (even on a direct gigabit connection from the server to the
unit, which is the only way we could obtain any reasonable performance).

 

If even one of the hard drives fails, it severely restricts the
configuration of the unit (i.e., cannot create new RAID arrays).

 

If you need a NAS device, pick another vendor.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Ames Matthew B [mailto:mba...@qinetiq.com] 
Sent: Wednesday, December 22, 2010 10:34 AM
To: NT System Admin Issues
Subject: RE: Buffalo - was Re: Home RAID enclosure recommendations?

 

I have a Buffalo NAS, and it sits in the loft as it bricked itself during a
firmware upgrade.  Before it died, the performance on it was pretty rubbish
- it was a terastation of some form.

 

  _  

From: David Lum [mailto:david@nwea.org] 
Sent: 22 December 2010 15:27
To: NT System Admin Issues
Subject: RE: Buffalo - was Re: Home RAID enclosure recommendations?

The issue I have with Buffalo NAS is I can't treat it like a normal server
share as far as NTFS permissions..

 

From: Don Kuhlman [mailto:drkuhl...@yahoo.com] 
Sent: Wednesday, December 22, 2010 6:38 AM
To: NT System Admin Issues
Subject: Buffalo - was Re: Home RAID enclosure recommendations?

 

Sorry to jump this thread, but speaking of Buffalo NAS - does anyone have
any good information (besides the Buffalo doc and website) on how to get an
LS-QL Linkstation Quad to work in an Active Directory environment as a
shared target for users to connect to via their domain login?

 

I set it up using their doc to put in the domain name (for the workgroup),
DC's IP address, DNS IP, made an open share on it that users are supposed to
be able to map to so they get added to the access list and still couldn't
connect to it.

 

I searched their forums and knowledge base then called support and they were
less than helpful. The guy said that there's an issue with Windows Server
2008 and it's the OS's fault(even though it doesn't work from an XP
workstation, 2000 server or 2008 server), then said that we have network
issues which is why we can't access the drive from the server or any other
client on the lan.

 

This morning the thing isn't even pingable so I can't access it via the web
interface...

 

Thanks

 

Don K

 

  _  

From: David Lum david@nwea.org
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wed, December 22, 2010 8:17:15 AM
Subject: RE: Home RAID enclosure recommendations?

I have Cavalry USB 2.0/eSATA RAID1 externals drive and being just external
SATA it's just as fast as an internal SATA drive. If eSATA is OK just do a
web search for eSATA RAID1 external

 

I have Buffalo NAS at clients as just extra storage and both solutions work
well.

 

Dave

 

 

 

From: Jim Slattery [mailto:slattery_...@hotmail.com] 
Sent: Wednesday, December 22, 2010 5:57 AM
To: NT System Admin Issues
Subject: OT: Home RAID enclosure recommendations?

 

I recently started taking a lot of photos and videos, and I'm realizing that
my current storage solution at home isn't going to cut it very soon.

Does anyone have a recommendation for a good price/performance RAID
enclosure (or populated solution) for home use? I'd like to have 3-4TB
available if possible.

Thanks, and Happy Holidays!

Jim

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

This email and any attachments to it may be confidential and are intended
solely for the use of the individual to whom it is addressed. If you are not
the intended recipient

RE: OT: Home RAID enclosure recommendations?

[VIPCS]

They are an excellent source which we use as well.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Wednesday, December 22, 2010 1:49 PM
To: NT System Admin Issues
Subject: Re: OT: Home RAID enclosure recommendations?

If you already know what you need, try http://www.provantage.com -
great prices, fast shipping, and I've never had a problem with them.

On Wed, Dec 22, 2010 at 10:32, Jonathan Link jonathan.l...@gmail.com
wrote:
 I don't really use CDW for much of anything anymore.  It feels to me as if
 they're pushing product and not solutions.  I get great service for my
Dell
 rep.  For the misc items I can't get from Dell, I've had decent service
from
 PC Mall, and then CDW.

 I work in an accounting firm, my CDW rep knows this.  He called me last
week
 trying to explain IRS Section 179 depreciation rules in an effort to get
me
 to buy product before year end.  I was nonplussed by the effort...

 On Wed, Dec 22, 2010 at 1:24 PM, Don Kuhlman drkuhl...@yahoo.com wrote:

 Wow - what a coincidence, our CDW rep recommended Buffalo as the product
 that many of their small business clients were using...

 
 From: Jonathan Link jonathan.l...@gmail.com
 To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
 Sent: Wed, December 22, 2010 12:03:46 PM
 Subject: Re: OT: Home RAID enclosure recommendations?

 When I was looking at SAN offerings, I somehow got into a conference call
 with Buffalo and my CDW rep.  The Buffalo agent suggested that I try
their
 new SAN offering out to see if it would work.  I asked if they had a
trial
 program.  He said no, but, I kid you not, said that CDW had a fantastic
 return policy, and suggested I buy a couple of units and try them out for
30
 days.

 I was just stunned, as was my CDW rep.  I never did take CDW up on
 Buffalo's offer on their behalf, and haven't purchased another Buffalo
 product, since[1].

 [1] I never purchased the Terastation II we had, my predecessor did, and
 upon my review of security I discovered that he had left user home
 directories wide open to everyone.  All of the partners had data related
to
 firm business, personnel files, evaluations, etc.  Needless to say that
was
 buttoned up immediately upon discovery, with a migration for all other
uses
 following soon thereafter.


 On Wed, Dec 22, 2010 at 12:52 PM, Don Kuhlman drkuhl...@yahoo.com
wrote:

 Well, from my new experience with Buffalo support and the performance of
 the
 unit I installed, my .02 is not to get a Buffalo product.




 - Original Message 
 From: Devin Meade devin.me...@gmail.com
 To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
 Sent: Wed, December 22, 2010 11:48:15 AM
 Subject: Re: OT: Home RAID enclosure recommendations?

 I was planning on looking into this after Christmas but here are a few
 things I have run into.

 1. The WD Y drives (the TLR limited, RAID specific ones ... both RE2
 and RE3 version) performed much slower than Hitachi Ultrastar A7K2000,
 by far.  This was on WS2003 32bit, WS2008R2 and ESXi 4 using Adaptec
 3405 Sata RAID controllers.  The adaptec 3405 / Hitachi Ultrastar
 combo has proven itself for us with ~100 users.

 2. For another need (5 users, small business that is) I was going to
 look into the Terrastation but find many comments of slowness and I
 don't like the OS being on the HDD's.  But they have a really cool
 neat-o feature that if you buy two of these you can set up live
 replication.  I was considering this for my Mom and Pop's business -
 so it's a little more heavy duty than plain home use.  But the price
 is not much higher than the adaptec controller above and HDD's.  IIRC
 they had another feature that you could attach a USB drive for backup.

 3. Because of #2, I was looking at the Netgear products.  Netgear had
 some sort of replication, I forget what it is, but I don't know if
 it's as whiz-bang neat-o as the Buffalo implementation.

 4. All my home machines have RAID of some sort using *GASP* Promise
 raid controllers and old hard drives that I just had laying around!
 But alas I have outgrown the capacity and want to upgrade to something
 else.

 5. I may just get the cheapo USB/eSata RAID 1 array (Fantom G-Force
 MegaDisk) and be done with it!

 Again, I was going to look at this in about a week, but there ya go.

 hth and Merry Christmas all,
 Devin

 On Wed, Dec 22, 2010 at 11:18 AM, Raper, Jonathan - Eagle
 jra...@eaglemds.com wrote:
  Anyone else using WD desktop drives in RAID and messed with TLER (or
  regretted
 not messing with it)?
 
  Or, for that matter, regretted messing with it?
 
  (I'm sure it was implied, but I figured it worthwhile to ask the
 pseudo-obvious.)
 
  Jonathan L. Raper, A+, MCSA, MCSE
  Technology Coordinator
  Eagle Physicians  Associates, PA
  jra...@eaglemds.com
  www.eaglemds.com
 
 
  -Original Message-
  From: Carl Houseman [mailto:c.house

RE: Problem loading W7 on new HD

[VIPCS]

If you create a small partition for the OS (say 40GB), does it still fail on
first reboot?

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Wednesday, December 22, 2010 2:40 PM
To: NT System Admin Issues
Subject: OT: Problem loading W7 on new HD

 

Sorry for the OT, not doing a lot of hardware at the moment, and hoping
those of you out there who are doing this everyday might be able to assist: 


OK, so I have got a frankenclone machine at home that I wanted to update
with a larger HD and load Windows 7 on, currently has Vista Ultimate 64-bit.
Basic specs: 

MSI P6NGM2-L Motherboard
Intel Pentium Dual Core E5200 2.5Ghz 2M 
2G DDR2 RAM
300G WD HD
DVD R/W drive 

So I order a new WD 1.5TB SATA HD, and swap out the old drive for the new
one, then try to boot from the OS DVD.  BIOS sees the new drive,  but unable
to load Windows 7 on it. Tried different media, different versions of ISO
images, tried retail version DVD, tried a different DVD drive. Nothing
works. I then tried loading an older OS (Windows Vista, Windows XP) all of
which see the new HD, but when it reboots for the first time after
formatting and copying files it continuously reboots. So it's not specific
to W7.  Almost like something is screwed up with the MBR. Is there any kind
of incompatibility that my current MB won't support a newer drive of this
size? Is there some kind of SATA compatibility I should be looking for on a
new HD for a 2 year old MB (purchased in 2/2009)? I have checked and I do
have the latest version of the BIOS. Not opposed to swapping out the MB, but
would like a better idea of why it won't work. 

Thanks 

Chris Bodnar, MCSE
Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 - This message,
and any attachments to it, may contain information that is privileged,
confidential, and exempt from disclosure under applicable law. If the reader
of this message is not the intended recipient, you are notified that any
use, dissemination, distribution, copying, or communication of this message
is strictly prohibited. If you have received this message in error, please
notify the sender immediately by return e-mail and delete the message and
any attachments. Thank you. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Um, Ouch...

[VIPCS]

Which is a very good reason why the government should NOT embrace cloud
computing.  Imagine if the IRS used cloud computing.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: James Hill [mailto:james.h...@superamart.com.au] 
Sent: Wednesday, December 22, 2010 8:05 PM
To: NT System Admin Issues
Subject: RE: Um, Ouch...

No doubt we will see more of these issues as more and more move their data
to shared infrastructure and services.

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Thursday, 23 December 2010 11:04 AM
To: NT System Admin Issues
Subject: Um, Ouch...

http://www.computerworld.com/s/article/9202078/Microsoft_BPOS_cloud_service_
hit_with_data_breach?source=CTWNLE_nlt_pm_2010-12-22

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Um, Ouch...

[VIPCS]

The IRS does not print money, it only collects it.  The Federal Reserve
prints the money.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Jon Harris [mailto:jk.har...@gmail.com] 
Sent: Wednesday, December 22, 2010 10:14 PM
To: NT System Admin Issues
Subject: Re: Um, Ouch...

 

Knowing how things are going for the fed's at the moment are you sure that
hackers don't already own the IRS servers?  Some one must be getting all
that money they are printing.

 

Jon

On Wed, Dec 22, 2010 at 10:00 PM, Webster carlwebs...@gmail.com wrote:

And of course all that does is address physical security.  It says nothing
about all the other security aspects that need to be addressed.

I also don't think their armed guards will survive a direct hit from a
multi-ton bomb or missile! :)


Webster


 -Original Message-
 From: Webster [mailto:carlwebs...@gmail.com]
 Subject: RE: Um, Ouch...

 The IRS does use cloud computing.  Their data center is in an underground
 bunker capable of surviving a direct multi-ton bomb/missile hit, has 24/7
 armed security and runs on XenServer.


 Webster

  -Original Message-
  From: VIPCS [mailto:vi...@stny.rr.com]
  Subject: RE: Um, Ouch...
 
  Which is a very good reason why the government should NOT embrace
  cloud computing.  Imagine if the IRS used cloud computing.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: E-discovery Windows Tools

[VIPCS]

Windows Desktop search is a free add-in that works with Windows XP and
higher.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: System Manager [mailto:mgr...@whitman.edu] 
Sent: Tuesday, December 21, 2010 4:03 PM
To: NT System Admin Issues
Subject: OT: E-discovery Windows Tools

We need a tool to search through Windows file shares and local Windows PC
hard 
drives for E-Discovery.  It needs to search all the basic Office documents
along 
with PDFs and PSTs.  We are a SMB with no budget for this tool, so we need 
something that is free or inexpensive.  Something that works with Macintosh 
computers would be a plus.

--
Kevin Kelly
Director, Network Technology
Whitman College

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win7 local printer

[VIPCS]

You can still download content from Windows Update, even if WSUS is enabled,
unless there is a group policy blocking access.  Just be sure to configure
downloading recommended updates as well as critical ones.

On the WU site, you should see options for driver downloads.

You can also use the administrator catalog option for the WU site to find
the driver updates.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: James Kerr [mailto:cluster...@gmail.com] 
Sent: Tuesday, December 21, 2010 4:27 PM
To: NT System Admin Issues
Subject: Win7 local printer

Always a new thing with Win7. We are rolling out a Win7 box to the first 
user that has his own local printer. We can't find the drivers at HP for it 
(only goes up to Vista) and I know Win7 has some way of pulling drivers from

Windows Update. On the box it says that this is disabled by default. We use 
WSUS here for updates. Any ideas? I'm grasping at straws here and really 
need to get this done. Argh :-/

James (Being rushed to work on a million projects at the same time with no 
time to reseach and test a damn thing.) 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: part domain migration to SBS2008

[VIPCS]

You could use ldifde to export the user accounts and groups, edit the file
to remove any users and attributes that will not be imported), import into
the new domain, and then set the passwords manually or let users use their
desktop machines to change the password on first use (since the passwords
are blank, you would need to set the password policy to 0 length passwords
before the migration, otherwise the accounts will be disabled on import -
ldifde does not export passwords - then set your password policy back).

 

The computers (desktop PCs) would need to be removed from the old domain and
moved to the new.  You might be able to use netdom or the like to script the
process.

 

Jeffrey is not an Exchange administrator, but presumably there are Exchange
migration tools to move the mailboxes for you (the ldifde export will
contain the user's mailbox properties, but they may need to be updated to
work in the new domain).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Graeme Carstairs [mailto:loonyto...@gmail.com] 
Sent: Monday, December 20, 2010 10:31 AM
To: NT System Admin Issues
Subject: part domain migration to SBS2008

 

Hi List,

 

We have a client who used to be one company with a 2008 AD domain
group.local

 

The company has now split into two parts, and on part is retaining the
server and domain for company.local.

 

The other part is buying new servers and went with SBS 2008.

 

I know you can migrate 2003 SBS fully to SBS 2008, using ADMT and various
other migration tools, by microsoft, but this ends up switching of the
previous domain controllers, and moves the whole domain to SBS2008.

 

 

We are looking to move, the user accounts, files, mail boxes and PC's only
for the users in the 2nd part, and setup and entirely new AD domain, and
Exchange infrastructure, leaving the old one intact and functioning.

 

Is this do-able?

 

Any suggestions on where to look for help, as my google fu is lacking today
and i can only find whole domain migrations.

 

Thanks in advance.

 

Graeme



-- 
Good news everyone, you have just received and e-mail from me!

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win7 Windows 2003 domain

[VIPCS]

How is DNS configured between the DNS servers?  Forwarders in the child
domain?  Delegation?  Stub zone?

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Scott Schneider [mailto:sschnei...@inscapesolutions.com] 
Sent: Monday, December 20, 2010 10:23 AM
To: NT System Admin Issues
Subject: Win7 Windows 2003 domain

 

Got a real strange one. We have Windows 7 semi rolled out to our parent
domain mydomain.local without any issues. We are running Windows 2003
servers with SP2.

 

In a child domain otherlocation.mydomain.local,, Windows 7 machines behave
strangely. If I use the local DC as DNS,  without even joining the domain,
nslookup responds back with a response to the first query then the other 2
queries timeout. The same thing happens with pings. If I set the DNS to our
parent site, DNS and pings work fine. I viewed the packets with Wireshark.
The requests are going out from the Windows 7 machine OK, but after the
first request the packets aren't making it to the local server. Tried
different ports on the switch but can't seem to make heads or tails from
this one. Windows XP machines there work fine, nothing else squawking on the
DC. The Windows XP machine all use the local server for their DNS.

 

I have puzzled and puzzled till my puzzler was sore...

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: SysAdmin productivity tools

[VIPCS]

THIS Jeffrey is Mary Jane's husband (see signature below).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Ray [mailto:rz...@qwest.net] 
Sent: Monday, December 20, 2010 11:24 AM
To: NT System Admin Issues
Subject: RE: SysAdmin productivity tools

 

Ina Garten's husband.  

 

From: Carol Fee [mailto:c...@massbar.org] 
Sent: Monday, December 20, 2010 8:10 AM
To: NT System Admin Issues
Subject: RE: SysAdmin productivity tools

 

Who the heck is Jeffrey 

 

CFee

From: VIPCS [mailto:vi...@stny.rr.com] 
Sent: Friday, December 17, 2010 11:26 PM
To: NT System Admin Issues
Subject: RE: SysAdmin productivity tools

 

Jeffrey swears by Izarc instead of 7zip (it can open iso files, at least in
version 3.81), and the Windows Server 2003 Support Tools.  Windiff is one of
his most used tools for comparing files and directories.

 

Jeffrey also relies heavily on process monitor from sysinternals.  Also
imgburn is a great tool for creating iso files, and writing them to disks.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Tony Patton [mailto:apco...@gmail.com] 
Sent: Friday, December 17, 2010 11:52 AM
To: NT System Admin Issues
Subject: Re: RE: SysAdmin productivity tools

 

The first things to get installed on my boxes are:

Firefox
Notepad++
7zip
Mremote
WinDirStat
PStools
Winrar
Ultramon
Snagit
UltraISO

There are a few others that I can't remember but they are the main ones, I
use the last 4 so much that they were worth buying.

I tried Terminals but didn't like it for some reason that I can't now
remember, I think mremote had an issue on W7 x64 which was why I was
looking.

T

typed slowly on HTC Desire

On 17 Dec 2010 14:55, Michael B. Smith mich...@smithcons.com wrote:
 I used mremote for quite a while but switched to Terminals a year or so
ago and never looked back.
 
 Obviously, most of the tools from Sysinternals.
 
 And here is a list I refer to often when I need something:
 

http://www.hanselman.com/blog/ScottHanselmans2009UltimateDeveloperAndPowerU
sersToolListForWindows.aspx
 
 Regards,
 
 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com
 
 From: James Rankin [mailto:kz2...@googlemail.com]
 Sent: Friday, December 17, 2010 9:48 AM
 To: NT System Admin Issues
 Subject: SysAdmin productivity tools
 
 Just wondering what tools all the other admins out there find they
absolutely couldn't do without, as I've just been tidying up my list of
bookmarks in Firefox Sync that I take from job to job, and that I also keep
on a USB key with a copy of Firefox Portable. Insofar as tracking technical
documents, problem fixes and handy utilities, I find that a copy of my own
browser with the Sync Add-In is absolutely invaluable, and without it the
pooch would be proverbially screwed. (it's also really cool how FF Sync
tracks your browsing history from machine to machine, really handy when I am
hot-desking and fancy reading the sports news!) I also find MRemote
(www.mremote.orghttp://www.mremote.org) second-to-none in terms of
managing connections, RDP, ICA, SSH, VNC and http all supported, and I take
that from position to position.
 
 Just curious what other things sys admins find they couldn't imagine being
without, hopefully might find some other invaluable utilities out there.
 
 Cheers,
 
 
 
 JRR
 
 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftwa
re.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http

RE: SysAdmin productivity tools

[VIPCS]

This is Jeffrey posting to the list, all speculation to the contrary
notwithstanding.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Monday, December 20, 2010 11:51 AM
To: NT System Admin Issues
Subject: Re: SysAdmin productivity tools

 

But who are you?  Jeffrey or Mary Jane?

On Mon, Dec 20, 2010 at 11:28 AM, VIPCS vi...@stny.rr.com wrote:

THIS Jeffrey is Mary Jane's husband (see signature below).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Ray [mailto:rz...@qwest.net] 
Sent: Monday, December 20, 2010 11:24 AM 


To: NT System Admin Issues
Subject: RE: SysAdmin productivity tools

 

Ina Garten's husband.  

 

From: Carol Fee [mailto:c...@massbar.org] 
Sent: Monday, December 20, 2010 8:10 AM
To: NT System Admin Issues
Subject: RE: SysAdmin productivity tools

 

Who the heck is Jeffrey 

 

CFee

From: VIPCS [mailto:vi...@stny.rr.com] 
Sent: Friday, December 17, 2010 11:26 PM
To: NT System Admin Issues
Subject: RE: SysAdmin productivity tools

 

Jeffrey swears by Izarc instead of 7zip (it can open iso files, at least in
version 3.81), and the Windows Server 2003 Support Tools.  Windiff is one of
his most used tools for comparing files and directories.

 

Jeffrey also relies heavily on process monitor from sysinternals.  Also
imgburn is a great tool for creating iso files, and writing them to disks.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Tony Patton [mailto:apco...@gmail.com] 
Sent: Friday, December 17, 2010 11:52 AM
To: NT System Admin Issues
Subject: Re: RE: SysAdmin productivity tools

 

The first things to get installed on my boxes are:

Firefox
Notepad++
7zip
Mremote
WinDirStat
PStools
Winrar
Ultramon
Snagit
UltraISO

There are a few others that I can't remember but they are the main ones, I
use the last 4 so much that they were worth buying.

I tried Terminals but didn't like it for some reason that I can't now
remember, I think mremote had an issue on W7 x64 which was why I was
looking.

T

typed slowly on HTC Desire

On 17 Dec 2010 14:55, Michael B. Smith mich...@smithcons.com wrote:
 I used mremote for quite a while but switched to Terminals a year or so
ago and never looked back.
 
 Obviously, most of the tools from Sysinternals.
 
 And here is a list I refer to often when I need something:
 

http://www.hanselman.com/blog/ScottHanselmans2009UltimateDeveloperAndPowerU
sersToolListForWindows.aspx
 
 Regards,
 
 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com http://theessentialexchange.com/ 
 
 From: James Rankin [mailto:kz2...@googlemail.com]
 Sent: Friday, December 17, 2010 9:48 AM
 To: NT System Admin Issues
 Subject: SysAdmin productivity tools
 
 Just wondering what tools all the other admins out there find they
absolutely couldn't do without, as I've just been tidying up my list of
bookmarks in Firefox Sync that I take from job to job, and that I also keep
on a USB key with a copy of Firefox Portable. Insofar as tracking technical
documents, problem fixes and handy utilities, I find that a copy of my own
browser with the Sync Add-In is absolutely invaluable, and without it the
pooch would be proverbially screwed. (it's also really cool how FF Sync
tracks your browsing history from machine to machine, really handy when I am
hot-desking and fancy reading the sports news!) I also find MRemote
(www.mremote.org http://www.mremote.org/ http://www.mremote.org
http://www.mremote.org/ ) second-to-none in terms of managing
connections, RDP, ICA, SSH, VNC and http all supported, and I take that from
position to position.
 
 Just curious what other things sys admins find they couldn't imagine being
without, hopefully might find some other invaluable utilities out there.
 
 Cheers,
 
 
 
 JRR
 
 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftwa
re.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com

RE: Windows 2008 autoupdate

[VIPCS]

Exclusive of what the installation policy is, a WSUS administrator can
always force an installation by setting a deadline for installation in the
WSUS console, in which case, at/after the deadline, the server will install
those updates as if it had the download and automatically install policy had
been set.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] 
Sent: Monday, December 20, 2010 12:54 PM
To: NT System Admin Issues
Subject: RE: Windows 2008 autoupdate

 

I think it is grayed out because there is a group policy object setting it
for you. Double Check your GPO’s.

 

From: Jeff Bunting [mailto:bunting.j...@gmail.com] 
Sent: Monday, December 20, 2010 12:49 PM
To: NT System Admin Issues
Subject: Windows 2008 autoupdate

 

Had a Win 2008 Enterprise SP2 server update itself and reboot over the
weekend.  Problem is, as far as I can tell, it is not configured to
autoupdate.

Windows Update shows Download updates but let me choose whether to install
them.  

Local security policy shows everything under Windows update as not
configured.

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate does not exist.


Looking back in the event log, it does appear this was a scheduled event:

Installation Ready: The following updates are downloaded and ready for
installation. This computer is currently scheduled to install these updates
on ‎Sunday, ‎December ‎19, ‎2010 at 3:00 AM: 
- Windows Malicious Software Removal Tool - December 2010 (KB890830)
- Cumulative Security Update for Internet Explorer 8 for Windows Server 2008
(KB2416400)
- Security Update for Windows Server 2008 (KB2305420)
- Update for Windows Server 2008 (KB2443685)
- Update for Internet Explorer for Windows Server 2008 (KB2467659)
- Security Update for Windows Server 2008 (KB2442962)
- Security Update for Windows Server 2008 (KB2423089)
- Security Update for Windows Server 2008 (KB2296199)
- Security Update for Windows Server 2008 (KB2436673)

Beneath Download updates but let me choose whether to install them on the
Windows update settings it does show Sunday at 3:00 as the scheduled time,
but it is grayed out, presumably because it is set to let me choose whether
to install them.

Any ideas?  Am I looking in the correct places?

Jeffrey thanks you all, :-)

Jeff

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Printers

[VIPCS]

Jeffrey just set up a Windows Server 2008 R2 server with two Xerox printers.
For one printer (a WorkCenter printer), he was able to load the x32 drivers
as additional drivers directly on the server (on the sharing tab of the
printer) after the printer was installed. For the other printer (a Phaser),
he had to connect with an x32 client (Windows XP machine) as administrator
and load the x32 drivers from that machine.

 

So yes, it can be done, but it depends on the specific printer and drivers
available as to how to do it.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Kelli Sterley [mailto:kjsterley.li...@gmail.com] 
Sent: Monday, December 20, 2010 2:20 PM
To: NT System Admin Issues
Subject: Printers

 

I have just started with a company and have been challenged to fix some
issues they have been having.  Here is one issue... 


They have a new server running Win2008 64 bit.  They have installed a bunch
of printers using the drivers from the manufacturers but these are 64 bit
drivers.  They have shared the printers to the general user (all 32 bit
users) and no one can print.  Is it possible to have printers on a 64 bit
server and share them to the 32 bit user?  The guy before me said he could
not get the 32 bit drivers to install on the server and so here I am. 

 

I just want to make sure it is possible before I spend hours trying to get
it to work.

 

Any help would be great!  Thanks!

 

Kelli

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Windows 2008 autoupdate

[VIPCS]

If the server is a member of a domain, run the Resultant Set of Policies
snap-in to see what domain GPOs are applied to your server.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Jeff Bunting [mailto:bunting.j...@gmail.com] 
Sent: Monday, December 20, 2010 2:36 PM
To: NT System Admin Issues
Subject: Re: Windows 2008 autoupdate

 

Let me clarify - only the schedule is grayed out.  I am free to change the
update settings (which will enable changing the schedule, if I select an
auto-install).

This is a hosted environment, and I don't have domain credentials to check
GPOs for this one, only local admin.  
If a GPO is setting this, I assume evidence of such would be visible on the
local system somewhere? 

I thought GPO just set the appropriate values in

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate

has this changed? (or am I incorrect?)

Jeff

On Mon, Dec 20, 2010 at 12:53 PM, Kennedy, Jim
kennedy...@elyriaschools.org wrote:

I think it is grayed out because there is a group policy object setting it
for you. Double Check your GPO’s.

 

From: Jeff Bunting [mailto:bunting.j...@gmail.com] 
Sent: Monday, December 20, 2010 12:49 PM
To: NT System Admin Issues
Subject: Windows 2008 autoupdate

 

Had a Win 2008 Enterprise SP2 server update itself and reboot over the
weekend.  Problem is, as far as I can tell, it is not configured to
autoupdate.

Windows Update shows Download updates but let me choose whether to install
them.  

Local security policy shows everything under Windows update as not
configured.

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate does not exist.


Looking back in the event log, it does appear this was a scheduled event:

Installation Ready: The following updates are downloaded and ready for
installation. This computer is currently scheduled to install these updates
on ‎Sunday, ‎December ‎19, ‎2010 at 3:00 AM: 
- Windows Malicious Software Removal Tool - December 2010 (KB890830)
- Cumulative Security Update for Internet Explorer 8 for Windows Server 2008
(KB2416400)
- Security Update for Windows Server 2008 (KB2305420)
- Update for Windows Server 2008 (KB2443685)
- Update for Internet Explorer for Windows Server 2008 (KB2467659)
- Security Update for Windows Server 2008 (KB2442962)
- Security Update for Windows Server 2008 (KB2423089)
- Security Update for Windows Server 2008 (KB2296199)
- Security Update for Windows Server 2008 (KB2436673)

Beneath Download updates but let me choose whether to install them on the
Windows update settings it does show Sunday at 3:00 as the scheduled time,
but it is grayed out, presumably because it is set to let me choose whether
to install them.

Any ideas?  Am I looking in the correct places?

Jeffrey thanks you all, :-)

Jeff

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Server 2003, what is using disk space on C:

[VIPCS]

Here are some things that Jeffrey does:

 

1)  Check the directories under documents and settings and delete any
large files that can be deleted (i.e., temp files, and the IE cache; set the
IE cache size to 10MB for users on the server).

2)  Delete any uninstall directories under the Windows folder for
Microsoft updates older than a year, and any service pack uninstall folders;
the likelihood of uninstalling any of these updates after a year is small.

3)  Delete the files under %windir%\softwaredistribution\downloads
(these are installed Microsoft updates, but for some reason, systems cache
them after installation).

4)  Enable folder compression for any application and data folders on
the partition.

5)  Move page files to a different partition.  It will not improve or
degrade performance (because the partitions are part of the same physical
RAID array), but it will free up additional disk space.  You can also set
the system to create a small dump file, which reduces the size of the page
file required for that purpose on the c: partition.

 

If you have much free space on the d: partition, you might want to consider
using a partitioning utility to reallocate more space to the C: partition;
however, Jeffrey has never done this on a production system (except by using
tools such as NetBackup to migrate the configuration to a new server, which
is not what you want to do).

 

As for the disk space report inconsistency, you might want to look at some
rootkit utilities (such as gmer) to check for files stored on the system
that are not being reported or seen using the normal Windows tools.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Hank . [mailto:hgedr...@gmail.com] 
Sent: Sunday, December 19, 2010 12:57 PM
To: NT System Admin Issues
Subject: Server 2003, what is using disk space on C:

 

I am working at a new client and one of their servers was reporting low disk
space on c:

It is a PE1950 with a PERC controller with a RAID5 array and one virtual
disk split into 2 partitions. The OS is server 2003 r2.

I cleaned up temp files and redirected IIS logs to the other partition and
it now has 10% free space. The pagefile is 2Gb that will free up a little
more but I didn't have time for another reboot.

Diskmanagement reports that Disk0 is basic and 408.37 Gb , c: 31.86,
e:376.51 Gb. It only shows two partitions.

But in the upper section it reports c: as 16.8 Gb. My computer also shows
the same.

Shadowcopy was disabled. I ran Treesize and it reported the volume as 16.8
Gb and didn't show anything unusual.

Any suggestions appreciated. 



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Server 2003, what is using disk space on C:

[VIPCS]

The Bates Motel.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Sunday, December 19, 2010 9:20 PM
To: NT System Admin Issues
Subject: Re: Server 2003, what is using disk space on C:

I don't believe Jeffrey exists.

I think he's a figment of your imagination, and that you make him up
to bolster your apparent authority, as you are not confident in your
own gender abilities.

Or perhaps you are psychotic - in which case, tell me the name of your
motel, and I'll never stop there, I promise.

Kurt

On Sun, Dec 19, 2010 at 12:51, VIPCS vi...@stny.rr.com wrote:
 Here are some things that Jeffrey does:



 1)  Check the directories under “documents and settings” and delete
any
 large files that can be deleted (i.e., temp files, and the IE cache; set
the
 IE cache size to 10MB for users on the server).

 2)  Delete any uninstall directories under the Windows folder for
 Microsoft updates older than a year, and any service pack uninstall
folders;
 the likelihood of uninstalling any of these updates after a year is small.

 3)  Delete the files under %windir%\softwaredistribution\downloads
 (these are installed Microsoft updates, but for some reason, systems cache
 them after installation).

 4)  Enable folder compression for any application and data folders on
 the partition.

 5)  Move page files to a different partition.  It will not improve or
 degrade performance (because the partitions are part of the same physical
 RAID array), but it will free up additional disk space.  You can also set
 the system to create a small dump file, which reduces the size of the page
 file required for that purpose on the c: partition.



 If you have much free space on the d: partition, you might want to
consider
 using a partitioning utility to reallocate more space to the C: partition;
 however, Jeffrey has never done this on a production system (except by
using
 tools such as NetBackup to migrate the configuration to a new server,
which
 is not what you want to do).



 As for the disk space report inconsistency, you might want to look at some
 rootkit utilities (such as gmer) to check for files stored on the system
 that are not being reported or seen using the normal Windows tools.



 Sincerely,



 Jeffrey and Mary Jane Harris

 VIPCS



 

 From: Hank . [mailto:hgedr...@gmail.com]
 Sent: Sunday, December 19, 2010 12:57 PM
 To: NT System Admin Issues
 Subject: Server 2003, what is using disk space on C:



 I am working at a new client and one of their servers was reporting low
disk
 space on c:

 It is a PE1950 with a PERC controller with a RAID5 array and one virtual
 disk split into 2 partitions. The OS is server 2003 r2.

 I cleaned up temp files and redirected IIS logs to the other partition and
 it now has 10% free space. The pagefile is 2Gb that will free up a little
 more but I didn't have time for another reboot.

 Diskmanagement reports that Disk0 is basic and 408.37 Gb , c: 31.86,
 e:376.51 Gb. It only shows two partitions.

 But in the upper section it reports c: as 16.8 Gb. My computer also
shows
 the same.

 Shadowcopy was disabled. I ran Treesize and it reported the volume as 16.8
 Gb and didn't show anything unusual.

 Any suggestions appreciated.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Server 2003, what is using disk space on C:

[VIPCS]

If you look back through the posts from this address, not all of them
mention Jeffrey in them.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Sunday, December 19, 2010 10:25 PM
To: NT System Admin Issues
Subject: RE: Server 2003, what is using disk space on C:

Now does a response like that really fit your profile of servitude Mary? I
presume that is your response as Jeffrey didn't says
What is this world coming to, I can no longer expect _anything_ anymore?

Joey runs and hides under a big rock:)


-Original Message-
From: VIPCS [mailto:vi...@stny.rr.com] 
Sent: Sunday, December 19, 2010 8:15 PM
To: NT System Admin Issues
Subject: RE: Server 2003, what is using disk space on C:

The Bates Motel.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Sunday, December 19, 2010 9:20 PM
To: NT System Admin Issues
Subject: Re: Server 2003, what is using disk space on C:

I don't believe Jeffrey exists.

I think he's a figment of your imagination, and that you make him up to
bolster your apparent authority, as you are not confident in your own gender
abilities.

Or perhaps you are psychotic - in which case, tell me the name of your
motel, and I'll never stop there, I promise.

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Server 2003, what is using disk space on C:

[VIPCS]

It was.  However, if Jeffrey is a Turing Machine, you will never know.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: James Hill [mailto:james.h...@superamart.com.au] 
Sent: Sunday, December 19, 2010 10:25 PM
To: NT System Admin Issues
Subject: RE: Server 2003, what is using disk space on C:

Presumably.  Depends on whether that was what Jeffrey said.

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Monday, 20 December 2010 1:25 PM
To: NT System Admin Issues
Subject: Re: Server 2003, what is using disk space on C:

The Master has spoken, I guess...

On Sun, Dec 19, 2010 at 19:14, VIPCS vi...@stny.rr.com wrote:
 The Bates Motel.

 Sincerely,

 Jeffrey and Mary Jane Harris
 VIPCS

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Sunday, December 19, 2010 9:20 PM
 To: NT System Admin Issues
 Subject: Re: Server 2003, what is using disk space on C:

 I don't believe Jeffrey exists.

 I think he's a figment of your imagination, and that you make him up 
 to bolster your apparent authority, as you are not confident in your 
 own gender abilities.

 Or perhaps you are psychotic - in which case, tell me the name of your 
 motel, and I'll never stop there, I promise.

 Kurt

 On Sun, Dec 19, 2010 at 12:51, VIPCS vi...@stny.rr.com wrote:
 Here are some things that Jeffrey does:



 1)  Check the directories under “documents and settings” and 
 delete
 any
 large files that can be deleted (i.e., temp files, and the IE cache; 
 set
 the
 IE cache size to 10MB for users on the server).

 2)  Delete any uninstall directories under the Windows folder for 
 Microsoft updates older than a year, and any service pack uninstall
 folders;
 the likelihood of uninstalling any of these updates after a year is
small.

 3)  Delete the files under 
 %windir%\softwaredistribution\downloads
 (these are installed Microsoft updates, but for some reason, systems 
 cache them after installation).

 4)  Enable folder compression for any application and data 
 folders on the partition.

 5)  Move page files to a different partition.  It will not 
 improve or degrade performance (because the partitions are part of 
 the same physical RAID array), but it will free up additional disk 
 space.  You can also set the system to create a small dump file, 
 which reduces the size of the page file required for that purpose on the
c: partition.



 If you have much free space on the d: partition, you might want to
 consider
 using a partitioning utility to reallocate more space to the C: 
 partition; however, Jeffrey has never done this on a production 
 system (except by
 using
 tools such as NetBackup to migrate the configuration to a new server,
 which
 is not what you want to do).



 As for the disk space report inconsistency, you might want to look at 
 some rootkit utilities (such as gmer) to check for files stored on 
 the system that are not being reported or seen using the normal Windows
tools.



 Sincerely,



 Jeffrey and Mary Jane Harris

 VIPCS



 

 From: Hank . [mailto:hgedr...@gmail.com]
 Sent: Sunday, December 19, 2010 12:57 PM
 To: NT System Admin Issues
 Subject: Server 2003, what is using disk space on C:



 I am working at a new client and one of their servers was reporting 
 low
 disk
 space on c:

 It is a PE1950 with a PERC controller with a RAID5 array and one 
 virtual disk split into 2 partitions. The OS is server 2003 r2.

 I cleaned up temp files and redirected IIS logs to the other 
 partition and it now has 10% free space. The pagefile is 2Gb that 
 will free up a little more but I didn't have time for another reboot.

 Diskmanagement reports that Disk0 is basic and 408.37 Gb , c: 31.86,
 e:376.51 Gb. It only shows two partitions.

 But in the upper section it reports c: as 16.8 Gb. My computer also
 shows
 the same.

 Shadowcopy was disabled. I ran Treesize and it reported the volume as 
 16.8 Gb and didn't show anything unusual.

 Any suggestions appreciated.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana

RE: RE: SysAdmin productivity tools

[VIPCS]

Jeffrey swears by Izarc instead of 7zip (it can open iso files, at least in
version 3.81), and the Windows Server 2003 Support Tools.  Windiff is one of
his most used tools for comparing files and directories.

 

Jeffrey also relies heavily on process monitor from sysinternals.  Also
imgburn is a great tool for creating iso files, and writing them to disks.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Tony Patton [mailto:apco...@gmail.com] 
Sent: Friday, December 17, 2010 11:52 AM
To: NT System Admin Issues
Subject: Re: RE: SysAdmin productivity tools

 

The first things to get installed on my boxes are:

Firefox
Notepad++
7zip
Mremote
WinDirStat
PStools
Winrar
Ultramon
Snagit
UltraISO

There are a few others that I can't remember but they are the main ones, I
use the last 4 so much that they were worth buying.

I tried Terminals but didn't like it for some reason that I can't now
remember, I think mremote had an issue on W7 x64 which was why I was
looking.

T

typed slowly on HTC Desire

On 17 Dec 2010 14:55, Michael B. Smith mich...@smithcons.com wrote:
 I used mremote for quite a while but switched to Terminals a year or so
ago and never looked back.
 
 Obviously, most of the tools from Sysinternals.
 
 And here is a list I refer to often when I need something:
 

http://www.hanselman.com/blog/ScottHanselmans2009UltimateDeveloperAndPowerU
sersToolListForWindows.aspx
 
 Regards,
 
 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com
 
 From: James Rankin [mailto:kz2...@googlemail.com]
 Sent: Friday, December 17, 2010 9:48 AM
 To: NT System Admin Issues
 Subject: SysAdmin productivity tools
 
 Just wondering what tools all the other admins out there find they
absolutely couldn't do without, as I've just been tidying up my list of
bookmarks in Firefox Sync that I take from job to job, and that I also keep
on a USB key with a copy of Firefox Portable. Insofar as tracking technical
documents, problem fixes and handy utilities, I find that a copy of my own
browser with the Sync Add-In is absolutely invaluable, and without it the
pooch would be proverbially screwed. (it's also really cool how FF Sync
tracks your browsing history from machine to machine, really handy when I am
hot-desking and fancy reading the sports news!) I also find MRemote
(www.mremote.orghttp://www.mremote.org) second-to-none in terms of
managing connections, RDP, ICA, SSH, VNC and http all supported, and I take
that from position to position.
 
 Just curious what other things sys admins find they couldn't imagine being
without, hopefully might find some other invaluable utilities out there.
 
 Cheers,
 
 
 
 JRR
 
 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftwa
re.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System Tool 2011 malware

[VIPCS]

Rad.msn.com (as well as doubleclick) were social engineered last week to
release malware (see
http://www.techeye.net/security/doubleclick-and-msn-serve-up-malware).

(Since we run our own DNS servers at home, Jeffrey added a zone for
rad.msn.com to block any content from that domain.  We previously had a zone
created for doubleclick.)

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: James Kerr [mailto:cluster...@gmail.com] 
Sent: Wednesday, December 15, 2010 8:42 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

I had a user get that crap on his PC on Tuesday and it disabled Vipre 
Enterprise also. The user swears he didn't click on anything and was on 
MSNBCs site. He was about to get a new PC anyway so I'm not bothering to 
clean. Its not the first time that user got one of those fake AVs, or the 
second for that matter.

James



- Original Message - 
From: John Aldrich jaldr...@blueridgecarpet.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, December 15, 2010 5:21 AM
Subject: Re: System Tool 2011 malware


 On Tue December 14 2010, you wrote:
 Hi John,

 User know where they were surfing when it hit?

 Samples can be submitted here:

 http://www.sunbeltsecurity.com/threat

 If you want assistance with removal check the box that says I need help
 . Someone will be happy to help.

 We're releasing defs something like 13x/day now so shouldn't be too long
 to get updates for that critter.

 Thanks, Tammy. I was more concerned that neither Vipre Rescue nor Vipre
 Home caught it...what's more, it disabled Vipre Home. I'll see if I can 
 get
 access to the zipped sample so I can resubmit.

 Thanks!

 -- 
 Thanks,
 John Aldrich
 Blueridge Industries
 IT Manager

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System Tool 2011 malware

[VIPCS]

Jeffrey had to fix malware on a user's system that infected the keyboard
drivers, and prevent any keyboard from being used.  Combofix was the only
tool that detected and fixed the issue (Jeffrey tried Vipre, Vipre Rescue,
MalwareBytes, and the Microsoft Malicious Software Removal Tool).

That Vipre never even detected the malware concerned Jeffrey more than
anything else, even though Jeffrey knew it was malware because of numerous
reports on the Internet of other users with the same issue.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Kramer, Jack [mailto:jack.kra...@ur.msu.edu] 
Sent: Wednesday, December 15, 2010 11:07 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Don't forget combofix - taken care of some things that can't be cleaned
otherwise.


Jack Kramer
Computer Systems Specialist
University Relations, Michigan State University
w: 517-884-1231 / c: 248-635-4955




On 12/15/10 10:37 AM, John Aldrich jaldr...@blueridgecarpet.com wrote:

Thanks for the info, guys... I downloaded it and will start using it as
part
of my regular troubleshooting/cleaning toolkit. :-)



From: Scott Weber [mailto:swe...@thanksal.com]
Sent: Wednesday, December 15, 2010 10:24 AM
To: NT System Admin Issues
Subject: RE: System Tool 2011 malware

James,
Recently (this past weekend) found out about secunia PSI and I like it.

+1

Scott


From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Wednesday, December 15, 2010 7:53 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Secunia PSI FTWI've got that down as part of the standard toolset I
put on home users' PCs now. It's also not too hard to use, which is a big
plus for these kind of jobs
On 15 December 2010 13:50, Erik Goldoff egold...@gmail.com wrote:
I wonder the status of patching on his system, not just Microsoft but
Adobe
and other applications.  I've seen a bit of these fake av type malware
gems
arrive via suspected 'drive by' website visits, possibly from hitting
flash/shockwave vulnerabilities on linked animated advertisements.


Erik Goldoff
IT  Consultant
Systems, Networks,  Security

'  Security is an ongoing process, not a one time event ! '



-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, December 15, 2010 8:42 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware
I had a user get that crap on his PC on Tuesday and it disabled Vipre
Enterprise also. The user swears he didn't click on anything and was on
MSNBCs site. He was about to get a new PC anyway so I'm not bothering to
clean. Its not the first time that user got one of those fake AVs, or the
second for that matter.

James

- Original Message -
From: John Aldrich jaldr...@blueridgecarpet.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, December 15, 2010 5:21 AM
Subject: Re: System Tool 2011 malware
 On Tue December 14 2010, you wrote:
 Hi John,

 User know where they were surfing when it hit?

 Samples can be submitted here:

 http://www.sunbeltsecurity.com/threat

 If you want assistance with removal check the box that says I need
help
 . Someone will be happy to help.

 We're releasing defs something like 13x/day now so shouldn't be too
long
 to get updates for that critter.

 Thanks, Tammy. I was more concerned that neither Vipre Rescue nor Vipre
 Home caught it...what's more, it disabled Vipre Home. I'll see if I can
 get
 access to the zipped sample so I can resubmit.

 Thanks!

 --
 Thanks,
 John Aldrich
 Blueridge Industries
 IT Manager

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke
such
a question.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt

RE: 2K8R2 DNS anomaly

[VIPCS]

Jeffrey just tried an nslookup query (results below) on two WS2K8 servers
(one is R2) on two different networks and both resolved (both are DCs with
DNS installed):

 

Non-authoritative answer:

Name:www.insead.edu

Address:  213.182.38.52

 

Is it possible an upstream DNS forwarder is blocking access?

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: m b [mailto:midphan12...@gmail.com] 
Sent: Wednesday, December 15, 2010 11:15 AM
To: NT System Admin Issues
Subject: 2K8R2 DNS anomaly

 

Within our forest, all domain controllers are DNS servers.  We've been
working to upgrade from 2K3 to 2K8.  Most of those that are upgraded are
2K8R2, while a few are just 2K8.

 

I have heard some reports from users that they were unable to access certain
websites that they were able to access from home.  Today's example is
www.insead.edu http://www.insead.edu/ .

 

When I do an nslookup against any of our 2K8R2 DNS servers, the lookup fails
to resolve.  If I do that same lookup against any 2K3 or 2K8 DNS server, it
is successful.

 

I'm not seeing any common event log errors/warnings among the 2K8R2 DNS
servers.  My only hunch is root hints.  Anyone experienced something
similar?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System Tool 2011 malware

[VIPCS]

Because it is a shared account, Jeffrey does indeed talk in the third person
(if he used I, you would not know who the I was, now would you *grin*?).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Sean Martin [mailto:seanmarti...@gmail.com] 
Sent: Wednesday, December 15, 2010 1:25 PM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

 

I'm quite sure this is a husband and wife sharing the same account, but I
can't help but imagine Jeffrey talking in the third person. :)

 

Happy Holidays!

 

- Sean

On Wed, Dec 15, 2010 at 7:51 AM, VIPCS vi...@stny.rr.com wrote:

Jeffrey had to fix malware on a user's system that infected the keyboard
drivers, and prevent any keyboard from being used.  Combofix was the only
tool that detected and fixed the issue (Jeffrey tried Vipre, Vipre Rescue,
MalwareBytes, and the Microsoft Malicious Software Removal Tool).

That Vipre never even detected the malware concerned Jeffrey more than
anything else, even though Jeffrey knew it was malware because of numerous
reports on the Internet of other users with the same issue.


Sincerely,

Jeffrey and Mary Jane Harris
VIPCS


-Original Message-

From: Kramer, Jack [mailto:jack.kra...@ur.msu.edu]
Sent: Wednesday, December 15, 2010 11:07 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Don't forget combofix - taken care of some things that can't be cleaned
otherwise.


Jack Kramer
Computer Systems Specialist
University Relations, Michigan State University
w: 517-884-1231 / c: 248-635-4955




On 12/15/10 10:37 AM, John Aldrich jaldr...@blueridgecarpet.com wrote:

Thanks for the info, guys... I downloaded it and will start using it as
part
of my regular troubleshooting/cleaning toolkit. :-)



From: Scott Weber [mailto:swe...@thanksal.com]
Sent: Wednesday, December 15, 2010 10:24 AM
To: NT System Admin Issues
Subject: RE: System Tool 2011 malware

James,
Recently (this past weekend) found out about secunia PSI and I like it.

+1

Scott


From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Wednesday, December 15, 2010 7:53 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Secunia PSI FTWI've got that down as part of the standard toolset I
put on home users' PCs now. It's also not too hard to use, which is a big
plus for these kind of jobs
On 15 December 2010 13:50, Erik Goldoff egold...@gmail.com wrote:
I wonder the status of patching on his system, not just Microsoft but
Adobe
and other applications.  I've seen a bit of these fake av type malware
gems
arrive via suspected 'drive by' website visits, possibly from hitting
flash/shockwave vulnerabilities on linked animated advertisements.


Erik Goldoff
IT  Consultant
Systems, Networks,  Security

'  Security is an ongoing process, not a one time event ! '



-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, December 15, 2010 8:42 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware
I had a user get that crap on his PC on Tuesday and it disabled Vipre
Enterprise also. The user swears he didn't click on anything and was on
MSNBCs site. He was about to get a new PC anyway so I'm not bothering to
clean. Its not the first time that user got one of those fake AVs, or the
second for that matter.

James

- Original Message -
From: John Aldrich jaldr...@blueridgecarpet.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, December 15, 2010 5:21 AM
Subject: Re: System Tool 2011 malware
 On Tue December 14 2010, you wrote:
 Hi John,

 User know where they were surfing when it hit?

 Samples can be submitted here:

 http://www.sunbeltsecurity.com/threat

 If you want assistance with removal check the box that says I need
help
 . Someone will be happy to help.

 We're releasing defs something like 13x/day now so shouldn't be too
long
 to get updates for that critter.

 Thanks, Tammy. I was more concerned that neither Vipre Rescue nor Vipre
 Home caught it...what's more, it disabled Vipre Home. I'll see if I can
 get
 access to the zipped sample so I can resubmit.

 Thanks!

 --
 Thanks,
 John Aldrich
 Blueridge Industries
 IT Manager

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise

RE: System Tool 2011 malware

[VIPCS]

Jeffrey was confused by your not buying it comment.  No personal slights
were intended.  Each of the other programs (except Vipre) found something,
but it was left to combofix to actually resolve the basic issue of the
keyboard not working.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Wednesday, December 15, 2010 2:23 PM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

 

I didnt claim they are the end-all anything, and I certainly dont say so
about Vipre - but Malwarebytes outshines ComboFix.  ComboFix is faster, but
I have not found it to be more reliable in any provable sense.  In fact, my
logs show the opposite.

I also didnt claim anyone should have a static toolbag, or that ComboFix
didnt fix the problem as described.  I was raising the issue that there were
and perhaps still are other problems on that system that are preventing
Malwarebytes from operating properly; which is something I often find on
systems that are not running the registered (real-time) version of
Malwarebytes.

--
ME2

 

 





On Wed, Dec 15, 2010 at 11:09 AM, VIPCS vi...@stny.rr.com wrote:

As Jeffrey recalls, he had to rename the MB executable just to allow it to
run.  In any case, even if MB was blocked from operating optimally, you
still cannot argue that combofix actually fixed the problem.

 

Jeffrey raised this issue with Vipre support and they said they said the
same thing - Vipre and MB are not the be-all and end-all for all malware,
and sometimes specialized tools (such as combofix) are essential for some
malware removal.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Wednesday, December 15, 2010 2:02 PM


To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

 

Malwarebytes no, but ComboFix yes?  I'm not buying it.  Something else was
happening that broke or blocked Mb from updating.

--
ME2

 

 

 

On Wed, Dec 15, 2010 at 8:51 AM, VIPCS vi...@stny.rr.com wrote:

Jeffrey had to fix malware on a user's system that infected the keyboard
drivers, and prevent any keyboard from being used.  Combofix was the only
tool that detected and fixed the issue (Jeffrey tried Vipre, Vipre Rescue,
MalwareBytes, and the Microsoft Malicious Software Removal Tool).

That Vipre never even detected the malware concerned Jeffrey more than
anything else, even though Jeffrey knew it was malware because of numerous
reports on the Internet of other users with the same issue.


Sincerely,

Jeffrey and Mary Jane Harris
VIPCS


-Original Message-

From: Kramer, Jack [mailto:jack.kra...@ur.msu.edu]
Sent: Wednesday, December 15, 2010 11:07 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Don't forget combofix - taken care of some things that can't be cleaned
otherwise.


Jack Kramer
Computer Systems Specialist
University Relations, Michigan State University
w: 517-884-1231 / c: 248-635-4955




On 12/15/10 10:37 AM, John Aldrich jaldr...@blueridgecarpet.com wrote:

Thanks for the info, guys... I downloaded it and will start using it as
part
of my regular troubleshooting/cleaning toolkit. :-)



From: Scott Weber [mailto:swe...@thanksal.com]
Sent: Wednesday, December 15, 2010 10:24 AM
To: NT System Admin Issues
Subject: RE: System Tool 2011 malware

James,
Recently (this past weekend) found out about secunia PSI and I like it.

+1

Scott


From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Wednesday, December 15, 2010 7:53 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Secunia PSI FTWI've got that down as part of the standard toolset I
put on home users' PCs now. It's also not too hard to use, which is a big
plus for these kind of jobs
On 15 December 2010 13:50, Erik Goldoff egold...@gmail.com wrote:
I wonder the status of patching on his system, not just Microsoft but
Adobe
and other applications.  I've seen a bit of these fake av type malware
gems
arrive via suspected 'drive by' website visits, possibly from hitting
flash/shockwave vulnerabilities on linked animated advertisements.


Erik Goldoff
IT  Consultant
Systems, Networks,  Security

'  Security is an ongoing process, not a one time event ! '



-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, December 15, 2010 8:42 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware
I had a user get that crap on his PC on Tuesday and it disabled Vipre
Enterprise also. The user swears he didn't click on anything and was on
MSNBCs site. He was about to get a new PC anyway so I'm not bothering to
clean. Its not the first time that user got one of those fake AVs, or the
second for that matter.

James

- Original Message -
From: John Aldrich jaldr...@blueridgecarpet.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, December 15, 2010 5:21

RE: System Tool 2011 malware

[VIPCS]

As Jeffrey recalls, he had to rename the MB executable just to allow it to
run.  In any case, even if MB was blocked from operating optimally, you
still cannot argue that combofix actually fixed the problem.

 

Jeffrey raised this issue with Vipre support and they said they said the
same thing - Vipre and MB are not the be-all and end-all for all malware,
and sometimes specialized tools (such as combofix) are essential for some
malware removal.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Wednesday, December 15, 2010 2:02 PM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

 

Malwarebytes no, but ComboFix yes?  I'm not buying it.  Something else was
happening that broke or blocked Mb from updating.

--
ME2

 

 





On Wed, Dec 15, 2010 at 8:51 AM, VIPCS vi...@stny.rr.com wrote:

Jeffrey had to fix malware on a user's system that infected the keyboard
drivers, and prevent any keyboard from being used.  Combofix was the only
tool that detected and fixed the issue (Jeffrey tried Vipre, Vipre Rescue,
MalwareBytes, and the Microsoft Malicious Software Removal Tool).

That Vipre never even detected the malware concerned Jeffrey more than
anything else, even though Jeffrey knew it was malware because of numerous
reports on the Internet of other users with the same issue.


Sincerely,

Jeffrey and Mary Jane Harris
VIPCS


-Original Message-

From: Kramer, Jack [mailto:jack.kra...@ur.msu.edu]
Sent: Wednesday, December 15, 2010 11:07 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Don't forget combofix - taken care of some things that can't be cleaned
otherwise.


Jack Kramer
Computer Systems Specialist
University Relations, Michigan State University
w: 517-884-1231 / c: 248-635-4955




On 12/15/10 10:37 AM, John Aldrich jaldr...@blueridgecarpet.com wrote:

Thanks for the info, guys... I downloaded it and will start using it as
part
of my regular troubleshooting/cleaning toolkit. :-)



From: Scott Weber [mailto:swe...@thanksal.com]
Sent: Wednesday, December 15, 2010 10:24 AM
To: NT System Admin Issues
Subject: RE: System Tool 2011 malware

James,
Recently (this past weekend) found out about secunia PSI and I like it.

+1

Scott


From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Wednesday, December 15, 2010 7:53 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

Secunia PSI FTWI've got that down as part of the standard toolset I
put on home users' PCs now. It's also not too hard to use, which is a big
plus for these kind of jobs
On 15 December 2010 13:50, Erik Goldoff egold...@gmail.com wrote:
I wonder the status of patching on his system, not just Microsoft but
Adobe
and other applications.  I've seen a bit of these fake av type malware
gems
arrive via suspected 'drive by' website visits, possibly from hitting
flash/shockwave vulnerabilities on linked animated advertisements.


Erik Goldoff
IT  Consultant
Systems, Networks,  Security

'  Security is an ongoing process, not a one time event ! '



-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, December 15, 2010 8:42 AM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware
I had a user get that crap on his PC on Tuesday and it disabled Vipre
Enterprise also. The user swears he didn't click on anything and was on
MSNBCs site. He was about to get a new PC anyway so I'm not bothering to
clean. Its not the first time that user got one of those fake AVs, or the
second for that matter.

James

- Original Message -
From: John Aldrich jaldr...@blueridgecarpet.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, December 15, 2010 5:21 AM
Subject: Re: System Tool 2011 malware
 On Tue December 14 2010, you wrote:
 Hi John,

 User know where they were surfing when it hit?

 Samples can be submitted here:

 http://www.sunbeltsecurity.com/threat

 If you want assistance with removal check the box that says I need
help
 . Someone will be happy to help.

 We're releasing defs something like 13x/day now so shouldn't be too
long
 to get updates for that critter.

 Thanks, Tammy. I was more concerned that neither Vipre Rescue nor Vipre
 Home caught it...what's more, it disabled Vipre Home. I'll see if I can
 get
 access to the zipped sample so I can resubmit.

 Thanks!

 --
 Thanks,
 John Aldrich
 Blueridge Industries
 IT Manager

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click

RE: System Tool 2011 malware

[VIPCS]

Or just create a shortcut to %windir%\system32\drives\etc\hosts, and save it
with your anti-malware toolkit files.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Wednesday, December 15, 2010 2:34 PM
To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

 

I would recommend other tools for startup scanning.  I mean this with all
sincerity, compared to other tools you can scan your system with, SBSD is a
waste of scanning time.  Its not top of the food chain anymore.  Also,
Tea-Timer (if utilized) is a major performance drag on your system, and its
not even a system service.  Ultimately, the security you get from SBSD
should not be trusted.

I think that autoruns would be a better tool for startup inspection - Its
fast and well organized.  A simple script can quickly open the hosts file
for you on any system. Scripts could also automate basic inspecting of the
hosts file contents being altered.

--
ME2

 

 





On Wed, Dec 15, 2010 at 11:21 AM, John Aldrich
jaldr...@blueridgecarpet.com wrote:

Well, SpyBot has a couple things going for it that the others don't - the
ability to see what's in the startup and the hosts file. Sure there are
other apps that'll install a hosts file for you, but it's really easy to do
with SpyBot, plus it's easy to see what's in the startup that *doesn't* show
up with MSCONFIG or simply looking at the startup folder in the start
menu. I could tell that something was auto-starting, but I couldn't see what
it was without loading up SpyBot. :-)

I'll grant you that other things may do a better job of cleaning, but I
think it's still a useful tool.




From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]

Sent: Wednesday, December 15, 2010 1:37 PM

To: NT System Admin Issues
Subject: Re: System Tool 2011 malware

SAFE MODE, SAFE MODE, SAFE MODE...

Forget SBSD, it sucks these days.  Malwarebytes, ESET, and Kasperky.  Use
those.  You'll get *everything*.

Use Live CD's if at all possible.  But, if you do, be aware of NTFS perms.

--
ME2




On Tue, Dec 14, 2010 at 7:47 PM, Steve Ens stevey...@gmail.com wrote:
Hey John
Are you asking how to fix it, or why Vipre didn't catch it?  If you're
trying to fix it, then logon as the administrator (or something other
than what the infected profile) and then run the tools...full scans.
Steve



On Tuesday, December 14, 2010, John Aldrich

jaldr...@blueridgecarpet.com wrote:
 I had a home user who called me to come work on his computer because it
 kept coming up with the system tool 2011 malware (very similar to the
 fake antivirus malware.)
 The system is Windows XP Media Edition, and had Vipre Home installed. I
ran
 Vipre Rescue yesterday and it supposedly cleaned some of it up, but as
soon
 as the user rebooted into normal mode, it was back. Today, I went back and
 ran MalwareBytes and SpyBot SD.  Neither apparently caught it, but
looking
 at the startup entries in SpyBot, I saw a random jumble of letters under
c:
 \documents and settings\all users\application data\ which, when I entered
 the directory in Windows Explorer, showed the icon for the System Tool
2011
 malware.
 Anyone got any clue why Vipre Rescue and Vipre Home didn't catch it? I
 tried to submit a zip of it to the CW Sandbox, but got a response that it
 couldn't be analyzed...
 --

 Thanks,
 John Aldrich
 Blueridge Industries
 IT Manager

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com

RE: LSI SATA RAID issue

[VIPCS]

Can you call HP Support and ask them the question?

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Wednesday, December 15, 2010 3:20 PM
To: NT System Admin Issues
Subject: LSI SATA RAID issue

SO I have a client with HP ML310 with SATA drives running SBS 2003. The 
machine
has been slow and disks show severe fragmentation. They had a power issue
yesterday and when I was onsite and booted the machine I noticed that the
pre-windows load screen mentioned that the LSI array was failed or 
degraded.
It booted into windows before I had time to hit the function key and I 
couldn't
take it down any longer during business hours. Itmight have just been 
degraded due to power failure...or maybe something else.

I can't seem to find any way to see RAID status on this server while in
windows. I don't think the standard HP array manager software supports 
the LSI
onboard controller. Mt google-fu is failing. any way to see status of the
array without taking the machine down? Thanks for any input.

Bill

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: LSI SATA RAID issue

[VIPCS]

Even if it is out of warranty, the worst that HP will do is say sorry, the
server is out of warranty; I cannot provide you with assistance..

Usually you can tell the drive status by looking at the lights on the
drives.  If they are hot pluggable and there is a RAID configuration, you
can swap out a drive (if you have a spare).

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Bill Humphries [mailto:nt...@hedgedigger.com] 
Sent: Wednesday, December 15, 2010 3:48 PM
To: NT System Admin Issues
Subject: Re: LSI SATA RAID issue

Heh.  This thing is way out of warranty.  The SATA drives are atleast 4 
years old...so that adds tp my concern regarding array status.  They 
want to make it through this next tax season with this server.

VIPCS wrote:
 Can you call HP Support and ask them the question?

 Sincerely,
  
 Jeffrey and Mary Jane Harris
 VIPCS
  
 -Original Message-
 From: Bill Humphries [mailto:nt...@hedgedigger.com] 
 Sent: Wednesday, December 15, 2010 3:20 PM
 To: NT System Admin Issues
 Subject: LSI SATA RAID issue

 SO I have a client with HP ML310 with SATA drives running SBS 2003. The 
 machine
 has been slow and disks show severe fragmentation. They had a power issue
 yesterday and when I was onsite and booted the machine I noticed that the
 pre-windows load screen mentioned that the LSI array was failed or 
 degraded.
 It booted into windows before I had time to hit the function key and I 
 couldn't
 take it down any longer during business hours. Itmight have just been 
 degraded due to power failure...or maybe something else.

 I can't seem to find any way to see RAID status on this server while in
 windows. I don't think the standard HP array manager software supports 
 the LSI
 onboard controller. Mt google-fu is failing. any way to see status of the
 array without taking the machine down? Thanks for any input.

 Bill

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

   


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: psexec wont' accept login/password to execute locally

[VIPCS]

If you use the psexec command as the user to run a command (i.e., cmd.exe),
does it work?  Or is it specific to a VBScript file?

Since the script fails to run at all (rather than reporting an error
running), it is likely that the problem is not with the VBScript code, but
that it is a VBScript file at all (unless psexec fails to execute on the
system at all).

You could check the VBS file properties itself, and see if there is an
unblock button.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Mike Leone [mailto:oozerd...@gmail.com] 
Sent: Tuesday, December 14, 2010 12:46 PM
To: NT System Admin Issues
Subject: psexec wont' accept login/password to execute locally

I have a Win2003 Std, SP2 server. I have a need to run a batch file that
executes a VBscript as an elevated user. (I didn't write the script).
This batch file gets executed by EMC Networker, as a ore-command before
backing up this server. It turns off services (SourceOne mail
archiving). I have a similar script to re-enable services after backup.

The problem is that Networker executes as a nobody user, according to
EMC. So what I need to do is have this script call the VBscript with
elevated privileges, so it can stop the services. But psexec v1.98 is
not working for me, always complaining of an invalid ID and password,
even when I triple-check that everything is entered fine. Note that
runas works, but won't allow me to save the password.

Here's a test I just did. psexec did not work, but runas did ...

--
V:\utils\PS Toolspsexec -u u...@domain cmd /c 'type psversion.txt'

PsExec v1.98 - Execute processes remotely
Copyright (C) 2001-2010 Mark Russinovich
Sysinternals - www.sysinternals.com

Password:
PsExec could not start cmd /c 'type psversion.txt':
Logon failure: unknown user name or bad password.

V:\utils\PS Toolsrunas /user:u...@domain cmd /c 'type psversion.txt'
Enter the password for u...@domain:
Attempting to start cmd /c 'type psversion.txt' as user u...@domain ...
--

I'm not a VBscripter, so I don't know how to modify the VBscripts
themselves. Nor am I comfortable changing a script from the vendor, for
fearing of screwing something else up.

So: any idea why psexec complains of a login failure, even when I use
the exact same username and password as the runas command (which works
fine)? Is there a setting somewhere that is blocking me? I know psexec
is designed more for working on a remote system, but it should work to
do what I need it to do locally, shouldn't it?

Thanks


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Small/Mid Firewall?

[VIPCS]

Jeffrey would not recommend any (rebranded) Linksys routers.  We have had
two clients that insisted on using Linksys routers, and it took many hours
to work out all the problems with them (one was an office of four people,
and the other was an organization of 25 people).  Among other things, the
VPN capability is terrible, and took two days and assistance from Linksys to
even reach a point where it was barely usable.

 

The second client (who needed the VPN capability) installed a Sonic firewall
(with VPN capability) and has been very happy with that.  The Linksys
routers are now being used solely as wireless access points, and even being
used just as WAPs, they can be somewhat temperamental.

 

The true Cisco routers (PIX and ASA) are solid devices, although Jeffrey has
had limited experience with them, and they do require another level of
competency to configure.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: RS [mailto:rich...@gmail.com] 
Sent: Friday, December 10, 2010 3:43 PM
To: NT System Admin Issues
Subject: Re: Small/Mid Firewall?

 

Have a gander at the Cisco (used to be Linksys-branded) RV042, RV082 and
RV016.

On Fri, Dec 10, 2010 at 3:20 PM, Ben Schorr b...@rolandschorr.com wrote:

What's everybody recommending these days for the small/mid-sized firewall?

 

I have a client with about 75 users scattered across three locations.
They've been using a SnapGear SG580 at their central location but it died
this morning.

 

Needs:

 

* IPSEC  PPTP (or L2TP) VPN support

* Dual WAN capability with load-balance/failover.

* Preferably under $800

 

We looked at the NetGear ProSafe line but were wondering if there's anything
better?

 

Not a huge fan of SonicWall and their pay per user model.

 

Ben M. Schorr
Chief Executive Officer
__
Roland Schorr  Tower - Flagstaff Office
2700 S. Woodlands Village Blvd. Suite 300-371
Flagstaff, AZ 86001
928-377-5630
Fax: 808-533-3677
www.rolandschorr.com http://www.rolandschorr.com/ 
b...@rolandschorr.com

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 




  sacore:empty.gif 



 

 

  sacore:empty.gif 



 


 


  sacore:empty.gif 

 

  sacore:empty.gif 

 

 

 

  sacore:empty.gif 

  sacore:empty.gif 



  sacore:empty.gif 


  sacore:empty.gif 


  sacore:empty.gif 


  


  



  sacore:empty.gif 

  sacore:empty.gif 


  sacore:empty.gif 



  sacore:empty.gif 

  sacore:empty.gif 


  sacore:empty.gif 

  sacore:empty.gif 


  sacore:empty.gif 

  sacore:empty.gif 


  sacore:empty.gif 


 


  sacore:empty.gif 

  sacore:empty.gif 


  sacore:empty.gif 

  sacore:empty.gif 


  sacore:empty.gif 

  sacore:empty.gif 


  sacore:empty.gif 


  sacore:empty.gif 


  sacore:empty.gif 

  sacore:empty.gif 



  sacore:empty.gif 

  sacore:empty.gif 

  sacore:empty.gif 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Shares/NTFS quiz du jour

[VIPCS]

Yes, you could do either of those, but it also depends on what is in folder5
and folder8.  If usera only needs access to folder8, and folder5 contains
information that usera should not have access to, then it would be better to
create a new share directly to folder8, and set share and NTFS permissions
appropriately (perhaps create a new group for the permissions based on
whether other users not in group4 might need access to folder8 in the
future).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Thursday, December 09, 2010 4:46 PM
To: NT System Admin Issues
Subject: RE: Shares/NTFS quiz du jour

 

Yes.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: David Lum [mailto:david@nwea.org] 
Sent: Thursday, December 09, 2010 4:41 PM
To: NT System Admin Issues
Subject: Shares/NTFS quiz du jour

 

\\ServerA\Share1 file:///\\ServerA\Share1 

 

Share level perms are everyone

NTFS perms are Group1, Group2, Group3

 

UserA in Group4 needs access to \\ServerA\Share1\folder5\fodler8
file:///\\ServerA\Share1\folder5\fodler8 

 

Do I need do one of these?

A) Add group4 to NTFS and allow traverse

B)  Add user to one of the three existing groups

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: App runs from console but not Remote Desktop

[VIPCS]

There are some applications that will not run under terminal services - for
example, sfc (system file checker).  Jeffrey also had issues in the past
installing Netscape Directory Services remotely unless he used the /admin
option to install it in the console session, but once installed, it ran
fine.

If the other suggestions do not help, you might need to check with the
vendor and find out if their application is compatible with Terminal
Services.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Shawn Everett [mailto:sh...@tandac.com] 
Sent: Wednesday, December 08, 2010 9:20 AM
To: NT System Admin Issues
Subject: App runs from console but not Remote Desktop

Hi All,

I have a Windows 2008R2 64bit Terminal Server.  I have on particular app
(Caseware) that refuses to run in a Remote Desktop session.  Their tech
support has been less than useful.

Sitting down in front of the server, the app runs perfectly.  Running the
same app from Remote Desktop it crashes instantly with a Windows error
citing a problem in module ntdll.dll.

No other app on the terminal server experiences this problem.

Can anyone suggest a solution?

Shawn

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Win 2003 R2 strangeness

[VIPCS]

Can you not just stop and disable the service for now, and uninstall it
later?

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Monday, December 06, 2010 3:14 PM
To: NT System Admin Issues
Subject: RE: Win 2003 R2 strangeness

Ok. Good to know. Yeah... ICVerify is pretty small... it would work on a
desktop, it just needs some shared space and really just needs a dedicated
machine. Problem is that the machine it's on is our primary
antivirus/DHCP/domain controller/file share/print server machine and to
remove ICVerify, I'll probably have to reboot the darn thing a couple
times...and I really don't want to do that. *sigh* Guess I'll have to,
though...



From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Monday, December 06, 2010 3:01 PM
To: NT System Admin Issues
Subject: Re: Win 2003 R2 strangeness

Stating the obvious.
Yank it.  If they decide they want it back, tell them that they need to
dedicate a server to the app, or be forced with these kind of periodic
disruptions in service and then install it accordingly when the time comes.
 
Note: SQL Express uninstaller is pretty smart, hopefully you have multiple
instances and it will uninstall the named instance you select.
On Mon, Dec 6, 2010 at 12:27 PM, John Aldrich jaldr...@blueridgecarpet.com
wrote:
Mainly laziness. Also, I don't know but what they'll want to start using it
again. Plus I'm also concerned that if I remove it, since it also uses SQL
Express (or whatever Microsoft is calling it these days) that it'll mess up
my Vipre install, and I *really* don’t want to do that



From: Don Ely [mailto:don@gmail.com]
Sent: Monday, December 06, 2010 12:23 PM
To: NT System Admin Issues
Subject: Re: Win 2003 R2 strangeness

Ok, ok. you guys got me.  I'll ask the stupid question of the day... 
 
Now we just reboot a couple times a week, because ICVerify is still on
there, but we don’t use it anymore
 
If you don't use it anymore, WHY is it still on there
On Mon, Dec 6, 2010 at 8:39 AM, John Aldrich jaldr...@blueridgecarpet.com
wrote:
Memory leaks. We were running ICVerify Network edition on there and
apparently it leaks like a sieve, so we were rebooting it like every night.
Now we just reboot a couple times a week, because ICVerify is still on
there, but we don’t use it anymore.



From: Stefan Jafs [mailto:stefan.j...@gmail.com]
Sent: Monday, December 06, 2010 11:29 AM
To: NT System Admin Issues
Subject: Re: Win 2003 R2 strangeness

And why do you re-boot your DC every weekend?
 
SJ
On Mon, Dec 6, 2010 at 11:21 AM, John Aldrich jaldr...@blueridgecarpet.com
wrote:
Well, after looking at the events on the other DC, it would *appear* that
the DC did not completely restart like it was supposed to after it's
regularly scheduled reboot over the weekend. :-( There were numerous errors
about being unable to sync the domain controllers, DFSR, etc.




-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
Sent: Monday, December 06, 2010 10:23 AM
To: NT System Admin Issues
Subject: RE: Win 2003 R2 strangeness

Events on the other(s) DCs?

-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Monday, December 06, 2010 8:17 AM
To: NT System Admin Issues
Subject: Win 2003 R2 strangeness

This morning, one of my users (Windows Vista user, FWIW) called and said she
couldn't get online. I checked and sure enough, she didn't have an IP
address. I finally figured out that our DC which handles the DHCP leases,
one DNS, etc was locked up. I couldn't even get a picture on the monitor.
When I rebooted the machine and logged in I noticed that it stopped logging
anything around 8:15 this morning, but there were no messages in the event
log from around 8:15 until the system came back up after I power-cycled it
this morning around 8:45, however, there were some interesting messages
*after* the system came back up that I chalked up to just having recovered
from a power-cycle event.

Any ideas where to look for the problem? Unfortunately, we let maintenance
lapse on the server. It's a Dell Poweredge 2900, if that matters any.





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage

RE: Blogging software

[VIPCS]

Jeffrey is facing the same issue with a W2K Server that runs his Brother
MFC.  The full package drivers (scanner, particularly, as he has a
workaround for the network fax capability) only support W2K and XP, and
Jeffrey tried everything he can think of to make the drivers work with
Windows Server 2003 - in place upgrades, packaging the registry and file
changes on W2K and replaying the updates on WS2K3, even using the tweaknt
and ntswitch utilities to try and trick the installer into letting him
install on a WS2K3 system that mimics Windows XP.  Unfortunately, the
installer files are not MSI, so he cannot use Orca to just edit the allowed
OS list.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Steven Peck [mailto:sep...@gmail.com] 
Sent: Friday, December 03, 2010 12:26 PM
To: NT System Admin Issues
Subject: Re: Blogging software

 

I know the pain.  Unfortunately it limits your options and makes things
harder. 

On Thu, Dec 2, 2010 at 6:57 AM, Nigel Parker nigel.par...@ultraframe.co.uk
wrote:

Hi 

Thanks for all the suggestions 

At the moment we are STUCK with 2000

 

Regards

Nigel Parker

Systems Engineer
Ultraframe (UK) Ltd
Tel:   01200 452329
Fax:   01200 452201
Web:   www.ultraframe.com
Email: mailto:nigel.par...@ultraframe.co.uk

  _  

From: Steven Peck [mailto:sep...@gmail.com] 
Sent: 01 December 2010 19:23


To: NT System Admin Issues
Subject: Re: Blogging software

 

I would suggest getting rid of Windows 2000 as the starting point.

Microsoft Web Platform Installer can then be used to get a number of
different possibilities depending on what you want.  If you are just
'blogging', then Wordpress is the hands down winner and you can even use th
eMS write tool from live.com suite to post to it.  If you are wanting more,
then that answer is more complicated.  For a CMS I use Drupal myself but it
has a slight learning curve.  That said, you really don't want to be
installing php on Windows 2000 IIS5.  You really don't.  Get a supported OS.

http://www.microsoft.com/web/downloads/platform.aspx
http://www.microsoft.com/web/gallery/featured.aspx

Steven




On Wed, Dec 1, 2010 at 11:01 AM, Rubens Almeida rubensalme...@gmail.com
wrote:

maybe Dotnetnuke can do the trick.

On Wed, Dec 1, 2010 at 8:25 AM, Nigel Parker

nigel.par...@ultraframe.co.uk wrote:

 HELP
 I have been asked to find some Free blogging software we can run in
 house on out intranet server
 The server is running windows 2000 and Iis

 Can anyone recommend anything
 Thanks

 Nigel Parker


 Systems Engineer
 Ultraframe (UK) Ltd
 Tel:   01200 452329
 Fax:   01200 452201
 Web:   www.ultraframe.com
 Email: mailto:nigel.par...@ultraframe.co.uk


 Please consider the environment before printing this e-mail

 The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
 This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 




Please consider the environment before printing this e-mail

The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http

RE: document sprawl

[VIPCS]

We have some 3, 4, and 6GB hard drives if anyone wants them for the cost of
shipping.  However, some of them have bad blocks (and they have been wiped
using gdisk).

And Jeffrey has a 40MB (that's MB, not GB) hard drive installed in his Amiga
1200 (currently mothballed), and an 800MB drive in an external case he uses
for data storage with his Amiga emulator on his Windows 7 desktop system
(and about a dozen 100MB zip disks, as well).

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Friday, December 03, 2010 2:07 PM
To: NT System Admin Issues
Subject: RE: document sprawl

10 years ago we had 1T of data, now we have 18T (and planning to upgrade our
storage next year).

-Original Message-
From: Holstrom, Don [mailto:dholst...@nbm.org] 
Sent: Friday, December 03, 2010 11:19 AM
To: NT System Admin Issues
Subject: RE: document sprawl

Me too. When I arrived here eight years ago, we had 32 gigs of data. Now we
have over 2 TBs...

Just buy larger servers...

-Original Message-
From: Stephen Wimberly [mailto:swimbe...@gmail.com] 
Sent: Friday, December 03, 2010 12:17 PM
To: NT System Admin Issues
Subject: Re: document sprawl

I have attempted to tackle this issue before, I like to call it encourage
spring cleaning! but my words always seem to fall on deaf ears.

Lately every time I bring it up we end up buying more hard drives for the
server!  I give up.  Maybe I'm just too cheap?



On Fri, Dec 3, 2010 at 11:50 AM, Jeff Brown 2jbr...@gmail.com wrote:
 In regards to email, we were able to establish a retention policy that 
 messages in the Inbox, Sent Items, and Deleted Items folders are all 
 deleted after 90 days.  Exchange mailbox manager allowed to do that 
 weekly.  Don't manage other folders.  Not perfect, but it helped.

 On Fri, Dec 3, 2010 at 10:25 AM, Don Guyer don.gu...@prufoxroach.com
 wrote:

 I'd be interested in a solution to this. Been fighting it for years 
 to no avail, other than running a data inventory program (such as 
 TreeSize) and doing a manual compare.



 Don't forget all of the email attachments saved along with the 
 original email.



 J



 Don Guyer

 Systems Engineer - Information Services

 Prudential, Fox  Roach/Trident Group

 431 W. Lancaster Avenue

 Devon, PA 19333

 Direct: (610) 993-3299

 Fax: (610) 650-5306

 don.gu...@prufoxroach.com



 From: S Powell [mailto:powe...@gmail.com]
 Sent: Friday, December 03, 2010 11:17 AM
 To: NT System Admin Issues
 Subject: document sprawl



 Hello Everybody /Dr. Nick



 I'd like to pick your brains about how you deal with document sprawl, 
 I was reading in another thread about how users would use their 
 Recycle Bin as their archive. shudder

 we have users that will keep tens of copies of the same document in 
 various locations around their My Documents; as well as in tens of 
 locations within  our shared folders on the network ...



 User education only goes so far when it comes to please don't do 
 that as they nod and then keep doing it.

  I think we've moved beyond being nice and we've found ourselves

 mired in needing a sledgehammer.  I'd just like to wrap it in a bit 
 of velvet.



 Thoughts, Policies, procedures etc, would be helpful in this.



 TIA



 ./s
 Google.com  Learn it. Live it. Love it.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint

RE: Canon Rebel XTi not recognized by XP Pro

[VIPCS]

From a command prompt:

 

Set devmgr_show_nonpresent_devices=1

Devmgmt.msc

(In device manager, View -- Show Hidden Devices)

 

Look at all the dimmed USB and other devices, if any.  Uninstall any devices
that appear to be related to the camera.

 

You could also try deleting everything under the USB node; sometimes that
resolves issues, even if the problem is with a specific device.  If you use
a USB mouse or keyboard, though, doing that will disable the mouse or
keyboard until you reboot the system.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] 
Sent: Friday, December 03, 2010 1:57 PM
To: NT System Admin Issues
Subject: OT: Canon Rebel XTi not recognized by XP Pro

 

Any help here would be appreciated if anyone can point me in the right
direction. My Google-fu is failing me, and so is my USB removal-fu. I've run
into something similar before with a USB printer, but I don't remember the
full fix, or even if any of that knowledge would carry over.

 

Here goes.

 

I formatted and reinstalled a slipstreamed XP with SP3 on my personal laptop
using nlite. Confession - I don't remember ALL of my tweaks within nlite,
however everything except this one thing seems to be working perfectly fine.

 

Before I installed the software for my camera, but after installing numerous
other things, not to mention AV, Open Office, and all the MS updates, my
wife plugged the camera in, which Canon documentation specifically warns
against. I've done this on other XP machines and the camera was recognized
just fine, at least for the purpose of pulling images off, which is really
all we needed anyway.

 

Only this time it didn't work.

 

In Dev Manager I get a yellow exclamation mark over Canon Digital Camera
under Other Devices (not under Imaging Devices, where it appears on
another XP laptop that I've never installed the drivers on). I called Canon,
and their tech support basically said it was a problem with my computer and
was not their problem (but, to their credit, they did try to help me,
unsuccessfully).

 

I removed the device from within Device Manager, and poked around in the
registry, removing class keys {6BDD1FC6.} and USB keys {Vid_04a9Pid_3110.}
. several reboots and a couple of repeat attempts later, still no dice.

 

Anyone got an idea of where I can go that I've missed?

 

Thanks,

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians  Associates, PA
 BLOCKED::mailto:%20jra...@eaglemds.com jra...@eaglemds.com
 BLOCKED::http://www.eaglemds.com/ www.eaglemds.com 

 

 

  _  

Any medical information contained in this electronic message is CONFIDENTIAL
and privileged. It is unlawful for unauthorized persons to view, copy,
disclose, or disseminate CONFIDENTIAL information. This electronic message
may contain information that is confidential and/or legally privileged. It
is intended only for the use of the individual(s) and/or entity named as
recipients in the message. If you are not an intended recipient of this
message, please notify the sender immediately and delete this material from
your computer. Do not deliver, distribute or copy this message, and do not
disclose its contents or take any action in reliance on the information that
it contains.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: document sprawl

[VIPCS]

A bit simplistic, but have you considered disk quotas for server file
storage?

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Stephen Wimberly [mailto:swimbe...@gmail.com] 
Sent: Friday, December 03, 2010 12:17 PM
To: NT System Admin Issues
Subject: Re: document sprawl

I have attempted to tackle this issue before, I like to call it
encourage spring cleaning! but my words always seem to fall on deaf
ears.

Lately every time I bring it up we end up buying more hard drives for
the server!  I give up.  Maybe I'm just too cheap?



On Fri, Dec 3, 2010 at 11:50 AM, Jeff Brown 2jbr...@gmail.com wrote:
 In regards to email, we were able to establish a retention policy that
 messages in the Inbox, Sent Items, and Deleted Items folders are all
deleted
 after 90 days.  Exchange mailbox manager allowed to do that weekly.  Don't
 manage other folders.  Not perfect, but it helped.

 On Fri, Dec 3, 2010 at 10:25 AM, Don Guyer don.gu...@prufoxroach.com
 wrote:

 I’d be interested in a solution to this. Been fighting it for years to no
 avail, other than running a “data inventory” program (such as TreeSize)
and
 doing a manual compare.



 Don’t forget all of the email attachments saved along with the original
 email…



 J



 Don Guyer

 Systems Engineer - Information Services

 Prudential, Fox  Roach/Trident Group

 431 W. Lancaster Avenue

 Devon, PA 19333

 Direct: (610) 993-3299

 Fax: (610) 650-5306

 don.gu...@prufoxroach.com



 From: S Powell [mailto:powe...@gmail.com]
 Sent: Friday, December 03, 2010 11:17 AM
 To: NT System Admin Issues
 Subject: document sprawl



 Hello Everybody /Dr. Nick



 I'd like to pick your brains about how you deal with document sprawl, I
 was reading in another thread about how users would use their Recycle
 Bin as their archive. shudder

 we have users that will keep tens of copies of the same document in
 various locations around their My Documents; as well as in tens of
 locations within  our shared folders on the network ...



 User education only goes so far when it comes to please don't do that
as
 they nod and then keep doing it.

  I think we've moved beyond being nice and we've found ourselves

 mired in needing a sledgehammer.  I'd just like to wrap it in a bit of
 velvet.



 Thoughts, Policies, procedures etc, would be helpful in this.



 TIA



 ./s
 Google.com  Learn it. Live it. Love it.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: document sprawl

[VIPCS]

We think you can automatically send them warnings when they are close to
their quotas.

You also have leverage to negotiate with them at that point - an extra 10%
increase in exchange for deleting old files, and you know what the quota was
before, and can tell whether they are fulfilling their end of the agreement.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Friday, December 03, 2010 5:26 PM
To: NT System Admin Issues
Subject: RE: document sprawl

Doesn't work.  They let them fill up and then gripe that they can't save
their files because the file system is full.

-Original Message-
From: VIPCS [mailto:vi...@stny.rr.com] 
Sent: Friday, December 03, 2010 4:14 PM
To: NT System Admin Issues
Subject: RE: document sprawl

A bit simplistic, but have you considered disk quotas for server file
storage?

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 

-Original Message-
From: Stephen Wimberly [mailto:swimbe...@gmail.com] 
Sent: Friday, December 03, 2010 12:17 PM
To: NT System Admin Issues
Subject: Re: document sprawl

I have attempted to tackle this issue before, I like to call it
encourage spring cleaning! but my words always seem to fall on deaf
ears.

Lately every time I bring it up we end up buying more hard drives for
the server!  I give up.  Maybe I'm just too cheap?



On Fri, Dec 3, 2010 at 11:50 AM, Jeff Brown 2jbr...@gmail.com wrote:
 In regards to email, we were able to establish a retention policy that
 messages in the Inbox, Sent Items, and Deleted Items folders are all
deleted
 after 90 days.  Exchange mailbox manager allowed to do that weekly.  Don't
 manage other folders.  Not perfect, but it helped.

 On Fri, Dec 3, 2010 at 10:25 AM, Don Guyer don.gu...@prufoxroach.com
 wrote:

 I'd be interested in a solution to this. Been fighting it for years to no
 avail, other than running a data inventory program (such as TreeSize)
and
 doing a manual compare.



 Don't forget all of the email attachments saved along with the original
 email.



 J



 Don Guyer

 Systems Engineer - Information Services

 Prudential, Fox  Roach/Trident Group

 431 W. Lancaster Avenue

 Devon, PA 19333

 Direct: (610) 993-3299

 Fax: (610) 650-5306

 don.gu...@prufoxroach.com



 From: S Powell [mailto:powe...@gmail.com]
 Sent: Friday, December 03, 2010 11:17 AM
 To: NT System Admin Issues
 Subject: document sprawl



 Hello Everybody /Dr. Nick



 I'd like to pick your brains about how you deal with document sprawl, I
 was reading in another thread about how users would use their Recycle
 Bin as their archive. shudder

 we have users that will keep tens of copies of the same document in
 various locations around their My Documents; as well as in tens of
 locations within  our shared folders on the network ...



 User education only goes so far when it comes to please don't do that
as
 they nod and then keep doing it.

  I think we've moved beyond being nice and we've found ourselves

 mired in needing a sledgehammer.  I'd just like to wrap it in a bit of
 velvet.



 Thoughts, Policies, procedures etc, would be helpful in this.



 TIA



 ./s
 Google.com  Learn it. Live it. Love it.

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage

RE: Stupid User Tricks

[VIPCS]

Change the group policies to automatically delete files when moved to the
recycle bin, but make sure you tell the users before you change the policy,
and make sure you have management buy in before you make the change.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Thursday, December 02, 2010 10:18 AM
To: NT System Admin Issues
Subject: RE: Stupid User Tricks

Yep. More than one user here uses the trash as an archive for stuff they
*may* need later... ;-) I'm trying VERY hard to get the users who do that to
stop!



From: Erik Goldoff [mailto:egold...@gmail.com] 
Sent: Thursday, December 02, 2010 9:32 AM
To: NT System Admin Issues
Subject: Re: Stupid User Tricks

I'm definitely laughing WITH you on this one, I've had the same user in the
past.  Even had a complete subfolder structure created within the Deleted
Items so she could organize her archives... 
 
argh
On Thu, Dec 2, 2010 at 5:40 AM, Rene de Haas rene.deh...@gmail.com wrote:
I still remember one user telling me not to click OK when Outlook was asking
to empty the Deleted Items.
So I ask why that is such a big deal.
.
He answers, that's where I keep my archive, all my email.
He had all his mail there, because it's so easy to move there, just press
delete and it's in the archive.

I was silent for a moment, then asked him if he put his important papers in
the waste bin because it was so nice close to his desk.

I think he changed it after that, but am not 100% sure.

Rene
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Blogging software

[VIPCS]

You might want to point out to your customer that Microsoft has discontinued
security support for Windows 2000, and therefore he is putting his whole
enterprise at risk.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Nigel Parker [mailto:nigel.par...@ultraframe.co.uk] 
Sent: Thursday, December 02, 2010 9:57 AM
To: NT System Admin Issues
Subject: RE: Blogging software

 

Hi 

Thanks for all the suggestions 

At the moment we are STUCK with 2000

 

Regards

Nigel Parker

Systems Engineer
Ultraframe (UK) Ltd
Tel:   01200 452329
Fax:   01200 452201
Web:   www.ultraframe.com
Email: mailto:nigel.par...@ultraframe.co.uk

  _  

From: Steven Peck [mailto:sep...@gmail.com] 
Sent: 01 December 2010 19:23
To: NT System Admin Issues
Subject: Re: Blogging software

I would suggest getting rid of Windows 2000 as the starting point.

Microsoft Web Platform Installer can then be used to get a number of
different possibilities depending on what you want.  If you are just
'blogging', then Wordpress is the hands down winner and you can even use th
eMS write tool from live.com suite to post to it.  If you are wanting more,
then that answer is more complicated.  For a CMS I use Drupal myself but it
has a slight learning curve.  That said, you really don't want to be
installing php on Windows 2000 IIS5.  You really don't.  Get a supported OS.

http://www.microsoft.com/web/downloads/platform.aspx
http://www.microsoft.com/web/gallery/featured.aspx

Steven




On Wed, Dec 1, 2010 at 11:01 AM, Rubens Almeida rubensalme...@gmail.com
wrote:

maybe Dotnetnuke can do the trick.

On Wed, Dec 1, 2010 at 8:25 AM, Nigel Parker

nigel.par...@ultraframe.co.uk wrote:

 HELP
 I have been asked to find some Free blogging software we can run in
 house on out intranet server
 The server is running windows 2000 and Iis

 Can anyone recommend anything
 Thanks

 Nigel Parker


 Systems Engineer
 Ultraframe (UK) Ltd
 Tel:   01200 452329
 Fax:   01200 452201
 Web:   www.ultraframe.com
 Email: mailto:nigel.par...@ultraframe.co.uk


 Please consider the environment before printing this e-mail

 The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
 This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.



 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 




Please consider the environment before printing this e-mail

The statements and opinions expressed in this email are my own and may not
represent those of Ultraframe (UK) Ltd.
This email is subject to copyright and the information contained in it is
confidential and may be legally privileged. It is sent out only for intended
recipient(s). Access to this email by anyone else is unauthorised. If you
are not an intended recipient, any disclosure, copying, distribution or
other use or any action taken or omitted to be taken in reliance on it, is
prohibited and unlawful.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Legal Notice and Caption not taking on Windows 2008 R2 system

[VIPCS]

Jeffrey ran into this issue yesterday.  A number of registry keys (that were
accessible in WS2K8 and earlier) are locked down in R2 by use of the
TrustedInstaller account (TrustedInstaller has FC on the registry key, and
administrators only have read access).  Jeffrey had to use the SourceForge
setacl utility to script a workaround for some registry edits that he wanted
to make, basically to take ownership of the key, grant write permission to
the current user account, do the registry import, and then undo the changes
using setacl again.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: Wednesday, December 01, 2010 4:06 PM
To: NT System Admin Issues
Subject: RE: Legal Notice and Caption not taking on Windows 2008 R2 system

 

Actually my Local GPO worked finally. It seems that the import doesn't work
by clicking on the reg file, basically says something is wrong with it. 

 

But I actually loaded it from another X64 R2 system accordingly. 

 

Z

 

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Wednesday, December 01, 2010 3:29 PM
To: NT System Admin Issues
Subject: Re: Legal Notice and Caption not taking on Windows 2008 R2 system

 

You tried putting carriage returns in them yet? :-) There's probably a much
easier way of doing it, but I am still editing the binary data to get them
in :-0

On 1 December 2010 19:12, Ziots, Edward ezi...@lifespan.org wrote:

Thanks, I just ended up doing it accordingly, and it worked fine, now I got
to export them into my other Windows 2008 R2 and Windows 2008 systems. 

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org mailto:email%3aezi...@lifespan.org 

Cell:401-639-3505

 

From: James Rankin [mailto:kz2...@googlemail.com] 
Sent: Wednesday, December 01, 2010 1:54 PM
To: NT System Admin Issues
Subject: Re: Legal Notice and Caption not taking on Windows 2008 R2 system

 

I added them direct to the registry in HKLM\Software\MS\Windows
NT\Winlogon\LegalNoticeCaption and Text, and they work fine on 2008 R2

never tried the GPO route

On 1 December 2010 18:49, Ziots, Edward ezi...@lifespan.org wrote:

I am testing adding a Legal Notice and Caption Language to my Windows 2008
and Windows 2008 R2 systems via Local Group Policy and when I log in via
console ( in VMware via Vcenter) it doesn't prompt me accordingly, like it
does on my Windows 2000 and Windows 2003/R2 systems. 

 

I have added it to the Local GPO, there is nothing higher GPO wise
overriding it, and I ran a gpupdate /force after adding it accordingly. 

 

Any ideas? 

 

Z

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org mailto:email%3aezi...@lifespan.org 

Cell:401-639-3505

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana

RE: FilterManager Event ID 3

[VIPCS]

Can you swap the drives between servers and see if the problem continues?

 

If the problem continues on original server -- hardware on server
(excluding hard drives)

If the problem continues on swapped server -- software or hard drives
themselves

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Tuesday, November 30, 2010 6:53 PM
To: NT System Admin Issues
Subject: FilterManager Event ID 3

 

I've got a W2K8 Std x64 box that is getting a ton of these errors in the
event log and has crashed a few times over the past few months. I'm really
having a problem finding any info on this particular issue on the web, the
things I have found seem to be  targeting VM's or backup issues, neither of
which is relevant in our situation. 

I'd like to think that this is a hardware issue, since this is one of our
SCCM servers, all of which are configured identically, and this is the only
one experiencing the issue. I'm tempted to swap out the HBA just to see if
that fixes the problem. 




Chris Bodnar, MCSE
Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003 - This message,
and any attachments to it, may contain information that is privileged,
confidential, and exempt from disclosure under applicable law. If the reader
of this message is not the intended recipient, you are notified that any
use, dissemination, distribution, copying, or communication of this message
is strictly prohibited. If you have received this message in error, please
notify the sender immediately by return e-mail and delete the message and
any attachments. Thank you. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Hotmail SPAM

[VIPCS]

Jeffrey did that for a user once, who left the organization he was
supporting, but wanted any incoming mail forward.  Unfortunately, Jeffrey
neglected to verify that the destination server was available.  You can
guess the rest - bounced mail messages were reforwarded, resulting in more
bounced messages.

 

(Can you say ping - pong?)

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Tuesday, November 30, 2010 6:26 PM
To: NT System Admin Issues
Subject: RE: Hotmail SPAM

 

I can set an auto-forward rule for you.  Don't want you to feel left out,
especially during the holidays.

 

From: Mike Sullivan [mailto:neog...@gmail.com] 
Sent: Tuesday, November 30, 2010 6:14 PM
To: NT System Admin Issues
Subject: Re: Hotmail SPAM

 

I'm not seeing any increase from Hotmail. Maybe I'm just flying under the
radar.

On Tue, Nov 30, 2010 at 3:14 PM, Rod Trent rodtr...@myitforum.com wrote:

That's all I've ever gotten from Hotmail.  Didn't think it was used for
anything else.

 

From: James Hill [mailto:james.h...@superamart.com.au] 
Sent: Tuesday, November 30, 2010 5:27 PM


To: NT System Admin Issues

Subject: Hotmail SPAM

 

Sorry if this has already been discussed, I've been off list for a while.

 

We are seeing a large amount of SPAM recently coming from legitimate Hotmail
accounts.  Presumably a bot out there somewhere has been mining passwords
off unsecure forums etc where people have used the same password.  I've
actually had a couple of friends get hit with it which is unusual.

 

Just curious if others have noticed this increase.

 

James.

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin




-- 
Mike Sullivan
neog...@gmail.com

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: 2008 R2 RDS (was Terminal Server)in DMZ to 2K3 DC in LAN

[VIPCS]

Sidestepping the follow-on questions of whether a domain is appropriate in
the first place, port 445 seems to be missing (it is used for some RPC
functions), and possibly ports 137-139 (for NetBIOS).  You should do a
netstat -a -b -n to see what ports are open on the internal AD server, and
also check the firewall logs to see what ports are being blocked when you
try and authenticate (if you have not already).

 

RPC normally uses random ports above 1024 for specific RPC communications
between client/server applications, but there are registry changes that can
restrict the range of ports used.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: David Lum [mailto:david@nwea.org] 
Sent: Monday, November 29, 2010 1:09 PM
To: NT System Admin Issues
Subject: 2008 R2 RDS (was Terminal Server)in DMZ to 2K3 DC in LAN

 

I have a 2008 R2 server in a DMZ and I need it to authenticate it with our
AD but it tells me domain is not available.

 

Per this article:

http://blogs.msdn.com/b/rds/archive/2009/07/31/rd-gateway-deployment-in-a-pe
rimeter-network-firewall-rules.aspx

 

I have the following firewall ruled from the DMZ server -- inbound. RADIUS
is not used.

 

TCP/UDP 53 (DNS) -- DC's

TCP 88 (Kerberos) -- DC's
TCP 135 (RPC) -- DC's

TCP/UDP 389 (LDAP) --  DC's, RDS servers
TCP/UDP 443 (SSL) --  DC's, RDS servers

TCP/UDP 24158 (WMI) -- RDS servers * (I set this port to be fixed on the
RDS servers)

TCP 3389 (RDP) -- LAN

TCP 5504 --  RDS Broker

 

Do I also need to have TCP  1024 opened up? I can't log into this system
via a domain account.

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Office 2000 SR1(a)

[VIPCS]

But yet SR-3 is still downloadable, as are a whole list of individual
security updates, and there are pages and pages of documentation on SR-1 and
SR-3.

 

Go figure

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] 
Sent: Monday, November 29, 2010 12:46 AM
To: NT System Admin Issues
Subject: Re: Office 2000 SR1(a)

 

Here's an explanation of the circumstance (supposedly):

http://blogs.technet.com/b/office_resource_kit/archive/2009/09/16/where-is-t
he-office-2000-sr-1-administrator-updates-o2ksr1adl-exe.aspx



--
ME2

 

 





 

On Sun, Nov 28, 2010 at 6:47 PM, Kevin W ke...@latenightgeek.com wrote:

After some google-fu I found that the file name for the full installer is
O2ksr1adl.exe which can be found here (among other places):

http://ftp.utc.edu/ftp/pub/windows/patches/office/

I don't have office 2k to verify, sorry. It does extract to about 59MB and
when ran tells me I don't have office 2k installed.

Was that what you needed Laurence?


For the curious:
http://www.google.com/search?q=%22index%20of%22%20+O2ksr1adl.exe



On 11/28/2010 6:14 PM, Jonathan Link wrote:

IIRC, this has been discussed before, the file is only a 166K kickstart to
download SR-1a, which then fails.

On Sun, Nov 28, 2010 at 9:04 PM, Micheal Espinola Jr
michealespin...@gmail.com  wrote:

Office 2000 Service Release 1a (SR-1a):


http://www.microsoft.com/downloads/en/details.aspx?FamilyID=AF6C8D03-7633-45
B4-AB96-795EE656F2A2
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=AF6C8D03-7633-4
5B4-AB96-795EE656F2A2displaylang=EN displaylang=EN

--
ME2







 On Fri, Nov 26, 2010 at 8:40 AM, Laurence
laurence.chi...@jalapeno-bs.co.uk  wrote:

Hi All

a long shot i know

just been out to see a client and set him up a new laptop etc.

his desktop, which he wants to keep, is running Office 2000 with no
updates applied

i need to get it to SP3 so that i can use the Compatibility Pack for
Office 2007/2010 so that he can swap files between his 2 machines

however it's not readily available on the MS site and all other sites
point to a 166kb installer file which does not run correctly

anybody have a copy of the the full administrator's version of SR1 that
they would like to publish somewhere?

thanks

Laurence
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Office 2000 SR1(a)

[VIPCS]

There is a link at the bottom of the page for SR1.

Sincerely,
 
Jeffrey and Mary Jane Harris
VIPCS
 
-Original Message-
From: Laurence [mailto:laurence.chi...@jalapeno-bs.co.uk] 
Sent: Sunday, November 28, 2010 5:52 PM
To: NT System Admin Issues
Subject: Re: Office 2000 SR1(a)

Hi Cameron

that link is for SP3

one of the requirements for SP3 is to be at SR1 as a minimum

thanks

Laurence
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Issue with Service and Login Account on NT 4.0 SP6a machine, ideas?

[VIPCS]

Did you check to see if the account password has expired, or the account is
locked out?  Does the account have the login as a service user right?

 

Are there group policies that may be affecting the ability of the account to
be granted the correct user rights?

 

Is the account in question a domain user account, or a computer account?

 

Note also that just because an account exists does not mean the account is
what the service is looking for.  If you had a domain cvsmdm account and
it was deleted, and then recreated, it has a new SID, so that its previous
permissions (such as login as a service) are gone.

 

Finally, to follow up on what Michael Smith asked, what are the
circumstances under which the problem arose?  In particular, how long after
raising the FFL/DFL?

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: Sunday, November 28, 2010 5:07 PM
To: NT System Admin Issues
Subject: Issue with Service and Login Account on NT 4.0 SP6a machine, ideas?

 

All, 

 

Having a problem on one of my servers, that I am trying to disprove that
it's a domain based problem. It's a Windows 2008 R2 FFL/DFL domain. The
server in question is Windows NT 4.0 SP6a. It has a service that runs under
the context of domain account. Which out of the blue has popped the
following error: (Note this is a vendor supplied system)

 

Cannot set the startup parameters for the CVSMDM_000 service.  Error

1057 occurred.  The account name is invalid or does not exist.

 

The account its trying to use exists. I did a nltest /Server:SERVERNAME
/SC_Query:DOMAINNAME ( which returns success, so I know the secure channel
is fine). 

 

Any other ideas, only other idea I could think of was to reset the password
for that account and retry or make up a new account and try that one. 

 

Maybe even a possibility of putting entries in the LMHOSTS to point directly
to a Domain Controller accordingly, for this server, but again don't think
that is the problem if I can verify the secure channel is good with the
NLTEST command then we can eliminate that. 

 

But not sure whatelse to take a look at to see what might be the issue. 

 

Any ideas, feel free to chime in. 

 

Z

 

 

Edward E. Ziots

CISSP, Network +, Security +

Network Engineer

Lifespan Organization

Email:ezi...@lifespan.org

Cell:401-639-3505

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: OT: For the ladies

[VIPCS]

But back to the original question - how did the web site obtain your phone
number?

 

We can think of a few ways:

 

1)  It is embedded in a cookie for another site that this site requested
and read.

2)  It read a cookie that gave it access to another site that had the
information (i.e., Facebook).  This is a variation on FireSheep (as we
understand it, a web site can request any cookie that is not marked as HTTP,
although the browser does not have to honor the request).

3)  You gave it to someone who put it in his contact information for you
in G-Mail, Facebook, etc and did not properly secure the information,
allowing it to be shared with other applications.

 

You could probably rule out 1) and 2) by clearing your cookies and trying
the site again, unless it happens to be one of the Evercookies
(http://www.schneier.com/blog/archives/2010/09/evercookies.html).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS (Very Important Professional Computer Services)

 

  _  

From: Andrew Laya [mailto:andrew.l...@gmail.com] 
Sent: Friday, November 26, 2010 8:12 AM
To: NT System Admin Issues
Subject: Re: OT: For the ladies

 

I think Kathleen is probably just screwing with you...  :-)




On Thu, Nov 25, 2010 at 1:38 PM, Cameron cameron.orl...@gmail.com wrote:

Yep..I'm aware of that :) But...the kicker is...it was my cell phone that
was dialed, which is not listed!

 

On Thu, Nov 25, 2010 at 1:35 PM, Angus Scott-Fleming angu...@geoapps.com
wrote:

On 24 Nov 2010 at 16:26, Cameron  wrote:

 wtf?...I went to that website, but did NOT put in my number...and
 the service called me on my cell 1/2 hr later. It's not a listed number,
 so unless somebody is jacking with me...

Free People Search | WhitePages
   Cameron Orland
   365 Marshall Cres
   Orangeville, ON L9W 4Y4
   (519) 938-8746
http://www.whitepages.com/search/FindPerson?firstname_begins_with=1
http://www.whitepages.com/search/FindPerson?firstname_begins_with=1firstna
me=cameron+name=orlandwhere=toronto%2C+on
firstname=cameron+name=orlandwhere=toronto%2C+on

How did I know you were Cameron Orland in TO, ON? Your profile on LinkedIn
says who you work for ...


--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: VBS script to do lastlogon older than 60 days.

[VIPCS]

Using an ADO connection to build a recordset of users ensures all user
accounts are checked for last login, and requires no extra effort once the
code is written.  Unless the OP only needed to know last login times for all
users on a small network, or an unchanging small list of specific users,
using ADO is a better operational solution.  The one disadvantage is that
the ADO lookup of users will be more time consuming, CPU-wise.

 

Note, though, that if the users of interest are segregated into specific
OUs, the search can be configured to look in those OUs, rather than having
to search through the whole domain.

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS

 

  _  

From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Thursday, November 25, 2010 5:09 AM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

I don't really see much difference either way. ADO is going to hold open a
connection to your DC unless you use a disconnected recordset.

 

Cheers

Ken

 

 

From: VIPCS [mailto:vi...@stny.rr.com] 
Sent: Thursday, 25 November 2010 11:56 AM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

You should be doing an ADO lookup for objects of objecttype user in AD, and
then loop over all the sAMAccountname values retrieved, rather than reading
names from a file, unless there are a very small number of names (100).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS (Very Important Professional Computing Services)

 

  _  

From: Brumbaugh, Luke [mailto:luke.brumba...@butlerschein.com] 
Sent: Wednesday, November 24, 2010 12:32 PM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

http://www.rlmueller.net/Programs/LimitedLastLogon.txt

 

Program needs alittle tweaking but it is a start

 

From: Don Guyer [mailto:don.gu...@prufoxroach.com] 
Sent: Wednesday, November 24, 2010 11:15 AM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

Yeah, give it up!

 

Please.

 

:-)

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: Wednesday, November 24, 2010 11:12 AM
To: NT System Admin Issues
Subject: Re: VBS script to do lastlogon older than 60 days.

 

Care to share?

On Mon, Nov 22, 2010 at 7:29 AM, Brumbaugh, Luke
luke.brumba...@butlerschein.com wrote:

The script I found for lastlogon takes in account all DCs

 

 

From: Free, Bob [mailto:r...@pge.com] 
Sent: Friday, November 19, 2010 3:00 PM 


To: NT System Admin Issues

Subject: RE: VBS script to do lastlogon older than 60 days.

 

You realize that lastlogon is a unique value on each DC and that has to be
account for, right?

 

From: Brumbaugh, Luke [mailto:luke.brumba...@butlerschein.com] 
Sent: Friday, November 19, 2010 11:37 AM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

Thanks for quick response but then I found datediff(d, lastlogon, date)
which will give me number of days. 

Now all I need to do is pull supervisor email and send a canned email with
the info.  Wish me luck =)

 

 

 

From: Sean Martin [mailto:seanmarti...@gmail.com] 
Sent: Friday, November 19, 2010 1:45 PM
To: NT System Admin Issues
Subject: Re: VBS script to do lastlogon older than 60 days.

 

Does this help?

 

http://blogs.technet.com/b/heyscriptingguy/archive/2010/01/27/dandelions-vcr
-clocks-and-last-logon-times-these-are-a-few-of-our-least-favorite-things.as
px

 

- Sean

On Fri, Nov 19, 2010 at 9:41 AM, John Cook john.c...@pfsf.org wrote:

Oldcomp should give you a good start 
John W. Cook 
Systems Administrator 
Partnership for Strong Families

 

  _  

From: Brumbaugh, Luke luke.brumba...@butlerschein.com 
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Sent: Fri Nov 19 13:36:25 2010
Subject: VBS script to do lastlogon older than 60 days. 

I am getting pieces but I am looking for a vbs script to give me lastlogon
of users older than 60 days that I can then send an email to supervisor
giving user and number of days since last logon.

I have fully populated AD so shouldn't be too hard.

 

Just need to get over the lastlogon number of days part.

 

TIA

 

Luke L. Brumbaugh

Network Engineer

Butler Animal Health Supply

Ph:(614) 659-1736

 



**

CONFIDENTIALITY NOTICE - The information transmitted in this message is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review, retransmission,
dissemination or other use of this information by persons or entities other
than the intended recipient is prohibited. If you received this in error,
please contact the sender

RE: VBS script to do lastlogon older than 60 days.

[VIPCS]

You should be doing an ADO lookup for objects of objecttype user in AD, and
then loop over all the sAMAccountname values retrieved, rather than reading
names from a file, unless there are a very small number of names (100).

 

Sincerely,

 

Jeffrey and Mary Jane Harris

VIPCS (Very Important Professional Computing Services)

 

  _  

From: Brumbaugh, Luke [mailto:luke.brumba...@butlerschein.com] 
Sent: Wednesday, November 24, 2010 12:32 PM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

http://www.rlmueller.net/Programs/LimitedLastLogon.txt

 

Program needs alittle tweaking but it is a start

 

From: Don Guyer [mailto:don.gu...@prufoxroach.com] 
Sent: Wednesday, November 24, 2010 11:15 AM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

Yeah, give it up!

 

Please.

 

:-)

 

Don Guyer

Systems Engineer - Information Services

Prudential, Fox  Roach/Trident Group

431 W. Lancaster Avenue

Devon, PA 19333

Direct: (610) 993-3299

Fax: (610) 650-5306

don.gu...@prufoxroach.com

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: Wednesday, November 24, 2010 11:12 AM
To: NT System Admin Issues
Subject: Re: VBS script to do lastlogon older than 60 days.

 

Care to share?

On Mon, Nov 22, 2010 at 7:29 AM, Brumbaugh, Luke
luke.brumba...@butlerschein.com wrote:

The script I found for lastlogon takes in account all DCs

 

 

From: Free, Bob [mailto:r...@pge.com] 
Sent: Friday, November 19, 2010 3:00 PM 


To: NT System Admin Issues

Subject: RE: VBS script to do lastlogon older than 60 days.

 

You realize that lastlogon is a unique value on each DC and that has to be
account for, right?

 

From: Brumbaugh, Luke [mailto:luke.brumba...@butlerschein.com] 
Sent: Friday, November 19, 2010 11:37 AM
To: NT System Admin Issues
Subject: RE: VBS script to do lastlogon older than 60 days.

 

Thanks for quick response but then I found datediff(d, lastlogon, date)
which will give me number of days. 

Now all I need to do is pull supervisor email and send a canned email with
the info.  Wish me luck =)

 

 

 

From: Sean Martin [mailto:seanmarti...@gmail.com] 
Sent: Friday, November 19, 2010 1:45 PM
To: NT System Admin Issues
Subject: Re: VBS script to do lastlogon older than 60 days.

 

Does this help?

 

http://blogs.technet.com/b/heyscriptingguy/archive/2010/01/27/dandelions-vcr
-clocks-and-last-logon-times-these-are-a-few-of-our-least-favorite-things.as
px

 

- Sean

On Fri, Nov 19, 2010 at 9:41 AM, John Cook john.c...@pfsf.org wrote:

Oldcomp should give you a good start 
John W. Cook 
Systems Administrator 
Partnership for Strong Families

 

  _  

From: Brumbaugh, Luke luke.brumba...@butlerschein.com 
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com 
Sent: Fri Nov 19 13:36:25 2010
Subject: VBS script to do lastlogon older than 60 days. 

I am getting pieces but I am looking for a vbs script to give me lastlogon
of users older than 60 days that I can then send an email to supervisor
giving user and number of days since last logon.

I have fully populated AD so shouldn't be too hard.

 

Just need to get over the lastlogon number of days part.

 

TIA

 

Luke L. Brumbaugh

Network Engineer

Butler Animal Health Supply

Ph:(614) 659-1736

 



**

CONFIDENTIALITY NOTICE - The information transmitted in this message is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review, retransmission,
dissemination or other use of this information by persons or entities other
than the intended recipient is prohibited. If you received this in error,
please contact the sender and destroy all copies of this document. Thank
you.

Butler Schein Animal Health

** 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

 

  _  

CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
attached to or with this Notice is intended only for the person or entity to
which it is addressed and may contain Protected Health Information (PHI),
confidential and/or privileged material. Any review, transmission,
dissemination, or other use of, and taking any action in reliance upon this
information by persons or entities other than the intended recipient without
the express written consent of the sender are prohibited. This information
may be protected by the Health Insurance Portability and Accountability Act
of 1996 (HIPAA), and other Federal and Florida laws. Improper or
unauthorized use or disclosure of this information could result