RE: net time

2001-09-19 Thread andrey_kalinin



You can read MS KB Article Q223184 "Registry entries for Time Service"
http://support.microsoft.com/support/kb/articles/Q223/1/84.ASP

it explains the values of Period value.

Andrey Kalinin





Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: RE: net time
  





aren't there some timers to indicate how often to resynch the time.  Does
anyone know where these are.

I know 2k does a lot more activity to make sure the time is set.  That can
mean more overhead on WAN links.

Shouldn't you use the name instead of the IP, in case you decide to move the
pdc?

Dan

"It is not the critic who counts; not the man who points out where the
strong man stumbled or where the doer of deeds could have done them better.
The credit belongs to the man who is actually in the arena, whose face is
marred with dust and sweat and blood. At best, he knows the triumph of high
achievement; if he fails, at least he fails while daring greatly, so that
his place shall never be with those cold and timid souls who knew neither
victory nor defeat."

Theodore Roosevelt
-Original Message-
From: Russ Braaten [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 10:05 AM
To: NT System Admin Issues
Subject: RE: net time


Actually, while working on this very topic today, I found out some
interesting issues.  My production domain is still NT4.  I have my PDC and
BDCs running timeserve and retrieving their time from a corporate
timeserver across our WAN (they have the actual internet connection).  and
my users, win95, 98, and a few win2k, run a login script that does a net
time \\xxx.xx.xxx.xxx /set using the ip address of our PDC.  While testing
a WIN2k server and workstation on a test domain, I noticed that the
workstation was syncing from the DC in my test domain, but the time was
way off from my production machine, so I started looking for how to sync
the time from the corporate time server across the WAN.  This turned out
to be a fairly simple process, once I found the instructions.  Run from a
command line "c:\net time /setsntp:xxx.xx.xxx." then cycle your
windows time service.  It actually writes to the registry where to look
for time syncing. This worked from both the server and pro box.  I pointed
them both to the corp box, but could have left the pro box syncing to the
DC and the DC syncing to the corp box, to minimize WAN traffic, which is
probably best practice, once rolled out.

Just thought someone out there might want to know,

Russ Braaten, MCSE, MCP+I


> Actually, that is what I have always done.  One of my associates pointed
out
> the effect of just using "net time /set" and I couldn't answer why we got
> the different results.  Just goes to show that browsing and NetBIOS is far
> from gone in W2K.
>
>
> ***
> Pete Carstensen, MCSE
> Senior LAN Engineer
> CSK Auto, Inc.
> 645 E. Missouri Ave.
> Phoenix,  AZ  85012
> (602) 631-7176
> [EMAIL PROTECTED]
>
> Little surprises around every corner, but nothing dangerous.
>   -- Willie Wonka
>
> -Original Message-
> From: Phil Pettifer [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 18, 2001 1:05 PM
> To: NT System Admin Issues
> Subject: RE: net time
>
> The simple answer is to hard code the name of the machine you want to use
> for network time into the script you are calling the command from...
>
> e.g.
> net time \\mypdc.mydomain.com /set
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 18, 2001 3:19 PM
> To: NT System Admin Issues
> Subject: Re: net time
>
>
> it seems like the net time command does not care about ntp service at all
> but
> queries the first alphabetical computer on a local subnet.  Does your
> proxy's
> NetBIOS name comes before your PDC name?
>
> Andrey Kalinin
>
>
>
>
>
> Please respond to "NT System Admin Issues"
>   <[EMAIL PROTECTED]>
>
>
>
>  To:  "NT System Admin Issues"
>   <[EMAIL PROTECTED]>
>
>  cc:  (bcc: Andrey Kalinin/FIS)
>
>
>
>  Subject: net time
>
>
>
>
>
>
> I have an interesting situation.
>
> Environment:  NT4 Domain, W2K Pro workstation.  PDC (NT4, SP6) set to be
the
> time server via "NET TIME /SETSNTP:PDC" at the workstation (verified vi

Re: net time

2001-09-18 Thread andrey_kalinin

it seems like the net time command does not care about ntp service at all but
queries the first alphabetical computer on a local subnet.  Does your proxy's
NetBIOS name comes before your PDC name?

Andrey Kalinin





Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: net time
  





I have an interesting situation.

Environment:  NT4 Domain, W2K Pro workstation.  PDC (NT4, SP6) set to be the
time server via "NET TIME /SETSNTP:PDC" at the workstation (verified via
/querysntp)
The PDC is running Windows Time Service (w32time) and is set as an NTP
server.  It gets its time from a proxy server (W2KS) which has it's time
updated from NIST.

Anyway, at the W2KP station, if you type "net time /set" it points to the
proxy server.  Why?  If you enter "net time /domain /set" it points to the
PDC as well as when you do the /querysntp.

All I can think of is that the "net time /set" command sees the ntp service
on the proxy server and reports connection to it.  Why is it not going to
the PDC like it is told to do?

Pete

***
Pete Carstensen, MCSE
Senior LAN Engineer
CSK Auto, Inc.
645 E. Missouri Ave.
Phoenix,  AZ  85012
(602) 631-7176
[EMAIL PROTECTED]

Little surprises around every corner, but nothing dangerous.
  -- Willie Wonka

-Original Message-
From: Kent, Larry SYNETICS [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 9:31 AM
To: NT System Admin Issues
Subject: NT System Admin List

Never thought I would send one of these but

Is the list up?

I haven't received any emails in a day and a half fromt he list.

Thanks

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: WARNING: Hacker Alert

2001-09-18 Thread andrey_kalinin



it seems more like a code blue worm, which uses web directory traversal
vulnerability.  apply patch MS00-44.
you should also remove unneeded default virual directoies (like scripts, msdac,
printers, etc.)


Andrey Kalinin





Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
  
  
  
  
  
  
 Subject: RE: WARNING: Hacker Alert   
  





CodeRed seems to have dwindled to nothing on my logs. But it's being
replaced with the EXACT same lines you have below, and they stay consistent
with the code red 2 methods of attacking the more local subnets.

Jason Morris CCDA CCNP
Network Administrator
MJMC, Inc.
708-225-2350
[EMAIL PROTECTED]


-Original Message-
From: Jason Morris [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 9:50 AM
To: NT System Admin Issues
Cc: '[EMAIL PROTECTED]'
Subject: RE: WARNING: Hacker Alert


Yes. It seems to be systems I have previously monitored hitting me with
codered attacks. I bet someone is activating all of their children.

Jason Morris CCDA CCNP
Network Administrator
MJMC, Inc.
708-225-2350
[EMAIL PROTECTED]


-Original Message-
From: xylog [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 9:45 AM
To: NT System Admin Issues
Subject: WARNING: Hacker Alert


All my public facing web servers at home and at my office have shown a
huge continuous hacking activity. Has anyone seen similar? I fear this
may be code red related or automated. Please comment if you have seen
similar. Here is an excerpt from one logfile:

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm






http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: Compaq Hot Swap

2001-09-17 Thread andrey_kalinin



yes you can.  I've done it (unfortunately) so many times

Andrey




"Martin Blackstone" <[EMAIL PROTECTED]> on 09/17/2001 04:24:39 PM


Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: Compaq Hot Swap 
  





I have a drive in one of my Proliants that has the SMART warning.
I have a replacement drive from them to swap in.
This is a RAID5 drive on a SmartArray controller.

I should just be able to pull the drive straight out and shove the new
on in right?
Sorry for the dumb question. I just haven't worked with Compaq in a
couple of years. I know with my IBM's I could.

M

Martin Blackstone
Director, Information Technologies
Superior Access Insurance Services
949.470.2111 x279



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Splash screens and wallpaper

2001-09-17 Thread andrey_kalinin




Can you just modify winnt256.bmp or define a custom BMP file as a wallpaper for
default user?
Otherwise you can write a simple program in any language with an image and a
timer

Andrey




Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: RE: Splash screens and wallpaper
  





A splash screen could be just some kind of .exe or .bat that runs at
startup.  You'd have to find some kind of program that can do that
though.

You said, "logon or boot."  You can change the boot screen.  Search the
web for instructions on how.  It entails modifying ntoskrnl.exe though.

 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
 Sent: Monday, September 17, 2001 1:10 PM
 To: NT System Admin Issues
 Subject: RE: Splash screens and wallpaper



 not sure about the splash screen.  Wallpaper can done with
policies.

 -Original Message-
 From: Dan Munley [mailto:[EMAIL PROTECTED]]
 Sent: Monday, September 17, 2001 1:06 PM
 To: NT System Admin Issues
 Subject: Splash screens and wallpaper



 I have been asked to do two things.

 1.  Present a splash screen that everyone will see for 5 or
10 seconds
 during the logon or boot.

 2.  Change everyone's desktop wallpaper to some uniform
graphic.

 I am looking for suggestions and would appreciate any help.  I
have
 previously created mandatory wallpaper using the registry editor
and logon
 scripts.

 Thanks,

 Dan Munley

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: Screen Lock

2001-09-17 Thread andrey_kalinin



if you lock the keyboard and mouse, how would you unlock the computer when you
need it?  Can you just unplug them?
I do not think that there are screensavers for Win environment similar to UNIX's
xlock, where the scrennsaver is transparent.  From what I remember,
the pseudo-transparent screensavers from MS (like science and 60s from a plus
pack) just capture the desktop image and display it without updating.


Andrey




"Andrews, Gary - MLMC Toronto" <[EMAIL PROTECTED]> on 09/17/2001 02:55:46 PM


Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: Screen Lock 
  






Does any one know of a screen saver that just locks out the keyboard and
mouse, but will actively display the current window or desktop. I have a
systems management computer that is in the open office and I would like to
monitor it at the same time keep the workstation locked.

Gary

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: No Keyboard or Mouse

2001-09-10 Thread andrey_kalinin



Could it be that the machine is on a KVM switch?  There are some KVM switches
which will not detect keyboard/mouse if the switch is not on that machine's
channel during POST check

Andrey Kalinin





Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>(bcc:  
  Andrey Kalinin/FIS) 
  
  
  
 Subject: RE: No Keyboard or Mouse
  





Roger,

The i8042 refers to the keyboard controller. Could there be a BIOS
configuration error on the machine (kbd port disabled)? Could the mouse &
keyboard cables be swapped? Was the keyboard plugged in after the machine
was powered up (I've seen kbd controllers zapped this way)?


Malcolm


-Original Message-
From: Roger Wright [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 1:54 PM
To: NT System Admin Issues
Subject: No Keyboard or Mouse


I have an NT 4.0 client on which I applied the latest Windows Update patches
this past weekend and after rebooting neither the keyboard or mouse are
working (makes it hard to login).  Connecting to the event log remotely I
see a couple  messages relating to msi8042 and then kbclas and mouclas.

I'd rather stick with NT on this machine but will install Win2000Pro if I
can't get it going.

Suggestions?


Roger Wright
Southern Commerce Bank
___

Earth Destroyed by Solar Flare -- Film at eleven.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





___

NOTICE: The information contained in this electronic message is considered
privileged and confidential under Florida Statutes 455.251 and 3905.017. It
is intended solely for the use of the recipient named above. If the reader
is not the recipient named above, you are hereby notified that any
dissemination, distribution, copying or disclosure of the contents of this
message is prohibited. If you have received this e-mail message in error,
please immediately notify the sender and destroy the original message.





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: Mirro Set Query

2001-09-10 Thread andrey_kalinin

I just did such a thing.  If you are upgrading a software RAID 1 system to
Win2K, the mirror is preserved.  According to MS documentation, a software
mirror cannot be created on basic disks.  Which means that if you brake the
mirror before the upgrade (that is what I did to have a backup image just in
case), the only way to create it on Win2K machine is to convert disk to dynamic.

On my second machine with mirrored disks I did an upgrade without braking a
mirror.  The drives are still showing up as mirrored  on basic disks after the
upgrade.  According to the "Disk Concepts and Troubleshooting" chapter of a
Win2K Resource Kit:
*** Start quote *
You can perform the following tasks only on a basic disk:
   Create and delete primary and extended partitions.
   Create and delete logical drives within an extended partition.
Format a partition and mark it as active.
Delete volume, striped, mirror, or stripe sets with parity.
Break a mirror from a mirror set.
Repair failed legacy FT volumes such as mirror sets or stripe sets with
parity.
*** End quote *

Andrey Kalinin
Senior LAN Engineer
S&P





"Jan Wilson" <[EMAIL PROTECTED]> on 09/10/2001 04:47:04 PM


Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: Mirro Set Query 
  





I posted this elsewhere with no replies - maybe someone knows? Thanks

A user wrote (Windows 2000 /May 2001 pg. 21) that "If your Windows NT
Server 4.0 systems have mirrored drives, be aware of the following
upgrade gotcha. We have several servers running NT Server 4.0, and we
want to upgrade them to Windows 2000 Server. However, each server has at
least one pair of mirrored drives, and Win2K Server doesn't support this
configuration. To maintain our infrastructure, we must migrate to Win2K
Advanced Server at several times the price of the migration to Win2K
Server."
I can not find any mention of this at MS site or product doc. We want to
set up our W2K Servers with 2 mirror sets (i.e. 4 drives total one set
using 2 drives for "C" and one set using 2 drives for "d". Can this be
done with W2K Server or do we need advanced server? Thanks!


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: cannot ping by name

2001-09-10 Thread andrey_kalinin



Can it be the routing issue?  Is either the backup or the server in question a
multihomed machine?  Try putting entries in a HOST file on both machines and try
pinging again.  This way, you will eliminate the name resolution issue and will
be able to concentrate on a network issue

When you ping by name, which error do you get:
- unknown host..
- destination host is not reachable
- request timed out?

Andrey





Mal Sasalu <[EMAIL PROTECTED]> on 09/10/2001 04:19:30 PM


Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: RE: cannot ping by name 
  







No, we do not have any manual mapping of machines IP address in either host
file or lmhost file. When I ping any machine by name from this server they get
resoloved except for few servers. Unfortunately one of them being the backup
server. So I am not able to do the backup for last 2 days. I just now tried
ipconfig /flushdns without any luck.
Mal
 -Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 2:13 PM
To:  NT System Admin Issues
Subject:  Re: cannot ping by name

can it be that you have a HOST file with incorrect IP->host mapping on a
machine
from which you cannot ping?

When you ping by name, does it resolve the name correctly?  Does it resolve
the
name at all?

Andrey Kalinin





Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>



 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]>

 cc:  (bcc: Andrey Kalinin/FIS)



 Subject: cannot ping by name








Hi guys,

>From one particular server, I cannot ping "some" servers by name. I can ping
the same servers by IP address or I can do nslookup. I am sure it is not name
servers issue because all other machines can ping any machine by name or IP
address on the network. I also checked the DNS entry on that particular
server, everything looks right. Any thought on this? You can be sarcastic!! I
don't mind. By the way, this is the only 2000 server on an NT network, if that
makes any difference!.

Mal



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: cannot ping by name

2001-09-10 Thread andrey_kalinin

can it be that you have a HOST file with incorrect IP->host mapping on a machine
from which you cannot ping?

When you ping by name, does it resolve the name correctly?  Does it resolve the
name at all?

Andrey Kalinin





Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: cannot ping by name 
  







Hi guys,

>From one particular server, I cannot ping "some" servers by name. I can ping
the same servers by IP address or I can do nslookup. I am sure it is not name
servers issue because all other machines can ping any machine by name or IP
address on the network. I also checked the DNS entry on that particular
server, everything looks right. Any thought on this? You can be sarcastic!! I
don't mind. By the way, this is the only 2000 server on an NT network, if that
makes any difference!.

Mal



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: How do I do this?

2001-09-10 Thread andrey_kalinin

addusers from a resource kit will do it.  use  /d switch to dump a database to a
comma-delimited file

Andrey Kalinin
Senior LAN Engineer
S&P





William Rogge <[EMAIL PROTECTED]> on 09/10/2001 02:39:54 PM


Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: How do I do this?   
  





This should be simple, but I must be missing something.

How can I generate a file or printout of our SAM?  I need to make a change
to a number of users, but at the same time want to make sure that everyone
has some specific settings.

I can not find anything on printing out user information including groups
and profile information.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




Re: Win 2000 Task Scheduler - Error Code explanation

2001-09-10 Thread andrey_kalinin

You might find an additional information on the errors of scheduled tasks in a
file called SchedLgU.txt, located in %WinDir% (or get it by selecting
Advanced\View log menu in Tasks folder)

But in general, the exit messages from Task Manager are the standard NT (or
Win2K) error messages. You can get their description by running
net helpmsg YourErrorCode
to get some description

Error 1 means Incorrect function
Error 2331  means The operation is invalid for this device

Make sure that your job is scheduled with a proper permissions.  TaskScheduler
service runs under LocalSystem account, and if you need to copy a file from a
remote place, you need to run it as some other user.

Andrey Kalinin
Senior LAN Engineer
S&P





"Mohamed A. Karimullah" <[EMAIL PROTECTED]> on 09/10/2001 12:11:35 PM


Please respond to "NT System Admin Issues"
  <[EMAIL PROTECTED]>
  
  
  
 To:  "NT System Admin Issues"
  <[EMAIL PROTECTED]> 
  
 cc:  (bcc: Andrey Kalinin/FIS)   
  
  
  
 Subject: Win 2000 Task Scheduler - Error Code explanation
  





A batch program when run manually or scheduled to run in a minute or two
(for testing) runs successfully. When scheduled for after hours with no
activity for about 6 hours or so, the Task Scheduler log file reports
..."The task completed with an exit code of (1)".

An exit code of (0) refers to a successful task. What does exit code (1)
signify? As I'm at it what does exit code (2331) imply? Where among the
plethora of literature did MS put an explanation of these exit codes?

The Task Scheduler runs on a Win 2000 Adv server in an NT 4 Domain. The
Batch job is a simple copy and unzipping operation.

Thanks.

Mohamed A Karimullah
Network Engineer
PATRINA CORPORATION
2 Wall Street, New York, NY 10005
T -(212) 233-1155
F -(212) 233-2244
[EMAIL PROTECTED]
www.patrina.com


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





http://www.sunbelt-software.com/ntsysadmin_list_charter.htm