RE: Exchange 2010 System Public Folders
What was the process? MBS is saying it can't be done. Sounds like a challenge to me :) -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, July 26, 2011 6:08 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders Once you're done with all your normal PFs, you can get rid of the system ones too. I did this for a customer recently - to be quite honest it's a PITA with limited savings. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, July 25, 2011 9:27 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders Thanks. How 'bout after I'm done with all PFs? If I were to build a new Exchange 2010 box (unlikely) and not install a PF on it? Hopefully, you have at least two complete sets of replicas. How come? I only have one server (2010) so only one set of replicas. I think that your goal is likely to cause more trouble than benefit it provides. Probably :), but I like cleaning up unneeded stuff when I can. I'm not a big fan of extra cruft that I'm too scared to touch because by definition, it's something in my environment that I don't understand, and I like to understand things :) I'd raise a case with CSS/PSS if you really want to do this. Maybe at the end of the year if I still have one of my two free cases left. But, frankly, dealing MS support lately has become more frustrating than it's worth. I've got a case open right now that's been open for weeks and we're just going round in circles explaining the problem, being assured they understand it and will call me back with a solution, only to have me re-explain the problem. Do you have any tricks for getting escalated to US based support quickly? -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, July 25, 2011 7:03 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders You can't eliminate the last replica of system folders in your organization, if you've create a PF DB on the highest version Exchange in the organization. To say that another way, if you migrate from Exchange 2003 to Exchange 2010, and you create a PF DB on Exchange 2010, you must keep a replica of the system folders in the organization. Hopefully, you have at least two complete sets of replicas. I think that your goal is likely to cause more trouble than benefit it provides. I'd raise a case with CSS/PSS if you really want to do this. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, July 25, 2011 6:41 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders True, but cleaning unneeded stuff now prevents having to figure out which is which if there ever is a crisis down the line. Kinda like reducing your attack surface; I'd rather have fewer things that can use up system resources. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Monday, July 25, 2011 5:07 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders hmmm, if it ain't broke, don't fix it? Brian Desmond br...@briandesmond.com 7/25/2011 3:00 PM No they're probably not, but, they're probably also not causing you any problems. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, July 25, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders Well, I'm pretty sure I've got some extras from old servers and I was setting out to clean up the old ones. For instance I have 5 OWAScratchPad and 5 StoreEvents. But, when I tried to determine which ones were active, I found that neither of my database GUIDs matched the GUIDs on the names of the public folders, which leads me to believe they're not needed at all. From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Monday, July 25, 2011 3:59 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders I don't expect that it's possible to have normal folders without the system ones. I would leave it alone. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, July 25, 2011 3:54 PM To: NT System Admin Issues Subject: Exchange 2010 System Public Folders Now that we're 100% Outlook 2007/2010 and Exhchange 2010, is there any reason I shouldn't delete the System Public Folders? I still have other public folders, so I don't want to remove all public folders yet. ~ Finally, powerful endpoint security that ISN'T
RE: Vipre console hangs server on reboot
Three cheers for REO...no, make that 4. BUT, they stole the line from Groucho Marx...and technically, they didn't say it, they just used it as an album title :) From: Gasper, Rick [mailto:rickgas...@kings.edu] Sent: Wednesday, July 27, 2011 8:32 AM To: NT System Admin Issues Subject: RE: Vipre console hangs server on reboot Here is a suggestion: Download Microsoft's Virtual PC. Create an Admin Virtual PC where you could install all these apps/consoles. Run it from your own desktop (this will keep your desktop clean from all those apps with crap.) This will give you a clean PC, an admin console, and something that you can separate your email from real network/computer administration. Now if you do this and it works out for you, then you can use hyper-v or something other virtualizations software and have this VM run off a server. Seriously I do this and it works great. This reminds me of an old proverb: Give a man a fish and he eats today, teach a man to fish and he eats every day and also have low cholesterol. Or as the great philosopher REO Speedwagon once said: You can tune a piano, but you cannot tuna fish. Rick Rick Gasper Manager, Network Services King's College 133 N. River St Wilkes-Barre PA 18711 PH: 570-208-5845 Fax: 570-208-6072 Cell: 570-760-0335 rickgas...@kings.edumailto:rickgas...@kings.edu Don't become a phishing victim!! King's College and other reputable organizations will never use email to request that you reply with your password, Social Security number or confidential personal information. On Tue, Jul 26, 2011 at 14:32, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: I *AM* running multiple apps at once. Microsoft LookOut!...err... Outlook is a bit of a resource hog. My AS/400 terminal client is running now, I have a VNC session going, I have Chrome running multiple tabs... so, yeah... my system isn't just sitting here doing nothing. From: kz2...@googlemail.commailto:kz2...@googlemail.com [mailto:kz2...@googlemail.commailto:kz2...@googlemail.com] Sent: Tuesday, July 26, 2011 2:12 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot This I don't understand, running of management tools on (sometimes dedicated) servers. Why not go the whole hog and run your email and internet browsing on a server too? If you were using a thin client or a drastically underpowered PC, then this would make sense, but not if you have a decent workstation. I agree that running lots of consoles creates a headache due to startup time and occasionally on a resource basis, so what we try to do is integrate as much stuff as possible into OpsManager, so we don't need to stare at a load of consoles. Then I can only open consoles as I need to work on them. But if your PC can't handle running seven or eight applications including a few management consoles, or if you worry because your machine uses lots of its memory (even though it is there to be used), then you have a few issues that need to be resolved. Just my 2 penneth worth, ymmv Sent from my POS BlackBerry wireless device, which may wipe itself at any moment From: Steve Ens stevey...@gmail.commailto:stevey...@gmail.com Date: Tue, 26 Jul 2011 13:04:20 -0500 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com ReplyTo: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Subject: Re: Vipre console hangs server on reboot Better on a workstation than on a server is all I can say. On Tue, Jul 26, 2011 at 12:29 PM, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Well, yeah... but I don't choose to load down my workstation with a whole bunch of management consoles and associated crap. :D From: Roger Wright [mailto:rhw...@gmail.commailto:rhw...@gmail.com] Sent: Tuesday, July 26, 2011 1:23 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot Agreed. I can run the VIPRE console on the server but choose to do it from my desktop machine instead. It's rarely open on the server. Roger Wright ___ Dr. Seuss is my favorite rapper! Cat - Hat... sheer genius! On Tue, Jul 26, 2011 at 1:20 PM, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: Why on earth have the console running all the time, then? On Tue, Jul 26, 2011 at 1:14 PM, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Nope... it's not the Vipre server that's the problem, it's the console. Guess I'll just have to live with manually shutting down the console if I want to reboot the server. It's not that big a deal now that I've decided not to automatically reboot the server weekly. From: Kim Longenbaugh [mailto:k...@colonialsavings.commailto:k...@colonialsavings.com] Sent: Tuesday, July 26, 2011 12:59 PM To: NT System Admin Issues Subject:
RE: Vipre console hangs server on reboot
Throw on a couple monitors and you're getting close to John's $2500 esitmate. From: Robert LeBlanc [mailto:robert.lebl...@aanmpc.com] Sent: Wednesday, July 27, 2011 4:14 PM To: NT System Admin Issues Subject: RE: Vipre console hangs server on reboot I just bought an optiplex990 I7Quad, 16GB Ram, solid state drive, Office 2010 Pro, Win7proX64 for $1820.00 Not bad I figure. For our Exec Director who will be crunching 500,000 row spreadsheets, with pivots, vlookups, if statements galore that end up being about 150MB in xlsb format. Hope it's enoughreally. From: Don Ely [mailto:don@gmail.com]mailto:[mailto:don@gmail.com] Sent: Tuesday, July 26, 2011 03:28 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot $2500?!?!?!?! Funny, my company didn't pay more than $1000 for my quad core with 8GB of RAM On Tue, Jul 26, 2011 at 1:17 PM, Stefan Jafs stefan.j...@gmail.commailto:stefan.j...@gmail.com wrote: Yeah, I guess the carpet business is flat on the floor in this economy. On Tue, Jul 26, 2011 at 4:08 PM, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Gee... you got an extra $2500+ or so for all new hardware and software? I mean, I'd love to have a nice new 64-bit Windows 7 machine with Office 2010 and all that stuff...but unfortunately, I don't have that. I've got a 3-year-old Optiplex running XP Pro 32-bit. And with the way the economy is going lately, I don't see me getting an upgraded desktop machine any time soon. From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Tuesday, July 26, 2011 3:41 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot Just a thought...perhaps you need a new workstation if those things you've listed tax it's resources to the point that you can't do your job appropriately. But then, given your posts regarding this problem today I doubt you'll understand anything I have to say either. But I feel bad for Jonathan whose head seems to be swelling. He's been walking around paraphrasing Tombstone of all things... - WJR On Tue, Jul 26, 2011 at 14:32, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: I *AM* running multiple apps at once. Microsoft LookOut!...err... Outlook is a bit of a resource hog. My AS/400 terminal client is running now, I have a VNC session going, I have Chrome running multiple tabs... so, yeah... my system isn't just sitting here doing nothing. From: kz2...@googlemail.commailto:kz2...@googlemail.com [mailto:kz2...@googlemail.commailto:kz2...@googlemail.com] Sent: Tuesday, July 26, 2011 2:12 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot This I don't understand, running of management tools on (sometimes dedicated) servers. Why not go the whole hog and run your email and internet browsing on a server too? If you were using a thin client or a drastically underpowered PC, then this would make sense, but not if you have a decent workstation. I agree that running lots of consoles creates a headache due to startup time and occasionally on a resource basis, so what we try to do is integrate as much stuff as possible into OpsManager, so we don't need to stare at a load of consoles. Then I can only open consoles as I need to work on them. But if your PC can't handle running seven or eight applications including a few management consoles, or if you worry because your machine uses lots of its memory (even though it is there to be used), then you have a few issues that need to be resolved. Just my 2 penneth worth, ymmv Sent from my POS BlackBerry wireless device, which may wipe itself at any moment From: Steve Ens stevey...@gmail.commailto:stevey...@gmail.com Date: Tue, 26 Jul 2011 13:04:20 -0500 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com ReplyTo: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Subject: Re: Vipre console hangs server on reboot Better on a workstation than on a server is all I can say. On Tue, Jul 26, 2011 at 12:29 PM, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Well, yeah... but I don't choose to load down my workstation with a whole bunch of management consoles and associated crap. :D From: Roger Wright [mailto:rhw...@gmail.commailto:rhw...@gmail.com] Sent: Tuesday, July 26, 2011 1:23 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot Agreed. I can run the VIPRE console on the server but choose to do it from my desktop machine instead. It's rarely open on the server. Roger Wright ___ Dr. Seuss is my favorite rapper! Cat - Hat... sheer genius! On Tue, Jul 26, 2011 at 1:20 PM, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: Why on earth have the console running all the
RE: Vipre console hangs server on reboot
A Toyota's a Toyota. From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, July 27, 2011 4:44 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot I have a 5 yo Toyota. On Wed, Jul 27, 2011 at 4:17 PM, Steve Ens stevey...@gmail.commailto:stevey...@gmail.com wrote: I have a three year old Honda... On Wed, Jul 27, 2011 at 3:13 PM, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Jonathan: As I just typed a few moments ago -- you want a brand new Ferrari, but you know you can't afford the payments. Are you really going to go to the trouble of configuring it just how you want and getting a price quote or are you going to settle for your 3-year-old Honda? Me? I'm settling for the 3-year-old Honda, because at least I can afford that. From: Jonathan Link [mailto:jonathan.l...@gmail.commailto:jonathan.l...@gmail.com] Sent: Wednesday, July 27, 2011 3:42 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot Sir, we are all extremely real. If you prick me, do I not bleed? Look, you ask for advice. You get advice. You come up with all kinds of reasons why said advice doesn't work for you. You are very unflexible when it comes to taking advice. Or you aren't able to understand the advice offered. Well, there's always a reason. With everything. And 9 times out of 10 it's behavioral. Meaning you could do something a different way. Even if they say that there is no budget, you could do a lot of work to calculate a budget based on certain assumptions. So, you've got a bunch of 10 year old equipment. How much did you spend reparing it last year. How much would new equipment for 1/3, 1/4 or 1/5 of it cost, and make a plan to replace stuff. It may cost more, but you might be suprised. In any event, it's obvious you haven't even made the effort. It is the lack of effor tthat is irksom to a great many on this list. On Wed, Jul 27, 2011 at 3:31 PM, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: The reason I have no idea what a new desktop would cost is that management is NOT going to approve ANYTHING right now, so why even bother looking??? Get real! From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Wednesday, July 27, 2011 1:38 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot Well that bit didn't shock anyoneexcept maybe Jonathan who's now wearing cowboy boots and looking for a horse to ride. - WJR On Wed, Jul 27, 2011 at 12:20, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: That I have no idea what a new, fully-configured 64-bit workstation with Office, a ton of RAM and all the other assorted pieces of software that would have to be rebought would cost. From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Wednesday, July 27, 2011 11:46 AM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot What was supposed to be shocking exactly? That you have no idea about hardware costs, or that you think I wouldn't have a spare $2500? - WJR On Wed, Jul 27, 2011 at 08:33, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Actually, I have no idea what a new, fully-loaded 64-bit system will cost. I haven't actually priced one. I was just making up a number for shock value. :D From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Tuesday, July 26, 2011 5:34 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot Same here. But we don't shop for Alienware PC's to do our work. - WJR On Tue, Jul 26, 2011 at 16:28, Don Ely don@gmail.commailto:don@gmail.com wrote: $2500?!?!?!?! Funny, my company didn't pay more than $1000 for my quad core with 8GB of RAM On Tue, Jul 26, 2011 at 1:17 PM, Stefan Jafs stefan.j...@gmail.commailto:stefan.j...@gmail.com wrote: Yeah, I guess the carpet business is flat on the floor in this economy. On Tue, Jul 26, 2011 at 4:08 PM, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Gee... you got an extra $2500+ or so for all new hardware and software? I mean, I'd love to have a nice new 64-bit Windows 7 machine with Office 2010 and all that stuff...but unfortunately, I don't have that. I've got a 3-year-old Optiplex running XP Pro 32-bit. And with the way the economy is going lately, I don't see me getting an upgraded desktop machine any time soon. From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Tuesday, July 26, 2011 3:41 PM To: NT System Admin Issues Subject: Re: Vipre console hangs server on reboot Just a thought...perhaps you need a new workstation if those things you've listed tax it's resources to the point that you can't do your job appropriately. But then, given your posts regarding this
RE: Exchange 2010 System Public Folders
Ok, thx for the info. I think I got my extra ones deleted, but I'll wait til the next upgrade to kill the whole PF tree. -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Wednesday, July 27, 2011 10:27 AM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders Michael and I were trading IMs when I did this as I recall. I cleaned out all but the last store using supported mechanisms and then went and killed the last one with an LDAP delete. I've been finding little references to the tombstoned object all over the place - annoying at best. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, July 27, 2011 5:05 AM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders No, I said it wasn't supported. If Brian has a supported mechanism, I'm all ears. :-) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Wednesday, July 27, 2011 1:09 AM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders What was the process? MBS is saying it can't be done. Sounds like a challenge to me :) -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, July 26, 2011 6:08 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders Once you're done with all your normal PFs, you can get rid of the system ones too. I did this for a customer recently - to be quite honest it's a PITA with limited savings. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, July 25, 2011 9:27 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders Thanks. How 'bout after I'm done with all PFs? If I were to build a new Exchange 2010 box (unlikely) and not install a PF on it? Hopefully, you have at least two complete sets of replicas. How come? I only have one server (2010) so only one set of replicas. I think that your goal is likely to cause more trouble than benefit it provides. Probably :), but I like cleaning up unneeded stuff when I can. I'm not a big fan of extra cruft that I'm too scared to touch because by definition, it's something in my environment that I don't understand, and I like to understand things :) I'd raise a case with CSS/PSS if you really want to do this. Maybe at the end of the year if I still have one of my two free cases left. But, frankly, dealing MS support lately has become more frustrating than it's worth. I've got a case open right now that's been open for weeks and we're just going round in circles explaining the problem, being assured they understand it and will call me back with a solution, only to have me re-explain the problem. Do you have any tricks for getting escalated to US based support quickly? -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, July 25, 2011 7:03 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders You can't eliminate the last replica of system folders in your organization, if you've create a PF DB on the highest version Exchange in the organization. To say that another way, if you migrate from Exchange 2003 to Exchange 2010, and you create a PF DB on Exchange 2010, you must keep a replica of the system folders in the organization. Hopefully, you have at least two complete sets of replicas. I think that your goal is likely to cause more trouble than benefit it provides. I'd raise a case with CSS/PSS if you really want to do this. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, July 25, 2011 6:41 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders True, but cleaning unneeded stuff now prevents having to figure out which is which if there ever is a crisis down the line. Kinda like reducing your attack surface; I'd rather have fewer things that can use up system resources. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Monday, July 25, 2011 5:07 PM To: NT System Admin Issues Subject: RE: Exchange 2010 System Public Folders hmmm, if it ain't broke, don't fix it? Brian Desmond br...@briandesmond.com 7/25/2011 3:00 PM No they're probably not, but, they're probably also not causing you any problems. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Monday, July 25, 2011 4:04 PM To: NT System Admin Issues Subject: RE: Exchange 2010
Weird robocopy /mir bug?
I'm having some strange problem where robocopy /mir doesn't actually, well...mirror. I'm pretty sure it has something to do with short file names. The files that are causing problems are named: Short name Long name OLIVER~1.WPD OLIVER-M.GD2.wpd OLIVER-M.GRD OLIVER~3.WPD oliver-m.rec.wpd OLIVER~2.WPD Due to the nature of the problem, I'm not sure which files are actually causing the problem, but I believe it's the last two listed. It seems like there's a name collision on OLIVER~2.WPD. I've posted the log below and also at www.evangel.edu/robocopy.txthttp://www.evangel.edu/robocopy.txt for better readability. I've run robocopy /mir 4 times so you can see how it goes back and forth replacing existing files with new ones. I can't for the life of me figure out what's going on or more importantly how to fix it. Any help is appreciated. E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersdir Floppy Disk 1\oli*.* /x Volume in drive E is New Volume Volume Serial Number is B0B3-6FF9 Directory of E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1 12/25/1999 06:36 PM13,121 OLIVER~1.WPD OLIVER-M.GD2.wpd 03/15/1999 01:20 AM12,684 OLIVER-M.GRD 03/15/1999 05:50 PM 8,803 OLIVER~3.WPD oliver-m.rec.wpd 12/25/1999 06:29 PM10,367 OLIVER~2.WPD 4 File(s) 44,975 bytes 0 Dir(s) 61,758,398,464 bytes free E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersn: N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letterse: E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir --- ROBOCOPY :: Robust File Copy for Windows --- Started : Thu Jul 28 12:03:13 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100%New File 10367OLIVER~2.WPD -- TotalCopied Skipped MismatchFAILEDExtras Dirs : 1 0 1 0 0 0 Files :91 190 0 0 0 Bytes :1.01 m10.1 k1.00 m 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:13 2011 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir --- ROBOCOPY :: Robust File Copy for Windows --- Started : Thu Jul 28 12:03:15 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100%New File 10367OLIVER~2.WPD 100%Older 8803oliver-m.rec.wpd -- TotalCopied Skipped MismatchFAILEDExtras Dirs : 1 0 1 0 0 0 Files :91 289 0 0 0 Bytes :1.01 m18.7 k 1016.1 k 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:15 2011 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir --- ROBOCOPY :: Robust File Copy for Windows --- Started : Thu Jul 28 12:03:16 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30
RE: Weird robocopy /mir bug?
You mean short name generation on the server? That's on my list of desperation ideas, mainly cuz I've never done it so I'm not sure exactly what the effects will be. Does that delete all existing short names? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, July 28, 2011 6:42 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? Turn off short filenames? On Thu, Jul 28, 2011 at 15:51, Crawford, Scott crawfo...@evangel.edu wrote: I’m having some strange problem where robocopy /mir doesn’t actually, well…mirror. I’m pretty sure it has something to do with short file names. The files that are causing problems are named: Short name Long name OLIVER~1.WPD OLIVER-M.GD2.wpd OLIVER-M.GRD OLIVER~3.WPD oliver-m.rec.wpd OLIVER~2.WPD Due to the nature of the problem, I’m not sure which files are actually causing the problem, but I believe it’s the last two listed. It seems like there’s a name collision on OLIVER~2.WPD. I’ve posted the log below and also at www.evangel.edu/robocopy.txt for better readability. I’ve run robocopy /mir 4 times so you can see how it goes back and forth replacing existing files with new ones. I can’t for the life of me figure out what’s going on or more importantly how to fix it. Any help is appreciated. E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersdir Floppy Disk 1\oli*.* /x Volume in drive E is New Volume Volume Serial Number is B0B3-6FF9 Directory of E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1 12/25/1999 06:36 PM 13,121 OLIVER~1.WPD OLIVER-M.GD2.wpd 03/15/1999 01:20 AM 12,684 OLIVER-M.GRD 03/15/1999 05:50 PM 8,803 OLIVER~3.WPD oliver-m.rec.wpd 12/25/1999 06:29 PM 10,367 OLIVER~2.WPD 4 File(s) 44,975 bytes 0 Dir(s) 61,758,398,464 bytes free E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersn: N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letterse: E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:13 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100% New File 10367 OLIVER~2.WPD -- Total Copied Skipped Mismatch FAILED Extras Dirs : 1 0 1 0 0 0 Files : 91 1 90 0 0 0 Bytes : 1.01 m 10.1 k 1.00 m 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:13 2011 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:15 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100% New File 10367 OLIVER~2.WPD 100% Older 8803 oliver-m.rec.wpd -- Total Copied Skipped Mismatch FAILED Extras Dirs : 1 0 1 0 0 0 Files : 91 2 89 0 0 0 Bytes : 1.01 m 18.7 k 1016.1 k 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:15 2011 E:\Staff\NelsonN\My
RE: Sys Admin Day
If you just think of your normal work day, its easy to remember. I generally work 7 to 9. 7-29 - easy peasy. From: David Lum [mailto:david@nwea.org] Sent: Friday, July 29, 2011 10:56 AM To: NT System Admin Issues Subject: RE: Sys Admin Day I need to somehow know when this day is coming up, seems the only time I am aware of it is when someone posts to this list! I suppose I could create a calendar reminder huh? Nah, that's be the smart thing to do... Dave From: James Rankin [mailto:kz2...@googlemail.com]mailto:[mailto:kz2...@googlemail.com] Sent: Friday, July 29, 2011 8:41 AM To: NT System Admin Issues Subject: Re: Sys Admin Day I know I posted my blog from 2009 for SysAdmin Day here when I originally wrote it, but as I completely forgot about today being SysAdmin Day and haven't got time to knock anything together, I'm going to apologetically post another link for anyone who wasn't around then http://raythestray.blogspot.com/2009/07/today-is-systems-administrator-day.html On 29 July 2011 16:35, William Robbins dangerw...@gmail.commailto:dangerw...@gmail.com wrote: I get to work late tonight. :P - WJR On Fri, Jul 29, 2011 at 10:28, Matthew B Ames matthew.a...@qinetiq.commailto:matthew.a...@qinetiq.com wrote: Happy Sys Admin day hope you all get some cakes, or something nice! http://www.sysadminday.com/ -- Matthew Ames Senior Software Engineer, IT Services MoD Boscombe Down Tel: 01980 662791, Mobile: 07799 828279tel:07799%20828279 Fax: 01980 664012 Email: matthew.a...@qinetiq.commailto:matthew.a...@qinetiq.com (work) matt...@ames.orgmailto:matt...@ames.org (home) QinetiQ - The Global Defence and Security Experts. Delivering customer focused solutions. Many hands make a tall horse. 11 was a race horse, 22 was 12. race, 22112. To err is human - to moo, bovine. Macmillan Cancer Support Charity bike ride - donate nowhttp://www.justgiving.com/mba-mac-2011 This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com. http://www.qinetiq.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. * IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them. However, if you pass them on via email, be sure to include a disclaimer regarding liability for transmission. In the event that the originator did not send this email to you, then please return it to us and attach a scanned-in picture of your mother's brother's wife wearing nothing but a kangaroo suit, and we will
RE: Sys Admin Day
Uhh, nevermind. I just looked at how it was calculated :) From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Friday, July 29, 2011 11:43 AM To: NT System Admin Issues Subject: RE: Sys Admin Day If you just think of your normal work day, its easy to remember. I generally work 7 to 9. 7-29 - easy peasy. From: David Lum [mailto:david@nwea.org]mailto:[mailto:david@nwea.org] Sent: Friday, July 29, 2011 10:56 AM To: NT System Admin Issues Subject: RE: Sys Admin Day I need to somehow know when this day is coming up, seems the only time I am aware of it is when someone posts to this list! I suppose I could create a calendar reminder huh? Nah, that's be the smart thing to do... Dave From: James Rankin [mailto:kz2...@googlemail.com]mailto:[mailto:kz2...@googlemail.com] Sent: Friday, July 29, 2011 8:41 AM To: NT System Admin Issues Subject: Re: Sys Admin Day I know I posted my blog from 2009 for SysAdmin Day here when I originally wrote it, but as I completely forgot about today being SysAdmin Day and haven't got time to knock anything together, I'm going to apologetically post another link for anyone who wasn't around then http://raythestray.blogspot.com/2009/07/today-is-systems-administrator-day.html On 29 July 2011 16:35, William Robbins dangerw...@gmail.commailto:dangerw...@gmail.com wrote: I get to work late tonight. :P - WJR On Fri, Jul 29, 2011 at 10:28, Matthew B Ames matthew.a...@qinetiq.commailto:matthew.a...@qinetiq.com wrote: Happy Sys Admin day hope you all get some cakes, or something nice! http://www.sysadminday.com/ -- Matthew Ames Senior Software Engineer, IT Services MoD Boscombe Down Tel: 01980 662791, Mobile: 07799 828279tel:07799%20828279 Fax: 01980 664012 Email: matthew.a...@qinetiq.commailto:matthew.a...@qinetiq.com (work) matt...@ames.orgmailto:matt...@ames.org (home) QinetiQ - The Global Defence and Security Experts. Delivering customer focused solutions. Many hands make a tall horse. 11 was a race horse, 22 was 12. race, 22112. To err is human - to moo, bovine. Macmillan Cancer Support Charity bike ride - donate nowhttp://www.justgiving.com/mba-mac-2011 This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com. http://www.qinetiq.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. * IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them. However, if you pass them on via email, be sure to include a disclaimer regarding
RE: Weird robocopy /mir bug?
Turns out that this issue was a known issue that was fixed in W2K SP3 and NT SP5. Unfortunately it seems to be back. Maybe I should spin up a W2K box to do this copy :) Anybody have any better options? http://support.microsoft.com/kb/195144 -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Thursday, July 28, 2011 7:33 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? You mean short name generation on the server? That's on my list of desperation ideas, mainly cuz I've never done it so I'm not sure exactly what the effects will be. Does that delete all existing short names? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, July 28, 2011 6:42 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? Turn off short filenames? On Thu, Jul 28, 2011 at 15:51, Crawford, Scott crawfo...@evangel.edu wrote: I’m having some strange problem where robocopy /mir doesn’t actually, well…mirror. I’m pretty sure it has something to do with short file names. The files that are causing problems are named: Short name Long name OLIVER~1.WPD OLIVER-M.GD2.wpd OLIVER-M.GRD OLIVER~3.WPD oliver-m.rec.wpd OLIVER~2.WPD Due to the nature of the problem, I’m not sure which files are actually causing the problem, but I believe it’s the last two listed. It seems like there’s a name collision on OLIVER~2.WPD. I’ve posted the log below and also at www.evangel.edu/robocopy.txt for better readability. I’ve run robocopy /mir 4 times so you can see how it goes back and forth replacing existing files with new ones. I can’t for the life of me figure out what’s going on or more importantly how to fix it. Any help is appreciated. E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersdir Floppy Disk 1\oli*.* /x Volume in drive E is New Volume Volume Serial Number is B0B3-6FF9 Directory of E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1 12/25/1999 06:36 PM 13,121 OLIVER~1.WPD OLIVER-M.GD2.wpd 03/15/1999 01:20 AM 12,684 OLIVER-M.GRD 03/15/1999 05:50 PM 8,803 OLIVER~3.WPD oliver-m.rec.wpd 12/25/1999 06:29 PM 10,367 OLIVER~2.WPD 4 File(s) 44,975 bytes 0 Dir(s) 61,758,398,464 bytes free E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersn: N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letterse: E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:13 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100% New File 10367 OLIVER~2.WPD -- Total Copied Skipped Mismatch FAILED Extras Dirs : 1 0 1 0 0 0 Files : 91 1 90 0 0 0 Bytes : 1.01 m 10.1 k 1.00 m 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:13 2011 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:15 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100% New File 10367 OLIVER~2.WPD 100% Older 8803 oliver-m.rec.wpd
RE: Weird robocopy /mir bug?
If you'd like to play along, the batch file below demonstrates the problem. Note that we're creating two files, copying them to a new folder, but only one ends up at the end. I really need to be able to use robocopy to do this copy to minimize the disruption to the users, but this is really jamming me up. -snip- md CollisionTest cd CollisionTest echo a xx~1.xxx echo a xx.xxx md new copy /y *.* new dir new -snip- -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Friday, July 29, 2011 3:41 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? Turns out that this issue was a known issue that was fixed in W2K SP3 and NT SP5. Unfortunately it seems to be back. Maybe I should spin up a W2K box to do this copy :) Anybody have any better options? http://support.microsoft.com/kb/195144 -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Thursday, July 28, 2011 7:33 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? You mean short name generation on the server? That's on my list of desperation ideas, mainly cuz I've never done it so I'm not sure exactly what the effects will be. Does that delete all existing short names? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, July 28, 2011 6:42 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? Turn off short filenames? On Thu, Jul 28, 2011 at 15:51, Crawford, Scott crawfo...@evangel.edu wrote: I’m having some strange problem where robocopy /mir doesn’t actually, well…mirror. I’m pretty sure it has something to do with short file names. The files that are causing problems are named: Short name Long name OLIVER~1.WPD OLIVER-M.GD2.wpd OLIVER-M.GRD OLIVER~3.WPD oliver-m.rec.wpd OLIVER~2.WPD Due to the nature of the problem, I’m not sure which files are actually causing the problem, but I believe it’s the last two listed. It seems like there’s a name collision on OLIVER~2.WPD. I’ve posted the log below and also at www.evangel.edu/robocopy.txt for better readability. I’ve run robocopy /mir 4 times so you can see how it goes back and forth replacing existing files with new ones. I can’t for the life of me figure out what’s going on or more importantly how to fix it. Any help is appreciated. E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersdir Floppy Disk 1\oli*.* /x Volume in drive E is New Volume Volume Serial Number is B0B3-6FF9 Directory of E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1 12/25/1999 06:36 PM 13,121 OLIVER~1.WPD OLIVER-M.GD2.wpd 03/15/1999 01:20 AM 12,684 OLIVER-M.GRD 03/15/1999 05:50 PM 8,803 OLIVER~3.WPD oliver-m.rec.wpd 12/25/1999 06:29 PM 10,367 OLIVER~2.WPD 4 File(s) 44,975 bytes 0 Dir(s) 61,758,398,464 bytes free E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersn: N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letterse: E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:13 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100% New File 10367 OLIVER~2.WPD -- Total Copied Skipped Mismatch FAILED Extras Dirs : 1 0 1 0 0 0 Files : 91 1 90 0 0 0 Bytes : 1.01 m 10.1 k 1.00 m 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:13 2011 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:15 2011
RE: Weird robocopy /mir bug?
Like I said, I’m not completely opposed to it, but if there are scripts or web pages (both can reside on this server) that are using the short names for some reason, they may break. I’m searching for all possible problem names right now to see if I can get them renamed. We’ll see how many turn up before I decide how plausible that is. From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, July 29, 2011 5:06 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? Yes, on the server. Aside from avoiding this problem, it will speed up (somewhat) your file access. It's not a desperation measure, it's a good tuning measure. Kurt On Thu, Jul 28, 2011 at 17:33, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: You mean short name generation on the server? That's on my list of desperation ideas, mainly cuz I've never done it so I'm not sure exactly what the effects will be. Does that delete all existing short names? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Thursday, July 28, 2011 6:42 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? Turn off short filenames? On Thu, Jul 28, 2011 at 15:51, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I’m having some strange problem where robocopy /mir doesn’t actually, well…mirror. I’m pretty sure it has something to do with short file names. The files that are causing problems are named: Short name Long name OLIVER~1.WPD OLIVER-M.GD2.wpd OLIVER-M.GRD OLIVER~3.WPD oliver-m.rec.wpd OLIVER~2.WPD Due to the nature of the problem, I’m not sure which files are actually causing the problem, but I believe it’s the last two listed. It seems like there’s a name collision on OLIVER~2.WPD. I’ve posted the log below and also at www.evangel.edu/robocopy.txthttp://www.evangel.edu/robocopy.txt for better readability. I’ve run robocopy /mir 4 times so you can see how it goes back and forth replacing existing files with new ones. I can’t for the life of me figure out what’s going on or more importantly how to fix it. Any help is appreciated. E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersdir Floppy Disk 1\oli*.* /x Volume in drive E is New Volume Volume Serial Number is B0B3-6FF9 Directory of E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1 12/25/1999 06:36 PM13,121 OLIVER~1.WPD OLIVER-M.GD2.wpd 03/15/1999 01:20 AM12,684 OLIVER-M.GRD 03/15/1999 05:50 PM 8,803 OLIVER~3.WPD oliver-m.rec.wpd 12/25/1999 06:29 PM10,367 OLIVER~2.WPD 4 File(s) 44,975 bytes 0 Dir(s) 61,758,398,464 bytes free E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersn: N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letterse: E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:13 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100%New File 10367OLIVER~2.WPD -- TotalCopied Skipped MismatchFAILEDExtras Dirs : 1 0 1 0 0 0 Files :91 190 0 0 0 Bytes :1.01 m10.1 k1.00 m 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:13 2011 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:15 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30
RE: Weird robocopy /mir bug?
I’m using the one that came with W2K8 R2, but I’ve also tried the W2K3 reskit one. Both exhibit the problem, but since then I’ve found that KB article and experimented with the batch I posted earlier. So, it’s more general than robocopy at this point and I’m guessing fixing the underlying problem will fix robocopy. From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, July 29, 2011 5:05 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? What version of robocopy? Have you snagged a copy from a newer OS? Specifically, try the one from the Win2k3 ResKit, or from Win7/Win2k8. On Fri, Jul 29, 2011 at 13:41, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Turns out that this issue was a known issue that was fixed in W2K SP3 and NT SP5. Unfortunately it seems to be back. Maybe I should spin up a W2K box to do this copy :) Anybody have any better options? http://support.microsoft.com/kb/195144 -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edumailto:crawfo...@evangel.edu] Sent: Thursday, July 28, 2011 7:33 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? You mean short name generation on the server? That's on my list of desperation ideas, mainly cuz I've never done it so I'm not sure exactly what the effects will be. Does that delete all existing short names? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Thursday, July 28, 2011 6:42 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? Turn off short filenames? On Thu, Jul 28, 2011 at 15:51, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I’m having some strange problem where robocopy /mir doesn’t actually, well…mirror. I’m pretty sure it has something to do with short file names. The files that are causing problems are named: Short name Long name OLIVER~1.WPD OLIVER-M.GD2.wpd OLIVER-M.GRD OLIVER~3.WPD oliver-m.rec.wpd OLIVER~2.WPD Due to the nature of the problem, I’m not sure which files are actually causing the problem, but I believe it’s the last two listed. It seems like there’s a name collision on OLIVER~2.WPD. I’ve posted the log below and also at www.evangel.edu/robocopy.txthttp://www.evangel.edu/robocopy.txt for better readability. I’ve run robocopy /mir 4 times so you can see how it goes back and forth replacing existing files with new ones. I can’t for the life of me figure out what’s going on or more importantly how to fix it. Any help is appreciated. E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersdir Floppy Disk 1\oli*.* /x Volume in drive E is New Volume Volume Serial Number is B0B3-6FF9 Directory of E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1 12/25/1999 06:36 PM13,121 OLIVER~1.WPD OLIVER-M.GD2.wpd 03/15/1999 01:20 AM12,684 OLIVER-M.GRD 03/15/1999 05:50 PM 8,803 OLIVER~3.WPD oliver-m.rec.wpd 12/25/1999 06:29 PM10,367 OLIVER~2.WPD 4 File(s) 44,975 bytes 0 Dir(s) 61,758,398,464 bytes free E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersn: N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letterse: E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File Copy for Windows -- - Started : Thu Jul 28 12:03:13 2011 Source : E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Dest : N:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ Files : *.* Options : *.* /S /E /COPY:DAT /PURGE /MIR /R:100 /W:30 -- 91E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Letters\Floppy Disk 1\ 100%New File 10367OLIVER~2.WPD -- TotalCopied Skipped MismatchFAILEDExtras Dirs : 1 0 1 0 0 0 Files :91 190 0 0 0 Bytes :1.01 m10.1 k1.00 m 0 0 0 Times : 0:00:00 0:00:00 0:00:00 0:00:00 Ended : Thu Jul 28 12:03:13 2011 E:\Staff\NelsonN\My Documents\WPDocs\profcorr\Rec\Lettersrobocopy Floppy Disk 1 n:Floppy Disk 1 /mir -- - ROBOCOPY :: Robust File
RE: Weird robocopy /mir bug?
Yeah, it's more general than just the copy command. It's pervasive across the whole OS. After re-reading the KB article, I realize that the fix described only applied to explorer.exe. And, in fact, W2K3's version of explorer is fixed. But, Win7 is (re)broken. You can see this by running the batch I posted. Then, from explorer, create a *new* folder, and copy the long name (xx.xxx) file first and then the short name (xx~1.xxx). As you note, the second file will overwrite the first. It's interesting to note that once the files have been copied in the correct order (ie files with only short names, followed by files with long and short names), the destination becomes fixed and subsequent copies work correctly. This can be seen in the batch below. Bottom line is that it appears that support for short file names is simply broken. There is a high potential for data loss when copying data that has file names in xx~1.xxx format, especially when using automatic overwriting common in tools such as robocopy /mir or even explorer.exe. Turning off short file name support does seem to be the best answer, but has the potential problem of breaking things that are hard-coded to look for the short name. ---snip--- md CollisionTest cd CollisionTest echo a xx~1.xxx echo a xx.xxx md new copy /y xx.xxx new copy /y xx~1.xxx new dir new /x @echo Note that xx~1.xxx is gone after copying the long file name first. pause del /q new copy /y xx~1.xxx new copy /y xx.xxx new dir new /x @echo Note that both files are there because we copied the short file name first. pause del /q new copy /y xx.xxx new copy /y xx~1.xxx new copy /y *.* new dir new /x @echo Note that both files are still there even though we copied the long file name first. ---snip--- From: Jeff Bunting [mailto:bunting.j...@gmail.com] Sent: Saturday, July 30, 2011 9:09 AM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? In your example, if you reverse the order of the echo commands you'll only end up with one file in the CollisionTest directory because the long file name version creates a short name of xx~1.xxx, so the act of copying isn't really the problem, but that you have different files with the same name (or same short name) echo a xx.xxx (creates short name xx~1.xxx) echo b xx~1.xxx type xx.xxx b You might be able to use fsutil to strip the shortnames of the files you're copying without having to disable it on the whole volume: http://technet.microsoft.com/en-us/library/ff621566(WS.10).aspx Jeff On Fri, Jul 29, 2011 at 4:54 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: If you'd like to play along, the batch file below demonstrates the problem. Note that we're creating two files, copying them to a new folder, but only one ends up at the end. I really need to be able to use robocopy to do this copy to minimize the disruption to the users, but this is really jamming me up. -snip- md CollisionTest cd CollisionTest echo a xx~1.xxx echo a xx.xxx md new copy /y *.* new dir new -snip- -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edumailto:crawfo...@evangel.edu] Sent: Friday, July 29, 2011 3:41 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? Turns out that this issue was a known issue that was fixed in W2K SP3 and NT SP5. Unfortunately it seems to be back. Maybe I should spin up a W2K box to do this copy :) Anybody have any better options? http://support.microsoft.com/kb/195144 -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edumailto:crawfo...@evangel.edu] Sent: Thursday, July 28, 2011 7:33 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? You mean short name generation on the server? That's on my list of desperation ideas, mainly cuz I've never done it so I'm not sure exactly what the effects will be. Does that delete all existing short names? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Thursday, July 28, 2011 6:42 PM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? Turn off short filenames? On Thu, Jul 28, 2011 at 15:51, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I'm having some strange problem where robocopy /mir doesn't actually, well...mirror. I'm pretty sure it has something to do with short file names. The files that are causing problems are named: Short name Long name OLIVER~1.WPD OLIVER-M.GD2.wpd OLIVER-M.GRD OLIVER~3.WPD oliver-m.rec.wpd OLIVER~2.WPD Due to the nature of the problem, I'm not sure which files are actually causing the problem, but I believe
RE: Weird robocopy /mir bug?
I'm up for that. Any idea how I can find one? From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, August 01, 2011 3:43 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? I don't know any Windows File System MVPs, but I might suggest that you pass this along to them to see if it can get fixed for vNext. Fast! :-P Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Monday, August 01, 2011 4:26 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? Yeah, it's more general than just the copy command. It's pervasive across the whole OS. After re-reading the KB article, I realize that the fix described only applied to explorer.exe. And, in fact, W2K3's version of explorer is fixed. But, Win7 is (re)broken. You can see this by running the batch I posted. Then, from explorer, create a *new* folder, and copy the long name (xx.xxx) file first and then the short name (xx~1.xxx). As you note, the second file will overwrite the first. It's interesting to note that once the files have been copied in the correct order (ie files with only short names, followed by files with long and short names), the destination becomes fixed and subsequent copies work correctly. This can be seen in the batch below. Bottom line is that it appears that support for short file names is simply broken. There is a high potential for data loss when copying data that has file names in xx~1.xxx format, especially when using automatic overwriting common in tools such as robocopy /mir or even explorer.exe. Turning off short file name support does seem to be the best answer, but has the potential problem of breaking things that are hard-coded to look for the short name. ---snip--- md CollisionTest cd CollisionTest echo a xx~1.xxx echo a xx.xxx md new copy /y xx.xxx new copy /y xx~1.xxx new dir new /x @echo Note that xx~1.xxx is gone after copying the long file name first. pause del /q new copy /y xx~1.xxx new copy /y xx.xxx new dir new /x @echo Note that both files are there because we copied the short file name first. pause del /q new copy /y xx.xxx new copy /y xx~1.xxx new copy /y *.* new dir new /x @echo Note that both files are still there even though we copied the long file name first. ---snip--- From: Jeff Bunting [mailto:bunting.j...@gmail.com]mailto:[mailto:bunting.j...@gmail.com] Sent: Saturday, July 30, 2011 9:09 AM To: NT System Admin Issues Subject: Re: Weird robocopy /mir bug? In your example, if you reverse the order of the echo commands you'll only end up with one file in the CollisionTest directory because the long file name version creates a short name of xx~1.xxx, so the act of copying isn't really the problem, but that you have different files with the same name (or same short name) echo a xx.xxx (creates short name xx~1.xxx) echo b xx~1.xxx type xx.xxx b You might be able to use fsutil to strip the shortnames of the files you're copying without having to disable it on the whole volume: http://technet.microsoft.com/en-us/library/ff621566(WS.10).aspx Jeff On Fri, Jul 29, 2011 at 4:54 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: If you'd like to play along, the batch file below demonstrates the problem. Note that we're creating two files, copying them to a new folder, but only one ends up at the end. I really need to be able to use robocopy to do this copy to minimize the disruption to the users, but this is really jamming me up. -snip- md CollisionTest cd CollisionTest echo a xx~1.xxx echo a xx.xxx md new copy /y *.* new dir new -snip- -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edumailto:crawfo...@evangel.edu] Sent: Friday, July 29, 2011 3:41 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? Turns out that this issue was a known issue that was fixed in W2K SP3 and NT SP5. Unfortunately it seems to be back. Maybe I should spin up a W2K box to do this copy :) Anybody have any better options? http://support.microsoft.com/kb/195144 -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edumailto:crawfo...@evangel.edu] Sent: Thursday, July 28, 2011 7:33 PM To: NT System Admin Issues Subject: RE: Weird robocopy /mir bug? You mean short name generation on the server? That's on my list of desperation ideas, mainly cuz I've never done it so I'm not sure exactly what the effects will be. Does that delete all existing short names? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Thursday, July
Re: DPM disk usage.
Yup. Each recovery point is only storing the *blocks* that have changed since the last recovery point. So, if you have a relatively static source, the recovery points can be quite small. Sent from my Palm Pre on the Now Network from Sprint On Aug 2, 2011 8:12 AM, Kennedy, Jim kennedy...@elyriaschools.org wrote: I am using DPM on a fileserver for backups. This is the off time for school, so the data is very stable right now, very few changes. The data belongs to students and teachers and they are all off. I just moved everything over this summer and I have a months worth of recovery points using 197 GB’s of space. The data is 207 GB total. Is DPM really that efficient with disk space usage? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: find duplicate files
How big of a volume have you tried it on? Mine choked on about 2tb. I can't really imagine how it would handle 20. From: Cameron [mailto:cameron.orl...@gmail.com] Sent: Wednesday, August 03, 2011 10:56 AM To: NT System Admin Issues Subject: Re: find duplicate files www.easyduplicatefinder.comhttp://www.easyduplicatefinder.com/ Works pretty well! On Wed, Aug 3, 2011 at 11:47 AM, Bill Humphries nt...@hedgedigger.commailto:nt...@hedgedigger.com wrote: Hi all, Any suggestions for a tool that I could use to search for duplicate files on a 20tb Xsan? Although it primarily has Macs attached to it, I do have one windows machine. Thanks. Bill ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: find duplicate files
It just stopped responding. I'm guessing it ran out of ram, but I haven't investigated much. From: Cameron [mailto:cameron.orl...@gmail.com] Sent: Wednesday, August 03, 2011 3:43 PM To: NT System Admin Issues Subject: Re: find duplicate files This app failed on 2? I actually never thought about it...as I was just checking my home directory shares (approx 1tb) On Wed, Aug 3, 2011 at 1:15 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: How big of a volume have you tried it on? Mine choked on about 2tb. I can't really imagine how it would handle 20. From: Cameron [mailto:cameron.orl...@gmail.commailto:cameron.orl...@gmail.com] Sent: Wednesday, August 03, 2011 10:56 AM To: NT System Admin Issues Subject: Re: find duplicate files www.easyduplicatefinder.comhttp://www.easyduplicatefinder.com/ Works pretty well! On Wed, Aug 3, 2011 at 11:47 AM, Bill Humphries nt...@hedgedigger.commailto:nt...@hedgedigger.com wrote: Hi all, Any suggestions for a tool that I could use to search for duplicate files on a 20tb Xsan? Although it primarily has Macs attached to it, I do have one windows machine. Thanks. Bill ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: SMB firewall (was RE: VLAN N00b)
Are you saying that av/content filtering is you least important criteria of all on a FW? Or that's it's the bottom of your must haves? From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, August 04, 2011 12:23 PM To: NT System Admin Issues Subject: Re: SMB firewall (was RE: VLAN N00b) The features I find that I use the most are: * Firewall / VPN * IPS * . * . * . * AV / Content Filtering ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... On Thu, Aug 4, 2011 at 10:38 AM, David Lum david@nwea.orgmailto:david@nwea.org wrote: And now I need to choose a firewall. Holy crap there are a multitude of options, not the least of which are the various UTM (Unified Threat Management) options and reporting options. What kind of features do you guys find are key and are there any features you thought you'd use but really don't? Dave -Original Message- From: David Lum [mailto:david@nwea.orgmailto:david@nwea.org] Sent: Thursday, August 04, 2011 6:08 AM To: NT System Admin Issues Subject: RE: SMB firewall (was RE: VLAN N00b) Yep, what you describe is exactly what I was envisioning, thanks! (BTW Dell also calls it tagging). Now to decide on a firewall. I called my client last night and she was already onboard with my thinking go ahead and buy it or send me a link and I'll order it. I love clients that trust you enough that all you need to do is explain the concept and benefits and they're ready to pull the trigger, weird telling them uh, I'm not ready to buy anything as I need to decide on the exact product... :-). It's also nice is knowing steering them to a managed switch 3 years ago is going to pay off with this little project. Dave -Original Message- From: Ben Scott [mailto:mailvor...@gmail.commailto:mailvor...@gmail.com] Sent: Thursday, August 04, 2011 5:34 AM To: NT System Admin Issues Subject: Re: SMB firewall (was RE: VLAN N00b) On Wed, Aug 3, 2011 at 4:42 PM, David Lum david@nwea.orgmailto:david@nwea.org wrote: So ideally in your opinion the firewall would effectively give each VLAN (each VLAN defined by 802.1Q tags) it's own DHCP scope and thus their own IP settings, correct? More or less. I would separate your desired access groups into separate networks. Conceptually, start with the idea that you have each group on a different physical switch, each with its own DHCP server, and its own snip So upgrade the concept to a firewall that understands 802.1Q VLAN tags. Only one cable from the switch to the firewall. Each separate VLAN gets associated with that single cable, and the switch and firewall use 802.1Q VLAN tags to know which isolated network a given frame is for. Only the switch port connected to the firewall emits or expects frames with VLAN tags. (I believe Cisco calls this a VLAN trunk port; HP calls it tagged; I dunno what Dell calls it.) All the other switch ports are on a single VLAN (untagged in HP-speak), and just act like separate switches for the nodes which aren't aware of the other networks. Make sense? -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: RDX Removable Disk Drive
This is basically our scenario, but you're still unprotected from a rogue admin or virus connecting to both DPM servers and wiping out all your backup. A removable device at least puts an air gap to protect you from any damage that can be done over the network. For that, I've been basically copying data off of the DPM server to removable 2TB drives on a monthly basis. From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, August 04, 2011 4:00 PM To: NT System Admin Issues Subject: RE: RDX Removable Disk Drive Currently at %dayjob% I am backing up about 9 TB... so I had abandoned removable media (Tape and Disk) a few years ago. I use DPM which backs up to a 16TB SAN and a secondary DPM server and second SAN at a different location to back up the primary DPM server. The two sites have a 45mbps WAN to move the data. BF From: Jonathan Link [mailto:jonathan.l...@gmail.com]mailto:[mailto:jonathan.l...@gmail.com] Sent: Thursday, August 04, 2011 4:47 PM To: NT System Admin Issues Subject: Re: RDX Removable Disk Drive I've been using RDX for years. Disk to disk to RDX backups. On Thu, Aug 4, 2011 at 3:58 PM, Bob Hartung bhart...@wiscoind.commailto:bhart...@wiscoind.com wrote: I've got a Dell PowerVault 110T LTO2 tape drive that has failed and was out of warranty so I have to replace the whole thing. As a possible alternative, I've been looking at the Quantum RDX Removable Disk Drive. The price of an PowerVault 110T LTO3 tape drive and the cost of the RDX with 22 cartridges aren't that far apart. Does anyone have any experience with these units? I'd appreciate any feedback. Thanks. -- Bob Hartung Wisco Industries, Inc. 736 Janesville St. Oregon, WI 53575 Tel: (608) 835-3106 x215tel:%28608%29%20835-3106%20x215 Fax: (608) 835-7399tel:%28608%29%20835-7399 e-mail: bhartung(at)wiscoind.comhttp://wiscoind.com Website: www.wiscoind.comhttp://www.wiscoind.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: SMB firewall (was RE: VLAN N00b)
gotcha From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, August 04, 2011 6:55 PM To: NT System Admin Issues Subject: Re: SMB firewall (was RE: VLAN N00b) It's the feature that my clients tend to use/implement the least frequently on a UTM device. ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... On Thu, Aug 4, 2011 at 6:17 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Are you saying that av/content filtering is you least important criteria of all on a FW? Or that's it's the bottom of your must haves? From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: Thursday, August 04, 2011 12:23 PM To: NT System Admin Issues Subject: Re: SMB firewall (was RE: VLAN N00b) The features I find that I use the most are: * Firewall / VPN * IPS * . * . * . * AV / Content Filtering ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... On Thu, Aug 4, 2011 at 10:38 AM, David Lum david@nwea.orgmailto:david@nwea.org wrote: And now I need to choose a firewall. Holy crap there are a multitude of options, not the least of which are the various UTM (Unified Threat Management) options and reporting options. What kind of features do you guys find are key and are there any features you thought you'd use but really don't? Dave -Original Message- From: David Lum [mailto:david@nwea.orgmailto:david@nwea.org] Sent: Thursday, August 04, 2011 6:08 AM To: NT System Admin Issues Subject: RE: SMB firewall (was RE: VLAN N00b) Yep, what you describe is exactly what I was envisioning, thanks! (BTW Dell also calls it tagging). Now to decide on a firewall. I called my client last night and she was already onboard with my thinking go ahead and buy it or send me a link and I'll order it. I love clients that trust you enough that all you need to do is explain the concept and benefits and they're ready to pull the trigger, weird telling them uh, I'm not ready to buy anything as I need to decide on the exact product... :-). It's also nice is knowing steering them to a managed switch 3 years ago is going to pay off with this little project. Dave -Original Message- From: Ben Scott [mailto:mailvor...@gmail.commailto:mailvor...@gmail.com] Sent: Thursday, August 04, 2011 5:34 AM To: NT System Admin Issues Subject: Re: SMB firewall (was RE: VLAN N00b) On Wed, Aug 3, 2011 at 4:42 PM, David Lum david@nwea.orgmailto:david@nwea.org wrote: So ideally in your opinion the firewall would effectively give each VLAN (each VLAN defined by 802.1Q tags) it's own DHCP scope and thus their own IP settings, correct? More or less. I would separate your desired access groups into separate networks. Conceptually, start with the idea that you have each group on a different physical switch, each with its own DHCP server, and its own snip So upgrade the concept to a firewall that understands 802.1Q VLAN tags. Only one cable from the switch to the firewall. Each separate VLAN gets associated with that single cable, and the switch and firewall use 802.1Q VLAN tags to know which isolated network a given frame is for. Only the switch port connected to the firewall emits or expects frames with VLAN tags. (I believe Cisco calls this a VLAN trunk port; HP calls it tagged; I dunno what Dell calls it.) All the other switch ports are on a single VLAN (untagged in HP-speak), and just act like separate switches for the nodes which aren't aware of the other networks. Make sense? -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Text Editor for Windows WAS: SQL for File Storage?
It was actually edit.com, but it's not on my Win7 install, prolly cuz its 64-bit. Why wouldn't you want to use notepad though? I miss edlin :) From: Steven Peck [mailto:sep...@gmail.com] Sent: Friday, August 05, 2011 5:29 PM To: NT System Admin Issues Subject: Re: Text Editor for Windows WAS: SQL for File Storage? edit.exe still works. On the odd chance I need to edit from the command line I use that. I can't think of the last time I had to use it though. On Fri, Aug 5, 2011 at 3:07 PM, Matthew W. Ross mr...@ephrataschools.orgmailto:mr...@ephrataschools.org wrote: Ah... I need to clarify: Both Ultraedit and Notepad+ are in the GUI. I'm looking for a good text-only full screen editor. Think edit.exe back in MS-Dos 6.0 days. Anybody have a recommendation for one of those? --Matt Ross Ephrata School District - Original Message - From: Steven Peck [mailto:sep...@gmail.commailto:sep...@gmail.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 05 Aug 2011 15:02:56 -0700 Subject: Re: Text Editor for Windows WAS: SQL for File Storage? Notepad+ or ISE On Fri, Aug 5, 2011 at 3:01 PM, Sean Martin seanmarti...@gmail.commailto:seanmarti...@gmail.com wrote: Ultraedit - Sean On Aug 5, 2011, at 1:52 PM, Matthew W. Ross mr...@ephrataschools.orgmailto:mr...@ephrataschools.org wrote: One more reason to use the command line. :) Agreed! On that subject, is there a good text based editor for Windows anybody can recommend? If anybody is familiar with the emacs vs vi wars in the *nix world, I don't want to go there. I just want to know what people are using when they want to edit a text file without opening Notepad. *ducks* --Matt Ross Ephrata School District - Original Message - From: Ben Scott [mailto:mailvor...@gmail.commailto:mailvor...@gmail.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 05 Aug 2011 14:02:38 -0700 Subject: Re: SQL for File Storage? On Fri, Aug 5, 2011 at 2:48 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: Once you have problems with explorer hanging, I've found that it's time to start dividing the files into smaller directories. Hell, I've had Explorer hang on empty folders... ;-) One more reason to use the command line. :) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:
RE: Text Editor for Windows WAS: SQL for File Storage?
Edlin...which is still available on at least W2K3 From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Friday, August 05, 2011 5:35 PM To: NT System Admin Issues Subject: RE: Text Editor for Windows WAS: SQL for File Storage? It was actually edit.com, but it's not on my Win7 install, prolly cuz its 64-bit. Why wouldn't you want to use notepad though? I miss edlin :) From: Steven Peck [mailto:sep...@gmail.com]mailto:[mailto:sep...@gmail.com] Sent: Friday, August 05, 2011 5:29 PM To: NT System Admin Issues Subject: Re: Text Editor for Windows WAS: SQL for File Storage? edit.exe still works. On the odd chance I need to edit from the command line I use that. I can't think of the last time I had to use it though. On Fri, Aug 5, 2011 at 3:07 PM, Matthew W. Ross mr...@ephrataschools.orgmailto:mr...@ephrataschools.org wrote: Ah... I need to clarify: Both Ultraedit and Notepad+ are in the GUI. I'm looking for a good text-only full screen editor. Think edit.exe back in MS-Dos 6.0 days. Anybody have a recommendation for one of those? --Matt Ross Ephrata School District - Original Message - From: Steven Peck [mailto:sep...@gmail.commailto:sep...@gmail.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 05 Aug 2011 15:02:56 -0700 Subject: Re: Text Editor for Windows WAS: SQL for File Storage? Notepad+ or ISE On Fri, Aug 5, 2011 at 3:01 PM, Sean Martin seanmarti...@gmail.commailto:seanmarti...@gmail.com wrote: Ultraedit - Sean On Aug 5, 2011, at 1:52 PM, Matthew W. Ross mr...@ephrataschools.orgmailto:mr...@ephrataschools.org wrote: One more reason to use the command line. :) Agreed! On that subject, is there a good text based editor for Windows anybody can recommend? If anybody is familiar with the emacs vs vi wars in the *nix world, I don't want to go there. I just want to know what people are using when they want to edit a text file without opening Notepad. *ducks* --Matt Ross Ephrata School District - Original Message - From: Ben Scott [mailto:mailvor...@gmail.commailto:mailvor...@gmail.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 05 Aug 2011 14:02:38 -0700 Subject: Re: SQL for File Storage? On Fri, Aug 5, 2011 at 2:48 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: Once you have problems with explorer hanging, I've found that it's time to start dividing the files into smaller directories. Hell, I've had Explorer hang on empty folders... ;-) One more reason to use the command line. :) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana
RE: RTFM Advice
RE: +MAX_INT Nice :) -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Monday, August 08, 2011 1:45 PM To: NT System Admin Issues Subject: Re: RTFM Advice On Mon, Aug 8, 2011 at 9:10 AM, David Lum david@nwea.org wrote: LOL. that's what I use this list is for. I type up a question and as often as not as I am gathering all the relevant info I need as often as not I will find the answer myself and don't have to bother the list with it J. +MAX_INT. Frequently, in the course of doing my homework before going to the next step (be it posting to a list, or calling support, etc.), I solve the problem. Sometimes I come across a quiet mention of a critical detail in a document. Sometimes I see a subtle mistake once I've written everything down neatly. Sometimes I hit upon new search terms. Sometimes when I'm going through the list of things you should always try, I realize I haven't tried one of them. Any which way you slice it, there's a reason the standard drill is the standard drill: *It works*. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Text Editor for Windows WAS: SQL for File Storage?
Except it should really not go into HKCR. If you want it machine wide, put it into HKLM\Classes and if you want it just for you, but it into HKCU\Classes. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Monday, August 08, 2011 1:30 PM To: NT System Admin Issues Subject: Re: Text Editor for Windows WAS: SQL for File Storage? On Sat, Aug 6, 2011 at 5:10 AM, kz2...@googlemail.com wrote: If I'm running off the command line and want to edit a file I just type 'notepad c:\directoryname\filename.extension' If the file extension is associated with Notepad already, you can just type c:\directoryname\filename.extension. You save eight whole keystrokes that way! ;) Also, associating one's favorite text editor with all file types is a useful thing: [HKEY_CLASSES_ROOT\*\shell\opennpp\command] @=foocorp\\fooDFS\\APPS\\NotepadPP\\Notepad++.EXE \%1\ -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Drive mapping via login script
The version of ifmember that I'm using is from 2003 from a resource kit. Anyway, it still works fine on Win7-64. I don't believe it came as part of any OS so I'm not sure what this blog post is referencing. Note that Net User doesn't do recursive group searching like ifmember.exe does. So, if you're a member of GroupA and GroupA is a member of GroupB, Net User will not show that you're a member of GroupB, but IfMember will. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 2:06 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Huh. Didn't know that. No wonder my minion's mapping drives manually. Time to refactor our login scripts. Kurt On Mon, Aug 8, 2011 at 08:25, Randal, Phil pran...@herefordshire.gov.uk wrote: Ifmember.exe is cool, but see here: http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-windo ws.html There comes a point where it's easier to do it in Kixtart than mess about like this... Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: pettersen.mar...@little-rock.med.va.gov [mailto:pettersen.mar...@little-rock.med.va.gov] Sent: 08 August 2011 17:21 To: NT System Admin Issues Subject: Re: Drive mapping via login script IFMEMBER.EXE can parse out Group memberships and is a part of several Windows Resource Kits. usage: ifmember.exe [/verbose] [/list] groupname ... /verbose will print out all matches. /list will print out all groups user is a member of. Return Code shows number of groups this user is a member of. Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Drive mapping via login script
The 12/2/99 version works for me also. From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 3:32 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Ookkay... 1999-12-02 15:5310,240 IFMEMBER.EXE I'd say that's a little out of date.I had a copy of the newer one, and just replaced it. 2003-04-18 18:05 5,632 IFMEMBER.EXE That ought to help. Kurt On Mon, Aug 8, 2011 at 13:09, Andrew S. Baker asbz...@gmail.commailto:asbz...@gmail.com wrote: Yeah, I was going to point out the same thing.Under what circumstance does IFMEMBER not work? It's working just fine for me on Win7 x64 ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market… On Mon, Aug 8, 2011 at 3:39 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: The version of ifmember that I'm using is from 2003 from a resource kit. Anyway, it still works fine on Win7-64. I don't believe it came as part of any OS so I'm not sure what this blog post is referencing. Note that Net User doesn't do recursive group searching like ifmember.exe does. So, if you're a member of GroupA and GroupA is a member of GroupB, Net User will not show that you're a member of GroupB, but IfMember will. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 2:06 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Huh. Didn't know that. No wonder my minion's mapping drives manually. Time to refactor our login scripts. Kurt On Mon, Aug 8, 2011 at 08:25, Randal, Phil pran...@herefordshire.gov.ukmailto:pran...@herefordshire.gov.uk wrote: Ifmember.exe is cool, but see here: http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-windo ws.html There comes a point where it's easier to do it in Kixtart than mess about like this... Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov [mailto:pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov] Sent: 08 August 2011 17:21 To: NT System Admin Issues Subject: Re: Drive mapping via login script IFMEMBER.EXE can parse out Group memberships and is a part of several Windows Resource Kits. usage: ifmember.exe [/verbose] [/list] groupname ... /verbose will print out all matches. /list will print out all groups user is a member of. Return Code shows number of groups this user is a member of. Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Drive mapping via login script
I think the post was just misguided. He prolly had the resource kit installed on XP and when he tried ifmember on win7, he got a file not found and jumped to the wrong conclusion. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, August 08, 2011 3:09 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Yeah, I was going to point out the same thing.Under what circumstance does IFMEMBER not work? It's working just fine for me on Win7 x64 ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... On Mon, Aug 8, 2011 at 3:39 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: The version of ifmember that I'm using is from 2003 from a resource kit. Anyway, it still works fine on Win7-64. I don't believe it came as part of any OS so I'm not sure what this blog post is referencing. Note that Net User doesn't do recursive group searching like ifmember.exe does. So, if you're a member of GroupA and GroupA is a member of GroupB, Net User will not show that you're a member of GroupB, but IfMember will. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 2:06 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Huh. Didn't know that. No wonder my minion's mapping drives manually. Time to refactor our login scripts. Kurt On Mon, Aug 8, 2011 at 08:25, Randal, Phil pran...@herefordshire.gov.ukmailto:pran...@herefordshire.gov.uk wrote: Ifmember.exe is cool, but see here: http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-windo ws.html There comes a point where it's easier to do it in Kixtart than mess about like this... Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov [mailto:pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov] Sent: 08 August 2011 17:21 To: NT System Admin Issues Subject: Re: Drive mapping via login script IFMEMBER.EXE can parse out Group memberships and is a part of several Windows Resource Kits. usage: ifmember.exe [/verbose] [/list] groupname ... /verbose will print out all matches. /list will print out all groups user is a member of. Return Code shows number of groups this user is a member of. Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Drive mapping via login script
Yeah, shocker, huh? :) But, he's an MVP so it's a little odd. I always read that one as him having an argument though. From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Monday, August 08, 2011 3:52 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Someone was wrong? On the internet? OB xkcd: http://xkcd.com/386/ On Mon, Aug 8, 2011 at 4:40 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I think the post was just misguided. He prolly had the resource kit installed on XP and when he tried ifmember on win7, he got a file not found and jumped to the wrong conclusion. From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: Monday, August 08, 2011 3:09 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Yeah, I was going to point out the same thing.Under what circumstance does IFMEMBER not work? It's working just fine for me on Win7 x64 ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... On Mon, Aug 8, 2011 at 3:39 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: The version of ifmember that I'm using is from 2003 from a resource kit. Anyway, it still works fine on Win7-64. I don't believe it came as part of any OS so I'm not sure what this blog post is referencing. Note that Net User doesn't do recursive group searching like ifmember.exe does. So, if you're a member of GroupA and GroupA is a member of GroupB, Net User will not show that you're a member of GroupB, but IfMember will. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 2:06 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Huh. Didn't know that. No wonder my minion's mapping drives manually. Time to refactor our login scripts. Kurt On Mon, Aug 8, 2011 at 08:25, Randal, Phil pran...@herefordshire.gov.ukmailto:pran...@herefordshire.gov.uk wrote: Ifmember.exe is cool, but see here: http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-windo ws.html There comes a point where it's easier to do it in Kixtart than mess about like this... Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov [mailto:pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov] Sent: 08 August 2011 17:21 To: NT System Admin Issues Subject: Re: Drive mapping via login script IFMEMBER.EXE can parse out Group memberships and is a part of several Windows Resource Kits. usage: ifmember.exe [/verbose] [/list] groupname ... /verbose will print out all matches. /list will print out all groups user is a member of. Return Code shows number of groups this user is a member of. Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Drive mapping via login script
Both the 1999 and 2003 versions work on Win7 64. From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 3:55 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Interesting. My minion noted last week that we were having problems with staff on Win7 machines... Waitaminnit. What version of Win7? i386 or x64? We're rolling out x64 exclusively. Kurt On Mon, Aug 8, 2011 at 13:39, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: The 12/2/99 version works for me also. From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 3:32 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Ookkay... 1999-12-02 15:5310,240 IFMEMBER.EXE I'd say that's a little out of date.I had a copy of the newer one, and just replaced it. 2003-04-18 18:05 5,632 IFMEMBER.EXE That ought to help. Kurt On Mon, Aug 8, 2011 at 13:09, Andrew S. Baker asbz...@gmail.commailto:asbz...@gmail.com wrote: Yeah, I was going to point out the same thing.Under what circumstance does IFMEMBER not work? It's working just fine for me on Win7 x64 ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market… On Mon, Aug 8, 2011 at 3:39 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: The version of ifmember that I'm using is from 2003 from a resource kit. Anyway, it still works fine on Win7-64. I don't believe it came as part of any OS so I'm not sure what this blog post is referencing. Note that Net User doesn't do recursive group searching like ifmember.exe does. So, if you're a member of GroupA and GroupA is a member of GroupB, Net User will not show that you're a member of GroupB, but IfMember will. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 2:06 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Huh. Didn't know that. No wonder my minion's mapping drives manually. Time to refactor our login scripts. Kurt On Mon, Aug 8, 2011 at 08:25, Randal, Phil pran...@herefordshire.gov.ukmailto:pran...@herefordshire.gov.uk wrote: Ifmember.exe is cool, but see here: http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-windo ws.html There comes a point where it's easier to do it in Kixtart than mess about like this... Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov [mailto:pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov] Sent: 08 August 2011 17:21 To: NT System Admin Issues Subject: Re: Drive mapping via login script IFMEMBER.EXE can parse out Group memberships and is a part of several Windows Resource Kits. usage: ifmember.exe [/verbose] [/list] groupname ... /verbose will print out all matches. /list will print out all groups user is a member of. Return Code shows number of groups this user is a member of. Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http
RE: Drive mapping via login script
What’s the script that’s not working? From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 4:01 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script OK. Well, the more-current version has replicated, and I've let minion know about it. We'll see if it makes a difference, tomorrow, when he brings a new user on line. Kurt On Mon, Aug 8, 2011 at 13:57, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Both the 1999 and 2003 versions work on Win7 64. From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 3:55 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Interesting. My minion noted last week that we were having problems with staff on Win7 machines... Waitaminnit. What version of Win7? i386 or x64? We're rolling out x64 exclusively. Kurt On Mon, Aug 8, 2011 at 13:39, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: The 12/2/99 version works for me also. From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 3:32 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Ookkay... 1999-12-02 15:5310,240 IFMEMBER.EXE I'd say that's a little out of date.I had a copy of the newer one, and just replaced it. 2003-04-18 18:05 5,632 IFMEMBER.EXE That ought to help. Kurt On Mon, Aug 8, 2011 at 13:09, Andrew S. Baker asbz...@gmail.commailto:asbz...@gmail.com wrote: Yeah, I was going to point out the same thing.Under what circumstance does IFMEMBER not work? It's working just fine for me on Win7 x64 ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market… On Mon, Aug 8, 2011 at 3:39 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: The version of ifmember that I'm using is from 2003 from a resource kit. Anyway, it still works fine on Win7-64. I don't believe it came as part of any OS so I'm not sure what this blog post is referencing. Note that Net User doesn't do recursive group searching like ifmember.exe does. So, if you're a member of GroupA and GroupA is a member of GroupB, Net User will not show that you're a member of GroupB, but IfMember will. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.commailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 2:06 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script Huh. Didn't know that. No wonder my minion's mapping drives manually. Time to refactor our login scripts. Kurt On Mon, Aug 8, 2011 at 08:25, Randal, Phil pran...@herefordshire.gov.ukmailto:pran...@herefordshire.gov.uk wrote: Ifmember.exe is cool, but see here: http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-windo ws.html There comes a point where it's easier to do it in Kixtart than mess about like this... Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov [mailto:pettersen.mar...@little-rock.med.va.govmailto:pettersen.mar...@little-rock.med.va.gov] Sent: 08 August 2011 17:21 To: NT System Admin Issues Subject: Re: Drive mapping via login script IFMEMBER.EXE can parse out Group memberships and is a part of several Windows Resource Kits. usage: ifmember.exe [/verbose] [/list] groupname ... /verbose will print out all matches. /list will print out all groups user is a member of. Return Code shows number of groups this user is a member of. Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana
RE: Text Editor for Windows WAS: SQL for File Storage?
Not quite. HKCR is HKLM + HKCU layered on top...unless of course you force something into it, in which case it *acts* like HKLM -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Monday, August 08, 2011 4:52 PM To: NT System Admin Issues Subject: Re: Text Editor for Windows WAS: SQL for File Storage? On Mon, Aug 8, 2011 at 2:51 PM, Crawford, Scott crawfo...@evangel.edu wrote: Except it should really not go into HKCR. If you want it machine wide, put it into HKLM\Classes and if you want it just for you, but it into HKCU\Classes. HKCR *is* HKLM\Classes. :) But yah, you can do it per-user, if you prefer. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Text Editor for Windows WAS: SQL for File Storage?
Yep. It's a pretty common misunderstanding. I see software installs writing there all the time and it frequently (XP era) caused software not to run as non-admin. -Original Message- From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Monday, August 08, 2011 4:53 PM To: NT System Admin Issues Subject: RE: Text Editor for Windows WAS: SQL for File Storage? Actually, according to what I saw on MSDN, (at least for modern OS versions) HKCR is an aggregate of HKLM\Classes and HKCU\Classes. DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Monday, August 08, 2011 5:52 PM To: NT System Admin Issues Subject: Re: Text Editor for Windows WAS: SQL for File Storage? On Mon, Aug 8, 2011 at 2:51 PM, Crawford, Scott crawfo...@evangel.edu wrote: Except it should really not go into HKCR. If you want it machine wide, put it into HKLM\Classes and if you want it just for you, but it into HKCU\Classes. HKCR *is* HKLM\Classes. :) But yah, you can do it per-user, if you prefer. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Drive mapping via login script
Make sure to evaluate if group nesting could be an issue. I’m sure PS has a way of handling it, but it's something to be aware of. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, August 08, 2011 5:51 PM To: NT System Admin Issues Subject: Re: Drive mapping via login script I'm thinking that it might be a nice time to try powershell, since all of the machines I care about have v2 installed. On Mon, Aug 8, 2011 at 15:47, kz2...@googlemail.com wrote: I used to query group memberships using net user. Problems if you have long group names. But can be done. Sent from my POS BlackBerry wireless device, which may wipe itself at any moment -Original Message- From: Kurt Buff kurt.b...@gmail.com Date: Mon, 8 Aug 2011 12:05:30 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.comSubject: Re: Drive mapping via login script Huh. Didn't know that. No wonder my minion's mapping drives manually. Time to refactor our login scripts. Kurt On Mon, Aug 8, 2011 at 08:25, Randal, Phil pran...@herefordshire.gov.uk wrote: Ifmember.exe is cool, but see here: http://clintboessen.blogspot.com/2011/02/ifmemberexe-doesnt-work-wind ows.html There comes a point where it's easier to do it in Kixtart than mess about like this... Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: pettersen.mar...@little-rock.med.va.gov [mailto:pettersen.mar...@little-rock.med.va.gov] Sent: 08 August 2011 17:21 To: NT System Admin Issues Subject: Re: Drive mapping via login script IFMEMBER.EXE can parse out Group memberships and is a part of several Windows Resource Kits. usage: ifmember.exe [/verbose] [/list] groupname ... /verbose will print out all matches. /list will print out all groups user is a member of. Return Code shows number of groups this user is a member of. Example: ifmember.exe /v /l MyDomain\Domain Users Users Everyone ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: The U in UPS stands for...?
I had a what the heck moment after reading the first line. It's so ridiculous, you almost have to think you're misunderstanding something. I guess the assumption is that the power fails more often than the battery so it's a net gain for uptime. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, August 10, 2011 4:17 PM To: NT System Admin Issues Subject: The U in UPS stands for...? The UPS has an automatic self-test feature which periodically tests the battery. When the battery needs to be replaced, the UPS will indicate this by dropping the load. We lost all phones and networking for a few minutes in one of our buildings today. The APC Smart-UPS powering the comm rack did a self-test; apparently it didn't like the battery and dropped the load during the test. It re-powered itself after, but with Replace Battery lit now. This is the second time this year I've had a Smart-UPS do that. I've had it happen to me before, too. What's the point of a self-test if the behavior is identical to failing during operation? F'ing APC. I bet the batteries are swollen and stuck in the unit, too. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Almost, but not quite OT: Passwords
Thx. Now, I realize that the little gray boxes are the bits...I feel dumb. :) Not, that I disagree with the sentiment, but this assumes that the only way passwords are being generated is through modifying some word. To me, this is a reason not to assume that a password is complex simply because it *looks* complex or because it has a wide sample of characters. Building a complex looking password is not the same as a real complex password. As an example, an 8 character password built from a truly random mix of upper/lower/numeric characters is 62^8 or ~47 bits of entropy. And, that's before adding symbols. The problem with passphrases is that they take a relatively long time to type. Definitely easier to remember, but muscle memory makes remembering 8 character random alphanumeric passwords pretty easy too. From: Steve Kradel [mailto:skra...@zetetic.net] Sent: Wednesday, August 10, 2011 5:06 PM To: NT System Admin Issues Subject: Re: Almost, but not quite OT: Passwords It looks like Randall @ xkcd supposes each word in correct horse battery staple has 11 bits of entropy, which is to say, the person choosing the password has a comfortable vocabulary of 2^11 (2,048) words from which he will pick four at random. (2048^4 is the same as 2^44.) I think 2,048 words is a pretty low estimate, at least in English, but that's not really the point... On the other hand, he suggests forcing people to choose strong passwords presses humans into a doofy pattern that is actually much *less* random than four dictionary words. 16 bits of uncertainty for the uncommon base word means the user has possibly picked a difficult dictionary word (from a vocabulary of 2^16 = 65,536 words -- generously more than a normal person knows), and then mangles it up a little bit in semi-predictable ways to satisfy the password strength checker. It definitely raises an interesting question... why do so many organizations elect for minimum 8-character complex passwords, instead of non-complex passphrases of at least 16 or 20 characters, when the latter would be easier to remember and probably stronger? --Steve On Wed, Aug 10, 2011 at 5:33 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Interesting. I'd like to understand how the bits of entropy are calculated though. From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: Wednesday, August 10, 2011 4:06 PM To: NT System Admin Issues Subject: Almost, but not quite OT: Passwords http://xkcd.com/936/#http://xkcd.com/936/ Yet, very pertinent. ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Almost, but not quite OT: Passwords
When I opened my eTrade account years ago, it limited me to a max of 6 chars.http://chars.It It's not like it's protecting anything important. /sarcasm Sent from my Palm Pre on the Now Network from Sprint On Aug 10, 2011 7:23 PM, Andrew S. Baker asbz...@gmail.com wrote: And, many apps *still*have limits on password length that hamper passwords above 10 or 12 characters. -ASB: http://about.me/Andrew.S.Baker Sent from my Motorola Droid On Aug 10, 2011 6:10 PM, Webster webs...@carlwebster.commailto:webs...@carlwebster.com wrote: Because the security team and or auditor are simply following a check list. Complex passwords required - check. My job is done. Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Steve Kradel [mailto:skra...@zetetic.netmailto:skra...@zetetic.net] Sent: Wednesday, August 10, 2011 5:06 PM To: NT System Admin Issues Subject: Re: Almost, but not quite OT: Passwords It looks like Randall @ xkcd supposes each word in correct horse battery staple has 11 bits of entropy, which is to say, the person choosing the password has a comfortable vocabulary of 2^11 (2,048) words from which he will pick four at random. (2048^4 is the same as 2^44.) I think 2,048 words is a pretty low estimate, at least in English, but that's not really the point... On the other hand, he suggests forcing people to choose strong passwords presses humans into a doofy pattern that is actually much *less* random than four dictionary words. 16 bits of uncertainty for the uncommon base word means the user has possibly picked a difficult dictionary word (from a vocabulary of 2^16 = 65,536 words -- generously more than a normal person knows), and then mangles it up a little bit in semi-predictable ways to satisfy the password strength checker. It definitely raises an interesting question... why do so many organizations elect for minimum 8-character complex passwords, instead of non-complex passphrases of at least 16 or 20 characters, when the latter would be easier to remember and probably stronger? --Steve On Wed, Aug 10, 2011 at 5:33 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edumailto:crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Interesting. I'd like to understand how the bits of entropy are calculated though. From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.commailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: Wednesday, August 10, 2011 4:06 PM To: NT System Admin Issues Subject: Almost, but not quite OT: Passwords http://xkcd.com/936/#http://xkcd.com/936/ Yet, very pertinent. ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Almost, but not quite OT: Passwords
+1 for stupid. It seems like it'd be harder to code in the limitations than to just let you use as long of a password using any characters desired. From: Webster [mailto:webs...@carlwebster.com] Sent: Wednesday, August 10, 2011 9:17 PM To: NT System Admin Issues Subject: RE: Almost, but not quite OT: Passwords ETrade: It's easy to change the password you use to log on to your account at E*TRADE FINANCIAL. Go to our Change Log-on Password page and select a new password that is between six and 32 characters long and contain at least one letter and one number. Your new password may contain letters and numbers, but no special characters (such as # or %). My bank: Passwords must contain 8-13 characters, of which you must have at least one number and one letter. (and no special characters allowed either: Webster) Vanguard: Your password must have 6 to 10 characters, including at least 2 letters and 2 numbers. Don't use spaces. (and no special characters allowed either: Webster) Absolutely stupid IMNSHO. Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Webster [mailto:webs...@carlwebster.com]mailto:[mailto:webs...@carlwebster.com] Subject: RE: Almost, but not quite OT: Passwords Most financial sites (many banks and investment sites [Vanguard, eTrade]) do not allow complex passwords! Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Andrew S. Baker [mailto:asbz...@gmail.com]mailto:[mailto:asbz...@gmail.com] Subject: RE: Almost, but not quite OT: Passwords And, many apps *still*have limits on password length that hamper passwords above 10 or 12 characters. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Almost, but not quite OT: Passwords
I’d encourage you to pick one of those random password generating web sites, get an 8 char password and practice typing it 15-20 times. It’s really not that difficult to memorize. Now, memorizing a dozen of them for various websites will be quite a bit more difficult, but that’s where things like lastpass come in. Typing faster would prolly benefit me quite a bit, as has been pointed out support, for pass phrases is limited. My point is simply that vast improvements can be made to a typical P@$$w0Rd by true randomization without needing to resort to long pass phrases. From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, August 10, 2011 7:22 PM To: NT System Admin Issues Subject: Re: Almost, but not quite OT: Passwords I'm not going to argue the point too strongly, but building a short, complex password probably requires using a mental template of some sort. Perhaps the initial letters of a set of song titles, or addresses, or something like that. I think that the mental effort of remembering the template and then making the translation to the keyboard is more difficult than choosing a meaningful sentence. And, for touch typists (like me), it's even easier, since the naturalness of typing a sentence is more comfortable than trying to type rather random sequences. But, whatever works, I suppose. Kurt On Wed, Aug 10, 2011 at 15:52, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Thx. Now, I realize that the little gray boxes are the bits…I feel dumb. ☺ Not, that I disagree with the sentiment, but this assumes that the only way passwords are being generated is through modifying some word. To me, this is a reason not to assume that a password is complex simply because it *looks* complex or because it has a wide sample of characters. Building a complex looking password is not the same as a real complex password. As an example, an 8 character password built from a truly random mix of upper/lower/numeric characters is 62^8 or ~47 bits of entropy. And, that’s before adding symbols. The problem with passphrases is that they take a relatively long time to type. Definitely easier to remember, but muscle memory makes remembering 8 character random alphanumeric passwords pretty easy too. From: Steve Kradel [mailto:skra...@zetetic.netmailto:skra...@zetetic.net] Sent: Wednesday, August 10, 2011 5:06 PM To: NT System Admin Issues Subject: Re: Almost, but not quite OT: Passwords It looks like Randall @ xkcd supposes each word in correct horse battery staple has 11 bits of entropy, which is to say, the person choosing the password has a comfortable vocabulary of 2^11 (2,048) words from which he will pick four at random. (2048^4 is the same as 2^44.) I think 2,048 words is a pretty low estimate, at least in English, but that's not really the point... On the other hand, he suggests forcing people to choose strong passwords presses humans into a doofy pattern that is actually much *less* random than four dictionary words. 16 bits of uncertainty for the uncommon base word means the user has possibly picked a difficult dictionary word (from a vocabulary of 2^16 = 65,536 words -- generously more than a normal person knows), and then mangles it up a little bit in semi-predictable ways to satisfy the password strength checker. It definitely raises an interesting question... why do so many organizations elect for minimum 8-character complex passwords, instead of non-complex passphrases of at least 16 or 20 characters, when the latter would be easier to remember and probably stronger? --Steve On Wed, Aug 10, 2011 at 5:33 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Interesting. I’d like to understand how the bits of entropy are calculated though. From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: Wednesday, August 10, 2011 4:06 PM To: NT System Admin Issues Subject: Almost, but not quite OT: Passwords http://xkcd.com/936/#http://xkcd.com/936/ Yet, very pertinent. ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market… ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com
RE: Almost, but not quite OT: Passwords
Thanks for the info. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, August 10, 2011 8:07 PM To: NT System Admin Issues Subject: Re: Almost, but not quite OT: Passwords On Wed, Aug 10, 2011 at 5:33 PM, Crawford, Scott crawfo...@evangel.edu wrote: Interesting. I'd like to understand how the bits of entropy are calculated though. As a rule of thumb, English has about one bit of entropy per character. (It's more complicated than that, of course, and figures and formulas vary, but it's each to remember that 1 char == 1 bit.) This is because English (like most/all human languages) has a lot of redundancy, rules, patterns, etc. An 8 character truly random password is hugely different than an 8 character English word. So, a 16 character pure English language password is roughly equivalent to a 16 bit key private key. The deliberately broken crypto used in US export approved software in the 1990s, generally considered to be worthless, still had a 40 bit keyspace. Kind of puts things in perspective. Again as a rule of thumb, it's more useful to have a long password than a complicated one. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Almost, but not quite OT: Passwords
nice. Reminds me of an old roommate, I clean the shower every six months whether it needs it or not. Sent from my Palm Pre on the Now Network from Sprint On Aug 11, 2011 7:42 AM, Webster webs...@carlwebster.com wrote: I change my passwords religiously every 7 years. Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Gasper, Rick [mailto:rickgas...@kings.edu] Subject: RE: Almost, but not quite OT: Passwords Crap…I now have to change my password again… From: Jon Harris [mailto:jk.har...@gmail.com]mailto:[mailto:jk.har...@gmail.com] Subject: Re: Almost, but not quite OT: Passwords If the in-house team ever got a round to it both could be kept happy but using something like Horses like 2 fly, like bugs like to be stepped on! Complex and easy to remember. How long would that take for a brute force attack or a dictionary attack to get the password? FYI that is NOT one of my passwords! Jon On Wed, Aug 10, 2011 at 6:10 PM, Webster webs...@carlwebster.commailto:webs...@carlwebster.com wrote: Because the security team and or auditor are simply following a check list. Complex passwords required – check. My job is done. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: windows 7 - sysprep and domains
Yeah, it's really a question of whether the files are re-ACLed at deployment or not. Even apart from the domain, you can add domain SIDs to ACLs with a variety of tools. From: Guyer, Don [mailto:don.gu...@fiserv.com] Sent: Thursday, August 11, 2011 7:42 AM To: NT System Admin Issues Subject: RE: windows 7 - sysprep and domains Kind of a shot in the dark, but I think worth the short time to test. Set the security desired, take the comp out of the domain, put it back in and see if it recognizes the security properly. When it's taken out of the domain, it will hold onto the SID(s) and it may recognize them once it's added back in. Just a thought... Don Guyer Windows Systems Engineer RIM Operations Engineering Distributed - A Team, Tier 2 Enterprise Technology Group Fiserv don.gu...@fiserv.commailto:don.gu...@fiserv.com Office: 1-800-523-7282 x 1673 Fax: 610-233-0404 www.fiserv.comhttp://www.fiserv.com/ [Description: Frog Signature] From: Dean Cunningham [mailto:dean.cunning...@gmail.com]mailto:[mailto:dean.cunning...@gmail.com] Sent: Thursday, August 11, 2011 12:09 AM To: NT System Admin Issues Subject: windows 7 - sysprep and domains I want to apply domain security to a couple of folders/files in a sysprep image. Is this supported? (i doubt it...) I assume I will have to do it at client PC install time or through GPO? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmininline: image001.jpg
RE: The U in UPS stands for...?
Maybe they thought it was called Smart Oops From: Rene de Haas [mailto:rene.deh...@gmail.com] Sent: Thursday, August 11, 2011 1:18 AM To: NT System Admin Issues Subject: Re: The U in UPS stands for...? Sorry, but I can't call that a smart ups either. What are they thinking? René Op 10 aug. 2011 23:18 schreef Ben Scott mailvor...@gmail.commailto:mailvor...@gmail.com het volgende: ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Very OT quick favour to ask any Facebook users
Like a bell -Original Message- From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Thursday, August 11, 2011 5:07 PM To: NT System Admin Issues Subject: RE: Very OT quick favour to ask any Facebook users They find them a-pealing. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, August 11, 2011 4:52 PM To: NT System Admin Issues Subject: Re: Very OT quick favour to ask any Facebook users On Thu, Aug 11, 2011 at 4:21 PM, William Robbins dangerw...@gmail.com wrote: Time flies when you're...well it flies none the less. Time flies like an arrow. Fruit flies like a banana. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: FYI: Free Windows Admin Tools
I'd be interested in seeing that if you can figure out which version that was. From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Friday, August 12, 2011 10:50 AM To: NT System Admin Issues Subject: Re: FYI: Free Windows Admin Tools I remember an MSDos version that would say Format compluted. On Fri, Aug 12, 2011 at 10:31 AM, Guyer, Don don.gu...@fiserv.commailto:don.gu...@fiserv.com wrote: This doesn't surprise me at all... I downloaded and installed the Boot program (someone else on this list suggested) and uninstalled it after I saw numerous words misspelled as well as simple punctuation mistakes. That kind of stuff makes me leery.. Don Guyer Windows Systems Engineer RIM Operations Engineering Distributed - A Team, Tier 2 Enterprise Technology Group Fiserv don.gu...@fiserv.commailto:don.gu...@fiserv.com Office: 1-800-523-7282 x 1673tel:1-800-523-7282%20x%201673 Fax: 610-233-0404tel:610-233-0404 www.fiserv.comhttp://www.fiserv.com/ [Description: Frog Signature] From: richardmccl...@aspca.orgmailto:richardmccl...@aspca.org [mailto:richardmccl...@aspca.orgmailto:richardmccl...@aspca.org] Sent: Friday, August 12, 2011 11:27 AM To: NT System Admin Issues Subject: RE: FYI: Free Windows Admin Tools Oh... In the totally vague link, Customer Area are the actual links to the installer downloads. Who the @#% develops, tests, and approves such sites? Thanks for your patience! -- richard richardmccl...@aspca.orgmailto:richardmccl...@aspca.org wrote on 08/12/2011 10:24:16 AM: Which is where I've been the past half-hour before sending them a nastigram... Where is the actual link to download? NOT get product information; NOT get the help file; DOWNLOAD the installer? (Yes, I created and activated an account...) Thanks! -- richard Sam Cayze sca...@gmail.commailto:sca...@gmail.com wrote on 08/12/2011 10:17:53 AM: Yeah, not to clear. I noticed a lot of software I recognize in there, like GIMAGEX. So just google for it and be brought to the real developers site. http://www.netikus.net/products_downloads.html?SESSION= From: richardmccl...@aspca.orgmailto:richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]mailto:[mailto:richardmccl...@aspca.org] Sent: Friday, August 12, 2011 10:13 AM To: NT System Admin Issues Subject: Re: FYI: Free Windows Admin Tools Gosh, this looks promising, but how does one actually GET the @#* free downloads? Specifically, I am at the site for Netikus.Net and looking at NT ToolKit. Their create an account looks like it enables one to participate in a forum. Anyway, after creating and activating the account, I still can't actuall download the free tools. -- richard Gene Giannamore gene.giannam...@abideinternational.commailto:gene.giannam...@abideinternational.com wrote on 08/11/2011 02:34:37 PM: Just in case I am not the only one that did not know about this (or just forgotten); http://4sysops.com/best-free-windows-admin-tools/ I found a few interesting utils; http://4sysops.com/archives/remote-desktop-manager/ using on main PC http://4sysops.com/archives/free-remote-desktop-connection-manager- a-rdp-client/ using on laptop Gonna try these on a test (hopefully next month) http://4sysops.com/archives/free-virtuall-user-environment-manager- vuem-centrally-manage-desktop-settings/ http://4sysops.com/archives/free-netwrix-logon-reporter-logon-auditing/ http://4sysops.com/archives/free-netwrix-file-server-change-reporter/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software. com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software. com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software. com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software. com/read/my_forums/ or send an email to
Re: dnscmd vs. DNS Manager
have you compared the two lists to see which ones are missing to see if there's some sort of pattern? Sent from my Palm Pre on the Now Network from Sprint On Aug 12, 2011 5:50 PM, Kurt Buff kurt.b...@gmail.com wrote: Interesting thing I'm seeing This command: dnscmd 192.168.xx.xx /enumrecords example.tld @ | findstr /i 192.168.yy returns 43 A records. I get no more if I inspect the results of dnscmd 192.168.xx.xx /enumrecords example.tld @ out.txt notepad out.txt A manual count of the display in DNS manager lists 70+ machines. So, this leaves me a bit confused. Has anyone run into this before, and have an explanation? Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: FYI: Free Windows Admin Tools
You're sure it was MS DOS? I used 5.0 and 6.xx pretty extensively and don't recall seeing this. But, it looks like IBM DOS, DR-DOS and Novell DOS were also released around that time frame also. http://en.wikipedia.org/wiki/Timeline_of_x86_DOS_operating_systems From: G.Waleed Kavalec [mailto:kava...@gmail.com] Sent: Saturday, August 13, 2011 5:28 AM To: NT System Admin Issues Subject: Re: FYI: Free Windows Admin Tools This would have been circa 1992. On Fri, Aug 12, 2011 at 10:15 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I'd be interested in seeing that if you can figure out which version that was. From: G.Waleed Kavalec [mailto:kava...@gmail.commailto:kava...@gmail.com] Sent: Friday, August 12, 2011 10:50 AM To: NT System Admin Issues Subject: Re: FYI: Free Windows Admin Tools I remember an MSDos version that would say Format compluted. On Fri, Aug 12, 2011 at 10:31 AM, Guyer, Don don.gu...@fiserv.commailto:don.gu...@fiserv.com wrote: This doesn't surprise me at all... I downloaded and installed the Boot program (someone else on this list suggested) and uninstalled it after I saw numerous words misspelled as well as simple punctuation mistakes. That kind of stuff makes me leery.. Don Guyer Windows Systems Engineer RIM Operations Engineering Distributed - A Team, Tier 2 Enterprise Technology Group Fiserv don.gu...@fiserv.commailto:don.gu...@fiserv.com Office: 1-800-523-7282 x 1673tel:1-800-523-7282%20x%201673 Fax: 610-233-0404tel:610-233-0404 www.fiserv.comhttp://www.fiserv.com/ [Description: Frog Signature] From: richardmccl...@aspca.orgmailto:richardmccl...@aspca.org [mailto:richardmccl...@aspca.orgmailto:richardmccl...@aspca.org] Sent: Friday, August 12, 2011 11:27 AM To: NT System Admin Issues Subject: RE: FYI: Free Windows Admin Tools Oh... In the totally vague link, Customer Area are the actual links to the installer downloads. Who the @#% develops, tests, and approves such sites? Thanks for your patience! -- richard richardmccl...@aspca.orgmailto:richardmccl...@aspca.org wrote on 08/12/2011 10:24:16 AM: Which is where I've been the past half-hour before sending them a nastigram... Where is the actual link to download? NOT get product information; NOT get the help file; DOWNLOAD the installer? (Yes, I created and activated an account...) Thanks! -- richard Sam Cayze sca...@gmail.commailto:sca...@gmail.com wrote on 08/12/2011 10:17:53 AM: Yeah, not to clear. I noticed a lot of software I recognize in there, like GIMAGEX. So just google for it and be brought to the real developers site. http://www.netikus.net/products_downloads.html?SESSION= From: richardmccl...@aspca.orgmailto:richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]mailto:[mailto:richardmccl...@aspca.org] Sent: Friday, August 12, 2011 10:13 AM To: NT System Admin Issues Subject: Re: FYI: Free Windows Admin Tools Gosh, this looks promising, but how does one actually GET the @#* free downloads? Specifically, I am at the site for Netikus.Net and looking at NT ToolKit. Their create an account looks like it enables one to participate in a forum. Anyway, after creating and activating the account, I still can't actuall download the free tools. -- richard Gene Giannamore gene.giannam...@abideinternational.commailto:gene.giannam...@abideinternational.com wrote on 08/11/2011 02:34:37 PM: Just in case I am not the only one that did not know about this (or just forgotten); http://4sysops.com/best-free-windows-admin-tools/ I found a few interesting utils; http://4sysops.com/archives/remote-desktop-manager/ using on main PC http://4sysops.com/archives/free-remote-desktop-connection-manager- a-rdp-client/ using on laptop Gonna try these on a test (hopefully next month) http://4sysops.com/archives/free-virtuall-user-environment-manager- vuem-centrally-manage-desktop-settings/ http://4sysops.com/archives/free-netwrix-logon-reporter-logon-auditing/ http://4sysops.com/archives/free-netwrix-file-server-change-reporter/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software. com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software. com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog
Re: Weird dll files on boot
sounds rootkit-ish. MS has a boot cd to run Security Essentials. Sent from my Palm Pre on the Now Network from Sprint On Aug 16, 2011 7:19 AM, James Rankin kz2...@googlemail.com wrote: Yes, but I don't have much faith in the AV software of choice (Trend). According to it, everything is hunky-dory. MalwareBytes didn't detect anything on a full scan either. I'm pulling up some Process Monitor logs now to see if there are any needles in that haystack. On 16 August 2011 13:09, Erik Goldoff egold...@gmail.commailto:egold...@gmail.com wrote: have you already checked your AV quarantine for the presence of these DLLs, or at least the detection/risk log to see if *that* is why they're gone before you can get to them ? On Tue, Aug 16, 2011 at 6:41 AM, James Rankin kz2...@googlemail.commailto:kz2...@googlemail.com wrote: I've just got back from my holidays so I'm probably still not thinking straightbut has anyone noticed dll files with random names that appear in c:\windows\serviceprofiles\localservice\appdata\local\temp when a 2008 R2 server boots up? By the time I get to checking for them, they are gone. The reason I know they are there is because my whitelisting application doesn't allow executable content to have its ownership overwritten, and when the servers boot up, they are logging an event regarding an attempted ownership overwrite AppSense Application Manager intercepted the overwrite of the allowed executable 'c:\windows\serviceprofiles\localservice\appdata\local\temp\random_8_character_filename.dll' on ''servername'. Ownership of this file was changed to that of the user I've never noticed this happening before, and the randomised filename screams malware at me - but I have scanned the system with Trend and MalwareBytes, and can find no trace of any infection. By the time I dig into the folder to check, there's nothing there. Does anyone have any idea why these files would be appearing at boot time? My next step is to break out a bit of Process Monitor, but I'm just wondering if I am barking up a false positive tree here. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. * IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them. However, if you pass them on via email, be sure to include a disclaimer regarding liability for transmission. In the event that the originator did not send this email to you, then please return it to us and attach a scanned-in picture of your mother's brother's wife wearing nothing but a kangaroo suit, and we will immediately refund you exactly half of what you paid for the can of Whiskas you bought when you went to Pets At Home yesterday. We take no responsibility for non-receipt of this email because we are running Exchange 5.5 and everyone knows how glitchy that can be. In the event that you do get this message then please note that we take no responsibility for that either. Nor will we accept any liability, tacit or implied, for any damage you may or may not incur as a result of receiving, or not, as the case may be, from time to time, notwithstanding all liabilities implied or otherwise, ummm, hell, where was I...umm, no matter what happens, it is NOT, and NEVER WILL BE, OUR FAULT! The comments and opinions expressed herein are my own and NOT those of my employer, who, if he knew I was sending emails and surfing the seamier side of the Internet, would cut off my manhood and feed it to me for afternoon tea. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to
RE: Blackberry BES Image Vulnerability
What are these release notes you speak of? From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Tuesday, August 16, 2011 8:44 PM To: NT System Admin Issues Subject: Re: Blackberry BES Image Vulnerability The first page of the release notes clearly answer this: http://docs.blackberry.com/en/admin/deliverables/32540/BlackBerry_Enterprise_Server_for_Microsoft_Exchange-Maintenance_Release_Notes--1766981-0808012817-001-5.0.3-US.pdf ASB http://about.me/Andrew.S.Baker Harnessing the Advantages of Technology for the SMB market... On Tue, Aug 16, 2011 at 8:29 PM, David Liu ganymed...@gmail.commailto:ganymed...@gmail.com wrote: Let me rephrase, are the BES MR cumulative? e.g. installation of MR4 automatically instals all updates/fixes from previous maintenance releases? Thanks On Tue, Aug 16, 2011 at 8:26 PM, David Liu ganymed...@gmail.commailto:ganymed...@gmail.com wrote: btw, 5.03 MR4 has just been released and I notice that prerequisite appears you have to be at 5.03 to first to install MR4. So, if we are at 5.03 MR1, we'dhave to apply MR2/MR3 and then MR4? Does this necessitate a MR 2 install, reboot, MR3 install and so forth and so on? Thanks On Sun, Aug 14, 2011 at 12:51 AM, David Liu ganymed...@gmail.commailto:ganymed...@gmail.com wrote: I think bas only if u have bes running on it...my reading of this is that 5.03 MR3 fixes the vulnerability among other things that the ISSU is only applicable for 5.01 and 5.0.2 On Sat, Aug 13, 2011 at 8:57 AM, Martin Blackstone mblackst...@gmail.commailto:mblackst...@gmail.com wrote: Fix is easy. Lay down a couple of replacement files and restart the BAS. We did it in less than 5 min with no downtime. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.ukmailto:paul.hutchi...@mira.co.uk] Sent: Saturday, August 13, 2011 4:46 AM To: NT System Admin Issues Subject: Blackberry BES Image Vulnerability Apologies if this has already been posted but I didn't spot it so.. http://www.h-online.com/security/news/item/Images-used-to-break-into-BlackBerry-servers-1322436.html MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Install fonts w/out admin on Vista; bypass UAC on a DLL?
Can you directly copy the ttf to the Fonts folder? -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, August 17, 2011 12:24 PM To: NT System Admin Issues Subject: Install fonts w/out admin on Vista; bypass UAC on a DLL? Win Vista with current SP/updates. No domain. We want to be able to have non-admin users install fonts. Have removed the Hidden and ReadOnly attributes on C:\Windows\Fonts\. Have granted Modify permission to BUILTIN\Userspermission on: C:\Windows\Fonts\ C:\Windows\System32\FNTCACHE.DAT HKLM\Software\Microsoft\Windows NT\Current Version\Fonts Right-click a TTF and choose Install, and we still get a UAC elevation prompt (asking for a password for the admin account). Consensus on the Internet seems to be this is because the bits and pieces of Windows that do font installation are explicitly configured to require admin/elevation. Checking into that as the problem, I did find the Windows Application Compatibility Toolkit, which will supposedly let me create a shim database (.SDB) which might be able to tell UAC to run a given program as the invoker, and not to request elevation. (No guarantees this would work, but it's all I got.) Digging through the registry -- specifically, the shell menu stuff for ttffile -- it would appear font installation is kicked off by Explorer invoking FONTEXT.DLL. I presume I can't apply a shim to just a DLL. Anyone have any clues on the above? The only other idea I've found was to use a third-party utility to register the font with Windows, wrapped in a script, and I may have to go that route, but I'd prefer to just get the regular Windows font installer to do the right thing. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Install fonts w/out admin on Vista; bypass UAC on a DLL?
It's been a looong time since I've tried it, but I thought that was how I've installed fonts in the past. Mind you, my experience with this might be limited to win95 or possibly even 3.1. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, August 17, 2011 1:05 PM To: NT System Admin Issues Subject: Re: Install fonts w/out admin on Vista; bypass UAC on a DLL? On Wed, Aug 17, 2011 at 1:44 PM, Crawford, Scott crawfo...@evangel.edu wrote: Can you directly copy the ttf to the Fonts folder? In my experience, Windows won't see them properly until they're registered. But I haven't tried that on Vista; I suppose it's worth a shot. I'll see what happens. :) Thanks. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Install fonts w/out admin on Vista; bypass UAC on a DLL?
Hmmm 1999, so a bit old, but if it still works, then this bat is a little more generic. You can just drag a font onto it and it will create the reg, copy the file, import the reg and then delete the reg. One problem is that it won't pull the actual name of the font, instead it will use Generic Font Description...or whatever you put there. You could replace that with %~n1 and it would use the actual filename as the desctription. Also note that I haven't tested this, so ymmv. ---snip--- echo REGEDIT4font.reg echo.font.reg echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]font.reg echo Generic Font Description=%~n1%~x1font.reg copy %1 %systemroot%\fonts regedit /s font.reg del font.reg ---snip--- -Original Message- From: Mike Gill [mailto:lis...@canbyfoursquare.com] Sent: Wednesday, August 17, 2011 4:15 PM To: NT System Admin Issues Subject: RE: Install fonts w/out admin on Vista; bypass UAC on a DLL? I was just having this discussion today. I wish Windows would allow for a separate user folder specified to look for fonts. This way you could allow users to dump fonts into a folder they had persmission to or a network location for a group of people. Anyway, here is a command line option that you could probably modify to suite your needs: http://www.windowsitpro.com/article/installation2/how-can-i-install-a-font-f rom-the-command-line-batch-file- -- Mike Gill -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, August 17, 2011 10:24 AM To: NT System Admin Issues Subject: Install fonts w/out admin on Vista; bypass UAC on a DLL? Win Vista with current SP/updates. No domain. We want to be able to have non-admin users install fonts. Have removed the Hidden and ReadOnly attributes on C:\Windows\Fonts\. Have granted Modify permission to BUILTIN\Userspermission on: C:\Windows\Fonts\ C:\Windows\System32\FNTCACHE.DAT HKLM\Software\Microsoft\Windows NT\Current Version\Fonts Right-click a TTF and choose Install, and we still get a UAC elevation prompt (asking for a password for the admin account). Consensus on the Internet seems to be this is because the bits and pieces of Windows that do font installation are explicitly configured to require admin/elevation. Checking into that as the problem, I did find the Windows Application Compatibility Toolkit, which will supposedly let me create a shim database (.SDB) which might be able to tell UAC to run a given program as the invoker, and not to request elevation. (No guarantees this would work, but it's all I got.) Digging through the registry -- specifically, the shell menu stuff for ttffile -- it would appear font installation is kicked off by Explorer invoking FONTEXT.DLL. I presume I can't apply a shim to just a DLL. Anyone have any clues on the above? The only other idea I've found was to use a third-party utility to register the font with Windows, wrapped in a script, and I may have to go that route, but I'd prefer to just get the regular Windows font installer to do the right thing. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Need a free ping monitor with email notification for a handful of devices
Cheap and dirty, but might do the trick.
Usage is:
PingResponse IP AcceptableTime
For example, PingResponse google.com 10 would repeatedly ping google and if it
was ever over 10 milliseconds, blat will email you. Note that there's only 5
lines so watch wrapping. Also, this will not message you when ping returns a
request time out so if 5 seconds is too short, you modify the ping command in
line 2 with -w to change the timeout.
---PingResponse.bat---
:top
for /f delims=m=; tokens=5 %%i in ('ping %1 -n 1^|find Reply') do set /A
PingResponse=%%i
if %PingResponse% LSS %2 goto top
blat - -body Ping response was %PingResponse% milliseconds. -server
mailserver.com -f m...@self.com -subject Ping was too long -to m...@self.com
goto top
---PingResponse.bat---
From: Jonathan [mailto:ncm...@gmail.com]
Sent: Wednesday, August 17, 2011 4:38 PM
To: NT System Admin Issues
Subject: Re: Need a free ping monitor with email notification for a handful of
devices
Thanks, but it doesn't look like Servers Alive will do what I need.
Essentially, I need a continuous ping:
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=19ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=14ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
and send an alert to one or more configurable email addresses if time = x ms
for more than y pings, where x and y would be configurable by me.
From an up/down perspective, servers alive would be fine, but I need to be
able to tell what the link latency is between two endpoints. Anything more
than 90 ms could be problematic for me...
Jonathan
On Wed, Aug 17, 2011 at 3:56 PM, Stephen Wimberly
riverside...@gmail.commailto:riverside...@gmail.com wrote:
Servers Alive used to monitor 10 for free
http://www.woodstone.nu/salive/features.php
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
--
Jonathan, A+, MCSA, MCSE
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
RE: Install fonts w/out admin on Vista; bypass UAC on a DLL?
I just meant the article. -Original Message- From: Mike Gill [mailto:lis...@canbyfoursquare.com] Sent: Wednesday, August 17, 2011 5:49 PM To: NT System Admin Issues Subject: RE: Install fonts w/out admin on Vista; bypass UAC on a DLL? A bit old? Have you looked at the Font install dialog from Vista? It's unchanged since Windows 3.1, maybe even older. Not saying the whole subsystem is that old but it's weird one part went for so long with little attention. -- Mike Gill -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Wednesday, August 17, 2011 2:42 PM To: NT System Admin Issues Subject: RE: Install fonts w/out admin on Vista; bypass UAC on a DLL? Hmmm 1999, so a bit old, but if it still works, then this bat is a little more generic. You can just drag a font onto it and it will create the reg, copy the file, import the reg and then delete the reg. One problem is that it won't pull the actual name of the font, instead it will use Generic Font Description...or whatever you put there. You could replace that with %~n1 and it would use the actual filename as the desctription. Also note that I haven't tested this, so ymmv. ---snip--- echo REGEDIT4font.reg echo.font.reg echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]font.reg echo Generic Font Description=%~n1%~x1font.reg copy %1 %systemroot%\fonts regedit /s font.reg del font.reg ---snip--- -Original Message- From: Mike Gill [mailto:lis...@canbyfoursquare.com] Sent: Wednesday, August 17, 2011 4:15 PM To: NT System Admin Issues Subject: RE: Install fonts w/out admin on Vista; bypass UAC on a DLL? I was just having this discussion today. I wish Windows would allow for a separate user folder specified to look for fonts. This way you could allow users to dump fonts into a folder they had persmission to or a network location for a group of people. Anyway, here is a command line option that you could probably modify to suite your needs: http://www.windowsitpro.com/article/installation2/how-can-i-install-a-font-f rom-the-command-line-batch-file- -- Mike Gill -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, August 17, 2011 10:24 AM To: NT System Admin Issues Subject: Install fonts w/out admin on Vista; bypass UAC on a DLL? Win Vista with current SP/updates. No domain. We want to be able to have non-admin users install fonts. Have removed the Hidden and ReadOnly attributes on C:\Windows\Fonts\. Have granted Modify permission to BUILTIN\Userspermission on: C:\Windows\Fonts\ C:\Windows\System32\FNTCACHE.DAT HKLM\Software\Microsoft\Windows NT\Current Version\Fonts Right-click a TTF and choose Install, and we still get a UAC elevation prompt (asking for a password for the admin account). Consensus on the Internet seems to be this is because the bits and pieces of Windows that do font installation are explicitly configured to require admin/elevation. Checking into that as the problem, I did find the Windows Application Compatibility Toolkit, which will supposedly let me create a shim database (.SDB) which might be able to tell UAC to run a given program as the invoker, and not to request elevation. (No guarantees this would work, but it's all I got.) Digging through the registry -- specifically, the shell menu stuff for ttffile -- it would appear font installation is kicked off by Explorer invoking FONTEXT.DLL. I presume I can't apply a shim to just a DLL. Anyone have any clues on the above? The only other idea I've found was to use a third-party utility to register the font with Windows, wrapped in a script, and I may have to go that route, but I'd prefer to just get the regular Windows font installer to do the right thing. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions
RE: Taking ownership of a file at login
Take Ownership is not the same as Give Ownership From: James Rankin [mailto:kz2...@googlemail.com] Sent: Thursday, August 18, 2011 10:05 AM To: NT System Admin Issues Subject: Re: Taking ownership of a file at login I thought Full Control encompassed RWXDPO (where P was Change Permissions and O was Take Ownership)? Have things changed since NT4? :-) The user isn't an admin, so if that's right, therein lies my issue. On 18 August 2011 15:51, Ben Scott mailvor...@gmail.commailto:mailvor...@gmail.com wrote: On Thu, Aug 18, 2011 at 10:29 AM, James Rankin kz2...@googlemail.commailto:kz2...@googlemail.com wrote: I need to change the ownership of a file from that of the logged-in user to BUILTIN\Administrators during login. Is said logged-in user an admin? Only administrators can change the ownership of a file. Full Control permission is not sufficient. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. * IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them. However, if you pass them on via email, be sure to include a disclaimer regarding liability for transmission. In the event that the originator did not send this email to you, then please return it to us and attach a scanned-in picture of your mother's brother's wife wearing nothing but a kangaroo suit, and we will immediately refund you exactly half of what you paid for the can of Whiskas you bought when you went to Pets At Home yesterday. We take no responsibility for non-receipt of this email because we are running Exchange 5.5 and everyone knows how glitchy that can be. In the event that you do get this message then please note that we take no responsibility for that either. Nor will we accept any liability, tacit or implied, for any damage you may or may not incur as a result of receiving, or not, as the case may be, from time to time, notwithstanding all liabilities implied or otherwise, ummm, hell, where was I...umm, no matter what happens, it is NOT, and NEVER WILL BE, OUR FAULT! The comments and opinions expressed herein are my own and NOT those of my employer, who, if he knew I was sending emails and surfing the seamier side of the Internet, would cut off my manhood and feed it to me for afternoon tea. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Need a free ping monitor with email notification for a handful of devices
Ok, here's an improved version that checks for failed pings as well and cleans
up the output. Usage is the same as before. Again, watch for wrapping, there
should be 14 lines.
---PingResponse.bat---
@echo off
:top
set PingResponse=PingFailed
for /f delims=m=; tokens=5 %%i in ('ping %1 -n 1^|find Reply') do set /A
PingResponse=%%i
echo %PingResponse%
if %PingResponse% LSS %2 goto top
if %PingResponse%==PingFailed goto failed
echo blat - -body Ping response was %PingResponse% milliseconds. -server
mailserver.com -f m...@self.com -subject Ping was too long -to m...@self.com
blat - -body Ping response was %PingResponse% milliseconds. -server
mailserver.com -f m...@self.com -subject Ping was too long -to m...@self.com
goto top
:failed
echo blat - -body Ping failed. -server mailserver.com -f m...@self.com
-subject Ping failed. -to m...@self.com
blat - -body Ping failed. -server mailserver.com -f m...@self.com -subject
Ping failed. -to m...@self.com
goto top
---PingResponse.bat---
From: Crawford, Scott [mailto:crawfo...@evangel.edu]
Sent: Wednesday, August 17, 2011 5:43 PM
To: NT System Admin Issues
Subject: RE: Need a free ping monitor with email notification for a handful of
devices
Cheap and dirty, but might do the trick.
Usage is:
PingResponse IP AcceptableTime
For example, PingResponse google.com 10 would repeatedly ping google and if it
was ever over 10 milliseconds, blat will email you. Note that there's only 5
lines so watch wrapping. Also, this will not message you when ping returns a
request time out so if 5 seconds is too short, you modify the ping command in
line 2 with -w to change the timeout.
---PingResponse.bat---
:top
for /f delims=m=; tokens=5 %%i in ('ping %1 -n 1^|find Reply') do set /A
PingResponse=%%i
if %PingResponse% LSS %2 goto top
blat - -body Ping response was %PingResponse% milliseconds. -server
mailserver.com -f m...@self.commailto:m...@self.com -subject Ping was too
long -to m...@self.commailto:m...@self.com
goto top
---PingResponse.bat---
From: Jonathan [mailto:ncm...@gmail.com]mailto:[mailto:ncm...@gmail.com]
Sent: Wednesday, August 17, 2011 4:38 PM
To: NT System Admin Issues
Subject: Re: Need a free ping monitor with email notification for a handful of
devices
Thanks, but it doesn't look like Servers Alive will do what I need.
Essentially, I need a continuous ping:
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=19ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=14ms TTL=245
Reply from 10.10.10.10http://10.10.10.10: bytes=32 time=15ms TTL=245
and send an alert to one or more configurable email addresses if time = x ms
for more than y pings, where x and y would be configurable by me.
From an up/down perspective, servers alive would be fine, but I need to be
able to tell what the link latency is between two endpoints. Anything more
than 90 ms could be problematic for me...
Jonathan
On Wed, Aug 17, 2011 at 3:56 PM, Stephen Wimberly
riverside...@gmail.commailto:riverside...@gmail.com wrote:
Servers Alive used to monitor 10 for free
http://www.woodstone.nu/salive/features.php
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
--
Jonathan, A+, MCSA, MCSE
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe
RE: Why not failwords?
Hello spoiler From: William Robbins [mailto:dangerw...@gmail.com] Sent: Friday, August 19, 2011 11:10 AM To: NT System Admin Issues Subject: Re: Why not failwords? Cause that worked out well in Demolition Man :) - WJR On Fri, Aug 19, 2011 at 10:37, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Yep. Biometrics-only or biometrics in conjunction with a PIN/password are really the best way to go. We *have* the technology to do this. From: James Hill [mailto:j.h...@coffeeclub.com.aumailto:j.h...@coffeeclub.com.au] Sent: Thursday, August 18, 2011 7:03 PM To: NT System Admin Issues Subject: RE: Why not failwords? I still think passwords have to die. There are better options. From: Hilderbrand, Doug [mailto:doug.hilderbr...@craneaerospace.commailto:doug.hilderbr...@craneaerospace.com] Sent: Friday, 19 August 2011 3:25 AM To: NT System Admin Issues Subject: Why not failwords? I was just reading all those emails about making hard to crack passwords (Almost but not quite OT: Passwords). I like Steve Gibson's analysis of why long passwords are harder to brute force crack than shorter complex ones. But, I wonder... Why hasn't anyone implemented fail words? Two or more passwords associated with your account or whatever. One you use for normal access and is as hard to crack as you can make it and still be memorable. Then another password that would be easy(er) to crack that triggers some event? Here are a few scenarios I can think of off the top of my head: [] Bank manager forced to open the vault at gunpoint. Use the failword. Opens the vault and rings the silent alarm. [] Someone tries to login to your PayPal or bank account and tries your failword. They get the usual bad password result, but you get a text message on your cell phone. [] Someone tries to unlock your iPhone. They try the failword and it gets locked until you send it a special email or text or 24 hours expire, etc. Is there some reason this is a bad idea? I can't think of any... Doug Hilderbrand | Systems Analyst, Information Technology | Crane Aerospace Electronics Check out the new Crane Aerospace Electronics Newsroom! Like us on Facebook! We value your opinion! How may we serve you better? Please click the survey link to tell us how we are doing: http://www.craneae.com/surveys/satisfaction.htm Your feedback is of the utmost importance to us. Thank you for your time. Crane Aerospace Electronics Confidentiality Statement: The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient, or any employee or agent responsible to deliver it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Why not failwords?
:) I know, I'm just foolin' around. As if it's major plot point anyway. As if I could recall the major plot pointsDidn't Wesley Snipes end up in jail in the end...or was that real life? From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Friday, August 19, 2011 11:20 AM To: NT System Admin Issues Subject: Re: Why not failwords? Wow, it's a nearly 20 year old film. Presumably if one hasn't seen it, one isn't interested in it, at this point. On Fri, Aug 19, 2011 at 12:14 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Hello spoiler From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Friday, August 19, 2011 11:10 AM To: NT System Admin Issues Subject: Re: Why not failwords? Cause that worked out well in Demolition Man :) - WJR On Fri, Aug 19, 2011 at 10:37, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Yep. Biometrics-only or biometrics in conjunction with a PIN/password are really the best way to go. We *have* the technology to do this. From: James Hill [mailto:j.h...@coffeeclub.com.aumailto:j.h...@coffeeclub.com.au] Sent: Thursday, August 18, 2011 7:03 PM To: NT System Admin Issues Subject: RE: Why not failwords? I still think passwords have to die. There are better options. From: Hilderbrand, Doug [mailto:doug.hilderbr...@craneaerospace.commailto:doug.hilderbr...@craneaerospace.com] Sent: Friday, 19 August 2011 3:25 AM To: NT System Admin Issues Subject: Why not failwords? I was just reading all those emails about making hard to crack passwords (Almost but not quite OT: Passwords). I like Steve Gibson's analysis of why long passwords are harder to brute force crack than shorter complex ones. But, I wonder... Why hasn't anyone implemented fail words? Two or more passwords associated with your account or whatever. One you use for normal access and is as hard to crack as you can make it and still be memorable. Then another password that would be easy(er) to crack that triggers some event? Here are a few scenarios I can think of off the top of my head: [] Bank manager forced to open the vault at gunpoint. Use the failword. Opens the vault and rings the silent alarm. [] Someone tries to login to your PayPal or bank account and tries your failword. They get the usual bad password result, but you get a text message on your cell phone. [] Someone tries to unlock your iPhone. They try the failword and it gets locked until you send it a special email or text or 24 hours expire, etc. Is there some reason this is a bad idea? I can't think of any... Doug Hilderbrand | Systems Analyst, Information Technology | Crane Aerospace Electronics Check out the new Crane Aerospace Electronics Newsroom! Like us on Facebook! We value your opinion! How may we serve you better? Please click the survey link to tell us how we are doing: http://www.craneae.com/surveys/satisfaction.htm Your feedback is of the utmost importance to us. Thank you for your time. Crane Aerospace Electronics Confidentiality Statement: The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient, or any employee or agent responsible to deliver it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums
RE: Why not failwords?
:) nice From: William Robbins [mailto:dangerw...@gmail.com] Sent: Friday, August 19, 2011 2:20 PM To: NT System Admin Issues Subject: Re: Why not failwords? That movie was spoiled long before me. - WJR On Friday, August 19, 2011, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Hello spoiler From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Friday, August 19, 2011 11:10 AM To: NT System Admin Issues Subject: Re: Why not failwords? Cause that worked out well in Demolition Man :) - WJR On Fri, Aug 19, 2011 at 10:37, John Aldrich jaldr...@blueridgecarpet.commailto:jaldr...@blueridgecarpet.com wrote: Yep. Biometrics-only or biometrics in conjunction with a PIN/password are really the best way to go. We *have* the technology to do this. From: James Hill [mailto:j.h...@coffeeclub.com.aumailto:j.h...@coffeeclub.com.au] Sent: Thursday, August 18, 2011 7:03 PM To: NT System Admin Issues Subject: RE: Why not failwords? I still think passwords have to die. There are better options. From: Hilderbrand, Doug [mailto:doug.hilderbr...@craneaerospace.commailto:doug.hilderbr...@craneaerospace.com] Sent: Friday, 19 August 2011 3:25 AM To: NT System Admin Issues Subject: Why not failwords? I was just reading all those emails about making hard to crack passwords (Almost but not quite OT: Passwords). I like Steve Gibson's analysis of why long passwords are harder to brute force crack than shorter complex ones. But, I wonder... Why hasn't anyone implemented fail words? Two or more passwords associated with your account or whatever. One you use for normal access and is as hard to crack as you can make it and still be memorable. Then another password that would be easy(er) to crack that triggers some event? Here are a few scenarios I can think of off the top of my head: [] Bank manager forced to open the vault at gunpoint. Use the failword. Opens the vault and rings the silent alarm. [] Someone tries to login to your PayPal or bank account and tries your failword. They get the usual bad password result, but you get a text message on your cell phone. [] Someone tries to unlock your iPhone. They try the failword and it gets locked until you send it a special email or text or 24 hours expire, etc. Is there some reason this is a bad idea? I can't think of any... Doug Hilderbrand | Systems Analyst, Information Technology | Crane Aerospace Electronics Check out the new Crane Aerospace Electronics Newsroom! Like us on Facebook! We value your opinion! How may we serve you better? Please click the survey link to tell us how we are doing: http://www.craneae.com/surveys/satisfaction.htm Your feedback is of the utmost importance to us. Thank you for your time. Crane Aerospace Electronics Confidentiality Statement: The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient, or any employee or agent responsible to deliver it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- - WJR ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click
RE: Did you know...
As long as you're on a journey of discovery, start . is the reverse process. :) From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: Monday, August 22, 2011 4:11 PM To: NT System Admin Issues Subject: Did you know... You can paste folder names in a command-prompt windows by dragging the folder and dropping it into the CLI window? I saw my boss do it this morning and it blew my mind. How did I not ever know you can do that... ?! -- Espi ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: [Microsoft support] Is it me...
However, there are ways to handle this Such as? My plan is to migrate from ESX3.5 to Hyper-V and I *planned* on joining the hosts to the virualized domain. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, August 23, 2011 6:37 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... IMHO - the only issue is that you need to have more than one DC and they need to be hosted on more than one physical server. THE MAJOR CHALLENGE is that, in the case of a datacenter reboot or datacenter shutdown followed by a datacenter power-up, restoring service can be a bit challenging. However, there are ways to handle this. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jon Harris [mailto:jk.har...@gmail.com]mailto:[mailto:jk.har...@gmail.com] Sent: Tuesday, August 23, 2011 7:33 PM To: NT System Admin Issues Subject: Re: [Microsoft support] Is it me... That was why I never made a Hyper-V host a member of any domain if it would host a DC. Just plain bad news. Jon On Tue, Aug 23, 2011 at 7:19 PM, David Lum david@nwea.orgmailto:david@nwea.org wrote: ..or is there no 24x7 pay per incident number for support on Microsoft Servers? I keep getting to this page (2008 R2) and choosing Virtualization and Other I get support times of 6a-6pm. https://support.microsoft.com/oas/default.aspx?st=1as=1iid=1059iguid=d535992c-b4dd-49a7-b4a8-2b14e5649525_1_1x=10y=17c1=508sd=gnc=SMCln=en-usprid=13020gsaid=582847 I had a situation the other night where I thought I was going to have to call them because I uh...have a Hyper-V host that's a domain member and it was requiring connection to a DC to start a guest VM, and the guest VM was the DC it needed to talk to! Invoking some DR steps I got back in business, but still...do you need to have some kind of support contract to have them available 24x7? David Lum Systems Engineer // NWEATM Office 503.548.5229tel:503.548.5229 // Cell (voice/text) 503.267.9764tel:503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Symantec Endpoint Protection and Exclusions
Absolutely. I'd go further and say they just need to be isolated from running non-approved code. A file server can have its shares full of viruses, but its not a problem for the system if nobody executes the code ON the server. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, August 24, 2011 8:18 AM To: NT System Admin Issues Subject: RE: Symantec Endpoint Protection and Exclusions I've got several clients whose server farm is isolated from their user desktops and therefore chose to not run standard AV. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: James Rankin [mailto:kz2...@googlemail.com]mailto:[mailto:kz2...@googlemail.com] Sent: Wednesday, August 24, 2011 9:15 AM To: NT System Admin Issues Subject: Re: Symantec Endpoint Protection and Exclusions There's not many server-end systems that don't need exclusions. On XenApp, without a particular set of them you can't get EdgeSight working effectively, either - and if you use AppSense agents, you need to configure another particular set of exclusions, even on client endpoints. The days of the reactive AV are coming to an end, I think. Application management stops more threats for us these days than traditional AV ever does. I'm tempted to run a few systems without standard AV, but my current emplyer won't let me take the risk, even for an experiment :-) On 24 August 2011 14:07, Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com wrote: BTW #3, not entering exclusions in an A/V product running on an Exchange Server can also really foul up the works. BTW #4, not entering exclusions in an A/V product running on a SQL Server can also really foul up the works. And your other comment is spot on! :) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Webster [mailto:webs...@carlwebster.commailto:webs...@carlwebster.com] Sent: Wednesday, August 24, 2011 9:01 AM To: NT System Admin Issues Subject: RE: Symantec Endpoint Protection and Exclusions Tried that. Gave up. Found some posts saying in the managed version of SEP that there is no way to export the exclusion stuff. This customer had decided on the unmanaged version of SEP 12.1. Decisions like that make me glad I charge by the hour! :) I wound up just manually entering the exclusions on all six Citrix XenApp servers. BTW #1, not entering exclusions in an A/V product running on a XenApp server can really screw things up. They installed SEP 12.1 on all XenApp servers over the weekend and didn't tell me they were even planning on such a thing. Monday morning all you know what broke loose when users were getting corrupted profile, couldn't log off and sessions would never terminate and their main accounting app's executable kept being blocked so no one could do any accounting work. 12 man-hours later they were back running. BTW #2, not entering exclusions in an A/V product running on a Domain Controller can also really foul up the works. ID10T issues like this keep MBS and me in business. Thanks Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Pete Howard [mailto:pchow...@yahoo.com]mailto:[mailto:pchow...@yahoo.com] Sent: Wednesday, August 24, 2011 7:51 AM To: NT System Admin Issues Subject: Re: Symantec Endpoint Protection and Exclusions You may have access to the key but not Regedit perms. Try importing from an elevated cmd prompt ? Sent from my iPad On Aug 23, 2011, at 11:58 PM, Webster webs...@carlwebster.commailto:webs...@carlwebster.com wrote: My GoogleFu is failing me. Is there a way to copy the Exclusions from one computer to another? I found the registry key: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\Exclusions] I exported it but when I try to import the .reg file, I get an access denied. I gave my account FC permission to the key but still a no-go. Any clues? Thanks Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To
RE: Orginizational Q
I loved it. Most satisfying movie I can remember. Not necessarily the best, but it was everything I wanted it to be. Incorporating all the elements of the show without being blatant ripoffs. From: Steve Ens [mailto:stevey...@gmail.com] Sent: Wednesday, August 24, 2011 10:28 AM To: NT System Admin Issues Subject: Re: Orginizational Q Watched the movie this weekend. It wasn't that bad. I love the Murdoch character - the guy from District 7...Van de Merwe I think. Funny guy. On Wed, Aug 24, 2011 at 10:23 AM, James Rankin kz2...@googlemail.commailto:kz2...@googlemail.com wrote: I'd just be proud to be a member of the A-Team... Get yourself one of these - I have one http://www.redsave.com/products/mr-t-in-your-pocket On 24 August 2011 16:18, Guyer, Don don.gu...@fiserv.commailto:don.gu...@fiserv.com wrote: Server Infrastructure Team Infrastructure Team Server Engineering Systems Engineering They Who Manage Internal Servers :) I don't even know what the RIM stands for in my groups' name... Don Guyer Windows Systems Engineer RIM Operations Engineering Distributed - A Team, Tier 2 Enterprise Technology Group Fiserv don.gu...@fiserv.commailto:don.gu...@fiserv.com Office: 1-800-523-7282 x 1673tel:1-800-523-7282%20x%201673 Fax: 610-233-0404tel:610-233-0404 www.fiserv.comhttp://www.fiserv.com/ [Description: Frog Signature] From: David Lum [mailto:david@nwea.orgmailto:david@nwea.org] Sent: Wednesday, August 24, 2011 11:08 AM To: NT System Admin Issues Subject: Orginizational Q So...in my org we have a Service Desk team that handles the PC stuff, an SE team (called IS Delivery) that handles many of our servers (internal and client facing) and then there's me - spun off from the SE team - who is effectively the SE team that handles internal facing servers. It's largely a forgone conclusion that I will have another SE and probably a DBA join me so we can *fully* take over the care and feeding of the Active Directory and server infrastructure. What would be an appropriate dept/team name be? What is the dept name of your guys' teams that manage AD and servers? David Lum Systems Engineer // NWEATM Office 503.548.5229tel:503.548.5229 // Cell (voice/text) 503.267.9764tel:503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. * IMPORTANT INFORMATION/DISCLAIMER * This document should be read only by those persons to whom it is addressed. If you have received this message it was obviously addressed to you and therefore you can read it, even it we didn't mean to send it to you. However, if the contents of this email make no sense whatsoever then you probably were not the intended recipient, or, alternatively, you are a mindless cretin; either way, you should immediately kill yourself and destroy your computer (not necessarily in that order). Once you have taken this action, please contact us.. no, sorry, you can't use your computer, because you just destroyed it, and possibly also committed suicide afterwards, but I am starting to digress.. The originator of this email is not liable for the transmission of the information contained in this communication. Or are they? Either way it's a pretty dull legal query and frankly one I'm not going to dwell on. But should you have nothing better to do, please feel free to ruminate on it, and please pass on any concrete conclusions should you find them. However, if you pass them on via email, be sure to include a disclaimer regarding liability for transmission. In the event that the originator did not send this email to you, then please return it to us and attach a scanned-in picture of your mother's brother's wife wearing nothing but a kangaroo suit, and we will immediately refund you exactly half of what you paid for the can of Whiskas you bought when you went to Pets At Home yesterday. We take no responsibility for non-receipt of this email because we are running Exchange 5.5 and everyone knows how glitchy that can be. In the event that you do get this message then please note that we take no
RE: [Microsoft support] Is it me...
Thanks. That makes sense. So, really there's no issue as long as you have a local account on the hosts to log into? From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, August 23, 2011 7:24 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... That's fine. Remember, Hyper-V is a type-1 hypervisor. IT doesn't care how you log in to the root partition. IT doesn't care about domains. IT doesn't care about authentication credentials. So If you are recovering from a datacenter shutdown, first power-on the Hyper-V server hosting a VM that holds your forest-root PDC FSMO role. This VM server really needs to be a GC and host DNS. This VM server needs to refer to itself as either primary or secondary for DNS. Sign on to that Hyper-V server using a LOCAL ADMINISTRATIVE USER ACCOUNT. Start the VM. After it's running, log out of the Hyper-V server and log back in using a domain account. Start your other DCs/GCs, I'd recommend one-by-one, but depending on your environment size, that may not be practical. After you have at least one DC/GC running in each AD site, you can begin starting your other servers, based on your recovery requirements (me, I start all DCs, followed by Exchange, followed by SQL, followed by file servers, followed by anything else that is left). Alternately - have your forest root PDC (and a GC!) on a physical server. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Tuesday, August 23, 2011 8:10 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... However, there are ways to handle this Such as? My plan is to migrate from ESX3.5 to Hyper-V and I *planned* on joining the hosts to the virualized domain. From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Tuesday, August 23, 2011 6:37 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... IMHO - the only issue is that you need to have more than one DC and they need to be hosted on more than one physical server. THE MAJOR CHALLENGE is that, in the case of a datacenter reboot or datacenter shutdown followed by a datacenter power-up, restoring service can be a bit challenging. However, there are ways to handle this. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jon Harris [mailto:jk.har...@gmail.com]mailto:[mailto:jk.har...@gmail.com] Sent: Tuesday, August 23, 2011 7:33 PM To: NT System Admin Issues Subject: Re: [Microsoft support] Is it me... That was why I never made a Hyper-V host a member of any domain if it would host a DC. Just plain bad news. Jon On Tue, Aug 23, 2011 at 7:19 PM, David Lum david@nwea.orgmailto:david@nwea.org wrote: ..or is there no 24x7 pay per incident number for support on Microsoft Servers? I keep getting to this page (2008 R2) and choosing Virtualization and Other I get support times of 6a-6pm. https://support.microsoft.com/oas/default.aspx?st=1as=1iid=1059iguid=d535992c-b4dd-49a7-b4a8-2b14e5649525_1_1x=10y=17c1=508sd=gnc=SMCln=en-usprid=13020gsaid=582847 I had a situation the other night where I thought I was going to have to call them because I uh...have a Hyper-V host that's a domain member and it was requiring connection to a DC to start a guest VM, and the guest VM was the DC it needed to talk to! Invoking some DR steps I got back in business, but still...do you need to have some kind of support contract to have them available 24x7? David Lum Systems Engineer // NWEATM Office 503.548.5229tel:503.548.5229 // Cell (voice/text) 503.267.9764tel:503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise
RE: [Microsoft support] Is it me...
But, of course ;) From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, August 24, 2011 1:41 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... And you use it when appropriate. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Wednesday, August 24, 2011 2:38 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Thanks. That makes sense. So, really there's no issue as long as you have a local account on the hosts to log into? From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Tuesday, August 23, 2011 7:24 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... That's fine. Remember, Hyper-V is a type-1 hypervisor. IT doesn't care how you log in to the root partition. IT doesn't care about domains. IT doesn't care about authentication credentials. So If you are recovering from a datacenter shutdown, first power-on the Hyper-V server hosting a VM that holds your forest-root PDC FSMO role. This VM server really needs to be a GC and host DNS. This VM server needs to refer to itself as either primary or secondary for DNS. Sign on to that Hyper-V server using a LOCAL ADMINISTRATIVE USER ACCOUNT. Start the VM. After it's running, log out of the Hyper-V server and log back in using a domain account. Start your other DCs/GCs, I'd recommend one-by-one, but depending on your environment size, that may not be practical. After you have at least one DC/GC running in each AD site, you can begin starting your other servers, based on your recovery requirements (me, I start all DCs, followed by Exchange, followed by SQL, followed by file servers, followed by anything else that is left). Alternately - have your forest root PDC (and a GC!) on a physical server. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Tuesday, August 23, 2011 8:10 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... However, there are ways to handle this Such as? My plan is to migrate from ESX3.5 to Hyper-V and I *planned* on joining the hosts to the virualized domain. From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Tuesday, August 23, 2011 6:37 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... IMHO - the only issue is that you need to have more than one DC and they need to be hosted on more than one physical server. THE MAJOR CHALLENGE is that, in the case of a datacenter reboot or datacenter shutdown followed by a datacenter power-up, restoring service can be a bit challenging. However, there are ways to handle this. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jon Harris [mailto:jk.har...@gmail.com]mailto:[mailto:jk.har...@gmail.com] Sent: Tuesday, August 23, 2011 7:33 PM To: NT System Admin Issues Subject: Re: [Microsoft support] Is it me... That was why I never made a Hyper-V host a member of any domain if it would host a DC. Just plain bad news. Jon On Tue, Aug 23, 2011 at 7:19 PM, David Lum david@nwea.orgmailto:david@nwea.org wrote: ..or is there no 24x7 pay per incident number for support on Microsoft Servers? I keep getting to this page (2008 R2) and choosing Virtualization and Other I get support times of 6a-6pm. https://support.microsoft.com/oas/default.aspx?st=1as=1iid=1059iguid=d535992c-b4dd-49a7-b4a8-2b14e5649525_1_1x=10y=17c1=508sd=gnc=SMCln=en-usprid=13020gsaid=582847 I had a situation the other night where I thought I was going to have to call them because I uh...have a Hyper-V host that's a domain member and it was requiring connection to a DC to start a guest VM, and the guest VM was the DC it needed to talk to! Invoking some DR steps I got back in business, but still...do you need to have some kind of support contract to have them available 24x7? David Lum Systems Engineer // NWEATM Office 503.548.5229tel:503.548.5229 // Cell (voice/text) 503.267.9764tel:503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana
RE: [Microsoft support] Is it me...
I'm curious why not. The more I think about it, the more it seems like a good idea. 1. It completely negates the issue of virtualizing a DC or having a separate physical DC 2. Second, a potential problem with running services on the host is that it could starve the guests for resources, but if any service NEEDS resources, what better than AD? 3. If you have virtualized DCs, the hosts should be the most protected servers in your environment since a compromise there can easily lead to a compromise of any guest - including a DC. So, if that host is already well protected, since it is in fact as critical as a DC, why not run AD on it? One possible reason against running extra services on the host is he possibility for needing more reboots due to patching, but it should be a fairly insignificant difference, especially if running Server Core. From: Sean Rector [mailto:sean.rec...@vaopera.org] Sent: Thursday, August 25, 2011 8:27 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I thought it was a no-no. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 6:11 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Right - I'm missing what's not best practice about it. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 1:33 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... In my environment - nothing. It's working like a champ. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 1:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... What's wrong with that? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 6:14 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I know I'm not following best practice, but my Hyper-V hosts are running Datacenter Ed. and are my DCs. Sean Rector, MCSE Information Technology Manager Virginia Opera Association E-Mail: sean.rec...@vaopera.orgmailto:sean.rec...@vaopera.org Phone:(757) 213-4548 (direct line) From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Tue 8/23/2011 7:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... If you are down, you call them and tell them you are down and that it is a business critical event. I don't know what the fee for that is, but you are supposed to get a callback in 30 minutes 24x7x365. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org]mailto:[mailto:david@nwea.org] Sent: Tuesday, August 23, 2011 7:20 PM To: NT System Admin Issues Subject: [Microsoft support] Is it me... ..or is there no 24x7 pay per incident number for support on Microsoft Servers? I keep getting to this page (2008 R2) and choosing Virtualization and Other I get support times of 6a-6pm. https://support.microsoft.com/oas/default.aspx?st=1as=1iid=1059iguid=d535992c-b4dd-49a7-b4a8-2b14e5649525_1_1x=10y=17c1=508sd=gnc=SMCln=en-usprid=13020gsaid=582847 I had a situation the other night where I thought I was going to have to call them because I uh...have a Hyper-V host that's a domain member and it was requiring connection to a DC to start a guest VM, and the guest VM was the DC it needed to talk to! Invoking some DR steps I got back in business, but still...do you need to have some kind of support contract to have them available 24x7? David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click
RE: [Microsoft support] Is it me...
Isn't the attack surface already there if there's a DC at all? I suppose there could be some vulnerability that's introduced by the combination of Hyper-V and AD, but that doesn't seem any more likely to me than a vulnerability being introduced by having a DC run _under_ a hypervisor. So, in that sense, I think it's a wash. I would think you'd want your DCs up and running first anyway so in that sense, booting a host that's running AD should take less time than booting a host that's not running AD and _then_ booting a guess that is running AD. Maybe my imagination is lacking, but it seems like it would only simplify DR, especially the datacenter reboot. Yeah, good point. Care would definitely be required, especially regarding NICs. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, August 25, 2011 9:16 AM To: NT System Admin Issues Subject: Re: [Microsoft support] Is it me... Re: #1 - Fair point. Re: #2 - It adds attack surface area, beyond just services that need to be patched. Re: #3 - Again, fair enough point, but it does take longer to start up a DC, and this has an impact on when other services get started up. It probably complicates a few DR scenarios as well. :) And you have to pay more attention to how the DC is configured, as such a system will likely be multi-homed. I do it at home today, but would caution that care was taken in going this route -- not a rejection, but not an endorsement either. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Thu, Aug 25, 2011 at 9:40 AM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I'm curious why not. The more I think about it, the more it seems like a good idea. 1. It completely negates the issue of virtualizing a DC or having a separate physical DC 2. Second, a potential problem with running services on the host is that it could starve the guests for resources, but if any service NEEDS resources, what better than AD? 3. If you have virtualized DCs, the hosts should be the most protected servers in your environment since a compromise there can easily lead to a compromise of any guest - including a DC. So, if that host is already well protected, since it is in fact as critical as a DC, why not run AD on it? One possible reason against running extra services on the host is he possibility for needing more reboots due to patching, but it should be a fairly insignificant difference, especially if running Server Core. From: Sean Rector [mailto:sean.rec...@vaopera.orgmailto:sean.rec...@vaopera.org] Sent: Thursday, August 25, 2011 8:27 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I thought it was a no-no. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 6:11 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Right - I'm missing what's not best practice about it. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132tel:312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 1:33 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... In my environment - nothing. It's working like a champ. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 1:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... What's wrong with that? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132tel:312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 6:14 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I know I'm not following best practice, but my Hyper-V hosts are running Datacenter Ed. and are my DCs. Sean Rector, MCSE Information Technology Manager Virginia Opera Association E-Mail: sean.rec...@vaopera.orgmailto:sean.rec...@vaopera.org Phone:(757) 213-4548tel:%28757%29%20213-4548 (direct line) From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Tue 8/23/2011 7:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... If you are down, you call them and tell them you are down and that it is a business critical event. I don't know what the fee for that is, but you are supposed to get a callback in 30 minutes 24x7x365. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org]mailto:[mailto:david@nwea.org] Sent: Tuesday, August 23, 2011 7:20 PM To: NT System Admin Issues Subject
RE: [Microsoft support] Is it me...
Yeah, 48 hours ago, I woulda said the exact same thing. I'm just trying to explore the reasons for that mindset. From: David Lum [mailto:david@nwea.org] Sent: Thursday, August 25, 2011 9:11 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I've been of the mindset that the Hyper-V host should do basically nothing else but host, and if they can be server core then even better. I run one full OS Hyper-V host and all other hosts are server core. Interesting discussion here though. I love this list. Dave From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Thursday, August 25, 2011 6:40 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I'm curious why not. The more I think about it, the more it seems like a good idea. 1. It completely negates the issue of virtualizing a DC or having a separate physical DC 2. Second, a potential problem with running services on the host is that it could starve the guests for resources, but if any service NEEDS resources, what better than AD? 3. If you have virtualized DCs, the hosts should be the most protected servers in your environment since a compromise there can easily lead to a compromise of any guest - including a DC. So, if that host is already well protected, since it is in fact as critical as a DC, why not run AD on it? One possible reason against running extra services on the host is he possibility for needing more reboots due to patching, but it should be a fairly insignificant difference, especially if running Server Core. From: Sean Rector [mailto:sean.rec...@vaopera.org] Sent: Thursday, August 25, 2011 8:27 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I thought it was a no-no. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 6:11 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Right - I'm missing what's not best practice about it. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 1:33 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... In my environment - nothing. It's working like a champ. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 1:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... What's wrong with that? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 6:14 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I know I'm not following best practice, but my Hyper-V hosts are running Datacenter Ed. and are my DCs. Sean Rector, MCSE Information Technology Manager Virginia Opera Association E-Mail: sean.rec...@vaopera.orgmailto:sean.rec...@vaopera.org Phone:(757) 213-4548 (direct line) From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Tue 8/23/2011 7:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... If you are down, you call them and tell them you are down and that it is a business critical event. I don't know what the fee for that is, but you are supposed to get a callback in 30 minutes 24x7x365. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org]mailto:[mailto:david@nwea.org] Sent: Tuesday, August 23, 2011 7:20 PM To: NT System Admin Issues Subject: [Microsoft support] Is it me... ..or is there no 24x7 pay per incident number for support on Microsoft Servers? I keep getting to this page (2008 R2) and choosing Virtualization and Other I get support times of 6a-6pm. https://support.microsoft.com/oas/default.aspx?st=1as=1iid=1059iguid=d535992c-b4dd-49a7-b4a8-2b14e5649525_1_1x=10y=17c1=508sd=gnc=SMCln=en-usprid=13020gsaid=582847 I had a situation the other night where I thought I was going to have to call them because I uh...have a Hyper-V host that's a domain member and it was requiring connection to a DC to start a guest VM, and the guest VM was the DC it needed to talk to! Invoking some DR steps I got back in business, but still...do you need to have some kind of support contract to have them available 24x7? David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http
RE: [Microsoft support] Is it me...
I would definitely plan on a cluster and enough hardware that at least one node can be taken offline with enough leftover horse power to run things. So, in that scenario, I would live migrate the guests to other hosts before doing the maintenance on the host. From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Thursday, August 25, 2011 10:58 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Unless you have a hyper-v cluster - the downtime to patch a DC (and all the other software you have to protect the DC - HIPS/AV/whatever) means that all the hosted services go offline as well. When you have 99.9+ uptime requirements, I think it is better to have a few physical DCs (the rest can be virtual), but the Hyper-V host should be minimal footprint. Looking over the past 2-3 years, I don't think Server Core really provides that much benefit - you don't need IE, WMP etc patches, but who really uses IE or WMP on their servers? From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Thursday, 25 August 2011 11:38 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Isn't the attack surface already there if there's a DC at all? I suppose there could be some vulnerability that's introduced by the combination of Hyper-V and AD, but that doesn't seem any more likely to me than a vulnerability being introduced by having a DC run _under_ a hypervisor. So, in that sense, I think it's a wash. I would think you'd want your DCs up and running first anyway so in that sense, booting a host that's running AD should take less time than booting a host that's not running AD and _then_ booting a guess that is running AD. Maybe my imagination is lacking, but it seems like it would only simplify DR, especially the datacenter reboot. Yeah, good point. Care would definitely be required, especially regarding NICs. From: Andrew S. Baker [mailto:asbz...@gmail.com]mailto:[mailto:asbz...@gmail.com] Sent: Thursday, August 25, 2011 9:16 AM To: NT System Admin Issues Subject: Re: [Microsoft support] Is it me... Re: #1 - Fair point. Re: #2 - It adds attack surface area, beyond just services that need to be patched. Re: #3 - Again, fair enough point, but it does take longer to start up a DC, and this has an impact on when other services get started up. It probably complicates a few DR scenarios as well. :) And you have to pay more attention to how the DC is configured, as such a system will likely be multi-homed. I do it at home today, but would caution that care was taken in going this route -- not a rejection, but not an endorsement either. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Thu, Aug 25, 2011 at 9:40 AM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I'm curious why not. The more I think about it, the more it seems like a good idea. 1. It completely negates the issue of virtualizing a DC or having a separate physical DC 2. Second, a potential problem with running services on the host is that it could starve the guests for resources, but if any service NEEDS resources, what better than AD? 3. If you have virtualized DCs, the hosts should be the most protected servers in your environment since a compromise there can easily lead to a compromise of any guest - including a DC. So, if that host is already well protected, since it is in fact as critical as a DC, why not run AD on it? One possible reason against running extra services on the host is he possibility for needing more reboots due to patching, but it should be a fairly insignificant difference, especially if running Server Core. From: Sean Rector [mailto:sean.rec...@vaopera.orgmailto:sean.rec...@vaopera.org] Sent: Thursday, August 25, 2011 8:27 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I thought it was a no-no. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 6:11 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Right - I'm missing what's not best practice about it. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132tel:312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 1:33 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... In my environment - nothing. It's working like a champ. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 1:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... What's wrong with that? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132tel
RE: [Microsoft support] Is it me...
But, we're talking about owning a DC. If you own my DC, I'm not too concerned with what else you already own since you can choose to own any of them at any time. Assuming of course, that all the guests are part of the same forest. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, August 25, 2011 11:03 AM To: NT System Admin Issues Subject: Re: [Microsoft support] Is it me... No... If there is an exploit in one of the services which allows me to more easily own the box, then having that service running on the host rather than the VM, makes for a bigger exploit, since access to all hosts would be granted, not just a vulnerable VM. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Thu, Aug 25, 2011 at 11:38 AM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: Isn't the attack surface already there if there's a DC at all? I suppose there could be some vulnerability that's introduced by the combination of Hyper-V and AD, but that doesn't seem any more likely to me than a vulnerability being introduced by having a DC run _under_ a hypervisor. So, in that sense, I think it's a wash. I would think you'd want your DCs up and running first anyway so in that sense, booting a host that's running AD should take less time than booting a host that's not running AD and _then_ booting a guess that is running AD. Maybe my imagination is lacking, but it seems like it would only simplify DR, especially the datacenter reboot. Yeah, good point. Care would definitely be required, especially regarding NICs. From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: Thursday, August 25, 2011 9:16 AM To: NT System Admin Issues Subject: Re: [Microsoft support] Is it me... Re: #1 - Fair point. Re: #2 - It adds attack surface area, beyond just services that need to be patched. Re: #3 - Again, fair enough point, but it does take longer to start up a DC, and this has an impact on when other services get started up. It probably complicates a few DR scenarios as well. :) And you have to pay more attention to how the DC is configured, as such a system will likely be multi-homed. I do it at home today, but would caution that care was taken in going this route -- not a rejection, but not an endorsement either. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Thu, Aug 25, 2011 at 9:40 AM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: I'm curious why not. The more I think about it, the more it seems like a good idea. 1. It completely negates the issue of virtualizing a DC or having a separate physical DC 2. Second, a potential problem with running services on the host is that it could starve the guests for resources, but if any service NEEDS resources, what better than AD? 3. If you have virtualized DCs, the hosts should be the most protected servers in your environment since a compromise there can easily lead to a compromise of any guest - including a DC. So, if that host is already well protected, since it is in fact as critical as a DC, why not run AD on it? One possible reason against running extra services on the host is he possibility for needing more reboots due to patching, but it should be a fairly insignificant difference, especially if running Server Core. From: Sean Rector [mailto:sean.rec...@vaopera.orgmailto:sean.rec...@vaopera.org] Sent: Thursday, August 25, 2011 8:27 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I thought it was a no-no. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 6:11 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Right - I'm missing what's not best practice about it. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132tel:312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 1:33 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... In my environment - nothing. It's working like a champ. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 1:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... What's wrong with that? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132tel:312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 6:14 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I know I'm not following best practice, but my Hyper-V hosts are running Datacenter Ed. and are my
RE: [Microsoft support] Is it me...
Are you saying that AD can over-consume the resources on a box beyond what it truly needs? If so, then that's definitely a counter to my second point. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, August 25, 2011 11:00 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Because of memory and processor loading. For a VM, you can identify what and how much memory it gets and how many processors are allocated to it and at what priority. For the root partition, you cannot. In the case of AD, it's a critical business function that can, depending on your environment, consume significant amounts of memory and processor resources. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Thursday, August 25, 2011 11:40 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Yeah, 48 hours ago, I woulda said the exact same thing. I'm just trying to explore the reasons for that mindset. From: David Lum [mailto:david@nwea.org]mailto:[mailto:david@nwea.org] Sent: Thursday, August 25, 2011 9:11 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I've been of the mindset that the Hyper-V host should do basically nothing else but host, and if they can be server core then even better. I run one full OS Hyper-V host and all other hosts are server core. Interesting discussion here though. I love this list. Dave From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Thursday, August 25, 2011 6:40 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I'm curious why not. The more I think about it, the more it seems like a good idea. 1. It completely negates the issue of virtualizing a DC or having a separate physical DC 2. Second, a potential problem with running services on the host is that it could starve the guests for resources, but if any service NEEDS resources, what better than AD? 3. If you have virtualized DCs, the hosts should be the most protected servers in your environment since a compromise there can easily lead to a compromise of any guest - including a DC. So, if that host is already well protected, since it is in fact as critical as a DC, why not run AD on it? One possible reason against running extra services on the host is he possibility for needing more reboots due to patching, but it should be a fairly insignificant difference, especially if running Server Core. From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Thursday, August 25, 2011 8:27 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I thought it was a no-no. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 6:11 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Right - I'm missing what's not best practice about it. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 1:33 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... In my environment - nothing. It's working like a champ. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 1:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... What's wrong with that? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Wednesday, August 24, 2011 6:14 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I know I'm not following best practice, but my Hyper-V hosts are running Datacenter Ed. and are my DCs. Sean Rector, MCSE Information Technology Manager Virginia Opera Association E-Mail: sean.rec...@vaopera.orgmailto:sean.rec...@vaopera.org Phone:(757) 213-4548 (direct line) From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Tue 8/23/2011 7:29 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... If you are down, you call them and tell them you are down and that it is a business critical event. I don't know what the fee for that is, but you are supposed to get a callback in 30 minutes 24x7x365. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org]mailto:[mailto:david@nwea.org] Sent: Tuesday, August 23, 2011 7:20 PM
RE: Just a reminder to double check your long distance costs!
This kinda stuff infuriates me. Do they pay penalties on the over charges sufficient to pay her salary as well? From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Thursday, August 25, 2011 12:47 PM To: NT System Admin Issues Subject: RE: Just a reminder to double check your long distance costs! One of our telephone folks spends days every month going through our large-box-of-paper phone bill. The mistakes she catches more than pay her salary. From: Sam Cayze [mailto:sca...@gmail.com]mailto:[mailto:sca...@gmail.com] Sent: Thursday, August 25, 2011 12:29 PM To: NT System Admin Issues Subject: Just a reminder to double check your long distance costs! Thought I'd do the math on our LD bill. They bumped up our rate from 2.9cent/min to 8.c/m, even though we have a fixed price contract with them. This is the SECOND time they have tried to pull that on us. Hundreds of dollars in refunds are coming. In many companies, this stuff falls through the cracks. Please, double check! PSA over. -Sam ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: [Microsoft support] Is it me...
Our dit is only 300 meg so having it in memory isn't that big of a deal, but I seem to recall joe and other on the AD list basically recommending that you should have enough RAM to have the entire dit in memory anyway. So, if you've got the full thing cached, why would it matter if that was in host or guest ram? Obviously, if you don't want to load the full dit for some reason, this wouldn't apply. I guess I'm just viewing AD as a well behaved app and that if it needs the RAM to cache the dit or CPU to handle its load, I want to give it everything it needs and if the VMs are getting starved, then the host is underpowered. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, August 25, 2011 11:21 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... AD, like Exchange, will expand to fill the available memory (up to approximately the size of the ntds.dit). Now, also like Exchange, if memory pressure occurs, AD should release this memory over time. However, it takes time (real wall clock time - measured in minutes) for the ESE database engine to respond to memory pressure (in order to validate that it isn't a transient issue) and this can cause VM startups and moves to fail due to a lack of available memory. Processor is a different kind of resource - but if the root partition is consuming all available processor resources, then the VMs will get starved, regardless of how they are configured. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Thursday, August 25, 2011 12:08 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Are you saying that AD can over-consume the resources on a box beyond what it truly needs? If so, then that's definitely a counter to my second point. From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Thursday, August 25, 2011 11:00 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Because of memory and processor loading. For a VM, you can identify what and how much memory it gets and how many processors are allocated to it and at what priority. For the root partition, you cannot. In the case of AD, it's a critical business function that can, depending on your environment, consume significant amounts of memory and processor resources. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Thursday, August 25, 2011 11:40 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Yeah, 48 hours ago, I woulda said the exact same thing. I'm just trying to explore the reasons for that mindset. From: David Lum [mailto:david@nwea.org]mailto:[mailto:david@nwea.org] Sent: Thursday, August 25, 2011 9:11 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I've been of the mindset that the Hyper-V host should do basically nothing else but host, and if they can be server core then even better. I run one full OS Hyper-V host and all other hosts are server core. Interesting discussion here though. I love this list. Dave From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Thursday, August 25, 2011 6:40 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I'm curious why not. The more I think about it, the more it seems like a good idea. 1. It completely negates the issue of virtualizing a DC or having a separate physical DC 2. Second, a potential problem with running services on the host is that it could starve the guests for resources, but if any service NEEDS resources, what better than AD? 3. If you have virtualized DCs, the hosts should be the most protected servers in your environment since a compromise there can easily lead to a compromise of any guest - including a DC. So, if that host is already well protected, since it is in fact as critical as a DC, why not run AD on it? One possible reason against running extra services on the host is he possibility for needing more reboots due to patching, but it should be a fairly insignificant difference, especially if running Server Core. From: Sean Rector [mailto:sean.rec...@vaopera.org]mailto:[mailto:sean.rec...@vaopera.org] Sent: Thursday, August 25, 2011 8:27 AM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... I thought it was a no-no. Sean Rector, MCSE From: Brian Desmond [mailto:br...@briandesmond.com]mailto:[mailto:br...@briandesmond.com] Sent: Wednesday, August 24, 2011 6:11 PM To: NT System Admin Issues Subject: RE: [Microsoft support] Is it me... Right - I'm missing what's not best practice about it. Thanks, Brian Desmond br
RE: IIS 6 SMTP virtual server relay restrictions
Just passing through, but netsh might help. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, August 25, 2011 5:46 PM To: NT System Admin Issues Subject: IIS 6 SMTP virtual server relay restrictions Anyone still out there? I've got 4 boxes that I need to add about 40 IP addresses to the Relay Restrictions list. I can't find any syntax to do this with ADSUTIL.VBS This is not Exchange just IIS 6 with an SMTP virtual server. So it's my understanding that you can't use IpSec.vbs Really don't want to do this manually through the GUI. Any help appreciated. thanks, Chris Bodnar, MCSE, MCITP Technical Support III Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.commailto:christopher_bod...@glic.com Phone: 610-807-6459 Fax: 610-807-6003 - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: hard drive repair/data recovery vendor
Reseating the board and/or rubbing the contacts where it attaches to the drive with a pencil eraser worked for one of our guys here last week. From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Friday, August 26, 2011 6:12 PM To: NT System Admin Issues Subject: RE: hard drive repair/data recovery vendor I have performed this method of recovery more than once successfully. Mostly desktop systems, where the company had ordered a series of identical models, so the drives were identical too. I cannot say on the times I failed if I did more damage to the situation, and will not argue your opinion, but for some instances where either time or budget is very important, it's worth a try. YMMV, don't try this at home, kids ask your parents first. Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' From: Mike Gill [mailto:lis...@canbyfoursquare.com]mailto:[mailto:lis...@canbyfoursquare.com] Sent: Friday, August 26, 2011 4:31 PM To: NT System Admin Issues Subject: RE: hard drive repair/data recovery vendor I've never done that myself, but had researched it once. Everything I read said don't do this. The logic board goes through tuning unique to each device at the factory. People have had success, but there is the risk of making the situation worse. Depending on the contents, the no-risk move would be to take it to someplace like On-Track. -- Mike Gill From: Erik Goldoff [mailto:egold...@gmail.com]mailto:[mailto:egold...@gmail.com] Sent: Friday, August 26, 2011 12:02 PM To: NT System Admin Issues Subject: Re: hard drive repair/data recovery vendor I'll apologize in advance for my reply not answering your question, but ... Do you happen to have any more of that model drive anywhere. I have, in the past, been successful with replacing the electronics board attached from a known good IDE drive to get data off an apparently 'zapped' storage On Fri, Aug 26, 2011 at 2:53 PM, Hank . hgedr...@gmail.commailto:hgedr...@gmail.com wrote: I remember someone mentioning a company they were happy with. I have a WD400 IDE drive that was in a system in a location that had an electrical hit. It has a small database on it that wasn't backed up. The drive electronics are toast (drive doesn't appear in the BIOS in a test system) Any suggestions for a company appreciated. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: How to determine a host's IP range
On the other hand, if it's doing reverse dns on every ip that hits the firewall, it could work. You're assuming they do that only once at rule creation. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Tuesday, August 30, 2011 12:18 PM To: NT System Admin Issues Subject: Re: How to determine a host's IP range On Tue, Aug 30, 2011 at 11:54 AM, Richard Stovall rich...@gmail.com wrote: On my SonicWall, if a create a rule for media.pearsoncmg.com, I can write rules which allow or deny access no matter the underlying ip. There's no intrinsic relationship between an IP address and a DNS name. From their description, what that does is look up the name to IP address(es), and then uses that to drive the firewall rule. Which is useful, don't get me wrong, but if the CDN varies the IP address (as some of them do), you might not get the desired results. Something to be aware of, is all I'm saying. :) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: How to determine a host's IP range
Agree with all your points. I was just throwing it out there as a possibility. If I were implementing it, I would definitely apply it only to certain ports. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Tuesday, August 30, 2011 5:13 PM To: NT System Admin Issues Subject: Re: How to determine a host's IP range On Tue, Aug 30, 2011 at 5:49 PM, Crawford, Scott crawfo...@evangel.edu wrote: From their description, what that does is look up the name to IP address(es), and then uses that to drive the firewall rule. Which is useful, don't get me wrong, but if the CDN varies the IP address (as some of them do), you might not get the desired results. On the other hand, if it's doing reverse dns on every ip that hits the firewall, it could work. I thought of that, but it comes with its own problems: 1. Reverse doesn't have to match forward (or even exist) 2. DNS lookups take time (enough to often cause issues) 3. I think there was a third thing but I can't remember it now #2 is especially bad if you really are looking up *every* address that hits your firewall (as opposed to just certain port #s or whatever). Again, not saying it can't ever work, just that it's complicated. You're assuming they do that only once at rule creation. Actually I was thinking it would refresh periodically. ;-) I've actually done similar in a Linux-based firewall, where a cron job would fire periodically and re-do certain name lookups, to catch changes in IP address for a given name. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Looking for cable
I like anything other than Belkin for KVM. I was converted to Cybex, now Avocent, by ASB ~10 years ago. -Original Message- From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Wednesday, August 31, 2011 1:54 PM To: NT System Admin Issues Subject: RE: Looking for cable Yeah... After the suggestion to chuck the old Belkin KVM, I got to thinking why not. Any particular brand of KVM y'all like? Belkin used to be the name to buy for prosumer stuff. Are they still the brand to beat? From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, August 31, 2011 2:35 PM To: NT System Admin Issues Subject: Re: Looking for cable +1 PS/2 It's a great way to lock up your machine. That was it's selling point, right? On Wed, Aug 31, 2011 at 2:32 PM, Mike Sullivan neog...@gmail.com wrote: I think you need to replace your aging and possibly flaking PS/2 KVM as well. On Wed, Aug 31, 2011 at 11:24 AM, John Aldrich jaldr...@blueridgecarpet.com wrote: I'm looking to replace my aging (and flaky) separate wireless Keyboard and wireless mouse at home. It's hooked into a PS/2-only KVM. I would like to get a new keyboard and mouse combo, but they all seem to be USB-only these days. Is anyone aware of a place where one can purchase a single USB (F) to dual-PS/2 (M) adapter? I know you can buy them the other way (2 PS/2 F to 1 USB M) all day long, but in my searching on the web I have not found any such adapter as I am trying to find. Thanks ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin -- Thank you, Mike Sullivan ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: OT - Triple Monitor Setup
Winning From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Wednesday, August 31, 2011 4:45 PM To: NT System Admin Issues Subject: RE: OT - Triple Monitor Setup Ok, here we go... I spent almost $400 bucks for an ATI EGA Wonder video card that would display EGA graphics on a CGA monitor..., circa 1984-86 From: Jeff Steward [mailto:jstew...@gmail.com]mailto:[mailto:jstew...@gmail.com] Sent: Wednesday, August 31, 2011 4:38 PM To: NT System Admin Issues Subject: Re: OT - Triple Monitor Setup LOL -- I remember buying my first *good* video card to play Quake back in 1996 and spent $400 to drive one monitor :) -Jeff On Wed, Aug 31, 2011 at 5:26 PM, Jacob ja...@excaliburfilms.commailto:ja...@excaliburfilms.com wrote: I would have to go with quad video monitor card... $$$. (Dual output with dual output cable (x2)) My former boss wanted four monitor for home and the card to support 4 monitors was over $400. From: Mark Smith [mailto:winsysad...@gmail.commailto:winsysad...@gmail.com] Sent: Wednesday, August 31, 2011 10:50 AM To: NT System Admin Issues Subject: OT - Triple Monitor Setup Hello Everyone, I'm looking into building a new PC for my home office and I'm contemplating a triple monitor setup. I would like to have a single desktop across 3 monitors (probably 24). That way I could have an RDP session to my lab on 1, create/edit docs on the 2nd and surf/email/media on the 3rd. May also be used for some gaming by my son. looking for advice, recommendations, etc. on the video card/ monitors setup more so than the rest of the PC. Thanks, Mark ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: OT - Triple Monitor Setup
2x CDROM made 7th Guest scream From: Jacob [mailto:ja...@excaliburfilms.com] Sent: Wednesday, August 31, 2011 6:00 PM To: NT System Admin Issues Subject: RE: OT - Triple Monitor Setup I spent over $800 on a 2x CD rom back in 1994 ish? I worked my butt off at $4.50 an hour during the summer to save up for it... From: Jeff Steward [mailto:jstew...@gmail.com]mailto:[mailto:jstew...@gmail.com] Sent: Wednesday, August 31, 2011 2:38 PM To: NT System Admin Issues Subject: Re: OT - Triple Monitor Setup LOL -- I remember buying my first *good* video card to play Quake back in 1996 and spent $400 to drive one monitor :) -Jeff On Wed, Aug 31, 2011 at 5:26 PM, Jacob ja...@excaliburfilms.commailto:ja...@excaliburfilms.com wrote: I would have to go with quad video monitor card... $$$. (Dual output with dual output cable (x2)) My former boss wanted four monitor for home and the card to support 4 monitors was over $400. From: Mark Smith [mailto:winsysad...@gmail.commailto:winsysad...@gmail.com] Sent: Wednesday, August 31, 2011 10:50 AM To: NT System Admin Issues Subject: OT - Triple Monitor Setup Hello Everyone, I'm looking into building a new PC for my home office and I'm contemplating a triple monitor setup. I would like to have a single desktop across 3 monitors (probably 24). That way I could have an RDP session to my lab on 1, create/edit docs on the 2nd and surf/email/media on the 3rd. May also be used for some gaming by my son. looking for advice, recommendations, etc. on the video card/ monitors setup more so than the rest of the PC. Thanks, Mark ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: OT - Triple Monitor Setup
I've heard rumor of software that would let you cut a screen like that up into virtual monitors so you could do things like maximize into a quarter of the screen or some such. Anyone heard of such a thing? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, August 31, 2011 6:08 PM To: NT System Admin Issues Subject: Re: OT - Triple Monitor Setup One screen suffices if the resolution is high enough. Say, 4096x2304, or something like that... On Wed, Aug 31, 2011 at 15:35, Steven Peck sep...@gmail.com wrote: It's still only one screen. You should upgrade to a multi-monitor setup. On Wed, Aug 31, 2011 at 3:32 PM, Steven M. Caesare scaes...@caesare.com wrote: I’m sorry… I wasn’t paying attention… I was too busy in my basement where I have a 10 foot wide screen that I use as a computer monitor. Now what was that you were saying about your cute little setup? -sc From: Webster [mailto:webs...@carlwebster.com] Sent: Wednesday, August 31, 2011 4:48 PM To: NT System Admin Issues Subject: RE: OT - Triple Monitor Setup The HP in portrait mode is 1050 X 1680 and the 2 Dells are 1920 X 1200. I turn off all Aero stuff and anything that may slow my work down. I write and work on servers. Don’t need no stinkin’ girly, frilly stuff. I’ll leave that for that sissy boy –sc [1]! J Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com 1. JK sissy boy, I mean –sc. From: Mike Hoffman [mailto:m...@drumbrae.net] Subject: RE: OT - Triple Monitor Setup I was trying to get 3 monitors off one card for my own desk (2 x 1920x1080 panels and an HP 22”) but I got a passive DP adaptor by accident. So I then went hunting around for other adaptors and found a PciE x2 VGA card with a dual head on it and stuck that in as well. Then I went searching round the office for monitors … With the internal card as well (HP 6200) I now had 7 monitors available and no desk space left! 7 is just a strange number of monitors, I managed almost 10,000 pixels across, but also discovered the limitations of built in single line display ordering. I’m now down to 4 again – until the next time. I have them setup as 3 for work plus one for status monitoring at the end (much smaller screen) Keep an eye on performance as every so often Aero turns off due to performance. I only have 8Gb Ram on the desktop and with 2-3Gb of video memory and the shadowing with real memory is probably what is causing it. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: When DNS for your ISP goes down...
+1 -Original Message- From: Richard Stovall [mailto:rich...@gmail.com] Sent: Friday, September 02, 2011 2:37 PM To: NT System Admin Issues Subject: Re: When DNS for your ISP goes down... On Fri, Sep 2, 2011 at 3:23 PM, Ben Scott mailvor...@gmail.com wrote: +53 I see what you did there. Nice touch. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: When DNS for your ISP goes down...
:) I'm not a big fan of a generic +1, but as I was reading Ben's response, my mental thought was literally I see what you did there. How could I not +1 Richard? From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Friday, September 02, 2011 2:46 PM To: NT System Admin Issues Subject: Re: When DNS for your ISP goes down... I'm going to -2 to keep us on topic. On Fri, Sep 2, 2011 at 3:39 PM, Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu wrote: +1 -Original Message- From: Richard Stovall [mailto:rich...@gmail.commailto:rich...@gmail.com] Sent: Friday, September 02, 2011 2:37 PM To: NT System Admin Issues Subject: Re: When DNS for your ISP goes down... On Fri, Sep 2, 2011 at 3:23 PM, Ben Scott mailvor...@gmail.commailto:mailvor...@gmail.com wrote: +53 I see what you did there. Nice touch. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: OT - Triple Monitor Setup
Anything like it for the PC? -Original Message- From: Richard Stovall [mailto:rich...@gmail.com] Sent: Wednesday, August 31, 2011 8:38 PM To: NT System Admin Issues Subject: Re: OT - Triple Monitor Setup Though it's not exactly what the OP asked for, I've just recently started using a window management application named Divvy. It's very simple and works well. http://mizage.com/divvy/ On Wed, Aug 31, 2011 at 9:23 PM, Kurt Buff kurt.b...@gmail.com wrote: Nope. Wouldn't surprise me though. On Wed, Aug 31, 2011 at 16:10, Crawford, Scott crawfo...@evangel.edu wrote: I've heard rumor of software that would let you cut a screen like that up into virtual monitors so you could do things like maximize into a quarter of the screen or some such. Anyone heard of such a thing? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, August 31, 2011 6:08 PM To: NT System Admin Issues Subject: Re: OT - Triple Monitor Setup One screen suffices if the resolution is high enough. Say, 4096x2304, or something like that... On Wed, Aug 31, 2011 at 15:35, Steven Peck sep...@gmail.com wrote: It's still only one screen. You should upgrade to a multi-monitor setup. On Wed, Aug 31, 2011 at 3:32 PM, Steven M. Caesare scaes...@caesare.com wrote: I’m sorry… I wasn’t paying attention… I was too busy in my basement where I have a 10 foot wide screen that I use as a computer monitor. Now what was that you were saying about your cute little setup? -sc From: Webster [mailto:webs...@carlwebster.com] Sent: Wednesday, August 31, 2011 4:48 PM To: NT System Admin Issues Subject: RE: OT - Triple Monitor Setup The HP in portrait mode is 1050 X 1680 and the 2 Dells are 1920 X 1200. I turn off all Aero stuff and anything that may slow my work down. I write and work on servers. Don’t need no stinkin’ girly, frilly stuff. I’ll leave that for that sissy boy –sc [1]! J Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com 1. JK sissy boy, I mean –sc. From: Mike Hoffman [mailto:m...@drumbrae.net] Subject: RE: OT - Triple Monitor Setup I was trying to get 3 monitors off one card for my own desk (2 x 1920x1080 panels and an HP 22”) but I got a passive DP adaptor by accident. So I then went hunting around for other adaptors and found a PciE x2 VGA card with a dual head on it and stuck that in as well. Then I went searching round the office for monitors … With the internal card as well (HP 6200) I now had 7 monitors available and no desk space left! 7 is just a strange number of monitors, I managed almost 10,000 pixels across, but also discovered the limitations of built in single line display ordering. I’m now down to 4 again – until the next time. I have them setup as 3 for work plus one for status monitoring at the end (much smaller screen) Keep an eye on performance as every so often Aero turns off due to performance. I only have 8Gb Ram on the desktop and with 2-3Gb of video memory and the shadowing with real memory is probably what is causing it. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt
RE: OT - Triple Monitor Setup
Oops, nm. The big button that says Windows didn't show on my Palm Pre. -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Friday, September 02, 2011 3:32 PM To: NT System Admin Issues Subject: RE: OT - Triple Monitor Setup Anything like it for the PC? -Original Message- From: Richard Stovall [mailto:rich...@gmail.com] Sent: Wednesday, August 31, 2011 8:38 PM To: NT System Admin Issues Subject: Re: OT - Triple Monitor Setup Though it's not exactly what the OP asked for, I've just recently started using a window management application named Divvy. It's very simple and works well. http://mizage.com/divvy/ On Wed, Aug 31, 2011 at 9:23 PM, Kurt Buff kurt.b...@gmail.com wrote: Nope. Wouldn't surprise me though. On Wed, Aug 31, 2011 at 16:10, Crawford, Scott crawfo...@evangel.edu wrote: I've heard rumor of software that would let you cut a screen like that up into virtual monitors so you could do things like maximize into a quarter of the screen or some such. Anyone heard of such a thing? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, August 31, 2011 6:08 PM To: NT System Admin Issues Subject: Re: OT - Triple Monitor Setup One screen suffices if the resolution is high enough. Say, 4096x2304, or something like that... On Wed, Aug 31, 2011 at 15:35, Steven Peck sep...@gmail.com wrote: It's still only one screen. You should upgrade to a multi-monitor setup. On Wed, Aug 31, 2011 at 3:32 PM, Steven M. Caesare scaes...@caesare.com wrote: I’m sorry… I wasn’t paying attention… I was too busy in my basement where I have a 10 foot wide screen that I use as a computer monitor. Now what was that you were saying about your cute little setup? -sc From: Webster [mailto:webs...@carlwebster.com] Sent: Wednesday, August 31, 2011 4:48 PM To: NT System Admin Issues Subject: RE: OT - Triple Monitor Setup The HP in portrait mode is 1050 X 1680 and the 2 Dells are 1920 X 1200. I turn off all Aero stuff and anything that may slow my work down. I write and work on servers. Don’t need no stinkin’ girly, frilly stuff. I’ll leave that for that sissy boy –sc [1]! J Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com 1. JK sissy boy, I mean –sc. From: Mike Hoffman [mailto:m...@drumbrae.net] Subject: RE: OT - Triple Monitor Setup I was trying to get 3 monitors off one card for my own desk (2 x 1920x1080 panels and an HP 22”) but I got a passive DP adaptor by accident. So I then went hunting around for other adaptors and found a PciE x2 VGA card with a dual head on it and stuck that in as well. Then I went searching round the office for monitors … With the internal card as well (HP 6200) I now had 7 monitors available and no desk space left! 7 is just a strange number of monitors, I managed almost 10,000 pixels across, but also discovered the limitations of built in single line display ordering. I’m now down to 4 again – until the next time. I have them setup as 3 for work plus one for status monitoring at the end (much smaller screen) Keep an eye on performance as every so often Aero turns off due to performance. I only have 8Gb Ram on the desktop and with 2-3Gb of video memory and the shadowing with real memory is probably what is causing it. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana
RE: HKCU permissions change via GPO?
Well, when you get to the GPO that's making this setting, remove it and the setting will go away without modifying the registry...that's (one of) the beauty (^Hies) of GPOs. The RSOP tool in GPMC will be able to show you which GPO is setting that. From: Bernard, Norm [mailto:norm.bern...@nrc-cnrc.gc.ca] Sent: Thursday, September 08, 2011 2:23 PM To: NT System Admin Issues Subject: RE: HKCU permissions change via GPO? We are trying hard to get away from GPO's as the previous AD guy had over 350 separate GPO's :( I've been trying to clean them up for months now. Kindest Regards, Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | norm.bern...@nrc-cnrc.gc.camailto:norm.bern...@nrc-cnrc.gc.ca NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada From: Damien Solodow [mailto:damien.solo...@harrison.edu]mailto:[mailto:damien.solo...@harrison.edu] Sent: Thursday, September 08, 2011 11:12 AM To: NT System Admin Issues Subject: RE: HKCU permissions change via GPO? You'd be better off using the Excel ADM file in the GPO to make that change directly. :) Good rule of thumb is if it's under Software\Policies, it's configurable via a GPO with an ADM file. :) DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Bernard, Norm [mailto:norm.bern...@nrc-cnrc.gc.ca]mailto:[mailto:norm.bern...@nrc-cnrc.gc.ca] Sent: Thursday, September 08, 2011 2:10 PM To: NT System Admin Issues Subject: HKCU permissions change via GPO? Hello Folks What I need to do is change the permissions on all system's HKCU (or all user hives if possible!). Specifically I need to change HKCU\Software\Policies\ permissions to allow current user the right to create/edit sub keys/values I am currently trying to use SCCM to push out a registry fix for Excel 2003 (The reg file contains the following, and I have created an SCCM package that TRIED to apply the registry fix, but it appears that there is a permissions issue - confirmed by manually trying to apply the reg file at the local machine with the logged on user account: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security\FileValidation] EnableOnLoad=dword: Any help would be appreciated! Kindest Regards, Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | norm.bern...@nrc-cnrc.gc.camailto:norm.bern...@nrc-cnrc.gc.ca NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: password questions
Back in the day, L0pht would be completely ineffectual against such a password, even if you included said character in its character set. I emailed L0pht at the time and they said they didn't support cracking alt-char passwords. I've heard that this is not the case with other password crackers, but even if so, adding these types of characters extends the time for brute-force cracking astronomically. Even if you take into account rainbow tables, I haven't been able to find a rainbow table that includes that wide of a character set. All that said, we moved away from alt-char passwords since they often introduced incompatibilities. Outlook Web Access was one place they failed for us years ago. Again, I don't know if this has improved, but I would guess not. Another possible problem is trying to use them on devices that lack a method of entering them. Most phone's don't have an alt key and numeric keypad :) One other, note, not all alt-chars are created equal, especially if you're cracking against an LM hash. For instance, alt-141 (ì) is interpreted as simply a lowercase (i). There's a quite dated, yet relevant, article at sysopt about some of my findings at http://www.sysopt.com/tutorials/article.php/3532756. The download referenced is no longer available, but I have the original if you're interested. From: Shauna Hensala [mailto:she...@msn.com] Sent: Friday, September 09, 2011 11:32 AM To: NT System Admin Issues Subject: password questions I have been asked to speak to an group regarding personal internet security. This will be a fairly light weight discussion and I have a couple of really good references regarding choosing secure passwords and the https://www.grc.com/haystack.htm site for testing. My question for all of you is this: What if you incorporate a symbol not normally found on a keyboard into your password - such as ¢ which requires the key combo alt/0162? Does this increase or decrease the hackability of your password - or is it completely irrelevant? To a hacker, is the actual password alt0162 or is it ¢? Thanks for any information you can offer. Shauna Hensala Date: Fri, 9 Sep 2011 16:07:15 +0100 Subject: Re: External subdomains considered dangerous? From: kz2...@googlemail.com To: ntsysadmin@lyris.sunbelt-software.com Aha, you are therefore a Chinese agent :-) On 9 September 2011 15:47, Matthew B Ames matthew.a...@qinetiq.commailto:matthew.a...@qinetiq.com wrote: Maybe those companies only use external hosted pop3/imap accounts (granted that is unlikely). I assume from the article is more about a company emailing another company. I own a .org.ukhttp://org.uk domain in the UK, and I quite often get emails (which is meant for the .org). I have even had invoices, emails from their accounts department, etc landing in my personal email. More recently I had a batch of CVs for people apply for job applications as a secretary - either they misread the advert or just automatically typed in the .uk without thinking about it - as the .org is a UK based company). From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: 09 September 2011 15:31 To: NT System Admin Issues Subject: Re: External subdomains considered dangerous? Why are internal email addresses being typed in manually? ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Fri, Sep 9, 2011 at 10:04 AM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: 20gb of email in six months, and it includes full router configs with passwords, too. http://www.wired.com/threatlevel/2011/09/doppelganger-domains/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com. http://www.qinetiq.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to
RE: password questions
Umm, actually it was mentioned. ☺ Paragraph 2. From: John Cook [mailto:john.c...@pfsf.org] Sent: Friday, September 09, 2011 1:23 PM To: NT System Admin Issues Subject: Re: password questions Not to mention alt characters are a major pain (or non existent) on some devices. John W. Cook Systems Administrator Partnership for Strong Families From: Crawford, Scott crawfo...@evangel.edumailto:crawfo...@evangel.edu To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Sent: Fri Sep 09 13:59:00 2011 Subject: RE: password questions Back in the day, L0pht would be completely ineffectual against such a password, even if you included said character in its character set. I emailed L0pht at the time and they said they didn’t support cracking alt-char passwords. I’ve heard that this is not the case with other password crackers, but even if so, adding these types of characters extends the time for brute-force cracking astronomically. Even if you take into account rainbow tables, I haven’t been able to find a rainbow table that includes that wide of a character set. All that said, we moved away from alt-char passwords since they often introduced incompatibilities. Outlook Web Access was one place they failed for us years ago. Again, I don’t know if this has improved, but I would guess not. Another possible problem is trying to use them on devices that lack a method of entering them. Most phone’s don’t have an alt key and numeric keypad ☺ One other, note, not all alt-chars are created equal, especially if you’re cracking against an LM hash. For instance, alt-141 (ì) is interpreted as simply a lowercase (i). There’s a quite dated, yet relevant, article at sysopt about some of my findings at http://www.sysopt.com/tutorials/article.php/3532756. The download referenced is no longer available, but I have the original if you’re interested. From: Shauna Hensala [mailto:she...@msn.com]mailto:[mailto:she...@msn.com] Sent: Friday, September 09, 2011 11:32 AM To: NT System Admin Issues Subject: password questions I have been asked to speak to an group regarding personal internet security. This will be a fairly light weight discussion and I have a couple of really good references regarding choosing secure passwords and the https://www.grc.com/haystack.htm site for testing. My question for all of you is this: What if you incorporate a symbol not normally found on a keyboard into your password - such as ¢ which requires the key combo alt/0162? Does this increase or decrease the hackability of your password - or is it completely irrelevant? To a hacker, is the actual password alt0162 or is it ¢? Thanks for any information you can offer. Shauna Hensala Date: Fri, 9 Sep 2011 16:07:15 +0100 Subject: Re: External subdomains considered dangerous? From: kz2...@googlemail.commailto:kz2...@googlemail.com To: ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com Aha, you are therefore a Chinese agent :-) On 9 September 2011 15:47, Matthew B Ames matthew.a...@qinetiq.commailto:matthew.a...@qinetiq.com wrote: Maybe those companies only use external hosted pop3/imap accounts (granted that is unlikely). I assume from the article is more about a company emailing another company. I own a .org.ukhttp://org.uk domain in the UK, and I quite often get emails (which is meant for the .org). I have even had invoices, emails from their accounts department, etc landing in my personal email. More recently I had a batch of CVs for people apply for job applications as a secretary – either they misread the advert or just automatically typed in the .uk without thinking about it – as the .org is a UK based company). From: Andrew S. Baker [mailto:asbz...@gmail.commailto:asbz...@gmail.com] Sent: 09 September 2011 15:31 To: NT System Admin Issues Subject: Re: External subdomains considered dangerous? Why are internal email addresses being typed in manually? ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market… On Fri, Sep 9, 2011 at 10:04 AM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: 20gb of email in six months, and it includes full router configs with passwords, too. http://www.wired.com/threatlevel/2011/09/doppelganger-domains/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any
RE: password questions
I agree, its limited. I pointed out that its old and only included it as a reference to alt-chars not being created equal. If you're going to use an alt-char, you might as well pick a good one. However, the point remains that incorporating an alt-char vastly increases the brute-force space and therefore makes them harder to crack no matter how you're attempting to crack it. Even in an instance where passwords are stored in plain text in a database, if I see two passwords and one is Bubb!3$ and the other is ╗Password╝, I'm much more likely to be able to use the first and therefore, at some level, the second is safer. Whether the gains for using an alt-char offset the disadvantages mentioned is up to the user. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, September 09, 2011 1:14 PM To: NT System Admin Issues Subject: Re: password questions On Fri, Sep 9, 2011 at 1:59 PM, Crawford, Scott crawfo...@evangel.edu wrote: There's a quite dated, yet relevant, article at sysopt about some of my findings at http://www.sysopt.com/tutorials/article.php/3532756. Scott: That entire analysis is based on the scenario where you have an NTLM password hash sniffed from the wire, and are using a ten-year-old version of L0phtCrack. That's a very narrow focus, and one which isn't even very relevant in today's world (even if you're on a Windows LAN and can sniff traffic, NTLM is becoming increasingly rare, so you've got nothing to sniff). That analysis is completely irrelevant for the majority of scenarios of interest, such as public-facing web sites, or any scenario where someone is trying to attack a password without having an NTLM hash. This isn't the first time you've posted that analysis while failing to appreciate that it's almost completely irrelevant today. I think you're suffering from hammer myopia on this issue. When all you have is hammer, everything starts to look like a nail. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: DigiNotar compromise
Too bad rational human beings don't exist. From: William Robbins [mailto:dangerw...@gmail.com] Sent: Friday, September 09, 2011 1:32 PM To: NT System Admin Issues Subject: Re: DigiNotar compromise I think this is relevant here: http://unrforliberty.com/wp-content/uploads/2011/02/Our-Discussion.jpg - WJR On Fri, Sep 9, 2011 at 10:25, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: No, you argue. And you have a tendency to argue yourself into a corner and not be able to 1) get out of it or 2) acknowledge that your argument has trapped you. And it's not as if economics is the only area where you've done this. On Fri, Sep 9, 2011 at 9:57 AM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: I don't seek perfection. I merely see what's wrong now, and work against it. On Fri, Sep 9, 2011 at 03:40, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: Let me know when you find your perfect market, perfect world (as you see it) and then we will talk. On Thursday, September 8, 2011, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: No, a free market doesn't presume anything about information being equally available. Freedom != equality. On Thu, Sep 8, 2011 at 16:32, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: Wrong. The free market presumes that information is equally available. And please don't go down the iPhone thread route again. That just got silly, and you know it. On Thu, Sep 8, 2011 at 6:28 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: And in practice. Outside the textbook, laws and regulation which don't respect property and contract rights robs the market of its ability to make decisions. On Thu, Sep 8, 2011 at 13:28, Andrew S. Baker asbz...@gmail.commailto:asbz...@gmail.com wrote: A free market doesn't guarantee good results, just better results than anything else. In theory. Outside of the textbook, the abundant use of free market often requires regulatory intervention... ASB http://XeeMe.com/AndrewBaker http://xeeme.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Thu, Sep 8, 2011 at 3:52 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: On Thu, Sep 8, 2011 at 10:28, Ben Scott mailvor...@gmail.commailto:mailvor...@gmail.com wrote: On Wed, Sep 7, 2011 at 11:05 PM, Ken Schaefer k...@adopenstatic.commailto:k...@adopenstatic.com wrote: There's no rule that says that has to happen. It would appear that most people chose price over security, and so far that has generally meant that those who value security more are left without any really satisfying vendor. If there's a market, or even if someone thinks there's a market, plus a way to make it profitable, then you can bet someone will start something up. You ignore startup costs, network effects, and other barriers-to-entry. Start, sure. Succeed or see any real adoption? Not so certain. The free market is not a panacea. A free market doesn't guarantee good results, just better results than anything else. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysad ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to
RE: DigiNotar compromise
Might wanna restrict that to whole numbers or even counting numbers. Rational includes negatives :) From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Friday, September 09, 2011 2:38 PM To: NT System Admin Issues Subject: Re: DigiNotar compromise + some random rational number. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Fri, Sep 9, 2011 at 2:41 PM, Steven M. Caesare scaes...@caesare.commailto:scaes...@caesare.com wrote: 8675309 kinds of awesome. -sc From: William Robbins [mailto:dangerw...@gmail.commailto:dangerw...@gmail.com] Sent: Friday, September 09, 2011 2:32 PM To: NT System Admin Issues Subject: Re: DigiNotar compromise I think this is relevant here: http://unrforliberty.com/wp-content/uploads/2011/02/Our-Discussion.jpg - WJR On Fri, Sep 9, 2011 at 10:25, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: No, you argue. And you have a tendency to argue yourself into a corner and not be able to 1) get out of it or 2) acknowledge that your argument has trapped you. And it's not as if economics is the only area where you've done this. On Fri, Sep 9, 2011 at 9:57 AM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: I don't seek perfection. I merely see what's wrong now, and work against it. On Fri, Sep 9, 2011 at 03:40, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: Let me know when you find your perfect market, perfect world (as you see it) and then we will talk. On Thursday, September 8, 2011, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: No, a free market doesn't presume anything about information being equally available. Freedom != equality. On Thu, Sep 8, 2011 at 16:32, Jonathan Link jonathan.l...@gmail.commailto:jonathan.l...@gmail.com wrote: Wrong. The free market presumes that information is equally available. And please don't go down the iPhone thread route again. That just got silly, and you know it. On Thu, Sep 8, 2011 at 6:28 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: And in practice. Outside the textbook, laws and regulation which don't respect property and contract rights robs the market of its ability to make decisions. On Thu, Sep 8, 2011 at 13:28, Andrew S. Baker asbz...@gmail.commailto:asbz...@gmail.com wrote: A free market doesn't guarantee good results, just better results than anything else. In theory. Outside of the textbook, the abundant use of free market often requires regulatory intervention... ASB http://XeeMe.com/AndrewBaker http://xeeme.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Thu, Sep 8, 2011 at 3:52 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: On Thu, Sep 8, 2011 at 10:28, Ben Scott mailvor...@gmail.commailto:mailvor...@gmail.com wrote: On Wed, Sep 7, 2011 at 11:05 PM, Ken Schaefer k...@adopenstatic.commailto:k...@adopenstatic.com wrote: There's no rule that says that has to happen. It would appear that most people chose price over security, and so far that has generally meant that those who value security more are left without any really satisfying vendor. If there's a market, or even if someone thinks there's a market, plus a way to make it profitable, then you can bet someone will start something up. You ignore startup costs, network effects, and other barriers-to-entry. Start, sure. Succeed or see any real adoption? Not so certain. The free market is not a panacea. A free market doesn't guarantee good results, just better results than anything else. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: password questions
I don't think that's true. Point me to a rainbow table that has that large of a keyspace. I can't say I've looked exhaustively, but I've not been able to find one that even exhausts the entire ascii space, let alone Unicode. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, September 09, 2011 3:43 PM To: NT System Admin Issues Subject: Re: password questions 2011/9/9 Crawford, Scott crawfo...@evangel.edu: However, the point remains that incorporating an alt-char vastly increases the brute-force space and therefore makes them harder to crack no matter how you're attempting to crack it. Even that's not the case, if rainbow tables are an option. Crack any password in constant time. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: password questions
how big is it? for how long of passwords? lm? ntlm? would you be willing to attempt to crack a few test hashes? Sent from my Palm Pre on the Now Network from Sprint On Sep 10, 2011 8:06 AM, Michael B. Smith mich...@smithcons.com wrote: I can state with assurance that full tables for ASCII are available. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, September 09, 2011 9:03 PM To: NT System Admin Issues Subject: Re: password questions On Fri, Sep 9, 2011 at 6:02 PM, Crawford, Scott crawfo...@evangel.edu wrote: I don't think that's true. Point me to a rainbow table that has that large of a keyspace. I can't say I've looked exhaustively, but I've not been able to find one that even exhausts the entire ascii space, let alone Unicode. Use a program that lets you generate your own rainbow tables for whatever character set you want. RainbowCrack does, I believe. People on this list have claimed to have such rainbow tables. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: password questions
I tend to agree with what I think you're saying. But, the original question was whether adding an alt-char to your password would make you safer and/or your password harder to crack. I think the answer to this is absolutely. -Original Message- From: Steve Kradel [mailto:skra...@zetetic.net] Sent: Saturday, September 10, 2011 3:00 PM To: NT System Admin Issues Subject: Re: password questions IMO all this business about rainbow tables for finding hash value collisions is, or will soon be, highly obsolete. A properly designed password system should use both (a) enough salt bits to render rainbow tables impractical, and (b) a computationally expensive, variable workload hashing algorithm. If your password-based security system doesn't do this, or have some other safeguard like lockout windows, it is just straight-up weak. Now, whether you are writing a program to try to break into an account through the front door (regular credential challenge) or back door (find a collision on a swiped hash)... Are you going to iterate exhaustively through the entire Unicode BMP, or are you going to start with a list of the 1,000,000 most common passwords and various permutations based on what you know about the account owner's culture? Bearing in mind there are thousands upon thousands of valid characters, and each additional character you decide to include in your brute force break-in attempt dramatically increases your time and cost... going for total coverage is almost certainly *not* going to be your strategy. --Steve On Sat, Sep 10, 2011 at 1:00 PM, Ben Scott mailvor...@gmail.com wrote: On Sat, Sep 10, 2011 at 9:06 AM, Michael B. Smith mich...@smithcons.com wrote: I can state with assurance that full tables for ASCII are available. Technically speaking, ASCII is 7 bits, so that may not be what we're talking about. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: password questions
It's simply not practical to crack the 256 char Extended-ASCII set even for
relatively short passwords of 8 chars. The closest I can find [1] is a 576GB
set of tables to crack ASCII chars 32-95 and a max of 8 chars. That's less
than 1/4th the entire Extended-ASCII keyspace.
Perusing through the discussion group on a distributed rainbow table generation
program[2], I don't find any support for either longer passwords or larger
character sets tables. The best I can find is long passwords with a hybrid
approach where they crack 10 char passwords, but only ones that follow a
specific formula - [A-Z][a-z]{5}[a-z0-9]{2}[0-9]{1,3}
As for generating my own tables, here's a calculator[3] that I think
demonstrates the futility of that for any large keyspace.
Again, we still haven't dipped into 2-byte (Unicode) characters, which will
square the keyspace.
Finally, this quote is interesting[4]:
...Most password crackers cannot crack passwords with ALT characters...
Granted, this article is a few years old, but it does seem to support the list
of safe alt-chars that I mentioned previously so I think that still has some
value.
[1] http://project-rainbowcrack.com/buy.php
[2] https://www.freerainbowtables.com/phpBB3/topic2629.html
[3] http://www.tobtu.com/rtcalc.php
[4] http://www.ethicalhacker.net/content/view/94/24/
-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Friday, September 09, 2011 8:03 PM
To: NT System Admin Issues
Subject: Re: password questions
On Fri, Sep 9, 2011 at 6:02 PM, Crawford, Scott crawfo...@evangel.edu wrote:
I don't think that's true. Point me to a rainbow table that has that
large of a keyspace. I can't say I've looked exhaustively, but I've
not been able to find one that even exhausts the entire ascii space, let
alone Unicode.
Use a program that lets you generate your own rainbow tables for whatever
character set you want. RainbowCrack does, I believe.
People on this list have claimed to have such rainbow tables.
-- Ben
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
RE: App compatability
Standard users already have read access to that key. Registry virtualization is automatically on in Windows 7 with UAC enabled. From: David Lum [mailto:david@nwea.org] Sent: Monday, September 12, 2011 9:43 AM To: NT System Admin Issues Subject: App compatability Using LUA Biglight which helps show what apps need permissions to run as a standard user and not admin, it points to the following key: HKLM\System\CurrentControlSet\Services\WinSock2\Parameters Solutions include registry virtualization, the VirtualRegistry shim, as a last resort, loosen permissions. The first two involve the developer doing something right? How much of a security hole is it if I allow read access by Domain Users? David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Web Server networking question
You should also keep in mind that in browsers with a combined address/search bar, a single word such as helpdesk will get interpreted as a search term and will take you to an internet search for that term. In ie9 and Chrome, you need to type either http://helpdesk; or helpdesk/ to get it to interpret as a site. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, September 12, 2011 1:08 PM To: NT System Admin Issues Subject: Re: Web Server networking question On Mon, Sep 12, 2011 at 07:42, Tom Smith tsm...@eastpointcity.org wrote: I want to build a web site for our Help Desk. To help users with the 'simple' stuff. I HAVE set up a small server with IIS on it. I have named it ( HelpDesk ). Now I need to create the content. I would LIKE users to be able to just type 'HelpDesk' in the URL of IE, and be taken to this server. This works, when I'm logged onto the server. But from my desk, IE can't find it. I had hoped that I had fixed the problem about three (3) weeks ago. While we were upgrading our phone system I found reverse lookup subnets missing from DNS. So I created them. But it didn't fix this particular problem. As we're currently without a NW Admin right now, and I'm obviously not up to speed on this either, I was hoping that perhaps I could get some assistance here... Is this something that CAN work from clients? If so, HOW? What do I need to do, to make it work? In looking at other IT/HelpDesk websites, I've seen some with what appears to be multiple domain names, on what I assume to be the same server. Do I have to create a new domain name for my server? Sorry, but I've never created a website before, so ALL of this is new to me. Any thoughts/guidance you would like to share would be most welcome. Thanks in advance, Tom Open up the DNS management tool for your DNS server. I'll assume that your environment is a Windows Active Directory environment with DNS running on at least one of your Windows servers, probably one of the Domain Controllers. Expand Forward Lookup Zones underneath the server name in the lefthand pane. Then click on the domain name in the lefthand pane, and in the righthand pane click on the Data column header, to sort by IP address, or the Name column header to sort by host name. Look for the host in question, and if it's present make sure that the details match your expectations. If it's not there, then right-mouse-click on the domain name in the lefthand pane and choose New Host. Enter the relevant details. Done. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Default user runonce
If its hitting the current user hive, you shouldn't need to run elevated. -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 14, 2011 10:46 AM To: NT System Admin Issues Subject: RE: Default user runonce We are in a bit of a pickle and digging out. Our Image creator copied a set up user to the default profile in windows 7 the way he has always done it without checking on how bad that is in Win 7. Then he ran around and imaged a ton of machines without doing any decent testing. I will deal with him later, and it won't be pretty. There are 15 or 20 borked settings. Most importantly it borks the Documents Library. Fixable via a Kix script I have. That script needs to RunOnce as the user logs in the first time...the script hits the Current User hive. Actually very cool. So a runonce in the Default hive and it runs as it loads for the newly logged in user. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, September 14, 2011 11:25 AM To: NT System Admin Issues Subject: Re: Default user runonce On Wed, Sep 14, 2011 at 10:54 AM, Kennedy, Jim kennedy...@elyriaschools.org wrote: If I put a RunOnce key into the Default user profile (Windows 7) to call a bat file, that bat file will run under the newly logging in user and it will run under their credentials? So if I need to elevate it I need to do a runas? More-or-less correct. What are you trying to accomplish? You nominally only need elevated privileges to modify the system configuration, and you normally only need to modify the system configuration once per machine, so doing it once per user seems wrong. There may be better approaches. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Default user runonce
There's a myriad of ways to access the registry - regedit, reg.exe, powershell, vbscript. I think I'd allow regedit to run and rely on the perms in the registry to prevent the mucking around. Otherwise, you end up hurting yourself more than the bad guys. This issue is a perfect example. -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 14, 2011 11:04 AM To: NT System Admin Issues Subject: RE: Default user runonce Wooo, you are of course right. Bet I have a software or gpo restricting something else causing this. Regedit for example. -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Wednesday, September 14, 2011 12:02 PM To: NT System Admin Issues Subject: RE: Default user runonce If its hitting the current user hive, you shouldn't need to run elevated. -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 14, 2011 10:46 AM To: NT System Admin Issues Subject: RE: Default user runonce We are in a bit of a pickle and digging out. Our Image creator copied a set up user to the default profile in windows 7 the way he has always done it without checking on how bad that is in Win 7. Then he ran around and imaged a ton of machines without doing any decent testing. I will deal with him later, and it won't be pretty. There are 15 or 20 borked settings. Most importantly it borks the Documents Library. Fixable via a Kix script I have. That script needs to RunOnce as the user logs in the first time...the script hits the Current User hive. Actually very cool. So a runonce in the Default hive and it runs as it loads for the newly logged in user. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, September 14, 2011 11:25 AM To: NT System Admin Issues Subject: Re: Default user runonce On Wed, Sep 14, 2011 at 10:54 AM, Kennedy, Jim kennedy...@elyriaschools.org wrote: If I put a RunOnce key into the Default user profile (Windows 7) to call a bat file, that bat file will run under the newly logging in user and it will run under their credentials? So if I need to elevate it I need to do a runas? More-or-less correct. What are you trying to accomplish? You nominally only need elevated privileges to modify the system configuration, and you normally only need to modify the system configuration once per machine, so doing it once per user seems wrong. There may be better approaches. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Default user runonce
Talking it out really helped. Yup, many a time have I tried to explain to someone this ridiculous behavior with no explanation only to figure it out mid-explanation. -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 14, 2011 12:09 PM To: NT System Admin Issues Subject: RE: Default user runonce It fixes the borked Documents Library!! Sorry, couldn't resist that. :) It rewrites HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ User Shell Folders taking out 'c:\users\CopiedUser\' and putting back in %USERPROFILE% on all the values for my documents and so on. This script is the hard way. I am going to export the corrected key and do a runonce reg merge. Appreciate the help, this has been a mind bender from the beginning trying to figure out what he did to the image. I got to the end, the fix, and my mind was fried. Talking it out really helped. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, September 14, 2011 1:03 PM To: NT System Admin Issues Subject: Re: Default user runonce On Wed, Sep 14, 2011 at 11:46 AM, Kennedy, Jim kennedy...@elyriaschools.org wrote: Most importantly it borks the Documents Library. Fixable via a Kix script I have. What. Does. The. Script. Do? :-) That script needs to RunOnce as the user logs in the first time...the script hits the Current User hive. As Scott Crawford says, it shouldn't need to run elevated for most things under HKEY_CURRENT_USER. Unless it's monkeying about under HKCU\Software\Policies, in which case you should be using a GPO, not a logon script. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
