Re: R: 0-day IE Exploit "in the wild"

2008-12-11 Thread Angus Scott-Fleming
On 11 Dec 2008 at 20:02, HELP_PC wrote: > Yes only in Vista but the option is dimmed ! Run IE as Admin? -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +---+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Angus Scott-Fleming
On 11 Dec 2008 at 11:35, Sam Cayze wrote: > I feel a little better for not deploying IE 7 yet J > > IE 6 appears safe according to this advisory... Later versions of the MSKB also list IE6 and IE8 as possibly vulnerable. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +-

Re: Strange Simply Accounting Problem

2008-12-11 Thread Shawn Everett
Normally Simply Accounting doesn't cause me too much grief.  In this case other techs were trying to solve the problem before me.  They also overcomplicated the original issue by upgrading from 2008 to 2009 and not reporting an earlier server crash. Here's how I fixed the problem: - Shut down

RE: Upgrading BES

2008-12-11 Thread Martin Blackstone
Exactly. And I've done dozens this way. Just make sure you have CDMA download for your Sprint phones. For example Verizon. No GSM stuff. From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, December 11, 2008 5:31 PM To: NT System Admin Issues Subject: RE: Upgrading BES Just load

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Joseph L. Casale
Yea, it always is based on the release cycle being much slower. I am not a fan of OF anyways. As for IET being incomplete? It doesn't support persistent reservations and as far as HA on esx I have never done it but it supports multiple ini's pointed to the same target and it does work. Lots of

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Michael B. Smith
Eh? Openfiler uses IET. The current release of openfiler, is in fact BEHIND on IET patches. I don't know freenas. Regards, Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP My blog: http://TheEssentialExchange.com/blogs/michael I'll be at TEC'2009! http://www.tec2009.com/vegas/inde

Re: Lose access to local domain servers when connected w/VPN to remote / different Windows domain

2008-12-11 Thread Kurt Buff
On Thu, Dec 11, 2008 at 6:45 AM, Carl Houseman wrote: > "Use default gateway on remote network" is NOT checked for the VPN TCP/IP > configuration. Dang. That eliminates my best guess. > I agree with the recommendations about diagnosing in a methodical way. Here > are the results. If you don't

Re: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Jonathan Link
The iscsi target on most distros has documented problems with VMWare, especially with regard to HA functions. IIRC, IET is an incomplete implementation of iSCSI. On Thu, Dec 11, 2008 at 5:26 PM, Greg Mulholland wrote: > Our storage requirements are pretty clear cut and needy so they were > ha

RE: Upgrading BES

2008-12-11 Thread Bob Fronk
Just load the software on the PC, then go to ?:\program files\common files\Research In Motion\AppLoader and delete the vendor.xml. Then connect the BB, start desktop manager and load away. Beware, this will wipe all settings. I have done this on 8700s, 8300, 8310, 8800, 9000 Bob F

RE: DHCP "blocking" MAC address

2008-12-11 Thread Jim Dandy
I'm not sure I follow what you are saying. It sounds like you are suggesting basically that I make reservations for the bad clients in the same scope as the good clients? If that is the case, how do I assign a different gateway to those clients? Curt > -Original Message- > From: Ben Sco

Re: DHCP "blocking" MAC address

2008-12-11 Thread Ben Scott
On Thu, Dec 11, 2008 at 7:14 PM, Jim Dandy wrote: > Wow, isn't there an easier way? I have to assign a class to all 400 of > my machines just so I can keep one bad guy out? I *think* you can do it by creating an exclusion for the "bad clients" range, and then creating the reservation for each

RE: DHCP "blocking" MAC address

2008-12-11 Thread lists
You could script it with PsExec. Export all the machine names and run through them with psexec. -Original Message- From: Jim Dandy [mailto:jda...@asmail.ucdavis.edu] Sent: Thursday, December 11, 2008 6:14 PM To: NT System Admin Issues Subject: RE: DHCP "blocking" MAC address Wow, isn't

RE: DHCP "blocking" MAC address

2008-12-11 Thread Jim Dandy
Wow, isn't there an easier way? I have to assign a class to all 400 of my machines just so I can keep one bad guy out? > -Original Message- > From: Stephan Barr [mailto:stephan.b...@bdtechnology.org] On Behalf Of lists > Sent: Thursday, December 11, 2008 4:00 PM > To: NT System Admin Issu

RE: Issue joining 2003 domain (UNCLASSIFIED)

2008-12-11 Thread Free, Bob
Try netdiag /test:dsgetdc /d:domain.to.join /v -Original Message- From: Eric Brouwer [mailto:er...@forestpost.com] Sent: Thursday, December 11, 2008 10:39 AM To: NT System Admin Issues Subject: Re: Issue joining 2003 domain (UNCLASSIFIED) Yes. This had the same outcome. On Dec 11, 2008

RE: DHCP "blocking" MAC address

2008-12-11 Thread lists
I like this method... http://articles.techrepublic.com.com/5100-10878_11-5498436.html -Original Message- From: Jim Dandy [mailto:jda...@asmail.ucdavis.edu] Sent: Thursday, December 11, 2008 5:52 PM To: NT System Admin Issues Subject: DHCP "blocking" MAC address I'd like to block the u

RE: Upgrading BES

2008-12-11 Thread Jim Majorowicz
Yeah. I downloaded Altell's 4.5.089 and some instructions on how to upgrade phones using a different carrier's file. I Just need to find a guinna pig phone to try. From: Martin Blackstone [mailto:mblackst...@gmail.com] Sent: Thursday, December 11, 2008 2:19 PM To: NT System Admin Issues Sub

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Benjamin Zachary - Lists
Iet/drbd can be your friend. I do like the openfiler interface (gui) and how you can carve out different mount points. From: Greg Mulholland [mailto:g...@krystaltek.com] Sent: Thursday, December 11, 2008 17:35 To: NT System Admin Issues Subject: RE: Anyone else using OpenFiler in a production

DHCP "blocking" MAC address

2008-12-11 Thread Jim Dandy
I'd like to block the use of some machines by dealing out bogus IP address and router info. I realize this isn't a fool-proof block but it will block those who don't have the know-how to get around it. I'm having some difficulty with the implementation. Here's what I did. I have a Server 2003 b

RE: deny restart local policy?

2008-12-11 Thread Free, Bob
That covers one element of it from a technical standpoint but my primary point (which I could have stated much clearer) was that if they are administrators on the box they can do anything they want. Regardless of what you or I put in a GPO it is relatively trivial to get around it for a determined

locating phish domains

2008-12-11 Thread Bill Songstad (WCUL)
Does anyone know of a tool or website that allows you to submit a search for domains with wildcards. I have a colleague that has some phishing sites popping up using related domain names. I was hoping to do some DNS queries to try and spot some other potential phish sites. Does anyone know a way

RE: Strange Simply Accounting Problem

2008-12-11 Thread Joseph L. Casale
Yea I dropped the demo on a few wkst's, one a completely vanilla WinXpsp3 box and it installs but won't run on none of them. Looking like some pretty weak ware... Sigh, I have enough cheap apps that break my bawls to maintain... jlc From: Steve Ens [mailto:stevey...@gmail.com] Sent: Thursday, De

Need help with my HP 4108

2008-12-11 Thread Joe Heaton
I have no idea what happened, but my Websense filter is suddenly not able to send block pages back to the client. I have all my clients going from their PCs into my HP 4108, which has 4 VLANs setup on it. My Websense server has two network cables, one normal, and one going to the monitor port on

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Greg Mulholland
you are a pita! :p i guess what matthew says is right. if you need a cheap alternative then there are a few around. It will come down to specific circumstances. Greg From: Steve Moffat [st...@optimum.bm] On Behalf Of NTSysAdmin [ntsysad...@optimum.bm] Sent: Frid

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread NTSysAdmin
Openfiler is a SAN...whether you like it or not...iSCSI target is a PITA From: Greg Mulholland [mailto:g...@krystaltek.com] Sent: Thursday, December 11, 2008 6:27 PM To: NT System Admin Issues Subject: RE: Anyone else using OpenFiler in a production environment? Our storage requirements are pret

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Greg Mulholland
Our storage requirements are pretty clear cut and needy so they were happy to pay to do it properly. you dont need openfiler or freenas. just enable the iscsi target on most linux distros (fedora etc) plenty of google reading on that Greg From: Matthe

RE: Windows Search question

2008-12-11 Thread Joe Heaton
I was able to go into change preferences, and tell it to use Index Service. This helped... don't know if it came up with all results, but it came up with something after that... Joe Heaton Employment Training Panel From: Roger Wright [mailto:rwri...@evatone.com] Sent: Thursday, December

RE: Upgrading BES

2008-12-11 Thread Martin Blackstone
I think Sprint is behind the times. Verizon is at 4.5 which is a significant upgrade. From: Jim Majorowicz [mailto:jmajorow...@gmail.com] Sent: Thursday, December 11, 2008 2:15 PM To: NT System Admin Issues Subject: RE: Upgrading BES Okay maybe that isn't it. One of the pones with 4.3.0.

RE: Upgrading BES

2008-12-11 Thread Jim Majorowicz
Okay maybe that isn't it. One of the pones with 4.3.0.127 is the phone that I've been testing with. When I check RIM's download page for Sprint 8130 Pearls, I see that it's fully up to date as far as that is concerned. I can't even find 4.3.0.170 Multilanguage. From: Jim Majorowicz [mailto:j

RE: Upgrading BES

2008-12-11 Thread Martin Blackstone
Jim, who is your carrier? By 8130, you are talking about a "Pearl" type? AKA Lady Blackberry. From: Jim Majorowicz [mailto:jmajorow...@gmail.com] Sent: Thursday, December 11, 2008 2:07 PM To: NT System Admin Issues Subject: RE: Upgrading BES In desperation I started fumbling around

RE: Anyone else using OpenFiler in a production e nvironment?

2008-12-11 Thread Matthew W. Ross
We use OpenFiler here, with good results. Basically, if boils down to: If you want something you support yourself for cheap (This is our case), use OpenFiler or FreeNAS. If you want something with paid support, especially for the hardware, go with a commercial product. For us, the cost savings

RE: Upgrading BES

2008-12-11 Thread Jim Majorowicz
In desperation I started fumbling around *ALL* the google results I've had searching on this. I finally find one message from May in a crackberry forum that suggests that this is an issue with all 8130 (every device in this company) with version 4.3.0.97 which all but two of the units are running.

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Greg Mulholland
i use it for our test clusters. but i wouldnt use it in production. Steve and i have had this discussion and he wont convince me. NEVER!!! Greg From: Steve Moffat [st...@optimum.bm] On Behalf Of NTSysAdmin [ntsysad...@optimum.bm] Sent: Friday, 12 December 2008 7:

RE: Upgrading BES

2008-12-11 Thread Jim Majorowicz
What was frustrating was I downloaded it twice with the same result. The third download was to my x64 system at home, where I was able to then extract the files just fine, but it didn't solve my original problem. I haven't applied the Service packs yet, as I need to wait for a time when I can han

Re: Upgrading a Sony Lib-81 robotic tape library.

2008-12-11 Thread Ben Scott
On Thu, Dec 11, 2008 at 4:19 PM, Phillip Partipilo wrote: > Has anyone attempted this, changing out the drive? Not exactly. But on a couple of ATL libraries I worked on in the past, the tape robot and the drives were all separate components. The robot didn't actually "talk" to the tape drives

Upgrading a Sony Lib-81 robotic tape library.

2008-12-11 Thread Phillip Partipilo
Our old 4-tape Sony AIT-2 library bit the dust. I would have loved to get a LTO2 library, but, well, everyone's trying to save money these days, including the company. So, I found an awesome deal on Ebay for a Sony Lib-81 8-cartridge AIT2 autoloader ($100 including shipping!) I took the thing ap

RE: ADFIND filter question

2008-12-11 Thread Michael B. Smith
Well, that isn't going to do quite what you want. For example, if you have a disabled user who also has "password never expires" set, instead of userAccountControl being 514, it will be 66050. I just happened to write a blog post about a related matter earlier today. Wrappage:

RE: Issue joining 2003 domain (UNCLASSIFIED)

2008-12-11 Thread RichardMcClary
Like I said earlier, I too went through something similar a few years ago. I found the hints in the Event logs. Look for those command-line tools for DCDIAG and ADDIAG. They told me exactly what was wrong with my DNS server configuration. -- Richard McClary

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread NTSysAdmin
I'll second Openfiler. Been using it to run a powervault 220s for 2 years now with not one issue. And if you need enterprise support they have that too. From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Thursday, December 11, 2008 4:37 PM To: NT System Admin Issues Subject: RE: Anyone else us

RE: Issue joining 2003 domain (UNCLASSIFIED)

2008-12-11 Thread NTSysAdmin
There are some clues... The network path was not found. Are you using the w2k3 dns server in the w2k IP settings? S -Original Message- From: Eric Brouwer [mailto:er...@forestpost.com] Sent: Thursday, December 11, 2008 4:32 PM To: NT System Admin Issues Subject: Re: Issue joining 2003 do

RE: Windows Search question

2008-12-11 Thread Roger Wright
Hmmm... I was assuming Windows Desktop Search. Don't use it myself, but seem to recall a right-click to "index now" or similar. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Thursday, December 11,

ADFIND filter question

2008-12-11 Thread Michael . Leone
Sorry for the slightly OT question, but joeware.net seems to be under construction, so I can't get to the forums. Here's what I wanna do ... list all disabled users, in all OUs, *except* one particular OU. And contructing LDAP style filters is far from my strong suit. And I will then feed this

Re: Strange Simply Accounting Problem

2008-12-11 Thread Steve Ens
Funny, I am trying to install a base install of Simply on a Terminal Server 2008...it won't even install. On Thu, Dec 11, 2008 at 2:27 PM, Joseph L. Casale wrote: > Nice, I am just about to migrate from an ERP app to this. > We have a 60,000.00 setup that some bean counter doesn't like and they

RE: Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Sam Cayze
My ESX instructor learned us how to use OpenFiler, and he said many companies use it for production. I don't use it here, but I was very impressed with OpenFiler. Maybe at some point... From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Thursday, December 11, 2008 2:22 PM To: NT S

RE: Anyway to turn these messages off?

2008-12-11 Thread Sam Cayze
Client per client. I'm guessing it writes this to the registry. If you monitor the registry for changes, you can find the string, and deploy via GPO. -Original Message- From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Thursday, December 11, 2008 2:17 PM To: NT System Admin Issues Subj

Re: Issue joining 2003 domain (UNCLASSIFIED)

2008-12-11 Thread Eric Brouwer
In what way could the DNS be messed up? I can ping the DC and the domain by name and ip. All respond. On Dec 11, 2008, at 3:05 PM, NTSysAdmin wrote: Then your DNS / WINS is fubarred somehow in relation to that server. S -Original Message- From: Eric Brouwer [mailto:er...@forestpos

Re: Issue joining 2003 domain

2008-12-11 Thread Eric Brouwer
All dcdiag tests are currently passing. On Dec 11, 2008, at 3:06 PM, NTSysAdmin wrote: Run dcdiag /fix a few times. See if that helps. -Original Message- From: Eric Brouwer [mailto:er...@forestpost.com] Sent: Thursday, December 11, 2008 3:32 PM To: NT System Admin Issues Subject: Re: I

RE: Strange Simply Accounting Problem

2008-12-11 Thread Joseph L. Casale
Nice, I am just about to migrate from an ERP app to this. We have a 60,000.00 setup that some bean counter doesn't like and they want to throw it out for a couple hundred dollar app. So Simply's support is crap? Do tell how this plays out... Thanks, jlc -Original Message- From: Shawn Ev

Anyone else using OpenFiler in a production environment?

2008-12-11 Thread Jonathan Link
Planning a move to VMWare ESX, and I'm evaluatiing my SAN choices. I have OpenFiler in a production environment storing some of our data. On of our NAS box's flaked out on me, and I repurposed a server with Openfiler to fill the void and try out iSCSI SAN features. I've been extremely happy with

RE: Anyway to turn these messages off?

2008-12-11 Thread Joe Heaton
I tried this by remoting into the print server, but it didn't work. I guess I have to do this on a client-by-client basis. Joe Heaton Employment Training Panel -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, December 11, 2008 12:12 PM To: NT System Admi

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Michael Ross
A lot of articles im reading about this are suggesting you CAN turn on DEP in IE7 on XP... however.. its not there. I hate articles and what-not that say the wrong info -Original Message- From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Thursday, December 11, 2008 1:42 PM To: N

RE: Windows Search question

2008-12-11 Thread Joe Heaton
Heck of a question. How can I check, or manually index it if not? Joe Heaton Employment Training Panel From: Roger Wright [mailto:rwri...@evatone.com] Sent: Thursday, December 11, 2008 12:13 PM To: NT System Admin Issues Subject: RE: Windows Search question Has your mapped location a

Re: Windows Search question

2008-12-11 Thread Ben Scott
On Thu, Dec 11, 2008 at 3:11 PM, Joe Heaton wrote: > We're having an issue here, searching for a specific word within files, > trying to search through multiple folders. I've found the Windows "Search" function to be unreliable when looking inside contents of files. The "FINDSTR /S" command wo

RE: Windows Search question

2008-12-11 Thread Roger Wright
Has your mapped location already been indexed by Windows Search? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Thursday, December 11, 2008 3:11 PM To: NT System Admin Issues Subject: Windows Search

RE: Anyway to turn these messages off?

2008-12-11 Thread Miller Bonnie L .
Control Panel, Printers, File menu, server properties, advanced, uncheck "Show information notifications for network printers" -Bonnie From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Thursday, December 11, 2008 12:00 PM To: NT System Admin Issues Subject: Anyway to turn these messages off? O

Re: Anyway to turn these messages off?

2008-12-11 Thread Ben Scott
On Thu, Dec 11, 2008 at 3:06 PM, Joe Heaton wrote: > Is that on the client, or the print server? On the client's spooler (print server), it will disable for the user. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Windows Search question

2008-12-11 Thread Joe Heaton
XP Pro SP3 We're having an issue here, searching for a specific word within files, trying to search through multiple folders. Specifically, we have a drive letter mapped to a central storage location, that houses contract information. We want to choose a year folder, and search all folders un

Re: Anyway to turn these messages off?

2008-12-11 Thread Eric Wittersheim
You can turn off those notifications in the advanced properties of print server. Open Printers and Faxes, Click File, server properties. Then Advanced. From there you can turn off the notifications on the clients. On Thu, Dec 11, 2008 at 1:59 PM, Joe Heaton wrote: > Or at least minimize the

RE: Issue joining 2003 domain

2008-12-11 Thread NTSysAdmin
Run dcdiag /fix a few times. See if that helps. -Original Message- From: Eric Brouwer [mailto:er...@forestpost.com] Sent: Thursday, December 11, 2008 3:32 PM To: NT System Admin Issues Subject: Re: Issue joining 2003 domain Deleting the (unrelated) errors from my system resolved the DCDI

RE: Anyway to turn these messages off?

2008-12-11 Thread Joe Heaton
Is that on the client, or the print server? Joe Heaton Employment Training Panel From: Sean Martin [mailto:seanmarti...@gmail.com] Sent: Thursday, December 11, 2008 12:05 PM To: NT System Admin Issues Subject: Re: Anyway to turn these messages off? If XP, Printers and Faxes, File...,

RE: Issue joining 2003 domain (UNCLASSIFIED)

2008-12-11 Thread NTSysAdmin
Then your DNS / WINS is fubarred somehow in relation to that server. S -Original Message- From: Eric Brouwer [mailto:er...@forestpost.com] Sent: Thursday, December 11, 2008 2:39 PM To: NT System Admin Issues Subject: Re: Issue joining 2003 domain (UNCLASSIFIED) Yes. This had the same o

Re: Anyway to turn these messages off?

2008-12-11 Thread Sean Martin
If XP, Printers and Faxes, File..., Server Properties, Advanced, de-select the "Show informational notifications" for your printer type... - Sean On Thu, Dec 11, 2008 at 10:59 AM, Joe Heaton wrote: > Or at least minimize the time it's on the screen? I've had a few users > ask me about it. > >

Anyway to turn these messages off?

2008-12-11 Thread Joe Heaton
Or at least minimize the time it's on the screen? I've had a few users ask me about it. Thanks, Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 jhea...@etp.ca.gov ~ Finally, powerful endpoint security that ISN'T

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Ziots, Edward
We dropped the net's inbound and outbound and looking at emerging threats and ISC for updates on any new updates. Plus a few other things I can't discuss. Z Edward E. Ziots Network Engineer Lifespan Organization Email: ezi...@lifespan.org Phone: 401-639-3505 MCSE, MCP+I, ME, CCA, Security +, N

Re: Issue joining 2003 domain

2008-12-11 Thread Eric Brouwer
Deleting the (unrelated) errors from my system resolved the DCDIAG errors. I installed the Support Tools, and ran ADDIAG on the DC. This did not turn up anything either. On Dec 11, 2008, at 1:43 PM, Eric Brouwer wrote: I'm still trying to find ADDIAG, but I was able to run DCDIAG on the

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Sam Cayze
It's not GPOs. DEP is probably not enabled. Good guide: http://windowssecrets.com/2007/05/03/01-How-DEP-can-protect-your-PC -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Thursday, December 11, 2008 1:05 PM To: NT System Admin Issues Subject: RE: 0-d

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Kennedy, Jim
Then you have a group policy controlling it. > -Original Message- > From: HELP_PC [mailto:g...@enter.it] > Sent: Thursday, December 11, 2008 2:02 PM > To: NT System Admin Issues > Subject: R: 0-day IE Exploit "in the wild" > > Yes only in Vista but the option is dimmed ! > > > GuidoElia >

R: 0-day IE Exploit "in the wild"

2008-12-11 Thread HELP_PC
Yes only in Vista but the option is dimmed ! GuidoElia HELPPC -Messaggio originale- Da: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Inviato: giovedì 11 dicembre 2008 19.52 A: NT System Admin Issues Oggetto: RE: 0-day IE Exploit "in the wild" "Enable memory protection to help mi

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Kennedy, Jim
"Enable memory protection to help mitigate online attacks." Is the DEP option. Near the bottom of the Advanced tab. Vista with IE 7 only I believe, not available in XP. To answer the shadowserver question, it is safe it is a security website. On the linked pages is a list of websites that hav

R: 0-day IE Exploit "in the wild"

2008-12-11 Thread HELP_PC
And I cannot find DEP option in IE settings GuidoElia HELPPC -Messaggio originale- Da: Glen Johnson [mailto:gjohn...@vhcc.edu] Inviato: giovedì 11 dicembre 2008 19.43 A: NT System Admin Issues Oggetto: RE: 0-day IE Exploit "in the wild" I'm confused, nothing new there. Should I block

Re: Issue joining 2003 domain

2008-12-11 Thread Eric Brouwer
I'm still trying to find ADDIAG, but I was able to run DCDIAG on the DC. It is returning a few errors which I am now researching: Starting test: systemlog An Error Event occurred. EventID: 0x0457 DC failed test systemlog This error repeats three times. All other tests pass. On Dec 11,

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Glen Johnson
I'm confused, nothing new there. Should I block the url listed below or something from that url. I thought I saw something in the write-up about shadowserver so I'm hesitant to click on the link to read. -Original Message- From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Thursday,

Re: OT: Double trouble

2008-12-11 Thread Kurt Buff
Very nice. Congrats again, and with luck I'll be posting some next year. Kurt On Thu, Dec 11, 2008 at 2:50 AM, James Rankin wrote: > > > As requested I have attached some photos - I passed on everyone's > congratulations to Tracie, who I have to say was genuinely touched to > receive messages f

Re: Issue joining 2003 domain (UNCLASSIFIED)

2008-12-11 Thread Eric Brouwer
Yes. This had the same outcome. On Dec 11, 2008, at 1:35 PM, Kent, Larry CTR USA IMCOM wrote: Classification: UNCLASSIFIED Caveats: NONE Did you put it back in a workgroup first, reboot, then try to join the W2K3 domain? -Original Message- From: Eric Brouwer [mailto:er...@forestpos

RE: Issue joining 2003 domain (UNCLASSIFIED)

2008-12-11 Thread Kent, Larry CTR USA IMCOM
Classification: UNCLASSIFIED Caveats: NONE Did you put it back in a workgroup first, reboot, then try to join the W2K3 domain? -Original Message- From: Eric Brouwer [mailto:[EMAIL PROTECTED] Sent: 2008-12-11 12:13 To: NT System Admin Issues Subject: Re: Issue joining 2003 domain Yes

Re: 0-day IE Exploit "in the wild"

2008-12-11 Thread Jon Harris
That is why I suggest burning at the stake those found, we find enough it sure makes it hard for the script kiddies to help spread this mess. Besides that if you were doing it would you not be much less likely to continue with this if you faced being burned alive when caught? With decreasing numb

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Ziots, Edward
It won't it only infuriates them more, and when you take down one, 6 more come up in there place. Badda Bing, Badda BOOM. You know Eh? Z Edward E. Ziots Network Engineer Lifespan Organization Email: [EMAIL PROTECTED] Phone: 401-639-3505 MCSE, MCP+I, ME, CCA, Security +, Netw

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Kennedy, Jim
The IE tab type items would share any vulnerability since you are running IE in that tab. That at least is how I understand it. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 11, 2008 12:49 PM > To: NT System Admin Issues > Subject: Re

Re: 0-day IE Exploit "in the wild"

2008-12-11 Thread Jon Harris
Better than having to rebuild a bunch of machines. I still think rounding up as many of these guys as can be found and burning them at the stake publicly would at least slow them down a bit, but that is only my opinion. Jon On Thu, Dec 11, 2008 at 12:54 PM, Ziots, Edward <[EMAIL PROTECTED]> wrot

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Ziots, Edward
Also block the following. http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20081210 Z Edward E. Ziots Network Engineer Lifespan Organization Email: [EMAIL PROTECTED] Phone: 401-639-3505 MCSE, MCP+I, ME, CCA, Security +, Network + From: Ziots, Edwar

Re: OT: Double trouble

2008-12-11 Thread Candee Vaglica
Awesome! Congrats all around! On 12/9/08, James Rankin <[EMAIL PROTECTED]> wrote: > Just wanted to quickly share my happiness at the birth of my two twin boys > on Monday morning at 4:30am, after a traumatic night we received James and > Jacob who weighed in at a neat 4lb 10oz each. I am now off t

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Ziots, Edward
They got exploit code out for IE 7.0 and I have "heard" that IE 6.0 isnt that far behind. I have switched to Firefox for browser for the time being. Don't be surprised if they go "out of Cycle" with this one. Just what we all need at Christmas. Z Edward E. Ziots Network Engineer Lifespa

RE: OT: Gmail Enables -SMS TXT

2008-12-11 Thread Erik Goldoff
I can't remember the last time I got spam that originated from a GMail account ... rarely even spoofed from there Erik Goldoff IT Consultant Systems, Networks, & Security _ From: Eric Brouwer [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2008 12:15 PM To: NT System A

Re: SharePoint Server

2008-12-11 Thread Candee Vaglica
I have several wss sites using SQL as the backend. One person was assigned as designer for each site. The only real problem I have seen is that CAD xrefs don't play nicely. To get Sharepoint to handle CAD files requires additional software On 12/9/08, Troy Meyer <[EMAIL PROTECTED]> wrote: > Check

Re: 0-day IE Exploit "in the wild"

2008-12-11 Thread RichardMcClary
Fortunately (for this one, at least) we're a Mozilla shop... Do the "IE" add-ins for Firefox ("IE Tab", etc) share the vulnerability? Thanks! -- Richard McClary, Systems Administrator ASPCA Knowledge Management 1717 S Philo Rd, Ste 36, Urbana, IL 61802 217-337

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Sean Rector
Does anyone know how to enable DEP/NX using Group Policy? According to the M$ article, if that is done, it will help mitigate the issue. Sean Rector, MCSE From: Sam Cayze [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2008 12:35 PM To: NT System Admin Issues Subject: RE: 0-day IE

RE: OT: Gmail Enables -SMS TXT

2008-12-11 Thread Kennedy, Jim
Gmail is also the free mail account provider of choice for Nigerian/419 spammers to send from because Gmail hides the originating client IP address making filtering them more difficult. From: Eric Brouwer [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2008 12:35 PM To: NT System Admin

RE: OT: Gmail Enables -SMS TXT

2008-12-11 Thread Steve Kelsay
OK, I understand now. Duh. Sorry. From: Eric Brouwer [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2008 12:35 PM To: NT System Admin Issues Subject: Re: OT: Gmail Enables -SMS TXT Sorry. Completely unclear on my part. I too get very little spam sent TO my gmail account. We

RE: Paglo

2008-12-11 Thread Andy Shook
I can Shook-ify pretty much anything, let me know what you need Shook -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2008 11:25 AM To: NT System Admin Issues Subject: RE: Paglo Can a search be shook? (and not stirred?)

Re: OT: Gmail Enables -SMS TXT

2008-12-11 Thread Eric Brouwer
Sorry. Completely unclear on my part. I too get very little spam sent TO my gmail account. We were getting dozens of bogus registrations daily on our forum from entities with gmail accounts. If allowed to register, they spam the heck out of the forum with pr0n posts. On Dec 11, 2008, at

RE: 0-day IE Exploit "in the wild"

2008-12-11 Thread Sam Cayze
I feel a little better for not deploying IE 7 yet J IE 6 appears safe according to this advisory... From: Miller Bonnie L. [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2008 11:12 AM To: NT System Admin Issues Subject: 0-day IE Exploit "in the wild" http://isc.sans.org/ ht

RE: OT: Gmail Enables -SMS TXT

2008-12-11 Thread Sam Cayze
It's always been free to SMS cell phone via email. Google just made it idiot proof. IE, Sprint: [EMAIL PROTECTED] Blast away... TIP: Keep a directory of the SMS address of all your employees somewhere off site. Great way to communicate with your company if there is a disaster / mail

RE: OT: Gmail Enables -SMS TXT

2008-12-11 Thread Steve Kelsay
Strange. I have not had any problems whatsoever with spam on Gmail, and I use it voraciously. The spam, filters they have in place seem to have protected me very well. Are you referring to spam being sent TO you, or to someone else using your address? From: Eric Brouwer [mailto:[EMAIL PROTECTE

RE: Issue joining 2003 domain

2008-12-11 Thread Miller Bonnie L .
Do you happen to have a matching admin account name in the old domain? Or, do you have a mapped/connected resource in the new domain already from that server? Anything in the old domain (computer account, etc) with a matching netbios name to your new domain or server name? -Original Messag

RE: Issue joining 2003 domain

2008-12-11 Thread Troy Meyer
Try removing it from your current domain and placing it in a workgroup before rejoining. Make sure that from the W2K machine when you ping new_domain.local you get back an active domain controller. -Troy -Original Message- From: Eric Brouwer [mailto:[EMAIL PROTECTED] Sent: Thursday, D

Re: OT: Gmail Enables -SMS TXT

2008-12-11 Thread Eric Brouwer
Probably nothing. Gmail is, or has, become the mail account of choice with spammers. I run a forum for my wife, and we had to ban registrations from gmail accounts. Pity Google does nothing (that I know of) about the abuse. On Dec 11, 2008, at 12:03 PM, Roger Wright wrote: > http://news.

Re: Issue joining 2003 domain

2008-12-11 Thread Eric Brouwer
Yes, it is joined to an old NT domain I am trying desperately to decommission. Nothing besides the switches are between the PC and the DC. The funny thing is, XP machines join fine. When I try joining new_domain.local as opposed to new_domain, I get a different error: Network Identifica

0-day IE Exploit "in the wild"

2008-12-11 Thread Miller Bonnie L .
http://isc.sans.org/ http://www.microsoft.com/technet/security/advisory/961051.mspx -Bonnie ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

OT: Gmail Enables -SMS TXT

2008-12-11 Thread Roger Wright
http://news.cnet.com/8301-17939_109-10120918-2.html What's to keep spammers from blasting out SMS TXT messages to people from a free Gmail account? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ "Dreaming permits each and every one

RE: Issue joining 2003 domain

2008-12-11 Thread RichardMcClary
Somewhere in Win2003 (perhaps still on the CD?) are "Support Tools". Try running "ADDIAG" and "DCDIAG" (command line utilities). Look in the system logs for both the client and the AD controller and see if those have any links to solutions. That's about as much as I remember back from when I w

RE: Issue joining 2003 domain

2008-12-11 Thread Troy Meyer
Hey Eric, Is the W2K box already a member of another domain? Is there anything filtering traffic between the DC and the old server? I think occasionally we also had to use the complete dns name when trying to add. (ie domain.com not just domain). Weird though, never seen that before. -Troy -

  1   2   >