script to add auditing

Anyone care to share a script they may have? I need to audit some folders on file servers. Trying to add a group to the list on the auditing tab of the folder. If someone has something I'd appreciate it. Thanks Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service D

RE: script to add auditing

Subinacl.exe will add the auditing. Subinacl /verbose /subdirectories=directoriesonly /sgrant=domain\name permissions (look in the subinacl help file for permissions) path_to_directory Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Networ

RE: What is Vmware thinking?

It does seem that VMware is incorporating a lot of these things with releases. I do know there are a couple svmotion plugins for the GUI. It definitely makes it a lot nicer. We've used this one from Andrew Kutz for a good 6 or 7 months and have had no issues with it. http://sourceforge.net/proj

RE: script to add auditing

Great, thank you. Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.com Phone: 610-807-6459 Fax: 610-807-6003 _ From: Ziots, Edward [mailto:ezi...@lifespan.org] Se

Dell PE2950 - SBS 2003

I have an old PE 2950 that I want to install SBS on, I downloaded the latest "Installation and Se4rver Management" CD, however SBS is not part of any of the selectable OS'es. Can an not use the Dell Startup disk? Any ideas? ___ Stefan Jafs This email and any at

RE: Dell PE2950 - SBS 2003

You don't really need to use that CD. It's a convenience. Just get the drivers for the perc controller and you should be good. Once you've installed the OS you can then download the OpenManage bits and install them manually. From: Stefan Jafs [mailto:sj...@amico.com] Sent: Monday, April 27,

RE: Dell PE2950 - SBS 2003

It makes it very simple and all the drivers are included. I would check that version you have, older versions did not include SBS, but any of the latest versions include it as an option. You can download an ISO from the website. From: Richard Stovall [mailto:richard.stov...@researchdata.com]

RE: Dell PE2950 - SBS 2003

Just choose server 2003 From: Stefan Jafs [mailto:sj...@amico.com] Sent: Monday, April 27, 2009 9:56 AM To: NT System Admin Issues Subject: Dell PE2950 - SBS 2003 I have an old PE 2950 that I want to install SBS on, I downloaded the latest "Installation and Se4rver Management" CD, however

Re: Replacing Win2k3 DC

Ben I got a usage error for /DCOPY:T ?? I am using robocopy from the Resource Kit?? - Original Message - From: "Ben Scott" To: "NT System Admin Issues" Sent: Thursday, April 23, 2009 2:24 PM Subject: Re: Replacing Win2k3 DC On Thu, Apr 23, 2009 at 8:21 AM, David W. McSpadden wrote:

Data De-duplication tolls

Are there any free report tools to simply identify duplicate data on our network? -- Thanks Dave Vantine ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Replacing Win2k3 DC

I don't see /DCOPY in the /? from command line. Is DCOPY in Vista but not Win2k3?? - Original Message - From: Micheal Espinola Jr To: NT System Admin Issues Sent: Monday, April 27, 2009 12:00 PM Subject: Re: Replacing Win2k3 DC ROBOCOPY.EXE /?, and check what is wrong wit

Re: Replacing Win2k3 DC

its a typo. -- ME2 On Mon, Apr 27, 2009 at 12:12 PM, David W. McSpadden wrote: > I don't see /DCOPY in the /? from command line. > Is DCOPY in Vista but not Win2k3?? > > - Original Message - > *From:* Micheal Espinola Jr > *To:* NT System Admin Issues > *Sent:* Monday, April 27, 2009

Re: Replacing Win2k3 DC

I don't think it is. He explains it later in the same message and uses the same syntax. Google came back with it in Vista. I think all I want is /E /COPYALL and that should be enough. - Original Message - From: Micheal Espinola Jr To: NT System Admin Issues Sent: Monday, April

Re: Replacing Win2k3 DC

You're right, its not a typo for the timestamp bugfix in the Vista version of ROBOCOPY. -- ME2 On Mon, Apr 27, 2009 at 12:22 PM, David W. McSpadden wrote: > I don't think it is. He explains it later in the same message and uses > the same syntax. Google came back with it in Vista. > I think

Re: Replacing Win2k3 DC

On Mon, Apr 27, 2009 at 11:56 AM, David W. McSpadden wrote: > Ben I got a usage error for /DCOPY:T ?? > I am using robocopy from the Resource Kit?? There's a newer version of ROBOCOPY available, even for XP/2000. Version ID is "XP026". It adds the /DCOPY (Directory Copy) switch, among several

RE: Server OS opinion

Just come from the old school of BIND, I like my DNS and WINS managed separately, just choice. Also the there are move controls that you can put on systems so you don't exploit DNS or WINS or other systems, it's a HIPS, which controls execution period. If you like all your eggs in one bas

RE: SQLServer 200 question - DTS to DMZ

Can you use TCPVIEW or Process explorer on the machine the DTS package is running from and the one in the DMZ and see if any communications are being tried? Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-350

Windows Server Foundation Edition

Has anyone actually SEEN this SKU for sale anywhere? Dell, HP, Ingram Micro, and CDW don't have it. Or claim not to. Anyone have a source? Thanks, M ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

RE: script to add auditing

Can Subinacl remove a single entry from the audit list? I've looked through the documentation, but I don't see a way to do this. I know the /audit switch will wipe the list out entirely. Thanks, Chris ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE:Data De-duplication tolls

Are you looking for duplicate data within files or duplicate files? EMC can provide you with a utility that will tell you how much duplicate data you have within your file systems. There are plnty of utilities that will find duplicate files, although I don't specifically know of any that would s

RE: Stickers

I do... so? Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Tim Vander Kooi [mailto:tvanderk...@expl.com] Sent: Thursday, April 23, 2009 4:06 PM To: N

RE: Dell PE2950 - SBS 2003

It does not work keeps insisting that the SBS is not the 2003 CD! I downloaded the latest version, I guess I have to Download the PERC drivers and start from the SBS CD :( ___ Stefan Jafs From: Michael Ross [mailto:mr...@itwif.com] Sent: Monday, April 27, 2009 11

RE: Windows Server Foundation Edition

I have looked far and wide and unfortunately found the same as you. I would be interested in trying it out though. Thanks, Jeremy Phillips Managing Consultant | Cohesive Logic LLC | M: 540-322-7980 | BB PIN: 318A6889 From: Michael B. Smith [mailto:mich...@owa.smithcons.com] Sent: Monday, Apri

RE: Windows Server Foundation Edition

My understanding is that HP was supposed to launch it for these products today * ML110 G5 ML115 G5 * ML310 G5p DL120 G5 * DL120 G5 DL320 G5p Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - ht

Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

Is there a GPO way to prevent something from modifying this registry key? If I could prevent that and stuff from auto-populating the \Startup folder for "all users" I would be a happy camper. Tools like Spybot can do it, but that's not enterprise grade (read, centrally manageable). McAfee has a

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

You'd have to hook the writes if you want to have it effective for local admins as well. Haven't seen a product that does that. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Monday, April 27, 2009 1:15 PM To: NT System Admin Issu

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

2008 domain? I think this is only available via that. The Group Policy extensions update added to xp make it work. Computer config...Policies...Windows Settings...Sec. Settings...Registry. You add the key and change the perms to read and Execute, taking away right/full control from everyon

RE: Dell PE2950 - SBS 2003

Its actually an Option to select SBS 2003 as the OS. If you are selecting 2003 Server as the OS install option that will not work. I have done it at least a few dozen times. From: Stefan Jafs [mailto:sj...@amico.com] Sent: Monday, April 27, 2009 1:38 PM To: NT System Admin Issues Subject:

RE: Windows Server Foundation Edition

while that is certainly possible, i can't find them on the HP partner website nor were the "online chat" people i chatted with aware of them...i'll try again tomorrow, but after that i've got to break down and eat the price difference... From: Brian Desmond [br..

USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

I'm being asked to investigate the use of a few MAC's in our network. I know that it would be only used by a few of our staff for graphics and a few other apps. I'm concerned about the ability of a MAC to interface into our network and Exchange Server email.Obviously we would purchase new machines,

RE: Windows Server Foundation Edition

Is this version only for the HP models below? From: Michael B. Smith [mailto:mich...@owa.smithcons.com] Sent: Monday, April 27, 2009 2:28 PM To: NT System Admin Issues Subject: RE: Windows Server Foundation Edition while that is certainly possible, i can't find

Re: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

Macs are a pain. Not only do I have about 2 dozen of them on my network, I've got a stupid Mac Server also. Macs use Entourage for interaction with Exchange (OWA), it's not perfect, there are issues, and it's on the Mac side. Not any issues with having them on your network, I just don't like Mac

RE: Dell PE2950 - SBS 2003

Sorry it's an PE2850 and I just spoke to Dell support, SMS is not supported on the 2850, that's why it's not an option on the CD. So I'm getting the PERC drivers however now I can't boot from the SMS disk #1, getting error: NTLDR not found looks like it does not want to boot from the CD#1!

RE: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

I sort of second Sherry's comments. I say sort of because I have a Mac or two myself and don't have anything against Macs...but they are often a pain to support in a mixed network. We support one network that USED to have a single Mac (among about 50 PCs and half a dozen Windows servers). Tha

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

Even if you did do that, as a local admin they could just take ownership of the folder and boom they are writing to the registry key again and the startup folder again. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Monday, April 27, 2009 1:15 PM To: NT System Admi

RE: Spotted this a couple of days ago...

Just tested on Vista. Works as advertised. Also worked on me e6500 with the hard drive ATA password set. Apparently, the password is asked for before the boot devices are offered, so the drive is already unlocked by the time you tell it to boot from CD. It didn't work with my Ubuntu install on a se

RE: Dell PE2950 - SBS 2003

I'm reading that SBS will not install on a DELL rack mounted server!! http://it.toolbox.com/blogs/it-guy/sbs-and-dell-rack-servers-what-gives-7867 Could that be correct? ___ Stefan Jafs From: Stefan Jafs [mailto:sj...@amico.com] Sent: Monday, April 27, 2009 2:53

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

I think the OP meant he was looking for suggestions other than "don't put them in the local administrators group". :) Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 don.gu..

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

I understood that also, however if they are a local admin it might not matter. They could simply logon take ownership and they again have the rights to do what they want. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Monday, April 27, 2009 2:07 PM To: NT System

RE: Dell PE2950 - SBS 2003

Not correct. And that's an old article. While I can't speak to the PE2850 I have installed on a basic PE 800 or 850 (I don't remember) and a PE1950. These were lab installs and not at customer sites. Downloaded all the drivers, updated all firmware and installed from the SBS CDs. I remember hav

Re: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

I use VMWare Fusion with a license of WindowsXP on my MacBook Pro, and can launch the windows version of Outlook for the full integrated email experience. On Mon, Apr 27, 2009 at 2:34 PM, Murray Freeman wrote: > I'm being asked to investigate the use of a few MAC's in our network. I > know th

Re: SQLServer 200 question - DTS to DMZ

Didn't need it - it started working just fine once we applied SQLServer SP4. Kurt On Mon, Apr 27, 2009 at 10:16, Ziots, Edward wrote: > Can you use TCPVIEW or Process explorer on the machine the DTS package > is running from and the one in the DMZ and see if any communications are > being tried?

RE: Windows Server Foundation Edition

My understanding from the MS/HP web training was that HP was limiting it to a few select models because of the limitations built in to Foundation Server. And currently it will only be available from the direct OEMs. (like HP and Dell) From: Todd Lemmiksoo [mailto:tlemmik...@all-mode.com] Sent:

RE: Dell PE2950 - SBS 2003

Ok I'm getting a new image from TechNet. My outside consultant wanted 15 - 20 hours and I said what are you crazy I can do it in a few hours myself, maybe he is not so crazy after all! ___ Stefan Jafs From: Art DeKneef [mailto:art.dekn...@cox.net] Sent: Monday, Ap

Re: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

As has been mentioned, Entourage is the semi-equivalent to Outlook for Exchange connectivity. Snow Leopard is supposed to have increased integration with an Exchange environment natively. In what ways are you having concerns about Macs interacting w/your network? Michael. On Mon, Apr 27, 2009

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

Bingo. -Original Message- From: Don Guyer [mailto:don.gu...@prufoxroach.com] Sent: Monday, April 27, 2009 11:35 AM To: NT System Admin Issues Subject: RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run I think the OP meant he was looking for suggestions other than "don't put

RE: Windows Server Foundation Edition

The press release, the day it was released (six weeks ago??) said "immediate availability". Now, try to find it on those vendor's websites!!! From: Art DeKneef [art.dekn...@cox.net] Sent: Monday, April 27, 2009 3:31 PM To: NT System Admin Issues Subject: RE: Wind

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

Understood - I'm looking for an interim stopgap. We don't have the resources to bring everyone off local admins very quickly, so if a GPO could help me mitigate things with minimal effort it would be extremely helpful. Dave -Original Message- From: Terry Dickson [mailto:te...@treasurer.

RE: Windows Server Foundation Edition

In the UK it is listed on the HP top config tool with distribution. There seems to be a choice of device cals or user cals and up to 20 users. There is no pricing as yet and a 10 day build time, so I guess they add the pricing in after the order is placed. So you can specify an ml110 with 13 cal

RE: Windows Server Foundation Edition

That means "I might maybe eventually decide I actually envisioned" availability. I sent you an address that might be able to answer your question on availability. From: Michael B. Smith [mailto:mich...@owa.smithcons.com] Sent: Monday, April 27, 2009 12:37 PM To: NT System Admin Issues Sub

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

Setup GPO and ACL the key so only Domain Admins have write permission to the key and all users only have read Permission. They cant take ownership if they don't have local administrative permissions or take ownership right. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA

RE: Prevent mods to HKLM\Software\Microsoft\CurrentVersion\Run

Move the take Ownership right from the Local Administrators, via User Rights in GPO... That will fix the taking Ownership of the resource issue. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 -Ori

RE: script to add auditing

I think the sdeny will setup a deny acl, but unless you can combine with /revoke switch that might not be possible... Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 -Original Message- From: Chri

Re: Dell PE2950 - SBS 2003

It will definately work. I have an SBS03 instance thats been running on a Dell   2850 perc4e\dc for over 3 years. Just had to supply the perc drivers during the SBS install From: Stefan Jafs To: NT System Admin Issues Sent: Monday, April 27, 2009 3:35:24 PM

RE: Dell PE2950 - SBS 2003

Yes but I cat get it to boot from CD#1, SBS 2003 R2 Premium Edition! I downloaded CD#! from TechNet same problem Could it be something stupid, like I would have to install SMS 2003 first? ___ Stefan Jafs From: Pete Howard [mailto:pchow...@yahoo.com] Sent: Mond

RE: Windows Server Foundation Edition

There are only user CALs. It includes 15 CALs and 15 is the limit legally. From: Michael Hoffman [mailto:m...@drumbrae.net] Sent: Monday, April 27, 2009 1:09 PM To: NT System Admin Issues Subject: RE: Windows Server Foundation Edition In the UK it is listed on the HP top config tool with d

RE: DFS issues

Sorry to jump in so late-If you're just talking about the checkbox next to read only, that is by design on folders as per http://support.microsoft.com/kb/326549. How are the share and NTFS permissions? Any quota software being used? What program are they having trouble saving with? -B From:

Citrix Video

Oh yeah, this video really convinces me that Citrix is the way to go! J http://www.xenserver5.com/videos/mythbusters/ Hey Stu, need a link for your next newsletter? Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: Citrix Video

One for the faves this week !! Warm regards, Stu Sjouwerman Founder, VP Marketing. P: +1-727-562-0101 ext 218 F: +1-727-562-5199 s...@sunbelt-software.com From: Webster [mailto:webs...@carlwebster.com] Sent: Monday, April 27, 2009 4:57 PM To: NT Syst

Re: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

It has been our experience that while the technical issues of MAC's can be resolved, most issues come from the MAC users themselves. Having got themselves a little exception to the overall IT policy, they will often refuse to play nice with things like storing files on network shares which are back

RE: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

Amen to that, and we only have 1 mac user. Gene Giannamore Abide International Inc. Technical Support 561 1st Street West Sonoma,Ca.95476 (707) 935-1577Office (707) 935-9387Fax (707) 766-4185Cell gene.giannam...@abideinternational.com www.abideinternational.com -Original Mess

Re: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

We support Macs for our Marketing department. I don't believe we deal with too many issues, but that's probably because most of their productivity applications are delivered via Citrix. We use ExtremeZ-IP from Group Logics to handle file sharing from a Windows 2003 server. I guess I would put the

RE: USE OF MAC COMPUTERS IN WINDOWS ENVIRONMENT

Yes, that was exactly our experience as well. Every month there was some new special Mac app that they just HAD to have working and that our helpdesk staff had never heard of before. So we had to spend resources getting up to speed with and supporting an application that only one user (out of

RE: script to add auditing

Auditing is stored in the SACL not the DACL right? I was going to recommend icacls.exe which has a /remove switch, but I think it only does DACLs not SACLs Cheers Ken From: Ziots, Edward [ezi...@lifespan.org] Sent: Tuesday, 28 April 2009 6:27 AM To: NT S

RE: Spotted this a couple of days ago...

Hi, I was talking about full-disk encryption like Tru-Crypt (rather than hard disk based systems that ask for passwords prior to booting). Does this defeat Bitlocker? or Tru-Crypt? Cheers Ken From: Mike Gill [lis...@canbyfoursquare.com] Sent: Tuesday, 2