Boot.ini / software RAID, need to fix.

2009-05-28 Thread Gavin Wilby
Hi all, I have taken over an SBS site and they have (horror) a 2 disk software mirror. However although the Disk Manager shows the disks mirroring OK, as here: http://farm4.static.flickr.com/3570/3572139495_92aa843fdb_o_d.jpg The boot ini looks like this: [boot loader] timeout=30

Re: Boot.ini / software RAID, need to fix.

2009-05-28 Thread Gavin Wilby
I actually meant: multi(0)disk(2)rdisk(0)partition(1)\WINDOWS=Windows Server 2003 for Small Business Server /noexecute=optout /fastdetect On Thu, May 28, 2009 at 9:50 AM, Gavin Wilby gavin.wi...@gmail.com wrote: Hi all, I have taken over an SBS site and they have (horror) a 2 disk software

Re: Boot.ini / software RAID, need to fix.

2009-05-28 Thread Gavin Wilby
OK, Scratch all that, all i really need to know is, can I remove the EISA partition without wrecking the boot loader, I *think* so, but Id just like a little reassurance 1st. gavin. On Thu, May 28, 2009 at 9:53 AM, Gavin Wilby gavin.wi...@gmail.com wrote: I actually meant:

RE: Boot.ini / software RAID, need to fix.

2009-05-28 Thread Ken Schaefer
Yes you can. The EISA partition isn't bootable by Windows. That said, it has the Dell diagnostics on it, which obviates the need to have the CD handy (and it loads much faster) Cheers Ken From: Gavin Wilby [mailto:gavin.wi...@gmail.com] Sent: Thursday, 28 May 2009 8:39 PM To: NT System Admin

CISCO ASA message?

2009-05-28 Thread David W. McSpadden
Anyone have a CISCO ASA? I am getting this in the syslogs from it: AAA user authentication Rejected : reason = AAA failure : server = 10.0.50.205 : user = user How can I tell where this is being originated? 10.0.50.205 is my DC and there is no user called user? ~ Finally, powerful endpoint

Re: CISCO ASA message?

2009-05-28 Thread Jon Harris
Look at the *%^*^*_^ Cisco ASA device, for me it was a local user to the ASA that was getting rejected. I had the turn off AAA to get mine to work. Jon On Thu, May 28, 2009 at 8:11 AM, David W. McSpadden dav...@imcu.org wrote: Anyone have a CISCO ASA? I am getting this in the syslogs from

RE: CISCO ASA message?

2009-05-28 Thread Richard Stovall
Do you have any service using RADIUS? Is IAS installed on the DC? This could be a legit denial of an unauthorized connection attempt. From: David W. McSpadden [mailto:dav...@imcu.org] Sent: Thursday, May 28, 2009 8:11 AM To: NT System Admin Issues Subject: CISCO ASA message? Anyone have

Re: CISCO ASA message?

2009-05-28 Thread Jon Harris
Sorry, yesterday was a long day the Cisco engineer was very good but this machine is just driving me nuts. I made what I thought as a simple change and lost my VPN and had to put it back the way it was. Jon On Thu, May 28, 2009 at 8:14 AM, Jon Harris jk.har...@gmail.com wrote: Look at the

Re: CISCO ASA message?

2009-05-28 Thread David W. McSpadden
Yes I do. I think it is a valid denial but I just started seeing them two days ago. About 6500 of them all different users. Just wondering how they are getting past the ASA to the DC... - Original Message - From: Richard Stovall To: NT System Admin Issues Sent: Thursday, May

RE: CISCO ASA message?

2009-05-28 Thread Richard Stovall
Well, if you're using RADIUS to authenticate against AD, then probably all the requests are going to the DC unless you've got some local users on the ASA. Do you see corresponding failure entries in the Security and IAS logs? You might be able to get a lot from the IAS log, including ip

Re: Another free Microsoft Press E-Book

2009-05-28 Thread Steve Ens
Mitch Tulloch...from Winnipeg. On Wed, May 27, 2009 at 10:02 PM, Webster webs...@carlwebster.com wrote: From The Thin List (again): Understanding Microsoft Virtualization Solutions http://csna01.libredigital.com/?urmvs17u33 Webster ~ Finally, powerful endpoint security

RE: VISTA SP2

2009-05-28 Thread Steven M. Caesare
Test WMS server ok after 24 hrs... -sc -Original Message- From: Eric Wittersheim eric.wittersh...@gmail.com Sent: Wednesday, May 27, 2009 1:50 PM To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Subject: Re: VISTA SP2 I installed it on a a laptop and a desktop at home

RE: VISTA SP2

2009-05-28 Thread Roger Wright
Installed Vista SP2 last night on one of my home boxes. Installation took about 30 minutes, and the PC now boots more quickly and applications (Outlook, Solitaire, Firefox) seem to load faster, too. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ -Original

RE: VISTA SP2

2009-05-28 Thread Terry Dickson
We have Vista SP2 installed on two Machines at the office. So far no issues, one is my assistant's and he generally has 40-50 IE windows open as well many other programs. He says he has had zero problems , of course he is running 64-bit. I am planning on expanding our test PC's over the

RE: VISTA SP2

2009-05-28 Thread Jacob
No issues with Vista SP2 on my laptop. Outlook runs 1000 times betters with Office 2007 SP2 -Original Message- From: Roger Wright [mailto:rwri...@evatone.com] Sent: Thursday, May 28, 2009 7:02 AM To: NT System Admin Issues Subject: RE: VISTA SP2 Installed Vista SP2 last night on one of

Log On as a Service question

2009-05-28 Thread Joe Heaton
I have two local accounts that have been granted the Log On as a Service permission, within a GPO. This is causing Event ID 1202 errors, from SceCli. The main description is as follows: Security policies were propagated with warning. 0x534 : No mapping between account names and security IDs

RE: Log On as a Service question

2009-05-28 Thread Richard Stovall
Is it a local policy? -Original Message- From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Thursday, May 28, 2009 10:48 AM To: NT System Admin Issues Subject: Log On as a Service question I have two local accounts that have been granted the Log On as a Service permission, within a

Re: Log On as a Service question

2009-05-28 Thread James Rankin
I usually add a specific GPO for servers that need local accounts with special user rights, in a separate OU. The only ones I have that do this are Citrix servers which have some queer local accounts that need to have some rights on the system. 2009/5/28 Joe Heaton jhea...@etp.ca.gov I have two

Re: Log On as a Service question

2009-05-28 Thread Joe Heaton
That's exactly the case here. One of the accounts is the Ctx_SmaUser account, the other is a Websense account. For some reason, local policies on the servers here are set by a domain GPO. This is what is causing the issue, because the domain GPO can't map a local account to a SID... So is

RE: Another free Microsoft Press E-Book

2009-05-28 Thread Jim Mediger
And another... Introducing Microsoft SQL Server 2008 by Peter DeBetta, Greg Low, and Mark Whitehorn http://csna01.libredigital.com/?urss1q2we6 [cid:image001.png@01C9DF7C.79445570] From: Steve Ens [mailto:stevey...@gmail.com] Sent: Thursday, May 28, 2009 8:55 AM To: NT System Admin Issues

RE: Another free Microsoft Press E-Book

2009-05-28 Thread Erik Goldoff
thanks for the heads up(s) folks ... valuable resource, and free is good ! Erik Goldoff IT Consultant Systems, Networks, Security _ From: Jim Mediger [mailto:j...@holaday.com] Sent: Thursday, May 28, 2009 11:10 AM To: NT System Admin Issues Subject: RE: Another free

Re: Another free Microsoft Press E-Book

2009-05-28 Thread Micheal Espinola Jr
TVK could teach you, but he'd have to charge. -- ME2 On Thu, May 28, 2009 at 11:33 AM, Erik Goldoff egold...@gmail.com wrote: thanks for the heads up(s) folks ... valuable resource, and free is good ! Erik Goldoff *IT Consultant* *Systems, Networks, Security *

RE: Another free Microsoft Press E-Book

2009-05-28 Thread Erik Goldoff
I'm too poor to even pay attention, so free will have to do for now ! grin Erik Goldoff IT Consultant Systems, Networks, Security _ From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: Thursday, May 28, 2009 11:44 AM To: NT System Admin Issues Subject: Re:

Group Policy Problem - I've lost all my hair

2009-05-28 Thread Owens, Michael
All- I seem to have a problem with GPO replication. I think. I am not really sure what the problem is - it just confuses me at this point. Here is the deal. I have a 7 server TS farm. They all run server 2008 64 bit edition, but I believe the problem is something with our DCs. Our domain is

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Mayo, Bill
If a policy applied at the OU level is not affecting all the computers in the OU, the first thing I would suspect is that security filtering is in place. Have you confirmed that the Security Filtering section shows Authenticated Users having (read) permissions to the policy? You may have to go

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Richard Stovall
What do you see in the app logs of the problem machines when you run gpupdate /force on them? Can you browse to \\domaindns.name\SYSVOL\domaindnas.name\Policies file:///\\domaindns.name\SYSVOL\domaindnas.name\Policies from the 02-07? From: Owens, Michael

RE: VISTA SP2

2009-05-28 Thread Sam Cayze
List of what's included: http://technet.microsoft.com/en-us/library/dd335036.aspx Found this one interesting: SP2 removes the limit of 10 half open outbound TCP connections. By default, SP2 has no limit on the number of half open outbound TCP connections. Sam ~ Finally, powerful endpoint

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Owens, Michael
The only security filter I have in place is tied to a security group that the account (lab rat) is a member of. Should I specify the servers in there as well? The server that works is not a member of that security group. From: Mayo, Bill

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Tom Miller
Your additional license server role and perhaps other roles/installed options may allow certain AD traffic that is otherwise blocked. You can test this by enabling file and print services as well as network browsing on one of your afflicted terminal servers. Richard Stovall

Re: Boot.ini / software RAID, need to fix.

2009-05-28 Thread Gavin Wilby
Since this is a HP, thats really not an issue. But I think that partition is stopping the mirror from happening cleanly - you cant boot off the 2nd disk, but before I remove it, and as I have no recourse if it goes wrong I want to be dead sure itll be OK. On Thu, May 28, 2009 at 12:59 PM, Ken

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Owens, Michael
No errors on the app log when I run GP update, and yes I can navigate out to the policies folder. From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, May 28, 2009 12:11 PM To: NT System Admin Issues Subject: RE: Group Policy Problem -

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Mayo, Bill
If the servers/computers are not included in the security filtering, then the policy will not affect them. Whether or not this is a problem has to do with the policies invoked within the GPO. If all the policy items are user configuration items, then it will make no difference. If there are

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Richard Stovall
So it looks like DNS and share permissions are probably OK. Do you get a happy scecli 1704 event Security policy in the Group policy objects has been applied successfully after gpupdate? What type of settings are in the GPO? User and Computer? You could always try enabling some innocuous

Amusing

2009-05-28 Thread Owens, Michael
Amusing user dunce moment: We just had a user (one of the higher ups, obviously since not everyone has access to do this) send a 9 meg file to all users. (3000) Hilarity ensues. This message, and any response to it, may constitute a public record and thus may

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Richard Stovall
One last wild shot in the dark... Can these servers ping the DCs? I saw a pretty large environment one time (several thousand nodes) where Group Policy didn't work because the network team had prohibited ICMP on all the switches and routers because of Welchia. They didn't disable slow link

RE: Amusing

2009-05-28 Thread Sam Cayze
Probably a vid that was already on YouTube! Thank god for Single Instance Storage From: Owens, Michael [mailto:michael.ow...@dys.ohio.gov] Sent: Thursday, May 28, 2009 12:20 PM To: NT System Admin Issues Subject: Amusing Amusing user dunce moment: We just

RE: Amusing

2009-05-28 Thread Owens, Michael
Haha, they dont have it set up here, I am a consultant just brought on... and the exchange server was slowed to a halt... From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Thursday, May 28, 2009 1:24 PM To: NT System Admin Issues Subject: RE: Amusing

Re: Amusing

2009-05-28 Thread Micheal Espinola Jr
be mindful of your sending address. -- ME2 On Thu, May 28, 2009 at 1:33 PM, Owens, Michael michael.ow...@dys.ohio.govwrote: Haha, they dont have it set up here, I am a consultant just brought on... and the exchange server was slowed to a halt... -- *From:*

RE: Amusing

2009-05-28 Thread Erik Goldoff
thank goodness for SIS ! Erik Goldoff IT Consultant Systems, Networks, Security _ From: Owens, Michael [mailto:michael.ow...@dys.ohio.gov] Sent: Thursday, May 28, 2009 1:20 PM To: NT System Admin Issues Subject: Amusing Amusing user dunce moment: We just had a user

RE: Amusing

2009-05-28 Thread Brian Desmond
That shouldn't have happened ... You have bigger problems than a single attachment. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: Owens, Michael

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Owens, Michael
Give me a minute I am trying all these things. Thanks for the help guys. :) From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, May 28, 2009 1:22 PM To: NT System Admin Issues Subject: RE: Group Policy Problem - I've lost all my hair

RE: Amusing

2009-05-28 Thread Owens, Michael
I really wish I knew more about exchange, I am a citrix admin through and through I used exchange once! :) From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Thursday, May 28, 2009 1:54 PM To: NT System Admin Issues Subject: RE: Amusing That shouldn't

RE: Wan optimizer

2009-05-28 Thread Malcolm Reitz
We use Riverbed appliances all over our WAN. They can't accelerate everything, but they do a great job with what they can work with. -Malcolm From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Tuesday, May 26, 2009 11:49 AM To: NT System Admin Issues Subject: Wan optimizer I've seen

Re: Amusing

2009-05-28 Thread Sean Martin
So I take it you weren't brought on as an Exchange Consultantjust happen to be there during this particular incident? - Sean On Thu, May 28, 2009 at 10:01 AM, Owens, Michael michael.ow...@dys.ohio.gov wrote: I really wish I knew more about exchange, I am a citrix admin through and

RE: Amusing

2009-05-28 Thread Erik Goldoff
Well, unless they have exchange, swap files, logging, and message stores all on one drive and ran out of drive space, then you shouldn't have had a major performance slowdown ... unless that 9meg file included a worm ... and I thought SIS was enabled by default ... but I could be wrong Erik

RE: Amusing

2009-05-28 Thread Owens, Michael
Yeah. :) From: Sean Martin [mailto:seanmarti...@gmail.com] Sent: Thursday, May 28, 2009 2:21 PM To: NT System Admin Issues Subject: Re: Amusing So I take it you weren't brought on as an Exchange Consultantjust happen to be there during this particular

RE: Amusing

2009-05-28 Thread David Lum
SIS means that while he sent that 9MB file to 3000 users, if all 3000 are on the same Exchange server then there's only 9MB storednow, if say, 450 of them decide to open the file or download the file to their desktop around the same time, you might have an issue David Lum // SYSTEMS

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Owens, Michael
Everyones answers: Richard: 1. All servers can ping all DCs. 2. I do get a 1704 applied succesfully event. 3. It does host both computers, and user policies. I was thinking about redoing the policies after something Bill told me, sometimes they arent so happy. Bill: 1. I am not sure where to

RE: Amusing

2009-05-28 Thread Erik Goldoff
I thought that even if you open an attachment locally, SIS integrity is maintained, and a copy is created in your local temp folder structure ( had a security issue once with sensitive documents persisting in the temp folders ) from a pointer to the original single instance ( unless you're just

RE: Amusing

2009-05-28 Thread Owens, Michael
Thats a lot of files! That's what I gathered from Google, but when I asked the exchange guy here if they have it enabled, he said that it didn't work because of their backups. I immediately shut up because I have no idea what I am talking about. haha From:

RE: Amusing

2009-05-28 Thread Brumbaugh, Luke
Thinking he is probably a large wan with slow connections and un-cached clients. I bet the network is crawling in general. It is ohio.gov. From: David Lum [mailto:david@nwea.org] Sent: Thursday, May 28, 2009 2:37 PM To: NT System Admin Issues Subject: RE: Amusing SIS means that while he

RE: Log On as a Service question

2009-05-28 Thread Free, Bob
The operative question is does it work? Is the particular account granted the logon right if you test it? The warning makes perfect sense and your research is correct. I believe I tried this years ago and as long as the local account names were the same it still worked. -Original

RE: Amusing

2009-05-28 Thread Sam Cayze
Also assuming there are no mailbox level backups... that would break SIS's beauty. From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Thursday, May 28, 2009 1:41 PM To: NT System Admin Issues Subject: RE: Amusing I thought that even if you open an

RE: Amusing

2009-05-28 Thread Brian Desmond
Almost. SIS is per database. So if you had those 3,000 users in one mailbox store then it's roughly only 9MB stored, however if you had them say in 3 mailbox databases, then it's roughly 27MB and so forth. Note that SIS is gone in Exchange Server 2010. Also take into account cached mode which

RE: Amusing

2009-05-28 Thread Brian Desmond
SIS is purely on the server. The temp instance is client-side as a function of Outlook. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Thursday, May 28, 2009 1:41 PM To: NT System Admin Issues Subject: RE: Amusing I thought

RE: Amusing

2009-05-28 Thread Erik Goldoff
now that rings a bell ... I seem to remember that using bricks level backup from Arcserve against Exchange 5.5 a few years back *did* break SIS ... but with deleted item retention, no real reason to use bricks level ( mailbox by mailbox, message by message, instead of entire info store at

RE: Amusing

2009-05-28 Thread Erik Goldoff
wow, get outta my head grin ... just commented on bricks level before seeing your intelligent comment ! Erik Goldoff IT Consultant Systems, Networks, Security _ From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Thursday, May 28, 2009 2:44 PM To: NT System Admin Issues

RE: Amusing

2009-05-28 Thread Brian Desmond
I'm not aware of a way to disable SIS... Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: Owens, Michael [mailto:michael.ow...@dys.ohio.gov] Sent:

RE: Amusing

2009-05-28 Thread Owens, Michael
I started a war. I just thought sending a 9 meg file to 3000 people was funny. :) From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Thursday, May 28, 2009 2:51 PM To: NT System Admin Issues Subject: RE: Amusing SIS is purely on the server. The temp

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Owens, Michael
I had disabled inheritance on that OU, so the OUs further down the tree should not grab any other policies either, correct? should loopback be enabled or disabled on THIS policy? From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Thursday, May 28, 2009

RE: Amusing

2009-05-28 Thread Erik Goldoff
seems we're saying the same thing different ways ... I agree Erik Goldoff IT Consultant Systems, Networks, Security _ From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Thursday, May 28, 2009 2:51 PM To: NT System Admin Issues Subject: RE: Amusing SIS is purely on

DFS file locking

2009-05-28 Thread John Aldrich
Is DFS smart enough to prevent two people from opening the same file on two (or more) replication partners at the same time? John-AldrichTile-Tools ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/

RE: DFS file locking

2009-05-28 Thread Carl Houseman
Nope. Last one to save wins. Carl From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Thursday, May 28, 2009 2:58 PM To: NT System Admin Issues Subject: DFS file locking Is DFS smart enough to prevent two people from opening the same file on two (or more) replication

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Mayo, Bill
I was basically trying to restate what I had mentioned before. I will try it in a different way, and I apologize if I am just telling you what you already know. For a policy to apply, there are several factors involved. The first thing is that the GPO has to be applied at a level that affects

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Webster
Loopback is almost, always implemented in either REPLACE (the majority of cases) or Merge mode for Terminal Servers and XenApp servers. I just wrote an article on locking down (aka managing) a TS and or XA server. http://www.dabcc.com/article.aspx?id=10745 Webster From: Owens,

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Mayo, Bill
If you have blocked inheritance at that OU, then it shouldn't receive any polices above that OU level. You use loopback processing when you want the same *user* policies to apply to a computer, regardless of who logs on. Say for example you have a logon script applied via GPO to some of your

RE: Amusing

2009-05-28 Thread Webster
From: Brian Desmond [mailto:br...@briandesmond.com] Subject: RE: Amusing Also take into account cached mode which is Outlook 2003 and newer behavior (unless you turn it off) which would mitigate your scenario of 450 users opening the attachment. Even then so, it shouldn't take down a server.

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Owens, Michael
What if I want to make domain administrators (or anouther security group) able to log on without group policy restictions? From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Thursday, May 28, 2009 3:32 PM To: NT System Admin Issues Subject: RE: Group Policy

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Webster
From: Owens, Michael [mailto:michael.ow...@dys.ohio.gov] Subject: RE: Group Policy Problem - I've lost all my hair What if I want to make domain administrators (or anouther security group) able to log on without group policy restictions? Deny them the right to Apply the Group Policy. 4th

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Mayo, Bill
You can use Security Filtering to put an explicit DENY on the GPO that sets the restriction. You would have to do this under the Delegation tab. From: Owens, Michael [mailto:michael.ow...@dys.ohio.gov] Sent: Thursday, May 28, 2009 3:45 PM To: NT System Admin

RE: Amusing

2009-05-28 Thread John Hornbuckle
How does Ex 2010 work regarding SIS? If it doesn't use it, does it use some similar technology? Or would the OP's 9 MB file now take 3000x9 MB of space? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347

Blocking unwanted apple software

2009-05-28 Thread Linda C Jones
I'd like to make it impossible for users to install Safari and Bonjour. Has anyone done this? Linda ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

RE: Amusing

2009-05-28 Thread Brian Desmond
3000x9 Disks are cheap, Exchange 2010 is designed to run RAID-less on large SATA (e.g. 1TB) drives. 1 database per SATA drive - TX logs DB on the same volume. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft

My MX is acting funny

2009-05-28 Thread David W. McSpadden
I am getting funny responses from people. Such as: The following recipient(s) could not be reached: 3177141...@txt.att.net Error Type: SMTP Remote server (66.102.165.114) issued an error. hMailServer sent: Remote server replied: 421 Service not available Tried 5 time(s)

RE: Amusing

2009-05-28 Thread John Hornbuckle
I'll have to ponder that one a bit. Not sure I like it. Disks may be cheap, but eliminating SIS would cause storage requirements to increase by an order of magnitude. The OP's situation is a prime example... Suddenly a 9 MB storage requirement becomes 2.7 GB storage requirement (if my math is

RE: Blocking unwanted apple software

2009-05-28 Thread Sam Cayze
Software Restriction Policies in Group Policy. Also make custom installs of iTunes that do not include Bonjour, Quicktime. Instead, install QuickTime Alternative. (Because I think iTunes does require some version of Quicktime or the install fails). -Original Message- From: Linda C

RE: DFS file locking

2009-05-28 Thread John Aldrich
Damn! That's crazy! Any 3rd-party solution available for something like this? John-AldrichTile-Tools From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Thursday, May 28, 2009 3:12 PM To: NT System Admin Issues Subject: RE: DFS file locking Nope. Last one to save wins. Carl

RE: Blocking unwanted apple software

2009-05-28 Thread Richard Stovall
Using software restriction policies would allow you to do it 'for free' in a Microsoft environment. There are also lots of 3rd party apps out there to do stuff like this. http://support.microsoft.com/kb/324036 I'll leave it to others to question the motivation/wisdom of targeting only Apple

RE: Amusing

2009-05-28 Thread Joe Tinney
26+ GB L From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] Sent: Thursday, May 28, 2009 4:12 PM To: NT System Admin Issues Subject: RE: Amusing I'll have to ponder that one a bit. Not sure I like it. Disks may be cheap, but eliminating SIS would cause storage requirements to

RE: Amusing

2009-05-28 Thread Ralph Smith
Also, what about backing up exchange - if one person does something like that every day, suddenly you need to buy new backup devices and your backup window increases dramatically. From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] Sent:

RE: My MX is acting funny

2009-05-28 Thread Richard Stovall
Have you been blacklisted? http://www.mxtoolbox.com/blacklists.aspx From: David W. McSpadden [mailto:dav...@imcu.org] Sent: Thursday, May 28, 2009 4:13 PM To: NT System Admin Issues Subject: My MX is acting funny I am getting funny responses from people. Such as: The following

RE: My MX is acting funny

2009-05-28 Thread Richard Stovall
Yup. From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, May 28, 2009 4:19 PM To: NT System Admin Issues Subject: RE: My MX is acting funny Have you been blacklisted? http://www.mxtoolbox.com/blacklists.aspx From: David W. McSpadden

Re: My MX is acting funny

2009-05-28 Thread David W. McSpadden
Not as of an hour ago. - Original Message - From: Richard Stovall To: NT System Admin Issues Sent: Thursday, May 28, 2009 4:18 PM Subject: RE: My MX is acting funny Have you been blacklisted? http://www.mxtoolbox.com/blacklists.aspx From: David W. McSpadden

RE: Group Policy Problem - I've lost all my hair

2009-05-28 Thread Free, Bob
Don't check the apply policy setting in the filter. For my Citrix GPOs I have a specified group that gets the user policies, is used in machine policies to allow logon etc. The pertinent part of the filter looks like this- Domain Admins: Custom: Edit settings, Delete, Modify security Citrix

RE: Amusing

2009-05-28 Thread Adam Meixler
Wow! SATA maybe cheap but this means I have to scrap my existing mail servers. and I'm pretty sure the new one's won't be HPs as the cost of 2.5 drives is ridiculous. From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Thursday, May 28, 2009 4:10 PM To: NT System Admin Issues Subject:

Re: Blocking unwanted apple software

2009-05-28 Thread Linda C Jones
Don't worry. Not ONLY apple products. Just that these catch users unaware. Linda Richard Stovall wrote: Using software restriction policies would allow you to do it 'for free' in a Microsoft environment. There are also lots of 3rd party apps out there to do stuff like this.

RE: Log On as a Service question

2009-05-28 Thread Joe Heaton
yes, the accounts are able to do what they need to do. However, because the rights are being assigned to local policy, through GPO, these local accounts are being applied to other servers. i.e. srv1\Ctx_Smauser is being assigned to srv2, srv3, etc. Since there's no mapping to a domain SID,

Re: Amusing

2009-05-28 Thread RichardMcClary
Well, apparently it didn't shut you down. Perhaps this is how that higher-up user ended up in a domain containing the string dys gov? -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 richardmccl...@aspca.org P:

Re: Log On as a Service question

2009-05-28 Thread Sean Martin
It may be off the subject a bit, but doesn't Citrix Best Practices include disabling those accounts that are created automatically? I'm going off my less-than-reliable memory, but that error and account name seem familiar to me. From what I recall, the account(s) weren't used and could simply be

IIS 6.0 Update list

2009-05-28 Thread Jim Majorowicz
Where can I find a list of updates that may have affected IIS 6.0 and determine if and when they were applied to specific server? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

RE: DFS file locking

2009-05-28 Thread Tim Evans
Not really, replicating file locks all over the place is a difficult problem, especially if there are hi latency WANs involved. You are looking for a WAFS (Wide Area File System). There are several products out there, just google them. I don't have any experience to recommend for or against any

RE: Amusing

2009-05-28 Thread Alverson, Tom (Xetron)
Cached mode actually makes the problem worse. Much worse. Once the message is sent, every single client that is running will see the new email within about 30 seconds and they will all download a separate copy of it to store in their local caches. If the Exchange server is on a WAN link, that

RE: Amusing

2009-05-28 Thread Brian Desmond
The OP's requirement is not the norm. The perf improvements that were achieved by cutting this feature (which was conceived when say a 9GB SCSI drive cost a lot of money) far outweighs the storage requirement. Go in perfmon on your Exchange server and go under MSExchangeIS Private/Public or

RE: Amusing

2009-05-28 Thread Brian Desmond
I would expect those prices will continue to fall as the technology (2.5 drives) continues to mature. I don't really know what the pricing looks like for retail, but, remember that the SATA drive that comes from HP/Dell in a server is (hopefully) not the same drive that you buy for $89 on

RE: Amusing

2009-05-28 Thread Brian Desmond
Well yet another design that you can do with Exchange 2010 is potentially not run backups (depending on regulatory risk requirements and all that). You can lag replicas such that you have versions which are X days old so I could have two copies of each database which are current and then have

RE: Amusing

2009-05-28 Thread Brian Desmond
3,000 users going across a slow WAN link for Exchange is a pretty poor design decision so hopefully that's not realistic. My note was more about the server (specifically I/O) than network. If 3,000 users all come after the same data in a short time window it's going to be in the cache which

Re: IIS 6.0 Update list

2009-05-28 Thread Ben Scott
On Thu, May 28, 2009 at 5:11 PM, Jim Majorowicz jmajorow...@gmail.com wrote: Where can I find a list of updates that may have affected IIS 6.0 and determine if and when they were applied to specific server? MBSA seems to be the best thing for analyzing what updates have been installed, and

Re: Amusing

2009-05-28 Thread Ben Scott
On Thu, May 28, 2009 at 5:37 PM, Brian Desmond br...@briandesmond.com wrote: The OP’s requirement is not the norm. Who says it isn't the norm? I've seen countless cases where people mail the same file to tens or even hundreds of people all the time. The perf improvements that were achieved

Re: Amusing

2009-05-28 Thread Ben Scott
On Thu, May 28, 2009 at 5:41 PM, Brian Desmond br...@briandesmond.com wrote: ... remember that the SATA drive that comes from HP/Dell in a server is (hopefully) not the same drive that you buy for $89 on NewEgg. The main reason SATA drives are cheaper than SCSI/SAS is that they're produced in

Re: Amusing

2009-05-28 Thread Ben Scott
On Thu, May 28, 2009 at 5:50 PM, Brian Desmond br...@briandesmond.com wrote: If 3,000 users all come after the same data in a short time window it’s going to be in the cache which means it’s served out of memory (not disk). RAM is way faster than disk. Except that, from what you're saying,

  1   2   >