If you have not doen the distribution license agreement, then what you are
doing is a violation of the Reader License. Legally, you are required to
sign up for a Distribution License to legally be allowed to distribute and
install the setup files on more than 1 PC. And I just _know_ that all of
I'm trying to install the latest Adobe Reader via Group Policy onto my XP
desktops and, unusually, it is failing. I get the error:-
*The install of application Adobe Reader 9.3 from policy
S_AdobeReader93_CitrixServersXenServersVDIWorkstationsICTWorkstations_0
failed. The error was : The
We have a Windows 2008 Domain whereby we control access to folders
stored on one of the domain controllers through Active Directory
groups. When a new folder is created on the network file server, we
grant full permissions to the associated active directory group with the
exception of the ability
Prevent access to the rshx32.dll file on all your workstations and servers
to Administrators and System only. You can do this with a GPO. The user
can't access the security tab then and can't change permissions. Unless they
know how to use cacls. You could lock the permissions on that file as well
If you select the file in windows explorer, and right click, select properties,
under the general tab, is there an 'Unblock' button
I have come across this problem a number of times where the OS reports the file
is not available, or I don't have permission.
Mike
From: James Rankin
Isn't that just obfuscation? I thought the ability to change permissions
was granted by the Full Control right. If that's the case, pull
Creator/Owner Full control from your file system and reassign permissions
accordingly.
On Wed, Jan 13, 2010 at 7:11 AM, James Rankin kz2...@googlemail.com
Already done that...makes no difference
2010/1/13 Smith, Mike mi...@til.toshiba-global.com
If you select the file in windows explorer, and right click, select
properties, under the general tab, is there an ‘Unblock’ button
I have come across this problem a number of times where the OS
I normally just give the groups RWXD, but the Creator Owner privilege
appears by default on newly created folders. Without removing the ability to
create folders and/or run subinacl scripts to take ownership, I find
removing the GUI to change the permissions is the easiest option.
2010/1/13
I'm trying to run a WMIC command remotely using PSEXEC on a bunch of
servers and getting this:
Please wait while WMIC compiles updated MOF files.
And it just hangs there. If I log on to the remote machine and run the
WMIC command it works fine.
Anyone see this before?
Chris
I can think of two things:
1) Did you replace the existing install location with new files or apply
an upgrade to the installation point? In my experience, if the files
change on the installation point, GP will begin to immediately have
problems installing from there. If you are replacing the
Thanks for the tips. it was a new installation point and I added the Domain
Computers group - all to no avail.
However I just shifted the installation point off the domain controller and
onto a Windows 2003 file server. It now works just fine. Clearly something
has changed on my DCs, probably
That's because the parent folder has creator/owner permissions and any newly
created folder is inheriting the permission from the parent.. In my FS
where I've removed creator/owner from the parentI don't see this behavior.
On Wed, Jan 13, 2010 at 8:20 AM, James Rankin kz2...@googlemail.com
After testing, I concur. I'd removed Creator Owner myself from the higher
folders but didn't know that it was inherited - i thought Windows just
bunged it on any new folder as a default permission.
I stand corrected :-)
2010/1/13 Jonathan Link jonathan.l...@gmail.com
That's because the parent
I've never been able to use WMIC with PSEXEC. Same message/behavior. I
usually use PowerShell's Get-WmiObject (GWMI for short) cmdlet since it
can connect to a remote machine and run WMI queries.
From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: Wednesday, January 13, 2010
This is what we do - we remove Creator/Owner when the server is set up, don't
have to worry about it after that.
Thanks,
James Winzenz
Date: Wed, 13 Jan 2010 08:41:33 -0500
Subject: Re: Users Setting NTFS Permissions
From: jonathan.l...@gmail.com
To:
It’s a practical way to do it. I am in the NE and got my instrument rating
about fifteen years ago. Difficult to do training in crappy weather. Even my
check ride was rescheduled numerous times because of weather. I passed on the
first try and that flight test was even broken into two pieces.
Did he work for the Department of Redundancy Department?
-Original Message-
From: Angus Scott-Fleming [mailto:angu...@geoapps.com]
Sent: Tuesday, January 12, 2010 23:33
To: NT System Admin Issues
Subject: Re: Required Certs = Study Time at Work?
On 12 Jan 2010 at 18:18, Sam Cayze
I'm just east on 64 in Charleston, WV.
I can be there in 2.5 hours. :-)
On Tue, Jan 12, 2010 at 9:31 PM, Bob Fronk b...@btrfronk.com wrote:
Lexington, KY. www.davishelliot.com
No openings at present, but if I have any in the future, I will post to the
list.
-Original Message-
I have to say I agree with Sean's sentiment. They are asking you to achieve
the cert for their benefit, so they can get more business. Expecting you to
shoulder all the responsibility while they reap all the rewards is a bit on
the unfair side. However, playing devil's advocate, I see nothing
How do you remove creator/owner?
Thanks, Terri
James Winzenz said the following on 1/13/2010 9:06 AM:
This is what we do - we remove Creator/Owner when the server is set
up, don't have to worry about it after that.
Thanks,
James Winzenz
Check the ACL at the highest level you want to go, remove Creator/Owner from
the list of security permissions, and ensure that the change propagates down
from the parent
Better idea (if you can, never tried) is to remove it using cacls and the /e
switch I would think
2010/1/13 Terri Esham
Classification: UNCLASSIFIED
Caveats: NONE
I hear banjos...
-Original Message-
From: Bob Fronk [mailto:b...@btrfronk.com]
Sent: Tuesday, January 12, 2010 9:31 PM
To: NT System Admin Issues
Subject: RE: Required Certs = Study Time at Work?
Lexington, KY. www.davishelliot.com
No
OK...learning more new stuff...indeed Creator Owner appears to be applied,
even though it's not on the ACL, because as Terri says the user creating the
folder can indeed modify the permissions (I've just tested on my Windows
2003 file server and can concur). If you look on the Owner tab on the new
Well, this is where it gets complex. In my experience, pulling it from the
parent folder doesn't always set the permissions, especially if the
permissions are different for any child folders, which is common for a user
folder structure. To effectively remove it it you'll need to use cacls or
All,
Someone had a previous posted on the .NET Framework removal tool ( to
totally clear out any reminants of .NET)
Does anyone have the link?
Z
Edward Ziots
Network Engineer
Lifespan Organization
MCSE,MCSA,MCP+I, ME, CCA, Security +, Network +
ezi...@lifespan.org
Can you remotely run the command natively within WMIC? I've seen cases
where DCOM had to be tweaked for WMI over the network.
(/user:[ ] /password:[ ] /node:[machine_name])
From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: Wednesday, January 13, 2010 5:25 AM
To: NT
Try this
http://cid-27e6a35d1a492af7.skydrive.live.com/self.aspx/Blog_Tools/dotnetfx_cleanup_tool.zip
2010/1/13 Ziots, Edward ezi...@lifespan.org
All,
Someone had a previous posted on the .NET Framework removal tool ( to
totally clear out any reminants of .NET)
Does anyone have the
http://blogs.msdn.com/astebner/pages/8904493.aspx
On Wed, Jan 13, 2010 at 11:00 AM, Ziots, Edward ezi...@lifespan.org wrote:
All,
Someone had a previous posted on the .NET Framework removal tool ( to
totally clear out any reminants of .NET)
Does anyone have the link?
Z
Edward
Creator/Owner is inherited and can be removed easily enough. Far easier to
maintain.
Sent from my Verizon Wireless BlackBerry
-Original Message-
From: James Rankin kz2...@googlemail.com
Date: Wed, 13 Jan 2010 13:20:52
To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com
HmmmI've removed it and it is still listing users who have created
folders as the owner. It's definitely not on the ACL...
2010/1/13 asbz...@gmail.com
Creator/Owner is inherited and can be removed easily enough. Far easier to
maintain.
Sent from my Verizon Wireless BlackBerry
.Net Nuke?
(Sorry, long day already.)
From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Wednesday, January 13, 2010 11:00 AM
To: NT System Admin Issues
Subject: .NET Framework Removal tool?
All,
Someone had a previous posted on the .NET Framework removal tool ( to totally
clear out
I'm sorry, I misremembered. I only had to do this once, and it was enough
to always remember to remove the Creator/Owner from every data drive
forevermore.
To take ownership you need subinacl available in one of the resource kits.
Syntax is subinacl /subdirectories drive:\folderpath\*.*
Oh, test to make sure it doesn't alter the ntfs permissiosn too. IT was so
long ago that I used this that I can't remember if I had other issues.
On Wed, Jan 13, 2010 at 11:23 AM, Jonathan Link jonathan.l...@gmail.comwrote:
I'm sorry, I misremembered. I only had to do this once, and it was
What about users who create folders after the permissions are removed?
You have to do it from the very beginning, or manually reset the perms after
the fact as Jonathan has indicated earlier.
There is a special set of rights that are implicitly granted, but the removal
of Creator/Owner should
Yes the command works natively with the /node switch on the WMIC command.
The problem is that this is a domain in a DMZ, and you can't run commands
like this across the network due to firewall rules. The only thing open
across all the different subnets in there is PSEXEC. Makes management a
It behaves exactly the same (for me anyway) after the permissions are
removed - creating user is named as owner on the security tab and has the
appropriate permissions rights to go with it. And after setting the owner
with subinacl. Digging around in all this is making me glad I've set the
The problem is that simply hiding the GUI will not present someone from running
CACLS or ICACLS which are native depending on you version of the OS.
Sure, that requires a level of sophistication, but not that much more than a
standard user. A google search will put you right there.
Sent
Do the users still have full control permission?
On Wed, Jan 13, 2010 at 11:57 AM, James Rankin kz2...@googlemail.comwrote:
It behaves exactly the same (for me anyway) after the permissions are
removed - creating user is named as owner on the security tab and has the
appropriate permissions
I'm well aware of that (I have the cacls, xcacls and other commands locked
out too, even if they bring them on a USB stick the application whitelist
and AppSense will stop them). If any of my users can get past the controls I
have, I'd probably try and get them a job in our department :-) Hiding
My apologies for not following the thread about this but is it true that
there is no longer a direct phone number to MS Support? Say it ain't
so!
Bill Lambert
Windows System Administrator
Concuity
A healthcare division of Trintech, Inc.
Phone 847-941-9206
Fax 847-465-9147
On the folder they've created, it seems so. Not any of the other folders
already there though.
2010/1/13 Jonathan Link jonathan.l...@gmail.com
Do the users still have full control permission?
On Wed, Jan 13, 2010 at 11:57 AM, James Rankin kz2...@googlemail.comwrote:
It behaves exactly the
You'll need to get rid of that permission setting in addition to changing
the owner.
Or not. Your approach is probably enough, too.
On Wed, Jan 13, 2010 at 12:19 PM, James Rankin kz2...@googlemail.comwrote:
On the folder they've created, it seems so. Not any of the other folders
already there
Does anyone know if there is a way to extend the 90 (or 120 or whatever) day
grace period on an app mode TS box before you need to plug-in CAL tokens? It's
a WS08 machine.
Thanks,
Brian Desmond
br...@briandesmond.commailto:br...@briandesmond.com
c - 312.731.3132
~ Finally, powerful
I'm sure someone is running BES 5.01 for Exchange. Could one of you please
check permon and see if there are any Blackberry categories?
Since upgrading to 5.01 I don't see any.
--
Sent using BlackBerry
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~
Cant download it
Where is the download?
Z
Edward Ziots
Network Engineer
Lifespan Organization
MCSE,MCSA,MCP+I, ME, CCA, Security +, Network +
ezi...@lifespan.org
Phone:401-639-3505
From: James Rankin [mailto:kz2...@googlemail.com]
Sent:
Do you get a page with the pretty folder icon? Just click on that icon.
From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Wednesday, January 13, 2010 12:48 PM
To: NT System Admin Issues
Subject: RE: .NET Framework Removal tool?
Cant download it….
Where is the download?
Z
I haven’t set one up in over a year, so I don’t remember the details. The
literature seems to indicate a 120 day grace period to find a license server,
then possibly a 90 day grace period where a new license server will issue
temporary CALs. Is there a license server already?
From: Brian
I got it... Does that work for V3.0 and V3.5?
Z
Edward Ziots
Network Engineer
Lifespan Organization
MCSE,MCSA,MCP+I, ME, CCA, Security +, Network +
ezi...@lifespan.org
Phone:401-639-3505
From: Richard Stovall [mailto:richard.stov...@researchdata.com]
Well good for you, because the only thing better is to hear Angels...
-Original Message-
From: Kent, Larry CTR USA [mailto:larry.k...@us.army.mil]
Sent: Wednesday, January 13, 2010 9:21 AM
To: NT System Admin Issues
Subject: RE: Required Certs = Study Time at Work? (UNCLASSIFIED)
“The .NET Framework cleanup tool supports removing the following products:
* .NET Framework - All Versions
* .NET Framework - All Versions (Tablet PC and Media Center)
* .NET Framework - All Versions (Windows Server 2003)
* .NET Framework - All Versions (Windows Vista and Windows
Sorry. Fired that off too soon. Read the readme.txt file for the various
caveats, etc.
From: Richard Stovall
Sent: Wednesday, January 13, 2010 1:04 PM
To: 'NT System Admin Issues'
Subject: RE: .NET Framework Removal tool?
“The .NET Framework cleanup tool supports removing the following
Answered my own question.
Here is the link that cleans them all up:
http://blogs.msdn.com/astebner/pages/8904493.aspx
Z
Edward Ziots
Network Engineer
Lifespan Organization
MCSE,MCSA,MCP+I, ME, CCA, Security +, Network +
ezi...@lifespan.org
Phone:401-639-3505
-Original Message-
From:
I pay for all my tests, and books and fees, and write it off on my taxes (
Educational Expense)
Z
Edward Ziots
Network Engineer
Lifespan Organization
MCSE,MCSA,MCP+I, ME, CCA, Security +, Network +
ezi...@lifespan.org
Phone:401-639-3505
-Original Message-
From: Kim Longenbaugh
Classification: UNCLASSIFIED
Caveats: FOUO
Just click on the download button (word) ...
From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: Wednesday, January 13, 2010 12:48 PM
To: NT System Admin Issues
Subject: RE: .NET Framework Removal tool?
Cant download it
Where is the
Hi All,
I'm trying to setup RRAS for a customer with SBS2003 R2 and have run
into a problem. Every time we start the RRAS service it takes the
network down and nobody can access the internet until the service is
stopped.
The server is configured to use only 1 of 2 NICs but I don't believe
My first guess would be you are enabling packet filtering. Open up the RRAS
control panel, expand IP Routing, select General. You'll get a list of
interfaces, right click on your adapter (probably called Local Area Connection,
unless you've renamed it) and select Properties. Click on the
I've never had issues with this before but this one has me stumped. I
have a drive out of a users vista pc that died. In the past I've been
able to take ownership of the users or Doc/settings dir and get the
files copied off but for some reason this one won't let me. I can try
to take ownership
Tell that to Ned Beatty...
-Original Message-
From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Wednesday, January 13, 2010 12:02 PM
To: NT System Admin Issues
Subject: RE: Required Certs = Study Time at Work? (UNCLASSIFIED)
Well good for you, because the only thing better
Can anyone recommend inexpensive print servers that do not require
proprietary software. Basically looking for something like a Jetdirect for
USB printers that I can setup standard TCP/IP ports on workstations that
want to print to it. Jet directs are too expensive for this application
We use Lantronix print servers.
-Paul
-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, January 13, 2010 1:59 PM
To: NT System Admin Issues
Subject: Print Servers
Can anyone recommend inexpensive print servers that do not require
proprietary software.
Unfortunately USB-attached HP JetDirects are the only ones I've used
that don't:
a) require software to be installed
b) don't have stupid printer compatibility problems
c) don't have stupid reliability problems
I don't know if eBay is an acceptable source for this situation but you
should be
Yeah, your right, they are going for about $50 on ebay used. I'll get a few
of those then. I know those work well.
Thanks,
James
- Original Message -
From: Phil Brutsche p...@optimumdata.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, January
Old PCs work fine!
James Kerr cluster...@gmail.com wrote on 01/13/2010 01:59:01 PM:
Can anyone recommend inexpensive print servers that do not require
proprietary software. Basically looking for something like a Jetdirect
for
USB printers that I can setup standard TCP/IP ports on
I have over 30 printers here. For the last few I have not run them through a
server, just give them a static IP address. When/if our print server goes down,
I lose all the printers hooked up to that. I can hook up a printer to the
network without the print server, I just have to keep a list for
Netgear has one. I've got one I never even opened sitting in my office...
Not using it because we ended up getting a whole bunch of network printers.
-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, January 13, 2010 2:59 PM
To: NT System Admin Issues
I'm sure it works great when the printer has an ethernet port.
When the printer doesn't have an ethernet port...
Holstrom, Don wrote:
For the last few I have not run them through a server, just give them
a static IP address.
--
Phil Brutsche
p...@optimumdata.com
~ Finally, powerful
I got one of the Netgear ones a few years ago. Simple web interface -
no software needed. I haven't had any problems with it.
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Wednesday, January 13, 2010 3:24 PM
To: NT System Admin Issues
I do have experience with netgear print servers, they require proprietary
software and they are also junktastic.
James
- Original Message -
From: John Aldrich jaldr...@blueridgecarpet.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Sent: Wednesday, January 13,
Go to the CDW.com site and query on Print servers there are a number I have
a couple of DLinks up and running that the customer was happy with. No
software to install. I have a couple of the NetGears as well and they
did not require any software loads either. Both were setup from a web page
and
What the heck are you talking about??? Most of the Netgear stuff I've seen
is simply configured through a web-based GUI. No proprietary software or
anything like that!
-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, January 13, 2010 3:37 PM
To: NT
I got one of these based on generally good reviews, and it was on sale with
free shipping at the time so it only costed $38:
http://www.newegg.com/Product/Product.aspx?Item=N82E16833139009
It has some software, but it is not required. There are instructions in the
manual on how to set it up via
I will say we got one of the Netgear's that came with a software package to
install for doing the configurations but once it was done we never had to
use it after that but we ended up returning the unit or just junking it I
don't remember which and replaced it with another unit that was similar.
They must have changed then. The ones I messed with a few years ago required
a proprietary printer port to work. Good to hear that's not the case
anymore.
- Original Message -
From: John Aldrich jaldr...@blueridgecarpet.com
To: NT System Admin Issues
No filters.
Neil
From: Jackson, Jeff [mailto:jeff.jack...@rbza.com]
Sent: Wednesday, January 13, 2010 11:10 AM
To: NT System Admin Issues
Subject: RE: RRAS for PPTP VPN access on SBS 2003 R2
My first guess would be you are enabling packet filtering. Open up the RRAS
control
On 13 Jan 2010 at 15:44, John Aldrich wrote:
What the heck are you talking about??? Most of the Netgear stuff I've seen
is simply configured through a web-based GUI. No proprietary software or
anything like that!
Ditto for most of the inexpensive consumer-grade units from Linksys and DLink.
What permissions would I need to give someone to a folder on a Win2k3 server
that would allow them to put files in the folder, but not delete them or
modify them?
John-AldrichTile-Tools
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~
My opinion here may be suspect, but I like the Dlink ones. Just be sure that
the printer model is compatible ( long history of fighting with HP Laserjet
1020´s ) ...
- Original Message -
From: James Kerr cluster...@gmail.com
To: NT System Admin Issues
Using what app?
If they're just copying the files via explorer, then this is doable (using
special perms). If you're using an app, especially a Microsoft Office app,
then in some cases it's not possible.
What's driving this need?
Sent from my Verizon Wireless BlackBerry
-Original
You could go into the Advanced setting and edit the permissions for that
user by unchecking Delete.
-Paul
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Wednesday, January 13, 2010 4:08 PM
To: NT System Admin Issues
Subject: Permissions
What permissions would I need to
Ahh. Ok. Thanks. I'll take care of that. J
John-AldrichTile-Tools
From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
Sent: Wednesday, January 13, 2010 5:15 PM
To: NT System Admin Issues
Subject: RE: Permissions
You could go into the Advanced setting and edit the permissions for that
Had a folder full of information disappear A user notified me that the
folder was missing and using Shadow Copy, I went back in time to Dec 30th
and still couldn't find it, so obviously it disappeared before that. I
found it inside another sub-folder in the directory, but I'd like to make
sure
Okay, this is a bit easier, as you want to protect the folder itself,
primarily.
The caveats I mentioned with MSOffice will not apply.
Additionally, the folder was never deleted, it was moved -- due to an
inadvertent drag/drop, no doubt. This is not exactly the same problem as you
I have a loaner Jetdirect 175x I'm going to use and show that it works and
its stable. Then I will buy some for them used from ebay for now. I'm trying
to get a client I'm moonlighting for that has a mess of a network in line.
About 20 PCs. No networked printers, all connected to desktops and
This is off topic but I value your opinion
is anyone using clear.com for your personal Internet access? It is
very enticing based on my options locally but I am first touching up
everyone I can find to get some experienced feedback. Thx.
~ Finally, powerful endpoint security that ISN'T a
You could just throw the printers in the trash and buy some HP OfficeJet
8500 printers on sale for about $80 each. They are cheaper per page
than laser printers (they use large ink tanks - black and 3 color
tanks). They have built in Ethernet (similar to Jet Direct but nicer).
Tom
http://blogs.technet.com/johnbaker/archive/2009/08/29/extending-your-evaluation-activation-grace-period-on-windows-server-2008-and-2008-r2.aspx
On Wed, Jan 13, 2010 at 12:40 PM, Brian Desmond br...@briandesmond.comwrote:
*Does anyone know if there is a way to extend the 90 (or 120 or
I'm curious why you are concerned that an employee empowered to create a
folder in your domain should not be allowed to set access rights to it. Why
disallow them the ability to control access if you as a domain admin can
seize control if need be?
It's not like the everyone group includes anyone
So I was reading the thread about how Windows 7 allows multiple logons on the
same computer(via Switch User). Sure enough I was able to have multiple
sessions logged on at once. Now I believe you can disable Switch Users via GP
but I actually don't mind the feature. What I then wondered was
I work for a consulting company (partly owned by MSFT). We provide 4 weeks
training time per year (which does need to balanced against customer
requirements). All certification tests are free (though there is a bias towards
MSFT certification). We provide a set range of training material free
How do users add new printers? Adding a TCP/IP printer port usually requires
admin rights.
Cheers
Ken
-Original Message-
From: Holstrom, Don [mailto:dholst...@nbm.org]
Sent: Thursday, 14 January 2010 7:21 AM
To: NT System Admin Issues
Subject: RE: Print Servers
I have over 30 printers
Task Manager - Users - Logoff?
I'm sure there are other ways to do so as well.
Cheers
Ken
From: James Hill [mailto:james.h...@superamart.com.au]
Sent: Thursday, 14 January 2010 4:18 PM
To: NT System Admin Issues
Subject: Windows 7 and multiple logins
So I was reading the thread about how
Definetely not true. You call in and as has been the ase for as long as I
remember, a call router answers and figures out what queue to drop you in to.
If you're calling on a pro case (basically one you pay with a credit card or
some other odd ones), it's callback based for almost all queues.
92 matches
Mail list logo
