RE: Windows 7 and multiple logins

2010-01-14 Thread James Hill
Nice one. Never noticed that tab before. Thank you! From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Thursday, 14 January 2010 3:46 PM To: NT System Admin Issues Subject: RE: Windows 7 and multiple logins Task Manager - Users - Logoff? I'm sure there are other ways to do so as well.

RE: Users Setting NTFS Permissions

2010-01-14 Thread Ken Schaefer
Because there is plenty of information within an organisation that shouldn't necessarily be accessible to everyone in the organisation. Everything from HR information, payroll information, accounting information, IT information... If users are mistakenly sharing out information to Everyone

Re: Users Setting NTFS Permissions

2010-01-14 Thread James Rankin
It's to stop casual clickers setting access rights on folders and sharing them out with people they shouldn't accidentally, in my case. It could be resolved via training, but at least I know with my approach that they can't do it if they decide to disregard their training and mess about anyway.

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Ames Matthew B
I had to do this a while ago, and what I did was run a Backup against the files, and then restore them removing the ACL. This was on xp though. From: N Parr [mailto:npar...@mortonind.com] Sent: 13 January 2010 19:28 To: NT System Admin Issues Subject: Taking

Re: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread James Rankin
Have you tried using subinacl? 2010/1/13 N Parr npar...@mortonind.com I've never had issues with this before but this one has me stumped. I have a drive out of a users vista pc that died. In the past I've been able to take ownership of the users or Doc/settings dir and get the files copied

Fwd: Get a Second Shot at Certification and Advance Your Career

2010-01-14 Thread Andrew Levicki
Hi all, not sure if you've seen this, but the Microsoft Second Shot campaign is back for 6 months. http://click.bsftransmit1.com/ClickThru.aspx?pubids=080%7c7433%7c6567093digest=UPoI4mRjsqAQFILe0l0ecA Second Shot provides a free retake when you fail your first attempt at an IT Pro or

RE: Print Servers

2010-01-14 Thread tony patton
That's why we have 2 print servers on each site, they haven't been fully configured properly yet, the main site uses a dns alias, but if someone maps a printer using the find option they connect straight to the server. Haven't gotten round to spending the time to research publishing printers

RE: Print Servers

2010-01-14 Thread Ken Schaefer
You can manually create a printQueue object under a fake computer object in AD. This enables users to search for and add printers. Disable the printer pruning thread that runs on the PDCe, otherwise the published object will be removed because it can't be contacted Cheers Ken -Original

Re: RRAS for PPTP VPN access on SBS 2003 R2

2010-01-14 Thread Chipshead
Interesting. I have a W2K3 STD server that is doing the exact same thing. I haven't gotten back to it yet but if anyone has suggestions post them up! - Original Message - From: Neil Standley neil @net-venture.com To: NT System Admin Issues ntsysadmin @ lyris .sunbelt-software.com

Re: Users Setting NTFS Permissions

2010-01-14 Thread Terri Esham
In addition to what has already been said. What happens is someone in the everyone group deletes, modifies, etc., a file they shouldn't and then I spend the day restoring stuff. Plus, when I was using a migration tool to migrate files to another file server, it kept failing because users had

Re: Users Setting NTFS Permissions

2010-01-14 Thread Erik Goldoff
Bill, I've seen firsthand where someone sets their own folder's NTFS persmissions and excludes all the system privleges for admin, backup, etc ... and it doesn't really become known without the time to do constant reviews of the permissions ( not likely ) *OR* when the user has a problem and wants

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread N Parr
not yet, tried the takeown utility in vista and it didn't work. I can get in the the user folder but there are sub folders like my docs that it won't give me access to. From: James Rankin [mailto:kz2...@googlemail.com] Sent: Thursday, January 14, 2010 2:41 AM

Re: Users Setting NTFS Permissions

2010-01-14 Thread Andrew S. Baker
What share rights do your users have? If your users have share rights of CHANGE and only administrators have share rights of FULL CONTROL, this problem should be averted, as the combination of file share perms would prevent the problem being addressed here. *ASB *(My XeeSM Profile)

Re: Users Setting NTFS Permissions

2010-01-14 Thread Andrew S. Baker
+5 *ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker *Providing Competitive Advantage through Effective IT Leadership* On Thu, Jan 14, 2010 at 8:50 AM, Erik Goldoff egold...@gmail.com wrote: Bill, I've seen firsthand where someone sets their own folder's NTFS persmissions and excludes

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Terry Dickson
Not sure why, but I have gotten to users files on remote vista computer if I was domain admin or logged into the computer as local computer admin. I have not had to try to hook that drive up to a local computer and try to access them. I do get told I do not have access but am asked if I

Re: Users Setting NTFS Permissions

2010-01-14 Thread James Rankin
That's an interesting point, I forgot about the cumulative effects of share and NTFS permissions. I always leave the share permissions as Everyone:Full so that everything is controlled by NTFS. It's one less place to look when you are troubleshooting an access issue. I might run some tests on the

Re: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread James Rankin
I've seen some really scragged permissions sets down the years. Sometimes a brute-force combo of subinacl and cacls is the only way to bang them into submission. 2010/1/14 N Parr npar...@mortonind.com not yet, tried the takeown utility in vista and it didn't work. I can get in the the user

Internet Policy

2010-01-14 Thread James Kerr
I know this has been discussed in the past but I'm in the process of making changes to ours so I was interested in a little input from my peers. We have always had a policy of not allowing our desktops, email and Internet connection to be used for personal use at all. That being said we have

RE: Internet Policy

2010-01-14 Thread Richard Stovall
Google for “acceptable use of technology” for lots of hits and policy examples. From: James Kerr [mailto:cluster...@gmail.com] Sent: Thursday, January 14, 2010 9:35 AM To: NT System Admin Issues Subject: Internet Policy I know this has been discussed in the past but I'm in the process of

RE: Print Servers

2010-01-14 Thread Holstrom, Don
I usually add them on request. Remember, we only have less than a hundred users here... -Original Message- From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Thursday, January 14, 2010 12:13 AM To: NT System Admin Issues Subject: RE: Print Servers How do users add new printers?

RE: Internet Policy

2010-01-14 Thread John Aldrich
Sounds reasonable to me. I wish I could enforce a more restrictive policy than we do here, but I really don't have the resources to enforce much of anything. We have people using FaceBook/MySpace and doing online shopping, etc. I've told people numerous times not to download anything, period,

Re: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Jeff Bunting
What about mounting the drive on a *nix system that can read ntfs? It wouldn't respect the ACLs. Jeff On Wed, Jan 13, 2010 at 2:28 PM, N Parr npar...@mortonind.com wrote: I've never had issues with this before but this one has me stumped. I have a drive out of a users vista pc that died.

RE: Internet Policy

2010-01-14 Thread David Mazzaccaro
For web surfing, I've always liked the phrase at management's discretion. Also - I think you hit the nail on the head w/ must not interfere with the performance of work duties and responsibilities. There is no way you can stop users from downloading files (if they need to be able to do their

AD replication question

2010-01-14 Thread Christopher Bodnar
Theoretical question: Say for example you have a site link setup between two sites: Site A === Site B And you've got a DC in each site (Server A and Server B). If you set the schedule of the site link for midnight to noon. Then you go to the replication schedule for the

Re: Internet Policy

2010-01-14 Thread James Kerr
Any sites we dont want them to have access at all are blocked already at the firewall, social networking, game sites, streaming, chat etc. - Original Message - From: John Aldrich To: NT System Admin Issues Sent: Thursday, January 14, 2010 9:41 AM Subject: RE: Internet Policy

RE: Internet Policy

2010-01-14 Thread Steven M. Caesare
Reasonable. To whom? -sc From: James Kerr [mailto:cluster...@gmail.com] Sent: Thursday, January 14, 2010 9:35 AM To: NT System Admin Issues Subject: Internet Policy I know this has been discussed in the past but I'm in the process of making changes to ours so I was interested in a

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread N Parr
Could I have a little help with the subinacl syntax. I thinking this is right if I want to take ownership but I have something wrong. suninacl /subdirectories /setowner=domain\user path From: James Rankin [mailto:kz2...@googlemail.com] Sent: Thursday, January

RE: Internet Policy

2010-01-14 Thread John Aldrich
Why Management and IT Staff, of course. J But obviously, it's going to be at the employee's discretion, and all IT can do, really, is provide examples of what is and is not considered reasonable. Like the proposed wording said .information that might be considered reasonable if read as a text

Re: Users Setting NTFS Permissions

2010-01-14 Thread Andrew S. Baker
Nope, I have long been a proponent of appropriate rights at all levels. Yes, it's one more place to check, but one less reason to need to. http://KB.UltraTech-llc.com/?File=Perms.TXT -ASB: http://XeeSM.com/AndrewBaker On Thu, Jan 14, 2010 at 9:27 AM, James Rankin kz2...@googlemail.com wrote:

Windows 2008 R2 Spec Sheet

2010-01-14 Thread John Bowles
All- Is there a best practices sheet out there that gives you details about how to best setup and config your W2K8R2 DC's? Thank you, John Bowles ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Re: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Jonathan Link
IIRC subinacl /subdirectories drive:\folderpath\*.* /setowner=domain\username On Thu, Jan 14, 2010 at 10:02 AM, N Parr npar...@mortonind.com wrote: Could I have a little help with the subinacl syntax. I thinking this is right if I want to take ownership but I have something wrong. suninacl

Re: AD replication question

2010-01-14 Thread Erik Goldoff
would they never overlap, or would the schedules overlap by exactly one minute twice a day ??? On Thu, Jan 14, 2010 at 9:51 AM, Christopher Bodnar christopher_bod...@glic.com wrote: Theoretical question: Say for example you have a site link setup between two sites: Site A ç===è

RE: AD replication question

2010-01-14 Thread Christopher Bodnar
For this theoretical example, say they never overlap. Chris Bodnar, MCSE Sr. Systems Engineer Infrastructure Service Delivery Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.com Phone: 610-807-6459 Fax:

RE: Internet Policy

2010-01-14 Thread Crawford, Scott
A Power User is an Administrator who hasn't made themselves one yet. Jesper Johannson http://blogs.technet.com/jesper_johansson/archive/2006/03/12/421870.aspx Mark Russinovich http://blogs.technet.com/markrussinovich/archive/2006/05/01/the-power-in -power-users.aspx From: John

RE: Print Servers

2010-01-14 Thread Cameron Cooper
We picked up an IOGear USB Print Server a couple of months ago - http://www.iogear.com/product/GPSU21/ Works great and is cheap. Ordered it through CDW and was able to get some of the price knocked down. _ Cameron Cooper System Administrator | CompTIA A+ Certified

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread N Parr
didn't work, and cacls gives me the cannot find the path specified error Wonder if a bartpe disk would ignore the ACL From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Thursday, January 14, 2010 9:26 AM To: NT System Admin Issues Subject: Re: Taking

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Miller Bonnie L .
Might need to chkdsk the drive. From: N Parr [mailto:npar...@mortonind.com] Sent: Thursday, January 14, 2010 7:47 AM To: NT System Admin Issues Subject: RE: Taking ownership of User Dir on vista hard drive didn't work, and cacls gives me the cannot find the path specified error Wonder if a

RMDIR and Wildcards

2010-01-14 Thread Gavin Wilby
Hi, For one reason or another I have a need to automatically remove certain directories (full or otherwise) from a few windows server systems. As *rmdir path\directory* /S *doesnt appear to work, is there any other way that this can be batched and scheduled? The directories are all called

RE: Users Setting NTFS Permissions

2010-01-14 Thread Miller Bonnie L .
Have you considered removing the security tab via gpo? We use this for students. \User configuration\Administrative Templates\Windows Components\Windows Explorer Remove Security Tab -Bonnie From: James Rankin [mailto:kz2...@googlemail.com] Sent: Thursday, January 14, 2010 6:28 AM To: NT

RE: AD replication question

2010-01-14 Thread Brian Desmond
No repl would happen if I understand the scenario right Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com c - 312.731.3132 From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, January 14, 2010 9:35 AM To: NT System Admin Issues Subject: RE: AD

Re: Users Setting NTFS Permissions

2010-01-14 Thread James Rankin
heheI still do it the hardcore NT4 way - but I use a GPO to achieve it. I clearly need to move into the 21st century. i didn't even know that GP setting existed. Cheers, 2010/1/14 Miller Bonnie L. mille...@mukilteo.wednet.edu Have you considered removing the security tab via gpo? We

RE: RMDIR and Wildcards

2010-01-14 Thread Tim Evans
for %f in (path\directory*) do rd /s %f Add /Q if you're brave and don't want to be prompted for each one ...Tim From: Gavin Wilby [mailto:gavin.wi...@gmail.com] Sent: Thursday, January 14, 2010 8:05 AM To: NT System Admin Issues Subject: RMDIR and Wildcards Hi, For one reason or another I

Re: RMDIR and Wildcards

2010-01-14 Thread Gavin Wilby
Hi Tim, Are you sure that syntax is correct, as it doesnt appear to work here :( Gavin. On Thu, Jan 14, 2010 at 4:25 PM, Tim Evans tev...@sparling.com wrote: for %f in (path\directory*) do rd /s %f Add /Q if you're brave and don't want to be prompted for each one ...Tim *From:*

RE: RMDIR and Wildcards

2010-01-14 Thread Crawford, Scott
You need to throw in a /d if you want to match against directories For /d %f in (path\directory*) do rd /s %f From: Gavin Wilby [mailto:gavin.wi...@gmail.com] Sent: Thursday, January 14, 2010 10:38 AM To: NT System Admin Issues Subject: Re: RMDIR and Wildcards Hi Tim, Are you sure

RE: RMDIR and Wildcards

2010-01-14 Thread Carl Houseman
He meant to say: for /d %f in (path\*) Carl From: Gavin Wilby [mailto:gavin.wi...@gmail.com] Sent: Thursday, January 14, 2010 11:38 AM To: NT System Admin Issues Subject: Re: RMDIR and Wildcards Hi Tim, Are you sure that syntax is correct, as it doesnt appear to work here :(

RE: RMDIR and Wildcards

2010-01-14 Thread Tim Evans
correct, sorry about that. ...Tim From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Thursday, January 14, 2010 8:39 AM To: NT System Admin Issues Subject: RE: RMDIR and Wildcards You need to throw in a /d if you want to match against directories For /d %f in (path\directory*) do rd /s

Stop 0x7b

2010-01-14 Thread David W. McSpadden
How do I boot into a Windows 2000 server that is getting a 0x7b error? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Re: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Jonathan Link
So, the syntax was wrong? Appeared to work but then you couldn't do something you expected to be able to do? Note, after you've taken ownership you still have to apply permissions so you can access the files. On Thu, Jan 14, 2010 at 10:46 AM, N Parr npar...@mortonind.com wrote: didn't work,

RE: Stop 0x7b

2010-01-14 Thread Carl Houseman
http://www.lmgtfy.com/?q=stop+0x7b+windows+2000 Carl From: David W. McSpadden [mailto:dav...@imcu.com] Sent: Thursday, January 14, 2010 11:48 AM To: NT System Admin Issues Subject: Stop 0x7b How do I boot into a Windows 2000 server that is getting a 0x7b error? ~ Finally,

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread N Parr
With the correct syntax it works but fails on the directories I need access to. From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Thursday, January 14, 2010 10:51 AM To: NT System Admin Issues Subject: Re: Taking ownership of User Dir on vista hard

Re: Stop 0x7b

2010-01-14 Thread Phil Brutsche
You may not be able to. STOP 0X007B is one of the INACCESSIBLE_BOOT_DEVICE stop codes. I see it quite frequently on Win2k and WinXP desktops with bad hard drives. Granted other things can cause it (say, the installed OS doesn't have a driver for the storage controller), but if this was once

Re: Stop 0x7b

2010-01-14 Thread Philip Brothwell
Check out http://support.microsoft.com/kb/822052 On Thu, Jan 14, 2010 at 11:48 AM, David W. McSpadden dav...@imcu.comwrote: How do I boot into a Windows 2000 server that is getting a 0x7b error? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: RMDIR and Wildcards

2010-01-14 Thread Gavin Wilby
Thanks boys! Thats perfect - cheers :) On Thu, Jan 14, 2010 at 4:42 PM, Tim Evans tev...@sparling.com wrote: correct, sorry about that. ...Tim *From:* Crawford, Scott [mailto:crawfo...@evangel.edu] *Sent:* Thursday, January 14, 2010 8:39 AM *To:* NT System Admin Issues *Subject:*

Re: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Jonathan Link
Two additional things. Version of subinacl, make sure it's the latest (don't have it and don't recall what it is). Next, and this is my hunch is that you aren't running an elevated command prompt. Even if you're logged on as admin that command prompt will not have sufficient priveleges to

RE: RRAS for PPTP VPN access on SBS 2003 R2

2010-01-14 Thread Neil Standley
We got it working after following the highly technical setup instructions here: http://www.howtonetworking.com/VPN/2003vpn11.htm J Neil From: chipsh...@comcast.net [mailto:chipsh...@comcast.net] Sent: Thursday, January 14, 2010 4:05 AM To: NT System Admin Issues Subject: Re: RRAS for

Re: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread Matt Plahtinsky
Download a copy of knoppix. Its like a bart cd but has *nix on it. It has a very easy to use gui like windows and try copying the files off with that. Should do the trick. I'm on a BB at the moment so don't have the link for it handy but google should get you there. On 1/13/10, N Parr

Backup Exec 12.5 file restore missing a bunch of files

2010-01-14 Thread Charlie Kaiser
File server migration project. Old file server W2K3. New file server W2K8 SP2. Backup server also W2K8 SP2 running BE 12.5. Rather than using robocopy et al, decided to try a backup restore. Backed up current file server \Public folder (Note: not an Exchange PF; just file structure), backup

RE: Backup Exec 12.5 file restore missing a bunch of files

2010-01-14 Thread Michael B. Smith
I would suggest you take ownership over all files, first; and second ensure that you are starting a Windows Explorer with elevated permissions. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Thursday, January 14, 2010 1:01 PM To: NT System Admin Issues

RE: Backup Exec 12.5 file restore missing a bunch of files

2010-01-14 Thread Kennedy, Jim
Does the account running the BE service have the same perms as the account doing the folder right clicking and checking? I think the right clicking account is lacking some perms on the target drive. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent:

Re: Users Setting NTFS Permissions

2010-01-14 Thread Terri Esham
That's perfect. Thanks, Terri Miller Bonnie L. said the following on 1/14/2010 11:08 AM: Have you considered removing the security tab via gpo? We use this for students. \User configuration\Administrative Templates\Windows Components\Windows Explorer Remove Security Tab

Re: Internet Policy

2010-01-14 Thread Jon Harris
Power Users can install software just FYI. Jon On Thu, Jan 14, 2010 at 9:41 AM, John Aldrich jaldr...@blueridgecarpet.comwrote: Sounds reasonable to me. I wish I could enforce a more restrictive policy than we do here, but I really don’t have the resources to enforce much of anything. We

RE: Internet Policy

2010-01-14 Thread Maglinger, Paul
Implement Websense and block the sites that could be problematic to the company (pron, warez, etc). Websense also allows reporting so you know where your employees are surfing and for how long (good for those productivity reviews). From: James Kerr [mailto:cluster...@gmail.com] Sent:

RE: Backup Exec 12.5 file restore missing a bunch of files

2010-01-14 Thread Charlie Kaiser
OK. This is getting stranger... :-) I logged into the server with the local admin account (which I NEVER do) and all the files show up. My own account that I was logging in with is a DA account. I tried adding my account directly to the local administrators group. Still only see half the files.

RE: Backup Exec 12.5 file restore missing a bunch of files

2010-01-14 Thread Michael B. Smith
Creator/owner changes in server 2008. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Thursday, January 14, 2010 1:22 PM To: NT System Admin Issues Subject: RE: Backup Exec 12.5 file restore missing a bunch of files OK. This is getting stranger... :-) I

RE: Backup Exec 12.5 file restore missing a bunch of files

2010-01-14 Thread Kennedy, Jim
What local and domain groups does the local administrator account belong to. Got to be one, or more. -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Thursday, January 14, 2010 1:22 PM To: NT System Admin Issues Subject: RE: Backup Exec 12.5 file restore

RE: Backup Exec 12.5 file restore missing a bunch of files

2010-01-14 Thread Charlie Kaiser
Local admin is member of Local administrators only. Can't be a member of a domain group, can it? *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent:

Re: RRAS for PPTP VPN access on SBS 2003 R2

2010-01-14 Thread Chipshead
Good one! I need a new tinfoil hat. - Original Message - From: Neil Standley n...@net-venture.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thursday, January 14, 2010 12:15:27 PM GMT -05:00 US/Canada Eastern Subject: RE: RRAS for PPTP VPN access on SBS

DCPROMO demotion and DNS

2010-01-14 Thread RichardMcClary
Greetings! Our network and AD structure have been in the process of being moved, renamed, merged, whatevered for the past few weeks. All the workstations and laptops are now a part of the new domain. Next come all servers... Question - We have AD-integrated DNS through our DCs. What

Re: DCPROMO demotion and DNS

2010-01-14 Thread RichardMcClary
Anticipated first question- Windows 2003 standard with AD at Windows 2003 functional level. DCs are NOT R2. All are at SP2. Only one location (for the current AD domain). -- RMc richardmccl...@aspca.org wrote on 01/14/2010 01:23:34 PM: Greetings! Our network and AD structure have

RE: DCPROMO demotion and DNS

2010-01-14 Thread Michael B. Smith
This is a path to problems. I recommend that after you demote a DC, and BEFORE CLICKING THE REBOOT BUTTON, go and remove DNS Server. Reboot. Go clean up DNS on another DC in the same or a covering site ASAP. After you have run all of your demotions, use dcdiag and dnslint and netdiag to

RE: DCPROMO demotion and DNS

2010-01-14 Thread Christopher Bodnar
Your DNS servers will remain DNS servers after you DCPROMO them to remove AD. You will need to uninstall the DNS service from the servers to remove it, if you fee it's necessary. You have a few options available to you depending on how you have restructured your new environment. You can choose to

Re: Internet Policy

2010-01-14 Thread James Kerr
You can bet I already have this in place already. - Original Message - From: Maglinger, Paul To: NT System Admin Issues Sent: Thursday, January 14, 2010 1:16 PM Subject: RE: Internet Policy Implement Websense and block the sites that could be problematic to the company

Re: Users Setting NTFS Permissions

2010-01-14 Thread Kurt Buff
I run a nightly job that reports on file/directory permissions on the file server, and emails me the diff. It uses fileacl.exe and blat.exe. It's really interesting to see what folks do sometimes... Kurt On Thu, Jan 14, 2010 at 05:50, Erik Goldoff egold...@gmail.com wrote: Bill, I've seen

RE: Internet Policy

2010-01-14 Thread Maglinger, Paul
Sounds like you have everything in place. Put it in the policy and enforce it. -Paul From: James Kerr [mailto:cluster...@gmail.com] Sent: Thursday, January 14, 2010 1:34 PM To: NT System Admin Issues Subject: Re: Internet Policy You can bet I already have this in place already.

Re: Internet Policy

2010-01-14 Thread Kurt Buff
Thoughts? Oh, yes... How about default deny, and add in only web sites that are approved? Make the approval process fairly easy, but documentable - get the managers involved in the approval process. That will cut down on most of your problems, right there. On Thu, Jan 14, 2010 at 06:34, James

RE: Taking ownership of User Dir on vista hard drive

2010-01-14 Thread N Parr
Well my guess is something is hosed with the disk that doesn't show up with a scan or the directories I'm trying to get to are encrypted somehow. I can open the directories with Knoppix but it shows them as empty. -Original Message- From: Matt Plahtinsky [mailto:cbusitl...@gmail.com]

Re: Internet Policy

2010-01-14 Thread James Kerr
I wish I could do that but a big chunk of our users need to research stuff for their clients so they have to visit many many different websites. - Original Message - From: Kurt Buff kurt.b...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thursday,

Re: DCPROMO demotion and DNS

2010-01-14 Thread Jon Harris
Down clients could be handled by DHCP as far as the DNS but I would have all of them go through a restart after the changes are made to DHCP just to force things to work. Servers I would put on the new DNS servers before anything else just to get them done but that assumes you are statically

RE: Internet Policy

2010-01-14 Thread James Hill
Agreed. No offence intended but I'm amazed at how many people still allow users to be more than just that, users. I've never allowed it any company I have worked for. There are always ways to work around any picky apps that want higher permissions. From: Jon Harris

RE: Internet Policy

2010-01-14 Thread James Hill
We have done the following in our policy:- Clearly defined that personal use is permitted as long as it does not impact the employees work performance and as long as it does not include any of the following:- * Games * Gambling * Downloading of software *

Re: Internet Policy

2010-01-14 Thread Jon Harris
That is good if you can get management buy in but not always possible. Jon On Thu, Jan 14, 2010 at 3:27 PM, James Hill james.h...@superamart.com.auwrote: Agreed. No offence intended but I’m amazed at how many people still allow users to be more than just that, users. I’ve never allowed

Powershell Question

2010-01-14 Thread Joseph L. Casale
Guys, I have a backup script to have ready for implementation on Saturday morning. It uses rsync to copy on diffs to a remote Linux server over a vpn through a slow link. I finally finished all the server and vpn setup and I had been avoiding how to handle the huge dataset, which would make a

RE: Powershell Question

2010-01-14 Thread Michael B. Smith
is there a particular reason you want to use II? And I'm not completely clear about your quoting requirements, but I'd do something like this: $arrayPaths = Dir/1, Dir/2, Dir/3 -- don't need the initializer since you have the comma operator $options = '--verbose --recursive --blah

re: DCPROMO demotion and DNS

2010-01-14 Thread Juned Shaikh
If you want to have the server to be demoted continue to work as DNS Server, you can get the zone from AD integrated to file based. Other than that if you demote a DC, it will definately stopped doing any function which was integrated as part of its former role. ~ Finally, powerful

RE: Powershell Question

2010-01-14 Thread Joseph L. Casale
is there a particular reason you want to use II? And I'm not completely clear about your quoting requirements, but I'd do something like this: Nope, I actually don't know any better:) cmd.exe /c c:\Program Files\cwRsync\rsync.exe $options $source $dest Having an issue with this, so I amended

Re: Internet Policy

2010-01-14 Thread James Kerr
+1000 Even the top dog at our company is a standard user. My boss is a standard user. Only admins are me and my minion. James - Original Message - From: James Hill To: NT System Admin Issues Sent: Thursday, January 14, 2010 4:21 PM Subject: RE: Internet Policy Sometimes

RE: Powershell Question

2010-01-14 Thread Michael B. Smith
This would be why I said I wasn't clear on your quoting requirements. :-) I know the whole Cygwin thing combined with PowerShell combined with cmd.exe can be a littlestrange. This seems to work, on my system. $arrayPaths = administrator/, administrator.WXP000/, All Users/ $Options =

Local Admin Permissions WAS: RE: Internet Policy

2010-01-14 Thread James Hill
I don't even run my desktop as an admin and I don't allow any of the other IT staff to run as admins either. That's what run-as is for. From: James Kerr [mailto:cluster...@gmail.com] Sent: Friday, 15 January 2010 8:02 AM To: NT System Admin Issues Subject: Re: Internet Policy +1000 Even the

Re: Local Admin Permissions WAS: RE: Internet Policy

2010-01-14 Thread James Kerr
Good idea, never thought of that. - Original Message - From: James Hill To: NT System Admin Issues Sent: Thursday, January 14, 2010 5:05 PM Subject: Local Admin Permissions WAS: RE: Internet Policy I don't even run my desktop as an admin and I don't allow any of the other

RE: Powershell Question

2010-01-14 Thread Joseph L. Casale
This would be why I said I wasn't clear on your quoting requirements. :-) I know the whole Cygwin thing combined with PowerShell combined with cmd.exe can be a littlestrange. This seems to work, on my system. The amount of beer debt I amassing in your favor is getting to be rather large:)

Nefsis Multipoint Video Conferencing

2010-01-14 Thread Roger Wright
Anyone have experience with Nefsis? http://www.nefsis.com Looks like a viable option for multipoint VC without expensive hardware/infrastructure. Roger Wright ___ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/

Powershell regex

2010-01-14 Thread Joseph L. Casale
Is it possible to do more than one regex in the same command? $strLog = [regex]::Replace($path, /$, '') $strLog = [regex]::Replace($strLog, '/', '_') + .log + '' That's looks hideous:) Thanks! jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: Local Admin Permissions WAS: RE: Internet Policy

2010-01-14 Thread Phil Brutsche
At the different clients I work with, no one EVER gets local admin. No exceptions. Not even me. I'm subjected to all the same restrictions as everyone else, including software restrictions polices. James Hill wrote: I don’t even run my desktop as an admin and I don’t allow any of the other IT

Windows 7 and DHCP puzzler

2010-01-14 Thread Eisenberg, Wayne
Has anyone noticed any problems with Windows 7 getting an IP address from DHCP? In our pilot testing, we are noticing that a significant portion (30%) of our users are not successfully getting an IP address from the local DHCP server. It happens with wired and/or wireless, across make and model,

RE: Windows 7 and DHCP puzzler

2010-01-14 Thread James Hill
Haven't seen that issue but any firewall/AV products on the machines? That would be my first suspect. From: Eisenberg, Wayne [mailto:wayne.eisenb...@pbvllc.com] Sent: Friday, 15 January 2010 10:20 AM To: NT System Admin Issues Subject: Windows 7 and DHCP puzzler Has anyone noticed any problems

Re: Windows 7 and DHCP puzzler

2010-01-14 Thread Phil Brutsche
Something similar to this? http://support.microsoft.com/kb/928233/en-us Eisenberg, Wayne wrote: Has anyone noticed any problems with Windows 7 getting an IP address from DHCP? In our pilot testing, we are noticing that a significant portion (30%) of our users are not successfully getting an

RE: Windows 7 and DHCP puzzler

2010-01-14 Thread Clayton Doige
Are all of the Windows 7 boxes built off of the same base image? From: James Hill [mailto:james.h...@superamart.com.au] Sent: 15 January 2010 00:30 To: NT System Admin Issues Subject: RE: Windows 7 and DHCP puzzler Haven't seen that issue but any firewall/AV products on the machines?

RE: Windows 7 and DHCP puzzler

2010-01-14 Thread Alverson, Tom (Xetron)
It could be that the Windows 7 computers boot up faster and the switch you are connecting to is not ready by the time the PC is making its DHCP request. This can happen if you are using Cisco switches that are set up to run a spanning tree test every time a new connection is made to a port.

Re: Windows 7 and DHCP puzzler

2010-01-14 Thread Phil Brutsche
FYI the phenomena you describe is not specific to Cisco switches and will happen with any model of switch from any manufacturer with IEEE spanning trees enabled. However, the fix - setting the port to portfast, which is the Cisco term for setting the switch port to always be in forwarding mode

RE: Windows 7 and DHCP puzzler

2010-01-14 Thread Terry Dickson
I have many Windows 7 Boxes and have yet to see that behavior, but now I will be looking for it. From: Eisenberg, Wayne [wayne.eisenb...@pbvllc.com] Sent: Thursday, January 14, 2010 6:19 PM To: NT System Admin Issues Subject: Windows 7 and DHCP puzzler Has anyone

  1   2   >