RE: just who's in charge here (dom controller query)

2010-01-20 Thread Christopher Bodnar
Very true. h:\utilities>nltest /sc_query:ACME Flags: 30 HAS_IP HAS_TIMESERV Trusted DC Name \\SERVERDC5.acme.com Trusted DC Connection Status Status = 0 0x0 NERR_Success The command completed successfully h:\utilities>set log LOGONSERVER=\\SERVERDC2 Chris Bodnar, MCSE Sr. Systems

RE: SAN solutions

2010-01-20 Thread John Aldrich
Wow! I'll have to look into that. Can you email me off-list with the vendor information? Thanks! -Original Message- From: WJH [mailto:nt...@hedgedigger.com] Sent: Tuesday, January 19, 2010 5:39 PM To: NT System Admin Issues Subject: re: SAN solutions Well I'm in the middle of impleme

RE: SAN solutions

2010-01-20 Thread John Aldrich
Disregard. We have neither Fiber Channel nor Macs here in our organization. Wouldn't work well for us as we'd have to buy something to integrate the Mac XSan with the Windows network as well as adding Fiber Channel infrastructure to our network. :-( -Original Message- From: WJH [mail

Re: NET SEND?

2010-01-20 Thread Stephen Wimberly
I had a similar situation; all our workstations involved are still Windows XP and the service is still there, but is disabled by a service pack or security patch or something, I forget the details. In order to allow the old fashioned and insecure "net send" command I created a Group Policy Object

FYI -- Hitachi SMS100

2010-01-20 Thread John Aldrich
Just spoke with the vendor and he is trying to answer some of the questions that have come up regarding the SMS100. One question that I asked him was expandability - how can you expand the storage on the SMS-100; that is, can you add a JBOD or do you have to buy the whole package again, and unfortu

GPO Best Practices

2010-01-20 Thread John Bowles
I have a customer who is looking to implement a GPO to add Domain Admins to all the workstations and servers. I was looking into using Restricted Groups to tackle this task, but it seems if you use Restricted Groups you will lose anything outside of the groups you have listed in the restricted

RE: GPO Best Practices

2010-01-20 Thread Andy Ognenoff
You can do what you are talking about with Restricted Groups. This should get you what you need: http://www.frickelsoft.net/blog/?p=13  - Andy O. From: John Bowles [mailto:john.bow...@wlkmmas.org] Sent: Wednesday, January 20, 2010 9:00 AM To: NT System A

RE: GPO Best Practices

2010-01-20 Thread Kennedy, Jim
Yes, that is how restricted groups work, it over writes whatever is existing on the current machine. The best way to do it, then your GPO is the definitive authority on who is a local admin. So yes, servers should be in separate OU's so they can have their own GPO's on this issue and all the oth

Re: GPO Best Practices

2010-01-20 Thread Stephen Wimberly
Servers and workstations "should" be in different OU's for a variety of reasons, GPO is one of the best reasons. We used to use restrictive groups for the local Administrators group, but yes this does delete all contents and replace with the contents of the GPO. If you have Server 2003 Domain con

RE: GPO Best Practices

2010-01-20 Thread John Bowles
GPP? John Bowles From: Stephen Wimberly [swimbe...@gmail.com] Sent: Wednesday, January 20, 2010 10:14 AM To: NT System Admin Issues Subject: Re: GPO Best Practices Servers and workstations "should" be in different OU's for a variety of reasons, GPO is one of th

RE: GPO Best Practices

2010-01-20 Thread Ken Schaefer
You should structure your OUs to support (a) delegation of administration (if required) and (b) support efficient linking of GPOs. Just about every place that I've been has had servers (e.g. broken down by functionality) and workstations (usually then subdivided into desktops and laptops) in se

Re: GPO Best Practices

2010-01-20 Thread Jonathan Link
Group Policy Preferences. Painstakingly sent from my iPhone. On Jan 20, 2010, at 10:16 AM, John Bowles wrote: > GPP? > > > John Bowles > > From: Stephen Wimberly [swimbe...@gmail.com] > Sent: Wednesday, January 20, 2010 10:14 AM > To: NT System Admin Issues > Subject: Re: GPO Best Practices >

Windows 2008 perfmon counters

2010-01-20 Thread Nagabhushan Gurukiran
Hello, I had setup some counters to monitor our application performance and was trying to log it into a csv based log file. When I started the data collector set, it captured some of the counters in the file but left out some. The ones that are not being written to the log file are things like:

RE: GPO Best Practices

2010-01-20 Thread Ken Schaefer
GPP can meet one requirement, but if you have ongoing enforcement requirement for that group, then GPO is the better way to go as the GPO will be periodically refreshed. Cheers Ken From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, 20 January 2010 11:19 PM To: NT System Admin

RE: SAN solutions

2010-01-20 Thread Ken Schaefer
Is this the Never Ending Story - Part II? Cheers Ken -Original Message- From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Wednesday, 20 January 2010 9:41 PM To: NT System Admin Issues Subject: RE: SAN solutions Disregard. We have neither Fiber Channel nor Macs here in our o

RE: GPO Best Practices

2010-01-20 Thread Joe Tinney
The blog that Andy O linked to seems to indicate that, depending on how you apply this, you can actually append the local admin list and not erase it. Has anyone tried this out following this guidance? From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, January 20, 2

RE: GPO Best Practices

2010-01-20 Thread Andy Ognenoff
OU structure aside (separating them is good practice for all of the reasons stated) - your first thought to use Restricted Groups was definitely a way to accomplish the task - that's exactly what we do here. Just use the "This group is a member of:" box with "Administrators" added to it and leave

RE: GPO Best Practices

2010-01-20 Thread Carol Fee
Aren't the Domain Admins automatically added to the local Administrators when the computer is joined to the domain ? CFee From: John Bowles [mailto:john.bow...@wlkmmas.org] Sent: Wednesday, January 20, 2010 10:00 AM To: NT System Admin Issues Subject: GPO Best Practices I have a customer who is

RE: GPO Best Practices

2010-01-20 Thread John Bowles
Thanks to everyone for their ideas. This was very helpful! John Bowles From: Andy Ognenoff [andyognen...@gmail.com] Sent: Wednesday, January 20, 2010 10:30 AM To: NT System Admin Issues Subject: RE: GPO Best Practices OU structure aside (separating th

RE: SAN solutions

2010-01-20 Thread John Aldrich
Could well be. :-) -Original Message- From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Wednesday, January 20, 2010 10:23 AM To: NT System Admin Issues Subject: RE: SAN solutions Is this the Never Ending Story - Part II? Cheers Ken -Original Message- From: John Aldrich

* Where Do You Get Your IT News?

2010-01-20 Thread Stu Sjouwerman
* Where Do You Get Your IT News? Sunbelt is dying to know where you get your news, could you help out and fill out this very fast 10 question, multiple choice survey? We give away 10 VIPRE unlimited home licenses to people that fill it out. Thanks so much in advance! Here is the link:

RE: * Where Do You Get Your IT News?

2010-01-20 Thread Rod Trent
Should've had an option for "no print magazines". Haven't picked up a print magazine to read in years. -Original Message- From: Stu Sjouwerman [mailto:s...@sunbelt-software.com] Sent: Wednesday, January 20, 2010 11:27 AM To: NT System Admin Issues Subject: * Where Do You Get Your IT News

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Steve Ens
+1, except for the Technet mag that they sent me until they shut that down too. This forum is the best place for information. On Wed, Jan 20, 2010 at 10:39 AM, Rod Trent wrote: > Should've had an option for "no print magazines". > > Haven't picked up a print magazine to read in years. > > -

RE: GPO Best Practices

2010-01-20 Thread Eisenberg, Wayne
Group Policy preferences in AD 2008 actually allows you to add/remove/update groups without deleting all previous group members, unlike group policy in 2003. -Original Message- From: John Bowles [mailto:john.bow...@wlkmmas.org] Sent: Wednesday, January 20, 2010 10:48 AM To: NT System Adm

RE: FYI -- Hitachi SMS100

2010-01-20 Thread Brian Desmond
One (IMO major) upside to a name brand option is that finding expertise that knows how to manage it properly, troubleshoot, etc is going to be FAR easier than the no name brands. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: John Aldrich [ma

RE: * Where Do You Get Your IT News?

2010-01-20 Thread Stu Sjouwerman
OK - added that option ! Warm regards, Stu Sjouwerman Co-Founder, Publisher, Sunbelt Media P: +1-727-562-0101 ext 218 F: +1-727-562-5199 s...@sunbelt-software.com   -Original Message- From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Wednesday, January 20, 2010 11:40 AM To: NT

Re: * Where Do You Get Your IT News?

2010-01-20 Thread asbzone
I still look at a little bit of print. For those times where I'm not at a machine and don't feel like squinting at a PDA. ASB from a PDA Sent from my Verizon Wireless BlackBerry -Original Message- From: Steve Ens Date: Wed, 20 Jan 2010 10:46:14 To: NT System Admin Issues Subject: Re:

RE: IIS Not serving Pages in Exch 03

2010-01-20 Thread Sam Cayze
Well it's fixed now, can't test. Reset IIS and recreated all the exchange virtual directories, deleted ds2mb key, etc. Stable so far. Last time it happened I remember 'something' was listening on port 80. -Sam From: Ken Schaefer [mailto:k...@adopenstatic.com]

Win 7 trust relationship failure via VPN

2010-01-20 Thread Steven M. Caesare
My laptop primarily lives at work, and connects to my home via VPN daily. It may not be on the actual LAN the DC's are on for weeks at a time. With my XP laptop, this was never a problem. Now with my Win7 laptop I find that after a few weeks and I bring it home and pop it on the local LAN

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Jeff Johnson
It is interesting that you bring this up today. I have 2 systems, both Windows 7, that are having the same issue as of yesterday. One of the desktops, I did the remove/add domain and it now works again. The other is a rarely used laptop that I would like to do more troubleshooting on. I will

OT: VMware ESX cluster at a hot site?

2010-01-20 Thread Michael Leone
A bit OT, I apologize. I have a VMware ESX 3.5 cluster here (10 ESX hosts, fed off our HP EVA 8000, about 70 VMs). We're thinking of setting up a hot site, in case of disaster. This hotsite would have an EMC SAN, and we would replicate our SAN storage out to there. (I haven't been involved in those

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Jeff Johnson
Let me just clarify these systems are connecting locally to the domain and NOT via VPN. Jeff Johnson Systems Administrator 714-773-2600 Office 714-773-6351 Fax [cid:image001.jpg@01CA99B2.CD267B00] From: Jeff Johnson [mailto:jjohn...@hydraflowusa.com] Sent: Wednesday, January 20, 2010 9:26 AM To:

R: Win 7 trust relationship failure via VPN

2010-01-20 Thread HELP_PC
So what is the real issue ? Do you have a domain at home ? GuidoElia HELPPC _ Da: Jeff Johnson [mailto:jjohn...@hydraflowusa.com] Inviato: mercoledì 20 gennaio 2010 18.28 A: NT System Admin Issues Oggetto: RE: Win 7 trust relationship failure via VPN Let me just clarify these syst

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Steven M. Caesare
Hmm, I have several locally connected Win7 systems, and they don't exhibit the behavior. Interesting. -sc From: Jeff Johnson [mailto:jjohn...@hydraflowusa.com] Sent: Wednesday, January 20, 2010 12:28 PM To: NT System Admin Issues Subject: RE: Win 7 trust relationship failure via VPN

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Jeff Johnson
Sorry, I think I am confusing everyone. My last two posts were separate from Steven's original question. I have two systems at the office that are having trust relationships with the local domain. It sounds like He is getting a trust relationship when connecting to his domain via VPN. Jeff J

RE: IIS Not serving Pages in Exch 03

2010-01-20 Thread Ziots, Edward
I have seen this when the Non Paged Memory pools has gone over about 103MB for Exchange, it basically bombs out the IIS, and you have to reboot. It's a memory leak. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Jeff Johnson
Something new that just happened... the computer account became disabled. I would assume it was due to the same trust relationship issue. Now I have enabled the account and am back to the trust relationship between this workstation and the domain has failed. Jeff Johnson Systems Administrator

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Jon Harris
I have but only to pitch them into the trash. They are usually old news anyway. Jon On Wed, Jan 20, 2010 at 11:39 AM, Rod Trent wrote: > Should've had an option for "no print magazines". > > Haven't picked up a print magazine to read in years. > > -Original Message- > From: Stu Sjouwer

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Jon Harris
AMEN! Jon On Wed, Jan 20, 2010 at 11:46 AM, Steve Ens wrote: > +1, except for the Technet mag that they sent me until they shut that down > too. This forum is the best place for information. > > > On Wed, Jan 20, 2010 at 10:39 AM, Rod Trent wrote: > >> Should've had an option for "no print mag

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Michael B. Smith
So...Win 7 has nltest built-in, right? You may want to try a "nltest /sc_change_pwd:" every week or so while you are VPN'ed in. I'm guessing the computer account password is expiring. I not sure if sc_change_pwd causes that to re-handshake or not, but it's my best guess. BDesmond or BFree migh

RE: IIS Not serving Pages in Exch 03

2010-01-20 Thread Sam Cayze
Are you referring to this? http://blogs.msdn.com/sudeepg/archive/2007/09/11/iis-not-serving-pages-p age-cannot-be-displayed.aspx Same link: http://preview.tinyurl.com/ygduvnc Sam From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, January 20, 20

RE: VMware ESX cluster at a hot site?

2010-01-20 Thread Garcia-Moran, Carlos
Hmmm there's a lot of unknowns here for you. This as depends on the type of DR you want, how you will setup replication, what software you will use for it VMware or 3rd party. How will your users connect etc... DR is different for everyone here's how I'm currently doing it 1) Mix of Physical and

Re: GPO Best Practices

2010-01-20 Thread Kurt Buff
To my certain knowledge, yes. This leads me to wonder why this is an issue. I can only think of one reason: Non-DAs are also admins or power users, and they want to ensure that the non-DAs can't kick the DAs off the workstations. Kurt On Wed, Jan 20, 2010 at 07:40, Carol Fee wrote: > Aren’t the

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Kurt Buff
On Wed, Jan 20, 2010 at 08:27, Stu Sjouwerman wrote: >      * Where Do You Get Your IT News? > > Sunbelt is dying to know where you get your news, could you help out and > fill out this very fast 10 question, multiple choice survey? We give away > 10 VIPRE unlimited home licenses to people that fi

Re: GPO Best Practices

2010-01-20 Thread Jon Harris
I believe DA's are added to the Administrators group but are not local Administrators. From my experience local administrators can trump DA's and where possible it is best to remove local administrators from the Administrators group to prevent this. The other tactic to take would be to disable th

OT Norlight Communications.

2010-01-20 Thread Kennedy, Jim
Anyone using/used them? They are offering us a pretty good deal on some dedicated connections between our buildings. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: GPO Best Practices

2010-01-20 Thread Kurt Buff
I think you're kinda saying the same thing I am. DAs are added to any non-DC's local Administrators group when added to the domain, unless things have changed since Win2k3 R2 SP2+ and XP SP3+. They are, by default, admins on any machine joined to the domain, though the local Administrator can kick

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Steven M. Caesare
Interesting. Mine didn't appear to be disabled... but I just performed a reset to see what happens. -sc From: Jeff Johnson [mailto:jjohn...@hydraflowusa.com] Sent: Wednesday, January 20, 2010 12:42 PM To: NT System Admin Issues Subject: RE: Win 7 trust relationship failure via VPN Some

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Steven M. Caesare
Yeah, thanks.. I suppose I can do that in the interim. I'm just interested in what changed between the XP and Vista/7 codebase that causes this. Interestingly, if I lock the workstation while VPN'd in I get the same behavior. -sc > -Original Message- > From: Michael B. Smith [mailto:m

Re: GPO Best Practices

2010-01-20 Thread asbzone
You can do it in 2003 as well, just in a more complicated fashion. If you use the "this group is a member of..." functionality, this can be achieved in 2003. Sent from my Verizon Wireless BlackBerry -Original Message- From: "Eisenberg, Wayne" Date: Wed, 20 Jan 2010 11:48:56 To: NT S

Re: OT: VMware ESX cluster at a hot site?

2010-01-20 Thread Anders Blomgren
If you can afford to create a dr site that comes close to the original config you can probably afford http://www.vmware.com/products/site-recovery-manager/ which does all that for you. -Anders On Wed, Jan 20, 2010 at 6:26 PM, Michael Leone wrote: > A bit OT, I apologize. I have a VMware ESX 3.5

RE: Win 7 trust relationship failure via VPN

2010-01-20 Thread Michael B. Smith
I think the length of time that a password is valid changed. I could look it up - but I don't have time right this moment. -Original Message- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Wednesday, January 20, 2010 1:56 PM To: NT System Admin Issues Subject: RE: Win 7 trus

Re: FYI -- Hitachi SMS100

2010-01-20 Thread Steven Peck
I hate Hitachi SANs. Nothing but latency issues. Now this may be our SAN team and the way they have it configured, but so far every vendor I talked to on latency issues gets very very very careful about configuration issues when talking about Hitachi SANs. It's not what they say, it's how carefu

RE: * Where Do You Get Your IT News? (UNCLASSIFIED)

2010-01-20 Thread Kent, Larry CTR USA
Classification: UNCLASSIFIED Caveats: NONE Also should have stated that you only would be entered in a drawing for a chance to get 10 VIPRE unlimited home licenses not " We give away 10 VIPRE unlimited home licenses to people that fill it out." -Original Message- From: Stu Sjouwerman [ma

Re: OT: VMware ESX cluster at a hot site?

2010-01-20 Thread Michael Leone
On Wed, Jan 20, 2010 at 1:59 PM, Anders Blomgren wrote: > If you can afford to create a dr site that comes close to the original > config you can probably afford > http://www.vmware.com/products/site-recovery-manager/ which does all that > for you. Sounds just like what I need! ... except that I

RE: IIS Not serving Pages in Exch 03

2010-01-20 Thread Ziots, Edward
Yep, Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, January 20, 2010 12:47 PM To: NT Syste

RE: IIS Not serving Pages in Exch 03

2010-01-20 Thread Ziots, Edward
Are you using multipath I/O software to connect to your disks? Like EMC/ETC ETC? You might be running into the same NPP Pool leak I had about 6+ months ago. Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.o

RE: IIS Not serving Pages in Exch 03

2010-01-20 Thread Ziots, Edward
This was the thread before: Since we are on the paged pool topic, has anyone got the link to how to set perfmon to trend a leaky app or some other way to watch and log the trend over a period of a couple days or so? Thanks Don K From: Brian Desmond To:

RE: IIS Not serving Pages in Exch 03

2010-01-20 Thread Ziots, Edward
http://support.microsoft.com/kb/961640 Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + ezi...@lifespan.org Phone:401-639-3505 From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, Janu

Re: IIS Not serving Pages in Exch 03

2010-01-20 Thread Kurt Buff
Possibly this: http://support.microsoft.com/kb/177415 On Wed, Jan 20, 2010 at 11:41, Ziots, Edward wrote: > This was the thread before: > > Since we are on the paged pool topic, has anyone got the link to how to set > perfmon to trend a leaky app or some other way to watch and log the trend > ov

RE: * Where Do You Get Your IT News?

2010-01-20 Thread Phillip Partipilo
I was disappointed to only see big corporate websites being listed, like pcmag, cnet, etc. There are the "little" guys like tgdaily.com, techreport.com, anandtech.com, engadget.com, gizmodo.com, tomshardware.com, the tech column at digg.com and fark.com, etc... Granted some of those sites are new

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Kurt Buff
How about http://www.theregister.co.uk/ On Wed, Jan 20, 2010 at 11:59, Phillip Partipilo wrote: > I was disappointed to only see big corporate websites being listed, like > pcmag, cnet, etc.  There are the "little" guys like tgdaily.com, > techreport.com, anandtech.com, engadget.com, gizmodo.com,

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Sean Martin
+1 Mostly for the BOFH stories though. - Sean On Wed, Jan 20, 2010 at 11:13 AM, Kurt Buff wrote: > How about http://www.theregister.co.uk/ > > On Wed, Jan 20, 2010 at 11:59, Phillip Partipilo wrote: > > I was disappointed to only see big corporate websites being listed, like > > pcmag, cnet,

RE: * Where Do You Get Your IT News?

2010-01-20 Thread Rod Trent
I've always wondered if that’s a real site. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, January 20, 2010 3:14 PM To: NT System Admin Issues Subject: Re: * Where Do You Get Your IT News? How about http://www.theregister.co.uk/ On Wed, Jan 20, 2010 at

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Kurt Buff
It's real, it's just got a real attitude to go with it. It has some good reporters, too. On Wed, Jan 20, 2010 at 12:20, Rod Trent wrote: > I've always wondered if that’s a real site. > > -Original Message- > From: Kurt Buff [mailto:kurt.b...@gmail.com] > Sent: Wednesday, January 20, 2010

Re: GPO Best Practices

2010-01-20 Thread Jon Harris
My bad you are correct I forgot to say that was true and this is how it is done. Sorry. Jon On Wed, Jan 20, 2010 at 1:45 PM, Kurt Buff wrote: > I think you're kinda saying the same thing I am. > > DAs are added to any non-DC's local Administrators group when added to > the domain, unless thing

RE: * Where Do You Get Your IT News? (UNCLASSIFIED)

2010-01-20 Thread Charlie Kaiser
Nope. I think given his wording we should ALL get 10 licenses... :-) *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** > -Original Message- > From: Kent, Larry CTR USA [mailto:larry.k...@us.army.mil] > Sent: Wednesday, January 20, 2010

Re: * Where Do You Get Your IT News? (UNCLASSIFIED)

2010-01-20 Thread Jon Harris
On Wed, Jan 20, 2010 at 3:27 PM, Charlie Kaiser wrote: > Nope. I think given his wording we should ALL get 10 licenses... :-) > > *** > Charlie Kaiser > charl...@golden-eagle.org > Kingman, AZ > *** > > > -Original Message- > > From: Kent, Larry CTR

Re: * Where Do You Get Your IT News?

2010-01-20 Thread Jonathan Link
To wit: their tag line under the masthead is: "Biting the hand that feeds IT." I find it's attitude to be well suited to our field. On Wed, Jan 20, 2010 at 3:25 PM, Kurt Buff wrote: > It's real, it's just got a real attitude to go with it. It has some > good reporters, too. > > On Wed, Jan 20, 2

Re: GPO Best Practices

2010-01-20 Thread Kurt Buff
NP On Wed, Jan 20, 2010 at 12:27, Jon Harris wrote: > My bad you are correct I forgot to say that was true and this is how it is > done.  Sorry. > > Jon > > On Wed, Jan 20, 2010 at 1:45 PM, Kurt Buff wrote: >> >> I think you're kinda saying the same thing I am. >> >> DAs are added to any non-DC'

Computer account password expiration

2010-01-20 Thread Damien Solodow
I'm wanting to confirm something and so far my Google-fu has not produced any particularly authoritative answers. By default computers that are members of a Windows 2003 domain change their machine account passwords every 30 days. If a Windows XP workstation is offline or disconnected for more

Re: Computer account password expiration

2010-01-20 Thread Andrew Levicki
Hi Damien, yes is the answer to your question but the fix is very simple, you just need to reset the computer account: http://support.microsoft.com/default.aspx/kb/216393 Cheers, Andrew 2010/1/20 Damien Solodow > I’m wanting to confirm somet

RE: Computer account password expiration

2010-01-20 Thread Damien Solodow
The article suggests 4 options: netdom, nltest, ADUC, vbscript It says that netdom and nltest can only be used on computers with working secure connections, so if it's already not allowing domain logins, it won't work. The Reset Computer option in ADUC requires the workstation to be rejoined to t

RE: Computer account password expiration

2010-01-20 Thread Christopher Bodnar
Take a look at this: http://blogs.technet.com/askds/archive/2009/02/15/test2.aspx Specifically this: Machine account passwords as such do not expire in Active Directory. They are exempted from the domain's password policy. It is important to remember that machine account password change

RE: Computer account password expiration

2010-01-20 Thread Brian Desmond
That's incorrect. The computer initiates the change. Thus if the computer is offline the change never happens. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: Andrew Levicki [mailto:and...@levicki.me.uk] Sent: Wednesday, January 20, 2010 3:34

RE: Computer account password expiration

2010-01-20 Thread Steven M. Caesare
S... as with my other post today, why is my new Win7 laptop that's only VPN'ed for long periods of time getting cranky and saying the trust relationship for the workstation to the domain has failed when I boot it on the local LAN and it's not attempting to use a cached credential? -sc F

RE: Computer account password expiration

2010-01-20 Thread Ray
Seems hard to believe considering how often we have machines that lose their trust and end up Kerberos errors on the DC's. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Wednesday, January 20, 2010 2:44 PM To: NT System Admin Issues Subject: RE: Computer account passwo

Re[2]: * Where Do You Get Your IT News?

2010-01-20 Thread Joe User
Hello Jon, Wednesday, January 20, 2010, 11:44:05 AM, you wrote: > I have but only to pitch them into the trash. They are usually old news > anyway. What else to read while you are on the can though? -- Regards, joeuser - Still looking for the 'any' key... "...now these points of data make a

Re: Re[2]: * Where Do You Get Your IT News?

2010-01-20 Thread Sean Martin
Isn't that why they developed the iPhone? - Sean On Wed, Jan 20, 2010 at 2:21 PM, Joe User wrote: > Hello Jon, > > Wednesday, January 20, 2010, 11:44:05 AM, you wrote: > > > I have but only to pitch them into the trash. They are usually old news > > anyway. > > What else to read while you are

Re: Re[2]: * Where Do You Get Your IT News?

2010-01-20 Thread Jon Harris
Nothing the SO and kid hate for me to have lesure time. Jon On Wed, Jan 20, 2010 at 6:29 PM, Sean Martin wrote: > Isn't that why they developed the iPhone? > > - Sean > > On Wed, Jan 20, 2010 at 2:21 PM, Joe User wrote: > >> Hello Jon, >> >> Wednesday, January 20, 2010, 11:44:05 AM, you wrot

Windows 7 Search Indexer

2010-01-20 Thread Bob Fronk
I have two Windows 7 laptops (work / home). On each of them the search indexer runs a constant 5-15% CPU. Enough to keep the cooling fans on constantly. Sometimes I will notice slow IE browsing or program opening. Of course, I can disable the search service, and the issue goes away, but then

RE: Windows 7 Search Indexer

2010-01-20 Thread Terry Dickson
I have two an running Windows 7 at home and work and do not see that issue on either one. From: Bob Fronk [...@btrfronk.com] Sent: Wednesday, January 20, 2010 7:00 PM To: NT System Admin Issues Subject: Windows 7 Search Indexer I have two Windows 7 laptops (work

RE: Computer account password expiration

2010-01-20 Thread Ken Schaefer
And do you believe that the common factor with those machines is that they've been off the network for >30 days? Cheers Ken From: Ray [mailto:rz...@qwest.net] Sent: Thursday, 21 January 2010 5:58 AM To: NT System Admin Issues Subject: RE: Computer account password expiration Seems hard to belie

RE: Windows 7 Search Indexer

2010-01-20 Thread Benjamin Zachary - Lists
http://www.voidtools.com/ From: Terry Dickson [mailto:te...@treasurer.state.ks.us] Sent: Wednesday, January 20, 2010 8:18 PM To: NT System Admin Issues Subject: RE: Windows 7 Search Indexer I have two an running Windows 7 at home and work and do not see that issue on either one. _