Re: Server Core

2010-06-04 Thread James Rankin
How do people manage patching on Server Core installations? Can you just apply the GPOs for WSUS in the same way? How do admins log on to install updates? On 3 June 2010 21:02, Brian Desmond br...@briandesmond.com wrote: *I put ALL DCs on Server Core given the opportunity.* * * *It also

RE: DC authentication issue with Samba

2010-06-04 Thread Fergal O'Connell
Thanks Ben - A VOB server is an IBM Clearcase Versioned Object Base. The samba config is set to server and the password server is the local DC. This has been working for the past 4 years or so (and is unlikely to change either) Approx the same time when this issue occurred we had a DC fail in

RE: Server Core

2010-06-04 Thread Joseph L. Casale
How do people manage patching on Server Core installations? Can you just apply the GPOs for WSUS in the same way? How do admins log on to install updates? You can use WSUS, edit the registry, log on and use supplied scripts at the shell. Pretty much no difference. jlc ~ Finally, powerful

Exchange 2010 on Server 2008 r2 Server Core

2010-06-04 Thread Michael B. Smith
Summary: Server Core is missing two features, RPC-Over-HTTP-Proxy (required by CAS) and Content-Indexing (required by MB and HT). Details here: http://www.proexchange.be/blogs/exchange2010/archive/2009/12/09/exchange-2010-on-windows-2008-server-r2-server-core.aspx Why those particular features

Re: OT (bit of topic), anyone delt with recovery ITunes Store bought Music,(backedup to external drive) and restored to a brand new install???

2010-06-04 Thread Ben Scott
On Thu, Jun 3, 2010 at 10:00 PM, justino garcia jgarciaitl...@gmail.com wrote: Typically what you have to do is (1) sync the iPod to the PC using iTunes, (2) backup the PC (including iTunes), (3) erase and reinstall the PC, (4) restore iTunes to the PC, (5) reinitialize the iPod to the new

Re: OT (bit of topic), anyone delt with recovery ITunes Store bought Music,(backedup to external drive) and restored to a brand new install???

2010-06-04 Thread justino garcia
Thanks On Fri, Jun 4, 2010 at 8:25 AM, Ben Scott mailvor...@gmail.com wrote: On Thu, Jun 3, 2010 at 10:00 PM, justino garcia jgarciaitl...@gmail.com wrote: Typically what you have to do is (1) sync the iPod to the PC using iTunes, (2) backup the PC (including iTunes), (3) erase and

Re: Server Core

2010-06-04 Thread Christopher Bodnar
I've been reading this thread pretty closely since we will be brining up a 2008 test domain very shortly. My thoughts were to do Core for all the DCs. My concern now is all the client/Agent software that the current DCs require. For example: Adiscon client Asset Insight client Blue Coat proxy

Re: DC authentication issue with Samba

2010-06-04 Thread Ben Scott
On Fri, Jun 4, 2010 at 4:16 AM, Fergal O'Connell foconn...@curamsoftware.com wrote: The samba config is set to server and the password server is the local DC. This has been working for the past 4 years or so (and is unlikely to change either) If you can't make changes that might help fix

RE: OT (bit of topic), anyone delt with recovery ITunes Store bought Music,(backedup to external drive) and restored to a brand new install???

2010-06-04 Thread Mayo, Bill
To respond to an earlier question, it is possible to copy music from the iPod back to the computer. Apple doesn't provide a native way to do this (due to piracy concerns, no doubt), but there are applications out there that will do it. Additionally, iTunes will actually offer to copy any

Re: Server Core

2010-06-04 Thread Andrew S. Baker
Personally, other than File servers, Exchange servers, SMTP email servers, and Share Point servers (i.e. servers with user content and access), I haven't had AV detect anything in a number of years. Sample size is about a half-dozen environments ranging from 20 users (5 servers) to 4000 users

RE: Server Core

2010-06-04 Thread Damien Solodow
The SEP client is supported on 2008 Server Core per their documentation. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Friday, June 04, 2010 9:30 AM To: NT System Admin Issues Subject: Re: Server Core Personally, other than File servers, Exchange servers, SMTP email servers, and

RE: DC authentication issue with Samba

2010-06-04 Thread Fergal O'Connell
Thanks Ben, Considering we have this issue for approx 2 weeks now and not made any real progress. I'll have to investigate setting the Security to ADS. Fergal -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: 04 June 2010 13:44 To: NT System Admin Issues Subject:

KSM/VL Media

2010-06-04 Thread Kennedy, Jim
Just trying to save some time here while we get our KSM and VL agreement in place for Win 7. I have a laptop here we are about to order a bunch of. If I make an image and give it to the vendor they will all arrive with our image on it. So I need media for Win 7 enterprise real fast. What are

FDCC Scanning

2010-06-04 Thread David McSpadden
Anyone on the list have a FDCC Scanner? I am looking at BigFIX but I saw Shavlik has one as well. Any ideas? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Re: FDCC Scanning

2010-06-04 Thread Rob Bonfiglio
I believe System Center can do it as well. Haven't actually used it though. On Fri, Jun 4, 2010 at 10:15 AM, David McSpadden dav...@imcu.com wrote: Anyone on the list have a FDCC Scanner? I am looking at BigFIX but I saw Shavlik has one as well. Any ideas? ~ Finally, powerful

RE: Migrating SBS 2003 to SBS 2008

2010-06-04 Thread Darrell Wiebesick
I just did this for a customer (slightly bigger 25 users, 280 GB of data) and I used Migrating to Windows Small Business Server 2008 from Windows Small Business Server 2003 http://www.microsoft.com/downloads/details.aspx?FamilyID=52b7ea63-78af-4a96-811e-284f5c1de13bdisplaylang=en Down load

Re: KSM/VL Media

2010-06-04 Thread Andrew S. Baker
I **believe** that the Technet media is Volume License media... -ASB: http://XeeSM.com/AndrewBaker On Fri, Jun 4, 2010 at 10:12 AM, Kennedy, Jim kennedy...@elyriaschools.orgwrote: Just trying to save some time here while we get our KSM and VL agreement in place for Win 7. I have a laptop

Phantom Images on screen

2010-06-04 Thread Bambi J Saastad
I have a couple of systems that get left over phantom images. Examples, I move an open object on the screen, and the original stays in the original location, plus I also have the copy of it that I just moved. Is this memory or video? I tried googling for phantom images, but I get nothing relevant.

RE: FDCC Scanning

2010-06-04 Thread Rod Trent
Yep.a couple helpful links: http://technet.microsoft.com/en-us/library/cc677271.aspx http://www.microsoft.com/downloads/details.aspx?FamilyID=22e5b9a0-fa7b-4d43- bcea-7084ae6f40f5 http://www.microsoft.com/downloads/details.aspx?FamilyID=22e5b9a0-fa7b-4d43 -bcea-7084ae6f40f5displaylang=en

RE: Phantom Images on screen

2010-06-04 Thread Steven M. Caesare
You may want to consider an exorcism. -sc From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com] Sent: Friday, June 04, 2010 10:32 AM To: NT System Admin Issues Subject: Phantom Images on screen I have a couple of systems that get left over phantom images. Examples, I move an open

RE: Phantom Images on screen

2010-06-04 Thread Don Guyer
Or, a Jedi. Sorry, couldn't resist... Don Guyer Systems Engineer - Information Services Prudential, Fox Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 don.gu...@prufoxroach.com mailto:don.gu...@prufoxroach.com From:

RE: Phantom Images on screen

2010-06-04 Thread Kennedy, Jim
Fire up task manager while you this and watch the memory and the processor and see if either of them is maxing out. My bet is memory, and your video card is using shared memory. From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com] Sent: Friday, June 04, 2010 10:32 AM To: NT System Admin

RE: KSM/VL Media

2010-06-04 Thread Ken Schaefer
KSM? Do you mean KMS? If so, then the Technet Win 7 Enterprise can be activated by a KMS. Cheers Ken -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Friday, 4 June 2010 10:13 PM To: NT System Admin Issues Subject: KSM/VL Media Just trying to save some

GPO question

2010-06-04 Thread Bill Lambert
All my domain pc's are displaying a message on the login window that the security log is full and only an administrator can correct this. I'm trying to find where the properties of the Event Viewer security logs are set in GP. I think another admin has set this up but I can't find it. Can

RE: GPO question

2010-06-04 Thread Mayo, Bill
Computer ConfigurationPoliciesWindows SettingsSecurity SettingsEvent Log. There are a few settings under that. For the security log specifically, the ones that I believe you are looking for are: Maximum Security Log Size and Retention Method for Security Log

RE: KSM/VL Media

2010-06-04 Thread Kennedy, Jim
Yea, that's what I meant. :) To clarify my questionCan I activate it with a key from a general volume Enterprise license...not the technet license. So make my image with my technet media. Enter the general enterprise volume key at a later date and then activate with the general

RE: Phantom Images on screen

2010-06-04 Thread Carl Houseman
Update the display drivers or Reduce hardware acceleration for the display adapter (Troubleshoot tab on the Advanced settings). Carl From: Bambi J Saastad [mailto:bambi.j.saas...@seagate.com] Sent: Friday, June 04, 2010 10:32 AM To: NT System Admin Issues Subject: Phantom Images on

RE: KSM/VL Media

2010-06-04 Thread Ken Schaefer
Hi, There are two ways to activate Enterprise - MAK and KMS. KMS doesn't require you to enter a key on your clients - they will activate because of the KMS. So, you can get the TechNet media and install it on your clients, and provided that you get your KMS stood up within the grace period,

RE: KSM/VL Media

2010-06-04 Thread Terry Dickson
So you have the volume license but not the signon to download the media? If so you could just download the VL Media and use it and not have to even worry if the technet media will work. -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Friday, June 04,

RE: GPO question

2010-06-04 Thread Ken Schaefer
Wow. Just wow. And you said that the WSJ article on IT people disappearing was a load of crap From: Bill Lambert [mailto:blamb...@concuity.com] Sent: Friday, 4 June 2010 10:45 PM To: NT System Admin Issues Subject: GPO question All my domain pc's are displaying a message on the login window

RE: KSM/VL Media

2010-06-04 Thread Kennedy, Jim
Excellent, that will work. Tyvm. -Original Message- From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Friday, June 04, 2010 11:03 AM To: NT System Admin Issues Subject: RE: KSM/VL Media Hi, There are two ways to activate Enterprise - MAK and KMS. KMS doesn't require you to

Re: DC authentication issue with Samba

2010-06-04 Thread Ben Scott
On Fri, Jun 4, 2010 at 10:00 AM, Fergal O'Connell foconn...@curamsoftware.com wrote: Considering we have this issue for approx 2 weeks now and not made any real progress. I'll have to investigate setting the Security to ADS. It's not overly hard. The procedure is basically: 1. Configure

RE: GPO question

2010-06-04 Thread Bill Lambert
I'm not sure I understand the correlation. Bill Lambert Concuity Phone 847-941-9206 The information contained in this e-mail message, including any attached files, is intended only for the personal and confidential use of the recipient(s) named above. If you are not the intended

Re: GPO question

2010-06-04 Thread Andrew S. Baker
You're going to want to make it larger than 512K, btw. 8MB or 16MB will be more useful numbers. -ASB: http://XeeSM.com/AndrewBaker On Fri, Jun 4, 2010 at 10:45 AM, Bill Lambert blamb...@concuity.com wrote: All my domain pc’s are displaying a message on the login window that the security

RE: GPO question

2010-06-04 Thread Rod Trent
Binged it: http://technet.microsoft.com/en-us/library/cc778402(WS.10).aspx From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Friday, June 04, 2010 11:35 AM To: NT System Admin Issues Subject: Re: GPO question You're going to want to make it larger than 512K, btw. 8MB or 16MB

Web server problems, browser?

2010-06-04 Thread RichardMcClary
Greetings! We have a web server, pretty much all by itself in a DMZ. (Pretty much - there is a second server there, similar configuration, for development. The two do not, by routine, communicate with each other.) On 25-MAY, I installed VIPRE. Since then: 1. Those needing to add content to

Re: Web server problems, browser?

2010-06-04 Thread Andrew S. Baker
***1. Could these browser events be causing the services times-out for our users?** * No. Not likely. *2. For a stand-alone web server, is it even necessary to have browser server service enabled?** * Definitely not. Disable that service forthwith. :) *3. VIPRE - Active Protection had

RE: Web server problems, browser?

2010-06-04 Thread Ken Schaefer
In addition to Andrew's comments, I would also look in your web server's log files to see what the server thinks is happening. If this is IIS, and nothing is being logged, then something is interfering with the web server actually being able to complete the request. Cheers Ken From: Andrew S.

Quick Video Conference solution

2010-06-04 Thread Fred Sawyer
I am looking for an affordable easy to use one time solution that will allow users from 10 different remote locations to all join the same Web conference sharing 2-way video chat. I found http://www.oovoo.com/ but this software only allows for 6 connected locations. Any feedback is greatly

RE: Quick Video Conference solution

2010-06-04 Thread Michael B. Smith
Get a trial of LiveMeeting. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Fred Sawyer [mailto:fr...@sunbelt-software.com] Sent: Friday, June 04, 2010 12:07 PM To: NT System Admin Issues Subject: Quick Video Conference solution I am looking for an

RE: Server Core

2010-06-04 Thread Brian Desmond
Yeah you can just use WSUS or whatever the same way. I have a vbscript I use that continues to work. You can even login and execute the patches from the cmdline if you want I guess. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: James Rankin

RE: GPO question

2010-06-04 Thread Brian Desmond
I usually go with around 150MB. Keep in mind that on a 32bit box you want the cumulative size of all your event logs to be =300MB. You should size your app and system logs accordingly as well. Also note that the policy will not shrink logs if you have them bigger than your new maximum.

Re: Web server problems, browser?

2010-06-04 Thread Steven Peck
On the AV, check the AV scanning log and see if it is grabbing files. If your web pages are delivered via content from a database make sure your AV isn't grabbing your database. AV (any AV) with it's grubby paws grabbing (scanning) a database will pretty much ruin your afternoon. Steven Peck

Re: Web server problems, browser?

2010-06-04 Thread RichardMcClary
Thanks! Only thing ever grabbed (so far) was tracking cookies -- RMc Steven Peck sep...@gmail.com wrote on 06/04/2010 11:33:29 AM: On the AV, check the AV scanning log and see if it is grabbing files. If your web pages are delivered via content from a database make sure your AV isn't

RE: Quick Video Conference solution

2010-06-04 Thread Fred Sawyer
Thanks Michael, I found LiveMeeting also has a limit of 6 streaming cams at one time. Still not getting me to that magical number of 10. Cheers, Fred Sawyer I.T. Manager Sunbelt Software Security is an ongoing process, not a one time event ! From: Michael B. Smith

RE: GPO question

2010-06-04 Thread David Lum
I usually run 128MB on the sec logs. What happens if cumulative is over 300MB on a DC? Dave From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Friday, June 04, 2010 9:25 AM To: NT System Admin Issues Subject: RE: GPO question I usually go with around 150MB. Keep in mind that on a 32bit

Re: Quick Video Conference solution

2010-06-04 Thread Eric Brouwer
Check adobe connect pro. $55 per month, no contact. Fred Sawyer fr...@sunbelt-software.com wrote: I am looking for an affordable easy to use one time solution that will allow users from 10 different remote locations to all join the same Web conference sharing 2-way video chat. I found

Re: Quick Video Conference solution

2010-06-04 Thread Roger Wright
Not free, but we recently selected MegaMeeting's Pro Lite option for our video conferencing solution. Yugma is now providing video conferencing solutions and my have a free one that'll work for you. Die dulci fruere! Roger Wright ___ On Fri, Jun 4, 2010 at 12:09 PM, Michael B. Smith

RE: Web server problems, browser?

2010-06-04 Thread Jeff Cain
Richard, If you'd like, I'd be happy to take a look at your VIPRE logs from the server to ensure we're not causing you undue headaches. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.commailto:supp...@sunbeltsoftware.com Voice:

Re: Quick Video Conference solution

2010-06-04 Thread Kurt Buff
We use AT Conference, but I have no idea of the limits. On Fri, Jun 4, 2010 at 09:07, Fred Sawyer fr...@sunbelt-software.com wrote: I am looking for an affordable easy to use one time solution that will allow users from 10 different remote locations to all join the same Web conference sharing

Re: GPO question

2010-06-04 Thread Andrew S. Baker
See: http://technet.microsoft.com/en-us/library/cc778402(WS.10).aspx http://technet.microsoft.com/en-us/library/cc778402(WS.10).aspx -ASB: http://XeeSM.com/AndrewBaker On Fri, Jun 4, 2010 at 12:47 PM, David Lum david@nwea.org wrote: I usually run 128MB on the sec logs. What happens if

RE: GPO question

2010-06-04 Thread Free, Bob
Any server actually not just DCs. Short answer, in the older OSs the event logs are memory mapped and need contiguous portion of memory. Depending on the system, as they near 300MB total, bad things can happen. That is from memory (pun intended) better details can be found J From: David

Re: GPO question

2010-06-04 Thread Kurt Buff
A very key item: Ideally, all specifically monitored events will be sent to a server by using Microsoft Operations Manager (MOM) or some other automated monitoring tool. This is particularly important because an attacker who successfully compromises a server could clear the security log. If all

RE: GPO question

2010-06-04 Thread Ken Schaefer
The only issue with syslog is that can be unreliable. As you scale up, you may find things are missing from your central syslog store, unless you have a client on your servers that provides for guaranteed delivery of events. Cheers Ken -Original Message- From: Kurt Buff

Re: GPO question

2010-06-04 Thread Andrew S. Baker
SysLogging is well advisable, as is any other eventlog capturing tool. Even something as simple as daily log dumps have been helpful for me to catch things where people were trying to cover their tracks. -ASB: http://XeeSM.com/AndrewBaker On Fri, Jun 4, 2010 at 2:32 PM, Kurt Buff

Re: GPO question

2010-06-04 Thread Kurt Buff
True - it uses UDP. But, for my smallish environment of about 40 servers and about 200 users in this site, it's good enough - mostly because the price is right. Essentially free. I use the open source Intersect Alliance Snare and Epilog clients and purchased the Kiwisoft syslog server years ago

RE: GPO question

2010-06-04 Thread Brian Desmond
I was on a customer box the other day and the snare agent was using more CPU time than AD collecting the logs. Thanks, Brian Desmond br...@briandesmond.com c   – 312.731.3132 -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, June 04, 2010 1:57 PM To: NT

Re: GPO question

2010-06-04 Thread Kurt Buff
Yup. The nice thing is that I've been able to centralize my firewall and switch logs, my squid logs, my Windows servers' event logs, my postfix logs for my email gateway, my FreeBSD syslogs, IIS logs, etc., etc., etc. I've been able to show HR people surfing porn, and illuminate other situations

Re: GPO question

2010-06-04 Thread Kurt Buff
I've never had an issue with it. Was theirs current? On Fri, Jun 4, 2010 at 11:59, Brian Desmond br...@briandesmond.com wrote: I was on a customer box the other day and the snare agent was using more CPU time than AD collecting the logs. Thanks, Brian Desmond br...@briandesmond.com c  

RE: GPO question

2010-06-04 Thread Brian Desmond
No idea - I think it just was struggling to keep up with what was probably hundreds and hundreds of events per second. Thanks, Brian Desmond br...@briandesmond.com c   – 312.731.3132 -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, June 04, 2010 2:23 PM

Re: GPO question

2010-06-04 Thread Kurt Buff
My servers certainly don't experience that kind of load. If the environment were that big, I'd hope that they'd have the hardware to handle it, and the money to get a commercial solution as well. Kurt On Fri, Jun 4, 2010 at 12:23, Brian Desmond br...@briandesmond.com wrote: No idea - I think

Re: GPO question

2010-06-04 Thread Andrew S. Baker
I've seen that before. In fact, that's why I went with the EvtSys agent instead. http://code.google.com/p/eventlog-to-syslog/ http://code.google.com/p/eventlog-to-syslog/Formerly: https://engineering.purdue.edu/ECN/Resources/Documents/UNIX/evtsys/

Re: GPO question

2010-06-04 Thread Kurt Buff
I'd forgotten about that one. I must evaluate it. Kurt On Fri, Jun 4, 2010 at 13:23, Andrew S. Baker asbz...@gmail.com wrote: I've seen that before.   In fact, that's why I went with the EvtSys agent instead. http://code.google.com/p/eventlog-to-syslog/ Formerly: 

Re: GPO question

2010-06-04 Thread Kurt Buff
BTW - what syslog server do you use? On Fri, Jun 4, 2010 at 13:23, Andrew S. Baker asbz...@gmail.com wrote: I've seen that before.   In fact, that's why I went with the EvtSys agent instead. http://code.google.com/p/eventlog-to-syslog/ Formerly: 

Re: GPO question

2010-06-04 Thread Andrew S. Baker
Kiwi. Currently on version 8.2.8 of the licensed code. -ASB: http://XeeSM.com/AndrewBaker On Fri, Jun 4, 2010 at 4:27 PM, Kurt Buff kurt.b...@gmail.com wrote: BTW - what syslog server do you use? On Fri, Jun 4, 2010 at 13:23, Andrew S. Baker asbz...@gmail.com wrote: I've seen that

Re: GPO question

2010-06-04 Thread Kurt Buff
OK - My install is 7.2, from 2005. Also, what do you use to cast things like IIS and Exchange logs to syslog, or do you? I use the sibling of SNARE - Epilog. Kurt On Fri, Jun 4, 2010 at 13:30, Andrew S. Baker asbz...@gmail.com wrote: Kiwi. Currently on version 8.2.8 of the licensed code.

Re: GPO question

2010-06-04 Thread Andrew S. Baker
I don't do anything with IIS logs in most places. I have sent them to SQL on occasion. I leave Exchange logs alone. -ASB: http://XeeSM.com/AndrewBaker On Fri, Jun 4, 2010 at 4:44 PM, Kurt Buff kurt.b...@gmail.com wrote: OK - My install is 7.2, from 2005. Also, what do you use to cast

RE: laptop encryption

2010-06-04 Thread Alverson, Tom (Xetron)
I saw very little difference on a laptop with an Intel SSD. Maybe 5% less disk speed using ATTO. From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Friday, May 28, 2010 8:47 AM To: NT System Admin Issues Subject: RE: laptop encryption Bitlocker has a huge impact on high-performance

Re: Exchange 2010 on Server 2008 r2 Server Core

2010-06-04 Thread Kurt Buff
Interesting. Well, that at least clarifies the situation from a technical standpoint. Thanks. Kurt On Fri, Jun 4, 2010 at 04:05, Michael B. Smith mich...@smithcons.com wrote: Summary: Server Core is missing two features, RPC-Over-HTTP-Proxy (required by CAS) and Content-Indexing (required by