RE: AV Opinions

2010-10-07 Thread Ryan Finnesey
No one as commented on the Forefront products. From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Thursday, October 07, 2010 4:04 PM To: NT System Admin Issues Subject: RE: AV Opinions We thought their management sucked too. Their SALES management, that is. J From: Ray [mail

Re: Need rack & vendor recommendations

2010-10-07 Thread Bill Humphries
Hi Angus, We spec APC Net Shelter SX racks for most of our clients. I like them. I really, really prefer the wider 750mm racks if you want to mounts things like PDUs vertically. We just buy everything through CDW. http://www.apc.com/products/category.cfm?id=10 Bill Angus Scott-Fleming wr

RE: disk encryption

2010-10-07 Thread Lists - Level 5
Thanks guys, we considered moving to citrix but there are just too many applications to make it feasible in my opinion besides that the majority of the people are in the office the majority of the time. I am already playing with true crypt and looks promising, and I also like phonefactor.com for au

Need rack & vendor recommendations

2010-10-07 Thread Angus Scott-Fleming
All I'm putting in a rack for about 6 servers in a vault at a client and need recommendations on what rack systems you're happy with. Also need a vendor recommendation. Since it's my first rack system I don't even know what questions to ask or features to look for or to avoid. TIA Angus ~

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Jon Harris
Marc, not that this is the correct thread to ask this but, doesn't eEye have an AV product that concentrates more on the actions of a file and less on the definitions? Jon On Thu, Oct 7, 2010 at 8:43 PM, wrote: > I’m a lot cheaper. Just give me a cold coke.. > > > > *From:* William J. Robbins

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread greg.sweers
I'm a lot cheaper. Just give me a cold coke.. From: William J. Robbins [mailto:dangerw...@gmail.com] Sent: Thursday, October 07, 2010 8:27 PM To: NT System Admin Issues Subject: Re: Interesting run-down on Stuxnet from F-Secure Who hasn't sold out for a beer? :) WJR - from my Crackberry. "If y

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread William J. Robbins
Who hasn't sold out for a beer? :) WJR - from my Crackberry. "If you find yourself in a fair fight, your tactics suck." -Original Message- From: "Andrew S. Baker" Date: Thu, 7 Oct 2010 20:08:04 To: NT System Admin Issues Reply-To: "NT System Admin Issues" Subject: Re: Interesting r

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Marc Maiffret
Hmmm you know you are right about that, I should have held out for a grasshopper. Ohh movie trivia... :) And to your second point I agree completely! -Marc From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, October 07, 2010 5:08 PM To: NT System Admin Issues Subject: Re: Interesti

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Andrew S. Baker
You sold out for a beer? :) >>These things are a great example of always being one step behind the bad guys but NOT because we actually had to be … only because technology companies allowed it to be. *And I would say that we are were we are because as consumers and corporate customers, we don'

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Marc Maiffret
Privilege escalation bugs are pretty much here and now and being used more commonly in attacks as the sophistication level is not necessarily as high as one would think. This has always been an area of interesting at eEye as we started discovering some of the first windows priv. escalation vulns

RE: 64 Bit flash beta 2

2010-10-07 Thread Crawford, Scott
That would be an L2+ http://erlegreer.com/LOL/ From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, October 07, 2010 5:18 PM To: NT System Admin Issues Subject: Re: 64 Bit flash beta 2 I enjoy reading your posts, Ben. That one brought a good chuckle... ASB On Thu, Oct 7, 2010

Re: 64 Bit flash beta 2

2010-10-07 Thread Andrew S. Baker
I enjoy reading your posts, Ben. That one brought a good chuckle... *ASB* * * On Thu, Oct 7, 2010 at 6:11 PM, Ben Scott wrote: > On Thu, Oct 7, 2010 at 12:11 PM, Steven M. Caesare > wrote: > > On difference is that the working machine ALSO has a left-over 32 bit > Flash > > 10 Active X ins

Re: 64 Bit flash beta 2

2010-10-07 Thread Ben Scott
On Thu, Oct 7, 2010 at 12:11 PM, Steven M. Caesare wrote: > On difference is that the working machine ALSO has a left-over 32 bit Flash > 10 Active X installation on it that I didn’t remove. Makes perfect sense to me -- there are at least 4096 different ways which web designers detect Flash, an

Re: Need System/Application Security Advice

2010-10-07 Thread Andrew S. Baker
I wasn't necessarily recommending this approach. I was pointing out that if the current state of affairs is not desirable, then there are other ways to address it. (And those ways are not trivial.) This is without any other information about what the data is or how it is "sensitive". As for enc

Re: Need System/Application Security Advice

2010-10-07 Thread Jeff Bunting
Wouldn't restricting the systems the account can logon to in AD prevent this? I've done this in the past, but the web servers were in their own domain. Jeff On Thu, Oct 7, 2010 at 1:53 PM, Klint Price wrote: > So what steps should be taken to secure it since no instructions are > provided to

Re: Redeploying Vista with WDS

2010-10-07 Thread Tony Patton
Can you use MDT 2010? Should be able to just import the OS image. T typed slowly on HTC Desire On 7 Oct 2010 20:34, "Joseph L. Casale" wrote: > I have a specific image I must use that only has SP1, well my current WAIK > setup needs that image to have SP2 for me to accomplish what I want to > t

RE: Need System/Application Security Advice

2010-10-07 Thread Brian Desmond
You're assuming that the app has no other network dependencies. You also need to at this point turn on SQL Auth on the DB which is not the default and not technically best practice. Further you still have the app pool running as network service which means it has the access a computer account ha

RE: Need System/Application Security Advice

2010-10-07 Thread Brian Desmond
Because IIS knows the password for the xyzweb account. If someone can get IIS to execute arbitrary code (e.g. by uploading some of their own webpages) then IIS can connect to serverB using the domain\xyzweb account, and that account has privileges on serverB. Yes... If they are using a privileg

RE: AV Opinions

2010-10-07 Thread Maglinger, Paul
We thought their management sucked too. Their SALES management, that is. J From: Ray [mailto:rz...@qwest.net] Sent: Thursday, October 07, 2010 2:39 PM To: NT System Admin Issues Subject: RE: AV Opinions We thought pretty much everything about their management sucked, including agents.

RE: AV Opinions

2010-10-07 Thread Ray
We thought pretty much everything about their management sucked, including agents. From: Alan Davies [mailto:adav...@cls-services.com] Sent: Thursday, October 07, 2010 5:48 AM To: NT System Admin Issues Subject: RE: AV Opinions Hmmm ... my comments were more around the ability to manage/c

Redeploying Vista with WDS

2010-10-07 Thread Joseph L. Casale
I have a specific image I must use that only has SP1, well my current WAIK setup needs that image to have SP2 for me to accomplish what I want to the wim before I load it into my WDS server. Any ways to get around the reference computer buildout and `sysprep /oobe /generalize /reboot` then capture?

RE: Adobe Reader

2010-10-07 Thread Terry Dickson
Thanks for the update. -Original Message- From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Thursday, October 07, 2010 1:44 PM To: NT System Admin Issues Subject: RE: Adobe Reader According to Secunia there are no unpatched vulnerabilities in Flash Player since the Sept release o

HP PODs

2010-10-07 Thread pchoward
Anyone have good or bad reviews on the HP POD or other containerised DC? Sent from my Verizon Wireless BlackBerry ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~ --- To manage subscriptions click here: http://l

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Andrew S. Baker
There are still enough people running as admin on higher versions of Windows AND some of those even disable UAC. We will have enough stupidity for quite a while yet... (Besides, 40-40% of all Windows users running XP will still be a pretty huge number of juicy targets) *ASB *(My XeeSM Profile)

RE: Adobe Reader

2010-10-07 Thread Carl Houseman
According to Secunia there are no unpatched vulnerabilities in Flash Player since the Sept release of 10.1.85.3. So CNET was either jumping the gun or behind the curve. Carl -Original Message- From: Terry Dickson [mailto:te...@treasurer.state.ks.us] Sent: Tuesday, October 05, 2010 2:55

Re: Need System/Application Security Advice

2010-10-07 Thread Andrew S. Baker
What you're asking for is a redesign One way to address this issue is the place authentication in the hands of your database tier, and not grant any special domain level rights to IIS. This way, successful attacks against the web servers [1] would still require subsequent successful attacks again

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Carl Houseman
The avenue closes as the percentage of XP machines ... how long for that? I'm guessing XP is less than 50% of Windows users before April 2014, and if not by then, real soon afterwards. Carl From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, October 07, 2010 2:25 PM To: NT Sy

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Andrew S. Baker
*>>**Looking forward a few years, non-admin users' risk will steadily increase as malware more often includes code to exploit priv escalation bugs.* I agree that we will see a rise in non-admin malware, but it will be much easier to go after the low hanging fruit of people with too much local acce

Re: SORBS.NET - email RBL issues

2010-10-07 Thread Andrew S. Baker
You're welcome. Looks like they have things under control right now, but they were under a DDoS attack earlier. http://blog.proofpoint.com/2010/10/sorbs-email-realtime-blocklist-hit-by-ddos-attack-causing-widespread-email-deliverability-problems.html *ASB *(My XeeSM Profile)

RE: Need System/Application Security Advice

2010-10-07 Thread Klint Price
So what steps should be taken to secure it since no instructions are provided to do so? Because IIS knows the password for the xyzweb account. If someone can get IIS to execute arbitrary code (e.g. by uploading some of their own webpages) then IIS can connect to serverB using the domain\xyzweb

RE: Need System/Application Security Advice

2010-10-07 Thread Brian Desmond
It's very common. There are many things you simply cannot do if you run in a local security context. FYI if you run the app pool as Network Service on a domain joined machine that provides it the domain rights of the server's computer account. If an internet facing app even not in a corp enviro

RE: Need System/Application Security Advice

2010-10-07 Thread Klint Price
Internal corporate, yes. Directly exposed to the internet? I would hope not. From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Thursday, October 07, 2010 10:34 AM To: NT System Admin Issues Subject: RE: Need System/Application Security Advice Ermm what you describe (as I understand it) i

RE: Need System/Application Security Advice

2010-10-07 Thread Brian Desmond
Ermm what you describe (as I understand it) is probably how 75-90 percent of apps run on IIS in a corporate environment. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: Klint Price [mailto:kpr...@arizonaitpro.com] Sent: Thursday, October 07, 2010 7:28 PM To: NT System Admin

Need System/Application Security Advice

2010-10-07 Thread Klint Price
My off-hour job is consulting for various companies. One such small company puts out a product that I feel needs to be fixed. Company sells two products; ProductA integrates with ProductB which both manage sensitive data and are exposed to the public Internet Windows Forms Authentication is t

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread John Hornbuckle
Ah-this one confirms that it uses the two zero-day exploits to get around users running with limited permissions. And that it doesn't work on 64-bit OS flavors. John Hornbuckle MIS Department Taylor County School District www.taylor.k12.fl.us From: Free, Bob [mailto:r...@pge.com] Sent: Thurs

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Carl Houseman
I'd say it's a good bet the privilege escalation bugs are used to get around limited user limitations and install the rootkit. Looking forward a few years, non-admin users' risk will steadily increase as malware more often includes code to exploit priv escalation bugs. There's always a priv es

RE: HP Project and Portfolio Management

2010-10-07 Thread Brian Desmond
In that case I'd suspect you could run your IT department out of a couple Excel files... Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Thursday, October 07, 2010 6:24 PM To: NT System Ad

RE: HP Project and Portfolio Management

2010-10-07 Thread John Aldrich
Thanks, guys... That's kind of what I was figuring after I Googled it. :-) We are definitely a VERY small organization... and with only one person in the entire IT department, I figured it was unlikely we'd be able to use something like this. OTOH, I'm not the most organized person in the world. ;-

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Free, Bob
FWIW- If you are interested in Stuxnet, Symantec published a nearly 50 page pdf titled W32.Stuxnet Dossier. Pretty comprehensive coverage http://www.symantec.com/content/en/us/enterprise/media/security_response /whitepapers/w32_stuxnet_dossier.pdf From: James Rankin [mailto:kz2...@

RE: 64 Bit flash beta 2

2010-10-07 Thread Steven M. Caesare
Well this is interesting IE9beta + Flash "square" preview 2 on two Win7x64 boxes. This is the 64bit flavor if IE9beta. Both machines list "Adobe Flash player 10 Active-X 64-bit" v10.2.161.23 in CtrlPnl. On one machine I can play flash videos from Vimeo, on the second machine I cannot, i

Re: Classic Shell on R2?

2010-10-07 Thread Pete Howard
Agreed, minimize interactive logon time on the server but use the kb shortcuts along with the run functionality in the address bar to keep the server pristine. Shell integration issues can lead to all kinds of nuisance behavior. It is a cool shell tho From:And

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread John Hornbuckle
An interesting read. Would running without elevated permissions eliminate the risk of infection? Or do the two zero-day exploits (privilege escalation via keyboard layout file and privilege escalation via Task Scheduler) allow infection even when running as a limited user? John Hornbuckle MI

Re: Classic Shell on R2?

2010-10-07 Thread Andrew S. Baker
Agreed! The integrated search is awesome, IMO. *ASB * On Thu, Oct 7, 2010 at 11:03 AM, Jim Mediger wrote: > I still prefer the address bar to “run” much faster for me. > > > > Click Start and start typing (or use Windows key): > > > > s | Return (Enter) – will bring up Server Manager > > ev

Re: Classic Shell on R2?

2010-10-07 Thread Steven Peck
Install PowerShell v2, configure remoting (Enable-PSRemote -Force or GPO). Brand new world. Steven Peck http://www.blkmtn.org On Thu, Oct 7, 2010 at 8:40 AM, James Rankin wrote: > I do do most management tasks from my workstation, but some stuff (like > installations) still requires local acces

Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread James Rankin
http://www.f-secure.com/weblog/archives/2040.html They seem to draw a little bit of comparison between Stuxnet and Conficker, as well as some other mildly interesting bits -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right a

RE: EMC CX4 and FAST 2.0

2010-10-07 Thread Jim Holmgren
Good luck, I'll be interested to hear about your experience with FAST. We have migrated most of our VMs to EQL now, leaving EMC for the 'heavy lifting' - DBs mostly. Jim Jim Holmgren Manager of Server Engineering XLHealth Corporation The Warehouse at Camden Yards 351 West Ca

Re: Classic Shell on R2?

2010-10-07 Thread James Rankin
I do do most management tasks from my workstation, but some stuff (like installations) still requires local access. Well technically it doesn't, but it's easier to RDP than try to install stuff via psexec On 7 October 2010 16:36, Brian Desmond wrote: > *And when you move on your profile will sti

RE: disk encryption

2010-10-07 Thread John Cook
We're evaluating Checkpoint as a whole disk encryption solution. We have a product called NxTop (Virtual Computer is the company) that is a combination of Imaging/encryption/USB management that works very well in most situations but we're looking at Checkpoint for another project. We have also u

Re: Classic Shell on R2?

2010-10-07 Thread James Rankin
I'll remove it when I leave, I'm not that stupid On 7 October 2010 16:36, Brian Desmond wrote: > *And when you move on your profile will still be on all new VMs until they > refresh the template (and someone happens to discover this and clean it up). > I don’t mean to be negative but IMO this is

RE: AV Opinions

2010-10-07 Thread greg.sweers
We have used virtually all of them. We currently have Vipre installed everywhere. Does a pretty good job, but there is always something that makes its way through. Usually a new variant of Antivirus 2010, but its easily cleaned with MalwareBytes. The only real issues we have are systems that

RE: AV Opinions

2010-10-07 Thread David Lum
Sadly, after finally mastering McAfee's ePO console after 10,000 hours of working with it I do like the granularity it offers, the fact I can sync it with AD and various OU levels (I have McAfee groups that roughly align with my OU structure), my login is LDAP pass-through, etc. I have it so it

RE: Classic Shell on R2?

2010-10-07 Thread Brian Desmond
Looks cute but why are you making it even more encouraging to do your management work on the boxes themselves? I'd put a large brick on this if I had a management say in it FWIW. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: Christopher Bodnar [mailto:christopher_bod...@

RE: Classic Shell on R2?

2010-10-07 Thread Brian Desmond
And when you move on your profile will still be on all new VMs until they refresh the template (and someone happens to discover this and clean it up). I don't mean to be negative but IMO this is pretty silly and frankly I'd be less than pleased if I was a manager here. Do your management tasks

RE: Server Core Updates

2010-10-07 Thread Carl Houseman
I'm not familiar with Server Core 2008 R2 per se, but I know Hyper-V R2 which is pretty much managed the same as Core, and there the sconfig.cmd menu has this option: 6) Download and Install Updates If you have that option, choose it and have it search for and install updates. If that d

Re: EMC CX4 and FAST 2.0

2010-10-07 Thread Sean Martin
Thanks for the feedback Jim. That feature of the EQL is one of the reasons we're giving them serious thought for our VMWare environment. It sounds like the latest version of FAST has some of the same capabilities. The previous versions required entire LUNs to be moved between storage tiers. I gues

Re: disk encryption

2010-10-07 Thread Jonathan Link
I'll be staying with PGP until it's been fully Symantecized, or perhaps later. If Truecrypt ever comes out with centralized management... That's really a huge big deal. On Thu, Oct 7, 2010 at 11:26 AM, Steven M. Caesare wrote: > We have an existing PointSec implementation, and are moving towa

RE: disk encryption

2010-10-07 Thread Steven M. Caesare
We have an existing PointSec implementation, and are moving towards PGP and/or Bitlocker. -sc From: greg.swe...@actsconsulting.net [mailto:greg.swe...@actsconsulting.net] Sent: Thursday, October 07, 2010 1:40 AM To: NT System Admin Issues Subject: RE: disk encryption Ben, We have d

Re: OT: weather.com

2010-10-07 Thread Jonathan Link
Rugby, ND. At least the monument is there. Technically, it's a bit further off than that. http://www.roadsideamerica.com/story/11486 On Thu, Oct 7, 2010 at 11:16 AM, Steven M. Caesare wrote: > I wasn’t aware… that is…? > > > > -sc > > > > *From:* Micheal Espinola Jr [mailto:michealespin...@g

RE: AV Opinions

2010-10-07 Thread Alan Davies
It will find it easily, as, I hope, would any AV! It cannot stop an infected computer continuously attempting to re-infect you though. It will sort of succeed, for a millisecond, until the AV intercepts the payload. You will therefore continue to get notified that it was detected and cleaned.

RE: OT: weather.com

2010-10-07 Thread Steven M. Caesare
I wasn’t aware… that is…? -sc From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: Wednesday, October 06, 2010 4:35 PM To: NT System Admin Issues Subject: Re: OT: weather.com So no doubt you've also been to the geographical center of North America... or did you blink?

RE: HP Project and Portfolio Management

2010-10-07 Thread Brian Desmond
Agreed. I'd also infer based on other posts from the OP that it isn't remotely in his price range. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Thursday, October 07, 2010 5:05 PM To: NT System Admin Issu

RE: HP Project and Portfolio Management

2010-10-07 Thread Free, Bob
>From what I have seen of your posts, your environment isn't of the scale PPMC is usually attracted to. It is by no means a trivial exercise to implement. -Original Message- From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Thursday, October 07, 2010 5:41 AM To: NT System Adm

RE: Classic Shell on R2?

2010-10-07 Thread Jim Mediger
I still prefer the address bar to "run" much faster for me. Click Start and start typing (or use Windows key): s | Return (Enter) - will bring up Server Manager ev | Return (Enter) - will bring up Event Manager Once you know the Window name for everything it is a huge time saver. Even if you do

Re: Classic Shell on R2?

2010-10-07 Thread James Rankin
It's just the nag factor for servers like our Citrix pre-production boxes where stuff is constantly being installed and tweaked. I don't turn it off for anyone except the third-line support guys when they are logged in to the server itself. On 7 October 2010 15:53, Ziots, Edward wrote: > Honest

RE: Classic Shell on R2?

2010-10-07 Thread Ziots, Edward
Honestly, UAC (believe it or not) is your friend, I wouldn't recommend turning it off unless you don't have any other choice J Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:ezi...@lifespan.org Cell:401-639-3505 From: James Rankin [mail

RE: Classic Shell on R2?

2010-10-07 Thread Don Guyer
That's awesome, we are a vMware shop. Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 don.gu...@prufoxroach.com From: James R

RE: Classic Shell on R2?

2010-10-07 Thread Ziots, Edward
Use Pshell for the roles or servermgrcmd, Its amazing what I am re-learning from Miansi's Win2k8 R2 book. Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:ezi...@lifespan.org Cell:401-639-3505 From: Don Guyer [mailto:don.gu...@prufox

Re: Classic Shell on R2?

2010-10-07 Thread James Rankin
What I cunningly did was logged my user account onto the template we use for all of our 2008 R2 servers and customised my local profile exactly how I wanted it. Whenever a new server is deployed through VMWare, it already has my profile loaded and working the way I like it :-) If you're not a VMWar

Re: Classic Shell on R2?

2010-10-07 Thread Andrew S. Baker
BTW, I wouldn't want to be managing software of that caliber on my production anything (servers or workstations) *ASB* On Thu, Oct 7, 2010 at 9:57 AM, Christopher Bodnar < christopher_bod...@glic.com> wrote: > Anyone using this on production servers? > > http://classicshell.sourceforge.net/ind

RE: Classic Shell on R2?

2010-10-07 Thread Don Guyer
Thx James! We have only put up a handful of 2k8 so far and haven't had time to look at things like that yet. Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 don.gu..

Re: Classic Shell on R2?

2010-10-07 Thread Andrew S. Baker
Now *that* I'll grant you is annoying. Things appear to open faster from Server Manager than if you open them individually. *ASB *(My XeeSM Profile) *Exploiting Technology for Business Advantage...* * * On Thu, Oct 7, 2010 at 10:34 AM, Don Guyer wrote: > I don

Re: Classic Shell on R2?

2010-10-07 Thread James Rankin
Shortcut for Server Manager in the taskbar Start | Run | Eventvwr | Return UAC off by GPO On 7 October 2010 15:34, Don Guyer wrote: > I don’t mind the interface changes. What I do hate is how > long it takes to open items such as Roles, Event Logs, etc. > Even on high-powered

RE: Classic Shell on R2?

2010-10-07 Thread Don Guyer
I don't mind the interface changes. What I do hate is how long it takes to open items such as Roles, Event Logs, etc. Even on high-powered servers. Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333

Re: Classic Shell on R2?

2010-10-07 Thread Andrew S. Baker
I love the new interface. Liked it from the very beginning. I try to avoid going back whenever possible. What do you dislike in particular? *ASB *(My XeeSM Profile) *Exploiting Technology for Business Advantage...* * * On Thu, Oct 7, 2010 at 9:57 AM, Christoph

Re: Way to funny

2010-10-07 Thread Jonathan Link
Yes. To get you to give up your credit card number so they can "fix" your computer. Last I saw, it was like $80, but I'm sure the number varies. And of course, they now have your CC # and 3 digit security code. On Thu, Oct 7, 2010 at 10:01 AM, James Rankin wrote: > True, I guess malware author

Re: Way to funny

2010-10-07 Thread James Rankin
True, I guess malware authors aren't bothered about faulty versions or updates, and generally try to avoid providing support wherever possible. However (although I may be hallucinating through overwork and four hours' of driving per day) didn't I see an article recently where one of the fake antivi

Re: Classic Shell on R2?

2010-10-07 Thread James Rankin
I hated the new interface...as with all things MS, it grows on you. I can't stand the old-style 2003 servers now. As for 2000 - had to use that the other day. Eugh! On 7 October 2010 14:57, Christopher Bodnar wrote: > Anyone using this on production servers? > > http://classicshell.sourceforge.n

Classic Shell on R2?

2010-10-07 Thread Christopher Bodnar
Anyone using this on production servers? http://classicshell.sourceforge.net/index.html I'm tempted, since none of us love the new interface. Chris Bodnar, MCSE Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_

Re: Way to funny

2010-10-07 Thread Andrew S. Baker
Those writers are less concerned about backwards compatibility, and more motivated by profit from functionality. The incumbents are more concerned about existing profit margins and dealing with ongoing support. *ASB *(My XeeSM Profile) *Exploiting Technology for Bu

RE: AV Opinions

2010-10-07 Thread Ames Matthew B
Well Sophos just found a copy of it in a RECYCLER directory which was a couple of levels off the root (so not the active recycler directory). From: Ray [mailto:rz...@qwest.net] Sent: 07 October 2010 12:39 To: NT System Admin Issues Subject: RE: AV Opinions Co

SORBS.NET - email RBL issues

2010-10-07 Thread Andrew S. Baker
https://isc.sans.edu/diary.html?storyid=9685 If you're using SORBS.NET for email, be advised: they're having issues this morning... :) *ASB *(My XeeSM Profile) *Exploiting Technology for Business Advantage...* * * ~ Finally, powerful endpoint security that ISN'T

Server Core Updates

2010-10-07 Thread Bob Anderson
Hello, I have a 2008 R2 Server core server virtualized with Hyper-V on a 2008 server. It is set to Automatic updates and WSUS says they are all downloaded but it has never applied any updates when I use sconfig it says updates have never been applied. I am at a loss to figure o

RE: AV Opinions

2010-10-07 Thread Alan Davies
Hmmm ... my comments were more around the ability to manage/control agents than how nice the console was to use. Also, on the additional functionality side, their local FW and software NAC components were very immature feature wise. Support varied - UK support a million times better than the o

HP Project and Portfolio Management

2010-10-07 Thread John Aldrich
Anyone here used this? One of our senior managers got an email about it from a reseller and wants me to take a look. Before I do, I'd like to know more about it so I can at least ask some intelligent questions. Please email me off-list. Thanks, John Aldrich IT Manager, Blueridge Carpet 706-276-20

RE: AV Opinions

2010-10-07 Thread Ziots, Edward
Yeah lets just say you get what you Negotiate, not what you pay for, and with downtime like we suffered ( along with others) that was just the bargaining chip someone had to basically strong arm Mcafee accordingly. Whether it turns out to be a good move or not, only time will tell J Z

RE: AV Opinions

2010-10-07 Thread Maglinger, Paul
I guess we should have had your sales rep. *sigh* From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Thursday, October 07, 2010 7:32 AM To: NT System Admin Issues Subject: RE: AV Opinions Wish I could say the same here, basically they gave us everything and the boat for like 3+ yrs,

RE: AV Opinions

2010-10-07 Thread Ziots, Edward
Wish I could say the same here, basically they gave us everything and the boat for like 3+ yrs, but that doesn't make up for the downtime of the 5958 dat fiasco either. I can't say for certain that it will get any better with Intel owning them now, but I guess that is Intel's problem to deal wit

RE: AV Opinions

2010-10-07 Thread Maglinger, Paul
We will be moving away from McCrappy after our current agreement expires. Not necessarily because of how their product performs (but that is part of it), but because of the way they handled the 5958 DAT fiasco. They made promises to our company for compensation and then reneged on the deal. I

Re: Way to funny

2010-10-07 Thread James Rankin
Malware never seems to have problems running on new versions of the OS. Unlike all of the *proper* software we use. On 7 October 2010 12:54, wrote: > > My favorite goes something like, "My XP system says it's running Antivirus > 2000. Will this work with Vista? If not, is there a free upgrade?

Re: Way to funny

2010-10-07 Thread RichardMcClary
My favorite goes something like, "My XP system says it's running Antivirus 2000. Will this work with Vista? If not, is there a free upgrade?" "Joseph L. Casale" wrote on 10/06/2010 07:33:50 PM: > http://forums13.itrc.hp.com/service/forums/questionanswer.do? > admit=109447627+1286411476658+28

RE: AV Opinions

2010-10-07 Thread Ray
That’s interesting, because we absolutely hated McAfee and it’s enterprise console, and couldn’t wait to get rid of it. We’ve ended up with significantly better coverage with Sophos than we ever did with McAfee. From: Alan Davies [mailto:adav...@cls-services.com] Sent: Thursday, October 07,

RE: AV Opinions

2010-10-07 Thread Ray
Conflicker seems to be a tough one. We got hit with it last year and McAfee was pretty ineffective against it. We opted for Sophos over the others primarily for their console. It seemed to be the most mature (for lack of a better term). My biggest concern was their tech support, which seem

RE: AV Opinions

2010-10-07 Thread Paul Hutchings
I know it can, but it's not something I've done. Their console is a little quirky if I'm honest, it's not something you'll look at and think "my that's pretty", but it is functional and over around 500 machines it works just fine. My best suggestion is try it, but persevere don't go off a q

RE: AV Opinions

2010-10-07 Thread Joseph L. Casale
What's their console like, how does it integrate if at all with AD? Thanks! jlc From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Thursday, October 07, 2010 1:28 AM To: NT System Admin Issues Subject: RE: AV Opinions Avira Antivir is very good. I tend to take the view of layers so I

RE: AV Opinions

2010-10-07 Thread Joseph L. Casale
I used to Eset back when they started to have support issues, and I received many fp's with their software. They also had known issues with their config generator that weren't addressed in the next version I waited for so I probably won't give them a second chance. jlc From: Micheal Espinola Jr

Re: Video Playlist

2010-10-07 Thread Andrew S. Baker
Take a look at TVersity.org You can manage the list of what is sent to the various screens very easily. *ASB *(My XeeSM Profile) *Exploiting Technology for Business Advantage...* * * On Wed, Oct 6, 2010 at 4:36 PM, James Kerr wrote: > I think they are interest

Re: Macs in an enterprise (Windows AD) environment

2010-10-07 Thread Andrew S. Baker
I still say, get Centrify http://www.centrify.com/directcontrol/mac_os_x.asp Much better use of your time. :) *ASB *(My XeeSM Profile) *Exploiting Technology for Business Advantage...* * * On Wed, Oct 6, 2010

Re: AV Opinions

2010-10-07 Thread Andrew S. Baker
Look at ESET NOD32 and Avast. Sophos is okay, too. *ASB *(My XeeSM Profile) *Exploiting Technology for Business Advantage...* * * On Wed, Oct 6, 2010 at 7:09 PM, Joseph L. Casale wrote: > At one of the shops that I look after, I have been asked to change the

RE: AV Opinions

2010-10-07 Thread Alan Davies
Sophos seem to be excellent detection wise. As for not detecting Conficker below, that'll have been another issue as there is no AV product out there that can't detect it. If I had to guess, perhaps one host was infected and locked out AD, but all the Sophos alerts were from machines missing M

RE: AV Opinions

2010-10-07 Thread Paul Hutchings
Avira Antivir is very good. I tend to take the view of layers so I rely a lot on having very good URL filtering in place so that hopefully the A/V doesn't need to do much, but I still rate the product very highly. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: 07 October 2

  1   2   >