RE: FIREWALL

2011-02-08 Thread Nigel Parker
Hi The machine is behind a router However it has been the victim of an attack, the router offers only minimal support (port blocking) Thanks Nigel -Original Message- From: Carl Houseman [mailto:c.house...@gmail.com] Sent: 07 February 2011 19:53 To: NT System Admin Issues Subject:

RE: FIREWALL

2011-02-08 Thread Nigel Parker
Thanks Looks like this is worth investigating Regards Nigel -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: 07 February 2011 17:39 To: NT System Admin Issues Subject: Re: FIREWALL You might want to take a look at this:

Re: GP will not apply

2011-02-08 Thread Kelli Sterley
This patch was applied. KB943729, Group Policy Preference Client Side Extensions for Windows XP. I would assume this is the latest update. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=e60b5c8f-d7dc-4b27-a261-247ce3f6c4f8 On Mon, Feb 7, 2011 at 4:52 PM, Tom Miller

RE: Dedupe Thoughts?

2011-02-08 Thread John Cook
Here's a little paper on dedup, granted it is a sponsored piece but it has some good points. http://media.techtarget.com/searchDataBackup/downloads/July_2010_Data_dedupe_essential_guide.pdf John W. Cook System Administrator Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl

Re: Windows 2008 Perms Question

2011-02-08 Thread Tom Miller
Thanks, Ben. What's the difference between P2 and P3? I kept the following to match my other shares: System, full control, this folder, subfolders and files Administrators (server local), same as above CO, full control, subfolders and files only Then added the group and Ben's recommended

Windows Server 2003 RSM

2011-02-08 Thread itli...@imcu.com
Windows Standard Server 2003 Sp1 Device manager sees Tape Drive RSM has white x in a red circle. NTBACKUP does not see tape drive?? What gives??? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage

Re: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread William Robbins
Very handy! Thanks! - WJR On Tue, Feb 8, 2011 at 09:15, Andrew S. Baker asbz...@gmail.com wrote: https://www.ultratools.com/tools/home A nice centralized spot for network diagnostics tools... *ASB *(Find me online via About.Me http://about.me/Andrew.S.Baker/bio) *Exploiting Technology

Re: win7 printer discovery

2011-02-08 Thread Bill Humphries
So, I guess my simple question is why is printer discovery broken and how do i fix it? We haven't rolled out many Win7 machines and I'm not sure if this is a common issue or not. My google-fu is failing. Bill Bill Humphries wrote: My understanding is that if you manually connect to a

Re: win7 printer discovery

2011-02-08 Thread Jonathan Link
Network discovery turned off, perhaps? On Tue, Feb 8, 2011 at 10:23 AM, Bill Humphries nt...@hedgedigger.comwrote: So, I guess my simple question is why is printer discovery broken and how do i fix it? We haven't rolled out many Win7 machines and I'm not sure if this is a common issue or

RE: FIREWALL

2011-02-08 Thread Carl Houseman
Most any NAT router includes a stateful firewall and even so, it won't let anything in unless you *choose* to forward the ports to a particular machine. So the machine cannot be attacked from outside except with help from the inside. Check your protection at https://www.grc.com/x/ne.dll?bh0bkyd2

Re: Windows 2008 Perms Question

2011-02-08 Thread Ben Scott
On Tue, Feb 8, 2011 at 9:37 AM, Tom Miller tmil...@hnncsb.org wrote: P1. Block inheritance (uncheck Inherit from parent) P2. Remove all directly applied permissions (start with an empty ACL) P3. Grant Read Execute on This folder, subfolders, and files to staff P4. Grant Read Execute on This

Re: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread Don Ely
Where's the tool for troubleshooting desktop network switches? On Tue, Feb 8, 2011 at 7:15 AM, Andrew S. Baker asbz...@gmail.com wrote: https://www.ultratools.com/tools/home A nice centralized spot for network diagnostics tools... *ASB *(Find me online via About.Me

RE: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread John Cook
Or SAN choices? John W. Cook System Administrator Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, February 08, 2011 10:59

Re: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread Don Ely
Or networked PDF readers!!! On Tue, Feb 8, 2011 at 8:00 AM, John Cook john.c...@pfsf.org wrote: Or SAN choices? *John W. Cook* *System Administrator* *Partnership For Strong Families* *5950 NW 1st Place* *Gainesville, Fl 32607* *Office (352) 244-1610* *Cell (352) 215-6944*

Re: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread William Robbins
Google.com - WJR On Tue, Feb 8, 2011 at 09:58, Don Ely don@gmail.com wrote: Where's the tool for troubleshooting desktop network switches? On Tue, Feb 8, 2011 at 7:15 AM, Andrew S. Baker asbz...@gmail.com wrote: https://www.ultratools.com/tools/home A nice centralized spot for

Re: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread Gary Slinger
http://www.springfield-armory.com/ On Tue, Feb 8, 2011 at 11:01 AM, Don Ely don@gmail.com wrote: Or networked PDF readers!!! On Tue, Feb 8, 2011 at 8:00 AM, John Cook john.c...@pfsf.org wrote: Or SAN choices? *John W. Cook* *System Administrator* *Partnership For Strong

automatic delete log files

2011-02-08 Thread Ben N
We have a few custom dev'd products we host that generate tons of log files. They cannot be turned off. (please don't ask why :) ) so after a few weeks or so, the C: drive fills up. I am curious what creative solutions people have done out there to deal with similar issues like this? There is the

Re: automatic delete log files

2011-02-08 Thread Andrew S. Baker
*There is the obvious choice of running some process/batch that deletes them on a schedule using task manager. anything else? * I like this. Actually, I prefer to archive them monthly (or daily, as the case might be), and then keep the archives around for a defined amount of time. See the

multi-factor authentication

2011-02-08 Thread Zvonimir Bilic
Hello, Does anyone use http://www.phonefactor.com/ for multi-factor authentication? Any feedback, good or bad? Thanks Zvonimir ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click

Re: automatic delete log files

2011-02-08 Thread Candee
+1. Is there a way to change the drive where they save in the program? If not, I would consider saving them and then deleting them. On Tue, Feb 8, 2011 at 11:19 AM, Andrew S. Baker asbz...@gmail.com wrote: *There is the obvious choice of running some process/batch that deletes them on a

Re: Windows 2008 Perms Question

2011-02-08 Thread Tom Miller
Thanks again, Ben. Here is what I see on the folder: NT AUTHORITY\SYSTEM:(OI)(CI)(F) CREATOR OWNER:(OI)(CI)(IO)(F) BUILTIN\Administrators:(OI)(CI)(F) domain_name\group:(OI)(CI)(RX) domain_name\group:(OI)(CI)(IO)(S,WEA,WA) domain_name\group:(S,WD,WEA,WA) I did try to change the perms from your

RE: automatic delete log files

2011-02-08 Thread Charlie Kaiser
Are they being backed up by a process that allows a post-backup command (like BE)? If so, upon successful backup, delete... I've also done scripting that does copies/versions/archive. But if you can change the logfile path, that's an excellent option. *** Charlie Kaiser

RE: automatic delete log files

2011-02-08 Thread Michael B. Smith
Been doing this for years and years http://theessentialexchange.com/blogs/michael/archive/2007/11/13/compress-weblogs-and-remove-them-with-vbscript.aspx Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Ben N [mailto:bennordlan...@gmail.com] Sent:

RE: automatic delete log files

2011-02-08 Thread Sam Cayze
I use the compression and move functions of SyncBack. It can handle tons of customizations/variables, etc. From: Ben N [mailto:bennordlan...@gmail.com] Sent: Tuesday, February 08, 2011 10:15 AM To: NT System Admin Issues Subject: automatic delete log files We have a few custom dev'd

RE: automatic delete log files

2011-02-08 Thread Ames Matthew B
I knocked up a script for one of our DOORS servers the other day which deleted any logs which were older than n days. I can look it out if you like. It could be modified to delete / move / etc the files. Even zip them up :-) From: Ben N

RE: automatic delete log files

2011-02-08 Thread Sam Cayze
The Info-Zip website hasn't been updated in years and the download links don't work. Also, curious, does it require Cygwin? If so, meh. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, February 08, 2011 10:52 AM To: NT System Admin Issues Subject: RE: automatic delete

RE: automatic delete log files

2011-02-08 Thread Michael B. Smith
No, it doesn't require Cygwin. And, I must admit, I moved to 7-zip years ago. It's current and has both a gui and a command-line version. I forgot about that, sorry... Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sam Cayze

Re: automatic delete log files

2011-02-08 Thread Don Ely
You knocked up a script?!?! Um... Wow! On Tue, Feb 8, 2011 at 8:54 AM, Ames Matthew B mba...@qinetiq.com wrote: I knocked up a script for one of our DOORS servers the other day which deleted any logs which were older than n days. I can look it out if you like. It could be modified

RE: automatic delete log files

2011-02-08 Thread Sam Cayze
Same here. Haven't used the commands a lot yet but I might fire up the readme. Seems like a good project. I can't believe the size of the SMTP logs on Exchange 2010, so I was actually looking for a solution too. This looks just as good as SyncBack, and free. Thanks for sharing.

RE: automatic delete log files

2011-02-08 Thread Michael B. Smith
Be aware - Exchange is self-limiting. By default, Exchange only keeps around 30 days of logs and will automatically trim them. If you change the file extension you'll break the automatic trimming. (Now, if you need to keep the logs, then that's something else entirely) Regards, Michael B.

RE: automatic delete log files

2011-02-08 Thread Sam Cayze
It will trim the SMTP Transport logs? I had no idea. (I haven't had them on for 30 days yet.) I have always kept the logs when I was on 2003, I'll probably just keep doing it. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, February 08, 2011 11:42 AM To: NT System

RE: automatic delete log files

2011-02-08 Thread Sam Cayze
Well look at that, 30 days by default. It's configurable by size or age. (As I'm sure you knew :) http://technet.microsoft.com/en-us/library/bb124531.aspx Thanks! From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, February 08, 2011 11:42 AM To: NT System Admin Issues

Re: Dedupe Thoughts?

2011-02-08 Thread Devin Meade
We have an almost identical setup as Jack's except we have a Dell MD1200 on RAID6 giving us 18TB of storage. The client side dedupe is very nice, our fulls run almost with no network activity. We get dedupe on ESXi (no client side dedupe though). We do D2D2T and it really helps... especially

Re: automatic delete log files

2011-02-08 Thread Andrew S. Baker
You can get the latest files here: http://sourceforge.net/projects/infozip/files/ http://sourceforge.net/projects/infozip/files/And they require no cygwin. Or, like MBS indicates, 7zip is another option. My scripts are all set for Info-Zip files today (very easy to change) and the latest

Re: multi-factor authentication

2011-02-08 Thread Erik Goldoff
I haven't used it, but I like the concept. I'm not sure the real vulnerabilities in call forwarding, lost mobile phones, etc that might mitigate the security this adds, but I think it's a good direction to research. What is cost for enterprise type implementation ? On Tue, Feb 8, 2011 at 11:22

Re: multi-factor authentication

2011-02-08 Thread Jonathan
I know that Chase uses something like this for online access to credit card information. If you try to access your account online from an unknown computer, they will prompt you for a code that they either relay to you in an email to your registered email address or a text message to your

Re: multi-factor authentication

2011-02-08 Thread S Powell
Right, Blizzard has an app (iphone) and a dongle to provide 2 factor Auth, it's sad that most banks don't do this. I think it would be a great idea. I'd like to see how easy it is to use for real users... @THIS STATMENT IS VERIFIABLY INCORRECT On Tue, Feb 8, 2011 at 10:37, Jonathan

Weird hardware/administrator issue

2011-02-08 Thread RichardMcClary
Greetings! This make sense to anyone? Dell PWS-390, XP Pro SP3. System added to one domain. Later, a second video display (NVS-290 chip) is added (but by someone logged in as a DomainAdmin). A company merger and domain consolidation project later, the old domain still exists. However, that

Re: Weird hardware/administrator issue

2011-02-08 Thread Kelli Sterley
It's a PCI-e card right? If you shut the machine down and pull the card and reboot. Verify the card is gone from everywhere, including the Nvidia software unless the current card needs it. Shut the machine back down and install it into a different slot and log back in as the domain admin (of

RE: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread James Hill
Handy, Thank you. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Wednesday, 9 February 2011 1:15 AM To: NT System Admin Issues Subject: UltraTools - Complete List of Domain and DNS Tools https://www.ultratools.com/tools/home A nice centralized spot for network diagnostics tools... ASB

Stop CD Check

2011-02-08 Thread Miller, Michael
Good afternoon! I am trying to run some software on xenapp. We have a published application on a published desktop. It obviously has nothing to do with Citrix in any way, although seemed like it could be a useful point. I am trying to get it to stop asking for a CD, the company is no longer in

Re: Stop CD Check

2011-02-08 Thread James Rankin
Have you tried mounting the .iso through VMWare (if virtualised) or through some sort of DRAC/ILO device? Not really what you are looking for but may help On 8 February 2011 21:29, Miller, Michael michael.mil...@dys.ohio.govwrote: Good afternoon! I am trying to run some software on xenapp.

RE: Stop CD Check

2011-02-08 Thread Miller, Michael
Im not virtualized. I could try ILO, I have it mounted with magic disk and it acts like it needs it in the tray. Anymore ideas? Thanks James. From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, February 08, 2011 4:35 PM To: NT System Admin Issues Subject: Re: Stop CD Check Have

IPv6 question

2011-02-08 Thread Christopher Bodnar
While the discussion of IPv6 is in play. Just wanted to put this out there to start a discussion. see what others are doing ,and get some feedback: When we initially configured our Gold build for Windows Server 2008, the decision was made to disable the following on all network adapters:

Re: Stop CD Check

2011-02-08 Thread Jonathan
I would imagine the registry section for that app lists a source file location? If not that, then some ini file somewhere? If you can find it, you should be able to modify it. I used to do that all the time for the Windows and i386 folders when I did Windows installations. Never had to insert a CD

RE: IPv6 question

2011-02-08 Thread Michael B. Smith
None of these are true: * Conservation of system resources (CPU, memory) * Smaller footprint, smaller code base, etc * Newer code, more likely to be exploited in the near future The IP stack was COMPLETELY re-implemented in Vista/2008. IPv4 as well as IPv6. They are integrated.

Vista and 7 changed behavior: Remotely adding printers

2011-02-08 Thread Matthew W. Ross
Hey List, I have what I hope to be an easy one here: Windows XP had the behavior where I could as a domain admin connect to a remote computer's printer share and add/delete printers. This was an extremely useful tool for managing printers without logging users out. Vista and Windows 7 have a

Re: Stop CD Check

2011-02-08 Thread Andrew S. Baker
Time for some troubleshooting with *Process Explorer* and *Process Monitor*. *ASB *(Find me online via About.Me http://about.me/Andrew.S.Baker/bio) *Exploiting Technology for Business Advantage... * On Tue, Feb 8, 2011 at 4:29 PM, Miller, Michael michael.mil...@dys.ohio.gov wrote: Good

Re: IPv6 question

2011-02-08 Thread Steven Peck
With only two or three specific exceptions (odd app issues I think), all new 2008/r2 servers in our environment are built with IPv6 enabled/default settings. This is specifically because of previous articles or links I read from MBS in the past and used to justify leaving it on in our

Re: [semi-OT] Last IPv4 address blocks assigned

2011-02-08 Thread Jon Harris
The University I used to work for had a policy of not allowing any IPv6 traffic. The management of DNS was telling administrators at the various offices/colleges/campuses to make sure it was turned off or blocked at their firewalls or else. The worest part of the situation was the University was

Re: IPv6 question

2011-02-08 Thread Jon Harris
I know when I deployed WSUS from a Windows 2008 server turning off IPv6 either pre WSUS build or post caused issues with Vista and Server 2008 clients. This was prior to 7 becoming available. It was worse if I had System Center Essentials in the mix. They all worked much better with IPv6

[LIST ADMIN MESSAGE] RE: [OT] Superbowl

2011-02-08 Thread Stu Sjouwerman
Let's put this one to bed shall we? Thanks ! Stu -Original Message- From: Randall [mailto:yuhro...@verizon.net] Sent: Monday, February 07, 2011 2:33 PM To: NT System Admin Issues Subject: Re: [OT] Superbowl I am a diehard Steelers fan , but the Packers outplayed them Sunday. You

RE: IPv6 question

2011-02-08 Thread Free, Bob
I would say that you put yourself, at best, in a supportability grey area. We were basically told that but in a little, well actually, a lot stronger terms a little over a year ago by a PFE. He said not to even consider doing it. We were specifically discussing DCs but he said we would

Re: OT: desktop network switches

2011-02-08 Thread Kurt Buff
Yup. It's a screwed up world, isn't it? What's possible isn't always what's desired. When I first got to this company, I blanched when I saw the cable installation in place. I was told that there was no money to fix it. I've dealt with it for a long time, and have improved things where I can,

Re: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread Kurt Buff
http://www.amazon.com/Eurotool-Hammer-Brass-Metal-Smithing/dp/B003Y09L2G/ref=sr_1_3?ie=UTF8qid=1297228440sr=8-3 On Tue, Feb 8, 2011 at 07:58, Don Ely don@gmail.com wrote: Where's the tool for troubleshooting desktop network switches? On Tue, Feb 8, 2011 at 7:15 AM, Andrew S. Baker

Re: UltraTools - Complete List of Domain and DNS Tools

2011-02-08 Thread Kurt Buff
That's useful. Thank you. On Tue, Feb 8, 2011 at 07:15, Andrew S. Baker asbz...@gmail.com wrote: https://www.ultratools.com/tools/home A nice centralized spot for network diagnostics tools... ASB (Find me online via About.Me) Exploiting Technology for Business Advantage... ~ Finally,

Re: OT: desktop network switches

2011-02-08 Thread Andrew S. Baker
***However, that doesn't mean that I can't see the better way of doing things, and coach people on achieving it.* You've been taking lessons from the Bobby Knight school of coaching, then. *ASB *(Find me online via About.Me http://about.me/Andrew.S.Baker/bio) *Exploiting Technology for

Re: OT: desktop network switches

2011-02-08 Thread Kurt Buff
Whoosh... On Tue, Feb 8, 2011 at 21:25, Andrew S. Baker asbz...@gmail.com wrote: However, that doesn't mean that I can't see the better way of doing things, and coach people on achieving it. You've been taking lessons from the Bobby Knight school of coaching, then. ASB (Find me online via