Re: Clipboard management utility

2011-03-21 Thread James Rankin
Thanks for all the suggestions. I am trying a few out now to see which meets my needs best. Cheers! On 20 March 2011 16:20, Sam Cayze wrote: > ArsClip. Love it. Highly tweakable. > > Sam > On Mar 19, 2011 11:51 PM, "Angus Scott-Fleming" > wrote: > > On 18 Mar 2011 at 13:15, James Rankin wrot

Large user profiles on server

2011-03-21 Thread Tom Miller
Folks, I use terminal server roaming profiles. We find we need to periodically delete local profiles, since one of our applications leaves temporary files behind and they fill the profile limit after a while. What I am seeing is that either logged in as local administrator or domain admin,

Re: Large user profiles on server

2011-03-21 Thread James Rankin
Does something still have a handle open to the profile directory? Try using the Find function in Process Explorer, it may be still in use. On 21 March 2011 15:42, Tom Miller wrote: > Folks, > > I use terminal server roaming profiles. We find we need to periodically > delete local profiles, sin

Forefront TMG -- Reverse Proxy OWA

2011-03-21 Thread Jon D
Anyone here use Forefront TMG to reverse proxy outlook web access on Exchange 2010? I like the idea of OWA/ActiveSync/OutlookAnywhere being in a DMZ, but it definitally adds cost. I'm curious if anyone has done it, if they recommend it, any issues, etc. Thanks, Jon ~ Finally, powerful endpoint

Re: Large user profiles on server

2011-03-21 Thread Tom Miller
I don't see any locks via Process Explorer or Process Monitor. I'll see what happens directly after the next reboot. It seems we can do it then. >>> James Rankin 3/21/2011 11:47 AM >>> Does something still have a handle open to the profile directory? Try using the Find function in Process Exp

Re: Large user profiles on server

2011-03-21 Thread James Rankin
You may want to check the event logs for any notifications from the User Profile Service about cleaning up registry entries or files that were being held open. That may also give a clue. On 21 March 2011 16:22, Tom Miller wrote: > I don't see any locks via Process Explorer or Process Monitor. I

RE: Forefront TMG -- Reverse Proxy OWA

2011-03-21 Thread Brian Desmond
I've deployed this lots of times. It works great although the benefit is questionable if you ask me. Thanks, Brian Desmond br...@briandesmond.com c   - 312.731.3132 -Original Message- From: Jon D [mailto:rekcahp...@gmail.com] Sent: Monday, March 21, 2011 10:57 AM To: NT System Admin

RE: Win 7 configuration options?

2011-03-21 Thread Guyer, Don
"Other than paging through the GPO MMC snapin and looking at each setting, is there good comprehensive doc that lists everything out that we can use as the basis for discussion?" Not that I've ever seen. If there is, I'd love to know how to do this! Don Guyer Windows Systems Engineer Data

Certificate Authentication with VPNs

2011-03-21 Thread Todd Arnett
We are currently looking to deploy an L2TP/IPSEC VPN server using RRAS in 2008 R2 with the following goals: * Two factor authentication * A protocol and Authentication method that is supported on apple products, particularly iPads (I know, *deep sigh*) * Some type of m

Re: Win 7 configuration options?

2011-03-21 Thread William Robbins
Lest I be thought completely useless: Group Policy Settings Reference for Windows and Windows Server http://www.microsoft.com/downloads/en/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb&displaylang=en - WJR On Mon, Mar 21, 2011 at 12:32, Steven M. Caesare wrote: > So… I’m being pul

RE: Win 7 configuration options?

2011-03-21 Thread Steven M. Caesare
Awesome, thanks WJR. Next question... how do folks define what they want in their organizations? Do you go through this ginormous document? Do you just decide on SOME things you want to do initially (redirect default save locations, etc...), and then refine over time? How do you go abou

RE: Win 7 configuration options?

2011-03-21 Thread Guyer, Don
My bad, I thought you meant you wanted to gather all of the existing GPOs and their settings. Don Guyer Windows Systems Engineer Datasafe Platform Enterprise Technology Group Fiserv don.gu...@fiserv.com Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com

RE: Win 7 configuration options?

2011-03-21 Thread Kennedy, Jim
Lock them down until the scream then back off a little at a time until the screaming stops. But seriously we go with your gut feeling. The only thing we customize is the default user profile so their initial desktop experience is what we want for them...after that it is all handled via GPO's or

RE: Getting SQL 2008 to use 16GB RAM

2011-03-21 Thread Brad DeHart
Through SQL Server Management Studio, connect to the DB server in question, right click on the DB server name in the Object Explorer pane and select properties. Select the Memory page, and you'll see a "Use AWE to allocate memory" option(which is unselected by default). Thanks, Brad -Orig

Re: Win 7 configuration options?

2011-03-21 Thread William Robbins
Well, in my past positions, we started off with business needs, and looked to see what we could accomplish with GPO's. Typically it was things to meet/exceed existing security polcies, but were sometimes as trite as setting a facility specific wallpaper. I suppose, not knowing what you are needin

RE: Win 7 configuration options?

2011-03-21 Thread Steven M. Caesare
Thanks Jim. I've been out of the desktop deployment game for a while And quite frankly have ignored what's up in the latest incarnations of Windows in this regard. I'm googling for profile customization steps/nest practices... but If anybody has anything they want to share that they've

RE: Win 7 configuration options?

2011-03-21 Thread Steven M. Caesare
Oh agreed. We are using Group Policy for enforcing the US Government Baseline security settings... but that's been implemented by my network team here, and focused specifically on the policy settings we have to implement to comply with the mandates. But by and large it looks like the desktop gr

Re: Win 7 configuration options?

2011-03-21 Thread Andrew S. Baker
*>>Do you go through this ginormous document? Do you just decide on SOME things you want to do initially (redirect default save locations, etc…), and then refine over time?* The latter. We just address pain points. *>>How do you go about deciding settings things that _AREN’T_ managed via GPO?

RE: Large user profiles on server

2011-03-21 Thread Kim Longenbaugh
Will "uphclean" work for you? http://www.microsoft.com/downloads/en/details.aspx?FamilyID=1b286e6d-8912-4e18-b570-42470e2f3582&displaylang=en From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Monday, March 21, 2011 10:43 AM To: NT System Admin Issues Subject: Large user profiles on server Fol

RE: Win 7 configuration options?

2011-03-21 Thread Tom Miller
We are starting the Win 7 rollout here as well. The only two things I added to our standard settings were 1) Disable the really annoying "Action Center" and 2) Disable Windows Libraries. Windows Libraries are a neat idea, but at least in my work environment it will just add to confusion. I can

Re: Forefront TMG -- Reverse Proxy OWA

2011-03-21 Thread Andrew S. Baker
Why? *ASB *(Find me online via About.Me ) *Exploiting Technology for Business Advantage... * On Mon, Mar 21, 2011 at 12:59 PM, Brian Desmond wrote: > I've deployed this lots of times. It works great although the benefit is > questionable if you ask me.

RE: Forefront TMG -- Reverse Proxy OWA

2011-03-21 Thread Brian Desmond
Not sure how much value you get from a couple servers plus associated load balancing infrastructure that are passing back HTTPS/SMTP versus just NATing it across the firewall. Looking at most of the large scale Exchange deployments I've worked plus all my current mid-scale customers, very few of

RE: Win 7 configuration options?

2011-03-21 Thread Steven M. Caesare
Thanks Tom… I’ll take ‘em if you don’t mind… -sc From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Monday, March 21, 2011 2:29 PM To: NT System Admin Issues Subject: RE: Win 7 configuration options? We are starting the Win 7 rollout here as well. The only two things I added to our s

Re: Large user profiles on server

2011-03-21 Thread Rankin, James R
Uphclean is now the user profile service on 2008 Typed frustratingly slowly on my BlackBerry® wireless device -Original Message- From: Kim Longenbaugh Date: Mon, 21 Mar 2011 18:29:05 To: NT System Admin Issues Reply-To: "NT System Admin Issues" Subject: RE: Large user profiles on serv

Re: Win 7 configuration options?

2011-03-21 Thread Rankin, James R
Can you disable Libraries via GPO? Please share if there is a way...libraries are a pain for users used to the old ways Typed frustratingly slowly on my BlackBerry® wireless device -Original Message- From: "Tom Miller" Date: Mon, 21 Mar 2011 14:29:19 To: NT System Admin Issues Reply-To

RE: Win 7 configuration options?

2011-03-21 Thread Garcia-Moran, Carlos
+1 and Action Center Too, id be interested Cheers! From: Rankin, James R [mailto:kz2...@googlemail.com] Sent: Monday, March 21, 2011 3:49 PM To: NT System Admin Issues Subject: Re: Win 7 configuration options? Can you disable Libraries via GPO? Please share if there is a way...libraries are a p

RE: Win 7 configuration options?

2011-03-21 Thread Guyer, Don
There are scripts you could GPO. Don Guyer Windows Systems Engineer Datasafe Platform Enterprise Technology Group Fiserv don.gu...@fiserv.com Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com From: Rankin, James R [mailto:kz2...@googlemail.com]

RE: Win 7 configuration options?

2011-03-21 Thread Guyer, Don
Google “disable action center GPO”. Don Guyer Windows Systems Engineer Datasafe Platform Enterprise Technology Group Fiserv don.gu...@fiserv.com Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com From: Garcia-Moran, Carlos [mailto:cgarciamo...@s

RE: Win 7 configuration options?

2011-03-21 Thread Crawford, Scott
Just curious what the issues are with libraries. Maybe you need to upgrade your users ☺ We’ve only started our win7 deploy, but the libraries seem to just need a small amount of explanation and then they become quite useful. If the default location for each library is the location users expect,

Re: Win 7 configuration options?

2011-03-21 Thread Ben Scott
On Mon, Mar 21, 2011 at 4:00 PM, Crawford, Scott wrote: > Maybe you need to upgrade your users J Sweet zombie Jesus, if I could do that, I could eliminate half my budget!!! :-) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: Win 7 configuration options?

2011-03-21 Thread Guyer, Don
I've learned to just play that game best I can, without going crazy. I wouldn't be employed if it weren't for (L)users. If they all were computer-savvy and the systems did what they needed them to do 100% of the time, then I'd be slinging lumber at Home Depot. :) Don Guyer Windows Systems Enginee

Re: Win 7 configuration options?

2011-03-21 Thread Rankin, James R
We use mandatory profiles and citrix. The default save location is inaccessible, which just confuses our user base. Currently we get around it with appsense. Typed frustratingly slowly on my BlackBerry® wireless device -Original Message- From: "Crawford, Scott" Date: Mon, 21 Mar 2011 2

RE: Win 7 configuration options?

2011-03-21 Thread Tom Miller
Okay, let me take a look. I had to do something special to turn Libraries off when we had a XenDesktop pilot. The pilot is done and my notes don't cover what I'm looking for, but I think I did something like this: http://technet.microsoft.com/en-us/library/ee617161(WS.10).aspx And for Librari

RE: Terminal Services and file transfer

2011-03-21 Thread Webster
Did you get this resolved? Webster From: Jim von Stein [mailto:jvonst...@soastc.org] Subject: Terminal Services and file transfer I'm running Terminal Services on Win Server 2003 SP2 for a branch office. My users are unable to transfer files from their workstation to the terminal se

Re: Win 7 configuration options?

2011-03-21 Thread Rankin, James R
Ah, already used those. I was hoping there was actually a "standard" GPO I could use. I've already hacked those in with GPP, cheers tho! Typed frustratingly slowly on my BlackBerry® wireless device -Original Message- From: "Tom Miller" Date: Mon, 21 Mar 2011 16:29:11 To: NT System Admi

The PHP Group confirms that its wiki.php.net box was hacked over the weekend - SC Magazine UK

2011-03-21 Thread Andrew S. Baker
The PHP Group has confirmed the compromise of its servers over the weekend. It issued a statement that said its wiki.php.net box was compromised and attackers were able to collect wiki account credentials. http://www.scmagazineuk.com/the-php-group-confirms-that-its-wikiphpnet-box-was-hacked-over-

Re: Ted

2011-03-21 Thread Jonathan Link
+∞ On Mon, Mar 21, 2011 at 4:44 PM, Kim Longenbaugh wrote: > Maybe ted needs to be unsubscribed from the list… > > > > > > > > *From:* Ted Gibson [mailto:acl...@spamarrest.com] > *Sent:* Monday, March 21, 2011 3:41 PM > *To:* Kim Longenbaugh > *Subject:* RE: RE: Large user profiles on server (ve

RE: The PHP Group confirms that its wiki.php.net box was hacked over the weekend - SC Magazine UK

2011-03-21 Thread Carl Houseman
Are you really wondering or just rhetorically wondering to make the joke? The article suggests it wasn't PHP itself to blame. Carl From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, March 21, 2011 4:41 PM To: NT System Admin Issues Subject: The PHP Group confirms that its wiki.

RE: Ted

2011-03-21 Thread Carl Houseman
Gmail is your friend... I don't get any of these annoying messages. Carl From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Monday, March 21, 2011 4:50 PM To: NT System Admin Issues Subject: Re: Ted +∞ On Mon, Mar 21, 2011 at 4:44 PM, Kim Longenbaugh wrote: Maybe ted n

Re: Ted

2011-03-21 Thread Ben Scott
On Mon, Mar 21, 2011 at 4:44 PM, Kim Longenbaugh wrote: > Maybe ted needs to be unsubscribed from the list… s/list/Internet/ -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~ --- To manage subscriptions cl

Re: The PHP Group confirms that its wiki.php.net box was hacked over the weekend - SC Magazine UK

2011-03-21 Thread Ben Scott
On Mon, Mar 21, 2011 at 4:41 PM, Andrew S. Baker wrote: > I wonder if they used a PHP vulnerability?  :) Now, now. PHP has much improved their security over the years. It's somewhat analogous as to how MS IIS was more of a remote administration platform than a web server in its first several y

RE: Win 7 configuration options?

2011-03-21 Thread Sam Cayze
I’d first look into this: Apply High-Security Template (hisecws) http://www.tech-faq.com/understanding-security-templates.html And pick/test a security template that doesn’t break anything in your environment. Here is a copy

RE: Ted

2011-03-21 Thread Sam Cayze
Never seen one. From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Monday, March 21, 2011 3:44 PM To: NT System Admin Issues Subject: Ted Maybe ted needs to be unsubscribed from the list. From: Ted Gibson [mailto:acl...@spamarrest.com] Sent: Monday, March 21, 2011 3:4

RE: Ted

2011-03-21 Thread Michael B. Smith
Always goes to junk mail for me. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sam Cayze [mailto:sca...@gmail.com] Sent: Monday, March 21, 2011 5:21 PM To: NT System Admin Issues Subject: RE: Ted Never seen one... From: Kim Longenbaugh [mailto:k...

RE: Ted

2011-03-21 Thread Kim Longenbaugh
That's where this one was From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, March 21, 2011 4:35 PM To: NT System Admin Issues Subject: RE: Ted Always goes to junk mail for me. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sam Cayz

Re: Ted

2011-03-21 Thread Kramer, Jack
Looks like my server-side filter is blocking these before they even hit the spam folder. Interesting. Jack Kramer Computer Systems Specialist University Relations, Michigan State University w: 517-884-1231 / c: 248-635-4955 From: "Michael B. Smith" mailto:mich...@smithcons.com>> Reply-To: N

Re: Win 7 configuration options?

2011-03-21 Thread Ben Scott
On Mon, Mar 21, 2011 at 5:19 PM, Sam Cayze wrote: > I’d first look into this: > > Apply High-Security Template (hisecws) > http://www.tech-faq.com/understanding-security-templates.html > > And pick/test a security template that doesn’t break anything in your > environment. That document seems t

Re: Forefront TMG -- Reverse Proxy OWA

2011-03-21 Thread Andrew S. Baker
Ah... Thanks. Personally, that's the way I have almost always done it (NAT'd). *ASB *(Find me online via About.Me ) *Exploiting Technology for Business Advantage... * On Mon, Mar 21, 2011 at 3:13 PM, Brian Desmond wrote: > *Not sure how much value you

Re: The PHP Group confirms that its wiki.php.net box was hacked over the weekend - SC Magazine UK

2011-03-21 Thread Andrew S. Baker
Joking. :) While the Wiki software could have a PHP-dependent vulnerability, the reports don't appear to suggest that. *ASB *(Find me online via About.Me ) *Exploiting Technology for Business Advantage... * On Mon, Mar 21, 2011 at 4:50 PM, Carl Houseman

RE: Ted

2011-03-21 Thread Kim Longenbaugh
My point is he should turn that "feature" off, at least for messages from the list. Why should the members have to filter/delete every time we post or reply. From: Kramer, Jack [mailto:jack.kra...@ur.msu.edu] Sent: Monday, March 21, 2011 4:39 PM To: NT System Admin Issues Subject: Re: Ted Looks

Re: Ted

2011-03-21 Thread Ben Scott
On Mon, Mar 21, 2011 at 5:38 PM, Kramer, Jack wrote: > Looks like my server-side filter is blocking these before they even > hit the spam folder. As it should. Challenge/response email schemes of that sort generate plenty of backscatter, which just compounds the spam problem. To say nothing o

Re: The PHP Group confirms that its wiki.php.net box was hacked over the weekend - SC Magazine UK

2011-03-21 Thread Andrew S. Baker
Yeah, they have for the most part. *ASB *(Find me online via About.Me ) *Exploiting Technology for Business Advantage... * On Mon, Mar 21, 2011 at 5:06 PM, Ben Scott wrote: > On Mon, Mar 21, 2011 at 4:41 PM, Andrew S. Baker > wrote: > > I wonder if th

RE: Ted

2011-03-21 Thread Michael B. Smith
Neither Stu nor Don responded to my request to have him banned and I'm not willing to subscribe to his crap to ask him to fix it. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Monday, March 21,

RE: Win 7 configuration options?

2011-03-21 Thread Sam Cayze
Awesome info, thanks. I got curious about that I soon as I compiled that email :) -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Monday, March 21, 2011 4:40 PM To: NT System Admin Issues Subject: Re: Win 7 configuration options? On Mon, Mar 21, 2011 at 5:19 PM, S

RE: Ted

2011-03-21 Thread Sam Cayze
Their spam filters may have blocked your message if you forwarded his email to them. Just a thought. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, March 21, 2011 4:51 PM To: NT System Admin Issues Subject: RE: Ted Neither Stu nor Don responded to my request to have h

RE: Ted

2011-03-21 Thread Michael B. Smith
HAHAHAHAHAHA. I didn't think of that. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sam Cayze [mailto:sca...@gmail.com] Sent: Monday, March 21, 2011 5:54 PM To: NT System Admin Issues Subject: RE: Ted Their spam filters may have blocked your messag

Re: Win 7 configuration options?

2011-03-21 Thread Andrew S. Baker
*>> If they all were computer-savvy and the systems did what they needed them to do 100% of the time, then I'd be slinging lumber at Home Depot.* I don't know why people insist on saying that. Whenever I've had the benefit of users that were sufficiently capable of using technology such that the

RE: Win 7 configuration options?

2011-03-21 Thread Crawford, Scott
Well said. Flakey computers and user problems are distractions from my job, not the end goal. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, March 21, 2011 5:02 PM To: NT System Admin Issues Subject: Re: Win 7 configuration options? >> If they all were computer-savvy and the sys

Re: Large user profiles on server

2011-03-21 Thread Sean Martin
We use a combination of delprof and uphclean in our Citrix environment. However, we still run into issues where profile directories haven't been fully purged. - Sean On Mon, Mar 21, 2011 at 11:46 AM, Rankin, James R wrote: > Uphclean is now the user profile service on 2008 > > Typed frustratingl

RE: Large user profiles on server

2011-03-21 Thread Crawford, Scott
Delprof fails on windows 7 with antivirus software. AV updates the last accessed attribute on the files so delprof thinks they've been used recently. There's a hotfix available, but the fix is included in SP1. Not sure if that's relevant to your situation, but it bit us. From: Sean Martin [ma

Re: Win 7 configuration options?

2011-03-21 Thread Andrew S. Baker
Note to self: Spelling and grammar are hideous in the moments immediately prior to getting out the door... *ASB *(Find me online via About.Me ) *Exploiting Technology for Business Advantage... * On Mon, Mar 21, 2011 at 6:02 PM, Andrew S. Baker wrote: >

RE: Forefront TMG -- Reverse Proxy OWA

2011-03-21 Thread Thomas W Shinder MD
I know literally thousands of people who have done it. Ranging from small to mid to ginormous enterprise customers. Lots of advantages *if* security is a priorty. If the firm sees security as PIA and bad things "happen to other people" - probably not worth the effort. But there are a lot of other

Re: Forefront TMG -- Reverse Proxy OWA

2011-03-21 Thread Harry Singh
Out of curiosity, what are the added security advantages over a NAT'd connection through a FW ? On Mon, Mar 21, 2011 at 8:10 PM, Thomas W Shinder MD wrote: > I know literally thousands of people who have done it. > Ranging from small to mid to ginormous enterprise customers. > Lots of advantage

RE: Certificate Authentication with VPNs

2011-03-21 Thread Ken Schaefer
Either you generate a CSR or have them generate a CSR (a certificate request file). Submit this manually to your PKI server. Get the resulting pfx file to the remote user in some kind of secure way. Cheers Ken From: Todd Arnett [mailto:tarn...@lastar.com] Sent: Tuesday, 22 March 2011 1:48 AM To:

RE: Win 7 configuration options?

2011-03-21 Thread Carl Houseman
"Time sync" is highly forgivable. Your typing subroutine concluded that those two words just don't go together, and so auto-corrected to a synonym that's more related to "time" than is "sink". I was writing about decryption today and when I proof-read before clicking send found "description".

Re: Large user profiles on server

2011-03-21 Thread Sean Martin
Thanks for the info. However, we experience the problem on our XenApp5 servers (Windows 2003). We've tried running delprof as a shutdown script, startup script, and both. Ocassionally something just locks a file within the user profile so it can't be deleted entirely, which leaves the root folder b