RE: New ISP - I have to route public IP's

2011-11-15 Thread John Gwinner
Why do you need separate IPs for the web servers given they're all being proxied through TMG, btw? Well, there's other services besides the web servers, like SMTP (even though we outsource our email, I still need an SMTP server internally for various reasons), VPN, etc. But, if I could

RE: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Greg Olson
Because you can't allocate more vcpu than you physically have, so if you were moving it to say a single cpu, dual-core box physical, the new esxi would be a single cpu, dual core max as well. You're not running it with say 2 virtual cpu, on a box that has two 6 core procs, in which case based

Re: OT: Gadgets

2011-11-15 Thread Erik Goldoff
would it not be easier/simpler/less expensive to just copy music to an MP3 player and hook to inexpensive external speakers and be done with it ? Maybe not the most elegant high tech solution, but seems to me it would meet your requirements. On Tue, Nov 15, 2011 at 7:51 AM, James Rankin

OT: Gadgets

2011-11-15 Thread James Rankin
Just moved to a much bigger house and I am trying to revamp all my electronic kit. I have a lot of gym equipment in my garage, but I was fancying putting some sort of music-playing device into the garage that could connect up to my TeraStation and play a selection of music directly from there.

Re: OT: Gadgets

2011-11-15 Thread James Rankin
Sounds fairly decent and straightforward. I have the unfortunate tendency to change my favourite tunes very often, though, which was why I was looking for some external wireless capability (that really means I am too lazy to reload the mp3 player with different tunes) :-) On 15 November 2011

Re: OT: Gadgets

2011-11-15 Thread Erik Goldoff
I challenge you to find a current MP3 player with less than 4gb , many have more storage ... just load it up, and then create playlists depending on theme, mood, tempo, etc .. On Tue, Nov 15, 2011 at 8:01 AM, James Rankin kz2...@googlemail.com wrote: Sounds fairly decent and straightforward. I

Re: OT: Gadgets

2011-11-15 Thread Erik Goldoff
I suppose your other alternative is to bring a wireless laptop to your workout dungeon to access your main storage, but that seems overkill to me ( not to mention potential risk to the laptop in that workout environment ) On Tue, Nov 15, 2011 at 8:01 AM, James Rankin kz2...@googlemail.com wrote:

Re: OT: Gadgets

2011-11-15 Thread James Rankin
I realise that storage is not the issueI'm not trying to be awkward, but if I had a new favourite song, once I'd downloaded it I would have to copy it to two places (or more, depending on how far I take this idea). I know it's not much work but the IT bod in me hates duplication of effort :-)

Re: OT: Gadgets

2011-11-15 Thread James Rankin
Yeah, could do that, it is overkill though because I'd then have to fire it up and access the playlists etc. Been Googling about for an mp3-capable wireless home stereo of some sort, but I'm not having much luck :-( On 15 November 2011 13:07, Erik Goldoff egold...@gmail.com wrote: I suppose

RE: Gadgets

2011-11-15 Thread John Hornbuckle
No advice on the gadgets, but congrats on the housing upgrade! :) John From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, November 15, 2011 7:52 AM To: NT System Admin Issues Subject: OT: Gadgets Just moved to a much bigger house and I am trying to revamp all my electronic

RE: OT: Gadgets

2011-11-15 Thread Al Lilianstrom
Smart phone with wireless capability, Amazon cloud player app, and your music in the Amazon cloud. Your music is everywhere you have wireless access and no hit on your data plan. Works great. I also use it over my 4G connection when I'm out walking or when we're doing something like bowling

Re: OT: Gadgets

2011-11-15 Thread James Rankin
That's a cool idea, although my experience on the Blackberry isn't a great sound (although I did say the quality didn't matter, I know!). It probably means more charging of my phone battery though, which was why I was thinking around an AC-powered device of some type. I'm betting the Amazon cloud

Re: Gadgets

2011-11-15 Thread James Rankin
Cheers! Now I just have to keep enough work coming in to pay for it :-0 On 15 November 2011 13:26, John Hornbuckle john.hornbuc...@taylor.k12.fl.us wrote: No advice on the gadgets, but congrats on the housing upgrade! ** ** :) ** ** ** ** John ** ** ** ** ** **

RE: OT: Gadgets

2011-11-15 Thread Al Lilianstrom
The cloud player app is Android only right now. It could possibly work in the browser on your BB but I'm not sure. Good reason to upgrade your phone... al -- Al Lilianstrom CD/LSC/SOS/ES lilst...@fnal.govmailto:lilst...@fnal.gov From: James Rankin [mailto:kz2...@googlemail.com]

RE: OT: Gadgets

2011-11-15 Thread Maglinger, Paul
You're looking at this all wrong. Don't put your gym into the garage, put it into your office. http://www.woodway.com/desktreadmill/desktreadmill.html -Paul From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, November 15, 2011 7:36 AM To: NT System Admin Issues Subject: Re: OT:

RE: OT: Gadgets

2011-11-15 Thread John Cook
Old laptop with wifi, cheap set of speakers, Google Music John W. Cook System Administrator Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 From: James Rankin

RE: OT: Gadgets

2011-11-15 Thread Simon Butler
Why don't you pick up a Squeezebox Classic from eBay and then hook it up to a cheap stereo? That is what I did. The old stereo I had as teenager got a new lease of life because it had phono ports. The CD and tape deck became redundant years ago. Just make sure you get the wireless and not the

Re: OT: Gadgets

2011-11-15 Thread Kevin Lundy
The WD TV live can stream from a single file share and output to any amp. I do that over powerline ethernet. Get the Plus version with a drive and it can synchronize the files locally. On 11/15/11, James Rankin kz2...@googlemail.com wrote: Yeah, could do that, it is overkill though because I'd

Re: Gadgets

2011-11-15 Thread Pete Howard
Im in the same boat and looking at eventually hooking up the whole house with a sonos or squeezebox to stream music everywhere. For now, I use an ipad with a klipsch docking station to get pretty good output. Then launch pandora, itunes, slacker, last.fm, spotify or stream mp3 from your PC or

Re: OT: Gadgets

2011-11-15 Thread Gary Slinger
Airport Express (~$50) coupled to an iHome mini speaker (~$20). Done. Cheap, portable, reusable kit if you decide to upscale later on. On Tue, Nov 15, 2011 at 7:51 AM, James Rankin kz2...@googlemail.com wrote: Just moved to a much bigger house and I am trying to revamp all my electronic kit.

RE: OT: Gadgets

2011-11-15 Thread N Parr
Just go all out, hang a touch screen PC on the wall and use media center. Mine doubles as a video player for movies or the slingbox to the projector that points out the window to the screen on the patio. Output the audio to an old stereo and you're good go. If wifi won't cut it use a

RE: OT: Gadgets

2011-11-15 Thread N Parr
Just noticed today's woot.com, it may work well also. From: Gary Slinger [mailto:gary.slin...@gmail.com] Sent: Tuesday, November 15, 2011 8:19 AM To: NT System Admin Issues Subject: Re: OT: Gadgets Airport Express (~$50) coupled to an iHome mini speaker (~$20).

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/14/2011 7:52 PM, Crawford, Scott wrote: Your general plan sounds decent and, as other have mentioned, your concerns could probably be overcome with a pre-sysprep snapshot. But, why not go a step further and create a copy of the .vmdk file and try the migration with that while the

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/14/2011 10:20 PM, Benjamin Zachary wrote: In the past years back, we would install the driver controller (Raid/HP/Dell etc) into the 2000/2003 vm, then ghost it from VM to physical. Usually this got us at least into booting and then re-detected all the new hardware , several reboots later

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Graeme Carstairs
We have use Platespin to migrate from P2P and P2V, and V2P before. Nice and easy and depending on the server setup, old one stays live, until new one starts last quick sync and new one is live, exactly as the old one was. Simples Graeme On 15 November 2011 14:56, Mike Leone

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/15/2011 10:08 AM, Kennedy, Jim wrote: It really sounds like this app server is very mission critical. Restore one of your DC’s to a test domain. Seize all the rolls, metadata cleanup for all the missing DC’s. Copy your VM over to that domain, bring it up and test both plans. I have

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/15/2011 10:12 AM, Graeme Carstairs wrote: We have use Platespin to migrate from P2P and P2V, and V2P before. There will be no software purchases for this project. I have asked; it won't happen. So any recommended methods utilizing them won't help me, unfortunately ... ~ Finally,

RE: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Kennedy, Jim
Couldn’t you copy over the VM to your test domain and at least test your plan and prove it would work, or not. From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Tuesday, November 15, 2011 10:22 AM To: NT System Admin Issues Subject: Re: OT - converting a VMware VM back to a physical box On

RE: Whitelisting Pros Cons?

2011-11-15 Thread Joseph Heaton
Would it be better to have a tool that only does whitelisting, or a software more like Viewfinity, where you can do both white and black lists, and also elevate permissions for applications that aren't on either list, but are needed by a few people, which wouldn't warrant putting it on the

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/15/2011 10:23 AM, Kennedy, Jim wrote: Couldn’t you copy over the VM to your test domain and at least test your plan and prove it would work, or not. No. Because the VM hardware wouldn't have changed. The worry is getting the VM to boot on the completely different hardware in the

Re: OT: Gadgets

2011-11-15 Thread Bill Humphries
Just be aware that the airport express ties you to itunes. otherwise it is awesome. Gary Slinger wrote: Airport Express (~$50) coupled to an iHome mini speaker (~$20). Done. Cheap, portable, reusable kit if you decide to upscale later on. On Tue, Nov 15, 2011 at 7:51 AM, James Rankin

RE: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Coleman, Hunter
While I also think that *should* work, what happens if I'm wrong? I wouldn't have any fall back, as the VM won't work due to SID changes during the domain removal/re-join. And while a domain removal/re-join should have no impact on the application ... what if we're wrong, and it does have some

RE: Whitelisting Pros Cons? - Lumension

2011-11-15 Thread Stu Sjouwerman
Anyone experience with Lumension? This seems to be one of the bigger players. Did some testing with this perhaps? Warm regards, Stu From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Tuesday, November 15, 2011 10:47 AM To: NT System Admin Issues Subject: RE: Whitelisting Pros Cons? Would

Re: Whitelisting Pros Cons? - Lumension

2011-11-15 Thread James Rankin
Can't believe that AppSense AM isn't in there as one of the test subjects. I think the issue is that most people use them for the Environment Manager (EM) feature of the suite so AppSense are treated more as a competitor in the UEM (User Environment Management) market rather than against other

Re: OT: Gadgets

2011-11-15 Thread Jeff Bunting
Check out sonos.com. Might be more than you want to spend, but sounds like it may be what you're looking for. Jeff On Tue, Nov 15, 2011 at 7:51 AM, James Rankin kz2...@googlemail.com wrote: Just moved to a much bigger house and I am trying to revamp all my electronic kit. I have a lot of gym

Re: OT: Gadgets

2011-11-15 Thread Jeff Bunting
never mind I didn't know what a squeezebox was till after I posted this. cut your workout time by 5 minutes so you'll have enough energy to make playlists and copy files around :-) On Tue, Nov 15, 2011 at 11:22 AM, Jeff Bunting bunting.j...@gmail.comwrote: Check out sonos.com. Might be

Re: Whitelisting Pros Cons?

2011-11-15 Thread Andrew S. Baker
The greater the flexibility of the tool, the less tools you need to manage your security. Relying on 1 tool is not wise, but having to manage 12 slightly overlapping tools is its own nightmare. Getting it down to 3 or 4 tools is useful. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the

Re: OT: Gadgets

2011-11-15 Thread Steven Peck
If you end up needing speakers, I got a set of in wall from monoprice.comand they sound great. They have a way broader selection then I had realized until my boss suggested them when I was looking a month ago. Steven Peck http://www.blkmtn.org On Tue, Nov 15, 2011 at 4:51 AM, James Rankin

Re: OT: Gadgets

2011-11-15 Thread Rankin, James R
Thanks guys. Lots of food for thought now, cheers! Sent from my SR-71 Blackbird -Original Message- From: Steven Peck sep...@gmail.com Date: Tue, 15 Nov 2011 09:01:00 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin Issues

Re: OT: Gadgets

2011-11-15 Thread Michael White
+1 On Tue, Nov 15, 2011 at 6:19 AM, Gary Slinger gary.slin...@gmail.com wrote: Airport Express (~$50) coupled to an iHome mini speaker (~$20).   Done. Cheap, portable, reusable kit if you decide to upscale later on. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: MDT and WIM Deployment?

2011-11-15 Thread Leroux, Harold
Here are a few of the resources I have used. Hope this helps 1. http://www.windowsnetworking.com/articles_tutorials/Deploying-Windows-7-Part1.html 2. Deployment Fundamentals-Volume 1 by Johan Arwidmark and Mikael Nystom this will give you a jump start especially if you need to get

Re: Whitelisting Pros Cons?

2011-11-15 Thread Doug Hampshire
Clearly these results are flawed if McAfee Anything gets higher than a -3 in any category. :-) On Mon, Nov 14, 2011 at 5:16 PM, Stu Sjouwerman s...@sunbelt-software.comwrote: Thanks Micheal. Anyone experience with any of the Whitelisting products in this InfoWorld Review? ** **

RE: MDT and WIM Deployment?

2011-11-15 Thread Rod Trent
The original inventor, if you will.will be giving a webcast on Thursday: http://myitforum.com/myitforumwp/services/events/event/sccm-guru-webcast-ser ies-2/ All of the MDT folks at Microsoft participate on the MDT email list: http://myitforum.com/myitforumwp/support/email-lists/

RE: MDT and WIM Deployment?

2011-11-15 Thread Ralph Smith
I'm also just testing this out. I found this free ebook by Greg Sheilds to be helpful. It's more about combining MDT with Windows Deployment Services (WDS) and Windows Automated Installation Toolkit (WAIK). Pretty much following his tutorial we've got this set up and are upgrading WinXP

Re: Backing / auto save up any open Microsoft Office document

2011-11-15 Thread Cameron
autosave On Tue, Nov 15, 2011 at 1:34 PM, justino garcia jgarciaitl...@gmail.comwrote: Are thier any products that do this on workstations company wide. For example, a user said he was typing a long report, made some edits, but some how lost all the corrections he made, due to document

RE: New ISP - I have to route public IP's

2011-11-15 Thread John Gwinner
| From: Kurt Buff | Sent: Monday, November 14, 2011 9:55 PM Thanks Kurt | Not odd at all. Pretty standard. Well, we've gone through 4 ISP's over the last 11 years, and they always give me a /248 IP. Granted, they route upstream very similar, but I never have to supply the router beyond the

Re: Backing / auto save up any open Microsoft Office document

2011-11-15 Thread Rankin, James R
Microsoft Office GPOs can set autosave times. Just download the adm files, set a policy and you are cooking on gas. Sent from my SR-71 Blackbird -Original Message- From: justino garcia jgarciaitl...@gmail.com Date: Tue, 15 Nov 2011 13:34:16 To: NT System Admin

Re: Backing / auto save up any open Microsoft Office document

2011-11-15 Thread Kurt Buff
On Tue, Nov 15, 2011 at 10:34, justino garcia jgarciaitl...@gmail.com wrote: Are thier any products that do this on workstations company wide.  For example, a user said he was typing a long report, made some edits, but some how lost all the corrections he made, due to document getting corrupt

Re: Gadgets

2011-11-15 Thread Jim McAtee
Squeezebox. Greatest thing I have ever added to my stereo system(s). I have six or seven of them around the house (I've lost count). They can also be synced together if you like for whole-house audio. The greatest thing about the implementation is that it's very much client/server. You run a

Re: Backing / auto save up any open Microsoft Office document

2011-11-15 Thread justino garcia
Okay thanks for help... On Tue, Nov 15, 2011 at 1:43 PM, Kurt Buff kurt.b...@gmail.com wrote: On Tue, Nov 15, 2011 at 10:34, justino garcia jgarciaitl...@gmail.com wrote: Are thier any products that do this on workstations company wide. For example, a user said he was typing a long

RE: Whitelisting Pros Cons?

2011-11-15 Thread Stu Sjouwerman
Oh, this an acquisition, that is why it's having such a high score! LOL From: Doug Hampshire [mailto:dhampsh...@gmail.com] Sent: Tuesday, November 15, 2011 1:13 PM To: NT System Admin Issues Subject: Re: Whitelisting Pros Cons? Clearly these results are flawed if McAfee Anything gets higher

Re: Whitelisting Pros Cons?

2011-11-15 Thread Kurt Buff
McAfee has done a bit of that in the past couple of years - witness their pickup of the Sidewinder firewall line with the purchase of Secure Computing a couple of years ago, along with WebWasher, SnapGear and IronMail. Kurt On Tue, Nov 15, 2011 at 11:09, Stu Sjouwerman

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Kurt Buff
On Tue, Nov 15, 2011 at 11:18, Stu Sjouwerman s...@sunbelt-software.com wrote: So I’m asking a bunch of questions here, because I’m looking at writing this story from a few different angles. If the ratio Malware to good code is 80 – 20 (which it is +/- at the moment) why not drop AV all

RE: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Bourque Daniel
Developper's stations... I don't know how you can lock them down... De : Stu Sjouwerman [mailto:s...@sunbelt-software.com] Envoyé : 15 novembre 2011 14:19 À : NT System Admin Issues Objet : Would you drop AV for Whitelisting / Application Control? So

Cross Post from Susan Bradley, POC exploit code for MS11-083, TCPIP Kernel Remote Code Execution,

2011-11-15 Thread Ziots, Edward
Vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) Just so you know now with the POC, and probably exploits running around, probably best to get this patch on your Windows 2008,R2 Windows Vista and Windows 7 systems sooner than laters. http://pastebin.com/fjZ1k0fi Now

Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Stu Sjouwerman
So I'm asking a bunch of questions here, because I'm looking at writing this story from a few different angles. If the ratio Malware to good code is 80 - 20 (which it is +/- at the moment) why not drop AV all together and lock down those workstations and only allow good code to run? Saves

RE: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Stu Sjouwerman
Very good feedback Kurt! Anyone else ? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Tuesday, November 15, 2011 2:37 PM To: NT System Admin Issues Subject: Re: Would you drop AV for Whitelisting / Application Control? On Tue, Nov 15, 2011 at 11:18, Stu Sjouwerman

Re: netsession_win.exe

2011-11-15 Thread Rankin, James R
Adobe Customization Wizard. Cut out the stuff you don't want. Sent from my SR-71 Blackbird -Original Message- From: David Lum david@nwea.org Date: Tue, 15 Nov 2011 19:40:28 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin Issues

Re: netsession_win.exe

2011-11-15 Thread Andrew S. Baker
It's not P2P... It's otherwise known as CDN: Content Distribution Network Akamai is legitimate stuff. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Tue, Nov 15, 2011 at 2:40 PM, David Lum david@nwea.org wrote: Looks like an

RE: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread David Lum
I like the idea for many scenarios, developers would be one where it would be tough, but in the places I manage I bet It would work for 80% of the systems as a great many fire up just a few apps. For public access machines (library) this is largely what I do anyway, but for more than just

RE: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Ziots, Edward
Some have taken that stance, but I have also heard the other side, is they need to keep AV on workstations, Servers due to compliance issues. ( which I don't really take as a valid argument, especially if compensating controls are taking effect) Z Edward E. Ziots CISSP, Network +,

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Andrew S. Baker
AV is still very useful in perimeter security devices, but its usefulness is deteriorating rapidly. In the past 2 years, various machines on my home network have intercepted malware trying to infect my network, but except for malware-laden email, AV has not been the vehicle that has caught it.

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Andrew S. Baker
Auditors can be picky here. What you do to get around this is not surprise them. Get them onboard early on, and there are no surprises at audit time. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Tue, Nov 15, 2011 at 3:09 PM,

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Andrew S. Baker
What I did in one environment was isolate the entire developer segment, because they made a stink about the mandatory AV, and insisted that they couldn't work if their systems were locked down like everyone else. We allowed them to have control of their own scanning settings, but firewalled their

RE: Server room cooling units

2011-11-15 Thread John Gwinner
My 0.02 ... I'm getting bids myself; the owners have always gone cheap and so far I have a little 'room a/c' unit that I had to rig up with my own insulated pipe to exhaust the hot air into the return air plenum (i.e. above the drop ceiling tiles). Full rack, about 10K BTU's, 18k if you

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Erik Goldoff
again, depends on your whitelisting solution - does it only depend on filename and size/date info - that can be spoofed - does it also checksum executables ? - what happens on patch Tuesday ? - are patches/hotfixes even allowed to run ? - what happens to patched

RE: Backing / auto save up any open Microsoft Office document

2011-11-15 Thread Ray
http://support.microsoft.com/kb/107686 = guess that depends on whether you're looking for multiple copies or just sort of a emergency recovery. Last time I looked at this, the autosave is pretty worthless if you get out of the document correctly. From: justino garcia

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Kurt Buff
Two workstations, one for standard corporate applications and locked down, the actual development machine should be in a separate subnet that's locked down and has access to only the required netwrok assets, which ideally should also be in that subnet. Kurt On Tue, Nov 15, 2011 at 11:36, Bourque

RE: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Ziots, Edward
Why get around them? That is the same negative thinking I see all over the place. ( I deal with auditors a lot, they aren't to be feared as much as some make it out to be) Best thing is to have your ducks in order on why you make the risk based decisions in the deployment of your security

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Andrew S. Baker
No, not get around *them*. Get around the issue of them being picky about certain technologies. You get them on board with the approach being taken -- not at audit time, but well before. By working with them in advance, everyone is happy(ier). * * *ASB* *http://XeeMe.com/AndrewBaker*

Re: Authenticated Users List

2011-11-15 Thread Jon Harris
I am far from an expert like Michael and Steve but is she using a local account on her system and not getting authenicated to Exchange correctly. Jon Harris On Fri, Nov 11, 2011 at 3:43 PM, Michael B. Smith mich...@smithcons.comwrote: I would look to see: ** ** [1] how is her account

RE: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Crawford, Scott
It's not a question of whitelist or AV (blacklist). Both are necessary. Whitelisting is very effective at controlling what exe, dll, com, etc. are allowed to run. But, malware can also exist as malformed data files such as pdf, jpeg, mp3. For these, blacklisting is needed since its extremely

Re: Disabling but not deleting AD accounts unil Jan 1

2011-11-15 Thread Jon Harris
I used to keep them around but with very long passwords, disabled, in a separate OU with all kinds of restrictions on them, and put their status as user. I had to do this for audit reasons and because some times I had to re-enable the account to get information off of various backup sources. Jon

Re: Disabling but not deleting AD accounts unil Jan 1

2011-11-15 Thread Steven Peck
We move them to an OU for 90 days. We have a scripted process that runs daily (or weekly) and anything older then 90 days nukes their home directories and the account. The mailboxes then float off on the deleted item policy 30 days later. On Tue, Nov 15, 2011 at 4:07 PM, Jon Harris

Re: Would you drop AV for Whitelisting / Application Control?

2011-11-15 Thread Andrew S. Baker
Just as virtually all primarily blacklist-focused solutions provide some options for whitelisting, and other options for malware detection beyond signatures, so too do most whitelist-focused solutions offer ways of restricting application access beyond their primary approach. I think what most

RE: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Benjamin Zachary
No sysprep.. We used the personal version of Ghost8, and put it in with the ultimate boot cd ... so booted off the UBCD w/ ghost on it, and then did a straight ghost 2 ghost copy. I would say I did this about 5-10 times in the early virtualization days as proof of concept. When we first started