Re: 2008 R2 - System Event Notification Service

2011-12-13 Thread Greg Sweers
Sent from my iPhone. Yes my iPhone On Dec 12, 2011, at 10:46 AM, Patrick Hasenjager phasenja...@kcumb.edumailto:phasenja...@kcumb.edu wrote: We have some 2008 R2 servers (brand new installs) that are hanging up every few days to the point that we cannot RDP into them nor back them up with

Re: McAfee deep defender

2011-12-13 Thread Andrew S. Baker
Why would they have a field day with this? * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Mon, Dec 12, 2011 at 5:13 PM, Kurt Buff kurt.b...@gmail.com wrote: Yes, it will be very effective for malware writers, who are going to

Re: McAfee deep defender

2011-12-13 Thread Kurt Buff
Because once they corrupt it, it will be at least as invisible to the end user as a rootkit. And you know it's going to be a big fat target. On Tue, Dec 13, 2011 at 04:41, Andrew S. Baker asbz...@gmail.com wrote: Why would they have a field day with this? * * *ASB*

RE: Central Log Management/Monitoring Solution

2011-12-13 Thread Haritwal, Dhiraj
Stu, I have searched archives but not getting the one which I am looking for. Everywhere it's either for Windows server events or for Network monitoring. I am looking for a solution to monitor below want to know which solution people are using as a central monitoring tool. Windows

Anyone using Dell switches

2011-12-13 Thread Tom Miller
Hi Folks, I need a some new switches to support a wireless architecture. I have the HP 5500 series now (they were 3COM when I bought them, but HP now). I'm looking at Dell as an alternative. Dell can give me excellent pricing. HP's products are fine, but I have an issue with just

Re: Anyone using Dell switches

2011-12-13 Thread Kurt Buff
Don't know if it makes a difference, but Dell has recently acquired Force 10, which makes switches as well. Can't tell you more than that, because I've not used either Dell or Force 10 switches, but perhaps someone on this list can speak to that. Kurt On Tue, Dec 13, 2011 at 06:30, Tom Miller

Re: Anyone using Dell switches

2011-12-13 Thread Jonathan Link
I'd suggest your reseller needs to step up. Suggesting that this minor fiasco is giving you pause to consider your relationship with them and you are considering Dell might make them resolve the issue. Then again, it might not, and then you know what kind of vendor relationship you're really in.

RE: Anyone using Dell switches

2011-12-13 Thread David Lum
I have lower-end Dell managed switches (PowerConnect 5224's and the like) at a few clients of mine and they have been fine, but they have 5yr warranty max so my latest switch purchases (replacing the last of ancient Linksys unmanaged switches) have been HP's. Dave From: Tom Miller

RE: Anyone using Dell switches

2011-12-13 Thread Paul Hutchings
Who is your wireless kit from? Might make sense to try and buy from one vendor to avoid pass the parcel. From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: 13 December 2011 14:31 To: NT System Admin Issues Subject: Anyone using Dell switches Hi Folks, I need a some new switches to support a

RE: Anyone using Dell switches

2011-12-13 Thread Tom Miller
True. Ruckus Wireless. I'll see if they make switches. Paul Hutchings paul.hutchi...@mira.co.uk 12/13/2011 10:25 AM Who is your wireless kit from? Might make sense to try and buy from one vendor to avoid pass the parcel. From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: 13 December 2011

Re: McAfee deep defender

2011-12-13 Thread Andrew S. Baker
Rootkits are largely already invisible to the end user. Of course, there is an element of risk to this, but doing nothing is not a valid response to the existing threats, and you have yet to substantiate any specific weakness that would allow malware writers to have a field day with this.

Excel 2003 add-ins

2011-12-13 Thread James Rankin
Can anyone point me in the right direction for loading an Excel 2003 add-in automatically? I thought it was just a case of putting in some Registry keys, but I can't seem to see any being formed anywhere (I'm using mandatory profiles so need to find out where to write stuff to). Or is it a file or

Re: Central Log Management/Monitoring Solution

2011-12-13 Thread Andrew S. Baker
Google's options are viable: https://www.google.com/search?gcx=cix=e2sourceid=chromeie=UTF-8q=Central+Log+Management%2FMonitoring+Solution What's your budget? What team in your org will be doing the monitoring? Those two basic questions are going to have a great deal to say about what you

Re: Excel 2003 add-ins

2011-12-13 Thread Cynicalgeek
Which add-in? It probably depends on your security settings within Excel. On Tue, Dec 13, 2011 at 11:16 AM, James Rankin kz2...@googlemail.comwrote: Can anyone point me in the right direction for loading an Excel 2003 add-in automatically? I thought it was just a case of putting in some

RE: Excel 2003 add-ins

2011-12-13 Thread David Lum
I thought it was placing something in a XLSTART folder? From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, December 13, 2011 8:17 AM To: NT System Admin Issues Subject: Excel 2003 add-ins Can anyone point me in the right direction for loading an Excel 2003 add-in automatically? I

Re: Excel 2003 add-ins

2011-12-13 Thread James Rankin
It's called BOB (Business Objects Budgeting). Excel security is set to the default level, I can load the add-in manually, but the client wants it done automatically for all users in a certain group On 13 December 2011 16:24, Cynicalgeek cynicalg...@gmail.com wrote: Which add-in? It probably

Re: Excel 2003 add-ins

2011-12-13 Thread James Rankin
That rings a bell, offhand On 13 December 2011 16:27, David Lum david@nwea.org wrote: I thought it was placing something in a XLSTART folder? ** ** *From:* James Rankin [mailto:kz2...@googlemail.com] *Sent:* Tuesday, December 13, 2011 8:17 AM *To:* NT System Admin Issues

Re: Excel 2003 add-ins

2011-12-13 Thread James Rankin
Boo-ya! Simple as that. Cheers, JR On 13 December 2011 16:27, David Lum david@nwea.org wrote: I thought it was placing something in a XLSTART folder? ** ** *From:* James Rankin [mailto:kz2...@googlemail.com] *Sent:* Tuesday, December 13, 2011 8:17 AM *To:* NT System Admin

Vipre not catching viruses?

2011-12-13 Thread Tom Miller
Hi Folks, For you Vipre users, any of you having issues over the last few days with Vipre not catching viruses? We've had at least a dozen PCs we had to re-image over the last week. The vipre console indicates the agent is shut down, and it won't start. This wasn't a problem for us until

Re: Anyone using Dell switches

2011-12-13 Thread Ben Scott
On Tue, Dec 13, 2011 at 9:30 AM, Tom Miller tmil...@hnncsb.org wrote: My reseller sent me the wrong model, and months have gone by and HP is putting up a fuss about returning it ... Why is that your problem and not the reseller's? Our reseller sends us the wrong model, the reseller takes

Re: Anyone using Dell switches

2011-12-13 Thread Andrew S. Baker
+42 * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Tue, Dec 13, 2011 at 2:38 PM, Ben Scott mailvor...@gmail.com wrote: On Tue, Dec 13, 2011 at 9:30 AM, Tom Miller tmil...@hnncsb.org wrote: My reseller sent me the wrong model,

RE: Anyone using Dell switches

2011-12-13 Thread pdw1914
I agree with Ben. I may have some issues with our reseller (usually bad quotes), CDW, but I've never had an issue with them refusing to issue an RMA. Switch-wise the only issue I had was when he quoted me a ProCurve and sent me a re-labeled 3com. From: mailvor...@gmail.com Date: Tue, 13

VDI

2011-12-13 Thread pdw1914
Due to computerized physician order entry (part of meaningful use), we looking at implementing a virtual desktop solution. I have identified three: Citrix, VM View and Symantec's Corporate Workspace product (used to be Nuvision until it was bought out by Symantec). I am familiar with Citrix

Re: McAfee deep defender

2011-12-13 Thread Kurt Buff
Same answers as always: Harden the OS, impose separation of abilities and limit administrator access. Whitelisting apps, too, for that matter. On Tue, Dec 13, 2011 at 08:15, Andrew S. Baker asbz...@gmail.com wrote: Rootkits are largely already invisible to the end user. Of course, there is an

RE: Anyone using Dell switches

2011-12-13 Thread Tom Miller
It was part my fault, part the resellers. The switch I ordered was from the 3COM line, and the reseller assumed (very wrongly) that the series in question is being retired by HP. It is not. So the reseller ordered the wrong switch and I caught it once I was about to sign the purchase order.

Re: VDI

2011-12-13 Thread Harry Singh
I don't know a thing about CWS and I know you mentioned Citrix but have you looked at their VDI-in-a-Box solution? http://www.citrix.com/English/ps2/products/product.asp?contentID=2316437 I would try my best to somehow justify the price difference to get either VM and Citrix as those two players

Re: McAfee deep defender

2011-12-13 Thread Andrew S. Baker
So, hardening ones OS can provide the following benefits? • Preventing and logging write attempts to the system’s interrupt descriptor table (IDT) and the system service dispatch table (SSDT) • Stopping changes to the processor system transitioning table * * *ASB* *http://XeeMe.com/AndrewBaker*

Re: Anyone using Dell switches

2011-12-13 Thread Jonathan Link
Maybe he should know, and he might try and make it right. At the very least, you have nothing to lose by letting him know. And/or, if you're getting a new reseller see if you can get help from them in returning it, explaning the situation... On Tue, Dec 13, 2011 at 3:19 PM, Tom Miller

Re: VDI

2011-12-13 Thread Rankin, James R
I have never used the Symantec solution, but XenDesktop and View are the most popular. However for a small amount of users the complexity of XenDesktop is quite high. VDI-in-a-box is the less complex Citrix solution, but as yet there is no easy upgrade path from VIAB to Xen should you need it.

RE: Vipre not catching viruses?

2011-12-13 Thread Sean Rector
I'm on that version and having no problems whatsoever, including with workstations getting updated to it. Do you have a call in to GFI's support line? Sean Rector, MCSE From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Tuesday, December 13, 2011 2:29 PM To: NT System Admin Issues

RE: Anyone using Dell switches

2011-12-13 Thread David Lum
+1 Let them know why so they have the opportunity to address it - either with you now, or to carry that knowledge forward to other customers. If someone else can benefit from the problems you went though, that's a win of some sort. From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent:

Re: McAfee deep defender

2011-12-13 Thread Kurt Buff
If the user can't write to kernel space, or install software that does (separation of privileges, and proper segregation of userland from the kernel), then the prevention is done, and the logging is nice to have. As you know, one of the major abuses that OSes make is to allow users to install

Re: Anyone using Dell switches

2011-12-13 Thread Kurt Buff
Agreed. Always give the vendor a chance to make it right. On Tue, Dec 13, 2011 at 12:32, Jonathan Link jonathan.l...@gmail.com wrote: Maybe he should know, and he might try and make it right.  At the very least, you have nothing to lose by letting him know.  And/or, if you're getting a new

Re: McAfee deep defender

2011-12-13 Thread Andrew S. Baker
A rootkit doesn't have to be deployed via user access only. A vulnerability in a kernel level component could enable an attacker to get the code into the system. What then? How does the OS protect you when the OS has been subverted? (Which is exactly why rootkits are so deadly) * * *ASB*

RE: McAfee deep defender

2011-12-13 Thread Michael B. Smith
There are a few answers to that, but people complain. UEFI is designed to do just that. Cryptographic hashes on all boot components to ensure that boot is secure, then allow Windows (or whatever OS) to verify via cryptographic hash that individual components are secure. It's a hierarchical

Re: McAfee deep defender

2011-12-13 Thread Micheal Espinola Jr
Sounds like a deep colonic. Sorry, I couldnt resist... ;-) -- Espi On Mon, Dec 12, 2011 at 11:27 AM, David Lum david@nwea.org wrote: Anyone care to comment on this? http://www.mcafee.com/us/resources/data-sheets/ds-deep-defender.pdf ** ** Note the requirements and

Re: Anyone using Dell switches

2011-12-13 Thread Ben Scott
On Tue, Dec 13, 2011 at 3:19 PM, Tom Miller tmil...@hnncsb.org wrote: But yes, I told the reseller of the error, and it's taking forever.  I'll take blame, but I'm not cool with a simple return taking four month.  I can't tell if this an HP or reseller issue, though. It's definitely a

Re: McAfee deep defender

2011-12-13 Thread Kurt Buff
True enough, but user interaction is where the vast majority of infections, including rootkits, get deployed. It will take a combination of things, as I stated. Whitelisting applications is part of the answer, especially with cryptograhic hashes for OS components. So are OS hardening (all the way

Re: Anyone using Dell switches

2011-12-13 Thread Bob Hartung
I agree that there's much that can be done dealing with the vendor to fix this specific problem but I'd still be interested in hearing opinions on Dell switches. -- Bob Hartung Dir of I.T. Wisco Industries, Inc. 736 Janesville St. Oregon, WI 53575 Tel: (608) 835-3106 x215

RE: Vipre not catching viruses?

2011-12-13 Thread Tom Miller
Yes, and I might be calling. I think these are PCs that had a problem with the upgrade from 4 to 5. I see it every time: agent uninstalls as part of the update, but for some reason a small percentage never finish. Hence I dread major Vipre releases. I have a script that I push via GPO to

RE: Central Log Management/Monitoring Solution

2011-12-13 Thread Haritwal, Dhiraj
ASB, Thanks for your response, Budget is not a constraint. Currently we are monitoring these components individually. Dhiraj From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Tuesday, December 13, 2011 9:49 PM To: NT System Admin Issues Subject: Re: Central Log

RE: Central Log Management/Monitoring Solution

2011-12-13 Thread Ken Schaefer
You may not have a single solution - instead forward to a console of consoles - BMC Event Monitor or Tivoli. From: Haritwal, Dhiraj [mailto:dhiraj.harit...@ap.sony.com] Sent: Wednesday, 14 December 2011 12:05 PM To: NT System Admin Issues Subject: RE: Central Log Management/Monitoring Solution

RE: Central Log Management/Monitoring Solution

2011-12-13 Thread Haritwal, Dhiraj
How is GFI EventsManager. Does anybody using it for central monitoring (single monitoring solution). Atleast solution should have Network/Servers (All platforms) monitoring. Dhiraj From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Wednesday, December 14, 2011 11:17 AM To: NT