RE: Vipre not catching viruses?

2012-01-06 Thread Tom Miller
It's still an option and I do this at WAN sites. But these are broadband sites with just a few PCs per site, and I'd have to install the Vipre console, a bit of a pain. Eric Wittersheim eric.wittersh...@gmail.com 1/5/2012 8:29 PM If you are having a problem with agents at remote sites, I

RE: GPO reset of local non-builtin accounts

2012-01-06 Thread ed ziots
I concurr, You defintely want to rename and implement account Lockout ( Detective control, audit requirement) to see if anything or anyone is trying to utilize a local admin account which is not uniquely tied back to an entity which can be properly identified and authenticated and

RE: GPO reset of local non-builtin accounts

2012-01-06 Thread David Lum
Damn...and I used to be cool, for a day. How big is this risk in reality? A casual user won't be perusing Sysvol, and they'll be even less casual if they can figure out how to get at the password. I, for one, have no idea how I would get at the password, although I imagine even a mediocre

RE: GPO reset of local non-builtin accounts

2012-01-06 Thread Matthew W. Ross
Please educate me: Why do you want to have a local account? What's the benefit? --Matt Ross Ephrata School District - Original Message - From: David Lum [mailto:david@nwea.org] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 06 Jan 2012

RE: GPO reset of local non-builtin accounts

2012-01-06 Thread David Lum
If the domain becomes unavailable (admin because sometimes we need to futz with NIC properties) or we need to disjoin from the domain for whatever reason we need a local admin account. We have enough servers that it happens on occasion. We also have credential caching turned off on our servers.

adobe acrobat standard vrs Pro

2012-01-06 Thread justino garcia
Should I want to pay extra for pro. Can I create bookmarks, in standard version (on the left side table of content / links). -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage

Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread Lee Douglas
http://www.foxnews.com/scitech/2012/01/06/symantec-source-code-theft-likely-no-threat-to-average-user-analyst-says/#xdm_e=http%3A%2F%2Fwww.foxnews.comxdm_c=default5605xdm_p=1?test=latestnews ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread Mathew Shember
Better talk to Rupert Murdoch.. Thanks, Mathew From: leedoug...@pellis.com [mailto:leedoug...@pellis.com] On Behalf Of Lee Douglas Sent: Friday, January 06, 2012 11:17 AM To: NT System Admin Issues Subject: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says

RE: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread Michael B. Smith
I hate to defend Symantec, but the breach wasn't Symantec's. More info here: http://www.wired.com/threatlevel/2012/01/symantec-source-code-leaked/ Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: leedoug...@pellis.com [mailto:leedoug...@pellis.com] On

RE: adobe acrobat standard vrs Pro

2012-01-06 Thread Rod Trent
Folks will share links (most likely) but there are better and more cost-effective solutions to Adobe's product. Unless, of course, you are mandated by policy to use Adobe. From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Friday, January 06, 2012 2:16 PM To: NT System Admin Issues

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread justino garcia
Yea, policy. And request was to be able to have bookmarks on the side for navigation. Thanks On Fri, Jan 6, 2012 at 2:31 PM, Rod Trent rodtr...@myitforum.com wrote: Folks will share links (most likely) but there are better and more cost-effective solutions to Adobe’s product. Unless, of

RE: adobe acrobat standard vrs Pro

2012-01-06 Thread Sam Cayze
To answer your question, I just tested it in Acrobat X Standard, yes, I could create a new Bookmarks. Also, in case you haven't come across it: http://www.adobe.com/products/acrobat/matrix.html -Sam From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Friday, January 06, 2012

Re: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread Ben Scott
On Fri, Jan 6, 2012 at 2:30 PM, Michael B. Smith mich...@smithcons.com wrote: I hate to defend Symantec, but the breach wasn’t Symantec’s. More info here: http://www.wired.com/threatlevel/2012/01/symantec-source-code-leaked/ Okay, do we know why India’s military intelligence agency had

Re: GPO reset of local non-builtin accounts

2012-01-06 Thread Ben Scott
On Fri, Jan 6, 2012 at 9:31 AM, David Lum david@nwea.org wrote: A casual user won’t be perusing Sysvol, and they’ll be even less casual if they can figure out how to get at the password. The problem is, this is an obvious target, since it's a facility in the world's most common operating

RE: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread Kennedy, Jim
I would guess to meet their militaries requirements for security/safety Symantec had to provide it. I would expect that is a pretty standard practice across most governments. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, January 06, 2012 3:53 PM To: NT

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread justino garcia
Thanks, I understand their is cheaper stuff, but oh well On Fri, Jan 6, 2012 at 3:16 PM, Sam Cayze sca...@gmail.com wrote: To answer your question, I just tested it in Acrobat X Standard, yes, I could create a new Bookmarks. ** ** Also, in case you haven’t come across it:

Re: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread Andrew S. Baker
This is what I expect as well. * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Fri, Jan 6, 2012 at 4:01 PM, Kennedy, Jim kennedy...@elyriaschools.orgwrote: I would guess to meet their militaries requirements for security/safety

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread Bill Humphries
My biggest problem are clients whose LOB applications require acrobat. I'd love to go with something else, but that almost always kills the deal. Bill BillRod Trent wrote: Folks will share links (most likely) but there are better and more cost-effective solutions to Adobe’s product. Unless,

RE: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread ed ziots
Funny I am going to be having a talk with Symantec on Tuesday, they say they are still investigating the issue and that it didn't happen on their network but on a partners network. Z Edward E. Ziots Senior Informational Security Engineer CISSP,Security +,Network+ From:

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread Jonathan Link
I fall into that category. It is unpleasant... On Fri, Jan 6, 2012 at 4:30 PM, Bill Humphries nt...@hedgedigger.comwrote: My biggest problem are clients whose LOB applications require acrobat. I'd love to go with something else, but that almost always kills the deal. Bill BillRod Trent

Re: Not even sure how to look this one up

2012-01-06 Thread KenM
Were these accounts ever members of a protected group like Domain Admins? Check the admincount attribute and see if it is set to 1 On Fri, Jan 6, 2012 at 4:31 PM, David Lum david@nwea.org wrote: I have two users in AD and if I look at the security tab the permissions are different. I

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread justino garcia
I wish that PDF would die, or that it work something like on the mac, were PDF viewer, and save as PDF is bulit in to the OS... XPS has never taken off I guess?? Adobe Reader is one of the biggest problems I see, and some client inhouse apps, won't work with latest version of adobe reader, or a

RE: adobe acrobat standard vrs Pro

2012-01-06 Thread Jeff Brown
The stick I swing aint that big... From: justino garcia [mailto:jgarciaitl...@gmail.com] Sent: Friday, January 06, 2012 3:55 PM To: NT System Admin Issues Subject: Re: adobe acrobat standard vrs Pro I wish that PDF would die, or that it work something like on the mac, were PDF viewer, and save

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread Ben Scott
On Fri, Jan 6, 2012 at 4:54 PM, justino garcia jgarciaitl...@gmail.com wrote: I wish that PDF would die, or that it work something like on the mac, were PDF viewer, and save as PDF is bulit in to the OS... There's nothing wrong with PDF, especially the original concept. The problem is mainly

RE: GPO reset of local non-builtin accounts

2012-01-06 Thread Crawford, Scott
One thing that might be satisfactory is to restrict access on the GPO to Domain Computers (or some subset) instead of Authenticated Users or Domain Users. This isn't foolproof since someone with admin access to any domain joined computer or the ability to run a task as system can pretty easily

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread Matthew W. Ross
Windows 8 might have a native PDF reader. About time, eh? Chrome has one built in, and Firefox is working on one. But I'm always happy to see actual PDF support by the OS itself. http://www.techradar.com/news/software/windows-8-to-kill-off-adobe-reader--940626 --Matt Ross Ephrata School

RE: Not even sure how to look this one up

2012-01-06 Thread David Lum
As a matter of fact, yes they were. I think early on messing with these guys is where I learned about AdminSDHolder. Looks like I get to use ADSIEDIT right? From: KenM [mailto:kenmli...@gmail.com] Sent: Friday, January 06, 2012 1:49 PM To: NT System Admin Issues Subject: Re: Not even sure how to

Re: GPO reset of local non-builtin accounts

2012-01-06 Thread Ben Scott
On Fri, Jan 6, 2012 at 5:08 PM, Crawford, Scott crawfo...@evangel.edu wrote: One thing that might be satisfactory is to restrict access on the GPO to Domain Computers (or some subset) instead of Authenticated Users or Domain Users. Is that, for lack of a better word, safe? In other words,

Re: Not even sure how to look this one up

2012-01-06 Thread KenM
A few ways. script it, if you have Win7 or Win08R2 you can use ADUC and the Attribute Editor tab. On Fri, Jan 6, 2012 at 5:21 PM, David Lum david@nwea.org wrote: As a matter of fact, yes they were. I think early on messing with these guys is where I learned about AdminSDHolder. Looks

Re: Huge Security Breach At Security Firm Symantec No Threat To Consumers, Analyst Says | Fox News

2012-01-06 Thread Kurt Buff
On Fri, Jan 6, 2012 at 12:53, Ben Scott mailvor...@gmail.com wrote: On Fri, Jan 6, 2012 at 2:30 PM, Michael B. Smith mich...@smithcons.com wrote: I hate to defend Symantec, but the breach wasn’t Symantec’s. More info here: http://www.wired.com/threatlevel/2012/01/symantec-source-code-leaked/

RE: GPO reset of local non-builtin accounts

2012-01-06 Thread Crawford, Scott
I think so. I've done it on several occasions and not run into issues. It's only slightly different than changing security filtering in GPMC.msc. Both affect the actual ACL on the policies folder in sysvol and you can see this reflected in the Delegation tab. The difference is security

Re: GPO reset of local non-builtin accounts

2012-01-06 Thread Ben Scott
On Fri, Jan 6, 2012 at 6:56 PM, Crawford, Scott crawfo...@evangel.edu wrote: I think so.  I've done it on several occasions and not run into issues. Cool. Good to know. :) If it causes trouble, I'll just blame you. ;-) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource

Re: Not even sure how to look this one up

2012-01-06 Thread Kurt Buff
On Fri, Jan 6, 2012 at 14:21, David Lum david@nwea.org wrote: As a matter of fact, yes they were. I think early on messing with these guys is where I learned about AdminSDHolder. Looks like I get to use ADSIEDIT right? I stole this from somewhere, and saved it in a file called

Re: Not even sure how to look this one up

2012-01-06 Thread KenM
there is also one posted on a MS KB http://support.microsoft.com/kb/817433 resetaccountsadminsdholder.vbs On Fri, Jan 6, 2012 at 7:35 PM, Kurt Buff kurt.b...@gmail.com wrote: On Fri, Jan 6, 2012 at 14:21, David Lum david@nwea.org wrote: As a matter of fact, yes they were. I think

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread Richard Stovall
I don't know how you'd ever get rid of pdf for the printing industry. The stuff most of us bandy about is Micky Mouse compared to hi-res print files. There can be LOT of information in those things. On Fri, Jan 6, 2012 at 4:54 PM, justino garcia jgarciaitl...@gmail.comwrote: I wish that PDF

Re: adobe acrobat standard vrs Pro

2012-01-06 Thread Kurt Buff
EPS files? I've just started playing with Lyx, and it's pretty cool. On Fri, Jan 6, 2012 at 17:06, Richard Stovall rich...@gmail.com wrote: I don't know how you'd ever get rid of pdf for the printing industry.  The stuff most of us bandy about is Micky Mouse compared to hi-res print files.  

RE: adobe acrobat standard vs. Pro

2012-01-06 Thread Webster
I agree. The typical PDF file I generate from the Word copy of my book is about 2MB in size. The PDF file that lulu.com requires creates a 30MB file. Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Richard Stovall

RE: adobe acrobat standard vs. Pro

2012-01-06 Thread Michael B. Smith
Basically encapsulated EPS, as I understand it. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Webster [mailto:webs...@carlwebster.com] Sent: Friday, January 06, 2012 9:59 PM To: NT System Admin Issues Subject: RE: adobe acrobat standard vs. Pro I

Re: adobe acrobat standard vs. Pro

2012-01-06 Thread Ben Scott
On Fri, Jan 6, 2012 at 10:41 PM, Michael B. Smith mich...@smithcons.com wrote: Basically encapsulated EPS, as I understand it. Indeed. PDF began life as a project to produce a Postscript-like page description language without the potentially dangerous capabilities of Postscript, which is more

RE: Not even sure how to look this one up

2012-01-06 Thread Michael B. Smith
This is necessary, but not always sufficient. You may also have to set the adminSDHolder attribute to zero: objADObject.Put adminSDHolder, 0 Just applying inheritable permissions fixes SOME things. Others require the reset value... Regards, Michael B. Smith Consultant and Exchange

RE: adobe acrobat standard vs. Pro

2012-01-06 Thread Michael B. Smith
I remember the web server! I saw it running on HP LJ IV years and years ago... Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, January 06, 2012 10:50 PM To: NT System

Re: Not even sure how to look this one up

2012-01-06 Thread Kurt Buff
Did not know that - what I listed worked, but I will keep your note in mind. Thanks for that. On Fri, Jan 6, 2012 at 19:51, Michael B. Smith mich...@smithcons.com wrote: This is necessary, but not always sufficient. You may also have to set the adminSDHolder attribute to zero: