RE: Firewall-y stuff

2012-05-09 Thread Ken Schaefer
I think you need to be a bit more precise... The Windows 2008 R2 Server initiates the connection? (this I suspect it not the case) Normally, when we say 'x talks to y', it is 'x' that initiates the connection. So, if the Win7 client is initiating the connection to the Windows Server 2008 R2 ser

RE: MS12-034

2012-05-09 Thread Randal, Phil
Nope, but I am having problems with KB2604110 and KB2656407 being repeatedly offered to my XP box. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Christopher Bodnar [mailto:chr

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
NO worries.. Z Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, May 09, 2012 11:42 AM To: NT System Admin Issues Subject: Re: Firewall-y stuff That's pretty much

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
That's pretty much the config we're looking like recommending for this particular app to function. Cheers for the help, JR On 9 May 2012 16:34, Ziots, Edward wrote: > I would have to say 80,443,1433 TCP allow on the fw rule from Windows 7 > side of the FW to only to the Windows 2008 box. (

RE: MS12-034

2012-05-09 Thread Ziots, Edward
Still in testing here, but Sue Bradley posted the issue on one of the security lists I am on. Are there special **requirement**s related**to apply**ing**the **security update packages that address**CVE-2012-0181**?* Yes. The detection logic for the security update package identified as KB2686

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
I would have to say 80,443,1433 TCP allow on the fw rule from Windows 7 side of the FW to only to the Windows 2008 box. (Could be different if you set a port different than 1433 TCP for SQL. Pretty easy to filter with wireshark to determine just what is needed. Z Edward Ziots CISSP, Sec

MS12-034

2012-05-09 Thread Christopher Bodnar
Anyone have issues rolling this one out? http://www.askwoody.com/2012/problem-with-ms12-034-kb-2676562-patch/ Christopher Bodnar Enterprise Achitect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
Bit of both. We need a Windows 2008 R2 Server to talk to Windows 7 clients that are on the other side of a firewall, using SQL and BITS traffic On 9 May 2012 15:54, Ziots, Edward wrote: > Are we talking a regular firewall or the Windows firewall on a server? *** > * > > ** ** > > Z > > ** **

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
Cheers On 9 May 2012 15:52, Ziots, Edward wrote: > I believe you need both 80/443 outbound opened if you are going to allow > http/https. So its two ports. > > ** ** > > Z > > ** ** > > Edward Ziots > > CISSP, Security +, Network + > > Security Engineer > > Lifespan Organiza

Re: Microsoft Audit - SQL

2012-05-09 Thread Stefan Jafs
That's correct, i forgot to mention that is for 2012, however as it's licensed by cores it will allow you to have up to 16 VM's on the physical server. Stefan On Wed, May 9, 2012 at 10:31 AM, Ziots, Edward wrote: > download.microsoft.com/.../*2008*%20*sql*%20licensing%20overview... > > Show

Re: Firewall-y stuff

2012-05-09 Thread James Rankin
Thanks for the clarification Chris On 9 May 2012 15:52, Christopher Bodnar wrote: > Yes, just the one port. It's easier to think of BITS as a sub-component of > IIS. So if your IIS communication is working over 80 or 443, you should be > good to go. > > http://technet.microsoft.com/en-us/library

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
Are we talking a regular firewall or the Windows firewall on a server? Z Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Wednesday, May 09, 2012 10:53 AM To: N

RE: Firewall-y stuff

2012-05-09 Thread Ziots, Edward
I believe you need both 80/443 outbound opened if you are going to allow http/https. So its two ports. Z Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, May 09,

Re: Firewall-y stuff

2012-05-09 Thread Christopher Bodnar
Yes, just the one port. It's easier to think of BITS as a sub-component of IIS. So if your IIS communication is working over 80 or 443, you should be good to go. http://technet.microsoft.com/en-us/library/cc732428.aspx Christopher Bodnar Enterprise Achitect I, Corporate Office of Technology:

Firewall-y stuff

2012-05-09 Thread James Rankin
I'm in no way a networking kind of guy, so please excuse this slightly noob-ish question...if you need to open up a firewall for http/s and BITS traffic, since they both work on port 80 (or 443), do you just need to open the one port? I can't seem to find a definitive answer via the Google-God Che

RE: Microsoft Audit - SQL

2012-05-09 Thread Ziots, Edward
download.microsoft.com/.../2008%20sql%20licensing%20overview... Shows that Licensing is still per-processor ( not core) on SQL 2008 R2, and previous versions. In SQL 2012 its per-core see below: http://www.microsoft.com/sqlserver/en/us/get-sql-server/how-to-buy.aspx Z Edward Ziots CIS

Re: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found word(s) farm in the subject

2012-05-09 Thread James Rankin
I just looked at a forum post which suggested that when the TS Session Broker is using DNS entries for each farm server, you can't connect to the TS servers by hostname unless you use the /admin switch Haven't had any feedback since I suggested that though On 9 May 2012 13:58, Andrew S. Baker wr

RE: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found word(s) farm in the subject

2012-05-09 Thread Maglinger, Paul
Yeah, but small fonts use less bandwidth. From: James Hill [mailto:falc...@gmail.com] Sent: Wednesday, May 09, 2012 4:02 AM To: NT System Admin Issues Subject: RE: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found wo

Re: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found word(s) farm in the subject

2012-05-09 Thread James Rankin
What happens if you use mstsc.exe with the /console or /admin switch? e.g. mstsc /v *servername */admin On 9 May 2012 10:02, James Hill wrote: > Maybe it’s having difficulty reading the name/ip entered due to the font > size so it takes a guessa and hence you get a random result. > > ** **

RE: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found word(s) farm in the subject

2012-05-09 Thread James Hill
Maybe it's having difficulty reading the name/ip entered due to the font size so it takes a guessa and hence you get a random result. From: Robert Jackson [mailto:r...@walkermartyn.co.uk] Sent: Wednesday, 9 May 2012 6:31 PM To: NT System Admin Issues Subject: RE: r...@walkermartyn.co.uk - Re:

Re: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found word(s) farm in the subject

2012-05-09 Thread James Rankin
So you are using a standard RDP client, and when you type a server name in it redirects you to a different server? Why on earth would it do that? I could understand this if you were using some load balancing mechanism such as connecting to a published application rather than a server name, but that

RE: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found word(s) farm in the subject

2012-05-09 Thread Robert Jackson
Same thing. From: Rankin, James R [mailto:kz2...@googlemail.com] Sent: Wednesday 09 May 2012 09:10 To: NT System Admin Issues Subject: r...@walkermartyn.co.uk - Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject - Found word(s) farm in the subject

Re: [long] How to feel mediocre, then ok, then really bad

2012-05-09 Thread Andrew S. Baker
Why not proxy the mail to something else that will forward to the SBS server when it is back online? You could have just had email down. Good job on the customer service, though. -ASB: http://XeeMe.com/AndrewBaker Sent from my Motorola Droid RAZR On May 9, 2012 2:37 AM, "David Lum" wrote: >

Re: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject

2012-05-09 Thread Rankin, James R
Eh? What if you use the name? ---Blackberried -Original Message- From: "Robert Jackson" Date: Wed, 9 May 2012 09:07:20 To: NT System Admin Issues Reply-To: "NT System Admin Issues" Subject: RE: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject

RE: r...@walkermartyn.co.uk - Re: Which Server In A TS Farm? - Found word(s) farm in the subject

2012-05-09 Thread Robert Jackson
I thought I may be missing something, but not that obvious. If I RDP based on the physical IP address of the server I want to log in on, I potentially may be redirected to another server in the Farm (I've tried this so I know). From: Rankin, James R [mailto:kz2...@googlemail.com] Sent:

RE: Which Server In A TS Farm?

2012-05-09 Thread Mathew Shember
And I thought I was missing something From: Rankin, James R [mailto:kz2...@googlemail.com] Sent: Wednesday, May 09, 2012 12:47 AM To: NT System Admin Issues Subject: Re: Which Server In A TS Farm? Er, try RDP direct to your server of choice? ---Blackberried ___

Re: Which Server In A TS Farm?

2012-05-09 Thread Rankin, James R
Er, try RDP direct to your server of choice? ---Blackberried -Original Message- From: "Robert Jackson" Date: Wed, 9 May 2012 08:32:41 To: NT System Admin Issues Reply-To: "NT System Admin Issues" Subject: Which Server In A TS Farm? Within a Terminal Services Farm, is it possible to sp

Which Server In A TS Farm?

2012-05-09 Thread Robert Jackson
Within a Terminal Services Farm, is it possible to specify which server to log in to? As an Administrator, I may want to log into a specific server in the TS Farm to check log files, AV updates etc. Regards, Rab. = Robert Jackson