Re: OT - Clean Joke -

2012-06-28 Thread Don Kuhlman
Wow - that's been a while :) From: Michael B. Smith mich...@smithcons.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 27, 2012 4:23 PM Subject: RE: OT - Clean Joke - Honestly, I have a printed copy of this joke

RE: Backup a DC

2012-06-28 Thread David Lum
Nope I sure don't mind the command line. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, June 27, 2012 2:25 PM To: NT System Admin Issues Subject: RE: Backup a DC Windows server backup is amazingly powerful, if you don't mind dropping to the command line. From: David Lum

RE: Wickr on corporate iPhones?

2012-06-28 Thread Paul Hutchings
Does it serve that much purpose I wonder? Is encrypting texts that much use to most folks? From: David Lum [mailto:david@nwea.org] Sent: 28 June 2012 14:44 To: NT System Admin Issues Subject: Wickr on corporate iPhones? Could this be workable in a corporate environment I wonder?

Re: Wickr on corporate iPhones?

2012-06-28 Thread Ben Scott
On Thu, Jun 28, 2012 at 9:43 AM, David Lum david@nwea.org wrote: http://news.cnet.com/8301-1009_3-57462189-83/wickr-an-iphone-encryption-app-a-3-year-old-can-use/?tag=mncol;txt From the app page: http://itunes.apple.com/us/app/wickr/id528962154?ls=1mt=8 The security is based on a

Re: Wickr on corporate iPhones?

2012-06-28 Thread Ben Scott
On Thu, Jun 28, 2012 at 9:55 AM, Paul Hutchings paul.hutchi...@mira.co.uk wrote: Is encrypting texts that much use to most folks? Useful is ill-defined, but certainly people send information in cleartext over SMS which they prolly wouldn't want disclosed. (But people do the same with email

Re: Wickr on corporate iPhones?

2012-06-28 Thread Kurt Buff
Uh, yeah. +27 It pegs the bullshit meter fer sher. Kurt On Thu, Jun 28, 2012 at 7:01 AM, Ben Scott mailvor...@gmail.com wrote: On Thu, Jun 28, 2012 at 9:43 AM, David Lum david@nwea.org wrote:

Identifying service accounts that are loggin in interactively

2012-06-28 Thread Christopher Bodnar
Is anyone else tasked with doing this? This is a new requirement from audit. We have about 1,000 accounts that are being used to run services in the environment. So audit is asking how we know these accounts aren't being used to logon interactively. All security logs are being shipped to or

RE: Schema upgrade/rollback

2012-06-28 Thread Brian Desmond
Yes - that is the only back out plan. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Friday, June 08, 2012 11:48 PM To: NT System Admin Issues Subject: RE: Schema upgrade/rollback I'm not worried in the

RE: Office 365 and AD synchronization

2012-06-28 Thread Brian Desmond
I think 99.99% is overdoing it. I'm pretty sure there is more than .01% of customers who want HA for their AuthN to email, IM, SharePoint, partner apps, etc. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Michael B. Smith

RE: Schema upgrade/rollback

2012-06-28 Thread David Lum
I extended our Schema last week and amazingly, nothing broke. Now, before deploying the first 2K8 DC I am running though this checklist: http://blogs.technet.com/b/glennl/archive/2009/08/21/w2k3-to-w2k8-active-directory-upgrade-considerations.aspx In some cases I am going to create an equivalent

RE: Identifying service accounts that are loggin in interactively

2012-06-28 Thread David Lum
Set a GPO to prevent them from being interactive and see what breaks :P From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, June 28, 2012 7:37 AM To: NT System Admin Issues Subject: Identifying service accounts that are loggin in interactively Is anyone else tasked with

RE: Identifying service accounts that are loggin in interactively

2012-06-28 Thread Christopher Bodnar
Keep in mind what I'm trying to do here. Not trying to figure out a way to make sure they can't do interactive logon. I need to prove to audit that they didn't logon interactively. That means a report from the security logs. Christopher Bodnar Enterprise Achitect I, Corporate Office of

RE: Wickr on corporate iPhones?

2012-06-28 Thread Ziots, Edward
Actually according to the article they are using AES and RSA standards, which are available to public scrutiny (I agree if encryption was proprietary and not open to public scrutiny I wouldn't be advising using it) The Anti-Forensics capabilities might be a blessing and a curse in the age of BYOD

Re: Schema upgrade/rollback

2012-06-28 Thread Andrew S. Baker
You *expected* something to break? * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Thu, Jun 28, 2012 at 11:56 AM, David Lum david@nwea.org wrote: I extended our Schema last week and amazingly, nothing broke. Now, before

RE: Identifying service accounts that are loggin in interactively

2012-06-28 Thread Ziots, Edward
Why not put the service accounts in a group and apply GPO that denies logon type 2 (Logon Locally) via User Rights Assignment. 1) The common logon types are the following. a) Logon Type (2): Console logon - interactive from the computer console b) Logon Type (3): Network

RE: Schema upgrade/rollback

2012-06-28 Thread Ziots, Edward
It is Microsoft Duck.. Z Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, June 28, 2012 12:35 PM To: NT System Admin Issues Subject: Re: Schema

RE: Identifying service accounts that are loggin in interactively

2012-06-28 Thread David Lum
I know, it was a tong-in-cheek comment. Like you I thought there was an EventID description that differentiated between an interactive logon and other types. Have you looked on http://www.ultimatewindowssecurity.com ? Specifically:

RE: Schema upgrade/rollback

2012-06-28 Thread David Lum
No, but the other SE's half did. I should have put a smiley after my nothing broke comment. I read a blog the other day that a schema upgrade did break something, but only because they went forward then backward:

Re: Wickr on corporate iPhones?

2012-06-28 Thread Ben Scott
On Thu, Jun 28, 2012 at 12:30 PM, Ziots, Edward ezi...@lifespan.org wrote: Actually according to the article they are using AES and RSA standards, which are available to public scrutiny ... I saw that, too. But if accurate, that means they're lying in their product description. Either way,

Re: Wickr on corporate iPhones?

2012-06-28 Thread Kurt Buff
Ah No. The security is based on a proprietary, patent pending, Digital Security Bubble(TM) (DSB) algorithm... Snakeoil. Kurt On Thu, Jun 28, 2012 at 9:30 AM, Ziots, Edward ezi...@lifespan.org wrote: Actually according to the article they are using AES and RSA standards, which are

Upgrading DC's to 2K8

2012-06-28 Thread David Lum
Reality check: Empty forest root MYDOMAIN.LOCAL ML-DC01 ML-DC02 Then subdomain SUBDOMAIN.MYDOMAIN.LOCAL SML-DC01 SML-DC02 All are currently 2K3 DC's. Ideally I think we'd like to upgrade them to W2K8 DC's and keep the same name (we

RE: Upgrading DC's to 2K8

2012-06-28 Thread John Cook
Sounds sound. Did it here about 18 months ago John W. Cook System Administrator Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4 From: David Lum [mailto:david@nwea.org]

Re: Upgrading DC's to 2K8

2012-06-28 Thread Kurt Buff
From: David Lum [mailto:david@nwea.org] Sent: Thursday, June 28, 2012 2:14 PM To: NT System Admin Issues Subject: Upgrading DC's to 2K8 snip What about this plan for ML-DC01? I assume your earlier message about the uneventful schema extension was for this domain, and for this purpose?

Re: Upgrading to IIS 7.x

2012-06-28 Thread Steve Kradel
Haven't needed to configure one of these under IIS7, but suspect it is in the Handler Mappings section; you might also need to register it as an allowed CGI; along these lines http://geekswithblogs.net/Lance/archive/2007/12/13/how-to-run-cgi-applications-on-iis7.aspx --Steve On Thu, Jun 28, 2012

RE: Upgrading to IIS 7.x

2012-06-28 Thread David L Herrick
Woot I think that is it - thanks -Original Message- From: Steve Kradel [mailto:skra...@zetetic.net] Sent: Thursday, June 28, 2012 2:45 PM To: NT System Admin Issues Subject: Re: Upgrading to IIS 7.x Haven't needed to configure one of these under IIS7, but suspect it is in the Handler

RE: Upgrading DC's to 2K8

2012-06-28 Thread Jon Harris
I am with Kurt on this you might as well push it to 2k8r2. Jon Date: Thu, 28 Jun 2012 11:32:01 -0700 Subject: Re: Upgrading DC's to 2K8 From: kurt.b...@gmail.com To: ntsysadmin@lyris.sunbelt-software.com From: David Lum [mailto:david@nwea.org] Sent: Thursday, June 28, 2012 2:14 PM

RE: Upgrading DC's to 2K8

2012-06-28 Thread Michael B. Smith
3.5 remove server from domain From: David Lum [mailto:david@nwea.org] Sent: Thursday, June 28, 2012 2:14 PM To: NT System Admin Issues Subject: Upgrading DC's to 2K8 Reality check: Empty forest root MYDOMAIN.LOCAL ML-DC01 ML-DC02 Then subdomain

RE: Office 365 and AD synchronization

2012-06-28 Thread Michael B. Smith
:-P From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Thursday, June 28, 2012 11:52 AM To: NT System Admin Issues Subject: RE: Office 365 and AD synchronization I think 99.99% is overdoing it. I'm pretty sure there is more than .01% of customers who want HA for their AuthN to email, IM,

Re: Office 365 and AD synchronization

2012-06-28 Thread Steve Kradel
I will vigorously agree with this... a cluster for handling ADFS2 load for basic sign-on to SaaS is very rarely necessary, but you almost always do want to be able to patch and reboot without making unavailable all the stuff that now absolutely depends on federation/SSO. --Steve On Thu, Jun 28,

Re: Today is Tau day

2012-06-28 Thread Angus Scott-Fleming
On 28 Jun 2012 at 10:45, Kurt Buff wrote: It's a much nicer constant than Pi... http://newsletters.networkworld.com/t/6688025/258773379/367815/0/ and especially http://tauday.com/ Because Pi ruined my math career, I care... Sorry I missed it. Forwarded to the math teachers in my