RE: Time sync

2013-01-07 Thread Ken Cornetet
Lol, how many times do you need 64 vCPUs or 4TB of guest Ram versus needing to extend a disk? From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Friday, January 04, 2013 8:50 PM To: NT System Admin Issues Subject: RE: Time sync Can ESX support 64 vCPUs or 4TB RAM per guest yet? Or 64

RE: Replacement for SteadyState

2013-01-07 Thread Glen Johnson
We teach classes and let the students make any and all changes to the desktop environment. Here's one example. Student comes in and sets the desktop wallpaper to his favorite pinup gal. Next student doesn't like it, but is a beginner and doesn't know how to change it to something else.

RE: Replacement for SteadyState

2013-01-07 Thread David Lum
Word. Domain-joined system but they auto-login as a local user that belongs to the guest group in Vista, with a few other lockdowns that mimic Steadystate. Public machines are a completely different can of worms, and even the above isn't perfect but I can go several months at a time (been

RE: Occasional local admin needed

2013-01-07 Thread David Lum
Thanks for everyone's replies on this! Dave From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Friday, January 04, 2013 7:53 AM To: NT System Admin Issues Subject: RE: Occasional local admin needed Do a domain account as you describe and set the account to expire tomorrow. When

Re: Replacement for SteadyState

2013-01-07 Thread kz20fl
You could achieve much the same end with Citrix Provisioning Services, except you'd have the options of personal vDisk as well. I have to admit I'm not a fan of the DeepFreeze/SteadyState approaches - some threats don't need to be persistent beyond a reboot to wreak havoc. I'm more inclined

Re: Time sync

2013-01-07 Thread Michael Leone
On Mon, Jan 7, 2013 at 8:31 AM, Ken Cornetet ken.corne...@kimball.com wrote: Lol, how many times do you need 64 vCPUs or 4TB of guest Ram versus needing to extend a disk? I run VMware ESXi 5.0, and I know I have had to extend a disk any number of times. And Win2008 makes extending the boot disk

RE: Replacement for SteadyState

2013-01-07 Thread Glen Johnson
No on the student login. We use a generic account per classroom. We've talked about moving to a individual student login, but I'm not sure we need or want that. For others that have gone that route, how do you handle situations where students don't logout before they leave. You either have a

RE: Replacement for SteadyState

2013-01-07 Thread Glen Johnson
And that's why there are choices. I could achieve the same with Citrix... but that's another expense, learning and such. Not saying it's good or bad, just that what we are using works well for us, so no plans to change at the moment. From: kz2...@googlemail.com [mailto:kz2...@googlemail.com]

RE: Time sync

2013-01-07 Thread Ken Cornetet
We are running ESX 5. To conserve SAN storage, we provision virtuals with the bare minimum needed disk space because it is so easy to extend disks later (extend the VMDK in VMWare, extend in Windows, done). No down time, and no wasted disk. We don't have to spend a lot of time trying to

RE: Replacement for SteadyState

2013-01-07 Thread Kennedy, Jim
how do you handle situations where students don't logout before they leave.. then student 2 has access to student 1's account. Self-correcting problem. Student 2 deletes all of Students 1's stuff and Student 1 never does it again. With 7,000 students we have very little trouble

Re: Replacement for SteadyState

2013-01-07 Thread kz20fl
If they leave the computer locked, power it off and on. If they lose work - then learn not to leave it locked. Sent from my Blackberry, which may be an antique but delivers email RELIABLY -Original Message- From: Glen Johnson gjohn...@vhcc.edu Date: Mon, 7 Jan 2013 14:57:13 To: NT

RE: DC server 2003 Time service

2013-01-07 Thread itli...@imcu.com
From my PC: (Looks like I have everything working except the first one. It is an old 2003 DC.) Why is it being so difficult? All the other 2008 DC's and 2003 DC's are behaving except it? Where can I look? C:\windows\system32w32tm /monitor 030405MF663P44.IMCU.local[10.0.10.5:123]:

RE: Time sync

2013-01-07 Thread Michael B. Smith
Because the overhead associated with dynamic disks in Hyper-V v3 is in the very low single digits. We don't spend any time on this process, thin provisioning still works seamlessly, and we get on with our lives. :) -Original Message- From: Ken Cornetet

RE: Replacement for SteadyState

2013-01-07 Thread Brian Desmond
Yeah ... For all the universities I've worked at and had this discussion, this perceived problem has never morphed into an actual issue. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Kennedy, Jim

RE: 'Dementia' Wipes Out Attacker Footprints In Memory - Dark Reading

2013-01-07 Thread Ziots, Edward
Seen it already... its another tool in the anti-forensics suite... Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, January 07, 2013 10:05 AM To: NT System

Re: Time sync

2013-01-07 Thread Andrew S. Baker
You do know you can thin provision in both VMWare and HyperV, right? Thus, you can stipulate that a disk have a max size of 200GB, but if you're only using 50GB, it will only be 50GB in size. Thus, no reason for Windows users to howl. Plus, Windows doesn't mind extending non-boot disks, but

RE: Replacement for SteadyState

2013-01-07 Thread David Lum
+1. Requires mindset change and buy-in of powers-that-be, which sometimes can be a hurdle... From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Monday, January 07, 2013 7:09 AM To: NT System Admin Issues Subject: RE: Replacement for SteadyState how do you handle

RE: Replacement for SteadyState

2013-01-07 Thread Glen Johnson
Yes, and after 10 times, the computer is corrupted and has to be reloaded, 10 calls to the helpdesk and wasted time. Not an issue with DeepFreeze. Power it off 100 times and still no corruption From: kz2...@googlemail.com [mailto:kz2...@googlemail.com] Sent: Monday, January 07, 2013 10:15 AM

Re: Replacement for SteadyState

2013-01-07 Thread Vicky Spelshaus
If they lose work - then learn not to leave it locked. This exactly! As we use DeepFreeze in the labs, this is also how our students remember to not save to the desktop. On Mon, Jan 7, 2013 at 9:15 AM, kz2...@googlemail.com wrote: If they leave the computer locked, power it off and on. If

Re: Replacement for SteadyState

2013-01-07 Thread Jonathan Link
Universities are a much different beast than primary and secondary schools. 1) Logging out was part of the Acceptable Use Policy, meaning it is the student's responsibility to log out. 2) Teachers were taught to double check that students logged out. 3) Teachers in labs, put it on their syllabus,

RE: DC server 2003 Time service

2013-01-07 Thread Coleman, Hunter
On the old 2003 DC, check HKLM\System\CurrentControlSet\Services\W32Time\Parameters\Type. It should be NT5D5. If it shows NTP, then the DC is synchronizing time with an external time source. It was probably the forest root PDCe in the past, but if it no longer is then on that DC run Net stop

RE: Time sync

2013-01-07 Thread Ken Cornetet
Thin provisioning seems risky to me. Seems like you are always in danger of non-critical virtuals deciding to use more disk space thus exhausting physical space which would cause critical VMs to pause if they happen to need more space. We tried thin provisioning back in the old VirtualServer

Re: Time sync

2013-01-07 Thread Michael Leone
On Mon, Jan 7, 2013 at 10:33 AM, Andrew S. Baker asbz...@gmail.com wrote: You do know you can thin provision in both VMWare and HyperV, right? Thus, you can stipulate that a disk have a max size of 200GB, but if you're only using 50GB, it will only be 50GB in size. I never use think disks,

RE: Replacement for SteadyState

2013-01-07 Thread Brian Desmond
When I worked for a K-12 (~450K students), we issued accounts to all students at any school that was using our central AD. I've seen the same practice at the other K-12 districts I've worked at. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c -

Re: Time sync

2013-01-07 Thread Andrew S. Baker
Yes, over subscribing can be an issue if you don't manage your capacity properly. It hasn't proved to be an issue in any of the environments where I have been. *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information

RE: Replacement for SteadyState

2013-01-07 Thread Glen Johnson
Good to know. Now, the other biggie for use, user account management. We don't yet have an automated way to create/delete the accounts. Richmond is working on a system for that, but the vendor they contracted wants mega bucks to set up our server to sync with their domain. From: Brian Desmond

Re: Replacement for SteadyState

2013-01-07 Thread Jonathan Link
Oh, I did it in the school I was in, too. I had a huge amount of resistance that needed to be overcome. On Mon, Jan 7, 2013 at 11:54 AM, Brian Desmond br...@briandesmond.comwrote: *When I worked for a K-12 (~450K students), we issued accounts to all students at any school that was using our

RE: Replacement for SteadyState

2013-01-07 Thread Kennedy, Jim
I am K-12 so a different setup probably..but just to get you thinking. Do you have your own student information system? That contains everything you need I would think. Ours lists all the students, grade, school and student ID number. It is maintained in part by the State, our enrollment

Re: DC server 2003 Time service

2013-01-07 Thread Kurt Buff
Would not this: w32tm /config /syncfromflags:domhier /update have the same effect, or is it a less reliable option? Kurt On Mon, Jan 7, 2013 at 8:12 AM, Coleman, Hunter hcole...@mt.gov wrote: On the old 2003 DC, check HKLM\System\CurrentControlSet\Services\W32Time\Parameters\Type. It should

RE: DC server 2003 Time service

2013-01-07 Thread Coleman, Hunter
That would work as well, though you would want to include the /reliable:no flag. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, January 7, 2013 10:54 AM To: NT System Admin Issues Subject: Re: DC server 2003 Time service Would not this: w32tm /config

RE: DC server 2003 Time service

2013-01-07 Thread itli...@imcu.com
A Haa. NTP time software running on that old DC. Uninstalled Rebooted. Did all of the below And w32tm /resync Now w32tm /monitor reads perfectly. Now on the PDC and I point to a local unbuntu server I have added as the first NTP server to try? -Original Message- From: Coleman,

RE: Time sync

2013-01-07 Thread Ken Cornetet
How do you manage your capacity properly? I'm not being facetious - I really want to know since it looks like we are switching to HyperV. Microsoft's recommendation is to create thin disks for more than you ever think you need. Then, when creating the OS, use disk manager to create the file

RE: Replacement for SteadyState

2013-01-07 Thread Brian Desmond
FIM is dirt cheap for EDU. The services cost of an implementation to simply sync HR and SIS with AD is not a whole lot. If you want to do it quick and dirty, a PowerShell or VB Script that reads a flat file or view off your ERP system each night and syncs it with AD would be straight forward

RE: DC server 2003 Time service

2013-01-07 Thread Coleman, Hunter
Use this as a basis for configuring your current PDC: http://technet.microsoft.com/en-us/library/cc794937(v=WS.10).aspx -Original Message- From: itli...@imcu.com [mailto:itli...@imcu.com] Sent: Monday, January 7, 2013 12:36 PM To: NT System Admin Issues Subject: RE: DC server 2003 Time

RE: Replacement for SteadyState

2013-01-07 Thread Brian Desmond
I could take it a step further and do an auto export every night from the student information system and script deletions and new users but for the few we get it is not worth it. At the end of the school year I mass delete and start over fresh. If you added that nightly sync, you wouldn't have

Re: Lumension Intelligent Whitelisting

2013-01-07 Thread kz20fl
Don't think it works with the latest versions of XenApp, although it is a good six months or so since I came across this issue and may have been updated Sent from my Blackberry, which may be an antique but delivers email RELIABLY -Original Message- From: Richard Stovall

Re: Time sync

2013-01-07 Thread Andrew S. Baker
http://technet.microsoft.com/en-us/systemcenter/hh278293Well, I wouldn't use a 1TB as the range, but let's use your example and say we doubled all of our expected minimums. Then you have all the flexibility that you pointed out before. *Now, in order to know the max my virtuals might take, I

RE: Time sync

2013-01-07 Thread Ken Schaefer
You might not want them - but other people might. Personally I've never had to extend a VM disk outside a maintenance window, so it's never really been an issue for me. Hyper-V supports shared-nothing migration as well - does VMWare do that? Actually, the statement was that Hyper-V has nothing

RE: Time sync

2013-01-07 Thread Ken Schaefer
Seriously? Are you an ITIL shop? Do you not have capacity management plans and systems/tools in place? Or do you just fly by the seat of your pants? Everything should be monitored, and you're getting nice trending graphs. Sure, sometimes things go unexpectedly wrong - but that can happen for