Wireless network and its domain context

Trying to understand this phenomenon : Background: Win2kr2 Domain environment with 1 root domain root.local 1 child domain: ad.local Wireless network setup - with SSID - Martini - all working fine Q. First : When a network is connected the wireless connection the display suggests context as

RE: DCs in saperate OU

Thanks for all the replies! This is my stance as well, but we have some rookie admins; they have called in the meeting pointing this as design flaw Best regards, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

URL redirect behavior - IE vs Chrome

I need understanding and help with this phenomenon: Chrome : When I do http://domainname.com ; it properly routes to my http://www.domainame.com but Using IE : it takes me to Bing/Google and searches for the keyword. How do I get this fixed so that the URL http://domainame.com automatically

RE: URL redirect behavior - IE vs Chrome

DNS change seems to be more viable option? Can you please help us in understanding how to train DNS to handle this? Thanks ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:

Re: URL redirect behavior - IE vs Chrome

Ben: What DNS needs to be created.. There already exist www record in DNS? Our DNS servers are AD integrated- Win2k8R2. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:

Re: URL redirect behavior - IE vs Chrome

Finished checking the DNS entry.. the entry exist.. The A record is pointing to domain.com, still for some reason it doesn't work with IE.. Any further advice? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ---

RE: URL redirect behavior - IE vs Chrome

so www record exist and 2) yet another A record which is point to the domain example.com both exist. NSLOOKUP of www record show correct IP address however NSLOOKUP of domain example.com finds all AD DNS Servers.. (expected as all servers are AD integrated DNS server) This proves that

re: Employee Remote Access to Desktop

Check out the mobikey solution from Route1; www.route1.com I have seen DHS folks using this technology. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:

re: Cloud-based servers and the like

Pretty close to what you are thinking.. Amazon has free tier which allows you to rollout few micro-instances. You may need to explore that.. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage

re: Another new-ish angle on VDI

Citrix licensing is getting crazier as competition is increasing. Last conversation with our sales rep, the CCU or concurrent licensing model is out.. Now you had to buy fixed licenses. There are so many twist and turns to licensing I don't understand if Citrix is serious about selling VDI

re: Anyone Use Double-Take RecoverNow?

We had double-take doing replication backup catalog between two servers; no problem then. NEver exceeded beyond that stage untill we moved to neverfail as comprehensive solution. We are currently in the implementation phase so not much experience to say good / bad about the product. The initial

Windows 2K8 native upgrade

Hi, Has anyone on this list gone native with Win2k8R2 while having apps still hosted on Windows 2000 SP4 servers? Any issues identified during that upgrade? Appreciate the responses.. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: Wireless / Wired bridging

To Add to my initial questions: - We have Wireless Cisco NAC implemented - Wireless is based on EAPTLS with cert based authenticated brokered by RADIUS Dell software solution which can automatically turn off the NIC. What was that software? Thanks in advance, ~ Finally, powerful endpoint

Wireless / Wired bridging

Hi, Security folks are hounding on this and any help will be highly appreciated. Setup Cisco wireless network - Highly secure configuration. No issues there. When a laptop are docked, the Win7 workstations gets IPs from both the network ; Wired and wireless. - Route print command clear

New Policy UPN vs samAccountname

Trying to draft new policy for user accounts? What is the most effecitve advice? samAccountname - which is generally truncated, cryptic version of realname or nice and clean UPN which is i.e. first.lastn...@gmail.com. Certainly UPN seems scalable, cloud friendly and future proof? Any thoughts

RE: New Policy UPN vs samAccountname

Fantastic! Thanks Michael.. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to

Blocking files from being downloaded

Greetings: How do disable users from download any software from the internet other than windows updates and files like .pdf, .xls, .doc, etc. TIA, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage

re: Wireless Question

Keep these guys in your shortlist.. http://www.ruckussecurity.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or

Re: Blocking files from being downloaded

How does taking admin rights away stops them to download softwares from i.e. Softpedia? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:

RE: Network Load Balancing question ( Windows 2003 R2)

Hold on.. NLB is just dumb load balancing. No different than an F5, CoyotePoint, whatever. It's just dumber because it has no application awareness. When was the last time you tried F5? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

re: SSL Intermediate Certs

for most part SSL cert providers doesn't generate and provide access through their primary root servers. Most of the ssl vendors i.e. Verisign has differetn intermediary root servers, which sometimes they call it by classes i.e. class1, class2, class3 etc. Depending upon your business activity

RE: Non AD integrated DNS

No big about 300 workstations and approx few (@200) non windows sensors, badge readers and other devices. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

enforcing preferred DC

Hello: We have recently upgraded Windows 2003 to Windows 2008 DCs and it seems that most workstations (mostly vista with few W2k) are indvertantly connecting to legasy Win2k3 DCs and it seems that the some of the GPOs with WMI filters are not working. Where are the options in the GPO, where

RE: enforcing preferred DC

Thanks for the clarification. Since we need to decomission the legacy domain controller anyways, what are the ways I can preferred them not be used. Best regards, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Non AD integrated DNS

In one of the projects the ADDC (win2k3) is heavily used and to buy the time, thinking to offload the DNS to standalone member server. This new server than hold DHCP/WINS and DNS offloading exclusive authentications to DC. Is there any disadvantage of running standalone DNS (NON AD

SYSVOL and NETLOGON Def perms

Hi, I am trying to fix some security finding with file shares and permissions and am trying to understand what are the default SHARE adn NTFS permissions on SYSVOL and NETLOGON In environment here, I am in serious argument with Security team. Thanks, ~ Finally, powerful endpoint security

RE: SYSVOL and NETLOGON Def perms

Thanks, The security team that I am working with is of the opinion that Everyone : READ permission should be deleted and only Authenticated users : FULL CONTROL shoule be applied. Theoretically it seems that nothing will break.. because these shares will only be accessed after successful

Yet another DNS question - about reverse Lookup zone

Environment: Win2k8/3 Domains - AD integrated DNS zones Question: It is critical to have a reverse lookup zone for every IP Subnet assigned in our environment visible under DNS ? In our AD environment, I see few reverse lookup zones and many are missing - everything seems to be working

RE: Yet another DNS question - about reverse Lookup zone

Thank you.. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Q: Promoting the Domain functional level

Need input from your real-life experience here: Environment: - Windows 2000 mixed mode environment (Both forest and Domain) - Domain Controllers are Wndows 2000 SP4, Windows 2003 and Windows 2008 R2 with no issues. Requirement: To start rolling out the RODCs for new smaller sites. As the

RE: Promoting the Domain functional level

Thank you. That answers my question. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

firewall rule help

Hello: Can't seems to figure out the syntax of achieving the following firewall rule for Windows 2008 Server. - Allow full inbound access (all Host IPs and profiles) - from two of my security scanner workstations i.e. 192.168.1.10 and 11 I am trying to script it using netsh advfirewall

re: Resizing C partition in Server 2003

Another option: (Try only after taking a full bare metal backup) If both the C and D are both are of same RAID group and are logically partitioned - convert the volumes to Dynamic. Shrink the D drive by let's say 10GB and expand the C drive by 10GB. My wording may be slightly obtuse, but crux

re: DCPROMO demotion and DNS

If you want to have the server to be demoted continue to work as DNS Server, you can get the zone from AD integrated to file based. Other than that if you demote a DC, it will definately stopped doing any function which was integrated as part of its former role. ~ Finally, powerful

re: DL185 fan speed

Not sure about DL 185, but in blade environment - if ONBOARD Administrator is not functional all the FANS will spin at full Speed. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Exiting from a Start command

Need an URGENT help: I am trying to launch the ePOP Alert client from WiredRed from my login script by using the following command : Call Program Files\WiredRed\Epop\EPOPCLIENT.EXE the launch is fine but the DOS window after launch gets hung. What are the methods where I can launch the .EXE

RE: Exiting from a Start command

I tried the following without any success : Start /MIN START /B /MIN Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Modifying Local GPO on Workstation

Need expert comments on the following situation: A situation is arising by which the security team wants to run a Workstation Logoff and Login script to ensure system info updated in some databse. I can do GpEdit.msc on each machine and achive that.. but how can I implement this change of

DHCP Scope

Planning to fixing IP Address conflict issue in a 2 DHCP Server environment - Win2k3R2 STD SP2. For some strange reason old Admin has configured both the server with identical ranges on both the servers and much to my surprise apart for occassional IP address conflict - it is running fine.

GPO Security Context

Hi, Please help to understand the security context.. My understanding is that scripts running as part of Domain based GPO run under LocalSystem security context right? If that's the case than why am I getting access denied when I try and delete the key using command === reg.exe delete

Re: GPO Security Context

hmmm.. My understanding was if a script is run as \\domainname\netlogon\Logon.bat it will run under Logged-in user context But the same script if run as part of GPO - It runs under LocalSystem Context.. If that's the case, any idea how do you run the registry keys directly as part of the

RE: Kinda OT: ESX with only two nics

That's right.. Creating trunk of 2 NICs (effectively giving 2 Gbps speed) than - You tag your ILO to use a particular VLAN (to access blade or enclosure)- Let your COS on a saperate VLAN, iSCSI and production network respectively. This is supported configuration by VMWare. Just make sure that

Federal Server Core Configuration (FSCC)

Hi: Anyone has seen Federal Server Core Configuration (FSCC) Guidelines?? Below link talks about the FSCC but hasn't had any downloaded guidelines http://www.microsoft.com/industry/government/solutions/fscc/default.aspx Thanks in advance, ~ Finally, powerful endpoint security that ISN'T a

RE: NewSID

Curious!! how did you find out the duplicate SIDs? One more observation about NEWSID. Once you have run NEWSID and process is completed, if you do a regedit and find old hostname you will most often find atleast couple of places which are not changed and you will have do manual change. That

RE: Log On as a Service question

I am trying to see why would you even try and place this account through domain GPO, why not place the said account in appropriate built-in groups (Administrator etc.) and get over with it. FYI, Citrix PS 4.5 and above has eliminated all accounts other than ctx_cpsvcuser, that's the only

Cisco NAC and Login Script

Hi: Getting some expert help here. We are implementing Cisco NAC solution - and facing a very popular issue. While NAC client is doing its magic in the background - How do you delay the login scripts and GPO to run? Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

re: Cisco NAC and Login Script

Thanks found the solution here: http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a0080a70c18.shtml ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Win2k8-Gold Build Question

Am sure many on these must have gone to similar exercise.. Finally got an approval to build a gold win2k8std-image for generic server rollout, but had to review and advice on all available guidelines and best practices. And I would like to tap on this vast knowledge pool of this list:

Q: Sharepoint Services

Hello: What is the advantage of installing Windows SharePoint Services 3.0 of file servers? http://technet.microsoft.com/en-us/windowsserver/sharepoint/bb400747.aspx I understand the Windows Sharepoint Server and its features, but I unable to understand the advantage of installing

RE: WIN2K8-64Bit: Two C:\Program Files ??

You are right, I am running 32 Bit vista that's why I only see one Program Files.. Thanks - I am getting there it seems. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

RE: WIN2K8-64Bit: Two C:\Program Files ??

hmm. I am running vista on mya laptop and it has only one 'program files' So this is only on VMware installation that Vista, Windows 7 and Win2k8 creates C:\Program Files x86.. Have you researched of disabling this behaviour? Thanks in advance, ~ Finally, powerful endpoint security that ISN'T a

WIN2K8-64Bit: Two C:\Program Files ??

Hi, Wanted to confirm. I am installing Win2k8-64Bit standard as VM (on ESX) and after installation I am seeing two C:\Program files ie. C:\Program Files C:\Program Files x86 Is this a normal behaviour? It seems obvious that something which is non-64 bit complaint may be going to x86 folder..

RE: Win2k8 - 64Bit on ESX

Thanks, I think I got the correct answer. IT does need VT enabled processor apart from being simply 64Bit binary compatible for it to work with VMWare ESX and XenServer. Direct installation of Windows 2008 on this hardware with Intel Xeon 3.0Ghz processor does work. VMWare ESX is displaying

Win2k8 - 64Bit on ESX

Hi: I am tyring to understand this phenomena. HP DL380G4 with Intel Xeon3.0 GHz processor. Using Smartstart - I can install Windows 2008 - 64 Bit edition. No problem. Than I installed VMWare ESX 3.5 with latest updates. Trying to install Same Windows 2008 - 64 Bit ; no go. It gives me the

RE: Win2k8 - 64Bit on ESX

Where would I enable the DEP in the HP Server Bios? or Virtual Machine BIOS? because Windows OS is not yet installed!!! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Re: Win2k8 - 64Bit on ESX

I looked everywhere in the BIOS settings and found no reference to enabling or disabling the 64Bit. However the BIOS possibility is ruled out because I am able to install it directly. It is only on VMware ESX 3.5 as virtual machine its not working..!! ~ Finally, powerful endpoint security that

RE: Win 2003 R2 quotas

You should be using the MMC for doing FSRM (File Server Resource management); Ideally thsi is what you do: With a faint idea about your environment, but since you said it is school - I would think in those lines. You select entire volume (ie. D:\) and enable soft quota (Monitoring ONLY) -

Re: RE: What's the easiest way to migrate printer from one server to another?

Check this link out: http://technet.microsoft.com/en-us/library/cc722360.aspx ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

re: View PAE setting on W2K8

Thanks for the info.. but I am wondering that why would you need to have PAE in win2k8? becuase you have 32 bit installation or you need this on Win2k8-64 Bit for 32 bit enabled applications? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Win2k3R2 Event forwarding to another Win2k3R2 server

Hello, I am trying to setup event forwarding to be collected on another Win2k3R2 (both standard) servers.. Googling isn't helping much. Does anyone on this list has achieved this before? Please share the steps, please.. thanks. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~

RE: Win2k3R2 Event forwarding to another Win2k3R2 server

I beleive R2 added this functionality of forwarding events.. I am basically trying to Forward the events to Say a Win2k8 collector.. I already see the Forwarded Events view under event viewer of Wi2k3R2 std server. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Building a new instrastructure

Hi, I am sure many of you have been through this before. How to do you deal with licensing part (CALs purchase) if one has to start the following instrastructure: 2600 users 10 servers - mostly file and print 2600 workstations I was thinking in the following line - help me add / deduce some

AD: how to add a subnet

Please hlep in defining how to add new IP subnet under AD sites and services. We are create few new IP subnets all in 1 site and would like to tie-in to that site. How can I add that IP subnets? When I right click on 'subnets' under AD Sites and services, i don't see any option to add. Any

re: AD: how to add a subnet

I got it. I had to have Enterprise Admin rights to see that option. Thanks, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

re: Printer Management

We bought Print Manager Plus 2008 hasn't install it yet. We bought this basically to satisfy the requirement for System refresh group, they wanted to know how many papers are printed out and decide when to discontinue printer from service.

RE: Domain Controllers time sync software

Thanks for very informative string of suggestions! Greatly appreciated. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Win2k8 Clustering

Hello: Wondering if anyone on this list is at prod / test level of testing Win2k8 clustering options. I am reading tonnes of material where each clustering options has its pros and cons and would like to understand your findings and what prompted to reach that clustering model. Thanks, ~

Domain Controllers time sync software

What is the time-sync software hardware that the list uses? In our environment - for FW reasons the sync with default time sysnc are not working and we are in the process of buying some hardware appliacne with can provide time services. In the meantime, does anyone has use some software option

RE: File Server Migration Question

Did the shares carry over too! In my tests when the LUNs are detached from one hosts and re-attached to another hosts (even with the same name), the shares goes completely out of whack. Please share your experience. thansk, ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~

File Server Migration Question

Guys: help me out with this: I have a Win2k3 Server connected to SAN with two LUNs of 250 GB each hosting some shares. Now, I need to migrate it over to newer, better faster servers. My understanding is that I should proceed the following: 1. e current WWNs of server Shutdown file server 2.

RE: File Server Migration Question

Initialize means, Device Manager -- Storage Management -- Rescan Disks -- Initialize disk. Which basically registers the disks on the hosts. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~

How to identify DC roles?

Hi, Need help in identifying Domain Controllers role? We have about 12 DCs (Mix of win2k and win2k3) and we would like to decomission or Upgrade some of them. Since they were created during various stages, I am wondering what are the ways to see what roles are scattered across. I mean, I

Heat and Power calculations

hi, Does anyone on this list has done calculation or analysis of how much BTU and Power a 1U, 2U, and 4U servers consume! HP servers in particular? Thanks in advance, ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~

RE: Heat and Power calculations

Perfect. Thank you. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~

NTFS take ownership question

Hi, Need help in resolving this issue on our Common/Public drive. A directory is showing as NO permission even for Administrator. the NTFS permission security tab is absolutely blank. Current owner of this shows Unable to display current owner. If I tried to take ownership - it displays

Win2k TS - Registry size expansion

Hi, ENV: Win2k SP4 Server running citrix metaframx XP1.8 I am continously getting error message about registry size too low.Microsoft documents is only pointing to increase it under System properties and changing under System Properties doesn't seems to take effect. Can someone please help me

re: OS upgrade

Hasn't worked for me. I had Win2k3STDSP2 server ; followed the link somewhere on Microsoft website, which basically said pop the R2CD2 and launch setup.. It kept flashing message cannot upgrade. Didn't had much time to downgrade the SP level or any further tinkering. Finally went with full

newSID question

Hi, Question related to newSID: I am trying to backup SID and need to understand whether my take on this utility is correct. NewSid from Microsoft has capability to Generate SID or pull SID from other server and apply to new server, but it cannot backup the SID. So, when I launch the