Re: ADFS + SAML 2.0 w/ Concur = success!

2012-01-18 Thread Mike Leone
On 1/18/2012 9:50 AM, Heaton, Joseph@DFG wrote: He really misses Shookie, that's all. Whatever happened to Shook, anyway? I don't get to follow this group all that closely anymore ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: Size of this NT admin list

2012-01-18 Thread Mike Leone
On 1/18/2012 11:39 AM, Jeff Brown wrote: I would have guessed MUCH higher. Go figure. Like 42? LOL *From:*James Rankin [mailto:kz2...@googlemail.com] *Sent:* Wednesday, January 18, 2012 10:34 AM *To:* NT System Admin Issues *Subject:* Re: Size of this NT admin list 28 ~ Finally, powerful

OT - PGP Whole Disk Encryption uninstall problems

2012-01-18 Thread Mike Leone
Pardon the OT, but damn, I hate Symantec and their extraordinarily crappy uninstall routines! We use their PGP Universal Server, and the Whole Disk Encryption (to encrypt our laptop drives). And since we upgraded the server last week, I can't upgrade my laptop client - I keep getting Internal

Re: OT - PGP Whole Disk Encryption uninstall problems

2012-01-18 Thread Mike Leone
On 1/18/2012 6:17 PM, Jonathan Link wrote: Can you restore back to the point where it is fully installed? I restored back to the day before I started decrypting and trying to uninstall. What version is this, out of curiosity, and how are you deploying updates for PGP? 10.0.3, and the

Re: OT Gmail rant

2012-01-13 Thread Mike Leone
On 1/12/2012 3:58 PM, Micheal Espinola Jr wrote: +1 I haven't had that happen, to either my Google Apps or regular Google account. But I usually am signed into one or the other, sometimes both at once ... -- Espi On Thu, Jan 12, 2012 at 7:31 AM, Ben Scott mailvor...@gmail.com

Re: PC that can't Google

2012-01-12 Thread Mike Leone
On 1/12/2012 11:03 AM, John C Owen wrote: It’s a file without an extension Usually in C:\Windows\System32\drivers\etc or equivalent. You are searching with system files shown, right? *From:*Bob Hartung [mailto:bhart...@wiscoind.com] *Sent:* Thursday, January 12, 2012 10:04 AM *To:* NT

Re: PC that can't Google

2012-01-12 Thread Mike Leone
Interesting. Originally I searched for hosts on the C Drive and nothing showed up. Now I've navigated to windows\system32\drivers\etc, there's the hosts file. I can open it and it looks like the default hosts files with one exception, the last line is ::1 That's an IPv6 address. That's normal.

Re: KB2585542 stops access to websites

2012-01-11 Thread Mike Leone
On 1/11/2012 3:28 PM, Sam Cayze wrote: They outline some steps to disable/enable the update if needed: (Via Registry, which also means GPO) http://support.microsoft.com/kb/2643584 So the work-around is .. to not use this critical patch. Turn it off via registry, GPO, or FixMeNow. Which

Re: KB2585542 stops access to websites

2012-01-11 Thread Mike Leone
On 1/11/2012 5:08 PM, Steven Peck wrote: It does say 'some'. I put this on my system last night and it hasn't affected any of our internal sites that I normally connect to. I installed it this morning, and I haven't been blocked, either. Of course, that's no comfort to the folks who have to

OT - How to determine vCPU over-commit in VMware ESX 4.1

2012-01-10 Thread Mike Leone
I am working on a PowerCLI (Powershell with VMware extension) script that I want to use to determine memory and vCPU over-commit - i.e., that I have allocated too much vCPU or memory to a VM. I can figure out the memory easily enough - I take the maximum of the last 30 days worth of 2 hour

Re: OT - How to determine vCPU over-commit in VMware ESX 4.1 - MORE

2012-01-10 Thread Mike Leone
even set them ... On 1/10/2012 10:12 AM, Mike Leone wrote: I am working on a PowerCLI (Powershell with VMware extension) script that I want to use to determine memory and vCPU over-commit - i.e., that I have allocated too much vCPU or memory to a VM. I can figure out the memory easily enough - I

Re: Neat tip of the week

2012-01-03 Thread Mike Leone
On 1/3/2012 10:59 AM, Crawford, Scott wrote: Nice! -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Tuesday, January 03, 2012 12:12 AM To: NT System Admin Issues Subject: Neat tip of the week Ok so this is an ld tip, but I just recently had a need for it. Ever

Re: Deciphering UserAccountControl using PowerShell

2011-12-29 Thread Mike Leone
On 12/29/2011 2:54 PM, Michael B. Smith wrote: Yeah, I don't know exactly what you did, but it works fine, regardless of the case. I used your example code and it works fine. See below. Oh you left off the properties accessor. That is, you did $user.userAccountControl.Item( 0 ) instead of

Re: things to include in a vm server template?

2011-12-09 Thread Mike Leone
On 12/8/2011 8:08 PM, Kurt Buff wrote: portscanner == nmap, but do you really need that on all of your machines? Probably more useful would be wireshark. I don't put those on my templates, since they're not really necessary for everyday use. I might install them as needed, afterwards.

Re: things to include in a vm template?

2011-12-09 Thread Mike Leone
On 12/8/2011 5:54 PM, Jonathan wrote: Hi everyone! It has been a whileI've been quite busy and haven't had much time to do anything here other than occasionally lurk I'm in the midst of building some Server 2008 R2 and Windows 7 templates for my new vSphere 5 environment. I'm close to

Re: things to include in a vm server template?

2011-12-09 Thread Mike Leone
On 12/9/2011 11:52 AM, Steven Peck wrote: oh, why are you including a telnet client? You can enable the MS telnet client natively in the build. There's no native SSH client, tho, is there? PuTTY will do both, so I can understand including it, if you're going to include utilities in a

Re: What a Great Idea!

2011-12-06 Thread Mike Leone
On 12/6/2011 3:22 PM, David Lum wrote: Too much work. And you can't really take that on a trip ... *From:*Sam Cayze [mailto:sca...@gmail.com] *Sent:* Tuesday, December 06, 2011 11:56 AM *To:* NT System Admin Issues *Subject:* RE: What a Great Idea! Why not get the real deal that is

Re: VMware help

2011-11-29 Thread Mike Leone
On 11/28/2011 2:45 PM, Jonathan Link wrote: AFAIK, you can install the BE agents and back up a guest as if it were a physical machine and restore it as if it were a physical machine. I do that with EMC Networker. Even did a BMR back onto a VM once. ~ Finally, powerful endpoint security that

Re: Moving on, leaving the list for a bit

2011-11-29 Thread Mike Leone
On 11/28/2011 3:30 PM, Ziots, Edward wrote: I just wanted to reach out to the list, that I am going to be moving on from my Security Engineer position in two weeks, to a senior security engineer position with another company. I am going to be leaving the list for a little bit, but I would like

Re: Millions of printers open to devastating hack attack, researchers say

2011-11-29 Thread Mike Leone
On 11/29/2011 12:16 PM, Andrew S. Baker wrote: It appears to be a legitimate threat vector, but I do wish the researchers didn't wax so dramatic the whole time... The problem is, technology companies aren't really looking into this corner of the Internet. But we are, said Columbia professor

Re: Mevio?

2011-11-22 Thread Mike Leone
On 11/18/2011 5:06 PM, Len Hammond wrote: Got one word for the group... Mevio What is it and why would someone want it on a machine. Like the podcasting firm? http://www.mevio.com/ So far I'm finding info saying it is a virus (and I tend to think that's right) and some conflicting info

HP Blade server and Win PE 2.0 environment - NIC driver trouble

2011-11-22 Thread Mike Leone
We have an HP BL460 G6 blade center. It uses a Broadcom 10G NIC (the HP ID is NC532i). Anyway, we're trying to boot one of the blades into our Win PE 2.0 environment, so we can push a server image down onto it. And we're having problems. Apparently, the NIC doesn't seem to support that. We can

Re: HP Blade server and Win PE 2.0 environment - NIC driver trouble

2011-11-22 Thread Mike Leone
:54 AM, Mike Leone oozerd...@gmail.com mailto:oozerd...@gmail.com wrote: We have an HP BL460 G6 blade center. It uses a Broadcom 10G NIC (the HP ID is NC532i). Anyway, we're trying to boot one of the blades into our Win PE 2.0 environment, so we can push a server image down onto

Re: OT - converting a VMware VM back to a physical box

2011-11-16 Thread Mike Leone
CD (or floppy). But it should work to make the image while Windows is running? I think we have Ghost v8 .. or used to ... -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Tuesday, November 15, 2011 10:00 AM To: NT System Admin Issues Subject: Re: OT - converting

Re: OT - converting a VMware VM back to a physical box - the plan so far

2011-11-16 Thread Mike Leone
So here's what I've come up with. I don't know why this didn't click with me before, but we use a PXE server (and LANDesk) to push out workstations images via a network boot. I don't really have anything to do with that side of our ops, so I guess that's why it slipped my mind. Anyway, I will

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/14/2011 7:52 PM, Crawford, Scott wrote: Your general plan sounds decent and, as other have mentioned, your concerns could probably be overcome with a pre-sysprep snapshot. But, why not go a step further and create a copy of the .vmdk file and try the migration with that while the

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/14/2011 10:20 PM, Benjamin Zachary wrote: In the past years back, we would install the driver controller (Raid/HP/Dell etc) into the 2000/2003 vm, then ghost it from VM to physical. Usually this got us at least into booting and then re-detected all the new hardware , several reboots later

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/15/2011 10:08 AM, Kennedy, Jim wrote: It really sounds like this app server is very mission critical. Restore one of your DC’s to a test domain. Seize all the rolls, metadata cleanup for all the missing DC’s. Copy your VM over to that domain, bring it up and test both plans. I have

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/15/2011 10:12 AM, Graeme Carstairs wrote: We have use Platespin to migrate from P2P and P2V, and V2P before. There will be no software purchases for this project. I have asked; it won't happen. So any recommended methods utilizing them won't help me, unfortunately ... ~ Finally,

Re: OT - converting a VMware VM back to a physical box

2011-11-15 Thread Mike Leone
On 11/15/2011 10:23 AM, Kennedy, Jim wrote: Couldn’t you copy over the VM to your test domain and at least test your plan and prove it would work, or not. No. Because the VM hardware wouldn't have changed. The worry is getting the VM to boot on the completely different hardware in the

OT - converting a VMware VM back to a physical box

2011-11-14 Thread Mike Leone
So I've got a request that is confusing me. Environment: 6 host EX 4.1 U1 cluster. VM in question - Win2003 Enterprise, 32 bit My boss tells me that I need to convert this from a VM back onto a physical machine - for licensing reasons, this needs to be a physical box, apparently. So

Re: OT - converting a VMware VM back to a physical box

2011-11-14 Thread Mike Leone
On 11/14/2011 11:49 AM, Harry Singh wrote: What kind of role(s) is this VM hosting? My suggesting being if it's SQL or Exchange you could just stand up the Physical machine independently and migrate data across the network either through restoring from SQL database or if its Exchange, just

Re: OT - converting a VMware VM back to a physical box

2011-11-14 Thread Mike Leone
On 11/14/2011 11:53 AM, Cameron wrote: +1 on the snapshot! It's saved my @$$ on a number of occasions! I'm curious though...how is running as a VM any different license wise from running on a physical server? Some vendors charge licensing based on the physical host that an app is running on.

lastLogon time is different on different DCs

2011-09-28 Thread Mike Leone
I am confused about something (the standard state of affairs ...). We're trying to determine the last logon time for a now-disabled user. This user used to logon at the site where he worked, and where we have a DC. Here's the weird thing - if I connect to that DC using an XP machine (which has

Re: lastLogon time is different on different DCs

2011-09-28 Thread Mike Leone
On 9/28/2011 11:03 AM, James Rankin wrote: Maybe I should have said.. Last Logon time isn't replicated if you are using a Windows 2000 domain my bad Our domain is now Win2008. It started out as Win2000, and we updated to 2003, then 2008. But the info is replicating, at least from

OT:Free syslog virtual appliance recommendations?

2011-09-20 Thread Mike Leone
Hey all. I could use a syslog server, as a central logging point for my VMware ESX servers, my Cisco switches, etc. Since it wasn't in the budget, I'm looking for a free one. I know it can be done with a Linux server, but I am unclear on how, and so was hoping to find a pre-built one, so I could

Re: Free syslog virtual appliance recommendations?

2011-09-20 Thread Mike Leone
already. The reason for the appliance is that I can easily make a new VM, and download and install Kiwi. But then I have to use up one of my Windows licenses. And usually, appliances are based on Linux, and don't (always) have licensing costs. -Original Message- From: Mike Leone

Re: Free syslog virtual appliance recommendations?

2011-09-20 Thread Mike Leone
On 9/20/2011 2:13 PM, Andrew S. Baker wrote: You might want to look at Untangle http://www.untangle.com/Download-Untangle I *think* it has a SysLog installed. Otherwise, it's not a huge issue to build it in on a Linux box. True. However, we are a Solar Winds customer, and apparently they

Re: Free syslog virtual appliance recommendations?

2011-09-20 Thread Mike Leone
On 9/20/2011 2:36 PM, Damien Solodow wrote: Which Solarwinds products do you have? NPM and NCM both include an integrated syslog.. NPM and APM, and the Engineer Toolset. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Setting SNMP communities/traps remotely?

2011-08-26 Thread Mike Leone
Hello. We have decided to use a new SNMP community for monitoring. What I'd like to do is to not have to remote control every Windows box and change the configuration in Services. Is there any way to set that remotely, perhaps with netsh or similar? I want to add MyCommunity as a trap destination,

Re: VSS errors on Win2008 R2; problems running out of space

2011-08-14 Thread Mike Leone
, Mike Leone oozerd...@gmail.com mailto:oozerd...@gmail.com wrote: I've started getting errors from VSS on a Win2008 R2 server. We run Networker as our backup program, and it uses VSS to make snapshots, and then backs up from those snapshots (if I'm understanding that process

VSS errors on Win2008 R2; problems running out of space

2011-08-12 Thread Mike Leone
I've started getting errors from VSS on a Win2008 R2 server. We run Networker as our backup program, and it uses VSS to make snapshots, and then backs up from those snapshots (if I'm understanding that process correctly). And the last couple nights, it has been partially failing (partially meaning

Q about Cluster Migration Wizard

2011-07-19 Thread Mike Leone
We will be migrating a Win2003 cluster to a new Win2008 R2 cluster this weekend. My boss has decided that we will not be using the File Server Migration Toolkit to move the data from the old cluster to the new. And since he's on vacation this week, that decision won't change. So what we will be

OT: ADFIND not finding by homeDirectory (sometimes)

2011-07-14 Thread Mike Leone
I am confused. I am trying to search AD by homeDirectory entries. and then returning user name, login, etc. And sometimes it seems to work, and sometimes not ... Let's pick a user as a test: Z:\adfind -f sAMAccountName=abneyw homeDirectory AdFind V01.42.00cpp Joe Richards (j...@joeware.net)

Re: ADFIND not finding by homeDirectory (sometimes)

2011-07-14 Thread Mike Leone
On 7/14/2011 10:34 AM, Michael B. Smith wrote: See Special Characters D'OH! Of course ... http://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx That answers your specific question. A more complete handling of escape characters is here:

Re: ADFIND not finding by homeDirectory (sometimes)

2011-07-14 Thread Mike Leone
Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Thursday, July 14, 2011 11:00 AM To: NT System Admin Issues Subject: Re: ADFIND not finding by homeDirectory (sometimes) On 7/14/2011 10:34 AM, Michael B. Smith wrote: See Special Characters D'OH! Of course ... http

Re: OT - problems installing HP Management Agents on VMware ESX 4.1

2011-07-13 Thread Mike Leone
On 7/13/2011 1:04 AM, Sean Martin wrote: Out of curiousity, what benefits are provided with the HP agents? Monitoring. You get their System Management Homepage on port 2381, which shows you hardware status. It also give SNMP agents, which allows my monitoring program SolarWinds to monitor

Re: OT - problems installing HP Management Agents on VMware ESX 4.1 - SOLVED

2011-07-13 Thread Mike Leone
So here's what happened - the install of 8.7.0 first tries to uninstall any existing version, and fails at uninstalling it. And since it won't install over top of an existing installation, you can't install 8.7.0. And since it partially removes 8.6.0, that is a bit b0rked, too. So what you have

OT - problems installing HP Management Agents on VMware ESX 4.1

2011-07-12 Thread Mike Leone
I realize this is more than a bit OT, and I do have a tech support case opened with HP. However, they say I have no software support for VMware (which is true, but VMware is not what I am having problems with; I am having problems with HP software for VMware). And the support they have given me so

Re: OT - problems installing HP Management Agents on VMware ESX 4.1

2011-07-12 Thread Mike Leone
and monitoring perspective; VMware is chugging along happily ...). We switched to ESXi a while back, so I haven't done the full agent install in a long time. :( DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE -Original Message- From: Mike Leone

Re: OT - problems installing HP Management Agents on VMware ESX 4.1

2011-07-12 Thread Mike Leone
: Mike Leone [mailto:oozerd...@gmail.com] Sent: Tuesday, July 12, 2011 10:22 AM To: NT System Admin Issues Subject: Re: OT - problems installing HP Management Agents on VMware ESX 4.1 On 7/12/2011 10:04 AM, Damien Solodow wrote: Do you remember how they told you to uninstall SNMP

Re: OT - problems installing HP Management Agents on VMware ESX 4.1

2011-07-12 Thread Mike Leone
On 7/12/2011 10:51 AM, Mike Leone wrote: I think I will try re-installing those RPMs from the cache, and try installing the earlier 8.6.0 again ... So I re-installed the 8.6.0 agents, and that install worked! w00t! But now the /var/cache/esxupdate is empty, so I've lost the RPMs that were

Re: OT - problems installing HP Management Agents on VMware ESX 4.1

2011-07-12 Thread Mike Leone
On 7/12/2011 11:00 AM, Damien Solodow wrote: The HP specific RPMs should be from the agents you downloaded (8.60, 8.70). The snmp service and the like are part of the ESX cd, so should be there. Nope. There are no RPMs named hp-* on the install CD. Nor are there any in the downloaded agent

Re: Social engineering - new vector

2011-06-28 Thread Mike Leone
On 6/28/2011 11:52 AM, Webster wrote: Back in my mainframe days, I actually got an interview because I knew what the acronym CICS meant and how it worked. I no longer remember anything about CICS but at one time you could buy a CICS emulation programming toolkit for the PC. It was cheaper

VSS errors on Win 2008 (not R2)

2011-06-27 Thread Mike Leone
I am seeing this, during a backup of a Win 2008 Enterprise server, using EMC Networker: --- Unsuccessful Save Sets --- * dctrdev017:VSS SYSTEM FILESET:\ savegrp: suppressed 1 lines of output. * dctrdev017:VSS SYSTEM FILESET:\ System Writer - Get file attributes returned error 2 for VSS file

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-25 Thread Mike Leone
On 6/24/2011 7:58 PM, Ben Scott wrote: On Fri, Jun 24, 2011 at 6:59 PM, Steven Peck sep...@gmail.com wrote: Sure. But Burn all the files to a tape sounds like the files will be restored, then backed up again to another tape. No, in this case, we will be backing up the folders direct from

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-24 Thread Mike Leone
On 6/23/2011 2:41 PM, Bill Humphries wrote: or simply download ubuntu live cd. We took the easy way out - we're going to burn all the files to a tape, and let them deal with it. :-) That is what we're paying them for - to coordinate all the requests from all the investigations and lawsuits. A

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-24 Thread Mike Leone
On 6/24/2011 12:16 PM, Daniel Rodriguez wrote: Well, if you are going to that, put it on FAT32, you may want to remember this; Even though you file names are 8.3 format, this is only partially true. FAT32 allowws for 255 characters for a file name. The caveat to that, is, every 9th character

Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
In the course of a lawsuit, I need to provide copies of some user home folders. These folders are set so that the user in question is the owner, and no one else has access on the NTFS permissions. (it's a home folder, after all). So the problem comes in when I do a restore of these folders to a

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
Distributed - A Team, Tier 2 Enterprise Technology Group Fiserv don.gu...@fiserv.com Office: 1-800-523-7282 x 1673 Fax: 610-233-0404 www.fiserv.com -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Thursday, June 23, 2011 9:29 AM To: NT System Admin Issues

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
On 6/23/2011 9:31 AM, Kevin Lundy wrote: Restore it direct to a FAT partition? Not sure if that changes the date or not. The files are too big - FAT is limited to 2G partitions, IIRC (been a LOT of years since I had to think about FAT), and I have 10s of Gigs of data. Interesting thought, tho

Re: Woah... why am I brain cramping on this!? (Folder permissions)

2011-06-23 Thread Mike Leone
On 6/22/2011 6:18 PM, Art DeKneef wrote: If you stop Inheritable permissions from the top level folder, the bottom folders retain the current permissions. Unless you replace permissions on the subfolders. That's what we do, when we seize ownership - we also copy the permissions to the the

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
a workable solution. I think the AD accounts still exist for the former employees ... On Thu, Jun 23, 2011 at 9:41 AM, Mike Leone oozerd...@gmail.com mailto:oozerd...@gmail.com wrote: On 6/23/2011 9:31 AM, Kevin Lundy wrote: Restore it direct to a FAT partition? Not sure

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
the modification date changed, but with them having access to read through them. And I am having a problem doing both - I can make the files readable by them, or I can give them the files without the modification date changed but unreadable by them ... -Original Message- From: Mike Leone

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
be within 32G, tho I doubt it. But would that even help me? If I restore to a FAt32 drive, would I then be able to copy the files to their external drive? Or would the security restrictions just completely disappear, because the source is a FAT32 drive? On Thu, Jun 23, 2011 at 9:41 AM, Mike

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
account listed. This might work if I used the account that has backup privileges, perhaps ... Mike W. - Original Message From: Mike Leone oozerd...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thu, June 23, 2011 8:49:07 AM Subject: Re: Seizing

Re: Seizing ownership changes modification date, and that is bad ...

2011-06-23 Thread Mike Leone
On 6/23/2011 10:25 AM, Andrew S. Baker wrote: As others have stated, you really need to talk with the lawyers and explain the limits of the technology as configured. As I said, we have told them. 3 times. Your best option, based on the current requirements, is what Kevin suggested, which is

Re: Tape backup policies

2011-06-03 Thread Mike Leone
On 6/3/2011 9:12 AM, David Mazzaccaro wrote: Hello everyone. For those who are still backing up to tape… still :-) I think that tape is still - by far - the majority of backup targets ... What do you guyshavefor tape backuppolicies? I’m curious as to how far back you are keeping tapes–1

Re: Tape backup policies

2011-06-03 Thread Mike Leone
On 6/3/2011 9:53 AM, richardmccl...@aspca.org wrote: Here is something I don't recall being discussed... LTO1 may be read by an LTO3 drive. Our LTO3 tapes supposedly can be read by our new LTO5 drive... What I'm getting at is, keeping forever may require moth-balling machines so they

Re: How to change IP address of a DC/DNS server? - SOLVED

2011-06-02 Thread Mike Leone
So here's what I did: I was changing the IP address of both parent and child DCs to 172.16.7.xx. 1. Create a new subnet in SITES AND SERVICES for 172.16.7.x 2. Create a REVERSE ZONE in *each* DNS (parent and child) for 172.16.7.x 3. Change IP address the NIC in parent DC 1. Be sure to

Re: How to change IP address of a DC/DNS server? - SOLVED

2011-06-02 Thread Mike Leone
On 6/2/2011 11:53 AM, Andrew S. Baker wrote: Good job. :)It's one of the easier changes to make... It is, if you remember to reboot first. :-) I didn't reboot yesterday after the IP change, which is what caused my DNS so much grief ... that's why I restored them from before the change, and

Win2008 AD Time Sync in an isolated virtual environment - /NOSYNC?

2011-06-02 Thread Mike Leone
I have my virtual copy of my AD structure just about all ready to go. The DCs are on an isolated vSwitch on VMware ESX 4.1. The last step is to set up time sync, I think. According to

DC fails VerifyReferences after cleaning up removed DCs - Q312862

2011-06-01 Thread Mike Leone
OK. I have a Win2008 AD in a parent/child configuration. I am trying to set up a testing version of it, using VMware. (I have a VM DC of both the parent and child domains). We want a lab version of our domain, to test proposed changes to OUs, GPOs, etc. So I cloned both DCs, and set them on a

Re: DC fails VerifyReferences after cleaning up removed DCs - Q312862 - MORE

2011-06-01 Thread Mike Leone
OK. I just found out that I have this error in my production domain. (so at least that means I didn't screw up my cleanup). I did a DCDIAG /C /V on the production parent DC, and got the same error). We use DFS replication now (I'm told); perhaps that's why this test fails? SO: parent DC: says

Re: VM's in AD

2011-06-01 Thread Mike Leone
On 6/1/2011 12:05 PM, David Lum wrote: Do you guys treat VM’s any differently than a physical machine? In my environment we are starting to get several of our Mac developers having WinOS VM’s running on them. No. In fact, I have 2 DCs that are VMs in VMware ESX 4.1. ~ Finally, powerful

Re: DC fails VerifyReferences after cleaning up removed DCs - Q312862

2011-06-01 Thread Mike Leone
this procedure for removing orphaned DCs has not been run on the production domain, so I don't know how it could miss something I haven't told it to do. :-) But I'll go looking, anyway. Thanks. -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Wednesday, June 01, 2011

Re: DC fails VerifyReferences after cleaning up removed DCs - Q312862

2011-06-01 Thread Mike Leone
On 6/1/2011 2:11 PM, Miller Bonnie L. wrote: I hadn't seen your second reply before sending, but have you ever removed a DC from your production domain? You might have a lingering object somewhere. We've removed DCs before, sure. But they've all been graceful removals, with DCPROMO. (for

Re: DC fails VerifyReferences after cleaning up removed DCs - Q312862 - SOLVED

2011-06-01 Thread Mike Leone
Got it! We were using an old version of DCDIAG (dated 2007-02-17, file version 5.2.3790.3959), that I guess was installed from a Win2003 Support Tools pack. When I run the DCDIAG dated 2010-11-20, file version 6.1.7601.17514, in the \WINDOWS\SYSTEM32 folder, everything works and all tests pass.

Re: VM's in AD

2011-06-01 Thread Mike Leone
On 6/1/2011 3:35 PM, Joseph Heaton wrote: We're about 95% virtualized here. The only things that aren't virtual, really, are our SQL boxes. Yeah, we rarely, if ever, run SQL on virtual boxes. Except for really small DBs, maybe. And certainly not the larger production DBs, which are up around

How to change IP address of a DC/DNS server?

2011-06-01 Thread Mike Leone
I need to change the static IP of a couple of my DCs (which of course are DNS servers, too). Searching around, it seems that I should just be able to change the static IP address the same way you change any Windows static IP. Yet when I do that, my DNS breaks. dnslint reports No matching CNAME

Re: How to change IP address of a DC/DNS server?

2011-06-01 Thread Mike Leone
On 6/1/2011 5:12 PM, John Aldrich wrote: Umm... when you say I should just be able to change the static IP address the same way you change any Windows static IP are you meaning going into the NIC properties and changing them there? Correct.

Re: How to change IP address of a DC/DNS server?

2011-06-01 Thread Mike Leone
the Advantages of Technology for the SMB market...** * * * On Wed, Jun 1, 2011 at 4:44 PM, Mike Leone oozerd...@gmail.com mailto:oozerd...@gmail.com wrote: I need to change the static IP of a couple of my DCs (which of course are DNS servers, too). Searching around, it seems that I should

Re: How to change IP address of a DC/DNS server?

2011-06-01 Thread Mike Leone
! Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Wednesday, June 01, 2011 5:12 PM To: NT System Admin Issues Subject: Re: How to change IP address of a DC/DNS server? On 6/1/2011 5:22

Re: OT: e-Reader

2011-04-14 Thread Mike Leone
On 4/14/2011 11:59 AM, Gary Slinger wrote: Caliber. Whatever to whatever. Calibre. http://calibre-ebook.com/ Works wonderfully with my Nook. Will convert between any number of formats. Will download from many news sources, as well. And under active development. ~ Finally, powerful endpoint

Re: Q about multi-site SQL cluster

2011-04-11 Thread Mike Leone
On 4/11/2011 9:22 AM, Ken Schaefer wrote: Also +1 to Brian's comments. Do you really need a stretched cluster? Mirroring can provide auto-failover at the SQL Server level. He tells me we will have asynchronous mirroring between the sites. (it's SAN replication, between HP SANs .. or will be,

Re: Q about multi-site SQL cluster

2011-04-09 Thread Mike Leone
On 4/8/2011 11:19 PM, Ken Schaefer wrote: Why does your boss think you need an odd number of nodes? Beats me. :-) I haven't been looking into this, I've been doing other things. But that's what he tells me ... You'd implement this with a majority node set + some kind of quorum resource

Q about multi-site SQL cluster

2011-04-08 Thread Mike Leone
Anybody running a multi-site SQL cluster? (probably SQL 2008). My boss is trying to plan for a D/R site, and he wants to have a SQL cluster that has nodes in both sites (here and there). But he says you have to have an odd number of nodes. And then how do you do maintenance (i.e., run Windows

Re: Q about multi-site SQL cluster

2011-04-08 Thread Mike Leone
On 4/8/2011 3:49 PM, Ziots, Edward wrote: Why not have SQL Mirror the Database and have a pointer in the SQL Native Client connections for the Primary and Secondary Server? You can control the failover of the Mirror to the secondary server either via a Witness server ( the 3rd server at

Troubleshooting Event ID 2019, using memsnap

2011-04-07 Thread Mike Leone
Lately, we;ve had a number of systems exhibit event ID 2019, server was unable to allocate from the system non-paged pool because the pool was empty. The system eventually becomes unresponsive, and I have to reboot, to clear it. Something is causing a memory leak, but I'm having trouble figuring

Re: Troubleshooting Event ID 2019, using memsnap

2011-04-07 Thread Mike Leone
are a bit behind on revision patches. I'll have him check the other ones we've seen go 2019 recently. Thanks! HTH Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:ezi...@lifespan.org Cell:401-639-3505 -Original Message- From: Mike

Re: Rogue AV kills XP box

2011-04-04 Thread Mike Leone
On 4/4/2011 12:10 PM, Cameron Cooper wrote: Download Kaspersky’s Rescue Disk and run that at boot up. Will run in either GUI or cmd line. The rescue disk will run a scan before any windows files will. I tried that once. I got as far as the Accept this license screen, and it wouldn't go

Re: URGENT: Interrupt chkdsk, not on boot drive - RESOLVED

2011-03-30 Thread Mike Leone
On 3/29/2011 11:49 PM, Richard Stovall wrote: Well then, Good luck tomorrow morning. I suspect, and hope, that this will all have a happy, uneventful ending. Luckily, it looks like it did ... It was still going when I got here at 6:30AM (11 hrs later). So I powered down; went to the SAN

Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
I've got a Win2008 R2 server that has decided that it is a yo-yo, and is rebooting daily (at different times), sometimes twice within like 20 minutes. In Control Panel, I have Kernel memory dump chosen under Write debugging information, with the value %SystemRoot%\MEMORY.DMP (and checked off

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 8:39 AM, James Rankin wrote: You sure it's a BSOD? No, I'm not, actually. Could be a thermal condition, amongst many other things. Does it have any ASR values set? Don't think so. Not sure how to check. Don't think we've set anything .. ~ Finally, powerful endpoint security

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 8:43 AM, Christopher Bodnar wrote: Doesn't sound like it's actually crashing. It's rebooting for some as yet unknown reason. I would check hardware issues first (bad memory, disk issues, power supply. etc.) That's what we're begining to believe, too. Since I get no DMP file,

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 8:51 AM, Kennedy, Jim wrote: Not a direct answer to your question but something to look at..did you just install the Feb updates... No. Not yet. We usually do Windows updates around the middle of the following month, but we haven't done any to this server, since it started

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
. On 30 March 2011 14:06, Mike Leone oozerd...@gmail.com mailto:oozerd...@gmail.com wrote: On 3/30/2011 8:39 AM, James Rankin wrote: You sure it's a BSOD? No, I'm not, actually. Could be a thermal condition, amongst many other things. Does it have any ASR values set

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 10:08 AM, Paul Adams wrote: Wow that sounds exactly like the problem we had with a DL380G6 about a year ago. HP shipped us a new mainboard before they figured it out. Check your version of the ilo firmware. If it's late 1.6x or early 1.7x 2.05, it says. Good thought, tho. Looks

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
My co-worker found an HP alert about Proliant DL360 G6s (like this) where they can be subject to random reboots, exactly as we have been. Apparently, it's a known issue with this model server shipped before Nov 2009. Has to do with system board revision earlier than 0S. If the serial number is

Re: Win2008 R2 not writing crash dump file

2011-03-30 Thread Mike Leone
On 3/30/2011 1:01 PM, Jonathan Link wrote: Or just do it now. Planned outages, even during business hours are alwyas better than unplanned ones. You also seem to have an element of unpredictability here, so... True. However, the instructions are a bit scary - they say that the patch may not

  1   2   >