Re: Powershell Eventlog Reporting

Joseph, here's a very old and crude code I wrote when I was starting with PowerShell and needed to find very specific events: # Start of script $FinalArray = @() [string]$ServerName = $Args[0] $BackInTime = [System.Management.ManagementDateTimeConverter]::ToDMTFDateTime((Get-Date).AddHours(-48)) $

Re: Cron for Windows 2008

Sorry for the late response, but here's a quick and dirt piece of code I call psget.ps1 #stinger is used here as an example only $yourURL = "http://downloadcenter.mcafee.com/products/mcafee-avert/stinger/stinger.exe"; $yourFile = "c:\temp\stinger.exe" $webclient = New-Object Net.WebClient $webcli

Re: Size of this NT admin list

Some times it's 43 :) On Jan 18, 2012 2:34 PM, "David Lum" wrote: > Anyone know how many people are subscribed to this list? > > *David Lum* > Systems Engineer // NWEATM > Office 503.548.5229 //* *Cell (voice/text) 503.267.9764 > > ** ** > > ~ Finally, powerful endpoint security that ISN'

Re: PowerShell, search entire forest?

Hi Chris, I got a lot of clients running Posh 1.0 and Quest CMDlets and every time I need to search a forest, this is how I do it: get-qaduser -IAP -SearchScope "Subtree" -SearchRoot "DC=domain,DC=com" -SizeLimit 0 -UseGlobalCatalog I always point the -SearchRoot to the forest root and it work

Re: IIS 6 SMTP virtual server relay restrictions

Maybe this can help: http://support.microsoft.com/kb/935635 Regards, Rubens On Thu, Aug 25, 2011 at 7:45 PM, Christopher Bodnar < christopher_bod...@glic.com> wrote: > Anyone still out there? > > I've got 4 boxes that I need to add about 40 IP addresses to the Relay > Restrictions list. I can't

Re: Some ideas to add to your Secure Awareness training material

I'd like the IPv6 material please :) On Wed, Aug 17, 2011 at 1:57 PM, Ziots, Edward wrote: > Courtesy of SANS. > > ** ** > > http://www.securingthehuman.org/resources/newsletters/ouch > > ** ** > > Also if anyone needs some nice cheat sheets on IPV6, Incident Response, > Windump, TCpdu

Re: Do you have a IT blog?

Sorry... here it's: http://rcalmeida.net On Mon, Aug 1, 2011 at 3:01 PM, Joseph L. Casale wrote: > Link? :) > > -Original Message- > From: Rubens Almeida [mailto:rubensalme...@gmail.com] > Sent: Monday, August 01, 2011 11:29 AM > To: NT System Admin Issues >

Re: Do you have a IT blog?

I do. In Portuguese tho. I mostly post about powershell snippets, useful Virtualization stuff, and some cases I face on my %dayjob%. Like Joseph, I'm preparing a wiki session to cover some very specific matters that my students bring to class and the solution on a step-by-step model. On Mon, Aug 1

Re: Free tool for querying remote Windows Event Logs

LogParser comes to mind when I have to deal with remote event logs... On Wed, Jul 27, 2011 at 3:07 PM, Steve Kradel wrote: > Hi list, > > I'm pleased to have something new to share that I think a lot of you > will find useful; having been frustrated by the slow speed of > EventCombMT and the pond

Re: Print screen utility

http://www.faststone.org/FSCaptureDetail.htm On Tue, Jun 21, 2011 at 9:35 AM, John Aldrich wrote: > Do any of you have a favorite "print screen" utility to allow you to dump > the contents of your screen to the printer? We have an intranet web page > that updates frequently and it doesn't print w

Re: file copying

If you prefer something more GUI oriented rather than robocopy take a look at RichCopy. On Fri, Jun 17, 2011 at 9:25 AM, Ziots, Edward wrote: > I usually use the Robocopy 2010 version via the command-line, I found > the GUI to be a bit cludgy. > > Z > > Edward E. Ziots > CISSP, Network +, Securit

Re: File Copier with GUI?

Has anyone tried RichCopy? They say it's like a graphical interface of robocopy... http://technet.microsoft.com/en-us/magazine/2009.04.utilityspotlight.aspx On Mon, Feb 21, 2011 at 6:27 PM, Andrew S. Baker wrote: > For me, these aren't one-off problems... They happen often enough, with only > mi

Re: Blogging software

maybe Dotnetnuke can do the trick. On Wed, Dec 1, 2010 at 8:25 AM, Nigel Parker wrote: > HELP > I have been asked to find some Free blogging software we can run in > house on out intranet server > The server is running windows 2000 and Iis > > Can anyone recommend anything > Thanks > > Nigel Park

Re: Port testing

I'd use Microsoft's portqry or nmap. On Wed, Dec 1, 2010 at 4:06 PM, David Lum wrote: > W2K8 R2 server, how can I test for an open port on another machine? > Specifically I need to see if ServerA can talk to port xxx on ServerB. I > thought you could use telnet..but using it to check DNS when I t

Re: IT Solutions for a tiny Deployment

Lotus Sametime maybe... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftw

Re: Powershell Question

I am not too concerned with how I get the value, but more on how to trap if > it doesn't enumerate correctly. > Once I start looping through all the special folders of interest, I don't > want to send something wrong into the routine that follows. > > Thanks! > jlc >

Re: Powershell Question

I'd try something like this: $sfDesktop = $env:USERPROFILE + "\desktop" On Tue, Sep 7, 2010 at 3:36 PM, Joseph L. Casale wrote: > Hey Guys, > > What’s the most simple and elegant way to trap for the following variable > assignment: > > Eg. $sfDesktop = [Environment]::GetFolderPath("Desktop") > >

Re: Finding a huge file dump from June...

f the puzzle. > > I really need to start reading my powershell books - putting them underneath > my pillow just isn't cutting it... > > Need. More. Time. > > Kurt > > On Mon, Aug 2, 2010 at 20:52, Rubens Almeida wrote: >> PowerShell... and here's one of my

Re: Finding a huge file dump from June...

010-06-29 >  out.txt > > Your hint with 'fullname' was the last piece of the puzzle. > > I really need to start reading my powershell books - putting them > underneath my pillow just isn't cutting it... > > Need. More. Time. > > Kurt > > On Mon, Au

Re: Finding a huge file dump from June...

PowerShell... and here's one of my favorites one-liners to find big files: dir c:\temp -force -recurse | sort length -desc | format-table creationtime,lastwritetime,lastaccesstime,length,fullname -auto You can sort the results replacing the length by any of the properties after format-table On M

Re: Lotus Approach Files

Symphony: free, opens a lot of file types and if you can't find the type you need, there's always the plugins: http://symphony.lotus.com/ On Mon, Aug 2, 2010 at 5:08 PM, James Kerr wrote: > We have an old database that is being used by a company we now own. They are > using an old version of sm

Re: Utterly OT - World Cup

Sorry again, but the greatest F1 driver was Ayrton Senna (from Brazil). Then the others like Alain Prost, Nigel Mansell and Michael Schumacher! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Utterly OT - World Cup

Sorry to ruin the party but, Brazil is going to kick a** on this FIFA World Cup, even with that big knuckle head coach leaving behind two great players! I think It'll be nice to celebrate victory for the sixth time! :) Go Brazil, go! ~ Finally, powerful endpoint security that ISN'T a resource hog!

Re: Anyone having issues with BB?

Sweet, thanks Ben! And thanks everybody for the help, we figured out the issue was something local. Rubens ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Anyone having issues with BB?

Got several users around the world complaining about BB devices not send/receiving emails. Anyone else seeing this? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Quest ActiveRoles

I don't know how we'd manage an AD with nearly 89k objects without it! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Riverbed Steelhead appliances v. Cisco WAAS v. Citrix Branch repeater

I've seen problems involving Riverbed accelerators, Outlook 2003 and Exchange 2003. Lots of events 9646 on Exchange servers saying users had hit the 32 sessions limit. Turns out the problem was one Riverbed feature that kept MAPI sessions open to optimize mail traffic. Once that was disabled the pr

Re: Interesting article on Microsoft anti-virus free not being free..

No cookie for me either (from Brazil) On Wed, Mar 17, 2010 at 5:01 PM, Rod Trent wrote: > Comes from a site: called “Threat Chaos”. > > > > http://www.threatchaos.com/images/FreeIsNotFreeDL.pdf > > > > For me…the link is no longer valid.  Anyone else see that? > > > > From: David Lum [mailto:davi

Re: Block single port in lab environment

IPSec is your friend, always! http://support.microsoft.com/kb/813878 Regards! Rubens ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: System Uptime and event log

Powershell! Not tested yet, but it can give you an idea on how to build your script based on your own needs: #$ErrorActionPreference = "SilentlyContinue" $StrServerName = $Args[0].ToString() #Check the System Uptime $wmiInfo = gwmi -class Win32_OperatingSystem -namespace root\cimv2 -computer $Ser

Re: Remote access card

Guys, thank you very much for your help! I'm going with the Peppercon eRIC - Remote Access PCI Card. That's what I was looking for but there was a disturbance on the force and my google-fu was failing on me! Regards, Rubens ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: Remote access card

It's for a white box , not IBM/Dell/HP hardware. On Tue, Oct 27, 2009 at 11:39 AM, Erik Goldoff wrote: > depends on your server hardware ... iLO is for the HP Proliant line, DRAC is > for the Dell PowerEdge line, etc ... > > On Tue, Oct 27, 2009 at 8:49 AM, Rubens Almeida &g

Re: OT: Early Friday Funny

Not available in Brazil :( On Tue, Oct 6, 2009 at 5:29 PM, Roger Wright wrote: > Bring it!  http://media.mtvnservices.com/mgid:cms:mvideo:cmt.com:40319 > > Roger Wright > ___ > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: Question about a folder under C:\Windows

And never, under any circumstances get rid of the folder %windir%\$hf_mig$! Regards, Rubens Almeida On Mon, Sep 28, 2009 at 3:50 PM, Steven M. Caesare wrote: > Careful with that. > > > > There are dependencies there for future things (think removing/re-adding a > windows co

Re: DHCP scope usage alert vbs, without MOM

Maybe this can help you to create an entry on the event logs: http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/event_commandline.mspx?mfr=true On Thu, Jul 30, 2009 at 11:39 AM, James Rankin wrote: > I was just wondering how that was donein about 2001 we managed

Re: Computer Security groups

I suppose you already tried to control the group membership using a GPO... right? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Computer Security groups

what about this? gpupdate /force regards, ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: copying large amount of files

Robocopy? On Thu, Jul 23, 2009 at 5:02 PM, James Kerr wrote: > Looking for a utility copy about 300GB from one server to another tonight. > Any recommondations? This is a one time thing nothing that I will > do regularly. Any recommondations? > > James > > > > > > > ~ Finally, powerful endpoint s

Re: OT: Facebook dislikes you guys

>>> >>>> On Wed, Jul 22, 2009 at 5:42 PM, Gavin Wilby >>> <mailto:gavin.wi...@gmail.com>> wrote: >>>> >>>>    You know, we could make a NT.S.A group?? >>>> >>>>    Gavin. >>>> >>>>  

Re: OT: Facebook dislikes you guys

Sent you another one, just in case :) On Wed, Jul 22, 2009 at 7:51 PM, Gavin Wilby wrote: > Just sent you a new one - see what happens! > > Gavin. > > Sam Cayze wrote: >> >> Ok, not really, but this is weird... >> WAY back in the day during a long thread about social networking, I was >> honored t

Re: Script or Batch File to Restart a Windows Server after a set period of time

What about that? It's cheap at least! http://logos3d.com/dev/2009/03/13/the-son-of-itappmonrobotthe-daily-wtf/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Stickers

I have these: http://www.nsoftware.com/powershell/promo/ On Wed, Apr 22, 2009 at 12:29 AM, Joseph L. Casale wrote: >>I am surrounded by Linux and Mac FanBoys, and they all have stickers. > > Just come out of the closet and join us. Life will be so much happier :) > > ~ Finally, powerful endpoint

Re: 64bit Print Server

Have you seen this? http://www.microsoft.com/windowsserver2003/techinfo/overview/x64printdriver.mspx On Tue, Apr 14, 2009 at 5:57 PM, Andy Ognenoff wrote: > I'm sure this is a no brainer for most but I'm new to Windows print > management (finally migrating from Netware 6 - woohoo!) > > I have a n

Re: Exchange Reporting

Our client uses this: http://www.stealthbits.com/solutions/exchange.html Really nice tool! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Email List

I'm starting to be scarred... I think I'm the only Rubens on this list!!! On Fri, Apr 3, 2009 at 1:06 PM, David Lum wrote: > OK Sherry you’re freaking me out… > > > > From: Sherry Abercrombie [mailto:saber...@gmail.com] > Sent: Friday, April 03, 2009 8:44 AM > To: NT System Admin Issues > Subject

Re: McAfee ePO agent vuln scanner (was RE: Conficker detector)

Not sure if you guys have this on your Conficker tool kit, but here's the Stinger to detect it: http://vil.nai.com/vil/conficker_stinger/Stinger_Coficker.exe Funny thing is, it can't be found on the regular Stinger site :) Regards, RCAlmeida On Fri, Apr 3, 2009 at 12:10 PM, Ziots, Edward wrote

Re: Setting Windows theme by the registry?

I second disabling the Themes service using a specific GPO for that. On Tue, Mar 31, 2009 at 6:09 PM, Mike Gill wrote: > Disable the Themes service altogether. You'll get the Classic desktop. > > -- > Mike Gill > > -Original Message- > From: Craig Gauss [mailto:gau...@rhahealthcare.org] >

Re: Redundant Print Servers

Poor man solution: A weekly printmig job runs on all print servers backing all the printer queues up. The job send the results to a share on a file server. If a print server goes down, its printmig backup is restored into another print server, the clients are instructed to point their printing to t

Re: Laptop

enovo lappies running just fine. > > On tat thought, does anyone know if there's an enterprise level update > sver that can be set up to approve/push out updates for Lenovo laptops ? > > > -Original Message- > From: Rubens Almeida [mailto:rubensalme...@gmail.com] >

Re: Laptop

I've been a ThinkPad user for tha last 4 years, and a thumbs up rule is to have your bios and drivers always up to date. ThinkVantage System Update handles both jobs perfectly and it's one of the very first things I install when I get my brand new TP: http://www-307.ibm.com/pc/support/site.wss/doc

Re: Firefox 3.0 Download Day

That's a good question! I was wondering what you guys use to manage and distribute the extensions. I mean, at least those to make FF more safer than IE (noscript, adblockplus, filterset.g, ie view lite, etc)... On Tue, Jun 17, 2008 at 10:17 PM, Liu, David <[EMAIL PROTECTED]> wrote: > Question for

Re: Problems moving large files after XP SP3 installation

I'd give Robocopy a try, on my experience it never failed. On Fri, May 23, 2008 at 11:28 AM, Tim Evans <[EMAIL PROTECTED]> wrote: > While I haven't tried move a large folder with many files, I've had no > problems move large individual ISO file here. > > ...Tim > > >> -Original Message- >>

Re: R: Adding groups as members of groups

Please forgive my tired brain, it's 4AM over here :) But if you know of an existent group that's included on all folders' ACL then your idea will work. Otherwise I don't see how to do that without adding a new entry to the current permissions list on all the folders tree. Another utility that comes

Re: Adding groups as members of groups

Windows 2003 Resource Kit includes a utility called XCACLS. It can add the security group entry without messing with the existent ones on the ACL. Hope that helps. Regards, ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~

Re: Waaaay non-tech OT: Shameless Shook promotion

don't mess with Jesus! you can get into trouble dude!!! ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Waaaay non-tech OT: Shameless Shook promotion

ohh boy... that's no good... ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Waaaay non-tech OT: Shameless Shook promotion

There it is, uou got your Brazilian vote :) And I miss Petra! Where are all my vinyls ? On Fri, May 16, 2008 at 12:31 PM, Andy Shook <[EMAIL PROTECTED]> wrote: > List, > > My church band (I'm the drummer) is in a contest for airtime on a regional > radio station. Would you puh-lease take a secon

Re: Modify NTFS Perms

or as your last resort, you can google for a utility called "admnalow.exe" ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Desktop Backup Con't

One of our major clients use Connected from IronMountain. They have users all over the world and it have worked pretty well so far. Regards, Rubens ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Is there a way to remotely gather the version and service pack of a Microsoft Exchange Server?

The easiest way I found to do that was using PowerShell: gwmi -class ExchangeServerState -namespace root\cimv2\applications\exchange -computername ANYEXCHSERVER | select-object Name,version | ft -auto -hide >> "AllExchServers.txt" And if you want to filter by version and sp levels: gwmi -class Ex

Re: We handing out xobni accounts?

please can I have one too? ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Naming convention for Servers

This model works quite well for world wide enterprises, but with a little of creativity you can make it easier and fit to small shops too: 2 characters to country: "US", "BR"azil, "SP"ain, "CA"nada) 3 characters to city: SPO = Sao Paulo, HOU = Houston, VAN = Vancouver 3 characters to function: MSG

Re: find mp3's on c drive

Or perhaps something like this: http://www.myitforum.com/articles/11/view.asp?id=11547 Regards, ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Script to query list of remote servers for drives & free space

Same script but with a visually better output: gc "computers.txt" | % { "Server: " + $_; "Drive`tSize`tFree"; gwmi –computername $_ win32_logicaldisk -filter "drivetype=3" | % { $_.deviceid +"`t"+ [System.Math]::Round($_.size/1GB,2) +"`t"+ [System.Math]::Round($_.freespace/1GB,2) } } ~ Upgrade to

Re: Script to query list of remote servers for drives & free space

Here's a starting point: get-content "c:\scripts\computers.txt" | ForEach-Object { gwmi Win32_LogicalDisk -filter drivetype=3 -computer $_ | select-object DeviceID,VolumeName,Size,FreeSpace | ft -auto } Hope that helps :) ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~

Re: power management over the net

Dell -> DRAC http://accessories.us.dell.com/sna/products/Server_Applications/productdetail.aspx?c=us&l=en&s=biz&cs=555&sku=313-6179 IBM -> RSA http://www-304.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-50116&brandind=508 HP -> ILO http://h18013.www1.hp.com/products/quicksp

Re: Tool to change Permissions..

Here's what I do on those situations: admnalow will do the first part of the trick (http://www.google.com/search?hl=en&q=admnalow) then you can use any of the resource kit utilities: XCACLS or CACLS. Best of all, it's all free ;) Regards, ~ Upgrade to Next Generation Antispam/Antivirus with Ninja

Re: RAID failure monitoring

Sam got the Dell stuff well covered, and as for the IBM side: - a RSA card (the IBM version of DRAC/ILO cards) - the ServeRAID Manager software will show you everything you need to know about the disk subsystem, and if you want to have something more structured you can try IBM Director to see all t

Re: Rouge Computer

nmap or gfi languard will do the job ;) ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: pdf995

I second cutepdf, it works like a champ! ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: NTFS take ownership question

I'd say you should run a checkdisk real quick then run admnalow on that drive! ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Remote server won't allow management

Some times GenControl works for me in situations like these: http://www.gensortium.com/products/gencontrol.html ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Robocopy Brain Fart

I'm not a GUI fan but sometimes you need a jump start, so here's my little contribution to the folks looking for a easily way getting familiar to Robocopy: http://technet.microsoft.com/en-us/magazine/cc160891.aspx Hope that helps ;) ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~

Re: chkdsk says no problems, but lots of files are missing

I think you can give SpinRite a try: http://www.grc.com/spinrite.htm Usually it resolve all my filesystem problems. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Sysadmin book recommendations (was: monitoring your servers thoroughly)

This book is a great source of information if you want to become a SysAdmin: "The Practice of System and Network Administration" Enjoy ;) ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ ~

Re: Moving Files/shares to new server

I'd go with robocopy, (lab first to get yourself familiar with it, if this is the case) and put it to spit logs (the more detailed the best), then you can export the registry keys with all the shares from one box to another, cycle the server service and you're ready to go. personally I don't like w

Re: Access to site...

Both sites responding to me, btw I'm in Brazil. On Feb 18, 2008 6:58 PM, Tom Strader <[EMAIL PROTECTED]> wrote: > > > > Can someone test these two sites to see if they come up? > > http://www.blumenthalcenter.org > > and > > http://www.carolinatix.org > > Thanks!!! > > > Sincerely, > > Tom Strader