Mark Minasi's Reader Forum

Hurricane Earl

MrEclipseguy — Thu, 02 Sep 2010 18:45:52 -0500

There are 12 replies, with the last one on 09/02/2010 at 6:45:52 PM by MrEclipseguy
Quote:
zzzzzzzzzzzzzzzzzzzzzzdddddddddddddddddddddttttttttttttttttttttttttt, ouch!!! thats my lame attempt at what I would imagine trying to fix a leaky circuit after 4" of rain in an underground vault.

Exch Mgmt Console - Initialization Failed

Pesos — Thu, 02 Sep 2010 18:32:47 -0500

There are 10 replies, with the last one on 09/02/2010 at 6:32:47 PM by Pesos
Quote:
I am seeing something similar...

I have two CAS/HT servers and two MBX servers, all 2008 R2 boxes in one subnet. I have another 2008 (non-R2) box with just the admin tools loaded. All works fine (haven't installed sp1 yet).

I went ahead and installed SP1 (but just the mgmt tools only) on another 2008 R2 box in a different subnet. I configured the firewall to allow the appropriate traffic to pass.

The exchange shell opens and connects properly, but EMC shows the same error as Scott's screenshot above... Any thoughts? I don't see any traffic being blocked on the firewall...

Sheepdog Trial

wobble_wobble — Thu, 02 Sep 2010 17:56:45 -0500

There are 7 replies, with the last one on 09/02/2010 at 5:56:45 PM by wobble_wobble
Quote:
The back legs aren't the best example either. I think Jim is onto something here.

VCP Complete

ukinahan — Thu, 02 Sep 2010 17:18:54 -0500

Finally got around to taking the VCP 4 exam an where better to do it than at VMworld... It's cheaper!
+ you prizes :) a draw on chalk coffee cup and a VCP hat! Worth the wait right!!! LOL

File and printer share in network props

cj_berlin — Thu, 02 Sep 2010 16:37:59 -0500

There are 1 replies, with the last one on 09/02/2010 at 4:37:59 PM by cj_berlin
Quote:
Access Connections. I think you can (=have to) specify this on a per profile basis.

Exchange 2007 SP3 is out

Rastor728 — Thu, 02 Sep 2010 16:37:50 -0500

There are 2 replies, with the last one on 09/02/2010 at 4:37:50 PM by Rastor728
Quote:
It has been out for at least 2 months already. Outside of taking care of all the previous updates and patches, most of the "improvements" see to be in allowing Exchange 2007 to run on a Windows 2008 R2 server system.

I had troubles caused by the Update Roll Up #4 for Exchange 2007 SP2. I removed the roll up and installed SP3 with only one problem. The Outlook 2007 S/MIME program indicates that you have the incorrect version of S/MIME installed and to "click here" to upgrade when you try and use Outlook Web Access. The download installer doesn't correct the version mismatch. You have to get the latest WDK tools to manually change the version numbers on the Exchange Server to correctly indicate which S/MIME version is the latest.

If you aren't requiring or using S/MIME you should be fine.

Anybody got hit by today's ESET update?

cj_berlin — Thu, 02 Sep 2010 16:33:41 -0500

There are 3 replies, with the last one on 09/02/2010 at 4:33:41 PM by cj_berlin
Quote:
Here's the official statement:

http://kb.eset.com/esetkb/index?page=content&id=NEWS99

unattend.xml file - does not work

arwidmark — Thu, 02 Sep 2010 16:25:39 -0500

There are 13 replies, with the last one on 09/02/2010 at 4:25:39 PM by arwidmark
Quote:
As fun as digging into unattend.xml files etc ever are (I'm serious, it is fun... a waste of time of course, but fun, and learning)...

Anyway, this thread has been running for a while - If you spend 30 minutes watching the free MDT video tutorials on www.deploymentcd.com posted to the deployment community you will learn how to build a complete deployment solution based on MDT in 30 + 45 minutes (it will take you 45 minutes to build it)... That's better than a few weeks :)

/ Johan

IP addressing trouble

Playwell — Thu, 02 Sep 2010 16:19:28 -0500

There are 1 replies, with the last one on 09/02/2010 at 4:19:28 PM by Playwell
Quote:
Am a bit amazed you need to add a static route if there's 1 firewall doing the routing. the firewall should know the difference between outside and the .3 network.
For these kind of things you'd best get a switch with routing possibilities. Routing a full lan is a bit much to ask for a WAN orientated router.

To Kindle or Not? That is the Question!

boozer — Thu, 02 Sep 2010 16:06:25 -0500

There are 16 replies, with the last one on 09/02/2010 at 4:06:25 PM by boozer
Quote:
Ok, then the DX version is the way to go for my needs then I suppose, thanks for the input!

User restructured Parts of Active directory.

Jazzy — Thu, 02 Sep 2010 16:00:12 -0500

There are 4 replies, with the last one on 09/02/2010 at 4:00:12 PM by Jazzy
Quote:
I would recommend that you install a fresh SBS 2003 server (makes sense to do this with virtualization software on your desktop) and then compare the f*cked up server with a fresh one.

Don't forget to run the SBS BPA and Exchange BPA, both tools do AD checks and report configuration errors.

a weird-ish one :)

wkasdo — Thu, 02 Sep 2010 15:39:03 -0500

There are 4 replies, with the last one on 09/02/2010 at 3:39:03 PM by wkasdo
Quote:
> But then again, why is net view \\domain.local always the first step in solving those 1030/1058 thingies?

Because it's a very easy test -- not the most accurate one, but good enough 99% of the time. Except for people who edit host files of course ;-)

[SOLVED] Autofill Computer Name in UAC

Playwell — Thu, 02 Sep 2010 15:21:40 -0500

There are 5 replies, with the last one on 09/02/2010 at 3:21:40 PM by Playwell
Quote:
Got that by scripting VB. The . represents local computer, i thought where else would it be useful?

Heriot and Mortuary

chamezzzz — Thu, 02 Sep 2010 15:14:19 -0500

There are 3 replies, with the last one on 09/02/2010 at 3:14:19 PM by chamezzzz
Quote:
Is that a fair Analogy though Mark......a Billionaire?
Is Curt not telling us something ? [:D]

We have Inheritance Tax here in the UK

What happens in America?
Is it this Estate Tax?

Not that I am disputing it because I agree, it is mean to take off us once we have shuffled off this mortal coil!

Hatteras Island, NC (before Hurricane Earl)

Mark Minasi — Thu, 02 Sep 2010 14:17:37 -0500

There are 1 replies, with the last one on 09/02/2010 at 2:17:37 PM by Mark Minasi
Quote:
We do have some glorious sunrises and sunsets! Nice pic, Ted!

VPN clients connect but can't get anywhere

totalstu — Thu, 02 Sep 2010 14:10:30 -0500

There are 6 replies, with the last one on 09/02/2010 at 2:10:30 PM by totalstu
Quote:
One of the users experiencing the issue tells me he only tried pinging by IP. We'll have to wait for it to happen again to see what happens via host name. I will post over at the ISA site you linked.

Thanks

GPO options differ in RSAT and Remote Desktop

dmarelia — Thu, 02 Sep 2010 13:57:58 -0500

There are 12 replies, with the last one on 09/02/2010 at 1:57:58 PM by dmarelia
Quote:
The thing to keep in mind through all of this is that there is hard link between what you see in GP Editor and what is stored in the GPO. In other words, the reason you are able to set UAC settings within a 2003 domain is because the Vista GP editor contains the UI elements that tell the GP Editor how to store UAC settings within the GPO. The 2003 DC is just a file server at that point, storing the setting however the GP Editor tells it to. In the case of UAC settings (and any other settings under "Computer Config\Windows Settings\Security Settings) GP Editor is not using Admin. Template files but rather a combination of text files and hard-coded UI elements within the MMC snap-ins to present you options on what you can configure for that OS version. Its really all about the GP Editor in terms of what policy settings you can access and define. This is why we always say that when a new version of Windows comes out, its best to use that new version's GP Editor exclusively going forward to configure policy, because it will (generally) include all previous policy settings as well as the new ones.

Evgenij--as far as your question--see my previous paragraph. Security Settings, Folder Redirection, GP Preferences -- all of these are examples of CSEs that don't use Admin TEmplates to define what you see in GP Editor.

Sysprep / unattend.xml / join domain

Mark Minasi — Thu, 02 Sep 2010 13:57:03 -0500

There are 11 replies, with the last one on 09/02/2010 at 1:57:03 PM by Mark Minasi
Quote:
David, the trick on running ANY program in combination with Sysprep is to FIRST start whatever program that you want, leave it open, and THEN SYSPREP /Quit. The program will run fine then.

DNS Forwarders Failover Issue

Mark Minasi — Thu, 02 Sep 2010 13:53:53 -0500

There are 3 replies, with the last one on 09/02/2010 at 1:53:53 PM by Mark Minasi
Quote:
That makes sense -- I've never understood why the timeouts are so low by default.

slow file acces server 2008r2

Mark Minasi — Thu, 02 Sep 2010 13:52:48 -0500

There are 5 replies, with the last one on 09/02/2010 at 1:52:48 PM by Mark Minasi
Quote:
Have you tried this?

http://www.minasi.com/newsletters/nws0802.htm

Allow NonAdmins to Install Network Printer Drivers

Mark Minasi — Thu, 02 Sep 2010 13:49:12 -0500

There are 9 replies, with the last one on 09/02/2010 at 1:49:12 PM by Mark Minasi
Quote:
Hard to say. How did you try to restrict it?

Locking Down Desktop

dmarelia — Thu, 02 Sep 2010 13:41:52 -0500

There are 2 replies, with the last one on 09/02/2010 at 1:41:52 PM by dmarelia
Quote:
Really the only way to do this would be to use Folder Redirection to redirect the user's desktop to a read-only server share that contains the set of shortcuts that you want the users to see. Frankly, I haven't done this since NT 4 days so I can't say for sure that more modern versions of Windows won't choke on this but I think that would be your best bet.

Darren

Printing Across Domains

cj_berlin — Thu, 02 Sep 2010 13:21:21 -0500

There are 3 replies, with the last one on 09/02/2010 at 1:21:21 PM by cj_berlin
Quote:
Sam,

what do you mean by 'accessing SAP software on a remote server'? Remote Desktop? Then you can use printer redirection which encapsulates printing into RDP and is thus agnostic of your domain structure.

Kinda confused here...

Exchange 2007 - Public Email Folder - Mail Unread

Samboo — Thu, 02 Sep 2010 12:24:00 -0500

Hello,

We're running Echange 2007 & Outlook 2003 clients. we've setup a group mailbox in a public folder. By default, mail in this folder shows as unread if other users have read it. Flags that other users have added appear in this folder but these flagged items appear as being unread. Is it possible to change the settigns so that mail that has been opened by another user can appear as read in a public folder?

Thanks

Task Mgr 2 different results

Wimo — Thu, 02 Sep 2010 12:01:56 -0500

There are 2 replies, with the last one on 09/02/2010 at 12:01:56 PM by Wimo
Quote:
Ha - yeah that should have been my response - screenshots. It's a single CPU. It's a VM, which I know can create confusion between what you see in the VM and from the VMware side, but never heard of this. Perhaps he's confused...

EX - 2010 SP1 now available

JSCLMEDAVE — Thu, 02 Sep 2010 11:04:37 -0500

There are 12 replies, with the last one on 09/02/2010 at 11:04:37 AM by JSCLMEDAVE
Quote:
Just got this

http://bink.nu/news/exchange-2010-sp1-faq-and-known-issues.aspx

HP Universal Print Driver question

Rastor728 — Thu, 02 Sep 2010 09:38:35 -0500

There are 1 replies, with the last one on 09/02/2010 at 09:38:35 AM by Rastor728
Quote:
It really depends upon the printer itself. I have some of the larger HP Color and Multifunction devices that work just fine with the UPD driver, and some others that just don't like it.

Try it out without installing the "packaged" driver and software package and see what features function and how well all the options fall into place.

2008 R2 Lab Environment?

joe_elway — Thu, 02 Sep 2010 03:40:31 -0500

There are 5 replies, with the last one on 09/02/2010 at 03:40:31 AM by joe_elway
Quote:
I'd say the above recommendations are probably good. My tip will be to read the setup/config chapter (I know the author of that one quite well) and go from there. Using VMware workstation, build a Server 2008 R2 VM, sysprep it and keep it safe. Repeat that with an XP/Windows 7 VM. Using Workstation, you can clone the VM to create new instances when ever you need them. You'll only ever need a small number of VM's running at one time.

Rollback procedure?

Pesos — Thu, 02 Sep 2010 02:52:43 -0500

There are 48 replies, with the last one on 09/02/2010 at 02:52:43 AM by Pesos
Quote:
Learning the hard way sucks! :-)

I think you need to get two more matching drives in there and set up a pair of RAID1 arrays with a 5th as a hotspare.

best procedure for onsite/offsite backups?

MrEclipseguy — Wed, 01 Sep 2010 18:52:28 -0500

There are 5 replies, with the last one on 09/01/2010 at 6:52:28 PM by MrEclipseguy
Quote:
Wes you got me on the SQL stuff. Don't have anything regarding that here. That is at Corporate office for us, so those backups happen there. DPM would be nice.

Edit: Have you seen this?

http://technet.microsoft.com/en-us/library/ms186865.aspx

renaming domain

ianternet — Wed, 01 Sep 2010 16:42:18 -0500

There are 4 replies, with the last one on 09/01/2010 at 4:42:18 PM by ianternet
Quote:
We've successfully been through a domain rename process, I recreated my DFS as a standalone root several months before implementation of the domain rename to avoid any issues.

Iam

Group(s) not showing up in the Memberof property f

wkasdo — Wed, 01 Sep 2010 16:42:13 -0500

There are 1 replies, with the last one on 09/01/2010 at 4:42:13 PM by wkasdo
Quote:
That sound about right to me. Feature, not bug. The "member" attribute is the primary data. Memberof is a calculated system attribuut. Because a DL group is only useable in it own domain there is no gain in having it pollute the memberof attribute in remote user accounts. At least, that's how I've always understood it.

Welcome to the forum, btw.

which DC validate me ?

wkasdo — Wed, 01 Sep 2010 16:37:07 -0500

There are 5 replies, with the last one on 09/01/2010 at 4:37:07 PM by wkasdo
Quote:
Not quite, Sunny...

View 4.5

ukinahan — Wed, 01 Sep 2010 14:31:31 -0500

There are 3 replies, with the last one on 09/01/2010 at 2:31:31 PM by ukinahan
Quote:
4.5 is available now they say
Aidan, you mean PCOIP? there has been a lot of talk on it here & they seem very ready to admit that its far from perfect, its really only on release 1 but the potential is great! its much like when MS released Hyper-V, that was something that was flaky to say the least :)

Once they have that sorted to where they want it & then have companies like riverbed etc resolve their issues with optimization on the already optimized UDP packets it will be great. It wont take long, so far its a great conf i have to say.
All the conf details are here really: http://www.vmworld.com/community/buzz/

Exporting Parts of AD to a different Domain

cyberdoc — Wed, 01 Sep 2010 14:23:38 -0500

There are 6 replies, with the last one on 09/01/2010 at 2:23:38 PM by cyberdoc
Quote:
Hello Guys,

Thanks for the notes. I will check out that program suggested and see what can be done.

Christian

P2V not working...

anthony — Wed, 01 Sep 2010 13:55:07 -0500

There are 2 replies, with the last one on 09/01/2010 at 1:55:07 PM by anthony
Quote:
Figured this issue out. After doing muy research on failed P2V conversions, it turns out most issues are related to things like SCSI/IDE Drivers or an incorrect HAL. After trying all kinds of things; one of the recommendations was to copy the HAL.DLL file from a known good Hyper-V guest. So I mounted this server's C: drive to another Guest, and copied that file over. Shut that server down; and removed the drive. Booted the troubled guest again, and BOOM - mini-setup starts!

Jackpot!

This is a big victory for me, as I have 2 unstarted projects in the pipe migrating customers old hardware into Hyper-V, and just picked up a third just this morning.

WS2008 R2 Backup Limitations and Questions

cyberdoc — Wed, 01 Sep 2010 12:58:35 -0500

There are 5 replies, with the last one on 09/01/2010 at 12:58:35 PM by cyberdoc
Quote:
Hello,

Yes this has been discussed in another post, but I may as well update what I ended up doing for my companies.

I have Windows 2008 R2 servers installed, and the main data disk is a RAID 3 configuration. I added a SATA 1 TB hard disk to the box, and the backups now "land" on this drive. I gave it a drive letter, despite the performance warning, and locked it down via NTFS so that only the backup users could read / write to it.

I then installed RSYNC onto the server, and configured it (along with the firewall) to talk to a linux box. After the backups run on Windows, the Linux box makes a rsync call to the windows box, and another 1TB drive syncs with the Windows 2008 R2 1 TB drive, so they have matching copies.

I then attach a USB 1 TB drive to the linux box, and rotate copies so that I have data that leaves the shop on a regular basis. Do not leave your primary and backups at the same location!

Clumsy? Yup. But it works. And restoration of a file(s) is soooo easy. I have had my RAID fail already, and rebuilding it blew it up. Boot from the Windows 2008 R2 DVD. Have any special drivers on a thumb drive. When stable, point to either the labeled hard drive, or the samba-enabled linux box, and my backup image is right there, ready to perform.

Restoring a single file or files is also easy... inside the Server Manager, mount the backup as a VHD. Don't make it read-only, or it will fail. It comes up with a drive letter. Tunnel down to what you need, and go get it.

Yes, I wish there was a way to manage the backup process more to make a true full / differential backup. But I cannot argue with the benefit of a bare-metal restore.

2k8r2 + Hyper-V + WSUS

Rastor728 — Wed, 01 Sep 2010 12:41:03 -0500

There are 6 replies, with the last one on 09/01/2010 at 12:41:03 PM by Rastor728
Quote:

quote:
Originally posted by joe_elway

No other roles or features should be installed on a Hyper-V host other than Hyper-V. Adding anything like WSUS, KMS, etc, makes your host unsupported.

Could you please point out this requirement? Does this only apply to Server Core or does it extend to all versions of Server 2008?

SharePoint does have its benefits ...

lady_mcse — Wed, 01 Sep 2010 11:52:56 -0500

There are 4 replies, with the last one on 09/01/2010 at 11:52:56 AM by lady_mcse
Quote:
Oh man, this was priceless ... the person who deleted those files is actually someone I really enjoy working with. Without trying to pin an age down, I'll say it's a safe bet that she's older than I. But she is always really willing to learn new things.

So in an email message, I had sent the screenshot with a simple line saying, "don't pin this one on me" and a smiley face. Smileys fix everything, don't they?

Didn't hear anything back.

She's at a remote site.

Yesterday, I worked from that remote site, so asked her, "What did you think of that screen shot?"

Her response, "What's a screen shot?"

Me: "Um, that image I sent you."

Her: "Sent me when?"

Me: "You know, when I said don't blame me for deleting htose files?"

Her: "There was something attached to that?"

We go back and look, and she opens the attachment to see the screen shot ... and she got a great laugh out of it!

So, now she knows that her tracks are visible in the snow, and learned what a screen shot is.

15 Years ago today

chamezzzz — Wed, 01 Sep 2010 11:46:37 -0500

There are 10 replies, with the last one on 09/01/2010 at 11:46:37 AM by chamezzzz
Quote:
You forgot this one James.......it Sucks Less!

[:)]

Shared Reporting Server - SCOM

MadCow — Wed, 01 Sep 2010 11:13:13 -0500

Installed SCOM 2007R2 on Windows 2008R2 Virtual Server
DB on Windows 2008R2 - SQL2005

This SQL Server is also running Reporting Services for another app configured by a different Admin. I have been gievn the same DB server to install SCOM Reporting. I need assistance here on how would I approach this situation w/o breaking their reporting and setup SCOM reporting?

When I click Report Manager URL, there are tons of reports I see there
which belongs to them.

Advise Please.

Thank you

Root CA Admin Console and Expired Certificate

MadCow — Wed, 01 Sep 2010 11:09:19 -0500

There are 1 replies, with the last one on 09/01/2010 at 11:09:19 AM by MadCow
Quote:

It appears that once the certificates are expired they are not being automatically revoked. Manually revoking them is waste of time and loads of work.

Is there a config where I set to revoke the certificate once they expire, automatically?

Advise Please.

Thank you

Windows 2008 R2 - AD sort-of-restored

floodman23 — Wed, 01 Sep 2010 10:39:34 -0500

There are 2 replies, with the last one on 09/01/2010 at 10:39:34 AM by floodman23
Quote:
I'm trying to restore the system state, complete with AD database on to a rebuilt machine.
This is a DR scenario. We are restoring from scratch as the old DC is destroyed/completely unavailable, and there is no other source of AD information.

> With AD, I initially tried restoring from DSRM.
I restarted the machine to enter DSRM, then ran the "wbadmin systemstaterestore ..." command.
This apparently restored correctly, but the AD admin tools, such as "Active Directory Users and Computers" are not recovered.
They would normally get installed with the service, but the service can't be installed as it is already on the machine.

Running dcpromo to get the tools installed, then running wbadmin from DSRM got me closer, apart from the fact that I have to restart AD DS or open the ADAC each time I restart the machine in order to administrate AD.

Changing modes

Perfessor — Wed, 01 Sep 2010 09:46:58 -0500

There are 5 replies, with the last one on 09/01/2010 at 09:46:58 AM by Perfessor
Quote:
HA! I'll be here this weekend anyway. I drew the short straw

Is it time to say "so long"?

Rastor728 — Wed, 01 Sep 2010 09:30:36 -0500

There are 45 replies, with the last one on 09/01/2010 at 09:30:36 AM by Rastor728
Quote:
At my current employer, it is considered an act of Workplace Violence to have a shouting fit at or with employees, supervisors and even our patients! (We are a small critical care community hospital)

Which means the issue is required to be reported to the CEO/CFO and the Board of Directors! Everyone is expected to "disengage" politely and search out a third party for problem resolution (usually the Communications Director).

I was shocked when I saw such a policy in place AND to see it actually used a couple of times each month! Usually with combative patients that are too impaired to know what they are really saying, but still it is in place and is followed.

ActiveSync Admin Tool Issue

stevekuze — Wed, 01 Sep 2010 09:17:25 -0500

There are 3 replies, with the last one on 09/01/2010 at 09:17:25 AM by stevekuze
Quote:
After much troubleshooting, it turns out there was an issue with the certificate on the server and the permissions within directory security within IIS.

70-662

tomo999 — Wed, 01 Sep 2010 06:15:39 -0500

There are 9 replies, with the last one on 09/01/2010 at 06:15:39 AM by tomo999
Quote:
Thanks for the response guys, really appreciated.

Coincidentally, my manager has just booked me on a 5 day training course for 70-663! His call not mine, but I don't mind a bit of offsite training [:D]

That isn't until November, so I'll try and get 70-662 passed in time for that training course.

RoboCopy - check file size

g1000 — Wed, 01 Sep 2010 03:56:19 -0500

There are 5 replies, with the last one on 09/01/2010 at 03:56:19 AM by g1000
Quote:
Thanks Guys. I'll have a look into DFS replication (fingers crossed)

Found this article will and will work through it - http://www.windowsnetworking.com/articles_tutorials/Implementing-DFS-Replication.html

Hyper-V P2V partitioning

Rambler — Wed, 01 Sep 2010 00:33:51 -0500

There are 2 replies, with the last one on 09/01/2010 at 12:33:51 AM by Rambler
Quote:
Because it's not how W2k8 (R2) is installed if you do a clean install + to stay consistent (some servers would have 2 partitions on single drive, some would have 2 drives).

What's more flexible about it Aidan?

Change IP Address of DC?

daemonroot — Tue, 31 Aug 2010 23:51:04 -0500

There are 4 replies, with the last one on 08/31/2010 at 11:51:04 PM by daemonroot
Quote:
If you run into issues bear in mind that "dcdiag /fix" and "netdiag /fix" are your friends :)

Server 2008 RRAS - Connects but with no valid IP

NT_Moron — Tue, 31 Aug 2010 23:17:51 -0500

Hello,

I have a Windows 2008 R2 server with two nic. It has RRAS enabled.

I am able to connect to the server using VPN in windows 7. However, my dhcp server can't issue an IP even though I have a dhcp agent running.
What I get instead is that microsoft private address that 169.254.69.x address in my ppp adapter.

What's more, once I connect to my server's vpn, I lose my local internet connect - meaning I can't ping, and or browse the net.
I did notice that my ppp adapter shows the DNS server of my company's network.

Any suggestions as to what I am doing wrong.

Thank you in advance.

Advanced books

St0ne_c0ld_316 — Tue, 31 Aug 2010 18:52:11 -0500

There are 8 replies, with the last one on 08/31/2010 at 6:52:11 PM by St0ne_c0ld_316
Quote:
Thanks guys thats perfect :)

Messages sitting in Outbox until manually sent

MrEclipseguy — Tue, 31 Aug 2010 18:50:21 -0500

There are 3 replies, with the last one on 08/31/2010 at 6:50:21 PM by MrEclipseguy
Quote:
Would certainly try all of Brian's suggestions on your issue. One of them is bound to possibly fix that issue.

Dual radio AP vs Single radio AP

Douggg — Tue, 31 Aug 2010 18:11:21 -0500

There are 1 replies, with the last one on 08/31/2010 at 6:11:21 PM by Douggg
Quote:
Dual allow Tx on both 2.4 and 5 at the same time. You need to read the specs of the AP, but most will not support N if 2.4 or 5 are both not in N mode. What this means is if an A is using N and and B conencts the host on A will no longer use N.

Take a look at Linksys/Cisco and Netgear.

Deleting user profiles via GPO?

aval — Tue, 31 Aug 2010 17:27:25 -0500

Since Steady State is no longer supported for Windows 7 (or Vista?) and since upgrading our Deep Freeze license to Windows 7 would entail a cost we would prefer to avoid, we are wondering how well Windows 7 could withstand the onslaught of all the malware out there - - -

on its own...

(Big silence in the room. What?!!!)

One recommendation was to disable the UAC prompts so anything requiring elevated privileges would be refused automatically (to standard users).

Another was to delete the user profiles after a while. This is where a lot of the malware accumulates, assuming it's not able to install itself elsewhere by some OS exploit. It will also prevent the hard drives from filling up with whatever users might opt to save there (like to desktop, which we do not redirect).

So...

Who has been doing this (profile deletion) and how has it worked for you?

How long do you leave the profiles in place?

Removing at the end of the day would remove the most junk.

On the other hand (and working with Deep Freeze), past experience has shown that users will save to desktop or in a temp folder (with some webmails) and the day later they can't find it. Deep Freeze is that efficient. Gone. All gone. Well, maybe not with forensics software...

Anyway, leaving the stuff there for a couple days might be a good thing.

Anyone?

- Machines would be patched regularly (via WSUS)
- They would have an antivirus program (I won't say which one)

SATA or SAS

NMDANGE — Tue, 31 Aug 2010 15:38:00 -0500

There are 4 replies, with the last one on 08/31/2010 at 3:38:00 PM by NMDANGE
Quote:
You can't mix SATA and SAS drives on the same backplane. You would need to buy "near-line" SAS drives, which are just SATA drives that have a SAS interface on them. You also can't mix different RPM drives in 1 RAID set.

Unfortunately Dell charges about double what a normal SATA drive costs when you buy it from them for use in their servers/drive enclosures. And of course even if you wanted to void the warranty, you can't get empty drive caddies, and the blanks that come with the system aren't full caddies and can't hold a drive.

I have been happy with these guys so far with their SATA storage: http://www.aberdeeninc.com/

New MS data centre in VA

joe_elway — Tue, 31 Aug 2010 15:03:01 -0500

http://www.activewin.com/awin/comments.asp?HeadlineIndex=50102

Looks like Azure is crossing the Mason-Dixie line, half way between Richmond and Raleigh.

ADUC View Only

aval — Tue, 31 Aug 2010 14:02:49 -0500

There are 7 replies, with the last one on 08/31/2010 at 2:02:49 PM by aval
Quote:

quote:
David - like this for example? http://www.petri.co.il/quickly_search_active_directory_from_the_desktop.htm

Yes.

Now... would dsquery function on any computer?

I just tried it on mine, but since I have RSAT installed, that might explain why I can.

OK - just tried on an XP machine with no AD management tools installed. DSQUERY was not recognized. You know the error.

Well... have to go. Setting up new copiers today.

VMWare-SBS Server

lanerj — Tue, 31 Aug 2010 13:59:02 -0500

There are 5 replies, with the last one on 08/31/2010 at 1:59:02 PM by lanerj
Quote:
Jaxdave, thanks much for the link. I was able to get the BPS to quit throwing errors after following the link you provided and removing the phantom NIC's. I also replaced ESET Smart Security with just the anti-virus. This removed all of the Network adapters that were causing the BPS to error out. I should now be able to run the CEICW. Thanks again!

SBS Best Practices Scan

lanerj — Tue, 31 Aug 2010 13:54:31 -0500

There are 3 replies, with the last one on 08/31/2010 at 1:54:31 PM by lanerj
Quote:
Joe, thanks for the information. I was able to get the Best Practices Scan to quit throwing the multiple NIC error by removing phantom NICs (http://support.microsoft.com/kb/241257) and by uninstalling ESET Smart Security and installing just the anti-virus. Installing anti-virus only removed all of the ESET virtual adapters. At any rate, I re-ran the BPS and it no longer complains about multiple NIC's. In fact, I am able to run Microsoft Office Outlook Connectivity Tests successfully after adjusting the registry to allow ports 6001, 6002, and 6004. Theoretically, I should be able to successfully run the CEICW- just not sure that I am ready to do that yet. If it fails, it is a time consuming process to set up everything manually.

Deploying multiple (many) apps via GPO

aval — Tue, 31 Aug 2010 09:54:44 -0500

There are 4 replies, with the last one on 08/31/2010 at 09:54:44 AM by aval
Quote:
Thanks guys.

But any preferences? Reasons to choose one way or the other?

Not having a multitude to manage, I'm leaning to separate GPOs for each app so I could enable/disable GPOs per app as needed.

I've used Software Deployment practically since it became available, but with only 1 or 2 (at most) apps.

Now I'm seeing advantages to deploy just about everything with them (rather than incoporate in a image).

Classic Query from SRS manual gives error

cj_berlin — Tue, 31 Aug 2010 02:51:27 -0500

There are 2 replies, with the last one on 08/31/2010 at 02:51:27 AM by cj_berlin
Quote:
Curt,

don't know why either, but explicit casting of ' ' as varchar(2) will help.

Restricting PC access with GPO's

daemonroot — Tue, 31 Aug 2010 02:28:05 -0500

There are 6 replies, with the last one on 08/31/2010 at 02:28:05 AM by daemonroot
Quote:
Thing is that userWorkstations and logonHours are user object's attributes... maybe you can script that and set it on the target users... I feel this is an unidirectional setting kinda odd since both objects are at the end security principals :(

2.3Million GBP fine....over a backup tape

don2007 — Mon, 30 Aug 2010 19:49:28 -0500

There are 5 replies, with the last one on 08/30/2010 at 7:49:28 PM by don2007
Quote:
Here are what could be some rhetorical questions. What does the FSA do with all that money? If identities had been stolen, would the money have gone to help those people recover?

Event ID 8032

don2007 — Mon, 30 Aug 2010 19:42:44 -0500

There are 1 replies, with the last one on 08/30/2010 at 7:42:44 PM by don2007
Quote:
http://eventid.net/display.asp?eventid=8032&eventno=118&source=BROWSER&phase=1

No mention of Citrix at that site but you mind find something.

State Of Virginia Technology Centers Down

lady_mcse — Mon, 30 Aug 2010 17:01:59 -0500

There are 6 replies, with the last one on 08/30/2010 at 5:01:59 PM by lady_mcse
Quote:
Grooooooan ....

to quote a popular Amerikan toy:

"Math is hard."

(Not enough blushy cutesy embarasssy emoticons to cover this one, so won't bother.)

Question on using zone mapping setting

Dave Sweatt — Mon, 30 Aug 2010 16:51:39 -0500

I have a contractor setting up a new CIS system and they need the users to be able to open a remote help file from the terminal server. I think I just have the syntax wrong for adding this to the IE zonemapping setting in GP.
I've tried mk:@MSITStore:servername.domain.int and also tried mk:@MSITStore:\\servername.

The help file will open OK, but I get app log errors and 'data invalid' error in GP results.

I'm having a brain fart here and need to know what I'm doing wrong.

Upgrading Problem

Perfessor — Mon, 30 Aug 2010 15:43:36 -0500

There are 6 replies, with the last one on 08/30/2010 at 3:43:36 PM by Perfessor
Quote:
Thanks Jazzy. I never used that for 2 reasons. 1. I figured that it would not get looked at for 4 or 5 months (if that soon) and 2. I don't know enough to correct the people that wrote them in the first place!

Also, I'm going to follow your suggestion and let the server handle all parts of the install.

prevent sysprep from reverting Administrator name

Rambler — Mon, 30 Aug 2010 15:14:38 -0500

There are 6 replies, with the last one on 08/30/2010 at 3:14:38 PM by Rambler
Quote:
I've found out myself several weeks ago, but since this thread is rather old, we solved it by using Powershell script as part of post-installation maintenance.
Thanks for the reference though.

We Love Open Source?

JamesNT — Mon, 30 Aug 2010 15:09:05 -0500

There are 2 replies, with the last one on 08/30/2010 at 3:09:05 PM by JamesNT
Quote:
The latest GPL license was the last nail in the coffin for any chances of my having anything to do with open source again. Saying that if I use GPL code along side my own means my code is now under the GPL is wrong. What the open source community is doing is trying to force people to contribute becaues they have no real means to encourage people to contribute. You don't get money writing a new kernal mode driver for some piece of hardware for linux. What you get is a few nods on a few forums, maybe a blog or two here and there, and the opportunity to watch thousands of people use your code for free regardless of the hours you put into it.

I used to laugh aloud at my college peers who used to have dreams of working for some open source company like Red Hat. I would ask them, "If all the code is supposed to be free, then why are you looking for a job that pays you to do it?"

JamesNT

Canon 70-300 L IS

Mark Minasi — Mon, 30 Aug 2010 15:01:00 -0500

There are 7 replies, with the last one on 08/30/2010 at 3:01:00 PM by Mark Minasi
Quote:
True, for a 5.6.

Finally Things Get Better.

Mark Minasi — Mon, 30 Aug 2010 14:55:04 -0500

There are 10 replies, with the last one on 08/30/2010 at 2:55:04 PM by Mark Minasi
Quote:
Good to hear that things are looking up, Nikolas. Best of luck!
And y'know, Mike, two alternatives to that statement have occurred to me over the years:
"That which does not kill us often damages us significantly."
"That which does not kill us often gets us really high." (The version that occurred to me in college.)

ITIL

Mark Minasi — Mon, 30 Aug 2010 14:53:10 -0500

There are 24 replies, with the last one on 08/30/2010 at 2:53:10 PM by Mark Minasi
Quote:
Have you READ that? Talk about cranky old ladies.

Again, processes are good. Making the knowledge that "processes are good" into an arbitrary test that lazy bastards in HR can use to refuse to hire my friends is bad. I'm just a simpleton about some things.

RRAS is killing my Microcell

Mark Minasi — Mon, 30 Aug 2010 14:45:02 -0500

There are 9 replies, with the last one on 08/30/2010 at 2:45:02 PM by Mark Minasi
Quote:
Ah well, in any case I'd disabled the firewall (temporarily) to see if those were the problems and it still failed. There must be something odd in RRAS that's getting me in trouble, but I'm out of time so it'll have to wait for another day. Thanks all!

Scary question of the week

Curt — Mon, 30 Aug 2010 14:08:02 -0500

There are 11 replies, with the last one on 08/30/2010 at 2:08:02 PM by Curt
Quote:
Being objective here, I my meeting with cloud folks at MSFT revealed how their message is still just a slide deck.

My Email is outsourced and there are DNS issues and delivery inconsistancy issue. Which makes email for in house work a good spot for an exchange farm in house.
You should not have to wait 6 hours for the guy next to you to get an email.

The 80/20 rule will still be there.

I have one client that has thrown it out the door already.

What I mean is that he has experienced the difference as a CIO.

That's proof for me that some things by their nature have to stay in house. But some things could be in the cloud. After all , your ISP's DNS server is hosted and the DNS system is global, and we depend on that. Even so , we see how that let's us down sometimes.

As I said two conferences ago, I don't like this centralized refried SUN Dream that gives too much power to a few people.

How many root servers are there again?

The "Internet" was going to bring about a wonderful age of communication and understanding. Wow, look how things are turning out.
Not so great.
Time for smaller ISPs and freedom of access to the major feeds.

Invert Selection came back!!!

Mark Minasi — Mon, 30 Aug 2010 14:02:44 -0500

There are 8 replies, with the last one on 08/30/2010 at 2:02:44 PM by Mark Minasi
Quote:
Oh, arrgh, sorry to hear about that, Anne.

I'm surrounded by horse farms where I live -- none at my farm, those big fellas scare the bejeezus out of me -- but I've seen that kinda thing more than once and I know that it's painful, embarrassing and inconvenient, so I hope you heal quickly.

And Spanburgh, I hate to have to remind you of this, but Jersey is naught but a minor dialect of NooYorkian, a major variant of American English.

Terminal Server Licenses

Rambler — Mon, 30 Aug 2010 11:05:02 -0500

There are 5 replies, with the last one on 08/30/2010 at 11:05:02 AM by Rambler
Quote:
Bill, I was going by memory, for more detailed information, read Brian Madden's guide to TS licensing. It's bit outdated (as it's for Windows 2003), but I'm fairly confident, the processes didn't change that much in Windows 2008.
Link - http://www.brianmadden.com/blogs/brianmadden/archive/2004/04/01/the-ultimate-guide-to-windows-2003-terminal-server-licensing.aspx

Shared Reporting Server - SCOM

MadCow — Mon, 30 Aug 2010 10:09:04 -0500

vClient 4.1 does not allow to create Data Center

rtang626 — Mon, 30 Aug 2010 10:02:20 -0500

There are 5 replies, with the last one on 08/30/2010 at 10:02:20 AM by rtang626
Quote:
OK that did it! Problem resolved.

Site Advisor for suspicious links

tomstrike — Mon, 30 Aug 2010 10:01:35 -0500

http://www.siteadvisor.com/

My boss sent this out to us when we started getting scareware on laptops. It's a nice link for checking out hyperlinks in your email.

SCOM 2007 Setup

MadCow — Mon, 30 Aug 2010 09:55:20 -0500

There are 2 replies, with the last one on 08/30/2010 at 09:55:20 AM by MadCow
Quote:

Aidan Thanks for your response.

Forests and trusts

netmarcos — Mon, 30 Aug 2010 09:35:20 -0500

There are 4 replies, with the last one on 08/30/2010 at 09:35:20 AM by netmarcos
Quote:
The NetBIOS names must be unique. The FQDN already is. Gonna have to do something...

Kerberos Token limitations

daemonroot — Mon, 30 Aug 2010 07:36:54 -0500

There are 2 replies, with the last one on 08/30/2010 at 07:36:54 AM by daemonroot
Quote:
We've done a little of both, we ran a report that send us the info of the fellows that have the must groups and we also increased teh MaxTokenSize on some systems. You might want to check some of the built-in groups as well, I've seen a couple of places where Domain Users is fully populated.
And the last one, bear in mind that Exchange can convert distribution groups to security groups as required so don't forget those.

anyone done a shared SAS storage cluster?

Pesos — Mon, 30 Aug 2010 02:33:49 -0500

There are 3 replies, with the last one on 08/30/2010 at 02:33:49 AM by Pesos
Quote:
Here is Dell's writeup on doing Hyper-V clustering with the MD3000 (sas shared storage) and MD3000i (iSCSI storage)... I have only come across one blog of someone using the MD3000 SAS setup in production, but they were happy with the results. Was just wondering if anyone here had seen one in action (or the HP equivalent, I think it's the MSA2012sa)...

XenClient Launched

cdupadhyay — Mon, 30 Aug 2010 01:29:32 -0500

There are 1 replies, with the last one on 08/30/2010 at 01:29:32 AM by cdupadhyay
Quote:
XenClient is not monolithic. It's based on Xen and has drivers in the control domain. The synchronization with a virtual appliance running on XenServer is allowed with the free XenClient Express edition as well (limited connections).

quote:
Originally posted by joe_elway

Citrix has launched their client hypervisor, XenClient. It's monolithic (drivers in the hypervisor like ESX) so it has a very small HCL: a handful of machines. There is a free version. The paid for version has some nice synch features with XenServer.

Gotta admit that I am tempted to try it. My laptop is on the HCL.

Just arrived in San Fran

Pesos — Sun, 29 Aug 2010 23:09:22 -0500

There are 2 replies, with the last one on 08/29/2010 at 11:09:22 PM by Pesos
Quote:
Next time you all are in town we should all get together!

Find IP of sending PC - Internal Network

JSCLMEDAVE — Sun, 29 Aug 2010 15:31:28 -0500

There are 4 replies, with the last one on 08/29/2010 at 3:31:28 PM by JSCLMEDAVE
Quote:
Evgenij, I will try to find out tomorrow. I am thinking it may be an issue where 1) it was something that could have been sent on behalf of someone without permission 2) Was sent while logged into another machine and the content of the email is causing issues on a political level. I really don't know at this point...

If it's a sent on behalf issue that would be easy to verify but I just don't know all the details yet...

Reverse Lookup Zones

Playwell — Sun, 29 Aug 2010 04:32:24 -0500

There are 7 replies, with the last one on 08/29/2010 at 04:32:24 AM by Playwell
Quote:
The only thing enjoying me about not having reverse lookup zones is that nslookup comes up with an error.
Some applications run haywire btw, p.e. HP Storage protector

Motorola Wireless gear

timberk — Sat, 28 Aug 2010 23:40:18 -0500

There are 9 replies, with the last one on 08/28/2010 at 11:40:18 PM by timberk
Quote:
Just to follow up, we're looking at AP7131 and AP650 access points possibly with RFS4000 controllers.

http://www.motorola.com/business/v/index.jsp?vgnextoid=26ac377a7b388110VgnVCM1000008406b00aRCRD&vgnextchannel=759b3acf35e95110VgnVCM1000008406b00aRCRD

http://www.motorola.com/Business/US-EN/Business%20Product%20and%20Services/Enterprise%20Mobility/AP650_US-EN

http://www.motorola.com/Business/US-EN/Business%20Product%20and%20Services/Wireless%20LAN/Wireless%20Switches/RFS4000_US-EN

Would still be interested in any other comments on this hardware.

Thanks in advance.

~tb

DNS issue

mnewell — Sat, 28 Aug 2010 22:26:56 -0500

There are 7 replies, with the last one on 08/28/2010 at 10:26:56 PM by mnewell
Quote:

quote:
Originally posted by Tony.DiGiorgio

Since they are laptops do you need their 'A' records in DNS at all? Is there some business need that customers or clients need to connect to these laptops? If the answer is no, just configure the laptop to not update DNS dynamically. My understanding is that the only time DHCP will come into play is if the host doesn't have the ability to update its own record, such as legacy clients.

The problem is we use SCCM to push apps and updates to desktops and laptops (most of the users use laptops). DNS plays a large role in that push. You're right though, if not for SCCM I wouldn't really be sweating it too much.

RODC Replication Issue and Solution

Tony.DiGiorgio — Sat, 28 Aug 2010 21:19:50 -0500

Recently I ran into a replication issue with an RODC at a branch office. The office had not received updates to DNS or the directory in several days. The symptom was that when I tried to force replication I got a message indicating that "The naming context is in the process of being removed". I tried several times to change the connection object source server in 'Sites and Services' on a writable DC, but unfortunately it had no effect, and kept reverting back to the original source server. After running 'REPADMIN' and 'DCDIAG' on the RODC I discovered that the sourcing DC did not have the security permissions on the RODC for initiating inbound replication. The source server was a new 2008 DC and I'm guessing the KCC assigned the new DC as a replication source with the RODC before its new role had a chance to replicate to the RODC. Hence a catch 22, how do I write to a 'Read Only' DC and change the replication source server? For the answer I turned to ADSIedit, I connected to the RODC configuration partition and just deleted the replication object connections directly under 'cn=ntds settings,cn=[RODC server],cn=servers,cn=[site name],cn=sites,cn=configuration,dc=[domain],dc=[domain suffix] . I was hoping and praying that the KCC would see the links missing and then replace with fresh connection objects. Luckily, I was right, replication re-established after rebooting the RODC (I aslo ensured the DNS record for the RODC re-registered). Read Only? Please.... not for this admin:-)

Interview questions - feedback

JamesNT — Sat, 28 Aug 2010 15:24:27 -0500

There are 16 replies, with the last one on 08/28/2010 at 3:24:27 PM by JamesNT
Quote:
I think the questions are very well thought out. However, I can tell you now that I can't list the 7 layers of the OSI model. But I could easily answer all your DNS/DHCP/connectivity questions to your satisfaction.

I agree with Lisa regarding her disagreement with the question. However, bhickok, I can also agree with why you want to include the question. So that leads us to the inevitable question of how much weight this question carries out of all your questions. Is this question a deal breaker as opposed to the other connectivity related questions? If so, that I may have to question. My questioning how you are moving forward with this plan is not meant to insult or put you under question.

I just hope everyone can understand my questions.

JamesNT

Client accessing wrong DC

wkasdo — Sat, 28 Aug 2010 14:46:32 -0500

There are 12 replies, with the last one on 08/28/2010 at 2:46:32 PM by wkasdo
Quote:
I wonder if the default DNS registration settings have been changed. For one such problematic site, can you see if all required DNS SRV records have been registered?

Robo copy Script please help...

jay4u — Sat, 28 Aug 2010 07:47:48 -0500

There are 2 replies, with the last one on 08/28/2010 at 07:47:48 AM by jay4u
Quote:
hey thanks for your reply

i can conver the excel file into notepad no worries but that excel file dosnet have full path of the movies its just have the names of movies...

so not to sure how would this work....

Article: Flash drive cyber attack on US military

JSCLMEDAVE — Sat, 28 Aug 2010 07:38:05 -0500

There are 9 replies, with the last one on 08/28/2010 at 07:38:05 AM by JSCLMEDAVE
Quote:
Yes! CDs are the same as USBs. You can set which PC / Laptop can even read a CD and also set whom can access a CD. As with the USB you can track all docs to and from.

Wierd files in VHD folder...

joe_elway — Sat, 28 Aug 2010 04:01:30 -0500

There are 1 replies, with the last one on 08/28/2010 at 04:01:30 AM by joe_elway
Quote:
avhds are snapshot files. Had you ever created a snapshot? If so, did you power it down to merge the AVHDs?

Fail Over Cluster Validation

joe_elway — Sat, 28 Aug 2010 03:59:09 -0500

There are 1 replies, with the last one on 08/28/2010 at 03:59:09 AM by joe_elway
Quote:
It will. You can use the option to select tests and deselect the disk tests.

RoboCopy Frontend - Copyrite XP

ukinahan — Sat, 28 Aug 2010 01:26:51 -0500

There are 33 replies, with the last one on 08/28/2010 at 01:26:51 AM by ukinahan
Quote:
Have you tried RichCopy at all?
Great tool... http://technet.microsoft.com/en-us/magazine/2009.04.utilityspotlight.aspx

SOLVED Litetouch.vbs can't get pc 2 join domain

arwidmark — Fri, 27 Aug 2010 23:58:20 -0500

There are 8 replies, with the last one on 08/27/2010 at 11:58:20 PM by arwidmark
Quote:
Great :)

/ Johan

Number of Files on a NTFS Folder

don2007 — Fri, 27 Aug 2010 22:31:52 -0500

There are 9 replies, with the last one on 08/27/2010 at 10:31:52 PM by don2007
Quote:
What about a basic defrag? Would that help?

redundant internet access?

don2007 — Fri, 27 Aug 2010 22:28:58 -0500

There are 9 replies, with the last one on 08/27/2010 at 10:28:58 PM by don2007
Quote:
dcslick, is it sabotage causing those outages, maybe another company or a dissatisfied user? You might want to check local police reports.

Someone here said that they would never have Verizon FIOS because in their location, there were too many drunk drivers hitting poles & cable was much easier to repair. At the same time, I have been using Verizon's FIOS (home) for 4 years or so & there haven't been any outages, not even for a minute.

"Tape Changer" selection not working...

wobble_wobble — Fri, 27 Aug 2010 18:33:06 -0500

There are 1 replies, with the last one on 08/27/2010 at 6:33:06 PM by wobble_wobble
Quote:
Anthony,

The reminder process is independent of the backup, the reminder is a scheduled task that scheduled into Exchange during the Backup wizard process.

Does the account you use to manage the SBS Server have a mailbox that is enabled.
If not, enable the email account/ create a mailbox.

Then try the following;

1. Create a new normal user with SBS Add user wizard
2. Open regedit and navigate to the following

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\Backup

Delete the following registry keys

Backup Operator
Backup Reminder Time
Drive Clean Reminder
Drive Clean Reminder URL
Tape Change Reminder URL

Close Regedit, open Server Manager\ Backup

Click "Select A New Tape Changer" and select the new user created earlier and finish the wizard

Then verify the following;
Logon to OWA for the new user and make sure two new reminder items are sent to this user mailboxes
Verify that five registry keys deleted above have been re-created.

Then we see if its fixed.

Slow network transfer

wkasdo — Fri, 27 Aug 2010 14:50:21 -0500

There are 3 replies, with the last one on 08/27/2010 at 2:50:21 PM by wkasdo
Quote:
I really couldn't say how enabling file/printer sharing would make a difference. I did remember reading a blog about RDC and file copying, and found it again after some searching: http://blogs.technet.com/b/askds/archive/2009/06/26/debunking-the-vista-remote-differential-compression-myth.aspx

sorry for asking, but your 2003 servers do have SP2?

Exchange 2007 memory utilization

Jazzy — Fri, 27 Aug 2010 12:22:25 -0500

There are 7 replies, with the last one on 08/27/2010 at 12:22:25 PM by Jazzy
Quote:

quote:
Originally posted by NMDANGE

Exchange 2003, being a 32-bit application, is limited in the amount of memory it can allocate, which will vary depending on whether you have the /3GB switch in the boot.ini. However, it still tries to use as much as it can.

I never seen the store.exe consume more than 1 GB, did you?

Slow logons from XP to W2008r2

wkasdo — Fri, 27 Aug 2010 12:17:20 -0500

There are 3 replies, with the last one on 08/27/2010 at 12:17:20 PM by wkasdo
Quote:
> One thought I had is IPv6

Should not affect XP clients. Some forum members have seen problems with IPv6, related to wrongly configured network devices.

One thing to try for troubleshooting is to turn up userenv logging, see http://support.microsoft.com/?id=221833.

TTCLive

Borg — Fri, 27 Aug 2010 12:17:12 -0500

There are 2 replies, with the last one on 08/27/2010 at 12:17:12 PM by Borg
Quote:
I was just thinking Google could probably do all that these people are saying they can do..they just wrap it all up in a small little package.

Traversing folders...

TheGord — Fri, 27 Aug 2010 12:12:37 -0500

There are 2 replies, with the last one on 08/27/2010 at 12:12:37 PM by TheGord
Quote:
That sounds interesting, i'll check into that.

Thanks.

G.

Keeping MDT images current with patches

JSCLMEDAVE — Fri, 27 Aug 2010 12:04:45 -0500

There are 2 replies, with the last one on 08/27/2010 at 12:04:45 PM by JSCLMEDAVE
Quote:

quote:
Originally posted by Rastor728

How many desktop deployments do you do per week?

If you don't do very many, you might just update your images when you have major changes or applications to install on the image. Other than that just let WSUS catch the system up since it was last imaged.

Welcome to the forum!

I agree as well. Depending on the amount of images you are pushing out per week you could schedule for an update every couple of months or longer. Service Packs should be added obviously, but for the normal updates I would let WSUS do it's job.

MDT - WinPE

arwidmark — Fri, 27 Aug 2010 10:42:20 -0500

There are 3 replies, with the last one on 08/27/2010 at 10:42:20 AM by arwidmark
Quote:
Very much true.... :)

/ Johan

MDT - need hint

Rambler — Fri, 27 Aug 2010 09:24:50 -0500

I've briefly looked at MDT several times, but I don't know why, but I find it very confusing and non-intuitive. Anyway I realize, this post will be somewhat general, but here goes.

Can anyone hint me, what's the easiest way to:
- create an sysprepped image of W2k8 R2 (patched, with roles and apps installed)
- deploy that image to target machines

Maybe I'm expecting something that MDT can't help me with, but I was used to install the referrence machine, install updates, configure, install apps, then sysprep it with my custom unattend.xml created in WSIM, then capture with ImageX. Later create VM, boot to WinPE, configure disks with diskpart and deploy the captured .WIM image with ImageX.

Can MDT help me with that - make it easier, faster etc.?

Basically I don't need ton of images, just few for our servers and I'm trying to automate (more) the deployment process to what we currently use (outlined above).

Disk to Disk to Disk

NMDANGE — Fri, 27 Aug 2010 09:09:05 -0500

There are 4 replies, with the last one on 08/27/2010 at 09:09:05 AM by NMDANGE
Quote:
Well the point of having another DPM server is if that server is not in the same building; i.e. you don't have to take the second DPM's data offsite because the server is already offsite.

DPM wants to see a tape drive from an OS perspective to copy backups for offsite usage. I know there are hard-drive based virtual tape libraries, but these are usually servers/appliances with internal/hotswappable drives. I don't know if there are any simple removable disk drive systems that work the same way...

Here's some software that might do it:
http://www.cristalink.com/

Mailbox Access via Mapi Client

tomo999 — Fri, 27 Aug 2010 04:36:14 -0500

There are 5 replies, with the last one on 08/27/2010 at 04:36:14 AM by tomo999
Quote:
So this has just started happening since the Exchange 2010 installation? It is only for 1 user? Someone hasn't accidentally moved their mailbox onto the 2010 server, have they?

Is there anything unique about this users' account? Does the property "msExchHomeServerName" in Active Directory point to the correct server?

Scheduled Time Issue

kgbrisc1 — Fri, 27 Aug 2010 03:55:14 -0500

There are 1 replies, with the last one on 08/27/2010 at 03:55:14 AM by kgbrisc1
Quote:
I think either your WSUS server or your clients have incorrect time zone settings.

Slow file access from 2K8r2/64 server share

don2007 — Thu, 26 Aug 2010 22:27:50 -0500

There are 1 replies, with the last one on 08/26/2010 at 10:27:50 PM by don2007
Quote:
Believe it or not, the AV program could be causing it. Is Norton running? I knew a woman who had problems saving office docs. She uninstalled Norton, at my suggestion & all was well.

Granted, it was long before Windows 7 & 2008, but it's worth a look.

Outlook 2007 connection to Exchange 2010

pmarsh — Thu, 26 Aug 2010 21:09:02 -0500

There are 22 replies, with the last one on 08/26/2010 at 9:09:02 PM by pmarsh
Quote:
Nope not cached mode, I disable it on all builds. I will say I was thinking along those lines days ago so I enabled it let it sycn and then disabled it without any luck.

Script compilation, encryption, or obfuscation

sixdoubleo — Thu, 26 Aug 2010 15:30:43 -0500

There are 5 replies, with the last one on 08/26/2010 at 3:30:43 PM by sixdoubleo
Quote:

quote:
Originally posted by aval

[quote]And if it is "quasi-encrypted", how would the client machine know what to do with it?

In the case of Kix or encrypted VBScript, the script processor (kix32.exe/cscript.exe) has a built-in decryption key. In the case of Kix, the script is in a tokenized/compiled format that allows it to be executed.

I'm not looking for a way to prevent the script from being executed. Just want to hide the code. Kix has an extremely elegant way of doing that and I'm really surprised that Microsoft didn't include it with Powershell.

Cisco ASA and ACS question

itechsolutions — Thu, 26 Aug 2010 15:01:51 -0500

There are 2 replies, with the last one on 08/26/2010 at 3:01:51 PM by itechsolutions
Quote:
We have the groups set up like that in the ACS server and each user is in the correct group. So besides tracking and organization there should be no security benefit from having more then one PCF file? I could not think of a reason that a different PCF would create added security.

Thanks,

Bombardment

JSCLMEDAVE — Thu, 26 Aug 2010 13:31:54 -0500

There are 4 replies, with the last one on 08/26/2010 at 1:31:54 PM by JSCLMEDAVE
Quote:
David, how many users actually have outside email..? In a small shop I set it up so that only the users that were allowed outside email had accounts in Postini. Also NO attachments were allowed unless they were sent to an Admin Acct for screening and those HAD to be PDF.

On top of that, the rest (jpgs, gifs, docs) were cleaned out at the firewall as well.

Just curious...

Exchange 2007 SP3 S/MIME MisMatch

Rastor728 — Thu, 26 Aug 2010 13:00:17 -0500

I just upgraded my Exchange Server 2007 with SP3 and now my Outlook Web Clients are getting an ActiveX S/MIME error indicating they are out of date and need to upgrade to latest version.

They already have latest S/MIME version

So far only solution I have found is to run a.vbs script (no way I am downloading an anonymous script), or I have to use the WDK Tools to 'fake' the systems into correct version numbers.

Any other ideas or knowledge of this issue?

Binding order on Exchange Server

aval — Thu, 26 Aug 2010 12:34:37 -0500

The Get-SystemHealth cmdlet informs me that the first network adapter is not the active one and that I should make it active.

Reference:

http://technet.microsoft.com/en-us/library/dd789571(EXCHG.80).aspx

Should I change that... or simply connect both NICs to the switch?

Would that increase performance (connecting the server to the switch with two Ethernet cables instead of one)???

My head hurts

stevekuze — Thu, 26 Aug 2010 12:19:10 -0500

There are 3 replies, with the last one on 08/26/2010 at 12:19:10 PM by stevekuze
Quote:
Awesome!
Thanks a lot!

DNS stops working intermittently

Xenophane — Thu, 26 Aug 2010 11:15:40 -0500

There are 4 replies, with the last one on 08/26/2010 at 11:15:40 AM by Xenophane
Quote:
Tried that... does'nt seem to help

Russinovich latest blog

wobble_wobble — Thu, 26 Aug 2010 10:36:53 -0500

There are 3 replies, with the last one on 08/26/2010 at 10:36:53 AM by wobble_wobble
Quote:
I suppose the next questions are;

What are the data sets?
How did they know what to look for, or do they have a list or normal?
How can I apply this to 'my instances'?

Upgrade from W7 Pro to Ultimate

aval — Thu, 26 Aug 2010 10:11:20 -0500

There are 5 replies, with the last one on 08/26/2010 at 10:11:20 AM by aval
Quote:

quote:
VM's are great to a point but a few extra hard drive to "play" with OSes or whatever, can be a nice way to go.

I've actually done that this past weekend. Changed hard drives to practice something to do with sysprepping Windows 7.

Canon EOS 60D

downtime — Thu, 26 Aug 2010 09:36:53 -0500

There are 7 replies, with the last one on 08/26/2010 at 09:36:53 AM by downtime
Quote:
Would anyone like to guess when the new 1Ds Mk IV will be released? I was expecting an announcement yesterday (25th Aug) since the Photokina fair is quite soon.

I would like a new camera body, possibly Full Frame, so I will wait for the new 5D Mk III (I know this could be a year away). 7D is cheaper alternative though...

Anyone making it to vmworld next week?

jaxdave — Wed, 25 Aug 2010 21:21:49 -0500

There are 4 replies, with the last one on 08/25/2010 at 9:21:49 PM by jaxdave
Quote:
Having to skip it as well. Scheduling was not going to work out

Windows 7 slow processing Docs Folder Redirection

aval — Wed, 25 Aug 2010 17:58:26 -0500

There are 24 replies, with the last one on 08/25/2010 at 5:58:26 PM by aval
Quote:
Any news on this?

But in summary, if offline files is turned off, no problem?

quote:
Do not automatically make redirected folders available offline policy enabled

But doesn't that settings make them available - or simply allow them to become available?

quote:
Any redirected folder manually made offline (although size makes a difference so documents causes more problems than desktop or favorites)

So if there are no folders actually made available offline... then the 5th condition is not met and the problem does not occur?

Only 1 Exch server

aval — Wed, 25 Aug 2010 15:37:06 -0500

There are 16 replies, with the last one on 08/25/2010 at 3:37:06 PM by aval
Quote:
In reverse order:

quote:
Also, when it says "move the Exchange resources, such as mailboxes, public folders, and connectors to Exchange 2010", does it actually move the data and resources or does it just copy it over.

It will move mailboxes over - since (without some form of clustering) there can only be one instance of a given mailbox at a given time.

I am not sure about public folders, since there can be multiple replicas even without a clustering solution. I'guessing that would be a move, with possibly the option to create a replica.

Connectors? Not sure. I only worked with more than one Exchange server in a testing envrionment and even then did not examine that aspect. So I'll pass on that one. Jetze, Nathan, or others would know.

quote:
If I set up an appt on a company calender or schedule a meeting request for 10 people (5 of them with iMacs), how do I know which Exch takes care of it?

Whatever server holds the CAS role. What if both do (because you can have more than one)? I think the 2010 will have to become the CAS server in a situation like this... but I'm basing that response on the precious little I've read - remember - about 2003 to 2007 migrations.

Help deploying an update.

Jake Mueller — Wed, 25 Aug 2010 14:54:43 -0500

There are 3 replies, with the last one on 08/25/2010 at 2:54:43 PM by Jake Mueller
Quote:
yeah, your situation would be a good candidate for repackaging.

I typically leave that as a last resort myself

parsing the server "<svrname>" "clients.xml" file

aval — Wed, 25 Aug 2010 14:30:51 -0500

There are 2 replies, with the last one on 08/25/2010 at 2:30:51 PM by aval
Quote:
Thanks Mark.

I was able to do this and can now manage the ESXi 4.0 server from the vSphere 4.1 client.

Got involved in some other projects in the meantime and forgot about this post.

Exchange 2010 Service Pack 1 Released

timberk — Wed, 25 Aug 2010 14:18:35 -0500

Read about and download it here:

http://msexchangeteam.com/archive/2010/08/25/455861.aspx

Edit: Guess I'm late, again. This was originally posted by Tim here:

http://web2.minasi.com/forum/topic.asp?TOPIC_ID=35367

~tb

Healthcare MDT 2010.

dot45 — Wed, 25 Aug 2010 13:33:56 -0500

There are 4 replies, with the last one on 08/25/2010 at 1:33:56 PM by dot45
Quote:

quote:
Originally posted by dot45

quote:
Originally posted by arwidmark

The ZIP and the new license was handed over to the Microsoft Health team yesterday, so it should be published soon...

Any update on this????

Update?

Custom Field to capture business unit?

pfoty — Wed, 25 Aug 2010 11:18:41 -0500

There are 2 replies, with the last one on 08/25/2010 at 11:18:41 AM by pfoty
Quote:
Thanks Johan,

For anyone else looking to do something similar I found http://mdtwizardeditor.codeplex.com which will let you edit the wizard pretty easily without bouncing through all of the files to find the one you need.

MDT 2010 - rename

zmobile — Wed, 25 Aug 2010 09:51:38 -0500

There are 11 replies, with the last one on 08/25/2010 at 09:51:38 AM by zmobile
Quote:
I am able to rename the local administrator account by adding a task sequence step at the end of the state restore phase during deployment. But I noticed that the administrator profile folder does not change as it still shows c:\users\administrator. Can this profile folder name also be changed on deployment?

Continual Learning

chamezzzz — Wed, 25 Aug 2010 06:01:19 -0500

Bill Gates pointed me to this website and rather splendid it is too.
Khan Academy.

MIT have had a great Open Course Ware site for a number of years.

The BBC has some great resources.

Anyone else have any links/resources they wish to share?

Cetrtificate problems

Finkster — Tue, 24 Aug 2010 17:02:39 -0500

There are 11 replies, with the last one on 08/24/2010 at 5:02:39 PM by Finkster
Quote:
So Wobble_Wobble weaved his magic and he fixed my problem!

The issue wan't the CA... anymore. This is what I think happened. I messed up the certificates when I installed the Root CA. I went looking for clues in IIS and created a test website but couldn't get it to work because the ports where already in use. I left this path quickly because I suspected the CA to be the problem but I didn't delete, or at least stop the test website. I went on fixing the certificate problems but by now the test website was conflicting with the OWA site.

So my thanks to you Wobble_Wobble for your time and invaluable help.

GB at both ends, MB in the middle

Douggg — Tue, 24 Aug 2010 14:31:30 -0500

There are 5 replies, with the last one on 08/24/2010 at 2:31:30 PM by Douggg
Quote:
Only reason a Cat 3 cable would not have worked in you situation is if it were only 2 pair. If it is 4 pair this get's a bit more intersting.

Gig can work fine over Cat 3 just need to have 4 pairs. Watch out for Cat 5e and Cat 6. We've found "Certified Cat 5e" and "Certified Cat 6" that can't pass gig traffic. When the cable was analyed we found lots of impurities mixed in the wire the copper. Eventhough the cable was stamped certifed it would only pass a signal about 60 feet.

Dont' always beleive what's printed on the cable.

Blog about SCOM

shadowman — Tue, 24 Aug 2010 12:56:59 -0500

The last months I'm getting into SCOM(System Center Operations Manager), and reading a lot about. By the way in the next week I have five day course about SCOM from Microsoft Learning deliverd by a Microsoft Partner. Lately I came by the blog of Kevin Hollman, I think it's a great blog, and it covers good and deep information around SCOM.

http://blogs.technet.com/b/kevinholman/

.NET removal tool

daemonroot — Tue, 24 Aug 2010 12:19:38 -0500

There are 3 replies, with the last one on 08/24/2010 at 12:19:38 PM by daemonroot
Quote:
One of my favorite tools as I run into many .NET issues when patching :(

How Authors Really Make Money

chamezzzz — Tue, 24 Aug 2010 11:20:21 -0500

There are 1 replies, with the last one on 08/24/2010 at 11:20:21 AM by chamezzzz
Quote:
Our Marketing team really rate Seth Godin, I like his blog and read it from time to time.
This is on my Amazon Wishlist though it has it critics!

AD Description in SCCM Database?

Jake Mueller — Tue, 24 Aug 2010 09:56:58 -0500

There are 7 replies, with the last one on 08/24/2010 at 09:56:58 AM by Jake Mueller
Quote:
UPDATE:

Adding the attribute "description" to AD System Discovery did the trick. A new property gets added to System Resource, and I can query on SystemResource.description to get what I want!

Win7: changing computername during re-image

JaapB — Tue, 24 Aug 2010 08:50:28 -0500

There are 2 replies, with the last one on 08/24/2010 at 08:50:28 AM by JaapB
Quote:
I have not tried wsname yet, but will give it a try and report back.

How do i use this wsname.exe and in which stage? In my search to solve the problem i saw more topics mentioning wsname but they all seem to use MDT.

Write into Microsoft-Windows-Backup eventlog

Rambler — Tue, 24 Aug 2010 08:05:12 -0500

There are 2 replies, with the last one on 08/24/2010 at 08:05:12 AM by Rambler
Quote:
Not sure if that method allows you to write to those "sublogs", but what we did (although not for SCOM) was to actually generate an error event from WSB by running a backup job and stopping it while it was running. Crude, but quick :)

You might try eventcreate2 (http://code.google.com/p/eventcreate2/), but that didn't work for me.

Also found this: http://blogs.technet.com/b/stefan_stranger/archive/2008/05/08/new-powershell-event-creator-for-operations-manager-2007.aspx

Windows 7 audio series

Mark Minasi — Tue, 24 Aug 2010 05:44:08 -0500

There are 3 replies, with the last one on 08/24/2010 at 05:44:08 AM by Mark Minasi
Quote:
Jim, if you already own the Vista series, DO NOT buy the 20-CD set. The first 11 CDs, as the page says, is identical to the 2007 Vista set with the one difference that I re-recorded the introduction on the first disk and the outro on the last disk. The 9-CD "Vista to Win 7" set is all you need.

Thanks!

installed Sonicwall AP DHCP on SBS no longer works

wobble_wobble — Tue, 24 Aug 2010 02:02:41 -0500

There are 20 replies, with the last one on 08/24/2010 at 02:02:41 AM by wobble_wobble
Quote:
eliq91,

Can I take a look at the server?
Sending you a message offline.

Do included CALs add up?

gkarpov — Tue, 24 Aug 2010 00:32:33 -0500

There are 5 replies, with the last one on 08/24/2010 at 12:32:33 AM by gkarpov
Quote:

quote:
Originally posted by wobble_wobble

As far as I know, if the technology is the same, ie Server 2003 then yes. You cannot mix say 2003 and 2008.

Unsure about 2003 and 2003R2. I've been asking a MS licensing guy for a long time for answers, even the slide deck he used in his session...seems like he fell off the planet as well.

Q. Are there any differences between the requirements for CALs in Windows Server 2003 versus Windows Server 2008?

A.
No. The Windows Server CAL requirements are the same.

https://www.microsoft.com/windowsserver2008/en/us/licensing-faq.aspx

The Yes Men

chamezzzz — Mon, 23 Aug 2010 22:25:05 -0500

Juvenile and it won't be to everyone's taste on the forum but well worth a download just to admire the bloody faced cheek of what they do to the US Chamber of Commerce.
http://vodo.net/yesmen

EDIT - and the BBC, and plenty more! DOW Chemical - well worth a watch, even if you don't like their message.

DPM2010 and VM's in a cluster

Rambler — Mon, 23 Aug 2010 19:46:09 -0500

There are 1 replies, with the last one on 08/23/2010 at 7:46:09 PM by Rambler
Quote:
Err, probably bit late to the party as I missed this topic, but you need to have the required hotfixes installed (DPM tell you which ones) and you also can't do Hyper-V host-based backups if DPM2010 is running as a virtual machine, because in order to be able to do Hyper-V host backups, you need to have the Hyper-V role enabled on the DPM server, which is not possible, because virtual machines do not expose the virtualization bit required for adding Hyper-V role.

Brain Freeze - iis 6.0 Logs - Help!

daemonroot — Mon, 23 Aug 2010 16:56:49 -0500

There are 6 replies, with the last one on 08/23/2010 at 4:56:49 PM by daemonroot
Quote:
Glad to help!

Microsoft Zero Day Exploit

daemonroot — Mon, 23 Aug 2010 12:28:15 -0500

There are 5 replies, with the last one on 08/23/2010 at 12:28:15 PM by daemonroot
Quote:
Hats off to Darren (just as usual).