en-us Thu, 20 Nov 2008 11:00:34 -0500 donotreply@minasi.com 60 Mark Minasi's Reader Forum http://web2.minasi.com/forum/ Mark Minasi's Reader Forum http://web2.minasi.com/forum/http://www.minasi.com/ http://web2.minasi.com/forum/mrdlog.jpg Mark Minasi's Reader Forum Minasi Forums 144 47 32bit vs 64bit maxhunt http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29302&REPLY_ID=139751 Miscellany (Technical) Thu, 20 Nov 2008 11:00:27 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29302 Quote:
There are two things I have found that don't run on 64-bit system (my experience is only with 2003 and 2008 server). One escapes me at the moment! but the other is the Group Policy Management Console. Bizarre..

http://www.microsoft.com/downloads/details.aspx?familyid=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en
]]> W2K3 Site Topology question DavidWerner http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29320 Windows Server 2003 Thu, 20 Nov 2008 10:50:41 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29320
DCCD1-DC1 (Domain Controller Child Domain 1 - DC1)
DCCD1-DC2
DCCD1-DC3 BH server, GC
DCCD1-DC4 BH server, GC
DCCD2-DC1 (Domain Controller Child Domain 2 - DC1) BH server, no GC
DCCD3-DC1 BH server, no GC

In W2K, if we had a child domain controller in the site which was not a BH server, replication outside of this site would not take place fro this child domain.

Now that our DCs are all W2K3 and functional level also, we would like to remove the DCCD1-DC3 and DCCD1-DC4 BH servers completely, leaving child domain CD1 without any BH servers.

My question is whether replication outside of CD1 will still occur even if we do not have a BH server, since in a W2K3 environment, replication will simply select a DC as a non-preferred BH server.

Is it also wise to remove all preferred BH roles from all child domain DCs and for DCCD3-DC1, DCCD4-DC1 to enable them as GCs?

I haven't found any clear information regarding site topology in a multiple domain environment for W2K3 servers.

Any help would be appreciated. Thx!


]]> Strange Ping Output don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29304&REPLY_ID=139750 Miscellany (Technical) Thu, 20 Nov 2008 10:50:39 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29304 Quote:
I just did an nslookup on a machine that's not even on my LAN. I took the machine name from a ipconfig /all output on the net.

C:\>nslookup d-6f6zu0k404v
Server: nsnyny01.verizon.net
Address: 68.237.161.12

Non-authoritative answer:
Name: d-6f6zu0k404v
Addresses: 8.15.7.117, 63.251.179.13

It's all bogus.
]]> Backup VIrtual Machine maxhunt http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29312&REPLY_ID=139749 Active Directory Thu, 20 Nov 2008 10:48:04 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29312 Quote:
Agree if you have a single dc, you certainly won't get any replication problems!
But what i use, (in fact have just finishing another one just now), is a DC with a backup of its C: drive and system state on its D: drive. In the event of a disaster; copy the VM and restore its backup onto itself. The total extra time for the backup restore is about 5 mins, and you have a AD you can trust.

For how Microsoft really don't recommend copying VM's of DCs see:http://support.microsoft.com/kb/875495/en-us
http://support.microsoft.com/kb/888794/

]]> pdc dsaccess adn exbpa FAQS http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29319 Exchange Thu, 20 Nov 2008 10:46:45 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29319 Powershell SCR question Jazzy http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29314&REPLY_ID=139748 Exchange Thu, 20 Nov 2008 10:41:06 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29314 Quote:
I'm not sure and I have no experience with SCR yet. But there are more people with problems when enabling SCR, maybe you can use some of it:

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2779844&SiteID=17
http://tiny.cc/ZKfS1 (scroll down)]]> Newbie TS 2008 Question pretzeldude http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29279&REPLY_ID=139747 Terminal Server / Services Thu, 20 Nov 2008 10:40:07 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29279 Quote:
Thanks for the replies! I'm playing around with the Ericom WebConnect tool on my test W2k8 TS server right now. Seems pretty good so far. I'm able to publish different applications via the web page "application portal" based on AD user group. This was one of the main things that we were considering Citrix ZenApp 5.x for (at a very high price). Now I'll have to see if there's anything else missing that we need Citrix for - otherwise, I'm pretty excited about what the "out of the box" Windows Server 2008 TS + WebConnect can do. Thanks for the links to the articles too, they're very helpful. - Ted]]> Email sits in Queue ... MadCow http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29243&REPLY_ID=139746 Exchange Thu, 20 Nov 2008 10:31:26 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29243 Quote:

On bottom it says no additional information is available and sits in Active State.]]> Batch File progress bar mitachu http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29301&REPLY_ID=139745 Windows Server 2003 Thu, 20 Nov 2008 10:31:07 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29301 Quote:
I wasn't aware that you needed to reboot in order to start using ROBOCOPY.....
]]> Internet not Working Perfessor http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=28704&REPLY_ID=139744 Windows XP Professional Thu, 20 Nov 2008 10:28:16 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28704 Quote:
Don't they call that "Job Security"??[8D]]]> Blackberry Desktop Manager mitachu http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29318&REPLY_ID=139743 Terminal Server / Services Thu, 20 Nov 2008 10:23:35 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29318 Quote:
What I'm trying to do is to allow users to sync their Blackberry handsets from their laptops when they're working remotely. I don't want to use the VPN, I want to keep people using terminal server. One thing that I'm going to try is using a USB/Serial adapter on a laptop and a Blackberry serial cable to see if the terminal server client recognises that as a device.

CJ - Can you elaborate on what you're talking about there?

I know the Blackberries sync email wirelessly but I would also like the calendar and contacts to sync as well.
]]> Basic Exchange deployment question! timcunnell http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29317&REPLY_ID=139736 Exchange Thu, 20 Nov 2008 09:51:52 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29317 Quote:
Cheers Joe - I guess planning the disks is quite important! I don't suppose that our number of email accounts will grow far beyond 200. What I do intend to do is impose quotas on individual mail box size. I can't imagine that users need more than a maximum is 1GB - with the possible exception of directors? Obviously within these limits 200 users with 1GB mail boxes is 200GB approx. so well within the 500Gb I am planning - aprt from operating system and applicaiton overhead is there anything else I am missing?
Also - Outlook 2000 with Exchange 2007 - is that gonna work??
Cheers!]]> OL looks for GAL Server outside its site???.. MadCow http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29227&REPLY_ID=139735 Exchange Thu, 20 Nov 2008 09:46:29 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29227 Quote:
Check these ....
http://support.microsoft.com/kb/272290/
http://support.microsoft.com/kb/319206/

]]> How to set up the client for MUVPN jaxdave http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=18328&REPLY_ID=139734 Miscellany (Technical) Thu, 20 Nov 2008 09:44:11 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=18328 Quote:
quote:
Originally posted by jk7173

I am a network admin in Dallas and recently enabled muvpn on my firebox and installed the client for all my home based users. Everything works fine until someone's password changes and then they are left unable to log on or worse - unable to change their passwords. This is something that they were all able to do with the previous MS RAS Server based VPN solution via pppt and so I now have dozens of frustrated users whom I am having to tell to go back to the OLD VPN to change their passwords and then even when they do that and try the muvpn they still cannot connect (probably because the old password is cached) BUT my primary issue is that they cannot change their passwords when prompted to do so when they log on. They all receive the pap/chap error and this is from XP and Vista based machines... Any help would be appreciated. I have opened a ticket with Watchguard but they are so far unable to provide me with a solution.


Another option is that If you utilize outlook web access is to have them change their password from there]]> Seek Advise wobble_wobble http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29269&REPLY_ID=139732 Exchange Thu, 20 Nov 2008 09:18:12 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29269 Quote:
Keep the faith and document everything.]]> Amazon Kindle vs Sony Reader DennisMCSE http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29211&REPLY_ID=139728 Off Topic Banter Thu, 20 Nov 2008 08:41:34 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29211 Quote:
So I guess nobody has tried the Sony Reader then as to how good that is. The Kindle only seems to work in the US, but the Sony Reader works in Canada as well to buy books and stuff, which is why I wanted to see if anyone had tried the Sony product to see how it compares with the Kindle.

http://www.sonystyle.com/webapp/wcs/stores/servlet/ProductDisplay?catalogId=10551&storeId=10151&langId=-1&productId=8198552921665562069

"Begin a new chapter with the PRS-700BC Reader Digital Book. Boasting an impressive 6.0-inch, touch screen display, this Reader uses paper-like E Ink® technology which makes it easier to read, even in bright-light situations. In addition to a built-in light, there's an interactive touch screen that lets you turn pages with the slide of a finger or activate the bookmark. You can also create annotations with a virtual keyboard, highlight text with a stylus pen, search for text in your digital book, and easily adjust the font size. A faster processor gives you quicker response times when opening content or turning pages. Ideal for travelers or people who like to read while on the go, the PRS-700BC holds approximately 350 digital books."

]]> RODCs in the DMZ tonyFSMO http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29295&REPLY_ID=139727 Windows Server 2008 Thu, 20 Nov 2008 07:44:13 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29295 Quote:
Hey PT sorry I missed your reply yesterday. The scenario is that the segment will have not only the DC and member hosts, but other computers on campus that are not part of domain: dorm room computers, college library computers, etc. True the DC will not be public facing, but from my perspective it feels like a DMZ since I don't control the hosts on the segment.

I was thinking a hardened server core RODC with IPSec isolation. I think I'm just a little paranoid given the remote site is not controlled by corporate at all.

Thanks for the ping back PT.---Tony]]> Refridgerator For You HP Blade Fans Playwell http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29316&REPLY_ID=139725 Off Topic Banter Thu, 20 Nov 2008 07:02:29 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29316 Quote:
love it!

Opens a whole new dimension of customizing kitchen equipment. Examples:
Microwave with a front of a tape unit
Dishwasher with a SAN front. Or with those old fashioned magnetic tapes


]]> Microsoft Antigen for Exchange 2003 Enterprise Jazzy http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29286&REPLY_ID=139715 Exchange Thu, 20 Nov 2008 02:42:30 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29286 Quote:
quote:
Originally posted by angel

I see few engines and all take like 2gb of ram. the paging files is always at high and everything points to this software.

Like I said before, you can tune the application by modifying the bias settings. A higher bias will result in more engine used to protect the e-mail, a lower bias will use less or one engine and will consume less memory. All the information is in the url I gave.
quote:
what is the situation where this app is most useful? bigger environments?

It's suitable for any environment where the availability and integrity of the data is important.
quote:
I run small shops without any AV, scanning app, etc., and I've never had a casualty.

Congratulations, but I would never take this risk and advice my customers, large and small, to spend a couple of € (or a lot of $ [:)]) on decent AV protection software.]]> Weird Issue - Date moves forward by a month! don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29307&REPLY_ID=139714 Windows XP Professional Wed, 19 Nov 2008 23:27:26 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29307 Quote:
http://eventid.net/display.asp?eventid=40961&eventno=1398&source=LsaSrv&phase=1

There is a lot on that event ID but the closest to your situation is:

"Basically what was happening was that the XP workstations affected were set to sync to an external time source rather than with their domain controller. Run the following while logged on as administrator to get rid of this log entry:
1. Stop the Windows time service by going to Control panel/Admin tools/Services.
2. Open a command prompt and type “net time /setsntp: <IP address of domain controller>”.
3. Restart the Windows time service and the message should go away."]]> Mark Russinovich new blog post JSCLMEDAVE http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29315&REPLY_ID=139712 Miscellany (Technical) Wed, 19 Nov 2008 22:34:36 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29315 Quote:
already posted http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29300]]> Diferences on XP SP3 MSDN ISO Images. softgil http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29313&REPLY_ID=139709 Windows XP Professional Wed, 19 Nov 2008 20:23:19 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29313 Quote:
Many thanks for your prompt reply and enlightenment, Slister.
]]> Bossman on the front page of Technet Edge Dave Sweatt http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29292&REPLY_ID=139708 Miscellany (Technical) Wed, 19 Nov 2008 18:52:02 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29292 Quote:
"Ah, that was covered in Mark's talk on giving presentations at the Forum last year. Always try to be the best dressed person in the room. It has an effect on people."
It really does. I was taught that a long time ago when I played music professionally. Wearing a suit shows respect to the music,or your topic if speaking, and people really respond to it.
Try it out. Go into an unfamiliar store in your tee shirt and shorts and make a transaction. Then go back the next day in a nice suit and see how differently you're treated. You gain a lot of respect by SHOWING respect.]]> Server+ Passed Exams Xenophane http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29289&REPLY_ID=139706 Off Topic Banter Wed, 19 Nov 2008 18:26:33 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29289 Quote:
Congratulations Nikolas...]]> Redundancy for single Front End server clarinathan http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=28964&REPLY_ID=139705 Exchange Wed, 19 Nov 2008 18:18:28 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28964 Quote:
I must admit NLB seems like a black art!

From my point of view, so long as traffic is happily being shared between the boxes I would be satified...
Cheers
Nathan]]> MS Ending Subscription to AV Service Live One Care Xenophane http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29309&REPLY_ID=139703 Microsoft News Wed, 19 Nov 2008 18:16:18 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29309 Quote:
It seems that they will take out the System optimization part and the backup part... Dont know what will happen with them afterwards.]]> Backup Exec 11d - Oh woe is me. wobble_wobble http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=28344&REPLY_ID=139700 Miscellany (Technical) Wed, 19 Nov 2008 17:14:38 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28344 Quote:
Pat,

where or what is GRT in; shadow protect?]]> DNS Forwarding .... wobble_wobble http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29221&REPLY_ID=139692 Active Directory Wed, 19 Nov 2008 16:08:12 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29221 Quote:
You will have a hard time trying to see what DNS server a client is using unless you only have 1 dns server configured on the client.

Are you sure that the DC's have access to a gateway to the net and are not protected from accessing your ISP DNS Servers or Root Hints, a network trace on one of the DC's will give some answers. If they will only listen to 'known' DNS servers and they couldn't talk to your main DC's/DNS servers, then that may explain why you lost DNS.
Did the clients lose logon ability? Or just browsing of the net?]]> Enforce Non-Dictionary Passwords arman.hossain http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29294&REPLY_ID=139689 Group Policies Wed, 19 Nov 2008 15:05:59 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29294 Quote:
Thanks Jazzy.]]> No package... Error message on 2008 server cnapierala http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29310&REPLY_ID=139688 Group Policies Wed, 19 Nov 2008 14:35:58 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29310 Quote:
Thats a good point. It is a x64 2008 server. All of my 2003 servers are x86.

Here are the error messages:
Event ID 105
Software Installation was unable to add the package AutoCAD Civil 3D 2009 to the DS. The following error was encountered: No package in the software installation data in the Active Directory meets this criteria.

and

Event ID 103
Software Installation failed to deploy package C3D.msi. The following error was encountered: No package in the software installation data in the Active Directory meets this criteria.
]]> DNS on DC failing hboogz http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29306&REPLY_ID=139687 Active Directory Wed, 19 Nov 2008 14:29:13 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29306 Quote:
I ran a netdom resetpwd /server %childdc% userd: /pd:* on the problematic child dc. I did this whilst kdc was stopped. it ran succesfully, restarted KDC, restarted the box and DCDIAG is not outputting anymore errors.

However, I do believe replication is still broken, but i will wait another 30 minutes]]> Add Trusted Sites Via GPO dmarelia http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=26106&REPLY_ID=139686 Group Policies Wed, 19 Nov 2008 14:26:06 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=26106 Quote:
Jonathan-
I don't think using GP Prefs for managing trusted sites is supported. I think this is one of those areas where they did not add support in GP Prefs. As a result, I think you need to use either Admin. Templates or IE Maintenance to set policy.

]]> Java for W2K8 - 64 bit (or not) ??? aval http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29311 Windows Server 2008 Wed, 19 Nov 2008 14:03:54 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29311
The Power Alert software will not open. It looks like there is not a program that will open "paconsole.jar". So it seems like it needs Java to open itself (or something like that). Java is presented as a requirement, so that would make sense.

But the Java website download page does not show a version for W2K8, 32 bit or 64 bit.

http://www.java.com/en/download/manual.jsp

A Sun forum thread shows that there is not one that works:

http://forums.sun.com/thread.jspa?threadID=5267144

But that threads old.

Or:

http://forums.sun.com/thread.jspa?threadID=5290255

So, anyone running Java on W2K8? How did you do it?

Second question - how much of a security risk could running java represent? Would that risk come into play if you were surfing the web from the server in question - or even if Java was just installed?]]> Changing pwdLastSet for multiple users chaos http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29308&REPLY_ID=139679 PowerShell Wed, 19 Nov 2008 12:59:50 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29308 Quote:
That's it. Guess I was trying to make it too difficult :-)

Thanks!]]> Windows 2000 ADI DNS rebuild? tmatthews http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29305&REPLY_ID=139670 Active Directory Wed, 19 Nov 2008 11:58:48 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29305 Quote:
Thanks for the help. I'll give that a try and let you know how I get on. Sounds like a quicker option than starting again.
Cheers
Tom]]> Certifications itechsolutions http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29261&REPLY_ID=139663 Off Topic Banter Wed, 19 Nov 2008 11:28:22 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29261 Quote:
Max does make some good points about IT Director but they do come by a little bias to me because he had a bad experience. I know there is a lot of business aspects behind that position (Not all bad) but I want to get well rounded in the field, after being a systems administrator for a while get some business related experience and take that and combine it with the technical experience and then see where I want to go. Maybe a consultant firm that I want to start. I really don't know yet, but I will be ale to better decide after the experience I want to get.

I know some technical people are not cut out for the politics behind IT, but in my position I work closely with the IT Director and create cost analysis and other items such as IT Policy documentation actually most of it I have created. Everything I have implemented here has a Policy behind it. So I am well aware of the duties that come with an IT Director. The more will rounded I get the more opportunities I will have to decide what I want to do. Not only that Higher up positions tend to make more money and that's definitively a factor.]]> downside for "Closest GC=1" ? Pieter http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29298&REPLY_ID=139655 Active Directory Wed, 19 Nov 2008 10:29:57 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29298 Quote:
It is a single-domain forest. Thanks.
]]> Windows 2008 HPC? joe_elway http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29297&REPLY_ID=139652 Windows Server 2008 Wed, 19 Nov 2008 09:55:31 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29297 Quote:
Many computers at once will work together on complex tasks, e.g. Ferrari are using HPC for simulating car performance and aerodynamics. A university in Northern Ireland were a TAP customer to use it for complex mathematics.

The traditional "cluster" most of us are familiar with is "failover clustering", i.e. one node does one job, e.g. runs a SQL database. HPC clusters share work, e.g. throw more processors from many machines at one complex task.]]> Strange Issue - Date changes to the future! petrus http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29303 Windows Server 2003 Wed, 19 Nov 2008 09:49:45 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29303
One of our users is experiencing a very strange and intermittent problem. His date is moving 1 month forward! He is running Windows XP Pro (SP3) in a Windows 2003 AD domain. In the Windows System event log we are seeing the following entries. If you notice you will see a date of 19/12/2008. We have checked his time zone and it is correct. This has already happened twice today. I cannot seem to find a solution to the type of error messages I am seeing in the system event log.
He logs onto our domain without any issues. Could someone please shed some light on what could be causing this?
The AD server is running Windows 2003 Server with SP1.
The server's clock is correct.

Many thanks in advance!
Pierre

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 19/12/2008
Time: 14:31:27
User: N/A
Computer: SAMN14
Description:
The Security System could not establish a secured connection with the server cifs/adserver.domainx.local. No authentication protocol was available.

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 19/12/2008
Time: 14:43:30
User: N/A
Computer: SAMN14
Description:
The Security System could not establish a secured connection with the server LDAP/adserver.domainx.local. No authentication protocol was available.

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 19/12/2008
Time: 14:46:27
User: N/A
Computer: SAMN14
Description:
The Security System could not establish a secured connection with the server ldap/adserver.domainx.local/domainx.local@DOMAINX.LOCAL. No authentication protocol was available.
]]> Windows Explorer Not working...Vista don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29296&REPLY_ID=139644 Windows Vista Wed, 19 Nov 2008 09:30:01 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29296 Quote:
Look at the event viewer first.


http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1260280&SiteID=17

Steve_in_VA solved the problem by shutting user access control. ^^]]> Windows 7 DennisMCSE http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=25447&REPLY_ID=139641 Microsoft News Wed, 19 Nov 2008 09:26:25 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=25447 Quote:
I agree with Aiden. If I remember correctly, Microsoft spent a lot of time in the design and development of Vista, but then the last six months they seemed to rush the fit and finish to get it out the door for their November RTM and the January Launch. And I think it was the fit and finish of the product is what was getting all the complaints. By fit and finish, I don't mean the pretty look of Vista, but the things that were driving people crazy (UAC, driver issues, etc.) that didn't seem ready, but they wanted to get Vista out the door because of all the bad press about how long it takes Microsoft to get a product out the door. So Microsoft was in a lose/lose situation dealing with bad press about how they never meet deadlines or dealing with bad press about the product not being ready when it does launch.

]]> Pushing the Limits of Windows: Virtual Memory JSCLMEDAVE http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29300&REPLY_ID=139638 Miscellany (Technical) Wed, 19 Nov 2008 09:21:55 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29300 Quote:
Thanks Dave!

Boy I WISH! Right now its Percocet for pain & Ondansetron for nausea...]]> Proxy Settings for laptop users wobble_wobble http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29268&REPLY_ID=139635 Group Policies Wed, 19 Nov 2008 09:21:41 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29268 Quote:
Use a script that applies to an OU that the mobile computers are a member of. That way the script applies when they log onto the network, and when they logoff run the script to remove the policy, no confusion on where, when, etc and no user interface.

If you want send me a mail offline and I'll forward on a proxy on/ proxy off reg files you can run from a GP.

But this is the Reg Key the edits take place in...
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

edit - added reg key]]> Server Hacked don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29287&REPLY_ID=139637 Windows Server 2003 R2 Wed, 19 Nov 2008 09:17:47 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29287 Quote:
I would forget about court unless you want more gray hair. I mentioned the forensics for future protection, nothing else.]]> SP1 rogerdodger http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29299&REPLY_ID=139631 Exchange Wed, 19 Nov 2008 08:53:49 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29299 Quote:
Well thank you for the nice information.
Thanks
quote:
Originally posted by Jazzy

Hi Rodger,

Version 8.1 is Server 2007 with SP1 installed, otherwise it would version 8.0. If you're interested, there a lot more version numbers here: http://support.microsoft.com/kb/158530

Rollup packs are more difficult, there's no reference to them in the GUI nor in the Exchange Management Shell so you need to read in the registry to see which RU pack is installed. Or in Add/remove programs of course, but that's not really an option in a large or scripted environment.
]]> Downloaded Windows Updates in 2008 Jazzy http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29205&REPLY_ID=139629 Windows Server 2008 Wed, 19 Nov 2008 08:53:22 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29205 Quote:
I did a second test on my home computer and it deleted 1.4 GB. Unfortunately I monitored the Windows directory and not the WinSXS one...]]> Clients Authenitcate Outside their ADSite - ??? wkasdo http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29271&REPLY_ID=139627 Active Directory Wed, 19 Nov 2008 08:49:34 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29271 Quote:
I removed the trailing period from the URL. Should work now.]]> EventLog Error Events jond http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29263&REPLY_ID=139622 PowerShell Wed, 19 Nov 2008 08:21:11 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29263 Quote:
quote:
Originally posted by SAPIENScripter

The Get-Eventlog cmdlet only works with local computers. You'll need to use WMI to query remote event logs.

get-wmiobject win32_ntlogevent -computername XXXXX -filter "logfile='system' AND type='error'" | select -first 20


Nice!!!
Thanks!



]]> Win 7 Overview PPT is up downtime http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29273&REPLY_ID=139611 MR&D News Wed, 19 Nov 2008 04:53:13 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29273 Quote:
Thanks Mark, that's a very interesting early overview of the product.]]> How to enable ping (ICMP) in Windows 2008 ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29202&REPLY_ID=139609 Windows Server 2008 Wed, 19 Nov 2008 04:48:11 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29202 Quote:
Right. On the 2008 machine run the following command from an elevated command prompt:

NETSH ADVFIREWALL SHOW CURRENTPROFILE


Look at the top of the output for the profile name. I'm guessing it's using the PUBLIC profile. You now need to find out why it's using this, and rectify why, as opposed to modifying the public rule.

Obviously you go ahead and do what you want, but in my opinion, the public profile shouldn't be modified only the domain should, as that's what should be used.

I'm betting you've got more than one NIC and they're not teamed...
]]> Deny network access to built-in admin account ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29169&REPLY_ID=139607 Active Directory Wed, 19 Nov 2008 04:37:31 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29169 Quote:
I was trying to say to use squid if the load is higher as the h/w stated (in the URL to the other post) is poor. I don't know how well ISA scales as I haven't looed at it in three years...

Maybe squid isn't appropriate? I don't know. But the h/w is lame and something is better than nothing right?]]> Mailbox Manager Report Jazzy http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29293&REPLY_ID=139604 Exchange Wed, 19 Nov 2008 04:11:06 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29293 Quote:
So true.]]> Active Directory Design for demergers clarinathan http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29266&REPLY_ID=139591 Active Directory Tue, 18 Nov 2008 16:10:00 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29266 Quote:
That's what I told them!
Thanks Paul.
Cheers
Nathan]]> Recursive AD Group Members wkasdo http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29288&REPLY_ID=139589 Scripting Tue, 18 Nov 2008 14:06:39 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29288 Quote:
You are not the first to write such a script... I did one too, and it had a problem. I think yours has it too. What happens if you have circular group membership? And for that matter, when you have members from another domain or even another forest?

enjoy ;-)]]> LDAP Queries wkasdo http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29277&REPLY_ID=139588 Active Directory Tue, 18 Nov 2008 14:01:53 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29277 Quote:
That's an illegal query. The & sign means that all of the bracket pairs following it should be true. Without an operator (&, | or !) the expression is incomplete. So it should be written like this:

&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536)

or depending on what you use to query (ldifde is picky, for instance)

(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))]]> Thank you Mark JamesNT http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29272&REPLY_ID=139578 Off Topic Banter Tue, 18 Nov 2008 11:44:51 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29272 Quote:
There's an audio track?

JamesNT]]> Creating certificate requests for Exchange 2007 aval http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29239 Exchange Tue, 18 Nov 2008 11:34:50 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29239 Quote:
]]> Testing sharing encrypted files doesn't work thedrumdoctor http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29291&REPLY_ID=139576 Miscellany (Technical) Tue, 18 Nov 2008 11:17:31 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29291 Quote:
Noted, and it has been moved.]]> Encrypting A Shared Folder thedrumdoctor http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29276&REPLY_ID=139575 Security Tue, 18 Nov 2008 11:13:27 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29276 Quote:
Taking the advice from don2007, I'm moving another topic on this subject here and closing the other (if I can).

I'm testing sharing encrypted files and folders with other users and it's not going well. I've read the stuff about certificates and EFS in Mark's 2003 server book and that's about all the background I have so far on EFS.

I am working under a Win2k domain with only one DC. Certificate services hasn't been installed yet on the DC, but I was under the impression that unless I was going to issue certificates for email and website services, this wouldn't really effect the functionality of encrypting folders. Besides that, I didn't like the one-shot approach of making this DC with its older hardware the certificate authority of the domain. So onto the steps I have taken in my experiment.

1.) Signed onto the DC under the domain administrators account and created a folder on the server that all users can access.

2.) Created a test txt file and stored it in the folder, then encrypted the folder, choosing to encrypt all subfolders\files.

3.) Opened the administrator personal certificates store in MMC and located the certificate for file recovery.

4.) Exported the certificate to a folder on the server all users can access (this will be deleted after the experiment of course!) where it saved as a pfx file.

5.) Logged onto an XP PC as an ordinairy user and opened the personal certificate store for that user in MMC.

6.) Imported the pfx file I had saved earlier into the Personal\Certificates folder in MMC.

7.) I then located the folder encrypted under the administrator account and attempted to open the txt file I had created. This resulted in an 'Access is denied' message.

Now, to my mind, I have a certificate which should be able to open any file encrypted by the administrator account but obviously this is wrong. When I examine the certificate it says 'You have a private key that corresponds to this certificate'. I'm guessing it's a public key that I am needing to have in order to read any files encrypted with a private key and alll I have done is to import a certificate that can be used in file recovery scenarios.

I've looked at an open source PGP tool called GPGee but the manual's that you need to read to get into it are all in German! I'd like to perservere with Windows EFS if I can rather than go third party, so can anyone shed any light on where I'm going wrong here?]]> NAT Clients connecting to server share don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29280&REPLY_ID=139568 Windows Server 2003 Tue, 18 Nov 2008 10:10:07 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29280 Quote:
http://support.microsoft.com/kb/890413

It doesn't look like much of a solution, but that's what MS says.]]> forced run don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29264&REPLY_ID=139566 Windows Vista Tue, 18 Nov 2008 09:58:54 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29264 Quote:
Ankur3020: I suggest that you change the subject. Talk about something other than intentional damage to a system.]]> Report on "Inherit from parent" permissions maxhunt http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29278&REPLY_ID=139557 Windows Server 2003 Tue, 18 Nov 2008 08:29:13 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29278 Quote:
This tool SETACL may have a reporting switch, though it seems primarily designed to change the permissions/inheritance. The link below to the documentation page also had some useful info about how inheritance works. So not much use really.
There seems to be a dearth of info about the inheritance flag.

http://setacl.sourceforge.net/html/doc-basics.html.
Max]]> AD 2000 to AD 2003 - What If? maxhunt http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=26163&REPLY_ID=139554 Active Directory Tue, 18 Nov 2008 07:58:35 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=26163 Quote:
WOW. I've just read the whole four pages of this saga. An interesting but frustrating read. What a joke that admin is.
Craig, you have the patience of a saint!

Does anyone remember what Craig's ORIGINAL question was??
How to recover from a bust AD :-
my favourite method, used recently, is simply to back it up using good old NTbackup, (system state and sysvol for AD, or to replace the whole server a full backup)and restore accordingly (authoratitive or not depending on what the original problem was).
Cloning is a good way to completely screw up AD, also...
Max]]> FWall: what is "Remote Administration" exception? ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29283&REPLY_ID=139543 Windows Vista Tue, 18 Nov 2008 06:35:27 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29283 Quote:
Remote Administration is a capture all type rule that enables most remote RPC based administration. You can get specific and only open certain groups, or you can simplify administration by enabling this rule.

EDIT: Dumb answer; apologies.]]> Opening Port - 1023 Jazzy http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29270&REPLY_ID=139541 Windows Server 2003 R2 Tue, 18 Nov 2008 06:31:17 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29270 Quote:
You can always allow the firewall to accept inbound traffic at a specific port, but without a proces running to accept this traffic it's like opening a door with nothing behind it, or a brick wall.]]> Best way to upgrade from 2003 R2 ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29236&REPLY_ID=139538 Windows Server 2008 Tue, 18 Nov 2008 06:23:47 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29236 Quote:
Introduce a new freshly built 2008 server after performing the pre-requisite steps (ADPREP).
Don't bother upgrading the OS. There's no need and you introduce unnecessary complexity.
If you've only got one DC in the parent domain I would introduce a new 2008 box, demote the existing box, disjoin from the domain, rebuild as 2008 and promote leaving you with two 2008 DCs. In between removing the 2003 DC and reintroducing the physical h/w as a 2008 server I'd raise the domain functional level to 2008 and migrate to DFSR for SYSVOL. Performing the migration with but one server is the easiest way (although it's simple with two too).

You don't need to run the DOMAINPREP in the child domains until you're ready to introduce 2008 DCs into those domains.]]> "The parameter is incorrect" ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29290&REPLY_ID=139537 Group Policies Tue, 18 Nov 2008 06:19:41 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29290 Quote:
Logon to the PDCe with THE administrator account and check the permissions on the GPO and the membership of the Administrators and Domain Admins groups.

Anyone "accidently" implemented restricted groups at a rather high level in the tree? Some malicious (or ignorant) users messing with group membership(s)? Anyone implementing a GP management solution, e.g. AGPM, QGPM, etc.]]> Roaming Profile and Folder Redirection fragility ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29038&REPLY_ID=139536 Windows Server 2008 Tue, 18 Nov 2008 06:17:20 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29038 Quote:
With all due respect Darin, everything you describe is application issues. Intel shouldn't be trying to write to C:\Users\username\AppData if that isn't the correct path! They've written some shoddy code. They need to fix it. The same is true of FireFox. If they're writing code that can't work with UNC paths they're doing one of two things:

1. Developing code for a specific target audience, i.e. the home user.
2. Not thinking about all usage scenarios.


I've deployed folder redirection and don't recall seeing that many issues, although that might be a business problem, i.e. there are issues that aren't being fed back to the architects and are continuously being dealt with by the guys on the ground...
]]> Server Core for Windows Server 2008 R2 ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29240&REPLY_ID=139535 Windows Server 2008 Tue, 18 Nov 2008 06:03:29 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29240 Quote:
Great news that AD CS is now available! IIS7 including ASP.NET and PowerShell is also good news.

I'm not sure I agree with the comments on WOW64. I think having to install it is the way forward. If apps don't work without it, have the deployment instructions mandate that it be installed and the installation routine verify this (and add it if it isn't there already).

Arguments against it are from lazy developers IMHO... [:P]
]]> Installing Certificates thedrumdoctor http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29274&REPLY_ID=139534 Active Directory Tue, 18 Nov 2008 06:01:33 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29274 Quote:
Unfortunately, we have no choice but to generate certificates on a DC. However, the idea of a VM doing the job does seem the most attractive idea as it gets rid of the hardware ageing issues.]]> IP's of client session ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29220&REPLY_ID=139531 Terminal Server / Services Tue, 18 Nov 2008 05:47:52 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29220 Quote:
Not without more info. Please describe how external users access your internal TS server(s).]]> Trusts ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29201&REPLY_ID=139528 NT 4 Server Tue, 18 Nov 2008 05:40:43 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29201 Quote:
Look in the AD forum, as well as the NT and 2003 forums.

Essentially, to upgrade an NT domain to AD you literraly upgrade the NT PDC OS to the new version which automatically triggers DCPROMO which will update your domain. The general advice is to stand up a new NT4 BDC VM, make it the PDC, upgrade to 2003, then add a new freshly built 2003 box and demote the VM.

Don't go to 2000 now. It's about to end extended support. Implement 2003 R2.

As for trusts between NT4 and 2003 yes, that's doable but you'll have to relax the session key strength (GPO setting). If the NT systems are running SP6a (surely?!?) you don't need to worry about the SMB stuff that you'll find when you Google. You only need to turn off the strong session key.
]]> Group Policy Software Rollout ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29210&REPLY_ID=139524 Group Policies Tue, 18 Nov 2008 05:33:18 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29210 Quote:
To start with you need to change the scope of the GPO so that the clients are no longer processing it. Personally, I'd always use filtered GPOs for this kind of thing, that way you have a lot more control over what processes the installation as it requires addition to a group plus a reboot.

As for how GPO will work when it drops out of scope I don't know...
]]> Inconsistent View of GPO ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29207&REPLY_ID=139523 Group Policies Tue, 18 Nov 2008 04:39:32 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29207 Quote:
Bizzare. Sounds like a bug. Were all GPOs modified or just a subset? If the latter, perhaps there's a specific value in there (although I can't think of many instances (off the top of my head) where the name would be used in a way that couldn't be cracked (resolved) to the SID and thus name changes reflected).

Are you able to test again? If that box is about, promote it, rename it and check the GPOs. [:D] I appeciate that's a big ask. Or perhaps a new VM DC...
]]> Advise on setting up OU’s for departmental separat ptwilliams http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29216&REPLY_ID=139522 Group Policies Tue, 18 Nov 2008 04:35:19 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29216 Quote:
If we're just talking about drive mappings then I would use GP Preferences to deliver this. Failing that I'd use a logon script delivered via GPO (i.e. not via the AD user properties). I wouldn't bother implementing multiple OUs and policies just for this.]]> Internet Authentication service in 2003? wkasdo http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29255&REPLY_ID=139517 Windows Server 2003 Tue, 18 Nov 2008 04:19:23 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29255 Quote:
> Was this to regulate access to the wired network - so not just anyone could plug in their laptop and have physical access?

Exactly.]]> XP Pro Bug? Slow Link Detection on LAN Anomaly IT_GURU http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29249&REPLY_ID=139511 Windows XP Professional Mon, 17 Nov 2008 19:45:21 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29249 Quote:
Your answers aren't lame at all, Mark. They are very logical. Sorry I didn't mention that I did sysprep. I haven't tried SP3, though I did look through the list of fixes and didn't see anything related to slow link on LAN, or time processing issues so I figured I had found something new -- I should have tried that anyway. I will give SP3 a try once I get some downtime. I'll post back with the results. I guess I could also try a fresh install. Although it is hard for me to justify spending any more time on this as I have what works for me.

Josh]]> Background before logon itechsolutions http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29285&REPLY_ID=139509 Miscellany (Technical) Mon, 17 Nov 2008 18:53:38 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29285 Quote:
Thanks that did it!]]> Strange Exchange problem angel http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=27016&REPLY_ID=139508 Exchange Mon, 17 Nov 2008 18:12:06 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=27016 Quote:
Hey Curt,

did you get to remeber what that command was to suspend antigen?

also, is this software really needed? or perhaps recommended? what's your take on it]]> NetWitness releases free version of security softw Lisa http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29284 Cool Links Mon, 17 Nov 2008 16:42:24 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29284 http://www.networkworld.com/news/2008/111708-netwitness-releases-free-version-of.html?hpg1=bn

download:http://download.netwitness.com/download.php?src=DIRECT]]> how do i opt NOT to have a WDS client join domain? arwidmark http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=27457&REPLY_ID=139503 Deployment: Windows and apps Mon, 17 Nov 2008 16:38:39 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=27457 Quote:
You have to modify the wds client unattend.xml file for disk partitioning. It's not the same unattend.xml as yóu use for your image.]]> OUtlook 2K3 - "Unable to display the folder" Perfessor http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29238&REPLY_ID=139501 Office Mon, 17 Nov 2008 16:02:21 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29238 Quote:
Actually, I renamed it (put a 1- in front of it) just in case, and moved it to a diff location. It recreated the .ost and gave the same error msg. I think it may have been a corrupt file in Outlook.

]]> Outgoing mail flagged as spam aval http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29251&REPLY_ID=139498 Exchange Mon, 17 Nov 2008 15:03:59 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29251 Quote:
OK, the Smart Host seems to be working. Thanks to all.]]> LDAPs on 64-BIT 2003 MadCow http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29275&REPLY_ID=139494 Active Directory Mon, 17 Nov 2008 13:31:49 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29275 Quote:

[:D]Yes it had nothing to do with 64Bit. It was a typo.]]> remote desktop buckey http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29282 Windows Vista Mon, 17 Nov 2008 13:07:04 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29282 OWA simplification vs. limiting inbound access. aval http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29281 Exchange Mon, 17 Nov 2008 12:27:17 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29281
http://www.mmmug.co.uk/forums/thread/7497.aspx

I could make the OWA internal and external URL the same.


This is what I what to do: simplify OWA access.

For example:

https://mail.mydomain.org/owa

for both internal and external, rather than one with "mymailserver" (internal) and one with "mail" (external), etc..

Not to mention .loc here and .org there complicating matters further for the average user.

Of course, the best option would be to use this:

mail.mydomain.org

and redirect that to:

https://mail.mydomain.org/owa

with HTTP redirection in IIS 7.

But, externally, wouldn't I need to open port 80, in that case, as well as 443, since https would not be specified from the start?

Besides OWA simplification, just ONE of my objectives, I also want to limit, as much as functionally possible, inbound access to the mail server.

So, I thought I might gain something by only allowing 443 to the Internet and 25 to Postini only (so without 80 = just one less port).


Of course..., I have a handful of people who will probably want to use Outlook 2003/2007 from home... so 110 also?

I'm thinking of having them establish VPN connection first... but that does not facilitate matters...

Now, could ISA offer any advantage in that respect (external Outlook 2003/2007access)???]]> I'm Tired of the Negative Press! Your Thoughts? Curt http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29208&REPLY_ID=139485 Windows Vista Mon, 17 Nov 2008 11:35:37 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29208 Quote:
So what is needed is a series of "In the trenches" articles that say, "And you know, I could not have done that if I didn't have Vista installed".

Make people envious of Vista users. Make third party companies feel shame over not keeping up.

For instance, Hey HP. How come my Dell printer was working with Vista Ultimate 64 bit in two minutes and I am still waiting for a driver that is not universal for my HP Laser printer on my network?

Hey Cisco, Why can't you create a VPN client that works with both XP SP2 and Vista?

Something is wrong with you folks.

If it's there, I haven't seen it. In Fact...... They should be emailing all IT depts that are their customers that improvements are or not available. Not some buried note on their sites.

]]> Upgrade SCCM2007 OS RobertB http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29256&REPLY_ID=139478 Systems Management Server (SMS) Mon, 17 Nov 2008 10:32:09 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29256 Quote:
Thanks Aiden and Rod, I have put it in the System Center community as well. This one I do not have a virtual lab for, maybe it is time to create one.]]> Apply local GPO to a specific local windows XP dmarelia http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29267&REPLY_ID=139477 Group Policies Mon, 17 Nov 2008 10:02:21 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29267 Quote:
You can certainly hack it, depending upon what policy you want to apply. For example, to apply Admin. Template policy to a specific user, you can modify the permissions on the registry.pol file in c:\windows\system32\grouppolicy\user so that only that user can read that file. Other users that try to process it will simply not be able to read it and then will not be able to get per-user Admin. Template settings.]]> Windows Server 2008 DC's keep freezing joe_elway http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29197&REPLY_ID=139471 Windows Server 2008 Mon, 17 Nov 2008 09:13:09 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29197 Quote:
I'm running on DL360/380 G5's and BL460C's. No problems at all once I upgraded the Proliant Support Pack and disabled a couple of Insight Manager agents that were noisy (regarding generic HP assumptions). As James said, I'd contact support.]]> 2008 policies on 2003R2 domain Mark Minasi http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29252&REPLY_ID=139464 Group Policies Mon, 17 Nov 2008 08:16:51 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29252 Quote:
Thanks, Darren -- that is indeed what I was wondering about. I've seen and used the /gpprep switch, I just never knew what it did.]]> Hide User Account Name when Locked FAQS http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29246&REPLY_ID=139461 Active Directory Mon, 17 Nov 2008 07:56:30 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29246 Quote:

So it only works when you apply the hotfix ...weird!]]> diagnostic procedure maxhunt http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29177&REPLY_ID=139457 Miscellany (Technical) Mon, 17 Nov 2008 07:34:39 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29177 Quote:
Making sure the machine is up, check the event log from another machine.
just Right click on 'event viwer (local). and 'connect to another computer'.
Then you can check for clues as to what is going on.
Filemon can be used remotely as well as most utilities.
max]]> Takes Time rogerdodger http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29226&REPLY_ID=139456 Exchange Mon, 17 Nov 2008 07:28:52 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29226 Quote:
Agree with you.
Exchange must be seperate.]]> Permission rogerdodger http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29225&REPLY_ID=139455 Windows XP Professional Mon, 17 Nov 2008 07:14:06 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29225 Quote:
Well good idea friend.
I will test that and see the result.
Permissions read only not only on shared folders its on evrething.
Thank You
quote:
Originally posted by maxhunt

Roger,
Not what I would do. A bit drastic to reinstall XP at this point.

Create a new administrator, with a password and try logging in with that, and then creating the folder. Often an admin without a password on XP can't do certain things, like create a schedule for example...
Dont copy the profile, just create a brand new admin user.[:)]


Also are you saying that a 'shared' folder has read permissions only, or just a normal folder??/

Max
]]> Watson Dump Error rogerdodger http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29265&REPLY_ID=139447 Exchange Mon, 17 Nov 2008 01:14:12 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29265 Quote:
The error comes up when i do the Setup /PrepareAD /on:PutMyOrganizationNameHere.
what i have did after many hours looking for that error.
I did explorer my CD copie all files into a folder on C: drive run the preperation again and the error message didnt comes up.
Well it looks that Watson Dump error was from CD Drive.
Thank you
quote:
Originally posted by aval

quote:
preparation command


Which one?

Setup /PrepareSchema

Setup /PrepareAD /on:PutMyOrganizationNameHere

Or did you just run the setup program as is - I understand that'll work too.

quote:
Install Asp.Net & IIS.


I (also) installed these prerequisites (taken from my notes) before installing Exchange 2007 on W2K3 for practice (but NOT R2):

- .NET Framework 2.0
- Update .NET Framework : NDP20-KB926776-X64.exe
- SP1 for .NET
- MMC 3.0 (already présent in W2K3 x64)
- Powershell 1.0 pour x64
- KB933360-x64 (time zone update)

quote:
An unexepted error has occurred and a watson dump is been genereated:External componets has thrown a exception.


Could you post the dump? I doubt I could understand it but Jazzy or Nathan might.

I tried this for you but I'm short on time myself and don't see what the problem might be just glancing through the results:

http://www.google.com/search?hl=en&q=exchange+2007+An+unexpected+error+has+occurred+and+a+Watson+dump+is+being+generated&btnG=Search

]]> Domain/Forest Trusts wobble_wobble http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29245&REPLY_ID=139443 Active Directory Sun, 16 Nov 2008 19:09:52 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29245 Quote:
Terminal Services Server with a VPN into it. Then if necessary hide the users domain credentials within nested subgroups and have the main 'new users' accounts in-personal, user 1, user 2 etc in a TestDR OU.]]> Which free virtual server - Hyper-V or VMWare? regnak http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29012&REPLY_ID=139429 All things Virtual! Sun, 16 Nov 2008 15:19:43 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29012 Quote:
I'm all in favour of ESX 3i where you need free and if the hardware supports it (VT extensions previously mentioned). My main issue presently is that 3rd party vendors haven't caught up yet....ie backups. VCB costs extra (Foundation license). I like to get image level backups with vRanger but it's not compatible until next year. Veeem is but I've not used it and they throttle backup speeds depending on what you pay.
You can get versions of 3i with integrated hardware agents by downloading the vendor specific version of 3i - HP have one out. This allows you to get better hardware alerting.
Once the 3rd parties have figured out how to integrate succesfully with 3i I'll be a lot more happy!
The only thing I missed today was the ability to clone a VM when using without virtualcenter. I just use VMware Converter to copy my sysprep'd master O/S. Now I'm off to play with one of the many iScsi VMs (Left Hand Networks, EMC Clarion etc)!

Mike]]> I want one....... wobble_wobble http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=24831&REPLY_ID=139426 Off Topic Banter Sun, 16 Nov 2008 14:57:14 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=24831 Quote:
http://uk.youtube.com/watch?v=Z8X-TILdRRg

The day is getting closer...]]> XP Wireless Zero Configuration - SSID Config kwhitney http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29230&REPLY_ID=139418 Windows XP Professional Sun, 16 Nov 2008 12:03:56 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29230 Quote:
Thanks Mark !]]> Recording problem on HP laptop don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29262&REPLY_ID=139411 Windows Vista Sat, 15 Nov 2008 18:09:55 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29262 Quote:
What is the name of the 3rd party program? Doesn't the microphone get plugged into the sound card, in back of the machine where is says mic?]]> F7 Xenophane http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29234&REPLY_ID=139409 PowerShell Sat, 15 Nov 2008 17:05:34 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29234 Quote:
I have used this for a long time... And I have not had it happen to me that it is not working... Have you tried with another keyboard, just to test if it is something with the keyboard.

What keyboard do you have ?]]> NTFS Encryption & FAT thedrumdoctor http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29247&REPLY_ID=139402 Miscellany (Technical) Sat, 15 Nov 2008 11:54:41 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29247 Quote:
Thanks Mark, that clears it up for me. I'll probably have a few more forum questions about EFS in the next week when I'm testing at work...]]> Ready for Exams JSCLMEDAVE http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29250&REPLY_ID=139395 Off Topic Banter Sat, 15 Nov 2008 06:24:28 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29250 Quote:
Good luck Nikolas!]]> Batch File lanerj http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29260&REPLY_ID=139387 Scripting Fri, 14 Nov 2008 18:15:06 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29260 Quote:
Sixdoubleo,

Thanks for your quick response. This script works exactly like I need it to. It is a lot simpler than what I was trying to write. Thanks so much for your help! Have a great weekend!

Lane]]> SCR driving me crazy :-( clarinathan http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29254&REPLY_ID=139386 Exchange Fri, 14 Nov 2008 17:53:46 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29254 Quote:
Ah ok,

What errors were you seeing when you seeded from the LAN?
Cheers
Nathan]]> Microsoft Online Migration Tool clarinathan http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29259&REPLY_ID=139385 Exchange Fri, 14 Nov 2008 17:51:02 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29259 Quote:
It is certainly an interesting proposition.

MSFT vision is that going forward people will have a mix of online and on-premise mailboxes.]]> Cooking for the worker at home jaxdave http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29241&REPLY_ID=139368 Off Topic Banter Fri, 14 Nov 2008 14:13:33 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29241 Quote:
I think I will wait for spring to go camping in the Catskills.

As far as food is concerned. I am just fine with a peanut butter and banana sandwich. Elvis was onto something :)]]> How to auto delete the database.mdb file? pkokkinis http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29257 SQL Server Fri, 14 Nov 2008 13:51:27 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29257 how are lists sorted? redmike http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29232&REPLY_ID=139361 Windows XP Professional Fri, 14 Nov 2008 12:43:13 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29232 Quote:
Thank for doing so much legwork.

I did check an ASCII table before posting but wasn't able to relate it to my question in the same way that you managed to.

Mike]]> 32bit Print Drivers on 2008 server 64bit Mirage http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29077&REPLY_ID=139360 Windows Server 2008 Fri, 14 Nov 2008 12:23:00 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29077 Quote:
Hey Bbacoyiannis,

I had an interesting situation with Windows Server 2008 64 bit and Vista Business 32 bit clients.
I tried to install 64 bit printer drivers on the Server, and that went well. The Vista Machines used them, but printing was unreliable at best.

When I tried to install 32 bit Drivers on the Server, the Server rejected them outright (for an Lexmark, HP and Richo). My solution was to directly connect the clients to the Network Printers. It worked of course, but my Print Server is now broken.

I know this dosent help, I'm just sharing a frustrating experience with you.

Good Luck!
G]]> Exchange failures - because of new admin account? aval http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29224&REPLY_ID=139359 Exchange Fri, 14 Nov 2008 12:20:26 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29224 Quote:
OK, this is a warning for those who, in the future, may try this combination:

- Windows 2008 Server
- Exchange 2007 SP1
- Symantec Mail Security for Exchange version 6

FIRST

You need at least version 6.0.6

SECOND

You still may need to do this (even with 6.0.7):

quote:
Delete the ENTRY at key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\CustomSD

(the entry might look like: "O:BAGUDA;;CC;;;S-1-5-21-1564639177-1417944463-942302423-13664)(A;;CC;;;S-1-5-21-1564639177-1417944463-942302423-13665)" )


(I did)


THIRD

You can only open the console when logging on with the same acount used to install the program. And I doubt it's just something I messed up:

http://www.chicagotech.net/netforums/viewtopic.php?t=2547

FOURTH

You can try this (the Symantec tech support guy did, even if the version # is different), but it won't help (still need to be logged in with account used to install the program):

http://service1.symantec.com/support/ent-gate.nsf/docid/2005121915194554

FIFTH

I learned that Mail Security (for Exchange, in this case) does not offer overall protection for the server: it only scans the mail.

The tech support guy suggested Symantec Endpoint Protection (SEP).

They will apparently work together.

If not, I'll be back... to tell you about it.]]> 2008 Internet Name Server Setup Mirage http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29253 Windows Server 2008 Fri, 14 Nov 2008 12:03:45 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29253 I have two 2008 Standard Servers (DNS-File Server and Exchange) running in a domain behind a firewall.

We have been using a third party to remove spam, but now want to change it so we get our email directly and sort it. I need to create a name server for this.

I know/think I have to create a forward lookup zone for my Domain on my DNS server, and open the port for DNS on my Router to point to that server. But do I need to create a split brain DNS Server?

I basically want to change my Host record from this

ns1.otherguys.com 66.67.68.69

to

ns1.mycompany.com 77.78.79.80

Does IIS need to get involved? It is already installed by default on the Exchange 2007 box.

I would appreciate any input.

Thanks!]]> Where do you store your passwords sixdoubleo http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29233&REPLY_ID=139354 Security Fri, 14 Nov 2008 11:58:19 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29233 Quote:
I use the free program KeePass. It stores everything in an encrypted KDB file. That file is then stored in a secured place which isn't part of our active directory. We also have debated about burning a copy off to CD, flash, etc and storing in a sealed envelope/safe, etc. But for now it's in an audited directory outside of AD.

]]> Unlock locked Vista machine clybstr02 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=28147&REPLY_ID=139350 Windows Vista Fri, 14 Nov 2008 11:39:35 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28147 Quote:
I have noted this bug in Task Manager. If you switch to the Porcesses tab and check the Show processes from all users, then click continue. Now taskmgr is running as admin, switching to the users tab allows you to log off that session.

-Lee]]> Volume Shadow Copies Vanishing timberk http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29131&REPLY_ID=139346 Windows Server 2003 R2 Fri, 14 Nov 2008 11:08:03 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29131 Quote:
Yep, that is the error I recall getting as well.

~tb]]> NAP and Imaging / WinPE clybstr02 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29248 Windows Server 2008 Fri, 14 Nov 2008 10:35:51 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29248
The problem is this breaks my domain join procedure in the corporate image. The DHCP nap is configured to allow Domain Computers access, and deny any others. Now, we could get away with this with a MAC filtering table, where someone imaging sends the MAC address in, and once the image domain join is complete, we remove them from this table. This is a management problem, especially with a training room with 30-50 PCs.

Also, if the domain trust relationship becomes broken on the client, the easiest solution is to put it in a workgroup, and then re-join the domain. DHCP nap would break this as well.

How have other people handled these exceptions,

-Lee
]]> permission to ipconfig .. FAQS http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29244&REPLY_ID=139341 Active Directory Fri, 14 Nov 2008 10:34:32 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29244 Quote:

thnx that did it]]> ESX - common issues iankob http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29242 All things Virtual! Thu, 13 Nov 2008 23:44:38 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29242
http://www.vmwarewolf.com/common-system-management-issues-in-vmware-infrastructure/]]> Allow non-admin to run applications for admins mitachu http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29235&REPLY_ID=139329 Windows Server 2003 R2 Thu, 13 Nov 2008 15:58:12 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29235 Quote:
Check to see what's going on with REGMON and FILEMON and see what that application's trying to do to that may need admin rights, and then relax things accordingly.]]> VMWare MVP wobble_wobble http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29237&REPLY_ID=139321 All things Virtual! Thu, 13 Nov 2008 14:06:22 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29237 Quote:
Is that so I can talk to the Virtual Sales rep when his pos software/ hardware / appliance/ etc don't work right?]]> Outlook Requesting Data MadCow http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29157&REPLY_ID=139315 Exchange Thu, 13 Nov 2008 09:09:03 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29157 Quote:

ok I checked the RPC Average Latency ...it is fine.

But ...

RPC Operations/Sec are through the roof and so is RPC Packets/Sec.

Its appears as if some Outlook Clients may be causing this issue.
We have Blackerry Users whose BB sync with their MBX but through Wireless. Recently we have added BB Software Desktop Clients for few users ..hmmm.

]]> Best Way rogerdodger http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29181&REPLY_ID=139311 PowerShell Thu, 13 Nov 2008 08:07:17 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29181 Quote:
Lucky you[:)] have the DVDs
Time will be good to find learning something new.
quote:
Originally posted by Xenophane

I have the DVD's at home, and have had them for several months but have not been able to find the time to watch them yet :(
]]> problem installing applications on 2003 server megs28 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=28851&REPLY_ID=139310 Windows Server 2003 Thu, 13 Nov 2008 08:01:28 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28851 Quote:
This sounds like a virus, or something that changed your file associations. Usually I've only seen this happen with infected machines, and the virus affects the Install Shield application, etc.

MS has some advice: http://support.microsoft.com/kb/555067

Also try running in using a different account with admin rights, or if no admin rights, use "run as"...although this doesn't always work.]]> VMM 2008 Advice joe_elway http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29222&REPLY_ID=139302 All things Virtual! Thu, 13 Nov 2008 05:04:42 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29222 Quote:
Get PRO Tips (OpsMgr 2007 SP1) integration set up ASAP when installing VMM 2008.

The second problem I had was with Hyper-V hosts in the cluster becoming unmanagable. This led VMM to think my cluster was unsopprtable and thus my VM's were unmanagable within VMM. OpsMgr detected this and the management pack expertise gave me the search term I needed to resolve the issue.

I use restricted groups to control the local admins group. I didn't know that VMM 2008 agents require the VMM server to be a member of the local admin's group on managed Hyper-V boxes. I found a glog entry thanks to the management pack that gave me the information I needed. I updated the GPO, forced policy and restarted WinRM (and thus the VMM agent). A refresh of the affected server and everything was green once again. It's been stable since.]]> Workstation DNS Pieter http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29229&REPLY_ID=139301 Active Directory Thu, 13 Nov 2008 03:27:02 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29229 Quote:
Don't know if this is relevant to you, but my domain is domain.com so all PC's have domain.com as DNS suffix for the machine.

I also have several sites, each site has its own intranet, proxy, sql, fileserver etc... In each site I have a DHCP server that is configured to give site.domain.com as DNS suffix. In DNS a made a subzone for each site. Just simply a subzone, no subdomains in AD.

Result : each client has 2 DNS suffixes domain.com (for the machine) and site.domain.com (for the NIC adapter).

Advantage : i can make generic scripts which uses proxy or intranet or sql etc. No need to use a different FQDN for each site.



]]> Media Player rogerdodger http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29219&REPLY_ID=139297 Windows XP Professional Thu, 13 Nov 2008 00:56:29 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29219 Quote:
Thank you brother.
I did set through Program Access And Defaults
Bingo[:)] working .
quote:
Originally posted by Xenophane

There is not folder options in explorer ??

When you have an explorer window open Tools -> Folder Options -> FileTypes


Otherwise try to go into Set program Access and defaults, usually available in the Start menu, or Add Remove programs.


]]> BITS: Requires Support Range Protocol Header wills3 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29228&REPLY_ID=139293 SUS / WSUS, HFNetChk Wed, 12 Nov 2008 20:24:04 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29228 Quote:
I found a better MS KB:

http://support.microsoft.com/kb/922330

I am using WSUS version 3.0 and there is a different procedure. Its working now!]]> Outlook 2003 fails when creating profile - solved MrEclipseguy http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=24704&REPLY_ID=139290 Office Wed, 12 Nov 2008 19:03:04 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=24704 Quote:
Had a similar issue pop up today where Word (2003) would crash. Same symptoms as my first post on this thread however the difference is that this user had been up and running for quite some time and was having no issues.

Ran through all of the same troubleshooting steps... Removed temp files, chaged the default save location in the registry, Repair, re-install, log on as a different user and the issue did not follow. Recreated her profile and this appears (Knock on wood) to have resolved the issue.

Can I go home now and have a beer...]]> Error opening appointments on resource mailboxes NMDANGE http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29135&REPLY_ID=139283 Exchange Wed, 12 Nov 2008 16:10:25 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29135 Quote:
If I have full mailbox rights, it works ok, but we have users that we don't want to have full mailbox rights to these shared accounts.]]> Antivirus mitachu http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=28858&REPLY_ID=139276 Viruses, worms, and spyware advice Wed, 12 Nov 2008 14:44:40 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28858 Quote:
There's a good thread on selecting an AV package elsewhere on this forum...... somewhere!!
]]> Backup Failure slister http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29223&REPLY_ID=139275 Small Business Server Wed, 12 Nov 2008 14:41:18 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29223 Quote:
Keith
The size is marketing hype. The tapes will be 20/40 GB. 20GB native capacity and UPTO 40GB compressed. It's very rare to get the full 40GB

Steve]]> Store sizing hboogz http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29017&REPLY_ID=139261 Exchange Wed, 12 Nov 2008 10:46:51 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29017 Quote:
All -

I'm working on a sizing a new exchange server but need documented evidence suggesting the benefit of separating the exchange logs onto its own RAID controller in a RAID1 config as opposed to locating the logs and the databases on the same RAID10 array.

The config i have now set is:

Single RAID card

RAID - 1 - OS

RAID -1 - LOGS

logical partitions separating above.

Separate RAID card

RAID 10 - databases

8 146 gb 10k SAS drives in total.

8gb DDR2 MEM.]]> Proxy settings reappearing Pieter http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29215&REPLY_ID=139258 ISA Server Wed, 12 Nov 2008 10:06:06 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29215 Quote:
Maybe a GPO that sets the proxy setting ?

Also look at http://support.microsoft.com/?id=329637


]]> HOWTO: mass disabled mailbox features ivcrieki http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29139&REPLY_ID=139255 Exchange Wed, 12 Nov 2008 09:01:56 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29139 Quote:
You can make it even shorter:

Get-CasMailbox | Set-CasMailbox -OWAEnabled:$false -ActiveSyncEnabled:$false -PopEnabled:$false

- Ilse]]> Removing comment from Mapped Drive ianternet http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29209&REPLY_ID=139250 Windows Server 2008 Wed, 12 Nov 2008 07:16:10 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29209 Quote:
The issue was identified as being the result of some form of cacheing on the local PC's. (Obviously at some time there must have been a comment in the Computer Description).

The cache was tracked down to the following registry key:-

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComputerDescriptions

Once deleted....everything ok.

Cheers

Ian]]> Event 1085 - Internet Explorer Zonemapping arjans http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29206&REPLY_ID=139247 Group Policies Wed, 12 Nov 2008 05:35:21 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29206 Quote:
I checked this, but we don't have any GPO with the “Internet Explorer Zonemapping" option configured
]]> Update for pre installed software .msp frank_cadam http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29218 Group Policies Wed, 12 Nov 2008 04:41:14 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29218
Thanks in advance.
]]> Import mailbox in different locale Jazzy http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29217 Exchange Wed, 12 Nov 2008 03:25:59 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29217
What I want to achieve is that all new mailboxes are in Dutch locale and the mail from the PST-files comes in the Dutch folders.

I'm sure that this is a common problem and it must be well documented all over the internet, but I can't find much information.]]> General question - HyperV, VMware etc joe_elway http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29037&REPLY_ID=139246 All things Virtual! Wed, 12 Nov 2008 02:36:36 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29037 Quote:
On the navigation pane on the left shows that page is under VMM 2007 which I would expect to work on W2003 because it only manages Virtual Server 2005 R2 SP1. The next product up is VMM 2008.

I haven't looked in the last couple of weeks but a lot of the links from the main VMM page were still 2007 oriented which I consider a little confusing. I just googled "vmm 2008 requirements" and went straight to what I needed.]]> Find Out rogerdodger http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29212&REPLY_ID=139244 Exchange Wed, 12 Nov 2008 00:48:48 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29212 Quote:
Well i was very lucky[:D]
And you khnow i was wondering how quick your answer was[:)][:)]
Thank you]]> Proxy setting issue after ISA is gone bhendin http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29107&REPLY_ID=139242 Small Business Server Wed, 12 Nov 2008 00:08:54 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29107 Quote:
Any help on this? A second machine has started manifesting this behavior...apparently resetting proxy settings after a reboot.

I'm thinking it has to be something special regarding being an SBS client. Again, I can't seem to find any GPO or login script doing this, and even if there were it should effect ALL machines, since they all are configured identically.

Any SBS/ISA experts have any idea as to how proxy settings keep reappearing on just a few clients? I have seen this problem mentioned in some other threads out on the internet, but no resolutions are ever mentioned.

thanks!]]> Bluebear jaxdave http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29198&REPLY_ID=139239 All things Virtual! Tue, 11 Nov 2008 20:38:20 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29198 Quote:
Trying to get a beta invite now for kodiak. Very hard to get as it is HOT HOT HOT. If anyone gets some invites please send one along to me and I will let you all if I get some soon.]]> BASH (Bourne-Again Shell) don2007 http://web2.minasi.com/forum/topic.asp?whichpage=-1&TOPIC_ID=29196&REPLY_ID=139236 Miscellany (Technical) Tue, 11 Nov 2008 19:50:38 -0500 http://web2.minasi.com/forum/topic.asp?TOPIC_ID=29196 Quote:
I was running cygwin on Vista. Maybe that was my problem.]]> Internet Start-Ups: MS BizSpark joe_elway http://web2.minasi.com/forum/topic.asp?whichpag