[NTSysADM] OT: web filter for kids

[J- P]

Let me preface this with a Merry Christmas and Happy Chanukah to all-


Getting my niece and nephew their first windows laptops (10 and 8 yr old) * i 
know way too old , but my brother and sister in law are slacking  HAHAHA-  and 
Ipads and kindles will NOT get them ready for the future-


On that note , what is a good home web filter out there- I used Cybersitter in 
the late 90's (still around today)   just wondering what most of you do for 
your kids and family?


TIA


and Happy New Year


Jean-Paul Natola

Re: [NTSysADM] Hmmm....I thought it had reached EOL

[J- P]

Wilson



Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Geoff Taylor 
Sent: Tuesday, December 19, 2017 4:24 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] HmmmI thought it had reached EOL


Look for a Volleyball next week

On 2017-12-19 2:41 PM, Micheal Espinola Jr wrote:
It's a Christmas miracle!

--
Espi


On Tue, Dec 19, 2017 at 7:57 AM, Charles F Sullivan 
> wrote:

Somebody just came in and showed us a package that was delivered today by DHL….



Windows 2003 CDs sent to him by MS in 2006.



Charlie Sullivan

Sr. Windows Systems Administrator

[NTSysADM] Re: HyperV guest failed to launch after crash

[J- P]

fyi


i reied



https://blogs.technet.microsoft.com/rmilne/2014/01/15/hyper-v-could-not-initialize-could-not-create-or-access-saved-state-file/


with no avail

[https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/91/09/metablogapi/image3_521939FD.png]<https://blogs.technet.microsoft.com/rmilne/2014/01/15/hyper-v-could-not-initialize-could-not-create-or-access-saved-state-file/>

Hyper-V Could Not Initialize – Could Not Create or Access 
...<https://blogs.technet.microsoft.com/rmilne/2014/01/15/hyper-v-could-not-initialize-could-not-create-or-access-saved-state-file/>
blogs.technet.microsoft.com
As part of my relaxing holiday, I spent a fair bit of time upgrading the 
hardware in my lab and installing Windows Server 2012 R2 onto all of my Hyper-V 
...






Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of J- P <jnat...@hotmail.com>
Sent: Monday, December 11, 2017 9:45 PM
To: NT
Subject: [NTSysADM] HyperV guest failed to launch after crash


So the HyperV  host (2012r2) crashed today and all but one guest came 
back-online after restart


the error was


An attempt to initialize VM state failed - I got the call while on the road so 
I asked them to "delete the saved state", however there was no option to delete 
the saved state-


It was actually faster for me to pull over create a new VM and attach the disks 
from the failed vm and get it up and running-


All articles point to "permissions error"  but as I check perms on the VHDX 
files they *seem* to have the right permissions- granted since I was able to 
get it up and running its not an urgent issue, but I'm curios as to why 1 out 
of 5 guest VM's failed.


HOST 2012r2,

Guest VM's 2008r2


any thoughts, feedback , comments appreciated


TIA

[NTSysADM] HyperV guest failed to launch after crash

[J- P]

So the HyperV  host (2012r2) crashed today and all but one guest came 
back-online after restart


the error was


An attempt to initialize VM state failed - I got the call while on the road so 
I asked them to "delete the saved state", however there was no option to delete 
the saved state-


It was actually faster for me to pull over create a new VM and attach the disks 
from the failed vm and get it up and running-


All articles point to "permissions error"  but as I check perms on the VHDX 
files they *seem* to have the right permissions- granted since I was able to 
get it up and running its not an urgent issue, but I'm curios as to why 1 out 
of 5 guest VM's failed.


HOST 2012r2,

Guest VM's 2008r2


any thoughts, feedback , comments appreciated


TIA

[NTSysADM] Re: HP scanning losing connection - VPN

[J- P]

correct, but ONLY after they VPN , yet it does not occur in their homes



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Kennedy, Jim <kennedy...@elyriaschools.org>
Sent: Thursday, December 7, 2017 1:05 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: HP scanning losing connection - VPN


Sounds like the printer/scanner is having trouble finding the PC’s then…….



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Thursday, December 7, 2017 10:50 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Re: HP scanning losing connection - VPN



After connecting to the VPN they can ping other PC's and the printer , and I 
have actually confirmed it by adding  the printer using  a TCP port as opposed 
to the HP "discovery"  port, it will print fine but the scanning  continues to 
fail and they actually scan more than they print.



And as I mentioned when they take their laptops home this doesn't occur 
(granted it's not the same exact model HP but its the same software)









From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Melvin Backus 
<melvin.bac...@byers.com<mailto:melvin.bac...@byers.com>>
Sent: Thursday, December 7, 2017 6:56 AM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: HP scanning losing connection - VPN



If the VPN is not doing split tunneling it will break that setup. Easy test, do 
a route print and see where the default route it pointing.  Or trace to an 
external public IP and see if it goes out your local gateway or down the VPN 
tunnel.



Can they ping the other PCs on the network when it happens? Sometimes it’s 
easier to see when you expand the list of symptoms.



--
There are 10 kinds of people in the world...
 those who understand binary and those who don't.



¯\_(ツ)_/¯



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: Wednesday, December 6, 2017 9:01 PM
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] HP scanning losing connection - VPN



soho environment,  5 pc's  using HP's native scanning protocol (twain WIA)



constant "scanner not found" from the pc's  rebooting the the pc's and 
printer/scanner it re-establishes connections- they do use VPN haven't narrowed 
it down yet as to whether or not its the VPN that "breaks" the scanning 
ability-- users claim that "at home it works fine with or without VPN"



looking to get a real "Canon/Ricoh/Xerox" into the office , as the current one 
is a consumer product



any thought's ?




Jean-Paul Natola

[NTSysADM] Re: HP scanning losing connection - VPN

[J- P]

After connecting to the VPN they can ping other PC's and the printer , and I 
have actually confirmed it by adding  the printer using  a TCP port as opposed 
to the HP "discovery"  port, it will print fine but the scanning  continues to 
fail and they actually scan more than they print.


And as I mentioned when they take their laptops home this doesn't occur 
(granted it's not the same exact model HP but its the same software)





From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Melvin Backus <melvin.bac...@byers.com>
Sent: Thursday, December 7, 2017 6:56 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: HP scanning losing connection - VPN


If the VPN is not doing split tunneling it will break that setup. Easy test, do 
a route print and see where the default route it pointing.  Or trace to an 
external public IP and see if it goes out your local gateway or down the VPN 
tunnel.



Can they ping the other PCs on the network when it happens? Sometimes it’s 
easier to see when you expand the list of symptoms.



--
There are 10 kinds of people in the world...
 those who understand binary and those who don't.



¯\_(ツ)_/¯



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Wednesday, December 6, 2017 9:01 PM
To: NT <ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] HP scanning losing connection - VPN



soho environment,  5 pc's  using HP's native scanning protocol (twain WIA)



constant "scanner not found" from the pc's  rebooting the the pc's and 
printer/scanner it re-establishes connections- they do use VPN haven't narrowed 
it down yet as to whether or not its the VPN that "breaks" the scanning 
ability-- users claim that "at home it works fine with or without VPN"



looking to get a real "Canon/Ricoh/Xerox" into the office , as the current one 
is a consumer product



any thought's ?




Jean-Paul Natola

[NTSysADM] HP scanning losing connection - VPN

[J- P]

soho environment,  5 pc's  using HP's native scanning protocol (twain WIA)


constant "scanner not found" from the pc's  rebooting the the pc's and 
printer/scanner it re-establishes connections- they do use VPN haven't narrowed 
it down yet as to whether or not its the VPN that "breaks" the scanning 
ability-- users claim that "at home it works fine with or without VPN"


looking to get a real "Canon/Ricoh/Xerox" into the office , as the current one 
is a consumer product


any thought's ?



Jean-Paul Natola

[NTSysADM] Re: windows 2012 R2 on VMware 5.1.0 SonicWALL NSA4500

[J- P]

I saw something similar once (not sure if it was a sonicwall) but it was 
license related




From: listsad...@lists.myitforum.com  on behalf 
of Scott Schneider 
Sent: Wednesday, December 6, 2017 4:19 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] windows 2012 R2 on VMware 5.1.0 SonicWALL NSA4500


Time to bring in the experts, I’m stumped.



I have a windows 2012 R2 server on VMware 5.1.0 with a SonicWALL NSA4500. On 
the SonicWALL we have and internal and DMZ network, same with the vCenter 5.1.0

The 2012 server was built on the internal network with an IP of 172.16.1.79. 
The server is supposed to replace an old 2003 server in the DMZ.

When on the internal network it pings fine and behaves normally.

I shut down the  2003 server in the DMZ (it pings, gets out to the net and does 
a normal arp –a) and duplicate the IP it uses 172.31.0.3 on the 2012 server.

On the VMware side I switch the network from INT to DMZ. I can ping the server 
OK, get out to the net and do a normal arp -a, but the Websphere app it runs 
doesn’t behave as expected.

If I do an arp –a on the 2012 or 2003 server it shows the default gateway 
172.31.0.1



So I want to put it up on another IP in the DMZ and run the 2 servers in 
parallel. I duplicate the SonicWALL rules and bring it up on IP 172.31.0.6. I 
can’t ping or get out to the net. I try an arp –a and have no have default 
gateway. Monitor sniffs from the SonicWALL show no traffic.

OK I think I messed up the rules. I bring down another server using IP 
172.31.0.4 in the DMZ which can ping, do an arp –a and get out to the net on.

I assign the same IP 172.31.0.4 to the 2012 server and I still get no 
connectivity. It only works if I bring it up on 172.31.0.3. I flushed the arp 
cache on the SonicWALL each time I changed IP’s.

What could be configed in the network on the 2012 server which could cause this 
behavior? It works on the internal side 172.16.1.79 (or any other internal IP) 
or with a 172.31.0.3 address in the DMZ  but no other DMZ IP will work on the 
2012 server.



Scott Schneider
Senior Network and System Administrator

Inscape
T 905 952 4001  |  C 705 716 4540  |  Skype 
sschnei...@inscapesolutions.com

inscapesolutions.com

[NTSysADM] SFP not working on new router, but working old one

[J- P]

issue;


Cisco 4451 router sfp module throws an error upon plugging it in (using onboard 
slot no HWIC)


Take the same sfp to the old 3845 using onboard slot module works and circuit 
comes up


unfortunately  the3845 cannot handle the 1GB circuit any thoughts?


aside from ordering an HWIC  

[NTSysADM] SFP not working on new router, but working old one

[J- P]

issue;


Cisco 4451 router sfp module throws an error upon plugging it in (using onboard 
slot no HWIC)


Take the same sfp to the old 3845 using onboard slot module works and circuit 
comes up


unfortunately  the3845 cannot handle the 1GB circuit any thoughts?


aside from ordering an HWIC  

[NTSysADM] server 2016 vs 2012r2-

[J- P]

Hi all,


I currently have to get a new server for a client that is running 2012r2 as the 
hypver-visor,

since I'm going to get a 2016 license for the server  I will have to downgrade 
to 2012 because what i need is a second file server and all the cals are 2012-


I'm wondering what advantages (if any) would upgrading the hyper-visor to 2016 
give me? (other than extra billable hours 


TIA

[NTSysADM] Re: WOW!!! I had no idea I was going to be honored

[J- P]

Well deserved- Congrats



Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Webster 
Sent: Tuesday, October 24, 2017 12:17 PM
To: NT Issues (ntsysadm@lists.myitforum.com)
Subject: [NTSysADM] WOW!!! I had no idea I was going to be honored


https://www.citrix.com/blogs/2017/10/24/announcing-ctp-fellow-award-a-new-classification/

[https://www.citrix.com/blogs/wp-content/uploads/2017/10/award-1036x479.jpg]

Announcing: CTP Fellow Award – A New 'Classification' | Citrix 
Blogs
www.citrix.com
It is with great pride and joy that I announce a new facet of the Citrix 
Technology Professional (CTP) program: The Citrix Technology Professional 
Fellow Award.





Deeply, deeply humbled and honored



Thanks





Carl Webster

Citrix Technology Professional | iGel Tech Community Insider | Parallels VIPP

http://www.CarlWebster.com

The Accidental Citrix Admin

[NTSysADM] Re: Sonicwall CGSS versus AGSS

[J- P]

found this


https://www.reddit.com/r/sonicwall/comments/5pyez0/cgss_vs_agss/











From: listsad...@lists.myitforum.com  on behalf 
of Jesse Rink 
Sent: Monday, October 9, 2017 3:54 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Sonicwall CGSS versus AGSS



I almost always purchase my Sonicwalls with CGSS (Comprehensive Gateway 
Security Services), unless the customer doesn't want it.


By comparison, I'm wondering if people think the AGSS (Advanced Gateway 
Security Services) which includes Capture ATP is actually worth the extra cost. 
  The only real 'reviews' of it I can find seem to be by SonicWALL people 
claiming how great it is So, I disregard those reviews.  It's "supposedly" 
better against zero day attacks... ?


Even the basic CGSS does cloud based scans for AV and Malware, so not sure why 
AGSS is supposedly better...


Anyone out there with real world experience on AGSS care to comment versus 
CGSS, leaving out the marketing hype?


Thanks.

JR

Re: [NTSysADM] This pleases me...

[J- P]

Congrats Sir Kurt



Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Kurt Buff 
Sent: Friday, October 6, 2017 9:24 PM
To: ntsysadm
Subject: [NTSysADM] This pleases me...

It's a good start
https://www.giac.org/certified-professional/kurt-buff/162966
GIAC Forensics, Management, Information, IT Security 
Certifications
www.giac.org
GIAC provides IT, forensics, and information security certifications for IT 
managers and infosec professionals.




Passed with 85%, in 1h 12m.

[NTSysADM] Redirected prnter spool size

[J- P]

Hi all,


having an issue with redirected printing on 2008 rds,


when the user who is remoted in goes to print something, it spools a huge file-


per this article ,

http://www.bursky.net/index.php/2012/07/printing-slow-in-rdp-session/


the user should set the "print directly to printer",  however, all options are 
greyed out within the server session , and as far as the client goes this 
option doesn't event exist (or at least I cant find it on OSX).


For example a 1mb pdf, spools a 250mb file and it takes forever to print, does 
anyone have any pointers?


TIA



Jean-Paul Natola

[NTSysADM] Re: scheduling iSCSI connections

[J- P]

While its possible , it is less likely as most infections are due to users 
clicking on or opening something , which will not occur off hours.

And in reality the window would be shorter since  it uses CBT,  so on average 
the backups are about 10 minutes for most servers, with the exception of 
Exchange it usually takes about 45 min.


I could theoretically install a new server (off domain) and run the backup 
software on that server which would solve the problem- lets see if I can sell 
them that idea.


thanks






From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Brian Desmond <br...@briandesmond.com>
Sent: Sunday, August 13, 2017 12:06 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: scheduling iSCSI connections


So what happens if your ransomware scenario occurs while the backup is running? 
That invalidates all your backups at that point as well.



Perhaps I’m thinking of something else but all the backup toolsets I’ve worked 
with all push the data over the network to a central system that interacts with 
the backend storage/media.



Thanks,

Brian





From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Saturday, August 12, 2017 10:39 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Re: scheduling iSCSI connections



not sure I follow, the backup runs to a "local disk  iscsi target" then 
replicates offsite- - but I'm  assuming (God forbid) ransomware hits the host 
then it would also encrypt  the  "local iscsi disk" -



tia







From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Brian Desmond <br...@briandesmond.com<mailto:br...@briandesmond.com>>
Sent: Saturday, August 12, 2017 5:51 PM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: scheduling iSCSI connections



Wouldn’t your backup tool be responsible for doing this? This seems very likely 
to fail in some way, shape, or form at some point.



Thanks,
Brian





Thanks,

Brian Desmond



w – 312.625.1438 | c – 312.731.3132



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: Friday, August 11, 2017 12:59 PM
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] scheduling iSCSI connections



Is it possible to schedule iSCSI connections  (connect at 11pm, disconnect 6 am)



We currently backup our hyper-v guests to our NAS which is presented to the 
host via iSCSI,



The goal is  to achieve the equivalent  of ejecting a tape after backup is 
complete, in case of a ransomware infection.



We do also have it offsite, however, I'd much rather restore 6tb locally than 
over the wire.



Any thoughts feedback are greatly appreciated

[NTSysADM] Re: scheduling iSCSI connections

[J- P]

not sure I follow, the backup runs to a "local disk  iscsi target" then 
replicates offsite- - but I'm  assuming (God forbid) ransomware hits the host 
then it would also encrypt  the  "local iscsi disk" -


tia




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Brian Desmond <br...@briandesmond.com>
Sent: Saturday, August 12, 2017 5:51 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: scheduling iSCSI connections


Wouldn’t your backup tool be responsible for doing this? This seems very likely 
to fail in some way, shape, or form at some point.



Thanks,
Brian





Thanks,

Brian Desmond



w – 312.625.1438 | c – 312.731.3132



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Friday, August 11, 2017 12:59 PM
To: NT <ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] scheduling iSCSI connections



Is it possible to schedule iSCSI connections  (connect at 11pm, disconnect 6 am)



We currently backup our hyper-v guests to our NAS which is presented to the 
host via iSCSI,



The goal is  to achieve the equivalent  of ejecting a tape after backup is 
complete, in case of a ransomware infection.



We do also have it offsite, however, I'd much rather restore 6tb locally than 
over the wire.



Any thoughts feedback are greatly appreciated

[NTSysADM] Re: scheduling iSCSI connections

[J- P]

yup, 2012r2


will try that

thanks



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Damien Solodow <damien.solo...@harrison.edu>
Sent: Friday, August 11, 2017 2:18 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: scheduling iSCSI connections


Most likely; depends on the OS of the host. I’d guess that 
‘Disconnect-IScsiTarget’ and it’s Connect- counterpart would do the trick.

Running a pair of PowerShell scripts as scheduled tasks is pretty easy.



DAMIEN SOLODOW

IT Engineering Lead

317.447.6033 (office)

HARRISON COLLEGE



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Friday, August 11, 2017 1:59 PM
To: NT <ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] scheduling iSCSI connections



Is it possible to schedule iSCSI connections  (connect at 11pm, disconnect 6 am)



We currently backup our hyper-v guests to our NAS which is presented to the 
host via iSCSI,



The goal is  to achieve the equivalent  of ejecting a tape after backup is 
complete, in case of a ransomware infection.



We do also have it offsite, however, I'd much rather restore 6tb locally than 
over the wire.



Any thoughts feedback are greatly appreciated

[NTSysADM] scheduling iSCSI connections

[J- P]

Is it possible to schedule iSCSI connections  (connect at 11pm, disconnect 6 am)


We currently backup our hyper-v guests to our NAS which is presented to the 
host via iSCSI,


The goal is  to achieve the equivalent  of ejecting a tape after backup is 
complete, in case of a ransomware infection.


We do also have it offsite, however, I'd much rather restore 6tb locally than 
over the wire.


Any thoughts feedback are greatly appreciated

Re: [NTSysADM] 10GBASE-T to SFP+

[J- P]

i know its late, but or the future Curvature has good pricing and they have 
their own line as well


https://www.curvature.com/optics/sfpplus


And I can attest to it , as I have installed their stuff in hundreds of centers

[https://www.curvature.com/themes/custom/responsive/images/curvature-logo.jpg]

Cisco SFP Plus Series Optics | Optical Networking | 
Curvature
www.curvature.com
Cisco SFP+ Series Optics from Curvature - Curvature offers data center 
solutions such as Cisco SPF plus optics. Lifetime warranty included. Learn more.






Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Webster 
Sent: Wednesday, August 9, 2017 9:20 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] 10GBASE-T to SFP+


Thanks for all the help and those who reached out to me off list. I changed the 
10G switch to a Netgear one, everything has been ordered and should start 
arriving tomorrow. Ordering cables was the only setback. Even though Amazon 
would state they had them in stock, when I went to complete the order, every 
cable would show "to be delivered in 1 to 4 weeks". Tried multiple vendors and 
had the same result for all of them. Oh well, I will get everything connected 
to the 10G switch when the cables do show up.



Watch for an updated lab article on my site.



Webster



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Webster
Sent: Tuesday, August 8, 2017 10:13 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] 10GBASE-T to SFP+



If I break the seal on the server's case, I void the warranty. I have never 
worked with 10GbE before and never thought of adding it to the lab but that 
UBNT 10G switch looked affordable considering the cost of other 10G managed 
switches.



Webster



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Tuesday, August 8, 2017 9:27 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] 10GBASE-T to SFP+



I’m not a hardware dude, but couldn’t you get a fiber NIC for your server?



Something like this: 
https://www.newegg.com/Product/Product.aspx?Item=N82E16833114123



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Webster
Sent: Tuesday, August 8, 2017 9:43 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] 10GBASE-T to SFP+



With those prices, I will have to rethink the switch I plan to use!!!





Webster



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jack Kramer
Sent: Tuesday, August 8, 2017 8:21 AM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] 10GBASE-T to SFP+



It used to be that 10GBASE-T was outside of the SFP+ power envelope but there’s 
a couple of SFP+ modules with 10GBASE-T media now—they work by “modifying” the 
10GBASE-T spec to reduce its power usage. The downside is reduced cable length 
support and what I assume is an absolute ton of heat output.



https://www.cablesandkits.com/cisco-compatible-10gbase-t-sfp-module-rj45-connector-sfp-10g-t-p-10265.html

http://www.prolabs.com/products/optical-transceivers/cisco/SFP_Plus/SFP-10G-T-C/

https://www.serversupply.com/products/part_search/pid_lookup.asp?pid=264498



I would be somewhat concerned about running a bunch of those in my switch but 
one or two would probably be fine. You could also look for a standalone media 
converter that takes SFP+ on one end and delivers 10GBASE-T on the other 
side—probably the more expensive but safer solution since it’s full power and 
dumping its heat somewhere that’s not directly into your switch.




Jack Kramer, Senior Consultant
Small Type Computing--www.smalltype.net
W: 855-765-8973 x101 / C: 248-635-4955



On Aug 8, 2017, at 8:55 AM, Webster 
> wrote:



I have a SuperMicro server with dual 10GBASE-T ports. I am looking at a 
Ubiquiti UniFi Switch 16 XG. I know that switch has four 10GBASE-T ports but I 
plan on using those for my NAS that has 10GBASE-T ports. Is it possible to 
connect the server's 10GBASE-T ports to an SFP+ port with a specific cable and 
connectors? If so, any recommendations on what to use?



Thanks





Carl Webster

Citrix Technology Professional | 

Re: [NTSysADM] F5 project

[J- P]

As I mentioned, I have no clue what it is, once I saw Nevada I knew I could not 
do it- thought I would pass it on-


I thought it had to with ADN- 
https://f5.com/glossary/application-delivery-networking






From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Wednesday, August 2, 2017 9:38 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] F5 project

I'm assuming its a Strongbox drop-in eval?

--
Espi


On Tue, Aug 1, 2017 at 7:34 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

Hi all


I received an email looking for an "F5 project eval "   (on the west coast 4 
week project)  I'm in NY so its out of the question for me, (truth be told I'm 
not even sure what they are looking for )


If anyone is interested let me know,


Jean-Paul Natola

[NTSysADM] F5 project

[J- P]

Hi all


I received an email looking for an "F5 project eval "   (on the west coast 4 
week project)  I'm in NY so its out of the question for me, (truth be told I'm 
not even sure what they are looking for )


If anyone is interested let me know,


Jean-Paul Natola

Re: [NTSysADM] this file cannot be previewed because of an error with the following previewer

[J- P]

I would if it were up to me, but the "DB maintainer" (using that term loosely) 
is an in-house employee, whereas I'm not -


will try to convince








From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Andrew S. Baker <asbz...@gmail.com>
Sent: Friday, July 28, 2017 1:13 PM
To: ntsysadm
Subject: Re: [NTSysADM] this file cannot be previewed because of an error with 
the following previewer

Why not keep all the office apps at the same level?
[https://my-email-signature.link/signature.gif?u=162639=8879983=7681e0a98521cc56c2ee62b86e983d42311d71c3e7ac37e7bddeb021102e7164]


Regards,

 ASB
 http://XeeMe.com/AndrewBaker<http://xeeme.com/AndrewBaker>

appearoo<http://xeeme.com/AndrewBaker>
xeeme.com
My appearoo helps you find all my online profiles and groups on one page 
http://appearoo.com/AndrewBaker. If you would like your own go to 
appearoo.com/register. It's free. Plus you get a powerful social address book 
and much more.




 Providing Expert Technology Consulting Services for the SMB market…

 GPG: 860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842


On Thu, Jul 27, 2017 at 12:22 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

Hi all,


We have a 2008rs rds  where the previewing of office files is not working in 
outlook


I have gone into all the office settings

(File info advanced  save thumbnails)

(File trust center , settings, attachment handler,, attachment and document 
Previewers )

(cleared outlook temp security folder)

All settings double check and confirmed yet it still gives this message


"this file cannot be previewed because of an error with the following previewer;


One thing to note is that  (for compatibility reasons with an in-house DB) 
Outlook is 2010 and Word and Excel are 2013














Jean-Paul Natola

Re: Huzzah! Re: [NTSysADM] RPC not available on remote machine while doing DFSR config

[J- P]

just make sure you back charge Riverbed for the PSS ticket 



Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Kurt Buff 
Sent: Thursday, July 27, 2017 8:52 PM
To: ntsysadm
Subject: Re: Huzzah! Re: [NTSysADM] RPC not available on remote machine while 
doing DFSR config

Another thing I didn't know. You, sir, are a veritable font of knowledge.

I guess we're either lucky or good, or both. We have Exchange 2010
servers (CAS server and DB server in the US, and single machine with
CAS/DB in AU) in these two offices as well, and haven't seen any
problems between them

Kurt

On Thu, Jul 27, 2017 at 5:38 PM, Michael B. Smith  wrote:
> I think there is a pretty good chance that I would've suggested you try 
> bypassing them.  :-)
>
> I know that they can break Exchange if not properly precisely configured.
>
> -Original Message-
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of Kurt Buff
> Sent: Thursday, July 27, 2017 8:18 PM
> To: ntsysadm
> Subject: Re: Huzzah! Re: [NTSysADM] RPC not available on remote machine while 
> doing DFSR config
>
> If you had known, would you have figured it out? :)
>
> I'm sure I'll remember this for quite a while, though.
>
> And thank you very much for your help, BTW - as always, much appreciated.
>
> Kurt
>
> On Thu, Jul 27, 2017 at 4:02 PM, Michael B. Smith  
> wrote:
>>
>> Well, I never would’ve figured that out! I didn’t even know you had WAN 
>> accelerators. J
>>
>>
>>
>> I’m glad you got it resolved!
>
>

[NTSysADM] this file cannot be previewed because of an error with the following previewer

[J- P]

Hi all,


We have a 2008rs rds  where the previewing of office files is not working in 
outlook


I have gone into all the office settings

(File info advanced  save thumbnails)

(File trust center , settings, attachment handler,, attachment and document 
Previewers )

(cleared outlook temp security folder)

All settings double check and confirmed yet it still gives this message


"this file cannot be previewed because of an error with the following previewer;


One thing to note is that  (for compatibility reasons with an in-house DB) 
Outlook is 2010 and Word and Excel are 2013














Jean-Paul Natola

Re: [NTSysADM] VMs on NAS

[J- P]

*model



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of J- P <jnat...@hotmail.com>
Sent: Wednesday, July 26, 2017 7:06 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] VMs on NAS


Which mode QNAPl are you using?



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jameel Sarangi <jam...@netsmart.ca>
Sent: Wednesday, July 26, 2017 4:23 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VMs on NAS


We currently have a production 2012 R2 VM running on a QNAP NAS using the 
Virtualization station. We did buy additional RAM for the NAS so we had enough 
to allocate to the VM and NAS Functions. QNAP is using QEMU for the Hypervisor. 
So far no issues my only fear is support. If there is an issue not sure how 
timely QNAP is going to be in responding so we have robust backup in place.





Jameel Sarangi / VP Operations
jam...@netsmart.ca<mailto:jam...@netsmart.ca>
[www.netsmart.ca]<http://www.netsmart.ca>   Direct: (780) 784-3323 / TF: 
(877) 452-5811
9922 - 111 St NW Edmonton AB T5K 1K2
www.netsmart.ca<http://www.netsmart.ca> [cid:image7c2ff2.PNG@a4f5897e.46b1622a] 
<https://www.facebook.com/netsmartinc>  [cid:imagebcf9b5.PNG@c1f9ae86.45b4bbc5] 
<https://www.twitter.com/netsmartinc>  [cid:image2cac05.PNG@a05625f2.4f9d82b4] 
<https://www.linkedin.com/company/netsmart-inc->  
[cid:imageb4ccb7.PNG@b954b534.439c158b] 
<https://plus.google.com/117724164920144786754/about>

The information transmitted, including attachments, is intended only for the 
person(s) or entity to which it is addressed and may contain confidential 
and/or privileged material. Any review, retransmission, dissemination or other 
use of, or taking of any action in reliance upon this information by persons or 
entities other than the intended recipient is prohibited. If you received this 
in error please contact the sender and destroy any copies of this information.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Bud Durland
Sent: Wednesday, July 26, 2017 1:07 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VMs on NAS



Agreed, this looks very interesting.  We use Synology gear here for some 
non-mission critical VMs (VMWare via iSCSI), and it works well, especially for 
the price point.   I may join the beta for my home kit.





Bud Durland   |   Director of Information Technology
Direct: 518.324.4850 | Cell: 518.726.0967 | Fax: 518.561.0017 | 
b...@mrpcap.com<mailto:b...@mrpcap.com>
1 Plant St., Plattsburgh, NY 12901
Website<http://www.mrpcap.com/> |  Twitter<https://www.twitter.com/weatherchem> 
|  
LinkedIn<https://www.linkedin.com/company/mold-rite-plastics-inc.?trk=biz-companies-cym>
 |  YouTube<https://www.youtube.com/user/wreichheld>



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: Tuesday, July 25, 2017 19:37
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] VMs on NAS



anyone tried this yet?

https://www.synology.com/en-global/beta/2017_VMM












NOTE -- This message contains legally privileged and confidential information 
and is intended only for the individual named.
If you are not the named addressee you should not disseminate, distribute or 
copy this e-mail.
Please notify the sender immediately by e-mail if you have received this e-mail 
by mistake and delete
this e-mail from your system. Thank you.

Re: [NTSysADM] VMs on NAS

[J- P]

Which mode QNAPl are you using?



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jameel Sarangi <jam...@netsmart.ca>
Sent: Wednesday, July 26, 2017 4:23 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VMs on NAS


We currently have a production 2012 R2 VM running on a QNAP NAS using the 
Virtualization station. We did buy additional RAM for the NAS so we had enough 
to allocate to the VM and NAS Functions. QNAP is using QEMU for the Hypervisor. 
So far no issues my only fear is support. If there is an issue not sure how 
timely QNAP is going to be in responding so we have robust backup in place.





Jameel Sarangi / VP Operations
jam...@netsmart.ca<mailto:jam...@netsmart.ca>
[www.netsmart.ca]<http://www.netsmart.ca>   Direct: (780) 784-3323 / TF: 
(877) 452-5811
9922 - 111 St NW Edmonton AB T5K 1K2
www.netsmart.ca<http://www.netsmart.ca> [cid:image7c2ff2.PNG@a4f5897e.46b1622a] 
<https://www.facebook.com/netsmartinc>  [cid:imagebcf9b5.PNG@c1f9ae86.45b4bbc5] 
<https://www.twitter.com/netsmartinc>  [cid:image2cac05.PNG@a05625f2.4f9d82b4] 
<https://www.linkedin.com/company/netsmart-inc->  
[cid:imageb4ccb7.PNG@b954b534.439c158b] 
<https://plus.google.com/117724164920144786754/about>

The information transmitted, including attachments, is intended only for the 
person(s) or entity to which it is addressed and may contain confidential 
and/or privileged material. Any review, retransmission, dissemination or other 
use of, or taking of any action in reliance upon this information by persons or 
entities other than the intended recipient is prohibited. If you received this 
in error please contact the sender and destroy any copies of this information.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Bud Durland
Sent: Wednesday, July 26, 2017 1:07 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VMs on NAS



Agreed, this looks very interesting.  We use Synology gear here for some 
non-mission critical VMs (VMWare via iSCSI), and it works well, especially for 
the price point.   I may join the beta for my home kit.





Bud Durland   |   Director of Information Technology
Direct: 518.324.4850 | Cell: 518.726.0967 | Fax: 518.561.0017 | 
b...@mrpcap.com<mailto:b...@mrpcap.com>
1 Plant St., Plattsburgh, NY 12901
Website<http://www.mrpcap.com/> |  Twitter<https://www.twitter.com/weatherchem> 
|  
LinkedIn<https://www.linkedin.com/company/mold-rite-plastics-inc.?trk=biz-companies-cym>
 |  YouTube<https://www.youtube.com/user/wreichheld>



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: Tuesday, July 25, 2017 19:37
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] VMs on NAS



anyone tried this yet?

https://www.synology.com/en-global/beta/2017_VMM












NOTE -- This message contains legally privileged and confidential information 
and is intended only for the individual named.
If you are not the named addressee you should not disseminate, distribute or 
copy this e-mail.
Please notify the sender immediately by e-mail if you have received this e-mail 
by mistake and delete
this e-mail from your system. Thank you.

[NTSysADM] VMs on NAS

[J- P]

anyone tried this yet?

https://www.synology.com/en-global/beta/2017_VMM

Re: [NTSysADM] Data Recovery Software

[J- P]

If you do need to go beyond software (physical damage)  then I recommend


http://dtidatarecovery.com/








From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Haritwal, Dhiraj <dhiraj.harit...@sony.com>
Sent: Saturday, July 22, 2017 8:36 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Data Recovery Software


Thanks to both of you. I missed to specify what kind of extensions want to 
recover. It can be starting from documents, Backup files (BKP), executable’s 
(Exe,Bat etc).





Regards,



Dhiraj













From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Susan Bradley
Sent: 22 July 2017 23:45
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Data Recovery Software



getdataback

https://www.runtime.org/data-recovery-software.htm

Data Recovery Software Products - Runtime Software 
Products<https://www.runtime.org/data-recovery-software.htm>
www.runtime.org
Free technical support for Runtime Data Recovery programs including 
GetDataBack, DiskExplorer, RAID Reconstructor and Captain Nemo.





On 7/22/2017 10:40 AM, J- P wrote:

https://www.easeus.com/data-recovery-software/

EaseUS Data Recovery Wizard - Best Data Recovery Software 
...<https://www.easeus.com/data-recovery-software/>
www.easeus.com
EaseUS Data Recovery Wizard is an efficient and safe data recovery software. It 
can recover file, photo, video, document and more lost due to deletion, format, 
hard ...



EaseUS Data Recovery Wizard - Best Data Recovery Software 
...<https://www.easeus.com/data-recovery-software/>

www.easeus.com<http://www.easeus.com>

EaseUS Data Recovery Wizard is an efficient and safe data recovery software. It 
can recover file, photo, video, document and more lost due to deletion, format, 
hard ...







Jean-Paul Natola






From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com><mailto:listsad...@lists.myitforum.com> on 
behalf of Haritwal, Dhiraj 
<dhiraj.harit...@sony.com><mailto:dhiraj.harit...@sony.com>
Sent: Saturday, July 22, 2017 2:44 AM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] Data Recovery Software



Hi,



Looking for a software to recover from deleted data, format partition, deleted 
partition from both client OS (Win7,8,10) & server OS (Win2K8, 2K12, 2K16 etc). 
Can be freeware or paid. If possible should also have option to recovery data 
from faulty disk.





Appreciate any tried & tested solution.







Regards,



Dhiraj





This email is confidential and intended only for the use of the individual or 
entity named above and may contain information that is privileged. If you are 
not the intended recipient, you are notified that any dissemination, 
distribution or copying of this email is strictly prohibited. If you have 
received this email in error, please notify us immediately by return email or 
telephone and destroy the original message. - This mail is sent via Sony Asia 
Pacific Mail Gateway..





This email is confidential and intended only for the use of the individual or 
entity named above and may contain information that is privileged. If you are 
not the intended recipient, you are notified that any dissemination, 
distribution or copying of this email is strictly prohibited. If you have 
received this email in error, please notify us immediately by return email or 
telephone and destroy the original message. - This mail is sent via Sony Asia 
Pacific Mail Gateway..

Re: [NTSysADM] Boxed in on a Win10 VM

[J- P]

in case the account is disabled and complexity is required, make sure you 
change the password (net user administrator some_complex_password)

then enable; net user administrator /active:yes






From: listsad...@lists.myitforum.com  on behalf 
of Kurt Buff 
Sent: Thursday, July 20, 2017 9:56 PM
To: ntsysadm
Subject: Re: [NTSysADM] Boxed in on a Win10 VM

I've shelved this for the moment - higher priority stuff has been
handed to me...

I'll probably get back to this next week.

Kurt

On Thu, Jul 20, 2017 at 6:14 PM, Micheal Espinola Jr
 wrote:
> You should be able to modify that organically at boot with Windows 10:
>
> https://www.tenforums.com/tutorials/2969-enable-disable-elevated-administrator-account-windows-10-a.html#option5
[https://www.tenforums.com/attachments/tutorials/36372d1485956632t-enable-disable-elevated-administrator-account-windows-10-a-administrator_sign-in_screen.jpg]

Windows 10: Enable or Disable Elevated Administrator 
...
www.tenforums.com
How to Enable or Disable Built-in Elevated Administrator Account in Windows 10 
Information This tutorial will show you how to enable or d



>
> --
> Espi
>
>
> On Tue, Jul 18, 2017 at 8:52 PM, Kurt Buff  wrote:
>>
>> Dang. Completely forgot about that. I'll have to see if I can gin that up.
>>
>> Kurt
>>
>> On Tue, Jul 18, 2017 at 6:21 PM, Robert Cato 
>> wrote:
>> > The local accout(s) is disabled. NT password reset CD-ROM to reset
>> > password
>> > and enable the local accout. It's a Win10 "feature"
>> >
>> >
>> > On Tue, Jul 18, 2017 at 8:24 PM Kurt Buff  wrote:
>> >>
>> >> If nobody else comes up with a solution, that's the way I'll go.
>> >>
>> >> It's been a while since I've used it, but IIRC, it also enables the
>> >> account if it's disabled/locked out.
>> >>
>> >> Kurt
>> >>
>> >> On Tue, Jul 18, 2017 at 4:55 PM, Michael B. Smith
>> >> 
>> >> wrote:
>> >> > I would try the pnordahl solution.
>> >> >
>> >> > -Original Message-
>> >> > From: listsad...@lists.myitforum.com
>> >> > [mailto:listsad...@lists.myitforum.com] On Behalf Of Kurt Buff
>> >> > Sent: Tuesday, July 18, 2017 7:46 PM
>> >> > To: ntsysadm
>> >> > Subject: [NTSysADM] Boxed in on a Win10 VM
>> >> >
>> >> > All,
>> >> >
>> >> > A colleague stood up a Win10 VM that was a clone of an original
>> >> > domain-joined machine, running on a ESXi/vSphere 6.0 host.
>> >> >
>> >> > I noticed this, and decided to help out - the VM clone was not fully
>> >> > functional - it's trust relationship with the domain was broken.
>> >> >
>> >> > I was able to log in using cached credentials with administrative
>> >> > privileges, so I set the local administrator password to something we
>> >> > know
>> >> > (we use LAPS here, so there's no telling what the most recent
>> >> > administrator
>> >> > password was).
>> >> >
>> >> > I then changed the machine name and joined the VM to a workgroup at
>> >> > the
>> >> > same time - something I've done probably hundreds of times over the
>> >> > years
>> >> > with never a failure before now.
>> >> >
>> >> > After reboot, the login screen shows only the username of the last
>> >> > successful login (a domain account, not a local account, even though
>> >> > it's
>> >> > not a member of the domain!).
>> >> >
>> >> > I cannot get it to switch to another account to log in, and since the
>> >> > only account available on the login screen is the domain account, and
>> >> > it's
>> >> > not joined to the domain, I can't use that account's password to log
>> >> > in.
>> >> >
>> >> > There are no backups, no restore points and no snapshots for this VM.
>> >> >
>> >> > I was able to boot into safe mode in the console, and start a command
>> >> > prompt - when it asked for the local Administrator account, that
>> >> > worked, so
>> >> > I know the password is good.
>> >> >
>> >> > I've tried to RDP into the machine, and am refused, no matter which
>> >> > credentials I try.
>> >> >
>> >> > I even tried disconnecting the NIC for the VM to see if that would
>> >> > shake
>> >> > loose some cached credentials, but no go, and it stubbornly refuses
>> >> > to show
>> >> > me any other accounts to choose for login.
>> >> >
>> >> > I suppose I could do a reset, but I believe there's 3rd party
>> >> > software
>> >> > that was installed in the interim, so I'm a bit hesitant to do that.
>> >> >
>> >> > Anyone have thoughts on how to proceed?
>> >> >
>> >> > I'm about ready to boot with a Nordahl iso, and see if that helps,
>> >> > but
>> >> > if push comes to shove, I I'll re-clone the original, and try again,
>> >> > and let
>> >> > the 

Re: [NTSysADM] Boxed in on a Win10 VM

[J- P]

typo  *sethc



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of J- P <jnat...@hotmail.com>
Sent: Thursday, July 20, 2017 8:18 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Boxed in on a Win10 VM


how about the old setch hack? I just used it 2 days ago on a w7 machine, not 
sure if  it flies w 10



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Kurt Buff <kurt.b...@gmail.com>
Sent: Tuesday, July 18, 2017 11:52 PM
To: ntsysadm
Subject: Re: [NTSysADM] Boxed in on a Win10 VM

Dang. Completely forgot about that. I'll have to see if I can gin that up.

Kurt

On Tue, Jul 18, 2017 at 6:21 PM, Robert Cato <cato.rob...@gmail.com> wrote:
> The local accout(s) is disabled. NT password reset CD-ROM to reset password
> and enable the local accout. It's a Win10 "feature"
>
>
> On Tue, Jul 18, 2017 at 8:24 PM Kurt Buff <kurt.b...@gmail.com> wrote:
>>
>> If nobody else comes up with a solution, that's the way I'll go.
>>
>> It's been a while since I've used it, but IIRC, it also enables the
>> account if it's disabled/locked out.
>>
>> Kurt
>>
>> On Tue, Jul 18, 2017 at 4:55 PM, Michael B. Smith <mich...@smithcons.com>
>> wrote:
>> > I would try the pnordahl solution.
>> >
>> > -Original Message-
>> > From: listsad...@lists.myitforum.com
>> > [mailto:listsad...@lists.myitforum.com] On Behalf Of Kurt Buff
>> > Sent: Tuesday, July 18, 2017 7:46 PM
>> > To: ntsysadm
>> > Subject: [NTSysADM] Boxed in on a Win10 VM
>> >
>> > All,
>> >
>> > A colleague stood up a Win10 VM that was a clone of an original
>> > domain-joined machine, running on a ESXi/vSphere 6.0 host.
>> >
>> > I noticed this, and decided to help out - the VM clone was not fully
>> > functional - it's trust relationship with the domain was broken.
>> >
>> > I was able to log in using cached credentials with administrative
>> > privileges, so I set the local administrator password to something we know
>> > (we use LAPS here, so there's no telling what the most recent administrator
>> > password was).
>> >
>> > I then changed the machine name and joined the VM to a workgroup at the
>> > same time - something I've done probably hundreds of times over the years
>> > with never a failure before now.
>> >
>> > After reboot, the login screen shows only the username of the last
>> > successful login (a domain account, not a local account, even though it's
>> > not a member of the domain!).
>> >
>> > I cannot get it to switch to another account to log in, and since the
>> > only account available on the login screen is the domain account, and it's
>> > not joined to the domain, I can't use that account's password to log in.
>> >
>> > There are no backups, no restore points and no snapshots for this VM.
>> >
>> > I was able to boot into safe mode in the console, and start a command
>> > prompt - when it asked for the local Administrator account, that worked, so
>> > I know the password is good.
>> >
>> > I've tried to RDP into the machine, and am refused, no matter which
>> > credentials I try.
>> >
>> > I even tried disconnecting the NIC for the VM to see if that would shake
>> > loose some cached credentials, but no go, and it stubbornly refuses to show
>> > me any other accounts to choose for login.
>> >
>> > I suppose I could do a reset, but I believe there's 3rd party software
>> > that was installed in the interim, so I'm a bit hesitant to do that.
>> >
>> > Anyone have thoughts on how to proceed?
>> >
>> > I'm about ready to boot with a Nordahl iso, and see if that helps, but
>> > if push comes to shove, I I'll re-clone the original, and try again, and 
>> > let
>> > the colleague know that he's lost any work done, but for the moment this is
>> > an exercise in overcoming - something.
>> >
>> > Kurt
>> >
>> >
>>
>>
>

Re: [NTSysADM] Boxed in on a Win10 VM

[J- P]

how about the old setch hack? I just used it 2 days ago on a w7 machine, not 
sure if  it flies w 10



Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Kurt Buff 
Sent: Tuesday, July 18, 2017 11:52 PM
To: ntsysadm
Subject: Re: [NTSysADM] Boxed in on a Win10 VM

Dang. Completely forgot about that. I'll have to see if I can gin that up.

Kurt

On Tue, Jul 18, 2017 at 6:21 PM, Robert Cato  wrote:
> The local accout(s) is disabled. NT password reset CD-ROM to reset password
> and enable the local accout. It's a Win10 "feature"
>
>
> On Tue, Jul 18, 2017 at 8:24 PM Kurt Buff  wrote:
>>
>> If nobody else comes up with a solution, that's the way I'll go.
>>
>> It's been a while since I've used it, but IIRC, it also enables the
>> account if it's disabled/locked out.
>>
>> Kurt
>>
>> On Tue, Jul 18, 2017 at 4:55 PM, Michael B. Smith 
>> wrote:
>> > I would try the pnordahl solution.
>> >
>> > -Original Message-
>> > From: listsad...@lists.myitforum.com
>> > [mailto:listsad...@lists.myitforum.com] On Behalf Of Kurt Buff
>> > Sent: Tuesday, July 18, 2017 7:46 PM
>> > To: ntsysadm
>> > Subject: [NTSysADM] Boxed in on a Win10 VM
>> >
>> > All,
>> >
>> > A colleague stood up a Win10 VM that was a clone of an original
>> > domain-joined machine, running on a ESXi/vSphere 6.0 host.
>> >
>> > I noticed this, and decided to help out - the VM clone was not fully
>> > functional - it's trust relationship with the domain was broken.
>> >
>> > I was able to log in using cached credentials with administrative
>> > privileges, so I set the local administrator password to something we know
>> > (we use LAPS here, so there's no telling what the most recent administrator
>> > password was).
>> >
>> > I then changed the machine name and joined the VM to a workgroup at the
>> > same time - something I've done probably hundreds of times over the years
>> > with never a failure before now.
>> >
>> > After reboot, the login screen shows only the username of the last
>> > successful login (a domain account, not a local account, even though it's
>> > not a member of the domain!).
>> >
>> > I cannot get it to switch to another account to log in, and since the
>> > only account available on the login screen is the domain account, and it's
>> > not joined to the domain, I can't use that account's password to log in.
>> >
>> > There are no backups, no restore points and no snapshots for this VM.
>> >
>> > I was able to boot into safe mode in the console, and start a command
>> > prompt - when it asked for the local Administrator account, that worked, so
>> > I know the password is good.
>> >
>> > I've tried to RDP into the machine, and am refused, no matter which
>> > credentials I try.
>> >
>> > I even tried disconnecting the NIC for the VM to see if that would shake
>> > loose some cached credentials, but no go, and it stubbornly refuses to show
>> > me any other accounts to choose for login.
>> >
>> > I suppose I could do a reset, but I believe there's 3rd party software
>> > that was installed in the interim, so I'm a bit hesitant to do that.
>> >
>> > Anyone have thoughts on how to proceed?
>> >
>> > I'm about ready to boot with a Nordahl iso, and see if that helps, but
>> > if push comes to shove, I I'll re-clone the original, and try again, and 
>> > let
>> > the colleague know that he's lost any work done, but for the moment this is
>> > an exercise in overcoming - something.
>> >
>> > Kurt
>> >
>> >
>>
>>
>

[NTSysADM] adding self signed certs to win 10

[J- P]

Hi all,


Happy 4th to the US members


using sinology to mount/map WebDAV shares, Ive added the cert to trusted , but 
it continues to fail, it worked on winxp and 7-


any thoughts?


tia



Jean-Paul Natola

Re: [NTSysADM] Using GPP to fight Petya

[J- P]

False Alarm- GPP kicked in a lot quicker than I thought- 









From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of J- P <jnat...@hotmail.com>
Sent: Wednesday, June 28, 2017 1:43 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Using GPP to fight Petya


I found 2 pc's with perfc.dat already there 


hopefully Kaspersky will do its job






From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Michael Leone <oozerd...@gmail.com>
Sent: Wednesday, June 28, 2017 12:15 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Using GPP to fight Petya

On Wed, Jun 28, 2017 at 11:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

kaspersky detected perfc.dat as a malicious file


anyone else get that?



Yep, seeing the same warnings. And all on the perfc.dat file that I created 
using GPP, to stop "Petya". LOL

Guess I didn't need to create that file, anyway. Oh, well, maybe tomorrow I'll 
change the entry to "Delete", rather than "Replace". After figuring out how to 
change the read-only flag ...

Re: [NTSysADM] Using GPP to fight Petya

[J- P]

https://blog.kaspersky.com/new-ransomware-epidemics/17314/

[https://s3.amazonaws.com/kdm-prod/wp-content/uploads/sites/92/2017/06/27133416/wannamore-ransomware-featured.jpg]<https://blog.kaspersky.com/new-ransomware-epidemics/17314/>

New Petya / NotPetya / ExPetr ransomware 
outbreak<https://blog.kaspersky.com/new-ransomware-epidemics/17314/>
blog.kaspersky.com
A new ransomware outbreak is happening right now. Here's what we know so far 
and what you can do to protect yourself from the threat.






Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Michael Leone <oozerd...@gmail.com>
Sent: Wednesday, June 28, 2017 12:15 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Using GPP to fight Petya

On Wed, Jun 28, 2017 at 11:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

kaspersky detected perfc.dat as a malicious file


anyone else get that?



Yep, seeing the same warnings. And all on the perfc.dat file that I created 
using GPP, to stop "Petya". LOL

Guess I didn't need to create that file, anyway. Oh, well, maybe tomorrow I'll 
change the entry to "Delete", rather than "Replace". After figuring out how to 
change the read-only flag ...

[NTSysADM] Re: Petya

[J- P]

Definitely something hinky going on with this list I sent this email last night

Jean-Paul Natola


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of J- P <jnat...@hotmail.com>
Sent: Tuesday, June 27, 2017 7:21:35 PM
To: NT
Subject: [NTSysADM] Petya



https://www.theguardian.com/world/2017/jun/27/petya-ransomware-attack-strikes-companies-across-europe

'Petya' ransomware attack strikes companies across Europe and 
US<https://www.theguardian.com/world/2017/jun/27/petya-ransomware-attack-strikes-companies-across-europe>
www.theguardian.com
Ukraine government, banks and electricity grid hit hardest, but companies in 
France, Denmark and Pittsburgh, Pennsylvania also attacked





Jean-Paul Natola

Re: [NTSysADM] Using GPP to fight Petya

[J- P]

I found 2 pc's with perfc.dat already there 


hopefully Kaspersky will do its job






From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Michael Leone <oozerd...@gmail.com>
Sent: Wednesday, June 28, 2017 12:15 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Using GPP to fight Petya

On Wed, Jun 28, 2017 at 11:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

kaspersky detected perfc.dat as a malicious file


anyone else get that?



Yep, seeing the same warnings. And all on the perfc.dat file that I created 
using GPP, to stop "Petya". LOL

Guess I didn't need to create that file, anyway. Oh, well, maybe tomorrow I'll 
change the entry to "Delete", rather than "Replace". After figuring out how to 
change the read-only flag ...

[NTSysADM] Petya

[J- P]

https://www.theguardian.com/world/2017/jun/27/petya-ransomware-attack-strikes-companies-across-europe

'Petya' ransomware attack strikes companies across Europe and 
US
www.theguardian.com
Ukraine government, banks and electricity grid hit hardest, but companies in 
France, Denmark and Pittsburgh, Pennsylvania also attacked





Jean-Paul Natola

Re: [NTSysADM] Using GPP to fight Petya

[J- P]

kaspersky detected perfc.dat as a malicious file



anyone else get that?




From: listsad...@lists.myitforum.com  on behalf 
of Melvin Backus 
Sent: Wednesday, June 28, 2017 10:59 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Using GPP to fight Petya


>From GPMC select the OU, right click, Group Polcy Update.  It isn’t immediate 
>on all systems but it will happen within the next 10-15 minutes as it staggers 
>them to avoid swamping the server.



--
There are 10 kinds of people in the world...
 those who understand binary and those who don't.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael Leone
Sent: Wednesday, June 28, 2017 10:11 AM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Using GPP to fight Petya



OK, so I've made that change in the GPO, and it creates the file appropriately.



So how do I force all my servers to refresh their GPOs, without going to each 
and doing a "gpupdate /force"? When they automatically check in the next time, 
this policy should be applied. But how to make that happen NOW, rather than 
within the next 24 hours (or whatever)?



On Wed, Jun 28, 2017 at 9:23 AM, Kennedy, Jim 
> wrote:

I will ground my son who wrote that.  It should be ‘replace’.  That will create 
it or replace it.



Now, why you are not seeing it in gpresult I dunno. You ran the gpresult as a 
local admin?



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Michael Leone
Sent: Wednesday, June 28, 2017 9:13 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Using GPP to fight Petya



So I'm confused. Looking at this page:



https://www.binarydefense.com/petya-ransomware-without-fluff/



Shows using GPP to create a file "c:\windows\perfc.dat". Apparently, if this 
file exists, the malware stops (yes, I know that there will be a variant Real 
Soon Now that avoids this).



So I made this change:



Computer\Preferences\Windows Settings\Files



And followed the web page ("update", copy windowsupdate.log  to 
c:\windows\perfc.dat", make it read-only. Did all this on a testing GPO I keep 
around for this purpose.



Doing Group Policy Modeling Wizard, I see this being applied as a setting to my 
test VM. Yet when I go an look in c:\windows, I don't see the file.Nor do I see 
that setting in "gpresult /r /v".



What have I done wrong?

Re: [NTSysADM] Ransonware protection

[J- P]

https://www.fortinet.com/solutions/ransomware.html


Using their DNS helps mitigating a host contacting a C

Ransomware - Fortinet
www.fortinet.com
Fortinet prevents ransomware with comprehensive, end-to-end security.






Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of James Rankin 
Sent: Monday, June 12, 2017 9:45 AM
To: ntsysadm@lists.myitforum.com; ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Ransonware protection

Ivanti Application Manager
Bromium vSentry

Sent from my slightly schizophrenic, but rather cool, BlackBerry Android
From: tominyorkt...@gmail.com
Sent: 12 June 2017 1:42 p.m.
To: NTSysADM@lists.myitforum.com
Reply to: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Ransonware protection


Hi All,

What would you recommend as specific software solutions to protect against 
Ransomware?  In my company we use:

-  Sonicwall firewalls, and the gateway security component is enabled and is 
supposed to help block/prevent.
- Symantec AV.  Not specific to ransom-ware but appears to be reactive.

I'm looking at additional layers of security, such as the Barracuda e-mail 
filter.  I used that at past jobs and that reduced the "infected" e-mails 
considerably.

I also have used Malwarebytes enterprise.  That has an anti-ransomeware 
component.  I used that in a past job and was not impressed.  Malwarebytes sold 
is an an "enterprise" solution, but it was a stand alone product, had not 
integration with the management console, no configuration and no notifications. 
 It appeared to be a rush to market.

Sophos supposedly has a similar solution specific to Malwarebytes but I have 
not looked at it yet.

Internally, we also have targeted employee training and use a service to send 
"fake" messages from Amazon/UPS, etc to let them know that they need to be 
vigilant when reviewing messages from outside the company.

Thoughts appreciated.

[NTSysADM] Re: cloud service (VDI)

[J- P]

everything on this list fails fraud detection, same goes for the exchange list 
as well.


I thought it was part of the "hotmail/outlook.com update"



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of James Rankin <ja...@htguk.com>
Sent: Wednesday, May 31, 2017 8:47 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: cloud service (VDI)


I’ve been failing fraud detection for a while too…



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Webster
Sent: 31 May 2017 13:40
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: cloud service (VDI)



Hey! I didn't fail fraud detection this time and my reply showed up in less 
than four hours!!!







Webster



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Webster
Sent: Wednesday, May 31, 2017 7:33 AM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: cloud service (VDI)



With a minimum of 25 users though.



Thanks





Carl Webster

Citrix Technology Professional

http://www.CarlWebster.com<http://t.sidekickopen01.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XYgdV8QRW2zWLDn4XrdjzW7fK3rs56dwxZf67wwsR02?t=http%3A%2F%2Fwww.carlwebster.com%2F=6012126861197312=4311b7b1-332d-4242-8585-36954b184dc7>

The Accidental Citrix Admin



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of James Rankin
Sent: Wednesday, May 31, 2017 7:14 AM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: cloud service (VDI)



Just go Citrix Cloud, all wrapped up as a service in Azure



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: 31 May 2017 03:10
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] cloud service (VDI)



Hi all ,



I have a client that wans to do "cloud services"  VDI, they are a small firm 6 
users-



So i', wondering if a 3rd party (I.e Rackspace)  would make more sense then 
deploying a dedicated hyperv/citirx server on or offsite (to handle this)=



any thoughts?

[NTSysADM] cloud service (VDI)

[J- P]

Hi all ,


I have a client that wans to do "cloud services"  VDI, they are a small firm 6 
users-


So i', wondering if a 3rd party (I.e Rackspace)  would make more sense then 
deploying a dedicated hyperv/citirx server on or offsite (to handle this)=


any thoughts?

Re: [NTSysADM] Blocking iCloud email

[J- P]

thx


Amazing the hoops we're made to jump through for 2 users out of a whole 
organization (oh well) at least I can justify my fee 


thanks again



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Kurt Buff <kurt.b...@gmail.com>
Sent: Saturday, May 20, 2017 9:55 PM
To: ntsysadm
Subject: Re: [NTSysADM] Blocking iCloud email

I don't use iCloud,email, and I don't know anyone at my org who does, so no, I 
haven't tried it.

FWIW, that action doesn't fit (yet) into our security policy, so it won't 
happen for a while anyway.

Kurt

On Sat, May 20, 2017 at 3:41 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

Have you actually tested this policy, by going logging into an iCloud account 
and clicking the mail tab.?  The rule you have (same one I have)  will block a 
mail client (outlook/thunderbird etc) from communicating through the standard 
ports,(25/110/143/587/993) but will it a block a web browser tab opening email?




Jean-Paul Natola




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Kurt Buff <kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>>
Sent: Thursday, May 18, 2017 7:18 PM
To: ntsysadm
Subject: Re: [NTSysADM] Blocking iCloud email

On Palo Alto firewalls, there's an application definition that you can use to 
block it - but it would probably also require MITM (aka web inspection) with 
your own certs to configure.

[Inline image 1]

Perhaps other brands of firewall can do that too.

Kurt

On Wed, May 17, 2017 at 5:35 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

Hi all,


I already have ticket with the vendor , but thought maybe someone here may have 
already encountered this;


Objective,  block access to ALL non corporate email (we use exchange )


the filtering has blocked access to all WEB email (Hotmail, msn, aol, yahoo, 
gmail,  etc)


however, if a user logs into their iCloud account they can still access their 
apple/imail account , and they want to retain the ability to use all other 
i-crap services, iCalendar, etc..


So blocking the  www.icloud.com<http://www.icloud.com> url is not an option, 
anyone have any pointers?


TIA

Re: [NTSysADM] Blocking iCloud email

[J- P]

Have you actually tested this policy, by going logging into an iCloud account 
and clicking the mail tab.?  The rule you have (same one I have)  will block a 
mail client (outlook/thunderbird etc) from communicating through the standard 
ports,(25/110/143/587/993) but will it a block a web browser tab opening email?




Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Kurt Buff <kurt.b...@gmail.com>
Sent: Thursday, May 18, 2017 7:18 PM
To: ntsysadm
Subject: Re: [NTSysADM] Blocking iCloud email

On Palo Alto firewalls, there's an application definition that you can use to 
block it - but it would probably also require MITM (aka web inspection) with 
your own certs to configure.

[Inline image 1]

Perhaps other brands of firewall can do that too.

Kurt

On Wed, May 17, 2017 at 5:35 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

Hi all,


I already have ticket with the vendor , but thought maybe someone here may have 
already encountered this;


Objective,  block access to ALL non corporate email (we use exchange )


the filtering has blocked access to all WEB email (Hotmail, msn, aol, yahoo, 
gmail,  etc)


however, if a user logs into their iCloud account they can still access their 
apple/imail account , and they want to retain the ability to use all other 
i-crap services, iCalendar, etc..


So blocking the  www.icloud.com<http://www.icloud.com> url is not an option, 
anyone have any pointers?


TIA

Re: [NTSysADM] So simple a 6yo can do it...

[J- P]

but Ted will be something to lookout for haha



Mail server settings for iCloud email clients - Apple 
Support
support.apple.com
Mail server settings. Refer to your email app's documentation for information 
about how to use these settings. iCloud Mail uses the IMAP and SMTP standards 
supported ...






Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of John Matteson 
Sent: Wednesday, May 17, 2017 5:31 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] So simple a 6yo can do it...


A weaponized teddy bear? You’ll never look at Winnie the Pooh or Paddington 
Bear the same way again.



Oh bother.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kurt Buff
Sent: Wednesday, May 17, 2017 11:11 AM
To: kurt.b...@gmail.com
Subject: [NTSysADM] So simple a 6yo can do it...



http://www.msn.com/en-us/news/technology/cyber-kid-stuns-experts-showing-toys-can-be-weapons/ar-BBBdgMo

[http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBBdlfS.img]

Cyber kid stuns experts showing toys can be 
'weapons'
www.msn.com
An 11-year-old "cyber ninja" stunned an audience of security experts Tuesday by 
hacking into their Bluetooth devices to manipulate a teddy bear and show how 
interconnected smart toys "can be weaponised".

[NTSysADM] Blocking iCloud email

[J- P]

Hi all,


I already have ticket with the vendor , but thought maybe someone here may have 
already encountered this;


Objective,  block access to ALL non corporate email (we use exchange )


the filtering has blocked access to all WEB email (Hotmail, msn, aol, yahoo, 
gmail,  etc)


however, if a user logs into their iCloud account they can still access their 
apple/imail account , and they want to retain the ability to use all other 
i-crap services, iCalendar, etc..


So blocking the  www.icloud.com url is not an option, anyone have any pointers?


TIA

Re: [NTSysADM] Web Filtering Appliances

[J- P]

+ 1 on fortigate, have only had it for a couple of months but so far so good, 
support usually puts me right through to an engineer, only once I had to wait 
for a callback



Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Reimer, Mark 
Sent: Tuesday, May 16, 2017 4:12 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Web Filtering Appliances

We've been happy with Fortigate Firewall and web filter.

Mark

On Tue, May 16, 2017 at 9:41 AM, Kurt Buff 
> wrote:
What do you have as your org's firewall? I'd investigate that first.

We used to have a Barracuda 4xx (410? 400? The model number for it and our spam 
filter are similar), but I was not much of a fan. That might not have been the 
fault of the Barracuda, but it required some odd network configuration that I 
didn't like.

Three years ago, when we got our Palo Alto firewalls, we got their web 
filtering package to go with it. It works very well.

Kurt

On Mon, May 15, 2017 at 2:27 PM, Gordon Pegue 
> wrote:
A skosh over 8 years ago, at my prior job, I had an iPrism appliance for web 
traffic monitoring/filtering.

I see that iPrism is now known as Edgewave iPrism and I’m looking over the 
details of what they offer.

Having had no more interim experience with what’s in the market, my query to 
the group is simple:

For those of you who manage a web filtering appliance:
What are you using?
What do you like/dislike about it?
Would you buy it again if you had to start over?
What are you paying for the service subscription?

TIA
Gordon

Re: [NTSysADM] Re: dell rant- part two

[J- P]

Service Start date (GMT time zone)  End date (GMT time zone)
Mail-in Service June 02, 2016   June 02, 2017




Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jonathan Link <jonathan.l...@gmail.com>
Sent: Wednesday, May 3, 2017 8:34 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Re: dell rant- part two

Crappy consumer warranty...  Dell isn't any different here than other vendors 
in the consumer space.

On Wed, May 3, 2017 at 7:48 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

So it turns out they can not send a box, just the label



________
From: J- P <jnat...@hotmail.com<mailto:jnat...@hotmail.com>>
Sent: Wednesday, May 3, 2017 7:33 PM
To: NT
Subject: dell rant


So one of my friends asks me to check the laptop,, turns out the hard drive is 
bad I see its under warranty , I call dell explain the situation and they send 
we'll send you the drive so you can replace it- I said, no its under warranty 
send a box so she can send it back, they said "but since you are technically 
savvy can you do it" I said NO, she paid for your product with your warranty 
thus you are responsible,

and they said but you are able to do this, I replied THATS NOT THE POINT, if I 
do a repair for a client and something goes wrong I don't tell then "I'll send 
you the part, you replace it" I did the work, they paid for it hence its MY 
RESPONSIBILITY not the clients.


what nerve ,  I mean REALLY?



finally after 15 minutes of arguing they agreed to send the box-



Jean-Paul Natola

[NTSysADM] dell rant

[J- P]

So one of my friends asks me to check the laptop,, turns out the hard drive is 
bad I see its under warranty , I call dell explain the situation and they send 
we'll send you the drive so you can replace it- I said, no its under warranty 
send a box so she can send it back, they said "but since you are technically 
savvy can you do it" I said NO, she paid for your product with your warranty 
thus you are responsible,

and they said but you are able to do this, I replied THATS NOT THE POINT, if I 
do a repair for a client and something goes wrong I don't tell then "I'll send 
you the part, you replace it" I did the work, they paid for it hence its MY 
RESPONSIBILITY not the clients.


what nerve ,  I mean REALLY?



finally after 15 minutes of arguing they agreed to send the box-



Jean-Paul Natola

[NTSysADM] Re: dell rant- part two

[J- P]

So it turns out they can not send a box, just the label




From: J- P <jnat...@hotmail.com>
Sent: Wednesday, May 3, 2017 7:33 PM
To: NT
Subject: dell rant


So one of my friends asks me to check the laptop,, turns out the hard drive is 
bad I see its under warranty , I call dell explain the situation and they send 
we'll send you the drive so you can replace it- I said, no its under warranty 
send a box so she can send it back, they said "but since you are technically 
savvy can you do it" I said NO, she paid for your product with your warranty 
thus you are responsible,

and they said but you are able to do this, I replied THATS NOT THE POINT, if I 
do a repair for a client and something goes wrong I don't tell then "I'll send 
you the part, you replace it" I did the work, they paid for it hence its MY 
RESPONSIBILITY not the clients.


what nerve ,  I mean REALLY?



finally after 15 minutes of arguing they agreed to send the box-



Jean-Paul Natola

Re: [NTSysADM] Wireless bridge

[J- P]

Way too much $$$, need to use a minimum of 3 per job,  sometimes up to 6

if they have 3 jobs on the same day that could mean anywhere between 9 and 20


(speakers, intelligent lights ,  console's, etc..)



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Tuesday, April 4, 2017 12:45 AM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Wireless bridge

$500!

--
Espi


On Mon, Apr 3, 2017 at 8:49 PM, Todd Lemmiksoo 
<tlemmik...@gmail.com<mailto:tlemmik...@gmail.com>> wrote:
You try the Netgear NightHawk 9000

On Mon, Apr 3, 2017 at 7:09 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

I'm finding only 2 sellers on Amazon and both have BAD reviews, the only other 
place i'm seeing them is on Ebay, makes me a little weary about where to 
purchase from.

 I'm in the US, so I'm concerned no legitimate

vendors/resellers carry them.






From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Kurt Buff <kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>>
Sent: Saturday, April 1, 2017 1:58 PM
To: ntsysadm
Subject: Re: [NTSysADM] Wireless bridge

This has worked well for me:
https://www.amazon.com/gp/product/B019DZ1JGG/
Amazon.com: AFOUNDRY Dual Band Wireless AC Gigabit Router,6 External 
Antennas,Three Processors,Metal Computer WiFi Router Used in 
Home,Enterprise,Villas: Computers & 
Accessories<https://www.amazon.com/gp/product/B019DZ1JGG/>
www.amazon.com<http://www.amazon.com>
Buy AFOUNDRY Dual Band Wireless AC Gigabit Router, 6 External Antennas, Three 
Processors, Metal Computer WiFi Router Used in Home, Enterprise, Villas: Tools 
& Home Improvement - Amazon.com ✓ FREE DELIVERY possible on eligible purchases




I have two - one is acting as my router at the end of my house where
my Internet connection lives, the other is in the middle of my house
and is a bridge for coverage for the area that the first one doesn't
reach, which is mostly the basement and the far corner of the house
that has too many walls, heating ducts, etc. for the first one to
cover.

Easy to set up, too.

Kurt

On Fri, Mar 31, 2017 at 6:59 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:
> Hi all,
>
>
> Can anyone recommend (with actual real world use) a good wireless bridge ,
> its purpose is for controlling theatre equipment so throughput / bandwidth
> is not a great concern, just communication from the bridges to the router.
>
>
> thx
>
>
>
>
>
>





--
T. Todd Lemmiksoo

[NTSysADM] screen redraw/refresh on rds

[J- P]

I've got an rds server when you login in and try to view photos, it loads the 
images very slow (2008rs rds) it loads "line by line" so to speak, its not a 
bandwidth or latency issue  because when I VPN into the site, and map the drive 
with the images, I don't get the "lag/redraw" effect-  , ive tried  all options 
on the rdp connection , bitmap caching, screen resolution (15/16 bit )

, desktop experience etc...  but no improvement ,


Not sure what else to check (its a 2008r2 rds, hyperV guest, on a 2012 host)

any thoughts are welcomed and appreciated


Jean-Paul Natola

Re: [NTSysADM] Wireless bridge

[J- P]

I'm finding only 2 sellers on Amazon and both have BAD reviews, the only other 
place i'm seeing them is on Ebay, makes me a little weary about where to 
purchase from.

 I'm in the US, so I'm concerned no legitimate

vendors/resellers carry them.






From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Kurt Buff <kurt.b...@gmail.com>
Sent: Saturday, April 1, 2017 1:58 PM
To: ntsysadm
Subject: Re: [NTSysADM] Wireless bridge

This has worked well for me:
https://www.amazon.com/gp/product/B019DZ1JGG/
Amazon.com: AFOUNDRY Dual Band Wireless AC Gigabit Router,6 External 
Antennas,Three Processors,Metal Computer WiFi Router Used in 
Home,Enterprise,Villas: Computers & 
Accessories<https://www.amazon.com/gp/product/B019DZ1JGG/>
www.amazon.com
Buy AFOUNDRY Dual Band Wireless AC Gigabit Router, 6 External Antennas, Three 
Processors, Metal Computer WiFi Router Used in Home, Enterprise, Villas: Tools 
& Home Improvement - Amazon.com ✓ FREE DELIVERY possible on eligible purchases




I have two - one is acting as my router at the end of my house where
my Internet connection lives, the other is in the middle of my house
and is a bridge for coverage for the area that the first one doesn't
reach, which is mostly the basement and the far corner of the house
that has too many walls, heating ducts, etc. for the first one to
cover.

Easy to set up, too.

Kurt

On Fri, Mar 31, 2017 at 6:59 PM, J- P <jnat...@hotmail.com> wrote:
> Hi all,
>
>
> Can anyone recommend (with actual real world use) a good wireless bridge ,
> its purpose is for controlling theatre equipment so throughput / bandwidth
> is not a great concern, just communication from the bridges to the router.
>
>
> thx
>
>
>
>
>
>

[NTSysADM] Wireless bridge

[J- P]

Hi all,


Can anyone recommend (with actual real world use) a good wireless bridge , its 
purpose is for controlling theatre equipment so throughput / bandwidth is not a 
great concern, just communication from the bridges to the router.


thx

Re: [NTSysADM] NT posts lost in cyberspace

[J- P]

I actually sill use Hotmail/outlook for the list, and I have checked my 
junk/spam/unwaned etc...


cant seem to find why some messages  go through and others dont



Jean-Paul Natola





From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Eric Morrison <eric.morri...@outlook.com>
Sent: Tuesday, March 28, 2017 9:57 PM
To: ntsysadm@lists.myitforum.com; NT
Subject: Re: [NTSysADM] NT posts lost in cyberspace

My replies typically go to spam or junk folder in outlook.

Get Outlook for iOS<https://aka.ms/o0ukef>

From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of J- P <jnat...@hotmail.com>
Sent: Tuesday, March 28, 2017 6:28:56 PM
To: NT
Subject: [NTSysADM] NT posts lost in cyberspace


Hi all,


I've noticed that sometimes when I post a question, or reply to a post it 
doesn't show up , case in point,  last night responding to Espi's inquiry of 
jitter and latency using ORBI, it never went through nor did I get rejection 
notice from the moderator.  Is there something going on , or am I missing 
something?


tia



Jean-Paul Natola

[NTSysADM] Re: NT posts lost in cyberspace

[J- P]

thx


will do



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Michael B. Smith <mich...@smithcons.com>
Sent: Tuesday, March 28, 2017 9:30 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: NT posts lost in cyberspace


Rod Trent is the moderator (well, list Dad, he doesn’t moderate anything). 
Email him with details.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Tuesday, March 28, 2017 7:29 PM
To: NT
Subject: [NTSysADM] NT posts lost in cyberspace



Hi all,



I've noticed that sometimes when I post a question, or reply to a post it 
doesn't show up , case in point,  last night responding to Espi's inquiry of 
jitter and latency using ORBI, it never went through nor did I get rejection 
notice from the moderator.  Is there something going on , or am I missing 
something?



tia




Jean-Paul Natola

Re: [NTSysADM] ORBI wifi

[J- P]

yup, cablevision,


as I stated previously , next time i'm out there I'll test and post back.






Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Tuesday, March 28, 2017 5:39 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] ORBI wifi

Thanks, but I'm more interested in the latency aspects of those repeaters.   
30/5, thats broadband cable - right?

--
Espi


On Mon, Mar 27, 2017 at 6:55 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

he only has 30 / 5 service, and he's getting 28/4 (same as on desktop)



Jean-Paul Natola




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Micheal Espinola Jr 
<michealespin...@gmail.com<mailto:michealespin...@gmail.com>>
Sent: Monday, March 27, 2017 6:29 PM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: Re: [NTSysADM] ORBI wifi

What is the performance like off of those satellites?

--
Espi


On Mon, Mar 27, 2017 at 6:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

real world use,


So a friend of mine (total non techy ) got the Orbi set

http://www.techradar.com/reviews/netgear-orbi


much to my amazement, he managed to get the router and 2 satellites setup and 
covered his 3600 sq foot 3 story house covered.

[http://cdn.mos.cms.futurecdn.net/Ztqhey7YjZVMKoKU8o4dwS-1200-80.jpg]<http://www.techradar.com/reviews/netgear-orbi>

Netgear Orbi review | TechRadar<http://www.techradar.com/reviews/netgear-orbi>
www.techradar.com<http://www.techradar.com>
Design and setup. While it’s referred to as a single product, Netgear Orbi is 
technically comprised of two parts: the Orbi Router and the Orbi Satellite.

[NTSysADM] NT posts lost in cyberspace

[J- P]

Hi all,


I've noticed that sometimes when I post a question, or reply to a post it 
doesn't show up , case in point,  last night responding to Espi's inquiry of 
jitter and latency using ORBI, it never went through nor did I get rejection 
notice from the moderator.  Is there something going on , or am I missing 
something?


tia



Jean-Paul Natola

Re: [NTSysADM] Has anyone here used this product, and can comment on it?

[J- P]

EXPENSIVE



Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Kurt Buff 
Sent: Tuesday, March 28, 2017 2:28 PM
To: ntsysadm
Subject: [NTSysADM] Has anyone here used this product, and can comment on it?

https://www.netbraintech.com/
[https://www.netbraintech.com/wp-content/uploads/2016/06/logo-company.png]

NetBrain - Automation for the World's Largest 
Networks
www.netbraintech.com
The world’s largest networks leverage the NetBrain platform to automate network 
documentation, troubleshoot networks, and myriad other tasks. Try it today.




I just interviewed someone who mentioned using it, so I looked it up.

The general rule of thumb I've used is that if the web site has a
button to request a quote rather than listing prices, it's probably
really expensive - and probably beyond the reach of my current firm.

They have a bunch of youtube videos, which reinforces my impression
that it's expensive, but it looks pretty cool, and I wondered if it's
worth investigating.

Kurt

Re: [NTSysADM] ORBI wifi

[J- P]

he only has 30 / 5 service, and he's getting 28/4 (same as on desktop)



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Monday, March 27, 2017 6:29 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] ORBI wifi

What is the performance like off of those satellites?

--
Espi


On Mon, Mar 27, 2017 at 6:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

real world use,


So a friend of mine (total non techy ) got the Orbi set

http://www.techradar.com/reviews/netgear-orbi


much to my amazement, he managed to get the router and 2 satellites setup and 
covered his 3600 sq foot 3 story house covered.

[http://cdn.mos.cms.futurecdn.net/Ztqhey7YjZVMKoKU8o4dwS-1200-80.jpg]<http://www.techradar.com/reviews/netgear-orbi>

Netgear Orbi review | TechRadar<http://www.techradar.com/reviews/netgear-orbi>
www.techradar.com<http://www.techradar.com>
Design and setup. While it’s referred to as a single product, Netgear Orbi is 
technically comprised of two parts: the Orbi Router and the Orbi Satellite.

Re: [NTSysADM] ORBI wifi

[J- P]

none as of now, next time I'm out there I will check



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Monday, March 27, 2017 9:58 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] ORBI wifi

Any stats for how much of an increase in ping, jitter, etc?

These look very interesting.

--
Espi


On Mon, Mar 27, 2017 at 6:18 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

There is one thing to note, orbi is NOT mesh (although they do market it that 
way), all sat's talk to the router, in a home or SoHo I guess that's really of 
no big deal.


But it is worth noting, having Ethernet ports is a plus, we hooked up his 
slingbox to it and it streams great.




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Micheal Espinola Jr 
<michealespin...@gmail.com<mailto:michealespin...@gmail.com>>
Sent: Monday, March 27, 2017 6:29 PM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: Re: [NTSysADM] ORBI wifi

What is the performance like off of those satellites?

--
Espi


On Mon, Mar 27, 2017 at 6:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

real world use,


So a friend of mine (total non techy ) got the Orbi set

http://www.techradar.com/reviews/netgear-orbi


much to my amazement, he managed to get the router and 2 satellites setup and 
covered his 3600 sq foot 3 story house covered.

[http://cdn.mos.cms.futurecdn.net/Ztqhey7YjZVMKoKU8o4dwS-1200-80.jpg]<http://www.techradar.com/reviews/netgear-orbi>

Netgear Orbi review | TechRadar<http://www.techradar.com/reviews/netgear-orbi>
www.techradar.com<http://www.techradar.com>
Design and setup. While it’s referred to as a single product, Netgear Orbi is 
technically comprised of two parts: the Orbi Router and the Orbi Satellite.

[NTSysADM] Re: Limit Remote DC to selectively replicate certain OUs?

[J- P]

or ask them to take the  MS  70-413 exam


ha








From: listsad...@lists.myitforum.com  on behalf 
of Joseph L. Casale 
Sent: Monday, March 27, 2017 3:35 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Re: Limit Remote DC to selectively replicate certain OUs?


Send them some Active Directory developers API docs and show them just how 
incredibly complicated AD really is. Most people incorrectly think AD is LDAP. 
That's not the case, its an application which implements an LDAP interface to 
an otherwise far more richer application...


jlc



From: listsad...@lists.myitforum.com  on behalf 
of Fut Dey 
Sent: Monday, March 27, 2017 12:49 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Re: Limit Remote DC to selectively replicate certain OUs?


The compliant is latency and we haven't gotten any numbers to work with.

"You'd end up with an inconsistent and broken mess..." and that's what we 
attempted to convey to upper management because there are additional objects in 
the directory that needs to be updated, GPOs, domain/enterprise admin accounts, 
etc.

Management believes since all the relevant changes to computers, users, groups, 
etc, are within the OU of interest, that's all that needs to be replicated.

Haven't been able to find any documentations to back our claim that it can't be 
done or it's bad practice.

Regards,
Fut


From: listsad...@lists.myitforum.com  on behalf 
of Joseph L. Casale 
Sent: Monday, March 27, 2017 9:53:28 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Re: Limit Remote DC to selectively replicate certain OUs?


Right,
How would it handle a group that _is_ replicated which contains a member that 
_is not_ replicated?


You'd end up with an inconsistent and broken mess...



From: listsad...@lists.myitforum.com  on behalf 
of Brian Desmond 
Sent: Monday, March 27, 2017 8:28 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: Limit Remote DC to selectively replicate certain OUs?


This isn’t possible. You can selectively replicate certain attributes, but you 
can’t selectively replicate objects.



What is the replication issue you’re having? What does the network connectivity 
look like – latency, utilization, bandwidth, etc.?



Thanks,

Brian Desmond



w – 312.625.1438[X] | c – 312.731.3132[X]



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Fut Dey
Sent: Saturday, March 25, 2017 3:10 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Limit Remote DC to selectively replicate certain OUs?



Hi,



Current AD environment has a single forest and domain with 55 OUs on Server 
2012 R2 at 2012 forest and domain functional levels.



One of the departments, ( aka OU), will be split up between 2 locations (half 
in the US, half in Asia) and will share local and remote resources. The staff 
in the US and Asia will rotate quarterly.



We do have VPN in place and the remote office is having  AD related latency 
issues among other things. Upper management has suggested the possibility of 
hosting a Read-only DC in the remote location and have that DC replicate only 
objects for that one single OU.



Management has no interest in multi-forest nor multi-domain, etc.



Is it possible to configure such a setup?



Thanks,

Fut

Re: [NTSysADM] ORBI wifi

[J- P]

There is one thing to note, orbi is NOT mesh (although they do market it that 
way), all sat's talk to the router, in a home or SoHo I guess that's really of 
no big deal.


But it is worth noting, having Ethernet ports is a plus, we hooked up his 
slingbox to it and it streams great.




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Monday, March 27, 2017 6:29 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] ORBI wifi

What is the performance like off of those satellites?

--
Espi


On Mon, Mar 27, 2017 at 6:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

real world use,


So a friend of mine (total non techy ) got the Orbi set

http://www.techradar.com/reviews/netgear-orbi


much to my amazement, he managed to get the router and 2 satellites setup and 
covered his 3600 sq foot 3 story house covered.

[http://cdn.mos.cms.futurecdn.net/Ztqhey7YjZVMKoKU8o4dwS-1200-80.jpg]<http://www.techradar.com/reviews/netgear-orbi>

Netgear Orbi review | TechRadar<http://www.techradar.com/reviews/netgear-orbi>
www.techradar.com<http://www.techradar.com>
Design and setup. While it’s referred to as a single product, Netgear Orbi is 
technically comprised of two parts: the Orbi Router and the Orbi Satellite.

Re: [NTSysADM] ORBI wifi

[J- P]

will let you know within the hour



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Monday, March 27, 2017 6:29 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] ORBI wifi

What is the performance like off of those satellites?

--
Espi


On Mon, Mar 27, 2017 at 6:16 AM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

real world use,


So a friend of mine (total non techy ) got the Orbi set

http://www.techradar.com/reviews/netgear-orbi


much to my amazement, he managed to get the router and 2 satellites setup and 
covered his 3600 sq foot 3 story house covered.

[http://cdn.mos.cms.futurecdn.net/Ztqhey7YjZVMKoKU8o4dwS-1200-80.jpg]<http://www.techradar.com/reviews/netgear-orbi>

Netgear Orbi review | TechRadar<http://www.techradar.com/reviews/netgear-orbi>
www.techradar.com<http://www.techradar.com>
Design and setup. While it’s referred to as a single product, Netgear Orbi is 
technically comprised of two parts: the Orbi Router and the Orbi Satellite.

Re: [NTSysADM] Question about Word

[J- P]

Did you check the link to the video i posted?

Jean-Paul Natola


From: listsad...@lists.myitforum.com  on behalf 
of James Rankin 
Sent: Monday, March 27, 2017 10:13:22 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Question about Word

That’s fair enough, but I’m sure there must be some sort of Word-native 
function that can accommodate this and remove the requirement for the Search 
and Replace?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Erik Goldoff
Sent: 27 March 2017 15:03
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Question about Word

simple method, use the text <> in the template throughout the 
document, and then perform a Search and Replace ALL for <> with the 
actual customer name for each time the template is copied and used.

On Mon, Mar 27, 2017 at 8:19 AM, James Rankin 
> wrote:
My Microsoft Office skills are a bit limited and I can’t seem to frame the 
Google query right today…

I am writing a template document. At the start of this I want to put a section 
for “Customer Name”, the idea being that when a user uses the template they can 
simply put the correct customer name in here, and then it is updated in every 
part of the document where the customer name needs to appear.

What function is it I want to use here? I just can’t seem to frame the right 
query to get Google to tell me the answer, and Alexa is simply telling me she 
doesn’t understand…

TIA,




[cid:image001.png@01D21FCA.D5DD9850]
[cid:image002.jpg@01D21FCA.D5DD9850]
[cid:image003.jpg@01D2A70C.A91334A0]






James Rankin CTA ACA
EUC Solutions Architect
Howell Technology Group
Office: 0191 4813446
Mobile: 07809 668579
Email: ja...@htguk.com

www.htguk.com | Twitter | 
Linkedin | 
Facebook


COMPANY INFORMATION
Howell Technology Group Ltd is a limited company registered in England with 
registered number 5520670 and VAT registered number GB 862 666 004. Our 
registered office is at 2.30 One Trinity Green, Eldon Street, South Shields, 
Tyne & Wear, NE33 1SA

CONFIDENTIALITY NOTICE
This message is intended solely for the addressee and may contain confidential 
information. If you have received this message in error, please send it back to 
us, and immediately and permanently delete it. Do not use, copy or disclose the 
information contained in this message or in any attachment.

PRIVACY POLICY
For information about how we process data and monitor communications please see 
our Privacy Policy.

To log a ticket please follow the link. https://htguk.on.spiceworks.com/portal

[NTSysADM] ORBI wifi

[J- P]

real world use,


So a friend of mine (total non techy ) got the Orbi set

http://www.techradar.com/reviews/netgear-orbi


much to my amazement, he managed to get the router and 2 satellites setup and 
covered his 3600 sq foot 3 story house covered.

[http://cdn.mos.cms.futurecdn.net/Ztqhey7YjZVMKoKU8o4dwS-1200-80.jpg]

Netgear Orbi review | TechRadar
www.techradar.com
Design and setup. While it’s referred to as a single product, Netgear Orbi is 
technically comprised of two parts: the Orbi Router and the Orbi Satellite.

Re: [NTSysADM] Question about Word

[J- P]

https://www.youtube.com/watch?v=VAskwzL7zbI


[https://www.bing.com/th?id=OVP.RAt3aiJYBuf9kl20IGxCHgEsCo=Api]

Repeat text in MS Word Using Document Property content 
...
www.youtube.com
www.LawOfficeSolution.com http://lawofficesolution.com/ Contact: 
i...@lawofficesolution.com Easily Repeat text in an MS Word document using 
Document Property Content ...





http://addbalance.com/word/MappedControls.htm#PageStart





Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Erik Goldoff 
Sent: Monday, March 27, 2017 10:03 AM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Question about Word

simple method, use the text <> in the template throughout the 
document, and then perform a Search and Replace ALL for <> with the 
actual customer name for each time the template is copied and used.

On Mon, Mar 27, 2017 at 8:19 AM, James Rankin 
> wrote:
My Microsoft Office skills are a bit limited and I can’t seem to frame the 
Google query right today…

I am writing a template document. At the start of this I want to put a section 
for “Customer Name”, the idea being that when a user uses the template they can 
simply put the correct customer name in here, and then it is updated in every 
part of the document where the customer name needs to appear.

What function is it I want to use here? I just can’t seem to frame the right 
query to get Google to tell me the answer, and Alexa is simply telling me she 
doesn’t understand…

TIA,




[cid:image001.png@01D21FCA.D5DD9850]
[cid:image002.jpg@01D21FCA.D5DD9850]
[cid:image003.jpg@01D2A6FC.B3880150]






James Rankin CTA ACA
EUC Solutions Architect
Howell Technology Group
Office: 0191 4813446
Mobile: 07809 668579
Email: ja...@htguk.com

www.htguk.com | Twitter | 
Linkedin | 
Facebook


COMPANY INFORMATION
Howell Technology Group Ltd is a limited company registered in England with 
registered number 5520670 and VAT registered number GB 862 666 004. Our 
registered office is at 2.30 One Trinity Green, Eldon Street, South Shields, 
Tyne & Wear, NE33 1SA

CONFIDENTIALITY NOTICE
This message is intended solely for the addressee and may contain confidential 
information. If you have received this message in error, please send it back to 
us, and immediately and permanently delete it. Do not use, copy or disclose the 
information contained in this message or in any attachment.

PRIVACY POLICY
For information about how we process data and monitor communications please see 
our Privacy Policy.

To log a ticket please follow the link. https://htguk.on.spiceworks.com/portal

Re: [NTSysADM] Capture the flag...

[J- P]

+1


Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Jeff Steward 
Sent: Monday, March 27, 2017 8:37 AM
To: ntsysadm@lists.myitforum.com; kurt.b...@gmail.com
Subject: Re: [NTSysADM] Capture the flag...

I appreciated the article.

On Sun, Mar 26, 2017 at 8:40 PM Kurt Buff 
> wrote:
You'll need a subscription to see the original, but someone forwarded this to 
me:
https://sofrep.com/77645/how-trolls-from-4chan-perfectly-executed-a-crowd-sourced-intelligence-operation-against-shia-labeouf/

The conclusions and implications were already evident to those with knowledge, 
but this makes it blindingly obvious.

Kurt



  * 
  *   
  *   
  *   
  *   

[Image courtesy of Barstool Sports]
How trolls from 4chan perfectly executed a crowd-sourced intelligence operation 
against Shia LaBeouf [SOFREP Original Content]

BY TRAVIS ALLEN 03.24.2017#EXPERT 
ANALYSISEMAIL
 
SHARE
 
TWEET

Last week, trolls from 4chan executed a highly effective crowd-sourced 
intelligence operation, one that should serve as a case study in modern 
information warfare.

In what illustrates the power of a decentralized and flat operational 
hierarchy, internet trolls from the website 4chan targeted and shut down actor 
Shia Labeouf and his recent “He Will Not Divide 
Us” protest artwork through collaborative 
intelligence gathering.

In its original form, Labeouf had installed a 24-hour livestream camera outside 
a New York art museum on January 20th, where passersby were encouraged to stand 
and communicate messages of support for the protest. After it became the site 
of numerous disruptions and fights, it was moved to New Mexico, where it also 
only lasted a short while.

[image courtesy of 
YouTube]LaBeouf 
at his original “He Will Not Divide Us” protest. Image courtesy of YouTube

Labeouf then altered the delivery of the protest by placing a simple white 
flag, bearing the message “He Will Not Divide Us,” in an anonymous location 
somewhere on planet Earth. The 24/7 video live-stream was only looking up at 
the flagpole, showing the flag and the sky behind it, day and night.

Inside of 36 hours, users from the internet forum 4chan located, removed, and 
replaced the protest flag with a Donald Trump “Make America Great Again” red 
hat, and a t-shirt depicting Pepe the Frog.

As soon as the video stream had gone live the day prior, 4chan users began to 
analyze the video footage in an attempt to deduce its location. Through a 
collaborative, crowd-sourced effort, users began to piece together the location 
through several clues.

After LaBeouf was tagged on social media in Greenville, Tennessee, the search 
had a starting point: rural Tennessee.

Noticing several aircraft cross through the video frame behind the flag, flight 
patterns in the skies above Tennessee were analyzed to find a match. Once they 
had a general estimate, they realized the area in rural Tennessee was too large 
to search on the ground.

[Image courtesy of Barstool 
Sports]Triangulated
 flight patterns led to a general search area

That night, a user analyzed the movements of stars across the frame, using 
known constellations as reference points to better pinpoint the location of the 
flagpole.

[Image courtesy of Barstool 
Sports]Knowledge
 of constellations and general astronomy further narrowed the location

[Image courtesy of Barstool 
Sports]

The next morning, a 4chan user got into a vehicle and drove into the suspected 
vicinity of the flag, and began to honk the horn, letting other users watching 
the live feed vector him onto the objective. That night, the snatch was made. 
Beyond the 

Re: [NTSysADM] w7 updates on new hardware

[J- P]

:)



JP




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Micheal Espinola Jr <michealespin...@gmail.com>
Sent: Tuesday, March 21, 2017 4:34 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] w7 updates on new hardware

Wocka wocka wocka!

:-)

--
Espi


On Sat, Mar 18, 2017 at 4:20 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

http://www.computerworld.com/article/3181714/windows-pcs/microsoft-ready-to-block-updates-for-windows-7-on-latest-pcs.html


So if your org runs win7, do you buy older hardware?

[http://images.techhive.com/images/article/2016/11/452292684-100692974-large.3x2.jpg]<http://www.computerworld.com/article/3181714/windows-pcs/microsoft-ready-to-block-updates-for-windows-7-on-latest-pcs.html>

Microsoft ready to block updates for Windows 7 on latest 
PCs<http://www.computerworld.com/article/3181714/windows-pcs/microsoft-ready-to-block-updates-for-windows-7-on-latest-pcs.html>
www.computerworld.com<http://www.computerworld.com>
Microsoft may be prepping to enforce a new support policy for Windows 7 and 
Windows 8.1 that blocks updates on newer machines with the latest processors.






Jean-Paul Natola

[NTSysADM] w7 updates on new hardware

[J- P]

http://www.computerworld.com/article/3181714/windows-pcs/microsoft-ready-to-block-updates-for-windows-7-on-latest-pcs.html


So if your org runs win7, do you buy older hardware?

[http://images.techhive.com/images/article/2016/11/452292684-100692974-large.3x2.jpg]

Microsoft ready to block updates for Windows 7 on latest 
PCs
www.computerworld.com
Microsoft may be prepping to enforce a new support policy for Windows 7 and 
Windows 8.1 that blocks updates on newer machines with the latest processors.






Jean-Paul Natola

Re: [NTSysADM] AWS East Outage

[J- P]

https://techcrunch.com/2017/03/01/the-day-amazon-s3-storage-stood-still/

Would / should you hold your IT vendor responsible for relying on S3?




Jean-Paul Natola




From: listsad...@lists.myitforum.com  on behalf 
of Andrew S. Baker 
Sent: Tuesday, February 28, 2017 5:36 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] AWS East Outage

Indeed.


Regards,


 ASB
 GPG: 860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842


Sent with 
Mixmax




On Tue, Feb 28, 2017 3:56 PM, David McSpadden 
dav...@imcu.com wrote:
So the normal question 'is the Internet down?' Is valid today?

Sent from my iPhone

On Feb 28, 2017, at 3:44 PM, Andrew S. Baker 
> wrote:

Notice:  This email is from an outside source.  Please do not open any 
attachments, click on any hyperlinks, or respond without first confirming the 
authenticity of the email.




Indeed.

It's like someone broke the whole Internet.   Or, at least, 80% of it.


Regards,


 ASB
 http://XeeMe.com/AndrewBaker

 Providing Expert Technology Consulting Services for the SMB market…

 GPG: 860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842


Sent with 
Mixmax




On Tue, Feb 28, 2017 2:13 PM, Kennedy, Jim 
kennedy...@elyriaschools.org wrote:

Learning very quickly how many vendors we have that are using AWS.  Lots is the 
first word that comes to mind.



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Charles F Sullivan
Sent: Tuesday, February 28, 2017 1:57 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] AWS East Outage



Any of your organizations being affected by this? The few services we have 
moved there so far are down.

http://bgr.com/2017/02/28/internet-outage-amazon-web-services/





Charlie Sullivan

Sr. Windows Systems Administrator

Boston College

197 Foster St. Room 367

Brighton, MA 02135



This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.

[NTSysADM] Excluding folder(s) from archiving

[J- P]

Sorry for the cross post,  hoping maybe someone on this list can advise

Tia

From: J- P <jnat...@hotmail.com>
Sent: Friday, February 10, 2017 10:06:24 AM
To: Exchange List
Subject: Excluding folder(s) from archiving


Hi all,


Client wants to exclude deleted Items and  calendars from being moved to the 
in-place archive,


is it still the case (ex 2013) that it can ONLY be done by the end user as this 
article states,

https://blogs.technet.microsoft.com/exchange/2011/08/05/prevent-archiving-of-items-in-a-default-folder-in-exchange-2010/

or can it somehow be done globally via ecp or ps ?

thx



   JP

Re: [NTSysADM] 48 port poe

[J- P]

any  thoughts on this , seems pretty cheap for an L3 48 port poe


https://www.amazon.com/HP-J9729A-2920-48G-POE-Switch/dp/B00BARYJNQ

[https://images-na.ssl-images-amazon.com/images/I/31XAAYpOBpL._SY300_QL70_.jpg]<https://www.amazon.com/HP-J9729A-2920-48G-POE-Switch/dp/B00BARYJNQ>

Amazon.com: HP J9729A, 2920-48G-POE+ Switch: Computers 
...<https://www.amazon.com/HP-J9729A-2920-48G-POE-Switch/dp/B00BARYJNQ>
www.amazon.com
Buy HP J9729A, 2920-48G-POE+ Switch: Switches - Amazon.com FREE DELIVERY 
possible on eligible purchases







Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Andrew S. Baker <asbz...@gmail.com>
Sent: Thursday, January 26, 2017 6:00 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] 48 port poe

That looks like a Linksys again...


Regards,


ASB
http://XeeMe.com/AndrewBaker<http://xeeme.com/AndrewBaker>

appearoo<http://xeeme.com/AndrewBaker>
xeeme.com
My appearoo helps you find all my online profiles and groups on one page 
http://appearoo.com/AndrewBaker. If you would like your own go to 
appearoo.com/register. It's free. Plus you get a powerful social address book 
and much more.



Providing Expert Technology Consulting Services for the SMB market...

GPG: 860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842






On Thu, Jan 26, 2017 4:48 PM, John Matteson 
john.matte...@gmail.com<mailto:john.matte...@gmail.com> wrote:
https://www.amazon.com/Cisco-SG200-50P-50-port-Gigabit-SLM2048PT/dp/B004GHMU6A

Layer 2 switching, support IPv4 IPv6 under 700.00 USD per switch.

On Thu, Jan 26, 2017 at 12:04 PM, J- P 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:
They spent 1000 on the netgear , and it jusy made.2 years, they.are not liking 
the netgear too much

Would like to stay  under 1500

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Andrew S. Baker <asbz...@gmail.com<mailto:asbz...@gmail.com>>
Sent: Wednesday, January 25, 2017 7:15:53 PM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: Re: [NTSysADM] 48 port poe
What kind of budget?

I like Ubiquiti and Netgear for this at the SMB level.


Regards,


ASB
http://XeeMe.com/AndrewBaker<http://xeeme.com/AndrewBaker>

Providing Expert Technology Consulting Services for the SMB market...

GPG: 860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842





On Wed, Jan 25, 2017 2:08 PM, J- P 
jnat...@hotmail.com<mailto:jnat...@hotmail.com> wrote:
Hi all,

Looking for advice on a layer 2  poe switch,
We had a linksys 48 port tos switch, amd half of the poorts no longer do POE

[NTSysADM] 48 port poe

[J- P]

Hi all,

Looking for advice on a layer 2  poe switch,
We had a linksys 48 port tos switch, amd half of the poorts no longer do POE

Re: [NTSysADM] RE: Opinions on reasonably inexpensive NAS storage

[J- P]

Synology for production, QNAP for storage




From: listsad...@lists.myitforum.com  on behalf 
of Patrick Bervoets 
Sent: Wednesday, December 21, 2016 3:23 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] RE: Opinions on reasonably inexpensive NAS storage

+1 Synology

Op 21/12/2016 om 20:17 schreef Andrew S. Baker:
Agreed.   I run them in my home office, and recommend them to SMB customers 
without question.



On Wed, Dec 21, 2016 4:41 AM, Micheal Espinola Jr 
michealespin...@gmail.com wrote:
+1 for production trust as well.

On Tue, Dec 20, 2016 at 4:27 PM, Jonathan Link 
> wrote:
I trust Synology in production.  I used two in production for two years.  
Changed gigs and am trying to get them into my current one.

On Tue, Dec 20, 2016 at 7:18 PM, Andrew S. Baker 
> wrote:
Given the cost of the FreeNAS boxes, I'd just get the Synology devices.  More 
functionality for the price.

[NTSysADM] Re: Opinions on reasonably inexpensive NAS storage

[J- P]

Qnap , 4 bay around 250  they also have larger








From: listsad...@lists.myitforum.com  on behalf 
of Hood, Jeff 
Sent: Tuesday, December 20, 2016 2:07 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: Opinions on reasonably inexpensive NAS storage


FreeNas Mini or MiniXL from iXsystems



Available on Amazon with Prime. Just about much storage as your wallet can 
tolerate. I'll be getting a Mini early next year.





--Jeff



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jon Harris
Sent: Tuesday, December 20, 2016 1:02 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: Opinions on reasonably inexpensive NAS storage



I too am interested for personal use, very different from Jesse's but same type 
of device.  I will not go back to Netgear.  The last one I bought did not even 
last a month before the crashes started.



Thank you,



Jon Harris



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jesse Rink
Sent: Tuesday, December 20, 2016 1:44 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Opinions on reasonably inexpensive NAS storage



In the past, we've used a lot of Netgear ReadyNAS models for cheap (sub $1,800) 
entry level NAS storage, mostly for the purpose of backup storage with Veeam.  
Been very popular in the past with our SMB sized customers.  Lately some of my 
team/engineers have noticed various problems/crashes with the Netgear units so 
I'm curious what other options out there people have had good success with.   
These are situations where a customer doesn't want to spend a lot of money of 
disk storage, so enterprise class storage is completely out.   Think along the 
lines of, 4 or 8 disks, SATA, no SAN connectivity, just NAS...



Thoughts?



Jesse Rink

Source One Technology, Inc.

HP Partner

262 993 2231



Website | 
Blog | 
LinkedIn | 
Twitter

[NTSysADM] CentOS on hyperV- Integraition servoces

[J- P]

Hi all,


I installed CentOS min on hyper-v  host, and in using it the mouse gets lost 
BEFORE I hit the screen, making it difficult to scroll up n down , amongst 
other things, is  there an integration services, or should I just ssh into it?



CentOS 7, minimal

HyperV 2012r2


thanks





Jean-Paul Natola

Re: [NTSysADM] Re: raid 5? in 2016-

[J- P]

I'm not sure what the heck happened there, the CFO told me the former director 
was given card blanche , I mean heck , r730 , XEON E5‑2630V3  , 96GB of RAM, 
its not like they skimped anywhere else, and now the new "director" has put in 
her resignation.











From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of J Harris <jk.har...@live.com>
Sent: Wednesday, September 21, 2016 5:25 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Re: raid 5? in 2016-


Sorry but that is the primary reason to not fully trust the client when it is 
your neck stuck out not theirs.  My guess is they did not want to spend for the 
enterprise drives got some hack in to “build” the server then when the guy 
figured out they were going to lose money supporting it they backed out.



Jon



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Tuesday, September 20, 2016 8:22 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Re: raid 5? in 2016-



well there was one more factor that influenced my decision (which I'm a bit 
embarrassed to say [] ) dohh , after getting on call with dell, it turned out 
that these are NOT dell , or even enterprise drives.  I took the word of the 
client, and since I didn't see any yellow exclamations in the iDRAC it didn't 
dawn on me that these are consumer drives but that is what they told me the 
server is using  Samsung SSD 850












From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Richard Stovall <rich...@gmail.com<mailto:rich...@gmail.com>>
Sent: Tuesday, September 20, 2016 6:21 PM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: Re: [NTSysADM] Re: raid 5? in 2016-



If you don't have seriously high iops needs, I doubt you need raid 10.  Jmho.

If I thought it was a site I couldn't get to quickly, I'd consider raid 6 with 
2 hot spares.  Call me crazy...



On Sep 20, 2016 4:10 PM, "J- P" 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

I was thinking a big raid 10, (8x500= 2tb) but no hot spare is a showstopper , 
as  they do not have any real IT in house, , it does stink that I will lose / 
sacrifice 2 bays for one hot spare.



Decided on RAID 10 (6x500gb ) for a total of 1.5TB and the hot spare




Jean-Paul Natola






From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jonathan Raper <jra...@nwnit.com<mailto:jra...@nwnit.com>>
Sent: Tuesday, September 20, 2016 12:27 PM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: raid 5? in 2016



Yeah, I’ve run into that as well (no hot spare) and I want to smack whoever did 
the design/config.



As for your question, “aside from a losing some space wouldn't a  raid 6 and 
hot spare make MUCH more sense?”



Well, the answer is, “it depends”  (probably, but I like throwing that out 
there).



☺



This site has been around for YEARS, and provides a good overview of the 
differences (pros/cons/uses) for different RAID configurations:



http://www.acnc.com/raidedu/5



http://www.acnc.com/raidedu/6



I used it about 7 or 8 years ago to help me decide whether to go with RAID 10 
or 0+1 on an Oracle DB configuration. (and no, I don’t remember which option I 
chose, or why).



Jonathan



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Doug Hobbs
Sent: Monday, September 19, 2016 3:39 AM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: raid 5? in 2016



“but still raid 5? and no hot spare?“  I’ve seen this more than once, There are 
a lot of people out there that were taught old school and that RAID 5 is the 
de-facto standard RAID setup so they stick with it for years and years!





From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: 16 September 2016 14:11
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] raid 5? in 2016



So I inherited this server , (sitting on site since February) low and behold 
when I fire it up it turns out that whoever set it up used all 8 discs in a 
raid 5 (granted they are only 500gb enterprise ssd's ) but still raid 5? and no 
hot spare?



I'm trying to figure what the purpose of this server is/was, but aside from a 
losing some space wouldn't a  raid 6 and ho

Re: [NTSysADM] Re: raid 5? in 2016-

[J- P]

well there was one more factor that influenced my decision (which I'm a bit 
embarrassed to say [] ) dohh , after getting on call with dell, it turned out 
that these are NOT dell , or even enterprise drives.  I took the word of the 
client, and since I didn't see any yellow exclamations in the iDRAC it didn't 
dawn on me that these are consumer drives but that is what they told me the 
server is using  Samsung SSD 850









From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Richard Stovall <rich...@gmail.com>
Sent: Tuesday, September 20, 2016 6:21 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Re: raid 5? in 2016-


If you don't have seriously high iops needs, I doubt you need raid 10.  Jmho.

If I thought it was a site I couldn't get to quickly, I'd consider raid 6 with 
2 hot spares.  Call me crazy...

On Sep 20, 2016 4:10 PM, "J- P" 
<jnat...@hotmail.com<mailto:jnat...@hotmail.com>> wrote:

I was thinking a big raid 10, (8x500= 2tb) but no hot spare is a showstopper , 
as  they do not have any real IT in house, , it does stink that I will lose / 
sacrifice 2 bays for one hot spare.


Decided on RAID 10 (6x500gb ) for a total of 1.5TB and the hot spare



Jean-Paul Natola




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jonathan Raper <jra...@nwnit.com<mailto:jra...@nwnit.com>>
Sent: Tuesday, September 20, 2016 12:27 PM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: raid 5? in 2016


Yeah, I’ve run into that as well (no hot spare) and I want to smack whoever did 
the design/config.



As for your question, “aside from a losing some space wouldn't a  raid 6 and 
hot spare make MUCH more sense?”



Well, the answer is, “it depends”  (probably, but I like throwing that out 
there).



☺



This site has been around for YEARS, and provides a good overview of the 
differences (pros/cons/uses) for different RAID configurations:



http://www.acnc.com/raidedu/5



http://www.acnc.com/raidedu/6



I used it about 7 or 8 years ago to help me decide whether to go with RAID 10 
or 0+1 on an Oracle DB configuration. (and no, I don’t remember which option I 
chose, or why).



Jonathan



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Doug Hobbs
Sent: Monday, September 19, 2016 3:39 AM
To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] RE: raid 5? in 2016



“but still raid 5? and no hot spare?“  I’ve seen this more than once, There are 
a lot of people out there that were taught old school and that RAID 5 is the 
de-facto standard RAID setup so they stick with it for years and years!





From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: 16 September 2016 14:11
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] raid 5? in 2016



So I inherited this server , (sitting on site since February) low and behold 
when I fire it up it turns out that whoever set it up used all 8 discs in a 
raid 5 (granted they are only 500gb enterprise ssd's ) but still raid 5? and no 
hot spare?



I'm trying to figure what the purpose of this server is/was, but aside from a 
losing some space wouldn't a  raid 6 and hot spare make MUCH more sense?



I'd like to move some of their VMs to it, as it is a brand spanking new r730 
with 96gb of ram










The University of Derby has a published policy regarding email and reserves the 
right to monitor email traffic.
If you believe this was sent to you in error, please reply to the sender and 
let them know.

Key University contacts: http://www.derby.ac.uk/its/contacts/

NOTE: This message and any attachments is intended solely for the use of the 
individual or entity to which it is addressed and may contain information that 
is non-public, proprietary, legally privileged, confidential, and/or exempt 
from disclosure. If you are not the intended recipient, you are hereby notified 
that any use, dissemination, distribution, or copying of this communication is 
strictly prohibited. If you have received this communication in error, please 
notify the original sender immediately by telephone or return email and destroy 
or delete this message along with any attachments immediately.

[NTSysADM] Re: raid 5? in 2016-

[J- P]

I was thinking a big raid 10, (8x500= 2tb) but no hot spare is a showstopper , 
as  they do not have any real IT in house, , it does stink that I will lose / 
sacrifice 2 bays for one hot spare.


Decided on RAID 10 (6x500gb ) for a total of 1.5TB and the hot spare



Jean-Paul Natola




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jonathan Raper <jra...@nwnit.com>
Sent: Tuesday, September 20, 2016 12:27 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: raid 5? in 2016


Yeah, I've run into that as well (no hot spare) and I want to smack whoever did 
the design/config.



As for your question, "aside from a losing some space wouldn't a  raid 6 and 
hot spare make MUCH more sense?"



Well, the answer is, "it depends"  (probably, but I like throwing that out 
there).



:)



This site has been around for YEARS, and provides a good overview of the 
differences (pros/cons/uses) for different RAID configurations:



http://www.acnc.com/raidedu/5



http://www.acnc.com/raidedu/6



I used it about 7 or 8 years ago to help me decide whether to go with RAID 10 
or 0+1 on an Oracle DB configuration. (and no, I don't remember which option I 
chose, or why).



Jonathan



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Doug Hobbs
Sent: Monday, September 19, 2016 3:39 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: raid 5? in 2016



"but still raid 5? and no hot spare?"  I've seen this more than once, There are 
a lot of people out there that were taught old school and that RAID 5 is the 
de-facto standard RAID setup so they stick with it for years and years!





From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: 16 September 2016 14:11
To: NT <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>>
Subject: [NTSysADM] raid 5? in 2016



So I inherited this server , (sitting on site since February) low and behold 
when I fire it up it turns out that whoever set it up used all 8 discs in a 
raid 5 (granted they are only 500gb enterprise ssd's ) but still raid 5? and no 
hot spare?



I'm trying to figure what the purpose of this server is/was, but aside from a 
losing some space wouldn't a  raid 6 and hot spare make MUCH more sense?



I'd like to move some of their VMs to it, as it is a brand spanking new r730 
with 96gb of ram










The University of Derby has a published policy regarding email and reserves the 
right to monitor email traffic.
If you believe this was sent to you in error, please reply to the sender and 
let them know.

Key University contacts: http://www.derby.ac.uk/its/contacts/

NOTE: This message and any attachments is intended solely for the use of the 
individual or entity to which it is addressed and may contain information that 
is non-public, proprietary, legally privileged, confidential, and/or exempt 
from disclosure. If you are not the intended recipient, you are hereby notified 
that any use, dissemination, distribution, or copying of this communication is 
strictly prohibited. If you have received this communication in error, please 
notify the original sender immediately by telephone or return email and destroy 
or delete this message along with any attachments immediately.

[NTSysADM] Re: to P or not to P(oe) was core suggestion

[J- P]

So I can get a juniper ex4300-48p   on newegg for 800 dollars less than the 
ex4300-48t from my vendor, both are new , both have the same specs , except the 
POE obviously


while I actually wont use the POE (because the heat it generates is way too 
much for the enclosed server cabinet), could there be any downside to getting 
this one?





I just cant justify the extra $$$





From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Kurt Buff <kurt.b...@gmail.com>
Sent: Wednesday, September 14, 2016 11:19 PM
To: ntsysadm
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

Yep - I'd certainly prefer the EX4300. Press the vendor on their
reasoning, or just go with another vendor.

Kurt

On Wed, Sep 14, 2016 at 6:40 AM, J- P <jnat...@hotmail.com> wrote:
> the vendor has come back with this recommendation
> http://www.juniper.net/us/en/products-services/switching/ex-series/ex3300/
[http://www.juniper.net/assets/img/video/video-joe-gibbs-racing.jpg]<http://www.juniper.net/us/en/products-services/switching/ex-series/ex3300/>

EX3300 Ethernet Switch – Juniper 
Networks<http://www.juniper.net/us/en/products-services/switching/ex-series/ex3300/>
www.juniper.net
EX3300 Support for converged data, voice, and video. The EX3300 Ethernet Switch 
is a compact, scalable solution for demanding converged enterprise access 
environments.



>
> this seems (based on the model number) inferior to the EX4300 Kurt
> recommended,  and whats worse is that the vendor is asking 3000 USD , heck,
> Newegg has the ex4300 for less than that
> https://www.neweggbusiness.com/Product/Product.aspx?Item=9SIV03829M5844_mc=KNC-GoogleBizMKPL-PC_mmc=KNC-GoogleBizMKPL-PC-_-pla-_-Network+-+Switches-_-9SIV03829M5844=CIHh_qf6js8CFVNZhgodO-MOeA
>
> Unless I'm missing something, I don't see why anyone would choose the 3300
> over the 4300 considering the prices
>
>
> 
> From: kurt.b...@gmail.com
> Date: Tue, 23 Aug 2016 15:38:57 -0700
> Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear
> GS748Tv5
> To: ntsysadm@lists.myitforum.com
>
> I'd take a hard look at a Juniper EX4300-48, but if money is a real sticking
> point, then look at the specs on an HP switch or a Ubiquiti.
>
> Kurt
>
> On Tue, Aug 23, 2016 at 3:21 PM, J- P <jnat...@hotmail.com> wrote:
>
> Yes lots of cad  Vectorworks  for the production  dept (15 users) amd lots
> of video editing, However, the video is done on a rendering pc, once.its
> completed ,  it goes back to the.synology
>
> 
> From: kurt.b...@gmail.com
> Date: Tue, 23 Aug 2016 15:00:15 -0700
> Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear
> GS748Tv5
> To: ntsysadm@lists.myitforum.com
>
> Any CAD or video editing, or similar high-bandwidth data movers?
>
> If not, then most anything will work.
>
> Do you have a personal preference for any brand? That is, are you well
> experienced with a particular brand of switch, or are you relatively
> inexperienced with switches?
>
> If you have a preference, stick with it. If not, I'd suggest either HP or
> Ubiquiti.
>
> If the environment has big data movers, then check the backplane capacity
> for the various switches, and you might consider Juniper as well as HP or
> Ubiquiti.
>
> I'm becoming more a fan of Juniper all the time, but they aren't much like
> Cisco or HP.
>
> Cisco would be my last resort, because of price more than anything else -
> they're otherwise fine switches.
>
> Kurt
>
> On Tue, Aug 23, 2016 at 2:33 PM, J- P <jnat...@hotmail.com> wrote:
>
> Currently flat,
> 60 workstations, 60 phones, 12 printers
> 8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip
> cameras
>
> A couple of synology that have 4 1gb nic
>
> i site  to site
>
> 4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers
> have 4 1 gb nics,
>
> primary internet is 100mb
> backup internet is 25mb
>
> about 20 concurrent  remote  users
>
> 
> From: kurt.b...@gmail.com
> Date: Tue, 23 Aug 2016 14:09:50 -0700
> Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear
> GS748Tv5
> To: ntsysadm@lists.myitforum.com
>
> How complex is the environment, how many staff are supported, how many
> VLANs, how much data moves across the LAN, what's the peak throughput, etc?
>
> Kurt
>
> On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:
>
> Got approval  for new core,
>
> Im thinking  Cisco or Procurve ,
> givem that all other switches are netgear and only have 1gb  sfp uplink
> ports 

[NTSysADM] raid 5? in 2016

[J- P]

So I inherited this server , (sitting on site since February) low and behold 
when I fire it up it turns out that whoever set it up used all 8 discs in a 
raid 5 (granted they are only 500gb enterprise ssd's ) but still raid 5? and no 
hot spare?


I'm trying to figure what the purpose of this server is/was, but aside from a 
losing some space wouldn't a  raid 6 and hot spare make MUCH more sense?


I'd like to move some of their VMs to it, as it is a brand spanking new r730 
with 96gb of ram

RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

[J- P]

the vendor has come back with this recommendation 
http://www.juniper.net/us/en/products-services/switching/ex-series/ex3300/
this seems (based on the model number) inferior to the EX4300 Kurt recommended, 
 and whats worse is that the vendor is asking 3000 USD , heck, Newegg has the 
ex4300 for less than 
thathttps://www.neweggbusiness.com/Product/Product.aspx?Item=9SIV03829M5844_mc=KNC-GoogleBizMKPL-PC_mmc=KNC-GoogleBizMKPL-PC-_-pla-_-Network+-+Switches-_-9SIV03829M5844=CIHh_qf6js8CFVNZhgodO-MOeA
Unless I'm missing something, I don't see why anyone would choose the 3300 over 
the 4300 considering the prices 


From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 15:38:57 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

I'd take a hard look at a Juniper EX4300-48, but if money is a real sticking 
point, then look at the specs on an HP switch or a Ubiquiti.

Kurt

On Tue, Aug 23, 2016 at 3:21 PM, J- P <jnat...@hotmail.com> wrote:



Yes lots of cad  Vectorworks  for the production  dept (15 users) amd lots of 
video editing, However, the video is done on a rendering pc, once.its completed 
,  it goes back to the.synology

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 15:00:15 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

Any CAD or video editing, or similar high-bandwidth data movers?

If not, then most anything will work.

Do you have a personal preference for any brand? That is, are you well 
experienced with a particular brand of switch, or are you relatively 
inexperienced with switches?

If you have a preference, stick with it. If not, I'd suggest either HP or 
Ubiquiti.

If the environment has big data movers, then check the backplane capacity for 
the various switches, and you might consider Juniper as well as HP or Ubiquiti.

I'm becoming more a fan of Juniper all the time, but they aren't much like 
Cisco or HP.

Cisco would be my last resort, because of price more than anything else - 
they're otherwise fine switches.

Kurt

On Tue, Aug 23, 2016 at 2:33 PM, J- P <jnat...@hotmail.com> wrote:



Currently flat,
60 workstations, 60 phones, 12 printers
8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip cameras

A couple of synology that have 4 1gb nic

i site  to site

4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers have 
4 1 gb nics,

primary internet is 100mb 
backup internet is 25mb

about 20 concurrent  remote  users

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 14:09:50 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

How complex is the environment, how many staff are supported, how many VLANs, 
how much data moves across the LAN, what's the peak throughput, etc?

Kurt

On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:



Got approval  for new core, 

Im thinking  Cisco or Procurve , 
givem that all other switches are netgear and only have 1gb  sfp uplink ports  
does anyone have suggestions, opinions , reccomendations ? 

TiA

From: melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 18:23:04 +









Core sort of implies layer 3.


 


--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.


 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Tuesday, August 23, 2016 12:17 PM

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5



 


Hmm, hack, alternative ,  not words  i feel comfy with when its a core switch  -



maybe  I'll  get them to buy something better




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 22:50:37 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com


Its been a long time since I've come across an equipment situation like this, 
but I've seen it before. When planned for, its a way to spend less on your 
equipment.  Unfortunately, sometimes
 people get caught in a situation realizing the hard-way, that they are missing 
some expected functionality.


 



As a last resort, I'd look into somehow hacking/activating the functionality.  
Perhaps an alternate firmware can be forced on it.










--

Espi


 





 


On Mon, Aug 22, 2016 at 6:53 PM, J- P <jnat...@hotmail.com> wrote:




Looks like you hit the nail on the head, per this article i need either a 2nd 
switch, or use the firewall



https://www.experts-exchange.com/questions/26167971/Netgear-GS748T-setting-up-several-VLAN's-but-having-DHCP-broadcasting-across-all-ports.html




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 17:16:10 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists

RE: [NTSysADM] remote mgmnt of core

[J- P]

Sconfig shows enabled, I believe its the tools,  I will spin up a 2012 full to 
confirm.


  

Jean-Paul Natola

 


From: charles.sulliva...@bc.edu
Date: Fri, 9 Sep 2016 12:22:20 -0400
Subject: RE: [NTSysADM] remote mgmnt of core
To: ntsysadm@lists.myitforum.com

First log on to the Core server, type “sconfig” and choose the option to allow 
Remote Management. If the Windows FW is running, you most likely need to do 
this. From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Christopher Bodnar
Sent: Friday, September 9, 2016 12:10 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] remote mgmnt of core To verify that this is the case, 
do you have a full GUI 2012 R2 box that you can use to try and manage the Core 
server? That should tell you if it is an issue with the OS version, or version 
of the tools.From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Melvin Backus
Sent: Thursday, September 08, 2016 1:42 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] remote mgmnt of core I believe you’re going to need a 
Win8.x or 2012 box to run the required tools.  You’re essentially trying to 
manage it from a Win7 equivalent.  You can manage older servers with the newer 
tools but the other way is hit or miss, mostly miss. --
There are 10 kinds of people in the world...
 those who understand binary and those who don't. From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Thursday, September 8, 2016 8:32 AM
To: NT <ntsysadm@lists.myitforum.com>
Subject: RE: [NTSysADM] remote mgmnt of core I was trying to connect from a 
2008r2 full gui server , using both computer management and server manager, are 
you saying to install RSAT on the 08 server?


 From: art.dekn...@cox.net
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] remote mgmnt of core
Date: Wed, 7 Sep 2016 19:06:10 -0700How are you trying to connect remotely? You 
are correct that there are ‘services and features’ missing from Core. That’s 
why they call it Core. Pretty much all the GUI stuff is unavailable. Generally, 
I add the RSAT to a desktop in the domain and can access the servers from that 
computer. From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: Wednesday, September 7, 2016 6:12 PM
To: NT <ntsysadm@lists.myitforum.com>
Subject: [NTSysADM] remote mgmnt of core Hi all, As I stated in previous this 
is my first full go at core 2012r2, one of the main issues I am getting is when 
I try to remote manage one, It will throw an error that it is not available,  
however, I can see things  like USERS and GROUPS, Shares,  Services, but other 
things  such as Disk management, Event viewer,  tell me that  its unavailable 
please make sure the computer in online (which obviously it is as I can see 
other things)I speculate that certain "services or features are missing  
from core?" that I need to add perhaps? Any feedback is appreciated. TIA
 - This message, and any attachments to 
it, may contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, you are notified that any use, dissemination, distribution, 
copying, or communication of this message is strictly prohibited. If you have 
received this message in error, please notify the sender immediately by return 
e-mail and delete the message and any attachments. Thank you.   
 

[NTSysADM] remote mgmnt of core

[J- P]

Hi all,
As I stated in previous this is my first full go at core 2012r2, one of the 
main issues I am getting is when I try to remote manage one,
It will throw an error that it is not available,  however, I can see things  
like USERS and GROUPS, Shares,  Services, but other things  such as Disk 
management, Event viewer,  tell me that  its unavailable please make sure the 
computer in online (which obviously it is as I can see other things)  


 I speculate that certain "services or features are missing  from core?" that I 
need to add perhaps?
Any feedback is appreciated.
TIA

 
  

RE: [NTSysADM] Lync / Skype

[J- P]

Thx for the feedback ,  im a bit confused though, in one response you said 
its.typical (edge for external comms and one.for.internal) , on the other 
hand.you said it could have been  a stalled or broken  config.

And there is no one to ask because  they just hired  a new "director of IT" 
who quite frankly  knows less than my 9 yr old nephew. 

This person does not even know how spin up a VM-

I will ask why there are two and see what the respnse is


From: mich...@smithcons.com
To: ntsysadm@lists.myitforum.com; excha...@lists.myitforum.com
Subject: RE: [NTSysADM] Lync / Skype
Date: Thu, 1 Sep 2016 16:06:05 +









There are number of configurations where this could be possible (Lync on the 
Edge, SfB on the backend, for example), but none of them are ideal and would 
generally
 indicate that a migration got stalled or broken in the middle. 
 
I would ask that question. Doing a DR on a broken config is generally not a 
simple thing to do.
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Thursday, September 1, 2016 8:45 AM

To: Exchange List; NT

Subject: [NTSysADM] Lync / Skype


 


Hi all,


 


First off excuse the cross-post , but I wasn't sure if it should be the 
Exchange or NT list;


 


To start forgive my ignorance here, but the last time I setup an MS  
communication server it was just that , 2005 Live communication server, which 
brings me to my question;




I'm doing a DR plan for a client, and their admin tells me they have a Lync 
Server and a Skype for business server,  I thought (and again forgive my lack 
of exp) that Skype for business was the replacement for Lync, if that is indeed 
the case why would they
 be running both?


 


the only thing I can tell you is that they have about 50 phones

  


 


TIA

 






  

RE: [NTSysADM] Lync / Skype

[J- P]

ok, will do
but why would something as small as 50 users require both a Lync and Skype, 
they are both VM's and each has the following
200GB disc20 GB ram4 V-CPU

Is it that resource intensive that for 50 users it requires 2 servers?
  



 


From: melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Lync / Skype
Date: Thu, 1 Sep 2016 13:03:19 +









Confirm the versions installed on each. 2010 still says Lync. 2013 now gets 
identified as Skype for Business.  They are in fact one and the same product.  
It’s
 creating an unimaginable amount of confusion for us right now as we have one 
of our clients who is moving to Lync / Skype for Business to replace one of the 
conferencing solutions they use.  They’ve actually been using/testing Lync 
internally for a couple
 of years now and we’ve federated with them, etc., but users don’t know that 
Skype isn’t really Skype, or is that Lync, or …  well, you kind of see my 
point. 
J
 
 

--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Thursday, September 1, 2016 8:45 AM

To: Exchange List <excha...@lists.myitforum.com>; NT 
<ntsysadm@lists.myitforum.com>

Subject: [NTSysADM] Lync / Skype


 


Hi all,


 


First off excuse the cross-post , but I wasn't sure if it should be the 
Exchange or NT list;


 


To start forgive my ignorance here, but the last time I setup an MS  
communication server it was just that , 2005 Live communication server, which 
brings me to my question;




I'm doing a DR plan for a client, and their admin tells me they have a Lync 
Server and a Skype for business server,  I thought (and again forgive my lack 
of exp) that Skype for business was the replacement for Lync, if that is indeed 
the case why would they
 be running both?


 


the only thing I can tell you is that they have about 50 phones

  


 


TIA

 


  

[NTSysADM] Lync / Skype

[J- P]

Hi all,
First off excuse the cross-post , but I wasn't sure if it should be the 
Exchange or NT list;
To start forgive my ignorance here, but the last time I setup an MS  
communication server it was just that , 2005 Live communication server, which 
brings me to my question;
I'm doing a DR plan for a client, and their admin tells me they have a Lync 
Server and a Skype for business server,  I thought (and again forgive my lack 
of exp) that Skype for business was the replacement for Lync, if that is indeed 
the case why would they be running both?
the only thing I can tell you is that they have about 50 phones
  


TIA

 
  

RE: [NTSysADM] Core to GUI hyperv hosts

[J- P]

This is my first go at it (never had one using core b4) but it turned out the 
binaries are missing , hence my inability to add the gui, 
I did try the PS as well
  

thanks

 


From: mich...@smithcons.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Core to GUI hyperv hosts
Date: Tue, 30 Aug 2016 16:00:28 +









Dude, if you are gonna do any real work in Server Core, you need to be using 
PowerShell.
 
Check out Get-WindowsFeature/Add-WindowsFeature. You want something like this:
 

 
That’s from Server 2012, Server 2012 R2 will look a little different.
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Tuesday, August 30, 2016 11:18 AM

To: NT

Subject: RE: [NTSysADM] Core to GUI hyperv hosts


 


I was trying to follow this guide but I do not see the option that this article 
shows


http://www.howtogeek.com/111967/how-to-turn-the-gui-off-and-on-in-windows-server-2012/


heck, half the options do not appear, what did I miss?


 



  



 







  

Jean-Paul Natola

 









From:
jnat...@hotmail.com

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] Core to GUI hyperv hosts

Date: Sun, 28 Aug 2016 19:29:37 -0400


Correct (I think) let me re-state


 


Physical 1 running core 2012r2 and HyperV (hosting full gui MBX CAS)


Physical 2 running core 2012r2 and HyperV (hosting full gui lync)


Physical 3 running core 2012r2 and HyperV (hosting full gui finance software)


 


I need to convert 3 physical Core 2012 hosts to GUI


 


thanks again




 









From:
mich...@smithcons.com

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] Core to GUI hyperv hosts

Date: Sun, 28 Aug 2016 23:02:55 +

You have a physical server, running Server Core, that is current hosting other 
VMs, such as CAS, MBX, and Lync. Those VMs are already full GUI. You just want
 to update the physical server currently running Server Core.
 
Is that correct? If so, go for it.  I’m not aware of any issues.
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Sunday, August 28, 2016 6:37 PM

To: NT

Subject: [NTSysADM] Core to GUI hyperv hosts


 


Hi all,


 


I need to convert a few servers from core to gui, these are 2012r2 HyperV 
hosts, my only concern is that  one  of them hosts  Exchange 2010 CAS, and MBX, 
 one  hosts LYNC , and the other
 RDS and  Finance APPs .


 


Aside from  being offline for the reboot , is there ANYTHING else I need to 
watch out for?


 


 


TIA






 







  

RE: [NTSysADM] Core to GUI hyperv hosts

[J- P]

I was trying to follow this guide but I do not see the option that this article 
showshttp://www.howtogeek.com/111967/how-to-turn-the-gui-off-and-on-in-windows-server-2012/heck,
 half the options do not appear, what did I miss?
  

  

Jean-Paul Natola

 


From: jnat...@hotmail.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Core to GUI hyperv hosts
Date: Sun, 28 Aug 2016 19:29:37 -0400




Correct (I think) let me re-state
Physical 1 running core 2012r2 and HyperV (hosting full gui MBX CAS)Physical 2 
running core 2012r2 and HyperV (hosting full gui lync)Physical 3 running core 
2012r2 and HyperV (hosting full gui finance software)
I need to convert 3 physical Core 2012 hosts to GUI
thanks again

 


From: mich...@smithcons.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Core to GUI hyperv hosts
Date: Sun, 28 Aug 2016 23:02:55 +









You have a physical server, running Server Core, that is current hosting other 
VMs, such as CAS, MBX, and Lync. Those VMs are already full GUI. You just want
 to update the physical server currently running Server Core.
 
Is that correct? If so, go for it.  I’m not aware of any issues.
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Sunday, August 28, 2016 6:37 PM

To: NT

Subject: [NTSysADM] Core to GUI hyperv hosts


 


Hi all,


 


I need to convert a few servers from core to gui, these are 2012r2 HyperV 
hosts, my only concern is that  one  of them hosts  Exchange 2010 CAS, and MBX, 
 one  hosts LYNC , and the other
 RDS and  Finance APPs .


 


Aside from  being offline for the reboot , is there ANYTHING else I need to 
watch out for?


 


 


TIA






 



  

RE: [NTSysADM] Core to GUI hyperv hosts

[J- P]

Correct (I think) let me re-state
Physical 1 running core 2012r2 and HyperV (hosting full gui MBX CAS)Physical 2 
running core 2012r2 and HyperV (hosting full gui lync)Physical 3 running core 
2012r2 and HyperV (hosting full gui finance software)
I need to convert 3 physical Core 2012 hosts to GUI
thanks again

 


From: mich...@smithcons.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Core to GUI hyperv hosts
Date: Sun, 28 Aug 2016 23:02:55 +









You have a physical server, running Server Core, that is current hosting other 
VMs, such as CAS, MBX, and Lync. Those VMs are already full GUI. You just want
 to update the physical server currently running Server Core.
 
Is that correct? If so, go for it.  I’m not aware of any issues.
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Sunday, August 28, 2016 6:37 PM

To: NT

Subject: [NTSysADM] Core to GUI hyperv hosts


 


Hi all,


 


I need to convert a few servers from core to gui, these are 2012r2 HyperV 
hosts, my only concern is that  one  of them hosts  Exchange 2010 CAS, and MBX, 
 one  hosts LYNC , and the other
 RDS and  Finance APPs .


 


Aside from  being offline for the reboot , is there ANYTHING else I need to 
watch out for?


 


 


TIA






 


  

[NTSysADM] Core to GUI hyperv hosts

[J- P]

Hi all,
I need to convert a few servers from core to gui, these are 2012r2 HyperV 
hosts, my only concern is that  one  of them hosts  Exchange 2010 CAS, and MBX, 
 one  hosts LYNC , and the other RDS and  Finance APPs .
Aside from  being offline for the reboot , is there ANYTHING else I need to 
watch out for?

TIA


 
  

RE: [NTSysADM] used/refurb/eol

[J- P]

H,
Something  must be going on then, because half the times i replace a 
switch/router/controller etc...
They need to upgrade  the firmware

From: mich...@smithcons.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] used/refurb/eol
Date: Wed, 24 Aug 2016 19:26:23 +









With Cisco, if you don’t have smartnet, you can’t legally get firmware updates.
 
If you look at Curvature’s support policy, it’s all about replacement hardware.

 
I don’t make comment about right/wrong/indifferent. That just has to figure 
into the company’s plans.
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Wednesday, August 24, 2016 9:50 AM

To: NT

Subject: [NTSysADM] used/refurb/eol


 

Hi all,
 
I decided to start a new thread as this is no longer a suggestion or 
recommendation of brands, 
 
As I mentioned in a previous thread, I service a company that uses only Cisco 
(and they have over 1000 centers), however, one thing I noticed is that they 
NEVER buy new, it is always used.
 
While I cannot mention the name of the company, I can mention the name of where 
they get the products from
https://www.curvature.com/
 
 
One thing I do like about them is that they offer an alternative to smartnet 
contract AND they support hardware after EOL
https://www.curvature.com/Services
 
I'm just wondering what is the consensus regarding this?




  

Jean-Paul Natola

 





  

[NTSysADM] used/refurb/eol

[J- P]

Hi
all,

 

I
decided to start a new thread as this is no longer a suggestion or
recommendation of brands, 

 

As
I mentioned in a previous thread, I service a company that uses only
Cisco (and they have over 1000 centers), however, one thing I noticed is that
they NEVER buy new, it is always used.

 

While
I cannot mention the name of the company, I can mention the name of where they
get the products from

https://www.curvature.com/

 

 

One
thing I do like about them is that they offer an alternative to smartnet
contract AND they support hardware after EOL

https://www.curvature.com/Services

 

I'm
just wondering what is the consensus regarding this?



  

Jean-Paul Natola

 
  

RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

[J- P]

Does anyone have a contact for Juniper, or do I buy from my regular  vendor 
(CDW/PCM etcc)

  



 


From: j...@smalltype.net
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 23:29:16 +






Support from JTAC on the Juniper product line has been fantastic in my 
experience.




On Aug 23, 2016, at 7:12 PM, J- P <jnat...@hotmail.com> wrote:



Asidr from the Cisco, who has the best support?



can i pick up the phone and get actual  human being on the phone? As this will 
become the core , support is a big.factor.




From: kurt.b...@gmail.com

Date: Tue, 23 Aug 2016 15:56:35 -0700

Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com




HP's command set is similar to, but much simpler than Cisco's. The web 
interfaces I've found to be mildly useful. I found it easy to transition from 
Cisco to HP.



Juniper's command set is a good deal different than Cisco's, and I like it more 
than I do Cisco's though it can be confusing until you get used to it. But the 
Juniper web site has a pretty cool Cisco-to-Juniper translator than can help, 
and the web interface,
 especially on the newest firmware, is pretty darn nice. Also, there are two 
display modes for command output on the Juniper - one of which is something 
like XML (the native interface, and I'm growing to like it), and another using 
"display set", which shows
 a more line-oriented output, more like Cisco's output.



Ubiquiti's don't have a terribly good command line - it's just easier to use 
the web interface in most cases, and I haven't had much need for the CLI on it. 
Bang for buck, they're very nice.




Kurt




On Tue, Aug 23, 2016 at 3:28 PM, J- P <jnat...@hotmail.com> wrote:



Im by no means  a ccna, but i do know Cisco as I service business  and that is 
all they  use , i dont do the full configs  as i just set them up, enable the 
port and web acces   (where applicable  ) and the "mother ship" takes over from
 there.



Now ive never used Procurve , brocade, juniper ,   but if the cli.is the same 
or similar im willimg.to explore




From: kurt.b...@gmail.com

Date: Tue, 23 Aug 2016 15:00:15 -0700

Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com











Any CAD or video editing, or similar high-bandwidth data movers?




If not, then most anything will work.




Do you have a personal preference for any brand? That is, are you well 
experienced with a particular brand of switch, or are you relatively 
inexperienced with switches?




If you have a preference, stick with it. If not, I'd suggest either HP or 
Ubiquiti.




If the environment has big data movers, then check the backplane capacity for 
the various switches, and you might consider Juniper as well as HP or Ubiquiti.




I'm becoming more a fan of Juniper all the time, but they aren't much like 
Cisco or HP.




Cisco would be my last resort, because of price more than anything else - 
they're otherwise fine switches.




Kurt






On Tue, Aug 23, 2016 at 2:33 PM, J- P <jnat...@hotmail.com> wrote:



Currently flat,

60 workstations, 60 phones, 12 printers

8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip cameras



A couple of synology that have 4 1gb nic



i site  to site



4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers have 
4 1 gb nics,



primary internet is 100mb 

backup internet is 25mb



about 20 concurrent  remote  users




From: kurt.b...@gmail.com

Date: Tue, 23 Aug 2016 14:09:50 -0700

Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com




How complex is the environment, how many staff are supported, how many VLANs, 
how much data moves across the LAN, what's the peak throughput, etc?




Kurt







On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:



Got approval  for new core, 



Im thinking  Cisco or Procurve , 

givem that all other switches are netgear and only have 1gb  sfp uplink ports  
does anyone have suggestions, opinions , reccomendations ? 



TiA




From: melvin.bac...@byers.com

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

Date: Tue, 23 Aug 2016 18:23:04 +



Core sort of implies layer 3. 

 

--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.


 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On
 Behalf Of J- P

Sent: Tuesday, August 23, 2016 12:17 PM

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5



 

Hmm, hack, alternative ,  not words  i feel comfy with when its a core switch  -



maybe  I'll  get them to buy something better




From: michealespin...@gmail.com

Da

RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

[J- P]

Asidr from the Cisco, who has the best support?

can i pick up the phone and get actual  human being on the phone? As this will 
become the core , support is a big.factor.

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 15:56:35 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

HP's command set is similar to, but much simpler than Cisco's. The web 
interfaces I've found to be mildly useful. I found it easy to transition from 
Cisco to HP.

Juniper's command set is a good deal different than Cisco's, and I like it more 
than I do Cisco's though it can be confusing until you get used to it. But the 
Juniper web site has a pretty cool Cisco-to-Juniper translator than can help, 
and the web interface, especially on the newest firmware, is pretty darn nice. 
Also, there are two display modes for command output on the Juniper - one of 
which is something like XML (the native interface, and I'm growing to like it), 
and another using "display set", which shows a more line-oriented output, more 
like Cisco's output.

Ubiquiti's don't have a terribly good command line - it's just easier to use 
the web interface in most cases, and I haven't had much need for the CLI on it. 
Bang for buck, they're very nice.

Kurt

On Tue, Aug 23, 2016 at 3:28 PM, J- P <jnat...@hotmail.com> wrote:



Im by no means  a ccna, but i do know Cisco as I service business  and that is 
all they  use , i dont do the full configs  as i just set them up, enable the 
port and web acces   (where applicable  ) and the "mother ship" takes over from 
there.

Now ive never used Procurve , brocade, juniper ,   but if the cli.is the same 
or similar im willimg.to explore

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 15:00:15 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

Any CAD or video editing, or similar high-bandwidth data movers?

If not, then most anything will work.

Do you have a personal preference for any brand? That is, are you well 
experienced with a particular brand of switch, or are you relatively 
inexperienced with switches?

If you have a preference, stick with it. If not, I'd suggest either HP or 
Ubiquiti.

If the environment has big data movers, then check the backplane capacity for 
the various switches, and you might consider Juniper as well as HP or Ubiquiti.

I'm becoming more a fan of Juniper all the time, but they aren't much like 
Cisco or HP.

Cisco would be my last resort, because of price more than anything else - 
they're otherwise fine switches.

Kurt

On Tue, Aug 23, 2016 at 2:33 PM, J- P <jnat...@hotmail.com> wrote:



Currently flat,
60 workstations, 60 phones, 12 printers
8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip cameras

A couple of synology that have 4 1gb nic

i site  to site

4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers have 
4 1 gb nics,

primary internet is 100mb 
backup internet is 25mb

about 20 concurrent  remote  users

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 14:09:50 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

How complex is the environment, how many staff are supported, how many VLANs, 
how much data moves across the LAN, what's the peak throughput, etc?

Kurt

On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:



Got approval  for new core, 

Im thinking  Cisco or Procurve , 
givem that all other switches are netgear and only have 1gb  sfp uplink ports  
does anyone have suggestions, opinions , reccomendations ? 

TiA

From: melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 18:23:04 +









Core sort of implies layer 3.


 


--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.


 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Tuesday, August 23, 2016 12:17 PM

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5



 


Hmm, hack, alternative ,  not words  i feel comfy with when its a core switch  -



maybe  I'll  get them to buy something better




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 22:50:37 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com


Its been a long time since I've come across an equipment situation like this, 
but I've seen it before. When planned for, its a way to spend less on your 
equipment.  Unfortunately, sometimes
 people get caught in a situation realizing the hard-way, that they are missing 
some expected functionality.


 



As a last resort, I'd look into somehow hacking/activating the functionality.  
Perha

RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

[J- P]

Im by no means  a ccna, but i do know Cisco as I service business  and that is 
all they  use , i dont do the full configs  as i just set them up, enable the 
port and web acces   (where applicable  ) and the "mother ship" takes over from 
there.

Now ive never used Procurve , brocade, juniper ,   but if the cli.is the same 
or similar im willimg.to explore

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 15:00:15 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

Any CAD or video editing, or similar high-bandwidth data movers?

If not, then most anything will work.

Do you have a personal preference for any brand? That is, are you well 
experienced with a particular brand of switch, or are you relatively 
inexperienced with switches?

If you have a preference, stick with it. If not, I'd suggest either HP or 
Ubiquiti.

If the environment has big data movers, then check the backplane capacity for 
the various switches, and you might consider Juniper as well as HP or Ubiquiti.

I'm becoming more a fan of Juniper all the time, but they aren't much like 
Cisco or HP.

Cisco would be my last resort, because of price more than anything else - 
they're otherwise fine switches.

Kurt

On Tue, Aug 23, 2016 at 2:33 PM, J- P <jnat...@hotmail.com> wrote:



Currently flat,
60 workstations, 60 phones, 12 printers
8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip cameras

A couple of synology that have 4 1gb nic

i site  to site

4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers have 
4 1 gb nics,

primary internet is 100mb 
backup internet is 25mb

about 20 concurrent  remote  users

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 14:09:50 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

How complex is the environment, how many staff are supported, how many VLANs, 
how much data moves across the LAN, what's the peak throughput, etc?

Kurt

On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:



Got approval  for new core, 

Im thinking  Cisco or Procurve , 
givem that all other switches are netgear and only have 1gb  sfp uplink ports  
does anyone have suggestions, opinions , reccomendations ? 

TiA

From: melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 18:23:04 +









Core sort of implies layer 3.


 


--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.


 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Tuesday, August 23, 2016 12:17 PM

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5



 


Hmm, hack, alternative ,  not words  i feel comfy with when its a core switch  -



maybe  I'll  get them to buy something better




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 22:50:37 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com


Its been a long time since I've come across an equipment situation like this, 
but I've seen it before. When planned for, its a way to spend less on your 
equipment.  Unfortunately, sometimes
 people get caught in a situation realizing the hard-way, that they are missing 
some expected functionality.


 



As a last resort, I'd look into somehow hacking/activating the functionality.  
Perhaps an alternate firmware can be forced on it.










--

Espi


 





 


On Mon, Aug 22, 2016 at 6:53 PM, J- P <jnat...@hotmail.com> wrote:




Looks like you hit the nail on the head, per this article i need either a 2nd 
switch, or use the firewall



https://www.experts-exchange.com/questions/26167971/Netgear-GS748T-setting-up-several-VLAN's-but-having-DHCP-broadcasting-across-all-ports.html




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 17:16:10 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com



Hi J-P,



 



I didnt really see a question in your initial post, but if I'm understanding 
your frustration correctly:  If there are no DHCP helper options, I dont see 
how this could work.  DHCP is a broadcast
 protocol, and needs a helper mechanism to cross networks.  I can only assume 
that this model is a lower-tiered option that is meant to be stacked with a 
higher-tiered managed switch.



 



I saw a similarly themed question posted here:



 



https://community.netgear.com/t5/Smart-Plus-Click-Switches/Why-have-none-of-Netgear-s-L2-switches-a-DHCP-relay-agent/td-p/500749



 










--

Espi


 





 


On Mon, Aug 22, 2016 at 1:29 PM, J- P <jnat...@hotmail.com> wrote:






Anyone, Bueller,



  





 






  

Jean-Paul Natola


 











From:
jnat...@hotmail.com

To: nts

RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

[J- P]

Yes lots of cad  Vectorworks  for the production  dept (15 users) amd lots of 
video editing, However, the video is done on a rendering pc, once.its completed 
,  it goes back to the.synology

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 15:00:15 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

Any CAD or video editing, or similar high-bandwidth data movers?

If not, then most anything will work.

Do you have a personal preference for any brand? That is, are you well 
experienced with a particular brand of switch, or are you relatively 
inexperienced with switches?

If you have a preference, stick with it. If not, I'd suggest either HP or 
Ubiquiti.

If the environment has big data movers, then check the backplane capacity for 
the various switches, and you might consider Juniper as well as HP or Ubiquiti.

I'm becoming more a fan of Juniper all the time, but they aren't much like 
Cisco or HP.

Cisco would be my last resort, because of price more than anything else - 
they're otherwise fine switches.

Kurt

On Tue, Aug 23, 2016 at 2:33 PM, J- P <jnat...@hotmail.com> wrote:



Currently flat,
60 workstations, 60 phones, 12 printers
8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip cameras

A couple of synology that have 4 1gb nic

i site  to site

4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers have 
4 1 gb nics,

primary internet is 100mb 
backup internet is 25mb

about 20 concurrent  remote  users

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 14:09:50 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

How complex is the environment, how many staff are supported, how many VLANs, 
how much data moves across the LAN, what's the peak throughput, etc?

Kurt

On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:



Got approval  for new core, 

Im thinking  Cisco or Procurve , 
givem that all other switches are netgear and only have 1gb  sfp uplink ports  
does anyone have suggestions, opinions , reccomendations ? 

TiA

From: melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 18:23:04 +









Core sort of implies layer 3.


 


--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.


 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Tuesday, August 23, 2016 12:17 PM

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5



 


Hmm, hack, alternative ,  not words  i feel comfy with when its a core switch  -



maybe  I'll  get them to buy something better




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 22:50:37 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com


Its been a long time since I've come across an equipment situation like this, 
but I've seen it before. When planned for, its a way to spend less on your 
equipment.  Unfortunately, sometimes
 people get caught in a situation realizing the hard-way, that they are missing 
some expected functionality.


 



As a last resort, I'd look into somehow hacking/activating the functionality.  
Perhaps an alternate firmware can be forced on it.










--

Espi


 





 


On Mon, Aug 22, 2016 at 6:53 PM, J- P <jnat...@hotmail.com> wrote:




Looks like you hit the nail on the head, per this article i need either a 2nd 
switch, or use the firewall



https://www.experts-exchange.com/questions/26167971/Netgear-GS748T-setting-up-several-VLAN's-but-having-DHCP-broadcasting-across-all-ports.html




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 17:16:10 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com



Hi J-P,



 



I didnt really see a question in your initial post, but if I'm understanding 
your frustration correctly:  If there are no DHCP helper options, I dont see 
how this could work.  DHCP is a broadcast
 protocol, and needs a helper mechanism to cross networks.  I can only assume 
that this model is a lower-tiered option that is meant to be stacked with a 
higher-tiered managed switch.



 



I saw a similarly themed question posted here:



 



https://community.netgear.com/t5/Smart-Plus-Click-Switches/Why-have-none-of-Netgear-s-L2-switches-a-DHCP-relay-agent/td-p/500749



 










--

Espi


 





 


On Mon, Aug 22, 2016 at 1:29 PM, J- P <jnat...@hotmail.com> wrote:






Anyone, Bueller,



  





 






  

Jean-Paul Natola


 











From:
jnat...@hotmail.com

To: ntsysadm@lists.myitforum.com

Subject: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

Date: Sat, 20 Aug 2016 19:47:11 -0400




Hi all,



 



I've been testing VLAN  on a GS748tv5  I emphas

RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

[J- P]

And of course you have to factor in approx 1.3 devices per person (all have 
phones, and about ine 3rd have tablets  )

From: jnat...@hotmail.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 17:33:15 -0400




Currently flat,
60 workstations, 60 phones, 12 printers
8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip cameras

A couple of synology that have 4 1gb nic

i site  to site

4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers have 
4 1 gb nics,

primary internet is 100mb 
backup internet is 25mb

about 20 concurrent  remote  users

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 14:09:50 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

How complex is the environment, how many staff are supported, how many VLANs, 
how much data moves across the LAN, what's the peak throughput, etc?

Kurt

On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:



Got approval  for new core, 

Im thinking  Cisco or Procurve , 
givem that all other switches are netgear and only have 1gb  sfp uplink ports  
does anyone have suggestions, opinions , reccomendations ? 

TiA

From: melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 18:23:04 +









Core sort of implies layer 3.


 


--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.


 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Tuesday, August 23, 2016 12:17 PM

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5



 


Hmm, hack, alternative ,  not words  i feel comfy with when its a core switch  -



maybe  I'll  get them to buy something better




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 22:50:37 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com


Its been a long time since I've come across an equipment situation like this, 
but I've seen it before. When planned for, its a way to spend less on your 
equipment.  Unfortunately, sometimes
 people get caught in a situation realizing the hard-way, that they are missing 
some expected functionality.


 



As a last resort, I'd look into somehow hacking/activating the functionality.  
Perhaps an alternate firmware can be forced on it.










--

Espi


 





 


On Mon, Aug 22, 2016 at 6:53 PM, J- P <jnat...@hotmail.com> wrote:




Looks like you hit the nail on the head, per this article i need either a 2nd 
switch, or use the firewall



https://www.experts-exchange.com/questions/26167971/Netgear-GS748T-setting-up-several-VLAN's-but-having-DHCP-broadcasting-across-all-ports.html




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 17:16:10 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com



Hi J-P,



 



I didnt really see a question in your initial post, but if I'm understanding 
your frustration correctly:  If there are no DHCP helper options, I dont see 
how this could work.  DHCP is a broadcast
 protocol, and needs a helper mechanism to cross networks.  I can only assume 
that this model is a lower-tiered option that is meant to be stacked with a 
higher-tiered managed switch.



 



I saw a similarly themed question posted here:



 



https://community.netgear.com/t5/Smart-Plus-Click-Switches/Why-have-none-of-Netgear-s-L2-switches-a-DHCP-relay-agent/td-p/500749



 










--

Espi


 





 


On Mon, Aug 22, 2016 at 1:29 PM, J- P <jnat...@hotmail.com> wrote:






Anyone, Bueller,



  





 






  

Jean-Paul Natola


 











From:
jnat...@hotmail.com

To: ntsysadm@lists.myitforum.com

Subject: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

Date: Sat, 20 Aug 2016 19:47:11 -0400




Hi all,



 



I've been testing VLAN  on a GS748tv5  I emphasize v5  as netgear tends to 
create different devices and only differentiate them by the version ,  as a 
matter of fact this device does not have
 a "ip-helper, or  dhcp relay" options  (yes I know,  its old , and crappy 
anyway),





So I created vlan5 , assigned it an IP 192.168.5.1 ,   added the firewall port 
and  test pc  port to the vlan and since I have no option for ip-helper or DHCP 
relay, the PC received no ip address (and yes, I did create the DHCP scope 
192.168.5.x  on my 08r2
 server, )



 



If I give the pc a static address (i.e  192.168.5.x ) I can then successfully 
ping 192.168.5.1 , further research said to enable DHCP option 82 on the DHCP 
server;



https://www.google.com/search?q=dhcp+option+82==



 



which of course doesn't exist in 08, so I tried to manually create option 82, 
still no joy-



 



if anyone can

RE: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5

[J- P]

Currently flat,
60 workstations, 60 phones, 12 printers
8 AP's,  about 12 poe door buzzers, pa's and they will be getting 12 ip cameras

A couple of synology that have 4 1gb nic

i site  to site

4 physical  servers, 2 of them hyperv   (hosting 4 vms each ) both servers have 
4 1 gb nics,

primary internet is 100mb 
backup internet is 25mb

about 20 concurrent  remote  users

From: kurt.b...@gmail.com
Date: Tue, 23 Aug 2016 14:09:50 -0700
Subject: Re: [NTSysADM] core suggestions was- VLAN dhcp issue Netgear GS748Tv5
To: ntsysadm@lists.myitforum.com

How complex is the environment, how many staff are supported, how many VLANs, 
how much data moves across the LAN, what's the peak throughput, etc?

Kurt

On Tue, Aug 23, 2016 at 1:49 PM, J- P <jnat...@hotmail.com> wrote:



Got approval  for new core, 

Im thinking  Cisco or Procurve , 
givem that all other switches are netgear and only have 1gb  sfp uplink ports  
does anyone have suggestions, opinions , reccomendations ? 

TiA

From: melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5
Date: Tue, 23 Aug 2016 18:23:04 +









Core sort of implies layer 3.


 


--

There are 10 kinds of people in the world...

 those who understand binary and those who don't.


 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of J- P

Sent: Tuesday, August 23, 2016 12:17 PM

To: ntsysadm@lists.myitforum.com

Subject: RE: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5



 


Hmm, hack, alternative ,  not words  i feel comfy with when its a core switch  -



maybe  I'll  get them to buy something better




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 22:50:37 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com


Its been a long time since I've come across an equipment situation like this, 
but I've seen it before. When planned for, its a way to spend less on your 
equipment.  Unfortunately, sometimes
 people get caught in a situation realizing the hard-way, that they are missing 
some expected functionality.


 



As a last resort, I'd look into somehow hacking/activating the functionality.  
Perhaps an alternate firmware can be forced on it.










--

Espi


 





 


On Mon, Aug 22, 2016 at 6:53 PM, J- P <jnat...@hotmail.com> wrote:




Looks like you hit the nail on the head, per this article i need either a 2nd 
switch, or use the firewall



https://www.experts-exchange.com/questions/26167971/Netgear-GS748T-setting-up-several-VLAN's-but-having-DHCP-broadcasting-across-all-ports.html




From:
michealespin...@gmail.com

Date: Mon, 22 Aug 2016 17:16:10 -0700

Subject: Re: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

To: ntsysadm@lists.myitforum.com



Hi J-P,



 



I didnt really see a question in your initial post, but if I'm understanding 
your frustration correctly:  If there are no DHCP helper options, I dont see 
how this could work.  DHCP is a broadcast
 protocol, and needs a helper mechanism to cross networks.  I can only assume 
that this model is a lower-tiered option that is meant to be stacked with a 
higher-tiered managed switch.



 



I saw a similarly themed question posted here:



 



https://community.netgear.com/t5/Smart-Plus-Click-Switches/Why-have-none-of-Netgear-s-L2-switches-a-DHCP-relay-agent/td-p/500749



 










--

Espi


 





 


On Mon, Aug 22, 2016 at 1:29 PM, J- P <jnat...@hotmail.com> wrote:






Anyone, Bueller,



  





 






  

Jean-Paul Natola


 











From:
jnat...@hotmail.com

To: ntsysadm@lists.myitforum.com

Subject: [NTSysADM] VLAN dhcp issue Netgear GS748Tv5

Date: Sat, 20 Aug 2016 19:47:11 -0400




Hi all,



 



I've been testing VLAN  on a GS748tv5  I emphasize v5  as netgear tends to 
create different devices and only differentiate them by the version ,  as a 
matter of fact this device does not have
 a "ip-helper, or  dhcp relay" options  (yes I know,  its old , and crappy 
anyway),





So I created vlan5 , assigned it an IP 192.168.5.1 ,   added the firewall port 
and  test pc  port to the vlan and since I have no option for ip-helper or DHCP 
relay, the PC received no ip address (and yes, I did create the DHCP scope 
192.168.5.x  on my 08r2
 server, )



 



If I give the pc a static address (i.e  192.168.5.x ) I can then successfully 
ping 192.168.5.1 , further research said to enable DHCP option 82 on the DHCP 
server;



https://www.google.com/search?q=dhcp+option+82==



 



which of course doesn't exist in 08, so I tried to manually create option 82, 
still no joy-



 



if anyone can share any thoughts it would be greatly appreciated



 



and before anyone asks, there is no CLI, no Shell, no Terminal on this POS 
switch



 



 





Jean-Paul Natola