Re: [NTSysADM] Advice: migrate to new file server

[Mike]

Ugh..I actually remember that (Z: drive for logon scripts). Now I feel
older than I normally do.

On Mon, Jan 29, 2018 at 10:23 PM, Kurt Buff  wrote:

> Youngsters these days...
>
> If I change the DVD/CD drive letter, I change it to Y:, because long
> ago, under some really old version of windows (3.1? wfwg 3.1x? I'm
> getting old - get off my lawn) logon scripts used Z:.
>
> You can find a vague reference to it here:
> http://www.oreilly.com/openbook/samba/book/ch06_06.html
>
> Heh.
>
> Kurt
>
> On Mon, Jan 29, 2018 at 2:42 PM, Dave Lum  wrote:
> > My typical buildout:
> >
> > Anything with a user share (other than a domain controller) gets a
> separate volume than the OS and the files live there. Database servers get
> at least two additional (logs for one, DB for the other). Server hosting
> applications with a lot of read/writes and or file growth get an additional
> volume as this allows easy movement/growth/reallocation of data volumes
> without impacting the host OS. Doing a file recovery can be simplified with
> this setup as there's lower risk of restoring the wrong applicaiotn
> file/setting*
> >
> > Single volume systems are infrastructure stuff like domain controllers,
> DHCP servers, and print server (depending on its load and if it's not also
> a file server).
> >
> > My OCD also sets the DVD drive to Z: so adding other drive letters is
> contiguous.
> >
> > Dave
> > * This is probably legacy thinking as I haven't run into this in many,
> many years.
> >
> >
> > -Original Message-
> > From: listsad...@lists.myitforum.com [mailto:listsadmin@lists.
> myitforum.com] On Behalf Of Kurt Buff
> > Sent: Monday, January 29, 2018 2:10 PM
> > To: ntsysadm 
> > Subject: Re: [NTSysADM] Advice: migrate to new file server
> >
> > Don't know about everybody, but I do it - because I hate it when someone
> copies a ton of big files to the driver that data shares with the OS, and
> the machine chokes. Makes for a very unpleasant time for the users.
> >
> > I've also had to do this on machines with hyperactive print queues.
> > Now, if I'm building a print server, the spool directory goes on a
> separate partition - doesn't really matter how big the partition is, even
> just a few gigs, as long as it doesn't share the OS partition.
> >
> > Kurt
> >
> > On Mon, Jan 29, 2018 at 1:40 PM, Gantry Zettler 
> wrote:
> >> "I'm hoping that the data is on a separate partition from the OS.
> >> That's pretty critical. "
> >>
> >> Is this what everyone else does?  Even on VMs?
> >>
> >>
> >>
> >> On Mon, Jan 29, 2018 at 3:16 PM, Melvin Backus
> >> 
> >> wrote:
> >>>
> >>> Ditto. I usually do this over a span of days or weeks. Big initial
> >>> copy, then incrementals periodically depending on normal usage, etc.
> >>> Last pass as I’m ready to make the move.  By that time we’re talking
> >>> about a few minutes because everything should be the same anyway,
> >>> just the time to scan the file systems.
> >>>
> >>>
> >>>
> >>> --
> >>> There are 10 kinds of people in the world...
> >>>  those who understand binary and those who don't.
> >>>
> >>>
> >>>
> >>> ¯\_(ツ)_/¯
> >>>
> >>>
> >>>
> >>> From: listsad...@lists.myitforum.com
> >>> [mailto:listsad...@lists.myitforum.com] On Behalf Of Charles F
> >>> Sullivan
> >>> Sent: Monday, January 29, 2018 2:58 PM
> >>> To: ntsysadm@lists.myitforum.com
> >>> Subject: Re: [NTSysADM] Advice: migrate to new file server
> >>>
> >>>
> >>>
> >>> I always use the /mir option when doing a migration like that. The
> >>> reason is I have to do a "big" initial copy and then at least one
> >>> delta copy. (I usually do the final copy after removing access by
> >>> changing share perms or removing the share entirely so no further
> >>> changes are made.) If I don't use the /mir option, users will likely
> >>> end up with data that is no longer supposed to be present. (This
> >>> assumes they will continue to have access to the old server while
> >>> copy job is running.)
> >>>
> >>>
> >>>
> >>> It's completely safe despite the warning in the help, at least in
> >>> this scenario. Unless I'm missing something, the new server will not
> >>> be accessible to users until you finish the migration, thus there
> >>> should be no extra data which could get deleted.
> >>>
> >>>
> >>>
> >>> On Mon, Jan 29, 2018 at 2:27 PM, Michael Leone 
> >>> wrote:
> >>>
> >>> I'd like to impose once more for some advice and opinions. I have a
> >>> Win
> >>> 2008 R2 file server; I need to migrate everything (shares and user
> >>> home
> >>> folders) to a Win 2012 R2 Storage Server, and then retire the old
> server.
> >>> Everything is one 1 drive, with 3 main folders (Shares,Users,Scans),
> >>> total size in the neighborhood of 2TB. Both have 4 teamed 1G NICs, so
> >>> a total bandwidth of 4G.
> >>>
> >>>
> >>>
> >>> I'm thinking of use robocopy. I would make a full copy over 

Re: [NTSysADM] Are the Meltdown/Spectre reg keys needed for workstations?

[Mike]

For CVE-2017-5754 [rogue data cache load] you are good as the PCID line
doesn't impact security.
For CVE-2017-5715 [branch target injection] you need a
microcode/BIOS/firmware update.

The Windows patch is installed
*Windows OS support for branch target injection mitigation is present: True*

But the hardware isn't fixed...
*Hardware support for branch target injection mitigation is present: False*

Which is causing the patch to be disabled...
*Windows OS support for branch target injection mitigation is disabled by
absence of hardware support: True*

As shown here...
*Windows OS support for branch target injection mitigation is enabled:
False*

Once the hardware gets its fix the last two should go True.

On Tue, Jan 9, 2018 at 4:23 PM, Michael Leone <oozerd...@gmail.com> wrote:

> I've already issued the registry entries, so it looks like this:
>
> Speculation control settings for CVE-2017-5715 [branch target injection]
>
> Hardware support for branch target injection mitigation is present: False
> Windows OS support for branch target injection mitigation is present: True
> Windows OS support for branch target injection mitigation is enabled: False
> Windows OS support for branch target injection mitigation is disabled by
> system policy: False
> Windows OS support for branch target injection mitigation is disabled by
> absence of hardware support: True
>
> Speculation control settings for CVE-2017-5754 [rogue data cache load]
>
> Hardware requires kernel VA shadowing: True
> Windows OS support for kernel VA shadow is present: True
> Windows OS support for kernel VA shadow is enabled: True
> Windows OS support for PCID optimization is enabled: False
>
> Suggested actions
>
>  * Install BIOS/firmware update provided by your device OEM that enables
> hardware support for the branch target injection mitigation.
>  * Follow the guidance for enabling Windows support for speculation
> control mitigations are described in https://support.microsoft.com/
> help/4072698
>
>
> BTIHardwarePresent : False
> BTIWindowsSupportPresent   : True
> BTIWindowsSupportEnabled   : False
> BTIDisabledBySystemPolicy  : False
> BTIDisabledByNoHardwareSupport : True
> KVAShadowRequired  : True
> KVAShadowWindowsSupportPresent : True
> KVAShadowWindowsSupportEnabled : True
> KVAShadowPcidEnabled   : False
>
>
>
> On Tue, Jan 9, 2018 at 3:58 PM, Mike <craigslist...@gmail.com> wrote:
>
>> Interesting. Can you post the output of the
>> Get-SpeculationControlSettings command?
>>
>> On Tue, Jan 9, 2018 at 3:12 PM, Michael Leone <oozerd...@gmail.com>
>> wrote:
>>
>>> On Tue, Jan 9, 2018 at 3:00 PM, Mike <craigslist...@gmail.com> wrote:
>>>
>>>> You only need the Registry entries on Server versions.
>>>> You do need hardware support to protect against CVE-2017-5715.
>>>>
>>>> Run the Get-SpeculationControlSettings PowerShell command to get the
>>>> details.
>>>> https://gallery.technet.microsoft.com/scriptcenter/Speculati
>>>> on-Control-e36f0050
>>>>
>>>
>>>
>>> I have run it. It didn't answer my question. If you don't run the
>>> registry entries, some values are false. I take "false" to mean "not as
>>> fully protected as you should be". Which indicates to me that I need the
>>> registry entries, even if it's not a server.
>>>
>>> Hence my question ...
>>>
>>>
>>
>

Re: [NTSysADM] Are the Meltdown/Spectre reg keys needed for workstations?

[Mike]

Interesting. Can you post the output of the Get-SpeculationControlSettings
command?

On Tue, Jan 9, 2018 at 3:12 PM, Michael Leone <oozerd...@gmail.com> wrote:

> On Tue, Jan 9, 2018 at 3:00 PM, Mike <craigslist...@gmail.com> wrote:
>
>> You only need the Registry entries on Server versions.
>> You do need hardware support to protect against CVE-2017-5715.
>>
>> Run the Get-SpeculationControlSettings PowerShell command to get the
>> details.
>> https://gallery.technet.microsoft.com/scriptcenter/Speculati
>> on-Control-e36f0050
>>
>
>
> I have run it. It didn't answer my question. If you don't run the registry
> entries, some values are false. I take "false" to mean "not as fully
> protected as you should be". Which indicates to me that I need the registry
> entries, even if it's not a server.
>
> Hence my question ...
>
>

Re: [NTSysADM] Are the Meltdown/Spectre reg keys needed for workstations?

[Mike]

You only need the Registry entries on Server versions.
You do need hardware support to protect against CVE-2017-5715.

Run the Get-SpeculationControlSettings PowerShell command to get the
details.
https://gallery.technet.microsoft.com/scriptcenter/Speculation-Control-e36f0050

On Tue, Jan 9, 2018 at 2:17 PM, Michael Leone  wrote:

> Here's something (more) I am confused about. Suppose I have Win 7 and Win
> 10 workstations, and I have properly patched the OS. Do I *also* need to
> issue the 2 (or is it 3) registry entries?
>
> I *thought* the registry entries were only for servers, but I have seen
> other statements that say that the Meltdown/Spectre fixes are *not* enabled
> until you issue the registry entries.
>
> So without the reg entries, you are effectively unpatched? The patches are
> there, but dormant?
>
> (neither of my home PCs have BIOS updates issued - one is for a very old
> Dell Optiplex 755 that I only use to connect to a NAS, and the other is one
> I assembled from parts back in 2011. Neither has has had a BIOS upgrade
> released in years. Ah, the joy )
>
>

Re: [NTSysADM] Surface and rdp small display

[Mike]

Windows 10 using the RDP app from the Store? If so you can try playing
around with the scaling settings in that app.

On Tue, Jan 9, 2018 at 9:45 AM, David McSpadden  wrote:

> I have been reading and applying hotfixes to my CFO’s surface but the RDP
> session is so small he cannot use his Surface to remote into his
> workstation in the office.
>
> What should I be really doing to fix this?
>
>
>
>
>
> *David McSpadden*
>
> Systems Administrator
>
> Indiana Members Credit Union
>
> P: 317.554.8190| F: 317.554.8106
>
> [image: Description: imcu email icon]   [image:
> Description: facebook email icon]
>   [image: Description: twitter
> email icon] 
>
> [image: Description: email logo]
>
> [image: Image result for mcp logo]
> 
>
>
>
> This e-mail and any files transmitted with it are property of Indiana
> Members Credit Union, are confidential, and are intended solely for the use
> of the individual or entity to whom this e-mail is addressed. If you are
> not one of the named recipient(s) or otherwise have reason to believe that
> you have received this message in error, please notify the sender and
> delete this message immediately from your computer. Any other use,
> retention, dissemination, forwarding, printing, or copying of this email is
> strictly prohibited.
>
> Please consider the environment before printing this email.
>

Re: [NTSysADM] OT: web filter for kids

[Mike]

You can use Umbrella to filter at the DNS level. It's free if you just want
to block adult content.
https://www.opendns.com/home-internet-security/

On Sat, Dec 23, 2017 at 11:23 PM, J- P  wrote:

>
> Let me preface this with a Merry Christmas and Happy Chanukah to all-
>
>
> Getting my niece and nephew their first windows laptops (10 and 8 yr old)
> * i know way too old , but my brother and sister in law are slacking
> HAHAHA-  and Ipads and kindles will NOT get them ready for the future-
>
>
> On that note , what is a good home web filter out there- I used
> Cybersitter in the late 90's (still around today)   just wondering what
> most of you do for your kids and family?
>
>
> TIA
>
>
> and Happy New Year
>
> Jean-Paul Natola
>
>

Re: [NTSysADM] RE: Crosspost: clearing the autocomplete cache

[Mike]

That's my understanding - it's in a hidden folder in the message store from
2010 onwards. The Stream_Autocomplete file in the file system is just there
for caching.

On Fri, Dec 1, 2017 at 2:22 PM, David Tobias  wrote:

> I may be mistaken, but starting in Outlook 2013/Outlook 2016, aren’t the
> AutoComplete cache entries now stored in the message store of the mailbox
> account and no longer in the local .nk2 file? When we upgraded recently
> from Office 2007 to 2016, I know as part of the upgrade…..Outlook 2016
> ingested the local .nk2 file into the message store
>
>
>
> What I can’t recall, is once that happened if it removes the old .nk2 file
> or just backs it up and renames it? If it’s still there, then I assume you
> have to clear out the cache, edit the local entries and then re-ingest the
> nk2 again?
>
>
>
> I think it’s a bigger issue, obviously, if you clear the cache and that
> local file isn’t present?
>
>
>
> ~Dave
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:listsadmin@lists.
> myitforum.com] *On Behalf Of *Joe Tinney
> *Sent:* Friday, December 01, 2017 9:14 AM
> *To:* ntsysadm@lists.myitforum.com
> *Cc:* excha...@lists.myitforum.com
> *Subject:* RE: [NTSysADM] RE: Crosspost: clearing the autocomplete cache
>
>
>
> I have used that utility with success and removed individual entries. It
> was years ago on Outlook 2010 but it worked without issue so long as
> Outlook was closed the whole time.
>
>
>
> On Dec 1, 2017 12:07, "Heaton, Joseph@Wildlife" <
> joseph.hea...@wildlife.ca.gov> wrote:
>
> Also, Nirsoft has a utility that supposedly lets you open up and edit the
> autocomplete file.  Has anyone used it?
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:listsadmin@lists.
> myitforum.com] *On Behalf Of *Michael B. Smith
> *Sent:* Friday, December 1, 2017 7:21 AM
> *To:* excha...@lists.myitforum.com; ntsysadm@lists.myitforum.com
> *Subject:* RE: [NTSysADM] RE: Crosspost: clearing the autocomplete cache
>
>
>
> Without restarting Outlook? That would require testing.
>
>
>
> But yes, when Outlook restarts it will.
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:listsadmin@lists.
> myitforum.com ] *On Behalf Of *Heaton,
> Joseph@Wildlife
> *Sent:* Friday, December 1, 2017 9:34 AM
> *To:* ntsysadm@lists.myitforum.com
> *Cc:* excha...@lists.myitforum.com
> *Subject:* [Exchange] RE: [NTSysADM] RE: Crosspost: clearing the
> autocomplete cache
>
>
>
> Guys, I am 100% completely onboard with you.  I don’t want to do this, but
> I’ve been directed to, and they’re not listening to reason.  So, does
> anyone know of a way to do this, without opening Outlook.  If I just
> rename/delete the original file, will Outlook recreate it automatically the
> first time the user sends a new e-mail?
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:listsadmin@lists.
> myitforum.com ] *On Behalf Of *Jack Kramer
> *Sent:* Thursday, November 30, 2017 1:50 PM
> *To:*  
> *Cc:* excha...@lists.myitforum.com
> *Subject:* Re: [NTSysADM] RE: Crosspost: clearing the autocomplete cache
>
>
>
> Oh, if he clears everyone’s autocomplete cache I’d put money on it being
> open carry versus concealed...
>
> 
> Jack Kramer, Senior Consultant
> Small Type Computing - www.smalltype.net
> W: 855-765-8973 x101 <(855)%20765-8973> - C: 248-635-4955
> <(248)%20635-4955>
>
>
>
> On Nov 30, 2017, at 2:48 PM, Webster  wrote:
>
>
>
> Be glad CA is not a concealed carry state!
>
>
>
>
>
> Webster
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:
> listsad...@lists.myitforum.com ] *On
> Behalf Of *Heaton, Joseph@Wildlife
> *Sent:* Thursday, November 30, 2017 10:05 AM
> *To:* 'NT System Admin Issues Discussion list' <
> ntsysadm@lists.myitforum.com>; excha...@lists.myitforum.com
> *Subject:* [NTSysADM] Crosspost: clearing the autocomplete cache
>
>
>
> Recently, we did a cleanup of proxy addresses that were no longer needed.
> Unfortunately, this has caused an issue with our users, as some of their
> autocomplete entries are using the old, now gone, proxy addresses.  I’ve
> been directed to clear everyone’s autocomplete cache.  I found a quick and
> easy command to do this, but it opens Outlook in order to perform the
> clean.  (outlook.exe /CleanAutoCompleteCache).  Having Outlook open
> spontaneously, or a second instance opening, would be very disconcerting
> and worrisome for our users, so I’d like to find a way to clean the cache,
> without opening Outlook.  Does anyone have a method?
>
>
>
> For the most part, all users are using Outlook 2016, but there are a few
> 2013, and 2010.
>
>
>
> Thanks,
>
>
>
> Joe Heaton
>
> Information Technology Operations Branch
>
> Data and Technology Division
>
> CA Department of Fish and Wildlife
>
> 1700 9th Street, 3rd Floor
>
> Sacramento, CA  95811
>
> Desk:  

Re: [NTSysADM] Exchange time insanity.

[Mike]

What if you send to a mailbox still on 2010? Same behavior?

On Thu, Jun 29, 2017 at 6:17 PM, Kennedy, Jim 
wrote:

> Stood up an Exch 2016 server in my 2010 org.  Moved my mailbox over more
> than a week ago.  It has been fine.  Moved another box today and the below
> started happening to both of us.  What you are seeing is emails I sent to
> myself.   The send time is listed to the right of my name, so 1:47 pm, 1:48
> pm and so on.  Next you see the received time.  It makes no sense.  That
> happens with internal mail and external mail.
>
>
>
> Time zones on the mailboxes, Outlook and servers are correct.  They all
> have the correct time from the domain.
>
>
>
>
>
>
>
>
>
>

Re: [NTSysADM] Keylogger Found in Audio Driver of HP Laptops

[Mike]

The Conexant software must be present on other laptops in the OEM image. I
wonder if this is HP specific somehow or if other manufacturers have the
same issue.

On Thu, May 11, 2017 at 10:08 AM, Micheal Espinola Jr <
michealespin...@gmail.com> wrote:

> https://www.bleepingcomputer.com/news/security/keylogger-
> found-in-audio-driver-of-hp-laptops/
>
> According to researchers, the keylogger feature was discovered in the
>> Conexant HD Audio Driver Package version 1.0.0.46 and earlier.
>>
>
>
> This is an audio driver that is preinstalled on HP laptops. One of the
>> files of this audio driver is MicTray64.exe (C:\windows\system32\
>> mictray64.exe).
>>
>
>
> This file is registered to start via a Scheduled Task every time the user
>> logs into his computer. According to modzero researchers, the file
>> "monitors all keystrokes made by the user to capture and react to functions
>> such as microphone mute/unmute keys/hotkeys."
>>
>
>
> *This behavior, by itself, is not a problem, as many other apps work this
>> way. The problem is that this file writes all keystrokes to a local file
>> at:*
>
>
>> *C:\users\public\MicTray.log*
>
>
> --
> Espi
>
>

Re: [NTSysADM] Minor mystery - Win 10 versions I don't recognize

[Mike Sullivan]

Check out https://buildfeed.net/page-1/

Here is your build that most of your Win 10 computers have:
https://buildfeed.net/build/718d71fd-1bf7-4da3-ab44-e33876244009

On Thu, Feb 2, 2017 at 11:01 AM, Kurt Buff <kurt.b...@gmail.com> wrote:

> All,
>
> I'm looking in my WSUS server for version of Win 10 in my user base,
> and am seeing some versions that aren't mentioned here:
> https://technet.microsoft.com/en-us/windows/release-info.aspx
>
>
> 10.0.10586.103 - Not listed
> 10.0.10586.672 - Not listed, this is on the majority of my Win 10 machines
> 10.0.1.14393.351 - Listed
> 10.0.1.14393.594 - Not listed
> 10.0.1.14393.693 - Listed
>
>
> Does anyone have a better source for versions?
>
> Kurt
>
>
>


-- 
Thank you,
Mike Sullivan

Re: [NTSysADM] IT Organization Design

[Mike Kanfer]

Thank you for this info and the info about DA accounts.  This is very
helpful!

On Sun, Jan 1, 2017 at 9:54 PM, Kurt Buff  wrote:

> We have a nominal staff of 3.5 sysadmins, serving ~250 staff across
> offices in 3 different countries. I say nominal because we're running
> one short at the moment. One of us is user/desktop-focused, I'm a
> generalist, there's the IT director, who is also a generalist. The .5
> position we're looking to fill will be more network-focused, and will
> also work with our engineering staff.
>
> Each of us has a normal non-privileged account, a workstation
> administration account, a server administration account and three of
> us have a DA account - the desktop guy doesn't have a DA account, yet.
> He's leaning quickly, though.
>
> Erik and Jon have it correct. Never share accounts, only assign
> privileges as needed.
>
> Kurt
>
>
>
>
>
> On Sun, Jan 1, 2017 at 12:01 PM, CSSU NetAdmin 
> wrote:
> > We are looking at re-organizing our IT department for our K-12 school
> > district.  Are there examples out there for how work is divided?  Do IT
> > staff focus on specific areas or is everyone more of a generalist?  We
> have
> > moved to Chromebooks in a big way and find how we are presently
> organized-
> > school based- really doesn't work anymore.  Finally, who uses the Least
> > Privilege Administrative model?  If you do, is there one domain admin
> > account shared for people who need admin rights or do each IT staff
> person
> > have two accounts?
> >
> > Thanks for any ideas.  Happy New Year!
>
>
>

Re: [NTSysADM] Windows 2012 R2 GPO Mapping Issue

[Mike Kanfer]

Bingo!  That's was it.  Thank you!!

On Sun, Nov 20, 2016 at 9:11 AM, Eric Wittersheim <
eric.wittersh...@gmail.com> wrote:

> Are the users local admins? UAC can block mapped drives when the users are
> administrators. You can check this by opening up a cmd prompt and switch to
> the mapped drive letter. This shows the gpo is working but it's mapping the
> drive for Administrator instead of the intended user.
>
> Eric
>
> On Sat, Nov 19, 2016 at 9:00 PM Mike Kanfer <mkan...@cssu.org> wrote:
>
>> We have a GPO that is applied to Authenticated Users and linked to our
>> domain.  In it, we have a mapped drive which isn't work.  Looking at
>> GPResult shows the policy being applied.  Using NET USE, we can map the
>> drive with a user logged in.  We have unchecked, reconnect at logon and it
>> still doesn't work.  The drive map action is Create. We also tried Update.
>> The GPO does work because other elements- a message on the logon screen is
>> displayed.  The DC is a Windows 2012 R2 server and the workstation is a
>> Windows 10 Pro version.  It also is not working on a Windows 2012 R2
>> terminal server.
>>
>> Any help would be appreciated.
>>
>

Re: [NTSysADM] Windows 2012 R2 GPO Mapping Issue

[Mike Kanfer]

The only entry in the Event Viewer is that the group policy settings for
the user were processed successful.  Gpresult shows that the mappings were
successful. No errors to be found anywhere - and no drive mappings.

On Sun, Nov 20, 2016 at 2:50 AM, James Rankin  wrote:

> There should be an event written to the logs as to why the mapping
> failed...
>
> Sent from my slightly schizophrenic, but rather cool, BlackBerry Android
> *From:* mkan...@cssu.org
> *Sent:* 20 November 2016 3:02 a.m.
> *To:* ntsysadm@lists.myitforum.com
> *Reply to:* ntsysadm@lists.myitforum.com
> *Subject:* [NTSysADM] Windows 2012 R2 GPO Mapping Issue
>
> We have a GPO that is applied to Authenticated Users and linked to our
> domain.  In it, we have a mapped drive which isn't work.  Looking at
> GPResult shows the policy being applied.  Using NET USE, we can map the
> drive with a user logged in.  We have unchecked, reconnect at logon and it
> still doesn't work.  The drive map action is Create. We also tried Update.
> The GPO does work because other elements- a message on the logon screen is
> displayed.  The DC is a Windows 2012 R2 server and the workstation is a
> Windows 10 Pro version.  It also is not working on a Windows 2012 R2
> terminal server.
>
> Any help would be appreciated.
>

[NTSysADM] Windows 2012 R2 GPO Mapping Issue

[Mike Kanfer]

We have a GPO that is applied to Authenticated Users and linked to our
domain.  In it, we have a mapped drive which isn't work.  Looking at
GPResult shows the policy being applied.  Using NET USE, we can map the
drive with a user logged in.  We have unchecked, reconnect at logon and it
still doesn't work.  The drive map action is Create. We also tried Update.
The GPO does work because other elements- a message on the logon screen is
displayed.  The DC is a Windows 2012 R2 server and the workstation is a
Windows 10 Pro version.  It also is not working on a Windows 2012 R2
terminal server.

Any help would be appreciated.

Re: [NTSysADM] Lync / Skype

[Mike]

It's typical to have two or more Lync/Skype servers...an Edge server on the
perimeter for external access and another internally for the backend. In
fact for external access an Edge server is required.

It's not typical to have two versions for an extended period. You'd expect
to see all the servers roles as Lync 2010 or 2013 or all Skype 2015. As
Michael said they might have been doing a migration and got stuck, they
need the older version around for a removed feature, or they finished
migrating but haven't decommissioned the old server yet.

On Thu, Sep 1, 2016 at 4:41 PM, J- P  wrote:

> Thx for the feedback ,  im a bit confused though, in one response you said
> its.typical (edge for external comms and one.for.internal) , on the other
> hand.you said it could have been  a stalled or broken  config.
>
> And there is no one to ask because  they just hired  a new "director of
> IT"
> who quite frankly  knows less than my 9 yr old nephew.
>
> This person does not even know how spin up a VM-
>
> I will ask why there are two and see what the respnse is
>
>
> --
> From: mich...@smithcons.com
> To: ntsysadm@lists.myitforum.com; excha...@lists.myitforum.com
> Subject: RE: [NTSysADM] Lync / Skype
> Date: Thu, 1 Sep 2016 16:06:05 +
>
> There are number of configurations where this could be possible (Lync on
> the Edge, SfB on the backend, for example), but none of them are ideal and
> would generally indicate that a migration got stalled or broken in the
> middle.
>
>
>
> I would ask that question. Doing a DR on a broken config is generally not
> a simple thing to do.
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:listsadmin@lists.
> myitforum.com] *On Behalf Of *J- P
> *Sent:* Thursday, September 1, 2016 8:45 AM
> *To:* Exchange List; NT
> *Subject:* [NTSysADM] Lync / Skype
>
>
>
> Hi all,
>
>
>
> First off excuse the cross-post , but I wasn't sure if it should be the
> Exchange or NT list;
>
>
>
> To start forgive my ignorance here, but the last time I setup an MS
>  communication server it was just that , 2005 Live communication server,
> which brings me to my question;
>
>
> I'm doing a DR plan for a client, and their admin tells me they have a
> Lync Server and a Skype for business server,  I thought (and again forgive
> my lack of exp) that Skype for business was the replacement for Lync, if
> that is indeed the case why would they be running both?
>
>
>
> the only thing I can tell you is that they have about 50 phones
>
>
>
>
> TIA
>
>

RE: [NTSysADM] RE: OTish Cisco Sticky Macs.

[Mike French]

Have you tried using:

Spanning-tree portfast

On those edge ports?

This is basically what we configure on our edge ports and don't have that issue:

macro name Clients
switchport mode access
switchport access vlan XX
switchport nonegotiate
switchport port-security
switchport port-security mac-address sticky
switchport port-security maximum 1
switchport port-security violation restrict
spanning-tree portfast
spanning-tree bpduguard enable


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mayo, Bill
Sent: Thursday, September 11, 2014 8:39 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: OTish Cisco Sticky Macs.

We use sticky MACs, but have not had the problem you describe.  One thing we 
have encountered is our workstation staff moving computers to a different port 
that is lower in the stack and the sticky address on the higher port 
prevents traffic from making it to the new location.  (In this context, lower 
means further away from the core/root switch).  In those cases, though, it is 
not slower-they just can't connect to anything at all.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kennedy, Jim
Sent: Thursday, September 11, 2014 9:22 AM
To: 'ntsysadm@lists.myitforum.com'
Subject: [NTSysADM] OTish Cisco Sticky Macs.


Has anyone else used sticky macs on Cisco and experienced a longer than normal 
delay in network connectivity when a computer first starts up?  I ask because I 
am currently experiencing a rash of Red X's on Win 7 boxes first thing in the 
morning. After a few reboots or just waiting a bit they connect.  Certainly 
have seen this on many occasions with Win 7 but never this bad, it's an 
epidemic.



So far, it SEEMS to only be happening in one building, the only building in the 
system that has sticky macs enforced. But that may be a red herring...it is 
also our busiest building and in others they don't use the mapped drives much. 
Also the users here are far more mobile, going from computer to computer.



The usual stuff has been triple check...always wait for network...and so on in 
the GP's.

The information contained in this email is confidential and intended only for 
the exclusive use of the addressee. Copying, distributing or any other use of 
this communication by the addressee or any other person or entity is 
prohibited. If you have received this communication by mistake, notify the 
sender immediately and destroy all forms of this communication (electronic or 
paper).

Re: [NTSysADM] Surface

[Mike Sullivan]

: I.F. Begley,  A.J. Dowling, P. Duchars, P.N. Eckersley, J.J.
 Scott, S.J. Turner

 SMP Capital Markets Limited registered in the Isle of Man, Company
 Registration No: 002438V
 Directors: M.W. Denton, M.J. Derbyshire, D.F Hudson, S.E McGowan, O. Peck,
 J.J. Scott.

 SMP Partners Limited, SMP Trustees Limited, SMP Fund Services Limited, SMP
 Accounting  Tax Limited and SMP Capital Markets Limited are members of the
 SMP Partners Group of Companies.



 This email is confidential and is subject to disclaimers. Details can be
 found at: http://www.smppartners.com/disclaimer.html
 __
 This email has been scanned by the Symantec Email Security.cloud service.
 For more information please visit http://www.symanteccloud.com
 __




-- 
Thank you,
Mike Sullivan

RE: [NTSysADM] RE: server migration w/new HDs

[Mike Tobias]

Glad to hear it all worked out.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jesse Rink
Sent: Tuesday, May 06, 2014 11:25 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: server migration w/new HDs

Yep, I marked them with labels before swapping everything.

The WSB backup to a USB drive and then a WSB restore to the (4) new 2TB drives 
worked perfectly.  3rd time I used WSB for a server restore, 3rd time it worked 
as expected.  Thanks for all the input.   Server is performing great.

JR


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Rene de Haas
Sent: Friday, May 2, 2014 3:04 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: server migration w/new HDs


Good luck.
Make sure you can see which bay a drive came from. Just in case.
Op 30 apr. 2014 16:35 schreef Jesse Rink 
jr...@sourceonetechnology.commailto:jr...@sourceonetechnology.com het 
volgende:

I plan on just pulling all 4 1TB drives out, jamming in the 4 new 2TB drives, 
and doing a WSB restore.   Thanks for all the input.

JR




From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] on 
behalf of Ken Schaefer [k...@kj.net.aumailto:k...@kj.net.au]
Sent: Wednesday, April 30, 2014 5:15 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: server migration w/new HDs
If your backup/restore process doesn’t work, this is probably one of the better 
times to find out (since the old disks are available and have current data). 
Far better to find out now that it doesn’t work, rather than when you really 
need it.

Cheers
Ken

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Micheal Espinola Jr
Sent: Tuesday, 29 April 2014 10:48 AM
To: ntsysadm
Subject: Re: [NTSysADM] RE: server migration w/new HDs

Backup/restore situations are often ones that bite people in the ass when they 
least expect it to.  In this situation, I would not opt to put that to the test 
unless it was absolutely a neccessity.

--
Espi


On Mon, Apr 28, 2014 at 3:01 PM, Kent McKinney 
k...@kentmckinney.netmailto:k...@kentmckinney.net wrote:
Even if you swap one drive at a time and get the virtual disk size increased, 
the OS partition would also need to be resized. Its time consuming and will 
greatly affect server performance. Safest way is to install the server backup 
feature, do a system state backup, pull the old drives out (with existing data 
intact that you can always roll back to) create the new array and restore.

--- Original Message ---

From: Maglinger, Paul pmaglin...@scvl.commailto:pmaglin...@scvl.com
Sent: April 28, 2014 5:34 PM
To: 'ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com' 
ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: server migration w/new HDs

This is a multi-part message in MIME format.


--_000_36DA94300D69184A91500B695547A148481711CCCOMSTAR1scvlcom_
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

I just talked with someone about a similar situation.
HP-UX server running 2 72G mirrored drives and had one fail.  The vendor su=
bbed a 146G drive.  In this case it would rebuild to only 72G of the 146 dr=
ive, but the vendor said that if the other 72 drive failed and was replaced=
 with the 146 then I could extend it to the full 146 at that point
.
I have not tested this, and am not sure if it would work, but wondering if =
you could replace the drives one at a time allowing for the rebuild.  I did=
 something similar with a EVA SAN and was successful.  It took a long time,=
 but I didn't have to take the system down.  I'm not sure I'd risk it on a =
production system.
Can you do a system level backup/restore?
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com=
] On Behalf Of Jesse Rink
Sent: Monday, April 28, 2014 4:07 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] server migration w/new HDs
Have a Dell T310 server with (4) 1TB sas drives in a RAID5 array, running W=
indows 2008R2.  Need to replace the drives with (4) 2TB sas drives in a RAI=
D5 array.Server only holds 4 physical HD bays so I can't just add an ex=
tra array.  Curious if anyone has any tricks to speeding up this migration =
other than rebuilding the OS from scratch on the (4) new 2Tb sas drives and=
 reinstalling all the app
s on the server, etc.



JR

RE: [NTSysADM] Forensic Software Undelete / Recovery

[Mike Tobias]

Excellent to know. Thanks.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Micheal Espinola Jr
Sent: Wednesday, April 30, 2014 2:45 PM
To: ntsysadm
Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery

Gotcha.  Proper cloning software will do a bit-by-bit copy, which will retain 
all artifacts on the drive - including any data that is 
hidden/deleted/recoverable, etc.  When looking for copy/backup software for 
forensics, 'bit copy' is a key-phrase to be mindful for.

--
Espi


On Wed, Apr 30, 2014 at 10:44 AM, Mike Tobias 
m...@bridgepointtechnologies.netmailto:m...@bridgepointtechnologies.net 
wrote:
I didn't mean to imply that making any changes to the original drive was 
acceptable. All such software I've used in the past (for recovering deleted 
files) forced me to specify a separate drive for storing the recovered data, as 
it should. I just didn't know one would be able to recover deleted files from a 
copy of the drive, never tried it. I used to use Partition Magic or Ghost for 
this, more recently Partition Wizard or CloneZilla.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Micheal Espinola Jr
Sent: Wednesday, April 30, 2014 12:59 PM
To: ntsysadm

Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery

That would be the desired intent, yes.  The last thing you want to do is 
perform active forensics and recovery on the volume under suspicion.  When it 
comes time for legal action, you mucking around with the live data can have a 
very undesirable effect on your litigation.  Plus, if you ever have to hand-off 
to the Fed's, etc, you can retain copies for your own continued research while 
they separately mount their case.

--
Espi


On Wed, Apr 30, 2014 at 9:48 AM, Mike Tobias 
m...@bridgepointtechnologies.netmailto:m...@bridgepointtechnologies.net 
wrote:
I'm noting these recommendations too, even though I didn't start the thread. 
Interesting that you would run this on the copy and not the original. Are you 
making sector by sector copies that also somehow copy deleted files to the 
target?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Matthew W. Ross
Sent: Wednesday, April 30, 2014 12:19 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery

Pro-active? No idea.

When we have to collect evidence, we do the following:

1. Confiscate the hardware.
2. Make copies.
3. Run discovery software. If you can, do this on the copy you made, not the 
original.

The software we use is OSForensics, the free edition. I'm sure there are some 
much beefier programs out there.

Also useful (for us in particular) is the BrowsingHistoryView from NirSoft. It 
allows you to quickly create a view of all browsing history on a computer 
broken down by user, which is often what we need to investigate.


--Matt Ross
Ephrata School District
John Bonner nfs_j...@hotmail.commailto:nfs_j...@hotmail.com , 4/29/2014 
8:44 PM:
Hello,

I am looking for some recommendations on forensics recovery software. I (the 
company really) am willing to throw some $$$ at it as well. We often (not 
always) have proprietary / patentable information exposed to us by our clients 
and looking for a way to handle a situation should it arise with an employee.

I am interested in two things.


  1.  Postumous recovery. Deleted files / browser cache / history to see what 
sites were visited / recover deleted files and such.
  2.  Pro-active monitoring that we could incorporate into our base install. 
Something that runs unbeknownst and perhaps when files are deleted really are 
moved to a secret partition or along those lines.

I personally have used r-tools and have been pleased with the results but I 
think the execs are looking for a more enterprise grade product.

Thank You for your thoughts / recommendations

JB

RE: [NTSysADM] RE: server migration w/new HDs

[Mike Tobias]

I strongly agree. Also, I've never had a problem shrinking or expanding 
partitions using the built in Windows function, not to say that couldn't happen 
if there is a physical problem on the disk.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Ken Schaefer
Sent: Wednesday, April 30, 2014 6:15 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: server migration w/new HDs

If your backup/restore process doesn't work, this is probably one of the better 
times to find out (since the old disks are available and have current data). 
Far better to find out now that it doesn't work, rather than when you really 
need it.

Cheers
Ken

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Micheal Espinola Jr
Sent: Tuesday, 29 April 2014 10:48 AM
To: ntsysadm
Subject: Re: [NTSysADM] RE: server migration w/new HDs

Backup/restore situations are often ones that bite people in the ass when they 
least expect it to.  In this situation, I would not opt to put that to the test 
unless it was absolutely a neccessity.

--
Espi


On Mon, Apr 28, 2014 at 3:01 PM, Kent McKinney 
k...@kentmckinney.netmailto:k...@kentmckinney.net wrote:
Even if you swap one drive at a time and get the virtual disk size increased, 
the OS partition would also need to be resized. Its time consuming and will 
greatly affect server performance. Safest way is to install the server backup 
feature, do a system state backup, pull the old drives out (with existing data 
intact that you can always roll back to) create the new array and restore.

--- Original Message ---

From: Maglinger, Paul pmaglin...@scvl.commailto:pmaglin...@scvl.com
Sent: April 28, 2014 5:34 PM
To: 'ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com' 
ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: server migration w/new HDs

This is a multi-part message in MIME format.


--_000_36DA94300D69184A91500B695547A148481711CCCOMSTAR1scvlcom_
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

I just talked with someone about a similar situation.
HP-UX server running 2 72G mirrored drives and had one fail.  The vendor su=
bbed a 146G drive.  In this case it would rebuild to only 72G of the 146 dr=
ive, but the vendor said that if the other 72 drive failed and was replaced=
 with the 146 then I could extend it to the full 146 at that point
.
I have not tested this, and am not sure if it would work, but wondering if =
you could replace the drives one at a time allowing for the rebuild.  I did=
 something similar with a EVA SAN and was successful.  It took a long time,=
 but I didn't have to take the system down.  I'm not sure I'd risk it on a =
production system.
Can you do a system level backup/restore?
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com=
] On Behalf Of Jesse Rink
Sent: Monday, April 28, 2014 4:07 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] server migration w/new HDs
Have a Dell T310 server with (4) 1TB sas drives in a RAID5 array, running W=
indows 2008R2.  Need to replace the drives with (4) 2TB sas drives in a RAI=
D5 array.Server only holds 4 physical HD bays so I can't just add an ex=
tra array.  Curious if anyone has any tricks to speeding up this migration =
other than rebuilding the OS from scratch on the (4) new 2Tb sas drives and=
 reinstalling all the app
s on the server, etc.



JR

RE: [NTSysADM] Forensic Software Undelete / Recovery

[Mike Tobias]

I’m noting these recommendations too, even though I didn’t start the thread. 
Interesting that you would run this on the copy and not the original. Are you 
making sector by sector copies that also somehow copy deleted files to the 
target?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matthew W. Ross
Sent: Wednesday, April 30, 2014 12:19 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery

Pro-active? No idea.

When we have to collect evidence, we do the following:

1. Confiscate the hardware.
2. Make copies.
3. Run discovery software. If you can, do this on the copy you made, not the 
original.

The software we use is OSForensics, the free edition. I'm sure there are some 
much beefier programs out there.

Also useful (for us in particular) is the BrowsingHistoryView from NirSoft. It 
allows you to quickly create a view of all browsing history on a computer 
broken down by user, which is often what we need to investigate.


--Matt Ross
Ephrata School District

John Bonner nfs_j...@hotmail.commailto:nfs_j...@hotmail.com , 4/29/2014 
8:44 PM:
Hello,

I am looking for some recommendations on forensics recovery software. I (the 
company really) am willing to throw some $$$ at it as well. We often (not 
always) have proprietary / patentable information exposed to us by our clients 
and looking for a way to handle a situation should it arise with an employee.

I am interested in two things.


  1.  Postumous recovery. Deleted files / browser cache / history to see what 
sites were visited / recover deleted files and such.
  2.  Pro-active monitoring that we could incorporate into our base install. 
Something that runs unbeknownst and perhaps when files are deleted really are 
moved to a secret partition or along those lines.

I personally have used r-tools and have been pleased with the results but I 
think the execs are looking for a more enterprise grade product.

Thank You for your thoughts / recommendations

JB

RE: [NTSysADM] Forensic Software Undelete / Recovery

[Mike Tobias]

I didn't mean to imply that making any changes to the original drive was 
acceptable. All such software I've used in the past (for recovering deleted 
files) forced me to specify a separate drive for storing the recovered data, as 
it should. I just didn't know one would be able to recover deleted files from a 
copy of the drive, never tried it. I used to use Partition Magic or Ghost for 
this, more recently Partition Wizard or CloneZilla.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Micheal Espinola Jr
Sent: Wednesday, April 30, 2014 12:59 PM
To: ntsysadm
Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery

That would be the desired intent, yes.  The last thing you want to do is 
perform active forensics and recovery on the volume under suspicion.  When it 
comes time for legal action, you mucking around with the live data can have a 
very undesirable effect on your litigation.  Plus, if you ever have to hand-off 
to the Fed's, etc, you can retain copies for your own continued research while 
they separately mount their case.

--
Espi


On Wed, Apr 30, 2014 at 9:48 AM, Mike Tobias 
m...@bridgepointtechnologies.netmailto:m...@bridgepointtechnologies.net 
wrote:
I'm noting these recommendations too, even though I didn't start the thread. 
Interesting that you would run this on the copy and not the original. Are you 
making sector by sector copies that also somehow copy deleted files to the 
target?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Matthew W. Ross
Sent: Wednesday, April 30, 2014 12:19 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery

Pro-active? No idea.

When we have to collect evidence, we do the following:

1. Confiscate the hardware.
2. Make copies.
3. Run discovery software. If you can, do this on the copy you made, not the 
original.

The software we use is OSForensics, the free edition. I'm sure there are some 
much beefier programs out there.

Also useful (for us in particular) is the BrowsingHistoryView from NirSoft. It 
allows you to quickly create a view of all browsing history on a computer 
broken down by user, which is often what we need to investigate.


--Matt Ross
Ephrata School District
John Bonner nfs_j...@hotmail.commailto:nfs_j...@hotmail.com , 4/29/2014 
8:44 PM:
Hello,

I am looking for some recommendations on forensics recovery software. I (the 
company really) am willing to throw some $$$ at it as well. We often (not 
always) have proprietary / patentable information exposed to us by our clients 
and looking for a way to handle a situation should it arise with an employee.

I am interested in two things.


  1.  Postumous recovery. Deleted files / browser cache / history to see what 
sites were visited / recover deleted files and such.
  2.  Pro-active monitoring that we could incorporate into our base install. 
Something that runs unbeknownst and perhaps when files are deleted really are 
moved to a secret partition or along those lines.

I personally have used r-tools and have been pleased with the results but I 
think the execs are looking for a more enterprise grade product.

Thank You for your thoughts / recommendations

JB

RE: [NTSysADM] Forensic Software Undelete / Recovery

[Mike Tobias]

Thanks, I’ll note that program.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matthew W. Ross
Sent: Wednesday, April 30, 2014 2:30 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery

If at all possible, I leave the suspect drive untouched. I have read that you 
can compromise your evidence if you try to do your work on the drive itself. 
This makes sense: any deleted items still exist on the drive until the free'd 
up sectors are overwritten by the drives use.

I will usually make a backup using Redo Backup, which is a nice livecd (Or PXE 
boot... Hrm, I need to work on that...) for making a sector-for-sector copy. It 
allows me to keep a copy of the drive on a server, then create my forensics 
target on a spare drive. I put the spare drive into a different computer as a 
slave to run my tests.

Using this method, I can recover deleted files from the forensics copy of the 
drive.

--Matt Ross
Ephrata School District

Mike Tobias 
m...@bridgepointtechnologies.netmailto:m...@bridgepointtechnologies.net , 
4/30/2014 9:49 AM:

I’m noting these recommendations too, even though I didn’t start the thread. 
Interesting that you would run this on the copy and not the original. Are you 
making sector by sector copies that also somehow copy deleted files to the 
target?



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Matthew W. Ross
Sent: Wednesday, April 30, 2014 12:19 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Forensic Software Undelete / Recovery



Pro-active? No idea.



When we have to collect evidence, we do the following:



1. Confiscate the hardware.

2. Make copies.

3. Run discovery software. If you can, do this on the copy you made, not the 
original.



The software we use is OSForensics, the free edition. I'm sure there are some 
much beefier programs out there.



Also useful (for us in particular) is the BrowsingHistoryView from NirSoft. It 
allows you to quickly create a view of all browsing history on a computer 
broken down by user, which is often what we need to investigate.





--Matt Ross
Ephrata School District

John Bonner nfs_j...@hotmail.commailto:nfs_j...@hotmail.com , 4/29/2014 
8:44 PM:

Hello,

I am looking for some recommendations on forensics recovery software. I (the 
company really) am willing to throw some $$$ at it as well. We often (not 
always) have proprietary / patentable information exposed to us by our clients 
and looking for a way to handle a situation should it arise with an employee.

I am interested in two things.


  1.  Postumous recovery. Deleted files / browser cache / history to see what 
sites were visited / recover deleted files and such.
  2.  Pro-active monitoring that we could incorporate into our base install. 
Something that runs unbeknownst and perhaps when files are deleted really are 
moved to a secret partition or along those lines.


I personally have used r-tools and have been pleased with the results but I 
think the execs are looking for a more enterprise grade product.

Thank You for your thoughts / recommendations

JB

RE: [NTSysADM] RE: server migration w/new HDs

[Mike Tobias]

If something did go wrong with the restore, couldn't he just put the original 
drives back in?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Micheal Espinola Jr
Sent: Monday, April 28, 2014 8:48 PM
To: ntsysadm
Subject: Re: [NTSysADM] RE: server migration w/new HDs

Backup/restore situations are often ones that bite people in the ass when they 
least expect it to.  In this situation, I would not opt to put that to the test 
unless it was absolutely a neccessity.

--
Espi


On Mon, Apr 28, 2014 at 3:01 PM, Kent McKinney 
k...@kentmckinney.netmailto:k...@kentmckinney.net wrote:
Even if you swap one drive at a time and get the virtual disk size increased, 
the OS partition would also need to be resized. Its time consuming and will 
greatly affect server performance. Safest way is to install the server backup 
feature, do a system state backup, pull the old drives out (with existing data 
intact that you can always roll back to) create the new array and restore.

--- Original Message ---

From: Maglinger, Paul pmaglin...@scvl.commailto:pmaglin...@scvl.com
Sent: April 28, 2014 5:34 PM
To: 'ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com' 
ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: server migration w/new HDs

This is a multi-part message in MIME format.


--_000_36DA94300D69184A91500B695547A148481711CCCOMSTAR1scvlcom_
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

I just talked with someone about a similar situation.
HP-UX server running 2 72G mirrored drives and had one fail.  The vendor su=
bbed a 146G drive.  In this case it would rebuild to only 72G of the 146 dr=
ive, but the vendor said that if the other 72 drive failed and was replaced=
 with the 146 then I could extend it to the full 146 at that point
.
I have not tested this, and am not sure if it would work, but wondering if =
you could replace the drives one at a time allowing for the rebuild.  I did=
 something similar with a EVA SAN and was successful.  It took a long time,=
 but I didn't have to take the system down.  I'm not sure I'd risk it on a =
production system.
Can you do a system level backup/restore?
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com=
] On Behalf Of Jesse Rink
Sent: Monday, April 28, 2014 4:07 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] server migration w/new HDs

Have a Dell T310 server with (4) 1TB sas drives in a RAID5 array, running W=
indows 2008R2.  Need to replace the drives with (4) 2TB sas drives in a RAI=
D5 array.Server only holds 4 physical HD bays so I can't just add an ex=
tra array.  Curious if anyone has any tricks to speeding up this migration =
other than rebuilding the OS from scratch on the (4) new 2Tb sas drives and=
 reinstalling all the app
s on the server, etc.



JR





--_000_36DA94300D69184A91500B695547A148481711CCCOMSTAR1scvlcom_
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

html xmlns:v=3Durn:schemas-microsoft-com:vml xmlns:o=3Durn:schemas-micr=
osoft-com:office:office xmlns:w=3Durn:schemas-microsoft-com:office:word =
xmlns:m=3Dhttp://schemas.microsoft.com/office/2004/12/omml; xmlns=3Dhttp:=
//www.w3.org/TR/REC-html40http://www.w3.org/TR/REC-html40
head
meta http-equiv=3DContent-Type content=3Dtext/html; charset=3Dus-ascii=

meta name=3DGenerator content=3DMicrosoft Word 14 (filtered medium)
style!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Times New Roman,serif;}
a:link, span.MsoHyperlink
{mso-style-priority:9
9;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Times New Roman,serif;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:Balloon Text Char;
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:Tahoma,sans-serif;}
span.BalloonTextChar
{mso-style-name:Balloon Text Char;
mso-style-priority:99;
mso-style-link:Balloon Text;
font-family:Tahoma,sans-serif;}
p.msochpdefault, li.msochpdefault, div.msochpdefault
{mso-style-name:msochpdefault;
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:Times New 

RE: [BULK] Re: [NTSysADM] Start Menu returns

[Mike Tobias]

I agree and think the only thing saving them at the moment is the hordes 
upgrading to Win7 from XP. The nice thing about 7 is that you can make it look 
almost like XP, so XP users can jump right in and continue without the 
frustration of a learning curve. Most (older especially) users do NOT like to 
have to re-learn where shortcuts and features are in the OS. I don't care for 
it either.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Joe Smith
Sent: Tuesday, April 08, 2014 12:15 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [BULK] Re: [NTSysADM] Start Menu returns

There's no telling how many millions of dollars Micro$oft has lost so far
due to totalling removing the start menu..  In fact a simple classic
look UI setting with a start menu and the look and feel of XP probably
would have doubled the Windows 8 hardware and software sales by now..  

My Two Cents.. 

RE: [NTSysADM] SOT: Letter from MS, legitimacy ?

[Mike Hoffman]

Sometimes there is an MS partner involved to assist and help you get legal. The 
problem here is that different MS partners interpret the rules differently as 
they can be focused on the true-ups and the implied authority they have. I know 
from our experience that even trying to get license renewals from people who 
understand the details if hard enough and these people sell the stuff all day 
long.

As long as you have good records and can satisfy yourself that you could pass 
an audit then you should be fine. Start by gathering all the online data – 
after all that is all MS know about, and then document the gaps. If necessary 
take a photo of the COA / paperwork etc. of each machine and file them into 
OneNote so you can have them to hand if you get asked questions.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Joe Matuscak
Sent: 31 March 2014 16:56
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] SOT: Letter from MS, legitimacy ?

Be prepared for a hair pulling experience.  When we did the It's not an audit, 
we're here to
help you manage your licenses they ended up doing lots of aggravating things.  
Stuff like
not wanting to accept the idea that OEM XP licenses on a bunch of old HP 
machines were
valid since neither our accounting or the reseller's records went back far 
enough to be
able to produce an invoice. I think they finally dropped that when we came up 
with an
email acknowledgement from the purchase and took pictures of a number of the COA
stickers on some of the boxes.  Then there was them saying we needed to purchase
something like 20 cores of SQL Server 2012. We were running 2008r2, properly 
licensed
and even with the 2012 transition, we were still properly licensed. I ended up 
quoting them
the relevant sections from the SQL 2012 licensing document about a dozen times 
before
they got it. There was several other dumb things.

I've heard that this is being driven from the sales side of Microsoft as a 
revenue enhancement
tool. I didn't see anything that would make me think that's not the case.





Hi all

One of my new clients called me and said they received a letter via Fedex from 
MS, regarding licensing. In my 15+ years I have never had that occur before , I 
asked them to email me the letter so I can take a look at it.

They only recently (within the last year) gone to Volume Licensing for 
Windows/Exchange/outlook and TS cals/licensing, all desktops are desktops are 
OEM licensed.

They are also  a small company (maybe 40 desktops ) and a handful of servers.

Has anyone on here ever been contacted in this manner?



Jean-Paul Natola



--
Thanks,

Joe Matuscak | Director of Technology
Rohrer Corporation | Office: 330-335-1541
717 Seville Road | Wadsworth, Ohio 44281
www.rohrer.comhttp://www.rohrer.com | A Better Package

RE: [NTSysADM] Windows Thin PC Licensing

[Mike Hoffman]

If they are a non-profit then they might be able to get a significant discount 
on the desktop licenses.
You need to have a desktop license with SA to get the right to run Thin PC on 
the device – think of it as a downgrade right to allow you to not upgrade the 
hardware. So you buy a corporate windows desktop license with SA and you can 
then install Thin PC on the device. If it is a Tech Soup license (CTX here in 
the UK) then you get 2 years of SA with the license and it can be transferred 
to a full PC at a later date if required.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian Desmond
Sent: 27 March 2014 14:23
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Windows Thin PC Licensing

The underlined part is your answer. SA is not a one-off that you can purchase 
with anything and get all the SA benefits of another product. You have it over 
server licenses but not over your PCs.

Thanks,
Brian Desmond
br...@briandesmond.commailto:br...@briandesmond.com

w – 312.625.1438 | c – 312.731.3132

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Hank Arnold
Sent: Thursday, March 27, 2014 4:35 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Windows Thin PC Licensing

At the Hospice I support, we have a significant number of XP machines that we 
are trying to mothball, but being a non-profit, money is *VERY* tight. One 
option we are looking into is the Windows Thin PC. We were told that it was 
available only if you have SA. I've read the literature from MS and I'm 
wondering if we are eligible. We do have SA, but it was purchased with some 
Windows 2012 Server licenses. The documentation mentions:

 Customers with active SA coverage on their PCs will be able to install WinTPC 
on those devices. Customers without active SA coverage on their PCs can get SA 
by purchasing a Windows Virtual Desktop Access (VDA) subscription, which 
includes SA benefits such as WinTPC.


Regards,
Hank Arnold
[cid:image001.png@01CF49EE.55068B10]

Twitter: @Hank_PCDoc

Facebook: https://www.facebook.com/hank.arnold.96

My Blog: http://it.toolbox.com/blogs/personal-pc-assistant/

inline: image001.png

[NTSysADM] Hardware donations

[Mike Tobias]

I work for a small non-profit private school. I'd like to set up a hot-spare of 
our single 2008 R2 Hyper-V host, which is a Dell PE T710. Does anyone deal with 
or know of any organizations that make hardware donations to schools or 
non-profits? I've done a little looking on ebay, but haven't had any success 
yet.

Thanks,

Michael Tobias
IT Administrator
Redeemer Classical Christian School
www.rccs.org
410.592.9625

RE: [NTSysADM] Hardware donations

[Mike Tobias]

Well, when someone is has 20+ servers listed and they aren’t getting any bids, 
it doesn’t hurt to ask. ☺  I’ll check to see if MD has any similar programs. 
Thanks.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matthew W. Ross
Sent: Friday, March 21, 2014 5:30 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Hardware donations

Donations? On Ebay? I don't think so...

Our state (Washington) has a donation program. Ours is called Computers 4 Kids, 
and we have received desktops and servers from them in the past.

There is also a federal program called Computers 4 Learning. You should check 
to see if you qualify.


--Matt Ross
Ephrata School District

Mike Tobias m...@bridgepointtechnologies.net , 3/21/2014 2:20 PM:

I work for a small non-profit private school. I’d like to set up a hot-spare of 
our single 2008 R2 Hyper-V host, which is a Dell PE T710. Does anyone deal with 
or know of any organizations that make hardware donations to schools or 
non-profits? I’ve done a little looking on ebay, but haven’t had any success 
yet.



Thanks,



Michael Tobias

IT Administrator

Redeemer Classical Christian School

www.rccs.orghttp://www.rccs.org

410.592.9625

RE: [NTSysADM] Hardware donations

[Mike Tobias]

Thanks!

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Susan Bradley
Sent: Friday, March 21, 2014 5:41 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Hardware donations

Refurbished Computer Initiative Product Catalog:
http://www.techsoup.org/refurbished-computers-catalog

On 3/21/2014 2:35 PM, Mike Tobias wrote:

 Well, when someone is has 20+ servers listed and they aren’t getting 
 any bids, it doesn’t hurt to ask. JI’ll check to see if MD has any 
 similar programs. Thanks.

 *From:*listsad...@lists.myitforum.com
 [mailto:listsad...@lists.myitforum.com] *On Behalf Of *Matthew W. Ross
 *Sent:* Friday, March 21, 2014 5:30 PM
 *To:* ntsysadm@lists.myitforum.com
 *Subject:* Re: [NTSysADM] Hardware donations

 Donations? On Ebay? I don't think so...

 Our state (Washington) has a donation program. Ours is called 
 Computers 4 Kids, and we have received desktops and servers from them 
 in the past.

 There is also a federal program called Computers 4 Learning. You 
 should check to see if you qualify.

 --Matt Ross
 Ephrata School District

 Mike Tobiasm...@bridgepointtechnologies.net , 3/21/2014 2:20 PM:

 I work for a small non-profit private school. I’d like to set up a 
 hot-spare of our single 2008 R2 Hyper-V host, which is a Dell PE T710.
 Does anyone deal with or know of any organizations that make hardware 
 donations to schools or non-profits? I’ve done a little looking on 
 ebay, but haven’t had any success yet.

 Thanks,

 Michael Tobias

 IT Administrator

 Redeemer Classical Christian School

 www.rccs.org http://www.rccs.org

 410.592.9625


--
Got your CryptoLocker prevention in place?
http://www.thirdtier.net/2013/10/cryptolocker-prevention-kit-updates/
Only one more patching days of XP are you ready?

[NTSysADM] RE: ie10 send link as email fails, sbs interference?

[Mike Tobias]

I've been dealing with that same error message for a few weeks, affecting just 
one user. Windows 7 Pro x64, Office 2013 32bit. The only difference with this 
user is that she has Quickbooks 2013 installed, which does have some kind of 
Outlook plugin. Same exact error message you are getting. I believe she sees 
that message either at boot up or every time she launches Outlook.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rick Berry
Sent: Friday, March 14, 2014 12:27 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] ie10 send link as email fails, sbs interference?

User with Office 2013 HB 32bit + IE10 on Win7 Pro x64 ... all new machines.

On their old machines (mix of 7 and office 7/10) the send/link by email or page 
by email function used to work.

Now they get:

Either there is no default mail client or the current mail client cannot 
fulfill the messaging request.  Please run Microsoft Outlook and set it as the 
default mail client.

But it already is set that way.

I google-fu'ed it and didn't really come up with much, but did notice that when 
I tried to unset everything in the control panel for Default Programs I 
couldn't uncheck any boxes for any default programs (was going to uncheck them 
all and then recheck them all for Outlook).

Suspect possible SBS involvement here, they do have a R2 SBS 2011 box, 
wondering if anyone has run across similar and knows how to perhaps set outlook 
as the default mail client at the SBS level.  Not sure if it's an Office 2013 
vs. SBS 2011 gpo defaults/etc.  Found one link on setting outlook as a default 
mail client via GPO, but wasn't SBS specific nor was it intended for office 
2010 or 13.

http://support.microsoft.com/kb/2008044?ppud=4wa=wsignin1.0

Feel like I'm dancing around the problem without finding the fix, but close to 
it?

RE: Re[2]: [NTSysADM] unable to join domain-solved

[Mike Tobias]

I'll file that one away in the back of my brain in case I ever run into it. 
Glad you figured it out and took the time to confirm that was the issue!

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Friday, March 14, 2014 8:21 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: Re[2]: [NTSysADM] unable to join domain-solved

so tested again today on a win7 pc that had a blank password for a local admin 
account, and the same result-
unable to join domain- i applied a password to the account and it worked-



Jean-Paul Natola



From: david.lan...@lairdtech.com
To: ntsysadm@lists.myitforum.com
Subject: RE: Re[2]: [NTSysADM] unable to join domain
Date: Fri, 14 Mar 2014 18:31:07 +
I have receive that error before because I had to use the fully qualified 
domain name contoso.acme.com (without the quotes of course).

Dave Landry
Site Support Administrator


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Hank Arnold
Sent: Friday, March 14, 2014 1:59 PM
To: ntsysadm@lists.myitforum.com
Subject: Re[2]: [NTSysADM] unable to join domain

It's usually the wrong time zone for me.

Regards,
Hank Arnold
[cid:image001.png@01CF3FC6.7AC689E0]




Twitter: @Hank_PCDoc

Facebook: https://www.facebook.com/hank.arnold.96

My Blog: http://it.toolbox.com/blogs/personal-pc-assistant/



-- Original Message --
From: Melvin Backus melvin.bac...@byers.commailto:melvin.bac...@byers.com
To: ntsysadm@lists.myitforum.com 
ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Sent: 3/13/2014 1:31:39 PM
Subject: RE: [NTSysADM] unable to join domain

Good point.  I've run across problems in the past where everything looked 
correct.  Turned out the year was wrong. :(

--
There are 10 kinds of people in the world...
 those who understand binary and those who don't.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Mark Gottschalk
Sent: Thursday, March 13, 2014 1:25 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] unable to join domain

Extreme time skew between PC and domain controller?  Does the time zone, time, 
etc match?

-- Mark


listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com wrote on 
03/11/2014 04:31:30 PM:

 From: J- P jnat...@hotmail.commailto:jnat...@hotmail.com
 To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com 
 ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com,
 Date: 03/11/2014 04:31 PM
 Subject: [NTSysADM] unable to join domain
 Sent by: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com

 Have a new pc (vostro 270) delivered to our field office, they did a
 win 7 pro downgrade,
 I spent the better part of the day (off and on) trying to join the
 domain, continuously got the  could not contact a domain
 controller it's not in English I'm not going to copy paste the error.


 remote office has a 2008r2 DC/DNS/GC;
 1. can ping by name and ip (both ways)server to workstation and vice versa;
 2. we are VPNd to HQ and the can ping the FSMO over VPN;
  3. can remote desktop both ways.
 4.did a manual config of IP and DNS servers
 5. turned off firewall bot server and workstation
 6. tried manually applying DNS of HQ Domain Controllers
 7. Can browse network and connect to the servers share (with
 alternate credentials of course)

 is there any possibility, that there is an issue with the OS installation?

 I have joined PC's remotely before to this and all field offices and
 have never had this issue

 I'm going to try netmon when I get home later

 but getting a bit frustrated

inline: image001.png

[NTSysADM] RE: One of those dumb things...

[Mike Tobias]

I love it when some websites won't let you use special characters in your 
password. I bet they'll let you use password though...

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David Lum
Sent: Monday, March 10, 2014 11:45 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] One of those dumb things...

I use passphrases as my passwords wherever I can. Today trying to log into our 
guest wireless for the first time I'm presented with a portal and when I enter 
my password and it tells me passwords must not contain spaces. Seriously? I 
have has a space in my Windows passwords for years - while I avoid spaces for 
fields I might script, like username and folder names, for a password I've 
never worried about it.

Dumb.

[cid:image001.jpg@01CF3C57.850A2690]





David Lum
Network System Admin, Information Services
office 503-265-4728  |  modahealth.comhttp://www.modahealth.com/

I'm excited to announce that ODS Health is now Moda Health. Please make a note 
of my new email address, 
david@modahealth.commailto:david@modahealth.com, so we can stay 
connected.

This message is intended for the sole use of the individual and entity to whom 
it is addressed, and may contain information that is privileged, confidential 
and exempt from disclosure under applicable law. If you are not the intended 
addressee, nor authorized to receive for the intended addressee, you are hereby 
notified that you may not use, copy, disclose or distribute to anyone the 
message or any information contained in the message. If you have received this 
message in error, please immediately advise the sender by reply email and 
delete the message.




inline: image001.jpg

RE: [NTSysADM] Content filter or ad blocker...

[Mike Tobias]

I think we were using that upstream at one point. I'll check to see if it's 
still configured.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Steven M. Caesare
Sent: Friday, March 07, 2014 2:30 PM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Content filter or ad blocker...

OpenDNS won't catch everything, but it's another useful layer.

-sc

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mike Tobias
Sent: Friday, March 7, 2014 2:22 PM
To: 'ntsysadm@lists.myitforum.com'
Subject: [NTSysADM] Content filter or ad blocker...

Our school currently relies on Sonicwall's Content Filtering Service to block 
offensive and malicious websites. We used iPrism with good results a few years 
ago, but they began raising their prices substantially, so we reverted to the 
Sonicwall CFS, for which we were already paying.

I know that no filter is 100%, but we had some pornography get through the 
other day, I think in the form of an advertisement shown during a Bing video 
search. I wasn't able to reproduce this, so can't confirm 100%. I've used the 
free MVPS.org DNS solution at home with good ad blocking results, but I'm not 
sure if that would be good to implement network-wide. I'm also looking at some 
browser plug-ins(most users use FF), but I would have to implement them for all 
browsers or restrict the allowed browsers(we allow IE, FF, Chrome). I'm looking 
for a free solution to this first, and there seems to be a lot of options.

Any suggestions?

Thanks,

Mike

[NTSysADM] RE: Backup software needed for schools or non-profits...

[Mike Tobias]

Thanks Matt. I read through their product documentation and just requested a 
price quote.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Hawes
Sent: Thursday, February 27, 2014 2:07 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: Backup software needed for schools or non-profits...

I am in a school district and I use Veeam... Works great and backups are 
offsite.  Great Exchange 2010/2013 support!

Sent from Outlook Web App/Exchange 2013
Sent from Exchange 2013
Matt Hawes
556 Ridgelawn
Crown Point,IN 46307
(219)613-6319
m...@hawesfam.com
Microsoft Certified IT Specialist - Enterprise Administrator
A+,Network +, Server +

I'd tell you a UDP joke but I'm afraid you won't get it. TCP jokes are the 
best because you always get them


From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on behalf 
of Mike Tobias m...@bridgepointtechnologies.net
Sent: Thursday, February 27, 2014 12:39 PM
To: 'NTSysADM@lists.myITforum.com'
Subject: [NTSysADM] Backup software needed for schools or non-profits...

I'm looking for decent backup software for our school. I know some software 
companies will deeply discount sales to schools or non-profits, and I'd like to 
focus on them to save money.

We're running Server 2008 R2 with Hyper-V, so would need to be able to back up 
virtual machines. We also have an Exchange 2010 server, so granular restore of 
Exchange would be nice. Full image restore capability to dissimilar hardware 
would be a plus. We currently backup to an eSATA dock which appears as a simple 
drive to the OS, which I think most software these days should be able to 
handle.

I welcome any suggestions!

Thanks,

Mike




This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this email in error please notify the system manager. This 
message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and delete 
this e-mail from your system. If you are not the intended recipient you are 
notified that disclosing, copying, distributing or taking any action in 
reliance on the contents of this information is strictly prohibited.

RE: [NTSysADM] RE: Backup software needed for schools or non-profits...

[Mike Tobias]

I’ll check out Altaro, thanks!

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Richard Stovall
Sent: Thursday, February 27, 2014 2:20 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] RE: Backup software needed for schools or non-profits...

IIRC, Techsoup isn't really usable for most schools of any variety, or 
institutions affiliated with any religion, since most of the participating 
vendors don't allow it for those types of organizations.  It's been a while 
since I looked at it, but that's my recollection.

Altaro backup is very inexpensive, and free for something like two VMs.

On Thu, Feb 27, 2014 at 1:51 PM, Jim von Stein 
jvonst...@kairosnw.orgmailto:jvonst...@kairosnw.org wrote:
If you're a non-profit, you can sign up with Tech Soup 
(http://www.techsoup.org/) for donated software. I got a full (all the 
whistles, lights and bells) version of Backup Exec 2012 for $115.00. There's no 
support or upgrades, but still

Jim von Stein
Information Services Administrator
Kairos (formerly SOASTC)
715 SW Ramsey Avenue
Grants Pass, Oregon 97527
(541)956-4943 ext. 2103tel:%28541%29956-4943%20ext.%202103
jvonst...@kairosnw.orgmailto:jvonst...@kairosnw.org

Kairos - The moment when change is possible
www.kairosnw.orghttp://www.kairosnw.org
-Original Message-
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Mike Tobias
Sent: Thursday, February 27, 2014 10:39 AM
To: 'NTSysADM@lists.myITforum.commailto:NTSysADM@lists.myITforum.com'
Subject: [NTSysADM] Backup software needed for schools or non-profits...

I'm looking for decent backup software for our school. I know some software 
companies will deeply discount sales to schools or non-profits, and I'd like to 
focus on them to save money.

We're running Server 2008 R2 with Hyper-V, so would need to be able to back up 
virtual machines. We also have an Exchange 2010 server, so granular restore of 
Exchange would be nice. Full image restore capability to dissimilar hardware 
would be a plus. We currently backup to an eSATA dock which appears as a simple 
drive to the OS, which I think most software these days should be able to 
handle.

I welcome any suggestions!

Thanks,

Mike

[NTSysADM] RE: Backup software needed for schools or non-profits...

[Mike Tobias]

Thanks for the input. 

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jim von Stein
Sent: Thursday, February 27, 2014 1:52 PM
To: 'ntsysadm@lists.myitforum.com'
Subject: [NTSysADM] RE: Backup software needed for schools or non-profits...

If you're a non-profit, you can sign up with Tech Soup 
(http://www.techsoup.org/) for donated software. I got a full (all the 
whistles, lights and bells) version of Backup Exec 2012 for $115.00. There's no 
support or upgrades, but still

Jim von Stein
Information Services Administrator
Kairos (formerly SOASTC)
715 SW Ramsey Avenue
Grants Pass, Oregon 97527
(541)956-4943 ext. 2103
jvonst...@kairosnw.org

Kairos - The moment when change is possible www.kairosnw.org -Original 
Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mike Tobias
Sent: Thursday, February 27, 2014 10:39 AM
To: 'NTSysADM@lists.myITforum.com'
Subject: [NTSysADM] Backup software needed for schools or non-profits...

I'm looking for decent backup software for our school. I know some software 
companies will deeply discount sales to schools or non-profits, and I'd like to 
focus on them to save money. 

We're running Server 2008 R2 with Hyper-V, so would need to be able to back up 
virtual machines. We also have an Exchange 2010 server, so granular restore of 
Exchange would be nice. Full image restore capability to dissimilar hardware 
would be a plus. We currently backup to an eSATA dock which appears as a simple 
drive to the OS, which I think most software these days should be able to 
handle.

I welcome any suggestions!

Thanks,

Mike

RE: [NTSysADM] RE: Backup software needed for schools or non-profits...

[Mike Tobias]

I forgot about this one, and haven't played with DPM in years.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Chenault
Sent: Thursday, February 27, 2014 3:27 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] RE: Backup software needed for schools or non-profits...

DPM

 On Feb 27, 2014, at 11:58, Mike Tobias m...@bridgepointtechnologies.net 
 wrote:
 
 Thanks Matt. I read through their product documentation and just requested a 
 price quote.
 
 -Original Message-
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Hawes
 Sent: Thursday, February 27, 2014 2:07 PM
 To: ntsysadm@lists.myitforum.com
 Subject: [NTSysADM] RE: Backup software needed for schools or non-profits...
 
 I am in a school district and I use Veeam... Works great and backups are 
 offsite.  Great Exchange 2010/2013 support!
 
 Sent from Outlook Web App/Exchange 2013 Sent from Exchange 2013 Matt 
 Hawes
 556 Ridgelawn
 Crown Point,IN 46307
 (219)613-6319
 m...@hawesfam.com
 Microsoft Certified IT Specialist - Enterprise Administrator
 A+,Network +, Server +
 
 I'd tell you a UDP joke but I'm afraid you won't get it. TCP jokes are the 
 best because you always get them
 
 
 From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com 
 on behalf of Mike Tobias m...@bridgepointtechnologies.net
 Sent: Thursday, February 27, 2014 12:39 PM
 To: 'NTSysADM@lists.myITforum.com'
 Subject: [NTSysADM] Backup software needed for schools or non-profits...
 
 I'm looking for decent backup software for our school. I know some software 
 companies will deeply discount sales to schools or non-profits, and I'd like 
 to focus on them to save money.
 
 We're running Server 2008 R2 with Hyper-V, so would need to be able to back 
 up virtual machines. We also have an Exchange 2010 server, so granular 
 restore of Exchange would be nice. Full image restore capability to 
 dissimilar hardware would be a plus. We currently backup to an eSATA dock 
 which appears as a simple drive to the OS, which I think most software these 
 days should be able to handle.
 
 I welcome any suggestions!
 
 Thanks,
 
 Mike
 
 
 
 
 This email and any files transmitted with it are confidential and intended 
 solely for the use of the individual or entity to whom they are addressed. If 
 you have received this email in error please notify the system manager. This 
 message contains confidential information and is intended only for the 
 individual named. If you are not the named addressee you should not 
 disseminate, distribute or copy this e-mail. Please notify the sender 
 immediately by e-mail if you have received this e-mail by mistake and delete 
 this e-mail from your system. If you are not the intended recipient you are 
 notified that disclosing, copying, distributing or taking any action in 
 reliance on the contents of this information is strictly prohibited.
 
 
 
 

[NTSysADM] RE: Backup software needed for schools or non-profits...

[Mike Tobias]

Yes, we do have an MS School account. I'll look into the current capabilities 
of DPM. We don't currently have a good archiver by my estimation, but it does 
work. Mailbox restore is another matter and is currently a PITA.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kennedy, Jim
Sent: Thursday, February 27, 2014 3:30 PM
To: 'NTSysADM@lists.myITforum.com'
Subject: [NTSysADM] RE: Backup software needed for schools or non-profits...

Do you have a Microsoft School Agreement? Then DPM is the answer. It will be 
almost free. If you are a school you have a good email archiver already right? 
That is your granular backup. We went this route several years ago, users have 
to find their own accidentally deleted emails on the archiver, which they are 
doing just fine.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mike Tobias
Sent: Thursday, February 27, 2014 1:40 PM
To: 'NTSysADM@lists.myITforum.com'
Subject: [NTSysADM] Backup software needed for schools or non-profits...

I'm looking for decent backup software for our school. I know some software 
companies will deeply discount sales to schools or non-profits, and I'd like to 
focus on them to save money. 

We're running Server 2008 R2 with Hyper-V, so would need to be able to back up 
virtual machines. We also have an Exchange 2010 server, so granular restore of 
Exchange would be nice. Full image restore capability to dissimilar hardware 
would be a plus. We currently backup to an eSATA dock which appears as a simple 
drive to the OS, which I think most software these days should be able to 
handle.

I welcome any suggestions!

Thanks,

Mike

RE: [NTSysADM] File sync laptops to server

[Mike Hoffman]

But each user gets 25 Gb personal which they can share out.

You could put SharePoint on the server and then use SkyDrive Pro (now OneDrive 
Pro) to sync unlimited storage.

Or upgrade them to Windows 8 and use Work Folders in Server 2012R2 to get 
unlimited storage.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: 28 January 2014 20:55
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] File sync laptops to server

they are already on office365 that was arranged at the parent level, total data 
from the local office (the one i support directly) not even 20 gigs











Jean-Paul Natola



From: m...@drumbrae.netmailto:m...@drumbrae.net
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] File sync laptops to server
Date: Tue, 28 Jan 2014 20:31:40 +
If they are a charity then they will get SharePoint space for each user which 
they can use with OneDrive. How much data do they have in total?

Mike

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Rankin, James R
Sent: 28 January 2014 20:29
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] File sync laptops to server

DropBox Enterprise? Google Drive? OneDrive Pro? AppSense DataNow?

There are many players in this areaoffline files generally suck, IMHO
Sent from my (new!) BlackBerry, which may make me an antiques dealer, but it's 
reliable as hell for email delivery :-)

From: J- P jnat...@hotmail.commailto:jnat...@hotmail.com
Sender: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com
Date: Tue, 28 Jan 2014 15:07:30 -0500
To: 
ntsysadm@lists.myitforum.comntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com%3cntsys...@lists.myitforum.com
ReplyTo: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] File sync laptops to server

at least once a week











Jean-Paul Natola


From: ji...@jt-solution.commailto:ji...@jt-solution.com
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] File sync laptops to server
Date: Tue, 28 Jan 2014 20:05:08 +
Offline files?  How often are they back in the office?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: Tuesday, January 28, 2014 12:01 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] File sync laptops to server

Hi all,

A small office (5 users laptops with docks) 1x 2012 server (can add more if 
required , hyper-v)
All laptops are windows 7 pro, what would be the recommended solution 
(preferably windows as software is charity pricing)?

They are out of the office about 50% of the time, all office docs and PDF's


thanks



JP

[NTSysADM] PernixData Trial

[Mike Pace]

Was wondering if any of you have any experience with PernixData?  We are in the 
midst of testing this and it seems like a no-brainer, good idea.  However, we 
have yet to be able to come up with a test that shows what it can really do.  
We have put SSDs in a couple of hosts and are testing with 4 moderate use VMs 
now...without going full bore into production, we would like to see more 
eye-popping results than we have seen so far.  Anyone else been blown away?

Thanks.

Mike R. Pace
Davis County Information Systems

RE: [NTSysADM] Shrink the size of winsxs other places, new tool avail

[Mike Hoffman]

Awww, I was just about to deploy it to my server farm :)

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Ziots, Edward
Sent: 05 December 2013 16:41
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Shrink the size of winsxs  other places, new tool avail

Yep nothing is for free :)

Z

Edward E. Ziots, CISSP, CISA, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.orgmailto:ezi...@lifespan.org
Work:401-255-2497


This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Micheal Espinola Jr
Sent: Thursday, December 05, 2013 11:37 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Shrink the size of winsxs  other places, new tool avail

My thoughts exactly!

https://www.virustotal.com/en/file/12b4e8e99b8692f2fc859cc851c358b5258e68fb05ba415dd09c492be7b72fc9/analysis/1386261191/

--
Espi


On Thu, Dec 5, 2013 at 8:33 AM, Steven M. Caesare 
scaes...@caesare.commailto:scaes...@caesare.com wrote:
And once the rootkit is installed it can free up even more space by deleting 
those pesky AV and Anti-Malware definitions too!

-sc

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Arma Rayo
Sent: Thursday, December 5, 2013 11:25 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Shrink the size of winsxs  other places, new tool avail

A lot of people are having frustration with WinSxs folder and especially with 
it's ever-growing size.

MS has released an update to Disk Cleanup that can help to reduce the size of 
the folder by removing SP backups and it's backups.

However for many this is not enough.

A Chinese based coder group has launched a tool called

The Windows Update Clean Tool

PIC
http://ejie.me/images/win_upd_clean.png

The tool is very careful and precise and only deletes what is safe to delete. 
It also links/junctions old deleted items to the latest ones. Be noted that 
cleaning WinSxs with this tool: Rolling back Windows Updates isn't possible.

Always use the latest version, DOWNLOAD link here:
http://www.chuyusoft.com/thread-274-1-1.html

CHEERS


inline: image001.jpg

RE: [NTSysADM] RE: To trunk or lacp

[Mike French]

“Beginning with vSphere 5.1, VMware supports Link Aggregation Control Protocol 
(LACP) on vSphere Distributed Switch (VDS) only.”

And only if you are using vDistributed switches, it’s still not supported on 
standard vSwitches.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matthew W. Ross
Sent: Monday, December 02, 2013 3:42 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] RE: To trunk or lacp

Stefan,

It looks like LACP is newly supported on 5.1. It wasn't there in 5.0.

http://kb.vmware.com/selfservice/microsites/search.do?language=en_UScmd=displayKCexternalId=2034277


--Matt Ross
Ephrata School District

Stefan Jafs , 12/2/2013 1:30 PM:

Are you telling me that since I’m using VMware I can’t use lacp?



__

Stefan Jafs



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Joseph L. Casale
Sent: December 2, 2013 12:28 PM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: To trunk or lacp



Vmware hasn't for some time supported 802.3ad, migrate those trunks to trunk 
from lacp.

This may have changed in 5.5 (no time to look).

jlc



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com on 
behalf of Stefan Jafs
Sent: Monday, December 2, 2013 9:48 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] To trunk or lacp



Ok, so I had a network outage yesterday, thankfully on Sunday, so no 
productivity last. Here is my setup:



All HP Switches my Core switch is an 8212zl and my physical VMware serves and 
NetApp storage, connected to 2 stacked 3800 switches, they are then trunked 
with 2 * 10G links and 2 * 1 gig copper as failover to the core switch. Here is 
what happened, at just after 2PM I started getting e-mail of servers off-line 
for more than 5 min, and the list just kept growing. I had previously just done 
some UPS power balancing and had to shut down a few items for the move. I 
figured maybe I disrupted some power cable as I did the changes. I drove back 
and physically checked everything, everything looked good I could ping the 
gateway from some servers but not from others, the whole thing was very 
strange, finally we figured it out, one of the 10 Gb trunk had failed but the 
core switch did not realized it was down, that’s what caused the strange 
network behaviour.



Ok so now my monitoring guys, says well if it had been configured as lacp there 
would have been no outage and he says that they configure all switch to switch 
trunking with lacp. I asked my networking guy that did the initial 
configuration and his comment is:



LACP is industry standard and used widely when you interface servers to 
switches or different vendors switches / other networking gear. When you have 
same make (HP or say Cisco), most folks always use Cisco etherchannel / 
portchannel (which also works with HP) or in HP language trunk.  I have never 
come across anything like this so will not comment that if you have this kind 
of issue, then LACP would have prevented.



If there is a fiber issue, then you can have unidirectional link and then it is 
UDLD feature with LACP also enabled that helps. But fiber unidirectional is 
extremely rare, else why 98% of cisco networks will not use LACP.



The issue here is that you have someone else managing the network and you use 
me for help you set up the network, so there will always be a conflict of 
interest and differences in viewpoints.



So is there a correct answer here or I was just extremely unlucky with a 
hardware failure that did not fail over?



__

Stefan Jafs



The information contained in this email is confidential and intended only for 
the exclusive use of the addressee. Copying, distributing or any other use of 
this communication by the addressee or any other person or entity is 
prohibited. If you have received this communication by mistake, notify the 
sender immediately and destroy all forms of this communication (electronic or 
paper).

RE: [NTSysADM] RE: test

[Mike French]

Story of my life :)

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of John Cook
Sent: Tuesday, November 19, 2013 11:24 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: test

Bounce!

 John W. Cook
Network Operations Manager
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS,
CompTIA A+, N+, Security+
VSP4, VTSP4

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mike French
Sent: Tuesday, November 19, 2013 12:18 PM
To: 'ntsysadm@lists.myitforum.com'
Subject: [NTSysADM] test

Sorry for the noise guys/gals...

Mike French
Information Technology
[cid:image001.jpg@01CEE51E.91F90A00]
214.365.6960 (direct)
214.237.3197 (fax)
mfre...@triumphssb.commailto:mfre...@triumphssb.com
[cid:image002.jpg@01CEE51E.91F90A00]https://web1.zixmail.net/s/e?b=triumphssb;Need
 to send me sensitive information via 
emailhttps://web1.zixmail.net/s/e?b=triumphssb;?


The information contained in this email is confidential and intended only for 
the exclusive use of the addressee. Copying, distributing or any other use of 
this communication by the addressee or any other person or entity is 
prohibited. If you have received this communication by mistake, notify the 
sender immediately and destroy all forms of this communication (electronic or 
paper).



CONFIDENTIALITY STATEMENT: The information transmitted, or contained or 
attached to or with this Notice is intended only for the person or entity to 
which it is addressed and may contain Protected Health Information (PHI), 
confidential and/or privileged material. Any review, transmission, 
dissemination, or other use of, and taking any action in reliance upon this 
information by persons or entities other than the intended recipient without 
the express written consent of the sender are prohibited. This information may 
be protected by the Health Insurance Portability and Accountability Act of 1996 
(HIPAA), and other Federal and Florida laws. Improper or unauthorized use or 
disclosure of this information could result in civil and/or criminal penalties.
Consider the environment. Please don't print this e-mail unless you really need 
to.

The information contained in this email is confidential and intended only for 
the exclusive use of the addressee. Copying, distributing or any other use of 
this communication by the addressee or any other person or entity is 
prohibited. If you have received this communication by mistake, notify the 
sender immediately and destroy all forms of this communication (electronic or 
paper).

inline: image001.jpginline: image002.jpg

RE: [NTSysADM] Win8.1 / Server 2012 R2

[Mike Hoffman]

They are on Technet now as well.

Mike

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Susan Bradley
Sent: 09 September 2013 18:16
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Win8.1 / Server 2012 R2

http://blogs.msdn.com/b/stevengu/archive/2013/09/09/download-windows-8-1-rtm-visual-studio-2013-rc-and-windows-server-2012-r2-rtm-today.aspx

On purpose.

On 9/9/2013 10:12 AM, Michael B. Smith wrote:

 Dunno if it is on purpose or a mistake - but right now, Win8.1 and 
 Server 2012 R2 are available from MSDN.


--
So?  Your thoughts?
http://windowsitpro.com/industry/microsoft-attempts-ease-demise-technet-subscribers-building-replacement-mcts

RE: [NTSysADM] Win8.1 / Server 2012 R2

[Mike Hoffman]

Action Pack gives you TechNet which is where it is - always a few days later on 
the MAPS download section. Same goes for VLSC which should also have TechNet 
access.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David Lum
Sent: 09 September 2013 18:43
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Win8.1 / Server 2012 R2

Nothing on Action Pack yet.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matthew W. Ross
Sent: Monday, September 09, 2013 10:36 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Win8.1 / Server 2012 R2

Not on VLSC for education yet. At least not for me.


--Matt Ross
Ephrata School District


- Original Message -
From: Michael B. Smith
[mailto:mich...@smithcons.com]
To: ntsysadm@lists.myitforum.com
[mailto:ntsysadm@lists.myitforum.com]
Sent: Mon, 09 Sep 2013 10:25:19
-0800
Subject: RE: [NTSysADM] Win8.1 / Server 2012 R2


 Technet? What's that?
 
 :) :) :)
 
 -Original Message-
 From: listsad...@lists.myitforum.com
 [mailto:listsad...@lists.myitforum.com]
 On Behalf Of Mike Hoffman
 Sent: Monday, September 9, 2013 1:20 PM
 To: ntsysadm@lists.myitforum.com
 Subject: RE: [NTSysADM] Win8.1 / Server 2012 R2
 
 They are on Technet now as well.
 
 Mike
 
 -Original Message-
 From: listsad...@lists.myitforum.com
 [mailto:listsad...@lists.myitforum.com]
 On Behalf Of Susan Bradley
 Sent: 09 September 2013 18:16
 To: ntsysadm@lists.myitforum.com
 Subject: Re: [NTSysADM] Win8.1 / Server 2012 R2
 
 http://blogs.msdn.com/b/stevengu/archive/2013/09/09/download-windows-8
 -1-rtm-visual-studio-2013-rc-and-windows-server-2012-r2-rtm-today.aspx
 
 On purpose.
 
 On 9/9/2013 10:12 AM, Michael B. Smith wrote:
 
  Dunno if it is on purpose or a mistake - but right now, Win8.1 and 
  Server 2012 R2 are available from MSDN.
 
 
 --
 So?  Your thoughts?
 http://windowsitpro.com/industry/microsoft-attempts-ease-demise-techne
 t-subscribers-building-replacement-mcts
 
 
 
 
 
 
 
 

RE: [NTSysADM] Office 365 SLA and details on backups ownership etc

[Mike Hoffman]

There is a different set of responses from Microsoft to address the EU specific 
requirements.

If you start at http://trust.office365.com/ you can then get to the EU Model 
Clauses common questions - 
http://office.microsoft.com/en-gb/business/office-365-trust-center-eu-model-clauses-faq-cloud-privacy-FX104033856.aspx

We're also in Scotland and have legal clients and they should already have 
policies and procedures internally to manage their data. Once they put their 
data in the Dublin data centres they will need to know that someone (i.e. you) 
can manage their data as effectively as an on-site exchange server.

As long as you cover all bases or let the client accept the risks then it's not 
a problem.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Ryan Finnesey
Sent: 12 August 2013 15:35
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Office 365 SLA and details on backups ownership etc

They are all over the Internet it seems not just the Cloud Providers.  
tapping the network at the peering points.  They can monitor all traffic not 
just the Cloud Providers.

Cheers
Ryan


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Randal, Phil
Sent: Monday, August 12, 2013 8:13 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Office 365 SLA and details on backups ownership etc

Biggest problem for a solicitor would be client confidentiality, surely?

And as, according to the Snowden revelations,  both the NSA and GCHQ have their 
mitts all over 'the cloud'...

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jon D
Sent: 12 August 2013 13:04
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Office 365 SLA and details on backups ownership etc

I though I read somewhere that the European Union is recommending not to use 
American Cloud services?
The US Government is open about going through the data in the cloud.
Kind of a problem for a foreign company...


Jon


On Mon, Aug 12, 2013 at 4:12 AM, Graeme Carstairs 
loonyto...@gmail.commailto:loonyto...@gmail.com wrote:
Hi,

We have a solicitor client who is considering office 365, and the Law Society 
of Scotland has issued guidelines on cloud services,

Does anyone know where I can find details on Microsoft website or else where on 
the Microsofts actual full terms and condions with special regards to

1. Ownership of e-mail
2. confidentiality
3. backup.
4. data retention
5. What happens if subscription ends?

I have found the SLA and it only details when you get service credits in event 
of system unavailability

Thanks

Graeme


--
Good news everyone, you have just received an e-mail from me!

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] E-mail retention

[Mike Pace]

We set up a small committee here (local, county government) which included 
Attorney, I.S., Personnel and Records people.  We folded our email retention 
policy into our generic file retention policy.  This has streamlined our backup 
retention policy as well.

The key determination (in my opinion) was that the only permanent records we 
have are on Microfilm and stored in the state archives.  Everything else has a 
shelf life which is not indefinite.  This was a big change for us...we had kept 
backups on hand for 7 years (arbitrary time period that someone decided on).

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of William Robbins
Sent: Tuesday, July 02, 2013 1:34 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] E-mail retention

Indeed.  (c)


 - WJR

On Tue, Jul 2, 2013 at 2:28 PM, Ben Scott 
mailvor...@gmail.commailto:mailvor...@gmail.com wrote:
On Tue, Jul 2, 2013 at 12:05 PM, David Lum 
david@nwea.orgmailto:david@nwea.org wrote:
 Given this:

 http://arcweb.sos.state.or.us/doc/recmgmt/train/erm/emailman806.pdf

 Would it be the responsibility of the government entity to know the correct
 retention period for each message they receive? I'm trying to help a client
 determine how long e-mail should be kept, including the brick-level backups
 I have...

  This the NT system administration list.  You want a lawyer.

  I'm dead serious.  This is not an IT question, it's a law question.
Contact corporate counsel.

-- Ben

RE: [NTSysADM] NAS or Server

[Mike Hoffman]

We were told that 2012 R2 could act as an AD host - and we were told by the 
same storage vendor that they expected to start shipping units in 3rd quarter 
this year.

For speed you will get the latest SMB speeds with the 2012 server which will 
help performance - some nas boxes seem to use 'legacy' protocols which do not 
offer the performance. We have clients with QNAP / Netgear etc and they are 
very happy.

Now that MS are moving to a much faster refresh of servers we can probably 
expect the protocols to get tweaked more often - so a proper server might be a 
better idea in the long run.

How about new server and a nas box for iscsi - then you get the best of both 
and you can selectively upgrade as required.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Eric Morrison
Sent: 20 June 2013 16:51
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] NAS or Server

I was thinking of suggesting this...

I use Server 2012 as a file share and an iSCSI target for my Hyper-V hosts in 
my lab and it's awesome. Also, the dedup of my file share has reduced the size 
by 54%. Can't wait for 2012 R2 so that I can also dedup my VHDX files as well!

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Woody Blackman
Sent: Thursday, June 20, 2013 10:44 AM
To: 'ntsysadm@lists.myitforum.com'
Subject: RE: [NTSysADM] NAS or Server

+1

With a small environment and limited cash, I would want to maximize resources 
and options.  The features and flexibility of Storage Server 2012 makes a 
pretty strong argument.

http://technet.microsoft.com/en-us/library/jj643303.aspx
http://searchstorage.techtarget.com/news/2240169657/Windows-Storage-Server-2012-adds-enterprise-grade-features
http://technet.microsoft.com/en-us/video/windows-server-2012-storage-evolved-for-hyper-v.aspx




From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Art DeKneef
Sent: Thursday, June 20, 2013 8:07 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] NAS or Server

Are there any other requirements you have before everyone makes suggestions?

For a NAS device I like the Qnap devices. Since you were debating between a NAS 
and a Windows Server, why not look at a Windows Storage Server type device? 
Since you are looking at Dell check out the PowerVault NX line.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of J- P
Sent: Thursday, June 20, 2013 7:45 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] NAS or Server

That was the basis of the original question, NAS or Server

NAS must haves, non-negotiable;

Redundant Power
2 NICS and or a slot to put a spare NIC
AD Support
RAID
X number of supported connections
MINIMUM 4 bays, prefer 8

-

Now in retrospect your typical server already has everything mentioned above













Jean-Paul Natola


To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] NAS or Server
From: christopher_bod...@glic.commailto:christopher_bod...@glic.com
Date: Thu, 20 Jun 2013 10:25:22 -0400

For something that's just doing file storage I'd probably lean towards a NAS 
device. If you want the flexibility to add additional features (DNS, DHCP, DC,, 
print server, etc.) I'd go with a dedicated server. Also what features do 
you need in a NAS? Nic teaming, iSCSI support, dual power supplies, RAID 
levels? All of that will determine you options. On the low end  you could get 
something like this :

http://www.amazon.com/Synology-DiskStation-Diskless-Attached-DS1513/dp/B00CM9K7E6/ref=sr_1_1?s=electronicsie=UTF8qid=1371736486sr=1-1keywords=Synology+DiskStation+DS1513%2B
Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.commailto:

[cid:image001.jpg@01CE6DDD.3F47C070]

The Guardian Life Insurance Company of America

www.guardianlife.comhttp://www.guardianlife.com/







From:J- P jnat...@hotmail.commailto:jnat...@hotmail.com
To:ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com 
ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Date:06/19/2013 08:47 PM
Subject:[NTSysADM] NAS or Server
Sent by:
listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com




Company background,

30 yrs old, started with 2 guys, went to to computers in the late 90's had 
about 20 users, 1 W2k server and a 120 gb SNAP-

Fast forward , 2008,  30 users, sql 2005 DB  (consultant at the time ) installs 
a new 1U 2003 80gb raid server  for sql DB , and another 1U server 

[NTSysADM] Fwd: Fw: Raley's targeted in cyber attack

[Mike Sullivan]

My wife just received this today. I am not getting any warm fuzzies from
Raley's right now.

I wonder how many other grocery store chains have the same problem?

  *From:* Raley's Stores secur...@raleys.com
*Sent:* Thursday, June 06, 2013 2:39 PM
*To:*
*Subject:* Raley's targeted in cyber attack





To Our Customers:

Raley's Family of Fine Stores has recently discovered that a portion of our
computer network systems may have been the target of a complex, criminal
cyber attack.

We immediately initiated an investigation to determine whether cyber
criminals may have obtained customer credit and debit card information. At
this time, we have not confirmed any unauthorized access to payment card
data, but our investigation remains ongoing. We have no reason to believe
that debit PIN numbers could have been accessed. We do not collect Social
Security or drivers' license numbers in association with payment card
transactions.

Raley's has taken a series of immediate steps to enhance the security
measures already in place to protect customer data. We are confident that
our customers can continue using their payment cards in its stores.

We sincerely regret any inconvenience this incident may have caused and
wanted to reach out to our customers to encourage you to:

   - Check and monitor your bank and credit card statements for evidence of
   unauthorized transactions.
   - Contact your bank or credit card company if you identify suspicious
   charges.
   - Cardholders are not typically held responsible for fraudulent charges
   made by unauthorized parties if reported promptly to the card issuer.

You can contact our dedicated response team from 7 a.m. to 10 p.m. every
day:
*Phone: 800-925-9989*

Visit our website,
www.raleys.comhttp://click.raleysstores.com/?qs=da4fcff048fbacbc397613d419c225f9bd7c13b4979f270a794b2eabcf3c46f7303e28f583ca,
for updates and to see our customer fact sheet.

You can also learn more about fraud from the California Office of Privacy
Protection 
websitehttp://click.raleysstores.com/?qs=da4fcff048fbacbc088102341b06f7a09367e61396bc9e6c4a4a4958fcfbc11b75b7fb5a708688aband
the Federal
Trade Commission's Consumer Information
websitehttp://click.raleysstores.com/?qs=da4fcff048fbacbc9aa27959e4a42a90426a68b7e94f9435b198d90c0ce2a6b8213199665eb14db3.


[image: Raleys Bel Air and Nob Hill Logos]

--

This is a non-commercial account notification from Raley's Family of Fine
Stores
500 West Capitol Avenue
West Sacramento, CA, 95605, USA







-- 
Thank you,
Mike Sullivan