Re: [NTSysADM] NAS SMB server (QNAP?)

2013-10-29 Thread Jean-Christian Chevalier
QNAP appliances can be integrated in AD and it works well. You basically add it to your domain as you would a Windows PC. Then you can set up permissions for the shares you define on the NAS using AD groups and/or users. I have one in use at a small business since 2 years (model TS-459U-SP+).

Re: [NTSysADM] OT-ish: Laptop

2013-10-29 Thread James Rankin
Thanks for all the feedback on this topic...I am now better equipped to make a decision rather than falling into the ooohh, shiny trap :-) On 27 October 2013 03:34, Ryan Finnesey r...@finnesey.com wrote: Big fan of Lenovo. The T Series has always been great. I also love my X1 carbon.

RE: [NTSysADM] NAS SMB server (QNAP?)

2013-10-29 Thread N Parr
I have a TS-659 Pro II home and at work. I've used them for SMB (AD authentication) and ISCSI targets. I just moved iSCSI off the one at work now that we have another EQ. It's mainly used as a backup target now and for any kind of bulk storage users need. I still use the one at home for my

RE: [NTSysADM] Software question

2013-10-29 Thread Heaton, Joseph@Wildlife
2010, and we use MAK. Joe Heaton Enterprise Server Support CA Department of Fish and Wildlife 1807 13th Street, Suite 201 Sacramento, CA 95811 Desk: (916) 323-1284 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Damien Solodow Sent: Monday, October

RE: [NTSysADM] NAS SMB server (QNAP?)

2013-10-29 Thread Sam Cayze
Can it also act as a DFS share? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Jean-Christian Chevalier Sent: Tuesday, October 29, 2013 1:05 AM To: ntsysadm@lists.myitforum.com Subject: Re: [NTSysADM] NAS SMB server (QNAP?) QNAP appliances can be

[NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Jon D
I'm not an expert with VPNs... Is it possible to have end-users use any sort of VPN technology to access high-bandwidth apps? Say if an app that is really chatty constantly talking back to a SQL database, or an app that can at times burn 100+megs by itself. And say 50-100 end-users could be

RE: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Heaton, Joseph@Wildlife
Off the top of my head, it's going to depend on the end users' connection bandwidth, and the bandwidth available through the VPN. I don't know of any ISP offering bandwidth comparable to your internal network. Joe Heaton Enterprise Server Support CA Department of Fish and Wildlife 1807 13th

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Rankin, James R
Wouldn't something like Citrix XenApp offload the performance hit onto the local network for your remote users? Granted, not your query, but it would allow VPN users to use these apps without eating remote bandwidth... Sent from my (new!) BlackBerry, which may make me an antiques dealer, but

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Kurt Buff
A VPN will do whatever you ask, up to the limit of the bandwidth available. System tuning is all about chasing down and eliminating bottlenecks - you'll want to characterize the application(s) and the bandwidth available at each end, and plan for that. It is, however, something that WAN

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Kurt Buff
An excellent point. This might well be a situation where RDP makes a great deal of sense. Kurt On Tue, Oct 29, 2013 at 9:23 AM, Rankin, James R kz2...@googlemail.com wrote: Wouldn't something like Citrix XenApp offload the performance hit onto the local network for your remote users? Granted,

RE: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Kennedy, Jim
So normally the SQL traffic is between the users desktop and the sql backend? VPN won't change that. But a remote desktop session would. Then the traffic would be between the remote desktop server and the sql backend. From: listsad...@lists.myitforum.com

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Daniel Chenault
Use the VPN to create an inroad into the internal network. For those bandwidth-hungry apps have the user connect to an RDP server; processing and storage will then all be local. The user can later copy whatever information he needs on his end. And all this science I don't understand It's just

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Ben Scott
On Tue, Oct 29, 2013 at 12:09 PM, Jon D rekcahp...@gmail.com wrote: I'm not an expert with VPNs... A VPN is just a network link. Nothing more, nothing less. Think of it like a really long Ethernet cable. Is it possible to have end-users use any sort of VPN technology to access

[NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Michael Leone
So I've been working on my proof-of-concept RDS environment, to test running a specific application as RDS. Here's something I've found out about using self-issued certificates. (I have a Linux VM that I am using as a CA, so I can issue my own local certificates). Obviously, step one is to import

RE: [NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Ken Cornetet
You are making this WAY too hard. Install certificate servicer on one of your windows servers. Make it a root CA for the domain. Use IIS management console and/or the certificates MMC to request and install certificates. Done. Domain computers will automatically trust the root cert. From:

RE: [NTSysADM] Migrating from Infoblox to MS DNS General questions

2013-10-29 Thread Brian Desmond
I would find a way to do Option 2 for all your zones. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Don Kuhlman Sent: Monday, October 28,

RE: [NTSysADM] Migrating from Infoblox to MS DNS General questions

2013-10-29 Thread Don Kuhlman
Thanks Brian! On Tue, 10/29/13, Brian Desmond br...@briandesmond.com wrote: Subject: RE: [NTSysADM] Migrating from Infoblox to MS DNS General questions To: ntsysadm@lists.myitforum.com ntsysadm@lists.myitforum.com Date: Tuesday, October 29, 2013,

Re: [NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Ben Scott
On Tue, Oct 29, 2013 at 2:26 PM, Ken Cornetet ken.corne...@kimball.com wrote: You are making this WAY too hard. Install certificate servicer on one of your windows servers. Make it a root CA for the domain. Use IIS management console and/or the “certificates” MMC to request and install

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Jon D
Thanks for everyone's responses so far! Responses below: Wouldn't something like Citrix XenApp offload the performance hit onto the local network for your remote users? Good suggestion. We're actually already using it(have been for 10+ years), but end-users hate it. I might end up trying

Re: [NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Michael Leone
On Tue, Oct 29, 2013 at 2:26 PM, Ken Cornetet ken.corne...@kimball.comwrote: You are making this WAY too hard. Install certificate servicer on one of your windows servers. Make it a root CA for the domain. Use IIS management console and/or the “certificates” MMC to request and install

RE: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Kennedy, Jim
Regarding your last comment. Most of my staff call our Remote Desktop system 'VPN'. In fact several in my department refer to it that way. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Jon D Sent: Tuesday, October 29, 2013 3:55 PM To:

Re: [NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Michael Leone
On Tue, Oct 29, 2013 at 3:53 PM, Michael Leone oozerd...@gmail.com wrote: On Tue, Oct 29, 2013 at 2:26 PM, Ken Cornetet ken.corne...@kimball.com wrote: You are making this WAY too hard. Install certificate servicer on one of your windows servers. Make it a root CA for the domain. Use

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Kurt Buff
And you don't smack them with a rolled up newspaper? Terminology matters... :) On Tue, Oct 29, 2013 at 1:00 PM, Kennedy, Jim kennedy...@elyriaschools.org wrote: Regarding your last comment. Most of my staff call our Remote Desktop system ‘VPN’. In fact several in my department refer to it

Re: [NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Kurt Buff
Using OpenSSL as a root cert is a fine idea, especially with a two-tier infrastructure where you keep the root mostly shut down. Using a MSFT CA as a secondary is a really good idea - it doesn't just serve up IIS certs, it also serves up about every kind of cert needed for an infrastructure,

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Rankin, James R
XenDesktop is often overused where a XenApp published desktop will do, but implemented badlyusers get set against it. If you can afford the XenDesktop licensing, it's good, but the 1:1 nature of the machines means it has a lot of overhead in resource and management. If you have any

Re: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Jon D
That's a good point about VDI vs published desktops. I need to read up on published desktops more before I get too far into VDI. I have licensing for XenDesktop already(part of a deal Citrix did with XenApp a few years back). On Tue, Oct 29, 2013 at 4:31 PM, Rankin, James R

Re: [NTSysADM] NAS SMB server (QNAP?)

2013-10-29 Thread Jean-Christian Chevalier
I have no experience with that. However it seems that DFS is supported, but not DFS replication. You can find more details here: http://wiki.qnap.com/wiki/Dfs. Extract: QNAP firmware supports DFS in the form of a feature called Folder Aggregation and Portal Folders. Keep in mind however, that

RE: [NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Ken Schaefer
Just to clarify - there's no such thing as IIS certs. Certificates for setting up a HTTPS session require only single OID: server authentication. The wizard in IIS generates a certificate request that requests a cert with only that OID, and a Windows CA has a built-in template called web

RE: [NTSysADM] VPN and high bandwidth applications

2013-10-29 Thread Webster
Something must be wrong with your XenApp implementation if users hate it. Thanks Webster From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Jon D Sent: Tuesday, October 29, 2013 2:53 PM To: ntsysadm@lists.myitforum.com Subject: Re: [NTSysADM] VPN and

Re: [NTSysADM] Win 2012 RDS and locally issued certificates - some observations

2013-10-29 Thread Ben Scott
On Tue, Oct 29, 2013 at 6:34 PM, Ken Schaefer k...@kj.net.au wrote: So, when you request a cert to use for a particular service, you need to know what capabilities that cert needs to have, and fashion a request appropriately Computers are so picky. -- Ben