[NTSysADM] LDAP Administrator question

2014-08-08 Thread Christopher Bodnar
Anyone out there using the Softerra full version of the LDAP Administrator? Not the LDAP Browser (they are different). Seems there is a specific limitation in the Browser version due to the MaxPageSize value in AD so it only returns 1000 records. Other products out there have overcome this

RE: [NTSysADM] RE: Sys admin day

2014-08-08 Thread Melvin Backus
It means you’ve won a free phone, but activation and service is not included. ☺ Well, in this case, not quite that bad, you have the program and can run it presumably forever but you can’t upgrade it or get any support for it. -- There are 10 kinds of people in the world... those who

RE: [NTSysADM] LDAP Administrator question

2014-08-08 Thread Joseph L. Casale
 Seems there is a specific limitation in the Browser version due to the MaxPageSize value in AD so it only returns 1000 records. Other products out there have overcome this limitation (i.e. Quest uses the -sizelimit parameter). SizeLimit and PageSize are two different things. Sizelimit is the

RE: [NTSysADM] Pushing proxy for Firefox

2014-08-08 Thread Heaton, Joseph@Wildlife
We use Websense Web Security Gateway. Have been for a number of years. It does great capturing port 80. However, to be able to resolve the 443 traffic, you have to run it through the Content Gateway product. There is a way to setup transparent proxy, but in our testing, you had to login

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Heaton, Joseph@Wildlife
Yes, pretty much what I’ve been trying to do. But it just doesn’t seem to want to hold the settings. We only need two sub-categories, so I left the basic auditing set to Success/Failure, and in the sub-categories, I set just the two that I need, leaving the rest at No Auditing. But, if I go

Re: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Sean Martin
No chance that another gpo is being applied? - Sean On Aug 8, 2014, at 6:50 AM, Heaton, Joseph@Wildlife joseph.hea...@wildlife.ca.gov wrote: Yes, pretty much what I’ve been trying to do. But it just doesn’t seem to want to hold the settings. We only need two sub-categories, so I left

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Heaton, Joseph@Wildlife
No, I just did a modeling, with the account I’m logging into the server with, and there are no auditing settings at all being applied through GPO to that box for me. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Sean Martin Sent: Friday, August 08,

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Free, Bob
Modeling isn’t all it’s cracked up to be, actually, it’s really an epic fail IME. Only thing that is truly authoritative is auditpol. I’ve experienced situations where well-intentioned people messed around in 3 or 4 places not understanding all the subtleties and had the system so royally

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Heaton, Joseph@Wildlife
I know it sounds like that, but I run a gpresult /R, and then go through every policy that it says is applied, and there are absolutely no settings having to do with auditing. I'm still digging in GPOs, practically to the point of checking every single policy, but this is really baffling.

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Heaton, Joseph@Wildlife
Unfortunately, I can’t do the advanced audit configuration through GPO. The last time that happened, my SCCM user affinity broke, and I really don’t want to go back down that rabbit hole. I’ll take a look at the links. I agree that auditpol gives you the true view, and when I did that, even

[NTSysADM] Where are cluster share definitions kept? (registery, etc)

2014-08-08 Thread Michael Leone
Further to my recent discussion about saving share definitions by saving the registry key they are stored in, where are the share definitions and permissions kept for a cluster? They're not in the same registry key as non-clustered shares, but I can't find out where they are, to export and save

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Heaton, Joseph@Wildlife
Hey Bob, Maybe I should have Sam fix this for me ☺ From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Free, Bob Sent: Friday, August 08, 2014 10:57 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Setting auditing in local security policy

[NTSysADM] Semi OT: SQL log shipping

2014-08-08 Thread Kevin Lundy
Hi all, I'm (unfortunately) the DBA for a client. I'm only an accidental DBA. We are setting up log shipping for a soon to be critical database. All seems to be working fine. During the pre go-live testing, we will be refreshing the test data in the db several times. The database is about

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Heaton, Joseph@Wildlife
So, I went back and created a GPO that applies only to the file servers I’m trying to work with. Set everything as I want it, applied the policy, did a gpupdate on the server, and no change. Legacy object access still configured with success/failure, which means all subcategories are going as

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Michael B. Smith
Can’t be “Commandments” if there aren’t 10 of them. ☺ Thanks for this, Bob! From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Free, Bob Sent: Friday, August 8, 2014 1:57 PM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Setting auditing in local

RE: [NTSysADM] LDAP Administrator question

2014-08-08 Thread Michael B. Smith
Ldp.exe ? Adsiedit.msc ? Dsquery ? Adfind ? If you enable the paging control in the Browser it returns more than 1 000 records. Most of the other solutions enable the control automagically. I discuss paging in this blog post:

RE: [NTSysADM] Setting auditing in local security policy

2014-08-08 Thread Free, Bob
Heh, I can easily make up 2 more ☺ Actually best to just repeat 4 and 6 to make 10. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith Sent: Friday, August 08, 2014 3:25 PM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Setting

[NTSysADM] RE: SFTP server to backup our new Cisco phone system

2014-08-08 Thread Phil Brutsche
To dig up an old-ish thread... The Solar Winds SFTP server has a max file size limit of 4GB. This may or may not be a problem for your environment. Environments with A LOT of stored voicemails in Unity Connection, or environments with A LOT of stuff in the TFTP directories of their CUCM

[NTSysADM] Re: Kyocera Copier

2014-08-08 Thread Angus Scott-Fleming
On 5 Aug 2014 at 21:28, Jon Harris wrote: Security issue but if the vendor refuses to fix you will have to work around it. Personally I would put the web page on a different subnet that only those you trust will have knowledge of and which you would have to change your machines IP to get

[NTSysADM] RE: SFTP server to backup our new Cisco phone system

2014-08-08 Thread Stefan Jafs
I split them up in 2 folders, I'll keep track of the size, thanks for the heads up. __ Stefan Jafs From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Phil Brutsche Sent: August 8, 2014 19:32 To: ntsysadm@lists.myitforum.com

[NTSysADM] Re: Something to share with your users, so they can see how passwords matter

2014-08-08 Thread Angus Scott-Fleming
I know some people here don't like GRC, but: Password Haystacks: How Well Hidden is Your Needle?   https://www.grc.com/haystack.htm On 7 Aug 2014 at 14:29, Micheal Espinola Jr wrote: http://i.imgur.com/XuMUU0b.gif I saw it on reddit - I dont have a source for it. Seems to be

[NTSysADM] Re: Pushing proxy for Firefox

2014-08-08 Thread Angus Scott-Fleming
On 7 Aug 2014 at 15:36, Heaton, Joseph@Wildlife wrote: Our organization is moving towards using a proxy for internet browsing. Trouble is, we allow multiple browsers (IE, Chrome and Firefox). Chrome is easy since it uses the settings from IE, and IE has GPO settings I can use. But Firefox

Re: [NTSysADM] Pushing proxy for Firefox

2014-08-08 Thread Kurt Buff
BTW, I forgot to mention - there's an email list for mozilla enterprise, mostly firefox: List-Subscribe: https://mail.mozilla.org/listinfo/enterprise, mailto:enterprise-requ...@mozilla.org?subject=subscribe I'm sure your questions will received good attention there as well. Kurt On Thu, Aug 7,

Re: [NTSysADM] Re: Something to share with your users, so they can see how passwords matter

2014-08-08 Thread Micheal Espinola Jr
Hmm. Not bad... Brute Force Search Space Analysis: Search Space Depth (Alphabet):26+26+33 = *85*Search Space Length (Characters): 31 charactersExact Search Space Size (Count): (count of all possible passwords with this alphabet size and up to this password's length) 656,336,

RE: [NTSysADM] Re: Something to share with your users, so they can see how passwords matter

2014-08-08 Thread Michael B. Smith
But it isn't accurate. I don't mean to lecture (and I won't) - but you should spend some time learning how Rainbow Tables operate. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Micheal Espinola Jr Sent: Friday, August 8, 2014 11:10 PM To: ntsysadm

[NTSysADM] Re: Something to share with your users, so they can see how passwords matter

2014-08-08 Thread Micheal Espinola Jr
I see it as a simplistic visual aid for the end users. I understand and keep my own sets of rainbow tables. On Friday, August 8, 2014, Michael B. Smith mich...@smithcons.com wrote: But it isn't accurate. I don't mean to lecture (and I won't) - but you should spend some time learning how