Re: Support techs remote access rights to user PCs

2009-03-05 Thread James Rankin
Don't know how big an org you are, but on one secure account we worked on admin access was leased to users on request by a backbone security team. The admin acccounts for users which had rights to workstations or servers as required were disabled until requested through a helpdesk case, and when

RE: Changing Account Settings en Masse

2009-03-05 Thread John Hornbuckle
Thanks! From: !Amado Abenojar [mailto:abe9...@hotmail.com] Sent: Wednesday, March 04, 2009 8:15 PM To: NT System Admin Issues Subject: RE: Changing Account Settings en Masse Try dsquery and pipe it into dsmod in the command line. i.e. dsquery user OU=Employees, DC=Domain, DC=Com

RE: SQl 2000 sp4 DB into SQL 2000 sp3a server

2009-03-05 Thread Ziots, Edward
Usually backreving the database to an earlier version SP4 to SP3a, isn't the issue it's the reverse that is the issue going from SP3a to SP4. I would look at the SP4 release notes and see if there was any schema changes accordingly, that might not be present in SP3a that would cause you a bit of

Re: Changing Account Settings en Masse

2009-03-05 Thread KenM
John It sounds like you do not like the command line. There are a few other options for this. I am assuming you are running 2003. Using DSA you can highlight multiple users in a OU and make this change. You could also create a search query for user objects and highlight the ones you want and make

OT: MagicJack

2009-03-05 Thread Jason Morris
Has anybody used one of these for International users? We just bought for testing purposes and it seems too good to be true. The call quality is actually pretty excellent. http://www.magicjack.com/ --- Jason Morris MJMC, Inc. jmor...@mjmc.com P:

RE: Changing Account Settings en Masse

2009-03-05 Thread John Hornbuckle
I'm okay with a command line (I grew up in the days of DOS), but given a choice I generally prefer a GUI. Of course, there are some tasks that just don't lend themselves easily to GUIs. From: KenM [mailto:kenmli...@gmail.com] Sent: Thursday, March 05, 2009 8:34 AM To: NT System Admin Issues

Re: OT: MagicJack

2009-03-05 Thread Jonathan Link
I don't have direct knowledge/experience, but... The technology experts for the CPA Association our firm is a member of are very fond of MagicJack, and IIRC, they have mentioned some firms are using these internationally. On Thu, Mar 5, 2009 at 8:57 AM, Jason Morris jmor...@mjmc.com wrote:

2008 server and DCOM

2009-03-05 Thread Gavin Wilby
Hi Guys, Im sorry, but im gonna have to be a little vague here: I have a new 2008 standard server, that has been (successfully) set up as a TS on a small domain. There is an app that a 3rd party is installing that uses a database server for its data, and the client program connects to said

RE: OT: MagicJack

2009-03-05 Thread Steven Calvanese
I have heard nothing but bad things about Magic Jack. A quick Google will dig up a lot of pissed off customers. From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Thursday, March 05, 2009 9:20 AM To: NT System Admin

RE: 2008 server and DCOM

2009-03-05 Thread Miller Bonnie L .
Did you check Windows Firewall (or Windows Firewall with Advanced Security)? If that is still on, look in event viewer, Windows Logs, Security for Failure Audits from the Filtering Platform to see what might be getting blocked. As for dcom, I haven't messed with it too much in WS08 yet, but

RE: 2008 server and DCOM

2009-03-05 Thread Miller Bonnie L .
Hit send too soon again-going to be one of those days. After changing dcom permissions at the default My computer level, you may also need to change them on the properties of the specific object under \Component Services\Computer\My Computer\DCOM Config under the Security tab. Hopefully you

RE: OT: MagicJack

2009-03-05 Thread John Hornbuckle
Which may or may not be representative of people's overall experiences, since folks are generally more likely to complain about something than to say good things about it. From: Steven Calvanese [mailto:scalvan...@membersolutions.com] Sent: Thursday, March 05, 2009 9:48 AM To: NT System

RE: OT: MagicJack

2009-03-05 Thread gsweers
I have quite a few home people who use it, and have mixed reviews with it. To not working at all for days to best thing they ever bought. Nothing I would put in a business production environment though.. GReg From: Steven Calvanese [mailto:scalvan...@membersolutions.com] Sent: Thursday,

RE: OT: MagicJack

2009-03-05 Thread Thomas Gonzalez
I have not heard of this product and after reading the reviews: the weight favors toward BAD, but who's to say if this product doesn't work properly. Their website looks a little jumpy and flashy but personally, I wouldn't go this route. I probably would stick with skype or vonage. Thomas

Re: 2008 server and DCOM

2009-03-05 Thread Gavin Wilby
Hi, All windows firewalls/ avd firewalls are off, as is the SEP. Gavin. On Thu, Mar 5, 2009 at 3:09 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: Hit send too soon again—going to be one of those days. After changing dcom permissions at the “default” My computer level, you may

Re: 2008 server and DCOM

2009-03-05 Thread Gavin Wilby
Ill check that out now - many thanks. No reply from the support team yet ;( On Thu, Mar 5, 2009 at 3:09 PM, Miller Bonnie L. mille...@mukilteo.wednet.edu wrote: Hit send too soon again—going to be one of those days. After changing dcom permissions at the “default” My computer level, you

RE: OT: MagicJack

2009-03-05 Thread Vue, Za
It sure beats $20-$30 a month land lines from ATT. I say if you are going to use this product then assign a dedicated computer to it. It may be crappy at times for some people but the issue may not always be MagicJack. Ease up on downloading movies and porn 24/7 which will use up your 3 MB

RE: MagicJack

2009-03-05 Thread Joe Heaton
Jason, I have been using Magicjack for my only house phone for almost a year now. The sound quality is excellent, I can call anyone, anywhere in the United States for free, it costs $19.95 a year, and international rates are dirt cheap. Unfortunately, to address your question, I have not

RE: OT: MagicJack

2009-03-05 Thread Joe Heaton
Za, I use an old 900MHz cordless phone with mine, with no issues. The phone service doesn't use much bandwidth at all, but it will kick you to desktop when a call comes in, which can be bothersome if you're in the middle of a fight (I play Warhammer Online) Joe Heaton Employment Training

RE: OT: MagicJack

2009-03-05 Thread John Aldrich
A former co-worker went to work for them and when he found a better job they tried to hijack his last paycheck in return for their tools (fair) and return of a cash bonus earned working over the Christmas holidays (NOT fair, imho.) At least that's what my former co-worker said, and I have no

RE: Strange GPO issue...

2009-03-05 Thread Miller Bonnie L .
Do you have another higher GPO that has proxy settings defined in another area, such as under \User configuration\Windows Settings\Internet Explorer Maintenance\Connection/Proxy Settings? -Bonnie From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Monday, March 02, 2009 4:13 AM To: NT System

RE: OT: MagicJack

2009-03-05 Thread Jason Morris
Thanks everybody for your feedback. We'll see what comes of it. Right now we're leaning towards buying a couple and letting the users beat them up down in Panama. Jason From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Thursday, March 05, 2009 9:53 AM To: NT System Admin Issues

SQL2k DB name Question

2009-03-05 Thread Joseph L. Casale
When I use Enterprise Mangler and check the properties of a DB, I can see for both the db and log filename which shows its name, and location which shows its actual filename. When I use Query Analyzer and execute a sp_helpfile I see name which matches file name and filename which matches

RE: SQL2k DB name Question

2009-03-05 Thread Ken Schaefer
Hi, When you connect to SQL Server from an application you need to specify which database you want to use - that's what the DB name is for. If you don't specify a name you end up in the default database configured for the user in question. If you need to reference objects in other databases,

RE: SQL2k DB name Question

2009-03-05 Thread Joseph L. Casale
Ken, Under Enterprise mangler, I have Databses - DB_A, master, etc. The application only has configuration referencing the name DB_A but this db has filename's with associated names that are different. Should I be concerned that the restore db has those different filenames? Thanks! jlc From:

file copy strangeness

2009-03-05 Thread Kim Longenbaugh
We have a workstation running Windows XP sp2. This workstation must transfer files from it's local C:\ to a folder on a network share. The file is typically about 330 megs or so. The problem is that copying the file is taking up to 30 minutes using Windows Exploder. The odd thing is, if

Re: file copy strangeness

2009-03-05 Thread Jonathan Link
I have seen simlar behavior with Quickbooks 2006 and 2007 when multi-user mode is installed and QB installs its own database engine. You didn't mention any applications already installed, so I had to throw out my wild guess. On Thu, Mar 5, 2009 at 12:23 PM, Kim Longenbaugh

RE: file copy strangeness

2009-03-05 Thread Scott Kaufman at HQ
Have you disabled the Scalable Network feature on the server? Did you check both the switch the nic settings on the servers to make sure they're identical? Scott Kaufman Lead Network Analyst ITT ESI, Inc. From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Thursday, March

RE: file copy strangeness

2009-03-05 Thread lists
Try setting the NIC to auto negotiate or just auto. Cheers. From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Thursday, March 05, 2009 11:23 AM To: NT System Admin Issues Subject: file copy strangeness We have a workstation running

R: file copy strangeness

2009-03-05 Thread HELP_PC
Are you getting slow performance even if you pick the file from the sharing machine ? GuidoElia HELPPC _ Da: Kim Longenbaugh [mailto:k...@colonialsavings.com] Inviato: giovedì 5 marzo 2009 18.23 A: NT System Admin Issues Oggetto: file copy strangeness We have a workstation

Re: file copy strangeness

2009-03-05 Thread Ben Scott
On Thu, Mar 5, 2009 at 12:23 PM, Kim Longenbaugh k...@colonialsavings.com wrote: The problem is that copying the file is taking up to 30 minutes using Windows Exploder. The odd thing is, if we transfer a file TO the workstation from the network, it goes extremely fast. Try the copy with

RE: file copy strangeness

2009-03-05 Thread Kim Longenbaugh
I'll lump all the answers to each question here: From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Thursday, March 05, 2009 11:29 AM To: NT System Admin Issues Subject: Re: file copy strangeness I have seen simlar behavior with Quickbooks 2006 and 2007 when multi-user mode is

Re: Hiding words in an outlook form

2009-03-05 Thread Eric Woodford
Heck a white font on white body text has the same overall effect (as long as not viewed in plain-text mode). Former employer, had similr trick for encrypting messages leaving the domain. So most customer service simply put the encryption word in their signatures. On Wed, Mar 4, 2009 at 5:24 AM,

Site to Site VPN?

2009-03-05 Thread Sam Cayze
We may be needing a VPN connection to our remote data center in the near future for a small office, about 20 users. Does anybody have any experience with the Cisco/Linksys RVS4000? I tried a SonicWall once, it was way over my head, and support was horrendous. This will operate solely as 2

Re: Site to Site VPN?

2009-03-05 Thread Micheal Espinola Jr
No experience with that model, but I can say that current SonicWALL devices are very easy to site-2-site VPN. Their support for me in the past year has been very easy to deal with. -- ME2 On Thu, Mar 5, 2009 at 2:53 PM, Sam Cayze sam.ca...@rollouts.com wrote: We may be needing a VPN

Re: Site to Site VPN?

2009-03-05 Thread Matthew W. Ross
I just recently asked the list about Site to Site VPN solutions. It's called Site to Site VPN... What works? Check out them in the archives: http://lyris.sunbelt-software.com/read/search/results?forum=ntsysadminwords=Site+to+Site+VPN...+What+works?sb=1 We ended up using IPSec between our two

SCOM 2007 install issue

2009-03-05 Thread Christopher Bodnar
Anyone do the single server install of SCOM 2007? Specifically I was wondering what SQL 2005 permissions the account that is installing needs within SQL. Our DBA group did the SQL install and gave my account the dbcreator and public roles within SQL. That does not seem to be enough for the

Re: Site to Site VPN?

2009-03-05 Thread Micheal Espinola Jr
Also, with a SonicWALLs running at each end-point, it took literally 5 minutes to go through the wizards on each end to build the site-2-site VPN. It was super-easy. One negative thing that I definately have to throw out there, is that the CMD line interface (if thats you preference) is

RE: SCOM 2007 install issue

2009-03-05 Thread Rod Trent
Posting to the list or the forums on myIT? From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, March 05, 2009 3:28 PM To: NT System Admin Issues Subject: SCOM 2007 install issue Anyone do the single server install of SCOM 2007? Specifically I was wondering what

RE: Site to Site VPN?

2009-03-05 Thread Sam Cayze
Thanks Mike, I am fairly unfamiliar with routers and networking, so I won't be using any line interfaces! :) I'm looking for easy and familiar, hence why Linksys was the first place I looked. I appreciate the input. -Original Message- From: Micheal Espinola Jr

Re: Site to Site VPN?

2009-03-05 Thread Micheal Espinola Jr
Something to keep in mind is if the device has seperate processing for the encyption. If not, it can impede the overall performance of the device. Again, I'm not familiar with this particular unit, but I've seen other low-end device suffer severly because of the lack of over-all horsepower when

Re: file copy strangeness

2009-03-05 Thread Mailed2TheWall
Windows Exploder? Sounds like something Shook would use. ;-P On Mar 5, 2009, at 11:04 AM, Ben Scott mailvor...@gmail.com wrote: On Thu, Mar 5, 2009 at 12:23 PM, Kim Longenbaugh k...@colonialsavings.com wrote: The problem is that copying the file is taking up to 30 minutes using Windows

RE: SCOM 2007 install issue

2009-03-05 Thread Michael B. Smith
Yes. You need sa, unfortunately. shameless plug You can read my book for some additional details (I've got two chapters on installing OpsMgr and a chapter on SQL Monitoring). /shameless plug In general, the install and the management pack do so much more than just deal with the

RE: Site to Site VPN?

2009-03-05 Thread John Aldrich
Well, we're using an ASA and two Pixes here to connect three lans together if that helps. I'm the IT Manager, but I'm not a Cisco guy. I've got a vendor who handles all that for us. J There's a Cisco user list that I'm subscribe to. maybe you'd like to join up on there:

RE: file copy strangeness

2009-03-05 Thread John Aldrich
Just curious, and I'm not sure what it would mean, but what happens if you try to pull the file from the workstation instead of push to the server? Does that make a difference? John-AldrichTile-Tools From: Kim Longenbaugh [mailto:k...@colonialsavings.com] Sent: Thursday, March 05, 2009

Re: file copy strangeness

2009-03-05 Thread Jeff Bunting
you're confusing that with Windows Exposer. On Thu, Mar 5, 2009 at 4:02 PM, Mailed2TheWall mailed2thew...@gmail.comwrote: Windows Exploder? Sounds like something Shook would use. ;-P On Mar 5, 2009, at 11:04 AM, Ben Scott mailvor...@gmail.com wrote: On Thu, Mar 5, 2009 at 12:23 PM, Kim

Re: Site to Site VPN?

2009-03-05 Thread Ben Scott
On Thu, Mar 5, 2009 at 2:53 PM, Sam Cayze sam.ca...@rollouts.com wrote:   Does anybody have any experience with the Cisco/Linksys RVS4000? Not that one in particular, but I've had exposure to a few different LinkSys encryption boxes in the past, and they've all sucked. Inadequate processing

RE: file copy strangeness

2009-03-05 Thread Kim Longenbaugh
More bang for the buck -Original Message- From: Mailed2TheWall [mailto:mailed2thew...@gmail.com] Sent: Thursday, March 05, 2009 3:03 PM To: NT System Admin Issues Subject: Re: file copy strangeness Windows Exploder? Sounds like something Shook would use. ;-P On Mar 5, 2009, at 11:04

RE: Bizarro-world: fixed! (mostly)

2009-03-05 Thread Free, Bob
/trivia It's not an option but you actually can set to Nt5DS quickly from the command line, I used to do it rather frequently at a site where people always fooled with the time service to get it back in the proper domain hierarchy with no fuss. If you issue net time /setsntp: with no value

RE: Site to Site VPN?

2009-03-05 Thread Sam Cayze
So this was pre-2003? (When Linksys was acquired by Cisco?) Any good recommendations? -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, March 05, 2009 4:21 PM To: NT System Admin Issues Subject: Re: Site to Site VPN? On Thu, Mar 5, 2009 at 2:53 PM,

Re: file copy strangeness

2009-03-05 Thread Sherry Abercrombie
As long as I can remember it's been sarcastically/in-jest called Windows Exploder and Internet Exploder On Thu, Mar 5, 2009 at 3:02 PM, Mailed2TheWall mailed2thew...@gmail.comwrote: Windows Exploder? Sounds like something Shook would use. ;-P On Mar 5, 2009, at 11:04 AM, Ben Scott

RE: SCOM 2007 install issue

2009-03-05 Thread Ken Schaefer
Um - we're talking about the installation here... I would suggest that dbcreator is probably sufficient to create the database, but is the account then dbo for that database? The installation will the need to create tables etc, so dbo is probably the easiest way. Cheers Ken From: Michael B.

RE: SQL2k DB name Question

2009-03-05 Thread Ken Schaefer
Hi, If you are talking about the physical filenames (of the mdf, ldf files etc) then they do not have any strict relationship to the name of the database at all. By default, database files/filegroups and log files are given the same name as the database name, but they can be anything

Re: file copy strangeness

2009-03-05 Thread Ben Scott
On Thu, Mar 5, 2009 at 1:49 PM, Kim Longenbaugh k...@colonialsavings.com wrote: The workstation nic was set to auto, switch on 100/full ... That could be the problem right there. The way Ethernet is designed, if duplex is manually set, it *disables* auto-negotiation. So if one end is set

RE: file copy strangeness

2009-03-05 Thread Tim Vander Kooi
Well the danged turkeys aren't going to kill themselves! -Original Message- From: Mailed2TheWall [mailto:mailed2thew...@gmail.com] Sent: Thursday, March 05, 2009 3:03 PM To: NT System Admin Issues Subject: Re: file copy strangeness Windows Exploder? Sounds like something Shook would

RE: file copy strangeness

2009-03-05 Thread Kim Longenbaugh
I'm not sure how to interpret this either, but when I log on to the server and pull the file from the workstation, the 330 meg file copies in about 45 seconds, instead of 30-45 minutes when I copy it from the workstation to the server. Go figure. From:

RE: Is my Google bigger than yours? Lets check!

2009-03-05 Thread Free, Bob
Ditto- 7301 MB- Adopted June 2004... -Original Message- From: Michael B. Smith [mailto:mich...@theessentialexchange.com] Sent: Wednesday, March 04, 2009 10:58 AM To: NT System Admin Issues Subject: RE: Is my Google bigger than yours? Lets check! I was an early adopter as well...I

Re: Site to Site VPN?

2009-03-05 Thread Ben Scott
On Thu, Mar 5, 2009 at 5:27 PM, Sam Cayze sam.ca...@rollouts.com wrote: So this was pre-2003?  (When Linksys was acquired by Cisco?) It between 2001 and 2004. LinkSys might have been acquired by Cisco during this time span, but Cisco certainly hadn't had a chance to effect any real change

Re: file copy strangeness

2009-03-05 Thread Matthew W. Ross
Ah, one of the many nicknames of Windows Explorer: Exploder Exploiter Expunger Extractor etc... --Matt Ross Ephrata School District - Original Message - From: Mailed2TheWall [mailto:mailed2thew...@gmail.com] To: NT System Admin Issues [mailto:ntsysad...@lyris.sunbelt-software.com]

RE: SCOM 2007 install issue

2009-03-05 Thread Rod Trent
Might need to change that chapter? J From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Thursday, March 05, 2009 4:47 PM To: NT System Admin Issues Subject: RE: SCOM 2007 install issue Um - we're talking about the installation here... I would suggest that dbcreator is probably

RE: file copy strangeness

2009-03-05 Thread Kim Longenbaugh
Hi, The nic was originally set to auto, with the switch on 100/full. I changed it to 100/full on both ends, with no change. I totally agree with you that autonegotiation can be a real pita. I also agree that something could have changed with out us being aware of it. The people that share

RE: file copy strangeness

2009-03-05 Thread Kim Longenbaugh
And then there's Device Mangler, Task Mangler, etc, etc. From: Sherry Abercrombie [mailto:saber...@gmail.com] Sent: Thursday, March 05, 2009 3:08 PM To: NT System Admin Issues Subject: Re: file copy strangeness ~ Finally, powerful endpoint security

RE: SCOM 2007 install issue

2009-03-05 Thread Michael B. Smith
No. I read the OP's question too quickly. From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Thursday, March 05, 2009 5:41 PM To: NT System Admin Issues Subject: RE: SCOM 2007 install issue Might need to change that chapter? J From: Ken Schaefer [mailto:k...@adopenstatic.com]

Re: Is my Google bigger than yours? Lets check!

2009-03-05 Thread Kurt Buff
My earliest email in this account dates from April 2005. I no longer remember who gave me the invitation - it might have been someone at my place of work, but it's more than a week ago, so it's passed through my memory into the bit bucket... On Thu, Mar 5, 2009 at 13:43, Free, Bob r...@pge.com

Re: file copy strangeness

2009-03-05 Thread Ben Scott
On Thu, Mar 5, 2009 at 5:43 PM, Kim Longenbaugh k...@colonialsavings.com wrote: And then there’s “Device Mangler”, “Task Mangler”, etc, etc. I like to rename things to My Confuser and Nyetwork Places. And there's server = swerver Back in the NetWare 3.x days, we always said stupidvisor

RE: Any TrueCrypt users out there

2009-03-05 Thread Mike Gill
How can you cancel out of a prompt you're not getting? I've re-read all of your posts and I can't make much sense of any of them based on my used of TC. How did you encrypt the drive? You went through the System Encrypt System Partition/Drive process via the menu correct? -- Mike Gill

Offline patching Vista / Microsoft Update Catalog searching

2009-03-05 Thread Ben Scott
Hi all, I'm working on getting our first stand-alone Vista computers set up. By stand-alone, I mean these computers are not and cannot be connected to *ANY* network -- including the Internet. No Ethernet, no modem, no nuttin'. The only way files get to these computers is by sneakernet --

RE: Offline patching Vista / Microsoft Update Catalog searching

2009-03-05 Thread Troy Meyer
Ben, Have you looked at this project? http://www.heise.de/ct/projekte/offlineupdate/download_uk.shtml We have used this for remote systems with no network access with good success. I can't vouch for the scriptability (its used so sparingly that we use the GUI), but from the interface I am

RE: Any TrueCrypt users out there

2009-03-05 Thread Mike Mitchell
Doesn't TrueCrypt have a cmd interface? I used it a while ago (4.x) and had a .cmd file to mount and dismount an encrypted drive (USB-based in that instance). Mike. From: Mike Gill [mailto:lis...@canbyfoursquare.com] Sent: Thursday, March 05, 2009 3:15 pm To: NT System Admin Issues

RE: Offline patching Vista / Microsoft Update Catalog searching

2009-03-05 Thread Michael B. Smith
http://microsoft.com/mbsa Is probably what you want. You'll have to go through a 2-or-3 step process, since you don't/can't have net access, but it can provide you what you need. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, March 05, 2009 7:04 PM To:

RE: SCOM 2007 install issue

2009-03-05 Thread Christopher Bodnar
On the Forums. I haven't subscribed to any of the discussion lists on your site. Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.com Phone: 610-807-6459 Fax:

RE: Site to Site VPN?

2009-03-05 Thread Gene Giannamore
Its funny, because of a few Linksys routers, they were advertising 50 or even 70 vpns. After playing with them and getting them to work, that number is the max number of defined vpns. It takes a little while to figure out to setup Linksys vpns, static ip on at least one end, and psk, is not too

Re: Site to Site VPN?

2009-03-05 Thread Micheal Espinola Jr
As I mentioned before, I like Linksys products for lots of things, but they have always tested weak in relation to IPSec VPN throughput. I would strongly recommend against using them unless you have seen numbers that show a particular model to be comparitively better than similar competitor

RE: SCOM 2007 install issue

2009-03-05 Thread Christopher Bodnar
Michael, Thanks for the direct reply. Unfortunately I just purchased the Unleashed book or I'd take you up on that. :-) I'll see if our DBA group will agree to give my account SA for the install. Can you clarify a few more points on that? 1. After the install I'm assuming that my

Re: Site to Site VPN?

2009-03-05 Thread Phil Brutsche
My experience is that things have not changed much on that front. As of last August Linksys gear was still slow and unreliable. Ben Scott wrote: It between 2001 and 2004. LinkSys might have been acquired by Cisco during this time span, but Cisco certainly hadn't had a chance to effect any

RE: SCOM 2007 install issue

2009-03-05 Thread Michael B. Smith
Refer to Ken's improvement on my answer to your question (actually, he answered it, I didn't - shame on me). For INSTALLATION the account needs dbcreator and dbo. AFAIK, the SQL MP only uses (by default) the action.account. Can I ask why you aren't going with Local System? If your

RE: Adding a linux box to Active Directory

2009-03-05 Thread Brian Desmond
I've typically done this with Kerberos - not too hard to do. What all are you trying to accomplish, specifically? Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Wednesday, March 04, 2009 8:40 AM To: NT System Admin

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
They will expire 60 days from when they were last changed. That means that if all your user's passwords were last set a year ago, and you set this policy today, they will all be forced to change next time they logon. The mitigation plan for this is to first mark password never expires on every

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
That is incorrect. AD has no way of knowing when the policy was set. The calculation is done at logon comparing the max password age and the password age on the account. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
Password never expires trumps the setting set in GP. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] Sent: Wednesday, March 04, 2009 10:32 AM To: NT System Admin Issues Subject: RE:

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
This is actually something one major company I know did. They made the expiry annual and the min password length something like 15 characters. The math is based on how long it takes to do the cracking/table generation for length K versus expiry N. Thanks, Brian Desmond br...@briandesmond.com

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
That's a huge liability you're taking asking for someone's password. Really bad idea. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: Cameron Cooper [mailto:ccoo...@aurico.com] Sent: Wednesday, March 04, 2009 10:29 AM To: NT System Admin Issues Subject: RE: Password Policy

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
That is not correct. AD does not force a password change when you uncheck password never expires in ADUC. All that happens is the bit on the account is cleared and the SAM logic which checks for an expired password becomes effective. Thanks, Brian Desmond br...@briandesmond.com c -

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
This only becomes effective when the password is next set. Passwords are stored in an encrypted hash format on each DC. Changing the policy has no means of accessing and validating the passwords. The logic that implements the policy only fires when a user password changes. Thanks, Brian

RE: NT4 in a 2003 domain

2009-03-05 Thread Brian Desmond
It will use other DCs but it will always contact the PDC for things like machine account password changes, user password changes, etc. In the event you have an application using legacy Net* APIs, they may supply flags that force the PDCe to be returned each time. Thanks, Brian Desmond

RE: NT4 in a 2003 domain

2009-03-05 Thread Brian Desmond
Why? What's the point of a BDC if clients never talk to it? Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: Christopher Bodnar

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
Managed Service Accounts in 2008R2/Win7 is a feature that will help alleviate some of this. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: Scott Kaufman at HQ [mailto:skauf...@ittesi.com] Sent: Wednesday, March 04, 2009 4:36 PM To: NT System

Re: NT4 in a 2003 domain

2009-03-05 Thread Kurt Buff
To promote if the PDC dies... On Thu, Mar 5, 2009 at 18:53, Brian Desmond br...@briandesmond.com wrote: Why? What’s the point of a BDC if clients never talk to it? Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed -

RE: NT4 in a 2003 domain

2009-03-05 Thread Brian Desmond
So you're saying the customers who had BDCs in dozens of sites worldwide never actually had any clients talking to those locally placed BDCs? Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday,

RE: SCOM 2007 install issue

2009-03-05 Thread Ken Schaefer
SQL Server Management Pack uses SQLDMO for certain things, and that requires elevated permissions. However most monitoring will work with just datareader permissions across all the databases to be monitored (plus tempdb and master) Cheers Ken From: Michael B. Smith

Re: NT4 in a 2003 domain

2009-03-05 Thread Kurt Buff
Under NT4, the BDCs do actually process logon requests. My response was a bit tongue-in-cheek. On Thu, Mar 5, 2009 at 19:05, Brian Desmond br...@briandesmond.com wrote: So you're saying the customers who had BDCs in dozens of sites worldwide never actually had any clients talking to those

RE: SCOM 2007 install issue

2009-03-05 Thread Michael B. Smith
Uh..I wouldn't agree with most. I'd go with some. And I don't think that discovery is going to work well with just datareader. That being said, I know you've got a large installation and you may have done lots of work with low privilege environments. J From: Ken Schaefer

RE: Password Policy Change

2009-03-05 Thread Brian Desmond
This is not correct. In 2008 in order to implement FGPPs (fine grained password policies), the individual domain DFL must be DFL3 (2008 functional level). Passwords are a per domain thing so it's OK to not be at FFL3 (2008 functional level). Thanks, Brian Desmond br...@briandesmond.com c -

RE: NT4 in a 2003 domain

2009-03-05 Thread Brian Desmond
OK sorry I missed the sarcasm - my bad. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, March 05, 2009 9:15 PM To: NT System Admin Issues Subject: Re: NT4 in a 2003 domain Under NT4, the BDCs

RE: SCOM 2007 install issue

2009-03-05 Thread Ken Schaefer
Actually, just repeating what Kevin Holman said. I'm trying to get budget to have more detailed investigation done in our environment. AFAIK discovery of objects involves querying the master database, so datareader would be enough there. Cheers Ken From: Michael B. Smith

Downloaded but not installed MS patch

2009-03-05 Thread HELP_PC
If a MS patch was downloaded but not yet installed and a new version was released what is the best practice to get the new installed ? TIA GuidoElia HELPPC ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

R: Site to Site VPN?

2009-03-05 Thread HELP_PC
Go with MPLS and 2 Cisco routers (1800 or 2800 series) GuidoElia HELPPC _ Da: Sam Cayze [mailto:sam.ca...@rollouts.com] Inviato: giovedì 5 marzo 2009 20.54 A: NT System Admin Issues Oggetto: Site to Site VPN? We may be needing a VPN connection to our remote data center in the near