Technet question

2010-06-15 Thread Oliver Marshall
A little bit OT I'm sure, but perhaps someone can tell me of their experiences. The Technet Pro subscription comes with 12 E-learning courses but the technet page doesn't tell me any more about the courses themselves. Anyone know what kind of courses they are ? Are they just the weird MS

RE: Technet question

2010-06-15 Thread Rod Trent
With a TechNet Pro subscription, you receive six months of access to Microsoft E-Learning with hands-on learning to help you build the skills you need to do your job. The following courses are available to TechNet Pro subscribers through June 30, 2010: . Course 3377: Implementing Windows

Re: Technet question

2010-06-15 Thread Jeff Bunting
The ones I took about a year ago were self-paced web based courses. Jeff On Tue, Jun 15, 2010 at 3:28 AM, Oliver Marshall oliver.marsh...@g2support.com wrote: A little bit OT I'm sure, but perhaps someone can tell me of their experiences. The Technet Pro subscription comes with 12

RE: Virtualisation structural question

2010-06-15 Thread N Parr
If you buy CPU licenses of Data Center Server you can run as many as you want. From: Jon Harris [mailto:jk.har...@gmail.com] Sent: Monday, June 14, 2010 5:08 PM To: NT System Admin Issues Subject: Re: Virtualisation structural question If you purchase the

Re: Virtualisation structural question

2010-06-15 Thread Jon Harris
Yes but Enterprise is a bit less expensive than Data Center. Jon On Tue, Jun 15, 2010 at 9:03 AM, N Parr npar...@mortonind.com wrote: If you buy CPU licenses of Data Center Server you can run as many as you want. -- *From:* Jon Harris

Re: Virtualisation structural question

2010-06-15 Thread Andrew S. Baker
Yes, but it depends on the size of the box. If you're building or purchasing a box that can only support 5 or 6 VMs, then DataCenter is overkill. If you're building a box that can support 15-20+ VMs, then you'll save tremendously by going with DataCenter because that will be the only OS license

RE: Technet question

2010-06-15 Thread Don Guyer
Within our current licensing agreement, we get a boat load of these web-based courses. I'd say that the content is much better than what you would get at their free expos, but not quite what you would get attending a cert class. Still worth the time IMHO though. Don Guyer Systems

Re: Website repuation tool

2010-06-15 Thread Roger Wright
http://www.qualys.com/products/qg_suite/malware_detection/ provides a free site scanning service as well. Die dulci fruere! Roger Wright ___ On Tue, Jun 1, 2010 at 8:00 AM, Ziots, Edward ezi...@lifespan.org wrote: I came across this little nugget in another discussion group, figure I would

Re: Time to verify your IIS setup

2010-06-15 Thread Roger Wright
Perhaps this will help: http://www.qualys.com/products/qg_suite/malware_detection/ Die dulci fruere! Roger Wright ___ On Wed, Jun 9, 2010 at 3:43 PM, Kurt Buff kurt.b...@gmail.com wrote: about 111,000 sites infected http://isc.sans.edu/diary.html?storyid=8935 ~ Finally, powerful

RE: Run multliple versions of IE

2010-06-15 Thread Jay Dale
Bumping this ... works for our developers fine, and it's free. Jay Dale I.T. Manager, 3GiG Mobile: 713.299.2541 Email: jay.d...@3-gig.commailto:jay.d...@3-gig.com Confidentiality Notice: This e-mail, including any attached files, may contain confidential and/or privileged information for the

Re: DISK WIPING TOOL

2010-06-15 Thread tony patton
There is a free version of KillDisk as far as I can remember, but I'd probably stick with DBAN. Regards Tony Patton Desktop Operations Cavan Ext 8078 Direct Dial 049 435 2878 email: tony.pat...@quinn-insurance.com From: Haralson, Joe (GE Comm Fin, non-GE) joe.haral...@ge.com To: NT

Cisco ASA Question/IIS Question

2010-06-15 Thread Chyka, Robert
Ok here my scenario: I have 2 websites on a Windows Server 2008 box with IIS7. We are using one IP address for both sites using host headers. On our internal AD DNS we have an entry in for both hostnames pointing to the same IP address (A records). For our first site we have a one-to-one

Re: DISK WIPING TOOL

2010-06-15 Thread Erik Goldoff
I've been using dban too ... anything particular that dissatisfies you about DBAN or you just seeking input ? On Tue, Jun 15, 2010 at 11:06 AM, Haralson, Joe (GE Comm Fin, non-GE) joe.haral...@ge.com wrote: Does anyone have a good Disk cleaning free tool? I currently use DBAN but was

Re: DISK WIPING TOOL

2010-06-15 Thread Joseph Heaton
Why the interest in leaving DBAN? It is what I've used for years Haralson, Joe (GE Comm Fin, non-GE) joe.haral...@ge.com 6/15/2010 8:06 AM Does anyone have a good Disk cleaning free tool? I currently use DBAN but was exploring other options. Joe Haralson Network Infrastructure Team ~

RE: DISK WIPING TOOL

2010-06-15 Thread Haralson, Joe (GE Comm Fin, non-GE)
Seeking input. I just want to make sure I'm not missing out on better tool. Joe Haralson Network Infrastructure Team GE - Rail Services 160 N. Clark Chicago, Il 60601 Office: (312) 853-5014 ( DC: : *8 750-5014 ( Cell: : (312)590-0048 * e-Mail: joe.haral...@ge.com THIS E-MAIL IS

Re: Cisco ASA Question/IIS Question

2010-06-15 Thread Candee Vaglica
I *think* you would need a second public IP address. then you would do a one to one with the second public server and the internal website. On Tue, Jun 15, 2010 at 11:09 AM, Chyka, Robert bch...@medaille.edu wrote: Ok here my scenario: I have 2 websites on a Windows Server 2008 box with

RE: Cisco ASA Question/IIS Question

2010-06-15 Thread Kennedy, Jim
That would work. However I would just use the same IP for both publically and let the host header take care of it. From: Candee Vaglica [mailto:can...@gmail.com] Sent: Tuesday, June 15, 2010 11:35 AM To: NT System Admin Issues Subject: Re: Cisco ASA Question/IIS Question I *think* you would

RE: Cisco ASA Question/IIS Question

2010-06-15 Thread Chyka, Robert
Hi Jim, So I would just need 1 nat translation on the asa with port 80 open and 2 entries with our public dns server with 2 different hostnames pointing to the same public ip and then the headers will function fine? From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent:

RE: DISK WIPING TOOL

2010-06-15 Thread Haralson, Joe (GE Comm Fin, non-GE)
Not looking to leave DBAN. Looking at options. I also have a need for a tool that can be used remotely. I would like to clean Data drive and not have to boot from cd. Joe Haralson Network Infrastructure Team -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent:

RE: Cisco ASA Question/IIS Question

2010-06-15 Thread Kennedy, Jim
Yep, it will work exactly like your internal host header set up. From: Chyka, Robert [mailto:bch...@medaille.edu] Sent: Tuesday, June 15, 2010 11:41 AM To: NT System Admin Issues Subject: RE: Cisco ASA Question/IIS Question Hi Jim, So I would just need 1 nat translation on the asa with port

RE: Cisco ASA Question/IIS Question

2010-06-15 Thread Chyka, Robert
Nice. I will give that a shot. Thanks.. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Tuesday, June 15, 2010 11:42 AM To: NT System Admin Issues Subject: RE: Cisco ASA Question/IIS Question Yep, it will work exactly like your internal host header set up.

Re: Cisco ASA Question/IIS Question

2010-06-15 Thread Erik Goldoff
+1 use same IPs for public like you do internal, let host header mechanism sort it out at the IIS server level. On Tue, Jun 15, 2010 at 11:42 AM, Kennedy, Jim kennedy...@elyriaschools.org wrote: Yep, it will work exactly like your internal host header set up. *From:* Chyka, Robert

Re: DISK WIPING TOOL

2010-06-15 Thread Erik Goldoff
I suppose you could use something like eraser at the file system level, but it would take much longer for an entire drive ( I use that for folders/files though ) On Tue, Jun 15, 2010 at 11:40 AM, Haralson, Joe (GE Comm Fin, non-GE) joe.haral...@ge.com wrote: Not looking to leave DBAN. Looking

Re: DISK WIPING TOOL

2010-06-15 Thread S Powell
There are a whole slew of security reasons why you'll not find one that you can run remotely, or not boot from the CD. we use the native Disk Utility in OS X, just pull the HD and plug it in using a USB to IDE/SATA connector. but hey, If you do find one that you can run remotely please let us

Re: DISK WIPING TOOL

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 11:06 AM, Haralson, Joe (GE Comm Fin, non-GE) joe.haral...@ge.com wrote: Does anyone have a good Disk cleaning free tool? I currently use DBAN but was exploring other options. DISKPART has a CLEAN ALL command which writes zeros to every block on the disk. The chief

Re: DISK WIPING TOOL

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 11:56 AM, S Powell powe...@gmail.com wrote: There are a whole slew of security reasons why you'll not find one that you can run remotely, or not boot from the CD. You can certainly do raw disk overwrites remotely on Unix/Linux (including the Unixy part of Mac OS X).

RE: Patch Management - again

2010-06-15 Thread Alan Davies
And why is a solution like this missing from MS operating systems?? Well, because vendors with their own commercial interests (ie. spend as little as possible and agree on nothing with competitors) don't play well. If there were an open platform for plugging into a patch-updating type API, and

Re: DISK WIPING TOOL

2010-06-15 Thread RichardMcClary
rant Perhaps if those who re-wrote the regulations saying that overwrite is no longer sufficient were to receive a couple hundred thousand old hard drives (especially all at once), they might re-consider that regulation. /rant -- Richard D. McClary Systems Administrator, Information Technology

RE: DISK WIPING TOOL

2010-06-15 Thread John Aldrich
I think you meant /dev/zero, not /zev/zero :-) -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Tuesday, June 15, 2010 12:06 PM To: NT System Admin Issues Subject: Re: DISK WIPING TOOL On Tue, Jun 15, 2010 at 11:56 AM, S Powell powe...@gmail.com wrote: There are

RE: Patch Management - again

2010-06-15 Thread Rod Trent
Speaking of Secunia...webinar on now... http://secunia.com/vulnerability_scanning/corporate/webinars/ -Original Message- From: Alan Davies [mailto:adav...@cls-services.com] Sent: Tuesday, June 15, 2010 12:07 PM To: NT System Admin Issues Subject: RE: Patch Management - again And why

Re: Patch Management - again

2010-06-15 Thread Phil Brutsche
It isn't. The WSUS engine is more than capable of distributing and automatically installing third-party updates - it's what's used in products like System Center Essentials for the task - and MS created System Center Updates Publisher (aka SCUP) so that admins can add the updates. Third parties

Re: DISK WIPING TOOL

2010-06-15 Thread Jonathan Link
If the speed of the CD boot is getting to you, transfer it to a USB flash memory device, and boot from that. I do that for UBCD4Win, whic has DBAN on it. On Tue, Jun 15, 2010 at 11:56 AM, S Powell powe...@gmail.com wrote: There are a whole slew of security reasons why you'll not find one that

Re: Cisco ASA Question/IIS Question

2010-06-15 Thread Erik Goldoff
+1 on SSL needs On Tue, Jun 15, 2010 at 1:10 PM, Richard Stovall rich...@gmail.com wrote: The only caveat I can think of is if you ever need to do SSL on more than one of the sites. You'll need different IPs in this case since the host header is encrypted. You can solve the translation

Re: DISK WIPING TOOL

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 12:10 PM, John Aldrich jaldr...@blueridgecarpet.com wrote: I think you meant /dev/zero, not /zev/zero :-) Uhhh... my Linux box has a French accent. ;-) -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: DISK WIPING TOOL - Thanks

2010-06-15 Thread Haralson, Joe (GE Comm Fin, non-GE)
Thanks to everyone for there response. Joe Haralson Network Infrastructure Team GE - Rail Services 160 N. Clark Chicago, Il 60601 Office: (312) 853-5014 ( DC: : *8 750-5014 ( Cell: : (312)590-0048 * e-Mail: joe.haral...@ge.com THIS E-MAIL IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL

Re: DISK WIPING TOOL

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 12:08 PM, richardmccl...@aspca.org wrote: Perhaps if those who re-wrote the regulations saying that overwrite is no longer sufficient were to receive a couple hundred thousand old hard drives (especially all at once), they might re-consider that regulation. ... Is

RE: DISK WIPING TOOL

2010-06-15 Thread Crawford, Scott
Tu es un drôle de gars. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Tuesday, June 15, 2010 12:13 PM To: NT System Admin Issues Subject: Re: DISK WIPING TOOL On Tue, Jun 15, 2010 at 12:10 PM, John Aldrich jaldr...@blueridgecarpet.com wrote: I think you meant

Re: Virtualisation structural question

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 9:18 AM, John Cook john.c...@pfsf.org wrote: And if you’re a non profit Datacenter is a no brainer. A single cpu of DC edition for us is under (don’t hate me…) $400! [blank stare] [splutter] [goes cross-eyed] -- Ben ~ Finally, powerful endpoint security that

Re: DISK WIPING TOOL

2010-06-15 Thread Richard Stovall
DoG regs, I would think. (Sorry) On Tue, Jun 15, 2010 at 1:16 PM, Ben Scott mailvor...@gmail.com wrote: On Tue, Jun 15, 2010 at 12:08 PM, richardmccl...@aspca.org wrote: Perhaps if those who re-wrote the regulations saying that overwrite is no longer sufficient were to receive a couple

RE: DISK WIPING TOOL

2010-06-15 Thread Don Guyer
And if all else fails, use a BFH. J Don Guyer Systems Engineer - Information Services Prudential, Fox Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 don.gu...@prufoxroach.com mailto:don.gu...@prufoxroach.com From: Richard

Re: Patch Management - again

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 12:15 PM, Phil Brutsche p...@optimumdata.com wrote: And why is a solution like this missing from MS operating systems?? It isn't. Comparing MSI/WSUS to RPM/YUM (or dpkg/APT or...) is really missing a lot. MSI is a beast to develop for, it's a compatibility nightmare

Re: Patch Management - again

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 1:28 PM, David Lum david@nwea.org wrote: +1 for Johnny Dangerously Do you know your last name is an adverb? +1 for Shavlik Yah, I haven't used Shavlik NetChk much, but what I did try was impressive. I tried the free NetChk Limited package, and it found an issue

VSphere Clients at v4

2010-06-15 Thread Stefan Jafs
I upgraded to VSphere quit a while ago but just today applied all Critical and Non-critical patches. I notices that old VM's still show v4 after updating the VMware tools, I even tried to remove re--boot and re-install still v 4. However all new VM's show v 7! Should they not all just be v 7 after

RE: VSphere Clients at v4

2010-06-15 Thread Damien Solodow
What you're seeing is the VM hardware version. You need to be running VMware Tools from ESX 4.x before you upgrade them to v7. Here's how: Shutdown the VM. Right click and choose Upgrade Hardware Turn on VM Let Windows detect assorted new hardware Reboot. Rejoice. You can actually have

Re: Java strangeness

2010-06-15 Thread Angus Scott-Fleming
On 14 Jun 2010 at 13:39, John Aldrich wrote: According to CIT´s Technical Support person, IE is the only supported browser. L I may still have the user try FireFox or Chrome, or even IE within FireFox. J ChromePlus has a built-in IETab feature. http://chromeplus.org/ -- Angus

Re: Run multliple versions of IE

2010-06-15 Thread Angus Scott-Fleming
On 14 Jun 2010 at 11:12, Bill Songstad wrote: My webmaster has asked for the ability to run multiple versions of IE (6, 7, and 8) on a Windows XP workstation. I found a couple of candidates for testing on the interwebs, but is anybody using a solution for this that they like and/or

Re: Printer issues

2010-06-15 Thread Angus Scott-Fleming
On 11 Jun 2010 at 7:45, Matthew W. Ross wrote: As for HP's fall from grace: We still by HP. I would be ecstatic if HP would offer a version of their drivers with just the .inf files and _required_ DLLs. Keep the full functionality bloatware separate, please! I try to use only HP printers

Re: Vipre sample submission question

2010-06-15 Thread Angus Scott-Fleming
On 11 Jun 2010 at 11:14, John Leto wrote: Hey all, I was wondering for all of you Vipre users out there when you submit a possible malware sample to Sunbelt do you ever receive a response back on the submission? I receive a notification e-mail that they received the sample but never

Re: Cisco ASA Question/IIS Question

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 11:09 AM, Chyka, Robert bch...@medaille.edu wrote: My question is:  How do I do another one to one NAT translation with a different public IP address so I can register both sites with our public DNS provider? Sounds like you already got the right answer (just use one

Re: VSphere Clients at v4

2010-06-15 Thread Steven Peck
Just make sure you inventory the IP addresses on any system where you have multiple nic's. While not common, we had several systems with issues wehre we had to redo the NIC settings after this. It ends up being about 3 reboots all told. Steven Peck http://www.blkmtn.org On Tue, Jun 15, 2010 at

Re: VSphere Clients at v4

2010-06-15 Thread Stefan Jafs
Thanks that was as easy as the easy button. Stefan On Tue, Jun 15, 2010 at 2:12 PM, Damien Solodow damien.solo...@harrison.edu wrote: What you’re seeing is the VM hardware version. You need to be running VMware Tools from ESX 4.x before you upgrade them to v7. Here’s how: Shutdown the

RE: Java strangeness

2010-06-15 Thread John Aldrich
Sweet. I know there's a plugin for FF that will let you load IE in a tab, much like the feature in Chrome. -Original Message- From: Angus Scott-Fleming [mailto:angu...@geoapps.com] Sent: Tuesday, June 15, 2010 2:15 PM To: NT System Admin Issues Subject: Re: Java strangeness On 14 Jun

Re: VSphere Clients at v4

2010-06-15 Thread Stefan Jafs
Thanks Yes I do have some VM's on the DMZ, I make sure I'll have the proper IP's and yes there are multiple re-boots needed. Thanks On Tue, Jun 15, 2010 at 2:27 PM, Steven Peck sep...@gmail.com wrote: Just make sure you inventory the IP addresses on any system where you have multiple nic's.

Re: Printer issues

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 2:14 PM, Angus Scott-Fleming angu...@geoapps.com wrote: I try to use only HP printers which support Network Installs.  These come for the most part without the bloatware. I used to do that, until one day we got some new LJ P2015's, and when we installed the drivers,

Re: Printer issues

2010-06-15 Thread Phil Brutsche
IMO all modern printers are cheap Chinese made crap with obscenely high toner costs. That is why I started buying used refurbed HPs (LaserJet 4000s and 4100s). Refurbishment typically involves new rollers and fuser assembly. Or buying used HPs on the cheap and having them serviced by a local

Password policy enforcement after a change

2010-06-15 Thread Ben Scott
Hello, list, After years of lobbying on my part, I have finally gotten top management at %WORK% to approve a company password policy, complete with enforcement via Active Directory/Group Policy. (And there was much rejoicing!) I know we have people who have never changed their password

Re: DISK WIPING TOOL

2010-06-15 Thread Angus Scott-Fleming
On 15 Jun 2010 at 11:40, Haralson, Joe (GE Comm Fin, n wrote: Not looking to leave DBAN. Looking at options. I also have a need for a tool that can be used remotely. I would like to clean Data drive and not have to boot from cd. Heidi's Eraser has a right-click option to erase an entire

Re: Password policy enforcement after a change

2010-06-15 Thread Jonathan Link
Yes, it will interfere with accessing resources. I had to schedule a day in our office so everyone knew well in advance. Those that couldn't or chose not to be at work that day had an administratively assigned password (in the event that they needed access), or change their password in advance of

Re: Password policy enforcement after a change

2010-06-15 Thread Devin Meade
Hmm we did that ~ 2 yrs ago. We used to assign passwords but *finally* sold it to upper mgt to do it via Active Dir and the built in complexity policy (2003 native mode). It went pretty well, nobody lost access, they had to change their passwords at next logon. We announced it well before hand

Re: Password policy enforcement after a change

2010-06-15 Thread Jonathan Link
By the designated date. Top posted for your confusion. On Tue, Jun 15, 2010 at 3:17 PM, Jonathan Link jonathan.l...@gmail.comwrote: Yes, it will interfere with accessing resources. I had to schedule a day in our office so everyone knew well in advance. Those that couldn't or chose not to be

Re: DISK WIPING TOOL

2010-06-15 Thread Kurt Buff
http://technet.microsoft.com/en-us/sysinternals/bb897443.aspx On Tue, Jun 15, 2010 at 08:40, Haralson, Joe (GE Comm Fin, non-GE) joe.haral...@ge.com wrote: Not looking to leave DBAN. Looking at options. I also have a need for a tool that can be used remotely. I would like to clean Data drive

RE: Password policy enforcement after a change

2010-06-15 Thread John Aldrich
Yeah. I still go through the problem of user's passwords expiring and them not able to access network resources. I typically have them pull up a command prompt and attempt to access a mapped drive from the command prompt to ensure they have just had a password expiration. Or I just tell them that

Re: DISK WIPING TOOL

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 2:14 PM, Angus Scott-Fleming angu...@geoapps.com wrote: Heidi's Eraser has a right-click option to erase an entire drive ... Not sure about NET USEd drives, though ... I'm near-positive you won't be able to overwrite an *entire disk* via NET USE . Mapped drives are

Re: Password policy enforcement after a change

2010-06-15 Thread Andrew S. Baker
Ben, They will have all sorts of problems accessing resources if you changed that right now. :) The remote people would be especially pleased with you. Depending on what services they were trying to access, they *might* be told to change their passwords, but many of the resources would just

RE: Time to verify your IIS setup

2010-06-15 Thread Sam Cayze
Dang. I was just curious... How many IIS sites are there in the world? Roughly 780K. So if the Sucuri.net's 111K number is accurate, that's about 1 in 7 IIS sites that are affected. Yikes. Source: http://news.netcraft.com/archives/category/web-server-survey/ (most places on my search pointed

Re: Patch Management - again

2010-06-15 Thread Andrew S. Baker
I don't know that I would say that Linux *always* had package management going well -- certainly not all distros. There was a time when Debian was highly regarded *because* of its excellent package management system. Redhat was next, and then RPM became a major standard because of their

Re: Time to verify your IIS setup

2010-06-15 Thread Andrew S. Baker
More important to me is, How many discrete managers of IIS systems/environments does this represent? I mean, on one level, if a single ISP hosting 500 discrete sites for clients is a victim, that's not exactly the same thing as those 500 clients failing to manage this risk. On the other hand

Re: Patch Management - again

2010-06-15 Thread Joseph Heaton
shaky foundation? Andrew S. Baker asbz...@gmail.com 6/15/2010 2:42 PM I don't know that I would say that Linux *always* had package management going well -- certainly not all distros. There was a time when Debian was highly regarded *because* of its excellent package management system. Redhat

Re: Patch Management - again

2010-06-15 Thread Steven Peck
Nor do they do the applications on a given distribution 'right' all the time. You are essentially relying on 'some' random maintainer to be doing something 'right' or at least agreed on and that their choices will not nuke your existing configuration. Steven Peck On Tue, Jun 15, 2010 at 2:42

Re: Password policy enforcement after a change

2010-06-15 Thread Devin Meade
Okay ... we had no problems maybe because we had assigned pw's which the users could not change. We only had one VPN user - that never used it :-\ Now we have about 20 VPN users. We also executed the Group Policy and went thru AD and checked force pw change at around 10PM and announced it many

Re: Time to verify your IIS setup

2010-06-15 Thread Kurt Buff
Here's an update on the issue: http://blog.armorize.com/2010/06/recent-evolution-of-mass-sql-injection.html On Tue, Jun 15, 2010 at 14:45, Andrew S. Baker asbz...@gmail.com wrote: More important to me is, How many discrete managers of IIS systems/environments does this represent? I mean, on

Re: Patch Management - again

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 5:42 PM, Andrew S. Baker asbz...@gmail.com wrote: In contrast, all the current Linux distributions were designed right the [first] time, with strong package management from day one. I don't know that I would say that Linux *always* had package management going well --

Re: Patch Management - again

2010-06-15 Thread Kurt Buff
Unlike say, some random software company that says their service pack, hotfix or other update won't trash your machine. MSFT/Adobe/others come to mind... On Tue, Jun 15, 2010 at 14:48, Steven Peck sep...@gmail.com wrote: Nor do they do the applications on a given distribution 'right' all the

Re: Patch Management - again

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 5:48 PM, Steven Peck sep...@gmail.com wrote: You are essentially relying on 'some' random maintainer to be doing something 'right' or at least agreed on and that their choices will not nuke your existing configuration. Well, unless you write all software you use

RE: Password policy enforcement after a change

2010-06-15 Thread James Hill
Schedule the change for out of hours or during a quiet period), inform the users, force all machines to log off. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, 16 June 2010 5:12 AM To: NT System Admin Issues Subject: Password policy enforcement after

Re: Patch Management - again

2010-06-15 Thread Andrew S. Baker
*shaky foundation?* The DOS, Win16 underpinnings... Installed base is great when everything has been well laid out. Not so great, when you're bound to earlier suboptimal decisions... -ASB: http://XeeSM.com/AndrewBaker On Tue, Jun 15, 2010 at 5:47 PM, Joseph Heaton jhea...@dfg.ca.gov wrote:

Re: Time to verify your IIS setup

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 6:18 PM, Kurt Buff kurt.b...@gmail.com wrote: http://blog.armorize.com/2010/06/recent-evolution-of-mass-sql-injection.html So, as usual, the biggest problem is the large amount of server-side web application software written by people who don't know how to write secure

Re: Time to verify your IIS setup

2010-06-15 Thread David
That just makes my head hurt. On Tue, Jun 15, 2010 at 3:18 PM, Kurt Buff kurt.b...@gmail.com wrote: Here's an update on the issue: http://blog.armorize.com/2010/06/recent-evolution-of-mass-sql-injection.html On Tue, Jun 15, 2010 at 14:45, Andrew S. Baker asbz...@gmail.com wrote: More

Re: Patch Management - again

2010-06-15 Thread Steven Peck
Yes but with the Linux tree updates identifying the actual issue and who has the authority to change / update / do it right can be challenging. Debian had the Drupal CMS in their distributions for years and despite many attempts we could not get that thing out of their despite it being

RE: Time to verify your IIS setup

2010-06-15 Thread Ziots, Edward
SQLI and Blind SQLi are fun... You just need to go to some OWASP meetings, it will start to make a lot of sense, that and scare the living crap out of you, on how poorly web applications are written and how much they are relied on to access very sensitive information in the organization. Plus a

RE: Time to verify your IIS setup

2010-06-15 Thread Ziots, Edward
Definitely a nice write up, but when you comb your IIS logs and set seeing DECLARE and CAST statements in the url sequences, you had better be on your guard because those are some tell-tale signs of SQLi.. I don’t know of many webapplications that are accepting that as INPUT.. so if you have

Re: Patch Management - again

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 6:56 PM, Steven Peck sep...@gmail.com wrote: Debian had the Drupal CMS in their distributions for years and despite many attempts we could not get that thing out of their despite it being old/unsecure/not-desired all because some guy refused to remove it from the repo.

RE: Time to verify your IIS setup

2010-06-15 Thread Ziots, Edward
Problem is that its not IIS in itself that is the problem is the web-application running on IIS that doesn't sanitize its input that is the problem, that and probably using an Database user account with too much privileges to access the backend, plus no auditing on the database backend to track

Re: Time to verify your IIS setup

2010-06-15 Thread Steven Peck
Yes but then we get these threads bitching about MS IIS instead of Crappy web page asp product X On Tue, Jun 15, 2010 at 4:17 PM, Ziots, Edward ezi...@lifespan.org wrote: Problem is that its not IIS in itself that is the problem is the web-application running on IIS that doesn’t sanitize its

Re: Password policy enforcement after a change

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 3:11 PM, Ben Scott mailvor...@gmail.com wrote: ... from No password expiration to X days ... ... 8-year-expired password before ... Thank you, everyone, for your informative and helpful responses! I think what I'll do is configure the password complexity

Re: Patch Management - again

2010-06-15 Thread Steven Peck
... On Tue, Jun 15, 2010 at 4:16 PM, Ben Scott mailvor...@gmail.com wrote: On Tue, Jun 15, 2010 at 6:56 PM, Steven Peck sep...@gmail.com wrote: Debian had the Drupal CMS in their distributions for years and despite many attempts we could not get that thing out of their despite it being

Re: Patch Management - again

2010-06-15 Thread Ben Scott
On Tue, Jun 15, 2010 at 7:33 PM, Steven Peck sep...@gmail.com wrote: So as I have said.  Pretty much every issue has not been patch related.  But having called MS we had help identifying the actual cause of the issue. That doesn't make Windows better at package management; it just means if

RE: Password policy enforcement after a change

2010-06-15 Thread Free, Bob
You don't need a tool, just do an LDAP query for pwdLastSet. I would use adfind as it will decode the timestamps, dump to a csv and massage in excel. Something along the lines of - ADFIND -default -f ((objectCategory=person)(objectClass=user)) pwdLastSet -tdc -csv -Original Message-

Technet

2010-06-15 Thread Jeff Bunting
So I see that MS has a new Standard level Technet subscription: http://technet.microsoft.com/en-us/subscriptions/bb892756.aspx Anyone know what exactly it contains? I haven't been able to find specifics anywhere on their site, only TechNet Standard does not include some enterprise editions of

RE: Password policy enforcement after a change

2010-06-15 Thread Crawford, Scott
You can find AdFind, along with many other goodies here: http://joeware.net/freetools/tools/adfind/index.htm -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Tuesday, June 15, 2010 7:15 PM To: NT System Admin Issues Subject: Re: Password policy enforcement after a

RE: Technet

2010-06-15 Thread Rod Trent
http://blogs.technet.com/b/technetplussubscriptions/archive/2010/06/14/techn et-subscriptions-standard-launches-today.aspx?wa=wsignin1.0 From: Jeff Bunting [mailto:bunting.j...@gmail.com] Sent: Tuesday, June 15, 2010 8:44 PM To: NT System Admin Issues Subject: Technet So I see that MS