RE: iPhone user can still send emails after being disabled in AD

2011-11-09 Thread Kennedy, Jim
Reset your IIS services. I have no idea why it is not honoring the 15 cache setting but it seems like it doesn't and based upon how often I seem to see this from different folks it doesn't honor it for most people. From: Ben N [mailto:bennordlan...@gmail.com] Sent: Tuesday, November 08, 2011

Quick query on alerting on ESXi

2011-11-09 Thread James Rankin
Never done a lot of work with ESXi - so can anyone tell me whether it behaves in the same way as full-fat ESX, as in when a CPU or memory usage goes over threshold, does the host/guest get a little yellow or red alert on it in the VMWare client that indicates there's an issue? I have a client

Re: Quick query on alerting on ESXi

2011-11-09 Thread Cameron
Why not use Nagios to do the monitoring? It's free and will monitor for just about anything and fire off emails when that threshold has been exceeded over a period of time. On Wed, Nov 9, 2011 at 9:12 AM, James Rankin kz2...@googlemail.com wrote: Never done a lot of work with ESXi - so can

Re: OT - Phone System In A Virtual Machine

2011-11-09 Thread James Kerr
Yeah, if we go VOIP we will be running a new CAT6 infrastructure just for the phones and perform lots of testing before we cut over. On Tue, Nov 8, 2011 at 6:45 PM, Jonathan Bible jtbi...@gmail.com wrote: I am surprised no one has mentioned ShoreTel. It is supported on VMware 4.0. Just

Re: TS 2008 question

2011-11-09 Thread James Rankin
Just for posterity, it looks like the only MS-recommended way of providing resiliency in the session broker role is by using failover clustering. On 8 November 2011 14:34, Michael B. Smith mich...@smithcons.com wrote: Now you are over my head. J ** ** Regards, ** ** Michael B.

Re: Quick query on alerting on ESXi

2011-11-09 Thread Rankin, James R
Just need something quick and dirty they already have for now. I recommended nagios and SCE for perusal going forward Sent from my SR-71 Blackbird -Original Message- From: Cameron cameron.orl...@gmail.com Date: Wed, 9 Nov 2011 09:28:26 To: NT System Admin

RE: OT - Phone System In A Virtual Machine

2011-11-09 Thread Dennis Hoefer
We moved to Shoretel about 5 years ago as we were planning a new corporate headquarters building and now have it deployed in 15 locations. The thing that most impressed me at the time with Shoretel was that they were the only vendor we talked to that insisted on running performance tests on our

RE: Quick query on alerting on ESXi

2011-11-09 Thread Kim Longenbaugh
ESXi acts the same as ESX, and the same alerts show up in the Virtual Center client. From: James Rankin [mailto:kz2...@googlemail.com] Sent: Wednesday, November 09, 2011 8:12 AM To: NT System Admin Issues Subject: Quick query on alerting on ESXi Never done a lot of work with ESXi - so can

Re: OT - Phone System In A Virtual Machine

2011-11-09 Thread Bill Humphries
We manage to run switch to phone to desktop without any problems at all of our clients. We've never run cable just for phones. YMMV, but we never have problems. Of course that assumes you are using a well optimized codec for voice. Bill James Kerr wrote: Yeah, if we go VOIP we will be

ShoreTel

2011-11-09 Thread Paul Hutchings
Anyone here using Shoretel for their phone system? From what we've seen so far we're confident they're a good fit both in terms of features and architecture, and (most importantly IMO) the client software appears to be pretty good to use. Any tales (on or off list) of how they have performed

Re: OT - Phone System In A Virtual Machine

2011-11-09 Thread James Kerr
Good to hear but we like cutting up walls and slinging cable in our filthy ceiling plenums. ;-) On Wed, Nov 9, 2011 at 10:11 AM, Bill Humphries nt...@hedgedigger.comwrote: We manage to run switch to phone to desktop without any problems at all of our clients. We've never run cable just for

Re: ShoreTel

2011-11-09 Thread Kurt Buff
Works well for us - we have about 230 staff in HQ where it's installed. The client is OK, but you need to be aware of a toxic interaction with 64-bit MS Office, until they release their 64-bit client. We've reverted to 32-bit Office because of that. On Wed, Nov 9, 2011 at 07:14, Paul Hutchings

RE: ShoreTel

2011-11-09 Thread Paul Hutchings
Can I get a bit more info on that please Kurt? We do have many 64bit machines, but afaik only 1 64bit Office 2010 install - which is mine. Paul -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: 09 November 2011 15:33 To: NT System Admin Issues Subject: Re: ShoreTel

RE: OT - Phone System In A Virtual Machine

2011-11-09 Thread Glen Johnson
+1 and most of the community colleges in VA are doing the same, so +22 -Original Message- From: Bill Humphries [mailto:nt...@hedgedigger.com] Sent: Wednesday, November 09, 2011 10:11 AM To: NT System Admin Issues Subject: Re: OT - Phone System In A Virtual Machine We manage to run

Re: Quick query on alerting on ESXi

2011-11-09 Thread Rankin, James R
Excellent, cheers! Sent from my SR-71 Blackbird -Original Message- From: Kim Longenbaugh k...@colonialsavings.com Date: Wed, 9 Nov 2011 15:11:03 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin Issues

Re: iPhone user can still send emails after being disabled in AD

2011-11-09 Thread Kurt Buff
When we terminate an employee, we archive their mailbox with ExMerge, remove the mailbox from the account and assign their SMTP address to their direct manager/supervisor, in addition to disabling their account. I'll bet that would eliminate this problem. Kurt On Tue, Nov 8, 2011 at 21:52, Ben

Re: iPhone user can still send emails after being disabled in AD

2011-11-09 Thread S Powell
did you remove the device from their profile? manage mobile device in EMC? - Oh, by the way, which one's Pink? On Wed, Nov 9, 2011 at 05:27, Kennedy, Jim kennedy...@elyriaschools.orgwrote: Reset your IIS services. I have no idea why it is not honoring the 15 cache setting

Re: ShoreTel

2011-11-09 Thread Michael White
Works much better for us since they added the ability to add pauses when dialing. On Wed, Nov 9, 2011 at 7:14 AM, Paul Hutchings paul.hutchi...@mira.co.uk wrote: Anyone here using Shoretel for their phone system? From what we’ve seen so far we’re confident they’re a good fit both in terms

Re: iPhone user can still send emails after being disabled in AD

2011-11-09 Thread Ben N
we don't do device management (yet). OWA/EAS is enabled on all accounts by default. If they have an account, they can configure EAS on their phone. :) -BenN On Wed, Nov 9, 2011 at 8:06 AM, S Powell powe...@gmail.com wrote: did you remove the device from their profile? manage mobile device in

Re: iPhone user can still send emails after being disabled in AD

2011-11-09 Thread S Powell
check EMC, you may not manage it, however you should still see it in there; and be able to disable its connection, or even send a remote wipe to the device. - Oh, by the way, which one's Pink? On Wed, Nov 9, 2011 at 08:34, Ben N bennordlan...@gmail.com wrote: we don't do

Re: ShoreTel

2011-11-09 Thread Matthew W. Ross
Shoretel is the the phone system we're using. Pros: * Very easy to use. * Works great for windows environments. * Has good support for mass deployment of analog phones (which some do not, and we use a lot of). * Can be used as your intercom (Using IP phones). * Support has been good for

RE: ShoreTel

2011-11-09 Thread Brian Desmond
I've seen them at quite a few customers and ranked well in telephony assessments. If you're replacing your PBX and you're a Windows shop, I'd strongly suggest looking at Lync. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Paul Hutchings

Re: ShoreTel

2011-11-09 Thread Kurt Buff
We're deploying Win7 x64, with no issues. However, using Office 64bit (which requires Win7 x64) with the Shoretel Outlook integration turned on screws Outlook badly. Switching to Office 32bit on Win7 x64 solved the problems. From what we can tell, the 64bit version of Office doesn't buy us enough

RE: ShoreTel

2011-11-09 Thread Paul Hutchings
Thanks Matt that helps and awful lot as it's the nitty gritty that tends to get overlooked. I would be interested in hearing of any licensing gotchas or things to be aware of. Which vendors switches are you using? I'm not as involved in the financial side of this, I'm coming at this more from

RE: ShoreTel

2011-11-09 Thread Paul Hutchings
Thanks Kurt, appreciate that. Tbh I don't even know why I have 64bit Office installed, I think it falls into the seemed a good idea at the time category so I'm not going to stress too much about that. I would be interested to know if ShoreTel know of the issue and acknowledge it as that's

RE: ShoreTel

2011-11-09 Thread Michael B. Smith
Compared to the number of 32-bit Outlook add-ins available, the number of 64-bit Outlook add-ins is prolly in the 5% range. 32-bit add-ins are not compatible with 64-bit add-ins. A very low-level Applications Programming Interface is different, necessitating that 64-bit add-ins be specially

Re: iPhone user can still send emails after being disabled in AD

2011-11-09 Thread Steven Peck
That might cause the guy with a wiped iPhone to rant on the interwebs :) On Wed, Nov 9, 2011 at 8:40 AM, S Powell powe...@gmail.com wrote: check EMC, you may not manage it, however you should still see it in there; and be able to disable its connection, or even send a remote wipe to the

Re: SIEM solutions

2011-11-09 Thread Kurt Buff
RSA? Given their recent history, I'd be asking them some very tough questions, like 'Was your own product protecting you when you were hacked?' and 'If not, why not, and if it was, well, WTF, over?' On Wed, Nov 9, 2011 at 10:34, David Lum david@nwea.org wrote: We are looking at some SIEM

RE: SIEM solutions

2011-11-09 Thread Michael B. Smith
What is the goal? On the low end, you are leaving out NetWrix, in the middle you are leaving out ConfigMgr, and on the upper end you are leaving out various Quest solutions. But it all depends on what you are trying to do. Regards, Michael B. Smith Consultant and Exchange MVP

RE: ShoreTel

2011-11-09 Thread Matthew W. Ross
I would be interested in hearing of any licensing gotchas or things to be aware of. One license gotcha we just recently experienced: We have a user who uses their Personal license. This gives the users an extension, mailbox, etc... But this user wanted a feature which was only available to

RE: SIEM solutions

2011-11-09 Thread David Lum
For me, it's simply log aggregation and alerting. The bigger goal is a stuff way out of my scope as it's being driven from our product side (I am employee-facing, not product facing). I've been included on this project just for my technical input and am much more a passenger than a driver on

Re: SIEM solutions

2011-11-09 Thread James Rankin
System Center Operations Manager with Audit Collection Services can do all this and more, if I am getting the gist of your requirements correctly On 9 November 2011 18:54, David Lum david@nwea.org wrote: For me, it’s simply log aggregation and alerting. The bigger goal is a stuff way out

RE: SIEM solutions

2011-11-09 Thread Michael B. Smith
Aye aye. I misunderstood goes back to work now Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: David Lum [mailto:david@nwea.org] Sent: Wednesday, November 09, 2011 1:55 PM To: NT System Admin Issues Subject: RE: SIEM solutions For me, it's

Re: Quick query on alerting on ESXi

2011-11-09 Thread Jeff Bunting
You can configure email alerts under the alarms tab in virtual center too. Jeff On Wed, Nov 9, 2011 at 10:52 AM, Rankin, James R kz2...@googlemail.comwrote: Excellent, cheers! Sent from my SR-71 Blackbird -- *From: * Kim Longenbaugh k...@colonialsavings.com

RE: ShoreTel

2011-11-09 Thread Paul Hutchings
Thanks Matthew, sounds like we need to be mindful of anything we may want to do in the future on the licensing side. When I asked about switches, we may be at cross-purposes, I meant ethernet switches as that's one area where we're looking to bring a vendor in - obviously anyone decent should

Re: TS 2008 question

2011-11-09 Thread Dean Cunningham
Yep, buy the book, it has nearly all you need to know but were afraid to ask :) Other way would be via a vmware HA option (or similar) On Thu, Nov 10, 2011 at 3:07 AM, James Rankin kz2...@googlemail.com wrote: Just for posterity, it looks like the only MS-recommended way of providing

RE: VM spontaneously shuts down to saved state under Hyper-V R2

2011-11-09 Thread Carl Houseman
I plan to have more than two VM's soon. And here's the weird . there were no VSS errors in the guest DC for last evening's backup, nor did the guest go into saved state. The backup ran 25 minutes after installing yesterday's security patches (guests and host) and rebooting everything. But

OT: Any Recomnds on Dell or any boardroom projectors

2011-11-09 Thread justino garcia
I looking to replace optium projectors, with maybe a dell, since we have a sales contract with dell. Any idea what I should look for? It will be set on table, for boardroom. -- Justin IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: ShoreTel

2011-11-09 Thread Kurt Buff
+ a bunch on all points. Our Shoretel system was initially purchased from CDW about 3 years ago. CDW had to call someone in from out of State to run the install, which went well enough, but in the aftermath we wanted some support and at the time CDW didn't have anyone local, and we were not very

RE: Authenticated Users List

2011-11-09 Thread Michael B. Smith
Every user that can authenticate CAN BE an Authenticated User. But it's a dynamic token not a static token. What are you actually trying to accomplish? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Mark Boeck [mailto:netadmin...@gmail.com] Sent:

Re: web filtering

2011-11-09 Thread Mark Boeck
*Palo Alto Networks* - per-user filtering, application filtering, web categroy filtering etc., rules, AD integration, VPN, multiple networks, $1500 (?) year... On Tue, Nov 8, 2011 at 10:39 AM, pdw1...@hotmail.com wrote: I've finally gotten a budget to put in place a web filtering platform.

Re: ShoreTel

2011-11-09 Thread Richard Stovall
Who died? On Wed, Nov 9, 2011 at 4:14 PM, Kurt Buff kurt.b...@gmail.com wrote: So it goes... Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:

Re: Authenticated Users List

2011-11-09 Thread Mark Boeck
I want to know if a certain logged-on user is seen by AD as an AUTHENTICATED USER. I simply want a list of AUTHENTICATED USERS in my domain. On Wed, Nov 9, 2011 at 3:20 PM, Michael B. Smith mich...@smithcons.comwrote: Every user that can authenticate CAN BE an Authenticated User. But it’s

Re: OT: Any Recomnds on Dell or any boardroom projectors

2011-11-09 Thread Ben Scott
On Wed, Nov 9, 2011 at 4:12 PM, justino garcia jgarciaitl...@gmail.com wrote: I looking to replace optium projectors, with maybe a dell, since we have a sales contract with dell. Any idea what I should look for? Specifications on your requirements. -- Ben ~ Finally, powerful endpoint

RE: Authenticated Users List

2011-11-09 Thread Michael B. Smith
Like I said, every user that can authenticate CAN BE an Authenticated User. But it's a dynamic token not a static token. So, if they are logged on, the answer is yes, they are an Authenticated User. If you want a list of everyone who could potentially be an Authenticated User, something like

RE: web filtering

2011-11-09 Thread Zvonimir Bilic
Using secure LDAP to integrate with AD. It synchs automatically once a day by using user and group search filter. You can also manually synch. From: Harry Singh [mailto:hbo...@gmail.com] Sent: Tuesday, November 08, 2011 4:56 PM To: NT System Admin Issues Subject: Re: web filtering For

Re: ShoreTel

2011-11-09 Thread James Kerr
I envision that IT will be in charge of phones systems in the future. I admin our intertel systems for the last 7 years and unless it involves trunks or doing cross connects on the 66 blocks I do it all. When we moved one of our offices I had the guy punch all the ports in the phone system into a

Re: ShoreTel

2011-11-09 Thread Andrew S. Baker
In most places that I know of today, telecom is handled by IT or merged into the IT department. Unless you meant something else entirely... * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Wed, Nov 9, 2011 at 4:56 PM, James Kerr

Re: Authenticated Users List

2011-11-09 Thread Andrew S. Baker
IOW, there is not point-in-time group or listing which would show you * All-of-the-user-accounts-that-are-authenticated-this-very-second*. What is the real objective you are trying to reach, Mark? (Or, for what broader purpose are you trying to reach this specific objective?) * * *ASB*

Re: Random logon failures over WAN , due to a net use command, resulting in account lockout

2011-11-09 Thread Dean Cunningham
Make that a CISCO firewall On Thu, Nov 10, 2011 at 10:08 AM, Dean Cunningham dean.cunning...@gmail.com wrote: Any straws greatfully accepted [?] Overview A group of 20 users in a separate domain connect to file resources in another domain via a 1MB WAN link. The file server (Wk8) is in

Re: web filtering

2011-11-09 Thread Dean Cunningham
clearswift http://www.clearswift.com/ Used their products for 15 years, would use them again at a drop of a hat On Wed, Nov 9, 2011 at 5:39 AM, pdw1...@hotmail.com wrote: I've finally gotten a budget to put in place a web filtering platform. I've looked at three so far: Websense, iPrism and

Re: ShoreTel

2011-11-09 Thread James Kerr
Well, what I meant is that IT people will handle all of it. There won't be a phone guy in the traditional sense anymore. Well maybe there will but he'll be an IT guy. I imagine a lot of IT depts handle telecom but when they need work done they hire a phone contractor. I have never worked in an

Re: ShoreTel

2011-11-09 Thread Andrew S. Baker
No, it's been a few years since I've seen any but the largest enterprises with telecom guys. What I tend to see today is that telecom is just a service managed by the networking team, or the generic IT team that covers all things technical. In the SMB space, I don't know of any telecom guys

RE: Random logon failures over WAN , due to a net use command, resulting in account lockout

2011-11-09 Thread Carl Houseman
The net use command you exemplified below has no password on the command line - you do have a password included in the actual script, do you not? Do you get the same logon failures if you run the same logon script from a non-domain-joined machine on the same LAN as the target server? Carl

Re: OT - Phone System In A Virtual Machine

2011-11-09 Thread Jon Harris
Last $dayjob$ we needed to rebuild the entire infrastructure for networking. At the time we had cat 3, cat4, cat5, and coax (thicknet) in the walls. Some of the cat3 was shorted most of the cat4 was causing issues as well but functioned to some degree and the cat5 was laid accross lighting so

Re: ShoreTel

2011-11-09 Thread Jon Harris
Shortels do work on other switches at least $dayjob$ they are using Cisco exclusively. Like Matt I am not the phone guy but I sit across from two of them. The only complaint I hear them make is during upgrades of older phone systems. They have to go out and manually fix things in the remote

Re: ShoreTel

2011-11-09 Thread Jon Harris
I did the same thing at my last job. Had all the POTS lines terminated into a patch panel and I jumpered them to the switch. Made it SO much easier to tell when a line was down. During power outages we kept a single line home phone in the room with the demarc just for emergencies. It did get

RE: ShoreTel

2011-11-09 Thread Crawford, Scott
We're in this boat. Got any links to what a midsize (2000 seat) Lync deployment looks like? From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Wednesday, November 09, 2011 11:20 AM To: NT System Admin Issues Subject: RE: ShoreTel I've seen them at quite a few customers and ranked well

Re: ShoreTel

2011-11-09 Thread Kurt Buff
Nobody yet... On Wed, Nov 9, 2011 at 13:28, Richard Stovall rich...@gmail.com wrote: Who died? On Wed, Nov 9, 2011 at 4:14 PM, Kurt Buff kurt.b...@gmail.com wrote: So it goes... Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: ShoreTel

2011-11-09 Thread Kurt Buff
We put in Procurve 2510s. They work, and match the rest of our switches. Kurt On Wed, Nov 9, 2011 at 15:24, Jon Harris jk.har...@gmail.com wrote: Shortels do work on other switches at least $dayjob$ they are using Cisco exclusively.  Like Matt I am not the phone guy but I sit across from two

Re: ShoreTel

2011-11-09 Thread Harry Singh
Our IT shop handles (read: manage) ALL telecom from pots lines, cell phones and all telephony. We're moving towards hosted VoIP with Thinking Phone Networks for all of our branches. On Wednesday, November 9, 2011, Kurt Buff kurt.b...@gmail.com wrote: We put in Procurve 2510s. They work, and

Re: Random logon failures over WAN , due to a net use command, resulting in account lockout

2011-11-09 Thread Dean Cunningham
Thanks Carl , there is a password in the actual script :) I am just starting to try an emulate the problem, the remote site is a clients site so hard to test there Just though soemoen might say yep its this! It is probably a firewall issue, if not a rule issue , then a RPC inspect issue on the

RE: OT - Phone System In A Virtual Machine

2011-11-09 Thread Benjamin Zachary
My experience is , if possible keep the networks separated to the firewall at minimum. We did some decent networks (800 users, multi-office with 1gig wireless connections and fiber uplinks) we did vlans for printers, ip phones, and management networks. It was great until something went down

Re: OT - Phone System In A Virtual Machine

2011-11-09 Thread Bill Humphries
Yeah, if your existing wiring is in disarray it completely makes sense and is probably necessary for any sort of VOIP to work well. And the way you did it sounds right. I was just pointing out to the OP that they could consider saving money and not rewiring with some solutions. I'm a

Re: ShoreTel

2011-11-09 Thread Ben Scott
On Wed, Nov 9, 2011 at 4:56 PM, James Kerr cluster...@gmail.com wrote: ... when I run a new extension I don't have to have someone come out and cross connect it, I just punch it to a different panel and patch cable it. No more 66 blocks at that facility. I have seen that before, but you can

RE: SIEM solutions

2011-11-09 Thread Ken Schaefer
How big is the environment? What is the scope of devices? SEIMs are designed to take logs from multiple sources, do log collection/analysis, event correlation/alerting. Something like SCOM isn't designed for that, and ACS does Windows only (AFAIK). How about your firewalls, AV, HIPS/NIPS,

Re: SIEM solutions

2011-11-09 Thread Andrew S. Baker
I've played with Nitro a little bit, and I'm familiar with LogRythm, although I've never deployed it. Also consider TriGeo, Splunk Enterprise, and http://alienvault.com/products/unified-siem/siem This is not a cheap category of product... * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing