Re: Reverse Proxy

2012-02-17 Thread Graeme Carstairs
Im involved with a large project rolling out latest version of all MS servers, Win 2008 R2, SQL2008 R2, Exchange 2010, Lync, UAG, DA etc. MS representatives mentioned about TMG going but UAg will be the product of choice. Graeme On 16 February 2012 23:00, Kurt Buff kurt.b...@gmail.com wrote:

RE: Self-Service Account Unlock

2012-02-17 Thread Sean Rector
I’d love to hear from the InfoSec peeps on this too – I currently have the lockout set at 30 minutes. I’m seriously considering dropping it down to 5. Sean Rector, MCSE From: Harry Singh [mailto:hbo...@gmail.com] Sent: Thursday, February 16, 2012 8:16 PM To: NT System Admin Issues

Re: Self-Service Account Unlock

2012-02-17 Thread James Rankin
I guess the original thinking behind this was to stop people who were trying to guess your password by manually typing it in from a keyboard. The lockout would convince them to stop trying. Now that most attacks of this fashion are automated or offline, the duration probably isn't a factor. So

Re: Reverse Proxy

2012-02-17 Thread Kurt Buff
That's very good to hear. Thanks. Kurt On Fri, Feb 17, 2012 at 01:32, Graeme Carstairs loonyto...@gmail.com wrote: Im involved with a large project rolling out latest version of all MS servers, Win 2008 R2, SQL2008 R2, Exchange 2010, Lync, UAG, DA etc. MS representatives mentioned about TMG

RE: Reverse Proxy

2012-02-17 Thread Michael B. Smith
Which is rather interesting since, right now, UAG is rather behind TMG in terms of features/functionality. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, February 17, 2012 9:54 AM To: NT System Admin Issues Subject: Re: Reverse Proxy That's very good to

Re: Self-Service Account Unlock

2012-02-17 Thread Steve Kradel
I believe it's meant to rate-limit any sort of online attack (not just a keyboard-driven one). E.g., if someone's written a script that connects to AD via LDAP and guesses passwords, it can only test 10 passwords each 5 minutes on one DC, instead of, let's say, 50,000 per five minutes. In the

Re: Reverse Proxy

2012-02-17 Thread Graeme Carstairs
Reading between the lines of what was said the implication was that it was becoming one product./ When you install UAG, TMG comes along for the ride. I think they are moving to a single firewall/gateway application. But dont quote me and YMMV On 17 February 2012 15:00, Michael B. Smith

Re: Reverse Proxy

2012-02-17 Thread Kurt Buff
I was reading the docs in preparation for this, and what I found agrees with what you said - install UAG, and it installs TMG for you. On Fri, Feb 17, 2012 at 08:20, Graeme Carstairs loonyto...@gmail.com wrote: Reading between the lines of what was said the implication was that it was becoming

dns issue with browser (OS X)

2012-02-17 Thread Jimmy Tran
Hi All, I have one specific user using a Mac who cannot resolve DNS properly in Firefox or Safari on OS X 10.6.8. They can ping by hostnames just fine. They can get to any website by IP just fine but not by hostname. Any ideas? I'm stumped and Google hasn't been very helpful this morning.

RE: dns issue with browser (OS X)

2012-02-17 Thread Webster
Has he restarted the computer? Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.comhttp://www.carlwebster.com/ From: Jimmy Tran [jt...@teachtci.com] Sent: Friday, February 17, 2012 10:52 AM To: NT System Admin Issues

Re: Reverse Proxy

2012-02-17 Thread Kevin Lundy
The downside is likely to be the pricing for those that need only the TMG subset. We will have to license ($) features we don't need. Granted that is true for quite a bit of software. But it is a change in this product line. We have MS planning a technical sales pitch, so I will definitely be

RE: dns issue with browser (OS X)

2012-02-17 Thread Michael B. Smith
HAHAHAHAHAHAHAHAHAHA From: Webster [mailto:webs...@carlwebster.com] Sent: Friday, February 17, 2012 12:00 PM To: NT System Admin Issues Subject: RE: dns issue with browser (OS X) Has he restarted the computer? Carl Webster Consultant and Citrix Technology Professional

Re: dns issue with browser (OS X)

2012-02-17 Thread Steve Ens
DHCP or static IP addressing? On Fri, Feb 17, 2012 at 10:52 AM, Jimmy Tran jt...@teachtci.com wrote: Hi All, ** ** I have one specific user using a Mac who cannot resolve DNS properly in Firefox or Safari on OS X 10.6.8. They can ping by hostnames just fine. They can get to any

RE: dns issue with browser (OS X)

2012-02-17 Thread Jimmy Tran
Yes, when the problem originally occurred yesterday, I had her reboot the computer. Worked fine until this morning. Had her reboot again and it worked. Seems like there is something going on at night but what could it be? From: Webster [mailto:webs...@carlwebster.com] Sent: Friday,

Re: dns issue with browser (OS X)

2012-02-17 Thread Matthew W. Ross
Doublecheck the browser/OS proxy settings. --Matt Ross Ephrata School District - Original Message - From: Jimmy Tran [mailto:jt...@teachtci.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Fri, 17 Feb 2012 08:52:56 -0800 Subject: dns issue with

RE: dns issue with browser (OS X)

2012-02-17 Thread Jimmy Tran
DHCP. When it wasn't working, I changed to static info and still nothing. The reboot does fix it temporarily but it just seems to come back in 24 hours. From: Steve Ens [mailto:stevey...@gmail.com] Sent: Friday, February 17, 2012 9:04 AM To: NT System Admin Issues Subject: Re: dns issue

Re: dns issue with browser (OS X)

2012-02-17 Thread Steve Ens
Group policy? On Fri, Feb 17, 2012 at 11:04 AM, Jimmy Tran jt...@teachtci.com wrote: Yes, when the problem originally occurred yesterday, I had her reboot the computer. Worked fine until this morning. Had her reboot again and it worked. Seems like there is something going on at night but

RE: dns issue with browser (OS X)

2012-02-17 Thread Jimmy Tran
No proxy settings in Firefox or Safari. -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Friday, February 17, 2012 9:09 AM To: NT System Admin Issues Subject: Re: dns issue with browser (OS X) Doublecheck the browser/OS proxy settings. --Matt Ross

Re: dns issue with browser (OS X)

2012-02-17 Thread Steven Peck
Maybe it's just 'artistic sensibilities'. Someone should just spend more time with it. On Fri, Feb 17, 2012 at 9:04 AM, Jimmy Tran jt...@teachtci.com wrote: Yes, when the problem originally occurred yesterday, I had her reboot the computer. Worked fine until this morning. Had her reboot

Re: dns issue with browser (OS X)

2012-02-17 Thread Richard Stovall
Can you resolve any external hosts from a terminal window using nslookup? When you said that you could ping by hostname, were you pinging internal hosts with the same DNS suffix? (I think Macs call this search domain or something similar.) On Fri, Feb 17, 2012 at 12:17 PM, Jimmy Tran

RE: Writing Turnover Doc

2012-02-17 Thread Michael B. Smith
PASSWORDS! From: Sean Rector [mailto:sean.rec...@vaopera.org] Sent: Friday, February 17, 2012 12:28 PM To: NT System Admin Issues Subject: Writing Turnover Doc I'm leaving Virginia Opera Association a week from today, and writing up my turnover doc as we probably won't have my replacement hired

Re: Writing Turnover Doc

2012-02-17 Thread Don Kuhlman
First Sean, Congrats ? ! I would start with a document that is an index which points to other doc you may already have written - that way, they can start there to find things. Next Maybe do a brain dump making a list of things you do daily and try to refine that into tips on how to get those

RE: dns issue with browser (OS X)

2012-02-17 Thread Maglinger, Paul
Is there a way to flush the DNS cache on a Mac? -Original Message- From: Jimmy Tran [mailto:jt...@teachtci.com] Sent: Friday, February 17, 2012 11:30 AM To: NT System Admin Issues Subject: RE: dns issue with browser (OS X) No proxy settings in Firefox or Safari. -Original

RE: dns issue with browser (OS X)

2012-02-17 Thread Jimmy Tran
I was pinging external hosts, not internal. Google resolved fine from terminal but cannot resolve in the browser. This has been temporarily fixed by rebooting the machine but I’m sure it will happen again on Tuesday. From: Richard Stovall [mailto:rich...@gmail.com] Sent: Friday, February

Re: Writing Turnover Doc

2012-02-17 Thread Michael Leone
On Fri, Feb 17, 2012 at 12:46 PM, John Cook john.c...@pfsf.org wrote: Congrats (maybe?) Backup strategy, vendor contacts, software lifecycles (renewal due dates) inventory And any specific HOWTOs for starting applications (we have some that MUST be started in a specific order OR ELSE, etc,

RE: Writing Turnover Doc

2012-02-17 Thread Sean Rector
Definite congrats – the new position came from out of the blue. Excellent items that I’m already including… Sean Rector, MCSE From: John Cook [mailto:john.c...@pfsf.org] Sent: Friday, February 17, 2012 12:46 PM To: NT System Admin Issues Subject: Re: Writing Turnover Doc Congrats

RE: Writing Turnover Doc

2012-02-17 Thread Sean Rector
Already done. Sean Rector, MCSE From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 17, 2012 12:51 PM To: NT System Admin Issues Subject: RE: Writing Turnover Doc PASSWORDS! From: Sean Rector [mailto:sean.rec...@vaopera.org] Sent: Friday, February 17,

Re: Writing Turnover Doc

2012-02-17 Thread Richard Stovall
On Fri, Feb 17, 2012 at 12:27 PM, Sean Rector sean.rec...@vaopera.orgwrote: ...we probably won’t have my replacement hired before I leave. ** Your cell phone number and your hourly rate? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: Writing Turnover Doc

2012-02-17 Thread Kurt Buff
Prepare three envelopes... On Fri, Feb 17, 2012 at 09:27, Sean Rector sean.rec...@vaopera.org wrote: I’m leaving Virginia Opera Association a week from today, and writing up my turnover doc as we probably won’t have my replacement hired before I leave. I’ve got a bit of a block as to what all

Re: Writing Turnover Doc

2012-02-17 Thread Kurt Buff
Even better - the master password to the password database. We use PasswordSafe, with multiple databases according to role. Kurt On Fri, Feb 17, 2012 at 09:50, Michael B. Smith mich...@smithcons.com wrote: PASSWORDS! From: Sean Rector [mailto:sean.rec...@vaopera.org] Sent: Friday,

Re: Reverse Proxy

2012-02-17 Thread Graeme Carstairs
Pricing is going up in uk anyway They are changing volume licensing Across the eu to euros so prices in the uk will shoot up, as it was previously priced in $ I think there is some other major licensing changes coming with some of the 2012 server versions as well On Friday, 17 February 2012,

RE: dns issue with browser (OS X)

2012-02-17 Thread Jimmy Tran
Yes, instinctively I tried that but it didn't work (dscacheutil -flushcache). Since external hostnames were resolving with terminal, DNS cache wasn't the issue in this case. -Original Message- From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Friday, February 17, 2012 10:02 AM

RE: dns issue with browser (OS X)

2012-02-17 Thread Richard McClary
Check cache settings in the browsers From: Jimmy Tran [mailto:jt...@teachtci.com] Sent: Friday, February 17, 2012 12:10 PM To: NT System Admin Issues Subject: RE: dns issue with browser (OS X) I was pinging external hosts, not internal. Google resolved fine from terminal but cannot resolve in

Re: dns issue with browser (OS X)

2012-02-17 Thread Don Kuhlman
Is there any VPN stuff going on by chance that overwrites some DNS or other settings which the reboot clears until the VPN client is started again? From: Richard Stovall rich...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent:

RE: Early Friday Funnny

2012-02-17 Thread Jeff Bell
We had a saying: See all evil, Hear all evil, say nothing... Jeff -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, February 15, 2012 2:21 PM To: NT System Admin Issues Subject: Re: Early Friday Funnny I'll bet that got your heart going pitty-pat (the

RE: Writing Turnover Doc

2012-02-17 Thread Sean Rector
LOL…they have that, too. Sean Rector, MCSE From: Richard Stovall [mailto:rich...@gmail.com] Sent: Friday, February 17, 2012 1:26 PM To: NT System Admin Issues Subject: Re: Writing Turnover Doc On Fri, Feb 17, 2012 at 12:27 PM, Sean Rector sean.rec...@vaopera.org wrote: ...we probably

OT Friday Funny email from my mom.

2012-02-17 Thread Kennedy, Jim
Got this earlier this week from my Mom. While I applaud her problem solving abilities it really cracked me up. She is in Aruba on vacation. I am having computer problems. Ralph spilled a drink on it. Since it has dried out everything now works except the question mark and the last letter of

Re: Early Friday Funnny

2012-02-17 Thread Kevin Lundy
I'd be interested to know how the IronPort hightlighted that for you. A dirty word filter? On Wed, Feb 15, 2012 at 5:25 PM, Rankin, James R kz2...@googlemail.comwrote: Our IronPort highlighted someone rather senior organising an affair in graphic fashion. I reported my findings, but nothing

RE: Early Friday Funnny

2012-02-17 Thread Kim Longenbaugh
So, are you in congress or the senate? -Original Message- From: Jeff Bell [mailto:sunbeltsoftware@jeffrybell.com] Sent: Friday, February 17, 2012 1:20 PM To: NT System Admin Issues Subject: RE: Early Friday Funnny We had a saying: See all evil, Hear all evil, say nothing... Jeff

Re: Early Friday Funnny

2012-02-17 Thread Rankin, James R
You got it. Works on a points scale, so those who sign every email xxx eventually get flagged. Sent from my SR-71 Blackbird -Original Message- From: Kevin Lundy klu...@gmail.com Date: Fri, 17 Feb 2012 15:22:26 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT

Re: Early Friday Funnny

2012-02-17 Thread Bill Humphries
The president of one of our clients always got viruses on his laptop. Cleaning it up always revealed tons of pron. One time after he had gotten a vista laptop, he wanted me to do something with his laptop while he was in a meeting. He had the photos desktop widget active. While i was

RE: OT: Early Friday Funnny

2012-02-17 Thread Maglinger, Paul
Reminds me of back in the days before Political Correctness, I had an instructor that would slip a few interesting pictures in the presentation just to keep us alert. -Original Message- From: Bill Humphries [mailto:nt...@hedgedigger.com] Sent: Friday, February 17, 2012 3:41 PM To:

Re: OT: Early Friday Funnny

2012-02-17 Thread Steven Peck
and I am so glad my daughter won't be in that world. On a lighter note, I knew a presenter who used to embed a small sound file in his presentations to listen for who was skipping ahead during presentations on conference calls. Steven Peck http://www.blkmtn.org On Fri, Feb 17, 2012 at 1:54 PM,

Re: OT: Friday Funny - Tech Support

2012-02-17 Thread Richard Stovall
I missed the original post, so I don't know what we're talking about. Can someone show me where to find it? On Fri, Feb 17, 2012 at 5:04 PM, Jonathan Link jonathan.l...@gmail.comwrote: I think there are some who do skip #6 and go to #7... :-) On Fri, Feb 17, 2012 at 4:45 PM, Guyer, Donald