RE: WS12 disable printer mapping

I always do this with Group Policy. Make sure you exclude your Terminal Servers from the policy, though. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Tuesday

RE: Office 365 Email Migration steps - is there a better way?

overkill to me. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Don Kuhlman [mailto:drkuhl...@yahoo.com] Sent: Monday, April 8, 2013 10:19 AM To: NT System Admin Issues Subject: Office 365 Email Migration steps

RE: Windows DNS scavenging..

gone yet something is depending on it. Take an ldifde dump of your DNS storage in AD in case you need to bring back any records. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent

RE: Powershell - match up user accounts from two ADs

I would switch to Export-Csv and then you can use Excel to do some of your munging. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Don Kuhlman [mailto:drkuhl...@yahoo.com] Sent: Tuesday, April 2, 2013 10:22 AM To: NT System

RE: DPM and LTO6?

I haven’t a clue, but, isn't the specific tape media/type abstracted to the backup program via the driver? Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, March 21, 2013 4

RE: Automate DCDIAG and e-mail results

Doesn't really scale beyond a couple DCs. I would generally recommend a monitoring tool that has AD specific monitoring capabilities. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent

RE: Cross Domain authentication - brain freeze

Don- You might refactor this code to use S.DS.AccountManagement. It abstracts all this stuff for you. You’re going to start needing to think about global catalogs also with multiple domains, universal groups, etc. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w

RE: Running Powershell script as scheduled task fails with 0x1

Really? I run all mine natively with powershell.exe in the task scheduler. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, March 7, 2013 1:40 PM To: NT System

RE: Recommendations for DNS/SSL provider

DigiCert for certs hands down. I can't comment on DNS providers. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Monday, February 25, 2013 2:25 PM To: NT System Admin

RE: Replacing a print server - publishing printers in directory?

once your old server is offline - In the event you bring your old server back up, the objects will be recreated Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Michael Leone [mailto:oozerd...@gmail.com] Sent: Wednesday, February

RE: OT: MCM certification

of the day, someone’s budget has to cover this. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, February 14, 2013 12:45 PM To: NT System Admin Issues Subject

RE: Domain upgrade: 2008 R2 or 2012 ?

I would go straight to WS2012. From an AD perspective, you can take advantage of new features like virtualization safeties, group managed service accounts, and dynamic access control. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132

RE: DFSR question regarding RDC

Yes it's block level. IIRC down to like 64KB blocks that it does the diff at. Once you put the first image out there, you should only expect to replicate the diffs in all the other images. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c

RE: Rename 2003 domain

To add to Michael's point, this wasn't necessary and probably wasn't the best idea. The consultant obviously messed something up given you had to rejoin clients. The simple fact that the consultant was happy to (and possibly recommended) this domain rename tells me a lot. Thanks, Brian Desmond

RE: SMB IT provider Q

looking at $900 versus whatever for the actual guarantee. If I was the customer I'd simply pay Dell. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Sunday, February 3, 2013 3:01 PM

RE: SMB IT provider Q

Ask your insurance agent about what your liability coverage looks like for storing a customer’s data in your office/home office. I certainly would not want to carry this risk. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From

RE: Multi-tenant campus security

I would do some research on how this is done in university dorms and such. Search on ResNet - the usual term for that type of setup. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Charlie Kaiser [mailto:charl...@golden

RE: Replacement for SteadyState

Yeah ... For all the universities I've worked at and had this discussion, this perceived problem has never morphed into an actual issue. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Kennedy, Jim [mailto:kennedy

RE: Replacement for SteadyState

When I worked for a K-12 (~450K students), we issued accounts to all students at any school that was using our central AD. I've seen the same practice at the other K-12 districts I've worked at. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c

RE: Replacement for SteadyState

to write. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Monday, January 7, 2013 11:13 AM To: NT System Admin Issues Subject: RE: Replacement for SteadyState Good to know. Now

RE: Replacement for SteadyState

to do the mass cleanup. A student's identity could persist throughout their relationship with your district. As long as you have the SIS primary key in AD (e.g. the student/empl ID), that sync should be really easy. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w

RE: Replacement for SteadyState

to), is what problems/issues is DeepFreeze protecting you from that running as a local user wouldn't solve? Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Friday, January 4, 2013

RE: Occasional local admin needed

How about you create an AD Group, nest the AD group in local admins, and add the relevant users? GPOs and extra accounts for a dev box like this sounds like substantial unnecessary overhead. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c

RE: SSL and the new no internal names ruling

to the right people. Thanks, Brian Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Monday, December 10, 2012 12:00 PM To: NT System Admin Issues Subject: RE: SSL and the new

RE: SemiOT: They finally pulled the trigger...

I definitely wouldn't introduce this thing into an existing domain/forest and risk what might replicate out of one of these. Interesting for sure, but, practical - not so much IMO. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c   – 312.731.3132 -Original Message

RE: Dead DC cleanup via GUI in 2008+

You have to manually enable scavenging for that zone (and on a server to do it) which folks often don't do. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, December 11, 2012 8:53 AM To: NT

RE: Dead DC cleanup via GUI in 2008+

Correct - records with a timestamp of 0 (GUI calls them static records) never get cleaned up. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Webster [mailto:webs...@carlwebster.com] Sent: Tuesday, December 11, 2012 8:04 AM To: NT System Admin Issues

RE: SSL and the new no internal names ruling

I reached out to DigiCert about this. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Steve Kradel [mailto:skra...@zetetic.net] Sent: Monday, December 10, 2012 11:48 AM To: NT System Admin Issues Subject: Re: SSL and the new

RE: Amazon Web Services continues Windows push with PowerShell - Computerworld

They have the Windows Azure Websites which also has a free tier. I started working on moving my site there. The PoC I did seems to work. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Steven Peck [mailto:sep...@gmail.com

RE: File Services Clustering in Server 2012

Windows clustering has changed substantially since Windows 2000. Give it a try with 2008R2 or 2012. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Thursday, December 6

RE: VDI in a Box?

You'd want the account manager or their attached ATS to help there - TAMs are for premier support and PAM is for partners. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent

RE: Standing up 2K8DC - finally. Opinions?

That's more of a function of the GPOs though. You can start taking advantage of that independent of the AD upgrade itself. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Jimmy Tran [mailto:jt...@teachtci.com] Sent: Thursday

RE: A question about Virtualization

It’s included in some EAs too – pseudo free. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, November 07, 2012 9:51 AM To: NT System Admin Issues Subject: RE: A question about

RE: Multi Account Outlook sent items

it up. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Gavin Wilby [mailto:gavin.wi...@gmail.com] Sent: Tuesday, October 23, 2012 1:00 PM To: NT System Admin Issues Subject: Re: Multi Account Outlook sent items Correct, the email

RE: System Center 2012 Endpoint Protection

Same here - multiple happy customers. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, September 19, 2012 4:57 PM To: NT System Admin Issues Subject: RE: System

RE: Servers - Cisco UCS C220 M3 instead of HP DL360?

They’re Cisco native hardware now Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: John Cook [mailto:john.c...@pfsf.org] Sent: Thursday, September 06, 2012 3:40 PM To: NT System Admin Issues Subject: Re: Servers - Cisco UCS C220 M3 instead of HP DL360

RE: Windows InTune

want to stand up an SCVMM server to manage HyperV and/or ESX. I found the install and figuring it out to be pretty painless. It includes its own SQL license of sort so you don’t have to pay extra for that. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From

RE: Windows InTune

Yeah – good catch. My Chicago Public Schools math… Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Art DeKneef [mailto:art.dekn...@cox.net] Sent: Friday, August 24, 2012 12:59 PM To: NT System Admin Issues Subject: RE: Windows InTune Brian, Don’t you

RE: Laptop with Serial Port?

I have a 15.4” Elitebook that I carry in my backpack anytime I’m on the road. It’s really not that bad and I can actually get some work done on it. For me at least, the tiny keyboards and low res screens are really annoying. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c

RE: PKI big picture?

. I think SCCM expects a trusted cert on each device for the Internet client scenario so that's why you need the internal PKI infrastructure. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Stephen Wimberly [mailto:riverside

RE: 2003 R2 hotfix, but I think it's the wrong one...

That fix is included in SP2... Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c   – 312.731.3132 -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, August 13, 2012 6:34 PM To: NT System Admin Issues Subject: 2003 R2 hotfix, but I think it's

RE: DCs in saperate OU

exception where you can do this securely is with RODCs. In this case, you can grant a group local administrative access to the RODC with the manager attribute on the RODC's computer account. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c   – 312.731.3132 -Original Message

RE: Active Directory and Group Policy inheritance

Just make sure you don't write an inefficient filter that takes forever to process... Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, July 26, 2012 10:50 AM

RE: Rant: local ISP and DNS entries for Office365

There is a free level of DNS with GoDaddy if you need like 100 records. That's what I use for most of my domains. It works just fine and supports O365 records. I've used DynDns' pay service in the past too. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132

RE: chagne AD p/w option

Setting adminCount to 0 wont independently do anything - you need to also mark the object to inherit security permissions again also. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Friday, July 20, 2012 10:33

RE: moving to virtual

That rate is fine, but, IMO (and from other folks chiming in) the actual hours count seems high Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Mazzaccaro [mailto:david.mazzacc...@hudsonmobility.com] Sent: Wednesday, July 18, 2012 5:47 AM To: NT

RE: moving to virtual

So: $38K @ $150 = 253 hours, or, 6 weeks of work for one resource $38K @ $175 = 217 hours, or about 5 weeks of work for one resource Both labor estimates seem a bit on the high side to me. What's the vendor's rate? Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c

RE: Certificate authority

Why does installing Lync necessitate a CA? Just get the certs from a commercial CA. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: jwalt...@specservices.com [mailto:jwalt...@specservices.com] Sent: Tuesday, July 03, 2012 5:49 PM To: NT System Admin

RE: Anyone see this

I agree with Ken that this should be irrelevant. I would use Fiddler and figure out what's going on at the HTTP level. There was an issue around this with cert based auth enabled on the IIS end and a recent (April or May ?) Outlook 2010 rollup in place. Thanks, Brian Desmond br

RE: Schema upgrade/rollback

Yes - that is the only back out plan. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Friday, June 08, 2012 11:48 PM To: NT System Admin Issues Subject: RE: Schema upgrade/rollback I'm not worried in the least

RE: Office 365 and AD synchronization

I think 99.99% is overdoing it. I'm pretty sure there is more than .01% of customers who want HA for their AuthN to email, IM, SharePoint, partner apps, etc. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Michael B. Smith [mailto:mich...@smithcons.com

RE: Re-cabling

from there. Then on the other end you can cross connect to the switch or whatever. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Steven Peck [mailto:sep...@gmail.com] Sent: Wednesday, June 20, 2012 10:50 AM To: NT System Admin Issues Subject: Re: Re

RE: How many in your company can join systems to domain

), they agree to IT policies X, Y, and Z (patching, a/v, etc.). Also factor in how you’re a/v in particular is licensed. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c   – 312.731.3132 -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent

RE: in-depth AD

I use this as well, or a NetApp ONTAP simulator. Windows Server 2012 has an in-box iSCSI target. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Saturday, June 16, 2012 7:02 AM To: NT System Admin Issues

RE: in-depth AD

That's on a 2xDual Core Xeon 5160 box w/ 28GB RAM and 4x1T SATA RAID10. Box is about 5 years old. I have a newer dual QC i7 box with 48GB that I haven't really started using yet due to lack of time. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132

RE: Schema upgrade/rollback

What is it that you fear will happen that this proposed process will protect you from? Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Friday, June 08, 2012 2:32 PM To: NT System Admin Issues Subject: Schema

RE: Powershell and dos batch

You can pass session level execution policy by adding a -ExecutionPolicy argument to your powershell.exe call. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Wednesday, June 06, 2012 9:49 AM

RE: SQL Cluster Disk IO issues

and then analyzing it. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Mark Robinson [mailto:mark.robin...@cips.org] Sent: Wednesday, May 30, 2012 10:31 AM To: NT System Admin Issues Subject: SQL Cluster Disk IO issues Hi all, I'm looking for some advice

RE: http://fqdn/owa works interally but not externally

Does the request show up in the IIS log? What's the status code? What's between the CAS server and the user - firewalls, load balancers, reverse proxies, etc? Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent

RE: Microsoft Office 2010 KMS Host License Pack

That is my understanding and recollection as well... Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Thursday, May 17, 2012 4:55 PM To: NT System Admin Issues Subject: Microsoft Office 2010

RE: Windows Server Backup BSOD

Did they have you enable driver verifier with 'Force IRQL Checking' enabled? Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Monday, May 14, 2012 12:14 PM To: NT System

RE: Windows Server Backup BSOD

Generally without that flag, the dumps are pretty useless for this particular crash. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Monday, May 14, 2012 1:56 PM To: NT

RE: PCounter Print Management

and then swipe your badge on any machine to release the job. In the process it goes on your tab. I know Canon has a solution here. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Saturday, April 28

RE: PCounter Print Management

My experience is that many customers who implement these managed print solutions see some sort of savings but hate the resultant end user and IT experiences. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Paul Hutchings [mailto:paul.hutchi

RE: BPOS to Exchange on-premise

MigrationWiz might be able to do this for you. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Benjamin Zachary [mailto:li...@levelfive.us] Sent: Thursday, April 19, 2012 2:39 PM To: NT System Admin Issues Subject: RE: BPOS to Exchange on-premise We had

RE: MS DPM Opinions

The IronMountain DPM stuff was pricey when I talked to them three years ago. Would be curious to hear if it's come down at all. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c   – 312.731.3132 -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent

RE: Wireless controller for 2 APs?

That's an interesting idea - I haven't. Do you still need to put a special breaker in to isolate it? Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Tuesday, April 17, 2012 10:26 PM To: NT System Admin

RE: BPOS to Exchange on-premise

If you wait to migrate the tenant to Office365, it will be easy to do with the in-box tools. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Daniel Chenault [mailto:dchena...@lgnetworksinc.com] Sent: Wednesday, April 18, 2012 3:02 PM To: NT System Admin

RE: Wireless controller for 2 APs?

Sounds overkill. I just bought a D-Link WAP for my house a couple weeks ago that's out of their SMB type line and it even has a little basic wireless controller function built into it. Got it for perhaps 120 bucks on Amazon. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c

RE: Wireless controller for 2 APs?

I picked one of these up - http://www.dlink.com/products/?pid=DAP-2553. Seems featureful, works well (so far), and was reasonably easy to configure. Make sure you flash the firmware as there's a bunch of new functionality. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c

RE: Wireless controller for 2 APs?

btw the reason I picked that one over other competing or cheaper models is that the Ethernet port on it is GigE. Many of these N-band APs have 100meg ports and I wanted to make sure that I could push 100mbps over the air down to the switch it's plugged into. Thanks, Brian Desmond br

RE: Wireless controller for 2 APs?

. Nice for real world testing but also obnoxious when you just want something to work quickly. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: William Robbins [mailto:dangerw...@gmail.com] Sent: Tuesday, April 17, 2012 7:25 PM To: NT System Admin Issues

RE: code signing certificate ?

I haven't used these formats before, but, three general thoughts: * Will the certs MMC solve this for you? * What about certutil.exe? * The OpenSSL Windows command line utility is a great resource for converting all manner of certificate formats. Thanks, Brian Desmond

RE: Hooray, I'm moving to VMware!

The documentation currently says #1, but, I expect in the next 6-12 months you will see that shift to #2. I don't have a problem personally with #1. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Mazzaccaro [mailto:david.mazzacc

RE: code signing certificate ?

Do you have root cert auto updating enabled? Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Monday, April 16, 2012 11:02 AM To: NT System Admin Issues Subject: Re: code signing certificate

RE: Hooray, I'm moving to VMware!

5-6 guests per host? How tiny are these hosts? Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: John Cook [mailto:john.c...@pfsf.org] Sent: Monday, April 16, 2012 1:37 PM To: NT System Admin Issues Subject: RE: Hooray, I'm moving to VMware! We average 5

RE: Hooray, I'm moving to VMware!

HyperV would save you 5 grand in licenses and the memory issues assuming vSphere doesn't have a specific feature you need. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Mazzaccaro [mailto:david.mazzacc...@hudsonmobility.com] Sent: Friday, April

RE: Hooray, I'm moving to VMware!

Given he is going NetApp, I'd be looking at their VMWare integration. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Friday, April 13, 2012 2:54 PM To: NT System Admin

RE: GPO Reporting

Yep - call Darren @ sdmsoftware.com. He's got the tools to do this right. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Free, Bob [mailto:r...@pge.com] Sent: Thursday, April 12, 2012 9:38 AM To: NT System Admin Issues Subject: RE: GPO Reporting

RE: PC power management

Many of my customers are doing this with SCCM. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Thursday, April 12, 2012 6:41 AM To: NT System Admin Issues Subject: PC power management Are any of you using

RE: Domain local vs. global vs. universal

In a single domain forest (or even many multi-domain domain forests today), I would just do all uni groups. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Thursday, April 12, 2012 11:28 AM To: NT System Admin

RE: Domain local vs. global vs. universal

Nothing really happens when you toggle that button other than an update to the groupType (IIRC that's the one) attribute. Replication is smart enough in a multi-domain environment on GCs to sync the membership into the GC's database. Thanks, Brian Desmond br...@briandesmond.com w

RE: Domain local vs. global vs. universal

GCs always get uni group membership. Universal Group Caching is generally speaking not something you want. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Lora Cates [mailto:lora.ca...@rocketmail.com] Sent: Thursday, April 12, 2012 1:33 PM To: NT System

RE: Domain local vs. global vs. universal

, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Lora Cates [mailto:lora.ca...@rocketmail.com] Sent: Thursday, April 12, 2012 1:05 PM To: NT System Admin Issues Subject: Re: Domain local vs. global vs. universal I too am looking into this for a coming migration

RE: Domain local vs. global vs. universal

, that leaves you with a multi-domain forest where every DC in a given domain isn't a GC. In this scenario you need to worry about IM placement in that domain. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Patrick Salmon [mailto:psal...@gmail.com] Sent

RE: Domain local vs. global vs. universal

UGC gets enabled on a DC which isn’t a GC. It’s got a lot of side effects and strange behaviors. Without a really good reason you should not be going down that path. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Lora Cates [mailto:lora.ca

RE: Domain local vs. global vs. universal

. The overhead here is minimal compared to the cost of migrating out of the largest child. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Cameron [mailto:cameron.orl...@gmail.com] Sent: Thursday, April 12, 2012 3:43 PM To: NT System Admin Issues Subject

RE: Script signing ?

that connotes a fairly high degree of trust. IMO it's a good practice. Most any script or binary that leaves my computer gets signed. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Wednesday

RE: Script signing ?

Aside from the security side of things in terms of process for issuing the cert, don't forget the timestamp server and to timestamp your signatures. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Steven Peck [mailto:sep...@gmail.com] Sent: Wednesday

RE: Script signing ?

that will sign most anything. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Webster [mailto:webs...@carlwebster.com] Sent: Wednesday, April 04, 2012 5:22 PM To: NT System Admin Issues Subject: RE: Script signing ? I offer a Signed version of all my PowerShell

RE: recommendations on home server

I have two Dell Precision workstations that have 2 sockets each in them, 32-48GB of RAM each, and 4-8 drives each. They make a very noticeable impact on my electricity bill (Chicago). They're essentially server components in a workstation case with quiet fans. Thanks, Brian Desmond br

RE: recommendations on home server

I get Dell Precision workstations off their outlet store. Both the ones I have were good deals in terms of cost/components. I just upgrade the RAM periodically when I run out of capacity. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Joseph L. Casale

RE: Powershell question

} } else { return $false } } Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, April 03, 2012 4:27 PM To: NT System Admin Issues Subject

RE: System Center 2012

Also on the volume licensing site. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, April 02, 2012 1:15 PM To: NT System Admin Issues Subject: RE: System Center 2012 Yep. I'm downloading

RE: Powershell ODBC and SQL scripts

Have you considered just buying Red Gate's tools that do this? They're a couple hundred bucks and are going to be infinitely more mature than a home grown tool... Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Joseph L

RE: recommendations on home server

Your experience will be *way* better though with multiple spindles. I use 4x1T SATA RAID10 in my VM hosts and it works great. Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Richard Stovall [mailto:rich...@gmail.com] Sent: Monday, April 02, 2012 6:15 PM

RE: Powershell reg binary issue

You could just put it in $foo or some variable. No need to dump it to a temp file. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, March 26, 2012 7:16 PM To: NT

RE: Microsoft's Password Export Server 3.1 x64

I assure you it's how it works. :) There's a rather limited number ways to run in-process in LSA to have that level of access. Password filter is one of them. Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Steve Kradel

RE: OT: Re: OldCmp.exe

AD returns errors via the mechanism LDAP provides to do that... Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132 From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Friday, March 23, 2012 1:22 PM To: NT System Admin Issues Subject: Re: OT: Re: OldCmp.exe

RE: Exchange Disaster Recovery Solutions

NetApp has SnapMirror Thanks, Brian Desmond br...@briandesmond.com w - 312.625.1438 | c   - 312.731.3132 -Original Message- From: Jon D [mailto:rekcahp...@gmail.com] Sent: Tuesday, March 20, 2012 8:10 AM To: NT System Admin Issues Subject: Exchange Disaster Recovery Solutions Outside

  1   2   3   4   5   6   7   8   9   10   >