[NTSysADM] RE: Windows Certificate Authority Management Tool

2013-08-01 Thread Brian Desmond
OK so rereading your message, FIM CM isn't likely to do anything for you here. If all you're doing is LDAPS, you should only need certs on each of your DCs - or are you suggesting that you are doing client cert auth? Usually this is more of a monitoring function than anything else. Integrate a

[NTSysADM] DCs not in-sync

2013-08-01 Thread Thozama Nonxuba
Hi I have 3 DC's. 2x2008R2 and 2012. The 2012 is at our remote office. One of the 2008R2 DC's will not sync with the others no matter what I do. I have tried repadmin and other commands. It's the oldest of the 3 DC's so my exchange 2003 goes there first before the others. It's starting to be a big

RE: [NTSysADM] Access to website from inside WITHOUT host file change

2013-08-01 Thread Michael B. Smith
Have the designer fix the page. Seriously. That behavior is broken. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of J- P Sent: Thursday, August 1, 2013 9:07 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Access to website from inside

Re: [NTSysADM] man-in-the-middle attack

2013-08-01 Thread Micheal Espinola Jr
Nothing is absolute, black and white, yadda yadda yadda - I'm not speaking to every aspect of life or daily routine; I'm referring to the OP issue of remote access and what information is accessible remotely. I also think the meteor strike example is a bit extreme and out of scope for both our

Re: [NTSysADM] RE: Week long shutdown. (resolved)

2013-08-01 Thread Micheal Espinola Jr
Great news - glad to hear it! Its always interesting to me when I see systems like secondary MXs come into use, when its seldom thought about it. -- Espi On Thu, Aug 1, 2013 at 4:35 AM, Kennedy, Jim kennedy...@elyriaschools.orgwrote: * * I am back, it was a complete non-event. A

RE: [NTSysADM] man-in-the-middle attack

2013-08-01 Thread John Cook
We refer to that as the smoking hole scenario. Off-site backups/ remote DR datacenter is the defense. I agree with you though, there is no black and white, quite often C-level management wants to believe it's that simple for the sake of CYA. John W. Cook Network Operations Manager Partnership

Re: [NTSysADM] man-in-the-middle attack

2013-08-01 Thread Micheal Espinola Jr
I guess I'm not articulating well this early in the morning (only on a 1/2 cup of coffee so far), but I do understand Ken's point and would in other situations agree with it - but not in terms of remote access risks. -- Espi On Thu, Aug 1, 2013 at 6:42 AM, Andrew S. Baker asbz...@gmail.com

RE: [NTSysADM] Access to website from inside WITHOUT host file change

2013-08-01 Thread J- P
Already emailed him and the client that it needs to be fixed. thanks all Jean-Paul Natola From: mich...@smithcons.com To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Access to website from inside WITHOUT host file change Date: Thu, 1 Aug 2013 13:17:31

Re: [NTSysADM] Odd spooler issue

2013-08-01 Thread Kurt Buff
And the HP driver(s) would also affect some, but not all, of our Zebra printers? Kurt On Thu, Aug 1, 2013 at 1:26 AM, Ziots, Edward ezi...@lifespan.org wrote: I would look for Bad HP drivers with the HPBPRO.exe and HPBOID.exe running on the print server I have found in past travels that these

Re: [NTSysADM] DCs not in-sync

2013-08-01 Thread Daniel Chenault
I had a similar problem about a year ago at a client (inherited it actually). Previous guy had tried to fix it (I saw his save files and what-not) and let it go. By the time I got there the tombstones had expired. The whole thing got very nasty. In this particular case I would first address

RE: [NTSysADM] RE: Week long shutdown. (resolved)

2013-08-01 Thread Kennedy, Jim
I stand corrected. We lost a fiber bank in the 6509. Didn't notice it right away because we run dual fiber channels to our IDF's. Thank you SmartNet. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Kennedy, Jim Sent: Thursday, August 01, 2013 7:36 AM

RE: [NTSysADM] Order of logon items

2013-08-01 Thread Rovithis George
Use autoruns.exe from sysinternals which I am sure you know about, but it does not give you exactly what you are looking for :-( -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of kz2...@googlemail.com Sent: Thursday, August 1,

Re: [NTSysADM] man-in-the-middle attack

2013-08-01 Thread Daniel Chenault
I see it as a matter of severity. Malware attacks are, as you say, extremely common. They are also fairly easy to guard against (assuming the users do what they are told ahem) and even at that the majority are more annoying than threatening. The cost to guard against them ranges from very cheap

RE: [NTSysADM] Order of logon items

2013-08-01 Thread J- P
Give him an SSD boot drive :) Jean-Paul Natola To: ntsysadm@lists.myitforum.com Subject: Re: [NTSysADM] Order of logon items From: christopher_bod...@glic.com Date: Thu, 1 Aug 2013 11:35:15 -0400 15 seconds between actually entering the credentials and until

Re: [NTSysADM] Perhaps something to supplement Lync

2013-08-01 Thread Kurt Buff
OK, then let's hope the group chat addin works. Kurt On Wed, Jul 31, 2013 at 10:35 PM, Ryan Finnesey r...@finnesey.com wrote: I do not think Yammer is on the EA yet. I think it is part of Office 365 -Original Message- From: listsad...@lists.myitforum.com

Re: [NTSysADM] man-in-the-middle attack

2013-08-01 Thread Andrew S. Baker
*What is the most common way to initiate a MITM attack? Phishing e-mail with a link?* That would depend entirely on the technologies involved. You could wait in the right place, you could phish to get in the right place, you could spoof or poison DNS to send the users to the right place...

RE: [NTSysADM] Perhaps something to supplement Lync

2013-08-01 Thread Ryan Finnesey
It's ok I do not really get Twitter. Now that I limited my number of friends on FB I find it a bit more useful. I need to really dive into Yammer and also the social features within SharePoint 2013. I see a lot of overlap between the two products. I think Group Chat will also be useful.

RE: [NTSysADM] Max size of Notes field in AD?

2013-08-01 Thread Joseph L. Casale
Does anyone know what the limit to the size of the Notes field in AD? I can't seem to search up a limit. Every attr, every version of AD, and all its properties: http://msdn.microsoft.com/en-us/library/windows/desktop/ms675090(v=vs.85).aspx

Re: [NTSysADM] Access to website- UPDATE

2013-08-01 Thread Kevin Lundy
Didn't you say the web server was EXTERNAL to the users? If so, I'm not sure why or how hairpin NAT would come into play. On Thu, Aug 1, 2013 at 4:21 PM, J- P jnat...@hotmail.com wrote: So the www was put back on the website and it now opens the page but not correclty, I have read that

RE: [NTSysADM] Access to website- UPDATE

2013-08-01 Thread J- P
I must have misread the article, the website is external, now that it has the WWW the browser finds it but doesnt load properly, all you see are links down the left hand side. I thought that was what the article was stating. Jean-Paul Natola Date: Thu, 1 Aug

RE: [NTSysADM] Perhaps something to supplement Lync

2013-08-01 Thread Free, Bob
I guess I'm so old-fashioned that I really don't get the POINT of it all, if you know what I mean Me either. It slithered in the door here through HR as a 'pilot' before the MS acquisition IIRC. Once it got a foothold, it couldn't be gotten rid of and was rolled out system wide to anyone who

RE: [NTSysADM] man-in-the-middle attack

2013-08-01 Thread Ken Schaefer
Why are remote access risks any different from any other type of risk? They all cause consequences. Surely it's the consequences that are important, not the manner of delivery. The manner of delivery is important in determining the mitigation/management steps, but it's the overall consequence

RE: [NTSysADM] Access to website- UPDATE

2013-08-01 Thread J- P
You got that right, I quickly did a view source and see a lot refernces within the pages to domain.com rather than www.domain.com and now they are trying to say its something inernal in your network which I quickly refut3d and disproved by adding 5he external site address to the host file of

RE: [NTSysADM] Access to website- UPDATE

2013-08-01 Thread Michael B. Smith
I am not one, although I have often played one on tv. Based on the original problem description it is almost certainly a relative link issue. Sent from my Windows Phone From: Kurt Buff Sent: 8/1/2013 6:29 PM To: ntsysadm@lists.myitforum.com Subject: Re:

RE: [NTSysADM] Access to website- UPDATE

2013-08-01 Thread J- P
So i know this question will come from the client- What are the ramifications of placing an entry of domain.com in the host file of every pc? My guess (only a guess) is that it will cause authentication or some type unexpected problems , my thought is , if the PC is looking for domain.com

[NTSysADM] Folder Actions

2013-08-01 Thread Richard Stovall
Anyone using this product? I have cobbled together some 'hot folder' solutions for a number of things at work, but this looks like it would be easier to use if it is stable and works. http://www.folderactions.com/

RE: [NTSysADM] Folder Actions

2013-08-01 Thread Joseph L. Casale
Anyone using this product?  I have cobbled together some 'hot folder' solutions for a number of things at work, but this looks like it would be easier to use if it is stable and works. http://www.folderactions.com/ Ugh, There is an opensource project that uses the native filesystem

[NTSysADM] Random thoughts on evaluating SANs

2013-08-01 Thread Kurt Buff
All, I've probably mentioned it before, but I'm in the process of looking at a new SAN. The EMC VNXe 3100 isn't cutting it for us, due its iSCSI implementation not doing LUNs larger than 2tb, and the LeftHand is approaching EOL rapidly. So, I've started jotting down some of my thoughts on what

Re: [NTSysADM] Folder Actions

2013-08-01 Thread Kurt Buff
On Thu, Aug 1, 2013 at 4:33 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: Anyone using this product? I have cobbled together some 'hot folder' solutions for a number of things at work, but this looks like it would be easier to use if it is stable and works.

Re: [NTSysADM] Random thoughts on evaluating SANs

2013-08-01 Thread Richard Stovall
Make sure pdf functionality is built in. (I suppose that's a given anymore...) Just curious. How many servers will be accessing it? On Thu, Aug 1, 2013 at 7:36 PM, Kurt Buff kurt.b...@gmail.com wrote: All, I've probably mentioned it before, but I'm in the process of looking at a new SAN.

RE: [NTSysADM] Random thoughts on evaluating SANs

2013-08-01 Thread Jon Harris
Don't know if will be of a concern but many years ago I was supporting a piece of hardware that had a 4 hour call to functional contract. Contract turned out to be pretty worthless as the nearest tech was a 2 hour drive away and they did NOT stock pile parts for the hardware. The norm for

Re: [NTSysADM] Random thoughts on evaluating SANs

2013-08-01 Thread Kurt Buff
We're in an area where SANs are common enough that getting support for hardware issues shouldn't be a problem. At the moment, I'm more concerned with the competency of who answers when I pick up the phone for help on a performance or configuration issue. Kurt On Thu, Aug 1, 2013 at 5:00 PM, Jon

Re: [NTSysADM] Folder Actions

2013-08-01 Thread Micheal Espinola Jr
There are a few similar projects on sourceforge that might also be worth looking into. The last time I had to rely on something like this, I used native calls via Perl. -- Espi On Thu, Aug 1, 2013 at 4:40 PM, Kurt Buff kurt.b...@gmail.com wrote: On Thu, Aug 1, 2013 at 4:33 PM, Joseph L.

RE: [NTSysADM] Random thoughts on evaluating SANs

2013-08-01 Thread J- P
out of curiosity, why are you upgrading EX to 2010 instead of 2013? Jean-Paul Natola Date: Thu, 1 Aug 2013 17:27:32 -0700 Subject: Re: [NTSysADM] Random thoughts on evaluating SANs From: kurt.b...@gmail.com To: ntsysadm@lists.myitforum.com Oh, yes - PDF

RE: [NTSysADM] Order of logon items

2013-08-01 Thread Signup181
Use the Windows Performance Toolkit from the Windows ADK. Refer to the attached for an MS session on this: WCL305 - How Many Coffees Can You Drink While Windows 7 Boots? http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/WCL305 The session will also help you to look for the common

RE: [NTSysADM] Perhaps something to supplement Lync

2013-08-01 Thread Steven Peck
You mean people engaged in communications and sharing of documents and strategies? Seems like it hit its target market successfully. :) Steven -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Free, Bob Sent: Thursday, August