R: ADSL router with different subnets on each port

2009-10-08 Thread HELP_PC
Well , I need a subnet for a VOIP Box and few telephones, but if possible using the same Internet connection GuidoElia HELPPC _ Da: Mike Hoffman [mailto:m...@drumbrae.net] Inviato: giovedì 8 ottobre 2009 20.22 A: NT System Admin Issues Oggetto: RE: ADSL router with different subnets

Re: Remote Backup Solutions

2009-10-08 Thread Andrew S. Baker
Yes, it does. Especially with that 5-user SOHO license... :) -*ASB*: http://XeeSM.com/AndrewBaker Providing Competitive Advantage through Effective IT Leadership On Thu, Oct 8, 2009 at 10:59 PM, Martin Blackstone wrote: > This looks very cool…. > > > > *From:* Shazad Anwar [mailto:sha...@fas

RE: Remote Backup Solutions

2009-10-08 Thread Martin Blackstone
This looks very cool.. From: Shazad Anwar [mailto:sha...@fastmail.co.uk] Sent: Thursday, October 08, 2009 2:29 PM To: NT System Admin Issues Subject: Re: Remote Backup Solutions Check this out http://www.druvaa.com/insync/laptop-backup Similar to dropbox but designed for business u

Re: [ActiveDir] Fwd: REPLMON shows errors, but only in 1 direction ...

2009-10-08 Thread Michael Leone
A thought occurred to us - the server MJRSWDC001 recently had it's IP addresses changed (we moved it from one building to another, so it had to changed subnets). I'm wondering if somehow the replication is confused, and is trying to contact MJRSWDC001 using it's old IP address. It shouldn't - I did

Re: Adding a server to the domain

2009-10-08 Thread Rick Fogarty
I think it's 645 Security. Now wondering if there is a way to distinguish between workstations and servers. Guess not considering at that point of the process there is no difference. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: Microsoft to push 13 patches, including SMB, FTP fixes

2009-10-08 Thread James Hill
Thanks for the heads up. The FTP one was a concern so I've implemented the fix manually now. The rest will be via WSUS. From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: Friday, 9 October 2009 8:10 AM To: NT System Admin Issues Subject: Microsoft to push 13 patches, including S

Re: Microsoft to push 13 patches, including SMB, FTP fixes

2009-10-08 Thread asbzone
This is going to be a big fat one... Sent from my Verizon Wireless BlackBerry -Original Message- From: Micheal Espinola Jr Date: Thu, 8 Oct 2009 18:09:59 To: NT System Admin Issues Subject: Microsoft to push 13 patches, including SMB, FTP fixes http://www.scmagazineus.com/Microsoft-to-

Microsoft to push 13 patches, including SMB, FTP fixes

2009-10-08 Thread Micheal Espinola Jr
http://www.scmagazineus.com/Microsoft-to-push-13-patches-including-SMB-FTP-fixes/article/151844/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

RE: infected box

2009-10-08 Thread James Hill
I'd be putting the pressure on Vipre support. Let them fix the problem. It's not acceptable that the machine got hosed in the first place. You are paying for protection yet it appears that you are relying on a free product (Malwarebytes) to help clean up the mess. Of course some of the other

Re: infected box

2009-10-08 Thread wjh
All clean now. I didn't want to break the mirror because honestly, I don't trust the cheapo on board raid controller. I think that having the desktop mirrored with the crappy controller is worse than a standalone disk. The infected machine wouldn't open task manager or let you run msconfig. I

Re: LifeHacker - Jinni Recommendation Service Like Pandora for Movies (currently 1/4 full of limited sign-ups)

2009-10-08 Thread Micheal Espinola Jr
The LifeHacker site or the Jinni site? http://www.jinni.com/ If Jinni gives a "Thirty Year Old Virgin" error, just go back and try again. I got a couple of those, but it worked on the second attempt. Being a fresh LifeHacker post, Im sure the site is getting overloaded... -- ME2 On Thu, O

RE: forward email to fax?

2009-10-08 Thread James Hill
I believe Equisys Zetafax is capable of this type of thing. From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Friday, 9 October 2009 5:57 AM To: NT System Admin Issues Subject: forward email to fax? In a windows environment(W2k3) with Ex2k3 is there a way to forward email delivered to a mailbox

RE: Remote Backup Solutions

2009-10-08 Thread Andy Ognenoff
I second the Mozy Pro or similar option but if you want to stick with VPN you could check out Retrospect – the Proactive backup option polls for machines so as soon as they are visible on the network they get backed up according to your schedule – we do it every 7 days so it doesn’t care what day t

RE: LifeHacker - Jinni Recommendation Service Like Pandora for Movies (currently 1/4 full of limited sign-ups)

2009-10-08 Thread Maglinger, Paul
It fall down, it go BOOM! Connection refused Description: Connection refused From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: Thursday, October 08, 2009 4:32 PM To: NT System Admin Issues Subject: OT: LifeH

OT: LifeHacker - Jinni Recommendation Service Like Pandora for Movies (currently 1/4 full of limited sign-ups)

2009-10-08 Thread Micheal Espinola Jr
http://lifehacker.com/5152393/jinni-recommendation-service-like-pandora-for-movies -- ME2 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: Remote Backup Solutions

2009-10-08 Thread Roger Wright
Our notebook users have SyncBack and a profile to copy everything under My Docs to the server. We rely on them to run initiate the process, but it works well. Roger Wright ___ Sent from Tampa, FL, United States On Thu, Oct 8, 2009 at 4:48 PM, Martin Blackstone wrote: > I’m looking for some k

Re: Remote Backup Solutions

2009-10-08 Thread Shazad Anwar
Check this out http://www.druvaa.com/insync/laptop-backup Similar to dropbox but designed for business use. Works fine over VPN, internet or LAN. Shazad On 8 Oct 2009, at 21:48, Martin Blackstone wrote: > I’m looking for some kind of remote backup solution for about 60 > road warriors. > S

Re: infected box

2009-10-08 Thread Len Hammond
OK, here is where I am. And I'll try to answer all posts up to now. Data is copied to an external hard disk and external disk powered down and parked. As for machine configuration - the OS and the data are on two separate disks in the machine anyway so I can just remove the data drive and hold it

Re: infected box

2009-10-08 Thread Linda C Jones
Download the Avira rescue cd, create a cd. It boots up standalone and does a great job on tough trojans. It is free and Avira deserves much credit for providing it. You should download the latest version now and again. Linda Len Hammond wrote: Hi people, I have a client with an infect

RE: Remote Backup Solutions

2009-10-08 Thread Martin Blackstone
OK, Windows based. :) Thanks anyways Matt! -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Thursday, October 08, 2009 2:00 PM To: NT System Admin Issues Subject: Re: Remote Backup Solutions If you're interested in trying a Linux server, I'd try BackupPC.

Re: Remote Backup Solutions

2009-10-08 Thread Matthew W. Ross
If you're interested in trying a Linux server, I'd try BackupPC. It allows you to setup users so they can start their own backups and restore their own files. Files are transfered over SMB using rsync, so it's network friendly. If the remote VPN comptuer can be seen by name over the VPN, BackupP

Password policy minimum password age

2009-10-08 Thread Christopher Bodnar
I've been working towards getting our help desk accounts out of the Domain Admins group. I've successfully modified the permissions on the AdminSDHolder object so they can reset passwords on users in "protected groups" (i.e. Domain Admins, Schema Admins, etc..). During testing the password reset wo

Re: dyndns for webservers

2009-10-08 Thread Adam Greene
Ben, Thanks, belatedly, for your reply. This is a very useful perspective for me. I appreciate it. Adam On 10/6/2009 7:37 PM, Ben Scott wrote: > On Tue, Oct 6, 2009 at 5:58 PM, Adam Greene wrote: > >> We are considering suggesting dynamic DNS to associate his webserver domain >> name with

RE: Remote Backup Solutions

2009-10-08 Thread Sam Cayze
Mozy Pro. +1 Forget VPN. You will love it. From: Martin Blackstone [mailto:mblackst...@gmail.com] Sent: Thursday, October 08, 2009 3:48 PM To: NT System Admin Issues Subject: Remote Backup Solutions I'm looking for some kind of remote backup solution

Remote Backup Solutions

2009-10-08 Thread Martin Blackstone
I'm looking for some kind of remote backup solution for about 60 road warriors. Something that when the users connect up via VPN would be smart enough to copy their new/changed files up to my storage here at home. I've tried the offline files and folders and have never been 100% sold on the relia

Re: True file type utility

2009-10-08 Thread Ben Scott
On Thu, Oct 8, 2009 at 3:21 PM, David Lum wrote: > Anyone know of a tool that could can say, 200 files that have had the file > extension removed and determine what kind of file it is? I found one but it > was klunky… The "file" command included with practically all Linux/Unix distributions wil

Re: infected box

2009-10-08 Thread Ben Scott
On Thu, Oct 8, 2009 at 2:35 PM, David W. McSpadden wrote: >> You could pick one drive, clean that drive, reinsert that drive, and >> tell the RAID implementation to re-mirror from that drive to the other >> one. > > But what you suggest is still getting the H1N1 into the second egg via the > re-m

Re: Adding a server to the domain

2009-10-08 Thread James Rankin
Or might be 645, I forget :-( 2009/10/8 Fogarty, Richard R CTR USA USASOC > Anyone know what Event IDs that are created when a server is added to the > domain? I’m trying to figure out when our ops guys are adding new servers > to the domain so I can ensure they’re properly secured. Sometimes

Re: Adding a server to the domain

2009-10-08 Thread James Rankin
Is it 4741 Security, offhand? 2009/10/8 Fogarty, Richard R CTR USA USASOC > Anyone know what Event IDs that are created when a server is added to the > domain? I’m trying to figure out when our ops guys are adding new servers > to the domain so I can ensure they’re properly secured. Sometimes

RE: Patch management software question, again...

2009-10-08 Thread Free, Bob
You could try scripting pendmoves with a for loop http://technet.microsoft.com/en-us/sysinternals/bb897556.aspx Or read HKLM\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations value directly in a script Might be some other ways as well but I believe those would catch the

Adding a server to the domain

2009-10-08 Thread Fogarty, Richard R CTR USA USASOC
Anyone know what Event IDs that are created when a server is added to the domain? I'm trying to figure out when our ops guys are adding new servers to the domain so I can ensure they're properly secured. Sometimes that means checking up after the fact. Although we do have a proper change managem

forward email to fax?

2009-10-08 Thread Jeff Brown
In a windows environment(W2k3) with Ex2k3 is there a way to forward email delivered to a mailbox to a fax device and send without user input? would always be going to same fax number. Any ideas, recommendations? Anyone using GFI, Faxmaker, can it be used this way, to forward from mailbox and autom

Re: REPLMON shows errors, but only in 1 direction ...

2009-10-08 Thread Michael Leone
On Thu, Oct 8, 2009 at 3:42 PM, Erik Goldoff wrote: > can you map an administrative share (c$) from one of the other DCs Yes, I can map to the administrative share on both DCs, from the 2 in question, and also from other DCs. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <

Re: REPLMON shows errors, but only in 1 direction ...

2009-10-08 Thread Erik Goldoff
can you map an administrative share (c$) from one of the other DCs On Thu, Oct 8, 2009 at 12:03 PM, Michael Leone wrote: > Win2000 AD > > I have a site with 1 DC in it (name MJRSWDC001). This DC has > connections defined for 3 other DCs (in a different site) - names > WDC001, WDC002, WDC003. Rep

Re: Kiwi Syslog

2009-10-08 Thread Kurt Buff
Ah. Then you're now ready for the kilt. I congratulate you sir, and can recommend the Workmans: http://www.utilikilts.com/company/products/kilts/workmans/ Heh. On Thu, Oct 8, 2009 at 11:56, David W. McSpadden wrote: > I think at this point I have to say that I am out of diapers finally. > > >

True file type utility

2009-10-08 Thread David Lum
Anyone know of a tool that could can say, 200 files that have had the file extension removed and determine what kind of file it is? I found one but it was klunky... David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endp

Re: OT - Happy Thanksgiving to our Canadian Friends

2009-10-08 Thread Steve Ens
Thanks Mark, you know it is Thanksgiving in Canada when Tim's starts service their pumpkin spiced doughnuts... On Thu, Oct 8, 2009 at 2:15 PM, Reimer, Mark wrote: > Happy Thanksgiving (October 12th) to our Canadian Friends. Hopefully you > will get some/most/all of the weekend to enjoy with fami

OT - Happy Thanksgiving to our Canadian Friends

2009-10-08 Thread Reimer, Mark
Happy Thanksgiving (October 12th) to our Canadian Friends. Hopefully you will get some/most/all of the weekend to enjoy with family and friends. I understand the Americans have Columbus day on the 12th (don't know if they get a long weekend out of it). Remember our troops in Afghanistan, fr

RE: Off-the-wall request

2009-10-08 Thread Joseph Heaton
He thinks he's found it. Not sure what he used to find it, but apparently the Google Search appliance is doing bd things to this particular server... >>> Brian Desmond 10/8/2009 12:02 PM >>> Well what process is using the CPU time? You can look at per thread stacks (and cpu util) in Proces

RE: Off-the-wall request

2009-10-08 Thread Brian Desmond
Well what process is using the CPU time? You can look at per thread stacks (and cpu util) in Process Explorer for a given process. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08,

Re: Off-the-wall request

2009-10-08 Thread Christopher
Process explorer will let you view all the threads of a process and each one's CPU usage, as well as suspend or kill threads individually... I would think that woud be useful in your situation, no? On Thu, Oct 8, 2009 at 1:44 PM, Joseph Heaton wrote: > He's saying that Proc Explorer shows him t

Re: Kiwi Syslog

2009-10-08 Thread David W. McSpadden
I think at this point I have to say that I am out of diapers finally. -- From: "Kurt Buff" Sent: Thursday, October 08, 2009 2:49 PM To: "NT System Admin Issues" Subject: Re: Kiwi Syslog Does this mean you've graduation to wearing a kilt? Perhaps

RE: Off-the-wall request

2009-10-08 Thread Steven M. Caesare
Has he tried looking at the perfmon data exposed by IIS? -sc -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08, 2009 2:45 PM To: NT System Admin Issues Subject: RE: Off-the-wall request He's saying that Proc Explorer shows him the windows appl

Re: Kiwi Syslog

2009-10-08 Thread Kurt Buff
Does this mean you've graduation to wearing a kilt? Perhaps even a Utilikilt? On Thu, Oct 8, 2009 at 04:48, David W. McSpadden wrote: > Now you are assuming that I am wearing pants > > From: Roger Wright > Sent: Wednesday, October 07, 2009 4:21 PM > To: NT System Admin Issues > Subject: Re: K

Re: Patch management software question, again...

2009-10-08 Thread Joseph Heaton
Yep...understood. We're going to end up going with GFI LANGuard, which has an option to not reboot the server upon updates. However, I would still need to get a script, or something that can give me a report on what servers need to be rebooted. >>> Ben Scott 10/8/2009 11:09 AM >>> On Thu, Oc

RE: Off-the-wall request

2009-10-08 Thread Joseph Heaton
He's saying that Proc Explorer shows him the windows application, but not the dependencies below it. The issue is that we've got a webserver that is having the CPU pegged. The web guy has gone in, and systematically shut each application pool down, with no change in the CPU usage. He's basica

RE: Once more - software RAID

2009-10-08 Thread Mike Hoffman
Since 2003 it has been ok, but it's a performance thing. I've seen a few SBS servers where someone forgot to configure the on-board RAID before the system was installed and no-one could be bothered to image/repartition/restore. It does allow for interesting ways of mirroring data, like having 3/

RE: Off-the-wall request

2009-10-08 Thread Tim Evans
What else does he need? If Process Explorer doesn't have it, I'd bet that Process Monitor does. ...Tim -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08, 2009 11:34 AM To: NT System Admin Issues Subject: RE: Off-the-wall request Not sure...I

RE: Off-the-wall request

2009-10-08 Thread Steven M. Caesare
I think he needs to define "deep". -sc -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08, 2009 2:34 PM To: NT System Admin Issues Subject: RE: Off-the-wall request Not sure...I recommended Process Explorer too, but he is saying that doesn't go

Re: infected box

2009-10-08 Thread David W. McSpadden
Ok so I am scrambling the egg. Understood. But what you suggest is still getting the H1N1 into the second egg via the re-mirror process??? Either way this doesn't seem good. With maybe the exception of a USB Boot Scanner... -- From: "Ben Scott"

RE: Barracuda 4.0.x

2009-10-08 Thread Richard Stovall
The release notes say that you must start with a new database. I could be reading it incorrectly, but I don't think restoring the Bayesian db (which you can backup) is possible. I really don't understand why this is so hard for them. They do everything else so well (IMHO) that it just doesn't ma

RE: Off-the-wall request

2009-10-08 Thread Joseph Heaton
Not sure...I recommended Process Explorer too, but he is saying that doesn't go deep enough... >>> "Steven M. Caesare" 10/8/2009 11:31 AM >>> I'm sorry... I read too fast What other info do you need? -sc -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thu

RE: Web Conferencing

2009-10-08 Thread Ralph Smith
Thanks for the suggestion. I looked at Yugma what seems like many years ago and had some problems, but we'll try it again. From: Sherry Abercrombie [mailto:saber...@gmail.com] Sent: Wednesday, October 07, 2009 2:55 PM To: NT System Admin Issues Subject: Re: W

RE: Off-the-wall request

2009-10-08 Thread Steven M. Caesare
I'm sorry... I read too fast What other info do you need? -sc -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08, 2009 2:02 PM To: NT System Admin Issues Subject: Off-the-wall request I need a tool to identify a PID, and what's associated

RE: Off-the-wall request

2009-10-08 Thread Steven M. Caesare
Sysinternals Process Explorer. -sc -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 08, 2009 2:02 PM To: NT System Admin Issues Subject: Off-the-wall request I need a tool to identify a PID, and what's associated with it. Proc Explorer doesn't

RE: ADSL router with different subnets on each port

2009-10-08 Thread Steven M. Caesare
OpenBSD J -sc On Thu, Oct 8, 2009 at 1:39 PM, HELP_PC wrote: I am looking for an ADSL router where I can address different subnets (at least 2) on each of the normal 4 port hub included Is it possible ? TIA GuidoElia HELPPC ~ Finally, powerful endpoint security t

RE: Patch management software question, again...

2009-10-08 Thread Sam Cayze
+1 I don't like the sounds of this at all. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, October 08, 2009 1:10 PM To: NT System Admin Issues Subject: Re: Patch management software question, again... On Thu, Oct 8, 2009 at 2:03 PM, Joseph Heaton wrote

Re: infected box

2009-10-08 Thread Ben Scott
On Thu, Oct 8, 2009 at 1:33 PM, David W. McSpadden wrote: > Or take one drive out, clean it, put it back, take the other > drive out, clean it, put it back.  Making sure to put back > where they belong and then boot??? Yikes! That will still break the mirror. Or worse, give you two divergen

RE: Once more - software RAID

2009-10-08 Thread Matthew W. Ross
It sounds like Software Raid has improved on Windows since the last time I've tried it. We used it on a Windows 2000 server, with much fussing and failing. Since then, we have been using any available alternative, including built in raid on intel chipsets, (quite good actually, Especially the Ma

RE: ADSL router with different subnets on each port

2009-10-08 Thread Mike Hoffman
If you want a cheaper option then lots of the Netgear models allow additional IP addresses to be added to devices and to reserve the leases. Do you need VLANs, or just routing? Mike From: Rohyans, Aaron [mailto:arohy...@dpsciences.com] Sent: 08 October 2009 7:13 PM To: NT System Admin Issues Su

RE: Off-the-wall request

2009-10-08 Thread Richard Stovall
Are you sure Process Explorer won't give you what you need? It can do a lot that isn't immediately obvious. http://www.microsoft.com/emea/spotlight/sessionh.aspx?videoid=359 (Silverlight required) -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, Octobe

Re: Off-the-wall request

2009-10-08 Thread Ben Scott
On Thu, Oct 8, 2009 at 2:01 PM, Joseph Heaton wrote: > I need a tool to identify a PID, and what's associated with it. TASKLIST /FI "PID eq 5150" ??? -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: ADSL router with different subnets on each port

2009-10-08 Thread Ben Scott
On Thu, Oct 8, 2009 at 1:39 PM, HELP_PC wrote: > I am looking for an ADSL router where I can address different subnets (at > least 2) on each of the normal 4 port hub included I don't know if DSL in your part of the world works the same as it does here in the Excited States of America, but over

RE: Sysinternals does it again

2009-10-08 Thread Mike Hoffman
It's fast as well. We had just started playing with it when the phone rang - it was someone from ShadowProtect - spooky!! We've decided to try it in combination with the USMT for a windows 7 migration next week Mike From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: 08 October 2009 7:

RE: infected box

2009-10-08 Thread Bob Fronk
Yep. We also require original install disks and Windows stickers on the PC (unless they have a retail key). If we have old stuff lying around that would make their PC better (memory, etc) we will let them have it. But usually they opt for new PCs if we tell them the repair will cost them mone

RE: infected box

2009-10-08 Thread Mike Hoffman
Have you tried MDaRT - and the Microsoft spyware scanner on that? IT works well at files "in the loop" of the windows start-up process. Then an SFC scan and run spybot (or another) from a data stick. At this point the machine will still be covered with infected files but they won't be active - y

RE: ADSL router with different subnets on each port

2009-10-08 Thread Rohyans, Aaron
Is the built-in ADSL port a requirement? If not, there are plenty of options out there to do what you want... (Cisco 871, 877, ASA 5505, etc) If so, the 857w has a built-in 4 port switch as well as ADSL, but will not allow you to utilize more than 1 wired VLAN. You can, however, use Secondary

RE: Adobe CS4

2009-10-08 Thread Steven M. Caesare
I say, "Ooof". Friggin' Adobe. They seem to have a complicated way of doing everything. -sc On Wed, Oct 7, 2009 at 10:38 PM, David Lum wrote: Wow, that was unclear wasn't it? CS4 server config: Program Folder = C:\Program Files\Common Files\Adobe Data folder = E:\Data Yo

Re: Patch management software question, again...

2009-10-08 Thread Ben Scott
On Thu, Oct 8, 2009 at 2:03 PM, Joseph Heaton wrote: > But, my sup here wants to be able to schedule the updates, install > them, but NOT reboot. I don't think you want to do that. That means you've got some files on the system updated, but others pending move, so you could end up running new

RE: Sysinternals does it again

2009-10-08 Thread Steven M. Caesare
Ooooh Thank Tim. -sc From: Tim Evans [mailto:tev...@sparling.com] Sent: Thursday, October 08, 2009 10:02 AM To: NT System Admin Issues Subject: Sysinternals does it again http://technet.microsoft.com/en-us/sysinternals/ee656415.aspx This is very cool, especially with Windows 7'

Re: Patch management software question, again...

2009-10-08 Thread Ben Scott
On Thu, Oct 8, 2009 at 1:43 PM, Joseph Heaton wrote: > How can you tell it not to reboot the server?  The only setting I've found is > the > GP setting which tells it not to automatically reboot if there's a user > logged in. Configure WUAU to auto download, but notify before installing. Now

Re: Patch management software question, again...

2009-10-08 Thread Joseph Heaton
Yep, I know that's the "normal" way to do it, lots of you guys, and myself where I was before, do it that way. But, my sup here wants to be able to schedule the updates, install them, but NOT reboot. He then wants a report, that tells us what servers are pending a reboot due to the updates, so

Re: infected box

2009-10-08 Thread Steve Ens
We do the same (charge them coffee or something) unless it requires h ardware...then they pay. On Thu, Oct 8, 2009 at 12:31 PM, Bob Fronk wrote: > Fortunately my blocks and protections at work seem to keep our malware to > a very low minimum. However, as a “perk” we work on employee PCs. We s

Off-the-wall request

2009-10-08 Thread Joseph Heaton
I need a tool to identify a PID, and what's associated with it. Proc Explorer doesn't do deep enough for what we're trying to do. We know the PIDs, but not what is below that, that could be using it... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: Adobe CS4

2009-10-08 Thread David Lum
Tried, but failed. My boss also contacted the GM / VP of Adobe���s Creative Suite Design and Web components and magically we got called shortly thereaft�.and we were then promised a call from the proper tech within 90 minutes.. Dave From: John Cook [mailto:john.c...@pfsf.org] Sent: Thursd

Re: Patch management software question, again...

2009-10-08 Thread James Kerr
I have a WSUS GPO for servers, they are set to auto download and notify for install. Workstations GPO is auto download and schedule the install. - Original Message - From: "Joseph Heaton" To: "NT System Admin Issues" Sent: Thursday, October 08, 2009 1:43 PM Subject: Re: Patch manage

Re: ADSL router with different subnets on each port

2009-10-08 Thread Erik Goldoff
Don't know about the actual residential version with ADSL circuitry, but the Netscreen 5G firewall at 10.3 or higher firmware can have one WAN, and then independent with the remaining 4 LAN ports ... by default the wizard will set up to independent subnets with 2 ports each If you can't get a 5GT

Re: Patch management software question, again...

2009-10-08 Thread Joseph Heaton
Ben, How can you tell it not to reboot the server? The only setting I've found is the GP setting which tells it not to automatically reboot if there's a user logged in. >>> Ben Scott 10/8/2009 9:09 AM >>> On Thu, Oct 8, 2009 at 11:30 AM, Joseph Heaton wrote: > The reasons we're moving away f

Re: infected box

2009-10-08 Thread andy
cool. best bet is to reformat / reinstall. on boxes like this I am disabling all web access. if they need something, they can remote desktop or map a drive. At 01:13 PM 10/8/2009, David W. McSpadden wrote: >I really like the slave the drive and scan from a clean machine. > >From:

RE: ADSL router with different subnets on each port

2009-10-08 Thread Jason Morris
I use a Cisco 1811 in situations like that. Might find something smaller/cheaper than that though. Good luck, Jason From: HELP_PC [mailto:g...@enter.it] Sent: Thursday, October 08, 2009 12:40 PM To: NT System Admin Issues Subject: ADSL router with different subnets on each port I am

RE: ADSL router with different subnets on each port

2009-10-08 Thread Bob Fronk
I think the Cisco 827-4V does that... But I also think it is "end of life". You could get a Cisco router and put an ADSL card in it with a 4 port WIC. From: HELP_PC [mailto:g...@enter.it] Sent: Thursday, October 08, 2009 1:40 PM To: NT System Admin Issues Subject: ADSL router with different su

RE: Barracuda 4.0.x

2009-10-08 Thread Bob Fronk
That is why I have not pulled the trigger yet... I wonder if you could backup your database, then restore it after the upgrade? From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, October 08, 2009 8:45 AM To: NT System Admin Issues Subject: Barracuda 4.0.x Anyone upg

ADSL router with different subnets on each port

2009-10-08 Thread HELP_PC
I am looking for an ADSL router where I can address different subnets (at least 2) on each of the normal 4 port hub included Is it possible ? TIA GuidoElia HELPPC ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ ~

Re: infected box

2009-10-08 Thread David W. McSpadden
Or take one drive out, clean it, put it back, take the other drive out, clean it, put it back. Making sure to put back where they belong and then boot??? From: Erik Goldoff Sent: Thursday, October 08, 2009 1:25 PM To: NT System Admin Issues Subject: Re: infected box Then, in my opinion, yer

Re: infected box

2009-10-08 Thread Roger Wright
Have you tried VIPRE Rescue on this box? I ran into a bad infection once that would allow the MBAM installation to run. Had to rename the installation file to get it to run. Roger Wright ___ Sent from Tampa, FL, United States On Thu, Oct 8, 2009 at 1:05 PM, wjh wrote: > I've got a user's b

RE: infected box

2009-10-08 Thread Bob Fronk
Fortunately my blocks and protections at work seem to keep our malware to a very low minimum. However, as a "perk" we work on employee PCs. We see plenty of infected machines and our standard answer is "I will format it and re-install it, but I won't try to clean it". Once a PC is compromised

RE: infected box

2009-10-08 Thread Carol Fee
you have to rename mbam.exe to mb.exe . CFee From: wjh [mailto:nt...@hedgedigger.com] Sent: Thursday, October 08, 2009 1:05 PM To: NT System Admin Issues Subject: Re: infected box I've got a user's box now that has "securitytools" fake a/v virus. It delete

Re: infected box

2009-10-08 Thread Erik Goldoff
Then, in my opinion, yer mirror is *already* screwed ... remove one drive, and insert a fresh blank and let your screwed mirror rebuild whilst you work on cleaning the infection from the mirror partner you removed On Thu, Oct 8, 2009 at 1:21 PM, wjh wrote: > I'd be breaking a mirror, so I'm hes

R: infected box

2009-10-08 Thread HELP_PC
You may try combofix as well GuidoElia HELPPC _ Da: Len Hammond [mailto:lenhammo...@gmail.com] Inviato: giovedì 8 ottobre 2009 18.13 A: NT System Admin Issues Oggetto: infected box Hi people, I have a client with an infected box. It seems to have the "SafeFighter" trojan. Vipre

Re: infected box

2009-10-08 Thread David W. McSpadden
Your mirror is already smudged From: wjh Sent: Thursday, October 08, 2009 1:21 PM To: NT System Admin Issues Subject: Re: infected box I'd be breaking a mirror, so I'm hesitant to do this. Erik Goldoff wrote: see my previous post, remove the hard drive, install it as a slave in a se

Re: infected box

2009-10-08 Thread wjh
I'd be breaking a mirror, so I'm hesitant to do this. Erik Goldoff wrote: see my previous post, remove the hard drive, install it as a slave in a second, known secure system, and then scan/clean it from there without the OS on the infected drive active or in memory On Thu, Oct 8, 2009 at

Re: infected box

2009-10-08 Thread Erik Goldoff
see my previous post, remove the hard drive, install it as a slave in a second, known secure system, and then scan/clean it from there without the OS on the infected drive active or in memory On Thu, Oct 8, 2009 at 1:05 PM, wjh wrote: > I've got a user's box now that has "securitytools" fake a/v

Re: infected box

2009-10-08 Thread David W. McSpadden
I really like the slave the drive and scan from a clean machine. From: wjh Sent: Thursday, October 08, 2009 1:05 PM To: NT System Admin Issues Subject: Re: infected box I've got a user's box now that has "securitytools" fake a/v virus. It deleted malwarebytes from his machine. booted into

Re: infected box

2009-10-08 Thread wjh
I've got a user's box now that has "securitytools" fake a/v virus.  It deleted malwarebytes from his machine.  booted into safe mode to reinstall malwarebytes.  After installation the mbam.exe file was missing again.  I also ran Avast's bart CD and it only found two items, which did nothing to

Re: infected box

2009-10-08 Thread Matt Cross
I use a three-pronged approach that I keep stored on a small USB thumb drive that is labeled VIRUS CLEANER... First, I run Malwarebytes. After Malwarebytes, I run Combofix (download from bleepingcomputers.com, NOT combofix.org). After that, I install Avast and have it run a boot-time scan. After

Re: Once more - software RAID

2009-10-08 Thread Steve Ens
I used to run a weekly ghost as a do-it-yourself RAIDthe only issue was if a drive failed just before a scheduled ghost. I'd buy a RAID controller too, they are worth it in for the speed of the system, less hassle in the long run. On Thu, Oct 8, 2009 at 11:38 AM, wrote: > > I'll wait for fi

Re: infected box

2009-10-08 Thread David W. McSpadden
Like this. Also doing it this way you can run your Vipre without the rootkit issues. From: Erik Goldoff Sent: Thursday, October 08, 2009 12:35 PM To: NT System Admin Issues Subject: Re: infected box good advice already, but if all you really want is to save data off the drive before nuking

Re: infected box

2009-10-08 Thread David W. McSpadden
MSE will get. Vipre will get it from a dos boot. Use Msconfig and get it out of startup From: Len Hammond Sent: Thursday, October 08, 2009 12:12 PM To: NT System Admin Issues Subject: infected box Hi people, I have a client with an infected box. It seems to have the "SafeFighter" trojan.

Re: Once more - software RAID

2009-10-08 Thread RichardMcClary
I'll wait for final approval from our company's Network Architect. Some have hinted (and I'm prepared to go this way) that I might instead clone the drive to the second drive in the system. The system drive fails, then the swap works... - richard Ben Scott wrote on 10/08/2009 11:22:00 AM: >

Re: infected box

2009-10-08 Thread RichardMcClary
Provided, of coarse, it will boot into safe mode! You might need to run MBytes or VIPRERescue in "regular mode" first, then see if you can boot into safe mode. (Root kits are just so much fun!) Until BIOS root kits become common, fdisk will probably clean anything (and you'd mentioned flatteni

  1   2   >