Does anyone know if ISA 2006 configuration changes are specifically
required
in order to get Sun's Secure Global Desktop operational?
My scenario is this:
We have a SGD server on our local LAN. A laptop on our local LAN can
access SGD no problem using an internal ip address in the browser - as
Does anyone know if ISA 2006 configuration changes are specifically
required
in order to get Sun's Secure Global Desktop operational?
My scenario is this:
We have a SGD server on our local LAN. A laptop on our local LAN can
access SGD no problem using an internal ip address in the browser - as
What is your actual network configuration?
Internet - HW FW - SGD - ISA Proxy - Internal Client
Or something else?
Cheers
Ken
-Original Message-
From: Robert Jackson [mailto:r...@walkermartyn.co.uk]
Sent: Tuesday, 9 February 2010 4:13 PM
To: NT System Admin Issues
Subject: SSGD ISA
Hi Ken,
It's more like the SGD server is behind the ISA Proxy.
Our ISA server is really only used as a proxy server and not
a full blown ISA protection device (if that makes sense). We
don't have a dedicated DMZ.
So the diagram becomes:
Internet --- HW F/W -- Network Switch(es)
Can you expand on that? I don’t see how a schema change in itself causes
problems. I'm assuming you mean multiple domains/forests/trusts?
(Our site is W2K3 D/FFL - One domain/forest, lots of pretty W2K3 boxes :)
-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com]
I remember a few years back there was some good discussion on what file
types/extensions to block from emails with regards to computer virus threats
so I've got a small spin ...
I'm looking to see what extensions/file types folks are excluding from their
AntiVirus software on-access and
I think Brian means that environments that already have problems (e.g. in
replication) may experience issues when you propagate schema changes, or
changes to the PAS.
Cheers
Ken
-Original Message-
From: Palmer, Neal [mailto:npal...@uwic.ac.uk]
Sent: Tuesday, 9 February 2010 6:55 PM
How does one test if a SCSI drive is failing in an active system? I've got a
machine that keeps crashing and I'm beginning to suspect hardware issues.
What's the best way to conduct non-destructive testing on the SCSI drive in
the machine? I need to keep the data and O/S, as it's our time and
I'm very familiar with failover clustering in 2003, but not in 2008. A
colleague setup a 2008 cluster on our network and it's having some issues.
Unfortunately he is no longer with the company. We opened a case with MS
regarding this and the tech is asking me about the network configuration.
The
is this in a generic system, or something like HP with insight manager ?
or can you enable S.M.A.R.T. monitoring to record stuff like spin up times,
error counts, etc ?
On Tue, Feb 9, 2010 at 8:35 AM, John Aldrich
jaldr...@blueridgecarpet.comwrote:
How does one test if a SCSI drive is failing
Getting ready to P2V a couple file servers. OS is C: and all file
shares are on D:, E:, etc. Our plan is to end up with the file share
drives on their own Volumes on our ISCSI SAN and use the ISCSI connector
on the VM guest over it's own VNIC. This is the way we do it now with
Virtual SQL
Chris,
Only the Public NIC can be teamed, but even in some of the Windows 2003
Documentation said, if the teaming is causing problems, it might have to
be broken accordingly to troubleshoot the problem.
Teaming of NIC's on the Private NIC should not be done.
I still go with the old
Generic, white box system with an Intel motherboard.
John-AldrichTile-Tools
From: Erik Goldoff [mailto:egold...@gmail.com]
Sent: Tuesday, February 09, 2010 9:02 AM
To: NT System Admin Issues
Subject: Re: Drive testing for SCSI drives in an active system
is this in a generic system, or
Do any of you know of the open-source app, Drive Fitness Test? I suppose I
could also download Prime95 to test the CPU and memory to see if there is
an issue developing there.
John-AldrichTile-Tools
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, February 09, 2010
Google this, be happy:
Guidelines for anti-virus exclusions
(taken from the title of a document I have from Microsoft)
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764
From: Erik Goldoff [mailto:egold...@gmail.com]
Sent: Tuesday,
The following article gives a pretty good list of exclusions, it's what we've
based ours on here.
http://myitforum.com/cs2/blogs/scassells/archive/2007/05/14/what-anti-virus-scanning-exclusions-should-be-considered-for-system-and-servers.aspx
Joe Heaton
Erik Goldoff egold...@gmail.com
Am I correct in thinking if I have two Terminal Servers it's pretty easy to set
up a farm to get load balancing and redundancy - if one dies, the users are
redirected to the good one and the biggest change is a performance hit?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
Hi,
Can you please elaborate on how, exactly:
ISA/SGD/Internal Clients
Is laid out?
Additionally, if you enable logging in ISA Server, and then test access using a
non-local client, what do you see in the ISA Server logs? If you then compare
to a local client accessing (via public IP)
Please get some of the minidump files generated during these crashes, and make
available to Brian or I for analysis.
Also, is it possible to consider a slightly smaller logo/signature?
Cheers
Ken
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, 9 February 2010 10:51 PM
You really need to learn DFS. It's not complex, but will make your life much
easier.
If you have no legacy problems with your current setup, I'd consider P2V-ing
your current setup (to preserve all the current settings) and then transition
to DFS. That would enable you to add in Win2k8 R2
Looks like the answer is no.
http://www.generation-nt.com/us/answer/windows-2003-server-dhcp-server-subne
t-selection-option-help-41966722.html
-Malcolm
From: Senter, John [mailto:john.sen...@etrade.com]
Sent: Monday, February 08, 2010 10:22 AM
To: NT System Admin Issues
Subject: MS
Depends on the server and its role.
1) Block the PST's from being saved on the server, this isn't supported
by Microsoft anyways. ( I know people do it, but it's a great way to run
servers out of space and cause everyone not to work)
DBF/MDF/LDF/NDF is for SQL servers and Database Servers alike
I will look it to DFS some more. But I only have two file servers, I
don't plan on consolidating them and don't plan on any more for a long
time.
From: Ken Schaefer [mailto:k...@adopenstatic.com]
Sent: Tuesday, February 09, 2010 9:00 AM
To: NT System Admin
setting up the server 'farm' in NLB is pretty straightforward , but bear in
mind that NLB uses TCP/IP connectivity to determine availability. (most
recent I've set this up is Win2003 ) NLB really doesn't look into CPU or
application availability.
On Tue, Feb 9, 2010 at 9:59 AM, David Lum
thanks, and just FYI, this is not restricted to severs, also looking for
workstation exclusions to ensure decent performance.
working with some state agencies and *hope* discovery meetings have
uncovered any local applications with large files, had to explain to them
that if you write 10k to a 2gb
On the logo/signature, not really. About all I can do is select either plain
text or HTML. If I choose HTML, that’s the only signature I have available. :-(
I can switch though.
From: Ken Schaefer [mailto:k...@adopenstatic.com]
Sent: Tuesday, February 09, 2010 9:56 AM
To: NT System Admin
Minidump on the way.
Thanks,
John Aldrich
IT Manager,
Blueridge Carpet
706-276-2001, Ext. 2233
From: Ken Schaefer [mailto:k...@adopenstatic.com]
Sent: Tuesday, February 09, 2010 9:56 AM
To: NT System Admin Issues
Subject: RE: Drive testing for SCSI drives in an active system
Please get
Please excuse me for going off topic.
I have been a member of this forum for awhile; another co-worker would also
like to become a member. However, I completely forget how I actually sign up
for this forum. Did not see any links on the logon page for new membership.
I just need someone to
Sunbelt's website, and look for the community tab.
On Tue, Feb 9, 2010 at 9:33 AM, Gary Babb gsb...@hotmail.com wrote:
Please excuse me for going off topic.
I have been a member of this forum for awhile; another co-worker would also
like to become a member. However, I completely forget how I
We have the need to collaborate on the Internet on an XLS doc, and we
kinda need it quickly. Is something like Windows Live for Business the
quickest way to get a one-off requests like this going?
Tia,
Sam
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~
http://www.sunbeltsoftware.com/Communities/
or directly by sending email to : ly...@lyris.sunbeltsoftware.com
with 'Subscribe ntsysadmin '
in the body of the message ( without the single quotes )
On Tue, Feb 9, 2010 at 10:33 AM, Gary Babb gsb...@hotmail.com wrote:
Please excuse me for going
Microsoft online has a SharePoint offering, about USD 15 per user per month.
There are lots of in-house answers to this question but they involve detailed
licensing scenarios.
WSS, for example, MIGHT be free. But it depends.
Regards,
Michael B. Smith
Consultant and Exchange MVP
Google Docs ?
On Tue, Feb 9, 2010 at 10:33 AM, Sam Cayze sam.ca...@rollouts.com wrote:
We have the need to collaborate on the Internet on an XLS doc, and we
kinda need it quickly. Is something like Windows Live for Business the
quickest way to get a one-off requests like this going?
DFS gives you the ability to swap things around in the background without user
impact, as well as replicate things without much work.
It's abstraction of the user experience from the backend infrastructure. Just
like other well established protocols. You wouldn't do without DNS would you?
Thank you.
Regards,
Gary
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
The time was wrong on a PDC for one of our domains, about 3 minutes off. We
have since changed the NTP server data on that server and it has the correct
time now. Do I really have to wait 8 hours before the workstations sync to the
correct time? Is there a way to make them sync sooner? Other
use psexec and a list of computers in a text file to send the command *w32tm
/resync*
On 9 February 2010 15:53, James Kerr cluster...@gmail.com wrote:
The time was wrong on a PDC for one of our domains, about 3 minutes off.
We have since changed the NTP server data on that server and it has
What happens when you run:
w32tm /resync
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Tuesday, February 09, 2010 10:54 AM
To: NT System Admin Issues
Subject: Workstation time sync
The time was wrong on a PDC for one of our domains, about 3 minutes off.
We have since
Any gurus on the list that could talk to me offline about this?
Thanks,
Chris Bodnar, MCSE
Sr. Systems Engineer
Infrastructure Service Delivery
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: christopher_bod...@glic.com
Phone:
On 9 Feb 2010 at 9:33, Sam Cayze wrote:
We have the need to collaborate on the Internet on an XLS doc, and we
kinda need it quickly. Is something like Windows Live for Business the
quickest way to get a one-off requests like this going? Tia, Sam
Quickest, esp. for a 1-time deal?
On 9 Feb 2010 at 10:33, Gary Babb wrote:
Please excuse me for going off topic.
I have been a member of this forum for awhile; another co-worker would also
like to become a member. However, I completely forget how I actually sign up
for this forum. Did not see any links on the logon page
Thats a good idea, thanks for that.
James
- Original Message -
From: James Rankin
To: NT System Admin Issues
Sent: Tuesday, February 09, 2010 10:51 AM
Subject: Re: Workstation time sync
use psexec and a list of computers in a text file to send the command w32tm
/resync
In the interest of not giving you something else to learn...
What I essentially did was:
Create a volume on the SAN.
Attached volume to file server
robocopy with /mir /sec /r:1 /w:10 (mirror changes, apply security retry
once, wait 10 seconds if the file is busy)
Repeated daily until my scheduled
Hi all,
After a Windows reinstall I find that the backspace key is acting as the
delete key. I have searched around how to change the key mappings but I have
just found tools from Microsoft that doesn't let me to change that or regedit
settings that are not very clear.
Any idea?
Miguel
OK, here is the setting in question: System settings: Use Certificate
Rules on Windows Executables for Software Restriction Policies
and this relates to the regkey
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifier\AuthenticodeEnabled.
Now, if I understand correctly,
I was thinking about doing that also. I don't have a lot of shares to
re-create either.
From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Tuesday, February 09, 2010 10:50 AM
To: NT System Admin Issues
Subject: Re: File Server Migration to VM
In the
Is there a way to disable low disk space notices in Win2008? I ran across
this article:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;q188074ID=KB;EN-US;q188074
but this doesn't appear to work in 2008. I have a volume that only contains
a large page file and I'm just trying to stop it
Sure - strong assembly signing.
It serves to validate that the executables you are loading are actually from
who they say they are from.
Regards,
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com
-Original Message-
From: Christopher
I am not even sure what the subject of this should be. I have a server, it's
about 3 years old, the warranty expires in 15 days. It runs a %mission
critical App%. This App is going to be replaced with %new mission critical
app%. This server meets the hardware requirements for %new app% just
What's the MTBF of the server at 3 years? The vendor should be able to tell you
that.
I typically consider the life-time of a server at 3 to 4 years; after that,
they tend to start breaking down more often.
That doesn't mean you won't find the odd outlier that has been running for 6
years
I get an error trying to run Seatools to test my SCSI drive, even after
installing .Net 2.0 and all the updates. Anyone got any suggestions for
error checking software to see if the drive is having issues? O/S is Win2k
Server.
John-AldrichTile-Tools
~ Finally, powerful endpoint security
We recycle servers like that downward from mission critical to lesser important
things. That satisfies the bean counters and keeps mission critical on new
solid hardware. So, do you have an older server that could be replaced with
this less older server.
As for the bean counters that is
It really depends, we have mission critical apps running on servers that
are 4+ years old. Extended service contracts have been purchased from mfg
(HP) for those.
FWIW, I've had HP/Compaq servers that have run until we shut them down for
over 10 years with little more than a power supply being
I almost agree with Michael but he would have more time on servers than me,
I think. That said I have had to keep old servers up and working until they
die and as long as I fully document my objections I am covered. If there
were no warranty available I would push back very hard but the bean
I get the value of checking for strong signing, but why is it
bothering to check all executables if I'm not even using software
restriction policies? The setting explicitly says Use Certificate
Rules on Windows Executables for Software Restriction Policies and
suggests that, when used with SRS
1. Ask the bean counters what their depreciation schedule is on servers. If
it's 3 years like many, they may not be doing their ROI correctly.
2. Ask how much money will be lost if the server is down for 72 hours due to
a hardware failure. Does it offset the $4500? Do an ROI on a couple of even
This is already a good conversation, Thanks guys. Currently I am not sure I
have any objections other than its old. Well, so is my cat, but I am not
getting a new one because the old cat is still just fine.
Is there anything, besides MTBF that I should consider?
From: Jon Harris
Does this server meet the hardware requirements for Windows Server 2008r2 ?
If you're going to keep it at least three more years, you want to be running
an OS that's still properly supported for your mission critical application.
Also, if the existing hard drives have been spinning constantly for
Point three is an excellent point. If the life of the app extends beyond a
couple of years then moving it around and all that downtime/hassle negates any
perceived loss of RoI.
-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org]
Sent: Tuesday, February 09,
I, personally, would consider replacing the disks when you're rebuilding the
server. After 3-4 years of running constantly, I would expect the drives to
start showing their age, but that's just me. I know enterprise drives are
built to last longer, but still, 3-4 years is a LONG time for a disk to
Typically there are all kinds of nasty things in the system log if a drive
is failing. Anything there?
I have used Hard Disk Sentinel to gain some visibility into drive issues in
the past. YMMV.
http://www.hdsentinel.com/
Good luck (and prepare now for disaster),
RS
On Tue, Feb 9, 2010 at
Wish we could renew some of our servers... some are nearing the 10 year
mark. We had a Dell PowerEdge that was retired after 12 years of
service without any major issues.
_
Cameron Cooper
System Administrator | CompTIA A+ Certified
Aurico Reports, Inc
Phone:
No, nothing really in the log files
. The only thing in the system log that
gave me pause is this: dmboot: Volume Volume1 (C:) started in failed
redundancy mode. Not sure what that means
. Ive rebuilt this server from
scratch once, but Id rather not do it again.
Thanks,
John Aldrich
IT
FWIW, this is NOT a RAID drive. It was originally, but then the system
crashed and we barely got the data back from one of the two drives and had
to reload the data from the emergency mirror.
Thanks,
John Aldrich
IT Manager,
Blueridge Carpet
706-276-2001, Ext. 2233
-Original Message-
The failed redundancy message almost certainly refers to a failed software
mirror.
On Tue, Feb 9, 2010 at 1:01 PM, John Aldrich
jaldr...@blueridgecarpet.comwrote:
FWIW, this is NOT a RAID drive. It was originally, but then the system
crashed and we barely got the data back from one of the two
Well, good news is that it appears the hard drive isn't having any issues,
at least according to HDSentinel. Now I just have to figure out why Vipre is
apparently causing issues. :-(
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, February
Hmm. interesting. It was not set up as a mirror. at least when we rebuilt
the machine awhile back. I won't worry about that error then.
John-AldrichTile-Tools
From: Richard Stovall [mailto:rich...@gmail.com]
Sent: Tuesday, February 09, 2010 1:07 PM
To: NT System Admin Issues
Subject: Re:
I don't necessarily agree that this is a bad idea. If you extend the
warranty, ensuring that the response time is what you need, and
potentially replace the spinning bits (drives, fans, etc.), I think
you should be fine.
However, this assumes that the server is redundant in the usual ways:
Have you tried another keyboard, or an external one if a laptop?
Don Guyer
Systems Engineer - Information Services
Prudential, Fox Roach/Trident Group
431 W. Lancaster Avenue
Devon, PA 19333
Direct: (610) 993-3299
Fax: (610) 650-5306
don.gu...@prufoxroach.com
From: Miguel Gonzalez
I have just tried and it didn't work either.
I think I know what is the issue. It works directly plugged in but it does this
erratic behavior when connected through an Iogear KVM.
I managed to install a software called keytweak. When pressing delete and
backspace I get the same code.
Sounds like your KVM is messing things up. Maybe time to buy something
better.
John-AldrichTile-Tools
From: Miguel Gonzalez [mailto:miguel_3_gonza...@yahoo.es]
Sent: Tuesday, February 09, 2010 2:57 PM
To: NT System Admin Issues
Subject: RE: backspace working as the delete key
I have
+1 I like this suggestion a lot.
I ran into a similar issue at a client and I used VM to split the difference.
SBS 2003 Server was on 5yr old Dell and no extended warranty available. Bought
new server for about $5K (2008 Server OS) and VM'd their SBS 2003 with Hyper-V.
If you count time this
I wanted to OCS it instead of Skype that the President is trying to show
down everybody’s trough.
So I downloaded the trial and setup a new VM (2008 R2).
Now it needs Forest Prep, Domain Prep etc.
Honestly I’m a bit scare of doing the AD updates to extend the schema,
should I be? What could
Did this a few times for different reasons with no issues. Just make
sure you backup AD before you extend the schema.
Don Guyer
Systems Engineer - Information Services
Prudential, Fox Roach/Trident Group
431 W. Lancaster Avenue
Devon, PA 19333
Direct: (610) 993-3299
Fax: (610) 650-5306
+1 have a backup and you should be good to go.
Have done this at 20 locations so far with no issue.
From: Don Guyer [mailto:don.gu...@prufoxroach.com]
Sent: Tuesday, February 09, 2010 12:31 PM
To: NT System Admin Issues
Subject: RE: Microsoft Office Communication Server 2007 R2
Did this a few
John Aldrich wrote:
Sounds like your KVM is messing things up. Maybe time to buy something
better.
I finally managed changing the mapping with keytweak. Yes, this KVM
doesn't look to be good
Thanks!
Miguel
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~
Trying to migrate to SBS 2008 from regular 2000 server. Not SBS, and no
pre-existing Exchange installations.
Has anyone done this before? I have the answerfile in the root of a USB
thumbdrive, and the whole install seems to be taking place. No migration
wizard ever appears however. On its
I'm assuming you mean multiple domains/forests/trusts?
It *could* happen regardless of the number of domains or forests if you have a
lot of GCs and the PAS does a full replication. Think of a branch office
scenario with LOTS of DCs on lousy links.
This got a fair amount of consideration from
Minor issue, but it caused me to fumble for a few minutes
I was looking over my Group Policies, and couldn't find them.
I tracked it down, but need some help understanding what I was looking at.
Win2k3 R2 domain, FFL/DFL.
I started gpedit.msc via Start/Run on my XP SP3 workstation, and
I'm not sure I understand.. running gpedit.msc by itself just gets you
into the local policy, this is expected.
On Tue, Feb 9, 2010 at 4:24 PM, Kurt Buff kurt.b...@gmail.com wrote:
Minor issue, but it caused me to fumble for a few minutes
I was looking over my Group Policies, and couldn't
Whoa. They've done some serious updating to those articles in the last couple
of months. I've not seen those mentioned in any of the other lists I read -
where did you get those Bob? From your PFE or TAM? Or someplace more public?
Regards,
Michael B. Smith
Consultant and Exchange MVP
That's fine, but when launched from ADUC, I get what seems to be
essentially the same interface as gpedit.msc, except that it's
pointing to the domain.
By launched from ADUC, I mean I open ADUC on my workstation,
navigate to the OU in question, select Properties from the context
menu, select the
Are you using an USB keyboard with a PS2 converter to plug into the KVM. I have
seen what you described happen that way sometimes.
From: Miguel González Castaños [miguel_3_gonza...@yahoo.es]
Sent: Tuesday, February 09, 2010 4:51 PM
To: NT System Admin
Not necessarily. When you add attributes to the PAS, while everything doesn't
re-replicate, things still get touched. What can happen is say you have a
distributed environment and you have two DCs replicating.
DC-A runs garbage collection and cleans up a bunch of tombstoned objects
DC-B hasn't
The PFE who came onsite showed us
http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx#BKMK_KnownIssues
which is actually maintained by support folks.
He said a lot of it comes from actual cases and there is a lot of input from
folks like himself. It is very dynamic, I actually
+1. Backup AD and do it. I have never had issues with schema updates like
this.
On Feb 9, 2010 1:25 PM, Greg Olson gol...@markettools.com wrote:
+1 have a backup and you should be good to go.
Have done this at 20 locations so far with no issue.
*From:* Don Guyer
The basic elements of the Group Policy Editor are implemented in gpedit.dll, if
you launch it via gpedit.msc you get LGP (Local Group Policy) which is only the
most basic subset of the settings available as you noticed. I've seen it
described as the top level of the namespace which is actually
Why aren't you using Group Policy Management (GPMC)? That's the tool intended
for editing group policies that are applied to OUs. You can run that on a DC,
member server, or workstation and it always looks at domain policies.
By default, gpedit.msc views and modifies the local machine policy.
Perhaps only tangentially related, but are you running the Group Policy
Management Console? If you're getting to the editor directly from ADUC it
sounds like you might not be. It's a much more intuitve and all
encompassing way to view and manage GPOs, their settings, RSOP, yada, yada,
yada all
Up until Windows 2008, there was a Group Policy tab on the properties of OUs,
Domains, and Sites in ADUC and dssites. This was how you accessed policies and
edited them. GPMC came out of band sometime after 2003 shipped.
Thanks,
Brian Desmond
br...@briandesmond.com
c - 312.731.3132
Active
You used to get to the editor by right clicking on an object in ADUC where a
GPO could be linked, choosing properties from the context menu, and
selecting the Group Policy tab. Or something like that. The link now takes
you to the GPMC.
On Tue, Feb 9, 2010 at 9:58 PM, Carl Houseman
Thanks, I was starting to figure that out. I didn't really get into Active
Directory and group policy until after GPMC was released.
Carl
-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Tuesday, February 09, 2010 10:01 PM
To: NT System Admin Issues
Not that it matters one whit, but my understanding is that the GPMC came out
of the SBS group (SBS 2003) and was such a popular addition that it was
adopted overall.
On Tue, Feb 9, 2010 at 10:00 PM, Brian Desmond br...@briandesmond.comwrote:
Up until Windows 2008, there was a Group Policy tab
That's pretty much the kind of explanation I was looking for. Thanks!
On Tue, Feb 9, 2010 at 18:37, Free, Bob r...@pge.com wrote:
The basic elements of the Group Policy Editor are implemented in gpedit.dll,
if you launch it via gpedit.msc you get LGP (Local Group Policy) which is
only the
I was just doing an audit, not trying to modify/add/delete. Like I
said, not a huge deal.
On Tue, Feb 9, 2010 at 18:58, Carl Houseman c.house...@gmail.com wrote:
Why aren't you using Group Policy Management (GPMC)? That's the tool
intended for editing group policies that are applied to OUs.
Yup, it's installed, and I have created a couple of policies with it.
On Tue, Feb 9, 2010 at 19:00, Richard Stovall rich...@gmail.com wrote:
Perhaps only tangentially related, but are you running the Group Policy
Management Console? If you're getting to the editor directly from ADUC it
sounds
Ah. That's interesting. I wondered what that was about.
I so rarely do anything with GP that I tend to forget a lot of this stuff.
Makes it hard to keep up with it.
Thanks,
Kurt
On Tue, Feb 9, 2010 at 19:03, Richard Stovall rich...@gmail.com wrote:
You used to get to the editor by right
That seems like a bit of a stretch.
Much of the focus on GPMC was around simplifying enterprise management,
programmatically accessing GPOs and providing a scripting interface, why
would you need all that on SBS? I spent a couple of evenings with the
GPMC PM right around the time it launched
That sounds reasonable. I worked with quite a few SBS 2003 customers back
in 2003 / 2004 and I am fairly certain that SBS 2003 was the first OS that
shipped with GPMC installed. I was consulting all over the place at the
time and it was frustrating going to larger, non-SBS shops because the tool
IIRC, GPMC was supposed to ship with Server 2003 but got delayed. It was
made available before SP1.
From: Richard Stovall [mailto:rich...@gmail.com]
Sent: Wednesday, February 10, 2010 12:37 AM
To: NT System Admin Issues
Subject: Re: Reviewing my GPs, and found something I don't understand
100 matches
Mail list logo
