ceez

great, that is what I was afraid of...considering we're in Miami and they are in New York! thanks for the help, ceez :thumbsup!

hey everyone. We have a problem in a remote office where users feel free to 'reboot' a server when they think the network is 'running slow' instead of first rebooting their machines that has been on for days and working on AutoCAD and other cpu intensive applications. I know about the power setting of "what to do when I press the power button" which is currently set to "do nothing", but what about a power button hold down for 5-10 seconds? I know they could easily go around and pull the power cable, but it would probably deter them a little bit and have them contact us before they do any harm to the server. I dont seem to find anything via google other than the power scheme setting. any help would be appreciated :thumbsup ceez

hello everybody, I enabled file/folder auditing on one of our network shares. Now I get security events with the following information. I just want to learn how to read them correctly for when I am asked who's modified/deleted or moved. I am pasting an example of one of the events: Event Type: Success Audit Event Source: Security Event Category: Object Access Event ID: 560 Date: 4/23/2007 Time: 11:07:56 AM User: NEWYORK\MRenjifo Computer: BANSRV02 Description: Object Open: Object Server: Security Object Type: File Object Name: D:\Arch\26085.100 - TV Studio\Arch\Plans\X26085-FP01.dwg Handle ID: 6556 Operation ID: {0,647890796} Process ID: 4 Image File Name: Primary User Name: BANSRV02$ Primary Domain: NEWYORK Primary Logon ID: (0x0,0x3E7) Client User Name: MRenjifo Client Domain: NEWYORK Client Logon ID: (0x0,0x267A22BB) Accesses: READ_CONTROL ReadData (or ListDirectory) WriteData (or AddFile) AppendData (or AddSubdirectory or CreatePipeInstance) ReadEA WriteEA ReadAttributes WriteAttributes I see the folder/file path but what about all that info on the bottom "Acesses:". Read, write, append, readea, writeea, etc.... can someone help me out in being able to understand these?!?! thanks, ceez

thanks for the input guys.... i personally dont have an ipod (other mp3 player) but i assume that you dont need the itune s/w to even charge your ipod. All i know is that they can view their library and even share it with others. Yes our users need to have admin rights since it's an architectural firm and autocad requires that the users have full admin rights to their machines. It doesnt matter how many policies are written in stone some users will just install it, and for the most part, their superiors also have ipods and install it on their workstations or laptops. So killing it or 'crashing' it will eventually trigger issues with the 'higher' users. Unless we get their support then we will continue to see itunes installed on workstations....that's another story. I'll look over that inf idea and shoot it around with the IT director to see how we can apply this thanks guys, ceez ps- btw, cad technicians apparently are useless without music while they work! good excuse! ps2- apple should come up with and be held responsible for creating adm's or software for corporations that do not want their itunes software running on enterprise systems! darn you ipod!

hello fellow msfn-ers! as most IT people, i hate itunes, specially when the users install it on their workstations as if they were working on their home pc's... I am looking for a 'silver bullet' on blocking the installation of itunes. I know i am asking for a lot, but i can give it a try. I know that I can create a hash rule for the itunes .exe installer, but with new and different versions of itunes so does a new hash. I could also use path rules, but some 'smart' users can figure out that by changing the install path they can install the darnned thing. so I was wondering if you have another alternative, maybe downloaded an adm or you probably created your own adm file that you can share with me (and anyone else trying to kill itunes from their corporate workstations)! thank you for your time, ceez

@ crahak, thanks for the info. unfortunately i did not think of that. if i am not mistaken during my many attempts of disconnecting/connecting drives I think i tried booting it with it's original 40gig and still no go. as soon as I get a hold of the pc again i will give it a try with an ide controller card. thanks again everyone, ceez

thanks jaclaz for your help....man no advice is ever to 'basic' how you say! help is always apprecitead. the bios did detect the drives: primary 40 / secondary 136 (even though it's 250 the darn bios reads 136) i tried master/slave and cable select on both drives with no luck. i did not try another ide because i figure that the one it's on now works, but now i will i did disconnect their original cdr and cdrw and just left my spare cdrw as the only optical drive. i will try to connect the 250 drive on the 2nd ide along with the cdrw and see what happens. i'll try later on when i have a chance and let you know of the outcome. thanks again! ceez

hello everyone! hope I am posting in the correct section. i am trying to ghost a 40gig drive intoa 250gig drive, both IDE's, connected as 40gig master and 250gig slave on the primary IDE. there are 2 cdrom, same setup, master & slave both on the 2nd ide Now, mind you this is not the first time i clone drives since we do this occasionally at work but I've never had any problems. The error I get when it attempts to read the CD is the following: 1. hd system type-(00) boot disk failure At first I thought, well it might be their cdplayers they might be a bit 'old'. this pc is a 700mhz AMD/256ram clone pc. so i changed it for a spare 52x cdRW that i have lying around....no dice. I tried bartPE's disk and still no go. BUT after many attempts, the bart cd began booting but it froze at the progress bar "booting bartPE". the cdrw would try to read, spin up-spin down but no go. I know the boot CD's work cause I tried them on my computer and they boot up fine. what the heck could be going on, this is a simple 'transaction' thanks for your time and help, ceez

hello all, happy holidays! I created a file restriction to not allow jpg & bmp to be saved on a drive. I just need to create an exemption for some users that ARE allowed to save jpg's & bmp's to that share, I cant seem to find any user exemption options! Thanks for your help, ceez

hey everyone, thanks for your input.... @ nitroshift, I second that motion....I am also CR/-\[]D at scripting! @sonic, I'll look into that batch command. will that set a variable in the system so everytime I go to start-run and type %ip% it will return the system IP? this way I can freely use the %ip% variable in any other situation that might come up? thanks again everyone! ceez

hello fellow msfn-ers! i just have a quick Q, what is (or is there) a system variable that returns the value of the machines ip address? you know, kinda like %computername%, %tmp%, %date%, etc... i've googled my q, but no results apply thanks, ceez

I think I found a resolution. So far it has been about 3 hours and nothign shows up in DNS for that loopback adapter. Here's the info I found.... -=-=-=- To disable DNS updates for a particular interface, follow these steps: 1. Click Start, click Run, type regedit, and then click OK. 2. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ Tcpip\Parameters\Interfaces\deviceID Note deviceID is the device ID of the network adaptor for the interface. 3. On the Edit menu, point to New, and then click DWORD Value. 4. Type DisableDynamicUpdate, and then press ENTER two times. 5. In the Edit DWORD Value dialog box, type 1 in the Value data box, and then click OK. 6. Quit Registry Editor. For more detailed information please refer to the following article: 246804 How to enable or disable DNS updates in Windows 2000 and in Windows Server 2003 http://support.microsoft.com/default.aspx?...kb;EN-US;246804 -=-=-=-=

Hello fellow msfn-ers! We have a server that is also running Virtual Server. We "installed" the MS loopback adapter so the virtual server could also get internet connectivity. The problem we are having is that the loopback adapter is registering on our DNS as the same name of our server. So now we have 2 entries in our FORWARD DNS ZONE with the same server name but with different IPs: BAMVSR01 10.201.1.206 BAMVSR01 10.201.1.229 <- loopbackIP The correct IP that should be listed in the FWD ZONE is .206 I went to the properties of the tcp/ip adapter, advanced button, DNS tab and then unchecked "Register this connection's addresses in DNS". I then perform a ipconfig/flushdns from the server Delete both entries from our DNS Go back to the server and run ipconfig/registerdns Go back to DNS - refresh, and both entries show up again! It will disapear from the REVERSE but not from the FOWARD zone. Why is this happening. Am I looking at the wrong section to disable DNS registering? I even tried entering a DNS name for the connection on the box right above the checkmark but it will not register that different name, ie: BARLOOPBK. No go in registering that name either. Can someone shed some light on this issue? Thanks for your time, Ceez

had no idea about that one, hopefully it is it. i'll check it out and post my findings. thanks ceez

Hello there fellow msfn-ers! Our webmaster has been able to log in via term srvcs without a problem. All of a sudden, when he logs in he just gets the blue desktop background. If I log in on his workstation as Admin or even as myself the desktop does load normally, so that rules out a setting on his workstation. BUT!!!! If he logs in from another workstation the desktop loads just fine. He's restarted his workstation, we've killed any open session and nothing seems out of the ordinary since the rest of the IT team can remote to it. His permisions have not changed and he's part of the local administrator group of the server which is running server 03 enterprise. We (IT) has never experienced such problems. Any suggestions on this mind bender?!?!? thanks for your time! ceez:

thanks again guys for the help. @allen2: i'll look into that script option. @ctrl-x: you are correct, we add the user to that workstation. ie: if it's assigned to me then i would add domain\ceez to the local admin group of the workstation. I did end up adding 'domain users' for that child domain in the GPO and that seemed to work, the user that works on that workstation had rights, the easy way to test was to run a disk defrag. thanks again for your help ctrl-x. ceez

@Ctrl-X, ok that worked but it removed the domain user account from the administrator group. We add the user to the local administrator group. When I ran this GP it removed the user, the domain admin of that child domain and only left the local admin and the parent domain admin listed. in the gpo under restricted users I have the following: Group: Builtin\Administrator Members: Domain\Administrator Member of: <blank> I assume that I can the domain admin of the child domain by adding it to the members section of the gpo, but how can I leave the user account also in that group? Is there a way around it? thanks for your help, definitely leading me in the right direction! :thumbsup

hello fellow msfn-ers! I would like to know if there's a way that I can add our primary domain administrator to the local administrator group of the workstations on a child domain via group policies. example: primary.domain.net\administrator needs to be added to the local administrator group of a workstation which the domain it sits on is: secondary.domain.net did that makes sense?!?!? else I have to go throuh computer management, connect to each ws and add primary.domain.net\administrator to the local administrator group. thanks for your help, ceez (way up)

nothing in the evenvwr that might give you an idea? I'd go with power supply. I am assuming you also have it connected to a UPS. Does the server have a redundant PSU?

finally came across this article:

hello everyone, I am looking for the ADM file to configure our wireless connections on our mobile users. I found documents explaining where to go in gpedit but I do not have that option, nor do the adm's that I have give me that option. It should be under computer configurations->window settings->security settings->wireless. I am missing that last part! Can someone give me a hand with this one? thanks, ceez

@cptmurphy, so we can manually enter the key and then it wont conflict with any other wireless networks the users encounter? now that I think about it, that makes sense. either way, is there a way to enter a passphrase and not a hex key? thanks again

hello fellow msfn-ers! We want to implement a wireless router in our conference room but we cant to make it simple for our local users to use without having to memorize or 'write down' a hexadecimal somewhere on their laptops to be able to access the wireless ap. In the windows wireless configuration it only prompts for a KEY, I want to be able to use a passphrase instead. Is this possible? I've looked at the settings and it allows you to 'remember' the key, but when a user connects elsewhere via wireless woudlnt it conflict with that wireless network? thanks for the insight, ceez :thumup

ok i should of gone to the source, comedy central carlos mencia dee-dee-dee music video! you must watch, it's hillariuos and speaks the truth....we're in a dee-dee-dee world! enjoy

I heard it this morning on the radio, it's awesome...it speaks the truth!!! does anyone know where I can hear it or see it online?!?!?! thanks! ceez