<![CDATA[Article Comments for Orin Thomas]]>http://www.windowsitpro.com/authors/author/author/3693639/rsscomment/3693639en-USSun, 27 May 2012 03:27:03 GMTSun, 27 May 2012 03:27:03 GMTConniptions and Cognitive Dissonancehttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/conniptions-cognitive-dissonance-143072#commentsAnchorMon, 14 May 2012 06:43:51 GMT
"I can only imagine that Mozilla/Google are making so much noise about Windows RT because they concerned that the unreleased Windows 8 tablet OS is eventually going to surpass the market share of both iOS tablets and Android tables." That's a funny joke! Good one! hehehe]]>
JayZeee74Mon, 14 May 2012 06:43:51 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/conniptions-cognitive-dissonance-143072#commentsAnchor
SQL Server Backup Comparisonhttp://www.windowsitpro.com/article/backup-recovery/sql-server-backup-comparison-142269#commentsAnchorTue, 08 May 2012 10:59:23 GMT
Thanks Orin for the review of Red Gate's SQL Backup Pro (I work at Red Gate, as part of the SQL Backup Pro team). We've just launched new version 7.0 of SQL Backup Pro - which, in addition to the features reviewed above, now includes integrated backup verification and scheduled restores - so that you can easily set-up full restore + DBCC CHECKDB to check for corruption. More information and a free trial is available at: http://www.red-gate.com/products/dba/sql-backup/version-7/ Rebecca (part of the SQL Backup Pro team)]]>
Rebecca AmosTue, 08 May 2012 10:59:23 GMThttp://www.windowsitpro.com/article/backup-recovery/sql-server-backup-comparison-142269#commentsAnchor
Grocking the Windows 8 Start Menuhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchorTue, 06 Mar 2012 09:38:02 GMT
I suspect how one feels about Win 8 is directly related how one uses prior versions of Windows. My own preferences are to work with maximized windows and navigate largely via keyboard shortcuts. Consequently, Metro had a short learning curve for me on a laptop as most of the way I've always worked still applies. I'm still getting used to it on a tablet, but the experience is much smoother. A user who prefers several open windows and/or switching tasks via the start bar, will have to make significant adjustments when they use Metro.]]>
Scott JTue, 06 Mar 2012 09:38:02 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchor
Grocking the Windows 8 Start Menuhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchorTue, 06 Mar 2012 01:24:31 GMT
"Metro craplets" Perfect. It should be in the book.]]>
JakeTue, 06 Mar 2012 01:24:31 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchor
Grocking the Windows 8 Start Menuhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchorMon, 05 Mar 2012 23:30:55 GMT
Took me four days to fall in love. Now I just want some details ironed out like how to get rid of all those nasty desktop apps. And how to organize folders full of favorites in Metro. I don't want masses of tiles for my favorites, I want them the way the were or I need an explanation of how to deal with that effectively. I think tiles that contain tiles (groups) would be effective. I started with CP/M, PET, and TRS-80's never liked those Apples from the start. I always welcome the next iteration of Windows because I am a fan. I do fear for the new users that have to deal with two interfaces, and I fear for the folks that can't adapt to change. I'm sure a registry fix will pacify the ones that don't want to move forward. I think an intro video that kind of explains what your article is all about would be a nice addition to the start screen of Metro. JF]]>
JimmyFalMon, 05 Mar 2012 23:30:55 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchor
Grocking the Windows 8 Start Menuhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchorMon, 05 Mar 2012 23:24:22 GMT
I liked the Office Ribbon interface immediately, FYI. :o)]]>
Lemon SaucyMon, 05 Mar 2012 23:24:22 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchor
Grocking the Windows 8 Start Menuhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchorMon, 05 Mar 2012 23:15:42 GMT
I agree with spawnywhippet. Metro just reduces my productivity for no good reason. My PC is primarily a work PC and second a gaming (BF3) PC. I don't do necessarily play on my desktop. For tablets, I think it will be great but for a mouse and keyboard user, I really wish they would bring back the classic Start Menu. And I am not some old timer who hates change. I've been the first to adopt every single MS OS with exception of Vista simply because it was not stable enough (although I eventually upgraded once stability improved). This may be the first time I choose to stick with the previous version of Windows (Windows 7). FWIW, I've had Windows 8 installed on my second computer since the 29th.]]>
ManuelMon, 05 Mar 2012 23:15:42 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchor
Grocking the Windows 8 Start Menuhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchorMon, 05 Mar 2012 20:44:49 GMT
I have been running Win 8 since the CP was released last week, and spent a week with the Developer Preview earlier. Firstly, MS needs to lose the pointless splashscreen that you have to drag out of the way every time you want to login. I cannot use Metro, it just adds a confusing layer of junk between me and my work. I have never used desktop shortcuts since I first picked up Windows 95, and I don't see the desktop on my machine at all apart from the first few seconds after boot. I do not want to minimize all my open apps just to fire up a new one. Metro seems to be far less productive than Windows 95 - Windows 7. Unless Metro can be completely disabled, I will simply not buy it. Everything seems to take additional clicks to get what you want, and Metro adds nothing but takes away a lot. For example, I often need to switch between 3 or 4 applications quickly and prefer to work with them 90% overlapped so I can just click into each. This is not possible in Metro. I cannot work at all with Internet Explorer in the full screen mode with no menu bars or buttons. The only workaround I have found that enables me to be productive is to remove all the Metro fluff and bring back the Start Menu, then keep closing Metro and any Metro apps that occasionally pop up. ]]>
spawnywhippetMon, 05 Mar 2012 20:44:49 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grocking-windows-8-start-menu-142475#commentsAnchor
BYOD when someone gets firedhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/byod-fired-142401#commentsAnchorWed, 29 Feb 2012 09:07:48 GMT
From my experience, disabling an account does not immediately restrict access to all network resources. Certain systems like Outlook Web Access will let a user log in with a disabled account and a reset password for hours after the fact due to cached IIS tokens. It's always a good idea to test your departed/terminated user policy even if you do not have a BYOD policy in place. ]]>
jmelloWed, 29 Feb 2012 09:07:48 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/byod-fired-142401#commentsAnchor
BYOD when someone gets firedhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/byod-fired-142401#commentsAnchorWed, 29 Feb 2012 08:53:00 GMT
It's possible to address security concerns and still implement BYOD. Whats needed is to separate the Enterprise apps and data from the personal devices. This can be achieved with a solution like Ericom's AccessNow, a pure HTML5 RDP client that enables remote users to securely connect from various devices (including iPads, iPhones, Android devices and Chromebooks) to any RDP host, including Terminal Server (RDS Session Host), physical desktops or VDI virtual desktops and run their applications and desktops in a browser. This keeps the organization's applications and data separate from the employee's personal device. All thats needed is a HTML5 browser. No plug-ins or anything else required on the user device. AccessNow also provides an optional Secure Gateway component enabling external users to securely connect to internal resources using AccessNow, without requiring a VPN. For more info, and to download a demo, visit: http://www.ericom.com/html5_rdp_client.asp?URL_ID=708 Note: I work for Ericom]]>
AG4ITWed, 29 Feb 2012 08:53:00 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/byod-fired-142401#commentsAnchor
Traveling overseas? You'll need a visa and might need to disable your computer's encryptionhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/traveling-overseas-youll-visa-disable-computers-encryption-142283#commentsAnchorThu, 16 Feb 2012 04:50:48 GMT
This kind of article has been regularly recycled for many years. In fact, going back to the original release of Exchange 4.0 in 1996, there were fears expressed then that laptops containing the Exchange client wouldn't be allowed in France if they contained encrypted email. As to the notion of separate PCs used for travel to China, Russia, and other countries, I am certainly aware of instances where companies have mandated that travellers use a new PC for trips that is sanitized afterwards. When I led security efforts for HP in 2003-2006, we had a research project that measured the attempts made to penetrate PCs during travel. Some instances were discovered, but not as many as you might assume and certainly something like BitLocker will protect against most attempts to retrieve confidential data. However, extreme attempts to protect information are really only taken for people who are known to have corporate secrets (new product details, plans, research papers) in their possession and the vast majority of PC owners are quite safe to take their PC to foreign countries providing that they continue to practice reasonable "keep safe" computing habits. Plugging into a hotel network without having a good firewall on your PC is not, for example, a good thing to do. I'm also unsure how any country would attempt to detect encryption technology on a PC or mobile device. Think of the TSA queues that exist today or the queues to go through immigration at a busy international airport such as LHR or JFK and then treble them to allow agents to validate (in some way) that a PC is "clean". Not a viable plan perhaps? In short, newspapers print articles to sell copies. It's a good story but I have my doubts. Now, I am prepared to be proven wrong - so where's the evidence of new plans to check traveller PCs with the details of the technology that will be banned and why? - Tony]]>
TRedmondThu, 16 Feb 2012 04:50:48 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/traveling-overseas-youll-visa-disable-computers-encryption-142283#commentsAnchor
It&rsquo;s just a matter of when: Context aware twitter malware/spamhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/itrsquos-matter-context-aware-twitter-malwarespam-141803#commentsAnchorTue, 17 Jan 2012 10:13:11 GMT
I can find papers on how social networks yield email spam going back several years, so your prediction about Twitter seems perfectly reasonable. However, I've recently run across context-aware forum spam. Spams appear in forums that include a link to something dodgy. However, instead of including a block of nonsense text or some random quote in the forum post to increase length and fool filters, the spam post actually started with something on-topic. Apparently, someone has worked out how to tell a bot to read over the forum, figure out what it discusses, go to Wikipedia, grab an on-topic (out of context, yes, but on-topic) paragraph, and then post to the forum using that paragraph in the post to make the post look, at first glance, like it came from a human. Has anybody else seen this or have I just been asleep at the wheel?]]>
benenglishTue, 17 Jan 2012 10:13:11 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/itrsquos-matter-context-aware-twitter-malwarespam-141803#commentsAnchor
You may need to grok RBAC for Windows Server 8http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grok-rbac-windows-server-8-140811#commentsAnchorWed, 04 Jan 2012 22:46:58 GMT
The ability to delegate fine grained control over specific functionality in Windows has been a sore spot for many years. Microsoft has added RBAC functionality little by little in certain areas, but I agree in that it looks like there will be even more control available in Windows Server 8. I've spent the last several years building enterprise tools, internally, to delegate server admin functions because there has been no easy way to do it so far without giving out full admin access. I'm currently building a commercial product that is laser focused on providing large IT shops with an easy and secure way to delegate administrative privileges on Windows Server 2003 and up. It's called System Frontier. I haven't started testing it with Server 8 yet, but it'll be interesting to see what Microsoft has in store - especially with Jeffrey Snover leading the server division.]]>
Jay AdamsWed, 04 Jan 2012 22:46:58 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/grok-rbac-windows-server-8-140811#commentsAnchor
Mobile device anti-malwarehttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/mobile-device-antimalware-141479#commentsAnchorThu, 01 Dec 2011 17:51:31 GMT
Orin, as a Symantec employee its good to see a logical perspective like this. The fact of the matter is - as you well put it - mobile devices are becoming an integral part of our lives and therefore storing a lot of our sensitive information. While its most certainly true that the amount of mobile malware is nowhere near the level it is on the PC, mobile devices do and will increasingly present an attractive target for cybercriminals. While it is also true that todays mobile platforms offer improved in-built security over traditional computing platforms, weaknesses still persist that must be accounted for. This is actually the topic of a whitepaper we wrote a few months back. For anyone interested, it can be read here: http://bit.ly/vU9tzT. Spencer Parkinson Symantec]]>
Spencer ParkinsonThu, 01 Dec 2011 17:51:31 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/mobile-device-antimalware-141479#commentsAnchor
Rogue mobile devices are common on internal networkshttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/rogue-mobile-devices-common-internal-networks-141119#commentsAnchorTue, 01 Nov 2011 17:57:01 GMT
As a Symantec employee, I really do think a holistic approach one that secures both the both the networks and data, as well as the devices needs to be taken. The goal should obviously be to embrace the consumerization of IT in a controlled manner in which consumer devices are brought into the enterprise under the watchful eye of IT, implementing necessary security technologies in the process. However, as the Deloitte survey results highlight, there will likely always be some percentage of rogue devices and those must be taken into account as well. That is where a hardening of the networks and data comes into play. In my opinion, one of these approaches without the other is an incomplete strategy. Spencer Parkinson Symantec ]]>
Spencer ParkinsonTue, 01 Nov 2011 17:57:01 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/security/rogue-mobile-devices-common-internal-networks-141119#commentsAnchor
Windows 7 Drivers seem to work with Windows 8http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/windows-7-drivers-work-8-140617#commentsAnchorSun, 18 Sep 2011 05:21:33 GMT
At least one exception to this rule involves the Lenovo fingerprint reader driver. That might be because biometrics might not be fully baked into the dev preview.]]>
Orin ThomasSun, 18 Sep 2011 05:21:33 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/windows8/windows-7-drivers-work-8-140617#commentsAnchor
Operations Manager 2012 Beta Availablehttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/system-center/operations-manager-2012-beta-139888#commentsAnchorWed, 20 Jul 2011 11:22:33 GMT
Any word on availability of Essentials 2012 beta?]]>
mfrahmWed, 20 Jul 2011 11:22:33 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/system-center/operations-manager-2012-beta-139888#commentsAnchor
Is &ldquo;The Cloud&rdquo; another fizzling fad?http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/cloud-computing2/ldquothe-cloudrdquo-fizzling-fad-139780#commentsAnchorTue, 12 Jul 2011 22:07:17 GMT
I would disagree. The concept of cloud applied to any web app, not just hosting providers. It's just another fancy for for an e-commerce.]]>
Tue, 12 Jul 2011 22:07:17 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/cloud-computing2/ldquothe-cloudrdquo-fizzling-fad-139780#commentsAnchor
Is &ldquo;The Cloud&rdquo; another fizzling fad?http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/cloud-computing2/ldquothe-cloudrdquo-fizzling-fad-139780#commentsAnchorTue, 12 Jul 2011 17:50:47 GMT
Thank you for posting this Orin. It's nice to hear a reasonable oppinion on the cloud instead of all of the over hyped coverage on cloud computing.]]>
Tue, 12 Jul 2011 17:50:47 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/cloud-computing2/ldquothe-cloudrdquo-fizzling-fad-139780#commentsAnchor
Is &ldquo;The Cloud&rdquo; another fizzling fad?http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/cloud-computing2/ldquothe-cloudrdquo-fizzling-fad-139780#commentsAnchorTue, 12 Jul 2011 17:45:27 GMT
Another consideration should be "Where is the computing power being consume"? If most users are located at the same location with in-house data centre, it will make more sense to have it in-house (close to computing power). However, if most users are located around wider geographic area.. the 'cloud computing' might fit the purpose. That's my 2-cents.]]>
Tue, 12 Jul 2011 17:45:27 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/cloud-computing2/ldquothe-cloudrdquo-fizzling-fad-139780#commentsAnchor
Orchestrator 2012 and Blue Collar / White Collar IT Professionalshttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/system-center/orchestrator-2012-blue-collar-white-professionals-139730#commentsAnchorWed, 06 Jul 2011 10:44:50 GMT
Excellent piece. I think, ultimately, that neither Orchestrator or PowerShell will be the answer; it'll be some combination of those and other tools. Orchestrator won't be able to GUI-together EVERYTHING you need; PowerShell can help fill those domain-specific gaps. And it's incredibly likely that Orchestrator will evolve to use PowerShell under the hood through future versions. We'll likely end up in a world where one class of folks churn out "packs" for another, larger class to consume. IT Pros should be a bit cautious about placing themselves solely in the "consumer" class, though - if your sole value-add to your business is clicking "next, next, finish," then your business may eventually realize that's no value at all.]]>
Don JonesWed, 06 Jul 2011 10:44:50 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/system-center/orchestrator-2012-blue-collar-white-professionals-139730#commentsAnchor
Should personal computers be allowed on the corporate network?http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/should-personal-computers-be-allowed-on-the-corporate-network-136940#commentsAnchorFri, 10 Jun 2011 18:49:51 GMT
One other important question is whether or not the data on the laptop needs to be encrypted in case it’s ever lost or stolen. ]]>
wquashFri, 10 Jun 2011 18:49:51 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/should-personal-computers-be-allowed-on-the-corporate-network-136940#commentsAnchor
Should personal computers be allowed on the corporate network?http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/should-personal-computers-be-allowed-on-the-corporate-network-136940#commentsAnchorThu, 09 Jun 2011 09:42:02 GMT
I think the way of the future may be personal computers with web or virtualized apps, so no software is "installed" on the personal pc.]]>
RichThu, 09 Jun 2011 09:42:02 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/should-personal-computers-be-allowed-on-the-corporate-network-136940#commentsAnchor
Up to 120,000 users download infected apps from Android Markethttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/up-to-120000-users-download-infected-apps-from-android-market-136942#commentsAnchorThu, 02 Jun 2011 09:40:26 GMT
I concur with the first user. These are the kind of "scare tactics" that either get users to buy "bloat ware" or worse dampen the spirit of a company that is making the other guys compete. Not one shred of useful information here, just text.]]>
Raff2sterThu, 02 Jun 2011 09:40:26 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/up-to-120000-users-download-infected-apps-from-android-market-136942#commentsAnchor
Up to 120,000 users download infected apps from Android Markethttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/up-to-120000-users-download-infected-apps-from-android-market-136942#commentsAnchorThu, 02 Jun 2011 05:38:48 GMT
I hope this article does not represent your best effort. Are you more interested in giving your subscribers relevent, accurate information, or in getting ad impressions?


According to security researcher Tim Wyatt, 120,000 Android users downloaded malware infected applications from the official Android Market.


No.... according to Tim, "We believe the number of affected devices to be in the range of 30,000 and 120,000 users."

First, he does not state it as fact, as you did in your mis-quote of him. More importantly, he provides a lot of information that could actually *help* his readers. For instance, the names of the actual infected apps. Here is a sample:
Sexy Girls: Hot Japanese
Sexy Legs
HOT Girls 4
Beauty Breasts
Sex Sound
Sex Sound: Japanese
HOT Girls 1
HOT Girls 2
HOT Girls 3

Secondly, you *might* have mentioned that Tim’s company produces software that protects against 100% of the malware referenced in this article - for free.

Lastly, do you work at Google? Do you know for a *fact* that Google does *no* kind of scanning of market app? Or is this just another *fact* that you totally made up? Tim mentioned that this malware was brought to their attention by a developer. In no way does he state, or imply, that *all* malware infections are only brought to his attention by legit developers or the orginal apps, yet that is what you claim in your article.

Wow. How about you start all over?]]>
CorporateDroneThu, 02 Jun 2011 05:38:48 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/up-to-120000-users-download-infected-apps-from-android-market-136942#commentsAnchor
Should personal computers be allowed on the corporate network?http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/should-personal-computers-be-allowed-on-the-corporate-network-136940#commentsAnchorThu, 26 May 2011 12:47:50 GMT
Another aspect not mentioned is the user who connects via VPNs from home. The same considerations apply.]]>
BillHubbardThu, 26 May 2011 12:47:50 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/should-personal-computers-be-allowed-on-the-corporate-network-136940#commentsAnchor
Security Steps: Firing a Systems Administratorhttp://www.windowsitpro.com/article/systems-administrator/security-steps-firing-a-systems-administrator#commentsAnchorThu, 07 Apr 2011 21:48:07 GMT
The obvious solution is to create defense-in-depth. When you terminate an admin, of course you escort them out, take away their building access badge and immediately terminate their VPN and AD accounts. You should also create a second layer of defense by eliminating shared, static passwords on admin and other privileged accounts. There are commercial solutions that do this -- randomize all sensitive passwords daily; store them in an encrypted vault; replicate the vault across servers and sites (to avoid disaster!); apply ACLs and workflow processes to decide who can connect to each privileged account; launch sessions via single sign-on (no password display/disclosure) and record them (accountability!). One such product is Hitachi ID Privileged Access Manager: http://hitachi-id.com/. To be fair, there are others too. -- Idan ]]>
idanThu, 07 Apr 2011 21:48:07 GMThttp://www.windowsitpro.com/article/systems-administrator/security-steps-firing-a-systems-administrator#commentsAnchor
Opalis becomes Orchestratorhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/opalis-becomes-orchestrator-136937#commentsAnchorWed, 06 Apr 2011 14:56:22 GMT
In typical Microsoft fashion, the marketing geniuses rename a product but then don’t follow through with the branding changes on their website.]]>
jsepetaWed, 06 Apr 2011 14:56:22 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/opalis-becomes-orchestrator-136937#commentsAnchor
Comparative Review: Application Restriction Productshttp://www.windowsitpro.com/article/product-review/comparative-review-application-whitelisting#commentsAnchorTue, 22 Mar 2011 10:53:10 GMT
The Sophos solution actually uses a "block list" approach rather than a "whitelist". As Orin highlights the application control feature is part of a security suite that also includes cloud based anti-virus and Host Intrusion Prevention.

The application control feature controls which applications can be installed or run on the endpoint - essentially reducing an endpoints expose to threats and also reducing channels for data loss (IM, filesharing, cloud storage etc.) - while the AV/HIPs components detect and blocks malicious code.

Interestingly we do use whitelists within AV/HIPs but mainly to optimise performance and reduce the risk of false positives if a "legitimate" application displays malware like behaviour.

The advantage of this approach is that it has minimal administrative overhead because the threat data, white lists and application definitions are all handled by Sophos. It tends to therefore be a better fit for general purpose computing enviroments - as opposed to ATMs; manufacturing systems, tightly controlled call centres and nuclear power stations. There are benefits to running Application Whitelisting solutions alongside AV in those environments.

A full list of the applications covered by our Application Control feature can be found here: http://www.sophos.com/security/analyses/controlled-applications/.

John Stringer (Product Manager)]]>
John StringerTue, 22 Mar 2011 10:53:10 GMThttp://www.windowsitpro.com/article/product-review/comparative-review-application-whitelisting#commentsAnchor
Should You Use Windows Server Backup?http://www.windowsitpro.com/article/windows-server-20082/should-you-use-windows-server-backup-#commentsAnchorWed, 09 Mar 2011 12:21:25 GMT
not to mention that you can’t backup remote servers with it and also you can’t backup older versions of windows such as 2003 and below.]]>
AlmassudWed, 09 Mar 2011 12:21:25 GMThttp://www.windowsitpro.com/article/windows-server-20082/should-you-use-windows-server-backup-#commentsAnchor
Comparative Review: Application Restriction Productshttp://www.windowsitpro.com/article/product-review/comparative-review-application-whitelisting#commentsAnchorTue, 08 Mar 2011 14:54:36 GMT
]]>
PIETRZAKTue, 08 Mar 2011 14:54:36 GMThttp://www.windowsitpro.com/article/product-review/comparative-review-application-whitelisting#commentsAnchor
Want to get Malware on Android Phones? Publish an app!http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/want-to-get-malware-on-android-phones-publish-an-app-136935#commentsAnchorThu, 03 Mar 2011 09:38:25 GMT
While I believe Google (or any apps store provider) has a responsibility to run some scans and virus checking to help protect users, they can never guarantee an app they did not create is safe.]]>
RichThu, 03 Mar 2011 09:38:25 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/want-to-get-malware-on-android-phones-publish-an-app-136935#commentsAnchor
Want to get Malware on Android Phones? Publish an app!http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/want-to-get-malware-on-android-phones-publish-an-app-136935#commentsAnchorWed, 02 Mar 2011 17:41:35 GMT
Anyone know if Apple and the others follow the same process ie they do not "check the apps before they are published to its marketplace"? Thanks]]>
chodkinsonWed, 02 Mar 2011 17:41:35 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/want-to-get-malware-on-android-phones-publish-an-app-136935#commentsAnchor
Comparative Review: Application Restriction Productshttp://www.windowsitpro.com/article/product-review/comparative-review-application-whitelisting#commentsAnchorWed, 09 Feb 2011 03:50:40 GMT
www.coretrace.com is worth a look

Just as an FYI as a reseller we have just done some research into White Listing applications and our beleif is that Core Trace is now well worth a look. It has multi OS support and a has very low user impact.]]>
PowerWed, 09 Feb 2011 03:50:40 GMThttp://www.windowsitpro.com/article/product-review/comparative-review-application-whitelisting#commentsAnchor
Fix for MHTML vulnerability in all versions of IEhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/fix-for-mhtml-vulnerability-in-all-versions-of-ie-136933#commentsAnchorTue, 01 Feb 2011 00:49:22 GMT
Good efforts. All the best for future posts. I have bookmarked you. Well done. I read and like this post. Thanks.

Lemon detox diet
]]>
jack495Tue, 01 Feb 2011 00:49:22 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/fix-for-mhtml-vulnerability-in-all-versions-of-ie-136933#commentsAnchor
Personal computers on the corporate networkhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/personal-computers-on-the-corporate-network-136932#commentsAnchorWed, 12 Jan 2011 19:10:22 GMT
Is this the whole article?

Near the end of the article the paragraph starts with, "The first step..." Are there any other steps? It seems like the article has been truncated or overly edited.]]>
bwadminWed, 12 Jan 2011 19:10:22 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/personal-computers-on-the-corporate-network-136932#commentsAnchor
System Center Ops Mgr, Config Mgr and the Ribbonhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/system-center-ops-mgr-config-mgr-and-the-ribbon-136928#commentsAnchorTue, 16 Nov 2010 09:26:57 GMT
Thanks for the heads up! So what is the new product suite going to be called and is it available for beta or RC-download? I went to click on a link to "new versions" in this article, but it took me to Microsoft CRM which isn’t related to SCCM or Ops Mgr...at least I wouldn’t think so. Anything that’s easier to install and manage than the current state of Ops Mgr 2007R2 and all the cumulative updates and cross-platform updates would be nice... The local SQL install is kind of strange too, which no easy way to locate the db elsewhere (alot of manual procedural coding and execution). Looking forward to see what the latest version offers certainly! :-)
]]>
webbr1Tue, 16 Nov 2010 09:26:57 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/system-center-ops-mgr-config-mgr-and-the-ribbon-136928#commentsAnchor
Touchscreen, extended desktops, and cursor on wrong monitorhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/touchscreen-extended-desktops-and-cursor-on-wrong-monitor-136923#commentsAnchorWed, 20 Oct 2010 07:42:12 GMT
I’m having a similar issue with using extended desktop however I’m using Windows XP Pro. Do we have a similar fix for this operating system?

I’ve got a Samsung 32-inch monitor and a HP Compaq L5009tm touchscreen in an extended desktop configuration as part of a vehicle trainer that we are setting up.]]>
BAE100Wed, 20 Oct 2010 07:42:12 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/touchscreen-extended-desktops-and-cursor-on-wrong-monitor-136923#commentsAnchor
How certification can still be relevant a decade into your career.http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/how-certification-can-still-be-relevant-a-decade-into-your-career-136921#commentsAnchorFri, 01 Oct 2010 10:08:12 GMT
thank you for good post.
I couldn’t agree more.

anyway certification is not a proof of knowledge, it’s just a ticket which opens port to a job. along the way it’s upon every individual and his ability to learn, study and adapt.

good authors about process how to learn and study are Tony Buzan and Peter Russel for all those who don’t know how to learn.

regards]]>
LukaFri, 01 Oct 2010 10:08:12 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/how-certification-can-still-be-relevant-a-decade-into-your-career-136921#commentsAnchor
Certification, Culture, and the Availability of Systems Administratorshttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/certification-culture-and-the-availability-of-systems-administrators-136922#commentsAnchorTue, 07 Sep 2010 20:53:22 GMT
There are quite a few points here. I came into the industry when companies paid for training because of the lack of skilled labor. The industry has taken to certifications which have been published as a guide for skilled talent. There is quite a difference in practice. I think skilled knowledge is a requirement for any job. The problem is certifications are used as the main basis for being hired. It’s a rubber stamp. No MCSE...CCNA... no hire Or you hit the layoff file. The education industry is no small business. A problem as the result of certification is diluted Salaries. Costs have to be cut somewhere. We don’t have a clear path for certifications as a whole. Most companies want a College education and a minimum of 2 certifications. Take a typical Systems Administrator position. There are multiple job titles from engineer, architect Plus embellished industry specific titles. A traditional view for a Doctor is MD. Don’t get me wrong we live in an industry of change which requires updating skills. I think the education business has run out of ideas. There are new "Super" certifications along with job requirements of multiple certifications. All this to compete in the job market or remain employed. Oh and companies want all this education and knowledge and are only willing to pay what it costs to replace you. What happened to here are the products we offer? Here is the required education to operate the products. It is an obvious commoditizing of skills in the industry. Companies still view IT as a necessary expense. Companies who were early adopters of Linux have realized the cost savings. I agree there are a percentage of companies that are opposed to Microsoft. Why aren’t certifications explicit about knowledge/skills? It works for Doctors. Maybe we need to license IT workers. IT is quite costly in more ways than one in a Market driven industry. ]]>
1samsaraTue, 07 Sep 2010 20:53:22 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/certification-culture-and-the-availability-of-systems-administrators-136922#commentsAnchor
How to configure a branch office WSUS server to get approvals centrally but download updates from Microsoft Update.http://www.windowsitpro.com/article/systems-administrator/how-to-configure-a-branch-office-wsus-server-to-get-approvals-centrally-but-download-updates-from-microsoft-update-#commentsAnchorWed, 25 Aug 2010 12:45:23 GMT
You state, "Branch office WSUS servers can be configured to still get their list of approved updates from an upstream server".

Does this mean that they will also get their approval settings from the upstream server? Will Computer Groups have to be setup separately on all downstream servers?]]>
CanalesWed, 25 Aug 2010 12:45:23 GMThttp://www.windowsitpro.com/article/systems-administrator/how-to-configure-a-branch-office-wsus-server-to-get-approvals-centrally-but-download-updates-from-microsoft-update-#commentsAnchor
Sysadmins as Sisyphushttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/sysadmins-as-sisyphus-136920#commentsAnchorTue, 03 Aug 2010 10:40:16 GMT
This anaolgy hits the nail on the head!! Well stated I must say!]]>
TechManTue, 03 Aug 2010 10:40:16 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/sysadmins-as-sisyphus-136920#commentsAnchor
Derelict Administrator Accounts: A Millennium Falcon Problemhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/derelict-administrator-accounts-a-millennium-falcon-problem-136919#commentsAnchorTue, 27 Jul 2010 18:07:37 GMT
If there are, I can’t think of any off the top of my head. Sometimes you’ll get people configuring local accounts in odd ways, but that’s a separate topic.]]>
Orin ThomasTue, 27 Jul 2010 18:07:37 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/derelict-administrator-accounts-a-millennium-falcon-problem-136919#commentsAnchor
Derelict Administrator Accounts: A Millennium Falcon Problemhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/derelict-administrator-accounts-a-millennium-falcon-problem-136919#commentsAnchorMon, 26 Jul 2010 06:24:49 GMT
Are there any scenarios where an account can be used in which it doesn’t require a log on? I’ve been told this by other administrators but I can’t remember their rational. If so, what scenarios are there and what can be done to determine if an account is being used in this manner (a different event, etc???)]]>
bhensley88Mon, 26 Jul 2010 06:24:49 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/derelict-administrator-accounts-a-millennium-falcon-problem-136919#commentsAnchor
Corporate Network iPadhttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/corporate-network-ipad-136917#commentsAnchorMon, 14 Jun 2010 08:28:37 GMT
Best Online Store for Genuine USA Apple iTunes Gift Cards Code Emailed Instantly same day , great for iPad iPhone Apps from United States with no credit card needed , so far http://4SALEUSA.COM is most competitive website on the Globe , 4Saleusa sell wholesale and retail to international buyers mostly ! Other Hot products offered are: PSN - Playstation Network cards / codes , Nintendo WIi 2000 codes , AppleCare for Mac, Apple accessories, Warcraft MMO CdKeys, WoW Lich King, Xbox Live Subscriptions and Points, Xbox codes, Maplestory Nexon Cash, Trials , Games .... New Availability : iPad Tablets and iPhone Cell phone devices - Shipped WorldWide ! Good Luck.... http://www.youtube.com/watch?v=vEsPZPpivYg ]]>
netstradaMon, 14 Jun 2010 08:28:37 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/corporate-network-ipad-136917#commentsAnchor
Solve 4 Common Patch Management Problemshttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchorTue, 27 Apr 2010 12:55:52 GMT
Well done, Orinvery informative article. Id just like to make note of the fact that there is actually a third free tool for automated patch management: NetWrix Patch Reporter. The Patch Reporter is a free tool that automatically scans networks to detect all computers without critical patches and sends daily reports to selected E-mail recipients with full details about every outdated computer, making it very simple to keep all machines up to date. The NetWrix is a quick no-script solution which is not as flexible as PowerShell scripting, but much easier to use.
For more information, visit http://www.netwrix.com/patch_management_freeware.html.
Thanks again Orin,
Stephen Schimmel
Product manager
NetWrix Corporation
www.netwrix.com
]]>
VovkTue, 27 Apr 2010 12:55:52 GMThttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchor
Are NTFS and Share Permissions a bit too complicated?http://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/are-ntfs-and-share-permissions-a-bit-too-complicated-136915#commentsAnchorMon, 26 Apr 2010 12:20:26 GMT
Couldn’t agree more. I think claims-based authentication is going to be the way to go in the long run - putting a bit more of the authorization burden on the directory/claims infrastructure would also make permissions maintenance about 1.3jillion times easier!]]>
Don JonesMon, 26 Apr 2010 12:20:26 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/are-ntfs-and-share-permissions-a-bit-too-complicated-136915#commentsAnchor
Solve 4 Common Patch Management Problemshttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchorSat, 10 Apr 2010 10:23:59 GMT
The powershell script above doesn’t work.

Error
ForEach-Object : Cannot bind parameter ’Process’. Cannot convert the "]" value
of type "System.String" to type "System.Management.Automation.ScriptBlock".
At C:\WINDOWS\system32\WindowsPowerShell\v1.0\hotfixlist.ps1:1 char:36
+ get-content computers.txt | foreach <<<< { if (!(get-hotfix -id KB936929 -co
mputername $_ -ea 0)) { add-content $_ -path Missing-KB974332.txt }}]
+ CategoryInfo : InvalidArgument: (:) [ForEach-Object], Parameter
BindingException
+ FullyQualifiedErrorId : CannotConvertArgumentNoMessage,Microsoft.PowerSh
ell.Commands.ForEachObjectCommand

Thanks,
Glenn grc69@comcast.net]]>
Sat, 10 Apr 2010 10:23:59 GMThttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchor
Solve 4 Common Patch Management Problemshttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchorFri, 09 Apr 2010 19:01:18 GMT
The powershell script above doesn’t work.

Error
ForEach-Object : Cannot bind parameter ’Process’. Cannot convert the "]" value
of type "System.String" to type "System.Management.Automation.ScriptBlock".
At C:\WINDOWS\system32\WindowsPowerShell\v1.0\hotfixlist.ps1:1 char:36
+ get-content computers.txt | foreach <<<< { if (!(get-hotfix -id KB936929 -co
mputername $_ -ea 0)) { add-content $_ -path Missing-KB974332.txt }}]
+ CategoryInfo : InvalidArgument: (:) [ForEach-Object], Parameter
BindingException
+ FullyQualifiedErrorId : CannotConvertArgumentNoMessage,Microsoft.PowerSh
ell.Commands.ForEachObjectCommand

Thanks,
Glenn grc69@comcast.net]]>
CraineFri, 09 Apr 2010 19:01:18 GMThttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchor
Top Reasons to Use BitLocker and BitLocker To Gohttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/top-reasons-to-use-bitlocker-and-bitlocker-to-go-136913#commentsAnchorSat, 03 Apr 2010 06:26:25 GMT
Hi Guise my name is Jack Jimmy. I would like to say that it is really nice site for dong someone..
]]>
divviwiliersshSat, 03 Apr 2010 06:26:25 GMThttp://www.windowsitpro.com/blog/hyperbole-embellishment-and-systems-administration-blog-18/systems-management/top-reasons-to-use-bitlocker-and-bitlocker-to-go-136913#commentsAnchor
Solve 4 Common Patch Management Problemshttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchorWed, 24 Mar 2010 13:57:34 GMT
You mention that WSUS "doesn’t actually check the client to see if any updates are missing". You go on to say that because of this, if you update Windows manually (or through Windows Update), WSUS doesn’t know the update’s been installed. Neither of these statements are true. When I point a new computer to WSUS,after a few minutes of scanning, the WSUS console lists all the needed patches for that pc. Also, if I install a patch manually, at the next WSUS scan, that new patch will show in the installed list.]]>
Van AlstineWed, 24 Mar 2010 13:57:34 GMThttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchor
Solve 4 Common Patch Management Problemshttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchorWed, 24 Mar 2010 13:49:23 GMT
Regarding reboots, we also had user complaints about that. For the reason you mention, we wanted to keep updates and reboots mandatory. Though we had used Group Policy to give a 10 minute reboot warning after installing updates, it wasn’t working. Turns out only local admins (which our users aren’t) get to see the reboot warning. We later found a commputer Group Policy that "Allow non-adminstrators to recieve update notifications". They still can’t decline anything, but they know the reboot is coming and can save their work.]]>
Van AlstineWed, 24 Mar 2010 13:49:23 GMThttp://www.windowsitpro.com/article/testing5/solve-4-common-patch-management-problems#commentsAnchor
Upgrade of Windows 7 Beta to RC and RTM to require some mucking abouthttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchorMon, 15 Mar 2010 04:49:32 GMT
If this works well, then a lot of people will want to do it, including me. But a couple weeks ago I asked a well-known Windows expert if it can be done. He said, Even if you could do it, you wouldnt want to. Too many chances for big-time problems. So Ill be interested in how it goes for Paul and other pioneers in the weeks following this method of upgrade.

http://www.articlesbase.com/health-articles/acai-optimum-review-does-acai-optimum-work-1956015.html]]>
HowardMon, 15 Mar 2010 04:49:32 GMThttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchor
Security Steps: Use AppLocker Policies to Block Solitairehttp://www.windowsitpro.com/article/systems-administrator/security-steps-use-applocker-policies-to-block-solitaire-103353#commentsAnchorThu, 14 Jan 2010 02:06:37 GMT
This procedure seems to block the execution of solitaire.exe located in a specified folder. Does it also prevent the user from renaming the file, or copying it to another folder, and then executing it? I suppose the answer is no, which means that any user who understands the file system will be able to run the program. Blocking dlls is probably more efficient, but limited to dlls that are essential to the unwanted application and not used by the legitimate ones.]]>
LarsThu, 14 Jan 2010 02:06:37 GMThttp://www.windowsitpro.com/article/systems-administrator/security-steps-use-applocker-policies-to-block-solitaire-103353#commentsAnchor
Security Steps: Firing a Systems Administratorhttp://www.windowsitpro.com/article/systems-administrator/security-steps-firing-a-systems-administrator#commentsAnchorMon, 28 Sep 2009 22:09:50 GMT
Even when the user’s account is disabled, those same admins also often know the credentials of privileged accounts in the network. These are accounts that run services, applications, tasks, are included in scripts, web services, the built-in admin or root accounts, etc. These privileged accounts get changed less often than admin’s accounts because of their impact on the business if something is missed during a change. The trick is to get these account’s passwords changed when these admins leave, or better yet, get a solution in place to control those passwords so that no one ever knows what they are but must go through another system to get access to those passwords which of course audits the user’s access to those accounts. Then, after those accounts are used, re-randomize the password so no one knows what they are once again. The problem with changing these accounts is the locations that these accounts are used, just as Orin mentions is a problem with disabling the fired admin’s account. Luckily, there are tools such as Lieberman Software’s Enterprise Random Password Manager (http://www.liebsoft.com) to help discover the systems, the accounts, and how those accounts are used on the systems so that when it changes a password, everywhere that the account is used also gets updated. Then, if the password is needed, it can be retrieved through an audited web interface. Many of the break-ins that have occurred have taken place through the use of these privileged accounts by these fired admins.]]>
cstoneff Mon, 28 Sep 2009 22:09:50 GMThttp://www.windowsitpro.com/article/systems-administrator/security-steps-firing-a-systems-administrator#commentsAnchor
Security Steps: Firing a Systems Administratorhttp://www.windowsitpro.com/article/systems-administrator/security-steps-firing-a-systems-administrator#commentsAnchorWed, 23 Sep 2009 12:35:01 GMT
I hope companies big and small have some procedure for managing outgoing personnel on the IT side. We would also consider removing admin rights from their account where they remain in the office for a period after giving notice and change the actual administrator account logon password as well.]]>
WilliamWed, 23 Sep 2009 12:35:01 GMThttp://www.windowsitpro.com/article/systems-administrator/security-steps-firing-a-systems-administrator#commentsAnchor
How to Upgrade to SQL Server 2008 from SQL Server 2000http://www.windowsitpro.com/article/project-plan-migrate-sql-server-2008-r2-77/sql-server-2005/how-to-upgrade-to-sql-server-2008-from-sql-server-2000-100820#commentsAnchorMon, 31 Aug 2009 15:44:26 GMT
Hi focasio! I passed your question on to the article’s author, Orin Thomas, to see if he knew if the 2008 installer leaves behind the SQL Server 2000 tools. Orin says "No, the tools appear to have been removed." I hope this answered your question. Please let me know if you have any more questions. Thanks for your great question! Megan Keller Associate Editor, SQL Server Magazine mkeller@sqlmag.com]]>
MeganMon, 31 Aug 2009 15:44:26 GMThttp://www.windowsitpro.com/article/project-plan-migrate-sql-server-2008-r2-77/sql-server-2005/how-to-upgrade-to-sql-server-2008-from-sql-server-2000-100820#commentsAnchor
Active Directory Recycle Binhttp://www.windowsitpro.com/article/systems-administrator/active-directory-recycle-bin#commentsAnchorTue, 18 Aug 2009 05:37:20 GMT
I would highly recommend to check out the screencast demo of the PowerGUI-based Recycle Bin UI (http://powergui.org/shares/powergui/sbin/docs/Advanced_Reporting_PowerPack/Advanced_Reporting_PowerPack.html) recently created by Kirk Munro (http://poshoholic.com/2009/08/18/recover-deleted-active-directory-objects-with-the-ad-recycle-bin-powerpack).]]>
DmitryTue, 18 Aug 2009 05:37:20 GMThttp://www.windowsitpro.com/article/systems-administrator/active-directory-recycle-bin#commentsAnchor
In five years all browsers will block internet advertisements by default.http://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchorMon, 10 Aug 2009 15:37:45 GMT
For me, blocking ads is mainly about 3 things: 1. Security. Many ad servers are malware-infected. 2. Speed. I don’t want to have that extra junk loading on the page. 3. Functionality. Problems with ads can contribute to pages freezing or stalling. Another consideration is that they may display material that is inappropriate. Finally, they all want to harvest my usage data. In exchange for fair value, I don’t mind, but on exchange for a virus, no thanks!]]>
PatrickMon, 10 Aug 2009 15:37:45 GMThttp://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchor
In five years all browsers will block internet advertisements by default.http://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchorFri, 07 Aug 2009 08:17:44 GMT
Don’t assume that no one wants to see ads. The advertisers brought this on themselves by stepping over the line of obnoxiousness. I tolerated internet ads for a long time, all through the static, banner-ad era. What finally pushed me to install AdBlockerPlus was the day the advertisers introduced Flash ads that "trap" your mouse cursor and "ooze" over the web site’s content when you accidentally move over the ad. And this was at a most respectable web site no less: The New York Times. The mainstream print paper media has long known that you need to keep your advertisers in check because they can ruin the look of your publication and drive away readers. Many internet content providers seem not to have learned this lesson. Ad blocking is the result of their indiscretion. When television networks started hurting for ad dollars, ABC started shoe-horning so many ad minutes into each hour of prime-time programming that they left viewers like me little choice but to use our DVR to skip over the ads. (e.g. a first run of "Desperate Housewives" is 42% ads!) Ironically, it is the wealthier viewers who own DVRs--the very "bread and butter" demographics that keep the TV networks in business. It’s a vicious cycle. But a spam/spam-blocker style war isn’t the answer. Unlike spammers, respectable advertisers can’t afford to have an image of "we’ll shove our ad down your throat at any cost." In fact, it’s just the opposite tactic that will work: Producing ads that enhance the web browsing experience--ads that people don’t want to block. And to content-providers I reiterate: don’t sell space to advertisers who interfere with your content and break your site’s carefully-crafted user interface. Think of the whole user experience. The best TV advertisers already know this. The internet just needs to catch up.]]>
TimFri, 07 Aug 2009 08:17:44 GMThttp://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchor
How to Upgrade to SQL Server 2008 from SQL Server 2000http://www.windowsitpro.com/article/project-plan-migrate-sql-server-2008-r2-77/sql-server-2005/how-to-upgrade-to-sql-server-2008-from-sql-server-2000-100820#commentsAnchorThu, 06 Aug 2009 18:39:40 GMT
For an In-Place upgrade from 2000, does the 2008 installer leave behind the SQL 2000 tools? This seems to be the case when an ugrade from 2005 to 2008 is performed. I have done upgrades from 2000 to 2005 and the installer removed all 2000 tools and programs. I have performed 5 upgrades from 2005 to 2008 and the 2005 Mgmt Tools, support files, etc are left behind by the 2008 upgrade. Needed to be removed manually. Just wondering if anyone has any experience with this from 2000 to 2008. Thanks]]>
FrankThu, 06 Aug 2009 18:39:40 GMThttp://www.windowsitpro.com/article/project-plan-migrate-sql-server-2008-r2-77/sql-server-2005/how-to-upgrade-to-sql-server-2008-from-sql-server-2000-100820#commentsAnchor
In five years all browsers will block internet advertisements by default.http://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchorThu, 06 Aug 2009 12:35:46 GMT
Blocking adverts has additional benefits: Slow and over loaded ad-servers don’t effect my browsing. My decision making processes aren’t messed with. Adverts exist purely to effect people’s decision making processes, and the most "effective" ads are the ones that do it without the viewer realising they are being messed with. I do not consent to this kind of abuse, and have to take steps to avoid it. Vast swathes of the advertising industry is based on psychological theory, FFS! Adverts come with all sorts of additional baggage, which is sometimes vaguely disclosed in a privacy policy. The name "privacy policy" is a modern piece of doublespeak - it is not about how they will respect you, it is about how you will be abused. These documents are long and rambling, and written in hard to understand language. I’ve seen privacy policies that are light grey text on white, all within an image file: this stops the ability to copy/paste and makes trying to change the size/contrast much more complex than just changing the text size in the browser. I do not want to be tracked and trended just to make ads even more insidious. I do not want information to be inferred about me. There may well be laws preventing organisations pooling data, but these will be constantly lobbied against and eventually will be made ineffectual in one way or another. Due to aggressive data-whoring I now routinely lie to organisations who ask me about myself in exchange for services. Ad servers are common targets for malware distribution. Advert organisations could end up building up profiles of people that could be useful to fraudsters, crooks or malicious authority figures. And as for robertrade’s idea of blocking blockers, that is laughable! There is ultimately no way that site can tell if the adverts are displayed to the user or not. What is to stop the browser getting the spam^Wadverts, then dropping them? Trying to block blockers will only end up in an arms race.]]>
jhgftdriju8y7t65r Thu, 06 Aug 2009 12:35:46 GMThttp://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchor
In five years all browsers will block internet advertisements by default.http://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchorThu, 06 Aug 2009 12:11:15 GMT
Hi, You fail to look at the alternatives. I assume you’re an AdBlock Plus work-shipper, which is in conflict with your WindowsITPro position. Anyway, read on below: The alternatives are: 1) I believe that the ad network providers will be moving to server-side ad delivery that will make AdBlock Plus to be useless, as the ads and content data are mixed together to stream the data directly to browser, instead of obvious links inside the pages that can be easily blocked by AdBlock. 2) Block the AdBlock users, and encourage them to disable AdBlock if they want to see the contents. The scripts are here and here: http://www.cthreepo.com/adblock/ http://news.motorbiker.org/blogs.nsf/dx/adblockers-are-now-blocked-from-this-site.htm http://adblockplus.org/blog/an-approach-to-fair-ad-blocking http://omninoggin.com/web-development/how-to-discourage-visitors-from-using-adblock/ http://www.webmaster-source.com/2009/01/15/anti-adblock-plugin/ I believe that the newspaper industry will embrace the anti-AdBlock scripts in their web codes very soon. Robert http://currate.com Currency Converter Developer]]>
RobertThu, 06 Aug 2009 12:11:15 GMThttp://www.windowsitpro.com/article/systems-administrator/in-five-years-all-browsers-will-block-internet-advertisements-by-default-#commentsAnchor
Things that you should think about before firing a systems administrator.http://www.windowsitpro.com/article/systems-administrator/things-that-you-should-think-about-before-firing-a-systems-administrator-#commentsAnchorTue, 04 Aug 2009 20:32:17 GMT
Of course there are plenty of cases where a SysAdmin who did something illegal [i.e. disable systems, wipe data] was convicted.]]>
EdTue, 04 Aug 2009 20:32:17 GMThttp://www.windowsitpro.com/article/systems-administrator/things-that-you-should-think-about-before-firing-a-systems-administrator-#commentsAnchor
Degree or Certification.http://www.windowsitpro.com/article/commentary/degree-or-certification-#commentsAnchorTue, 28 Jul 2009 10:15:24 GMT
I have a bachelors degree and am looking to join the IT profession. I found this article very useful.]]>
Liluwink1 Tue, 28 Jul 2009 10:15:24 GMThttp://www.windowsitpro.com/article/commentary/degree-or-certification-#commentsAnchor
Thinking about passwordshttp://www.windowsitpro.com/article/systems-administrator/thinking-about-passwords#commentsAnchorThu, 23 Jul 2009 08:51:14 GMT
This is another one of those ridiculous issues to debate. The real issue is how to help users remember their passwords. We, IT Professionals, should be teaching users how to develop schemes to create and easily recall passwords. We should not ever recommend policies that reduce security, nor have policies that are unreasonable. If a person is locked out of their computer and a tech is called to assist them, it’s the perfect time to assist the user in developing a strong, yet easy to remember password. More education, not less security, is the answer.]]>
CardellThu, 23 Jul 2009 08:51:14 GMThttp://www.windowsitpro.com/article/systems-administrator/thinking-about-passwords#commentsAnchor
Opera-Unite lets standard users share content on the Internet from behind your corporate firewall.http://www.windowsitpro.com/article/systems-administrator/opera-unite-lets-standard-users-share-content-on-the-internet-from-behind-your-corporate-firewall-#commentsAnchorTue, 23 Jun 2009 00:13:48 GMT
First you got Chrome allowing non-administrative users to install and installing not in c:\program files but in their own profile [this info as of the last time I looked at Chrome] and now this? Network admins will be busy!]]>
EdTue, 23 Jun 2009 00:13:48 GMThttp://www.windowsitpro.com/article/systems-administrator/opera-unite-lets-standard-users-share-content-on-the-internet-from-behind-your-corporate-firewall-#commentsAnchor
Ickiest Job in Systems Administration.http://www.windowsitpro.com/article/systems-administrator/ickiest-job-in-systems-administration-#commentsAnchorWed, 17 Jun 2009 02:25:23 GMT
Hi.. I was looking for administration jobs for admin work ,but this article was very useful to point out my plus & my minus points. Thanks a lot. MICHAEL --------- administration job--administration job]]>
MichalWed, 17 Jun 2009 02:25:23 GMThttp://www.windowsitpro.com/article/systems-administrator/ickiest-job-in-systems-administration-#commentsAnchor
IT Pro recruitment is a lottery.http://www.windowsitpro.com/article/systems-administrator/it-pro-recruitment-is-a-lottery-#commentsAnchorFri, 22 May 2009 05:27:16 GMT
I’ve really seed good JDs, and wrote good JDs. And I think IT manager who uncapable to write good JD will also fail to write targets, set tasks and so on. If IT manager delegate writing JD to HRs or recruiters - he deserves that he got. And person who are lazy or uncapable to write good resume will be lazy or uncapable to document his work or talk with business. I will take him for helpdesk position, but not to middle level.]]>
BorisFri, 22 May 2009 05:27:16 GMThttp://www.windowsitpro.com/article/systems-administrator/it-pro-recruitment-is-a-lottery-#commentsAnchor
Why you should have a torch in your server room.http://www.windowsitpro.com/article/systems-administrator/why-you-should-have-a-torch-in-your-server-room-#commentsAnchorSun, 17 May 2009 13:36:46 GMT
What would be more helpfll would be an article to have the Server MANAGE Power Outages Automatically. E.G. Lights Out. This SysAdmin was not armed with the light of a Cell Phone? Did not contact the Buildings Facilities Staff who would have a Flashlight or perform follow-up to ensure some lights were on a backup generator. What about follow-up concerning Lessons Learned and what actions were taken to safeguard the systems in the future. Just moving your Office to be next to the servers would be a help.]]>
CharlesSun, 17 May 2009 13:36:46 GMThttp://www.windowsitpro.com/article/systems-administrator/why-you-should-have-a-torch-in-your-server-room-#commentsAnchor
Upgrade of Windows 7 Beta to RC and RTM to require some mucking abouthttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchorSat, 09 May 2009 08:59:57 GMT
Hi to the first commentor, you are wrong because the build 7100 IS an official RC build, not beta. And since you are commenting on 4th May, I suppose that either you are an MSDN subscriber or sort, you have downloaded it through leaked torrents. The author here is saying an upgrade from beta such as build 7000, or 7022, 7048, 7057 and so on. I am wondering if such technique can modified as 6519. Since that was the first ever leaked build of Windows 7. (So that users of pre-beta can do a direct upgrade despite who is still using that!)]]>
samuelSat, 09 May 2009 08:59:57 GMThttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchor
Upgrade of Windows 7 Beta to RC and RTM to require some mucking abouthttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchorWed, 06 May 2009 03:25:24 GMT
So you managed the upgrade without editing cversion.ini? Odd - I had to do it each time I upgraded from the public beta to the RC - and that’s the procedure they outlined in the Engineering Windows 7 blog.]]>
OrinWed, 06 May 2009 03:25:24 GMThttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchor
Upgrade of Windows 7 Beta to RC and RTM to require some mucking abouthttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchorMon, 04 May 2009 09:43:35 GMT
hI oRIN, I found this to be incorrect. I upgraded my machine from Build 7100 to the RC only by completing step 1 that was outlined from that blog Orin. (Not sure if it being Build 7100 made all the differnce as that was the last beta build prior to the RC) I am typing this on that very machine right now (while at 34K feet on a cross counrty flight :)) The upgrade was competley painless, took all of about 20 - 25 mins from the USB stick.]]>
UltanMon, 04 May 2009 09:43:35 GMThttp://www.windowsitpro.com/article/systems-administrator/upgrade-of-windows-7-beta-to-rc-and-rtm-to-require-some-mucking-about#commentsAnchor
A quick way to determine if a computer is infected with Confickerhttp://www.windowsitpro.com/article/systems-administrator/a-quick-way-to-determine-if-a-computer-is-infected-with-conficker#commentsAnchorWed, 22 Apr 2009 06:38:01 GMT
The link works on the older versions of Conficker - I don’t think that there is any data about the newest version blocking the confickerworkinggroup website.]]>
OrinWed, 22 Apr 2009 06:38:01 GMThttp://www.windowsitpro.com/article/systems-administrator/a-quick-way-to-determine-if-a-computer-is-infected-with-conficker#commentsAnchor
A quick way to determine if a computer is infected with Confickerhttp://www.windowsitpro.com/article/systems-administrator/a-quick-way-to-determine-if-a-computer-is-infected-with-conficker#commentsAnchorMon, 20 Apr 2009 21:14:55 GMT
That was an interesting link but still I think that it’s not one hundred percent sure wasn’t it? Because if I’m was correct confickers is can be control by the programmers who maid them. So maybe they have already reconfigure the configure to hibernate when going to that link. Well still not sure so still it’ll be better if we just use a very good and known Antivirus programs. Also hang out to this sites and other sites like this link http://www.systemsecurityinstitute.org can inform us the latest so it’s better to keep our self updated.]]>
GustuvMon, 20 Apr 2009 21:14:55 GMThttp://www.windowsitpro.com/article/systems-administrator/a-quick-way-to-determine-if-a-computer-is-infected-with-conficker#commentsAnchor
Should You Use Windows Server Backup?http://www.windowsitpro.com/article/windows-server-20082/should-you-use-windows-server-backup-#commentsAnchorMon, 09 Mar 2009 04:56:54 GMT
Since writing the article I’ve talked with the WSB program manager and I’ve written an article describing how removable hard disk drives can be used in off-site rotation. The article is posted here: http://windowsitpro.com/article/articleid/101657/setting-up-a-backup-rotation-with-windows-server-backup.html]]>
OrinMon, 09 Mar 2009 04:56:54 GMThttp://www.windowsitpro.com/article/windows-server-20082/should-you-use-windows-server-backup-#commentsAnchor
Recovering Bitlocker Keys from Active Directoryhttp://www.windowsitpro.com/article/systems-administrator/recovering-bitlocker-keys-from-active-directory#commentsAnchorWed, 25 Feb 2009 16:20:03 GMT
I’ve clarified - I meant that you can’t initially turn on BitLocker unless the key backup to AD can occur rather than it turning itself off when a domain isn’t present. Thanks for the feedback!]]>
OrinWed, 25 Feb 2009 16:20:03 GMThttp://www.windowsitpro.com/article/systems-administrator/recovering-bitlocker-keys-from-active-directory#commentsAnchor
Recovering Bitlocker Keys from Active Directoryhttp://www.windowsitpro.com/article/systems-administrator/recovering-bitlocker-keys-from-active-directory#commentsAnchorWed, 25 Feb 2009 15:01:00 GMT
This phrase "You can configure this policy so that BitLocker cannot be enabled unless the computer is connected to the domain" doesn’t make sense. You would want the system protected when the system is not connected to the domain.]]>
EdWed, 25 Feb 2009 15:01:00 GMThttp://www.windowsitpro.com/article/systems-administrator/recovering-bitlocker-keys-from-active-directory#commentsAnchor
Are Rogue Programmers Running Rampant in IT?http://www.windowsitpro.com/article/commentary/are-rogue-programmers-running-rampant-in-it-#commentsAnchorWed, 18 Feb 2009 15:13:27 GMT
Actually its the fault of the business owner not putting restrictions on sensitive information, no wonder we have security breaches all the time, ’im glad that this happens to company’s, they need to repsect us instead of sending work to india.]]>
NonameWed, 18 Feb 2009 15:13:27 GMThttp://www.windowsitpro.com/article/commentary/are-rogue-programmers-running-rampant-in-it-#commentsAnchor
Should You Use Windows Server Backup?http://www.windowsitpro.com/article/windows-server-20082/should-you-use-windows-server-backup-#commentsAnchorWed, 04 Feb 2009 23:55:56 GMT
Hello, I work for a backup company and support many clients using WSB. I’ve also spent hundreds of hours extensively testing of Windows Server Backup. There are some positives and negatives not addressed in the article that I think everyone should know about. Positives: hardware independent bare metal restores (from our extensive testing). Automatic incremental backups that are fast. Can restore individual files, provided you backup to USB / Firewire HDD. You *can* use it to backup VSS aware applications such as SQL, Hyper-V and Exchange (but Exchange requires a plug-in). Annoyances: wizards are primitive, no notification on backup success or failure apart from event log (this is a major flaw), no media rotation (as Orin correctly points out), limited hardware support. On a more technical note, it’s an image backup, not a hard drive clone, so your backed-up version does not contain things like Shadow Copies. I know some admins that prefer 3rd party products like Acronis because it’s a more accurate clone of the system. I wrote a fairly extensive article on how the WSB engine actually works, based on my own testing and a presentation I saw at TechEd: http://www.wbadmin.info/articles/how-does-windows-server-2008-backup-work.html From what I see, it’s all based on VSS snapshots. Every time a backup runs, a persistent snapshot is taken (and you can access that snapshot even after the backup has finished). When you connect a device, it will do a full backup to that device, and then afterwards, only transfer the differences between the appropriate volume snapshots. New media - no problem - it knows what shapshots are where. FWIW: I use WSB in my office using eSata drives (you’ll need to script wbadmin.exe yourself - see http://wbadmin.info for more information) and get about 150GB/hr backup speed for initial full backups. That’s FAST! It outperforms NTBackup, which I’ve benchmarked at around 50GB/hr to the same kind of destination.]]>
LinusWed, 04 Feb 2009 23:55:56 GMThttp://www.windowsitpro.com/article/windows-server-20082/should-you-use-windows-server-backup-#commentsAnchor
Configuring the Windows Server 2003 POP3 Mail Servicehttp://www.windowsitpro.com/article/windows-server-2003/configuring-the-windows-server-2003-pop3-mail-service#commentsAnchorWed, 19 Nov 2008 10:46:06 GMT
i m trying to add user to domain by Add comad as u told, but its not adding and giving a reply "A Problem Occured. The Mailbox was not Added. The specified domain either does not exist or could not be contacted."]]>
SandeepWed, 19 Nov 2008 10:46:06 GMThttp://www.windowsitpro.com/article/windows-server-2003/configuring-the-windows-server-2003-pop3-mail-service#commentsAnchor
Checking out your employer before you accept that offer.http://www.windowsitpro.com/article/commentary/checking-out-your-employer-before-you-accept-that-offer-#commentsAnchorSun, 20 Jul 2008 20:51:39 GMT
Try http://theworkreview.com - a lot of the sites that were around when I wrote this article have gone due to litigation (this is a fairly litigious area). As an addendum to this post - the guy that ran that training company ended up going to jail for 5 or so years.]]>
Orin Sun, 20 Jul 2008 20:51:39 GMThttp://www.windowsitpro.com/article/commentary/checking-out-your-employer-before-you-accept-that-offer-#commentsAnchor
Checking out your employer before you accept that offer.http://www.windowsitpro.com/article/commentary/checking-out-your-employer-before-you-accept-that-offer-#commentsAnchorFri, 04 Jul 2008 04:04:15 GMT
Your advice is very usefull! You mentioned about forums where employees are talking about their companies. Could you please post some of these forums? So far, I found this http://www.jobvent.com/]]>
EugenFri, 04 Jul 2008 04:04:15 GMThttp://www.windowsitpro.com/article/commentary/checking-out-your-employer-before-you-accept-that-offer-#commentsAnchor
Why good Windows sysadmins are easier to find than good UNIX/Linux sysadmins.http://www.windowsitpro.com/article/systems-administrator/why-good-windows-sysadmins-are-easier-to-find-than-good-unix-linux-sysadmins-#commentsAnchorTue, 27 May 2008 10:31:03 GMT
No, Illl stay with the UNIX admins are smarter... They have the ability to see behind the GUI and know what’s happening...]]>
hausgaard Tue, 27 May 2008 10:31:03 GMThttp://www.windowsitpro.com/article/systems-administrator/why-good-windows-sysadmins-are-easier-to-find-than-good-unix-linux-sysadmins-#commentsAnchor
Why good Windows sysadmins are easier to find than good UNIX/Linux sysadmins.http://www.windowsitpro.com/article/systems-administrator/why-good-windows-sysadmins-are-easier-to-find-than-good-unix-linux-sysadmins-#commentsAnchorMon, 26 May 2008 15:29:09 GMT
Don’t worry Orin! In a short time, Windows environment will be like the UNIX-Linux environments: Arcane and hard to understand documents, command environments like PowerShell, absence of quality tools that we had in the previous OS. For example, in 2000-XP-2003 you can easily backup system state data using NTBACKUP graphical tool. It is all gone in Vista and Windows 2008. If you want to this mundane task in Vista and 2008 you have to switch to command prompt and fire an arcane command. Thanks Microsoft! We will have a bad Linux copy now!]]>
MuratMon, 26 May 2008 15:29:09 GMThttp://www.windowsitpro.com/article/systems-administrator/why-good-windows-sysadmins-are-easier-to-find-than-good-unix-linux-sysadmins-#commentsAnchor
The website is down because someone removed the X-Boxhttp://www.windowsitpro.com/article/systems-administrator/the-website-is-down-because-someone-removed-the-x-box#commentsAnchorTue, 20 May 2008 15:53:11 GMT
Well, it was the staff’s fault for not properly labelling the "server" but the manager for being a theif. :-)]]>
ebraiter@videotron.ca Tue, 20 May 2008 15:53:11 GMThttp://www.windowsitpro.com/article/systems-administrator/the-website-is-down-because-someone-removed-the-x-box#commentsAnchor
Printer Management Essentialshttp://www.windowsitpro.com/article/printing2/printer-management-essentials#commentsAnchorWed, 05 Mar 2008 23:46:13 GMT
J]]>
agirvanWed, 05 Mar 2008 23:46:13 GMThttp://www.windowsitpro.com/article/printing2/printer-management-essentials#commentsAnchor
Stay Safer with Software Restriction Policieshttp://www.windowsitpro.com/article/group-policy/stay-safer-with-software-restriction-policies#commentsAnchorTue, 19 Feb 2008 01:15:22 GMT
please let me know how to secure files by disallowing drive c]]>
jaynasty05 Tue, 19 Feb 2008 01:15:22 GMThttp://www.windowsitpro.com/article/group-policy/stay-safer-with-software-restriction-policies#commentsAnchor
Stay Safer with Software Restriction Policieshttp://www.windowsitpro.com/article/group-policy/stay-safer-with-software-restriction-policies#commentsAnchorTue, 19 Feb 2008 01:14:22 GMT
nice to know how to be secured file by disallowing drive c to view by users]]>
jaynasty05 Tue, 19 Feb 2008 01:14:22 GMThttp://www.windowsitpro.com/article/group-policy/stay-safer-with-software-restriction-policies#commentsAnchor
Self Paced or Instructor Led Traininghttp://www.windowsitpro.com/article/commentary/self-paced-or-instructor-led-training#commentsAnchorSat, 29 Dec 2007 12:22:25 GMT
Good observations. It differs for many now though since a quick look around the folks attending the Windows Connections conference is anything but a Brit Spears concert. The IT crowd is aging and is extreamly busy. So interruptions during classes by clients in trouble from three thousand miles away are not uncommon, as well as sick parents or childern. Before going for a new Cert, I ask myself if this will help me be a more billable consultant. If yes then there is the added incentive to do both the selfpaced and then attend a class with a expert instructor and not a instructor guide reader. Either way, you get benefit that can be used in the trench warfare that is IT these days. /:>]]>
CURTSat, 29 Dec 2007 12:22:25 GMThttp://www.windowsitpro.com/article/commentary/self-paced-or-instructor-led-training#commentsAnchor
The website is down because someone removed the X-Boxhttp://www.windowsitpro.com/article/systems-administrator/the-website-is-down-because-someone-removed-the-x-box#commentsAnchorMon, 03 Sep 2007 07:44:44 GMT
This is a perfect example of the lack of respect that management types have for IT staff. If I was to play armchair psychiatrist it’s clear that the manager is projecting: if he had a games console in his office, he’d be playing on it and not working, therefore other people do the same. The bureaucrat clearly cannot be trusted to have access to the server room, and he demonstrated that he cannot go into the server room without stealing. I hope the guy lost his job too - someone at the bottom of that organisation would if they removed an X Box and took it home for their brat. And don’t force people to rate articles! Or force them to register!]]>
SachinMon, 03 Sep 2007 07:44:44 GMThttp://www.windowsitpro.com/article/systems-administrator/the-website-is-down-because-someone-removed-the-x-box#commentsAnchor
How to know if you are a Cowboy (or Cowgirl) Systems Administratorhttp://www.windowsitpro.com/article/systems-administrator/how-to-know-if-you-are-a-cowboy-or-cowgirl-systems-administrator#commentsAnchorFri, 30 Mar 2007 07:29:02 GMT
:-) awesome]]>
GunjanFri, 30 Mar 2007 07:29:02 GMThttp://www.windowsitpro.com/article/systems-administrator/how-to-know-if-you-are-a-cowboy-or-cowgirl-systems-administrator#commentsAnchor
Stay Safer with Software Restriction Policieshttp://www.windowsitpro.com/article/group-policy/stay-safer-with-software-restriction-policies#commentsAnchorWed, 14 Feb 2007 04:45:39 GMT
hope to know more details about the AD]]>
IbrahimWed, 14 Feb 2007 04:45:39 GMThttp://www.windowsitpro.com/article/group-policy/stay-safer-with-software-restriction-policies#commentsAnchor
Voice Recognition With An Aussie Accenthttp://www.windowsitpro.com/article/systems-administrator/voice-recognition-with-an-aussie-accent#commentsAnchorFri, 01 Dec 2006 09:33:08 GMT
If you’re using English, when spelling in the correction’s spelling panel, you can also say things like "A as in apple", or "B as in basketball". It works with any word that starts with that letter. For example, "X as in x-ray" and "X as in xylophone" both work well. -- Rob Chambers [MSFT] http://blogs.msdn.com/robch/default.aspx Architect - Windows Speech Recognition - We’re Listening... This posting is provided "AS IS" with no warranties, and confers no rights.]]>
robch_ms Fri, 01 Dec 2006 09:33:08 GMThttp://www.windowsitpro.com/article/systems-administrator/voice-recognition-with-an-aussie-accent#commentsAnchor
Mentoring a subordinatehttp://www.windowsitpro.com/article/commentary/mentoring-a-subordinate#commentsAnchorMon, 30 Oct 2006 15:17:53 GMT
Sometimes it’s helpful to find mentors for particular skill sets. For example, I might want to ask different people for mentoring in skills to make me a candidate for a management position, and for mentoring in technical skills.]]>
KarenMon, 30 Oct 2006 15:17:53 GMThttp://www.windowsitpro.com/article/commentary/mentoring-a-subordinate#commentsAnchor
The Zen of Certification: When to Studyhttp://www.windowsitpro.com/article/commentary/the-zen-of-certification-when-to-study#commentsAnchorThu, 28 Sep 2006 01:39:36 GMT
This is a great article. I will try the steps described. Some day I will pass the tests that I need for the job. Thanks for the good words of encouragement.]]>
alan tang Thu, 28 Sep 2006 01:39:36 GMThttp://www.windowsitpro.com/article/commentary/the-zen-of-certification-when-to-study#commentsAnchor
9 Ways to Diagnose Windows 2003 IPsec Problemshttp://www.windowsitpro.com/article/encryption2/9-ways-to-diagnose-windows-2003-ipsec-problems#commentsAnchorWed, 30 Aug 2006 02:55:07 GMT
I would also add the following: To restore default IPSec policies 1. Create a console containing IP Security Policies. Or, open a saved console file containing IP Security Policies. 2. In the console tree, click IP Security Policies on Name. 3. Click Action, point to All Tasks, and then click Restore Default Policies. 4. When prompted, click Yes]]>
AliWed, 30 Aug 2006 02:55:07 GMThttp://www.windowsitpro.com/article/encryption2/9-ways-to-diagnose-windows-2003-ipsec-problems#commentsAnchor
Checking out your employer before you accept that offer.http://www.windowsitpro.com/article/commentary/checking-out-your-employer-before-you-accept-that-offer-#commentsAnchorTue, 15 Aug 2006 04:14:33 GMT
Your advice is a very pertinent one, and I would definitely advise everyone to follow it for evident benefits. I would like to add that in most cases an employer will appreciate a candidate who knows how to do a good web search about his or her future-to-be company. So even if your primary objective isn’t to just know your potential employer, do the search anyway – and your doing your homework will receive extra credits at the interview.]]>
Mihnea D. Mironescu Tue, 15 Aug 2006 04:14:33 GMThttp://www.windowsitpro.com/article/commentary/checking-out-your-employer-before-you-accept-that-offer-#commentsAnchor
Don’t stay too long on the bottom rung.http://www.windowsitpro.com/article/commentary/don-t-stay-too-long-on-the-bottom-rung-#commentsAnchorFri, 16 Jun 2006 10:56:44 GMT
I work at a help desk for specific web conferencing applications. I am one test away from my MCSA and I like what you said but, I dont use the knowledge I gained from my Certs for this job. occasionally I get to but its mostly troubleshooting the features of the applications. I am continiuing with my SEC+ cert and going to school at the same time. This is my first IT job Im 34 and want to go into more networking admin type field. i have been here 4 months. Should I stay until I find something in the field I want. I guess what Im asking is do yo think this experience will help me even though I dont apply the knowledge i have gaind that often?]]>
scottFri, 16 Jun 2006 10:56:44 GMThttp://www.windowsitpro.com/article/commentary/don-t-stay-too-long-on-the-bottom-rung-#commentsAnchor
The Thirteen Year Old Enterprise Administrator.http://www.windowsitpro.com/article/systems-administrator/the-thirteen-year-old-enterprise-administrator-#commentsAnchorTue, 13 Jun 2006 00:24:20 GMT
Unfortunately (or fortunately for me in looking for material to write on), feedback indicates whilst most people are hypothetically aware of "best security practice", many people are somewhat hazy on its implementation!]]>
OrinTue, 13 Jun 2006 00:24:20 GMThttp://www.windowsitpro.com/article/systems-administrator/the-thirteen-year-old-enterprise-administrator-#commentsAnchor