DS3Circuit

www.vcdhelp.com That site alone will give you the necessary links, instructions, and software to get you going. HTH

Quote: just a reasonably priced Mono laser with 10/100 Ethernet built in. For that I would recommend a HP 2200 DN, comes with JetDirect(ethernet), USB, Parallel, and IR printing capabiltites, and wont hurt your wallet. Quote: I can just plug it into a hub/router, and then the other computers on the network will be able to print to it? Correct as long as those computers support direct IP Printing .... 2000/XP support this. 9X and such will require a download from HP to enable direct TCPIP printing. Quote: just configure the printer with an IP, or assign it with the DHCP router By default they will seek a DHCP lease. Not all models are configurable with a static IP. The higher in cost a printer is, then you will be able to give it a static IP. If possible, just reserve the IP lease. Quote: Would I connect to it through a TCP/IP port? Start / Control Panel / Printers / Add Printer / Local Printer / Create a New Port / Standard TCPIP Port / Type in IP HTH

APK Possibly, but a system state backup incorporates more then just the registry ... boot files, COM+ class registration database and the metabase are added in workstation/standalone server configs. What you are describing is well described in this article http://www.jsiinc.com/subf/tip2500/rh2500.htm But you use WinXP dont ya APK? If so ntbackup backs up the the computer's registry hives to the %systemroot%\Repair folder. It does NOT make a copy of your NTUser.dat to disk. You would have to include the Documents and Settings\%username% in order to fully restore a working registry/profile. HA, me thinks I am going to try this out and see if I hose a machine or not. HTH

Restore the system state of any backups that you may have. If this isnt possible, try using the ASR when booting off the XP CD. You may be asked for ERD floppy. http://www.longshome.com/registry_repair.htm

http://www.ntfaq.com/Articles/Index.cfm?ArticleID=38471

Why not just forward port 21 from the external public NIC of the ISA box to the IP of the internal nic on your FTP server?

Did you disable simple file sharing?

1. Event Logs? 2. Blue Screen Error Messages? 3. Service Pack and hotfix levels? 4. What are the roles of this server?

What you saw could also have been Altiris Vision, though for personal use the cost is too great. Adamjackson suggested the correct applications, and add to mix, PCanywhere.

Quote: and it was spotty at best Agreed. Are these machines going to be placed in a domain? Or are they all just standalone / kiosk PCs? This sounds more "politcal" than truly anything else. If these machines are being placed in a domain, then any settings you apply, by default, will be overwritten by global group policies.

Built in ... http://www.realtek.com.tw/downloads/down...=True#14Windows (link may wrap)

Microsoft Releases New Standards-Based Wireless Solution To Enhance Security for Windows XP Customers. http://www.microsoft.com/presspass/press/2003/mar03/03-31WiFiProtectedAccessPR.asp Quote: Wi-Fi Protected Access increases security on two fronts: data encryption and user authentication. To improve data encryption, Wi-Fi Protected Access resolves existing cryptographic weaknesses and introduces a method to generate and distribute encryption keys automatically. Each bit of data is now encrypted with a unique encryption key, greatly improving security. The solution also introduces an integrity check on the data so an attacker cannot modify packets of information being communicated. And to improve enterprise-level user authentication, Wi-Fi Protected Access authenticates every user on the network while keeping those users from joining rogue networks. HA, looks like a blend of 802.1x and VPN access .... this would have been more usefull about 8 months before we distributed and implemented our cisco aironets with 802.1x and PTPP access. Questions? Comments? Complaints?

LOL oh well, guess nobody is interested in wireless security

Quote: I didn't realize Packard Bell was even still around to make computers!!! I believe they are based in Europe now ...... IIRC

Silver Dagger has the correct concept, though ease of administration dictates a centralized repository of manageable rules. Therefore, are you using a windows 2000 or 2003 domain to establish a single security context? If you are, you can establish GPOs at the domain, site, and/or OU level which will affect all 200 machines. And through that, a single change on a GPO will be propagated to all those machines without having to visit each one to make that change. For deployment, if you dont have Ghost or any other duplication software, you can always use RIS. Anymore specific questions?

http://www.totalrecallpress.com/downloads/Free/ID-Theft-PDF.zip This is a great read from one of our fellow colleagues.

Well if it isnt hardware based, I would double check; 1. Remote access policies. 2. Enable PPP logging on the RAS box, and check those logs. 3. Try to see if a local account on the RAS box has the ability to authenticate, unlike a domain account. 4. Is the Client for Microsoft Networks installed on the 98 laptops? 5. Types of authentication security, such as MS-CHAP, and what levels of encryption. I'm sure clutch, APK, and others will chime in here as well.

www.deepfreezeusa.com Worth the investment

Quote: Well, that's probably because I don't recall hearing much about it . How long have you used it? Well clutch, it was beta tested in our environment, only to have it be rejected by the product's cost. IIRC, the engine itself is great, and during the MECs, other exchange admins highly recommended it.

http://support.microsoft.com/?kbid=299684 http://support.microsoft.com/?kbid=227747 http://www.windows-expert.net/faq/Networking/rras-does-not-authenticate-user.asp http://www.cottagesoft.com/Win2000FAQ.htm I believe for Windows 98 the latest version for DUN is 1.4, is this installed? I have also encountered this when a v92 modem is trying to connect to a v90 modem pool on our RAS servers. Changing the AT string on the clients to force v90 comptability solved our issue. This was the string .... +MS=v90.0 Hopefully these ideas and links will solve your problem.

regedit /s myregfile.reg is the preferred way to silently install registry entries

By far the best scanning AV engine, or in this case, engines for "servers" is Antigen from Sybari. For desktop use ... hmmm I am partial to Command or TrendMicro. Throwing in my $0.02

Start / Run / CMD / GPRESULT http://www.jsiinc.com/SUBH/tip3700/rh3718.htm The above links to Fazam Lite, which will help you track it. Also look at event logs. Setup auditing on "account management" to see what user / process is actually changing the permissions. Thats a good start.

8) Thank you APK Hey, Im just happy Mr. G's LAN is running the way he wants.

Sounds like a GPO is replacing the credentials ...