DS3Circuit

http://support.microsoft.com/default.aspx?scid=kb;en-us;236033 HOW TO: Enable Debug Mode for Remote Install Servers RIS Client May Stop Responding in Text-Mode Setup on a Network Without NetBIOS http://support.microsoft.com/default.aspx?scid=kb;en-us;243500 Error Message: The Operating System Image You Selected Does Not Contain the Necessary Drivers... http://support.microsoft.com/default.aspx?scid=kb;en-us;247983 I am asking the following questions because I was not sure of your configurations and exact error messages. Other than that.... 1. Have you tried the bootdisks for RIS? 2. Does your DHCP hand out IPs for BOOTP? 3. Do your switches forward DHCP/BOOTP requests? 4. Event log on the RIS server? 5. RIS server is authorized? 6. What PXE version does your NIC support? HTH

http://www.systernals.com/ntw2k/source/newsid.shtml Newsid.exe /a for automation

Plenty of these similar tools exist ghostwalker and sidgen being just a few more

Quote: Umm, we are already heavily db-enabled. Didn't get the memo eh? Nah, I was too busy filling out TPS reports *1* Quote: So, did you get t-boned with this one? Boned at exactly 12:39 AM, Saturday, EST Quote: so I would imagine it was before you could catch it, or you were under the impression someone else had it under control. Bulls Eye ... My responsibilites include, but are not limited to AD, Exchange2000, Wireless, blah blah .... however PIX administration and SQL servers belong to others ... who are, shall I say, less informed However everyone in my department plays janitor when one person makes a critical error into a huge problem. Quote: You don't seem like the type to get nailed on it (yeah, a rarity, that was a *compliment*; you may commence with the "oooohs" and "ahhhhhs") Takes a bow Then again, the "oooohs" and "aaaahhss" were replaced with grunts and "@#^%!^!&" as Ipsentry keep paging me throughout the night. Quote: As for me, I can generally count on one hand the amount of ports per IP that I allow through my firewall, so monitoring this is much easier. Also, since I am in charge of these things, I can do whatever the hell I please with complete disregard for others. A lesson well learned apparently from previous mistakes. ------------- *1* Quote from Office Space .... great movie

Opening needed SQL ports to the internet is of course a NO NO ..... Now should I come out and say "it is the Admin's fault" .... well then I would be implying that my boss was either misinformed or incompetant Lemme side step with this .... Accidents don't happen, they are caused. Caused by either neglect or stupidity. Having our SQL servers exposed to the internet, was not an accident (library catalog web servers and such). Yet having them unpatched and having the ACL on the PIX for them wide open .... well maybe that was an accident... In the end, I blame both MS and poor administration. Just think Clutch, when everything gets ported over to DB filesystems and everyone runs MSDE just to access there MP3s .... The entire planet is getting more and more database enabled... Either people will get serious about security, or there will be wailing and gnashing of teeth End of Rant ... Thank you Clutch and others for putting up with that

Tracking Spoofed IP Addresses Version 2.0 Heres a good article for all you cisco folk http://www.cymru.com/Documents/tracking-spoofed.html

Just to expand a little more on this issue: Most SQL Admins would not install a major SP, such as SP3, without a month or two of testing to be sure it doesn't have any undocumented surprises... or other unexpected side effects. And, what a royal pain it was to apply the two patches (which had to go on SP2)? This was not a matter of just clicking on a web link, sitting back, and rebooting an hour later; this requried moving files around, or writing a script to do that. And if you applied the security patch without first applying the fix for the memory leak... So, in my view, MS is getting away with murder if most of the world thinks that it was lazy or ignorant sysadmins who couldn't be bothered keeping their machines patched. I agree with you that's not a good thing, but it is the fault of MS, not the admins, in my opinion. Anyways, just figured I should share some $0.02 Links www.securityfocus.com http://www.eeye.com/html/Research/Tools/SapphireSQL.html

If your web browser doesnt let you into your hotmail .... try configuring Outlook Express. Still IMHO, both OE and Hotmail are poooooor clients/services, even for free.

Not this upcoming version of exchange, which is 6.5, but later releases will be built upon this new NFS as well

Thanks for the quick response APK Ummmm I just installed the adminpak.msi and cant seem to find the snapin .... was it part of the .net or 2k admin tools?

This has been covered in the forums quite a bit. May I recommend searching the forums for numerous answers. The basic jist of it is to install Microsoft Client on the 98 machine and to create a user account on the 2000 machine for the 98 client to log into. If not that, then you may enable Guest access on the 2000 machine. HTH

Strange We have 3com 1100 and 3300 switches whose nodes connect to Intel 10/100 nics .... the nics are NOT pinned. We have been slowly migrating to cisco 2950s And going with the wireless machines in the domain ... I have yet to see machines in a domain, with a wireless nic receive the proper security contexts and/or policies. Check your event logs for netlogon and userenv errors. This may be causing your roaming profile errors ... Granted I havent used the "latest" drivers since december ... but wireless nics from cisco 350s to dlink "generic" crap wouldnt correctly function in a domain environment.

Windows XP SP1 Office XP SP2 Have they been applied? http://support.microsoft.com/default.aspx?scid=kb;en-us;812513 http://support.microsoft.com/default.aspx?scid=kb;en-us;312181 Anything in the event logs ?? ....

3 com firewall ... heh didnt know that was still supported All of 3coms netbuilders and corebuilders have been discontinued for over 2 years. You can telnet into 25 for debugging your SMTP connectors ... like checking for open relay and so on ....

Well IIRC... RDR is used for the browser election services ... and "bowser" monitoring, so I image that as being in the "automatic" startup Parallel would be used for printing .... which wouldnt be needed till it was called, so put that in the "manual" state HTH

I no longer have NT machines to play with but on 2k and XP the following switches exist for START /min = Start window minimized /low = Start in IDLE priority class Again I dont have NT anymore, but dont shortcut properties as well allow you to start an application minimized, even batch files. $0.02 If these features werent present, lemme know, I will be more than happy to search through some RKs or freeware apps.

Cisco Aironet Antennas http://www.cisco.com/en/US/products/hw/wireless/ps469/products_data_sheet09186a008008883b.html Aironet Pricing http://www.tribecaexpress.com/aironetprice.htm

LMAO ..... Shhhhhwwweeettt

Another thing .... RIS is particular about its PXE environment and the possible boot disks to create ...... Adam did give you good links

An addendum to everyone elses input, in the use of roaming profiles, there are registry keys to be set on the clients where you can specify which folders not to be included in the roaming profiles ... ie. TEMP folders. How to Debug roaming profiles. http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=15091 Exclude Certain Folders http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=15112 Oh and of course ... pin the speed on your nics and ports

Going from memory 2. No 3. No .... or not yet .... lookin at a RC 1 box 5. Why run ICS when RRAS with NAT is far superior, especially when you are discussing a server platform

http://www.microsoft.com/smserver/default.asp

We have several for out Mac 0S 9.2.2 users ..... I will try to dig up the name of the manufacturer If you plug it into windows xp though ... device manager lists it as a composite device

http://www.eventid.net/display.asp?eventid=1265&source=

HOW TO: Create a Custom Default User Profile http://support.microsoft.com/default.aspx?scid=KB;en-us;q305709 The Desktop.ini File Does Not Work Correctly When You Create a Custom Default Profile http://support.microsoft.com/default.aspx?scid=kb;EN-US;321281 How to Assign the Administrator Profile to Other Users http://support.microsoft.com/default.aspx?scid=kb;EN-US;156568 The second link I believe gives addendums to the first link so that it will work in Windows XP. Any particular reason you are using Sysprep?? installation on numerous hardware platforms or is it just for a new sid?? If its just a new sid, I found it to be easier to just use newsid.exe and just ghost the machines over and over ..... My $0.02