DS3Circuit

http://www.wininternals.com/products/ Just wanted to share some of the finest "support" and file/machine recovery tools ever made. And if you are frugal ... there is always www.systernals.com

Just want to clarify something... You made an Image of your old drive on a new drive, for the exact same machine, and now you can no longer login? Does it reject every username and password? Or does it just hang before the login process? 1. NTRIGHTS.exe from the resource kit allows you to restore "interactive logon permissions" 2. What file system were you copying, and does Drive Image 2002 support it? 3. If there is network activity ... can you ping the machine ... if so ... can you check the event logs remotely? Sounds like LASS.exe or winlogon.exe is hanging Need more info....

1. Audit account logon events is when a domain controller receives a request to validate a user account. See article http://support.microsoft.com/support/kb/articles/q174/0/73.asp 2. Audit logon events is when a user logs on or off, or makes or cancels a network connection. Auditing is a great way to detect random password hacks and or stolen user credentials with those 2 audits.

http tunnel was used in our "educational environment" to TRY to circumvent our packeteer box.

http://www.http-tunnel.com/HT_Products_HTTPTunnelClient.asp Cause we all know port 80 is open ... well 96% percent of the time

Windows 2000 SP3 and Windows XP SP1 users. It seems that Microsoft has, in the above mentioned service packs added security fixes to Windows Explorer, which do not allow "Unsigned" templates to run. I have not yet seen a solution to this.

No problem about the links Still, I am not exactly pleased with the 2 articles, posting 2 answers .... LMHOSTS works well as long, as they can relate the name to the IP I am also not very confident with his ROUTE PRINT either ... again, I am not there, but I dont see a reason for all his different classes.

Then again, with the IP Forwarding, here is an article contradicting the other one that I posted ... http://www.microsoft.com/windows2000/en/...eForwarding.htm Now look what you are gonna make me do .... tonight I will be up playing on my test working and looks like building a win2k server router

Hmmm As long as you have enabled and configured RRAS for 2000 Server (through the RRAS MMC snapin), I dont see a need to use the registry key .... http://www.swynk.com/friends/shinder/ip_forwarding.asp . Then again, have you enabled IP forwarding in the registry. *shakes head* The reghack should be a global setting. I believe it operates dymanically. You are of course correct in establishing that IP forwarding is needed for IP communciction across multiple subnets. If you experiencing the inability to browse your network, all the more reason to suspect that its an incorrect gateway. Quote: Setup: DSL router : 10.10.10.1 255.255.255.0 2Kserver 1 : 10.10.10.2 255.255.255.0 2K server 2 NIC 1 : 10.10.0.1 255.0.0.0 2K server NIC 2 : 10.10.10.9 255.255.255.0 Obviously i can get internet etc from workstations and server on network 1. Same Net. I can get internet from 2Kserver 2, ping all the PC's and router on network 10.10.10.0. But from the workstations i cant get internet. I can ping router and other network, not google. Added ip route 10.10.0.0 255.255.0.0 10.10.10.9 to the router , which allowed the communication between networks etc. Are those subnet masks correct?? I am seeing Class A, B, and C in there ... Links: http://support.microsoft.com/default.aspx?scid=KB;en-us;q140859 (TCPIP Routing Basic) http://support.microsoft.com/default.aspx?scid=KB;en-us;q157025 (Default Gateway Configs for MultiHomed PC)

Agrees with APK ... nicely put And by default you got a couple of shares open, albeit admin shares .... C$, D$, etc (the root of your C D or any other drive) ADMIN$ (your system root folder) IPC$ (interprocess communication ....) You get to them from Right click My Computer, Manage, Shared Folders, Shares

Outta curiousity, why dont you use get a DSL router (linksys, dlink, etc) instead of this "setup?"

If there is a default gateway on the inside NIC, remove it. In past my experiences, removing this address forced packets to be routed out the Outside NIC.

even better IMHO http://ultravnc.sourceforge.net/

I know of 2 AV scanners that wont work in Terminal Services yet they will when consoled in .... Sophos AV and Command AV You might be experiencing the same limitation.

Well I know that if you ran builds of Command AV with Norton 2002, it would blue screen windows 2000. If you want to have multiple engines scanning your machines ... you should stick with sybari av. Other than that, it maybe a waste of resources ....

1. A DC and GC for each remote site ... Correct 2. GPOs for each OU ... Correct 3. Correct, WAN deployment of GPOs can be time consuming as well as bandwidth consuming ... possible way to avoid this is making GPOs running asynchronously. 4.Bridgehead means one server that allows AD replication to remote sites. 5. Exchange 2000 should be in native mode for your environment .... if users wish to use OWA instead of Outlook then by all means.

Care to run system file checker start run sfc /scannow

Link comes up with error, not found .... And here you got me all excited

http://dast.nlanr.net/Projects/Iperf/#download I know you can do it with cisco equipment ... 1600 routers and such Other than that and what APK has well stated, there arent many options. You could always run a network monitor to see just how much traffic flows to a particular IP

Quote: Quote: As for Exchange 2003, I've ordered the beta and will be having a lot of playing around with it to see what's there, although I doubt they'd shell out for it unless there was a very compelling case for it. The new OWA is very nice! Can't wait to install Office 11 when the CD gets here! Hoping it will mirror the OWA interface. I know what you mean ... I myself look forward to playing with exchange 6.5 ... and knowing the bleeding edge mentally of our company, we will be running it before SP1

Quote: P.S.=> I think that is about 100% right, unless anyone has any corrections... Ooooh, I think you nailed this one stone cold

Quote: So, just checking if I have this right....The mixed mode/native mode situation depends *only* on the versions of Exchange Server and as such, I could quite easily move to native mode for Exchange. (Note: the client OS and Outlook versions vary. OSes are 95, 98 and 2000, while Office versions are 97 and 2000) Correct ... client operating systems and Outlook versions have nothing to do with it Quote: As for using OWA and all that, yeah that's an option I'd like so people could check their email from home and offsite without going through the Terminal Server (ick). I think it's been half setup and is currently not working. Never worked at a business that used Outlook in terminal services, congrats for being daring And if you move to Exchange 2003, then OWA will just look like Outlook 11 provided the users use IE5 or better

http://support.microsoft.com/default.aspx?scid=kb;en-us;q272314 http://support.microsoft.com/default.aspx?scid=kb;EN-US;270143 Adding sites will affect replication, authentication speeds, but not neccessarily hinder anything that exchange needs, considering there is only one server. EDIT For people in satellite sites, they should use IMAP or OWA to connect to exchange has they have a lower overhead then the actual exchange client or POP3 for example

I'm sure this already has been covered here, so search the messageboard. PPTP needs Protocol ID 47 (Generic Routing Encapsulation) and port 1723 in order for a client to connect. 47 does the actual data payload 1723 does the authenication of the user. Check your settings in the RRAS snapin on your server to make sure you have created PPTP ports. Though I have not used Winroute, it sounds like the ports need to be mapped from the router to the actual server doing the VPN

More Info needed please L2TP or PPTP? Then we can go from there