ryoko

How many DC's do you have? Sounds like a replication issue. -RY

I will assume you have the correct networking settings on the backup server to access the resources on netware. First look into permissions. You may not have the correct permissions in the NDS. Next, create mapped shares to the novell's sys drive (or another resource if you are not going to capture the whole HD). I have been able to do more things on a mapped share than with a unc path. Enterprise backup software (I personally like veritas's) should let you connect through the share. Unfortunately that functionality is usually limited to the enterprise versions which are expensive. See if you can get a demo first. -RY

What protocols are you using?

Well, I'm really taking a shot in the dark on this, as I really have no idea but this might work. You said you can do an import but novell groupwise is not an option. Does novell itself have an export to go into something you can use? It would require an extra step, but it just might work. Even a text based file should work, as I've seen exchange 5.5 can import an plain text file with a little cleanup. I'm sure 2k can handle that also. Like I said, I haven't had to try it, but maybe it will get you on the right track. -RY

I'm pretty sure it defaults to lan settings, you need to tweak it for 56k, however you seem to understand the idea already. One other thing is a company called analogx has a prog for download called netstat live. Give it a try, I think it is 30 day uncrippled shareware or possibly if you are lucky freeware. It will give some nice info for you to troubleshoot with. I'm sure you will find it useful. -RY

There also is a reg setting for MTU and receive window. I do not know if there is a tweak utility for win2000, or if it is an important as in win9x, but it may be worth looking into. -RY

Why VPN? You could configure the X400 connector to link both the servers without the VPN hassle. Granted, it would perform better if you can use the VPN as you will be able to use more efficient connectors, but if it is just to sync files between 2 exchange servers, the vpn is not essential. Once you encrypt your tunnels, you will lose the performasnce benefit anyway. The VPN software I use is quite expensive, and certainly is not worth the cost if you only are connecting 2 mail servers. I doubt there is anything of quality for the windows platform that does not cost an arm and a leg. -RY

2000 is also better with docking stations.

Please let us know what you did to finally make it work.

If you have win2k, you can use NAT on the lan's NIC. You set that nic as the default gateway, and in the network settings of the win2k system enable... hmm I think it was called ip routing.I know it is the last tab in the tcp/ip advanced settings, whatever it is called. I don't need to go there often, as I don't setup a win2k router everyday.

I'm sure there is a registry tweak for it. Try looking at a few websites with these tweaks in them, or look into some of the programs like tweakui or xteq systems' x-setup.

I use pgp. It does what you want, however if you want a comercial product there are many out there. Don't go with password protected archives. They can be cracked too easily. Even brute force attacks will take surprisingly little time to break through.

Unfortunately I do not remember the commands I used, but basically in a login script that I wrote, I checked for an environment variable to determine if the pc was nt or 2000. I think it was if %os% , but I may have checked another variable. If it is not nt or 2000, then the script assumes the client is win9x, it then jumps to code specifically for the win9x clients. Hope this helps you some.

Here is another idea, First make sure you have 2 accounts, administrator and a generic account. Log into the generic account, and set it up exactly how you want it for all of the users. Make sure you map the drive. Next log in as administrator, set the folder options to show all files. Then copy the account you were in to the "default user" profile (normally hidden). Now any new user accounts will get that setup, and I'm almost certain the mapped drive will work. If all your user accounts already exist go with the login script on the server or place one in the "all users" profile's startup folder on the workstation.

I found some cd-r programs require local or domain admin privlidges. Try and see if the administrator account works on it. -RY

I always have 3 particular ports opened and listening after I boot my pc up(I verified it through netstat and also a shareware program). Is there a program that will detect what program is listening on those ports? This is using win9x, however I'd also like to know with nt and win2k. The ports are above 5000, and looking in various port lists I can't find an app that uses them. Thank you in advance, RY

www.cai.com Its free, and works pretty good. Simple install and config. Basically it eliminates the bloat of progs like NAV but gives the functionality. Actually a better link may be antivirus.cai.com

bytemangler, Have you tried anything with group policies? That might help.

When you open network neighborhood, you will see the list of computers on the network. In a win9x/Nt environment, a computer assumes the role as a browse master. If you have a pdc, then it becomes the browse master. bdc's get second choice followed by member servers, finally the win9x computers. I'm not exactly sure where win2k servers fit in there. The browse masters do a few things including helping resolve netbios names. The reason I asked you to let that list refresh is to eliminate another possible item causing an issue. Knowing you can resolve the host name lets you focus on other problems. Regardless, I believe you problems are with ports. You are blocking something that should not be blocked in order to establish the connection. Try focusing on that. Open all the ports I mentioned on the server. Then if things work, close one by one until you eliminate which port exactly is needed.

You also can try adding 2 nics to the win2k machine, and configuring ip packet routing. Personally though I'd purchase a hardware router to do the same thing. then you do not need both machines to be on. -RY

You misunderstood part of my reply, I meant turning off zone alarm for the 20 minutes and trying with it still disabled. The reason for that is to let the master browsers, to add your computer's name to their browse lists. The good news is that you isolated it to zonealarm pro. Open up the following ports, and see if this helps. 53 for dns, 143 for imap4, 993 for secure imap4, 389 if you use LDAP, 110 and 25 for pop and smtp. If you connect to an exchange server then try 135 (although you really shouldn't need to). And finally try out 443. I'm almost positive it is a blocked port. Remember that outlook creates 2 major processes that you should see in zonealarm. There is the outlook program, and also mapisp32.dll . If you opened up ports for one, make sure the other is open also. I remember 2 items to open when I set up the outlook on ZA a while ago, however I can't be sure there wasn't a third. Good luck, RY

Hello, I would like to begin auditing accesses to various directories by all metwork users in order to obtain some statistical information. The problem is that among all the users, there are a few I do not want to be included in the auditing. Now usually I would set up a group with everyone to be audited, and then add that group to be audited for the specific directories. Unfortunately I have many directories to audit, and different people to exclude. Also the list of exclusions will be changing, and there is a great opportunity for error by doing things manually, not to mention the time it takes. Does anyone have any suggestions? Perhaps something I did not think of. This kind of makes me thing of auditing home directories. You would not want the owner audited as then you would fill your log up. Of cource home directories are easy as you just set permissions instead of audits, but this gives you the idea of what I'm trying to do. Thank you in advance, RY

I'm sorry, after looking again at the screen shot, it looks like you don't have SSL enabled. My mistake. However I did have another thought. Try setting up a completely new connection to that mail server from scratch. Sometimes there is a little error that is hard to catch, but when you start over you get it right. Spelling errors of domain names comes to mind. You also mention that you are using ZA pro. Try turning it off for a few tests. I have disabled it, waited about 5 minutes for the master broowsers to update, then was sucessful with my tests. Good luck, -RY

The reason you can get one connection to work, but not the other is that SMTP is being blocked, but pop3 on port 110 is getting through. Also I noticed your smtp is set for SSL. Try disabling it (if your mail server does not require that method of authentication). Either SSL is not able to get through to the mail server, or the mail server is not set up to handle SSL requests. -RY

Thanks for the tip, I have run port scanners to test my connection, like the one from grc.com, and I tried a few others. I know from netstat that I have ports open, however I specifically block them from my firewall. Therefore even if there is a program opening them, it should (hopefully) be blocked. A portscan will only tell me what ports are open, not what program is opening them. That is what I'm looking for. -RY