January 2013 - Blind-sysadmins - lists.hodgsonfamily.org

Microsoft Security Compliance manager
by Andrew Hodgson 06 Jan '13

06 Jan '13

Hi, Has anyone used this tool? I am trying to use it to get a hardened server baseline, and export it as files that can be used on other servers outside a domain environment. I am finding the access to it using JFW really bad, which is the first MS product I have come across this. I suspect it is a similar issue to what you guys are seeing on SCCM 2012. I am getting the information read out to me sort of, but it is surrounded by a lot of junk when I arrow through lists, mainly the control name, and some other rubbish. This is making it very difficult to use it effectively. Has anyone used this product successfully, or deployed a hardened configuration (security policy and group policy) to several servers using another product? Thanks. Andrew.

1 0

Microsoft Security Compliance manager
by Andrew Hodgson 06 Jan '13

06 Jan '13

Hi, Has anyone used this tool? I am trying to use it to get a hardened server baseline, and export it as files that can be used on other servers outside a domain environment. I am finding the access to it using JFW really bad, which is the first MS product I have come across this. I suspect it is a similar issue to what you guys are seeing on SCCM 2012. I am getting the information read out to me sort of, but it is surrounded by a lot of junk when I arrow through lists, mainly the control name, and some other rubbish. This is making it very difficult to use it effectively. Has anyone used this product successfully, or deployed a hardened configuration (security policy and group policy) to several servers using another product? Thanks. Andrew.

1 0

Reset a Machine's SID without using sysprep
by Sean Randall 05 Jan '13

05 Jan '13

Hi all, I'm joining this list as I've recently started my undergraduate degree with a course on Microsoft Server Technologies at the Open University. In practical terms, this means I learn about configuring Windows Server 2008 network infrastructure, Active Directory etc, and I'm hoping to pick a few of your brains on issues as they relate to accessibility. First issue I have, I've got a bunch of virtual machines good to go but they're all clones. Is there a way of resetting their SIDs without using sysprep, so I don't have to go about re-enabling windows audio and so forth? NewSID seems to no longer be available. DO I even need to bother doing the SID reset thing? I don't know the entire scope of the university's course but am struggling to find a scenario where not doing this would cause a problem. Any help and advice gratefully received and, I hope to hang around on the list for quite some time. One day, maybe I'll be able to be of use to someone as new as I am! Sean. -- Sean Randall mailto:sr22473@my.open.ac.uk tel/sms::+44 (0) 7969662640 OUCU: sr22473 PI: C279004X

1 0

Spam Attacks
by George Bell 04 Jan '13

04 Jan '13

What do you guys do if attacked from one specific IP address owned by a major ISP (in the States!) We've had 4 attacks in the last couple of weeks, and the ISP's abuse@... Are failing to respond. I even telephoned them, and was told that they only communicate abuse issues via e-mail, and as a policy do not send out acknowledgements. George Bell Managing Director Techno-Vision Systems Ltd 76 Bunting Road Ind. Est. NORTHAMPTON NN2 6EE, U.K. Tel: 0160 479 2777 Fax: 0160 479 2726 e-mail: george(a)techno-vision.co.uk Web: http://www.techno-vision.co.uk <http://www.techno-vision.co.uk/>

3 2

Active Directory users & Computers Snap-in not appearing after installing RSAT on Windows7
by Barry Toner 04 Jan '13

04 Jan '13

Hi folks, I'm scratching my head at this one. I'm setting up my new work laptop and installed the RSAT from, http://www.microsoft.com/en-us/download/details.aspx?id=7887 I've went into Add Windows Features /Remote Server Administration Tools. Expanded AD DS and AD LDS Tools. And every other thing referring to ADD. Nowhere is the Users, Computers SNAP-in. I've ticked all the boxes I can but still under Admin Tools I can't get Users, Computers up. Anyone ever seent his? I'm sure it's something I'm not selecting but I could have sworn when I set this up on my desktop which has now been wiped it was installed by default. Can any of you guys suggest Any thoughts? Thanks, Barry. Barry Toner ICT Assistant Clanmil Housing 3 Waring Street Belfast BT1 2DX Email barry.toner(a)clanmil.org.uk Tel (028) 9087 6000 Fax (028) 9087 6001Barry Toner ICT Assistant Clanmil Housing 3 Waring Street Belfast BT1 2DX Email barry.toner(a)clanmil.org.uk Tel (028) 9087 6000 Fax (028) 9087 6001

1 0

Active Directory users & Computers Snap-in not appearing after installing RSAT on Windows7
by Barry Toner 04 Jan '13

04 Jan '13

Hi folks, I'm scratching my head at this one. I'm setting up my new work laptop and installed the RSAT from, http://www.microsoft.com/en-us/download/details.aspx?id=7887 I've went into Add Windows Features /Remote Server Administration Tools. Expanded AD DS and AD LDS Tools. And every other thing referring to ADD. Nowhere is the Users, Computers SNAP-in. I've ticked all the boxes I can but still under Admin Tools I can't get Users, Computers up. Anyone ever seent his? I'm sure it's something I'm not selecting but I could have sworn when I set this up on my desktop which has now been wiped it was installed by default. Can any of you guys suggest Any thoughts? Thanks, Barry. Barry Toner ICT Assistant Clanmil Housing 3 Waring Street Belfast BT1 2DX Email barry.toner(a)clanmil.org.uk Tel (028) 9087 6000 Fax (028) 9087 6001Barry Toner ICT Assistant Clanmil Housing 3 Waring Street Belfast BT1 2DX Email barry.toner(a)clanmil.org.uk Tel (028) 9087 6000 Fax (028) 9087 6001

1 0

Spam Attacks
by George Bell 04 Jan '13

04 Jan '13

What do you guys do if attacked from one specific IP address owned by a major ISP (in the States!) We've had 4 attacks in the last couple of weeks, and the ISP's abuse@... Are failing to respond. I even telephoned them, and was told that they only communicate abuse issues via e-mail, and as a policy do not send out acknowledgements. George Bell Managing Director Techno-Vision Systems Ltd 76 Bunting Road Ind. Est. NORTHAMPTON NN2 6EE, U.K. Tel: 0160 479 2777 Fax: 0160 479 2726 e-mail: george(a)techno-vision.co.uk Web: http://www.techno-vision.co.uk <http://www.techno-vision.co.uk/>

1 0

sharing files and printers, wireless, between 7 and xp
by David Mehler 02 Jan '13

02 Jan '13

Hello, I've got a setup that I'm wanting to share some resources pc to pc. The router is a belkin f5d7231-4, it's wireless as well as having some ethernet ports. In to this a win7 home premium box is plugged. This box has attached to it two printers, one via parralel port it is a brother laser printer, the other via usb, but has wireless capability, an epson stylus nx400 it's a printer, scanner, copier and can as I said do wireless. The two other machines are windows xp laptops one here the other roaming but comes back. What I'd like to do is share some files from the 7 box and allow the xp machines to get to them, and to share files from the xp box and allow the 7 box to get at them. For the printers I'd like to share the laser attached to the 7 box and also to get the epson off of a USB connection to the 7 box and have it go full wireless so that all three machines can get to it. I don't have a domain, and I've understood that 7 does things differently in terms of sharing, I would use a workgroup setup if these were all xp machines. Suggestions welcome. Thanks. Dave.

4 27

NVDA and Remote Desktop support
by Bram Duvigneau 02 Jan '13

02 Jan '13

Hi all, I just subscribed to this list. I'm not really a sysadmin, but more of a software developer. However, as a good developer you certainly need some sysadmin skills. I recently developed a little prototype to see if it was possible to make RDP accessible using NVDA. This works quite well. Right now, there is only basic speech support and this has not been implemented in the way I would prefer. So, there's still quite some work to do to make this a good solution. I was wondering if anyone would be interested in such a project? Best regards, Bram Duvigneau

9 12