[There's a reason that Yoda is the unofficial mascot of SBS.  Size indeed matters not.] August 2006 - Posts - THE OFFICIAL BLOG OF THE SBS DIVA

August 2006 - Posts

http://www.chrisrue.com/funcave/2006/08/the-future.html

Chris added a lot of class to the SBSshow.

We bonded over SBS, Sharepoint and licensing..... and just because I won't hear him as often as I did before...doesn't mean he's not still a vital member of the SBS community....

it's still sucky nonetheless....his silver tongue added so much to the show.

Posted Thu, Aug 31 2006 21:10 by bradley | with no comments
Filed under:

Fridays suck.  They really really do this year...

I'll give you examples:

  • We tend to get into the "we hate R2" on Fridays
  • On a Friday it was announced that SBS 2003 R2 was recalled
  • ...and in a moment of unfortunate timing... on the same Friday Dr. J announced he was leaving Microsoft

Tomorrow also sucks.

...but in the spirit of Scarlett O'hara...there's another day...another day to learn some more...to be taught a new lesson...

So what did I personally learn?... Let's see...my own personal lessons from Dr. J:

  • Making the local admin password the same as the domain password is a stupid thing to do (I don't do that anymore)
  • Thinking that power user was secure (I don't EVEN want to acknowledge that my original GSEC essay was how I made everyone power user in my office and considered that was making folks secure...man was I dumb on that one...
  • When SMB signing is a security risk and when it's not
  • and a whole bunch more...

.so I'll do my best to 'Go forth and do good'.  You should too.  I have a strong feeling ... that we'll all still be learning... a ton... even after one sucky Friday.

Posted Thu, Aug 31 2006 20:48 by bradley | with no comments
Filed under:

Tomorrow night is "Vista joining the SBS domain" night in the ol' network and I need to see what stuff doesn't work with Vista and Office 2007 in my office... I said I was going to do this before but didn't get around to it.... and today on Sean Daniel.com's blog is the "how to get Vista to play nice with SBS" information


http://seanda.blogspot.com/2006/08/looking-to-run-vista-rc1-on-sbs-2003.html

Posted Thu, Aug 31 2006 12:55 by bradley | with no comments
Filed under:

--update-- we're hearing more reports of "froze" grey screen servers... hang loose for more details.. a reboot that takes a longggg time appears to clear it up....

Event Type: Warning
Event Source: Ntfs
Event Category: None
Event ID: 50
Date:  8/31/2006
Time:  8:01:04 PM
User:  N/A
Computer: DOMAIN
Description:
{Delayed Write Failed} Windows was unable to save all the data for the file . The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 04 00 02 00 52 00   ......R.
0008: 00 00 00 00 32 00 04 80   ....2..€
0010: 00 00 00 00 b5 00 00 c0   ....µ..À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: b5 00 00 c0               µ..À   

Okay so in my infinite wisdom I enabled shadow copies and wanted to place them off the main harddrive... so ...says I... why not stick them on a usb harddrive... brilliant right?  Well until the drive starts to go south and ends up freezing up the server in the process....

In the event viewer under WARNINGS... so mind you ...they were not showing up in my daily email.... was this over and over and over again..

Event Type:    Warning
Event Source:    PlugPlayManager
Event Category:    None
Event ID:    257
Date:        8/31/2006
Time:        6:49:36 PM
User:        N/A
Computer:    DOMAIN
Description:
Timed out sending notification of target device change to window of "C:\WINDOWS\Explorer.EXE"

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

And because I was relying on only the critical... I didn't see that the issue of that failing harddrive was about to smack me in the face tonight.

Bottom line...there are reasons to use usb drives.. like for backing up on a planned rotation.  But it's not a good idea to use one as an external location for shadow copies.

Shadow copies now reenabled and on the proper hardware. Lesson learned for the evening.

P.S.  someone asked today what happens when they delete a file on the server does it go to the recycle bin and with shadow copies enabled I can get deleted stuff back.  It's way cool and something you should be ensuring is fine tuned (I take a snap every hour on the hour) and show your clients how to restore a 'shadow copied' file.

VioSoftware.com - Buy Cheap Software Discount Sale Small Business Server Premium PG:
http://www.viosoftware.com/Small+Business+Server+Premium+PG/?utm_source=nextag&utm_medium=mall&utm_campaign=T75-00035

To whom it may concern at VioSoftware:

Just a little hint here... there is a suggested retail price for SBS 2003 and when the price is much lower than it should be, I smell a rat.

Knock it off.  It's vendors like you that have made us get stuck with Windows Genuine Advantage and other such anti piracy stuff that we have to deal with in the small business world.

..and then what many a Microsoft partner doesn't appreciate... is when they try to do the right thing and then firms like you still stay in business.  We're getting headaches trying to make sense of licensing and Microsoft EULAs and you are ripping the rest of us off and getting away with it.

Microsoft never sells a CDO {cd only} version of SBS 2003.  So Vio Software?  Knock it off.  Stop screwing it up for the rest of us so that we have to deal with WGA these days. 

And while I'm in my ranting on EULAs and media kick tonight... a word for the folks at Microsoft... I updated my member server to the R2 version and it needed a product key code... thus giving me a warm fuzzy feeling that I paid for a product upgrade.  The retail SBS 2003 R2 upgrade that I got from buy.com that goes on top of the SBS 2003 sp1... it has no product key code on the back...now admittedly buy.com sent me old wrong media... so for all I know the real final R2 standard upgrade has a product key code...but if it doesn't....for all of those folks that rant that R2 is just a bunch of service packs... not having a product key code on the Standard upgrade sort of reinforces that.  Next time when you have a product that you have us buy... stick a product key code on there no matter what.

P.S.  Eli.. Microsoft doesn't sell a "CDO" only SBS product.  It's a clear rip off and was confirmed in the mssmallbiz yahoogroups by Microsoft employees.  This isn't a rant.  They are clearly ripoffs and pirates.

There are three ways to buy SBS - retail, OEM, VL.  That's it.  And when the price tag is too good... you know it's counterfeit.

P.S.S.  I agree with Keith there is a "media only kit' which I myself have purchased.. BUT.. it's like $40 someodd bucks and I already paid for the license via the Open license/volume licnese channel.  If you are a VL/OL customer... you are being ripped off buying "CDO" software.  Folks...there is no 1/2 agreement... this firm is ripping people off.

Hi susan
 
Please advice us on the best possible solution for this scenario.

  Currently we have only one office in B__. We are running SBS 2003 on our network. We use windows authentication extensively and also exchange for email. Right now we are not using Sharepoint server at all. All clients are Windows XP/Office 2003 Standard.

 This month we are setting up a new office in D__i and within 2-3 months we will have another office in M__i followed by offices in all the metros. I wanted to set up a local windows server in each office to cater to the authentication needs of the systems in that office. Also, in the B__ e office I would like to setup a backup domain controller (to replicate active directory).

All employees (across offices) will need domain.com email address. I have configured Outlook over http and want to use that for the time being. Hence, I require only Windows 2003 Server (with replicated active directory) at the branch offices. At a later point, I want to setup local exchange server as needed.

All offices are connected with ADSL lines to the internet and there is no inter-office link. This setup will not change (meaning we won't have inter-office linkage)

I did some research on this and found that SBS cannot support this scenario. Is that true? If yes, what is the best way to go about it?

Hi back at ya.... first off I'd like to bring up the idea of "branch offices" versus "branch computers"

Remember that with a SBS network we cannot do domain trusts..but we can have additional domain controllers to assure domain authentication.  With the R2 era we can also add additional Exchange servers without adding cals.

Now then ... there is no wizards in this setup and any additional Exchange server would be manually set up.  But that doesn't mean that SBS cannot be the base server of a small firm's domain.  As long as you stay with the single domain setup ...and given that I know someone running umpteen computers in a workgroup... I personally think this is a do-able setup.  Persistent VPNs and what not...but we're doing these sort of setups now with the SBS server as the base.

The problem is that SBS is just way too good of a base to not use in a small firm.  Okay okay, the cheapness is a strong thing in it's favor...but given that SBS is the only one with RWW and the wizards it has.. it's too dang good to give up.

Microsoft tends to say that SBS is not for a branch office setup...but the other day Chad had a SBS network with 13 offsite "branch" connections to that SBS server ...all locations with one or two workstations. All with persistent VPNs. Is that a branch office?  Probably not in Microsoft speak...but in a SBS domain? 

..if it works... it works.

Gain valuable information on how to monitor the overall security level of an environment and the security level for existing equipment.

Learn about the challenges, needs, and solutions associated with protecting a network environment from unmanaged clients. This security guidance provides information about how to automatically notify and/or disable distrusted systems when they attach to a network.

Posted Wed, Aug 30 2006 12:51 by bradley | with no comments
Filed under:

Unexpected lines may appear on a printed page when you use a PCL5c minidriver in Windows Server 2003 or in Windows XP:
http://support.microsoft.com/?kbid=908112
The approval status appears as Install instead of Mixed on the Windows Server Update Services Administration site:
http://support.microsoft.com/?kbid=921895
The Remote Registry service does not stop after you install the security update that is associated with security bulletin MS06-008 on a Windows XP-based computer:
http://support.microsoft.com/?kbid=923416
Error message when you try to connect to a remote computer by using Remote Desktop on a Windows XP Professional Edition-based computer: "The remote computer disconnected the session":
http://support.microsoft.com/?kbid=921045
FIX: The remote assistance feature does not work correctly after you install Windows XP Service Pack 2 on a computer that already has Windows XP SP2 installed:
http://support.microsoft.com/?kbid=923214
FIX: The backup application stops responding when you perform a backup that uses a volume snapshot in Windows Server 2003 with SP1:
http://support.microsoft.com/?kbid=923628
You experience problems when you use a Microsoft update service:
http://support.microsoft.com/?kbid=924092
You receive a "STOP 0x000000D1" error message when you try to install Windows Server 2003 on a computer that uses a SCSI controller:
http://support.microsoft.com/?kbid=918748
Error message when you try to log on to a terminal server that is running Windows Server 2003: "STOP 0x000000C2 0x00000007, 0x00001163, 0x42040001, 0x88990be8":
http://support.microsoft.com/?kbid=918120


 

 

Okay so I started testing RWW-Guard from Dana and I'm in love.... you can do staged paranoia... you can track log ins into RWW (but not log outs...but it's better than we have now), it will ultimately provide a two factor authentication for RWW and even if you don't use it on all accounts (you can exclude some accounts) ...man the ability to better protect the Admin account ALONE is priceless.

Check this out!

As a veteran from traveling the other day...

  • Laptops can go on board
  • Gels and liquids need to be checked
  • Contact lens solution of less than 4 ounces can go on board
  • RXs of a small liquid amount can go on board
  • Liquid makeup must be checked
  • Liquid mascara must be checked
  • Solid deodorant can go on board
  • Gel deodorant has to be checked
  • Hair gels, hair spray, toothpaste must be checked

..and is it any wonder that the Cake Mascara from Sephora was sold out in Seattle when I went there?

 

Posted Tue, Aug 29 2006 23:10 by bradley | with no comments
Filed under:

So here you are an IT admin and you want to control all your printers in one place.... so how do you do that remotely?

Well one way if you have a member server is to upgrade it to the R2 platform.  There is a Print Management console that you can then control not only network attached printers but any locally attached printer as well. 

To get this, you need to install the Windows 2003 R2 on a member server (it can't go on the SBS box) and then add the Print server role to that server.  Then you can manually add all the print servers you want....and in this case "print servers" can also mean local printers on workstations.  You can even print test pages remotely... this could be fun as I freak out folks at the office....

(just a reminder...this is not in SBS 2003 R2.. it only goes on normal R2 servers)

There's a saying I use when something is a bit... well uncomfortable to talk about.

There's an elephant in the corner of the room in the IT world... at least in the rooms I've been in anyway (this is totally my personal opinion and my perspective living in California).  Something that I don't think we're addressing at all.

Something I'm going to call the Multi-culture problem.

It all started with I went through the drive through restaurant at a place next to my old highschool.  And while the menu board where you ordered was in English, the signs as you drove to pay for the meal were all in Spanish.  And it reminded me that when I was talking to an IT Pro in Italy, I asked him "so do you speak English?" and he indicated that English speaking was an absolute must in the IT world as all the technology documentation was first and foremost in English and then secondly that machine translations of IT content was soooooo bad to make KB articles in his native tongue almost worthless.

It reminded me as well that when it comes to the IT venues I go to, the Microsoft consultants are just like Accountants in our lack of diversity.  We need a lot of sunscreen and sunblocker in the room.  That means we're mostly white anglo saxon types.  There's not a lot of diversity at all in the venues I've been in. 

As a business owner I understand that you don't want to expend the resources into a marketplace that you don't have a toe-hold in, but at the same time, how do you build up that critical mass if you don't have the attitude of "If you build it, they will come".  So if there are locations in my city that acknowledge that English is not the native tongue, and in fact cater to this ethnic diversity that I live in, why is the Microsoft IT world so far behind when it comes to translations and seemingly as well in representation?  Granted I understand that much of this has to do with licensing issues and what not, as from what Carlos says, it's very hard to compete with the licensing that Microsoft brings to the table, but is it also, the age old myopic view of the United States and North American continent?  I mean not to be mean here, but this board of directors doesn't look that diverse if you know what I mean...

Conversely, look around your own city and your own clientele.... are you catering or considering multi-language software because your clients need to support two languages? Is your city becoming more multi-cultural and what are you doing to anticipate the need for such services?

Posted Mon, Aug 28 2006 23:07 by bradley | 4 comment(s)
Filed under:

Well I'm going to be trying this out tomorrow night... pretty cool!  If you want to be in this early beta and give feedback... ping Dana!

 

Well it's that time. With SMBNation fast approaching, its time to do another beta cycle of RWW-Guard. You are receiving this email because you showed interest in testing the product earlier this summer.
 
This is going to be a short, but intense beta cycle.... lasting until just before SMBNation (September 6th). The goal is to find any glaring deployment problems that may exist on fresh systems, and get new eyes looking at the product. Expect one or two builds before the beta ends, making changes as required as we iron out any final bugs.
 
We are looking for LOTS of feedback and constructive criticism... and expect it from EVERYONE who is testing this beta. In other words, if you are too busy to offer your input into this beta, please don't join in. If you just want to try the software, you can always do that with a trial of the commercial version later in September.
 
I can't stress enough how much I appreciate your support in wanting to help test RWW-Guard. Although this will be a short cycle.... it will be intense in the communication and feedback loop. We want to squash as many bugs as we can in this short cycle. I have set up a private forum for this, and anyone who wants to be in the beta is STRONGLY encouraged to use the forum to start discussions on anything that comes to mind when testing the product.
 
And although an external strong authentication server is highly recommended, in this beta we have a way for you to TEST the product without it. So even if you don't currently HAVE a strong authentication server... you can still test the product in your environment.
 
Still interested? If so, then you need to sign up to our forums, and email me your username. I will then add you to the private forum, where you can get directions to download the software and the installation guide.
 
I look forward to working with many of you in the coming weeks!
 
---
Regards,
Dana Epp
[Microsoft Security MVP]

Scorpion Software Corp.
http://www.scorpionsoft.com
Posted Mon, Aug 28 2006 23:06 by bradley | with no comments
Filed under:

Couple of interesting things in the R2 documentation...

  • 15 gig recommended partition size
  • "If you are a Microsoft Premier Contract holder, please contact your TAM or ADC" (for a SBS box?  Like I've ever seen a SBS customer have a TAM?)
  • I was surprised that they featured support from Gold Certified partners and not SBSC

Another good resource for SBS R2 info on SQL and downgrade rights is this link

Posted Mon, Aug 28 2006 20:11 by bradley | with no comments
Filed under:

Had yourDaily dose of Vlad lately?

Episode 23 of the SBSshow is up ... and on managed services....

(okay so it was up last week... I'm a little slow..)

Posted Mon, Aug 28 2006 19:31 by bradley | with no comments
Filed under:

...no not THAT guy...but this one will be at SMBnation giving his presentation on Macintoshes and SBS networks.  Eriq "the Mac guy" Neale will be helping you overcome your fears of Apple invasion and show you how that pc guy and that mac guy can truly get along side by side.

Remember Eriq Neale is also the lead author of SBS Unleashed

There they go again..using the "it's good enough for lightweight users and small businesses" to justify a lightweight web app.

Ugh.

I hate that.  There are some small businesses who use the full blown hunking applications because they use all the features.  And I'm a small business. So why does everyone assume that all small businesses are this cookie cutter version and we're exactly alike?

Are all of your clientele the same?  I think not...

Posted Mon, Aug 28 2006 19:17 by bradley | 2 comment(s)
Filed under:

Yes, that's a real workstation.... click on the picture to make it larger...Quad Matrox video card with 4 matching monitors.  And the question that I still haven't answered yet is, can Vista handle multiple monitors at both ends of a remote desktop connection?  Right now I'm seeing a lot of folks asking if RWW supports the use of multiple monitors (the Accounting industry is big on multi monitors) and the only way you can 'trick it' is by logging into a RWW session on your desktop on one screen and then on a Terminal server session on a member server on screen two.  Not exactly the nicest answer but it's the best we can do.

I think that some of the other remote apps like gotomypc do support multiple monitors.

 

Posted Mon, Aug 28 2006 18:59 by bradley | 4 comment(s)
Filed under:

So I'm sitting here cleaning up the spam that has accumulated over the weekend and tweaking the spam filter rules on the blogs.  It's a shame that folks like spammers always come into a venue and start to screw things up for the rest of the folks.

Yesterday someone mentioned in passing that they hosted their own email and another person said an "Oh".... you know one of those all knowing "ohs" that one does when you go, "Oh, that's prob a bit of a bother isn't it?"

While in our SBS networks we want to bring the calendars, bring the email inside the Exchange, there's something about having an open port 25 isn't there that makes people go "Oh".

I still say that Exchange needs to be a lot easier and a lot more intuitive than it is now.  I honestly think that's one of the reasons that POP connector is still used so much... because the transitition isn't that hard from a peer to peer setup.

Posted Sun, Aug 27 2006 16:04 by bradley | 1 comment(s)
Filed under:

So I'm here at the Hotel Max for the weekend going back home tomorrow night for a quick get together of all the folks that put together WindowsSecrets.com and initially I hooked onto a Netgear wireless... one problem... I have no idea who owns that Netgear that I initially hooked to.. but I've hooked to the one that is officially the hotels.

So just because something is open doesn't mean that one should be hanging off of it....

P.S.  Nice wide screen Dell monitor in the room as a TV screen... it reminds me that I need to get a better TV monitor at home...

More Posts Next page »