[There's a reason that Yoda is the unofficial mascot of SBS.  Size indeed matters not.] November 2006 - Posts - THE OFFICIAL BLOG OF THE SBS DIVA

November 2006 - Posts

These step-by-step guides provide instructions for deploying or migrating to Windows Vista. These guides also describe how to configure security, monitor performance, and manage printers.

Today someone said to me something along the lines of "you know, Vista will have security flaws, but it's more robust than prior operating systems".  And I had to laugh because the person who said it to me was not a Linux or Mac user, but instead a very down to earth Security guy.  Given his honest opinion.. liking the progress he'd seen in Microsoft, but knowing that we'll still have issues.  And he's right.  It will.  And so will Linux. And so will Mac's.  But before the religious arguments start in... let's step back a bit.

Unlike the Staples store, there is no "Easy" button when it comes to technology.  Oh sure we can make it "easier" but the key to security is to make it reasonable so that your end users don't end up trying to do end runs around the security you've set up.  There's a balance out there.  Take the time to educate folks.... so that things like UAC are known.  The funny thing is most of the time when I've explained the security measures that we've put in place, people understand and accept it.  But if we don't take the time to train folks... the security fails.

And most of the time, my best security measure is an educated end user.

But if you think Vista is the 'easy button' you've been looking for.. or Linux is.. or Mac is?  You have a rude awakening my friend.  As there are bugs and flaws in each.. and right now it just depends on where the 'marketplace' of bugs are is all.  Don't get lulled into thinking the 'easy button' is right around the corner... it's not.  Granted Vista does include the new reboot manager that if your application plugs into it, the system will reboot, and the app will be placed right back where it was.  Granted Vista does have more kernel protection...but remember a lot of that "blue pill" stuff is up in the 64bit platform.

Honestly, the best thing I like about Vista is the audit logs and the event viewer (yeah I know I'm a sick puppy), but no operating system will ever solve the world's problems on security.  We will still get scam attacks, we will still have the risks of misconfiguations, of users that don't know any better because WE haven't taken the time to educate.

But if you are looking for an "Easy" button to take away your risks and threats... guess again.  There are some very talented bad guys out there.

We just need to ensure we stay one step ahead of them is all.....

So the comment was that the bad thing about the RDP version 6 is that you couldn't save the credentials like you did before... but it's been my experience you can?  All I do is click the checkbox that says "Remember my password" and it does.  So if you want to save it like before... just say "Remember my password".

Now you may have to do Domain\User on occasion....but it can still be saved, nonetheless.

Yeah yeah and I'm using the true Administrator account but this is RDP 'inside' the firm and not externally...

Posted Thu, Nov 30 2006 12:17 by bradley | 3 comment(s)
Filed under:

http://www.macworld.com/news/2006/08/07/msuniversal/index.php

Microsoft is also developing a new version of its Remote Desktop Connection (RDC) client software, which enables Mac users to access Windows PCs on their network. “The next version of RDC will be released as a fully supported free product and details on this release will be shared closer to launch,” stated Microsoft.

The answer is "YES" Microsoft is planning an upgrade/update to the Mac RDP client....not sure of the eta though but there is one coming...

I was listening to a Community 2.0 webcast today on how companies are looking to embrace/expand communities and one thing that I don't think I've identified is the communities of things that a lot of SBSers install... and that's firewalls.  One of them is obviously ISAserver and the community can be found at http://www.isaserver.org but we need to be honest and say that there are other firewalls that people install... One is of course Linksys... but one major one in the more 'business' category is Sonicwall.

They have a moderated community at http://www.sonicwall.com/support/ and a third party community here http://www.sonicusers.com/forum/default.asp

Today in the Deloitte and Touche sponsored webcast on community they talked about that sometimes you do both... you start a corporate sponsored community and sometimes you go where the organic community has grown up.

So there you go... find a community!

So if you didn't read the real white paper to do the side by side WSS 3.0 install... ya might want to read this one:

edwalt's - Things I Wish I'd known about Small Business Server...... : Removing WSS 3.0 Companyweb Upgrade - Restoring WSS 2.0 on SBS 2003:
http://blogs.technet.com/edwalt/archive/2006/11/29/removing-wss-3-0-companyweb-upgrade-restoring-wss-2-0-on-sbs-2003.aspx

Posted Wed, Nov 29 2006 20:14 by bradley | 1 comment(s)
Filed under:

http://www.microsoft.com/downloads/details.aspx?familyid=26f11f0c-0d18-4306-abcf-d4f18c8f5df9&displaylang=en

Remote Desktop Connection (Terminal Services Client 6.0) provides a way to
use any new Terminal Services features introduced in Microsoft Windows Vista
and Microsoft Windows Server Code Name "Longhorn" from a computer running
Microsoft Windows XP with Service Pack 2 or Microsoft Windows Server 2003
with Service Pack 1.

So what is this and why is this cool? 

A couple of reasons...but it is the client you will need to better connect to Vista machines and Longhorn....but mainly this is cool because of this:

Monitor spanning

Remote Desktop Connection supports high-resolution displays that can be spanned across multiple monitors. However, the total resolution on all monitors must be under 4,096 x 2,048. The monitors must have the same resolution. Additionally, the monitors must be aligned side-by-side.

To have the desktop of the remote computer span multiple monitors, type Mstsc /span at a command prompt.

Visual improvements

Remote Desktop Connection now supports 32-bit color and font smoothing.

To enable 32-bit color, follow these steps:

1. Start Remote Desktop Connection.
2. Click Options, click the Display tab, and then click Highest Quality (32 bit) in the Colors list.
To enable font smoothing, follow these steps:
1. Start Remote Desktop Connection.
2. Click Options, click the Experience tab, and then click to select the Font smoothing check box

Posted Wed, Nov 29 2006 19:38 by bradley | 3 comment(s)
Filed under:


11/29/2006 6:21 PM
-------------------------------
Date: 11/29/2006
Time: 6:21 PM
User: Administrator
-------------------------------

Backup Runner started.
Launching NTBackup: ntbackup.exe backup "@C:\Program Files\Microsoft Windows Small Business Server\Backup\Small Business Backup Script.bks" /d "SBS Backup created on 11/29/2006 at 6:21 PM" /v:yes /r:no /rs:no /hc:off /m normal /j "Small Business Server Backup Job" /l:s /f "G:\Backup Files\Small Business Server Backup (02).bkf" /UM
NTBACKUP LOG FILE: C:\Documents and Settings\SBS Backup User\Local Settings\Application Data\Microsoft\Windows NT\NTBackup\data\backup07.log
=====================<BEGIN NTBACKUP LOG FILE>=====================
Backup Status
Operation: Backup
Active backup destination: File
Media name: "Small Business Server Backup (02).bkf created 11/29/2006 at 6:21 PM"

Volume shadow copy creation: Attempt 1.
Timeout before function completed

Error returned while creating the volume shadow copy:0xffffffff.

Error returned while creating the volume shadow copy:ffffffff
Aborting Backup.

----------------------

The operation did not successfully complete.

----------------------

=======================<END NTBACKUP LOG FILE>=====================
NTBackup finished the backup with errors.

For more information about failed backups, see the article on troubleshooting your backup at the following Web page: http://go.microsoft.com/fwlink/?LinkId=18414

Backup ended at Wednesday, November 29, 2006 6:26 PM
Backup Runner finished.

So off we go to check the VSS writers.... 

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>vssadmin list writers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.


C:\Documents and Settings\Administrator>

Okay... hmmm...That's supposed to be a bit more filled up than that...so off we go to Stephanie's blog to reregister the dll's
http://blogs.technet.com/sdoakes/archive/2006/02/03/418722.aspx 

And now after registering all that.. we have:

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>vssadmin list writers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.

Writer name: 'System Writer'
   Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Instance Id: {852d07a9-bbae-40b8-8214-10b78a8fedf9}
   State: [1] Stable
   Last error: No error

Writer name: 'MSDEWriter'
   Writer Id: {f8544ac1-0611-4fa5-b04b-f7ee00b03277}
   Writer Instance Id: {069cc33d-ea51-4b1a-8185-697fc5743edb}
   State: [1] Stable
   Last error: No error

Writer name: 'Dhcp Jet Writer'
   Writer Id: {be9ac81e-3619-421f-920f-4c6fea9e93ad}
   Writer Instance Id: {e8633ced-b964-4533-b3ed-ae4f99aa0ff2}
   State: [1] Stable
   Last error: No error

Writer name: 'TermServLicensing'
   Writer Id: {5382579c-98df-47a7-ac6c-98a6d7106e09}
   Writer Instance Id: {04b74023-de0c-424f-ab44-fe0a0eb4f2c1}
   State: [1] Stable
   Last error: No error

Writer name: 'FRS Writer'
   Writer Id: {d76f5a28-3092-4589-ba48-2958fb88ce29}
   Writer Instance Id: {f3fcefb4-ee91-4107-8646-d7f62652ce4c}
   State: [1] Stable
   Last error: No error

Writer name: 'Registry Writer'
   Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Instance Id: {f98048ac-04ff-4c05-a597-1250e4fde12e}
   State: [1] Stable
   Last error: No error

Writer name: 'COM+ REGDB Writer'
   Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
   Writer Instance Id: {6a5f42ee-eea8-4de8-a03f-8c2126a5ab13}
   State: [1] Stable
   Last error: No error

Writer name: 'WINS Jet Writer'
   Writer Id: {f08c1483-8407-4a26-8c26-6c267a629741}
   Writer Instance Id: {d36d82d5-0a2c-4207-9831-a5b483f7790d}
   State: [1] Stable
   Last error: No error

Writer name: 'Event Log Writer'
   Writer Id: {eee8c692-67ed-4250-8d86-390603070d00}
   Writer Instance Id: {39d64be1-14f7-4ed9-8af1-38a9ca4a1281}
   State: [1] Stable
   Last error: No error

Writer name: 'NTDS'
   Writer Id: {b2014c9e-8711-4c5c-a5a9-3cf384484757}
   Writer Instance Id: {59afdde9-5e4e-44c2-a205-4b58e437e9fa}
   State: [1] Stable
   Last error: No error

Writer name: 'WMI Writer'
   Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
   Writer Instance Id: {3f164a79-8196-4381-827f-4c0d2042a0ff}
   State: [1] Stable
   Last error: No error

Writer name: 'BITS Writer'
   Writer Id: {4969d978-be47-48b0-b100-f328f07ac1e0}
   Writer Instance Id: {ddfe61e1-7484-4a3d-b5de-ceb432f20f6a}
   State: [1] Stable
   Last error: No error

Writer name: 'IIS Metabase Writer'
   Writer Id: {59b1f0cf-90ef-465f-9609-6ca8b2938366}
   Writer Instance Id: {fbb8ea58-4325-4f29-9eb8-bce127b2cb8c}
   State: [1] Stable
   Last error: No error


C:\Documents and Settings\Administrator>

...and we now have a functioning backup.... I know what did it... I installed an updated version of Policy Patrol last night and it mooshed my VSS writers...

Posted Wed, Nov 29 2006 18:49 by bradley | 1 comment(s)
Filed under:

So you have a SBS 2003 sp1 box and you just got your Action pack.... how do you update it?  Do you

a.  Merely stick in the dvd and it will automagically update or

b.  Drill down to the R2 parts and run the individual cdroms?

The answer is b.

These disks make up the base:

 Windows Small Business Server 2003 R2 Premium Edition CD1

 Windows Small Business Server 2003 R2 Premium Edition CD2

 Windows Small Business Server 2003 R2 Premium Edition CD3

 Windows Small Business Server 2003 R2 Premium Edition CD4

 Windows Small Business Server 2003 R2 Premium Edition - Office Outlook 2003

So if you already have SBS 2003 sp1... you already have that.

 Windows Small Business Server 2003 R2 Premium Edition - Premium Technologies Disc 1

 Windows Small Business Server 2003 R2 Premium Edition - Premium Technologies Disc 2

These two disks are ISA 2004 sp1 and SQL 2005 workgroup.  If you have already applied ISA 2004 sp1 ... or you decide to not install it, you can just skip over the ISA install.  If you already have SQL 2000 installed, you need to follow the upgrading steps at http://www.sbslinks.com/sql2005.htm .  If you don't want to install SQL 2005, and instead just leave everything at MSDE, then you can skip these disks.  Remember that you can't upgrade SBSmonitoring to SQL (2000 or 2005) and while WSUS 'can' be upgraded to SQL 2005... it runs just fine on MSDE.

 Windows Small Business Server 2003 R2 Premium Edition - R2 Technologies CD

This disk is Exchange 2003 sp2, Sharepoint sp2 and the SBSized WSUS.  If you've been a happy patcher, you will already have Exchange 2003 sp2 and Sharepoint sp2.  If you've already installed WSUS, you can install the R2 version over the top and it will/it may change any customizations you've done.  If you have never installed WSUS before.. now's your chance to install it.  Once it's done installing...while you can use the 'normal' WSUS interface.. it's way way easier to just use the SBS 'update services' console in the home page.  And remember.. while this can be installed remotely.. you MUST use the built in admin account to install it.

P.S. If you don't install the WSUS... you also won't get the new Update services part...

Posted Wed, Nov 29 2006 12:29 by bradley | with no comments
Filed under: ,

...well the redirect from SBSdiva.com to http://www.msmvps.com/bradley is still messed up and Network Solutions has the account tied to someone else and I need to fax over an change authorization to get it from their control to mine to ensure that the redirects are in place...

.. and here I thought the account was on auto renew and it STILL got screwed up....

<sigh>

Posted Wed, Nov 29 2006 0:31 by bradley | 1 comment(s)
Filed under:

So my action pack for October (the replacement) finally arrived today and one of the things I wanted to check out for myself was the Action pack DVD.. as some folks had indicated problems with installing it... and I took my base install of SBS 2003 sp1 that I have in my virtual setup and installed the SQL 2005 from the R2 premium that I browsed to on the cdrom and... it installed just fine.  Now at the office where I had copied the contents of the cdrom up to the server and it sort of barfed a bit at the end and I had to start it over again.... but here at home on the dvd media it worked just fine.  The only funky thing about that SQL is that you have to fully expand all the nodes to install all the parts in reporting services. 

It just goes to show you that sometimes when one person reports and issue...that doesn't mean you will see it too.  In fact there's a guy in the Partner newsgroup having issues installing the WSUS/R2 and quite honestly... I've never ever had an issue with not being able to the install the R2 parts.. as long as you remember to install using the built in admin account that is.  (It does my heart good when all these folks are saying "it's not installing" and then you see the log file and you can tell they are remoting/patching not using the "500" account.  Nice to know that more of you guys are getting away from using the true admin account.

It also goes to show "me" that I shouldn't use a couple of folks reporting on one issue and connect the dots with an issue that "I" personally caused to myself.  The cause of one may not be the effect of the other... and it was my bad for making a connection that wasn't there.

But remember ..when you build a box.. that dvd will boot..and when you are done, you will have built a SBS 2003 sp1 box and then you need to add the premium parts (SQL and ISA) and the R2 specific CDrom (Exchange sp2, Sharepoint sp2, and SBSized WSUS).  Remember that the WSUS is pre-done for you so there's no need to customize or set up anything in WSUS.

In the action pack this time....

Microsoft Windows Small Business Server 2003 R2 Premium Edition consists of eight discs:

Discs 1-5 comprise Windows Small Business Server 2003 Standard Edition with Service Pack 1.

Installing the R2 Technologies CD and the additional Premium Technologies CDs will result in a complete install of Windows Small Business Server 2003 R2 Premium Edition.

Disc Contents

 Windows Small Business Server 2003 R2 Premium Edition CD1

 Windows Small Business Server 2003 R2 Premium Edition CD2

 Windows Small Business Server 2003 R2 Premium Edition CD3

 Windows Small Business Server 2003 R2 Premium Edition CD4

 Windows Small Business Server 2003 R2 Premium Edition - Office Outlook 2003

 Windows Small Business Server 2003 R2 Premium Edition - Premium Technologies Disc 1

 Windows Small Business Server 2003 R2 Premium Edition - Premium Technologies Disc 2

 Windows Small Business Server 2003 R2 Premium Edition - R2 Technologies CD

Posted Wed, Nov 29 2006 0:13 by bradley | 2 comment(s)
Filed under:

Someday in my lifetime all of my computers that I control will have no issues with Microsoft/Windows update.. and they won't give me cryptic errors and what not...

You may receive an "Error 0x80072EE2," "Error 0x80072EE7," "Error 0x80072EFD," "Error 0x80072F76," or "Error 0x80072F78" error message when you try to use the Windows Update Web site or the Microsoft Update Web site:
http://support.microsoft.com/kb/836941/en-us

My ISA already has those exclusions, everyone else can MU just fine, why is it that this one stupid machine can't or won't MU?

...and now you know why I have Shavlik... because I can't depend on MU/WU to always work.... and like today ...it takes the patience of a Saint to try to debug the dang thing and get it working.

Posted Tue, Nov 28 2006 17:43 by bradley | with no comments
Filed under:

Error Type: System Error
Error Date: 11/27/2006 10:02:31 PM
Error Description: Error: Agent failed detecting with reason: 0x8007000e

I've found that deleting the software distribution folder and ensuring I had the latest and greatest ISA firewall client loaded up tend to clear up that error.

http://www.tech-faq.com/0x800a0007-windows-update-error.shtml I read that ...but the time was fine, the time zone was fine, and yet still I kept getting that error with certain workstations.

So ensure you have the latest ISA client http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=45855498-66BA-43D3-A8F1-37837D380389 installed as that helps with Windows Defender as well.  I've yet to see a Visa capable version of that firewall client though...

Posted Mon, Nov 27 2006 23:16 by bradley | 1 comment(s)
Filed under:

So I'm calling Earthlink to change my MX record to point to Exchangedefender.com so to pre-filter the email before it hits my Exchange Server and when they made the change they did it like...

5 inbound30.exchangedesender.com.

...uh guys... that's a "F" not a "S"....

..let's try that again shall we.....

And now off to adjust ISA to only allow port 25 connections to and from that...

Posted Mon, Nov 27 2006 19:26 by bradley | 2 comment(s)
Filed under:

Today I'm getting a ton of email spam about buying stocks and they are all "Insert person name"_Wrote as the subject line. 

Okay so like does someone really think that I set my 401K investments via junk email?  It must work.. because they are sending a ton of it...but are we that STUPID to follow investment advice from spammer/scammers?

The Wireless Cingular card is working...not with the Cingular connection manager software but with the native Vista GPRS modem connection.  What did the trick was seeing that there was an update in windows update for the modem.  Once I updated that.. stopped trying to use the Cingular and instead just used the native connection from Vista... and... found the username/password info from the Cingular web site

The Cingular sign in info can be found here.. http://forum.thinkpads.com/viewtopic.php?p=220699&sid=5a047e373b051f78c34dafa3386999dc

..now to find an antivirus program that plays nice with Vista...

Posted Mon, Nov 27 2006 2:04 by bradley | 4 comment(s)
Filed under:


Microsoft (R) Windows Debugger  Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini112706-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Vista Kernel Version 6000 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6000.16386.x86fre.vista_rtm.061101-2205
Kernel base = 0x81800000 PsLoadedModuleList = 0x81908ab0
Debug session time: Mon Nov 27 00:34:59.193 2006 (GMT-8)
System Uptime: 0 days 0:37:43.793
Loading Kernel Symbols
.....................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {0, 2, 0, 8c4b0a2a}

Unable to load image \SystemRoot\System32\Drivers\tmtdi.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for tmtdi.sys
*** ERROR: Module load completed but symbols could not be loaded for tmtdi.sys
Probably caused by : tmtdi.sys ( tmtdi+8a2a )

Followup: MachineOwner
---------

Tmtdi.sys is a file for Trend Micro's PcCillian.  So for now we're going without antivirus tonight until I figure out what Vista likes for antivirus... make that one more for the body count..

Posted Mon, Nov 27 2006 0:50 by bradley | 3 comment(s)
Filed under:

Christmas tree up... a few decorations not quite finished yet but mostly in place.

Family recipe baked - actually done three times as we gave some to family and friends.

64 bit test box that I've been building sent home with geek friend for a Fry's run for parts (we don't have one locally) and it will be picked back up next weekend.

Acer Tablet Laptop upgraded to Vista and Office 2007 - casualty - the Cingular Connection Software.. so far making it "run as XP sp2" helps and I just spotted a modem driver on Windows update.  I don't have true 3d flip Aero view (I've yet to find a spare video card that I have that does it... but then again I didn't want to mess with the MCE I have and try that).  Mainly I did it because I'll be giving some presentations on Vista and didn't want to shlep around a bigger computer.

....now if I can only get the Cingular working... I'll be a happy camper..

Posted Sun, Nov 26 2006 23:34 by bradley | 1 comment(s)
Filed under:

For the first time, get real-time weather forecast information and the freshest brewed coffee with a single device.

Show of hands here... how many saw this on the download site and were convinced that Eric Ligman is behind this?

... you do know about his "Lessthancoffee.com" don't you?  For less than that cup of coffee from that Melitta coffee maker... we run a business.

Top that one Melitta!

Posted Sun, Nov 26 2006 1:04 by bradley | with no comments
Filed under:

The other day we were disucssing Bitlocker on a listserve and it came out in the conversation that while the GUI will only allow you to encrypt the one volume...the command line does more.

http://blogs.technet.com/steriley/archive/2006/11/25/bitlocker-command-line.aspx

And there's all the comand line info.... for that I may just have fire up cmd and be less GUI :-)

Posted Sat, Nov 25 2006 21:19 by bradley | with no comments
Filed under:

So many years ago a family recipe was handed down through the generations.....

The basic recipe is 8 cups of flour, yeast, 2 cups scalded milk, two eggs, sugar.  And along the years I've "upgraded" the recipe to where while they don't quite have the same texture as the original ones did eons ago, but they now cook up faster, rise faster and I can do a batch much much faster than when my Grandmother did.  I "upgraded" the recipe to fit my needs, my tastes and the fact that I don't want to wait all day long for something that I can get done in much less time. 

Does that mean that I've changed processes... and the results are slightly different?  Yes it does, but it also means that I can better fit my needs.  My upgrades work for my needs of today.  I've added techonology to my recipe and it also keeps me from thrashing the kitchen and having flour from one end of it to the other.

It's a lot like technology, isn't it?  We put together a "recipe" and use that in our technology.  We then find that our needs change and thus we build a new recipe tweaking it along the way, revising it to meet our needs.. 

For those who are interested... here's the current variation of the "family roll recipe"....

Place 4 teaspoons of quick rise yeast in one cup of warm (not hot) water and mix up and sit aside

Place 2 cups of milk in a pan and bring it to near high heat but not yet boiling (were the milk does bubbles on the sides and gets a 'skin') (I'm guessing this was done in the historical recipe to pasturize the milk as it specifically called for "scalded milk" but I use it also to melt the shortening)

In a mixing bowl (preferably one that attaches to a Kitchenaid Professional mixer with a dough hook.. something Grandma never had -- and not the one where the mix head tips back, no sirree... this is the one where the bowl rises up and down with a lever), place three tablespoons of shortening, along with one cup of sugar.  Pour the hot milk over the top and let the shortening melt.

Now go do something else for a while (like blog or something) so that the hot milk will cool down as you can't mix the yeast water with too hot of milk as you will "kill" the yeast and your dough will end up baking into the bread equivalent of hockey pucks (Oh yeah, did that one year... so there are some parts of this process you can't speed up).  The optimal temperature for the yeast is around 110 to 125 (if memory serves me right), if the milk is above 140 degrees or more you risk the "hockey puck" impact so be patient on letting the milk, sugar, shortening mixture cool down.

Now add the yeast/water mixture to the cooled down Milk, sugar, shortening, and fire up that Kitchenaid mixer with the dough hook and the flour shield. 

Use "Better for Bread" flour (which is also something I do that Grandma didn't do) as it has more "gluten" and thus will rise better.  Put 2 cups in on a slow speed and let that mix for a while (go back and blog or bug stuff on betas or something).

Once the 2 cups is somewhat mixed in, place 2 eggs (beaten ...or lately I use Eggbeaters eggs which are a bit of a 'real egg' manufactured product), mix, two more cups of flour, and then the last four cups for a total of eight, letting the Kitchenaid do the heavy kneading job for you.  Just let it go on slow speed until the dough gets smoother, more elastic and forming a ball. 

Now take a large glass bowl, spray it with PAM non stick spray, and dump the dough ball in it.  Spray the top of the dough with PAM and cover with wax paper (this is done to keep the dough from "crusting" over and makes it easier to make a ball shape later on).  Stick in a warm kitchen and let rise.  (Go do some posts to yahoogroups or something).

When the dough has doubled (or more) and when your fingertips leave indentions, get "dough therapy" by taking a fist and literally 'punching' the dough and roll it up into a ball.  Now go get clean kitchen scissors and 'cut' a bit of dough about the size of a very small apple.  (Don't ask me why I started doing this scissor thing but it makes the dough easier to get in a ball shape rather than pulling on the dough.. the "cutting" was my invention)

Roll it up in your hands into a round ball shape and place it on cookie sheets covered with these French "Silpat" sheets that make food not stick to the cookie sheet and makes clean up faster.

Let the dough rise again.  (Go answer questions in the newsgroup or something). 

Now during Grandma's day they would let the dough rise twice.  And this is one of the steps with the quickrise yeast I cut out the second rising. 

Once the rolls are again obviously doubled in size and rounded, preheat the oven to 325 degrees. 

When the oven is at the proper temp, bake the rolls for about 20 minutes or until golden brown.

So that's the "family roll recipe" that used to be all hand kneaded by hand in prior generations and I've added "technology" and "upgrades" to it.

And while the end product is a variation of the original, the change in process means I can make more, keep the kitchen cleaner, and I personally like the taste better than Grandma's version.

Sometimes technology is the same way isn't it?  ..."Upgrades" can match the needs of the old with the needs of the new... all at the same time.

Posted Sat, Nov 25 2006 3:01 by bradley | 2 comment(s)
Filed under:
More Posts Next page »