Network Administration & Consulting Services

Hi folk,
At present I’m at Novell, Provo UT, USA.
I’m on NTT - Novell ZENworks Endpoint Security Management training. If somebody of you would like more information about this product (if you worry about security you should take a look on this product), please let me know and I’ll publish more information about this very cool product :).

Microsoft Search Server 2008 RTM’ed yesterday, the express edition is free!

Yesterday was the first Windows 2008 event in Canada. The first event was in Toronto and had almost 3000 attendees. Twenty MVPs participated in Ask-The-Expert and I was one of them :). One of the commonly asked questions was question about “What NAP is and how it works?“

So, I’d like to show what posted on TheLazyAdmin.com about NAP:
With the recent launch of Windows Server 2008 you are no doubt spending all your free time playing around with everything new. One thing you might be playing around with is Network Access Protection. There is a great document on getting a DHCP based NAP lab set up but one thing the document is missing is how to configure the NAP client in XP SP3. In Windows Vista you simply start the service then enable the client through the NAP Client Configuration MMC (napclcfg.msc) but XP SP3 does not include the MMC. So how does one configure the NAP Client without a Nap Client configuration tool? Netsh, that is how!

To enable the NAP Client on XP SP3 you need to do the following:

1. Start –> Run –> Services.msc
2. Change the Network Access Protection Agent service to start automatically
3. Start the Network Access Protection Agent service
4. Start –> Run –> CMD.exe
5. Type netsh nap client set enforcement ID = ##### Admin = “Enable”
6. Start –> Run –> GPEdit.msc
7. Drill down to Computer Configuration | Administrative Templates | Windows Components | Security Center
8. Enable the Security Center
9. Start –> Run –> Services.msc
10. Start the Security Center service

You will need to replace the ##### with the ID based on whichever enforcement method you are using. You can use the following IDs for the various enforcement methods:

• DHCP = 79617
• RAS = 79618
• IPSec = 79619
• TS Gateway = 79621
• EAP = 79623

For more labs and information see:

Step-by-Step Guide: Demonstrate IPsec NAP Enforcement in a Test Lab

Step-by-Step Guide: Demonstrate 802.1X NAP Enforcement in a Test Lab

Steve Ballmer made an interesting statement during his keynote: "Microsoft is Democritizing Virtualization" bringing another player in the high-end virtualization market. With System Center Virtual Machine manager you will be able to deploy and manage Novell and Suse Linux VM's and Microsoft Hyper-V, Vmware ESX and Citrix virtual hosts.

Source: bink.nu

• SoftGrid now supports deployment of Virtual Application .msi files that are generated by the MSI Utility for Microsoft Application Virtualization to SoftGrid clients that are running Microsoft Windows 2000 or Windows 2000 Server/Advanced Server and that have Terminal Services enabled.
• SoftGrid 4.2 HFRU2 now supports Windows Vista Service Pack 1 (SP1).

Please Note:  The 4.1 SP1 KB article incorrectly identifies Windows Vista Service Pack 1 (SP1) as a new capability of 4.1 SP1 HFRU2.  We're in the process of changing the article now so you should see it updated soon.

SoftGrid 4.1 SP1 HFRU2 Bits: http://support.microsoft.com/kb/938497
SoftGrid 4.2 HFRU2 Bits: http://support.microsoft.com/kb/941408

• KB930809 Update Rollup 1 for Exchange Server 2007 (KB930809)
• KB935490 Update Rollup 2 for Exchange Server 2007 (KB935490)
• KB935999 Update Rollup 3 for Exchange Server 2007 (KB935999)
• KB940006 Update Rollup 4 for Exchange Server 2007 (KB940006)
• KB941421 Update Rollup 5 for Exchange Server 2007 (KB941421)

This update rollup does not apply to Exchange Server 2007 Service Pack (SP1). For a list of update rollups applicable to Exchange Server 2007 SP1, refer to the section Update rollups for Exchange Server 2007 Service Pack 1 in the Knowledge Base article KB937052.

Source: www.microsoft.com

As many of you know, Microsoft released Windows Vista Service Pack 1 and Windows Server 2008 to Manufacturing RTM ! So, it's a time to take a last Windows Automated Installation Kit (Windows AIK). The Windows Automated Installation Kit (Windows AIK) is designed to assist corporate IT professionals customize and deploy the Windows Vista and Windows Server 2008 families of operation systems. The Windows Automated Installation Kit (Windows AIK) is a set of tools and documentation that support the configuration and the deployment of Windows operating systems. By using Windows AIK, you can perform unattended Windows installations, capture Windows images with ImageX, create Windows PE images and much more.

Download WAIK1.1 here

If you are planning to deploy Windows Server 2008 - Server Core installations, I think you should use the following tip, that I've found few days ago on very good blog, blogs.technet.com/aralves.

Think about you have more than one Windows Server 2008 - Server Core box and you are connecting to them by using the Terminal Services Remote Programs. What you get? Just a simple prompt. By using following tip you can change the default prompt and add at least the servername. To do this, simple open the registry editor and navigate to the following key:

    HKLM\System\CurrentControlSet\Control\Session Manager\Environment

Find a key called Prompt, if it's not there create one using the following settings.

Value Name: Prompt
Data Type: REG_EXPAND_SZ
Value Data: $_Server:[%servername%]$_Username:[%username%]$_$T$_$p$g

With this value you get the prompt as shown in the picture.

Here are some of the special codes you can use:

    * $A - & (Ampersand)
    * $B - | (pipe)
    * $C - ( (Left parenthesis)
    * $D - Current date
    * $E - Escape code (ASCII code 27)
    * $F - ) (Right parenthesis)
    * $G - > (greater-than sign)
    * $L - < (less-than sign)
    * $N - Current drive
    * $P - Current drive and path
    * $Q - = (equal sign)
    * $S - (space)
    * $T - Current time
    * $_ - Carriage return and linefeed
    * $$ - $ (dollar sign)

Now you will always know on which server you are working :) 

The Infrastructure Planning and Design Beta Release for Windows Server 2008 Active Directory Domain Services and Windows Server 2008 Terminal Services are available as an open beta download.

To download, please follow this link:
https://connect.microsoft.com/Downloads/DownloadDetails.aspx?SiteID=14&DownloadID=7925

As many of you know, it’s possible to create a “Lite” version of operating system by using well know program vLite. But, recently Microsoft said in an e-mail to CNET News.com:

“Microsoft does not recommend using any tool to strip out applications from Windows Vista prior to installing it on your system, as it may affect your ability to download future Windows updates and service packs, and may cause your system to become unstable,” 

So, think twice before you creating Vista ‘Lite’