Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Search results for query: *

  1. ITPangaeaArchitect

    Converting from a unsigned root cert to a signed root cert

    puclic facing = signed cert from someone like verisign internal/employee only access = private ca chain =the best user experience and highest security factor... - Brandon Wilson MCSE:Security00/03; MCSA:Security03 MCSA:Messaging00; MCP; A+ IT Pangaea (http://it-pangaea.com)
  2. ITPangaeaArchitect

    Wildcard Digital Cert or Per Server Digital Certificate

    Ok so here's the deal. If your websites that wwill be encrypted are public facing, you will want to go with a certificate from someone like verisign to secure the site (downside being, no client side cert reqs can be implemented). however, for internal/employee only sites, in other words, those...
  3. ITPangaeaArchitect

    Security of Network Passwords

    Just find a good password encryption software and install it on a machine that has whole disk encryption on it, and if possible, EFS running on top of it as well (if it wont cause corruption of the files), then restrict access to that system to only a few trusted individuals (if using windows...
  4. ITPangaeaArchitect

    SSL ver2

    that is very true, but my point was that you never know when youre gonna have some schmuck running Windows 98 out there in the world trying to get in...for instance....and a decision needs to made whether that will be accepted or not (but it is applicable more to public facing websites since...
  5. ITPangaeaArchitect

    Do Windows clients need a Primary/Secondary DNS that is also a DC?

    ok so here's the deal. if you are using MS DNS in an AD domain, then it is recommended to point clients to DCs for DNS. This is because ONLY DCs can take part in AD replication, which includes the replication of DNS records to other DCs. This, in a nutshell, is why you are supposed to point...
  6. ITPangaeaArchitect

    Domains

    ok so here's the deal (and I am going off assumption of Microsoft technology being used, but it applies either way): first off, yes, you can host as many websites as you'd like named anything you like and have the zones hosted on one DNS server. i will give an example in a sec... second, I am...
  7. ITPangaeaArchitect

    SSL ver2

    there are considerations you need to make before being so rash. The primary consideration is the OS and potential IE level of any clients that connect to your site.....along with potential other browser types that may access the site (firefox, mozilla, etc.). if you are certain that all browser...
  8. ITPangaeaArchitect

    kerberos

    yea what your seeing is a subsequent verification of netbios name after dns resolution. if you look at a trace taken from the client and server, on the client you would see dns calls going out (and if the client faces the dc for dns and trace is taken from there, youd see incoming calls), then...
  9. ITPangaeaArchitect

    Login failures when PDC is rebooted

    DNS doesnt work that way. You are forgetting to put a forwarder to your ISPs DNS server. Do that, you'll get out...or create a new root hint (forwarders are easier and mroe readily configurable though) - Brandon Wilson MCSE:Security00/03; MCSA:Security03 MCSA:Messaging00; MCP; A+ IT...
  10. ITPangaeaArchitect

    DHCP-request forwarding

    Agreed. The easiest solution to this is to create two separate subnets off of each of these cable modems by either sticking a router in the middle, or an RRAS server. With an RRAS server, you can install a second and third NIC to connect to each network segment as well. But this is definitely...
  11. ITPangaeaArchitect

    Domain Naming: NT4 ? 2003

    anytime buddy :) - Brandon Wilson MCSE:Security00/03; MCSA:Security03 MCSA:Messaging00; MCP; A+ IT Pangaea (http://it-pangaea.com)
  12. ITPangaeaArchitect

    Cant get DDNS going on secure only updates

    k glad to hear its working right now though :) - Brandon Wilson MCSE:Security00/03; MCSA:Security03 MCSA:Messaging00; MCP; A+ IT Pangaea (http://it-pangaea.com)
  13. ITPangaeaArchitect

    Cant get DDNS going on secure only updates

    actually the multihoming can still be the problem. If it writes the wrong SOA into the zone, even for a short time, then in that short time it is quite possible for clients to get an error such as that.... next time you get the error, grab netdiag /v results on the problem server and post...
  14. ITPangaeaArchitect

    ping to name not working in one domain

    do a query through ldp, adsi script, or adsiedit.msc against "CN=ForestDnsZones,DC=domain,DC=com" and against "CN=DomainDnsZones,DC=domain,DC=com" See which one has records in it. - Brandon Wilson MCSE:Security00/03; MCSA:Security03 MCSA:Messaging00; MCP; A+ IT Pangaea (http://it-pangaea.com)
  15. ITPangaeaArchitect

    DNS configuration

    you should have DNS installed on all DCs. from there, the PDCe should face itself and itself only for DNS. all replica DCs in the same site as the PDCe should face the PDCe for preferred DNS, and themselves as alternate DNS. One DC in remote sites should point to the PDCe as the preferred DNS...
  16. ITPangaeaArchitect

    Cant get DDNS going on secure only updates

    ok is the DC logging the error the one that is multihomed or no? - Brandon Wilson MCSE:Security00/03; MCSA:Security03 MCSA:Messaging00; MCP; A+ IT Pangaea (http://it-pangaea.com)
  17. ITPangaeaArchitect

    Launch multiple VBS simultaneously

    ah i gotcha create an additional file and use it for logging a "status=complete" type of message into the file for each script that runs then when you are ready in your code to do your checks, simply iterate through the lines of that file, counting each line, and throw a do until loop in there...
  18. ITPangaeaArchitect

    Cant get DDNS going on secure only updates

    Is the "enterprise domain controllers" group listed in the security properties on your zone? - Brandon Wilson MCSE:Security00/03; MCSA:Security03 MCSA:Messaging00; MCP; A+ IT Pangaea (http://it-pangaea.com)
  19. ITPangaeaArchitect

    Watching porn over a corporate VPN

    Well the monitoring of emails and the monitoring of web traffic are two entirely different beasts. The mail servers themselves typically handle things like that (or some apps with some systems I'd imagine). Web monitoring is packet level sniffing...ive seen some that even include snapshots of...
  20. ITPangaeaArchitect

    Launch multiple VBS simultaneously

    ahhh i gotcha. in that case, just alter the scripts to all make the exact same call to the exact same database and still report to their own individual files? it doesnt matter, as far as baseline resource utilization checking, where they point to, all that matters is that do some query to the...

Part and Inventory Search

Back
Top