357 reputation
117
bio website
location
age
visits member for 2 years, 9 months
seen yesterday

Dec
2
comment ConfigMgr - Really really slow PXE boot between Hyper-V machines
Are you using dynamic memory for either of your VMs? I've seen some odd behavior when using dynamic memory on hyper-V OSD targets and ConfigMgr server.
Nov
27
comment Debugging slow Quickbooks in multi-user mode
What ping times are you seeing to the QB server from building 2? Is access to a company file on the QB server from building 2 in single-user mode also slow?
Nov
22
comment Force Cisco ASA to change source port NAT
You might have better luck with this question over on networkengineering.se.com
Sep
8
comment Can Microsoft DPM 2010 Backup Windows Server 2012 R2?
FWIW, Server 2012 is not in the list of officially supported protected operating systems for DPM 2010.
Aug
26
comment Do I need to run a verfication on LTO tape backups even though the drives themselves perform verification as they write?
@ChrisMagnuson Did you ever find out what happens if the drive detects an error using its own verify-after-write scheme?
Aug
14
comment Can PXE boot of Hyper-V VMs be disabled?
The article basically says to configure your network so that you are sure that you are only communicating with a legitimate PXE server. I don't need PXE boot at all. So relying on network configuration to protect against PXE boot exploits violates both the "defense in depth" and the "reduced attack surface" principles. PXE boot should simply be disabled on VMs that don't need that ability.
Aug
13
comment Active Directory disaster recovery with DPM
To your concern about whether "Restore the DPM database" works in another domain: "Reading tapes from different dpm servers regardless of domain or dpm version is fully supported." (source) You just need to have the certificates used to encrypt the tapes handy.
Aug
13
comment Active Directory disaster recovery with DPM
It seems like the first 5-1/2 bullets could be implemented in advance as VMs on a netbook that is kept in the same vault as the tapes -- a sort of bootstrap recovery workstation if you will. You could also have a prepared VM for the DC on the netbook ready to accept the system state and another ready to join the domain and become the new DPM server. You might as well have a fileshare on that netbook with all the install media that you'll need as well.
Aug
12
comment Active Directory disaster recovery with DPM
"We backup the DPM server separately..." -- For this to work in the case where the whole site is wiped out, some of these separate backups must be offsite. I'm curious how you achieved that.
Aug
12
comment Can PXE boot of Hyper-V VMs be disabled?
The link you provided does not work. 410 Gone
Jul
14
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
I documented my problem and solution pretty thoroughly at that SO Q&A I mentioned.
Jul
13
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
Also, using the -noprompt switch in steps 15 and 16 hides whether the import succeeded.
Jul
13
comment Signing a Java Deployment Rule Set JAR using AD Certificate Services
FWIW I've found that keytool.exe is not capable of importing a chain of trusted ADCS certs into a keystore. See this SO question. I ended up using Keystore Explorer instead.
Mar
19
comment Does Windows 7 VPN work with a Cisco ASA 5510
There's this one.
Mar
12
comment How should DNS be configured for remote VPN access to a Windows Domain?
@RobbieCrash vpn.example.com does not need to resolve to an address internally. The ASA is also my gateway.
Feb
9
comment Is UPS worthwhile for non-production equipment?
There's a closely-related Q&A over here.
Jan
22
comment How should mains power be conditioned for devices not protected by a UPS?
@psusi I did not make any claim about PC power supplies. Nor did I make any claim about DC output voltage as a result of mains over/undervoltage. The only claim I made about out-of-spec DC power is this: I have seen, firsthand, power supplies similar to those typically powering switches, routers, monitors, and laptops that output out-of-spec DC when subjected to mains power containing harmonics and transients.
Nov
6
comment What are the advantages of tape drives?
+1 for off siting data. There are still loads of commercial and industrial centers where the most upstream bandwidth you can buy is 1 Mbps per physical line. It doesn't take much churn to swamp that.
Apr
30
comment Recommended drive encryption solution
With respect to the final point, the least detectable outcome of the fraunhofer attack is that the user is confronted with the bitlocker tamper screen. In other words, a boot path tampering evil-maid attack (i.e. the fraunhofer attack) is easily detected by a trained user on a BitLocker + TPM system. There's a Q&A on simulating such an attack over on security.se.com.
Apr
17
comment Before buying it, how can I tell if a storage array makes certain performance counters available over SNMP?
Thanks John and Grant. I guess I needed someone to tell me what I probably should have deduced.