750 reputation
58
bio website
location Bloomington, IN
age 54
visits member for 3 years, 11 months
seen Apr 9 at 18:55
stats profile views 49
I'm just an old and grey IT guy trying to stay one step ahead of the pack (of users). My team provides "network support" (read: all things infrastructure) for a custom software development and consulting organization working primarily with the Microsoft .NET development stack. This means the 'users' we deal with are fairly techno-savvy...which also means we don't often get many 'easy' questions!

I've been working with networked microcomputer systems since 1981, which is pretty much before anyone knew what networks or microcomputers even were.


Apr
9
revised Disaster recovery plan development best practicies or resources?
updated stale links to DRJ site resources
Apr
9
revised Disaster recovery plan development best practicies or resources?
deleted 17 characters in body
Jun
28
awarded  Yearling
Jan
12
awarded  Enlightened
Jan
12
awarded  Nice Answer
Jun
14
comment Windows AD dcpromo /demote, who gets the roles?
...I always know what needs to be done, but end up searching for the specifics on how to do it; +1 for providing both the syntax of the nedom query that confirms where FSMO roles are provisioned and a link to the authoritative Microsoft KB article in a single concise answer for me to find!
Jun
14
comment Windows AD dcpromo /demote, who gets the roles?
This is good info no matter what the version of Windows; I've had several occasions where I needed to move my AD infrastructure around(whether to upgrade AD server OS, change hardware, virtualize AD infrastructure, or whatever)... +1 for having asked the question so I could easily find the answer this time!
Jun
9
revised Disaster recovery plan development best practicies or resources?
updated (broken) links to information on DRJ site (about-drj.html, gap.pdf, and sample-plans.html)
May
28
awarded  Yearling
Mar
22
comment How to workaround the NTFS Move/Copy design flaw?
+1 for leading folks to the tool that solves this problem when maintaining files (along with many others); however, XCOPY has been depreciated: ROBOCOPY.EXE is its very capable successor.
Mar
22
answered How to take ownership of files from the command line?
Jan
12
comment what are you using to store your LTO3 tapes?
A previous employer used hanging file folders in a media-rated fire-resistant (nothing is "fireproof") filing cabinet located in the opposite end of the building to store on-site tapes. Folders were labeled to support tape rotation. Most recent full backup was sent to off-site storage; daily differentials were kept on-site. Not ideal, but it worked. I currently recommend small business clients move to a service like MozyPro for on-line, off-site backup. [MozyPro supports backup to local storage (for rapid restore) as well as making an on-line, off-site copy.]
Jun
3
comment Multiple websites each with an SSL certificate of its own
You don't necessarily need 25 IP addresses... Another alternative (and one supported by most browsers) is to use a certificate with multiple Subject Alternative Names (SANs), sometimes referred to as a Unified Communications (UC) certificate (Exchange 2007 and 2010 use them to support UC). Unlike a wildcard certificate, a SAN certificate would allow you to support multiple root domains (e.g. www.foo.com and www.bar.com). SAN certs are available from several trusted CAs (e.g. DigiCert at a reasonable cost; even free ones from StartCom... see startssl.com).
Jun
3
comment For an intranet server would you buy a ssl cert or use a self signed cert?
I have used CAcert, but had hoped they would make better progress toward passing the required audits to become included in major browsers as a Trusted Root CA. I became CAcert Notary and a Thawte Web of Trust Notary and encouraged the use of Thawte Freemail certificates for S/MIME e-mail signing and encryption; unfortunately, Thawte discontinued their program in November 2009 after years of neglect. StartCom has a similar WoT model to add a bit of validation to their free certificates, but there are few notaries around to date; an expansion of their WoT would fill the void left by Thawte...
Jun
3
comment Good low-cost SSL certificate providers
I have used CAcert, but had hoped they would make better progress toward passing the required audits to become included in major browsers as a Trusted Root CA. I became CAcert Notary and a Thawte Web of Trust Notary and encouraged the use of Thawte Freemail certificates for S/MIME e-mail signing and encryption; unfortunately, Thawte discontinued their program in November 2009 after years of neglect. StartCom has a similar WoT model to add a bit of validation to their free certificates, but there are few notaries around to date; an expansion of their WoT would fill the void left by Thawte...
Jun
3
comment Good low-cost SSL certificate providers
StartCom has been included in the Root Certificates Update for Internet Explorer since September 2009 (see Eddy Nigg's blog post "The 'e' of the Internet" dated August 19, 2009: blog.startcom.org/?p=205). They offer personal S/MIME certificates, standard SSL certs, and UC certs, also called “Subject Alternative Name” or “SAN” certs, which work well with Exchange 2007 and later. The certificates are essentially free; you pay additional fees for the level of validation desired (up to and including EV certs which turn the address bar green).
Jun
3
comment https certificate issue
StartCom has been included in the Root Certificates Update for Internet Explorer since September 2009 (see Eddy Nigg's blog post "The 'e' of the Internet" dated August 19, 2009: blog.startcom.org/?p=205). They offer personal S/MIME certificates, standard SSL certs, and UC certs, also called “Subject Alternative Name” or “SAN” certs, which work well with Exchange 2007 and later. I like their pricing model... the certificates are essentially free; you pay additional fees for the level of validation desired (up to and including EV certs which turn the address bar green).
Jun
3
comment Choosing a low cost wildcard SSL cert (PsotiveSSL, RapidSSL, or other)?
I also like the StartCom CA pricing model--you pay for the level of validation you desire (right up through EV) and generate the certificates you require at no additional cost. They even provide a WoT model to provide additional value to the free certificates for things like S/MIME signed/encrypted e-mail (a welcome alternative since the demise of the Thawte Freemail WoT in November 2009). The biggest drawback is the dearth of StartCom notaries in most localities.
Jun
3
comment Buying a certificate - what to spend and where
StartCom has been included in the Root Certificates Update for Internet Explorer since September 2009 (see Eddy Nigg's blog post "The 'e' of the Internet" dated August 19, 2009: blog.startcom.org/?p=205).
May
29
awarded  Commentator