790 reputation
510
bio website
location Bloomington, IN
age 55
visits member for 5 years, 7 months
seen Dec 12 at 19:35

I'm just an old and grey IT guy trying to stay one step ahead of the pack. I've been working with networked microcomputer systems since 1981, which is pretty much before anyone knew what local area networks or microcomputers were.

My current professional life involves working with a variety of clients to implement and support Microsoft technologies from the desktop to the datacenter. Recent projects include Exchange upgrades, Office 365 implementations, and Windows desktop deployment.


Sep
12
comment MDT WDS network boot is very slow
Is the BIOS on the client machine current? (I've resolved many issues by updating to the latest BIOS or device firmware.)
Jun
14
comment Windows AD dcpromo /demote, who gets the roles?
...I always know what needs to be done, but end up searching for the specifics on how to do it; +1 for providing both the syntax of the nedom query that confirms where FSMO roles are provisioned and a link to the authoritative Microsoft KB article in a single concise answer for me to find!
Jun
14
comment Windows AD dcpromo /demote, who gets the roles?
This is good info no matter what the version of Windows; I've had several occasions where I needed to move my AD infrastructure around(whether to upgrade AD server OS, change hardware, virtualize AD infrastructure, or whatever)... +1 for having asked the question so I could easily find the answer this time!
Mar
22
comment How to workaround the NTFS Move/Copy design flaw?
+1 for leading folks to the tool that solves this problem when maintaining files (along with many others); however, XCOPY has been depreciated: ROBOCOPY.EXE is its very capable successor.
Jan
12
comment what are you using to store your LTO3 tapes?
A previous employer used hanging file folders in a media-rated fire-resistant (nothing is "fireproof") filing cabinet located in the opposite end of the building to store on-site tapes. Folders were labeled to support tape rotation. Most recent full backup was sent to off-site storage; daily differentials were kept on-site. Not ideal, but it worked. I currently recommend small business clients move to a service like MozyPro for on-line, off-site backup. [MozyPro supports backup to local storage (for rapid restore) as well as making an on-line, off-site copy.]
Jun
3
comment Multiple websites each with an SSL certificate of its own
You don't necessarily need 25 IP addresses... Another alternative (and one supported by most browsers) is to use a certificate with multiple Subject Alternative Names (SANs), sometimes referred to as a Unified Communications (UC) certificate (Exchange 2007 and 2010 use them to support UC). Unlike a wildcard certificate, a SAN certificate would allow you to support multiple root domains (e.g. www.foo.com and www.bar.com). SAN certs are available from several trusted CAs (e.g. DigiCert at a reasonable cost; even free ones from StartCom... see startssl.com).
Jun
3
comment For an intranet server would you buy a ssl cert or use a self signed cert?
I have used CAcert, but had hoped they would make better progress toward passing the required audits to become included in major browsers as a Trusted Root CA. I became CAcert Notary and a Thawte Web of Trust Notary and encouraged the use of Thawte Freemail certificates for S/MIME e-mail signing and encryption; unfortunately, Thawte discontinued their program in November 2009 after years of neglect. StartCom has a similar WoT model to add a bit of validation to their free certificates, but there are few notaries around to date; an expansion of their WoT would fill the void left by Thawte...
Jun
3
comment Good low-cost SSL certificate providers
I have used CAcert, but had hoped they would make better progress toward passing the required audits to become included in major browsers as a Trusted Root CA. I became CAcert Notary and a Thawte Web of Trust Notary and encouraged the use of Thawte Freemail certificates for S/MIME e-mail signing and encryption; unfortunately, Thawte discontinued their program in November 2009 after years of neglect. StartCom has a similar WoT model to add a bit of validation to their free certificates, but there are few notaries around to date; an expansion of their WoT would fill the void left by Thawte...
Jun
3
comment Good low-cost SSL certificate providers
StartCom has been included in the Root Certificates Update for Internet Explorer since September 2009 (see Eddy Nigg's blog post "The 'e' of the Internet" dated August 19, 2009: blog.startcom.org/?p=205). They offer personal S/MIME certificates, standard SSL certs, and UC certs, also called “Subject Alternative Name” or “SAN” certs, which work well with Exchange 2007 and later. The certificates are essentially free; you pay additional fees for the level of validation desired (up to and including EV certs which turn the address bar green).
Jun
3
comment https certificate issue
StartCom has been included in the Root Certificates Update for Internet Explorer since September 2009 (see Eddy Nigg's blog post "The 'e' of the Internet" dated August 19, 2009: blog.startcom.org/?p=205). They offer personal S/MIME certificates, standard SSL certs, and UC certs, also called “Subject Alternative Name” or “SAN” certs, which work well with Exchange 2007 and later. I like their pricing model... the certificates are essentially free; you pay additional fees for the level of validation desired (up to and including EV certs which turn the address bar green).
Jun
3
comment Choosing a low cost wildcard SSL cert (PsotiveSSL, RapidSSL, or other)?
I also like the StartCom CA pricing model--you pay for the level of validation you desire (right up through EV) and generate the certificates you require at no additional cost. They even provide a WoT model to provide additional value to the free certificates for things like S/MIME signed/encrypted e-mail (a welcome alternative since the demise of the Thawte Freemail WoT in November 2009). The biggest drawback is the dearth of StartCom notaries in most localities.
Jun
3
comment Buying a certificate - what to spend and where
StartCom has been included in the Root Certificates Update for Internet Explorer since September 2009 (see Eddy Nigg's blog post "The 'e' of the Internet" dated August 19, 2009: blog.startcom.org/?p=205).
May
29
comment Datacenter Colocation Phone
If you can, invest in a wired binaural telephony headset with a noise-canceling microphone designed specifically for use in high-noise areas; they're not cheap, but the investment will pay for itself on that first call to tech support when you can actually hear, type, and communicate effectively in a crisis situation! If you have cell coverage, I've also had good luck combining an inexpensive Bluetooth device that has a standard headphone jack (e.g. Jabra BT320) and replacing its included earbuds with a pair of active noise canceling stereo headphones.
May
20
comment DC on Hyper V Host
Ah, so you will manage Hyper-V from the host partition; that will work fine (and is how I built my first few Hyper-V hosts)... What "Edition" (Standard, Enterprise, etc.) is your 2008 R2 install with Hyper-V?
May
19
comment DC on Hyper V Host
You can install Server 2008 R2 in either a "full install" with Hyper-V (convenient if you plan to manage things from the host partition) or a "core install" with the Hyper-V role; doing so provides you with additional functionality and licensing rights depending on whether you use Standard, Enterprise, or Datacenter editions. The discussion above focuses on "Hyper-V Server 2008 R2" which is a separate free-to-download-and-use product that has a (rather robust) subset of the functionality and limited licensing rights. It is not a "core install" but is "core-like" in that it has a minimal UI.
May
18
comment DC on Hyper V Host
I've edited the response to include information offered in comments and provide a couple more links to relevant information...
May
18
comment DC on Hyper V Host
Good point, Farseeker... while Enterprise licensing would offer both expandability and flexibility, those features may not be valued--particularly if Saif has already obtained two Windows 2008 Standard licenses! A good approach would be to deploy Hyper-V Server 2008 R2 on the hardware and install two Windows 2008 Standard virtual machines; the Active Directory role could then be added to the file server virtual machine.
Mar
9
comment Looking for a small, portable, port-mirroring ethernet switch
You beat me to it--or I typed too much!
Feb
21
comment How to configure Exchange (SBS 2003) for Outlook Anywhere
Since you've already deployed consistent with the "How to Deploy RPC over HTTP for the First Time in Small Business Server 2003 (Standard or Premium)" TechNet article, can you provide some detail on the failure mode observed?
Sep
11
comment Which wildcard SSL cert vendors allow you to set up the same cert on multiple servers?
+1 for Digicert! They've been great to us as well; very professional, excellent technical support, reasonable pricing, and flexible licensing. UCC certs are are useful in many circumstances, not just Exchange 2007, and can be more cost-effective than wildcard certs in most instances. Even their standard certs utilize the Subject Alternate Name field to protect both www.example.com and example.com with a single cert (and license fee).