Jump to content

albertwt

Members
 View Profile  See their activity

  • Posts

    289

  • Joined

  • Last visited

 Content Type 

Everything posted by albertwt

  1. albertwt
    Hi All, I'd like to know what is the best way to securely lock down binaries in Windows Server 2008 R2 ? So that only certain application that is white listed can run, the other should not run (white listing) Should I configure it using Applocker through Local GPO ? or using SRP ? Any kind of help would be greatly appreciated. Thanks, AWT
  2. albertwt
    I've gone through this link before: Event ID 85 but still it failed to add the SCP ? in the AD Sites and Services | Sites | Default-First-Site-Name here is the value: Licensing Site Settings: DC01 (domain controller which also host terminal server 2003 for my TS CAL 2003) TS-Enterprise-License-Server: TERMSERV01 (self hosting of TS CAL 2008 and the TS 2008 itself).
  3. albertwt
    Yes I have gone through the DSI edit mate but still failed: Log Name: System Source: Microsoft-Windows-TerminalServices-Licensing Date: 20/05/2010 12:15:34 PM Event ID: 8195 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: TermServ01.domain.com Description: The computer account for the Remote Desktop license server could not be added to the Terminal Server License Servers group in Active Directory Domain Services during the installation of RD Licensing. The action failed with Win32 error code 0x80072020.
  4. albertwt
    Hi All, I'm having problem in my last step of installing the licensing service for my current Windows Server 2008R2, it gives me an error message with Event ID 85, see the attached error message, I've logged in as DOMAIN\Administrator but still I cannot register this terminal server ? Any kind of help would be greatly appreciated. Thanks, AWT
  5. albertwt
    uhm... yes there is WSUS but only this box cannot have internet access so i guess WSUS is the only way here to do it. but then I forgot to mentionthat this is a Windows Server 2003 Web Server edition which doesn't need to be joined to the domain.
  6. albertwt
    Ah yes, thanks man for the reply :-)
  7. albertwt
    Hi All, I’d like to know how do you implement Automated Windows server updates if your DMZ Windows box doesn’t have access to the internet but only have access to production site and to your LAN only. I tried to remove the proxy server information from my Windows Server 2008 R2 internet settings but it seems that I cannot get it updated automatically from WSUS? Any kind of help would be greatly appreciated. Thanks, AWT
  8. albertwt
    Hi All, I've got one physical Server which has got Windows Server 2008 Datacenter sticker on it and based on this document: http://www.microsoft.com/licensing/about-licensing/virtualization.aspx i can deploy unlimited any version of Windows Server 2000-2003-2008 VM on my ESXi, now the question is that "Which serial number should I use for those VM ?" can anyone share your experience in deploying VM under Datacenter 2008 license please ? Thanks.
  9. albertwt
    Hi All, I'd like to know how do you implement user monitoring and logging for security of production server access ? I'm now using Windows Server 2008 R2 Terminal Server that is connected to the production network and I wonder if there is any built in features that can be used for legal compliance (access log or triggered access control alert) ? 3rd party application is also fine if it can do the security monitoring as well. Any suggestion would be greatly appreciated. Thanks.
  10. albertwt
    thanks man, now I understand the licensing scheme. Cheers.
  11. albertwt
    Hi All, I'm about to integrate additional iSCSI SAN to my existing directly connected iscsi SAN using redundant switch as well the following picture is the existing deployment which is working without switch in between the SAN: see Deployment.jpg in the current environment each cable has its own IP address, however here's what I'd like to achieve: see Drawing1.jpg is there any best practice or IP addressing change that i have to make on the blue line ? Do i have to use all different IP subnet for each cable of every blue cable can have the same subnet ? once this setup has been done i can then configure the vswitch to use Jumbo frame as well as the MD3000i (MTU 9000). any kind of help would be greatly appreciated. Thanks, AWT
  12. albertwt
    Hi All, I’ve got VMware vsphere essentials license but somehow i cannot make the two VCenter talking to each other for migration and template deployment across two different VCenter. and so i open up the PDF brochure from VMware for the upgrade to the next level of VCenter where i can use more than three ESXi hosts URL: http://www.vmware.com/files/pdf/vsphere_pricing.pdf my questions are: 1. if i buy vcenter standard edition, from what i know is that the licensing is calculated per CPU sockets and it is already included VCenter mgmt. server forthe ESXi to join ? 2. if i buy the stand alone VCenter Server 4 USD $ 4995 does this means i can join as many ESXi host as possible since the price is just one off ? my current 2x VSphere Essentials license will become useless after I take either one of those options. My goal here is to be able to manage more than 3x ESXi hosts within single VCenter which consists of: ESXi01 – 2x Intel Quadcore ESXi02 – 2x Intel Quadcore ESXi03 – 1x Intel Quadcore ESXi04 – 2x Intel Hexcore ESXi05 - 1x Intel Core2Duo can anyone please help me about this licensing please ? Thanks.
  13. albertwt
    thanks mate, i thought that this certification is not for technical person :-| glad to hear that everyone must also involved in this process, meaning that i should invest time in learning ITIL.
  14. albertwt
    Hi All, I’d like to know if anyone can enjoy the benefits of understanding ITIL v3, in some of the Job advertisement for a system administrator and support engineer I read that some of them required the candidate to have ITILv3 certification? So far my understanding is that ITIL is for management people not for the technical staff since it is talk about high level guideline only not a specific way to do things or best practice of what should be implemented. Can anyone please shed some light or share your story in implementing ITIL in your workplace ? Thanks.
  15. albertwt
    Hm... .lck file only happens in NFS datastore mate, not VMFS v3.3 :-o) Until now I'm still struggling with re-adding the VM back into the VMware VCenter 4, I've created a custom VM with the same name and just add the VMDK into my new VM it returns: Unable to access file since it is locked. i've also issued vm-support -X 14071 -d0 -w /vmfs/volumes/MD3000i_VMFS1/Win2003x86_vmws05 command but still the VM is stuck there :-|
  16. albertwt
    I'm having problem with my Windows Server 2003 x86 VM, in the middle of installing IIS server, What I did is that i insert the CD into the ESXi host and then from my VSphere client I point to use the host CD-ROM drive and it hangs, What I've done: 1. Force restart the VM and it stuck in 95% of restart process. 2. in the SSL console of ESXi: services.sh restart 3. re-register the VM from datastore view into the VCenter (with the same name VMWS05) and it hangs with Status "In Progress", after 20+ minutes it came with the following error: An error occurred while communicating with the remote host. and the VM is not registered in the VCenter still. 4. tried to kill the process like the following but still stuck ? ~ # ps -ef | grep vmws05 3854821 14064 Worker#0:Win2003x86_vmws05 /bin/vmx 14071 vmm0:Win2003x86_vmws05 ~ # kill -9 14071 ash: cannot kill pid 14071: No such process ~ # ps -ef | grep vmws05 3854821 14064 Worker#0:Win2003x86_vmws05 /bin/vmx 14071 vmm0:Win2003x86_vmws05 ~ # kill -9 14064 ash: cannot kill pid 14064: No such process ~ # kill -9 3854821 ash: cannot kill pid 3854821: No such process ~ # ps -ef | grep vmws05 3854821 14064 Worker#0:Win2003x86_vmws05 /bin/vmx 14071 vmm0:Win2003x86_vmws05 any kind of help would be greatly appreciated. Note: VMware ESXi 4.0.0 build 244038 VMwre VCenter Server 4.0.0 build 208111 Thanks.
  17. albertwt
    ah yes you could be right mate :-| i was very happy when i found out that ZFS can use flash technology or at can least "dump" into another backup location (eg. NFS or samba) point.
  18. albertwt
    thanks mate, will that backup the whole system as image while the server is online ?
  19. albertwt
    Hi All, I'd like to know if there is a software to backup the Physical Solaris Server as a whole image (more like Symantec Backup Exec System Recovery 2010 in Windows Server world). I tried to look for Netbackup 7 but it seems there is no way to try it for bare metal restore is possible ? (plus there is no download link to try that). Can anyone suggest one good software to achieve this please ? Thanks.
  20. albertwt
    thanks guys for the reply.
  21. albertwt
    Finally I've found what I've been looking for: hope this can be helpful for everyone in this forum.
  22. albertwt
    yes that does make sense mate, thanks for the suggestion. Cheers, AWT
  23. albertwt
    thanks guys for all of your reply, I'll go with the Open License in this case for my upgrade plan.
  24. albertwt
    yes it is still exist, i was suspecting around these area: 1. After ESXi 4 patch, i did the restart for all of the host one by one. (if it is totally new install i can understand that the iSCSI connection string must be changed / remapped again). 2. After the VCenter Server restart due to the Windows update. can any of those becoming the source of the problem ? I'm worried if something does happens again during the production cutover then it will be a disastrous.
  25. albertwt
    yes, all of them are Pros. in this case i think OEM is the cheapest way to buy but i'll have to put the new sticker on each workstation :-| or else i might be going with Open License.
×
×
  • Create New...