PiqueABoo

Haven't done it recently, but I tried AnywhereTS once and it routinely crashed whenever I picked a VMWare driver (think it was the NIC) which was the last in the list i.e. possible index problem.

Never attribute to.... I don't write that much code these days, but every time I write anything interesting I seem to run into MS API bugs/features.. a completely broken call in dotNet.. an unhelpful (to me) post SP2 behaviour change in a call relevant to security context switching.. and so on and so forth. MS, the company who once broke TCP/IP for everyone without Admin, are supposed to have rewritten "Next Generation" TCP/IP for Vista and at the very least they did break a bit of IP Helper that affects products manipulating the routing table (not something exclusive to SSL VPNs). They've obviously done a zillion other things re security that were inevitably going to affect non-trivial apps. If you've got more compelling details please share but it's easier to believe MS coders can write broken/unwise code just like anyone one else (including h/w vendors).

Insufficient information. Will easily saturate the link when running how many tunnels simultaneously?

I think if you've got a domain and this is only for staff, then make/use your own CA and get them to your CA cert at home- could have other uses down the line and [don't groan] it's yet another opportunity to try and educate your users about this stuff. I used to routinely build win32 openssl for making a CA and certs for Windows back in the 20th century when the US crackable-crypto export regulations were still a bit serious. [Those regs banned export of strong data encryption but did allow for strong *authentication*. Early non-US Cert Server wouldn't let you have decent key lengths but if you made say a 2048 bit cert via openssl, IIS would happily use it... which was a good thing even though the subsequent SSL data encryption was weak]

Hmmm.. can't see a link between Melissa and the XP firewall... and there aren't many networks with some kind of Internet link where you can't communicate with the outside world if you're subtle enough. Anyway, everyone tends to have edge firewalling (dedicated f/w boxes, router ACLs, LA f/w or whatever) but the other factor is whether you think machines on your network may be at risk from other machines plugged into your network e.g. laptop picked up worm at home, some box where someone is deliberately trying to hack etc. And if you think that risk is significant would the XP f/w help reduce it? It depends on your network and for me the answers is: There's a bit of a risk, but it won't go away if you turn the XP f/w on.

It's probably not what you want, but the best answer is to eliminate the need to map S: drive via another set of credentials.

I junked the physical boxes and moved to VMs of a dual PIII in 2000. Vista aside that is still up to the job, but it's used by studious other half & 3yr-old tuxpainter so I now have a modestly priced C2Duo, 2GB, mirrored 250GB. Occasionally run two or three from a dozen miscellaneous VMs for investigating geeky things, testing code/script, making MSIs etc. I use hosting for a domain & forum which is probably as cheap as the in-house electricity bills would be, plus I can't hear the fans. The idea of lots of physical boxes in my home seems alien now.. for that matter so does finding a couple of terrabytes of TV I'd actually want to watch.

As various RM users have discovered the compatibility pack depends on a previous hotfix KB923097 (which RM haven't passed on in their hotfix bundles). If you don't have that KB then 80% of the new formats will not be available.

Are you getting them every 15 minutes? Don't have XCHG in front of me, but IIRC you do this via mailbox store properties. You can make your own schedule, but I picked the predefined schedule to generate one message at midnight.

No big difference then. I can see the "for /" case, but learning how to do recursive script isn't a bad thing and it's adaptable to similar problems e.g. trawling through AD OUs and objects. I don't see why this wouldn't work (jscript, easily changed to VBS): var Lnk = WSH.CreateShortcut(PathToLnkFile); if (!FSO.FileExists(Lnk.TargetPath)) {//target is missing

It would take about 10 lines in Jscript to recursively scan and simply echo file/folder names. Is recursion more difficult in VBS? Anyway you can use Wshell.CreateShortcut pointed at an existing link to get the target path. The Scripting.FileSystemObject File object has a property you can use to get or set attributes.

http://bink.nu/Article9500.bink

MS have a trial Exchange 2007 Virtual PC image you can download somewhere.. don't know, but I assume that has OWA already configured.

Errata: It's an old product LogMeIn bought, it uses UDP and won't traverse any competently configured firewall that blocks UDP in both directions (outbound DNS being the common exception), it is or was an IANA reserved address range not an "odd private IP" which is naughty. Personally if I were looking for something"free" I'd cut out the middle men and use something open source.

Mmm.. there's quite a lot involved. First read: http://en.wikipedia.org/wiki/PMTU#Path_MTU_discovery. The key concept is that if you're not doing PMTU then some of the packets you send to some corners of the Internet may get fragmented into smaller packets. Packet fragmentation shouldn't be common and shouldn't be a problem if it happens, however a lot of firewalls[1] can be told to drop framented packets.. and a lot of people who don't understand the consequences sometime do that. One symptom you might get: User can happily connect to website X, but some bits don't work, in particular pages that rely on the user posting lots of data back to the website. The workaround for dropped fragments is PMTU, however it relies on receiving certain ICMP messages which is less likely to happen these days thanks to various factors such as Steve Gibson + disciples promoting "stealthed" boxes, the ammount of ICMP traffic SQL Slammer caused etc., etc. The workaround for broken PMTU is PMTU "black hole detection". That MS are supposed to be turning that on by default in 2K3 SP2 (don't have a copy, but I understand it's on in Vista), suggests that this stuff has become a significant problem. [1] It's not just firewalls, load balancers have been known to cause the same issue.

Yes but that's what PMTU black hole detection is for (we're due the new improved version turned on by default in 2K3 SP2). Well beware of sites who's f/w admins probably ticked every protocol screening box because they could (more ticks must = more safe right?).

Well... last time I saw that one, the consensus was that it's almost always a hardware problem... and that it happens with driver X rather than driver Y doesn't stop it being a hardware problem i.e. X is just exposing the issue. [it's been a while though so you might find other ideas, especially since it's Vista]

It's on my try-it-for-real list, but VMWare Server supports taking one snapshot of an image and VMWare Player will run the subsequent VM. When you take an snaphot it essentially freezes the state of the current virtual disk (VMDK) file and subsequent changes are stored in a second VMDK file. Essentially: Current disk = Base VMDK + Delta VMDK You might be able to roll out one inevitably big, but static base image that can be used with a smaller delta. If you're doing minor upgrades, just swap-in a new delta. Or maybe you want several deltas e.g. point the VM config at delta A if you want Programming tools, point it at delta B is you want CAD tools etc. Or replace the current messy delta with a teesy post-snapshot delta to get the VM back to a clean state.

KB825675 maybe? Deletion was right.

True. The dotNet 3.0 runtime installer is essentially: a) dotNet 2.0 b) New bits for presentation, comms, workflow. You can skip installing dotNet2.0 since installing dotNet 3.0 will do that for you.

At this point I think you should forget about the technology, hosting etc. and (along with legal implications) consider how you maintain the integrity of such a list: Who gets to add things? Who gets to delete them? How do you verify the identity of your list editors? How do you prevent accidental or deliberately harmful changes to the list? And if you sort that out, what categories will it address?

Hmmm.. haven't got one so they might be rubbish, but you can get a NetGear 12x1Gb L2 switch that claims you can add 12 fibre ports (mini-GBICs) for less than £400.

I'd leave the logon BAT alone. I have nothing for logon, but looking at the stuff I've written recently for my toolkit: Batch: For making a long series of CL calls, maybe with a few "if exists".. to save typing complex command lines I use a lot... or to remember rarely used and forgettable command lines. FOR is indeed an occasionally useful exception (my last use appended). Script [JS]: Things that need a lot of string manipulation or serious functions. Things that need to talk to the registry or AD or WMI. None of mine launch other processes. dotNet [JS, C#]: Things that are impossible or a zillion times easier than normal script courtesy of some everso handy dotNet Framework class or other. Don't overlook dotNet. If you don't have it installed everywhere yet, you will and you can code-tweak anywhere because it installs compilers for JS, C# and (if you must) VB. for /d %%I in ("*") do (call :fn01 "%%~I") goto :eof :fn01 rem point a few CL utils at sub-dir in %1 goto :eof

How fast and how compressed (relative to the £££ ones)?

And were the corresponding drivers in system32/drivers? tcpip.sys and whateveritis.. ?