LCPSWolf

Hi, I'm sure I'm missing info from my problem - please ask if I am. We have a scope, 10.212.x.x, giving out addresses 10.212.1.x - 10.212.4.x We can ping the gateway (10.212.1.1) from 10.212.1.x, 10.212.3.x, and 10.212.4.x clients, but NOT 10.212.2.x. Here's the vlan as defined on our Cisco core: interface Vlan212 description Guest Vlan ip address 10.212.1.1 255.255.0.0 ip helper-address 10.1.200.60 ip helper-address 10.1.200.66 no ip redirects no ip unreachables ip flow ingress end Where else can I look for issues? Note, if I put in an exclusion into our DHCP server that prevents 10.212.2.x addresses from being handed out, clients the previously received one no longer get any IP address. Thanks!

Ed, If I'm following you, this really feels like a DNS issue, especially as it's only an issue from within your network. Just looking at the website problem: what if you do nslookup for the website from internal? What IP do you get returned? Same from an external source (though I'm sure that would be the external 365 IP) The auth error with Exchange is troubling. For testing, are you able to disable the SSO/Sync and configure a client manually with a user/password to connect? Does it work? If not then of course those settings aren't the issue. I assume you are able to access it via the web portal for email with 365? We're in process of implementing / migrating to 365 here and haven't yet gotten to the point of being able to log into 365 yet. We're consulting the process out to MicroExcel so maybe we'll be spared some of this. Let me know how it's going and I'll try to help.

Interesting idea - I would think so. Are you contracting out the Office 365 install? If so, I would ask your consultants. We're working with MicroExcel right now to migrate our in house Exchange (running 2003 - DIE!) to 365. ...finally. We're going to move our MX record to point directly to the cloud as they will handle spam prevention, etc. In addition, we feel there are huge benefits of not have a local MX record (email flows if we're out of power, server/switch outages, etc). Why do you want to keep the MX pointing local? ...Wait I reread your question - you have staff local and want to redirect student emails to 365. Eek. I'd say you would benefit from moving everyone...but I don't know of enough of Exchange to know if it would be possible or how to do it on a large scale. What version Exchange? Good luck!

While it sounds like the typical is to NOT install AV on the Hyper V host, if you do (or are required to) and you use AVG, please note you'll need to except some directories for HyperV to function well. I attempted to pull up the avg FAQ article, but it appears their site is down currently... Ah, here is the MS KB that's similar: http://support.microsoft.com/kb/961804 from the poster's link above

Colditzz, Beautiful post and recommendations. Thanks! I'm a new 2012 HyperV admin and the rule of thumb is good - though I feel like I'll max out my available RAM long before maxing out my processor count!

John: I do ..so here's at least one other US person

I'm sorry - we ended up removing the 1500L from service and were never able to get the issue resolved. I'd love feedback if you have any ideas though! I do have other printers that use that external jetdirect but haven't had a need/want to try to add them to our print server, so I'm unsure if it's an issue between the particular HP model or the external jet direct box.

Not exactly. In Printer Management, I can set up a Custom Filter and have it email staff on certain status - in this case, Toner Low. See photo: Is there anything else I can do in the Message field to get the comment section sent along with the notification of the low toner. Alternatively, is there some way to pull this Comment text out via a batch or VB script? I can email it off the command line if I need to.

Good morning! Odd question - I have printers listed in our 2008 print server. Certain staff get emails on low toner, etc. Part of the info they need to replace the toners is listed in the comment field for each printer. Example attached I need to include in low toner email the ESI#, in this case, ESI#96556. I see no way to do this in the printer notifications section as set up my Microsoft. Does anyone know of a scripting solution I can use? Any tricks to include some sort of variable in the email message? The obvious workaround is for me to include the ESI# in the printer name, but this will require me to rename and push out ~250+ printers. I can do it, but would prefer another way if it's at all possible. Thanks! Damian

OMG. You got it DrCheese! I had to do the same to: c:\documents and settings\all users\application data\adobe\SLStore from this link: Permission problems writing licensing data - Creative Suite 5 Everyone - full control minus Change Permissions. And just for clarity, also: c:\program files\common files\adobe\adobe PCD Everyone - full control minus Change Permissions. OMG I'm so excited. Thank you thank you thank you! Damian

After reading that a couple times, i'm trying to set "everyone" as full control to the Adobe PCD folder, then remove the "change permissions" right via Advanced Permissions. Restarting, will see what happens.

DrCheese, I think you've got it - the error you posted from that link with CS4 is the same as what I'm seeing, plus or minus an error #. I had a question though. You say in your other post: The trick to solving this is to add the restricted user/group to the ACL and then remove the "change permissions" right from the file. Applications will then open fine with no issues.. ...Specifically, "add the restricted user/group to the ACL" Can you clarify for me what that means? Thanks so much!

I'm up for anything at this point. I'll start looking - thanks.

I feel like I'm losing my mind. Our yearbook and newspaper department just bought 20 copies of Photoshop CS5. Wonderful. I went to load it, and I get error 213:11 on launch from a limited user account. Local admins work fine. But...I would prefer not to do that if I can avoid it. We're running XP SP3 in our lab. I found this post: http://www.edugeek.net/forums/educational-software/68649-anybody-installed-adobe-cs5-yet.html And this one: http://www.edugeek.net/forums/av-multimedia-related/61914-adobe-cs5-problem-running-standard-user.html And tried to set the permissions as specified: [C:\Documents and Settings\All Users\Application Data\Adobe] Everyone=0x1301BF [C:\Program Files\Common Files\Adobe\Adobe PCD] Everyone=0x1301BF [C:\Program Files\Adobe] Everyone=0x1301BF I set them, log off as domain admin, then log on as a limited user. The permissions for program files \ adobe stayed (Everyone - full control) But the other 2 directories had their Everyone permissions reset !?!? I think I remember reading somewhere that Windows has a program that runs on a schedule that resets permissions to directories ...but I can't for the life of me find anything on it. Anyone having this issue? I'm going nuts. Thanks as always. Damian LCPS Technology

dhicks, Why? Just to keep them from possibly interfering with each other? I'm just now exploring bonded NIC's - each server has 2. Are you saying that even if I bond them, I won't get the full 2Gb of bandwidth? I've never implemented DRBD (as you can probably tell Are there any good references you would suggest? I've seen the Ubuntu Server Guide, for instance - if that's the best to go off of, I'll give it a shot. When you talk about mirroring a logical volume, are you saying to have all the mappings mirrored (/, /etc, /var and so on)...the entire machine, right? Good to know - I looked up some documentation on this and it looks intense but something I'm willing to try. Do you recommend doing this in on a server without a GUI? I'm trying to keep it without one just because..I have a feeling my hardware would allow me to run it if needed. In general, though, I'm still puzzled by the recommendation to go with VM's. I assume it would also give me the option to "spin up" a new Linux box if I needed to play with something rather than pull out an older computer from storage. Are snapshots also an option with Xen / VM's? If so, that could be a huge advantage in recovery. Thanks!

Hey all, I'm looking for advice on the best way to set up a new pair of servers our school just purchased, but first, here's what I plan to run on them: - postfix / amavis / clamav / (spam assassin or dspam) for mail relays to our Exchange box - Moodle 2.0 - Cando (CanDo: Virginia's Online Competency-Tracking System) - Apache and other basic apps - Nagios Limitations: Once I get the mail relays and Moodle up and into production, these two services can never be down. (mail relay - obvious, Moodle - used for online courses) My thought was to run these two servers in a cluster-type setup, so that I can restart them independently and still have services up. Does anyone have any suggestions on the best way to do this with a minimal amount of management? DRDB comes to mind. I'm currently running two separate physical boxes for mail relays and am pretty comfortable with it - for instance, I know if an apt-get upgrade breaks one, I have the other to fall back onto. I'm a bit leery about (basically) mirroring these two new boxes. Another possibility is to run each of these services in a VM on these servers. Thoughts? Feasible? Beneficial? Off hand it seems that it would keep my workload the same as it is now, as I'm running a physical box for all these services now, instead of consolidating them to one. Thanks for any suggestions. Damian

Hey all, I have an issue with an HP OfficeJet 6000. It's plugged in via network and loaded on an XP machine with up-to-date drivers. The print server is running 2008. I can print office and other documents to the printer, and they print quickly. However, when I send a pdf to the printer, it can take 2-5 minutes before the printer spits out the first page. The remainder of the pages come out quickly. I've checked spooler settings - they are set to spool documents, but I've turned it off - no change. I've updated Reader to the newest version (X) to no avail. I'm running out of ideas. I can swap the printer back to USB, but would strongly prefer to leave it networked if possible. I wouldn't think that networking is the issue, as other documents print OK... Any ideas? Thanks! Damian

Cam, I tend to agree with you...paranoid, but sometimes that's for the best.

Hey all, yet again: We're looking for an email archive / search tool that will integrate with our Exchange 2003 box. We've demoed some units and like the Datacove that we saw, but the initial cost + support averages $9,000 / yr over the life of the unit. I feel that I should be able to do something open source to accomplish the same, for significantly less cost. Details: I would need an application or device that does the following: 1. Email recovery - if an Exchange user deletes an email from their deleted items box, I need to be able to recover it. If users can do their own, bonus. 2. Email search - for attorney cases, we need to be able to search 7+ years of email for a student name or for various teacher names during specified time frames - basically a search feature with "normal" search abilities 3. The ability to get the resulting emails from the search in 2 either printed or emailed in some readable format for use in court, attorney review, etc. Currently our Exchange server is using ~300 GB for email storage going back for the required 7 years, so we're not talking TB of data here. Any ideas? I can't believe this has never been done. As an aside, I'm currently running mail relays that filter emails coming into our district with Ubuntu/Postfix/SpamAssassin (etc) that relay to Exchange - I don't currently do anything with internal to internal email but it would have to be something this email archiver takes into account. Thanks for any suggestions. Damian Bailey

We recently noticed that any of our limited user accounts do not show images on websites. We're running XP SP3, IE 7, newest flash and shockwave, etc. Even the google main image doesn't show: I've seen this posted on another site and seems to be a new, recent problem. Seen here: No Images in Limited User Accts - Technology Questions For what it's worth, we did run windows updates around the spring of this year. The same sites in FF work fine. (Also, the edugeek site doesn't show images, either Thanks! Damian

Hey all, We started running 1 Ubuntu server for an open-source SIMS-like project for some special data collection - and we're now up to 3 with the addition of 2 mail gateways that provide email filtering. Being the only Ubuntu guy here, I'm starting to wonder if I can do this better, as opposed to having 3 separate boxes currently. Granted, I feel safer having 2 separate mail gateways, but expect I can get the redundancy in a different way. That all being said - what's the best way to do this? Virtual servers? Cluster? I've read through this post here: http://www.edugeek.net/forums/networks/29889-server-virtualization-not-server-virtualization.html And it makes it sound like virtual servers is the way to go. My only requirements would be: ease of use, redunancy / failover. Thanks for any suggestions. I've only been running Ubuntu for about a year now, so I'm pretty new - I know it has some virtual pieces in it but haven't really looked at it yet (KVM?). Thanks. Damian

Tony, No problem for the formatting - I followed it. Let me see if I'm getting this OK. You're showing MX records for both SA boxes by name - makes sense to me. Then you have A records that associate the SA box names to IP address. This will work regardless of whether the SA boxes are actually online, because that communication is being routed via our internal firewall. Hence, even if a SA box (or both) fail, we simply reroute the external SA IP addresses to our Exchange's internal IP, and our mail is back on? Sorry - I'm pretty new to DNS records - basically figuring this out as I go. Damian

Tony, That's simply brilliant I want to double check that it would work in our situation. Our DNS has our MX records listed by server name, as shown: Should we instead be listing our external IP addresses here, to allow for the NAT to work how you describe? It would provide additional options with fault tolerance, etc... Thanks! Damian

LukeC64, No problems, just wanted to follow up. We did like you suggested, run to MX records for our 2 SA boxes, but left our Exchange box in DNS. We can change our external DNS records at any time, but there can be a 24 hour delay...so just in case we've left the Exchange MX, but blocked SMTP via our firewall. If for some reason we lost both SA boxes, we can unblock SMTP on our firewall and mail still gets in - without the 24 hour delay. Thanks again!

Hey all, Thankfully we've gotten a spam assassin box set up and working great. Now I just want to tweak it a bit. I want to add a link to the bottom of emails that would give users the ability to mark a message as spam for training with SA. I have the cgi script part of it working, but am running into issues inserting the links into my incoming email. I've found references to Altermime, but can't find any good documentation on how it works. Examples from the web all show Altermime being used to append disclaimers to outgoing mail; however, I actually need the reverse. I've seen where amavisd-new has Altermime options in it, but can't find any documentation on how that works, either. So....anyone have any experience with this? Thanks so much! I believe I am running the newest packages of Postfix and amavis, but can't find the command line to show me the versions. I'm running Ubuntu 10.04 LTS.