Remote Assistance - no opt in method

Firewall is turned off OR allow exception for Remote Desktop/Remote Assistance

Under services: "Remote Desktop Help Session Manager" to Automatic

Right click My Computer – Properties – Remote – Allow Remote Assistance AND Allow users to connect remotely

Turn Off Simple File Sharing

To turn on or to turn off Simple File Sharing Windows XP Professional, follow these steps:

1. Double-click My Computer on the desktop.
2. On the Tools menu, click Folder Options.
3. Click the View tab, and then click to select the Use Simple File Sharing (Recommended) check box to turn on Simple File Sharing. Click to clear this check box to turn off this feature.

Enable and configure Solicited Remote Assistance

1. Log on as a user with local administrator privileges.
2. Click Start, click Run, type gpedit.msc in the Open box, and then click OK.
3. Locate the Solicited Remote Assistance policy by expanding the tree to:

Local Computer Policy\Computer Configuration\Administrative Templates\System\Remote Assistance

4. Double-click Solicited Remote Assistance.
5. On the Solicited Remote Assistance Properties dialog box, click Enable.
6. Under Permit remote control of this computer, click one of the following options: • Allow helpers to only view the computer

• Allow helpers to remotely control the computer

Note: After the expert computer connects to the novice computer, the expert computer has the option of controlling the novice computer. You can disable this option by choosing the Allow helpers to only view the computer option.

7. In the two next fields for Maximum Invitation ticket time, value and units, choose the settings to control the maximum time for which the ticket is valid. This setting overrides any other settings on the computer.
8. Click Apply, and then click OK on the Solicited Remote Assistance Properties dialog box.
9. Close the Group Policy snap-in.

Note: When this is set to Not Configured, users can still send Remote Assistance invitations. If necessary, you can configure Solicited Remote Assistance in Control Panel. To do so, open the system properties, and then click the Remote tab. The default settings are: • Solicited Remote Assistance is enabled.

Remote Control is enabled. Click Advanced Settings to view this setting.

Maximum Invitation ticket time is set to 30 days.

Enable and configure Offer Remote Assistance

Reference:

http://support.microsoft.com/kb/301527
http://support.microsoft.com/kb/310629
http://support.microsoft.com/kb/306496/

Migrate Users + Profiles to a new AD Domain

Dug this out of an old email... Going to be doing one of these again:

Tested, freaking took a while to work it out, but after some phone calls, and newsgroup surfing, got it. J
Not sure if all the steps are needed, however this combo worked for me.

Moving a PC (computer object) from one domain (win2k) to another domain (win2k3). I wanted to preserve the profile settings once the computer is a member of the new domain:

• Setup trust between the 2 domains.
• Set the new DC WINs setting to point to the old WINs server
• Load ADMT 3 on the target domain controller
• Setup administrator password to be the same on both domains, as well as the local administrator account on the machine (use Cusrmgr.exe to change admin password on multiple machines http://support.microsoft.com/kb/272530/EN-US/ )
• Add the Domain Admin global group from the source domain to the Administrators Local Group in the Target domain
• Add the Domains Admin global group from the target domain to the Adminstrators Local Group in the source domain
• Create Secondry DNS zone of the other domain on each DNS server (win2k3 – click some settings to allow replication to any server – its locked down by default)
• Set Windows firewall to be turned off on the computers (use GP to turn that f**ker off!)
• *important* Set all client machines to be migrated have their DNS server pointing to the new Win2k3 DC DNS (I set statically, but do this via DHCP when implementing)
• On the target Domain Controller, create an new MMC console, add the ADMT plug in and save to desktop
• Right click on that icon, and run as the administrator account from the other domain

Once the machine reboots, you can log into the other domain with the same account (assuming you used ADMT to migrate user accounts as well!), and viola, the profile should be exactly the same as when logging into the old domain!

HP Proliant hw + HP System Management Homepage installation

If you get System Type: Unknown - when you go to your freshly installed Proliant's Management Homepage... do this

Install SNMP

then...

• Administrative Tools
• Go to Services
• look for SNMP Services
• click on it - Properties
• Go to Traps Tab
• Comunity name: public - Add to list
• Trap Destination: 127.0.0.1 - Add Button
• Trap Destination: localhost - Add Button
• Comunity name: private - Add to list
• Trap Destination: 127.0.0.1 - Add Button
• Trap Destination: localhost - Add Button
• Go to Security Tab
• Add Button
• Write public
• Select READ WRITE or it can be READ ONLY
• Add Button
• Write private
• Select READ WRITE or it can be READ ONLY

From here.

External USB hdd kills Dell server

Note to self:

Do not plug external USB hdd into a Dell server. Had no problems before doing this on HP and others, but after about 3 hours on the phone to Dell support, they have someone a tech coming out to replace the mobo and video card...

CentOS5 (RHEL5) + 9TB Drive + AD + Win/OSX clients + BackupEXEC

I have setup a CentOS5 file server for a client.

Here is a log of what I did to get it working:

• CentOS5 install following - http://www.howtoforge.com/perfect_setup_centos5.0
  
  • Selecting to install the following packages - Select Editors, Text-based Internet, Development Libraries, Development Tools, Mail Server, Server Configuration Tools, Administration Tools, Base, and System Tools
• Don't bother installing CentOS onto a server that has that onboard SATA raid controllers! I had a dead drive in testing, and the server didn't just keep going on the redundant mirrored drive... :(
• Webmin
  • http://www.hornfordassociates.com/resources/how-to-library/virtual-centos-5.html
  • change port to 10001 because BackupExec agent also uses port 10000
  • Also used their instructions for cleaning up the basic CentOS install (sans gui)
    
    • yum remove finger gaim cups-libs bluez-libs desktop-file-utils
    • yum remove Deployment_Guide-en-US<
    • yum install postfix
    • yum remove sendmail
• RPM Forge
  • http://wiki.centos.org/Repositories/RPMForge
• Samba
  
  • http://www.brentnorris.net/blog/?p=179
  • http://www.howtoforge.com/samba_ads_security_mode
  • yum install samba
  • /etc/hosts - have the fqdn for the server and all DCs
• fstab
• krb5.conf
• nsf: - /etc/exports
  
  • I setup NFS using these instructions: http://www.jontodd.com/2006/07/24/setting-up-nfs-server-on-fedora-core-5-with-os-x-nfs-client/
  • And when I dug into the site, I may have found a solution to the file transfer speed: http://www.bresink.de/osx/143439/issues.html
    • I made the changes as suggested to /etc/exports
    • /mnt/raid03 192.168.23.0/255.255.255.0(rw,insecure,async)
    • Automounting from another server was a prob, this was the solution: http://crazytoon.com/2007/05/11/centos-and-redhat-problem-nfs-mount-at-boot-up-fails-with-error-system-error-no-route-to-host/
      

formatting the 9TB --F switch

• As for formatting the data store raid, I found out I needed to use a -F switch to force/push it over 8TB.
  Also use -m 0 so that it only uses 0% reserved for root
  Also -T largefile4

• [root@server03 ~]# mke2fs -j -b 4096 /dev/sdc
  mke2fs 1.39 (29-May-2006)
  /dev/sdc is entire device, not just one partition!
  Proceed anyway? (y,n) y
  mke2fs: Filesystem too large. No more than 2**31-1 blocks
  (8TB using a blocksize of 4k) are currently supported.
  

  [root@server03 ~]# mke2fs -j -F -b 4096 /dev/sdc
  mke2fs 1.39 (29-May-2006)
  Filesystem label=
  OS type: Linux
  Block size=4096 (log=2)
  Fragment size=4096 (log=2)
  1188610048 inodes, 2377197056 blocks
  118859852 blocks (5.00%) reserved for the super user
  First data block=0
  Maximum filesystem blocks=4294967296
  72547 block groups
  32768 blocks per group, 32768 fragments per group
  16384 inodes per group
  Superblock backups stored on blocks:
  32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
  4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
  102400000, 214990848, 512000000, 550731776, 644972544, 1934917632

  Writing inode tables: done
  Creating journal (32768 blocks): done
  Writing superblocks and filesystem accounting information: done
  

  So now...

  [root@server03 ~]# df -h
  Filesystem Size Used Avail Use% Mounted on
  /dev/md1 287G 2.4G 270G 1% /
  /dev/md0 99M 15M 79M 16% /boot
  tmpfs 2.0G 0 2.0G 0% /dev/shm
  /dev/sdc 8.8T 170M 8.3T 1% /raid03
  [root@server03 ~]# df
  Filesystem 1K-blocks Used Available Use% Mounted on
  /dev/md1 300708280 2442184 282744500 1% /
  /dev/md0 101018 15189 80613 16% /boot
  tmpfs 2023964 0 2023964 0% /dev/shm
  /dev/sdc 9359579336 173276 8883966652 1% /raid03
  [root@server03 ~]#

mount the drive - mount -t ext3 /dev/sdb /mnt/sharename

chmod -R 777 /mnt/sharename

start ntpd on startup - add server 0.pool.ntp.org

OSX uid/gid issue

To install the latest version of the BackupExec Agent for linux, I followed this tip: RALUS + RHEL 5 libstdc++so.6

• yum update (to bring your system up to date with RHN.)
• yum search compat-libstdc (this should list the two current versions of the compatible libraries)
• yum install compat-libstdc++-33 (this will install the GCC version)

Nic bonding:

• https://www.openfiler.com/community/forums/viewtopic.php?id=917
• http://linux-net.osdl.org/index.php/Bonding#Configuring_Bonding_for_Maximum_Throughput
• http://linux-net.osdl.org/index.php/Bonding
• http://www.howtoforge.com/network_card_bonding_centos

Configure HP ProCurve for LACP port trunking...

Setup rsync between servers:

• /etc/fstab -> server03:/mnt/raid03 /mnt/raid03 nfs defaults 0 0
• rsync --delete --archive --stats --progress /mnt/raid03/ /mnt/raid04/
• setup cron job
• echo "`date +"%F %R"`: Start backup" >> /root/rsync/log.txt
  rsync --archive --delete --stats --ignore-errors --exclude=**/BNR/build --exclude=**/BNR4/build --exclude=**/.TemporaryItems /mnt/raid03/ /mnt/raid04/ >> /root/rsync/log.txt
  echo "`date +"%F %R"`: Finish backup-jd" >> /root/rsync/log.txt
  cp /root/rsync/log.txt /mnt/raid03/rsynclog/
• This excludes the BNR open files and stops it from crashing