John Croson's Blog Home

Image via Wikipedia Some time ago, I installed the SUA package with the thought I might use it for scripting and other tasks that I find easier to accomplish using GNU -like tools rather than Windows . Recently I needed to run a batch script that programatically checks for the evidence of some data files and injects them into MS Sql via DTS . This script worked fine on another server for years with a few tweaks now and then, and suddenly during my tests on this machine, it was failing. What I found was that my script was using the Windows FIND command, which is also installed by SUA. When I used FIND in my script, it was using the SUA flavor, and not the Windows version. I checked my PATH environment and saw that SUA's path was listed first, then %SystemRoot% , and %SystemRoot%\System32 where Windows FIND is installed. If I were a betting man, I'd have to say that since the SUA tools are listed before Windows, they get processed first. I've not tested this, but really...

Image via Wikipedia I recently had the need to provide printer admin access on an ERP server to ordinary users. Nothing makes me shudder more than elevating a users access on a machine that holds your entire business operation on it's drives... I was able to come up with a solution using CPAU.exe which I've written about here . The scenario: An active label printer and a backup. When one goes down, the other needs to be put into service, but it needs to have the same name as the active one did. The users then also need to be able to "flip a switch" to put the active one back into service. First, I needed the guts of the switching script, which makes use of Microsoft 's prncnfg.vbs script, stored on all Windows boxes in the %windir%\ system32 directory (Called ChangePrinter.cmd) : @ECHO OFF @SET _ONE=ACTIVEPROD @SET _ONE_DOWN=ACTIVEPROD_146 @SET _TWO=BACKUPPROD @SET _HOST=BAPFSVR03 :: PRINTERS RECEIVE ADDRESSES VIA DHCP :: WHEN NO ERROR CONDITIONS E...

Image via Wikipedia Looking for methods to exclude files in our Indexing Service repository, I found some information on the MSDN with sparse descriptions of registry values. Fortunately, Microsoft KB article 322896 provides a direct set if instructions.

I've always disliked the fact that I couldn't print to our Canon iR C2880 in color. It's not got the postscript option, which had I known how difficult it would have been for non- Windows PC's to use it, I would have investigated that option. They advertise the fact that the folks at Codehost, Inc. make a product called BrightQ that will print to these machines, but I never got it working well on my SuSE distribution . Image via Wikipedia I just recently updated my desktop from SuSE Linux Desktop Enterprise 10.1 to Ubuntu 9, and I've not been more pleased, but STILL couldn't print in color to our Canon...until now. I found a thread about this subject here where a kind soul named Andy informed the board that Canon Australia released Linux UFR and Postscript drivers in Deb, RPM, and source  (link updated 7/29/2013)! According to the documentation, the following Canon printers are supported: LBP3360 LBP3370 LBP3460 LBP5360 Image via Wikipedia ...

John Croson 2121 Taylor Avenue • Racine, WI 53403 • 262-237-8227 • john@croson.us 8 years of cross-platform experience in systems administration including analyzing, designing, installing, maintaining, and repairing hardware, software, peripherals and networks. Superior troubleshooting and technical support abilities with migrations, network connectivity, and security and database applications. Develop exceptional relationships with co-workers, management and end users. Excellent communication and problem solving skills Skills Technical Operating System Network Administration Server Design Internet / Intranet Configuration Hardware / Software Maintenance Security Testing / Patching Backup Solution Processing Technical / User Support VBA Solution Provider Windows 95, 98, NT, 2000, XP Clients Windows NT, 2000, 2003 Server Apple OS 9, OS X Linux Redhat, Debian, Gentoo, SuSE, Mandrake, Slackware, FreeBSD Cisco IOS Managerial Software Cost Containment & Budgeti...

NOTE: After a cursory view of the Symantec forums, it's come to my attention that it is NOT best practice to use Rapid Release, unless directed by Symantec or if you have this worm. I would compare this closely to M$ release of patches that are special in nature, and would normally only release these if the system exhibited specific symptoms related to said patch. In other words, use at your own risk. Image via CrunchBase Downloading and Installing RapidRelease Definitions: Open your Web browser . If you are using a dial-up connection, connect to any Web site, such as: http://securityresponse.symantec.com/ Copy and paste the address ftp://ftp.symantec.com/public/english_us_canada/antivirus_definitions/norton_antivirus/rapidrelease/sequence/ into the address bar of your Web browser and then press Enter.(this could take a minute or so if you have a slow connection) Now select 92114 folder or a higher. Open the folder. Select the file symrapidreleasedefsx86.exe When a down...

I like scripting . It helps me manage my client PC 's, perform redundant tasks, push out software updates, among other things. Most of the users on my network do not have privileges to install software, so this affects how some of my scripts function . I discovered that setting GPO to install applications with elevated privileges doesn't mean that the logon scripts also get processed the same way. This annoyed me, and I quickly found a solution. Introduce CPAU, from http://www.joeware.net/ . A neat little utility that takes the place of RUNAS, and very easy to use. I use it to launch my domain logon script, as it copies a HOST file , and other batch files run locally by the scheduler service, which are not allowed write by ordinary users. The following line encodes a file that will run logon.cmd using the credentials provided it. \\mydc\netlogon\cpau.exe -u mydomain\UserWithPermissions -p UserWithPermissionsPassword -ex \\mydc\netlogon\logon.cmd -file \\mydc\netlogon...

As a consultant, I used GFI LANguard (7?...it was at least 2 years ago) as a tool, in conjunction with nmap and some others, to perform security audits for our clients. Now I've an opportunity to use it again, and agreed to give it a review. Environment Dell Dimension 5150 P4 3ghz, 2gb Ram SLED 10.1, running VMWare Server 1.x 768mb allocated for XP SP2 Instance LAN, 2003 Domain in mixed mode The download from GFI's website was surprisingly small; only 50mb. The installation was straight forward, with only two questions; installation location, and initial credentials to use for scanning your domain. The UI is no different, very intuitive. I'd expect nothing else from GFI, since most of their products are the same way. The product is broken up into four components: Management Console - the central location for launching scans, view saved scans, configure options, and use specialized network security tools. Attendant Service - runs scheduled scans and patch deploymen...