10.28.08
Posted in PC/Tech at 12:41 by panda
When you configure the Group Policy settings for WSUS, use a Group Policy object (GPO) linked to an Active Directory container appropriate for your environment. Microsoft does not recommend editing the Default Domain or Default Domain Controller GPOs to add WSUS settings.
In a simple environment, link the GPO with the WSUS settings to the domain. In more complex environment, you might have multiple GPOs linked to several organizational units (OUs), which enables you to have different WSUS policy settings applied to different types of computers.
After you set up a client computer, it will take a few minutes before it appears on the Computers page in the WSUS console. For client computers configured with an Active Directory-based GPO, it will take about 20 minutes after Group Policy refreshes (that is, applies any new settings to the client computer). By default, Group Policy refreshes in the background every 90 minutes, with a random offset of 0 to 30 minutes. If you want to refresh Group Policy sooner, you can go to a command prompt on the client computer and type: gpupdate /force.
 Note |
| On client computers running Windows 2000, you can type the following at a command prompt: secedit /refreshpolicy machine_policy enforce. |
The following is a list of the Group Policy options available for configuring WSUS-related items in the environment.
| Note |
| In Windows 2000, Group Policy Object Editor is known as Group Policy Editor. Although the name changed, it is the same tool for editing Group Policy objects. It is also commonly referred to as gpedit. |
Load the WSUS Administrative Template
Before you can set any Group Policy options for WSUS, you must ensure that the latest administrative template has been loaded on the computer used to administer Group Policy. The administrative template with WSUS settings is named Wuau.adm. Although there are additional Group Policy settings related to the Windows Update Web site, all the new Group Policy settings for WSUS are contained within the Wuau.adm file.
If the computer you are using to configure Group Policy has the latest version of Wuau.adm, you do not need to load the file to configure settings. The new version of Wuau.adm is available on Windows XP with Service Pack 2. Administrative templates files are stored by default in the %windir%\Inf directory.
 Important |
| You can find the correct version of Wuau.adm on any computer having the WSUS-compatible Automatic Updates installed. You can use the old version of Wuau.adm to initially point Automatic Updates to the WSUS server in order to self-update. After the Automatic Updates self-updates, the new Wuau.adm file appears in the %windir%\Inf folder. |
If the computer you are using to configure Group Policy does not have the latest version of Wuau.adm, you must first load it by using the following procedure.
To add the WSUS Administrative Template
- In Group Policy Object Editor, click either of the Administrative Templates nodes.
- On the Action menu, click Add/Remove Templates.
- Click Add.
- In the Policy Templates dialog box, select Wuau.adm, and then click Open.
- In the Add/Remove Templates dialog box, click Close.
Configure Automatic Updates
The settings for this policy enable you to configure how Automatic Updates works. You must specify that Automatic Updates download updates from the WSUS server rather than from Windows Update.
To configure the behavior of Automatic Updates
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Configure Automatic Updates.
- Click Enabled and select one of the following options:
- Notify for download and notify for install. This option notifies a logged-on administrative user prior to the download and prior to the installation of the updates.
- Auto download and notify for install. This option automatically begins downloading updates and then notifies a logged-on administrative user prior to installing the updates.
- Auto download and schedule the install. If Automatic Updates is configured to perform a scheduled installation, you must also set the day and time for the recurring scheduled installation.
- Allow local admin to choose setting. With this option, the local administrators are allowed to use Automatic Updates in Control Panel to select a configuration option of their choice. For example, they can choose their own scheduled installation time. Local administrators are not allowed to disable Automatic Updates.
- Click OK.
Specify Intranet Microsoft Update Service Location
The settings for this policy enable you to configure a WSUS server that Automatic Updates will contact for updates. You must enable this policy in order for Automatic Updates to download updates from the WSUS server.
Enter the WSUS server HTTP(S) URL twice, so that the server specified for updates is also used for reporting client events. For example, type http(s)://servername in both boxes. Both URLs are required.
To redirect Automatic Updates to a WSUS server
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Specify Intranet Microsoft update service location.
- Click Enabled and type the HTTP(S) URL of the same WSUS server in the Set the intranet update service for detecting updates box and in the Set the intranet statistics server box. For example, type http(s)://servername in both boxes.
- Click OK.
Enable Client-side Targeting
This policy enables client computers to self-populate computer groups that exist on the WSUS server.
If the status is set to Enabled, the specified computer group information is sent to WSUS, which uses it to determine which updates should be deployed to this computer. This setting is only capable of indicating to the WSUS server which group the client computer should use. You must actually create the group on the WSUS server.
If the status is set to Disabled or Not Configured, no computer group information will be sent to WSUS.
To enable client-side targeting
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Enable client-side targeting.
- Click Enabled and type the name of the computer group in the box.
- Click OK.
Reschedule Automatic Update Scheduled Installations
This policy specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installation that was missed previously.
If the status is set to Enabled, a scheduled installation that did not take place earlier will occur the specified number of minutes after the computer is next started.
If the status is set to Disabled, a missed scheduled installation will occur with the next scheduled installation.
If the status is set to Not Configured, a missed scheduled installation will occur one minute after the computer is next started.
This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the Configure Automatic Updates policy is disabled, this policy has no effect.
To reschedule Automatic Update scheduled installation
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Reschedule Automatic Update scheduled installations, click Enable, and type a value in minutes.
- Click OK.
No Auto-restart for Scheduled Automatic Update Installation Options
This policy specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of causing the computer to restart automatically.
If the status is set to Enabled, Automatic Updates will not restart a computer automatically during a scheduled installation if a user is logged on to the computer. Instead, Automatic Updates will notify the user to restart the computer in order to complete the installation.
Be aware that Automatic Updates will not be able to detect future updates until the restart occurs.
If the status is set to Disabled or Not Configured, Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation.
This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the Configure Automatic Updates policy is disabled, this policy has no effect.
To inhibit auto-restart for scheduled Automatic Update installation options
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click No auto-restart for scheduled Automatic Update installation options, and set the option.
- Click OK.
Automatic Update Detection Frequency
This policy specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time is determined by using the hours specified here, minus 0 to 20 percent of the hours specified. For example, if this policy is used to specify a 20-hour detection frequency, then all WSUS clients to which this policy is applied will check for updates anywhere between 16 and 20 hours.
If the status is set to Enabled, Automatic Updates will check for available updates at the specified interval.
If the status is set to Disabled or Not Configured, Automatic Updates will check for available updates at the default interval of 22 hours.
To set Automatic Update detection frequency
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Automatic Update detection frequency, and set the option.
- Click OK.
Allow Automatic Update Immediate Installation
This policy specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows.
If the status is set to Enabled, Automatic Updates will immediately install these updates after they have been downloaded and are ready to install.
If the status is set to Disabled, such updates will not be installed immediately.
To allow Automatic Update immediate installation
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Allow Automatic Update immediate installation, and set the option.
- Click OK.
Delay Restart for Scheduled Installations
This policy specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart.
If the status is set to Enabled, a scheduled restart will occur the specified number of minutes after the installation is finished.
If the status is set to Disabled or Not Configured, the default wait time is five minutes.
To delay restart for scheduled installations
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Delay restart for scheduled installations, and set the option.
- Click OK.
Re-prompt for Restart with Scheduled Installations
This policy specifies the amount of time for Automatic Updates to wait before prompting the user again for a scheduled restart.
If the status is set to Enabled, a scheduled restart will occur the specified number of minutes after the previous prompt for restart was postponed.
If the status is set to Disabled or Not Configured, the default interval is 10 minutes.
To re-prompt for restart with scheduled installations
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Re-prompt for restart with scheduled installations, and set the option.
- Click OK.
Allow Non-administrators to Receive Update Notifications
This policy specifies whether logged-on non-administrative users will receive update notifications based on the configuration settings for Automatic Updates. If Automatic Updates is configured, by policy or locally, to notify the user either before downloading or only before installation, these notifications will be offered to any non-administrator who logs onto the computer.
If the status is set to Enabled, Automatic Updates will include non-administrators when determining which logged-on user should receive notification.
If the status is set to Disabled or Not Configured, Automatic Updates will notify only logged-on administrators.
To allow non-administrators to receive update notifications
- In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
- In the details pane, click Allow non-administrators to receive update notifications, and set the option.
- Click OK.
| Note |
| This policy setting does not allow non-administrative Terminal Services users to restart the remote computer where they are logged in. This is because, by default, non-administrative Terminal Services users do not have computer restart privileges. |
Remove Links and Access to Windows Update
If this setting is enabled, Automatic Updates receives updates from the WSUS server. Users who have this policy set cannot get updates from a Windows Update Web site that you have not approved. If this policy is not enabled, the Windows Update icon remains on the Start menu for local administrators to visit the Windows Update Web site. Local administrative users can use it to install unapproved software from the public Windows Update Web site. This happens even if you have specified that Automatic Updates must get approved updates from your WSUS server.
To remove links and access to Windows Update
- In Group Policy Object Editor, expand User Configuration, expand Administrative Templates, and then click Start Menu and Taskbar.
- In the details pane, click Remove links and access to Windows Update, and set the option.
- Click OK.
Permalink
10.27.08
Posted in Rants, Random Crap at 12:48 by panda
MmmMmmMmm…what a great weekend it has been. Grilled both days!! Just can’t beat that. We spent Saturday at our house and I grilled up some steaks. So very yummy. Tried a new recipe and it was very very good. I even spent a few minutes dancing with the fire ants! LOL. In case you were wondering what happened, I stepped to the side of the grill to check out the fire to see if it’s flaming up or what have you and apparently, there was a fire ant hive right at the edge where the grass meets the concrete. Apparently, they don’t like it when you’re standing on their hive. I felt something on my ankle, so I look down and there were columns of ants climbing up my leg~! The second I hit them off, they all started biting. Sneaky little suckers. Got me good.
Sunday, I was over at John’s place house siting with my beloved wife and my sister and we grilled burgers for lunch and tri-tip for dinner. Mmm…both so yummy! The grill…it too good!
We also watched Jay Chou’s Secret. So sweet. The girl is HOT in that one. She’s so cute. Of course, if you ask me, I believe that due to a girl’s nature, she killed herself. One might argue that she was upset at Jay wearing Sky’s bracelet, etc. etc. However, if you think about it. He told her he was coming back for her and told her to wait. What did she do? She started thinking too much when she saw the bracelet! Even though Jay was just being the responsible guy he was and was returning the bracelet. And we all know how girls like responsible guy. It’s almost like suicide. She thinks too much of it and takes off. Tsk tsk. Oh well, still a very good movie. Very good music. 
Permalink
Posted in Jokes at 12:43 by panda
Jack and Betty are celebrating their 50th wedding anniversary. “Betty, I was wondering — have you ever cheated on me?”
“Oh Jack, why would you ask such a question now? You don’t want to ask that question…”
“Yes, Betty, I really want to know. Please.”
“Well, all right. Yes, 3 times.”
“Three? When were they?”
“Well, Jack, remember when you were 35 years old and you really wanted to start the business on your own and no bank would give you a loan? Remember how one day the bank president himself came over to the house and signed the loan papers, no questions asked?”
“Oh, Betty, you did that for me! I respect you even more than ever, that you would do such a thing for me! So, when was number 2?”
“Well, Jack, remember when you had that last heart attack and you were needing that very tricky operation, and no surgeon would touch you? Remember how Dr. DeBakey came all the way up here, to do the surgery himself, and then you were in good shape again?”
“I can’t believe it! Betty, I love that you should do such a thing for me, to save my life! I couldn’t have a more wonderful wife. To do such a thing, you must really love me darling. I couldn’t be more moved. When was number 3?”
“Well, Jack, remember a few years ago, when you really wanted to be president of the golf club and you were 17 votes short?”
Permalink
10.21.08
Posted in PC/Tech at 14:02 by panda
At the phone:
- Press ∞397 + <key> - This programs the <key> you pressed
- Press ∞317 - Headset mode
Now, when they press the “Headset Mode” key, the red light next to the key will come on to indicate headset mode is on. If the light turns off, headset mode is off.
****NOTES****
Essentially, headset mode passes the speakerphone to the headset that is plugged into the back of the phone. If someone was on a call and wanted to use their speakerphone, they will need to:
- Put the current call on hold
- Turn off headset mode
- Pick up the call with the speakerphone
Permalink
Posted in PC/Tech at 13:50 by panda
This only works if you have a DID associated with an extension.
You must have a voice mail account first before you do this part. After you have a voice mail account, proceed with the following steps:
- Go to Voice Processor -> Devices -> Applications
- Right-click on the open area and create a “Call Routing Announcement”
- Accept the next available extension and then fill in the “Description” and “Username”
- Double-click on the extension you just created.
- Change “Fax Delivery E-mail Address” to the user’s e-mail address.
- Open “Digit Translation”
- Change “Timeout” to “Transfer to Extension”
- Change “Transfer Destination” to the endpoint
- Open “Day Greeting” and remove “Voice Mail” [otherwise, the user will hear the welcome message of the Voice Mail (ie. “Hello, you have reached the…”)]
- Add an “Intermediate Pause”
- Repeat steps 9 & 10, but in “Night Greeting” instead of “Day Greeting”
- Click on “Extension IDs” (Voice Processor -> Devices -> Extension IDs)
- Right-click in the open area and choose “Create Extension ID”
- Choose “Call Routing Announcement” and click Next
- Click the call routing announcement you just created and click “Add Items” and then “Finish”
- Double-click that extension ID and set “Auto Attendant Transfer Prompt” to “No” (uncheck it) (this stops Inter-tel from telling you it’s transferring you to wherever)
That’s it. Done.
Permalink
Posted in PC/Tech at 13:39 by panda
- Open up the Inter-tel DB Programmer
- Go to System -> Devices and Feature Codes -> Endpoints
- On the left-hand side, click on the endpoint you want to assign a voice mail account to
- On the right-hand side, double-click “Associated Extensions”
- Change”Message Center” and “Voice Mail” to “2500″
- On the left-hand side, click on “Forwarding Paths”
- Right-click on the open area in the right window pane and choose “Add a forwarding path”
- Select “Forwarding Paths” and click”Next”
- Choose “DND/NA V/Mail” and click “Add Items” then click “Finish”
- Double-click”DND/NA V/Mail” and “Busy” to no (uncheck it) so the user has the choice to pick up or not when they get an incoming call while they’re on the phone.
- In the left window pane, click on “Record-A-Call”
- Right-click on “Application” and choose “Choose” and pick “Record-A-Call” (this allows a user to record a conversation)
- Now go to Voice Processor -> Devices -> Mailboxes
- Right-click in the open area and create an “associated mailbox” (”associated mailbox” has a device attached, “inassociated mailbox” has no device/extensions attached)
- Pick the device type of the device, then the extension you want the voice mail account to be associated with.
- Double-click on the voice mailbox and set “Auto Attendant Transfer Prompt” to no.
Permalink
Posted in PC/Tech at 13:28 by panda
- Open up Inter-tel’s DB Programmer.
- Go to System ->Devices and Feature Codes -> Endpoints
- Right-click in the open area and choose to create an endpoint
- Fill in the information for the endpoint and click OK
- Starting Extension: The extension you’re setting up
- Number of Extensions: 1
- MAC Address: Click on the address there and put in the one you’re setting up
- Fill in the description and user name to whatevr you like it to be.
- Double-click on the endpoint.
- Go into IP Settings -> Network Configuration
- Set “DHCP Enabled” and “IP Address Assignment: BOOTP” to”No” (just uncheck the box)
- Fill-in the static IP information
- IP Address: 192.168.29.1+ last 2 digits of extension (ie. if extension is 2965, then IP address is 192.168.29.165)
- Static Gateway: 192.168.29.2
- Remote Server IP Address: 192.168.29.31
- Now plug in the PoE LAN cable into the phone and program the same settings into the phone.
Once you’re done, the phone should display the extension and name that you’ve given the phone in the programming at the database.
Permalink
Posted in PC/Tech at 13:01 by panda
Plug the PoE network cable into the phone and then hold down the “7″ & “8″ keys until you get the program menu.
Permalink
10.17.08
Posted in Jokes at 8:30 by panda
We will begin with a box, and the plural is boxes,
But the plural of ox becomes oxen, not oxes.
One fowl is a goose, but two are called geese;
Yet the plural of moose should never be meese.
You may find a lone mouse or a nest full of mice,
Yet the plural of house is houses, not hice.
If the plural of man is always called men,
Then shouldn’t the plural of pan be call pen?
If I speak of my foot and show you my feet,
And I give you a boot, would a pair be called beet?
If one is a tooth and a whole set are teeth,
Why shouldn’t the plural of booth be call beeth?
Then one may be that, and three would be those,
Yet hat in the plural would never be hose,
And the plural of cat is cats, not cose.
We speak of a brother and also of brethren,
But though we say mother, we never say methren.
Then the masculine pronouns are he, his and him,
But imagine the feminine: she, shis and shim!
Let’s face it - English is a crazy language.
There is neither egg in eggplant nor ham in hamburger; neither apple nor pine in pineapple.
English muffins weren’t invented in England.
We take English for granted, but if we explore its paradoxes, we find that quicksand can work slowly, boxing rings are square, and a guinea pig neither is from Guinea nor is it a pig.
And why is it that writers write but fingers don’t fing, grocers don’t groce and hammers don’t ham?
Doesn’t it seem crazy that you can make amends but not one mend?
If you have a bunch of odds and ends and get rid of all but one of them, what do you call it?
If teachers taught, why didn’t preachers praught?
If a vegetarian eats vegetables, what does a humanitarian eat?
Sometimes I think all the folks who grew up speaking English should be committed to an asylum for the verbally insane.
In what other language do people recite at a play and play at a recital?
We ship by truck but send cargo by ship.
We have noses that run and feet that smell.
We park in a driveway and drive in a parkway.
And how can a slim chance and a fat chance be the same, while a wise man and a wise guy are opposites?
You have to marvel at the unique lunacy of a language in which your house can burn up as it burns down, in which you fill in a form by filling it out, and in which an alarm goes off by going on; And, in closing, if Father is Pop, Â how come Mother’s not Mop?
AND IF PEOPLE FROM POLAND ARE CALLED POLES THEN PEOPLE FROM HOLLAND SHOULD BE HOLES AND THE GERMANS, GERMS
Permalink
10.15.08
Posted in PC/Tech at 10:55 by panda
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10068988.htm
 |
| Technical Information Document |
| How to restore an iFolder User Account from a Backup - TID10068988 (last modified 18JUN2004) |
|
10068988 10068988 10068988
 |
goal |
|
|
|
| How to restore an iFolder User Account from a Backup |
|
|
|
|
symptom |
|
|
|
A user needs to have their account restored for one of the following reasons:
1. Account was removed from the server.
2. User needs some documents as they existed on a past date. |
|
|
|
|
fix |
|
|
|
At the time of writing this document, the ONLY officially supported method for disaster recovery is a data restoration via tape backup. (This includes backing up the iFolder data store and the Apache + Apache/iFolder folders on the SYS volume.)
*NOTE* You may also want to ask the end user to look in their Recycled folder. Since the file was deleted off the hard drive, it should actually still be in there.
Unsupported Work-around:
To restore a users account from a backup system to the iFolder server please follow these steps. Keep in mind that you cannot restore individual files, you can only restore the entire account.
1. If necessary, instruct the user to right click on the iFolder Client in the system tray and select exit. This should be done on all iFolder Clients that this user may have.
2. Login to the iFolder management page at: https://<DNS-or-IPaddress>/iFolderServer/Admin use your i-Login user ID and password. (Replace <DNS-or-IPaddress> with the actual DNS name or IP address of your iFolder server.)
3. Because all of the folder and file names in the iFolder data store are hashed you need to find the hashed directory where the user data is stored.
4. Click on the User Accounts link on the left.
5. Find the user account that needs to be restored.
6. Once you have the page that lists the user you are looking fore right click in the right had frame and select �View Source�.
7. This should open Notepad with the HTML source in it. Do a search for the user ID. (e.g. Click on Edit, Find, type in user ID “testuser”).
8. You should see a line like this: testuser/home </TD>
9. The value between �User=� and �.htm� (User=05195AC461427F27405EDB493ACE9428.htm) is a randomly created number that will correspond to the name of the folder on the iFolder server.
10. Now that you have this value you can logout of the iFolder Server Management page by clicking on the Login/Logout link on the left, then press the Logout button.
11. The user folder above is located on the iFolder server ServerName\VOLUME:\iFolderData. (Servername\VOLUME will correspond to your iFolder server’s name and the iFolder data store volume.) In this folder you will see many folders with two character HEX names. All user accounts that start with 00-03 are in the 00 folder. All accounts that start with 04-07 are in the 04 folder, etc.
12. To find the folder for the user testuser look above at the number that you found. It begins with 05, thus it will be located in the ServerName\VOLUME:\iFolderData\04 folder. (Servername\VOLUME will correspond to your iFolder server’s name and the iFolder datastore volume.)
13. So the location you will be restoring for user testuser would look like this: ServerName\VOLUME:\iFolderData\04\05195AC461427F27405EDB493ACE9428
14. Restore this folder to its original location.
15. The iFolder account, on the server, will now look as it did on the day of the restore.
*Hold on, we are not quite finished yet.* If the user logs in at this point the iFolder client will begin syncing data with the server and a couple of things could happen: A) If the bad copy of the file the user wants restored is still on the local disk it will be uploaded to the server because it is the latest copy of the file. B) If the bad copy of the file has been deleted, then that delete will be synced up to the server, thus the file will be removed. Therefore the following steps must be performed on each of the users iF.older workstations:
1. Make sure that the iFolder Client is exited on each of the users machines. (see step 1 at the top of this document).
2. Delete any files from the local iFolder that you want to come back from the restore.
3. Delete the following folder on each machine: C:\Program Files\Novell\iFolder\userID. Note: If the My Documents folder has been moved to a drive other than C: then substitute that drive letter for C: when doing the delete. This will remove all of the file and folder maps on the client machine. Thus forcing the clients to reconcile with the server on the next Sync.
4. Once the deletes have been completed have the user login to their iFolder account. Any files that exist on the ifolder server but not on the client will be downloaded to the local drive. Any files that exist on the local drive that do not exist on the server will be uploaded. All files that exist in both locations will be checked and the newest file will be synced.. |
|
|
|
|
|
|
| Document Title: |
How to restore an iFolder User Account from a |
| Document ID: |
10068988 |
| Solution ID: |
NOVL73818 |
| Creation Date: |
07MAR2002 |
| Modified Date: |
18JUN2004 |
| Novell Product Class: |
NetWare
Other |
|
|
Back 
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10068988.htm
Permalink
« Previous entries