SUS support; Rewarding Job; Worms; and Data Replication Issues

Windows Update Support
In regard to April’s feature, “Patching the Holes,” by Jeremy Moskowitz, my company has SUS installed in our Windows 2000 Server domain, which works fine for automatic updates. But what about manual updates? There’s the possibility to use “Windows Update” in the Option menu of Microsoft Internet Explorer, but Internet Explorer still goes to a Microsoft Web site and not to the SUS server. Is it possible to change the download site of Windows Update from Microsoft to my SUS?
—Fabian Kraemer
Winterthur, Switzerland

Mere mortals on Win2K or XP desktops can’t run Windows Update. You must be logged in as an administrator or as part of the Administrators group. It doesn’t matter if the client is configured to use SUS or not. Local Administrators on the PC may run Windows Update by going to windows update.microsoft.com, the same location that’s in IE’s Tools | Windows Update. Note that SUS is a supported product by Microsoft PSS services, and Microsoft will give you support if you’re willing to pay the fees. Maybe it has a way around these limitations. Good luck.
—Jeremy Moskowitz

A Different Kind of Reward
I loved the August article, “A Wing and A Prayer,” by Jim Idema. I’ve performed work for a couple of churches in the past with limited budgets. About halfway through the job, I always ask myself: Why am I doing this? It’s only in the end that I realize how rewarding the completed project is. It’s definitely not always about the money.
—Michael Johncock, MCSE, CNE
Houston, Texas

New Directions
My letter, “Keep on Truckin’,” was published in the November 2002 issue. At that time, the economy was headed down the toilet and my career was quickly following.

I went back to school and finished my bachelor’s degree. Being of the “older stock” of the student body, it felt as if I’d taken several steps back in my career. I had over 10 years of IT experience with the likes of IBM, Merck, Target and Union Pacific. But I stuck to it. Through the experience, I got to dabble in an area not previously open to me: programming.

When I graduated last May, I started working toward programming. I kept my skills fresh by marketing myself to local small businesses for the first couple of months and began building applications for clients to streamline their paperwork processes. I snagged a job interview from an Internet job site! I got lucky. I doubt I’d have embraced this direction if I hadn’t been hit by the depressed economy. I thought readers could use a happy ending to a tough story.
—Jim Ownby, MCSE
Atlanta, Georgia

Security by Aggravation
I enjoyed August’s “Call Me Certifiable” column, “Security by Aggravation.” I’m really worried about the Next-Generation Secure Computing Base feature. I’ve had a lot of experience in tech support, watching the results of new features being added but not properly thought through. Is there a good forum for users to send feedback or comments about this to Microsoft, or is it still too early to do so?
—Andy Svendsen, MCSE, MCDBA
Fairfax, Virginia

It’s surprisingly hard to get feedback or comments to most of the software teams at Microsoft. To stay competitive, they tend to keep what the developers are actually up to pretty secret and don’t ask for input until they’re ready to launch a beta program. However, in the case of the Next-Generation Secure Computing Base initiative, Microsoft is making a serious effort to get your input. It has set up a newsgroup for public discussions and an e-mail alias (ngscb_qa@ microsoft.com) to which you can send feedback directly. Check out the NGSCB Web site at www.microsoft.com/resources/ngscb/community.mspx.
—Em C. Pea

Data Replication Issue
I found Jeremy Moskowitz’s article, “Active Directory Back From the Dead” online in your Feburary 2001 issue—just in time. Exactly as described in the article, one of my staff deleted a rather important OU and, thus, we followed the article with success to its restoration. However, we’re now having problems with replication of this data to our secondary domain controller. Specifically, the group memberships look completely different between the master and the secondary domain controller. Any thoughts would be greatly appreciated.
—Robert M. Kinney, CAN, CXE
Columbus, Ohio

Glad you found the article useful. I’d ensure the domain controller that’s not playing well with others is pointing to the same DNS as the others. DCDIAG.exe ought to help here. As for DCDIAG, there’s a downloadable update. I’d also suggest NETDIAG as well for your testing. Updates for both tools are found in article 265706, “DCDiag and NetDiag in Windows 2000 Facilitate Domain Join and DC Creation,” in the Microsoft Knowledge Base.
—Jeremy Moskowitz

E-mail Worm
I read Roger Grimes’ July article, “Lifecycle of an E-mail Worm,” on my way home from a technical seminar. I thought the article was very informative, and it brought back some experiences I had with some of these worms. I was wondering if you’d share your 100 potentially dangerous file extensions?
—Derek McKelvey, MCSE, CCNP, CCNA
West Palm Beach, Florida

Although the entire list wouldn’t fit here, you can find it online as part of my article, posted here: http://mcpmag.com/Features/article.asp?EditorialsID=351#threat.
—Roger Grimes

About the Author

Have a question or comment about an article or letter that appeared in MCP Magazine?

comments powered by Disqus
Most   Popular