VPN3020 - ACS - Windows AD - best practices links

Do you have good link with general procedures and best practices for setting up VPN user authorization to a standard Windows domain/AD.
VPN3020 -> radius -> ACS (with default policy to Windows NT) does work, but wanted more granular control which user have VPN access.
With this model everyone who has Windows account would automatically get VPN access.
Also if there are any good reading on setting up "single logon" Cisco VPN client and windows domain.

Try this link
http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/4_0/404acn3k.htm

Similar Messages

Seaching for Best Practice links that work

Hi,
past few years I have been able to access SAP Best Practices documents like SAP Best Practices SAP Best Practices for CP and Wholesale Industries
(this one still works and guides me to the building block and process overview documents!).
Recently any link I can find to SAP Industry or Baseline Best Practices ends up with a dead link. See for example trying to get from here SAP Best Practices Baseline packages – SAP Help Portal Page
to Localized for Netherlands V1.607 SAP Best Practices package further below on that page, results in screen shot attached. I have seen that in many more examples (different countries, or in Industry Best Practice Packages instead of Country Baseline packages....)
Does any know whether and how SAP redesigned their access to Best Practices documents (Configuration Guides, eCatts, Scenario Process Overviews etc.?
Thanks for your reply.
Thijs

Hi, Thijs,
There is currently a problem with Best Practices on the Help Portal. On the home page of the portal (http://help.sap.com/) there is a message that reads "Stay Tuned - There are temporary problems when accessing some content types, for example PDF documents or Best Practices. We are working on a solution."
Our Wholesale Distribution industry group does not manage the Help Portal pages, so, unfortunately, I don't know the status of the problem or when it might be resolved.
Lynn

Best Practice link

Hi ,
Can any one give me place where can i download BP for following Addons
BP -ERP05 Best Practices for All-in-One based on E
BP-INSTASS SAP Best Practices Solution Builder
Thanks in Advance

Dear Noppong,
You can do it with multiple ways like :-
1. Get the current host name and make complete URL with using host name for the webdynpro iview.
request = (IPortalComponentRequest) this.getRequest();
HttpServletRequest req = request.getServletRequest();
StringBuffer strURL = req.getRequestURL();
2. Create the KM Document or Link for webdynpro Iview OR Create the WPC Web Page for the webdynpro ivew
Refer to [http://help.sap.com/saphelp_nw70/helpdata/en/06/4776399abf4b73945acb8fb4f41473/frameset.htm|http://help.sap.com/saphelp_nw70/helpdata/en/06/4776399abf4b73945acb8fb4f41473/frameset.htm]
[http://help.sap.com/saphelp_nw70/helpdata/en/06/4776399abf4b73945acb8fb4f41473/frameset.htm|http://help.sap.com/saphelp_nw70/helpdata/en/06/4776399abf4b73945acb8fb4f41473/frameset.htm]
[http://help.sap.com/saphelp_nw70ehp1/helpdata/en/ff/681a4138a147cbabc3c76bde4dcdbd/content.htm|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/ff/681a4138a147cbabc3c76bde4dcdbd/content.htm]
Hope it will helps
Best Regards
Arun Jaiswal

Time Machine, FileVault & Windows Backup Best Practice

I read a lot on the forums about people wanting the best way to backup, when they had FileVault and also Windows files.
This is what I did, I have a 250 GB Lacie external drive:
1) 2 Partitions: 177 GB Mac OS Extended, 55 GB FAT32 (This disk was entirely FAT32 and MacOS Disk Utility wouldn't resize it to make space or even recognize the unpartitioned space I created in Windows, using a third party tool. So I resized in Windows, created a new ext2 partition, connected to Mac and erased it as Mac OS Extended. Mac sees 2 partitions now and automatically wants to use one for TimeMachine)
2) I use FileVault on my home folder, only for personal pictures and documents. I keep the iTunes music folder out of my home folder
3) Use Time Machine to back up everything but my home folder
4) Create an encrypted image of my FileVaulted home folder on the same backup disk that I created. For ease, I use the same password as that of my login account. I used the Disk Utility's Image from Folder option for this.
So My pictures and documents are encrypted on my machine, they are copied as one encrypted file into the backup drive, and the rest of my machine is backed up by File Vault. I do not have to log out, though it is a manual step for me to create the Image from folder. I don't mind doing that for now as I will need to do it only when I add new pictures to this folder. I would then make a new image on the backup drive.
I think this setup will work for me, if I do find things I can tweak I will post a follow up.

I set Super Duper to Back Up my PowerMac and to shut down after completing the back up, then i went to sleep. Six hours later, I woke up when I heard the fans spinning profusely and the Mac still not 'shut down'. Got following error log. Does anyone knows what has went wrong? Have I potentially 'fried' the CPU?
system.log:
Description: System events log
Size: 25 KB
Last Modified: 4/22/08 6:11 AM
Location: /var/log/system.log
Recent Contents: Apr 22 00:00:01 ian-phuas-power-mac-g5 newsyslog[654]: logfile turned over
Apr 22 00:01:16 ian-phuas-power-mac-g5 [0x0-0x95095].com.microsoft.PowerPoint[558]: monitor: taskforpid failed (os/kern) failure
Apr 22 00:04:47 ian-phuas-power-mac-g5 com.apple.launchd[64] ([0x0-0xaa0aa].jp.co.canon.bj.printer.app.MPNavigator[673]): Stray process with PGID equal to this dead job: PID 675 PPID 1 MP Navigator
Apr 22 00:07:03 ian-phuas-power-mac-g5 /usr/sbin/spindump[691]: process 675 is being monitored
Apr 22 00:07:05 ian-phuas-power-mac-g5 /usr/sbin/spindump[691]: process 675 is being force quit
Apr 22 00:07:09 ian-phuas-power-mac-g5 /usr/sbin/spindump[691]: process 675 is being no longer being monitored
Apr 22 00:07:13 ian-phuas-power-mac-g5 com.apple.launchd[64] ([0x0-0xb00b0].jp.co.canon.bj.printer.app.MPNavigator[693]): Stray process with PGID equal to this dead job: PID 695 PPID 1 MP Navigator
Apr 22 00:10:42 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Maxtor 6B160M0' - SMART condition not exceeded, drive OK!
Apr 22 00:10:42 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Hitachi HDT725032VLA360' - SMART condition not exceeded, drive OK!
Apr 22 00:12:03 ian-phuas-power-mac-g5 Finder[91]: Cannot find function pointer pluginFactory for factory 053918F4-2869-11D7-A671-000A27E2DB90 in CFBundle/CFPlugIn 0x6c54680 </Users/ianphuac/Library/Contextual Menu Items/ToastIt.plugin> (bundle, loaded)
Apr 22 00:13:34 ian-phuas-power-mac-g5 Mail[202]: Cannot find function pointer pluginFactory for factory 053918F4-2869-11D7-A671-000A27E2DB90 in CFBundle/CFPlugIn 0x8b911f0 </Users/ianphuac/Library/Contextual Menu Items/ToastIt.plugin> (bundle, loaded)
Apr 22 01:03:31 ian-phuas-power-mac-g5 /usr/sbin/spindump[760]: process 695 is being monitored
Apr 22 01:03:33 ian-phuas-power-mac-g5 /usr/sbin/spindump[760]: process 695 is being force quit
Apr 22 01:03:36 ian-phuas-power-mac-g5 fseventsd[26]: callback_client: ERROR: d2fcallbackrpc() => (ipc/send) invalid destination port (268435459) for pid 700
Apr 22 01:03:41 ian-phuas-power-mac-g5 SubmitReport[766]: missing kCRProblemReportProblemTypeKey
Apr 22 01:03:44 ian-phuas-power-mac-g5 /usr/sbin/ocspd[769]: starting
Apr 22 01:03:45 ian-phuas-power-mac-g5 SubmitReport[766]: Submitted compressed hang report for MP Navigator
Apr 22 01:04:26 ian-phuas-power-mac-g5 [0x0-0x94094].com.microsoft.DatabaseDaemon[557]: monitor: taskforpid failed (os/kern) failure
Apr 22 01:04:28 ian-phuas-power-mac-g5 SuperDuper![772]: .scriptSuite warning for attribute 'boundsAsQDRect' of class 'NSWindow' in suite 'NSCoreSuite': 'NSData<QDRect>' is not a valid type name.
Apr 22 01:04:27 ian-phuas-power-mac-g5 [0x0-0xbb0bb].com.blacey.SuperDuper![772]: crontab: no crontab for ianphuac
Apr 22 01:04:28 ian-phuas-power-mac-g5 SuperDuper![772]: .scriptSuite warning for type 'NSTextStorage' attribute 'name' of class 'NSApplication' in suite 'NSCoreSuite': AppleScript name references may not work for this property because its type is not NSString-derived.
Apr 22 01:04:28 ian-phuas-power-mac-g5 SuperDuper![772]: .scriptSuite warning for type 'NSTextStorage' attribute 'lastComponentOfFileName' of class 'NSDocument' in suite 'NSCoreSuite': AppleScript name references may not work for this property because its type is not NSString-derived.
Apr 22 01:04:28 ian-phuas-power-mac-g5 SuperDuper![772]: .scriptSuite warning for attribute 'boundsAsQDRect' of class 'NSWindow' in suite 'NSCoreSuite': 'NSData<QDRect>' is not a valid type name.
Apr 22 01:04:28 ian-phuas-power-mac-g5 SuperDuper![772]: .scriptSuite warning for type 'NSTextStorage' attribute 'title' of class 'NSWindow' in suite 'NSCoreSuite': AppleScript name references may not work for this property because its type is not NSString-derived.
Apr 22 01:04:28 ian-phuas-power-mac-g5 SuperDuper![772]: .scriptSuite warning for superclass of class 'NSAttachmentTextStorage' in suite 'NSTextSuite': 'NSString' is not a valid class name.
Apr 22 01:04:34 ian-phuas-power-mac-g5 kernel[0]: UniNEnet::monitorLinkStatus - Link is down.
Apr 22 01:04:44 ian-phuas-power-mac-g5 SuperDuper![772]: Connection failed! Error - no Internet connection
Apr 22 01:04:56 ian-phuas-power-mac-g5 authexec[800]: executing /Applications/SuperDuper!.app/Contents/MacOS/SDAgent
Apr 22 01:04:59 ian-phuas-power-mac-g5 KernelEventAgent[23]: tid 00000000 received unknown event (256)
Apr 22 01:10:42 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Maxtor 6B160M0' - SMART condition not exceeded, drive OK!
Apr 22 01:10:42 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Hitachi HDT725032VLA360' - SMART condition not exceeded, drive OK!
Apr 22 01:16:27 ian-phuas-power-mac-g5 KernelEventAgent[23]: tid 00000000 received unknown event (256)
Apr 22 01:16:28 ian-phuas-power-mac-g5 fsaclctl[841]: HFSIOC_SETACLSTATE 1 on /Volumes/Lacie Backup returns 0 errno = 2
Apr 22 01:30:28 ian-phuas-power-mac-g5 com.apple.launchd[1] (0x10b470.nohup[880]): Could not setup Mach task special port 9: (os/kern) no access
Apr 22 02:00:33 ian-phuas-power-mac-g5 ntpd[14]: sendto(17.83.254.7) (fd=23): No route to host
Apr 22 02:10:47 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Maxtor 6B160M0' - SMART condition not exceeded, drive OK!
Apr 22 02:10:48 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Hitachi HDT725032VLA360' - SMART condition not exceeded, drive OK!
Apr 22 02:49:58 ian-phuas-power-mac-g5 kernel[0]: IOPMSlotsMacRISC4::determineSleepSupport has canSleep true
Apr 22 02:51:34 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 02:53:35 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 02:55:36 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 02:57:36 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 02:59:37 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:01:37 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:03:37 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:05:38 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:07:38 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:09:39 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:10:47 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Maxtor 6B160M0' - SMART condition not exceeded, drive OK!
Apr 22 03:10:47 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Hitachi HDT725032VLA360' - SMART condition not exceeded, drive OK!
Apr 22 03:12:39 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:14:12 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:17:13 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:19:13 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:21:44 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:23:44 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:25:45 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:27:45 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:29:46 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:31:46 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:33:46 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:36:47 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:38:47 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:40:48 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:42:48 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:45:49 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:47:49 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:50:50 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:53:20 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:55:21 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:57:21 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 03:59:22 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:01:52 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:03:53 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:05:53 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:07:53 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:09:56 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:10:47 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Maxtor 6B160M0' - SMART condition not exceeded, drive OK!
Apr 22 04:10:47 ian-phuas-power-mac-g5 SMARTReporter[101]: ATA Drive: 'Hitachi HDT725032VLA360' - SMART condition not exceeded, drive OK!
Apr 22 04:12:57 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:17:28 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:20:29 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:22:29 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:25:30 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:27:30 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:29:31 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:31:31 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:33:32 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:35:32 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:37:32 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:39:33 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:41:33 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:43:34 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:45:34 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:47:34 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:50:35 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 04:52:35 ian-phuas-power-mac-g5 kernel[0]: PM notification timeout (pid 202, Mail)
Apr 22 06:07:05 localhost com.apple.launchctl.System[2]: fsck_hfs: Volume is journaled. No checking performed.
Apr 22 06:07:05 localhost com.apple.launchctl.System[2]: fsck_hfs: Use the -f option to force checking.
Apr 22 06:07:07 localhost com.apple.launchctl.System[2]: launchctl: Please convert the following to launchd: /etc/mach_init.d/dashboardadvisoryd.plist
Apr 22 06:07:07 localhost com.apple.launchd[1] (org.cups.cupsd): Unknown key: SHAuthorizationRight
Apr 22 06:07:07 localhost com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
Apr 22 06:07:15 localhost kernel[0]: Darwin Kernel Version 9.2.2: Tue Mar 4 21:23:43 PST 2008; root:xnu-1228.4.31~1/RELEASE_PPC
Apr 22 06:07:08 localhost kextd[10]: 414 cached, 0 uncached personalities to catalog
Apr 22 06:07:15 localhost kernel[0]: standard timeslicing quantum is 10000 us
Apr 22 06:07:14 localhost rpc.statd[17]: statd.notify - no notifications needed
Apr 22 06:07:15 localhost kernel[0]: vmpagebootstrap: 1020257 free pages and 28319 wired pages
Apr 22 06:07:14 localhost fseventsd[26]: event logs in /.fseventsd out of sync with volume. destroying old logs. (99878 12 104327)
Apr 22 06:07:14 localhost bootlog[35]: BOOT_TIME: 1208815622 0
Apr 22 06:07:16 localhost kernel[0]: migtable_maxdispl = 79
Apr 22 06:07:14 localhost DirectoryService[31]: Launched version 5.2 (v514.4)
Apr 22 06:07:15 localhost DumpPanic[29]: Panic data written to /Library/Logs/PanicReporter/2008-04-22-060715.panic
Apr 22 06:07:17 localhost kernel[0]: 106 prelinked modules
Apr 22 06:07:14 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow[22]: Login Window Application Started
Apr 22 06:07:17 localhost kernel[0]: Loading security extension com.apple.security.TMSafetyNet
Apr 22 06:07:14 localhost DirectoryService[31]: WARNING - dsTouch: file was asked to be opened </Library/Preferences/DirectoryService/.DSIsRunning>: (File exists)
Apr 22 06:07:17 localhost kernel[0]: calling mpopolicyinit for TMSafetyNet
Apr 22 06:07:17 localhost kernel[0]: Security policy loaded: Safety net for Time Machine (TMSafetyNet)
Apr 22 06:07:17 localhost kernel[0]: Loading security extension com.apple.nke.applicationfirewall
Apr 22 06:07:18 localhost kernel[0]: Loading security extension com.apple.security.seatbelt
Apr 22 06:07:18 localhost kernel[0]: calling mpopolicyinit for mb
Apr 22 06:07:18 localhost kernel[0]: Seatbelt MACF policy initialized
Apr 22 06:07:18 localhost kernel[0]: Security policy loaded: Seatbelt Policy (mb)
Apr 22 06:07:18 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Apr 22 06:07:18 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Apr 22 06:07:18 localhost kernel[0]: MAC Framework successfully initialized
Apr 22 06:07:19 localhost kernel[0]: using 16384 buffer headers and 4096 cluster IO buffer headers
Apr 22 06:07:19 localhost kernel[0]: AirPort_Brcm43xx::probe: 05094e80, 0
Apr 22 06:07:19 localhost kernel[0]: DART enabled
Apr 22 06:07:19 localhost kernel[0]: FireWire (OHCI) Apple ID 42 PCI now active, GUID 001124fffe7f2582; max speed s800.
Apr 22 06:07:19 localhost kernel[0]: mbinit: done
Apr 22 06:07:20 localhost kernel[0]: Security auditing service present
Apr 22 06:07:20 localhost kernel[0]: BSM auditing present
Apr 22 06:07:20 localhost kernel[0]: rooting via boot-uuid from /chosen: 7EEABB9C-080B-3F8E-9C95-7E90FFCF646F
Apr 22 06:07:20 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
Apr 22 06:07:20 localhost kernel[0]: wl0: Broadcom BCM4320 802.11 Wireless Controller
Apr 22 06:07:20 localhost fseventsd[26]: log dir: /.fseventsd getting new uuid: 77035FE8-86D2-4B05-AE4E-F897A4A724B3
Apr 22 06:07:20 localhost kernel[0]: 4.170.25.8.2Got boot device = IOService:/MacRISC4PE/ht@0,f2000000/AppleMacRiscHT/pci@5/IOPCI2PCIBridge/k2-sat a-root@C/AppleK2SATARoot/k2-sata@1/AppleK2SATA/ATADeviceNub@0/AppleATADiskDriver /IOATABlockStorageDevice/IOBlockStorageDriver/Hitachi HDT725032VLA360 Hitachi HDT725032VLA360/IOApplePartitionScheme/AppleHFS_Untitled1@3
Apr 22 06:07:20 localhost kernel[0]: BSD root: disk1s3, major 14, minor 5
Apr 22 06:07:20 localhost kernel[0]: jnl: unknown-dev: replay_journal: from: 15033344 to: 16646656 (joffset 0x952000)
Apr 22 06:07:20 localhost kernel[0]: jnl: unknown-dev: journal replay done.
Apr 22 06:07:20 localhost mDNSResponder mDNSResponder-170 (Jan 4 2008 18:04:16)[21]: starting
Apr 22 06:07:21 localhost kernel[0]: HFS: Removed 2 orphaned unlinked files or directories
Apr 22 06:07:21 localhost kernel[0]: Jettisoning kernel linker.
Apr 22 06:07:21 localhost kernel[0]: Resetting IOCatalogue.
Apr 22 06:07:21 localhost kernel[0]: Matching service count = 0
Apr 22 06:07:21 localhost kernel[0]: Matching service count = 5
Apr 22 06:07:21: --- last message repeated 4 times ---
Apr 22 06:07:21 localhost kernel[0]: PowerMac72U3TwinsPIDCtrlLoop::adjustControls state == not ready
Apr 22 06:07:21 localhost kernel[0]: IOPlatformControl::registerDriver Control Driver AppleSlewClock did not supply target-value, using default
Apr 22 06:07:21 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Apr 22 06:07:21 localhost kernel[0]: UniNEnet: Ethernet address 00:11:24:7f:25:82
Apr 22 06:07:21 localhost kernel[0]: AirPort_Brcm43xx: Ethernet address 00:11:24:aa:86:4b
Apr 22 06:07:21 localhost /usr/sbin/ocspd[57]: starting
Apr 22 06:07:22 localhost kernel[0]: jnl: disk0s3: replay_journal: from: 623616 to: 1369088 (joffset 0xa701000)
Apr 22 06:07:22 localhost kernel[0]: jnl: disk0s3: journal replay done.
Apr 22 06:07:22 localhost fseventsd[26]: event logs in /Volumes/Macintosh HD/.fseventsd out of sync with volume. destroying old logs. (20187 0 27000)
Apr 22 06:07:22 localhost fseventsd[26]: log dir: /Volumes/Macintosh HD/.fseventsd getting new uuid: EAEEEBE3-D7A7-4F79-BBAE-0B9727642A98
Apr 22 06:07:27 localhost mDNSResponder[21]: Couldn't read user-specified Computer Name; using default “Macintosh-0011247F2582” instead
Apr 22 06:07:27 localhost mDNSResponder[21]: Couldn't read user-specified local hostname; using default “Macintosh-0011247F2582.local” instead
Apr 22 06:07:32 localhost kextd[10]: writing kernel link data to /var/run/mach.sym
Apr 22 06:07:38 localhost mDNSResponder[21]: User updated Computer Name from Macintosh-0011247F2582 to Ian Phua’s Power Mac G5
Apr 22 06:07:38 localhost mDNSResponder[21]: User updated Local Hostname from Macintosh-0011247F2582 to ian-phuas-power-mac-g5
Apr 22 06:07:40 ian-phuas-power-mac-g5 configd[33]: setting hostname to "ian-phuas-power-mac-g5.local"
Apr 22 06:07:45 ian-phuas-power-mac-g5 org.ntp.ntpd[14]: Error : nodename nor servname provided, or not known
Apr 22 06:07:45 ian-phuas-power-mac-g5 ntpdate[81]: can't find host time.asia.apple.com
Apr 22 06:07:45 ian-phuas-power-mac-g5 ntpdate[81]: no servers can be used, exiting
Apr 22 06:07:50 ian-phuas-power-mac-g5 loginwindow[22]: Login Window Started Security Agent
Apr 22 06:07:51 ian-phuas-power-mac-g5 authorizationhost[90]: MechanismInvoke 0x11f220 retainCount 2
Apr 22 06:07:51 ian-phuas-power-mac-g5 SecurityAgent[91]: MechanismInvoke 0x101650 retainCount 1
Apr 22 06:07:51 ian-phuas-power-mac-g5 SecurityAgent[91]: MechanismDestroy 0x101650 retainCount 1
Apr 22 06:07:51 ian-phuas-power-mac-g5 loginwindow[22]: Login Window - Returned from Security Agent
Apr 22 06:07:51 ian-phuas-power-mac-g5 authorizationhost[90]: MechanismDestroy 0x11f220 retainCount 2
Apr 22 06:07:51 ian-phuas-power-mac-g5 loginwindow[22]: USER_PROCESS: 22 console
Apr 22 06:07:52 ian-phuas-power-mac-g5 com.apple.launchd[1] (com.apple.UserEventAgent-LoginWindow[86]): Exited: Terminated
Apr 22 06:07:59 ian-phuas-power-mac-g5 kernel[0]: jnl: disk2s3: replay_journal: from: 71680 to: 792576 (joffset 0xa9a000)
Apr 22 06:07:59 ian-phuas-power-mac-g5 kernel[0]: jnl: disk2s3: journal replay done.
Apr 22 06:07:59 ian-phuas-power-mac-g5 kernel[0]: jnl: disk2s5: replay_journal: from: 4422144 to: 5159424 (joffset 0x3f8000)
Apr 22 06:07:59 ian-phuas-power-mac-g5 fseventsd[26]: event logs in /Volumes/Lacie Backup/.fseventsd out of sync with volume. destroying old logs. (97634 1 104373)
Apr 22 06:08:01 ian-phuas-power-mac-g5 kernel[0]: jnl: disk2s5: journal replay done.
Apr 22 06:08:01 ian-phuas-power-mac-g5 /System/Library/CoreServices/coreservicesd[43]: SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(Ian Phua C S's Public Folder) returned -14135
Apr 22 06:08:01 ian-phuas-power-mac-g5 /System/Library/CoreServices/coreservicesd[43]: SFLSharePointsEntry::CreateDSRecord: dsCreateRecordAndOpen(Ian Phua's Public Folder) returned -14135
Apr 22 06:08:06 ian-phuas-power-mac-g5 loginwindow[22]: Unable to resolve startup item: status = -36, theURL == NULL = 1
Apr 22 06:08:06 ian-phuas-power-mac-g5 loginwindow[22]: Unable to resolve startup item: status = -43, theURL == NULL = 1
Apr 22 06:08:08: --- last message repeated 1 time ---
Apr 22 06:08:08 ian-phuas-power-mac-g5 fseventsd[26]: log dir: /Volumes/Lacie Backup/.fseventsd getting new uuid: 0C27B6C4-044E-45BA-BD19-E56DBBC68DC4
Apr 22 06:08:08 ian-phuas-power-mac-g5 fseventsd[26]: event logs in /Volumes/Lacie SP/.fseventsd out of sync with volume. destroying old logs. (97169 10 104382)
Apr 22 06:08:08 ian-phuas-power-mac-g5 fseventsd[26]: log dir: /Volumes/Lacie SP/.fseventsd getting new uuid: 5BA6D6AF-6DC0-4FE9-94D3-099FAE59249D
Apr 22 06:08:14 ian-phuas-power-mac-g5 SMARTReporter[130]: ATA Drive: 'Maxtor 6B160M0' - SMART condition not exceeded, drive OK!
Apr 22 06:08:15 ian-phuas-power-mac-g5 SMARTReporter[130]: ATA Drive: 'Hitachi HDT725032VLA360' - SMART condition not exceeded, drive OK!
Apr 22 06:08:21 ian-phuas-power-mac-g5 /System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer[1 08]: CPSGetProcessInfo(): This call is deprecated and should not be called anymore.
Apr 22 06:08:21 ian-phuas-power-mac-g5 /System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer[1 08]: CPSPBGetProcessInfo(): This call is deprecated and should not be called anymore.
Apr 22 06:08:29 ian-phuas-power-mac-g5 SubmitReport[140]: CFReadStreamGetError() returned: 12
Apr 22 06:08:29 ian-phuas-power-mac-g5 SubmitReport[140]: Failed to submit uncompressed panic report for xnu
Apr 22 06:08:31 ian-phuas-power-mac-g5 Disk Utility[146]: ********
Apr 22 06:08:31 ian-phuas-power-mac-g5 Disk Utility[146]: Disk Utility started.
Apr 22 06:08:32 ian-phuas-power-mac-g5 mdworker[69]: (Error) SyncInfo: Boot-cache avoidance timed out!
Apr 22 06:08:37: --- last message repeated 1 time ---
Apr 22 06:08:37 ian-phuas-power-mac-g5 /System/Library/CoreServices/Problem Reporter.app/Contents/MacOS/Problem Reporter[138]: CPSGetProcessInfo(): This call is deprecated and should not be called anymore.
Apr 22 06:08:37 ian-phuas-power-mac-g5 /System/Library/CoreServices/Problem Reporter.app/Contents/MacOS/Problem Reporter[138]: CPSPBGetProcessInfo(): This call is deprecated and should not be called anymore.
Apr 22 06:08:47 ian-phuas-power-mac-g5 Disk Utility[146]: Repairing permissions for “Macintosh Leopard HD”
Apr 22 06:08:52 ian-phuas-power-mac-g5 kextcache[46]: CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.
Apr 22 06:09:10 ian-phuas-power-mac-g5 kernel[0]: UniNEnet::monitorLinkStatus - Link is up at 1000 Mbps - Full Duplex (PHY regs 5,6:0xcde1,0x000d)
Apr 22 06:09:15 ian-phuas-power-mac-g5 mdworker[69]: (Error) SyncInfo: Catalog changed during searchfs too many time. Falling back to fsw search /
Apr 22 06:09:21 ian-phuas-power-mac-g5 SubmitReport[169]: Submitted uncompressed panic report for xnu
Apr 22 06:10:00 ian-phuas-power-mac-g5 kextcache[46]: CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.
Apr 22 06:11:18 ian-phuas-power-mac-g5 simpleScanner[251]: launching daemon...
Apr 22 06:11:18 ian-phuas-power-mac-g5 simpleScanner[251]: daemon runs all right...
Apr 22 06:11:25 ian-phuas-power-mac-g5 SuperDuper![253]: .scriptSuite warning for attribute 'boundsAsQDRect' of class 'NSWindow' in suite 'NSCoreSuite': 'NSData<QDRect>' is not a valid type name.
Apr 22 06:11:25 ian-phuas-power-mac-g5 SuperDuper![253]: .scriptSuite warning for type 'NSTextStorage' attribute 'name' of class 'NSApplication' in suite 'NSCoreSuite': AppleScript name references may not work for this property because its type is not NSString-derived.
Apr 22 06:11:25 ian-phuas-power-mac-g5 SuperDuper![253]: .scriptSuite warning for type 'NSTextStorage' attribute 'lastComponentOfFileName' of class 'NSDocument' in suite 'NSCoreSuite': AppleScript name references may not work for this property because its type is not NSString-derived.
Apr 22 06:11:25 ian-phuas-power-mac-g5 SuperDuper![253]: .scriptSuite warning for attribute 'boundsAsQDRect' of class 'NSWindow' in suite 'NSCoreSuite': 'NSData<QDRect>' is not a valid type name.
Apr 22 06:11:25 ian-phuas-power-mac-g5 SuperDuper![253]: .scriptSuite warning for type 'NSTextStorage' attribute 'title' of class 'NSWindow' in suite 'NSCoreSuite': AppleScript name references may not work for this property because its type is not NSString-derived.
Apr 22 06:11:25 ian-phuas-power-mac-g5 SuperDuper![253]: .scriptSuite warning for superclass of class 'NSAttachmentTextStorage' in suite 'NSTextSuite': 'NSString' is not a valid class name.
Apr 22 06:11:25 ian-phuas-power-mac-g5 [0x0-0x1e01e].com.blacey.SuperDuper![253]: crontab: no crontab for ianphuac
Apr 22 06:11:27 ian-phuas-power-mac-g5 GrowlHelperApp[255]: Unknown plugin filename extension '(null)' (from filename '(null)' of plugin named 'Bubbles')
Apr 22 06:11:39 ian-phuas-power-mac-g5 Mail[248]: NSInvalidArgumentException: Unable to obtain sql exclusive lock to commit transaction: 10 (disk I/O error)
Apr 22 06:11:39 ian-phuas-power-mac-g5 Mail[248]: SyncServices[ISyncSessionDriver]: Caught top level exception: Unable to obtain sql exclusive lock to commit transaction: 10 (disk I/O error) Stack trace: (0x91f3bef4 0x950e676c 0x91f3be04 0x91f3be3c 0x93163d60 0x930ff2c4 0x93101c7c 0x93101b4c 0x93113fc0 0x931134b4 0x93105e64 0x930f3da0 0x9317adfc 0x968704f8 0x95fdab9c)

Best practice - linking to exeternal PDFs in FM and in turn, in RH

I am using TCS2 with FM and RH. My goal is this:
- to create an FM doc (with multiple chapters) and links to external PDFs. When I generate the FM file as a PDF, it will correctly allow users to click on the links and view those external PDF docs.
- import the FM doc (with multiple chapters) into RH, and create HTML webhelp. Ideally, have the imbedded links in the FM docs (to external PDFs) generate automatically in the RH doc, so that the produced HTML online help doc can have links clicked on that also open the external PDFs.
Questions:
-best way to do this in FM? I assume I will need to create my PDFs in a portfolio (package?) so external clients keep the documentation in the same place (otherwise the hyperlinks will break, I assume)
-best way to have it work in RH?
-things to watch out for?
TIA!
-Adriana

Hi there
In Frame, do you have options to "include" files that aren't actually part of the Frame Project? (Note that I'm not a Frame user, so I'm making an assumption that it works similarly to RoboHelp and creates "projects" that are composed of smaller elements).
Cheers... Rick
Helpful and Handy Links
RoboHelp Wish Form/Bug Reporting Form
Begin learning RoboHelp HTML 7 or 8 within the day - $24.95!
Adobe Certified RoboHelp HTML Training
SorcerStone Blog
RoboHelp eBooks

Nexus 5020/2248: Best Practice for DSCP-trust, verses DSCP-don't trust

We have several Nexus 5020/2248's for our server access to the network (approximately 1000 ports). On about 20 of these ports we want to trust the DSCP markings, since they are from out Cisco Unified Comm appliances (these are access ports). However, on all other ports (mostly access, so DSCP, but ~ 100 trunks so some are COS also) we want to "not trust" or essentially zero out any non-zero DSCP value.
Does anyone have suggestions on easiest/best method for setting the trust boundaries for Nexus 5020/2248s?
Note: vers 5.0(3) NS(1)
Thanks!
Mike.

Hi
Before any other think I would like you to upgrade your WLC image to 7.6.130.0 & FUS to 1.9.0.0. FUS upgrade will require 30-40min downtime to your wireless.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_OL-31390-01.html
http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn76mr03.html
It tells me to disable 802.11a and 802.11b. If I go into each radio on 'Network' tab and disable these - NOTHING can connect to any SSID. So unless I've misunderstood something - this is a contradiction in the best-practice link I posted above,
This simply says, you have to disable radio band before changing QoS profile values. Once you change those value you can re-enable the radio band. :)
If I enable FT-PSK and PSK - for devices that support FT-PSK (which i'm under the impression is 802.11r) will these devices use that and for devices that don't they'll use 'regular' PSK? How do I know if my client is connecting using PSK or FT-PSK as both are enabled on the same WLAN.
Read these 802.11r post & you will understand how 802.11r works. There are certain client devices does not like PSK & FT-PSK capability advertise on the same SSID & may have connectivity issues. But most of the clients like iPhone, iPads,etc will connect without any problems.
http://mrncciew.com/2014/09/06/cwsp-802-11r-ft-association/
http://mrncciew.com/2014/09/07/cwsp-802-11r-over-the-air-ft/
http://mrncciew.com/2014/09/08/cwsp-802-11r-over-the-ds-ft/
"show client detail <mac_address>" should indicate if client connected over FT-PSK or PSK.
HTH
Rasika
**** Pls rate all useful responses ****

BizTalk monitoring best practice(s)

I am looking for information on best practices to monitor BizTalk environment (ideally using Tivoli monitoring tools). Specifically I am looking for insight into what should be monitored, how one analyzes performance profile. Thanks

While setting up monitoring agents/products for BizTalk server (or for any server/application for this matter), there are two ways to start:
If available, import/install application specific monitoring packages i.e. Import/install prebuild monitoring rules, alerts and actions specific to the application.
Or create the rules/alerts and actions from scratch for the application.
For monitoring products like SCOM, management packs for BizTalk server are available as pre-build, as readymade packages. For a non-Microsoft product like Tivoli check with
the vendor/ IBM for any such pre-build monitoring packages for BizTalk. If available purchase it and install it in Tivoli. This would be the best option to start, instead of spending time and resource in building the rules, alerts and actions from scratch.
If pre-build monitoring package is not available, then start by creating rules to monitor any errors or warnings from event logs of the BizTalk and SQL servers. Gradually,
you can update/add more rules based on your needs.
And regarding analysing performance profile, most of the monitoring product now-a-days comes with prebuild alerts for monitoring the server performances, CPU utilization
etc. I’m sure renowned product like Trivoli shall have prebuild alerts for monitoring the server performances. Same can be configured to monitor the BizTalk’s performances. And also monitoring event log entries would also pickup any performance related issues.
Moreover, Tivoli has got detail user guide document for setting alerts for BizTalk server. Check this
document here.
Reading best practices, links provided by MaheshKumar shall help you.
Key point to remember is no-monitoring product is perfect; you can’t create a fool-proof monitoring alerts and actions on day one. It would get mature over the time in your
environment.
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful.

"Installation best practices." Really?

"Install Final Cut Pro X, Motion 5, or Compressor 4 on a new partition - The partition must be large enough to contain all the files required by the version of Mac OS X you are installing, the applications you install, and enough room for projects and media…"
As a FCS3 user, if you were to purchase an OS Lion Mac, what would your "Installation best practices" be? It seems the above recommendation is not taking into consideration FCS3s abrupt death, or my desire to continue to use it for a very long time.
Wouldn't the best practice be to install FCS3 on a separate partition with an OS that you never, ever update? Also, there doesn't appear to be any value added to FCS with Lion. That's why I would be inclined to partition FCS3 with Snow Leopard -- but I'm really just guessing after being thrown off a cliff without a parachute.
Partitioning… does this mean I'll need to restart my computer to use FCS? What about my other "applications"? Will I be able to run Adobe Creative Suite off the other partition, or is the "best practice" to install a duplicate of every single application I own on the FCS partition?
Note: This is not to say I'll never embrace FCX. But paying (with time & money) to be a beta tester just isn't gonna happen. If it's as easy to use as claimed, I'm not falling behind, as has been suggested by some. I'm just taking a pass on the early adopter frustration.

Okay, but are you not concerned with future OS updates that may render FCS3 useless? Perhaps our needs are different, but I want and need FCS3 to continue to work in the future.
That "best practices" link up at the top of this page is there for a reason, and it says "partition." What it doesn't say is why, and that's really disappointing and concerning. It's a little late in the game, but I would prefer Apple walk like a man and lay it on the line; the good, the bad, and the ugly.
I'm glad to hear Lion is working okay for you!

Best practice for window management

Hi all,
I'm pretty new at flex and I have to develop an application.
I don't know yet what the best practices are to have a consistent layout and code
- The program must have different views (scheduling, settings, adminwindow, ....)
What is the best way to switch between these views? Should I use a tabbar or a buttonbar?
- What should a view be made off? Should I use different states, or should I switch between windows, or use something else?
That's it for now, thanks all.
Greets me
btw, I try to use spark as much as possible..

Hi,
You can check these links and white papers which explains the business scenarios and best practices
http://www50.sap.com/businessmaps/9AD1FC0540D0479CA76C4CA1EE9AF668.htm
http://www.sap.com/solutions/business-suite/erp/brochures/index.epx - "Audit management with SAP software".
Regards,
Keerthi

Command Authorization Config best practice using ACS

Hi
Is there any best practices for configuring Command authorization (for router/switch/asa) in CS-ACS? To be specific, is there any best practices to configure authorization for a set of commands allowed for L1,L2,L3 support levels?
Regards
V Vinodh.

Vinodh,
The main thing here is to ensure that we have backup/fall-back method configured for command authorization, inorder to avoid lockout situation or do wr mem once you are sure configs are working fine.
Please check this link,
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml
Regards,
~JG
Do rate helpful posts

Best Practice - IPv6 Turn Off? Windows 2008 (and R2) Servers

Hi,
I work for a large organization. We have close to 10,000 servers globally. A question has come up if we should disable IPv6 on our Windows 2008 servers. Our network is not yet capable of using IPv6.
It seems like you have to go out of your way to disable IPv6; therefore, I would assume that it is best to leave IPv6 turned on.
Does anyone have any thoughts about this. It would be most helpful to have links to pros/cons - best practice.
Thank you.

No, do not disable IPv6. There is no reason to do so unless you have a very specific application issue which is highly unlikely (although there are a few documented ones out there).
http://blogs.technet.com/b/ipv6/archive/2007/11/08/disabling-ipv6-doesn-t-help.aspx
http://blogs.technet.com/b/jlosey/archive/2011/02/02/why-you-should-leave-ipv6-alone.aspx
Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Whoever marked this as an "answer" obviously doesn't remember that bad-old-days of "Everything's on by default! It just works!!" and the billions of dollars in lost productivity that ensued from the hundreds (thousands?) of exploits that followed this
painfully short-sighted decision. You'd think Microsoft would have learned their lesson from the "IIS is on by default!" debacle, but that doesn't seem to be the case.
Best practices for system administration say "turn off the services and protocols you don't use." As such,
IPv6 should ALWAYS be disabled on servers and business workstations if you're not currently using it, just like any other protocol or service you haven't implemented or aren't using. Not using FTP? Don't install or enable
an FTP server. Not using IPv6? Why would you have IPv6 enabled? Just because IPv6 is the newest, shiniest thing on the block doesn't mean you have to use, and it definitely shouldn't require you to start hacking about in the registry to turn it off.
The only exception to this rule would be laptops or mobile devices where the user might (conceivably) take them into an IPv6 environment. Even then, though, you have to balance the "convenience" of not having to switch-on IPv6 against the risk that
your unconfigured IPv6 stack might be exploitable by nefarious patries. Even so, the fact that almost nobody has switched their internal networks to IPv6 means that turning it off on laptops is still probably a "good idea."
For example, my laptop wireless interface might make sense to leave IPv6 enabled--I don't have any idea when I'll walk into an environment that uses IPv6 and want to use my wireless. But in the office when I'm hard-connected? We don't use IPv6 so it needs
to be "off." Even if it's just a bit of code in the Windows firewall that can be used to say "just reject IPv6 traffic on x interface" is still a big improvement. An absolute home-run would be the addition of logic that allows Windows to dynamically disable
IPv6 when there aren't any NICs or WNICs that are allowed to use it.
Finally, none of this should be construed to mean I'm advising against implementing IPv6, because I'm not. However, like any major technology project you should plan carefully, making sure you understand ALL of the consequences (not just the marketing hype,)
and making sure you'll be able to administer the changed environment as well as your administer the current one. You definitely should not let a vendor (of all things) force the decision to use it upon you because it's "on by default."

(Request for:) Best practices for setting up a new Windows Server 2012 r2 Hyper-V Virtualized AD DC

Could you please share your best practices for setting up a new Windows Server 2012 r2 Hyper-V Virtualized AD DC, that will be running on a new WinSrv 2012 r2 host server. (This
will be for a brand new network setup, new forest, domain, etc.)
Specifically, your best practices regarding:
the sizing of non virtual and virtual volumes/partitions/drives,
the use of sysvol, logs, & data volumes/drives on hosts & guests,
RAID levels for the host and the guest(s),
IDE vs SCSI and drivers both non virtual and virtual and the booting there of,
disk caching settings on both host and guests.
Thanks so much for any information you can share.

A bit of non essential additional info:
We are small to midrange school district who, after close to 20 years on Novell networks, have decided to design and create a new Microsoft network and migrate all of our data and services
over to the new infrastructure . We are planning on rolling out 2012 r2 servers with as much Hyper-v virtualization as possible.
During the last few weeks we have been able to find most of the information we need to undergo this project, and most of the information was pretty solid with little ambiguity, except for
information regarding virtualizing the DCs, which as been a bit inconsistent.
Yes, we have read all the documents that most of these posts tend point to, but found some, if not most are still are referring to performing this under Srvr 2008 r2, and haven’t really
seen all that much on Srvr2012 r2.
We have read these and others:
Introduction to Active Directory Domain Services (AD DS) Virtualization (Level 100),
Virtualized Domain Controller Technical Reference (Level 300),
Virtualized Domain Controller Cloning Test Guidance for Application Vendors,
Support for using Hyper-V Replica for virtualized domain controllers.
Again, thanks for any information, best practices, cookie cutter or otherwise that you can share.
Chas.

Best Practices for Setting up a Windows 2012 R2 STD Domain Controller in a Remote Site

So I'm looking for an article or writeup similar to the "Adding Domain Controllers in Remote Sites" TechNet article but for Windows Server 2012 STD R2. Here is my scenario:
1. I want to setup the domain controller at Site A where the primary domain controller is located. The primary domain controller is Windows Server 2008 R2.
2. Once the DC is setup I plan on leaving it on our network for a few days before shipping it to remote Site B for installation
Other key items:
1. The remote Site B will have a different IP range than Site A but will be connected to Site A via a single VPN tunnel. All the DCs that replicate with each other are on the same domain.
2. The 2012 DC that I setup for Site B (same domain in same forest) will be a DHCP, DNS, and WSUS server all replicating to the primary DC at Site A
Questions:
1. What items can I setup while it's at Site A without effecting or conflicting with the existing network and domain controller? Can I setup a scope once the DHCP role is added?
2. All of our DCs replicate through Sites and Services, do I have to manually add this to our primary DC for the new DC going to remote Site B? Or when does this happen automatically when I promote the DC?
All and all I'm just looking for a list of Best Practices for 2012 or a Step by Step Guide. Any help would be appreciated.

Hi,
Thanks for your posting.
When you install AD DS in the hub or staging site, disconnect the installed domain controller, and then ship the computer to the remote site, you are disconnecting a viable domain controller from the replication topology.
For more and detail information, please refer to:
Best Practices for Adding Domain Controllers in Remote Sites
http://technet.microsoft.com/en-us/library/cc794962(v=ws.10).aspx
Regards.
Vivian Wang

Best practice for managing a Windows 7 deployment with both 32-bit and 64-bit?

What is the best practice for creating and organizing deployment shares in MDT for a Windows 7 deployment that has mostly 32-bit computers, but a few 64-bit computers as well? Is it better to create a single deployment share for Windows 7 and include both
versions, or is it better to create two separate deployment shares? And what about 32-bit and 64-bit versions of applications?
I'm currently leaning towards creating two separate deployment shares, just so that I don't have to keep typing (x86) and (x64) for every application I import, as well as making it easier when choosing applications in the Lite Touch installation. But I know
each deployment share has the option to create both an x86 and x64 boot image, so that's why I am confused.

Supporting two task sequences is way easier than supporting two shares. Two shares means two boot media, or maintaining a method of directing the user to one or the other. Everything needs to be imported or configured twice. Not to mention doubling storage
space. MDT is designed to have multiple task sequences, why wouldn't you use them?
Supporting multiple task sequences can be a pain, but not bad once you get a system. Supporting app installs intelligently is a large part of that. We have one folder per app install, with a wrapper vbscript that handles OS detection. If there are separate
binaries, they are placed in x86 and x64 subfolders. Everything runs from one folder via the same command, "cscript install.vbs". So, import once, assign once, and forget it. Its the same install package we use for Altiris, and we'll be using a Powershell
version of it when we fully migrate to SCCM.
Others handle x86 and x64 apps separately, and use the MDT app details to select what platform the app is meant for. I've done that, but we have a template for the vbscript wrapper and its a standard process, I believe its easier. YMMV.
Once you get your apps into MDT, create bundles. Core build bundle, core deploy bundle, Laptop deploy bundle, etcetera. Now you don't have to assign twenty apps to both task sequences, just one bundle. When you replace one app in the bundle, all TS'es are
updated automatically. Its kind of the same mentality as active directory. Users, groups and resources = apps, bundles and task sequences.
If you have separate build and deploy shares in your lab, great. If not, separate your apps into build and deploy folders in your lab MDT share. Use a selection profile to upload only your deploy side to production. In fact I separate everything (except
drivers) into Build and deploy folders on my lab server. Don't mix build and deploy, and don't mix Lab/QA and production. I also keep a "Retired" folder. When I replace an app, TS, OS, etcetera, I move it to the retired folder and append "RETIRED - " to the
front of it so I can instantly spot it if it happens to show up somewhere it shouldn't.
To me, the biggest "weakness" of MDT is its flexibility. There's literally a dozen different ways to do everything, and there's no fences to keep you on the path. If you don't create some sort of organization for yourself, its very easy to get lost as things
get complicated. Tossing everything into one giant bucket will have you pulling your hair out.

Best practice for reinstalling anti virus on reinstalling windows

Best practice for reinstalling anti virus after formatting drive and reinstalling windows No anti virus disc.
Hasty

Hello,
I'd ask in the Windows forum on Microsoft Community.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog:http://unlockpowershell.wordpress.com
My Book:Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C40686F746D61696C2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

VPN3020 - ACS - Windows AD - best practices links

Similar Messages

Maybe you are looking for