Yet Another IT Guy

Virtual PC disk size

2009-02-15T01:55:00.000-08:00

I wanted to try out a software, so I started my old Windows XP SP2 Virtual PC image, but it required .NET Framework 2.x, so I had to update the old image.

I figured it is about time to also update it to SP3 and all other fixes.
I used WindowsUpdate. After several restarts and updates, I checked the image size:
Original WinXP-SP2 virtual disk size: 2.9GB
Updated WinXP-SP3 virtual disk size: 6.3GB
(Won't even fit on a DVD!)

So, I wanted to compress it:
HOWTO: Compress Virtual PC virtual hard disks (.VHDs)

So, I run Microsoft Virtual Disk Pre-Compactor, which prepares drive C for compaction and also run the VPC2007 Virtual Disk Wizard.
Result: 5.9GB image size.

I checked and found System Restore is turned on. I switched it off and it deleted 1.4GB of files.
So, I run Pre-Compactor and Disk Wizard again.
Result: 5.6GB image size.

If I check drive C: properties in the virtual machine, it display 4.68GB of used space.

I tried to defragment the drive, with Windows built in defragmanter, where I can see a huge, unused space in the middle of the drive, but it won't use that space.
I also tried the free Defraggler and a trial version of Diskeeper, without any success.

So, I have a huge VPC image file, with a lot of free space, but cannot find a utility, which will compress it.
(I'll let you know, when I find one.)

Top 500 passwords

2009-02-10T02:31:00.000-08:00

I just found this:

The Top 500 Worst Passwords of All Time

Although it is 2 months olda article, but it is worth checking your passwords! If they are on the list, chnage them!

IE8 RC1

2009-02-09T03:58:00.000-08:00

In my resent post Web Developer's Responsibility I posted a bug in IE8 beta.
I downloaded and tried my test site in the recently publoshed IE8 RC1.
The bug still exist.

Do you know, where I should report the bug?

sec_error_unknown_issuer

2009-01-07T01:46:00.000-08:00

A users reported, he had problems with my https sites.

He got the following error:

Secure Connection Failed

The certificate is not trusted because the issuer certificate is unknown.

(Error code: sec_error_unknown_issuer)

I checked in IE7 and FF3, but it worked for me fine.
I also got a screenshot and I assumed the user has FF2.
So I fired on old XP, SP2 virtual machine, installed FF2 and could reproduce the error.

Then I installed FF3 on the VM, and it also had problems.
So I figured, if I updated the machine it will install the root certificate update and the problem would be solved, but I just did not find this a good solution, so I investigated further.

I found out that I missed the issuers intermediate certificate installation on my server. So I did it, and the error disappeared on the unpatched machine as well.

I just had to insert the following in one of the virtual servers configuration:

SSLCertificateChainFile /path/to/intermediate/bundle/file

Web Developer's Responsibility

2009-01-06T03:38:00.000-08:00

I found this great post:
A Web Developer's Responsibility.
Just a quick remark. Reporting a bug in IE8, should be done with an Add-on, which can be downloaded from: Microsoft Connect

Although I am not a web developer, I rememerred a bug, I found in IE7, and just wanted to report, but did not have the time for it.
I decided to do it now.

Downloaded an IE8 virtual machine from:
Internet Explorer Application Compatibility VPC Image.

Tested my old rendering bug, created a demo site for it.
Uploaded to a free hosting site: 000webhost, I just googled up.
(Warning! 000webhost might be dangerous, check out this post! Although I did not experience the same, but you better choose another hosting.)

And submitted the bug with the add-on. (Nice work MS! It is just quick and easy to submit a bug. It seems, you really want user feedback.)

Connecting to your Exchange mailbox from iPhone and other devices (required server side settings)

2008-12-23T07:24:00.000-08:00

I had some hard time, setting up my Exchange 2003 to handle an iPhone and other mobile device.

You shoud setup Exchange ActiveSync and you'll be able to connect from iPhone, Nokia Exchange client and other devices.

ActiveSync can be confusing! There are at least two types of ActiveSync's:
- ActiveSync desktop application, currently at version 4.5, which is used for syncronizing a desktop PC' Outlook with a Windows Mobile powered device.
- Exchange ActiveSync, which is part of Microsoft Exchange, and allows a mobile device to syncronize with Exchange directly, without the need of a desktop computer.

I found this articles useful:

Exchange ActiveSync: Frequently Asked Questions

Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003

Error messages when you try to synchronize a Windows Mobile 5.0-based mobile device to Exchange Server 2003 on a Windows SBS 2003-based computer

How to reset the default virtual directories that are required to provide Outlook Web Access, Exchange ActiveSync, and Outlook Mobile Access services in Exchange Server 2003

Step-by-step checklist:
(This is how it works for me. Probably not each step is required, but I do not have time to fine tune this entry.)

1. You'll need a valid SSL certificate for the server! (This should be purchased.) You can get a 90-day working cetificate from InstantSSL.
I found some articles, about self signed certificate installation on mobile devices. It might work, but not worth the time.

2. Check the necessary user rights in Active Directory Users and Computers.

3. Exchange System Manager > Mobile Devices > General - have everything Enabled

4. Exchange System Manager > Server > Protocols > HTTP > Exchange Virtual Server properties - disable Form Based Authentication

5. IIS manager: default website properties: TCP port should be 80 and 443 for SSL.

6. IIS manager > Websites > Default > Exchange properties > Directory security > anonymous acces should be disabled, deafult domain should be set.

7. IIS manager > Websites > Default > Exchange-OMA properties > Directory security > anonymous acces should be disabled, deafult domain should be "\".

8. IIS manager > Websites > Default > Exchange-OMA properties > IP address all should be grant.

9. IIS manager > Websites > Default > Microsoft-Server-ActiveSync properties > Directory security > anonymous acces should be disabled, deafult domain should be set.

Now you should be able to connect from your mobile device, according to the device manual.
Tested with several servers (mainly SBS) and Nokia E71, iPhone and some Windows Mobile based devices.

Good luck!

More HTTPS virtual hosts on a single server

2008-12-05T06:28:00.000-08:00

Following previous posts, I had to add some more certificates to the server.

First clarify that you'll need new IP address for every new site, with SSL enabled.
So here is a quick checklist:
- add the extra IP addresses to your Windows
- make sure Apache listens on these addresses
- change the dns record of the domains (point www and A record to the new IPs)
- generate .KEY and .CSR files (described earlier)
- when received .CRT file, copy all to the directory on your server, where the earlier .CRT and .KEY files are located
- modify httpd.conf to include a new shttpd-vhosts.conf file and add the following for each domain:


<VirtualHost IP address:443>
ServerName www.domain name
ServerAlias domain name
SSLEngine On
SSLCertificateFile conf/ssl/domain name.crt
SSLCertificateKeyFile conf/ssl/domain name.key
DocumentRoot "your path"
</VirtualHost>

Add it should be working fine!

Apache2 and SSL on Windows, with valid certificate

2008-12-05T01:18:00.000-08:00

I previously posted about it. Now, I had another go.
First some additional information, modification to the original post.
You can download the compiled version of Apache, which includes openssl from their site directly. (The link on the original post, does not even work any more.)
So always use the installer from Apache's download site!

After installing Apache 2.2.10, I ordered a certificate from GoDaddy.
They have the instructions on how to generate the CSR file, but I copy it here for you:


@echo off
cd "\Program Files\Apache Software Foundation\Apache2.2\bin"
openssl genrsa -des3 -out sitename.key 1024
openssl req -config ..\conf\openssl.cnf -new -key sitename.key -out sitename.csr

Just copy the CSR file's content to GoDaddy. You'll receive the .crt file from them in a couple of hours.

After copying the .key and .crt file over the original self-signed certificate files, I got the following error:


[error] Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file ...)

You just have to remove the passphrase from the .key file:


ren sitename.key sitename.key.org
openssl rsa -in sitename.key.org -out sitename.key

Just copy this .key file next to the .crt file and Apache sites without an error.

Resizing partition in Windows Vista

2008-04-07T02:41:00.000-07:00

I was faced with the usual problem. Reiszing an NTFS partition with Windows Vista on it.
Trying out the "good old" solutions: get a 3rd party software, resize is, and you'll be faced with an error:


File: \Windows\system32\winload.exe
Status: 0xc0000225
Info: The selected entry could not be loaded because the application is missing or corrupt.

and you'll need a repair installation. :(
Described here:
Using GParted to Resize Your Windows Vista Partition
and on many more sites.

Not so fast! There is partition resizing in the OS itself! :)
Can I repartition my hard disk?
"Yes. It's possible in this version of Windows to repartition your hard disk by using the Shrink feature in Disk Management."

Thumbs up for Windows Vista! :)

More recovery console annoyance

2008-03-31T01:31:00.000-07:00

Let's suppose your Windows XP won't start. (Because you wanted to try out Ubuntu and installed on it. Then deleted the Linux installation, but it installed GRUB, which remained.)

There must be several problems, which prevents Windows XP from starting, but the most obvious ones:
- damaged MBR (Master Boot Record)
- no active partition
- damaged boot record

Do not worry! You just need a Windows XP installation CD and boot recovery console.

GRUB is installed in the MBR, so just use FIXMBR, to repair it.

Still no luck? Use FIXBOOT to fix the boot record?
What? It gives an error, because it cannot find the boot partition?
But recovery console found the Windows installation.

So, try this: FIXBOOT C:
And it successfully writes a boot sector.

But it will not mark the partition active.

Come On! How should I do it? Do I need some 3rd party utility?

Yes. :(

Day of the Week from a command line

2008-02-15T02:01:00.000-08:00

So, I needed to get DOW from a Windows command line.
There must be several other options, but I use the following:


wget some_url/dow.php
echo Today is:
type dow.php

And you need dow.php copied somewhere on a php enabled web host:


< ? p h p
echo date ("l");
? >

(You can find WGET for Windows at my previous post)

Do you have some other way? I am open to suggestions! :)

Monitor your web server

2008-02-12T11:04:00.000-08:00

We have our own web server (LAMP) and I wanted to have some monitoring. I have a Windows workstation, which does some scheduled task, so I just made my own monitoring script.

It has a server side part, which gives the result "OK", when Mysql, PHP and Apache working correctly:


< ? p h p (spaces are not required)
$con = mysql_connect( "localhost", "mysql_user", "password" );
if ( ! $con )
die( "Error in Mysql connect (login)." );
mysql_select_db( 'mysql_database', $con )
or die ( "Error in Mysql connect (database)." );
$st="SELECT * FROM monitoring WHERE 1";
$value=mysql_query($st, $con);
if (mysql_num_rows($value)>0)
 {
 while ($one_row=mysql_fetch_row($value))
  {
  foreach ($one_row as $one_field)
  echo $one_field."!";
  }
 }
else
 echo "No result.";
? >

(mysql_user, password and mysql_database has to be replaced with the apropriate!
you need a "monitoring" table in the database with a "test" field and the value "OK" in it)

And the command line script on the windows machine:


wget URL_of_php_script.php
find "OK!" name_of_php_file.php
if not errorlevel 1 goto end
blat name_of_php_file.php -to your_email -server smtp_server -f from_email -subject "ALERT! Check your server!"
:end
del name_of_php_file.php

BLAT can be downloaded from: BLAT
WGET (for Windows) can be downloaded from: WGET

It just sends an e-mail, if there is any problem with your web server (or the hosting server of your page).

It can be also fine tuned to check if there is a problem with your internet connection, but you can start your monitoring with it. Just schedule the CMD script in a Windows computer!

SBS 2003 migrating

2008-02-10T15:05:00.000-08:00

You can migrate an OS in two ways:
1. install a new one and copy data, user information, software, etc. to the new one
2. copy the image of the installed OS to the new hardware, add necesary drivers

1. method:
Windows SBS 2003 has a built in backup, which backs up the "System state" to a file.
Sounds pretty cool. Just install a new Windows and restore System state!
Not so fast! System state includes all hardware information (and you do not have the option to exclude it!), so restoring it will destroy the new installation.

The official attitude:
How to move a Windows installation to different hardware

Microsoft does not support restoring a system state backup from one computer to a second computer of a different make, model, or hardware configuration.

So if you want to be prepared for a hardware failure, you better by two identical computers! There are small chances that you will be able to get an identical
computer after even a year!

2. method:
Migrating an OS, ideal solution:
- copy image of OS (resize partition if necesarry)
- boot with apropriate CD and install mass storage driver
- start OS on new hardware and install network driver
and other required drivers for optimal performance
- celebrate

Migration a Windows, theoratically:
- install new mass storage driver on old hardware
(since you cannot add mass storage driver on non-working windows afterwards)
- copy image, resize partition
- make sure you have a proper MBR and an active partition
- start Windows on new hardware and install network driver and other required drivers for optimal performance
- celebrate

Migration SBS, real life:
- install new mass storage driver on old hardware
(although it is no use, but you might be lucky)
- copy image, resize partition, and prepare yourself for a nightmare
- make sure you have a proper MBR and an active partition
- start Windows, you'll probably get a STOP error
- boot installation CD, run a repair installation and don't forget to press F6 at the proper time (you have about 3 seconds, than you have to reboot)
- repair installation: 40-60 minutes
- first time start of Windows: 2-3 hours
- reactivate windows
- now you only have to install SP1 and other patches
- probably reinstall Fax server, if you use
- also you might have to reinstall WSUS.

If you know an easier way, let me know!

Adobe Reader

2007-10-30T00:42:00.000-07:00

Due to the latest security problem with Adobe Reader it asked for a permission to update. I agreed, so the installation went smoothly and without any problems.
But at the end IT DISPLAYED THE ADOBE READER !!X&@+!%# ICON ON MY DESKTOP AGAIN!

WHY? I never (I repeat, NEVER) start Adobe Reader directly, but with double clicking on a PDF file. Even if I wanted to start, I can easily find it in the start menu.

HOW DARE YOU MESS UP MY DESKTOP WITH A SECURITY UPDATE?

Please, please Adobe, stop putting you icon on the desktop!
I like my desktop clean!

Exchange 2003 database limit

2007-10-20T12:50:00.000-07:00

Although I increased the database limit of an Exchange 2003 server (as per: http://support.microsoft.com/kb/912375/), the database kept unmounting and I was getting 9689 errors in the event log:

Exchange store 'First Storage Group\Mailbox Store (SERVERNAME)': The logical size of this database (the logical size equals the physical size of the .edb file and the .stm file minus the logical free space in each) is 18 GB. This database size has exceeded the size limit of 18 GB.

If the logical size of this database is not reduced to less than the maximum size limit, this database will be dismounted the next time a database size check is performed.

I finally found the problem: the registry entry: Database Size Limit in Gb had an extra space in it!

Environment

2007-10-15T08:25:00.000-07:00

I registered for Blog Action Day but did not have time to create a proper post. (Sorry, lack of time.)
I wanted to write you about how important, that you turn off your computer for the night; print only, which is really important; and why is computer recycling important!

I found a site in this topic, so go on and keep reading there: IT and Environment Initiative

:)

Uninstalling Norton Antivirus

2007-10-11T15:51:00.000-07:00

A client's Windows server got hit by a virus. Although there were a non-functioning Symantec Antivirus and a CA eTrust Antivirus v7 installed.

I found a suspicious file, which I uploaded to www.virustotal.com and it was indeed a virus. (A fairly new one.)

I tried to install AVG and Kaspersky, but they would not install on a server, so I registered a 30 day trial of F-Secure.

Downloaded, began installation. It found the CA eTrust Antivirus and Symantec Antivirus, which it tried to remove, without success.

I manually uninstalled CA, without problem.

Tried to uninstall Norton. Prompts for a password, which no-one knew. (It was installed 5 years ago, by a long-ago-gone administrator.) According to several sites, the default password is "symantec", which it did not accept.

Tried some Norton Removal Tools from Symantec. It won't even run on a server...

Google found me this site:
http://www.raymond.cc/blog/archives/2006/12/05/password-to-uninstall-symantec-antivirus-client/

and the solution:

In registry find this:
HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Administrator Only\Security\
And change the value of "UseVPUninstallPassword" from 1 to 0.

You'll be able to run the uninstaller and it wont't prompt you for a password. :)
Sound cool, so I tried it out, but it exited with a DLL error. :(

I deleted the Symantec and Norton Antivirus folders (from Program Files) manually, but the F-Secure installer still found it and won't continue.

So I run REGMON (www.google.com/search?q=regmon) and found which regisrty key is checked by F-Secure. Deleted them, and finally F-Secure could be installed! :)

Thank you Symantec for your wonderful product! :(

Some thoughts on Google

2007-09-01T14:26:00.000-07:00

I posted an entry to another blog of mine and Google indexed it in less than 30 minutes. Which is great, but it made me think.

That blog got updated about once a week. Either it is a coincidence, that googlebot visited it just in the right time, or somehow it got notified, about the update.
I don't believe in conspiracy theories, so there has to be a logical explonation.

I checked, what "Update Service" is set there. Here is the list:

http://rpc.pingomatic.com/

http://rpc.technorati.com/rpc/ping

http://blogsearch.google.com/ping/RPC2

http://ping.feedburner.com

So I would say Google's Ping service notifies the googlebot indexing to visit the site.

UPDATE: This post appeared in google index in less than 2 hours.

Blog Action Day

2007-08-19T21:57:00.000-07:00

On October 15th, bloggers around the web will unite to put a single important issue on everyone’s mind - the environment. Every blogger will post about the environment in their own way and relating to their own topic. Our aim is to get everyone talking towards a better future.

Read more.

I'll participate. And you?

Virtual hosts on Apache2

2007-07-30T21:41:00.000-07:00

I needed to add some virtual host to Apache2 server.
So here is a quick step-by-step instruction:

Look for
# Virtual hosts
# Include conf/extra/httpd-vhosts.conf
in https.conf (I had it around line 464).

You'll need to delete the # from the include line.
As you can also see, you'll find the httpd-vhosts.conf file in the "extra" folder.
Which you have to edit.

Before restarting apache, test it with httpd -S !

Just a quick additional note:
Since I had the virtaul server root above the original DocumentRoot, I had to modify them (two places), in https.conf, because I got "client denied by server configuration" error in the log file for the new site.
(This screwed up my setting in SSL parts, so I had to add a DocumentRoot there, as well. Which makes me think about putting the SSL configs in another conf file and include it in https.conf...)

Also you have to modify your awstats config, if you have one...

Windows 2003 server R2

2007-07-23T12:29:00.000-07:00

Situation: You want to add a domain controller to an existing Windows 2003 Small Business Server.

Install Windows 2003 server R2 and run dcpromo.

You will be faced with the error that ADPREP need to be run. (Sorry, no exact error message. Next time I’ll try to grab one.)

No problem, you insert Windows 2003 server R2 installation CD in SBS and run adprep /forestprep from the I386 directory. It will tell you, that it does not need to upgrade the AD. Running dcpromo on the new server will present the same error.

Solution: Run adprep from CD2 of Windows 2003 server R2 installation. There is a newer version, which will update the AD and you can add the domain controller.

Annoyance: please remove ADPREP from CD1 or better, replace it with a version, that displayes, there is a newer one on the other CD. Thanks, in advance.

Apache2 and SSL on Windows

2007-06-11T09:22:00.000-07:00

Update:
First check out my new post, about downloading information.

I wanted to (needed to) add SSL support to my "WAMP" web server.
I used this HOWTO.

Since it maily covers Apache version 1.3.x, here are my additional remarks:

I did not want to bother compiling Apache myself, so I used the precompiled verision on http://hunter.campbus.com/. Since they have only version 2.2.3 (at the time of this blog entry), I uninstalled Apache verison 2.2.4 and installed version 2.2.3.

"4.: Configuring Apache and mod_ssl"
LoadModule ssl_module modules/mod_ssl.so is already in httpd.conf, you just have to unrem (delete #). It is the last LoadModule.

AddModule mod_ssl.c - I did not need this and there was no AddModule in the config file.

"Add the following to the end of httpd.conf:" part:

"SSLMutex sem" displays the following:
Syntax error on line 513 of C:/Program Files/Apache Software Foundation/Apache2.2/conf/httpd.conf:
Invalid SSLMutex argument sem (Valid SSLMutex mechanisms are: `none', `default')

I inserted:
"SSLMutex default"
and it worked.

"SSLLog logs/SSL.log"
Syntax error on line 517 of C:/Program Files/Apache Software Foundation/Apache2.2/conf/httpd.conf:
SSLLog directive is no longer supported - use ErrorLog.

So I deleted the line.

"SSLLogLevel info"
Syntax error on line 518 of C:/Program Files/Apache Software Foundation/Apache2.2/conf/httpd.conf:
SSLLogLevel directive is no longer supported - use LogLevel.

Deleted.

This is what I have at the end:

# see http://www.modssl.org/docs/2.8/ssl_reference.html for more info SSLMutex default SSLRandomSeed startup builtin SSLSessionCache none

SSLEngine On
SSLCertificateFile conf/ssl/my-server.cert SSLCertificateKeyFile conf/ssl/my-server.key

And it works with a self signed certificate.
(Later I'll purchase a valid certificate one and give you the instructions for the installation. Stay tuned! :])

NTFS vs. FAT32

2007-06-06T12:06:00.000-07:00

There are several good sites about NTFS and FAT.
I recommend this link.

But I miss a valuable and important information!

"The NTFS file system stores time values in UTC format, so they are not affected by changes in time zone or daylight saving time. The FAT file system stores time values based on the local time of the computer."
From: File Times

This will cause problems if you syncronize files between different file systems, when you move between time zones.

Recovery console annoyances

2007-05-23T12:24:00.000-07:00

My old time biggest problem with Windows 2000/XP/2003’s recovery console:You NEED the administrator password to use it! WHY?
According to Microsoft’s 10 Immutable Laws of Security:“Law #3: If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore”
But you have to have unrestricted physical access to use recovery console!
You can also download “Offline NT Password & Registry Editor“ since 1997 (long before Windows 2000 initial release). It’s no use making the technicians live more difficult with the need of administrator password in recovery console.
Instead, please modify the RC’s login to the following:“Do you want to change the password for the Administrator user?”
Other RC annoyance: There is no point restricting access, to the windows and system folders only, in recovery console. NTFSDOS is freely available since 1996 from Systeminternals (recently acquired by Microsoft). You can access any file on the NTFS partitions (which are not encrypted by the file system). What’s the point of not letting me access some files, if I have physical access anyway?

WAMP

2007-04-22T13:33:00.000-07:00

Installing Apache+MySQL+PHP on Windows.
I thought it is difficult. Well, it is not. It is plain and easy.

I started off, with an up-to-date Windows XP Professional.
Installed the following:

UltraVNC 1.02 - remote desktop is fine, but I like to have VNC for remote administration
zFTPServer 2.0 - for uploading web content later
Apache 2.2.4 - open TCP/80 on Windows Firewall
PHP 5.2.1 - it will configure Apache for you, but you have to add index.php as DirectoryIndex in httpd.conf
MySQL 5.0.37 - open TCP/3306 for LOCAL only!
Simple SMTP (IIS) - you'll need a local mail server, if you want to send mail from PHP (open TCP/25 for LOCAL only) ((you'll need the "Comunity Server" version))
ClamWin 0.90.1 - just to make sure :)
ActivePerl 5.8.8.820 - needed for AWStats (see next)
AWStats 6.6 -just to have nice web stats for your sites (you have to modify awstast.pl first line for windows use)

This is just about it. Nothing special. Really.

iMac - revisited

2006-12-26T13:26:00.000-08:00

After a day of problemless working, there was no network access on the new iMac. The usual remote troubleshooting over phone, did not help: restart of iMac, restart of router, checking if network card is enabled, checking cables.

So I had to visit the iMac again.

After 5 minutes, I discovered that the DHCP on the SMC router was not leasing any IP address for Windows. (iMac has a Marvell Yukon gigabit adapter.) Since rebooting did not help, I switched to fix IP, and internet access was working. Tried to enable DHCP again, but the problem persisted. (Usually this solves it.)

I wouldn't say it is a common problem, but I could not make DHCP work on an iMac with Windows and an SMC Barricade router.

Windows for iMac

2006-12-23T03:32:00.000-08:00

New blog, few posts. :( Sorry! Too much work.

A client wanted to have an iMac (since it looks cool), but also wanted Windows XP with it (since, that what, he know). So here is the story of selling and installing my first Macintosh.

There is an official solution for installing Windows XP on an iMac, called BootCamp (actually still in beta.)
So, here are the steps for installing.

Unpack, plug in and start iMac.
From the Apple menu, choose "Software Update" to update all software. (Most of them are not required for Windows XP, just the firmware (EFI) is important, but why not update all, if you are there. After reboot, EFI upadet (which are quite self explementary), you'll have a shinny new Mac OS X.
Download BootCamp, double click to install. And run it. This is tricky for a non-OS_X user. It can be found in tha Applications menu. (Sorry, I don't remember the exact location...)
First BootCamp will create an installation CD with all the Windows XP drivers. Then repartition your hard disk and ask for the Windows XP installation disk.
Restart the computer and start XP installation. You have to choose the C: partition as the destination for Windows.
After successful installation, just insert the CD, created by BootCamp, which will install all (almost) drivers.

Missing part (in version 1.1.2, which is the latest today):

Wireless keyboard is not working, after restart. Switching keyboard off and on helps. There is also a article about it (for an earlier BootCamp version), but it did not work for me: Using the Apple Bluetooth Wireless Keyboard
Wireless mouse is not working as well. (Off and on switching usually helps.) BTW, the passcode can be found at this article: What is the passcode for my wireless Mighty Mouse?

Everything else works just like in a PC.

E-mail filtering

2006-11-26T13:22:00.000-08:00

Our clients have continous problems with spam. Usually it is dealt at the ISP, but in some cases they operate their own mail server, which directly receives the e-mails. So they have to defend it!

I recenlty installed GFI's Mail Essentials on an Exchange 2003 server. It seems to be doing the job correctly, since it filters spam (about 80% of the e-mails are just junk!).

My recomendation of a correct filtering solution:
1.) Do no accept messages based on certain rules! (DNS blacklists, sender verify)
If you reject a message, error message is generated to valid senders (false positive) and they will be notfied that their message was not delivered.
2.) Scan accepted messages for viruses and delete the infected e-mails.
You do not need to send any notification, because the sender is usually faked and you do not want to flood the recepients mailbox.
3.) Quarantine messages with executable attachments, rescan them in 8 hours with updated
virus scanner and deliver them if not infected.
4.) Check content for spam (bayesian filter, surbl). If it is supposed to be spam, mark it (modify subject or add a header field) and deliver the e-mail to the recepient. (Which can be sorted at the client with a local e-mail rule.)

So does GFI suits these? Not really. You cannot reject any message. You can just delete/mark/forward the e-mail but you cannot reject it.

Other solution (which I would like to test, as well):
Exchange IMF
ASSP

First

2006-11-25T00:04:00.000-08:00

You cannot skip your first post, can you?
Introduction: I first met a computer around 1979. First it was just a hobby, now it is my profession. I manage SMB networks for a living since 1993.
About this blog: I plan to post some of the technical problems and solution, I come across during my work. Perhaps someone will have the same problem, and this will help to find the solution.
Cheers, YAIG.