https://support.microsoft.com/contactus2/emailcontact.aspx?scid=sw;[LN];1414&from=KBHotfix&WS=hotfix
hotfix işe yarayabiliyor
http://support.microsoft.com/kb/892050/EN-US/
http://dan.hersam.com/2007/01/05/the-best-things-in-life/
http://dan.hersam.com/2005/07/18/usb-device-not-recognized/
http://support.microsoft.com/kb/871233
http://www.hat.net/geeky/node/221
http://usbman.com/Guides/SiS%20USB%20Tips%20and%20Tricks.htm
devcon usb devices delete
http://digital.ni.com/public.nsf/allkb/1D120A90884C25AF862573A700602459
http://support.microsoft.com/kb/311272
http://www.robvanderwoude.com/devcon.html usbleri temizleme script'i var.
http://www.codeprof.com/dev-archive/147/14-881-1476841.shtm
http://www.myitforum.com/forums/m_171830/mpage_1/key_/tm.htm#171830
http://www.dti.nu/usb/ usb problems workaround.
chipset driver indiri
http://www3.sympatico.ca/gtopala/about_siw.html motherboard'un driverını bulmak için.
http://ntcompatible.com/Desperately_need_help_---_USB_Devices_Not_Recognized_t32356.html
http://support.microsoft.com/default.aspx?scid=kb;en-us;817900 USB port may stop working after removing or inserting USB device
http://www.experts-exchange.com/Storage/Misc/Q_21780235.html
------------------------ntcompatibledan nagmeler
"I have just experienced the same problem with my printers working on USB ports but not my USB memory stick or card reader and I got exactly the same error message as yourself. I phoned my computer manufacturer's helpdesk and they told me I would have to re-format my hard disk and re-install Windows XP which I did only to find that the problem still existed. Someone on one of the newsgroups to which I am subscribed suggested not only closing down my computer but also switching it off at the mains socket. Seemingly this allows any residual current on the motherboard or any stray capacitance to discharge. Believe it or not it worked! I now have all my USB ports and devices working as I want them. Hope it works for you - it must be worth a try :-)
Power çıkart bekle. statik elektrikten kapasitanstan tanıyamıyor :) komedi ya.
-----------------------------------
now onto the HP nx9010 laptop which has never recognised any USB drives or ipods ever. This time straight into device manager, delete 3 USB root hubs under USB, then the 3 controllers. Now scan for hardware chnages, and pronto both the drives now work. I think I might spend the rest of the night plugging and unplugging the USB drives - love the sound. Then I might send microsft or hp an invoice for 20wasted hours - no just kidding.
Saturday, January 26, 2008
Thursday, January 24, 2008
Çift tıklayınca açılmayan sürücüler.
Cift tiklandiginda acilmayan suruculere bulasan
virusu temizlemek icin :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
adresinde bulunan ComboFix.exe dosyasini masaustune indirin
ve sadece masaustunde calistirin.
Bu arada, eger flash drive'larinizdan, yedek hdd'lerden filan da
supheleniyorsaniz, onlari da yuvalarina takin aktive olsunlar..
Kendisi tum suruculeri kontrol ediyor ve temizliyor..
Son olarak log veriyor ve bitiriyor.
virusu temizlemek icin :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
adresinde bulunan ComboFix.exe dosyasini masaustune indirin
ve sadece masaustunde calistirin.
Bu arada, eger flash drive'larinizdan, yedek hdd'lerden filan da
supheleniyorsaniz, onlari da yuvalarina takin aktive olsunlar..
Kendisi tum suruculeri kontrol ediyor ve temizliyor..
Son olarak log veriyor ve bitiriyor.
Wednesday, January 23, 2008
Monitor calibration
http://www.northlight-images.co.uk/article_pages/eye_one_display_2.html
http://www.adobeforums.com/webx/.3bc3ae61
http://forums.dpreview.com/forums/read.asp?forum=1004&message=22924077
http://www.adobeforums.com/webx/.3bc3ae61
http://forums.dpreview.com/forums/read.asp?forum=1004&message=22924077
Friday, January 18, 2008
Lan messaging Chat
BORGChat
PaltalkScene 12.61 /logon olması gerekiyor.
RealPopup 2.6 build 167
http://www.outlookmessenger.com /10 kişiye kadar free. güzel
Wildfire
PaltalkScene 12.61 /logon olması gerekiyor.
RealPopup 2.6 build 167
http://www.outlookmessenger.com /10 kişiye kadar free. güzel
Wildfire
MCITP Certification
MS'den mail bekledik fakat hala ilgili bilgi maili tarafımıza ulaşmadı(Yeni olduğu için onlarda da bilen yokmuş. Telefonla ulaşılan bilgidir. :) ). Sertifikasyonla alakalı Live Meeting videosunun linki aşağıdaki gibidir. En altta yazı olarak her şekilde MCITP sertifikasyonu için gerekli sınav kodlarını bulabileceksiniz. Sınav kodları ve tüm bilgiler MS site'daki videolara göre verilmiştir.
https://www.livemeeting.com/cc/lmevents/view?id=msft061307lm_am&pw=ATT1065
Recorded on Wednesday, June 13, 2007 7:35:38 AM PDT
Videodan yakaladığım görüntüleri(Slaytlarına erişemediğim için) Aşağıda paylaşıyorum. Bu bilgiler ışığında MCSE 2003 MCSA 2003 ve sıfırdan MCITP Enterprise veya Server Administrator ünvanları için neler gerektiği bilgilerini bulabileceksiniz.
MCTS sertifikaları :
AD configuring, Network Infrastructure configuring, Applications Platforms configuring Gibi Rollere göre uzmanlık sınavları ve ünvanlarını görüyorsunuz. (MCTS lerde Bir sınava girip Bir ünvan elde etmiş oluyorsunuz. MSTS:Vista configuring gibi)
Sıfırdan MCITP Enterprise Administrator ünvanı için: 5 Sınav gerekmekte
Sıfırdan MCITP Server Administrator ünvanı için: 3 sınav gerekmekte
MCSA 2003 ve MCSE 2003 to 2008 Upgrade sınavları
MCSA 2003 olanlar için MCITP Sertifika yolu:
Görüldüğü gibi her sertifika için 648 MCSA to 2008 Upgrade sınavına girmeniz ve ilgili sınavlara girmeniz gerekmekte.
MCSE 2003 olanlar için MCITP Sertifika yolu:
Sık sorunlar Sorular:(tam okunamayabilir ama genel olarak anlaşılıyor. MS site da FAQ altında da bulabilirsiniz.)
Yukarıdaki bahsettiğim MS site'daki video neticesi aşağıdaki gibi bir tablo oluşuyor.
- MCSE 2003 olanların MCITP: Server Administrator olabilmeleri için;
MCSE 2003 to MCITP: Server Administrator (2 Exams)
70-649 (Upgrade)
70-646 (IT Pro: Server Administrator)
- MCSE 2003 olanların MCITP:Enterprise Administrator olabilmeleri için;
MCSE 2003 to MCITP: Enterprise Administrator (3 Exams)
70-649 (Upgrade)
70-620(Vista) veya 70-624(BDD)
70-647 (IT Pro: Enterprise Administrator)
- MCSA 2003 olanların MCITP: Server Administrator ve Enterprise Administrator olabilmeleri için
MCSA 2003 to MCITP: Server Administrator (2 exams)
70-648 (Upgrade)
70-646 (IT Pro: Server Administrator)
MCSA 2003 to MCITP: Enterprise Administrator (4 Exams)
70-648 (Upgrade)
70-620 (Vista veya 70-624 (Deploying and Maintaining Vista and 2007 Office System Desktops)
70-643 (MCTS: Applications Platform, Configuring)
70-647 (IT Pro: Enterprise Administrator)
- Sıfırdan MCITP: Server & Enterprise Administrator olabilmek için
MCITP: Server Administrator (3 Exams)
MCTS: 70-640: Active Directory, Configuring
MCTS: 70-642: Network Infrastructure, Configuring
MCITP: 70-646: Server Administrator
MCITP: Enterprise Administrator (5 Exams)
MCTS: 70-620: Vista or 70-624: Vista and Office 2007
MCTS: 70-640: Active Directory, Configuring
MCTS: 70-642: Network Infrastructure, Configuring
MCTS: 70-643: Applications Platform, Configuring
MCITP: 70-647: Enterprise Administrator
5 Aralık tarihli 2008 Live meeting Sertifikasyon linki aşağıdaki gibidir. Konuyla ilgili videoda ki sık sorulan sorular ve cevapları aşağıdaki gibidir.
Recorded On: Wednesday, Dec 5, 2007 7:36 AM (PST)
https://www.livemeeting.com/cc/eventsnew/view?id=msft120507lm_am&pw=AET789&cn
Q:I passed 70-649 in November. I have never been able to order Welcome Kit. I have called and emailed several times and the mcp support doesn't seem to have a clue. They have even told me there isn't a certificate for this test. What is up with this? Is there a phone number we can call on this that doesn't goto India?
A:Hey, hi. You are not alone - those welcome kits are not available yet. I'm so sorry you have been getting bad information from the support team about it. There certainly will be a certiifcate - I anticpiate it will be availabe to order in about one month. I'm sorry we haven't communicated this better - because the upgrade exams came out so early and because we hvae this model of one exam = many certs, we aren't set up to deliver yet. That does not excuse it... but want you to know what is going on. No helpdesk that isn't india - but you can call me, if you need to confirm! +1 425 703 9198. (Trika).
Q:will there be a seperate webcast for upgrading MCSE 2003 skills to the new 2008 ones?
A:We will cover that here--in about 10 minutes.
Q:Trika announced on her blog a few weeks ago that one of the Win2k8 MCTS certifications has had a name change. On the transcript the wrong name shows up, when is this going to change? (The change is: MCTS: Applications Platform, Configuring has been finalized as MCTS: Applications Infrastructure, Configuring, to tie in better with Windows Server terminology. )
A:We are updating that in our next drop (hopefully before the end of the year)
Q:Is that at the end of mainstream support, or extended support? (When certifications are expired)
A:MCTS retires at end of mainstream support.
Q:I just want to say that I have had a lot of problems with the India-based MCP help line too; it is very difficult to get them to understand what I ask.
A:Hi. It has not been too long since we moved our helpdesk for some parts of the world, so we did anticipate some growing pains. Hopefully, we'll be seeing things improve quite a bit now that we have some history. In the meantime, though, I know it can be frustrating! Feel free to send feedback to trikah@microsoft.com and we'll pass it along. It's good to hear what you guys are experiencing so we can try and improve it.
Q:How someone can get certified on a product that was not yet relased?
A:Rob will answer that.
Q:as for the MCA there's very little information available on the internet, and i was able to get very little info as well from Tech-Ed. Where can we get some more news about it?
A:Hi. Have you looked at the web content: http://www.microsoft.com/learning/mcp/architect/default.mspx? We also held a Live Meeting in June, you can find that here: http://www.microsoft.com/learning/community/default.mspx
Q:Transcript of MCSE/MCSA 2000 exams would be removed from my MCP profile after the W2K exams retires ?
A:No exams will be removed from transcripts, even after they retire. MCSA and MCSE will also stay on your transcript, even if underlying exams retire.
Q:This slide is messed up, can I download the slide?
A:To print a PDF copy of the slides, select the Printer icon in the context bar, in the lower right portion of the client.
Q:maybe you mean "will NOT be removed"?
A:I meant what I said :-) "No exams will be removed from transcripts,"
Q:Can we take any 2 of the 3 MCTS exams to be eligible for Server admin MCITP?
A:No, you have to take the two on the path: 640 and 642.
Q:When will 646 & 647 be in Beta?
A:Late December, most likely.
Q:Is there a number I can call to get my current certification status? I dont know my MCSE ID anymore.
A:You need to contact the helpdesk, please: http://www.microsoft.com/learning/support/default.mspx
Q:Is 292 and 296 retiring?
A:Yes, March 31, 2008. http://www.microsoft.com/learning/mcpexams/status/examstoretire.mspx
Q:any upgrade exams for MCSE 2003 to MCITP
A:We are covering that right now.
Q:how do I print the presentation
A:To print a PDF copy of the slides, select the Printer icon in the context bar, in the lower right portion of the client.
Q:I'm MCSE 2003 and I want to become Microsoft certified architect: what's my path to success? :)
A:Look at the screen right now> RIGHT NOW!! DO IT!!! :-)
Q:How can I open communication ports in Windows 2008 Server
A:Hmm. That seems like a question for the WIndows Server 2008 product team. Try starting here! http://www.microsoft.com/windowsserver2008/default.mspx
Q:When will 649 be available in italy?
A:Coming next...
Q:I passed the 649 (just wanna tell you guys :) )....
A:Awesome. That is great news! Congratulations.
Q:people who upgrade from MCSA/MCSE 2000 to MCSA/MCSE 2003 can upgrade to windows 2008?
A:Yes, exactly. Will cover that in just a moment.
Q:I missed the 1st 30min - will this be available on demand later?
A:Yes. http://blogs.msdn.com/trika - look for the recording tomorrow and the transcribed deck on the MCP site within two weeks.
Q:Does 70-621 cover 70-620 in the upgrade path as well?
A:Yes. Anywhere you are asked to take 620, you can use 621 in its place.
Q:I hold an MCSE and an MCSA in Server 2K3. I want to upgrade both. How many exams am i looking at. Will the path be discussed here?
A:To both MCITP = 649 + 620 or 624 + 646 + 647 = four exams total from MCSE 2003.
Q:Can exam 70-649 be retaken if failed the first time? Does 2nd shot apply?
A:Second shot will apply if you register in advance. http://www.microsoft.com/learning/mcp/offers/secondshot/default.mspx. The retake policy is the same as for any exam - you MAY retake the upgrade exams.
Q:Is it needed to do both the 646 and 647 ?
A:No. Not unless you want to earn both MCITP certifications.
Q:MCSE who upgrade to windows 2008 will get 3 paper certificates or just one?
A:I'm not sure. What do you guys think it should be?
Q:I think it should be 3 paper certs
A:ok good to know
Q:What exams does a MCSE 2003/MCDST take to get both mcitp's
A:1. Take 621 to upgrade your MCDST - then you cover your 620 requirement. 2. Take 649. 3. Take 646. 4. Take 647. Four exams and you'll have your MCITP: Enterprise Support as well.
Q:Am I the only one thinking that almost all the speakers are really, really soft? I have my speakers blaring right now and can barely hear a thing.
A:Sorry, we will try and speak up!
Q:I agree, the more certs on the wall, the cooler I look :)
A:OK, cool guys.
Q:What is the specific reason for removing older certifications from the Transcript? They show to employers a history of maintaining one's credentials.
A:We are not removing older credentials (MCSA/MCSE) from transcripts. In the future, we will remove MCTS and MCITP/MCPD credentials once the technology is no longer supported by Microsoft (MCTS) or the three year recertification period is not met (MCITP or MCPD) but the exams will stay on your trascript so you will be able to show progression throught the program.
Q:Rob said in order to get the Server Admin certification, you should take exam 70-640 first, then 70-642, but it looked to me that the slide showed the opposite sequence. Is the sequence Rob mentioned correct?
A:Rob's sequence is better :-) but either way you are fine.
Q:Is 70-643 is required for Enterprise Admin?
A:Yes.
Q:Engineers also drive trains!
A:We love trains.
Q:Since MCTS doesn't provide MCP, it sounds like the MCP count on http://www.microsoft.com/learning/mcp/certified.mspx will no longer reflect the total number of people with any MCP-program certs. If this is correct, please add a real 'total of all certified people' number to that page.
A:We will add MCTS, MCITP, and MCPD credentials to the count page...
Q:How many questions in the upgrade exams must be answered corretly to pass?
A:Sorry, we do not make publis exactly how many questions are required for a pass, but I can tell you a 700 or higher is passing.
Q:why do you call those exams 70-xxx, are those only logically incremental numbers or there is some other reason?
A:The "70" prefix identifies the exam as a Microsoft exam at our exam delivery partners...that is its only use...
Q:Is there going to be any discussion on the requirements for the Architect certification?
A:Not in this call...Trika has previously done a Architect LM and is likely to do another in the near future...
Q:When will exam objectives be published for 70-640, 642, 643?
A:The prep guides are live now, go to http://www.microsoft.com/learning/exams/70-640.mspx and 642, 643...
Q:Which certification will be considered "premium" with regards to maintaining MCT? Currently, MCSE and MCSD were needed to maintain it - will this be similarly matched to MCITP / MCPD?
A:Yes...although the final decision rests with the MCT Program Manager...
Q:sorry if this is slightly off topic... will the Exchange 2007 exams (and courses) be updated to reflect the new product functionality in SP1?
A:We will refresh the exchange exams next year, and when we do that questions on SP1 will be added as appropriate.
Q:I have a windows 2000 MCDBA. Is there an upgrade path for that cert or is this the latest cert available for DBA's?
A:Exam 70-447 will upgrade your MCDBA to a MCITP: Database Administrator certification for SQL Server 2005...
Q:What are TS/MCITP recertification requirements?
A:No recertifications are required for TS credentials. The credential is good as long as the product is supported.
Q:You say that the exams have to be retaken every 3 years. So if I become MCITP how many retests will be required every three years?
A:That has not been completly decided yet, but I don't see more than a single exam for recert will be required.
Q:So, the combination of 649+620(624)+646+647 gives me MCITP:Server Admin AND Enterprise Admin?
A:That's correct!
Q:Hi, what happens if you don't pass 70-649? Is your MCSE 2003 gone?
A:No, your credential is safe :-)
Q:Sorry to ask, but I didn’t hear. Which Exam will expire next March?
A:The Windows 2000 Server to Windows Server 2003 Upgrade exams will retire on March 31, 2008. Also, all the Windows 2000 Server exams will also retire on 3/31/08.
Q:thank you!
A:Thank YIOU
Q:Where is the course syllabus for 6426A?
A:The Windows Server 2008 courses syllabi are being posted over the next few weeks.
Q:Can I get a copy of the biref?
Monday, January 14, 2008
Sunday, January 13, 2008
Sony SZ650
http://www.mobiletechreview.com/notebooks/Sony-Vaio-SZ650.htm
http://b2b.sony.com/Solutions/product/VGN-SZ650N/C
http://www.trustedreviews.com/notebooks/review/2007/09/19/Sony-VAIO-VGN-SZ61VN/p1
http://laptopvideo2go.com/
http://forum.donanimhaber.com/m_16849419/mpage_1/key_/tm.htm
http://forum.donanimhaber.com/m_19607491/tm.htm sorunlar çözümleri. xp vista vs.
http://esupport.sony.com/US/perl/swu-list.pl?mdl=VGNSZ650N xpdowngrade drivers.
ftp://ftp.vaio-link.com/pub/OS/XPDOWNGRADE/SZ6
bu adresten utilities ve driverları indirebilirsiniz
10/31/2007 12:55 139,885,227 SZ6_XP_DRIVERS.ZIP
10/31/2007 12:54 130,461,093 SZ6_XP_UTILITIES.ZIP
--------------------
Batarya
stamina mod u ile bu sure yarım saat daha uzar.
benim 3 saat olarak olctugum durum: wireless acık blue kapalı online yazışma, winamp acık ekran parlaklıgı %75 ve speed modunda .
-------------
kutu iceriginde
sony ana cihaz
pil
sarj cihazı
sarj cihazı icin ara kablo
sd-mmc kart okuyucu
tanıtım brosurleri
kullanım klavuzu
cihaz sarı bir plastik gibi bişi icine sarılı geliyor.
----------------------------
http://esupport.sony.com/US/perl/swu-list.pl?mdl=VGNSZ650N
http://b2b.sony.com/Solutions/product/VGN-SZ650N/C
http://www.trustedreviews.com/notebooks/review/2007/09/19/Sony-VAIO-VGN-SZ61VN/p1
http://laptopvideo2go.com/
http://forum.donanimhaber.com/m_16849419/mpage_1/key_/tm.htm
http://forum.donanimhaber.com/m_19607491/tm.htm sorunlar çözümleri. xp vista vs.
http://esupport.sony.com/US/perl/swu-list.pl?mdl=VGNSZ650N xpdowngrade drivers.
ftp://ftp.vaio-link.com/pub/OS/XPDOWNGRADE/SZ6
bu adresten utilities ve driverları indirebilirsiniz
10/31/2007 12:55 139,885,227 SZ6_XP_DRIVERS.ZIP
10/31/2007 12:54 130,461,093 SZ6_XP_UTILITIES.ZIP
--------------------
Batarya
stamina mod u ile bu sure yarım saat daha uzar.
benim 3 saat olarak olctugum durum: wireless acık blue kapalı online yazışma, winamp acık ekran parlaklıgı %75 ve speed modunda .
-------------
kutu iceriginde
sony ana cihaz
pil
sarj cihazı
sarj cihazı icin ara kablo
sd-mmc kart okuyucu
tanıtım brosurleri
kullanım klavuzu
cihaz sarı bir plastik gibi bişi icine sarılı geliyor.
----------------------------
http://esupport.sony.com/US/perl/swu-list.pl?mdl=VGNSZ650N
Saturday, January 12, 2008
Proxy GPO
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/718.mspx?mfr=true
http://www.windowsitpro.com/Article/ArticleID/42660/42660.html
http://www.pcreview.co.uk/forums/thread-1437893.php
User Configuration/Windows Settings/Internet Explorer Maintenance/ "Connection
User Configuration\Administrative Templates\Windows Components\Internet Explorer
disable changining proxy seting.s enable.
http://www.windowsitpro.com/Article/ArticleID/42660/42660.html
http://www.pcreview.co.uk/forums/thread-1437893.php
User Configuration/Windows Settings/Internet Explorer Maintenance/ "Connection
Disable changing proxy settings
User Configuration\Administrative Templates\Windows Components\Internet Explorer
disable changining proxy seting.s enable.
USB -Disable Enable
http://www.petri.co.il/disable_writing_to_usb_disks_in_xp_sp2_with_gpo.htm
http://www.petri.co.il/disable_usb_disks_with_gpo.htm
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.server.general&tid=b9c908ac-f227-4d01-b0ec-5bbef9a72736&p=1
http://www.petri.co.il/disable_usb_disks.htm
http://www.intelliadmin.com/blog/2007/01/disable-usb-flash-drives.html
http://support.microsoft.com/kb/555324
http://www.petri.co.il/disable_writing_to_usb_disks_in_xp_sp2.htm
http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html
View > Filtering.
"Only show policy settings that can be fully managed"
http://www.petri.co.il/disable_usb_disks_with_gpo.htm
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.server.general&tid=b9c908ac-f227-4d01-b0ec-5bbef9a72736&p=1
http://www.petri.co.il/disable_usb_disks.htm
http://www.intelliadmin.com/blog/2007/01/disable-usb-flash-drives.html
http://support.microsoft.com/kb/555324
http://www.petri.co.il/disable_writing_to_usb_disks_in_xp_sp2.htm
http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html
View > Filtering.
"Only show policy settings that can be fully managed"
Friday, January 11, 2008
Mojopack - Sistemin yanında
http://www.mojopac.com/portal/content/how/demo.jsp
External storage'a sistemini kur.
External storage'a sistemini kur.
Wednesday, January 09, 2008
Robocopy- Progs
http://www.microsoft.com/technet/technetmag/issues/2006/11/UtilitySpotlight/ adresinden Robocopy’nin GUI arayuzlu versiyonunu inceleyebilirsiniz.
http://www.ss64.com/nt/robocopy.html
-----
http://www.inndir.com/program.php?id=34980
KillBox ile kullanımda olan dosyaları silebilirsiniz. Normal şartlar altında Windows, kullanımda olan bir dosyayı silemez. Ancak Killbox ile o dosyanın bağlı olduğu program kapatılır ve dosya silinir. Eğer programlar o sırada kapatılamayacak konumda ise veya bağlı oldukları dll dosyaları varsa, ya da sistem servislerini kullanıyorsa, sistem yeniden başlatılırken dosya silinir.
Oldukça basit bir arayüzü olan programda aktif çalışan programları da görebilirsiniz.
Monday, January 07, 2008
Wednesday, January 02, 2008
kozmetik alışveriş
http://tr.strawberrynet.com/main.aspx?region=TUR
Pek kimseye söylemeyecekmişsiniz. Yoksa siparişleri beklersiniz :)
Pek kimseye söylemeyecekmişsiniz. Yoksa siparişleri beklersiniz :)
Friday, December 28, 2007
A virtualization-friendly inclusion in Windows Server 2008 licensing
With a wave of the wand, Microsoft made impressive licensing changes to Windows Server 2003 that made running virtual server instances more cost-friendly. Under the Enterprise edition of Windows Server 2003, organizations can run up to four virtual servers without incurring any additional licensing fees beyond the physical host license. Under the Data Center edition, you can run as many virtual servers as your hardware can support.
With the introduction of Windows Server 2008, Microsoft is extending this program to the Standard edition, albeit in a more limited way. With Windows Server 2008 Standard, you’ll be allowed to run your physical server as well as one virtual server on that physical host without incuring an additional charge.
As is the case with Windows Server 2003, Microsoft is not dictating the virtualization solution that you must use to take advantage of these licensing features. That said, with the Standard edition licensing change, you will need to use something like Virtual Server 2005 or VMware Server to be able to take advantage of the offer. With the Enterprise and Data Center offerings, you can take advantage of the offer as long as you apply the physical Window license to the host server.
http://blogs.techrepublic.com.com/datacenter/?p=250&tag=nl.e040
Thursday, December 27, 2007
sony
http://www.mobiletechreview.com/notebooks/Sony-Vaio-SZ650.htm
Specs:
Display: 13.3" WXGA 1280 x 800 widescreen display with white LED backlighting, XBrite. Hybrid graphics system, can use either the integrated Intel X3100 graphics or NVIDIA 8400M GS with 64 megs dedicated DDR2 memory (will use additional system memory as needed up to 831 megs).
Battery: Lithium Ion rechargeable, 10.8v, 5800 mAh (VGP-BPS10). Extended 9 cell battery available for purchase (VGP-BPL9). Claimed runtime: 3 to 6 hours.
Performance: Intel GM965 Santa Rosa motherboard chipset, 800MHz front side bus. Intel Core 2 Duo T7500 running at 2.2GHz with 4 meg level 2 cache (2.4GHz also available). 2 gigs PC5300 667Mhz DDR2 RAM, 4 gigs max. Has 2 SODIMM slots.
Drives: 160 gig SATA H-HDD with Windows ReadyDrive: hybrid hard disk with 256 megs flash memory (ours had a Seagate Momentus), 5400 RPM. Has G-Sensor shock protection for hard drive. Dual layer DVD burner.
Size: 12.5" wide x 9.3" deep x 1.0" to 1.5" thick. Weight: 3.95 pounds. Carbon fiber casing.
Camera: 1.3MP web cam with mic.
Audio: Built in stereo speakers, mic and 3.5mm standard stereo headphone jack, mic jack.
Networking: Integrated Intel Pro/Wireless 4965AGN WiFi 802.11a/b/g/n, Bluetooth 2.0 +EDR. 10/100/1000 gigabit Ethernet, V.92 modem. Has wireless on/off switch. Internal Sprint EV-DO rev. A broadband modem available on some models.
Software: Windows Vista Business.
Ports and Expansion: PCMCIA type II, ExpressCard/34, 2 USB 2.0, 1 4 pin unpowered FireWire (IEEE 1394) port, VGA, Ethernet, modem, port replicator port (bottom), Memory Stick Pro DUO slot. 5-in-1 ExpressCard reader included that handles MMC, RS-MMC, SD, miniSD, microSD and xD picture cards.
Security: Biometric fingerprint scanner, Trusted Platform Module (TPM) 1.2, Protector Suite QL softwareWednesday, December 26, 2007
Xp sık karşılaşılan hatalar
NTLDR is compressed!
Çözüm
Sistemi XP CD'si ile başlatın ve kurtarma konsoluna geçerek aşağıdaki komutları sırasıyla yazın.
Kod:
CD
ATTRIB -C NTLDR
Sorun
Hal.dll Bulunamıyor
Çözüm
Sistemi XP CD'si ile başlatın ve kurtarma konsoluna geçerek aşağıdaki komutları sırasıyla yazın.
Kod:
Attrib -H -R -S C:\Boot.ini
DEL C:\Boot.ini
BootCfg /Rebuild
Fixboot
Sorun
Bilgisayarım'ın özelliklerini göstermiyorsa veya "Sistem Geri Yükleme" doğru bir şekilde çalışmıyorsa veya rundll32.exe ile ilgili bir hatayla karşılaştığınızda,hatayı siz de giderebilirsiniz..
Çözüm
Bu hataların sorumlusu,yüksek ihtimalle zarar görmüş Winsta.dll dosyasıdır.Windows/System32 klasöründe bulunan bu dosya çok kolay bir şekilde zarar görebilir..
Sorunu gidermek için bilgisayarı yeniden başlatın ve başlatırken "F8" tuşuna basarak Windows Güvenli mod'da açılmasını sağlayın.C:windows/inf klasörüne geçin ve SR.inf dosyasına sağ tıklayarak "Yükle" 'yi seçin.Bilgisayarı yenidn başlattığınızda sorun giderilmişse,en son yüklemiş oldğunuz Service Pack'i yeniden yükleyin..
Sorun
Bozulan sistem geri yükleme hizmetini yeniden kuralım.
Çözüm
Başlat-Çalıştır ==> %Windir%\INF yazın.
Açılan klasörde ihtiyacımız olan dosyayı bulabilmemiz için "Gizli Dosya ve Klasör Göster" seçeneğini aktif hale getirmeliyiz.
Bunun için şu yolu izleyelim;
Araçlar---Klasör Seçenekleri---Görünüm---Gizli Dosya ve Klasörleri Göster
seçeneğini işaretleyin ve TAMAM'a basarak yapılan değişikliği onaylayın.
sr.inf dosyasını bulun ve sağ tıklayarak YÜKLE 'yi seçin.Sizden Service Pack 2 cd'sini isteyecektir.O yüzden bu işlemlerden önce mutlaka Windows XP SP2 cd'si optik sürücünüz içerisinde olmalıdır.
NOT
Eğer daha önce Windows klasörü içerisinde ServicePackFiles\i386 klasörü varsa cd'ye gerek yok demektir.
Sizden İstenilecek Olan Dosyalar
FILELIST.XML
RSTRUI.EXE
SR.SYS
SRCLIENT.DLL
SRDIAG.EXE
SRFRAME.MMF
SRRSTR.DLL
SRSVC.DLL
SRVSVC.DLL
Sorun
XP'deki ikonlarım nedense normalden daha büyük gözüküyorlar.
Çözüm
Kod:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Control Panel\desktop\WindowMetrics]
"Shell Icon BPP"="16"
"Shell Icon Size"="32"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000
Çözüm
Sistemi XP CD'si ile başlatın ve kurtarma konsoluna geçerek aşağıdaki komutları sırasıyla yazın.
Kod:
CD
ATTRIB -C NTLDR
Sorun
Hal.dll Bulunamıyor
Çözüm
Sistemi XP CD'si ile başlatın ve kurtarma konsoluna geçerek aşağıdaki komutları sırasıyla yazın.
Kod:
Attrib -H -R -S C:\Boot.ini
DEL C:\Boot.ini
BootCfg /Rebuild
Fixboot
Sorun
Bilgisayarım'ın özelliklerini göstermiyorsa veya "Sistem Geri Yükleme" doğru bir şekilde çalışmıyorsa veya rundll32.exe ile ilgili bir hatayla karşılaştığınızda,hatayı siz de giderebilirsiniz..
Çözüm
Bu hataların sorumlusu,yüksek ihtimalle zarar görmüş Winsta.dll dosyasıdır.Windows/System32 klasöründe bulunan bu dosya çok kolay bir şekilde zarar görebilir..
Sorunu gidermek için bilgisayarı yeniden başlatın ve başlatırken "F8" tuşuna basarak Windows Güvenli mod'da açılmasını sağlayın.C:windows/inf klasörüne geçin ve SR.inf dosyasına sağ tıklayarak "Yükle" 'yi seçin.Bilgisayarı yenidn başlattığınızda sorun giderilmişse,en son yüklemiş oldğunuz Service Pack'i yeniden yükleyin..
Sorun
Bozulan sistem geri yükleme hizmetini yeniden kuralım.
Çözüm
Başlat-Çalıştır ==> %Windir%\INF yazın.
Açılan klasörde ihtiyacımız olan dosyayı bulabilmemiz için "Gizli Dosya ve Klasör Göster" seçeneğini aktif hale getirmeliyiz.
Bunun için şu yolu izleyelim;
Araçlar---Klasör Seçenekleri---Görünüm---Gizli Dosya ve Klasörleri Göster
seçeneğini işaretleyin ve TAMAM'a basarak yapılan değişikliği onaylayın.
sr.inf dosyasını bulun ve sağ tıklayarak YÜKLE 'yi seçin.Sizden Service Pack 2 cd'sini isteyecektir.O yüzden bu işlemlerden önce mutlaka Windows XP SP2 cd'si optik sürücünüz içerisinde olmalıdır.
NOT
Eğer daha önce Windows klasörü içerisinde ServicePackFiles\i386 klasörü varsa cd'ye gerek yok demektir.
Sizden İstenilecek Olan Dosyalar
FILELIST.XML
RSTRUI.EXE
SR.SYS
SRCLIENT.DLL
SRDIAG.EXE
SRFRAME.MMF
SRRSTR.DLL
SRSVC.DLL
SRVSVC.DLL
Sorun
XP'deki ikonlarım nedense normalden daha büyük gözüküyorlar.
Çözüm
Kod:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Control Panel\desktop\WindowMetrics]
"Shell Icon BPP"="16"
"Shell Icon Size"="32"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000
Monday, December 24, 2007
Kerberos
What is Kerberos?
Kerberos is a ticket-based network authentication protocol utilizing symmetric crytography, software that will add to the ability of operating systems (Windows, Mac, etc.) to authenticate users and servers, and manage session-level security and encryption. It is a single sign-on technology. Kerberos was created in the 1980's as part of MIT's "Project Athena". It is IP-based service. It uses secret-key crytography to provide strong authentication for client/server applications. Kerberos is available in several commercial products and is also available as free implementation from MIT.
[The name Kerberos comes from Greek mythology; it is the three-headed dog that guarded the entrance to Hades.]
Most users access many systems and networks during the day. A single sign-on technology allows a user to sign on once at the beginning of the day and remain authorized throughout the day on the entire network.
[The name Kerberos comes from Greek mythology; it is the three-headed dog that guarded the entrance to Hades.]
Most users access many systems and networks during the day. A single sign-on technology allows a user to sign on once at the beginning of the day and remain authorized throughout the day on the entire network.
Kerberos Terminology
Authentication Service (AS) - Performs authentication and is a part of the Key Distribution Center (KDS).
Key Distribution Center (KDS) - Holds secret keys (the crytographic keys) for "principals"; provides authentication; creates and distributes session keys (crytographic keys). Session keys and secret keys are crytographic keys. The KDS utilizes symmetric cryptography. A KDC has a Ticket Granting Service (see TGS) and the Authentication Service.
Principal - Any object such as user, application, service, or resource which utilizes Kerberos authentication is referred to as principal. Collectively, the objects using Kerberos are principals. A Key Distribution Center (KDC) is responsible for one or more "realms" of principals. Any principal must "trust" the KDC. Principals do not directly trust each other. Only the KDC is supposed to have a copy of each principals "secret key".
Realm - The group or set of principals which are grouped together logically by a network administrator is called a realm. Again, a Key Distribution Center (KDC) is responsible for one or more realms.
TGS (Ticket Granting Service) - That part of the Key Distribution Center (KDS) which creates and distributes tickets to the objects (principals) containing session keys.
Ticket - Simply a digital authentication token sent from the Authentication Service (AS). The first ticket sent from the AS to a principal (user, application, service or resource) is called the Ticket Granting Ticket (TGT).
Secret keys and Session keys - Symmetric cryptography keys used for both authentication and/or data encryption.
Key Distribution Center (KDS) - Holds secret keys (the crytographic keys) for "principals"; provides authentication; creates and distributes session keys (crytographic keys). Session keys and secret keys are crytographic keys. The KDS utilizes symmetric cryptography. A KDC has a Ticket Granting Service (see TGS) and the Authentication Service.
Principal - Any object such as user, application, service, or resource which utilizes Kerberos authentication is referred to as principal. Collectively, the objects using Kerberos are principals. A Key Distribution Center (KDC) is responsible for one or more "realms" of principals. Any principal must "trust" the KDC. Principals do not directly trust each other. Only the KDC is supposed to have a copy of each principals "secret key".
Realm - The group or set of principals which are grouped together logically by a network administrator is called a realm. Again, a Key Distribution Center (KDC) is responsible for one or more realms.
TGS (Ticket Granting Service) - That part of the Key Distribution Center (KDS) which creates and distributes tickets to the objects (principals) containing session keys.
Ticket - Simply a digital authentication token sent from the Authentication Service (AS). The first ticket sent from the AS to a principal (user, application, service or resource) is called the Ticket Granting Ticket (TGT).
Secret keys and Session keys - Symmetric cryptography keys used for both authentication and/or data encryption.
Kerberos in a Nutshell
(How it Works)
With Kerberos, users have to "prove" their identity to every application, resource and service before they can be used. On a user-level, this is not a problem as the user will log-on once in the morning and have network access all day, as well as access to resources.. Kerberos software is set up, configured and maintained by the network administrators.
(1) A user logs in: Authentication information is sent to the AS (Authentication Service) of the KDC (Key Distribution Center)
(2) The AS sends back a ticket (encrypted) to the user's computer.
(3) Ticket gets decrypted with the secret key (user's password). User is authenticated to the network if the right password is used.
(1) A user logs in: Authentication information is sent to the AS (Authentication Service) of the KDC (Key Distribution Center)
(2) The AS sends back a ticket (encrypted) to the user's computer.
(3) Ticket gets decrypted with the secret key (user's password). User is authenticated to the network if the right password is used.
User Needs a Resource
(1) User's computer sends initial ticket to the Ticket Granting Service (TGS) of the Key Distributrion Center (KDC).
(2) Tricky step:1 TGS makes another ticket: User authentication information, plus TWO instances of the SAME session key. This ticket goes to user computer. One instance of the Session key gets encrypted with the user's secret key. The other instance of the Session key is encrypted with the secret key of the desired resource.
(3) User computer software (Kerberos) decrypts and extracts one instance of the session key, then inserts authentication information of the user into the ticket and sends ticket to the desired resource. The resource must decrypt the second instance of the session key with its own secret key and revfiews authentication information of the user. The resource was convinced that the ticket came from the KDC because the ticket it received had a copy of the resource's own secret key. Logically, only the KDC should have a copy of the resource's secret key. The resource now "trusts" the incoming ticket because of the encrypted secret key of the resource being on the ticket. The resource also compare's user information in the ticket with user information inserted by the user to ensure the identity of the user.
(2) Tricky step:1 TGS makes another ticket: User authentication information, plus TWO instances of the SAME session key. This ticket goes to user computer. One instance of the Session key gets encrypted with the user's secret key. The other instance of the Session key is encrypted with the secret key of the desired resource.
(3) User computer software (Kerberos) decrypts and extracts one instance of the session key, then inserts authentication information of the user into the ticket and sends ticket to the desired resource. The resource must decrypt the second instance of the session key with its own secret key and revfiews authentication information of the user. The resource was convinced that the ticket came from the KDC because the ticket it received had a copy of the resource's own secret key. Logically, only the KDC should have a copy of the resource's secret key. The resource now "trusts" the incoming ticket because of the encrypted secret key of the resource being on the ticket. The resource also compare's user information in the ticket with user information inserted by the user to ensure the identity of the user.
Some Features and Problems of Kerberos 1
- Does not provide for availability of principals (resources)
- KDC can be a single-point of failure
- Secret keys stored on workstations
- Vulnerable to dictionary attacks
- If encryption is not enabled, the network is not protected
- The KDC should not allow any non-Kerberos network activitiy to take place.
- All prinicipals must have Kerberos software installed
- The KDC must be readily available at all times and must be able to support the number of requests that it receives from all of the principals in the realm.
- It is easier to control and maintain one system responsible for all access requests, so administration can be easier, but at the cost of possible security breeches.
http://www.hitmill.com/computers/kerberos.html
Kerberos and its place in NAS authentication
Kerberos security has been around since the 1980s, but many people are still unfamiliar with how Kerberos works, where it's used and how it may help improve security for users of network attached storage (NAS) resources.
Kerberos, derived from the name of the three-headed dog that guarded the gates to Hades in Greek mythology, was developed as a security project at MIT during the 1980s to help improve network security. Early password authentication and access control lists helped provide security for data within a machine, but passwords sent over a network as clear text for access to remote resources was not secure since it could be "sniffed" or "hacked" by malicious users.
Kerberos authentication:
- Provides "single sign on" for network resources.
- Provides strong authentication services for client/server applications by using key based authentication services rather than passing clear or encrypted passwords over the network.
- Provides a centralized security mechanism for network access.
Kerberos is used only for network-level security, and does NOT provide a mechanism to protect the actual stored files. Operating system level permissions are still required to control access to files. When a user logs onto a network that uses Kerberos security, that user is understood to be a trusted user, and uses that login credential to access all resources the user was granted. Kerberos is now the default network security mechanism used for Windows 2000 and 2003 active directory running in native mode. Traditional NTLM security (which is less secure) is used for "mixed-mode" security to support legacy Windows NT servers.
When using Kerberos security, passwords are never transmitted over the network. Instead, users contact the Active Directory, a Kerberos server or the Kerberos Key Distribution Center (KDC) service, which stores and retrieves all information about security. Clients requesting access to services on another computer, such as a NAS share, contact the KDC directly to obtain their session credentials -- or "ticket" -- to gain access permissions to the network resource.
Windows CIFS-based NAS Resources
If you are using Windows XP to access a NAS share on a Windows server that is using native mode active directory security, then you are probably using Kerberos without even knowing about it. If your network uses "mixed mode" security to provide backward compatibility for Windows NT networks, then you may be using the older and less secure CHAP protocol. If your NAS storage provider allows native active directory integration for security, then they should provide Kerberos security by default.
Unix-based NFS NAS resources
Unix NFS-based NAS resources are a different story. Unless your NAS provider uses NFSV4, it may not be integrated with Kerberos security. Although NFS versions 2 and 3 support Kerberos (version 2 supports Kerberos version 4, while NFSV3 and NFSV4 support Kerberos version 5), they must be integrated with an existing Kerberos server. Also, you need to make sure that your Unix clients (Linux, Solaris, HP-UX, AIX, Tru64, etc.) also support integrated Kerberos security. Contact your NAS provider to find out which Unix clients they support using Kerberos security.
Integrating Kerberos security for access to NAS resources provides an added layer of protection that assures users accessing the network are trusted. Since Kerberos uses keys rather than passwords, network resources are more secure. Kerberos may already be in place for Windows CIFS shares using native mode active directory security. NFS NAS shares need to be integrated with a Unix-based Kerberos server. For more information, visit this MIT Web site about Kerberos.
http://searchstorage.techtarget.com/tip/0,289483,sid5_gci1205412,00.html
http://www.ibm.com/developerworks/aix/library/au-kerbauthent/
Kerberized authentication of Windows Terminal Service
22 Aug 2006
Discover how to configure the Microsoft® Windows® 2003 Server to authenticate Terminal Service users with the IBM Network Authentication Service (IBM NAS) Key Distribution Center (KDC) being hosted on their AIX® 5.3 system. Such a setup not only gives Kerberized authentication for Terminal Service users, but it also allows users to have uniform user IDs and passwords across AIX and Windows Server systems. It allows application developers to exploit the advantages of Kerberos interoperability between IBM NAS and Windows in Kerberized applications spanning across systems.
Kerberos, which provides a secure means of authentication for network users, is one of the most popular authentication mechanisms. Most modern operating systems support Kerberos-based (Version 5) authentication. IBM AIX® 5.3 also supports Kerberos-based authentication.
The IBM version of Kerberos is called IBM Network Authentication Service (IBM NAS), and it can be installed from AIX 5.3 Expansion Pack CDs. IBM NAS for AIX supports both Kerberos clients and Kerberos servers. Many enterprises worldwide use IBM NAS for AIX as the Key Distribution Center (KDC) for their Kerberos realm. It is being used in Network File System (NFS) Version 4 deployment, IBM DB2® Universal Database™ (DB2® UDB™) security, Kerberized AIX integrated login, enterprise-wide authentication, and more.
Today customers generally have a heterogeneous setup, with a mix of UNIX® and Windows® systems. A major challenge for administrators with heterogeneous environments is to have uniform user IDs and passwords across different systems, preferably with a centralized authentication server. Microsoft® Windows Server editions provide a facility called Terminal Services that are widely becoming popular in the Windows world. This facility allows multiple users to log in to a Windows server simultaneously. Microsoft Windows Server editions also support Kerberos-based authentication, which is interoperable with IBM NAS.
In this article, administrators learn how to configure the Microsoft Windows 2003 Server to authenticate Terminal Service users with the IBM NAS KDC being hosted on their AIX 5.3 system. Such a setup not only gives Kerberized authentication for Terminal Service users, but it also allows users to have uniform user IDs and passwords across AIX and Windows Server systems and allows application developers to exploit the advantages of Kerberos interoperability between IBM NAS and Windows in Kerberized applications spanning across systems.
Scenario: IBM NAS KDC on AIX and Kerberized authentication of Windows Terminal Service
We'll use a scenario that takes you through the steps required to set up IBM NAS KDC on an AIX system and have Kerberized authentication of Windows Terminal Service by configuring Windows 2003 Server to IBM NAS KDC.
The following definitions are used in the example in this article:
- Kerberos realm name
- AIXKERBEROS.IN.IBM.COM
- KDC (IBM NAS 1.4)
- hostname: fsaix11.in.ibm.com,OS: AIX 5.3
- Windows Terminal Service
- hostname: windce14.in.ibm.com, OS: Windows 2003 Server (Service Pack 1 with Hotfix for Article ID :902336)
- Kerberos administrator name
- admin/admin
Figure 1 shows the setup of the example.
Figure 1. Example setup
 |
|
Installing and configuring IBM NAS Server on AIX 5.3
This section covers the installation and configuration of an IBM NAS server (Kerberos KDC) on AIX 5.3.
Installing Kerberos KDC on AIX 5.3
IBM NAS is shipped with AIX 5.3 Expansion Pack CDs. To install the IBM NAS server package, install the krb5.server.rte fileset. You can use the following command to install the NAS server fileset:
[root@fsaix11 / ]# hostname |
Then export the following
PATH to ensure that you execute IBM NAS commands from the respective IBM NAS directories: [root@fsaix11 / ]# export PATH=/usr/krb5/sbin:/usr/krb5/bin:$PATH |
Configuring Kerberos KDC on AIX 5.3
To configure an IBM NAS server on an AIX machine, use the command in Listing 1 below. In this example, we're using the legacy configuration, where the principals are stored in a database on the local file system. Instead of the legacy configuration, IBM NAS server can also be configured to Lightweight Directory Access Protocol (LDAP) using an LDAP directory plug-in. For more information on configuration of IBM NAS with LDAP, see the IBM NAS Version 1.4 Administration Guide, shipped with AIX Version 5.3 Expansion Pack CD.
Listing 1. Configuring an IBM NAS server on an AIX machine
[root@fsaix11 / ]# hostname |
Because the Windows Kerberos implementation currently supports only DES-CBC-MD5 and DEC-CBC-CRC encryption types, you need to change the IBM NAS Kerberos server default encryption settings so that the Windows workstations can authenticate to an IBM NAS server. You must make the following changes on the AIX machine (fsaix11.in.ibm.com, in your case) hosting the IBM NAS KDC:
- Edit the /var/krb5/krb5kdc/kdc.conf file and change the value of supported_enctypes to have des-cbc-md5:normal and des-cbc-crc:normal at the beginning of the encryption-type list.
- After editing, the supported_enctypes section of the /var/krb5/krb5kdc/kdc.conf file should look similar to:
supported_enctypes = des-cbc-md5:normal des-cbc-crc:normal des3-cbc-sha1:normal
arcfour-hmac:normal aes256-cts:normal
Restart the AIX NAS server daemons (for example, krb5kdc and kadmind) so that the above encryption-type changes take effect. To restart the AIX NAS server daemons, use the following commands, as shown in Listing 2.
Listing 2. Restarting the AIX NAS server daemons
[root@fsaix11 / ]# stop.krb5 |
Required Kerberos principals for the Windows Terminal Service users
Now you need to create Kerberos principals corresponding to the Windows Terminal Service users (and services) who wish to have Kerberized authentication over the network. In this setup, you want the "administrator" user of the windce14.in.ibm.com machine hosting the Windows Terminal Service to be authenticated using IBM NAS KDC hosted on fsaix11.in.ibm.com, an AIX 5.3 machine. You are required to create administrator and host/windce14.aixkerberos.in.ibm.com Kerberos principals using the kadmin.local command of IBM NAS on fsaix11.in.ibm.com, as shown below in Listing 3.
Listing 3. The kadmin.local command
[root@fsaix11 / ]# kadmin.local |
The administrator is required to create Kerberos principals corresponding to each Windows Terminal Service user that needs Kerberos authentication. In this example, we are demonstrating it only for the "administrator" principal.
|
|
Windows 2003 Server Terminal Services readiness
If you have already deployed the Windows 2003 Server Terminal Server in your environment, all you are required to do is install a Microsoft Hotfix for Terminal Services. For Terminal Services to work well with Kerberized authentication configured to IBM NAS KDC on the Windows 2003 Server, you must install a Hotfix provided by Microsoft for the Windows Server 2003-based Terminal Server.
Once you have installed the Hotfix (or the proposed workaround), you are all set to configure the Windows 2003 Server to IBM NAS KDC and run the Windows Terminal Service with Kerberized authentication. For detailed information on installation and configuration of the Microsoft Terminal Server, see the appropriate Microsoft documentation.
Configure Windows 2003 Server (Kerberos client) to IBM NAS server
After installing the Hotfix, you need to configure the Windows 2003 Kerberos client to the IBM NAS server on AIX 5.3. For that, you need to download the Resource Kit Tools from Windows 2003 Server CD, which installs the Windows Kerberos utilities (ksetup, ktpass, and so on).
To configure the Windows 2003 Server to act as a Kerberos client to the IBM NAS server:
- Make the Windows Server (windce14.in.ibm.com) a part of your Kerberos workgroup by setting it to your Kerberos domain using the
ksetupcommand:C:\>hostname
windce14
C:\> ksetup /setdomain AIXKERBEROS.IN.IBM.COM
- Configure the Windows Server machine to the Kerberos realm by specifying the Kerberos realm name and Kerberos server name, as shown below:
C:\> ksetup /addkdc AIXKERBEROS.IN.IBM.COM fsaix11.in.ibm.com
- Set the local machine account password, as follows:
C:\> ksetup /setmachpassword laurel
This password must match the password used when you created the Kerberos host principal (host/windce14.aixkerberos.in.ibm.com) by invoking
ankfrom kadmin.local, explained earlier. - Map the Kerberos user to a local Windows user. The command below maps the local windows administrator user to administrator@AIXKERBEROS.IN.IBM, a Kerberos principal:
C:\> ksetup /mapuser administrator@AIXKERBEROS.IN.IBM.COM administrator
- Restart the computer for the changes to take effect.
Figure 2 summarizes all the steps executed above on the Windows machine.
Figure 2. Configuration of Windows 2003 Server as Kerberos client to AIX KDC
You are now all set to exercise the Kerberized authentication of Windows Terminal Service users against IBM NAS KDC hosted on the AIX V 5.3 machine. Log in to the Windows Server machine (windce14.in.ibm.com) using the Remote Desktop Connection from any of your Windows desktop machines.
On connection, it presents you with the logon screen for the windce14.in.ibm.com machine. Select Log on to. You should see that the Kerberos realm you created is also present in the drop-down list. Now enter your Kerberos username and the password (in this case, the username is administrator and the password is laurel), select AIXKERBEROS.IN.IBM.COM(Kerberos Realm) in the "Log on to" option, and select OK. This will then carry out the Kerberized authentication process, and upon success will log the Terminal Service user into the Windows machine.
Figure 3 shows the Remote login to the Windows server machine.
Figure 3. Kerberized authentication of Windows Terminal Service users against IBM NAS KDC
This article explains how administrators can use the IBM NAS KDC on AIX 5.3 for authentication of Windows 2003 Terminal Service. This should help simplify administration, and it also allows users to have common user IDs and passwords across AIX and Windows Terminal Service systems.
Tuesday, December 18, 2007
web conference, teleconference
http://bestwebconference.com/en/software-services/web-conferencing/read/gatherplace-cost-effective-when-many-presenters-share-a-license/
http://bestwebconference.com/en/software-services/web-conferencing/read/the-editors-choice-best-of-breed-web-conference-software/?sid=_501pUMtq7pp7BFCz0v9xGraZoTX96U
http://bestwebconference.com/en/software-services/web-conferencing/read/the-editors-choice-best-of-breed-web-conference-software/?sid=_501pUMtq7pp7BFCz0v9xGraZoTX96U
https://www1.gotomeeting.com/en_US/pre/productOverview.tmpl
http://www.adobe.com/products/acrobatconnectpro/
http://reviews.cnet.com/4520-6454_7-6212812-1.html
Subscribe to:
Posts (Atom)