David Mackie's Blue Brain

Password Creation Key Material

2011-10-05T20:43:00.002+11:00

I was reading my RSS Feeds today and saw a post from Wayne Small over at SBS FAQ talking about Passwords and how people store them.
He spoke about a Password Card from Savernova which gives you the beginning of a secure password system. It won’t protect you from a KeyLogger but it might protect a password to a password, which is what I might use it for…
I already use KeyPass for storing and generating my high value credentials so I can just copy and paste into Application and Web Dialogs well ones I don’t already have Single Sign on for (but that is another post)
KeyPass allows me to use a Password to open the Encrypted Password Safe AND I’m Pretty PARANOID (They still might be out to get me) so I store the App and Data on an IronKey that is pretty much always with me. Oh yeah the IronKey is Decrypted with a Password
Now at work I use a Smartcard to login and our user Attributes are set to Require Smartcard so there is no worries about a Password or is there? My SmartCard Pin is an 8 Character Password DAMN
So to login to my Internet Banking I need a 24 Character Password I stored in KeyPass so here goes…
I am tempted to make lots of the passwords the same to make them easy to remember but I work in an Identity Management, Authentication and Security Team hmmm maybe not. Now If I did maybe they might be @BettyisPretty after someone I follow on Twitter (Because that Twitter ID makes me Smile)
Today I looked at Wayne's Card and thought NOT Strong Enough and set about making my own
Here is how I did it:

Create a Constant in Excel and call it Characters
Insert the Characters in your Password Policy: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%^&*[]{}-+
Create a Matrix of Cells I used the same one as the Card from Wayne's post and added some I didn’t think I needed to miss
Copy the Random Selection Formula to each Cell: =MID(Characters,INT(RAND()*LEN(Characters))+1,1)
Put a Border around it like Map Co-ordinates and you are good to go
Print
Laminate and
Insert into your Smart Card Holder

This is not the Matrix I’m using and it changes with each open anyway so make sure you print a spare and save it SECURELY (against Loss not Compromise)
In my Scenario I might use the following to Comply with the ISM (Govt Security Guidance) Complexity Recommendations
Smartcard Pin – I5 Diagonal Down 7 Chars = iR5p7xh
IronKey Password – D9 Horizontal 8 Chars = “&0yfmgk
KeyPass Password – L3 Vertical 8 Chars = V-deJp#3

Open Source Procurement Policy – Reverse Discrimination??

2011-09-05T22:17:00.001+10:00

I was an interested observer when AGIMO published their Open Source Software Policy Principles and recently I asked why are they in my view so one sided… Oh and on Twitter

I do think the Idea is solid but just like so many other things where we try to level the playing field we go to far the other way can’t we just require a detailed evaluation report be produced for all evaluations … Oh Wait

Let me explain

There was a time when I was a bit of a hater when it came to use of Open Source Software and was often heard to say “Open Source is free if your time has no value”. These days I use quite a bit of software not produced by the closed source dynamos.

The Document that I’m wanting to discuss is

Australian Government Information Management Office
(AGIMO) Circular

Subject: Open Source Software Policy

Approved by the Secretaries’ ICT Governance Board on 21 December 2010

Circular No: 2010/004

Now I think the intent is to level a playing field but I’d like to demonstrate how it really is reverse discriminatory.

Principle 1: Australian Government ICT procurement processes must actively
and fairly consider all types of available software.

Australian Government agencies must actively and fairly consider all types of
available software (including but not limited to open source software and proprietary
software) through their ICT procurement processes. It is recognised there may be
areas where open source software is not yet available for consideration.

Can we pretend that I am a Public Servant with a project that includes software? I like that all software types are actively and fairly considered that is great.

Not all requirements will have an Open Source option but how do I determine that?? There will always be someone who has better ~~Bing~~ err Google Foo than I. Am I responsible for an exhaustive search or is an ATM in ausTender the end of my responsibility?

Closed Source Vendors either respond or not this should apply to Open Source Vendors too in my view.

Principle 2: Suppliers must consider all types of available software when
dealing with Australian Government agencies.

Australian Government agencies will require suppliers to consider all types of
available software (including but not limited to open source software and proprietary
software) when responding to agencies‟ procurement requests.

Agencies are required to insert this requirement into their tender documentation.
Suppliers will need to provide justification outlining their consideration and/or
exclusion of open source software in their response to the tender. Agencies will
determine compliance with this requirement when assessing tender responses.

I have enormous problems with this Principle…

We provide solutions we are expert in implementing and supporting we do not pretend to be all things to all people.

This Principle forces two outcomes:

Justification of consideration and/or exclusion of open source software. This forces a bidder to say something negative in order to be compliant either:

We are not able to provide breadth of services or (not great about the bidder)
All other options but the one we are pitching are inferior AND BTW we have checked them all (arrogant and maybe actionable)

I’d much prefer to talk about benefits of our solution and not even talk about things that don’t enhance the evaluation teams understanding of our capabilities.

An evaluation team needs to decide about non compliance based on this requirement. What if a bidder says “we did not consider ANY open source options because we believe our closed source partner fits the requirement” is this a non compliant bid? Should IBM be required to explain why they did not pitch Exchange in place of Domino? or Vice Versa

Principle 3: Australian Government agencies will actively participate in open
source software communities and contribute back where appropriate.

The Australian Government, through AGIMO, will actively seek to keep up-to-date
with international best practice in the open source software arena, through engaging
with other countries and organisations. Australian Government agencies should also
actively participate in open source software communities and contribute back where
appropriate.

I have no problem with Principle 3

The Key points I think are fantastic except Point 4. I think it needs work and hopefully I will have explained my position adequately enough to help someone smarter than me to redraft something a little better.

Key Point 4. Agencies should consider re-using existing software assets before acquiring either open source or proprietary software.

I think the decision to reuse existing assets is often not taken due to fear of being accused of not being open to the market, particularly when software licencing bundles include features where there are vendors of niche software now commonly included in most operating systems.

This usually makes Departments go to tender to seem impartial and then something unexpected happens, nobody bids the product / feature that is bundled because you can’t sell someone something they already own.

This is a shame because the bundled product often needs to be disabled at risk to the solution and expense, all because the evaluation team has no option but to say if the vendor wanted us to use their product they would have bid it.

This really is a big issue not strictly related to OSS but I’m sure a frustration for IT Teams who if they could, would in house bid the product they have and can manage best.

Of course they shouldn’t have to.

Are you coming to InfraSat in BrisLantis? I am

2011-09-03T13:37:00.000+10:00

Last year I had the opportunity to attend Infrastructure Saturday in Brisbane and remember having a fantastic day.

There is a call for topics coming soon and not certain I won't want to talk, maybe format and something interesting to say will be my limiting factors.

Perhaps I should talk to Shane and Alan about a session where folk get to pitch an idea or a project they would like to get off the ground and would want some help collaborating on, kind of the 2-5 minutes pitches at the end of Bar Camp

Any way if I were to talk about anything it would be Identity and Access Management or Run Book Automation or maybe BOTH how about System Center FIMhestrator ????

I'll be having a think about what I could do and maybe you should too. Last Year I saw the first Public Presentation by the Molk and I hope not the last by any stretch.

ANYWAY it all starts with registration and ends with Beer on Saturday Night so are you interested ...

UPDATE:-

With the Quick Pitch Session idea I was meaning …

Something like Teachmeet sessions

Micro-presentations - lasting 7 minutes
Nano-presentations - lasting 2 minutes

Micro Presentations could be a Quick Tip / Idea / Best Practice and a few Minutes Q&A

Nano Presentations might be I have been thinking about how we might build Blah here are the beginnings of the requirements… Can we collaborate on Documentation, Automation, Design. Who's with me?

Thanks GFI and Jinx

2011-07-05T19:06:00.000+10:00

I entered a draw for a free T-Shirt some weeks ago and I buy tons of Jinx T-Shirts too. Today I got an I’m a Tech Blogger T-Shirt from GFI and a Sticker Pack from Jinx so to express my Gratitude and Joy I have made this my Photo 365 Project snap for today.
Had they not come it would have been something else.

I am really glad to have been selected by GFI for the T-Shirt and Best get back to blogging more on my Tech Blog

Of course as I have said before I love Jinx and almost exclusively wear their T-Shirts so if you click the Banner Below when you order I’ll get a small amount of Jinx Gold for my very expensive habit

We got a new Wall Plaque today

2011-07-05T18:45:00.001+10:00

We are Proud to be a Microsoft Small Business Specialist thanks Microsoft for persisting with this program we are very glad to be a part of it…

I have been participating in Photo 365 Project on my Personal Blog so expect some leakage of this fun project over here.

Welcome to CEP Season #CMCEP #SCOrchCEP #FIMCEP

2011-06-18T21:46:00.001+10:00

Am I a real sucker? Maybe from the perspective of getting up at 1AM twice a month for each product but it is part of our master plan for Server and Identity World Domination.

Last night the System Center Orchestrator (was Opalis “O + a place where a king or Queen would live” ) 2012 Beta was released and Thursday night was the Kick Off.

I am already on the Config Manager CEP and when I’m done I hope to be on the following CEPs:

Config Manager 2012
Orchestrator 2012
FIM 2010 R2

and having spoken to a mate of mine, I am considering Late Application to a couple more

OPS Manager 2012
Virtual Machine Manager 2012

So to be that big a Geek I need to redo my lab in preparation so here we go…

I need a Active Directory Forest and will need Exchange 2010 for some of the FIM scenarios and I don’t want to mess about too much so being an SBS’er from way back I have installed SBS 2011 Standard Edition will probably load SQL 2008 R2 on there to support the rest of the environment.

Of course the rest of the environment will be built on Windows 2008 R2 and have built a template so I can just spin them up.

My plan is to try out some things around content creation and publishing but will do what I can because I need to learn these platforms as well as the main game of participating in the CEPs. If I can fit in the learning I will be experimenting with presenting the content on a Joomla platform (for collaboration) and creating some e-learning using Moodle

I had planned on doing some of these things last Christmas but got quite sick and had to stop some of my activity at that time and never got back to it, so I’m really trying to say this stuff is really for me and if I stop abruptly that’s life in a big city.

Oh course the plan is the plan so here we go.

BTW Most of the CEP Programs have a competition running for Tickets to Microsoft Management Summit 2012 and yes I want to good news is the rules say Posts can be positive or negative so rest assured if I don’t like a feature I can and will say so.

iPad2 my first day or two

2011-04-26T09:57:00.000+10:00

I have been REALLY outspoken about the iPad and Apple platform in general. Well I bought an iPad2 and am starting to realize that some boys marry their first girlfriend because they just know it is right. Not just because they are desperate nerdy losers. I'm not quite there yet.

Not saying I'm ditching my PC and only using the iPad there are lots of applications that I need that are Windows only, oh and BTW I have mentioned I make my living designing and deploying Windows based networks.

So are there other platforms? You bet and for slate type tablets there is he rise of Android, I've played with a few recently and have even loaded a Gingerbread (Android 2.3) ROM on my HD2 so I'm not afraid to play around a little. I have found most of the devices I've played with a little clunky and well heavy too.

So far I'm liking the experience and will take it to work for a few days I also plan to log when I use one of my droid devices and of course when I use Windows it is a given I'll be in Windows at work mostly.

BTW These are the Apps I “Think” will let me do most things I do Daily

Flip dies after two years at Cisco.

2011-04-13T07:33:00.001+10:00

I bought a Flip before TechEd last year and I love it.

Cisco will kill off its popular Flip high definition video recorder as part of a wider realignment of its consumer business

What a shame it didn’t seem to have a future. While I agree that HD Video will soon be a standard phone feature…

My Flip has a Tripod mount and HDMI output which I would miss also the “Flip” up USB connector lets me transfer and change anywhere my PC is.

Probably wouldn’t buy one now at the Death Knoll BUT if it were really heavily discounted I’d maybe snap one up.

Source: iTnews Australia

#BCC2011 How to Handle Difficult Clients

2011-03-22T23:05:00.001+11:00

One of the best sessions I went to at Bar Camp Canberra 2011 was “How to Handle Difficult Clients” by Danni (@daniib) and Jason (@jhando).

I found them both to be engaging speakers although it was mostly a conversation. Which gave me some insight into what it might be like to be a client ish.

I took quite a few notes and rather than retype and reimagine these are the notes as I took them

BTW I thought the session was great and some other folk spoke to me about it later and Lurved it too

Andy Clarke’s Killer Contract

Andy Clarke 24 Ways

Merlin Project Method

The Tyranny of Email Standards

2011-03-11T19:17:00.001+11:00

Funny this happened mostly due to poor email addressing standards

In order to do get uniqueness some environments create standards which make it hard for users to find each other. In this case I am Mojo_moj180.Jojo@smemanaged.com for example but there is a mojo.jojo@smemanaged.com neither are real BTW

So when people search for mojo they just get one hit and it is not me because nobody has a first name of mojo_moj180

So you can imagine how I lost it when I saw this today…

Fw: Amen!

Buttercup_bum215 Utonium

to:

Mojo_moj180 Jojo

11/03/2011 11:09 AM

#fail
With thanks,
Buttercup Utionium

Crime Fighter Prior to bedtime

----- Forwarded by Buttercup_bum215 Utonium on 11/03/2011 11:08 AM -----

From:	Mojo Jojo
To:	Buttercup_bum215 Utonium
Date:	11/03/2011 11:00 AM
Subject:	Re: Amen!

Hi Buttercup
Wrong Mojo Jojo - but I like your goals for today.
thanks
Mojo Jojo

From:	Buttercup_bum215 Utonium
To:	Bubbles Utonium, Blossom Utonium, Rowdy Rough Boy, Mojo Jojo
Date:	11/03/2011 09:50 AM
Subject:	Amen!

With thanks,
Buttercup Utionium

Crime Fighter Prior to bedtime
Have a great day!

Just noticed only 59 Places left for BarCamp

2011-02-27T13:04:00.001+11:00

Just in case you though we were talking about Geeks in the Pub which is a worthy endeavour too…

You might want to look at the venue and topics below. Maybe even the WikiPedia page

Seems like it will be a great day and here’s hoping my Bogan Year 10 Education won’t be the limiting factor. I guess I can guarantee you a battle of wits with the unarmed so everyone will be able to contribute.

BarCamp Canberra 2011 is on like…

For the 4th year BarCamp Canberra is on!
With a brand new shiny venue in the ANU College of Business and Economics (Building 26C), we’re ready for a big day on 19 March, with room for 150 people to present, network, chat, listen, debate and share their visions, ideas and knowledge.
As ever, depending on you, the attendees, we’ll have speakers on topics such as:
Social Innovation, Gov 2.0,
Web, Design, Makers/Hackers,
Science Communication,
Skeptic/Critical Thinking,
Sustainability/Environmental,
interdisciplinary topics and more.
Sign up now for BarCamp Canberra 2011

BarCamp Canberra

Config Manager 20xx Walkthrough–How will this happen?

2011-01-01T15:22:00.001+11:00

Since I started talking about doing this I have had two significant Medical Setbacks but here we go. I have been able to go a few hours at a time without crashing so I’m going to blow out how long this takes but I’ll get there eventually.

So I’m going to walk through SCCM 2007 R3 AND SCCM 2012 beta 1 and blog the experience along the way.

To make it a useful aid for folk wanting to learn SCCM 2007 well enough, but also get a start on where they will need to be with SCCM 2012.

I’m going to follow some training I have and mix in knowledge from a book I have on my Kindle. Oh and stuff I find as I encounter problems.

As I cover it in both media I will cover it here.

The Training is:

Is this an evil plan to create content that competes with either of these sources? Err um NO I bought them and have found value in them I’m really just trying to walk through a learning process and force my self to cover the content differently so I know I have to whole picture myself.

We have already covered Installation:

so next stop Configuring Discovery

David Mackie's Blue Brain: Part Responsibility, Part CBT and a bit cause I can.

Small Agency Mentoring Program #AGIMO

2010-12-12T23:03:00.001+11:00

I recently began following John Sheridan from AGIMO and since I’ve not followed much of what he has been doing since I was in Defence, I took a peek back through his Twitter Feed in as non stalkerish way as possible (BTW Days NOT Years) came across a link to the Small Agency Mentoring Program (SAM).

Mentoring programs like SAM are important because they help to build the capability of the APS by strengthening cross-agency relationships and developing future ICT leaders. For more information on mentoring programs supported by the Department of Finance and Deregulation please take a look at the website:

I’m an IT Contractor and have been for many years and the thing I find all over is Infrastructure People in Agencies both big and small have very little clue who their peers are, let alone what they can share with each other.

I notice Mentoring Programs for SES and Women in IT both of which I’m very supportive.

I wonder if Agencies are to do more with less how do Technical Leaders (Contractors too) get to network and share with each other.

I use Facebook, LinkedIn and even Twitter to extend my contacts in my field and locally try to connect widely with my peers. I am aware that there is some nervousness from Agency Security Advisors about public social networks and I understand why they think they should be nervous however are we not talking about professionals.

I guess I’m proposing Public Social Networking for an Essentially Closed Population. Not seeking to provide an answer but wonder how to discuss this sensibly.

What I’m saying is good job going as far as you do. How do we grow that???

Comments OPEN

Small Agency Mentoring Program | AGIMO Blog

Installing SCCM 2012 Beta 1 on W2K8 R2

2010-12-09T23:04:00.001+11:00

This Quick Install guide covers the steps to get to the Green Checks of Goodness.

DO NOT FOLLOW THIS GUIDE LET ME POINT YOU TO A BETTER ONE

IF YOU ARE STILL Reading this you should be going to Horold Wongs Blog by now.

Best Practice or other stuff will come as we get to it. BTW this is Beta 1 so Salt Grains and NO Promises

After Downloading CM v.Next Beta 1 Run Splash Click Install
Click Next
Select Install a Configuration Manager Primary Server Site Click Next
Accept the Licence Terms Click Next
Browse to and create a directory to store the Updates Click Next
This will take a while depending on your connection speed
Enter a Site Code Enter a Site Name You will want to Install and Admin Console so Click that too. Click Next
Select Standalone Site *Done for Simplicity and wondering how I would do hierarchy remodelling later I'm sure there will be a process.* Click Next
*Selecting Mixed Mode is of course the easiest way to go due to a requirement for Certificate services in Native Mode. I really just wanted the opportunity to post about conversion later.* Select Mixed Mode Click Next
Check the SQL Server Details Click Next
Check the SMS provider name Click Next
Check the FQDNs for the Management and Distribution Points Click Next
We will do NAP later Click Next
Because it is a beta Yes is selected by default Click Next
Click Next
Install all Pre Requisites DotNet Frame work 4.0 is a requirement; ensure you download it from Microsoft Update Prior to Installation.
Change Directory to e:\ServerSource\ConfigMgr 2012 Beta 1\SMSSETUP\BIN\I386 Right Click extadsch to extend the Schema
Run ADSI Edit
Connect to Domain
Select System Select Action > New > Object
Select Container Object Type Click Next
Type System Management Click Next
Click Finish
Select System Management Right Click Select Properties
Select Security
Click Add
Click Object Types Select Computers Click OK


Enter the Server name Click OK
Select the Servers Computer Account Select Allow Full Control Click Advanced
Select the Server Account Click Edit
Select This object and all descendant objects Click OK Click Apply Click OK Click Apply Click OK
Exit ADSI Edit

Install WSUS 3.0
Open Server Manager Select Roles Click Add Roles
Click Next
Select Windows Server Update Services Click Next
Click Next
There is a check for updates here *Make sure you have Internet connectivity or it will fail....* Click Install
Click Next
Accept the Licence Agreement Click Next
Click Next
Select a Drive with lots of space Click Next
Store the Database in the SQL Server Instance installed for Config Manager Click Next
Click Next
Select Create a WSUS Update Web site Click Next
Check the Details Click Next
Watch the Install
Click Finish
Cancel the Wizard We will configure WSUS Later
Click Close

I used an older Lab Deployment Kit so it had a slightly out of date SQL build so the installer called for a Cumulative patch. Just included for completeness, you know what? Not gonna do a SQL Patch bit just patch ya stuff before install.
Welcome Back
Clear all the issues, I Left the firewall rule to show not everything is a show stopper Click Begin Install
Look at all the Pretty Green checks Click Next
Of course you want to launch the console but … I did a quick reboot just to be sure. Oh and log checking Seriously??? Click Finish

Upgrading System Center Configuration Manager 2007 SP2 to R2 & R3

2010-12-09T21:07:00.001+11:00

Upgrading to Config Manager 2007 R2 & R3 is really straight forward but you will want to request the HotFix in KB977384 before starting.

Start the Config Manager R2 Upgrade
Select Accept Click Next
Click Next
Click Next
Click Finish

Now Upgrade to R3
Start the Config Manager R3 Upgrade
You will be prompted to get a HotFix from Microsoft Start the Install Click OK
Click Next
Select Accept Click Next
Click Install
Wait for the Upgrade to finish this should be quite quick
Select Yes
Click Next
Click Next
Click Next
Click Finish
Start the Config Manager R3 Installer
Click Next
Select Accept Click Next
Click Next
Click Next
Wait for the Install to finish
Click Finish

Installing SCCM 2007 SP2 on W2K8 R2

2010-12-08T21:54:00.001+11:00

Check and Install System Center 2007 SP2 Pre Requisites

Insert the Configuration Manager 2007 SP2 CD Click run the prerequisite checker
Enter the SQL Server and Config Mgr Server names Click OK
We need to do some work to get Config Mgr installed.
Change Directory to D:\SMSSETUP\BIN\I386 Right Click EXTADSCH.exe run as Administrator
Now Create the System Management Container
Run ADSIEdit
Connect to the Domain
Expand Domain <computer fully qualified domain name>, expand <distinguished name>, right-click CN=System
click Action, New, and then click Object
Select Container Click Next
Type System Management Click Next
Click Finish
Select System Management Right Click Select Properties
Select the Security Tab
Click Add
Click Object Types
Select Computers Click OK
Enter the Server name Click OK
Select the Servers Computer Account Select Allow Full Control Click Advanced
Select the Server Account Click Edit
Select This object and all descendant objects Click OK Click Apply Click OK Click Apply Click OK
Exit ADSI Edit

Install the Windows Server Update Services 3.0 Role

Open Server Manager Select Roles Click Add Roles
Click Next
Select Windows Server Update Services Click Next
Click Next
There is a check for updates here *Make sure you have Internet connectivity or it will fail....* Click Install
Click Next
Accept the Licence Agreement Click Next
Click Next
Select a Drive with lots of space Click Next
Store the Database in the SQL Server Instance installed for Config Manager Click Next
Click Next
Select Create a WSUS Update Web site Click Next
Check the Details Click Next
Watch the Install
Click Finish
Cancel the Wizard We will configure WSUS Later
Click Close
Return to the Pre Requisite checker
Press Run Check Click OK

Install System Center 2007 SP2

Insert Configuration Manager 2007 SP2 CD Select Install Configuration Manager SP2
Click Next
Select Install a Configuration Manager site server Click Next
Accept the Licence Terms Click Next
Select Custom settings Click Next
Select Primary Site Click Next
Participate or not Click Next
Enter your Licence Key… It might even be entered already Click Next
Click Next
Enter Site Code Enter Site Name Click Next
Select Mixed Mode *I want to cover converting to native Mode Later so will Run Mixed BTW Mixed is Simpler* Click Next
Select Client Agent Settings *NAP is not a default and I might cover it down the road* Click Next
Select the SQL Server *I am told hosting on the ConfigMgr Server is “Better Practice”* Click Next
Select the SQL Server Click Next
Check Install a management point is selected Click Next
Select use default port (80) *See wasn't it lucky we changed the WSUS Port* Click Next
Click Select Updates Click Next
Select a path in the ServerSource directory Click Next
Updates will be downloaded *This may take some time*
Click OK
Check Details Click Next
Prerequisite Check shows WebDAV errors
Open Server Manager Select the Web Server Role Add Role Services
Select WebDAV Publishing Click Next
Confirm the Roles Services are correct Click Install
Click Close
Click Run Check You should get a Green Check DO NOT CLICK Install Yet
Configure WebDAV Once you finish this you can go back to Click Install
Open the WebDAV properties on the Default Website
Click Enable WebDAV Click Add Authoring rule
Select Allow Access To: All Content Select Allow access to this content to: All Users Select Permissions: Read
Click WebDAV Settings Set Property Behavior: Allow Anonymous Property Queries = True Set Property Behavior: Allow Custom Property = False Set Property Behavior: Allow Property Queries with Infinite Depth = True Set WebDAV Behavior: Allow Hidden Files to be Listed = True
Open C:\Windows\System32\inetsrv\config\applicationHost.config in Notepad Set file extension .mdb to True in the <requestFiltering> section
Re Run the PreReq Check Click Begin Install
This time you can Click Install

Watch the Magic Happen
Now look at all the Green Check Goodness
Check Logs if you are a Nerd Click Finish
Of Course all Green Checks speaks volumes

Part Responsibility, Part CBT and a bit cause I can.

2010-12-08T21:29:00.002+11:00

Did you know there seems to be a skills shortage in Canberra right now?
I am the Architect for a Major Microsoft Modernisation Project and it turns out Smart Guys who know Microsoft Technologies generally and System Center specifically don’t grow on trees.
The really important thing in my opinion is what gets left behind after a project as far as skills transfer. So since we had Microsoft Consulting help with the design, I need to help with Deployment and Ongoing Management. Kind of keen to see if the guys on the project follow along with me.
So here is a Bizzaro Plan…
I signed up to the Config Manager (vNext) 2012 Community Evaluation Program #CMCEP but found the idea of Themes on Features kind of OK but wanted to explore a little on my own and contrast features for a roadmap piece. So I’m going to walk through SCCM 2007 R3 AND SCCM 2012 beta 1 and blog the experience along the way. Might do OPS Manager 2007 after Christmas too.
First Stop Installation.

For Starters I don’t know you….

2010-12-08T21:24:00.001+11:00

I sometimes wonder about how people make decisions about who they trust and what solutions they implement. I meet lots of people, especially small business people who quickly hand over Admin Passwords and even allow remote access to their servers, minutes after meeting with me.

I’m pretty sure that I don’t make folk this comfortable on first meeting but you can decide for your self. –>

"For starters, I don't know you, therefore I don't trust you."
"The world's full of people you don't know."
"I worry about that all the time."

Lochley and Garibaldi in Babylon 5:"Strange Relations"

Document Holder – How to do it yourself #movember

2010-11-29T14:47:00.001+11:00

One of the Tech Writers where I am currently doing a gig is doing Movember and has been “Selling” things for donations. This one got my attention today so if you use it donate. Instructions at the bottom of the “Task Card”

Keep up the good work Bob

This doco holder is quick and easy to make.

It is a lot stronger than most other types and you can confidently put a full 2-ring binder on it.

All you need is a paper box with lid, a craft knife (box cutter) and tape.

The Executive model needs a large fold-back clip.

Take off the lid and use it as template to
mark where to cut on the first side.

Use the cut-off scrap as a guide to
cut the second side.

Make two cuts on the lid, and fold it back, as shown.

Fit lid over the base and tape it on.

Tape on the lid.

Some people prefer staples as they are environmentally friendlier.

Executive model

Put a sheet of A4 paper on the holder.
Mark the top of the paper.

Cut away a chunk of cardboard above the A4 sheet

Attach clip.

Sit back and smile J

Remember to donate (pay for this taskcard) to Bob T’s Movember effort.

Pay online on-line with credit card or PayPal account at
http://au.movember.com/mospace/1139044/

Does being small make companies more agile #tegav2

2010-11-24T22:19:00.001+11:00

ViewSonic will be launching their ViewPad Series of Tablets in Australia next week but won’t be shipping them for a while longer.

The 10-inch version of the ViewPad has at least one specification that gadget hounds will be unimpressed with — unlike the 7-inch model, it runs Android 1.6, a prior model of the operating system which was first released in September 2009.

Also unlike the ViewPad 7, the ViewPad 10 appears to be a pure Wi-Fi device, with no 3G connectivity.

However, unusually for an Android tablet, the device also dual-boots Windows 7 Home Premium. It comes with a 1.66GHz Intel Atom CPU, and 1GB of memory onboard, with a 16GB SSH hard disk and expandable micro SD slot. It has a 1024x600 LED backlit screen with capacitive multi-touch, and a 1.3 megapixel camera on the front.

Of course if I understand the article correctly there seems to be one version of the 10” model which is very different to the plethora of options available with the Tegatech version (Tega v2). Sadly the option specified is one we will never ship.

Synergistic Network Solutions is a Networking Solution Provider, we only offer Windows 7 Professional and in configurations that will offer the best corporate computing experience. So we will not ship a Windows version with only 1GB RAM or a 16GB SSD

So what is this rabbiting on about agility?? Hugo has delivered the same base hardware and a month ahead of the competition even in other markets.

Many of the options offered in the Tega v2 are directly due to customer feedback and I really wish Hugo was ready to talk about the Tega v2.1 as I am expecting good things.

We have even been reselling them for a while now. We sell 13 Versions, less than Tegatech (our distributor) but in a range that would suit most professional buyers.

I had hoped that the ViewPad 10” was going to be so close that we would be able to dual source allowing for stock stability but with the early news the Tega v2 seems to be a clear winner even on Identical Hardware.

Oh there is no Pricing yet but I’d expect around $1000 if I were to add Windows Home Premium OEM to the Basic No OS version of the Tega v2

ViewSonic to bring ViewPad tablet to Aus - Hardware - News

Silly headlines …. #NBN

2010-11-22T14:17:00.001+11:00

Saw a headline that seems to try to say that the Opposition Communications Spokesman has in some way got a problem in holding shares in an IT company.

Turnbull holds $10m network conflict

Phillip Coorey | THE opposition communications spokesman, Malcolm Turnbull, has a $10 million investment in an information technology company which, its managing director says, stands to reap ''new wealth'' from the Labor government's $43 billion national broadband network.

Can I extrapolate that if his personal interests ‘might’ suffer given his want for a more transparent, more heavily scrutinised process around spending $43 Billion of public funds, he might actually be acting in the public interest, exactly what he should be doing?

Happy that the article also seems to articulate this view.

The bit that scares the crap out of me is we are building a public company to be a monopoly player in broadband, without a publically available cost benefit analysis and the greens have just done a deal preventing the government from privatising it without a similar set of circumstances.

SO there might be a flawed case to spend $43 Billion meaning we might not get value for money. When we realise it is a white elephant there will need to be proof that there is value in the sale before we can stop bleeding cash in a hole.

Wow that seems like risk to me.

Of course the exposure of shareholders acting to effect the business outcomes of the business they hold shares in is another issue and one that might be a more serious personal conflict.

Games Meh but XBox Kinect in every Board Room #messaging

2010-11-20T09:31:00.002+11:00

I’m no big gamer I just don’t have the time so when I do set aside enough time it tends to be something like a retro game of Age of Empires or Diablo so XBOX has not been a big focus for me.Well except for the version 1.0 I have with XBMC loaded.
I have been focusing on how my customers might get value from messaging systems that extend what they already do and the Tandberg Systems they have been putting in are kind of sweet. Well not really the Tandberg kit more the 60” plasmas (3D, SD & USB plus divx)
Imagine my surprise when I saw …

In a move that surprised practically everyone, though, Microsoft also said that users of Lync (and Office 365) will be able to videoconference with home users of XBox game machines through Kinect, a new camera peripheral that tracks users' movements in a room using infrared (IR) wireless.

Now I wonder if we need to gateway this through XBox Live or if we can directly integrate with an in house Lync 2010 System?

Microsoft will also add the shared videoconferencing capabilities for Kinect through a software update.
Corporate Lync customers can ditch their old PBX and phone systems to run Lync entirely on one or more servers. Alternatively, they can hold on to these legacy systems and interface them to Lync through gateways

Here’s to hoping that the firmware updates allow us to point to our own system if they do I can see big potential.
Plus so interesting XMAS parties in future.

Source Betanews.com

Default File System Permissions …..

2010-11-16T00:41:00.001+11:00

If I had a Dollar for every time I was asked what are the default File System Permissions for … I’d have about $35 but in the spirit of if you do it more than once then Automate it let’s play with iCACLS and document a few OS’s.

Now in fairness the OS that gets asked about the most is SBS but it also takes a while to install plus SBS 7 is still beta so I will do SBS 2008 SP2 and a first cut of the beta in a few days.

The first two are Windows Server 2008 and Windows Server 2008 R2 are pretty easy …

I ran iCACLS against two servers I built from scratch and did nothing but change the admin password on install.

Windows Server 2008 SP1

C:\>icacls c:\ /T /C /Q > W2KSP1-SystemDriveACLS.TXT

C:\>icacls c:\ /save W2KSP1-SystemDriveACLBackup.TXT /T /C /Q

C:\>icacls E:\ /T /C /Q > W2KSP1-DataDriveACLS.TXT

C:\>icacls E:\ /save W2KSP1-DataDriveACLBackup.TXT /T /C /Q

Windows Server 2008 R2

C:\>icacls c:\ /T /C /Q > W2KR2-SystemDriveACLS.TXT

C:\>icacls c:\ /save W2KR2-SystemDriveACLBackup.TXT /T /C /Q

C:\>icacls E:\ /T /C /Q > W2KR2-DataDriveACLS.TXT

C:\>icacls E:\ /save W2KR2-DataDriveACLBackup.TXT /T /C /Q

Looking at the outputs

I needed to clean up the output so used Excel to help out. I have included the output from the W2KSP1-DataDriveACLS.TXT

E:\ BUILTIN\Administrators:(OI)(CI)(F)
    NT AUTHORITY\SYSTEM:(OI)(CI)(F)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    BUILTIN\Users:(OI)(CI)(RX)
    BUILTIN\Users:(CI)(AD)
    BUILTIN\Users:(CI)(IO)(WD)
    Everyone:(RX)

Turns out the default Perms for a newly formatted drive in 2008 R2 are identical.

What do all those Perm IDs mean? The help in iCACLS lists them as ..

perm is a permission mask and can be specified in one of two forms: a sequence of simple rights:
               N - no access
               F - full access
               M - modify access
               RX - read and execute access
               R - read-only access
               W - write-only access
               D - delete access
       a comma-separated list in parentheses of specific rights:
               DE - delete
               RC - read control
               WDAC - write DAC
               WO - write owner
               S - synchronize
               AS - access system security
               MA - maximum allowed
               GR - generic read
               GW - generic write
               GE - generic execute
               GA - generic all
               RD - read data/list directory
               WD - write data/add file
               AD - append data/add subdirectory
               REA - read extended attributes
               WEA - write extended attributes
               X - execute/traverse
               DC - delete child
               RA - read attributes
               WA - write attributes
       inheritance rights may precede either form and are applied
       only to directories:
               (OI) - object inherit
               (CI) - container inherit
               (IO) - inherit only
               (NP) - don't propagate inherit
               (I) - permission inherited from parent container

The content of the other files will be published after more testing of ACL Restore Process to other servers. Even then please test in a Dev Environment before deploying to a server you care about.

I promised a Web Store Relaunch … #tegaV2

2010-11-14T16:42:00.001+11:00

We used to sell quite a bit of product on our Web Store but when the GFC hit and the Dollar was so all over the shop we couldn’t keep up, it seemed like such a hassle and so not core to our real consulting business goals.

Since the Tega V2 started shipping I think we can start up again slowly, so you will notice just the V2s with other lines being introduced over he next few weeks.

If that is not platform commitment I don’t know what is, plus we have some what I think are good prices so have a look and check back as we add product.

I am often asked about my toys… #TegaV2 #WinDroid

2010-11-13T22:18:00.001+11:00

Sometimes people notice that I have a HUGE gadget budget so I get asked a lot about the toys I carry.

You might have noticed I have blogged a little bit about the Tega V2 lately and in full disclosure I am a reseller. Let’s not focus on that too much when we can focus more on how hugely the platform is taking off.

Of course if we were looking for a place to hang out and chat about a single device I would expect the OEM to do that but for a community to build around a platform there needs to be somewhere for that too.

SO I have just stood up a Google Group for talking WinDroid. Anyone who has a Windows Tablet / UMPC is welcome, also the growing Android powered community is welcome too. Now if you have BOTH like the Tega v2 then you are double welcome.

Subscribe to WinDroid Tablets

Email:

Visit this group

Also because I am also an Infrastructure Guy we might talk about some of the manageability challenges and even some of the stuff coming in Microsoft System Center Configuration Manager 2012 to help really integrate these devices.

Take off the lid and use it as template to mark where to cut on the first side.
Use the cut-off scrap as a guide to cut the second side.
Make two cuts on the lid, and fold it back, as shown.
Fit lid over the base and tape it on.
Tape on the lid. Some people prefer staples as they are environmentally friendlier.
Executive model Put a sheet of A4 paper on the holder. Mark the top of the paper. Cut away a chunk of cardboard above the A4 sheet
Attach clip. Sit back and smile J