Archive for Q&A
Q&A from Kerio Connect Webinar
Posted by: | CommentsThe following is the Q&A from the today’s Kerio Connect webinar with Eriq Neale. The recording of the webinar will be available in the store later in the week.
Question: Shouldn’t we be using the 64 bit version?
Answer: Kerio Connect is 32 bit, but supports also 64 bit in compatibility mode
Question: So you are saying that the 2nd IP address on the NIC and 2 available Public IP Addresses are a REQUIREMENT (minimum needed) for this product’s implementation or this is unique to Server 2008 Foundation?
Answer: Only if you want two different web applications on the same box. Otherwise you can run one of the two web services on a non-standard port
Question: Think this will work on a WHS box?
Answer: Yes you can run Kerio Connect on Home Server
Question: Since this product uses an AD connector, will it require a step for AD and then in Kerio to add a new user?
Answer: Answered live.
Question: Outlook 2010 supported?
Answer: Yes, Eriq is using Outlook 2010 live now.
Question: The Kerio connector setup screens all referred speicifcally to Outlook *2007* – that’s why I asked about Outlook 2010 So Outlook 2010 support is a qualified ‘yes’?
Answer: yes, with the limitation I just decribed regarding the Kerio settings dialog
Question: Migration from Exchange? Migration back to Exchange from Kerio Connect?
Answer: Answered live.
Question: Shared calendars and contacts?
Answer: Demonstrated live.
Question: Client is thinking about repurposing a Win2000 Pro wkstn. Thoughts?
Answer: Windows 2000 Extended Support ended 2 days ago (July 13, 2010) so running a production mail server on a non-supported box probably isn’t a good idea.
Question: Is there a benefit to use Kerio over Exchange on an SBS 2003 network or would this be a potential change to make when upgrading server hardware?
Answer: Answered live.
Question: On whs, you could presumably use different ports so as to not conflict with the remote access web site?
Answer: Yes, you could use different ports, but that would keep you from being able to use ActiveSync internally and externally. You could manually configure Outlook to use the differnet ports as well as Internet Explorer, but some tools cannot have their port configurations changed and wouldn’t work in that scenario.
Question: Can you talk about DR and support (DR or just generall support) from Kerio (8-5, paid, included, email only, etc.)?
Answer: Answered live.
Question: Any anti-spam features?
Answer: Yes. You can get more details at http://www.kerio.com/connect
Q&A from Hyper-V 101 Webinar
Posted by: | CommentsHere is the Q&A from April’s Hyper-V 101 Webinar hosted by Wayne Small
Question: How does Hyper-V deal with servers where memory is “assigned” to a specific processor? Is all the memory and the cores just accumulated automatically or is there something that needs to be configured?
Answer: It is a configurable option. Wayne is actually going to cover this later in the presentation.
Question: Microsoft Hyper-V Server 2008 R2 (the free edition) does not have the memory limitations as the non-R2 version had.
Answer: thank you for that information
Question: check http://www.microsoft.com/hyper-v-server/en/us/default.aspx for a R2 Comparison Chart.
Answer: Thanks Tim!
Question: You no longer need to know command line to run the free Hyper-V Server 2008 R2, check out the Core Config tool at http://coreconfig.codeplex.com
Answer: This is a community created add-on, not a feature of the product but a good reference none the less. Very few people are good at command line server management anymore.
Question: Is it ok to put a file share – not app – on the Hyper-V host without license issues?
Answer: I will ask Wayne this question at the end.
Question: Charlie Russel and Craig Zacker’s “Introducing Windows Server 2008 R2″ book is available as a free eBook – http://blogs.technet.com/eec/archive/2009/10/30/3290424.aspx
Answer: Free is good. Thanks for the tip.
Question: How soon will the recorded meeting be available for review….or do I need to take notes. 
Answer: The recording will be posted in a few days.
Question: how to create an isolated network (from a dhcp point of view, eg for creating an sbs test environment without affecting the live sbs environment) but for it to still have internet access – http://mundy.net.au/Hyper-V/testing-sbs-in-hyper-v-isolating-dhcp-while-allowing-full-internet-connectivity
Answer: Thanks for the link.
Question: Not clear on the IDE part – have Proliant ML350 servers running with NO IDE drives – just SCSI
Answer: The IDE drives are virtual not physical. Your physical server can be scsi, while the virtual disks are IDE. That’s how I run mine. Same as Wayne.
Question: Can Wayne address the advantages of one large striped and mirrored drive vs separate spindles for each guest O/S
Answer: I will ask him at the end of the session
Question: So when you create a few snapshots and your testing is completed how do you merge all of the changes that you have made into the parent VHD?
Answer: We’ll address this question at the end of session.
Question: can you delete snapshots to increase the performance again?
Private Answer: Yes you can.
Question: Can y’all recommend some “how-to” videos on Hyper-V?
Answer: I used the Microsoft eLearning tools and virtual labs. We will ask Wayne for his suggestion.
Question: I just saw Waynes Tweet on this, So I’m 1hr late, is there going to be a slide deck download available? Thanks
Answer: The presentation is being recorded and will be available on our website in a few days
Question: what about memory allocation for the TS server?
Answer: Recall that Wayne said that they added 8 more GB’s of ram to bring the server to 24GB total. The added 8GB went to TS. It was not reflected in the slide.
Question: The folder on host in question is an Install share used by all of the lan users.
Answer: yes that would be a violation on the licensing agreement
Question: What is Wayne’s take on joining the host to the SBS domain as a member server?
Answer: All of Wayne’s hyper-v hosts are not joined to the domain because there is no other domain controller besides that hosted SBS server. You can join it to the domain when you have a non-virtual domain controller.
Foundation Webinar Q&A
Posted by: | CommentsHere is the Q&A from today’s Foundation Server webinar. The recording will be available soon in our Store, http://www.thirdtier.net/store.
Question: Good to hear that Texas twang again. 
Answer: you’re quite welcome, sir!
Question: Will it run on Hyper-V?
Answer: No, we’ll cover the limitations of the product in the presentation.
Question: Russell Clements – Systems Administrator at Institute for Creation Research (DFW-SBS President in my spare time…). I’ve used Third Tier twice and was VERY impressed with the OUTSTANDING service provided. It’s a GREAT resource – THANK YOU VERY MUCH!!!!
Answer: Thanks, Russell.
Question: He mentioned 15 users in AD. Does that count include all the “default” users (Administrator, Guest, IIS_WPG, IUSR_SVRNAME, IWAM_SVRNAME, etc.)? Or only the named users that we add for the customer’s employees?
Answer: No it does not includes those users. Only the named users. There is a licensing service then runs every few minutes and checks for users in the domain.
Question: I am not seeing slides changing
Answer: You should be on the slide What CAN Founcation Server do? Slide. If not, you may have lost connection and need to sign out and back in again.
Question: they are changing REALLY slowly
Answer: OK, well at least moving. Eriq hasn’t shown many slides yet.
Question: In Server 2003, there was a POP3 mail server. Is there one available for Foundation?
Answer: If there is in Server 2008 R2 then it’s available in Foundation Server.
Question: If a vendor says in there specis that they need server 2008 will a Foundation Server work?
Answer: Yes, unless it hits upon one of the feature limitations that eriq mentioned. But in almost all cases, yes it will.
Question: How are you handling email with this solution?
Answer: I am using hosted Exchange. POP mail through an ISP would also be an option.
Question: Do you have a link that compares windows home server with foundation server?
Answer: There is no direct comparison because they are housed in different divisions within Microsoft.
Question: Will there be evals or NFR’s that we can get maybe through the Action Pack to get familiar with the software?
Answer: Foundation Server came in the Action Pack with the last quarter delivery.
Question: For the small offices that have been limping along on Server 2000 or Server 2003 is there a migration path to Foundation? What about SBS03 users that have decided to move to hosted Exchange?
Answer: There is no direct migration from 32-bit to 64-bit.
Question: Can you add Exchange, Sharepoint ect. and is there any separate pricing for it.
Answer: Sharepoint services is a free download. Anything that you install onto Foundation Server will need to be purchased.
Question: Since this is sold in OEM only, if the server hardware dies then we cannot do bare metal restore because it violates OEM license EULA, correct? Or am I missing something.
Answer: Yes, regular OEM licensing limitations apply.
Question: What about a migration path similar to SBS03->08? If we want to preserve the existing AD …
Answer: Yep, you can join it to the existing domain as a domain controller, it will then have a copy of the AD. Don’t forget to move the FSMO roles after you remove the old SBS03 server.
Question: I’m not that familiar with the low-end Dell boxes. What is your recommendation for RAID? PERC S100/S300 (”software based”)? Or a hardware RAID card?
Answer: This is a matter of opinion. But in my mind, this is a low end box and therefore mirror is probably most appropriate. There are no limitations in the product itself regarding drives.
Question: Great job, but I joined late. Is this recorded?
Answer: YES! http://www.thirdtier.net/store
Question: So we need to be careful with additional users, like backup service, zenith remote admin, etc (which aren’t specifically “named Users” but it sounds like they will take up a foundations CAL?
Answer: Yes, any created user would count as one of the 15 users.
Question: 15 users – counting disabled? // What if foundation is not a DC role, can it be in a domain with trusts? // Can virtualization be used for validation of recovery processes OR as a temporary solution for recovery in case of critical hardware failure? // What are you doing to address Backup of foundation server?
Answer: answering live
Question: can Foundation Server software be purchased from Ingram or D&H?
Answer: No. Foundation Serveris OEM only and only to the major manufacturers at that.
Question: There was some debate in forums about whether you can attach in a larger domain as long as the user usage is 15 or lower. IE. 50 user shop. 10 users hitting FS with TS?
Answer: Nope. It can only be installed at the root of the domain, so it will count all of the users in the entire domain.
Question: You said Dell will ship this preinstalled. How do they configure RAID, disk partitions, etc.? Are there OK options or do you end up blowing it away and rebuilding?
Answer: The options availalbe from Dell have seemed OK to me. We have left it as installed and just setup our own data partitions.
Question: Foundation was recently sent to SBSCs for test setup
Answer: Yes, SBSC’s did get a copy of Foundation Server.
Question: Can you comment on why one would put in a foundation server vs a windows home server?
Answer: answering live
Question: Standard Microsoft Action Pack subscribers do not get Foundation server. I just checked on my online product downloads page. I am not SBSc.
Answer: It was shipped as a seperate DVD and not available for download. It may have been for SBSC Action Pack subscribers only.
Question: so the “administrator” counts as one user already, out of the 15?
Answer: We are not certain. We will get the answer and post it to the blog.
Question: Does the administrator user account count as one of the 15 users?
Answer: Look for the answer to this on our blog.
Question: Very good stuff guys. Thanks!
Answer: Welcome
Question: Excellent webinar.. thank you very much.
Answer: Welcome
Question: Thanks good info
Answer: Welcome
Question: Great info as usual.
Answer: Thanks Tom
Question: Foundation server only adds AD and TS?
Answer: Group Policy and all features of Windows 2008 R2
Question: is $299 the msrp?
Answer: Yes
Question: Thanks – Great Info
Answer: Welcome
Question: except direct access
Answer: It can be a DA client, just not the server side
URLs mentioned in the webinar:
Foundation Server Marketing Page: http://www.microsoft.com/windowsserver2008/en/us/foundation.aspx
Foundation Server Technical Page: http://technet.microsoft.com/en-us/library/dd744832(WS.10).aspx
Server 2008 R2 Feature Comparisons: http://www.microsoft.com/windowsserver2008/en/us/r2-compare-features.aspx
Server 2008 R2 Role Comparisons: http://www.microsoft.com/windowsserver2008/en/us/r2-compare-roles.aspx
Thursday Webinar: All Staff Open Q&A, plus special guests
Posted by: | CommentsHere’s your chance to pummel us with questions. We’ll all be there. We’re opening the floor to you. Post a question and our staff will answer it live.
During this open Q&A we will also have special guest appearances by our friends and partners as we review the past year. This should be a really fun and informative hour! Please mark your calendar and plan to attend.
When: Thursday, Dec 17, 2009 12:00 PM (EST)
Scheduled to Occur: Every Third Thursday
Duration: 1:00
Third Tier has invited you to attend an online meeting using
Microsoft Office Live Meeting.
https://www.livemeeting.com/cc/mvp/join?id=855GRH&role=attend&pw=rD%7DT9T%2B2G
Meeting time: Dec 17, 2009 12:00 PM (EST)
Add to my Outlook Calendar:
https://www.livemeeting.com/cc/mvp/meetingICS?id=855GRH&role=attend&pw=rD%7DT9T%2B2G&i=i.ics
Q&A from the WSUS Webinar
Posted by: | CommentsHere is the Q&A panel from the September 17, 2009, WSUS webinar from Susan Bradley.
Question: Disclaimer: When running image based backup solution and/or utilizing online backup services, be sure to either create a seperate volumn for WSUS content or exclude it from off-site backup if possible. 
Answer: Excellent recommendation. Thanks!
Question: Are there any problems with XP SP3? Thanks.
Answer: Globally, I”m not aware of any. Have almost all of our customers up on XP SP3. There may be individual application issues, but not that I”m aware of.
Question: XP SP3 causes problems by switching off the TS ActiveX used for RWW but that has been blogged to death!
Answer: Correct, I don”t consciously think about that because it’’s just automatic to fix. Thanks for the reminder.
Question: What is the best way to “Disable” WSUS?
Answer: Services – disable the WSUS service
Question: Is the specific service just the “Windows Update” service on the server? Are there any other ones?
Answer: That’’s the one.
Question: Is the method used to relocate WSUS content on sbs 08 the same as prior versions?
Answer: No, There is a wizard in the SBS 2008 Console to move the WSUS data to different partitions.
Question: I called some of my LOB vendors and found out that one of them does not support downloading their program’’s updates through IE8 yet. I”ve gotten into the habit of calling my main vendors or checking their FAQ before I roll anything out.
Answer: That’’s an excellent suggestion. Thanks for sharing.
Question: WSUS 3.0 SP2 needs the new reportviewer. but… the viewer needs .net 3.5. How ugly is the .net install?
Answer: Test it first, but I haven”t had too many problems when doing the 3.5 install for my sites.
Question: Do you recommend partitioning SBS08.
Answer: yes minimum 2
Question: Is there going to be a WSUS 4.0 someday?
Answer: Someday, we don”t know when
Question: Because I have installed WSUS manually I have the Not Available in the Updates. I can go to the WSUS server via 8530 and I can go to the updates page but it does not show any updates. I do have all the products checked in the list and I am not downloading drivers but I still have problems not getting the green check mark. Good point about not unistalling. I did that and it messed it up a lot
Answer: susan provided a list of items that you need to include and point to the green check/blue check SBS blog post for the answer
Question: Can you speak to the relative importance of patching Microsoft products vs. third party products like Java, Adobe, Firefox, QuickTime, etc.? The focus seems always to be on Microsoft products, but many of the threats are coming from third-party products as well. How do you handle those?
Answer: VERY important to patch the 3rd party stuff. The bad guys are choosing to come in via 3rd party becasue MS is generally updated these days.
Question: Not a question, but a praise, I highly recommend SBS08 Unleashed; and I just posted a review on Amazon.
Answer: Thanks!
Question: is there a way we can submit our WSUS policy/procedures for a slap on the back or a slap on the head?Kevin royalty warned me about the 2×4.
Answer: you can contact Susan via her blog, or submit a ticket a Third Tier
Question: Is there a place that a new MSP can go to see historically what patches have caused problems? We are developing our patch management policy and have basically an enormous amount of patches to approve or deny to “catch up”. It would be great to have a publish list of patches that a low or high risk. Any resource available that you know of to help us out?
Answer: www.patchmanagement.org, but nobody keeps a “master database” of this information
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Get Support 
Blog 
Twitter 
Facebook 
LinkedINQ&A from the SSL Webinar
Posted by: | CommentsHere is the Q&A from the just-completed SSL on SBS 2008 webinar. Not many questions, so we either did a good job of covering the material in the webcast, or we had a lot of sleepy attendees!
Question: What is the URL for that blog post?
Answer: http://sbs.seandaniel.com/2009/02/installing-godaddy-standard-ssl.html
Question: this is great. We get to see reality.
Private Answer: Welcome to the real world
Question: Yup
Answer: Sometimes you’re the windshield.
Question: i had a customer order SSL cert from GoDaddy for their SBS box. Then they wanted to install a SSL cert to their Calyptix betwork/firewall box, which does not support the intermediate cert. Is their any problems with going to a different cert provider to get a second, different SSL cert for the same public domain name?
Answer: For devices with out the ability to add additional intermediate certs, it would be best to go with another trusted provider like Verisign
Question: Can I move a cert from a SBS2003 that I am decommissioning?
Answer: If the certificate provider allows you to re-key the certificate to your new server, then yes.
Question: Are there any recommended vendors for the SSL certs that people have used and feel they did a good job for the price?
Answer: We’ve used Dotster which issues a Thawte cert (so no intermediate cert needed). Only issues with them is making sure your domain registration is correct (no ex-employees as admin or techinical contact), but that’s the same with any SSL certificate provider.
Question: the certificate renewal process… how much effort is required each year on an annual renewal? Can it be disruptive to business?
Answer: You will need to load the certificate into any devices that required manually installation the first time around.
Question: We use two static IPs for autofailover. SSL certs works well. We use DynDNS now, used to use dns made easy. We use our domain name. Our GoDaddy Cert works fine without the itermediate cert, since GoDaddy is not a top level cert auth.
Answer: Good info. Any issues with Windows Mobile devices?
Question: Even with a paid cert, don’t I still have an issue using dyndns? since my cert if for domainname.net and using dyndns makes it domainname.dyndns.org
Answer: The certificate has to be assigned to your domain, not to dyndns.org. there’s an additional service you need to purchase from them to make that happen.
Question: ENOM have a very good cert for SBS
Answer: Good to know.
Question: Yes, I know I need to go with a different provider. But when you request a cert, it asks if you are using IIS or Apache. So we already have the GoDaddy cert for IIS, and now we want to get a cert for an Apache (Calyptix box) with the same public domain name.
Answer: Yes you can do that.
Question: I notice that this presentation is # 6. Are the previous presentations available to be viewed? If so, where?
Answer: http://www.thirdtier.net/store
Question: No with Win Moblie 6. No old stuff.
Answer: Thanks for that!
Question: Is it difficult to add an SSL cert to a website in SBS 2008 that isn’t part of the “package” SBS install?
Answer: Amy is answering this live.
Question: how do I get on the other session?
Answer: http://www.thirdtier.net/store/
Question: thanks
Answer: np
Question: one cert per ip address right?
Answer: yes
Question: Great info, thanks
Answer: thanks for attending!
Q&A from the SSL Webinar
Posted by: | CommentsHere is the Q&A from the just-completed SSL on SBS 2008 webinar. Not many questions, so we either did a good job of covering the material in the webcast, or we had a lot of sleepy attendees!
Question: What is the URL for that blog post?
Answer: http://sbs.seandaniel.com/2009/02/installing-godaddy-standard-ssl.html
Question: this is great. We get to see reality.
Private Answer: Welcome to the real world
Question: Yup
Answer: Sometimes you’re the windshield.
Question: i had a customer order SSL cert from GoDaddy for their SBS box. Then they wanted to install a SSL cert to their Calyptix betwork/firewall box, which does not support the intermediate cert. Is their any problems with going to a different cert provider to get a second, different SSL cert for the same public domain name?
Answer: For devices with out the ability to add additional intermediate certs, it would be best to go with another trusted provider like Verisign
Question: Can I move a cert from a SBS2003 that I am decommissioning?
Answer: If the certificate provider allows you to re-key the certificate to your new server, then yes.
Question: Are there any recommended vendors for the SSL certs that people have used and feel they did a good job for the price?
Answer: We’ve used Dotster which issues a Thawte cert (so no intermediate cert needed). Only issues with them is making sure your domain registration is correct (no ex-employees as admin or techinical contact), but that’s the same with any SSL certificate provider.
Question: the certificate renewal process… how much effort is required each year on an annual renewal? Can it be disruptive to business?
Answer: You will need to load the certificate into any devices that required manually installation the first time around.
Question: We use two static IPs for autofailover. SSL certs works well. We use DynDNS now, used to use dns made easy. We use our domain name. Our GoDaddy Cert works fine without the itermediate cert, since GoDaddy is not a top level cert auth.
Answer: Good info. Any issues with Windows Mobile devices?
Question: Even with a paid cert, don’t I still have an issue using dyndns? since my cert if for domainname.net and using dyndns makes it domainname.dyndns.org
Answer: The certificate has to be assigned to your domain, not to dyndns.org. there’s an additional service you need to purchase from them to make that happen.
Question: ENOM have a very good cert for SBS
Answer: Good to know.
Question: Yes, I know I need to go with a different provider. But when you request a cert, it asks if you are using IIS or Apache. So we already have the GoDaddy cert for IIS, and now we want to get a cert for an Apache (Calyptix box) with the same public domain name.
Answer: Yes you can do that.
Question: I notice that this presentation is # 6. Are the previous presentations available to be viewed? If so, where?
Answer: http://www.thirdtier.net/store
Question: No with Win Moblie 6. No old stuff.
Answer: Thanks for that!
Question: Is it difficult to add an SSL cert to a website in SBS 2008 that isn’t part of the “package” SBS install?
Answer: Amy is answering this live.
Question: how do I get on the other session?
Answer: http://www.thirdtier.net/store/
Question: thanks
Answer: np
Question: one cert per ip address right?
Answer: yes
Question: Great info, thanks
Answer: thanks for attending!
