<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security for a day &#187; Windows 2008</title>
	<atom:link href="http://www.chris-mohan.com/category/windows-2008/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.chris-mohan.com</link>
	<description>Securing Windows Networks or giving it a go in Australia...</description>
	<lastBuildDate>Sun, 29 Aug 2010 13:00:54 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Netsh commands</title>
		<link>http://www.chris-mohan.com/2010/07/netsh-commands/</link>
		<comments>http://www.chris-mohan.com/2010/07/netsh-commands/#comments</comments>
		<pubDate>Sun, 11 Jul 2010 12:53:59 +0000</pubDate>
		<dc:creator>ChrisM</dc:creator>
				<category><![CDATA[Labs]]></category>
		<category><![CDATA[Study]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/2010/07/netsh-commands/</guid>
		<description><![CDATA[  This is nothing new or exciting, I just keep forget the syntax so I&#8217;m leaving here to make it much easier to find/remember. Interface Configuration Interface named Local Area Connection with the static IP address 192.168.66.100, the subnet mask of 255.255.255.0, and a default gateway of 192.168.66.1: netsh interface ip set address name=&#8221;Local Area [...]]]></description>
			<content:encoded><![CDATA[<p>
 </p>
<p>This is nothing new or exciting, I just keep forget the syntax so I&#8217;m leaving here to make it much easier to find/remember.
</p>
<p style="text-align: center">
<h2>Interface Configuration<span style="font-size:11pt"><br />
			</span></h2>
</p>
<p>Interface named Local Area Connection with the static IP address 192.168.66.100, the subnet mask of 255.255.255.0, and a default gateway of 192.168.66.1:
</p>
<p>netsh interface ip set address name=&#8221;Local Area Connection&#8221; static 192.168.66.100 255.255.255.0 192.168.66.1 1
</p>
<p style="margin-left: 36pt">Add multiple ip addresses
</p>
<p>netsh interface ip add address &#8221; Local Area Connection &#8221; 192.168.66.101 255.255.255.0
</p>
<p>netsh interface ip add address &#8221; Local Area Connection &#8221; 192.168.66.102 255.255.255.0
</p>
<p style="margin-left: 36pt">Configure DNS
</p>
<p>netsh interface ip set dns &#8220;Local Area Connection&#8221; static 192.168.66.200
</p>
<p style="margin-left: 36pt">Add multiple DNS entries<strong><br />
		</strong></p>
<p>netsh interface ip set dns &#8220;Local Area Connection&#8221; static 192.168.66.200primary<br/>netsh interface ip add dns name=&#8221;Local Area Connection&#8221;  192.168.66.201 index=2
</p>
<p style="margin-left: 36pt">Configure WINS
</p>
<p>netsh interface ip set wins &#8220;Local Area Connection&#8221; static 192.168.66.200
</p>
<p style="text-align: center">
<h3>DHCP<br />
</h3>
</p>
<p>Automatically obtain an IP address from a DHCP server:<br/>netsh interface ip set address &#8220;Local Area Connection&#8221; dhcp
</p>
<p style="margin-left: 36pt">Get DHCP DNS/WINS settings:
</p>
<p>netsh interface ip set dns &#8220;Local Area Connection&#8221; dhcp
</p>
<p>netsh interface ip set wins &#8220;Local Area Connection&#8221; wins
</p>
<p style="text-align: center">
<h3>Rename interface names<br />
</h3>
</p>
<p>netsh.exe interface set interface name = &#8220;Local Area Connection&#8221; newname = &#8220;INT&#8221;
</p>
<p>netsh.exe interface set interface name = &#8220;Local Area Connection(2)&#8221; newname = &#8220;Internet&#8221;
</p>
<p style="text-align: center">
<h3>Disabling/enabling an interface<br />
</h3>
</p>
<p><br/>netsh interface set interface name = &#8220;Local Area Connection&#8221; admin = disabled
</p>
<p>netsh interface set interface name = &#8220;Local Area Connection&#8221; admin = enable<strong><br />
		</strong></p>
<p style="text-align: center">
<h3>Export your current IP settings<br />
</h3>
</p>
<p>netsh -c interface dump &gt; c:\current1.txt<br/>import your IP settings<br/>netsh -f c:\current1.txt<br/>You can also use the global EXEC switch instead of -F:<br/>netsh exec c:\current1.txt
</p>
<p style="text-align: center">
<h3>LOOPS<br />
</h3>
</p>
<p>FOR /L %I IN (2,1,20) DO netsh interface ip add address &#8220;Local Area Connection&#8221; 192.168.66.%I 255.255.255.0
</p>
<p>This will add ip addresses from 192.168.66.2 to 192.168.66.20 with 1 step each time.
</p>
<p>Examples:
</p>
<p><a href="http://technet.microsoft.com/en-us/library/bb490943.aspx">http://technet.microsoft.com/en-us/library/bb490943.aspx</a>
	</p>
<p><a href="http://ss64.com/nt/netsh.html">http://ss64.com/nt/netsh.html</a>
	</p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2010/07/netsh-commands/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kicking off the MCITP:Enterprise Study</title>
		<link>http://www.chris-mohan.com/2009/02/kicking-off-the-mcitp-enterprise-study-or-msce-2008/</link>
		<comments>http://www.chris-mohan.com/2009/02/kicking-off-the-mcitp-enterprise-study-or-msce-2008/#comments</comments>
		<pubDate>Mon, 16 Feb 2009 09:16:49 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[Exams]]></category>
		<category><![CDATA[ISA/TMG]]></category>
		<category><![CDATA[Labs]]></category>
		<category><![CDATA[Study]]></category>
		<category><![CDATA[Vista]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=282</guid>
		<description><![CDATA[(or MCSE 2008 as the rest of us call it) For reasons only known to myself, I&#8217;ve stupidly decided to kick off the final two MCITP: Enterprise exams starting with 70-649. Ah, nothing like making bets, attempting to get a bit of competition going, that you can get certified before the rest of the team. [...]]]></description>
			<content:encoded><![CDATA[<h5>(or MCSE 2008 as the rest of us call it)</h5>
<p>For reasons only known to myself, I&#8217;ve stupidly decided to kick off the final two MCITP: Enterprise exams starting with 70-649.</p>
<p>Ah, nothing like making bets, attempting to get a bit of competition going, that you can get certified before the rest of the team.</p>
<p>In front <strong><em>the Boss</em></strong>. (He&#8217;s a hockey playing, beer drinking, Northern ninja for randomly appearing like that!)</p>
<p>Pure Muppet magic on my part! Meep.</p>
<p>Hum ho.</p>
<p>Why the Enterprise rather than the long winded 70-647 update exam first? After skimming the objectives, it looks less work and studying for 749 will help out with 647 at a guess.</p>
<p>Check List:</p>
<p>Study guide:                                         Ms Press Self paced 70-647 Training kit</p>
<p>Hands on:                                              Build a virtual lab on Windows 2008 and use the Ms Virtual Labs</p>
<p>Pick a date to get this done by:    Monday 23rd of March 2009</p>
<p>Better get on with it then.</p>
<p>So, kick off by designing and build and small self contained Windows 2008 domain. This is all built on a physical machine, running Windows 2008 Server x64 with 8GB of RAM, lots of hard disk space and a couple of NICs. Hyper-V is installed.</p>
<p>I&#8217;ve added three additional networks in the Virtual Network Manger: Domain_Internal, DMZ and Hyper-V_External. Hyper-V_External is connected to the router for direct Internet access.</p>
<p>I&#8217;ve build, installed the Integration tools and patched (32updates and 159mb later) one VM, then cloned it (done by copying it to a new location, starting it up and running <a href="http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx">newsid</a>) to speed things up and save download bandwidth. I should have used <a href="http://technet.microsoft.com/en-us/library/cc766320.aspx">Windows Deployment Services (WDS)</a>, but I get around to that later.</p>
<p>The master network plan is below</p>
<p style="text-align: center;"><img class="aligncenter" src="http://www.chris-mohan.com/wp-content/uploads/2009/02/021609-0916-kickingofft1.png" alt="" /></p>
<p>This isn&#8217;t information leakage and I haven&#8217;t forgotten to add IPv6 addresses in, just a basic network diagram!</p>
<p>So once everything has finished installing, on with setting it up.</p>
<p>Now to start going through the notes and playing!</p>
<p><a title="MSCE 2008 Notes part 1" href="http://www.chris-mohan.com/?page_id=292" target="_blank">Notes Part 1</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2009/02/kicking-off-the-mcitp-enterprise-study-or-msce-2008/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Update Forefront Client KB952265</title>
		<link>http://www.chris-mohan.com/2008/08/update-forefront-client-kb952265/</link>
		<comments>http://www.chris-mohan.com/2008/08/update-forefront-client-kb952265/#comments</comments>
		<pubDate>Sun, 03 Aug 2008 07:20:35 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[Forefront]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=86</guid>
		<description><![CDATA[Ment to post this when the patch surfaced on 23rd July 2008. It takes the engine to Client Version:  1.5.1955.0 from Client Version:  1.5.1941.0 if you check the about details KB952265 Basically fixes a couple of things Forefront can break if you it&#8217;s running on a web server, SharePoint, WebDav, IIS7 or a 2008 server [...]]]></description>
			<content:encoded><![CDATA[<p>Ment to post this when the patch surfaced on 23rd July 2008.</p>
<p>It takes the engine to Client Version:  1.5.1955.0 from Client Version:  1.5.1941.0 if you check the about details</p>
<p><a title="What KB952265 does" href="http://support.microsoft.com/kb/952265" target="_blank">KB952265</a></p>
<p>Basically fixes a couple of things Forefront can break if you it&#8217;s running on a web server, SharePoint, WebDav, IIS7 or a 2008 server with Hyper-v. So not massively essential to get out there, for most of us.</p>
<p>It requires a reboot if you apply the patch by running the .exe Not so much fun for those in us in Ops role without of hours only reboot windows.</p>
<p>However, if you extract the files from the .exe you&#8217;ll find the new mp_ambits.msi.</p>
<p>This doesn&#8217;t require a reboot to install. <em>Hurra!</em></p>
<p>You should also replace  the old ones in you Forefont deployment points/shares. There&#8217;s one for x86 and x64. Don&#8217;t get them mixed up.</p>
<p>Oh, and for those using Forefront and Windows 2008 core read this for trying to install the update <a title="kb955884 for core installs" href="http://support.microsoft.com/kb/955884">kb955884<br />
</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2008/08/update-forefront-client-kb952265/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>File Server Resource Manager Demo for Windows 2008</title>
		<link>http://www.chris-mohan.com/2008/07/file-server-resource-manager-demo-for-windows-2008/</link>
		<comments>http://www.chris-mohan.com/2008/07/file-server-resource-manager-demo-for-windows-2008/#comments</comments>
		<pubDate>Sat, 26 Jul 2008 07:16:28 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[User Groups]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=47</guid>
		<description><![CDATA[Manged to finally cut together a video of the material I used for the Windows user group. This is under the ten minutes allocated unlike the real talk which was closer to 20 &#8211; Oops. Doing the talk was excellent fun and (I think) I managed to answer all the questions put to me. Here&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<p>Manged to finally cut together a video of the material I used for the Windows user group.<br />
This is under the ten minutes allocated unlike the real talk which was closer to 20 &#8211; Oops.</p>
<p>Doing the talk was excellent fun and (I think) I managed to answer all the questions put to me.</p>
<p>Here&#8217;s the Ms Silverlight video version of the talk I&#8217;ve just published for the Heroes Happen Challenge</p>
<p><iframe src="http://silverlight.services.live.com/invoke/69823/File%20Server%20Resource%20Manager%20Demo/iframe.html" scrolling="no" frameborder="0" style="width:500px; height:375px"></iframe></p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2008/07/file-server-resource-manager-demo-for-windows-2008/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Heroes Happen {Here} Challenge</title>
		<link>http://www.chris-mohan.com/2008/04/heroes-happen-here-challenge/</link>
		<comments>http://www.chris-mohan.com/2008/04/heroes-happen-here-challenge/#comments</comments>
		<pubDate>Fri, 18 Apr 2008 12:23:26 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=31</guid>
		<description><![CDATA[While at Sydney Windows Infrastructure User Group looking at some of the funky NAP features of Windows 2008, our local Microsoft IT Pro Evangelist, Jeff Alexander, laid down a challenge to step up to the presenting podium and give a 10 minute presentation on a feature Windows 2008 . It&#8217;s part of a national call [...]]]></description>
			<content:encoded><![CDATA[<p>While at <a title="SWIUG" href="http://swiug.org.au/" target="_blank">Sydney Windows Infrastructure User Group</a> looking at some of the funky NAP  features of Windows 2008, our local Microsoft IT Pro Evangelist, <a title="Jeffa!" href="http://blogs.technet.com/jeffa36/default.aspx" target="_blank">Jeff Alexander</a>, laid down a challenge to step up to the presenting podium and give a  10 minute presentation on a feature Windows 2008 .</p>
<p>It&#8217;s part of a <a title="Windows 2008 Comp!" href="http://www.microsoft.com/australia/heroes/community.aspx" target="_blank">national call</a> and frankly looks like a great bit of fun. I stuck my hand up for giving it a go as did a few other brave souls. I&#8217;m going to leaf through some books and pick a topic to try.</p>
<p>Guess it&#8217;s time to build a real 2008 Server and stick Hyper-V on it &#8211; like I need the excuse <img src='http://www.chris-mohan.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2008/04/heroes-happen-here-challenge/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
