BParker's questions

Our company has a domain forest with two domains (domain.EMEA and domain.GLOBAL)

We previously acquired a company (domain.LOCAL) and all the workstations at this site are members of domain.LOCAL, but the users are members of domain.EMEA

There are one-way trusts from domain.LOCAL to domain.EMEA and domain.GLOBAL

I am working on migrating users from domain.EMEA to domain.GLOBAL, and to do so I need to temporarily make the users at the site administrators of their workstations.

To do this I was hoping to create a security group in domain.LOCAL, add the users from the site, and push the security group to the workstations local administrators group.

What i am finding though is that all the group policies appear to be coming from the domain to which the user is a member, even though the workstations is a member of domain.LOCAL.

Can anyone point me in the right direction to make the domain.LOCAL GPO's apply to the domain.LOCAL workstations, or alternatively suggest another way to accomplish making these users local administrators.

Note: Due to the size of the parent company, getting a group policy created and pushed in either domain.EMEA or domain.GLOBAL is extremely complicated, and can take many weeks to accomplish. Working via domain.LOCAL would be preferable...

I work for a company who make a networking product.

The device we create is attached to the testing PC via a second NIC and is on a seperate subnet to the primary nic on the corporate lan.

We are running Win 7 x64 is that makes a great deal of difference!

When we run wireshark, we're seeing the usual broadcast messages etc related to domain machines (i.e. the machine itself is a member of a domain, and keeps sending out broadcasts on all nic's relating network discovery etc)

Can anyone suggest ways of stopping this traffic and guaranteeing we only have the traffic we expect on that one nic?

I am trying to evaluate VMWare's ESXi 4.1 Hypervisor for a project my company is planning, but am having some trouble find information and wondered if anyone with some experience can shed some light!

We are hoping to use the hypervisor to run a collection of VM's and vSwitches in very specific configurations. I am happily able to configure the VM's and vSwitches through the vSphere app, and have so far been impressed with the product.

We were however hoping to be able to let engineers have access to the VM's, but the problem is they would need to reconfigure the vSwitches and which VM's were active, and we would like to be able to make this transparent to them in as far as they should be able to run a small app, point it at the ESXi host IP, select a configuration, and let the app make the changes needed.

We are currently using the free edition while we evaluate whether this is the correct product for our needs.

When I have been trying to use the SDK, it doesn't seem to be allowing write access!

I am not looking to do anything other than functions provided within the vSphere app, just to start/stop VM's, and to create/destory vSwitches (which are only very basic anyway!)

Can anyone tell me if: A) this is possible with the free edition of ESXi B) do-able through the vSphere API (the docs say so, but the examples won't work) C) Why the vSphere app can do it, but i cant!!!

I have a build script which runs within visual studio. As part of the script i need to register a DLL with regsrv32, however this needs to be done with elevated privileges.

When we did this under XP, since all users on our domain are local administrators, regsrv32 always succedded, however under Windows 7 it fails as the script runs with the standard user privileges.

I looked at using RunAs, however this doesn't seem to work correctly, and only runs as the account specified, not the current user with elevated privileges.

Does anybody know of a way of elevating a single command within a script?

Has anybody re-homed a CVSNT installation?

I need to take a CVSNT setup on one ageing server and relocate it to a new shiny server, but i don't have a great deal of experience with this software.

Does anyone know the basic process for moving an entire repository to a new server? We have 3 base repositories, totaling about 6GB. Size wise it's not too big, but i need to make sure all the history is migrated correctly.

I've googled around a bit, but not managed to find any info on this kind of move, everyone seems to prefer to write how-to's on moving to Subversion et al....

The CVSNT server is running on windows if that makes a great deal of difference....

I need to find a firewall that will give me 1 LAN port, and 5-7 DMZ ports.

I have a requirement to replace some FreeBSD systems that are used to run some testing equipment. It is essential that the DMZ ports cannot communicate with each other, but the LAN port can communicate with everyone. That way a user on the LAN can connect to the test systems, but the test systems are isolated entirely and cannot interfere with each other.

One of the DMZ's will be connected to a VMWare ESXi server, one to a standard server, and the rest to various types of equipment.

The lan port will be connected to the corporate LAN switch.

Sorry if i am a little vague, I am just trying to work all this out myself! Currently we have a FreeBSD configured, but the quad port NIC's are pretty expensive, and the PC itself is old, so i would prefer to replace it with a dedicate piece of kit which can do the same job, but more reliably! These test rigs are used all over the place, and get moved quite often, so i am aiming for Cisco kit for ease of configuration and reliability of the hardware itself.

Thanks

I was wondering what effect external clients would see on a fairly busy site if the apache2 server was reconfigured and then an /etc/init.d/apache2 reload command was issued?

I know in theory current actions should hold without issues, but what would the total effect be on the site?

For the sake of this example, lets assume i want to perform a reload once per minute. would this degrade the site performance a great deal?

Thanks