Daniel's questions

I have 2 routers set up in our office, one an ASA5505 and one is just a smoothwall. The smoothwall has a VPN set up to a data centre rack and users access various servers at our datacentre. I am in the process of setting up the ASA5505 on a new fibre connection and wanted to know if I could route the data centres subnet through the smoothwall's VPN connection. I have a route set up and from the ASA5505 I can ping the servers at the datacentre, however when I am on this connection myself I can't access anything.

Is there something I'm missing here? I tried various NAT rules, however I can't seem to get this to work.

I am not sure if this is normal or not, however it seems network shares on our domain are given full access to users that are admins on their local machine if the server\Administrators security permissions is set.

Is this standard? It poses a fair few issues for setting up permissions as my predecessor has set all sorts of local privileges on computers throughout the domain. Unfortunately I can't change this with GP at this stage as I am unsure of the ramifications to our users by forcing this.

Obviously I can just remove the server\administrator security group from all shared folders but this would be a massive task.

Has anyone come across this issue before? The only reason I picked up on it was I was setting up a DFS and one of my users had full access no matter what permissions I set (Unless I removed the changed the server\administrator permissions to domain\domainadmin)

Looking at changing the way we manage roaming profiles, home drives and folder redirection.

Our last sysadmin was lazy and set everyone access to everything to get around the headache of setting up permissions on folders.

I am wanting these folders to be automatically created when I set the path in AD. At the moment the Home folder is created fine, however when Profile is created I need to take ownership of each folder to view/modify files which is a headache and not viable long term.

I have set up 3 shares for these features with the following permissions

HomeStore and ProfileStore
Security:
Creator Owner - Full
Domain Admin - Full
Authenticated Users - Read
Sharing:
Authenticated Users (This Folder Only) - Full
Domain Admin - Full
System - Full

FolderStore
Creator Owner - Full
Domain Admin - Full
Authenticated Users - Read
Sharing:
Everyone (This Folder Only) - Full
Domain Admin - Full
System - Full

Are these set correctly? I know there are issues with Admin having access to user files but we are a small company and this is requested of me often.

I'm looking at getting an MD3620i SAN with 24 drives for virtualizing our envoroment and was wondering the best way to carve up the disk.

For starters I will be running DC, SQL database, SQL repoting, Exchange and a web server eventually looking to move the remainder of our environment to this setup. I am stretched for budget or would look at getting an additional MD1220. Do I have enough disk here? Any suggestions on how I should set this up?

I'm looking at getting 3 hosts and a SAN set up with iSCSI for a VMware envoroment and have had several companies come to us with suggestions (small team and will need help with implementation). They have suggested an IBM setup using 2x 4 port 1GBE iSCSI cards on the SAN which is a DS3524 and then running a Cisco 2960S stack using 6 connections per host.

I went away and came back with a solution (for the same price) using 2x 2 port 10GBE iSCSI controller SAN which is a Dell 3620i using a Cisco 2960S stack with 2x 10GBE ports each and using 8 connections per host for improved performance. They can't match this in terms of price and have suggested the IOPS would be less in this configuration due to less channels on the SAN controllers (8x1GBE vs 4x10GBE). Are they talking rubbish to try and get a sale? Couldn't find much online but wanting to make the right decision.

I can post the full hardware specs of this solution if required.