MARCH/APRIL 2008

 

Part III - Do it yourself guide to system maintenance and disaster preparation.

Station and Workstation OS & Service Pack Level
Every Operating System, Windows Vista, XP, 2000, ME, 98, 3.1, Linux, should be listed along with their current service pack or patch level. This is important to maintain proper security. Many times, just glancing at a server or stations service park can highlight security holes.

On servers, there can be many service pack levels and several additional columns would be needed based on the environment. As an example, a Microsoft Small Business Server contains at minimum of three different service pack requirements. The three service packs are: the Main Windows OS, Exchange, and SharePoint’s Intranet. If this Windows Server is SBS Professional another one will exist for SQL (Other less common Windows add-ons need patches too).

So based on the servers in your organization, multiple components must be patched individually and multiple security issues can exist. Even using Microsoft update (instead of the plain windows update) will not present you with every server patch necessary.

CPU
This is for informational use only. Maintenance can use this to speed things up a bit when performing a bulk scan on many PCs. Starting with the slowest machines first will reduce overall completion time since support is mostly run concurrently over several stations. As an example, supporting 30 stations, I would start a scan on the slowest first. By the time I started all scans on every PC the slow ones would not be too far behind the fast units.

Memory
This is also for informational use only. Proper maintenance dictates recommendations for upgrades and enhancements. As new programs or updates to programs are loaded on a machine, things can begin to slow down. Comparison of CPU speed and memory help in determining replacement or upgrades. This is not required for maintenance or disaster recovery, but rather predictive obsolescence.

RDP Ports
Remote Desktop Port information is important for remote support and disaster recovery. Unfortunately, different approaches have been taken by Microsoft based on the server you purchased. As an example, Windows Small Business Server has a front portal (Remote Web Workplace) that allows every station on the network to be accessed remotely with only a few setup steps. In contrast, Windows Standard Server requires considerable amount of work to allow more than one station to be accessed remotely. This is due to the fact that each station must use a unique port nunber requiring every station to be reconfigured along with the router to allow those ports to pass to the right unit.

When using Windows Standard Server, I like to make accessing a remote station easy. I do this by allowing Internet Explorer to browse to a name I setup. That name is then mapped to the PC and launches the remote desktop client on that machine. Yes, you can just use the remote desktop client, if you know the address and MODIFIED port for that PC. Using a web base interface means that all port numbers and addresses can be forgotten and just a name need be remembered.

In my scenario, with Windows Standard two port numbers must be recorded in the column on the spreadsheet for each station. In the minimum configuration, only one port number need be listed. If you’re using the remote web workplace of Windows SBS server than no port numbers need be listed in this column since they all use the same shared defaults.

continued below -



PCA ports
Outlook Version

Programs that can be downloaded free of charge are:

Windows Defender by Microsoft:
This is an active program which is running all the time to protect your PC.

AdAware
The free version must be updated and run manually.

Spybot
This free utility must be updated and run manually. It has a unique set of tools that can be used to check the PCs startup programs, Internet explorers ActiveX controls, BHO’s (Browser Helper Objects) and default search pages . This program can also install a block so many know bad sites will not be accessed.

Boot levels of PCs
Temporary files
Add remove
Viewpoint
Google
Yahoo
Aim
msn msgr
Aol toolbar
1080
Purity scan
Beyond the free: Fixit

Other Hardware
Spam Filter
Internet filter
NAS units
Battery Backups with control
Remote Power
Computer Switch bank

Planning a schedule:
Outlook closing
Outlook backup / scripting
NK2 file

Power on at time
Power on via lan
Push technology

Maintain
FreeNAS

NASLite
NK2
SyncToy
Rsync
asteriskIE
ms password
Microsoft baseline security analyzer
Tweakui
Sendto

How to set up a remote user
Remote printing – rdp – pcanywhere

How to backup outlook files
How to shut down outlook at night
Sync local pc to nas server – profile, my docs
Change my docs location
Security on my docs folder

Security
What is readily available?
Are passwords stored
Form data
Lock usb, floppy, cdrom
Use tools to view current
Ie forms, pswds cookies temp files
history deletion by users
hidden shares

Browsing:
Proxies
Blocking internet – content, external box, software, hosts file
Server script of hosts file
Hidden shares
Floor wiring plan


Exchange cn, forest, dhcp scope, dnsBackup bootcfg.ini & config files
Sharepoint company web
Offsite backup
Free adobe writer
Recent document list

©2007 Independent Insurance Agents & Brokers of Suffolk County, Inc. | All Rights Reserved | www.suffolkagents.com