Monday, July 09, 2007

Google Tips, FSMO Roles, Vista command line, and Server Config Tips

Google Tip for Sys Admins
There was an article published 07/07/07 at the Internet Storm Center that gave a couple of "defensive googling" tips to search for compromised sites on your network.

site:myorg.org porn and
site:myorg.org cialis buy


FSMO Roles
It all started with a check of one of my favorite blogs, Daily Cup of Tech. I was checking it for the first time in a couple of weeks, as things have been busy here, and realized that the author is in the middle of a really good series. It seems he had some server trouble recently and has been kind enough to document some fo the lessons learned there. Lesson #3 is really about riding AD of a failed DC, and while beginning that reading, he mentioned FSMO roles, which believe it or not I have never heard of. So, not wanting to waste a perfectly good opportunity to learn more, I jumped to this very informative site on wikipedia. Flexible single master operation roles (there are 5, 3 Domain-wide roles and 2 Forest-wide roles) or Fiz-mo roles are basically specialized domain controller tasks.


VISTA Command Line
I wanted to flush my local dns cache today, and realized that I would need elevated status in VISTA in order to do this. As it was the first time I needed to do this via the command line, I had to do a quick search to come up with the correct command, so here it is for next time:

runas /u:Administrator "ipconfig /flushdns"
the command to display the cache, by the way, follows here: ipconfig /displaydns


Server Configuration Tips
I am still on the Daily Cup of Tech blog site reading about his server failures and have come across another tip that I very much appreciate and want to remember. He says:

"I generally build my domain controllers with five drives. Two in a mirrored configuration for the OS and three in a RAID 5 configuration for the data. The nice thing about this is that the OS and data are separated. I have experienced three systems now where the OS container on the RAID system corrupted and left all of the data completely in tact. Had I not configured these systems this way, I believe that I would have lost some or all of my data."