Re: [foxboro] 8.5 Domain Controller

  • From: stan <stanb@xxxxxxxxx>
  • To: "Boulay, Russ" <Russ.Boulay@xxxxxxxxxxxx>
  • Date: Wed, 4 Aug 2010 10:31:43 -0400

I think my opinion on this whole situation is piety well known. But, I also
believe in having a "fair and balanced" discussion of things. As you can
see from my posting yesterday, I did defend some of the things that we are
being driven to.

But, I don't believe this is a fair comment (Sorry Russ). From a hardware
perspective, the only difference between an 8.5 (or beyond) secure
solution vs an "standard" solution, is 2 P90/P91 machines. Based upon our
current 8.5 secure project design we are finding that we need a much higher
machine count that a similar system that we have already deployed using
Unix technology. 

I understand thta the higher machine count is based upon MS's "best
practices" recommendation (and Foxboro's) of restricting the number of
applications that we run on each machine, and also understand that this is
based upon MS's different design decisions that are considered acceptable in
the UNIX community. For example shade library paths, and installing
software in separate directories, rather than putting it all in /usr/lib for
instance.

Still, it does require more machines for a MS based solution, even if you
do not choose the secure option.

On Wed, Aug 04, 2010 at 10:05:55AM -0400, Boulay, Russ wrote:
> Freudian slip...
> 
> V8.5 comes in two flavors ....Secure and STANDARD......
> 
> -----Original Message-----
> From: Boulay, Russ 
> Sent: Wednesday, August 04, 2010 9:59 AM
> To: 'foxboro@xxxxxxxxxxxxx'
> Subject: RE: [foxboro] 8.5 Domain Controller
> 
> Things to remember:
> 
> Security is a choice.
> 
> V8.5 comes in two flavors....Secure and Unsecure.
> 
> For those of us that security is not a choice...(those that are required to 
> be Secure compliant)....NERC standards...etc....the cost of these servers and 
> other physical matters is minor compared to the cost of paying fines for 
> failed audits or forced to shutdown the plant.
> Those required to be compliant are already realizing cost abundance just in 
> establishing NERC policies/procedures to be compliant.
> 
> For those not required to be compliant....load V8.5 unsecure and go on as 
> usual...
> 
> -----Original Message-----
> From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On 
> Behalf Of Balmer, Robert D.
> Sent: Wednesday, August 04, 2010 9:50 AM
> To: foxboro@xxxxxxxxxxxxx
> Subject: Re: [foxboro] 8.5 Domain Controller
> 
> Very interesting thread going on here. Our site is at the beginning of 
> another wonderful upgrade and it appears to me that we will have to build a 
> larger DCS office to hold all of the new servers for this and that and that 
> and that and that.
> Let alone support the cost of installation.
> Is anyone at Foxboro listening?
> However to be fair I have seen two of Foxboro's competitors being installed 
> over the last two years and it was the same dog and pony show. That being 
> said it doesn't make it any easier to go to management and get the funding.
> 
> Robert Balmer
> Senior Application Analyst/Programmer
> CCST
> Climax Molybdenum Co.
> 2598 Highway 61
> Fort Madison IA 52627
> (319) 463-2206
> 
> -----Original Message-----
> From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On 
> Behalf Of Schouten, Frits JF
> Sent: Tuesday, August 03, 2010 3:47 PM
> To: 'foxboro@xxxxxxxxxxxxx'
> Subject: Re: [foxboro] 8.5 Domain Controller
> 
> The biggest problem I have with this move to the MS environment is the 
> ballooning cost.
> Does MSFoxboro really believe that we have money trees growing in our 
> backyard?
> 
> Cheers,
> 
> Frits Schouten
> Principal Engineer
> Process Computing Department
> Phone:   +64 +9 375 8111 ext 5261
> Email:   Frits.Schouten@xxxxxxxxxxxxxxxxxx
> 
> 
> 
> -----Original Message-----
> From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On 
> Behalf Of Corey R Clingo
> Sent: Wednesday, 4 August 2010 8:40 AM
> To: foxboro@xxxxxxxxxxxxx
> Subject: Re: [foxboro] 8.5 Domain Controller
> 
> Another conclusion: maybe it is not time to jump into this new setup just
> yet.  I don't have the luxury of being a pioneer and pulling the arrows
> from my back at the moment (though I appreciate those on this list who are
> the pioneers).
> 
> Of course, I've been saying that about Windows I/A for the last 10 years,
> so what do I know?  :)
> 
> 
> To be fair, I guess you can just by another (or 2 more, if you want
> redundancy) Pee-Ninety-Whatever boxes just to run domain controllers on.
> Not very "green", or very cost-effective, but oh well.
> 
> 
> Corey
> 
> 
> 
> 
> NOTICE - This message and any attached files may contain information that is 
> confidential, legally privileged or proprietary. It is intended only for use 
> by the intended recipient. If you are not the intended recipient or the 
> person responsible for delivering the message to the intended recipient, be 
> advised that you have received this message in error. Any dissemination, 
> copying, use or re-transmission of this message or attachment, or the 
> disclosure of any information therein, is strictly forbidden. BlueScope Steel 
> Limited does not represent or guarantee that this message or attachment is 
> free of errors, virus or interference.
> 
> If you have received this message in error please notify the sender 
> immediately and delete the message. Any views expressed in this email are not 
> necessarily the views of BlueScope Steel Limited.
>  
>  
> _______________________________________________________________________
> This mailing list is neither sponsored nor endorsed by Invensys Process
> Systems (formerly The Foxboro Company). Use the info you obtain here at
> your own risks. Read http://www.thecassandraproject.org/disclaimer.html
>  
> foxboro mailing list:             //www.freelists.org/list/foxboro
> to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
> to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
>  
>  
>  
> _______________________________________________________________________
> This mailing list is neither sponsored nor endorsed by Invensys Process
> Systems (formerly The Foxboro Company). Use the info you obtain here at
> your own risks. Read http://www.thecassandraproject.org/disclaimer.html
>  
> foxboro mailing list:             //www.freelists.org/list/foxboro
> to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
> to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
>  
> 
> 
> *** Confidentiality Notice: This e-mail, including any associated or attached 
> files, is intended solely for the individual or entity to which it is 
> addressed. This e-mail is confidential and may well also be legally 
> privileged. If you have received it in error, you are on notice of its 
> status. Please notify the sender immediately by reply e-mail and then delete 
> this message from your system. Please do not copy it or use it for any 
> purposes, or disclose its contents to any other person. This email comes from 
> a division of the Invensys Group, owned by Invensys plc, which is a company 
> registered in England and Wales with its registered office at Portland House, 
> Bressenden Place, London, SW1E 5BF (Registered number 166023). For a list of 
> European legal entities within the Invensys Group, please go to 
> http://www.invensys.com/legal/default.asp?top_nav_id=77&nav_id=80&prev_id=77. 
> You may contact Invensys plc on +44 (0)20 7821 3848 or e-mail 
> inet.hqhelpdesk@xxxxxxxxxxxxx This e-mail 
>  and any attachments thereto may be subject to the terms of any agreements 
> between Invensys (and/or its subsidiaries and affiliates) and the recipient 
> (and/or its subsidiaries and affiliates).
> 
> 
>  
>  
> _______________________________________________________________________
> This mailing list is neither sponsored nor endorsed by Invensys Process
> Systems (formerly The Foxboro Company). Use the info you obtain here at
> your own risks. Read http://www.thecassandraproject.org/disclaimer.html
>  
> foxboro mailing list:             //www.freelists.org/list/foxboro
> to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
> to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
>  

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?
 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             //www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave

Other related posts:

  1. Home
  2. foxboro
  3. Archive
  4. 08-2010