[isalist] Re: Some tasks using scripts.

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 13 Apr 2007 11:20:07 -0500

There is a drain feature right in the ISA firewall console, IIRC.
 
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/> 
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
MVP -- Microsoft Firewalls (ISA)

 


________________________________

        From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God)
        Sent: Friday, April 13, 2007 11:15 AM
        To: isalist@xxxxxxxxxxxxx
        Subject: [isalist] Re: Some tasks using scripts.
        
        
        Doesn't nlb.exe have a drain parameter?  NLB isn't my area of
expertise, but I thought you could "drain" from the command line
somehow... I bet Jim knows ;)
         
        t

                ----- Original Message ----- 
                From: D PIETRUSZKA USWRN INTERLINK INFRA ASST MGR
<mailto:DPietruszka@xxxxxx>  
                To: isalist@xxxxxxxxxxxxx 
                Sent: Friday, April 13, 2007 8:48 AM
                Subject: [isalist] Re: Some tasks using scripts.


                But the thing is, I'm looking to specifically do a drain
of the service, no a stop. Is there any parameter on the net stop to do
a drain, or is there any other command to run a drain?

                 

                Regards

                Diego R. Pietruszka

                MSC (USA) - Interlink Transport Technologies

                 

                
________________________________


                From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God)
                Sent: Friday, April 13, 2007 10:08 AM
                To: isalist@xxxxxxxxxxxxx
                Subject: [isalist] Re: Some tasks using scripts.

                 

                You'd have to do something like "net stop" in a script
that uses "RunAs" to escalate privileges.  You could obfuscate the
password in an encoded vscript, but they could get to it if they wanted
to badly enough. 

                 

                But, you could tell them not to do that and then audit
for logon events for the account you created to do that-- at least you
could know if it was being abused.

                 

                t

                 

                        ----- Original Message ----- 

                        From: D PIETRUSZKA USWRN INTERLINK INFRA ASST
MGR <mailto:DPietruszka@xxxxxx>  

                        To: isalist@xxxxxxxxxxxxx 

                        Sent: Friday, April 13, 2007 5:38 AM

                        Subject: [isalist] Some tasks using scripts.

                         

                        Dears, I need to give some IT guys the ability
to drain the NLB service, but I assume the only person that can do that
in ISA2004 or ISA2006 is an administrator of the array or enterprise.

                        Since I don't want to make those guys
administrators of any array, I'm wondering if there is a way to drain
the service using a script. Does anybody know a way to do it?

                         

                        Thanks

                         

                        Regards

                        Diego R. Pietruszka

                         

Other related posts: