[THIN] Re: *** RPC ALERT *** We got hit.
- From: "Claus, Brian" <BClaus@xxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Fri, 1 Aug 2003 12:15:38 -0400
Chris, Does that search for the clients or do we have to select the
clients to push it to?
_____
Brian Claus, A+, Network+, MCP
Network Administrator
WESCO Distribution, Inc.
225 West Station Square Drive, Suite 700
Pittsburgh, PA 15219-1122
Phone: 412-454-2412
Fax: 412-454-2540
bclaus@xxxxxxxxxxxxx <mailto:bclaus@xxxxxxxxxxxxx>
_____
-----Original Message-----
From: Chris Lynch [mailto:lynch00@xxxxxxx]
Sent: Friday, August 01, 2003 12:05 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: *** RPC ALERT *** We got hit.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I use Shavlik's HFNETCHK Pro. VERY nice program. The free version is
limited with reporting capabilities, but it does get the job done.
Also, the Lite version will only deploy to 50 client's at a time. So if
you have more, I highly recommend getting the full blown version.
Chris
________________________________
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Claus, Brian
Sent: Friday, August 01, 2003 8:56 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: *** RPC ALERT *** We got hit.
How is everyone applying this patch to their users?
We have a WAN with a lot of 56k frame connections. I'm thinking a logon
script is the easiest way to go (we don't have altaris or SMS).
Anyone have a script developed for this yet?
________________________________
Brian Claus, A+, Network+, MCP
Network Administrator
WESCO Distribution, Inc.
225 West Station Square Drive, Suite 700
Pittsburgh, PA 15219-1122
Phone: 412-454-2412
Fax: 412-454-2540
bclaus@xxxxxxxxxxxxx <mailto:bclaus@xxxxxxxxxxxxx>
________________________________
-----Original Message-----
From: Wesley Suderman [mailto:wsuderman@xxxxxxxxxxxxxxxxxxx]
Sent: Friday, August 01, 2003 11:53 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: *** RPC ALERT *** We got hit.
Yes, it does require a reboot...
wes
-----Original Message-----
From: Steve Ens [SMTP:sens@xxxxxxx]
Sent: Friday, August 01, 2003 8:46 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: *** RPC ALERT *** We got
hit.
I'm assumed some have applied this already, is there a
reboot required for
the servers?
-----Original Message-----
From: John Twilley
[mailto:John.Twilley@xxxxxxxxxxxxxxxxxxxxx]
Sent: Friday, August 01, 2003 10:00 AM
To: 'thin@xxxxxxxxxxxxx'
Importance: High
Just a heads up...
You all have heard on the RPC exploit that effects Win
NT/2000/XP/2003.
We just got a taste of it in our Italy office...and it
is BAD! VERY BAD.
Win XP / 2000 / 2003
You will notice that the DEFAULT recover setting for the
RPC service is to
(Drum-Roll)
RESTART the server after 1 minute.
Guess what, it does.
Server restarts every couple of minutes.
WOW.
Take it from me... PATCH EVERYTHING NOW. Yes.
Everything.
More Details.
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulleti
n/MS
03-026.asp
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO
SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and
increases terminal server
capacity. Really get MORE from your existing servers!
Free eval:
http://www.rtosoft.com/enter.asp?id=130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or set Digest or
Vacation mode use
the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO
SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and
increases terminal
server capacity. Really get MORE from your existing
servers! Free eval:
http://www.rtosoft.com/enter.asp?id=130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
Comment: Public PGP key for Chris Lynch
iQA/AwUBPyqPx29fg+xq5T3MEQLBvwCgnohIKSvphzRtUGFd9LN8fJBzkK4AnAgd
E7TvzbabpCbjrWhSR2sRbAA1
=ymvE
-----END PGP SIGNATURE-----
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and increases terminal
server capacity. Really get MORE from your existing servers! Free eval:
http://www.rtosoft.com/enter.asp?id=130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
