Michael Mott @ myITforum.com

Notes from the MVP Summit on WMI

mmott — Wed, 05 Oct 2005 02:59:00 GMT

Well 99% of the info we got at the MVP summit was NDA, meaning we cant blog about it, but one of the sessions we got brought in on, was issues around WMI and repository corruption.

Alain Lissor the Program Manager for WMI, gave us a quick down and dirty for troubleshooting and fixing WMI issues. The commands below are fixes for XP SP2 and W2K Server 2003, but the trouble shooting tips could apply for Windows 2000. The underlying theme Alain gave to us is, don't just kill the repository to resolve the issue! The slide from his PPT is inserted below.

Understand how WMI works first!

Firewall issues - Common port blockage can do this, so double check your client side settings
DCOM security - http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/wmi_troubleshooting.asp
Logging Activity (Core and Providers) - Client side wbemcore and provider logs have a good deal info check this link for starters http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/wmi_log_files.asp
MSFT_WMISelfEvent to track WMI internal events - Check this Tech Net link for more details http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/wmi_troubleshooting_classes.asp

CIM repository corruptions
- Even if you have a WMI error or issue, it is not proven that it is a WMI repository corruption.
- XP SP2:
  - rundll32 wbemupgd, UpgradeRepository
- 2003 SP1:
  - rundll32 wbemupgd, CheckWMISetup
  - rundll32 wbemupgd, RepairWMISetup
- In case of WMI issues, it is not always proven that it is a corruption:
  - Don’t delete the repository right away:
    - Are you getting invalid class/instance or class/instance not found messages?
      1. Use RUNDLL commands above.
      2. In 2000, save a copy, delete, restart, and try. Then, restore the copy and try again. If it works, the repository was not corrupted and your SMS data are not lost.
      3. If only solution is to delete, then make sure all MOF files are recompiled (autorecover registry versus MOFs existing on the disks).
      4. Let us know:
        OS?, SP Level?, Client or Server?, Hardware used (IDE, SCSI)?
        You can let us know this via http://blogs.msdn.com/wmi/default.aspx

Alain indicated that they are currently looking into WMI corruption issues so use the Blog link above to check and post some of your findings.

Its not always this simple

mmott — Wed, 24 Aug 2005 14:37:00 GMT

After hitting Brian Tuckers Blog for a look see, and then getting directed to Tim Minters, I found a happy ending article to a patch deployment story. Its nice when a company can be protected with knowledgeable system admins and that it can be done quickly and painlessly.

But folks, its not always this simple.

If you work in an GLP (Good Lab Practices) and/or FDA regulated place, its sad to say but, patching takes longer. If you work in an ISO certified environment it could take even longer, updating SOP's and documentation and test scripts can become a nightmare. In fact, I guarantee, this is why some large corporations got hit as bad as they did with this last one. Not all shops are blessed with SMS or security admins that can do the kind of things we do everyday, but I bet a lot of folks got handcuffed into staying un-patched or backed rev'ed on service packs. Lets face it though, if you were at SP4, you had to act pretty darn quick (less than a week to test/deploy/update SOP's or working instructions) to stay ahead of the infection hitting your corporate LAN.

Hand-cuffing happens in large places where a myriad of vendors have applications that cannot operate on a certain SP level. Ok, Ok, any tech worth their weight in Gold knows this is BS, but these vendors suffer from the same political game that the shops where their software is deployed suffer from, lack of time and or initiative to update the code or test plans to work at a new SP level. Hence the vendor tells the 'Vendee' “Sorry but if you update to SP4 or even SP3, we cannot support you”, so they stay at SP2 and get hosed a year later with sasser or some other new wave virus.

Knowing how to use the tools at hand, you as an Admin can at least tell your shop of the threat. It only took seven days this time people, be aware, be vigilant be outspoken to management. Its not always this simple, except for the virus creators, they know large business have these invisible handcuffs.

Use a Hosts file and SMS to Block Pop-ups and Spyware

mmott — Fri, 08 Jul 2005 03:59:00 GMT

Anyone who has surfed the Internet during this past year has knowingly, or unknowingly, picked up some kind of spyware along the way. In the corporate environment, this can become a never-ending battle, especially for traveling users. Most users and their systems are protected when on the corporate WAN by antivirus or other software. However, support personnel may spend hours cleaning a system only to have the system get hit again when the user is home or on the road.

Here's one solution that uses Systems Management Server (SMS) and a modified host file to help keep systems safe from ads, banners, cookies, Web bugs and even most hijackers.

http://searchwinsystems.techtarget.com/tip/1,289483,sid68_gci1084188,00.html?bucket=ETA

Signed Guitar Sells Big!

mmott — Tue, 05 Jul 2005 17:51:00 GMT

Stardust guitar 'valued at £600k'

Alvin Stardust is selling his first acoustic guitar - given to him on his 12th birthday. The former pop star recently discovered the instrument in his late mother's garage.

He had last seen the guitar, signed by all the Beatles, as well as Buddy Holly and Chuck Berry, in the 1970s.

The guitar has been valued at £600,000 by a specialist, the New Kings Road Vintage Guitar Emporium, in central London

http://icwales.icnetwork.co.uk/0900entertainment/0050artsnews/tm_objectid=15694310&method=full&siteid=50082&headline=stardust-guitar--valued-at--600k--name_page.html

Back from the Dead

mmott — Wed, 04 May 2005 14:39:00 GMT

Sorry I have been MIA for a bit! After a great MMS you start to feel like you can run the whole enterprise from your desk again, so watch for some new posts and article links from me and can I just say...

Its good to be back!

OK, in reality I forgot my blog password or so it seemed. I was using the right ID and password, but I was locked out. So many id's and so many passwords.

Geeks or hero's?

mmott — Fri, 14 Jan 2005 02:07:00 GMT

A survey conducted last September has some surprising results about the kind of person who likes and plays video games.

http://biz.yahoo.com/bw/050111/115500_1.html

Contrary to popular belief, Boxing Day has nothing to do with fighting.

mmott — Tue, 11 Jan 2005 03:21:00 GMT

Another interesting Snopes debunking!

http://www.snopes.com/holidays/christmas/boxing.asp

Kevin Spacey to play Lex Luthor

mmott — Mon, 10 Jan 2005 04:41:00 GMT

This could be a great casting ala Michael Keaton as Batman. Supposedly this film takes place some time after the second Superman film. Surprises me that although Gene Hackman as Luthor was a bit campy, I don't see why he could not reprise that role. But it looks like a fresh start all around and with Bryan Singer at the helm (XMen director) it could be a wild ride!

http://news.bbc.co.uk/1/hi/entertainment/film/4157771.stm

Is Microsoft caving already on Spyware rules?

mmott — Mon, 10 Jan 2005 00:18:00 GMT

Looks like MS gave in to the makers of WeatherBug when they complained about the Ad portion of their application, named Minibug.

“In the case of WeatherBug, the dispute-resolution process paid immediate dividends. On Friday, the company received a response from Microsoft with the good news that the current signatures for Minibug will be removed. All the ads we serve are completely within the application. We've been at this since 2000, and we have millions of active, happy users," said Pete Celano, vice president of marketing at WeatherBug.

Funny, my recent home test of the new antispyware tool found this Minibug on my machine, and I gladly had it removed. Even funnier, I never installed WeatherBug nor AOL on my machine. Makes me wonder where I got it from? See more details here:

http://www.eweek.com/article2/0,1759,1749409,00.asp?kc=EWRSS03129TX1K0000614

Need to send large files? Try YouSendIt

mmott — Fri, 07 Jan 2005 04:17:00 GMT

Recently in a quandary to send an update to family member I happened upon this site. Basically it allows you to send a large file (Up to 1GB) to anyone regardless of mailbox limits.

This simple method sends the file to the hosting server, which in turns sends and email link to the recipient. That link, points back to YouSendIt servers that the receiver clicks on. Wala, instant file download!

http://s12.yousendit.com/

The Skinny on General Custer

mmott — Fri, 07 Jan 2005 02:02:00 GMT

OK living in Monroe, I see the Custer statue everyday to and from work. I am also familiar with his one big blunder at Big Horn, but did you know that the Boy General was involved in over 20 Civil War battles including the defeat of J.E.B Stuart at Gettysburg?

Custer's famous battle is out lined in Armchair General for December and it offers readers the ability to step into that battle and see if they can fair as bad or better as George did. The battle is still used as a training tool for Army cadets learning military strategy. Students are given information on the battle, but not told what battle it is. Most of the time, they choose the same route as Gen. Custer. See more of the magazine on line at:

http://www.armchairgeneral.com/index.php

So, while I am off...

mmott — Fri, 24 Dec 2004 04:03:00 GMT

OK so in a few days Xmas will be over and you may be wondering, what can I buy that I did not get, or did not think to ask for? Well I already know what I am going after, and its a place I completely forgot about until today. You have seen some of my posts on the Beatles and music, but have you ever thought about a modification for your guitar? Sometimes a simple knob change can have a great affect, but what about a dramatic pick guard change?

Pickguardian has some great looking products at a pretty fair price, and now I am looking to mod my two Rickenbacker's to a new style! To me this is a great way to get the old style looking Ric, that you may not have bought right out of the box, and get it to a retro style:

Go from this to this in a matter of a few weeks!

Pickguardian gives the option to send your current guards in to get sized or you can use their templates to double check and just order. Heck you can even take a chance, and just order based on your model guitar. Want to get an even cooler option, go for your own signature series model! Thats right, send your signature or band name in, and and get your guard with these custom options:

with the final results below!

Lots of different choices folks, so rig out your axe till your hearts content. And like I always say, if you cant play good, at least look good!

Say, isn't that the Governor of California?

mmott — Tue, 21 Dec 2004 03:35:00 GMT

A buddy of mine sent me this a while back and I just found the link again in my email. While I have never been to Japan (and I do hope to go someday) it appears that Hollywood has found its way there already, and just loves it!

http://www.japander.com/

Guitar used by Beatles sells for $567,500

mmott — Sun, 19 Dec 2004 18:19:00 GMT

A classic Gibson guitar used by George Harrison on the Beatles' "Revolver" album and by John Lennon on the "White Album" sold Friday to an anonymous bidder for $567,500, Christie's auction house announced.

http://www.indystar.com/articles/1/203282-4621-062.html

The Beatles and their Guitars

mmott — Sat, 18 Dec 2004 03:56:00 GMT

Ok, I admit it I am a big Beatle's fan, but I am an even bigger guitar fan. It took me over 25 years to finally purchase a Rickenbacker, something I had always wanted to do, but never had the cash to see it through. Well it was worth the wait at least to me, but there was a lot to the Rickenbacker history I did not know, especially when it came to John Lennon. The history of his famous 325 and the story around it getting painted were quite interesting at best!

The history of the Beatles music is, well, pretty thoroughly documented. With the advent of the net and the recent releases of Anthology on DVD, you can bet your Beatle boots we probably have seen the most of it. But what about the instruments they used? To me the fascination for Lennons Rickenbacker drove me into playing and buying guitars. For a more detailed history on the instruments the boys used, check these links below. Even if you dont like Beatle's music, I think you will find the history of the guitars to be pretty fun to read.

http://www.rickbeat.com/beatles/beatles.htm

http://www.geocities.com/vintage325/