text:
August 28, 2007 4:00 AM PDT
Are drivers ready for high-tech onslaught?
- Related Stories
Body of a car, brains of a PCAugust 13, 2007
Toyota: Gas-saving valve in engines by 2010June 15, 2007
- Related Blogs
Volvo C30 to get 52 mpg
August 20, 2007
Nissan brakes for you
August 7, 2007
Japanese revved up for car software standard
July 30, 2007
On tap from BMW, Mercedes, GM, Lexus and others are a wide range of high-tech navigation systems, parking assistance features, touch-screen displays, Bluetooth communications and other developments, as human control of mundane--and not-so mundane--systems is being rapidly ceded to automation.
But without one's own personal Q to explain how each gadget works, how much new tech is too much for the average consumer to handle?
"A lot of it is beneficial...But it can be confusing and in the automobile, that's a safety threat," said Don Norman, professor at Northwestern University, author of The Design of Future Things and co-founder of the Nielsen Norman Group, a company that consults with major manufacturers on the design of everything from Web sites to car computers.
Norman and others say automakers have their work cut out for them in teaching drivers how to best use these new tools. And then there's the user interface: Forget about familiar personal computer-like displays. Many advanced systems being placed in cars require no-peek coordination.
The more difficult task might be convincing people that a computer can read a map, place phone calls, apply brakes, mind the blind spot, stay in the right lane and maintain a safe driving distance from the next car better than the average driver.
It's a change that will affect the entire driving world.
"Lots of people, including myself, used to say people shouldn't adapt to tech, tech should adapt to people. But now I look at it and say, 'We are making tech to be used by everyone across the world. The stove is the same in all cultures despite the fact that the cooking is different," said Norman.
Regardless of consumer trepidation, the computerized car has arrived not only for behind-the-scenes mechanics, but for driver interaction as well. As one CNET News.com reader put it: "This'll certainly give new meanings to 'blue screen of death' and your computer 'crashing."
Perhaps the best indication that the car-as-computer has "arrived" is GM's CEO Rick Wagoner being added as a keynote speaker for January's 2008 International Consumer Electronics Show alongside technology leaders like Bill Gates, Intel's Paul Otelleni and Panasonic's Toshihiro Sakamoto.
In a Telematics Research Group review (PDF) of 2008 car models, 70 percent have voice-activated Bluetooth communication capability and 80 percent offer navigation systems as either options or standard equipment.
"Any safety tech based on sensors will also become very popular...They are relatively inexpensive for the OEM to implement since the components have come down way low in price. And they also have value for the customer," said Phil Magney, co-founder and principal analyst of Telematics Research Group.
design expert
Drivers can expect to see things like parking assistance, blind spot detection, lane departure warning systems and adaptive cruise control trickle down to non-luxury models very soon, said Magney.
Already, 60 percent of 2008 models offer a parking assistance feature with audible warnings, and about a third offer camera-based versions that include a live video feed to a dashboard screen to give drivers a better view of nearby objects.
Other features could be harder for drivers to master. Norman, in his book, relates a story about a driver who's forgotten that his car is in adaptive cruise control, which allows a car to self-regulate speed and maintain a safe distance from the next car. After sitting in traffic for some time, the driver exits from the highway. The car, sensing there is no longer traffic immediately in front of it, speeds up to highway speed on the curvy exit ramp forcing the driver to slam on his brakes.
"It's amazing how much of this is designed by engineers who have no real understanding of the way average, everyday people behave. If you talk to the people who deploy these cars, they say it's meant to assist, not be relied on (for preventing accidents). The drivers are not going to understand that distinction," said Norman.
Thomas Plucinsky, BMW product and technology communications manager, disagrees with Norman's assertion that it's the automakers' job to anticipate misuse of a feature like adaptive cruise control.
"Our new adaptive cruise control...(is) really meant as an aid on the highway. Our intention is not to drive the car for the driver. It remains the driver's responsibility to keep their eyes on the road and keep control of the car," he said.
BMW's opinion is significant as it is a leader in high-tech car innovation and will likely drive new features into the market. The Telematics Research Group named BMW the maker of "the most technologically advanced vehicle in the world" based on the company's 2008 5-series vehicles.
BMW also knows the pain of being on the bleeding edge of new technology. It's iDrive system, which was introduced for the 2002 BMW 7-series, works similarly to an iPod click wheel in that a mechanical knob is used to maneuver around a dashboard-mounted LCD screen to control things like air conditioning and heating, navigation systems, communications and other features.
Page 1 | 2
See more CNET content tagged:
Don Norman, telematics, General Motors, co-founder, car
18 commentsJoin the conversation! Add your comment
- "We don't want cars to drive themselves"
- Is the sub-text here, "We don't want the legal liability of cars
driving themselves"? If the car's system did most of the driving,
including accident avoidance and then failed to perform properly,
due to say a software bug, then who would be liable for the
damages in any accident?
- Like Reply Link Flag
- Bluetooth
- I use a Bluetooth aftermarket car kit in my car and it is extremely useful. I knew it was only a matter of time that Bluetooth would become standard in automobiles. Most of my friends don't even know what Bluetooth really is yet. I usually point them to this site:
http://www.bluetomorrow.com
- Like Reply Link Flag
- I like that my car helps me drive
- My 2004 Infiniti M45 has adaptive cruise control and braking assitance for imminent collisions. It uses front mounted lasar radar for both. I find it works fairly well and helps me drive my car more safely. The adaptive cruise control allows the car to apply 25% braking to slow more quickly than just zero throttle if it needs to. With the way some people drive here in Southern California, I have even experienced the proximity alarm going off when a car cut in close in front of me. I know if the car had control of this, it likely would have braked, but luckily, Nissan had the good sense to let me do the driving. These systems are helpful, and I can also see that in the hands of some of the ignorant savages I see driving around, are not for everybody. For them, a '74 Pinto is just right.
- Like Reply Link Flag
- Other points.
- I am a proponent of FLW's "form follows function." I'm not at all against appropriate new technology of any kind as long it solves more problems than it creates for the majority of its consumers. While the article implied it did not emphasize sufficiently - that current automated automotive driving technology is computer geek driven rather than auto consumer driven. Working backwards from consumer needs and desires has generally been a historic problem in the computer development industry (computer geeks see the consumer in their own image - rather than simple tool users) and now the same failed approach has infected the auto industry as digital technology becomes feasible for autos.
The other driving factor pushing the computer take over of driving is that the computer market has already demonstrated that computer (software and hardware) consumers will accept a product life of 1-3 years. You can see the auto execs salivating over a car that's dead or digitally obsolete in 2-3 years - or a chain of income producing mandatory software updates. Just can't wait to see this mess unfold.
- Like Reply Link Flag
- Adding toys would help the real problem!
- Automotive manufacturers need to concentrate on getting vehicle efficient, reliable and longevity so the family use their meger wages for raising the children. Way too much money is being wasted on these throw away vehicles. So far one has achieved this. Now they think adding bells and whistles gizt and glitter will is the answer. Up scale is because the profits are higher for the management team, nothing about a quality product. Marketing does fine jobs of selling promises and so so products. All this is doing forcing more and more people to keep driving junk.
They keep re-inventing the automobile over and over,---keep the bean-counters out of engineering would help immensely.
- Like Reply Link Flag
- High-tech = high cost repair
- I don't want high-tech features in my car because it eventually breaks. At that point I'm stuck with a high-cost repair or deal with a high-cost feature that no longer works. One situation drains the wallet, the other drains the attractiveness and emotional connection to the car. Both situations are highly frustrating. Give me analog or decades-proven technology! It works for a long, long time, is easy and inexpensive to fix/replace, and it just feels good when something keeps on working and working.
- Like Reply Link Flag
- Costly electronic repairs
- Recently I had an electrical problem with my 2004 Mazda 3; it
made it impossible to turn off the headlights. It took several
days for the required replacement part to arrive so, until it did, I
had to carry a wrench to disconnect the battery every time I
parked. When the part arrived, it took a technecian 4 hours to
install it. Fortunately it was covered by warranty but, at
probably about $60 per hour, the labor alone would have cost
me about $240 had it not been covered by warranty. If the car
had been made before 1970, it could probably have been fixed
in less than 1/2 hour.
As cars become more complicated, repair costs can be expected
to increase dramatically. A repair that in the 1960s would have
taken perhaps half an hour to fix could take a day or more, and
the cost of parts required could be astronomical.
Although I'm not opposed to new technology in principal, we
have to be aware of the problems it causes. Repairs could
become so costly that an electronic failure on a 5 year old car
would be so expensive to fix that the car would be scrapped
even if mechanically it was in good condition and would provide
reliable transportation for another 10 years.
- Like Reply Link Flag
- Just wait
- "If the car is in control, it will not break the traffic laws or...speed limits. And you will have an angry driver trying to say, 'But, I'm in a rush. I need to get there,'" he said. "
That is exactly what is planned down the road "for the good of the masses". The Brits are working on it now, tying GPS into mapping databases and the vehicle's operating systems. It's not even a technological issue anymore, merely a political one and the control freaks that run governments are salivating at the thought of being able to control and monitor people's driving habits.
- Like Reply Link Flag
- How about some usefull tech
- Like electronically controlled valve operation, imagine how much
more power you could get without having a fixed cam profile.
Or electronically controlled intake runners. With a full electronic
valve cycle, you could also implement a variable Miller cycle
engine, which pulls less cylinder volume under light load, and
large amounts under heavy load. You could double power
output, and cut fuel consumption by half.
Stop wasting time and money developing useless gadgets, and
work on what matters, the power train.
- Like Reply Link Flag
- You have to wonder how reliable it will be.
- I've always thought that if we had computer controlled cars they'd do things like refuse to make certain turns at certain intersections for absolutely no reason that anybody could figure out.
- Like Reply Link Flag
- Sleeping drivers.
- As it is, many drivers wait more than a second after a light turns from red to green. If you make a car too easy to drive, people will and do fall asleep at the wheel. get rid of cruse control. If you want, the driver can set an audio alarm if the car goes above or below a set speed by more than 2 MPH, but the driver is the one that steps on or of the gas.
Make ABS breaking systems something that a driver can turn off. A skilled driver with good reflexes has better reactions than an ABS system. Sometimes an ABS system does what the driver does not want.
Encourage standard transmissions over automatics. A good driver has far more control of a standard. I can understand use of an automatic transmission if a person is disabled.
Limit the amount of power steering a car has (If you can't feel the road, you are not in control of your car.
It is a good thing for the car to provide more information to the driver. It is a very bad thing for the car to make decisions for the driver.
- Like Reply Link Flag
- Great!
- Here are some tips on how you can buy and have a quality used car, so as you would not be replacing unnecessary parts along the way...Hope, this might help...
Tips & Warning
? As a final precaution, take the car to a mechanic, who should charge a reasonable fee to check over a used car. The seller should agree to this, but may require that you leave a deposit. If the seller won't let you take the car, offer to meet him or her at a mutually convenient garage.
? If you give the seller a deposit in order to take the car to have it checked, make sure to write out an agreement stating that the deposit will be returned immediately if you decide not to buy the car.
If the vehicle's mileage appears unusually low, have a mechanic determine whether someone has tampered with the odometer. If so, the seller must refund any money you have paid and may be liable for punitive damages under federal and state odometer laws?
This is how I acquire my car; I inspected all its auto parts from exterior and interior aspect down to its nissan altima performance parts and other accessories. By doing so, you could be sure of the quality of vehicle you are getting?=)
- Like Reply Link Flag
- Computer-controlled plus Bluetooth Equals Hacked & Highway disasters
- If a car was computer-controlled in a moderate way, like for brakes and accelerator,and if the BlueTooth (BT) WPAN communications gets also integrated also, and thereby linked through a series of circuits equals able to be hacked. For cars with that, with an operating system of sorts, the same system can be hacked by people with good BT hacking skills. There are people who will try to hack other people's cars just to see if they can, and some will do so, to be able to wreak havoc on others to be evil. With directional long-range antennas, a person can hack a BT-enabled phone from up to a mile away. If the BT-antenna was set in a car, and with a laptop in there too, a person could potentially remote control someone else's car to accelerate and brake on command or more. Lawyers and insurance companies would have a field day with all of these possibilities. Those are just a few of the worst possibilities of problems if BT was closer integrated with a car's computer systems.
- Like Reply Link Flag
- "Make ABS breaking systems something that a driver can turn
off. A skilled driver with good reflexes has better reactions than
an ABS system. Sometimes an ABS system does what the driver
does not want."
Good idea. And have 4 brake pedals, one for each brake, so that
the driver can control each brake as needed to prevent a wheel
from locking he way ABS does. The writer of the above post may
believe that he can do as well as the ABS computer, but I have no
such illusions about my ability.
- Like Link Flag
- This can be done with the OBDKey USB, Bluetooth and WiFi units. (http://www.obdkey.com)
- Like Reply Link Flag


text:
Hot DaysPosted Aug 30th - 1:29pm
How many 100 degree days did we have this summer (2006)? Where can I find that type of information?
Thanks, Lynnette
More about PressurePosted Aug 30th - 12:26pm
I just purchased a wireless weather station, and the barometric pressure reads 24.36 in Hg. Is this correct, I always thought it should be around 29 to 30. I live in Coalville Utah, rather than salt lake, but should it change in elevation? What is the average pressure in Coalville?
Kim B.
Rain TotalsPosted Aug 27th - 9:35pm
Why do you measure the precipitation in .01 (hundredths) instead of just .1 (tenths)? I know how small .01 is and is not enough to hardly get the ground wet. Even if you measure it in hundreths, why not report it in tenths? There is no difference in .02 and .07 that can be detected by a person. Why don't you report in tenths and if it is less than a tenth, report it as a trace?
John C.
Weather RecordsPosted Aug 25th - 1:57pm
What is the earliest weather recording in Salt Lake and what was the temp and weather for that day?
Chris H.
El Nino and La NinaPosted Aug 25th - 1:10pm
Everyone has heard of the El nino andits effects it has on Utah. But what about La Nina? Is that where the watercools? And what effect does it have on Utah, does it cause droughts or things like that?
Kesler C.
Forecasts for Other PlacesPosted Aug 25th - 10:39am
Where do I find forecasts for Mirror Lake in the Uintas at 10,000 feet?
Also, On Thursday, Aug. 31st, can you send me a Uintas outlook for the Labor Day weekend?
Mark S.
Mars and Earth email.Posted Aug 24th - 3:09pm
We're getting more emails each day about the Mars hoax.
Mars being very close to the earth happened a few years ago, check out the link on the right.
No, mars will not be that close to earth and it won't look like the moon. The closeness event happened in 2003. Since then, every August, we get inundated with confused viewer email on this, so hopefully you can know be ahead of the game.
BarometersPosted Aug 23rd - 12:51pm
Hello, can you please tell me what the numbers mean on the outside ring/face of this barometer? Thanks!
Jackie C.
More Weather HistoryPosted Aug 23rd - 10:21am
Would it be possible to query your data bases and send me the temperatures (morning, midday, evening, night, high and low) for September 7, 2002; September 6, 2003; September 11, 2004; and September 10, 2005 for the Salt Lake Valley, Brighton Ski Resort, Francis Peak or Farmington Canyon, and Bountiful City? Or simply pass on a good website where I might obtain this information? This data would be extremely helpful in preparation for the Wasatch Front 100 Endurance Run. Thank you very much for your help. David
This has to be the most common type of question we as meteorologists receive and the answer is simple but you just need to know where to dig. Since you are looking for past "climate" data, just doing a search for weather data probably won't get you the right information.
Hiking this FallPosted Aug 20th - 8:27pm
Aloha !
We are from Hawaii and are planning a Wasatch Hiking Trip next month (very beginning of September). Will this be too late to see the wildflowers in bloom at elevations such as Brighton? Will it be late enough to possibly see some fall colors in the trees? Or are we hitting it right in the middle? What will the average temperatures be like in the day and at night? Are shorts and t-shirt wearable? Is there a good chance of running into rainy weather?
MUCH MAHALO (Thank you !)
Benefiting Primary Children\'s Hospital
Current Air Quality Conditions
Latest Snowpack Conditions
Submit your photos today!
Powered by Solitude
Interactive Real-time Radar
Free Download
Utah Climate Record Database
The station representative who can assist a person with disabilities with issues related to the content of the public files is Mike Dowdle, available during regular office hours at firstname.lastname@example.com and (801) 575-5555.

subset: commoncrawl


text:
You, rightly, pride yourself on your healthy, typically Aries, knees. However, you are at an increased risk of celestial knee pop this month (that's when you, say, kneel or crouch and your knee stabs with pain, seemingly randomly, forcing you to yelp, and maybe topple over if the other knee does the same thing at the same time). This is due to some sort of complicated thing on Jupiter and it's not getting better any time soon. Avoid crouching, reaching for things on low shelves in supermarkets, and picking up babies or pet rabbits that have crawled under things.
Drinking beers and talking is about to become well starred for the first time this month, with minimal chance of tooth chip or lip bruise from putting your glass too quickly into your own mouth, and almost perfect coaster placement of your beer glass on the table without looking.
Favor any kind of flying video on Youtube but avoid any of the more marginal Gangnam parody's including the one with the farmyard animals and the one with the naked shaven haired Britney Spears impersonators.
feature is brought to you by theVoiceofReason.com


text:
Member since Sep 2012
0 Curated Comments,
1 Total
I am a father who has just separated from employment, once I was an administrator for the employment of consultants and contractors. I want to try myself but need capital in the business that I did not have. Hopefully one day my dream come true. I can not speak english very well so hopefully I use Google translate is understandable.
betrayal, war and lying
Interference from the people and God
Being rich
sincere honesty
In fact I do not have the money to businesses
changes to live better
Here are my dream
For me $ 556,000.00 is enough for my country and I was still dreaming. One time I was so rich. …


text:
Crest Wins With Awesome Halloween Prank On Kids [VIDEO]
I love it when an ordinary product delivers a very creative commercial!
I love it when an ordinary product delivers a very creative commercial!
Ahh, summer. 'Tis the season of watermelon art, diving fails and-- you guessed it-- belly flops. When we were kids, this pool move was awesome. But nowadays... who are we kidding? It's still (painfully) awesome!
If you think Taylor Swift is a feminist, you clearly haven't met her Twitter alter ego, "Feminist Taylor Swift."
She can take any T-Swizzle song and "female empower" it even MORE!
Teachers often have to deal with unruly students and even more unruly parents. With all the pressure that teachers feel, it's nice to see them let off a little harmless steam every now and then. Check out these teachers "video bombing" their students.
Even though this video is not in English, the humor comes through perfectly. Would you buy your meat from this butcher? He guarantees his cuts are totally fresh. Maybe we could get this guy a booth at the Broadway market


text: Cam Kashier and Roc are back on this Super Bowl Sunday with more new music. Cam shared with us that he and the camp are currently working on multiple things, and we can look for this one to land on a project titled The FiF Element. With that being said, take a listen to the new banger "Code Red" below and keep it locked here on TheMotiv for all the latest from the Buck50 camp.


text:
The Ponteix Liquor Store is one of four locations where the province will be converting existing liquor stores to rural franchises.
The Saskatchewan Liquor and Gaming Authority noted that Ponteix, Langenburg, Ituna and Kerrobert will undergo the change before the summer months.
"Three of these stores have high operating costs and the Kerrobert store building is 94 years old and quickly nearing the end of its useful life," Minister responsible for SLGA Donna Harpauer stated in a press release. "Converting these locations to rural franchises, rather than closure, will ensure these communities continue to have access to a full line of alcohol products at SLGA prices."
In Saskatchewan, there are currently approximately 190 rural franchises that operate in businesses such as grocery stores, insurance agencies, convenience stores, and pharmacies. The rural franchises locations sell alcohol on behalf of SLGA, at SLGA prices.
A total of four full time and eight part-time SLGA employees (6.6 Full Time Equivalents) will be affected by the conversions. These employees will have options outlined under their collective agreement, which may include bumping rights to other SLGA liquor stores.
The franchise opportunities for these four locations will be advertised in newspapers beginning next week, and interested businesses will have until May 8 to apply. Applicants will be evaluated on factors such as business experience, financial viability, location, hours of operation and type of business.
"We hope to have these new franchises in place and operating sometime this summer," Harpauer said. "SLGA's stores will continue to serve these communities in the interim."
The Saskatchewan Government and General Employees' Union was quick to denounce the decision as another blow to rural communities that rely on public services and public service jobs to meet local needs and keep local economies vibrant.
"Losing good jobs hurts small towns and rural communities," says SGEU President Bob Bymoen. "These staff members live and work in these communities. They have families, children who attend local schools, keeping enrolments up. They support local businesses, pay local taxes, and are part of the recreational and social life of those towns."
SGEU argues that research shows that public service jobs in rural Saskatchewan have a positive impact on the local economy. For every two public service jobs in rural Saskatchewan, a third spin-off job is created.
"The staff at SLGA liquor stores are trained professionals who are experienced in ensuring that liquor is sold in a socially-responsible manner. SLGA is committed to checking the ID of anyone who appears to be 25 years of age or less, to reduce the incidence of underage drinking.
"The government is licensing four new private liquor stores in Regina and Saskatoon, and now is closing four SLGA stores in rural Saskatchewan. This is the shift from public to private liquor sales we have been expressing concerns about for years," according to Bymoen. "It is an ill-conceived strategy that puts private profit ahead of the needs of families and communities."
Last year, public liquor stores generated $232 million in net revenue for Saskatchewan.
"Closing the liquor stores in Langenburg, Ituna, Ponteix and Kerrobert undermines the well-being and economic security of those towns and surrounding rural areas. We ask the government to reconsider this decision for the good of the families and communities affected," Bymoen added.


text:
Vizio VM3D550D 55" Class Edge Lit Razor LED 3D HDTV - 1080p, 1920 x 1080, 240Hz, 10000000:1 Dynamic, 5ms, HDMI, VGA, Wi-Fi, Smart TV, Vizio Apps, Energy Star (Refurbished)Item#: S03-5522 | Model#: RB-VM3D550DGB |
Currently Out Of Stock!
You May Consider This Alternative
Vizio VM3D550D 55" 1080p 240Hz LED Smart 3D TV RB Product Details
Vizio VM3D550D 55" Class Edge Lit Razor LED 3D HDTV (Refurbished)
Witness your favorite movies and videos come alive on the Vizio VM3D550D 55" Class Edge Lit Razor LED 3D HDTV. This 55" full frame beauty is a perfect addition to your home entertainment system with its hefty features and stylish looks. With its 10,000,000:1 contrast ratio, you'll get the truest, richest colors in every scene, pampering your eyes with superior picture quality. Plus, it can deliver full HD 1080p videos for extreme entertainment experience. The Vizio VM3D550D 55" Class Edge Lit Razor LED 3D HDTV is also 3D ready for mesmerizing visual effects and realistic viewing experience. Watch sports, action movies, and other fast-paced scenes without motion blur with its 240Hz Screen Refresh Rate and 5ms response time. You can mount it on your wall to showcase its beauty. Immerse yourself in a totally mind-blowing experience with the Vizio VM3D550D 55" Class Edge Lit Razor LED 3D HDTV; order it now!
What It Is And Why You Need It:
- 55" LED HDTV; delivers stunning full HD 1080p visuals
- 3D Ready; offers a realistic viewing experience
- 240Hz Screen Refresh Rate and 5ms response time; reduces blur and ghosting during action-packed scenes
- Built-in Wi-Fi; lets you access online streaming sites
- VESA compliant; provides a better viewing experience
The terms refurbished and recertified are used interchangeable to describe products that manufacturers refurbished, inspected, brought back to original manufacturers specification then tested and repackaged for sale. Some manufacturers refurbish products themselves and others use a qualified third party refurbisher. Refurbished products represent a great value and we offer them with confidence knowing that every refurbished product was tested at least twice, once when it was first manufactured and again during the refurbishing process. Refurbished products are warranted by either the original manufacturer or the manufacturers third party refurbisher. Warranty terms applicable to refurbished products may vary; see below for specific warranty information and consider purchasing an extended service plan if you desire even more coverage.
Manufactured by: Vizio
Warranty provided by: Sohnen Enterprises, Inc.
Limited Warranty: 3 months parts; 3 months labor
Mfg Part No: RB-VM3D550DGB
UPC No: 794504526233
Box Size: ( Length:46, Width:11, Depth:35)
Shipping Weight: 40.0000 pound(s)
Dimensional Weight: 79pounds
What is Dimensional weight?
Click here for full warranty and support information
- Limited Warranty: A full text version of the limited warranty
may be obtained by mailing a self addressed, stamped envelope to the
address below and requesting the warranty for item number: S03-5522
Warranty Information
7795 W. Flagler St. Suite 35
Miami, FL. 33144
- Vizio logos are registered trademarks of Vizio. All others trademarks and copyrights mentioned herein are the property of their respective owners.


text:
Configuration Manager 2012 R2 SDK and Toolkit released
Microsoft yesterday released a updated version of the SDK for Configuration Manager 2012 R2, you can find it here –> http://bit.ly/1bsv2T8
This also includes an updated Application Workflow setup (Which allows you to integrate application approval process into Service Manager instead of IT managers needing to go into Configuration Manager to do application approval processes.
Microsoft has also released an updated version of its Toolkit for Configuration Manager –> http://bit.ly/14TYKRn which I have blogged about before –> https://msandbu.wordpress.com/2013/02/05/configuration-manager-2012-toolkit/
But now there are some new tools included in the package.
- * DP Job Manager – A tool that helps troubleshoot and manage ongoing content distribution jobs to Configuration Manager distribution points.
- * Collection Evaluation Viewer – A tool that assists in troubleshooting collection evaluation related issues by viewing collection evaluation details.
- * Content Library Explorer – A tool that assists in troubleshooting issues with and viewing the contents of the content library.
Including a Security Configuration Wizard for R2, now the cool thing here is the Content Library Explorer, which allows you to explore content and the source files of applications and such.
Managing Ubuntu Clients with Configuration Manager
Microsoft recently released a preview of System Center 2012 R2 and with it, they released a new version of the additional clients for Configuration Manager.
You can download them from here –> http://www.microsoft.com/en-us/download/details.aspx?id=39360
The pack includes clients for:
- AIX Version 7.1, 6.1, 5.3
- Solaris Version 11 (SPARC and x86) , 10 (SPARC and x86), 9 (SPARC)
- HP-UX Version 11iv2 (PA-RISC and IA64) , 11iv3 (PA-RISC and IA64)
- RHEL Version 6 (x64 and x86) , 5 (x64 and x86), 4 (x64 and x86)
- SLES Version 11 (x64 and x86), 10 (x64 and x86), 9 (x86)
- CentOS Version 6 (x64 and x86), 5 (x64 and x86)
- Debian Version 6 (x64 and x86), 5 (x64 and x86)
- Ubuntu Version 12.4 LTS (x64 and x86), 10.4 LTS (x64 and x86)
- Oracle Linux 6 (x64 and x86), 5 (x64 and x86)
- Mac OS X 10.6 (Snow Leopard)
- Mac OS X 10.7 (Lion)
- Mac OS X 10.8 (Mountain Lion)
For my part I see more and more using Mac in the enterprise, but at my former job we had alot of RHEL and Ubuntu users as well, so therefore I wanted to show how we can manage these types of clients in the enterprise.
Now in order to setup a client we need to download two files to the ubuntu computer.
The CCM-universal package and the install file.
After the files are downloaded you have to open terminal and run the following command from the download folder
NOTE: Be sure that the linux client can find the ConfigMgr servers by nslookup.
You might need to alter the resolv.conf file to point to another DNS server.
You might also need to define a domain name in order to use the FQDN
domainname AD.fqdn from terminal
./install -mp <computer> -sitecode <sitecode> <property #1> <property #2> <client installation package>
NOTE: You have to change the rights on the install file by running chmod +x install from temrinal
So in my case ./install –mp configmgr.msandbu.local –sitecode TST ccm-Universal-x86.tar
After this is done you can review logs from the /var/opt/microsoft/scxcm.log folder.
NOTE: If you run the installation again you will get a message if you wish to overwrite in case you entered the wrong info during setup, if you wish to uinstall it completely you can run the command /opt/microsoft/configmgr/bin/uninstall
Note: from CU1 Linux clients now support FSP as well which you can specify during the installation. –fsp fsppoint.fqdn
Configuration Manager and hierarchy planning
With 2012 release of System Center Configuration Manager, planning and designing a hierarchy became a bit more difficult.
Not because of the limitations, but because of the huge mix of different possibilities you have.
For instance with the introduction of CAS role (Which sits on the top of the hierarchy and is used for management purposes of many primary sites) you have even more options of how to manage your infrastructure.
In addition, with SP1 you have even more options, for instance you can now have more than one SUP for a primary site. (Which you could not have before SP1) and that the CAS SUP now doesn't need to sync directly with Windows Update as well) so this post is what factors you need to think of in terms of planning and how to manage the devices. In addition, for many which have multiple domains, trusted and untrusted, and in different forests and depending on how you want the flow of traffic to go it takes a lot of planning!
This post is meant as a guideline and might not always present the best options but just to show some possible examples of how you deploy Configuration Manager 2012 SP1.
Now first I am going to define how the hierarchy in Configuration Manager looks like.
In the first picture we have a stand-alone site (Primary Site) in the secondary picture we have a Primary site with two secondary sites.
In addition, in the last picture we have the CAS with three primary sites and with their secondary sites.
Source: http://i.technet.microsoft.com/dynimg/IC638818.gif
First I'm going to specify the limits of each hierarchy role:
CAS: (Does not process client data, and does not support clients assignments.
400.000 clients (If you use SQL Enterprise) 50,000 if you use standard.
25 Child Primary Sites
Asset Intelligence synchronization point (Can only be one in the hierarchy)
Endpoint Protection point (Can only be one in the hierarchy)
Reporting services point
Software update point
System Health Validator point
Windows Intune connector
Primary Site:
250 secondary sites
100,000 clients (50,000 clients if the SQL is installed on the same computer as the site server)
10,000 WES clients
50,000 Mac
Application Catalog web service point
Application Catalog website point
Asset Intelligence synchronization point (not if it's a child primary site)
Distribution point
Fallback status point
Management point
Endpoint Protection point (not if it's a child primary site)
Enrollment point
Enrollment proxy point
Out of band service point
Reporting services point
Software update point
State migration point
System Health Validator point
Windows Intune connector (not if it's a child primary site)
Secondary Site: (Must be linked to a primary site, MP and DP are installed automatically, installs SQL Express if nothing else is available)
5,000 clients.
Distribution point
Management point
Software update point
State migration point
Software Update Point:
25,000 clients (That is installed on the same server as the site server 100,000 else)
After SP1 (Supports multiple SUP per Site)
Distribution Point:
4,000 clients
250 DP per Primary Site
250 DP per secondary site
10,000 packages and applications
Management Point:
25,000 clients
10,000 Mac computers
10 MP per primary site
Now there are some roles that cannot be deployed in a untrusted domain:
These are out of band service point and the Application Catalog web service point.
But always think simplicity, so if it is possible avoid the CAS role where it seems logical.
(1 domain) ( 1 location ) 1 Primary Site
Depending on how many clients you have in your infrastructure, but with one location and one domain this is only and easiest way to go ahead, for high-availability purposes you should have 2 of each system role and a clustered SQL server for the site server.
( 1 domain ) ( 2 locations) 1 Primary Site 1 Secondary Site (Slow link)
Lets for the purpose of this post say that you have 1 location where you have most of your infrastructure, you have one remote site with 200 clients which has a limited connection to the primary site, one secondary site on the remote location would be the best approach. Clients there would talk directly to the management point and the distribution point of the secondary site.
(1 domain) ( 2 locations) 1 Primary Site and 1 Distribution Point (Fast link for secondary site)
In this case we have also a remote location but we have a fast wan link so we don't need a secondary site which has the agents and the applications and packages. Therefore, we have a distribution point at the remote location and clients communicate with a MP in the central location.
(1 domain) (2 locations) ( one small branch office )
I would recommend using branch cache on a distribution point and for the clients, when the first client requests content from the DP it will download it and cache it for other clients on the same subnet. This requires a DP installed with Branch cache.
NOTE: Remember that for a remote domain installation to work properly you would need to install the management point with an account that has access to the Configuration Manager database. You configure this during the installation of the Management Point.
( 2 domains untrusted forest ) ( 1 locations) 1 Primary Site in Primary (1 Management Point 1 Distribution Point)
Now we cannot install a primary or secondary site in a untrusted domain, we can only install user facing system roles in a untrusted domain. So therefore, we install a management point and a distribution point in the untrusted domain.
And we can also publish the site in AD for the untrusted domain as well.
( 2 domains trusted forest ) ( 1 location )
This depends on the number of clients but again a solution with a distribution point and a management point in the other domain could be a solution. In case there are too many clients, you would need to expand the hierarchy with a CAS and a primary site in each forest.
(Multiple domains untrusted) (Multiple domains)
Primary site or depending on how many clients. Use Primary Site in one domain (Pref the largest one) and deploy a distribution point and a management point in the other domains.
Here I will also link to some example hierarchy scenarios from Microsoft
Identify requirements to plan for a hierarchy
I would also recommend that you read Microsoft's own hierarchy for their internal Configuration Manager solution
Remote Control for Configuration Manager
I actually see a lot of search terms on this blog regarding Remote Control so therefore I wanted to write a post to clarify it's functionality and how to set it up. It allows for administrators to connect to a client without using RDP and even without a user logged on and you can interact with the user as well, allowing you to see what the users sees. All communication happens over port TCP 2701 and uses Kerberos for authentication (if it cannot authenticate using Kerberos it will try with the less secure NTLM)
To enable Remote Control for a set of clients
In the Configuration Manager console, click Administration.
In the Administration workspace, click Client Settings.
Click Default Client Settings.
On the Home tab, in the Properties group, click Properties.
In the Default dialog box, click Remote Tools.
Configure the remote control, Remote Assistance and Remote Desktop client settings.
Now there are some settings there are some bunch of settings there that you need to configure before you start.
Enable Remote Control on clients Firewall exception profiles
Select whether Configuration Manager remote control is enabled for all client computers that receive these client settings. Click Configure to enable remote control and optionally configure firewall settings to allow remote control to work on client computers. (Just to remember that Remote Control is disabled by default)
Allow Remote Control of an unattended computer
Select whether an administrator can use remote control to access a client computer that is logged off or locked. Only a logged-on and unlocked computer can be remote controlled when this setting is disabled.
Prompt user for Remote Control permission
Select whether the client computer will display a message asking for the user's permission before allowing a remote control session.
Grant Remote Control permission to local Administrators group
Select whether local administrators on the server initiating the remote control connection can establish remote control sessions to client computers.
Access level allowed
Specify the level of remote control access that will be allowed.
Permitted viewers
Click Set Viewers to open the Configure Client Setting dialog box and specify the names of the Windows users who can establish remote control sessions to client computers.
Now after you have changed the settings here you need Press OK and save the settings. If you need to change these settings or have different set of settings for different users, create a separate client settings and deploy it to a new collection.
And Viewers can be set to domain users and different viewers can be deployed to separate collections. You just have to create a separate Client Policy.
After these settings are changed to can go back to your computers right click and choose Remote Control
Now with the green bar appeared we have connected. The user will also see this green bar so it knows who is connected.
We can also see that it successfully used Kerberos to authenticate.
Configuration Manager and Collections
I see a lot of questions on the forums and lot's of traffic on my blog regarding computer collections. In many cases you want to separate your managed computers / servers into different collections.
For instance you would want to separate clients from two network segments because they need separate client settings or the clients in the one location needs one piece of software that the other one's don't need.
And in many cases collections can be a life-saver for software management.
For instance you can create a dynamic computer collection based on a registry value (To check if adobe reader is < version 9 if true then the computer is added to collection 1, where the IT-admin has deployed the newest Adobe reader as a required software. Next time the collection update happens the computer will no longer be present in the collection.
And also remember that a dynamic collection is based upon a query. And queries in ConfigMgr are based on WQL which basically is SQL for WMI.
Now where do we create collection ?
Open the ConfigMgr console –> Assets and Compliance –> Device Collections
Right click and choose Create
Now enter a name for the collection and choose a limit collection. This narrows down the collection. So if you have a lot of collections you should be more aware of using the limit collection, since this will lighten the database load.
Now under membership rules choose Query Rule –>
Now the query editor will open –>
And from here we choose Edit (We could also choose import another query but that we can do later)
So when we press Edit we come to the Query statement properties pane.
Under the general pane we choose for what attributes we wish to search for.
Under Criteria we choose what attributes we wish to add a statement for instance if a value is true or not.
So if we press the "Show Query Language" you can see the query that is being generated from the menu. IF you wish you can just import a finished query here (further down below in this post )
Now we are going to go trough a query that will find all computers that start with the name neo.
Go back to general and press the + Sign choose simple attribute and select attribute from there choose System Resource and NetBIOS name. Press OK and OK
If you press the Show Query Language now we can see that the query changed
Now we are going to make a criteria, so I do practically the same here
The sign % is for wildcard so all computers that have the netbios name that starts with neo will be fetched by this query.
After that is done you can press OK and OK.
And you need to remember the logic of a collection query.
1 SELECT (what do I need to show) Netbiosname = Computer Name
2 (What are the requirements that need to be fulfilled in order for the query to return true?)
3 If Computer 1 has Adobe Reader = True then inn to the collection you go.
You also need to remember that the symbol % is wildcard
So if you want to search for something that start with n you use this n% in your query
if you what a query with something that ends with n you use n%
Now some examples of queries that you can use (By using the import query button –> )
Adobe Reader Version from Add/Remove Programs in Control Panel
select SMS_R_System.NetbiosName,
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from
SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on
SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceId =
SMS_R_System.ResourceId where
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like «%Adobe Reader%»
Computer based on OU
select SMS_R_System.NetbiosName,
SMS_R_System.SystemOUName from
SMS_R_System where
SMS_R_System.SystemOUName = «OU Name»
Spesific computer name in this case every computer that starts with neo
select SMS_R_System.NetbiosName from
SMS_R_System where SMS_R_System.NetbiosName like «neo%"
Windows 8 computers
select SMS_R_SYSTEM.ResourceID,
SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System
inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId
where SMS_R_System.OperatingSystemNameandVersion like "%Workstation 6.1%" or SMS_R_System.OperatingSystemNameandVersion like "%Windows 8%
XenApp Connector for Configuration Manager in Tech preview
The long awaited connector for XenApp to Configuration Manager 2012 is now available for TechPreview on Mycitrix.com
Link here –> https://t.co/bPPw0Eny
You can see a video regarding the functionality here –> http://www.youtube.com/watch?v=CncS4Tp3Vgg&feature=youtu.be
Ill come back with more when I get to work with the details about it
Integrating Configuration Manager and RES Workspace Manager
As I stated in a earlier post is that you have the ability to integrate RES Workspace Manager with Configuration Manager.
Workspace Manager is a product that allows you to design how the desktop should appear to the user.
Instead of using Group Policy and slow login scripts you can move all those tasks into Workspace Manager.
For instance Printer mapping, drive mapping, +++
I has a lot of features but take a look at my previous post if you wish to know more about it
Workspace Manager also allows for a lot of integration. With for instance XenApp, App-V, RDS, Vmware Thinapp and Configmgr.
With Configmgr integration you can allow for Workspace Manager to deploy application (Automation task) to a users desktop.
When a user logs on for the first time, and clicks a predefined shortcut for that application, Workspace Manager will automatically deploy the software to the desktop by contacting the MP that is configured.
First we start by adding the ConfigMgr integration, Click Setup –> Microsoft System Center,
Now on the Menu, click Settings. Click on the "Enable Microsoft System Center ConfigMgr Integration" And remember as it states there. You need a Configmgr agent and a Workspace Manager agent installed on the client where you are going to use this.
Enter credentials, and choose which version of ConfigMgr you have in your environment.
And Click Test Now (A list of packages that are deployed should now appear). Remember that it only supports ConfigMgr Packages not Applications as with 2012.
After this is applied you should get this message. (Even thou the integration is in place, the software distribution option is not enabled, so we have to enable this )
Exit the setup mode and go back to composition, and enable Software distribution.
And before we can deploy the software we have to attach the package to a application that is defined within Workspace Manager.
Click Start and press "New Application" if you are unfamiliar using the different options you can choose the wizard. I have created a "Lync planning tool" application. Right click and choose Edit, go down to configuration and press Add. From there choose ConfigMgr
Now press the package you need to add. IF not mark the "Program" option and choose the button on the right side and add the package.
Then Press OK and close.
For all Managed desktop (With RES Agent and ConfigMgr Agent) Will now get this application.
Something new in ConfigMgr 2012 is that Microsoft added a new site type, which is the CAS (Central Administration Site)
Microsoft says the following about it" The central administration site coordinates inter-site data replication across the hierarchy by using Configuration Manager database replication. It also enables the administration of hierarchy-wide configurations for client agents, discovery, and other operations. Use this site for all administration and reporting for the hierarchy"
This role is needed for large scale deployment and sits at the top of the hierarchy in ConfigMgr 2012. The top reasons for using this role is:
* If you have over 100.000 clients in your environment.
* If you wish to split up your environment in general.
* If you need more then 1 Primary site
Top reasons not to use this role:
* One extra server to maintain with licensing, monitoring and such.
* SQL enterprise is most likely needed since this supports up to 400.000 clients (SQL server standard)
only support up to 50.000 clients.
* The CAS role needs some heavy machinery since it needs to process a lot of data. Microsoft
recommends 16 cores, 64 GB of ram and 1.5 TB disk space for all the files.
If your environment consists of 100.000 clients the database files alone will take approx. 500 GB
The CAS can support up to 25 child primary sites.
A typical CAS setup would look like this (If we had 2 domains)
Something that you need to know about the CAS role
It does not process data from clients
It does not accept client assignments
It participates in database replication
So this is a role that just "sits" there and receives data from other sites in the hierarchy. Since the CAS also participates in database replication all inventory data and information will be replicated to the CAS server, therefore it is very useful to use for reporting services.
Also something to consider, in a multiple domain forest and multiple sites. Who has access to the CAS, who has admin access on the CAS? The users that have access to the CAS has access to every sites and its db information.
But remember if you need to use a CAS site in your environment, remember that you have to install the CAS role BEFORE you install a primary site. If you installed the primary site first, the only way to join that primary site to the CAS is to reinstall it.
Forefront Endpoint Protection in SCCM 2012
Microsoft has been in the anti malware/virus business for a couple of years now. Going back to the first version of Windows Defender and going on today with the most used antivirus product on the market (Which is free) Microsoft Security Essentials. Microsoft likes to label its security product as Forefront, their Forefront products are not only based on anti-malware/virus but also consists of Forefront TMG (Threat Management Gateway formally called ISA server) And Forefront UAG ( User Access Gateway ) Which is their Network Edge Security products.
Microsoft also has a their own anti-virus/malware product for enterprise businesses, which is called Forefront Endpoint Protection (Which is basically a converted Security Essentials, with added management capabilities)
Now with System Center 2012 release, Microsoft has a different approach. They have included the endpoint protection service with Configmgr 2012. Therefore now you can manage forefront via SCCM console.
Not sure where Microsoft is headed with this, since if a business wants Forefront they would need to invest in SCCM as well (Even if they don't need it). On the other hand, Microsoft can now brag about having a system that does everything. Maybe its something they needed to compete with Symantec Altiris ? (Just a thought)
Let's take a look at how you setup Forefront in ConfigMgr, and how you can manage it.
First you have to install the Endpoint Protection role via the console.
After that is done, you would need to alter the default client policy (Since by default it is disabled )
In my case I have created a custom client policy which I intend to use.
I open the policy and change the following settings,
After I have changes these, I have to deploy the client settings to a computer collection that I wish to have forefront installed.
So I right click the policy and choose "Deploy"
When you now install a agent on a computer that resides within that collection, I will get SCEP installed.
If you watch the install log ccmsetup.log you will find multiple references to scep.exe file.
NOTE: That you need to restart the computer eventually for the installation to finish
After the installation is complete, you will get a new icon down in the system tray.
That looks like this ( It might say "At risk" but this is because it only has the installed definitions.
Now that you have installed scep you also need to change the policy for how scep is going to function.
Since in the previous Client Policy all you did was install the scep software on the client.
You can also see in the Console under Assets –> "A computer with SCEP installed"
That it says EP managed.
Now then over to the client policy
Head over to Assets and Compliance –> Endpoint Protection –> Antimalware Policies (There you will have a default client policy, which is the only we are going to alter, since this applies to all SCEP agents in the site)
You can also choose import a policy, Forefront comes with a bunch of premade policies that Microsoft has created.
But lets alter the policy, and see what we need.
First pane is about scans. The values you see here are the defaults (So im going to leave it at that )
Next is the Scan settings, this is also default values ( You should change it to scan removavle storage devices ) Now a days many business computers gets infected by an employees usb drive.
Next is the default actions. If SCEP find the signature of a know virus which is under the category of "Severe" the recommend action attatched to that virus is run (Which is most cases is delete/remove)
Next is real-time protection, most values here should stay as default.
Next is Exclusion settings (Here you need to figure out, on what computers is this policy going to be deployed? )
If you have a SharePoint servers, it would need different Exclusion settings from a Terminal Server or Exchange.
Next is Advanced, the default values here is also recommended. We don't want to bug the user with notifications about updates every 2 hours, or scans happening.
Next is the Threat Override here you can define for instance if you have multiple users that are installed Cain & Abel, SCEP will automatically place it into quarantine, here you can create an override so that users can use the tool.
On to the MAPS, which basically sends info to Microsoft regarding malware (If something new is found with a unknown signature your contribution might allow Microsoft to create a fix)
Next are the definition updates, here you set the settings for how the client updates.
By default there are 4 sources where the client is allowed to get updates from.
3: Microsoft Update
4: Microsoft Malware Protection Center
After you are done with the settings Click OK.
It might take some time before the policy is updated on the computer.
You can watch the EndpointProtectionAgent.log file under C:\windows\ccm\logs
Now when you open settings on the SCEP agent you will notice that it says "Some settings are set by the administrator"
And for the purpose of this demo I wanted to test the SCEP agent and see what happens and how it interacts with the SCCM console when a virus appears on a computers.
So therefore I turned to EICAR.
EICAR is a test file to test the response of computer (AV) programs
What you need to do is open notepad
Enter this value
Save it as EICAR.COM and see what happens
And the agent responded instantly, before I was able to finish writing it had automatically removed the file
So now I am interested to see if the console saw that the virus appeared. therefore im going to use the report functionality,
Go over to the Monitoring tab –> Reporting –> Reports.
You can see that by default it includes 6 "Endpoint Protection" reports.
Im going to view the Antimalware Activity Report.
And there we go, the info has already been exported to the system.
SCCM 2012 and PKI
This is going to be a huge post, but hopefully someone will find it useful for future references
In my previous SCCM 2012 post, I showed how-to install SCCM, but not how to configure it for encrypted communication.
So out-of-the box SCCM traffic goes unencrypted via HTTP, which is clear text. So if you manage to get inside the LAN, fire up an arpspoof or macof (or any other MITM method) you can
read the traffic going back and fourth from the client to the site servers. So therefore I'm going to show you how to install your very own Microsoft PKI infrastructure and how you enroll the different types of Certificates that you need in order for SCCM to encrypt traffic.
Before I start, I want to show you how I designed my lab for this demo. This is in a fully virtual lab environment, much of the setup I do here is not "Best Practice" but in order to make this post readable, I wanted to keep it as short as I possibly could. I have excluded much of the setup regarding CRL, OSCP and config files (If you are unfamiliar with these terms go to this page http://technet.microsoft.com/en-us/library/cc772393%28WS.10%29.aspx )
In my lab I have
1 * SQL Server (Running the Configrmgr site SQL database)
1 * ADCS (Active Directory Certificate Services) Server running Enterprise Subordinate CA (Which we are going to install in this post ) Running Server 2008 R2 Enterprise
1 * ADCS Server running Stand-alone root CA (Is also going to be installed in this post ) Running Server 2008 R2 Enterprise
1 * ConfigrMgr server ( Which was installed in a previous post )
What we are going to start with is the Stand-alone root CA, this is a server that is not connected to the network (For security reasons, and therefore not domain joined) Since we are going to create a trusted root CA, which the sub CA is going to use to issue certificates. The reason why I setup a two-tier PKI is because this is the most common used setup.
To but we do first, is install a virtual computer with server 2008 r2 ( or regular 2008 ) after the server is finished installing, you start by installing the server role ADCS
Click next and choose Certification Authority
Click next and choose Standalone CA (As you can see Enterprise is unavailable since this server is not a part of a domain )
Click next and choose Root CA,
Click next and choose "Create a new private Key"
Click next, and next again ( Let it stay at the default on Cryptography ) and here by default it uses the hostname of the server (Since this was a fresh install and had the jibber is name WIN-i3ou423io I changed the name to ROOTCA1 (Which is the name that will appear on the trusted root certificate )
Click Next, next and Install.
Now after it is finished installing, go to the folder C:\windows\system32\certsrv\certenroll
There you will now have 2 files.
1 . crt file (Which is the Trusted root certificate)
1 . crl file (Which is the Certification Revocation List, which is basically a list that contains all the certification that have been revoked )
Now we have to export these files and import them on the subordinate server, so we have to install that first before we can continue. But after it is installed open a powershell prompt as a domain admin. Run the following commands.
certutil –dspublish –f filename.crt RootCA
certutil –addstore –f root filename.crt
certutil –addstore –f root ROOTCA1.crl
The first command places the root CA public certificate into the Configuration container of Active Directory. Doing so allows domain client computers to automatically trust the root CA certificate and there is no additional need to distribute that certificate in Group Policy. The second and third commands place the root CA certificate and CRL into the local store of the SUBCA. This provides SUBCA immediate trust of root CA public certificate and knowledge of the root CA CRL. SUBCA could obtain the certificate from Group Policy and the CRL from the CDP location, but publishing these two items to the local store on SUBCA is helpful to speed the configuration of SUBCA as a subordinate CA.
If you open the Local Certificate store on the server you can see that the Root CA and the Root CA CRL is in the local store.
Now we can continue with the Sub-ordinate install ADCS.
The Setup is basically the same,
Instead we choose Enterprise CA, click next.
Choose Subordinate CA, click next.
Here we choose "Save a certificate request to file" and choose a location. We need to copy this file over to the Root CA and issue a certificate in order to make the CA operational.
Click Next, and install. After you finished installing copy the file to the Root CA. Open a command prompt (ON THE ROOT CA) (PowerShell) And type the command
certreq -submit F:\APP1.corp.contoso.com_corp-App1-CA.req (remember to change the file name to match the one you have)
After you have done that, open the Certification Authority MMC, Expand and then click Pending Requests.
Choose the certificate and click "Issue" now we have to copy the certificate back to a removable drive.
Open a powershell promt and run the command certreq –retrieve <RequestId> F:\filename.crt.
You can see the Request ID in the Issued Certificates tab.
Click enter and choose the ROOTCA1 from the List and click OK.
This command, will copy the certificate of the server + the root CA certificate and crl.
(If not go to the Windows\System32\certsrv and copy the other files as well)
After you have copied the files to a removable drive you can turn of the Root CA as it is no longer needed.
Now back to the Subordinate CA, open the Certification Authority mmc. Right click on the server click All Tasks, and then click Install CA Certificate.
In the Select file to complete CA installation, set the file type to X.509 Certificate (*.cer; *.crt) and then navigate to the removable media and select hostname.crt. Click Open, now that we've imported the certiciate we can start the service.
Now what did we actually do here ?
First we setup the Root CA, which is the center of trust in this case(Tier 1). We created a Enterprise Root Certificate, we exported the Enterprise Root CA to Active Directory and to the Subordinate CA. And we installed a subordinate CA, made a certificate request, imported that to the root CA and issued the request. What it basically does is that the sub-ca says to the root "I have a request, I wish to issue certificates" and then the
root ca says to the subordinate. "I trust you, here is your certificate so now you can issue certificates on my behalf"
Since all the domain computers get the Root CA certificate in the trusted root certificate authorities, they will automatically trust all the certificates that the Subordinate CA issues to the domain.
Hopefully that made some sense
Now we are done with the PKI setup, now we have to start with the SCCM part of the certificates.
What kind of certificates do SCCM need ?
In this demo we are going to create two templates that will automatically deployed via AD.
* ConfigMgr Client Certificate
By default, Configuration Manager looks for computer certificates in the Personal store in the Computer certificate store.
With the exception of the software update point and the Application Catalog website point, this certificate authenticates the client to site system servers that run IIS and that are configured to use HTTPS.
* ConfigMgr Web Server Certificate
This web server certificate is used to authenticate these servers to the client and to encrypt all data transferred between the client and these servers by using Secure Sockets Layer (SSL).
You can see the entire list here.
Lets start with the Client Certificate
On the subordinate root CA open the Certification Authority console, right-click Certificate Templates, and then click Manage to load the Certificate Templates management console
right-click the entry that displays Workstation Authentication in the column Template Display Name, and then click Duplicate Template.
In the Duplicate Template ensure that Windows 2003 Server, Enterprise Edition is selected, and then click OK. (2008 Server is not supported by ConfigMgr 2012)
In the Properties of New Template dialog box, on the General tab, enter a template name to generate the client certificates that will be used on Configuration Manager client computers, such as ConfigMgr Client Certificate.
Click the Security tab, select the Domain Computers group, and select the additional permissions of Read and Auto enroll. Do not clear Enroll (This gives domain computers the permission to get this certificate)
Click Ok, and close the Console.
Now back to the Certification Authority console, right-click Certificate Templates, click New, and then click Certificate Template to Issue.
In the Enable Certificate Templates dialog box, select the new template that you have just created, ConfigMgr Client Certificate, and then click OK.
Next we need to create a group policy that allows the clients in the domain to do auto enrollment.
Open the group policy management console, and create a new group policy object.
In the Group Policy Management Editor, expand Policies under Computer Configuration, and then navigate to Windows Settings / Security Settings / Public Key Policies
Right-click the object type named Certificate Services Client – Auto-enrollment, and then click Properties.
From the Configuration Model drop-down list, select Enabled, select Renew expired certificates, update pending certificates, and remove revoked certificates, select Update certificates that use certificate templates, and then click OK.
Then close the Group Policy Management Console.
If you have a client computer in the domain, reboot the computer. When the client is finished booting the client will check its policy.
1: See that it has auto enrollment enabled
2: See what certificates it has access to (Since we added Domain computers to the ConfigMgr client certificate, it fill automatically fetch a certificate from the subordinate CA)
You can double check this by opening the local certificate store on the client computer.
Now we need to repeat this for creating a certificate template for the Configmgr server roles.
Follow the same steps as before, but there are some other changes.
Instead of the Workstation template, choose the Webserver template and choose duplicate template.
Properties of New Template dialog box, on the General tab, enter a template name to generate the web certificates that will be used on Configuration Manager site systems, such as ConfigMgr Web Server Certificate.
Click the Subject Name tab, and make sure that Supply in the request is selected.
Click the Security tab, and remove the Enroll permission from the security groups Domain Admins and Enterprise Admins. Click Add, enter the name of the configmgr computer names in the text box, and then click OK. Select the Enroll permission for this group or computer account, and do not clear the Read permission. (This gives the ConfigMgr server right to enroll for this template) Then click OK.
In the Certification Authority console, right-click Certificate Templates, click New, and then click Certificate Template to Issue
In the Enable Certificate Templates dialog box, select the new template that you have just created, ConfigMgr Web Server Certificate, and then click OK.
Now head over to the ConfigMgr server.
Open the local Certificate Store on the server, select computer account. Click on the personal store, Right-click Certificates, click All Tasks, and then click Request New Certificate.
On the Before You Begin page, click Next
If you see the Select Certificate Enrollment Policy page, click Next.
On the Request Certificates page, identify the ConfigMgr Web Server Certificate from the list of displayed certificates, and then click More information is required to enroll for this certificate. Click here to configure settings.
In the Certificate Properties dialog box, in the Subject tab, do not make any changes to the Subject name. This means that the Value box for the Subject name section remains blank. Instead, from the Alternative name section, click the Type drop-down list, and then select DNS.
In the Value box, specify the FQDN values that you will specify in the Configuration Manager site system properties, and then click OK to close the Certificate Properties dialog box.
On the Request Certificates page, select ConfigMgr Web Server Certificate from the list of displayed certificates, and then click Enroll.
Now the ConfigMgr server will have a certificate available which I can use.
Open IIS Manager, Expand Sites, right-click Default Web Site, and then select Edit Bindings.
Click the https entry, and then click Edit. In the Edit Site Binding dialog box, select the certificate that you requested by using the ConfigMgr Web Server Certificates template, and then click OK. After that is done, close the console.
Since I've done this after the SCCM got installed, I have to do some configuration in the console as well. Go to Administration –> Sites –> Right click and choose properties, go to client computer communication –> Choose use HTTPS and import the Root CA crt in the bottom menu.
Now im going to install the SCCM client on a new computer and see that its communicating on port 443. As you can see during the install, the setup looks for a certificate under the Personal Store on the computer, and uses that in order to communicate with the site server.
Now if I open the agent on the client I can see that it says client certificate it says PKI,
Now If I choose a Action like fetch Machine Policy, It should communicate with the Site server using https:
I can also open the Application portal, and it should be using the new certificate.
And Voila there you have it, encrypted communication between client and ConfigMgr site server (Management Point) My next blog will include the Distribution point, which uses a diffenrent type of certificate.
If you choose https mode on DP after you completed this demo you will get some error messages from your client.


text:
By: Mary Ann Pekara
In recent years, DUI laws have been growing stricter and stricter, with penalties for those convicted of DUI charges getting steeper and steeper around the country. In an effort to keep up with the public's increasing interest in getting drunk drivers off the road, police departments are churning out innovative ways of tracking down and assessing suspicious drivers.
A recent example comes from Austin, Texas, where the police are now harnessing superpowers to help them keep impaired drivers off the road.
Well...something like that.
According to KLJB News Radio, the recently redesigned RV used by Austin's police force has been dubbed the "Breath Alcohol Testing Mobile." That's right: the BAT Mobile. The article mentions nothing about capes or hidden identities, but suggests that the revamped vehicle allows Austin police to perform their duties with an extra edge of efficiency.
Apparently, the 38-foot bus includes enough room for two police officers to write up DUI paperwork while viewing tape from
In addition to the "office" section, the BAT Mobile reportedly has doors separating the officers' space from a sort of waiting room area, where suspects can pass the time while their results are processed. And Austin police can evidently process arrest data in their wonder vehicle, thanks to two breathalyzer machines (and two bathrooms).
News 8 Austin reports that the $250,000 bus is an improvement on the former DUI RV, which was large enough for only one person at a time. Suspects allegedly had to wait outside the bus during DUI processing before the BAT Mobile was introduced.
Sources indicate that the DUI bus serves an important function for Austin's police force by allowing the officers to process paperwork for DUI cases more efficiently than before, get back on the road faster after each arrest and clear up the main police station for other arrests.
If it works like it's expected to, the BAT Mobile should allow Austin police officers to process more Texas DUI cases than before.
» Back to DUI Articles
Copyright © 2013 TotalDUI, LLC. (as licensee). All rights reserved.
Site Map |
Privacy Policy |
Terms & Conditions
PAID ATTORNEY ADVERTISEMENT: THIS WEB SITE IS A GROUP ADVERTISEMENT AND THE PARTICIPATING ATTORNEYS ARE INCLUDED BECAUSE THEY PAY AN ADVERTISING FEE. It is not a lawyer referral service or prepaid legal services plan. Total DUI is not a law firm. Your request for contact will be forwarded to the local lawyer who has paid to advertise in the ZIP code you provide. Total DUI does not endorse or recommend any lawyer or law firm who participates in the network nor does it analyze a person's legal situation when determining which participating lawyers receive a person's inquiry. It does not make any representation and has not made any judgement as to the qualifications, expertise or credentials of any participating lawyer. The information contained herein is not legal advice. No representation is made that the quality of the legal services to be performed is greater than the quality of legal services performed by other lawyers. Any information you submit to Total DUI does not create an attorney-client relationship and may not be protected by attorney-client privilege. Do not use the form to submit confidential, time-sensitive, or privileged information. All photos are of models and do not depict clients. All case evaluations are performed by participating attorneys. To see the attorney in your area who is responsible for this advertisement, please click here or call 866-200-8052.
FLORIDA ONLY: Total DUI is considered a lawyer referral service in the state of Florida under the Florida Rules of Professional Conduct. By all other standards, Total DUI is a group advertisement and not a lawyer referral service.
If you live in Mississippi, Missouri, New York or Wyoming, please click here for additional information.


text:
Brent Adams & Associates Legal Blog
Our North Carolina legal blog covers personal injury news, accident information, medical malpractice reports, lawsuits, and other topics of interest for those who are dealing with their own North Carolina legal issues. Updated daily, our NC injury attorneys hope this blog helps readers stay connected to legislation changes and informed when it comes to significant NC court decisions.
Brent Adams
Comments (0)
Brent Adams
Comments (0)
Ranbaxy Recalls Antibiotics After Color Change DetectedAn Indian drug maker recalled two lots of antibiotics this week, saying that the drug had changed color. The drug maker has a history of defective prescription drugs and the United States banned certain imports to the country in 2008 due the the state of the company's drug factories.
Category: Keyword Search: drug import regulations


text:
What a whirlwind couple of days! Among the bright announcements from the Presidential Inaugural Committee (PIC) was the naming of openly gay poet Richard Blanco, a son of Cuban exiles, to serve as the Inaugural poet. Bianco told the New York Times that he grasps Obama's inaugural theme, "Our People, Our Future" and wants to write about "the salt-of-the-earth sense that I think all Americans have, of hard work, we can work it out together, that incredible American spirit that after 200-plus years is still there." Read an appreciation of Biano by lesbian Cuban writer Achy Obejas here.
There was also the announcement on Tuesday that Obama and the committee had asked Mrs. Myrlie Evers-Williams to deliver the invocation. The swearing-in ceremony will take place on Monday, Jan. 21 – which also happens to be Martin Luther King Day. And while MLK deserves so much credit for advancing the civil rights movement, his assassination overshadows the assassination of another extraordinary civil rights hero and NAACP field secretary – Medgar Evers who lead the effort to integrate the University of Mississippi. His murder on at age 37 on June 12, 1963 and the trials that followed inspired civil rights activism. And not only would this hero and his widow be acknowledged but gun violence would also be spotlighted.
I didn't pay much attention to the selection of Rev. Louie Giglio to deliver the benediction. But luckily, Think Progress did. On Wednesday morning, Josh Israel wrote an in-depth piece exposing Giglio as worse than Rick Warren. In Inaugural Benediction To Be Delivered By Pastor Who Gave Vehemently Anti-Gay Sermon, Israel noted that in a sermon in the 1990s, Giglio called for Christians to stand against gays:
"We must lovingly but firmly respond to the aggressive agenda of not all, but of many in the homosexual community. … Underneath this issue is a very powerful and aggressive moment. That movement is not a benevolent movement, it is a movement to seize by any means necessary the feeling and the mood of the day, to the point where the homosexual lifestyle becomes accepted as a norm in our society and is given full standing as any other lifestyle, as it relates to family."
The reaction was instant and angry – Michelangelo Signorile called for the Human Rights Campaign to boycott the inauguration and started a petition to have Giglio removed. Someone else found a proud tweet from the pastor proclaiming that his father created the logo for Chick-fil-A.
But worse still – the press release announcing Giglio indicated that the choice had Obama's approval. "President Obama was involved in the selection of participants in the Inaugural program, including Mrs. Myrlie Evers-Williams and Rev. Louie Giglio." How could the inaugural committee so easily forget the incident in 2008 with Rick Warren? Meanwhile – the White House is getting flak for constantly reminding Republicans that Obama won re-election with the majority of women and minorities (including the LGBT vote) while the President is filling his cabinet with straight white men. As Buzzfeed's Chris Geidner points out – Giglio was invited to the White House's 2012 Easter prayer breakfast, which, on top of arch-conservative Cardinal James Dolan delivering the benediction at the Democratic National Convention, suggests either the White House continues to consider that there is a real moral equivalency between LGBT equality and anti-gay "traditional values" or the President's advisers are not doing their homework. There are just too many "mistakes" to not see this as deliberate or a frighteningly lazy pattern. If Obama wants that inaugural theme of "Our People, Our Future" to resonate and mean something, he can't shrug off diversity and the non-evolution of people he selects to represent his vision.
Well, the Netroots made their point and Thursday morning, the committee withdrew Giglio from the program. As The Washington Blade reports, it appears Giglio's self-departure might have come after some arm-twisting:
In a statement obtained by Washington Blade, Giglio announces his decision to "respectfully withdraw" participation from the Jan. 21 celebration in the wake of revelations of anti-gay comments.
"Due to a message of mine that has surfaced from 15-20 years ago, it is likely that my participation, and the prayer I would offer, will be dwarfed by those seeking to make their agenda the focal point of the inauguration," Giglio said. "Clearly, speaking on this issue has not been in the range of my priorities in the past fifteen years. Instead, my aim has been to call people to ultimate significance as we make much of Jesus Christ."
Giglio added he doesn't feel it "best serves the core message and goals we are seeking to accomplish to be in a fight on an issue" and will "continue to pray regularly for the President."
In a separate statement, Addie Whisenant, a spokesperson for the inaugural committee, said organizers of the event weren't aware of the anti-gay sermon when the initial selection was made.
"We were not aware of Pastor Giglio's past comments at the time of his selection and they don't reflect our desire to celebrate the strength and diversity of our country at this Inaugural," Whisenant said. "Pastor Giglio was asked to deliver the benediction in large part for his leadership in combating human trafficking around the world. As we now work to select someone to deliver the benediction, we will ensure their beliefs reflect this administration's vision of inclusion and acceptance for all Americans."


text:
Inclusive sport and NDSOs
In 2011, in addition to EFDS receiving national partner funding from Sport England, the charity along with several of its member organisations (NDSOs- National Disability Sports Organisations) were pleased to receive further National Lottery funding.
The NDSOs are British Blind Sport, Cerebral Palsy Sport, Dwarf Sports Association, Mencap Sport, Special Olympics GB, UK Deaf Sport and Wheelpower. In 2014 at EFDS's AGM, LimbPower were also given NDSO status.
Some of this funding was to enable the NDSOs to support National Governing Bodies of sport (NGBs) to deliver more opportunities for disabled people, through impairment specific sports development advisors. Also, funding was provided to review and improve governance, business planning, fundraising and membership activity in these organisations.
Each NDSO has an appointed advisor to look after the inclusive sport programme.
EFDS and the NDSOs have since developed an agreed collaborative approach that connects disabled people to NGBs interventions and targets. The five key strands of work that will support this purpose are:
Growth and engagement
To support NDSOs to develop strong partnerships with disabled people's organisations, ensuring they are recognised as the leading strategic agency in the development and representation of physical activity and sport.
NGB connection
Establish clear interventions for NDSO partnership working, through the EFDS Sports Development Team's relationships with priority NGBs. These plans will be a positive start to connect NGB initiatives and programmes into NDSO engagement and membership.
Wider sports development sector connection
Sport is delivered at a local level, so it is vital that EFDS and the NDSO's work with the wider sports development sector at a local level. The EFDS sports development team have geographical responsibilities and work with key County Sports Partnerships to ensure they create strong partnerships with the disability sector at a county to local level and a clear understanding of NGB interventions at a local level for disabled people.
Work at a national level with disabled people's organisations needs to be linked into the local level too. These disabled people organisations, where they have local membership and infrastructures, need to be linked into these mechanisms to ensure their membership and client groups can access NGB interventions and sports development work on the ground. The EFDS sports development team will continue to develop strong forums with the wider sports development sector.
Events and programmes
There are three main programme areas which can add value to more disabled people participating in sport and physical activity. These programmes can belong to NGBs- such as Big Splash and FA Mars Just Play. Secondly to EFDS/NDSOs- Inclusive Fitness Initiative, Playground to Podium, Disability Sport Events, Festivals of Sport. Or thirdly- disabled people's organisations- Me 2 you and Yoodo Sports Campaign (National Deaf Children's Society and Leonard Cheshire respectively).
NGBs, EFDS, NDSOs and disabled people's organisations need a greater understanding of each other's agendas and how to share programmes collectively at a local level to attract more disabled people.
The improvement journey
Throughout the collaborative working process, it is important for NDSOs and EFDS to want to improve continually as an organisation within its services and provision. To do this effectively, it should be recognised that this could be in several themed areas such as leadership, business planning and strategy, partnership working, resource development, fundraising, capacity building, performance measurement, etc. Adopting the principles and using proven toolkits to support the improvement agenda will support NDSOs and EFDS in becoming effective and efficient organisations.
By working within these key strands, the Inclusive Sport programme will achieve the following outcomes:
- Increased participation by disabled people in sport.
- Increased satisfaction of disabled people with the sports offer (sports activities, facilities, access and experience).
- All organisations will assess how their performance and what future results they are likely to achieve
- All organisations and the sector will see stronger and more effective strategic and business planning, based on research, evidence and insight.
- Achieve long term financial sustainability and resources effectively directed and managed.
- The sector becomes more effective and efficient through a collective approach. Partnerships are proactively managed to help achieve individual and collective strategic goals.
- All organisations will develop the capability to measure, review and improve performance.
- All organisations will plan their people resources to achieve business strategy and meet the needs of its professional and volunteer workforce.
- The project will ensure plans are developed to improve the organisation's capability and EFDS partnership, resulting in sustainable, positive outcomes for disabled people and a self-improvement culture.
Our events page promote the opportunities available in sport and exercise through the NDSOs and other partners.


text:
TC3 Child Care Center
The child care center at TC3 is a licensed, not-for-profit child care facility providing services to children of college students, faculty, staff and as space permits, members of the community. The child care center provides care from 18 months through pre-kindergarten.
The Child Care Center at TC3 is nationally accredited by the National Association for the Education of Young Children(NAEYC) The center has been housed on the TC3 campus since 1969. Students have first priority, and a sliding fee scale is offered to students to help with the cost of child care. The center is open Monday through Friday from 7:30 a.m. - 5 p.m.
Our Mission
To provide child care services to the TC3 college campus and the local community in a safe and nurturing environment which promotes the social, emotional, physical, language, and cognitive development of children.
Programs available
Toddler program 18-36 months
Pre-school program
For more information or to schedule a visit contact center director, Torrey Lansing at 607.844.8222, Ext. 4477.


text:
Sample Preparation Companies in Luxembourg
Category: Monitoring & Testing ×
Subcategory: Sample Preparation ×
Industry: Government ×
Location: Europe ×
Location: Luxembourg ×
Sigma-Aldrich Co., LLC
based in Bellefonte, PENNSYLVANIA (USA)
Sigma-Aldrich is a leading Life Science and High Technology company whose biochemical, organic chemical products, kits and services are used in scientific research, including genomic and proteomic research, biotechnology, pharmaceutical development, the diagnosis of disease and as key components in pharmaceutical, diagnostics and high technology manufacturing. ...
Shimadzu Scientific Instruments Inc
based in Columbia, MARYLAND (USA)
Shimadzu Scientific Instruments (SSI) is the American subsidiary of Shimadzu Corporation, headquartered in Kyoto, Japan. Shimadzu is a $3 billion multinational corporation with three major divisions: Medical Diagnostics, Aerospace/industrial, and Analytical Instruments. The Analytical Division is one of the world's largest manufacturers of analytical instrumentation and ...
Ionicon Analytik Ges.m.b.H.
based in Innsbruck, AUSTRIA
IONICON is the world's leading producer of trace gas analyzers with market-leading, real-time, single-digit pptv-level detection limits for VOCs using the unique Proton Transfer Reaction – Mass Spectrometry (PTR-MS) and Selective Reagent Ionization – Mass Spectrometry (SRI-MS) technology. IONICON also produces trace calibration devices for analytical instruments and ...
Anthias Consulting Ltd.
based in Papworth Everard, UNITED KINGDOM
Anthias Consulting are experts in the separation sciences in the fields of Gas Chromatography (GC), Mass Spectrometry (GC-MS) and related techniques. Anthias Consulting Ltd provides consultancy and training services to clients throughout Europe, America and beyond, including multi-national corporations, small independent laboratories and academic institutions. We offer GC ...
C Gerhardt UK Ltd
based in Brackley, UNITED KINGDOM
C. Gerhardt UK Ltd sell a range of laboratory equipment for the following, Kjeldahl Nitrogen and protein, traditional and rapid digestion and distillation, metal and trace metal digestions, traditional and rapid soxhlet solvent extraction for fat in foods or environmental sample extracts, general heating equipment including heating mantles and hotplates, and shaking. ...
Quality Systems International (QSI)
based in Ramsey, NEW JERSEY (USA)
Quality Systems International (QSI) is a global leader of Laboratory Information Management Systems (LIMS) and related laboratory software and technologies. The company's flagship product, WinLIMS™, is one of the most powerful LIMS systems available that is ready to use, out-of-the-box. WinLIMS is used by leading companies and organizations throughout the world in their ...
EarthSoft, Inc
based in Concord, MASSACHUSETTS (USA)
EarthSoft`s EQuIS software manages environmental and geotechnical data and is the world`s most widely used environmental data management system. The EQuIS Data Processor (EDP) and Enterprise EDP are the world`s most widely used EDD tools. Many governments, industrials, and especially consultants and labs use EQuIS and EDP. EQuIS Professional and EQuIS for ArcGIS and ...


text:
Child Alice Costume (Disney) (ref: 68981)
- Your Price:
- £16.99
- Retail Price:
- £20.49
- You Save:
- £3.50 (17%)
In StockOur price match promise
Includes dress and hairband.See more product details
In StockOur price match promise
Includes dress and hairband.See more product details
Got this costume? Want your photo to appear here? Tag your Instagrams with @jokersmasquerade and #jokers68981. How do I tag my photos?
She'll love our adorable Child Alice Costume (Disney), based on the classic outfit worn Lewis Carroll's novel. This gorgeous satin-look ensemble is ideal for World Book Day.
Includes: Dress and Hairband.
The Child Alice Costume (Disney) includes a blue satin-look dress with a white lace trim and an attached white apron.
The apron is printed with a picture of Alice and has a blue teacup decoration attached to the front.
Also included with this Alice outfit is a black hairband with a black bow.
Sizes for this costume are:
Have a question about this product? Why not get in touch by completing the boxes below.
Items are considered "oversize" which exceed 610mm x 460mm x 460mm or over 5kg in weight and cannot be dispatched via Royal Mail or Click and Collect. Oversize packages can only be dispatched via courier. We will only display the delivery options available to you, based on your location and the items in your basket.


text:
time to "turn and face the strain"
ch-ch-ch- changes.....lololol
today is a big deal for me because it's a new beginning. It's the end of my disconnect and not facing reality, that I've been doing for the past 2 years.
No more floating around in lala land it's time for me to put on my shit kickers, kick some ass, stop running away and hiding, and get shit DONE!!!


text:
Torture is any act by which severe pain, whether physical or psychological, is intentionally inflicted on a person as a means of intimidation, a deterrent, revenge, a punishment, or as a method for the extraction of information or confessions.
- Perhaps we cannot prevent this world from being a world in which children are tortured. But we can reduce the number of tortured children. And if you don't help us, who else in the world can help us do this?
- Albert Camus, at the Dominican Monastery of Latour-Maubourg (1948); reported in Resistance, Rebellion and Death (translation by Justin O'Brien, 1961), p. 73.
- "Love the others and you will be loved!" is a saying that might sound as a terrible and unjust accusation against all the innocents that have been hated and perhaps even tortured and killed.
- Fausto Cercignani in: Brian Morris, Simply Transcribed. Quotations from Writings by Fausto Cercignani, 2014, quote 58.
- I want to make sure that if my government ever does this horrible, terrible, extraordinary thing, that somebody takes responsibility for it and that it be out there in the open and subject to accountability. … Though I understand the danger of legitimating something that should not be legitimated, on balance in a democracy, I prefer accountability.
- Alan Dershowitz, Felix Frankfurter Professor of Law at Harvard Law School, debating David D. Cole Pre-emption: Preventive, coercive, or both? (2007).
- I mentioned to one of the gaolers my sense of this hardship, as an obstinate guilty person might deny the truth, whilst an innocent one, less courageous, might very readily, to relieve himself from such a state of misery, make a false confession. His answer was laconic: "Lago confess" … "They soon confess."
- Irish lawyer William Sampson, writing of his experience under torture, quoting an inquisitor on its futility as a means of obtaining information Memoirs of William Sampson, 2nd Edition (1817), Letter XVII
- Torture is senseless violence, born in fear... torture costs human lives but does not save them. We would almost be too lucky if these crimes were the work of savages: the truth is that torture makes torturers.
- Jean-Paul Sartre, "A Victory" (1958)
- The one thing we know about torture is that it was never designed in the first place to get at the actual truth of anything; it was designed in the darkest days of human history to produce false confessions in order to annihilate political and religious dissidents. And that is how it always works: it gets confessions regardless of their accuracy.
- Andrew Sullivan, "Imaginationland", The Daily Dish (2007-10-25).
- Jack Bauer saved Los Angeles. He saved hundreds of thousands of lives, are you going to convict Jack Bauer? Say that criminal law is against him? 'You have the right to a jury trial?' Is any jury going to convict Jack Bauer? I don't think so."
- Antonin Scalia citing the television program 24 to support torture.[1] Last Week Tonight (06-15-15).


text:
BY Casey Tschida on Mon August 06th, 2012
Word Magic Software is doing their part to help parents and students alike by offering their most popular English-Spanish dictionaries at 50 percent off regular prices, plus a chance to get a copy absolutely free.
Continue reading →
BY Casey Tschida on Fri July 20th, 2012
Whether Pocket RPG, Paper Monsters, Slingshot Racing, or Mutant Storm, it doesn't matter because Crescent Moon has placed many of their popular games on sale for a limited time.
Continue reading →
BY Casey Tschida on Wed June 08th, 2011
Bolt Creative released a significant update to their cosmic variation of the Pocket God series, Pocket God: Journey To Uranus, that brings the out of this world Pygmy fun to iPhone and iPod touch owners.
Continue reading →
Another big update of Death Rally has made its way into the App Store, and this one truly focuses on those exhaust spewing, earth tearing beauties of machinery.
Continue reading →
BY Casey Tschida on Sun May 15th, 2011
Get your copy of Remedy Entertainment's iOS remake of Death Rally at its lowest price ever.
Continue reading →
BY Casey Tschida on Wed December 22nd, 2010
Gamedoctors is offering a last minute holiday gift for all of their fans. Grab a copy of ZombieSmash HD for iPad for 66% off of the regular App Store price or take a shot at winning one of 20 promo codes.
Continue reading →
BY Tyler Tschida on Fri October 08th, 2010
This is definitely not another sale of epic proportions, but it's still sure to please anyone looking to save a few bucks on some popular titles for iPhone and iPad. It's worth noting that, for once, we actually have more iPad titles included in the list than iPhone. Exciting, isn't it?
Continue reading →