LOL. Here was my day (basically)
1. Wake up at 8am, shower, and dial into 8:30am morning Exchange Issue Meeting 2. Listen to people complain about viruses and slow response 3. Listen to people complain about Groupshield 4. Listen to people complain about Blackberries (I personally like them on cereal) 5. The news that we have bad proxyaddresses info hits... 6. People start theorizing about what went wrong 7. I volunteer to help the directory data management folks correct the data issues. 8. Pretty much told I am not needed. 9. Drive to work for meeting, get paged by data management people on the way in. 10. Call data management people and they say that the problem was worse than expected now that they see the output I generated with the issues, please help. 11. Write scripts to clean up various aspects of screwed up proxyaddresses 12. Log on to admin ID and run scripts to correct previously identified issues. It is now 11AM and I am logged on as an admin for about 10 minutes. Log back out (runas window really). 13. Write an all encompassing script that verifies all values in all proxyaddress attributes across entire forest. This work nor the scanning do not require anything but user level access. 14. Get a troubleticket for name res issue at 4'ish for client staging. Local Site knows the issue is WINS because they went to my WINS Checkout Web Page, entered client WINS settings and what server they wanted to talk to, page came up yellow status meaning one WINS Server had address, other didn't. When staging this is an issue because only primary is really used. 15. They send in the ticket the WINS Server with the problem, the record that is missing or corrupt. 16. Use netsh wins server \\winsserver sh na servername 20 to look at record. It is active but no IP address. 17. Log in as admin run netsh wins server \\winsserver del na servername 20 and then netsh wins server \\winsserver ch da to do a database consistency check. Log out of admin ID. Elapsed time in Admin ID, maybe 45 seconds. 18. 1 minute later recheck record (non-admin ID, see 16), it is there and fine. Close ticket. 19. Work on cleanup script until 8PM, drive home. Did many other things throughout the day answering questions and doublechecking data in the directory and availability and also checked replication, looked at application, system, and AD specific logs, etc. All non-admin ID work though I could have easily have done it with my admin ID. Also could have easily made a small mistake and screwed something up. If I don't need to actually change something, I don't use an ID that can change something. Again changes should need to be made infrequently with a well running system. The other two guys on the team created some groups and some server machine accounts and reset some admin ID passwords. They probably spent 30 minutes each in their domain admin IDs tops. Still busy and doing stuff all day though. Staging servers, etc. Tomorrow I will finish the script and turn it over to the Data Management folks so they can use it to monitor their data (with non-admin IDs). Then I will work on Virtual Server on one of my utility boxes as I am getting ready to upgrade our Exchange Lab to Windows 2003 and want some backup domain controllers in virtual server built and shut down. That work will take admin obviously though not domain admin level rights until I start the actual promo work. 12 hour day with maybe 15 minutes, probably closer to 10 minutes as a domain admin. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Adner Sent: Thursday, January 29, 2004 10:03 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Active Directory International Support >Ah that is enough. Hmm. I guess that's a good start. ;> -- David List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
