Interesting. I tend to get wrapped logs so I never noticed (or had reason to notice specifically). What made you want to look Todd? I'm curious now.
Al -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, June 17, 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? According to this source http://www.monitorware.com/en/events/details.asp?details_id=1865 Windows 2000's event id is 1573. Todd -----Original Message----- From: Charlie Kaiser [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 16, 2004 6:34 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? It's the same for 2K3 native... ********************** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ********************** > -----Original Message----- > From: Eric Fleischman [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 16, 2004 3:02 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... > what ev ent Event ID is logged and where? > > Yee of little faith! > We will log this. I don't recall the event message on 2k, but 2k03 it > would be ID 16408 with text of something like: "Domain operation mode > has been changed to Native Mode. The change cannot be reversed." > > I *think* we log this (or something like it) on 2k as well, but I > don't recall. Of course this is easy to test in the lab if you'd like. > > Oh, and I assume we're talking about 2k mixed to 2k native, not 2k03 > domain functional level. What I stated above is the switch from 2k > mixed to 2k native. > > ~Eric > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al > Sent: Wednesday, June 16, 2004 4:24 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... > what ev ent Event ID is logged and where? > > Interesting question. My expectation was that only the audit logs > would show this change. There is no app/ntds log entry that I've ever > heard of. > > If you're looking for a modified time stamp, you could look at the > attribute itself and see if it gives the info you're after. > > http://msdn.microsoft.com/library/default.asp?url=/library/en- > us/ad/ad/d > etec > ting_the_operation_mode_of_a_domain.asp > > Mixed/Native Mode Setting > The attribute is ntMixedDomain on the NC head root of each domain > DC=Mydomain, DC=ForestRootDom, DC=tld object. > Value of 0=Native level domain > Value of 1=Mixed level domain > > al > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd > (NIH/CIT) > Sent: Wednesday, June 16, 2004 2:36 PM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] When a domain is Switch to Native Mode... what > event Event ID is logged and where? > > Does anyone have this information handy? > > I am researching it now... > > Thanks, > > Todd > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
