Yeah I have it set to view users, whatever as containers. Don't actually use it that often. I just discovered today that I can make template accounts with it. Wonders of GUI. --Brian
-----Original Message-----
From: joe [mailto:[EMAIL PROTECTED]
Sent: Fri 7/16/2004 4:32 PM
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [ActiveDir] Linked Values & other good stuff
Keep in mind that ADUC treats computers and users as leaves by default for
display but they are actually containers. You may have to check your settings. ADSI
does it correctly right off though.
joe
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Thursday, July 15, 2004 4:39 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Linked Values & other good stuff
I'll have to look again. I thought that's what it was doing but I didn't see
the objects.
--Brian Desmond
[EMAIL PROTECTED]
Payton on the Web! Http://www.wpcp.org
v: 773.534.0034 x135
f: 773.534.0035
-----Original Message-----
From: joe [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 15, 2004 2:54 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Linked Values & other good stuff
Well look at that... I should look at the GUI occasionally. :o)
I just created one and it creates the volume object under the server
container. So you can go look there or do a command line search for
objectcategory=volume... A sample adfind query would be
Adfind -gc -b -f objectcategory=volume
If you just want the DNs you would do
Adfind -gc -b -f objectcategory=volume -dn
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Thursday, July 15, 2004 2:35 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Linked Values & other good stuff
Huh. Never noticed it before. 2003 at least lets you auto publish when sharing
via computer mgmt. Do you know where it stuffs the volume objects?
--Brian Desmond
[EMAIL PROTECTED]
Payton on the Web! Http://www.wpcp.org
v: 773.534.0034 x135
f: 773.534.0035
-----Original Message-----
From: joe [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 15, 2004 11:08 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Linked Values & other good stuff
http://support.microsoft.com/?kbid=234582
Shared folders are objectcategory (and objectclass) volume.
They are wherever you created them in the directory. It would be good to place
them either in a single OU where you house all shared folders OR place them as
subobjects to the servers where the share is published.
joe
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Thursday, July 15, 2004 11:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Linked Values & other good stuff
I want the LVs so this is as zero maintenance as possible. Printer gets
unshared - computers automatically no longer get the map. I like the thought about
doing the share folders too with LVs too. I just published a couple to the directory,
but, I can't find where the data is stored, or the name of the class.
Thanks
--Brian Desmond
[EMAIL PROTECTED]
Payton on the Web! Http://www.wpcp.org
v: 773.534.0034 x135
f: 773.534.0035
-----Original Message-----
From: joe [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 15, 2004 9:41 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Linked Values & other good stuff
An aux class seems to make sense for this. Note with K3 you can link on the
fly, with 2K you will have to statically link.
Whether or not you use LV attribs depends on your requirements. If you just
want to look at a user or computer object and have an arbitrary string saying what to
connect, then you don't need LV. If however you intend to have more than 850 values
(for 2K or 1300 for K3) then you need to look at doing this through LV.
Additionally if you want to be able to query say a shared folder and find out
what users are linked to it you would also use LV. The benefit there would be if the
shared folder object got changed or renamed or whatever, your user/computer objects
would update as well. Note though that you won't be able to get one object and then
have all the info you need, you will have to chase the links to get the info; i.e. get
the user object, then enumerate through all of the linked shared folders and retrieve
all of those objects. This adds complexity but *possibly* gives you more functionality
and flexibility depending on your end goals.
If you want the former non-linked attribute, you will want to get a base OID,
either for yourself, the school/business, or whatever (don't self-generate one...).
You can go to MS to get one for free if you want in their space. Relatively painless,
takes a couple of days. This will also register for you a schema prefix for instance I
have a scheme prefix of joeware... You can also then register for unique linkids for
yourself if you decide to do the LV.
Also if the former I would recommend you set up one auxClass with some generic
name and generic MV attribute - the brianwareAux Class with the brianwareExtMVAttr1
attribute. Then use the same class/attribute for both the queue and the shared folder.
I would also recommend coming up with some flexible format for the data in that
attribute... Say something like SHAREDFOLDER=DRIVELETTER:;\\server\share\folder (so an
actual value would look like SHAREDFOLDER=p:;\\server1\share2 or
SHAREDFOLDER=*;\\server4\share1\folderx) or something like that so that you can
extend it later if you learn of some other cool things you want to add. Don't assume
that the attribute will just have shared folders for users and printers for computers.
Of course if you use LVs your format is already determined, it will be a DN.
If you don't use LV I do recommend indexing the values so you can find them
faster later if you need to do a mass change of a printer or shared folder.
Overall I think this is a really good idea. You could really do some cool
stuff with it. Please post back what you end up doing with it.
joe
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Thursday, July 15, 2004 1:30 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Linked Values & other good stuff
I've thought up another one of my grand schemes in the past few days. I've got
most of the specifics down on some post-its, save for some linked value attributes
stuff. The errm extensive MSDN docs which I read quite a few times today didn't
actually enlighten me on the antics of them.
Anyway, here's what I'm up to:
I'm in an environemnt where I can't expect someone to map a drive or connect a
printer. All that has to be done for them. At present, everytime I need a new pritner
connection, or a new department folder drive, I go in, edit this logons cript,
probably make a typo, fix the typo, and then it's all good. I'm attempting to reduce
this to zero maintenance.
I got the mapped drives part down (I think). My plan is to add an attribute to
the group class (well actually an auxiliary class, because I have other attributes to
add) called homeFolder or something. When the user logons on, my script goes through
their groups, checks for non null homeFolders, and maps the first available drive
letter to those paths. Straight forward enough - any bad parts abotu this?
Now, here's part B of this weeks scheming - printers. Printers are mapped per
machine. Everytime we add one (far too often), I have to go in and repeat the same
routine as with the shared folder drives. So, what I want to do is add a couple of
linked values attributes to the group object (well actually my aux class) called
printers and defaultPrinter or something. THe idea being these would somehow be linked
back to printqueues so, when a printer goes off the map, so does the attempt to map it
and the resulting error message. I read the linked values thing a few times, and it
says I have to do something to the print queue class too. Didn't really understand
that. So, A) I'm wondering if any of this make sense and B) I'd like to figure out
this linked values business regardless.
While I'm at it, does it make sense to use aux classes in this scenario? I'm
hoping to chuck the last 2000 DC in the next few weeks, so, then I can move to 2003
Native, and use this dynamic aux classes thing (which only makes sense if aux classes
make sense here, which they seem to to me).
Thanks,
Brian
. .+-j!
0j! or yïíIãV+v*
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
.+-w i 0g-íí+Yb mPi 0 -íí+b Úf.+-j!
0j! or yïíIãV+v*
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
.+w ííY P íí .+-j! 0j! or yïíIãV+v*
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
<<winmail.dat>>
