oh yeah,-
wmic nicconfig get DNSDomainSuffixSearchOrder (from cmd) returns the correct suffix order



 
On 9/26/05, Tom Kern <[EMAIL PROTECTED]> wrote:
my gpo sets it at HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters.
I created a Reg_SZ value called "SearchList" with the suffix values and that shows up when you right click the adapter under "DNS" tab.
 
However, windows seems to use the other key for things like ping and drive mappings,etc.
the only way the ipconfig.exe output changes to reflect the gui is if you issue an "ipconfig/renew".
 
Unfortuantely, the other key(that you gave me) has a guid for each adapter.
How am I supposed to set this via a custom adm?
thanks for all your help.


 
On 9/26/05, [EMAIL PROTECTED] < [EMAIL PROTECTED]> wrote:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfa
ces


BTW, does this return the correct suffix for you?
wmic nicconfig get DNSDomainSuffixSearchOrder (from cmd)

I'm just curious, and not at a place where I can test. I won't be able to see
your response for a long time. Going offline.


Sincerely,

Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon

________________________________

From: [EMAIL PROTECTED] on behalf of Tom Kern
Sent: Mon 9/26/2005 11:28 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] flaky gpo


thanks.
disregard that last email...


i guess if i find out where ipconfig reads it, i can make a adm to reflect
that and push it out?

Does this also apply to the "real" policy that comes with winxp/2k3 as well?

thanks again!!


On 9/26/05, [EMAIL PROTECTED] < [EMAIL PROTECTED]> wrote:

       When MS introduced that GPO ability, someone forgot to remember where
       ipconfig looks for the information it displays. Ipconfig reads the
registry
       for the information, but the suffix adm/gpo is not stored in the same
       location, so ipconfig will never be able to report whatever you are
setting
       in the adm/gpo.

       You are not crazy. You are just observing some "known feature".

       I can not answer why some clients are not getting your gpo settings,
though.
       That task is reserved for "gpoguy", who will be around very shortly
;)


       Sincerely,

       Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
       Microsoft MVP - Directory Services
       www.readymaids.com - we know IT
       www.akomolafe.com
       Do you now realize that Today is the Tomorrow you were worried about
       Yesterday?  -anon

       ________________________________

       From: [EMAIL PROTECTED] on behalf of Tom Kern
       Sent: Mon 9/26/2005 9:42 AM
       To: activedirectory
       Subject: Re: [ActiveDir] flaky gpo


       ok, last time i reply to my own email :)

       I applied a gpo to add 3 domains to the dns suffix search order.
       these 3 domains show up in the gui, when you right click a net
adapter but
       the change is not reflected when you do an "ipconfig".
       the output of "ipconfig.exe" is different than whats in the gui in
"network
       connections".
       also, when you ping a unqaulified name, it doesn't apply the search
list from
       the gui but rather the one in the output from "ipconfig.exe"

       why is that?
       does "ipconfig.exe" get net info from a different place than the gui
in
       "network connections"?
       why would the gpo apply to the "network connections" info but NOT the

       ipconfig.exe info you see in cmd.exe?
       and why is ping.exe only using the one in ipconfig.exe and not the
"network
       connections" one.


       thanks

       P.S.- all clients are dhcp, if that provides any clue.

       thanks again.


       On 9/26/05, Tom Kern < [EMAIL PROTECTED]> wrote:

              To further elaborate, the setting i'm trying to apply is a
custom adm
       file to add the dns search suffix to tcp/ip props.
              all clients are win2k.

              some get it, some never get it.
               the really weird thing is, some clients after being reboot
never get
       it but when you type "ipconfig /release" and then "renew", they get
it.
              Thats bizzare.
              how would a reboot not get the pol but i release/renew would?

              thnaks again.



              On 9/26/05, Tom Kern < [EMAIL PROTECTED] > wrote:

                      I have a computer portion gpo at the domain level that
is a
       little flaky.
                      For some pc's it applies, others take a number of
reboots.
                      All my pc's are win2k.
                      The gpt has replicated to all DC's in all sites.

                      When i enable userenv debugging on the affected pc,
this is
       what i get -
                      USERENV(a8.1e0) 08:23:36:191 MyGetUserName:
GetUserNameEx
       failed with 1326

                      I can't find what this error means anywhere. It also
fails
       with error 1317 as well.
                      Does anyone know?
                      thanks



       List info   : http://www.activedir.org/List.aspx
       List FAQ    : http://www.activedir.org/ListFAQ.aspx
       List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/



List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Reply via email to