Re: [ActiveDir] FW: Authentication Problems.
Does the old password work when it prompts, if so, then not all the dc;s know the password has been changed. - Original Message - From: Juan Ibarra [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, June 06, 2003 10:15 PM Subject: RE: [ActiveDir] FW: Authentication Problems. Tried that many times and didn't work. Juan -Original Message- From: David Precht [mailto:[EMAIL PROTECTED] Sent: Friday, June 06, 2003 9:40 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] FW: Authentication Problems. reboot, logoff/logon, tried that? --- Juan Ibarra [EMAIL PROTECTED] wrote: Hello to all, I am experiencing the following problem at a client. We forced all employees to change their password, by going to AD users and computers and checking the box user must change password at next logon It appeared that everything worked fine until we started noticing that while working at a computer and trying to access a share an error message popped up. Your password is incorrect and it wouldn't take the new password. We forced a sync with all the DCs and still getting same errors. Please help. Juan List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Exchange, and SPAM filters or blacklist or...
Messagelabs--Sent from my BlackBerry Wireless Handheld - Original Message - From: ActiveDir-owner Sent: 06/07/2003 01:25 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Exchange, and SPAM filters or blacklist or... Does anyone have recommendations for a Spam filter or black list service that works well. I have a few clients that are getting thousands of Spam messages a day. And need to know of what works well. Rick Reynolds MCSE2000, CCNA, CISSP
RE: [ActiveDir] FW: Authentication Problems.
We had a user with this problem and he had a persistently mapped drive other than what was part of the logon script. For some reason the drive held onto his old credentials. We just disconnected and re created the drive. Raymond McClinnis Network Administrator Provident Credit Union -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of rick reynolds Sent: Friday, June 06, 2003 10:57 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] FW: Authentication Problems. Does the old password work when it prompts, if so, then not all the dc;s know the password has been changed. - Original Message - From: Juan Ibarra [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, June 06, 2003 10:15 PM Subject: RE: [ActiveDir] FW: Authentication Problems. Tried that many times and didn't work. Juan -Original Message- From: David Precht [mailto:[EMAIL PROTECTED] Sent: Friday, June 06, 2003 9:40 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] FW: Authentication Problems. reboot, logoff/logon, tried that? --- Juan Ibarra [EMAIL PROTECTED] wrote: Hello to all, I am experiencing the following problem at a client. We forced all employees to change their password, by going to AD users and computers and checking the box user must change password at next logon It appeared that everything worked fine until we started noticing that while working at a computer and trying to access a share an error message popped up. Your password is incorrect and it wouldn't take the new password. We forced a sync with all the DCs and still getting same errors. Please help. Juan List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Error message when attempting to modify the AD Schema
Working in a test Windows 2000 Active Directory environment. In order to utilize a 3rd party application, I have to modify the Active Directory schema. Anyone have any idea what this error means? ldap_add: DSA is busy ldap_add: additional info: 20AE: SvcErr: DSID-030A05EC, problem 5001 (BUSY), data 0 The entire environment is only being used for this test, so there is no load on any of the systems, hence I can't see what is causing it to be busy. Unfortunately, I can't seem to find any documentation on the error. Thanks! List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Mirror Sets
Just to give you some more information, c:\ is on Dynamic disk 0 in disk manager and I added the mirror to dynamic disk 1 for c:\, any help is appreciated. -Original Message- From: Salandra, Justin A. Sent: Saturday, June 07, 2003 11:49 AM To: ActiveDir (E-mail) Subject: [ActiveDir] Mirror Sets I have created a mirror set on a windows 2000 SP3 server running one scsi controller with two scsi hard drives. A message popped up saying that I should modify the boot.ini file. Should I modify this file? If so how would I know what to modify it to. I have never setup a mirror set before and would appreciate any help on this. Justin A. Salandra, MCSE Senior Network Engineer List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Mirror Sets
Doesn't the message say to edit the boot.ini if you have a crash? Perhaps I've been reading it wrong all these years :-) Raymond McClinnis Network Administrator Provident Credit Union -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Saturday, June 07, 2003 9:04 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Mirror Sets Just to give you some more information, c:\ is on Dynamic disk 0 in disk manager and I added the mirror to dynamic disk 1 for c:\, any help is appreciated. -Original Message- From: Salandra, Justin A. Sent: Saturday, June 07, 2003 11:49 AM To: ActiveDir (E-mail) Subject: [ActiveDir] Mirror Sets I have created a mirror set on a windows 2000 SP3 server running one scsi controller with two scsi hard drives. A message popped up saying that I should modify the boot.ini file. Should I modify this file? If so how would I know what to modify it to. I have never setup a mirror set before and would appreciate any help on this. Justin A. Salandra, MCSE Senior Network Engineer List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Mirror Sets
I thought it said that you would have to edit the boot.ini to allow for mirrored sets, but I just read something on the web that says that the program will modify the boot.ini for you. -Original Message- From: Raymond McClinnis [mailto:[EMAIL PROTECTED] Sent: Saturday, June 07, 2003 12:36 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Mirror Sets Doesn't the message say to edit the boot.ini if you have a crash? Perhaps I've been reading it wrong all these years :-) Raymond McClinnis Network Administrator Provident Credit Union -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Saturday, June 07, 2003 9:04 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Mirror Sets Just to give you some more information, c:\ is on Dynamic disk 0 in disk manager and I added the mirror to dynamic disk 1 for c:\, any help is appreciated. -Original Message- From: Salandra, Justin A. Sent: Saturday, June 07, 2003 11:49 AM To: ActiveDir (E-mail) Subject: [ActiveDir] Mirror Sets I have created a mirror set on a windows 2000 SP3 server running one scsi controller with two scsi hard drives. A message popped up saying that I should modify the boot.ini file. Should I modify this file? If so how would I know what to modify it to. I have never setup a mirror set before and would appreciate any help on this. Justin A. Salandra, MCSE Senior Network Engineer List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] FW: Authentication Problems.
This is a pretty common scenario. We have it occur so often that we dump the security event logs from all DCs and run findstr against the output with the user's name (dumpel, psexec, findstr). You can also use the eventcomb utility from MS that's a part of the account lockout toolkit. -m -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raymond McClinnis Sent: Saturday, June 07, 2003 11:55 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] FW: Authentication Problems. We had a user with this problem and he had a persistently mapped drive other than what was part of the logon script. For some reason the drive held onto his old credentials. We just disconnected and re created the drive. Raymond McClinnis Network Administrator Provident Credit Union -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of rick reynolds Sent: Friday, June 06, 2003 10:57 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] FW: Authentication Problems. Does the old password work when it prompts, if so, then not all the dc;s know the password has been changed. - Original Message - From: Juan Ibarra [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, June 06, 2003 10:15 PM Subject: RE: [ActiveDir] FW: Authentication Problems. Tried that many times and didn't work. Juan -Original Message- From: David Precht [mailto:[EMAIL PROTECTED] Sent: Friday, June 06, 2003 9:40 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] FW: Authentication Problems. reboot, logoff/logon, tried that? --- Juan Ibarra [EMAIL PROTECTED] wrote: Hello to all, I am experiencing the following problem at a client. We forced all employees to change their password, by going to AD users and computers and checking the box user must change password at next logon It appeared that everything worked fine until we started noticing that while working at a computer and trying to access a share an error message popped up. Your password is incorrect and it wouldn't take the new password. We forced a sync with all the DCs and still getting same errors. Please help. Juan List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Error message when attempting to modify the AD Schema
Is there by chance any other schema modifications occurring at the same time? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Dubyn Sent: Saturday, June 07, 2003 12:01 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Error message when attempting to modify the AD Schema Working in a test Windows 2000 Active Directory environment. In order to utilize a 3rd party application, I have to modify the Active Directory schema. Anyone have any idea what this error means? ldap_add: DSA is busy ldap_add: additional info: 20AE: SvcErr: DSID-030A05EC, problem 5001 (BUSY), data 0 The entire environment is only being used for this test, so there is no load on any of the systems, hence I can't see what is causing it to be busy. Unfortunately, I can't seem to find any documentation on the error. Thanks! List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Mirror Sets
Justin, I would think that any modification to the boot.ini wold be done in the event of failure. The driver, FTDISK.SYS, that does the fault tolerant mirroroing in this scenario, assumes the primary drive in the mirror to be disk 0, so the boot.ini should point there. In the event of failure of the PRIMARY DRIVE, the boot.ini would need to be pointed to disk 1. I suspect that this is what was being referenced - but I haven't set up a software mirror in years. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Saturday, June 07, 2003 11:43 AM To: '[EMAIL PROTECTED]' I thought it said that you would have to edit the boot.ini to allow for mirrored sets, but I just read something on the web that says that the program will modify the boot.ini for you. -Original Message- From: Raymond McClinnis [mailto:[EMAIL PROTECTED] Sent: Saturday, June 07, 2003 12:36 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Mirror Sets Doesn't the message say to edit the boot.ini if you have a crash? Perhaps I've been reading it wrong all these years :-) Raymond McClinnis Network Administrator Provident Credit Union -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Saturday, June 07, 2003 9:04 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Mirror Sets Just to give you some more information, c:\ is on Dynamic disk 0 in disk manager and I added the mirror to dynamic disk 1 for c:\, any help is appreciated. -Original Message- From: Salandra, Justin A. Sent: Saturday, June 07, 2003 11:49 AM To: ActiveDir (E-mail) Subject: [ActiveDir] Mirror Sets I have created a mirror set on a windows 2000 SP3 server running one scsi controller with two scsi hard drives. A message popped up saying that I should modify the boot.ini file. Should I modify this file? If so how would I know what to modify it to. I have never setup a mirror set before and would appreciate any help on this. Justin A. Salandra, MCSE Senior Network Engineer List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Error message when attempting to modify the AD Schema
Good thought, but there is no other activity going on at the same time. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marcus Oh Sent: Saturday, June 07, 2003 1:46 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Error message when attempting to modify the AD Schema Is there by chance any other schema modifications occurring at the same time? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Dubyn Sent: Saturday, June 07, 2003 12:01 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Error message when attempting to modify the AD Schema Working in a test Windows 2000 Active Directory environment. In order to utilize a 3rd party application, I have to modify the Active Directory schema. Anyone have any idea what this error means? ldap_add: DSA is busy ldap_add: additional info: 20AE: SvcErr: DSID-030A05EC, problem 5001 (BUSY), data 0 The entire environment is only being used for this test, so there is no load on any of the systems, hence I can't see what is causing it to be busy. Unfortunately, I can't seem to find any documentation on the error. Thanks! List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Error message when attempting to modify the AD Schema
These are very good points - it is being done on a workstation, not the server that is the Schema Master. The user is part of the Enterprise Admin group, but I don't think the script changes the schema to read-write first. I'll let you know how I make out on Monday. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Saturday, June 07, 2003 2:01 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Error message when attempting to modify the AD Schema Is the schema addition / expansion being done on the schema master, and - more importantly - have you enabled writes to the schema? By default, Enterprise Admin and members of that group are the only SP's that have permissions to the schema. Secondly by default, the schema is read-only. It meust be changed to a read-write status. It's not absolutely necessary to do your schema work on the master, but it does prevent potential conflicts and erros that you would otherwise not see. And - many applications DO REQUIRE the expansion be done on the master. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Dubyn Sent: Saturday, June 07, 2003 11:01 AM To: [EMAIL PROTECTED] Working in a test Windows 2000 Active Directory environment. In order to utilize a 3rd party application, I have to modify the Active Directory schema. Anyone have any idea what this error means? ldap_add: DSA is busy ldap_add: additional info: 20AE: SvcErr: DSID-030A05EC, problem 5001 (BUSY), data 0 The entire environment is only being used for this test, so there is no load on any of the systems, hence I can't see what is causing it to be busy. Unfortunately, I can't seem to find any documentation on the error. Thanks! List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
