Re: [ActiveDir] OT: limiting ldap query to single domain
[EMAIL PROTECTED] wrote: Speaking of scripting, all the cool kids in my circle seem to be getting in to Python these days. Anyone played with it here (AD scripting or otherwise)? I don't use it bu t I know some folks in POland whom are using python and they are saying it's wonderfull as scripting language for Win32 and AD -- Tomasz Onyszko [MVP] [EMAIL PROTECTED] http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] How can a local user account be affected by a policy
Cothern Jeff D. Team EITC wrote: Is there a way to apply a policy to a local user account on a workstation without it having effect on the local admin account as well? How to apply local policies to all users except administrators in a workgroup setting in Windows 2000 http://support.microsoft.com/default.aspx?scid=kb;en;293655 -- Tomasz Onyszko [MVP] [EMAIL PROTECTED] http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Slow data migration
Title: Slow data migration Hi Everyone, At the moment we're migrating files from Novell to Windows (W2K3) and we're using three migration consoles. 1 of those consoles is performing like a race car, the other 2 are performing like some guy that's doing 20 on the left lane on the highway ;-) We first thought it was the third-party tool, but we have done the following tests: * File copy using third-party tool - SLOW! * File copy using XCOPY - SLOW! * File copy using ROBOCOPY - SLOW! * File copy using Windows Explorer - tada! Performance like a race car! Conclusion here is: file/data copy through the GUI is OK and file copy through the command-line sucks... Is this a bug? Has any of you guys seen anything similar? Hope you can help! Regards, Jorge Met vriendelijke groet / Kind regards, Jorge de Almeida Pinto Infrastructure Consultant __ ...OLE_Obj... LogicaCMG Nederland B.V. (BU SD/AT) Division Industry, Distribution and Transport (IDT) Kennedyplein 248, 5611 ZT, Eindhoven . Postbus 7089 5605 JB Eindhoven ( Tel : +31-(0)40-29.57.777 2 Fax : +31-(0)40-29.57.709 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : [EMAIL PROTECTED] http://www.logicacmg.com/ - Solutions that matter - This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
RE: [ActiveDir] OT: Exchange mailbox diff tool
Cached mode? Do you get the same result when not using cached mode? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 4:57 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Here is the scenario. UserB is sharing his calendar to UserX and UserY UserC is sharing his calendar to UserX and UserY UserX and UserY can not view UserB and UserC simultaneously, but can view one or the other plus anyone one else that has their calendar shared to them. The only way I have got them to view the calendars simultaneously is to remove their outlook profile and create a new profile. But...then they can only view them simultaneously the first time outlook (2003 cached mode) is opened. Once it is closed the problem starts again. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, January 26, 2005 4:18 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Haven't heard of any. What's the problem? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 3:15 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Exchange mailbox diff tool I am having some problems with about 3 of 4000 mailboxes in an exchange 2003 environment and can not for the life of me figure it out. Are there any mailbox diff tools out there that I may be able to use to find the differences between these mailboxes and the rest of them? List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Slow data migration
?? Have you verified that the underlying servers aren't the bottleneck? Network is fine (did you run the test from the same console each time?) Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jorge de Almeida Pinto Sent: Thursday, January 27, 2005 5:18 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Slow data migration Hi Everyone, At the moment we're migrating files from Novell to Windows (W2K3) and we're using three migration consoles. 1 of those consoles is performing like a race car, the other 2 are performing like some guy that's doing 20 on the left lane on the highway ;-) We first thought it was the third-party tool, but we have done the following tests: * File copy using third-party tool - SLOW! * File copy using XCOPY - SLOW! * File copy using ROBOCOPY - SLOW! * File copy using Windows Explorer - tada! Performance like a race car! Conclusion here is: file/data copy through the GUI is OK and file copy through the command-line sucks... Is this a bug? Has any of you guys seen anything similar? Hope you can help! Regards, Jorge Met vriendelijke groet / Kind regards, Jorge de Almeida Pinto Infrastructure Consultant __ ...OLE_Obj... LogicaCMG Nederland B.V. (BU SD/AT) Division Industry, Distribution and Transport (IDT) Kennedyplein 248, 5611 ZT, Eindhoven * Postbus 7089 5605 JB Eindhoven * Tel : +31-(0)40-29.57.777 * Fax : +31-(0)40-29.57.709 * Mobile : +31-(0)6-26.26.62.80 * E-mail : [EMAIL PROTECTED] http://www.logicacmg.com/ http://www.logicacmg.com/ - Solutions that matter - This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Slow data migration
Title: Slow data migration Have you checked that name resolution is working ok and that there are no network issues on this server eg network card etc. Jacqui From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jorge de Almeida Pinto Sent: 27 January 2005 10:18 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Slow data migration Hi Everyone, At the moment we're migrating files from Novell to Windows (W2K3) and we're using three migration consoles. 1 of those consoles is performing like a race car, the other 2 are performing like some guy that's doing 20 on the left lane on the highway ;-) We first thought it was the third-party tool, but we have done the following tests: * File copy using third-party tool - SLOW! * File copy using XCOPY - SLOW! * File copy using ROBOCOPY - SLOW! * File copy using Windows Explorer - tada! Performance like a race car! Conclusion here is: file/data copy through the GUI is OK and file copy through the command-line sucks... Is this a bug? Has any of you guys seen anything similar? Hope you can help! Regards, Jorge Met vriendelijke groet / Kind regards, Jorge de Almeida Pinto Infrastructure Consultant __ ...OLE_Obj... LogicaCMG Nederland B.V. (BU SD/AT) Division Industry, Distribution and Transport (IDT) Kennedyplein 248, 5611 ZT, Eindhoven . Postbus 7089 5605 JB Eindhoven ( Tel : +31-(0)40-29.57.777 2 Fax : +31-(0)40-29.57.709 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : [EMAIL PROTECTED] http://www.logicacmg.com/ - Solutions that matter - This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
RE: [ActiveDir] Slow data migration
Return Receipt Your RE: [ActiveDir] Slow data migration document : was Lucia Washaya/UNAMSIL received by: at: 27/01/2005 15:44:49 GMT List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Exchange mailbox diff tool
Actually, no. I don't have the problem when not in cached mode (good call Al). Any ideas why that is? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Thursday, January 27, 2005 9:04 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Cached mode? Do you get the same result when not using cached mode? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 4:57 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Here is the scenario. UserB is sharing his calendar to UserX and UserY UserC is sharing his calendar to UserX and UserY UserX and UserY can not view UserB and UserC simultaneously, but can view one or the other plus anyone one else that has their calendar shared to them. The only way I have got them to view the calendars simultaneously is to remove their outlook profile and create a new profile. But...then they can only view them simultaneously the first time outlook (2003 cached mode) is opened. Once it is closed the problem starts again. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, January 26, 2005 4:18 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Haven't heard of any. What's the problem? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 3:15 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Exchange mailbox diff tool I am having some problems with about 3 of 4000 mailboxes in an exchange 2003 environment and can not for the life of me figure it out. Are there any mailbox diff tools out there that I may be able to use to find the differences between these mailboxes and the rest of them? List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Slow data migration
Return Receipt Your RE: [ActiveDir] Slow data migration document: wasJustin Leney/US/DCI received by: at:01/27/2005 11:00:01 AM This e-mail, and any attachment, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, re-transmission, copying, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. The contents of this message may contain personal views which are not the views of Discovery Communications, Inc. (DCI). List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Exchange mailbox diff tool
I want to say it's a known issue, but to tell the truth my brain is going another direction at the moment. I just remember that cached mode and access were a strange combination and just can't recall where I read the details at the moment. If I can find it, I'll post it, but you may want to have a look at the hotfixes/sp's out there for OL2K3 related to cached mode. As well as the known issues for this. Sorry not to be more helpful, but pretty sure it's your issue. Has to do with the network conversations going on when in cached mode or not (when cached, you're talking to the local store, vs. the server so that you get no perceptible impact if suddenly off the network etc. This wreaks havoc with opening others folders and I know I've had this conversation somewhere before, but I think I may have drank that portion of my memory away already ;) -ajm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Thursday, January 27, 2005 10:50 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Actually, no. I don't have the problem when not in cached mode (good call Al). Any ideas why that is? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Thursday, January 27, 2005 9:04 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Cached mode? Do you get the same result when not using cached mode? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 4:57 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Here is the scenario. UserB is sharing his calendar to UserX and UserY UserC is sharing his calendar to UserX and UserY UserX and UserY can not view UserB and UserC simultaneously, but can view one or the other plus anyone one else that has their calendar shared to them. The only way I have got them to view the calendars simultaneously is to remove their outlook profile and create a new profile. But...then they can only view them simultaneously the first time outlook (2003 cached mode) is opened. Once it is closed the problem starts again. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, January 26, 2005 4:18 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Haven't heard of any. What's the problem? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 3:15 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Exchange mailbox diff tool I am having some problems with about 3 of 4000 mailboxes in an exchange 2003 environment and can not for the life of me figure it out. Are there any mailbox diff tools out there that I may be able to use to find the differences between these mailboxes and the rest of them? List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] OT: pushing user info into Outlook
Hey all, Just been redoing a some PCs and was wondering if there's some way of getting the user info into Outlook without using roaming profiles. Has anyone come across this or know of a good quick method? Cheers. Regards Tim Sutton IT Systems Manager Troup Bywaters Anders Eastgate House 10 Eastgate LEEDS LS2 7JL Tel: 01132432241 Fax: 01132424024 E-mail: [EMAIL PROTECTED] Groupshield 6.0 - Troup Bywaters Anders Privilege and Confidentiality Notice This email and any attachments to it are intended only for the party to whom they are addressed. They may contain privileged and / or confidential information. If you have received this transmission in error please notify the sender immediately and delete any digital copies and destroy any paper copies. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: pushing user info into Outlook
What version of outlook? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Sutton Sent: Thursday, January 27, 2005 10:33 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: pushing user info into Outlook Hey all, Just been redoing a some PCs and was wondering if there's some way of getting the user info into Outlook without using roaming profiles. Has anyone come across this or know of a good quick method? Cheers. Regards Tim Sutton IT Systems Manager Troup Bywaters Anders Eastgate House 10 Eastgate LEEDS LS2 7JL Tel: 01132432241 Fax: 01132424024 E-mail: [EMAIL PROTECTED] Groupshield 6.0 - Troup Bywaters Anders Privilege and Confidentiality Notice This email and any attachments to it are intended only for the party to whom they are addressed. They may contain privileged and / or confidential information. If you have received this transmission in error please notify the sender immediately and delete any digital copies and destroy any paper copies. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: pushing user info into Outlook
You could export everything into a PST file, then import it onto the new PC. Dave //SIGNED// David J. Perdue Network Security Engineer, InDyne Inc Comm: (805) 606-4597DSN: 276-4597 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Sutton Sent: Thursday, January 27, 2005 08:33 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: pushing user info into Outlook Hey all, Just been redoing a some PCs and was wondering if there's some way of getting the user info into Outlook without using roaming profiles. Has anyone come across this or know of a good quick method? Cheers. Regards Tim Sutton IT Systems Manager Troup Bywaters Anders Eastgate House 10 Eastgate LEEDS LS2 7JL Tel: 01132432241 Fax: 01132424024 E-mail: [EMAIL PROTECTED] Groupshield 6.0 - Troup Bywaters Anders Privilege and Confidentiality Notice This email and any attachments to it are intended only for the party to whom they are addressed. They may contain privileged and / or confidential information. If you have received this transmission in error please notify the sender immediately and delete any digital copies and destroy any paper copies. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: pushing user info into Outlook
Sorry, that's not the kinda info I'm talking about. Been a slow day so brain shut down early! :) lol What I'm talking about is when a user logs on to a different PC from usual and wants to use their email (we're running exchange 2000 and office 2003) I / we / they have to set the account up on that machine by entering server and username. Is there anyway that this can be automated? Regards Tim Sutton IT Systems Manager Troup Bywaters Anders Eastgate House 10 Eastgate LEEDS LS2 7JL Tel: 01132432241 Fax: 01132424024 E-mail: [EMAIL PROTECTED] -Original Message- From: Perdue David J Contr InDyne/Enterprise IT [mailto:[EMAIL PROTECTED] Sent: 27 January 2005 16:51 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: pushing user info into Outlook You could export everything into a PST file, then import it onto the new PC. Dave //SIGNED// David J. Perdue Network Security Engineer, InDyne Inc Comm: (805) 606-4597DSN: 276-4597 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Sutton Sent: Thursday, January 27, 2005 08:33 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: pushing user info into Outlook Hey all, Just been redoing a some PCs and was wondering if there's some way of getting the user info into Outlook without using roaming profiles. Has anyone come across this or know of a good quick method? Cheers. Regards Tim Sutton IT Systems Manager Troup Bywaters Anders Eastgate House 10 Eastgate LEEDS LS2 7JL Tel: 01132432241 Fax: 01132424024 E-mail: [EMAIL PROTECTED] Groupshield 6.0 - Troup Bywaters Anders Privilege and Confidentiality Notice This email and any attachments to it are intended only for the party to whom they are addressed. They may contain privileged and / or confidential information. If you have received this transmission in error please notify the sender immediately and delete any digital copies and destroy any paper copies. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ Groupshield 6.0 - Troup Bywaters Anders Privilege and Confidentiality Notice This email and any attachments to it are intended only for the party to whom they are addressed. They may contain privileged and / or confidential information. If you have received this transmission in error please notify the sender immediately and delete any digital copies and destroy any paper copies. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] OT:exchange restore
Hi, i've asked this question in a diff format before, so i apologize. i know you guys are busy and this is OT, but i need to restore an info store in exchange and i don't have the spare hw to set up a recovery forest. my question is- is there any potential issue in creating a new exchange server in my admin group and redirecting the restore to that server using veritas backup exec just to exmerge the mailboxes i need to a pst? Thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT:exchange restore
I would expect that there's some gotchas in E2K vs. E2K3 where you can do that with RSG's. Have you taken a look at the DR paper for Exchange yet for ideas? Http://www.microsoft.com/exchange/library should have that doc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Thursday, January 27, 2005 12:56 PM To: ActiveDir (E-mail) Subject: [ActiveDir] OT:exchange restore Hi, i've asked this question in a diff format before, so i apologize. i know you guys are busy and this is OT, but i need to restore an info store in exchange and i don't have the spare hw to set up a recovery forest. my question is- is there any potential issue in creating a new exchange server in my admin group and redirecting the restore to that server using veritas backup exec just to exmerge the mailboxes i need to a pst? Thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Sid to Group Name
Excuse the ignorance here, but I have a problem that I don't know how to solve. I know the SID of a group that used to exist but no longer does. Is there a way I can find out what that group name used to be? Is this information purged when the group is deleted? Is there a tool that will use the SID I have and tell me what group it is/was? Single Windows 2000 Domain in Native Mode Any help is greatly appreciated. Thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: Exchange mailbox diff tool
Al, THANK!!! I think it was enough help that you gave me a workaround. I can't believe I didn't even think to try it out of cached mode. If you do run across the article, let me know, but I think that now I know the right path I should be able to find something. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Thursday, January 27, 2005 11:30 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool I want to say it's a known issue, but to tell the truth my brain is going another direction at the moment. I just remember that cached mode and access were a strange combination and just can't recall where I read the details at the moment. If I can find it, I'll post it, but you may want to have a look at the hotfixes/sp's out there for OL2K3 related to cached mode. As well as the known issues for this. Sorry not to be more helpful, but pretty sure it's your issue. Has to do with the network conversations going on when in cached mode or not (when cached, you're talking to the local store, vs. the server so that you get no perceptible impact if suddenly off the network etc. This wreaks havoc with opening others folders and I know I've had this conversation somewhere before, but I think I may have drank that portion of my memory away already ;) -ajm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Thursday, January 27, 2005 10:50 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Actually, no. I don't have the problem when not in cached mode (good call Al). Any ideas why that is? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Thursday, January 27, 2005 9:04 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Cached mode? Do you get the same result when not using cached mode? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 4:57 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Here is the scenario. UserB is sharing his calendar to UserX and UserY UserC is sharing his calendar to UserX and UserY UserX and UserY can not view UserB and UserC simultaneously, but can view one or the other plus anyone one else that has their calendar shared to them. The only way I have got them to view the calendars simultaneously is to remove their outlook profile and create a new profile. But...then they can only view them simultaneously the first time outlook (2003 cached mode) is opened. Once it is closed the problem starts again. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, January 26, 2005 4:18 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Exchange mailbox diff tool Haven't heard of any. What's the problem? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Wednesday, January 26, 2005 3:15 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Exchange mailbox diff tool I am having some problems with about 3 of 4000 mailboxes in an exchange 2003 environment and can not for the life of me figure it out. Are there any mailbox diff tools out there that I may be able to use to find the differences between these mailboxes and the rest of them? List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Sid to Group Name
Well maybe...
How long ago was it deleted? If it is less than the tombstone period you may
be able to find the group in the deleted items container.
You could use adfind to find it
The command would be
Adfind -showdel -default -binenc -f objectsid={{SID:insert sid here}}
Not sure what the command structure would be for ldifde or dsquery to do
this ;o)
joe
Sort of like
V:\adfind -showdel -default -binenc -f
objectsid={{SID:S-1-5-21-1275210071-789336058-1957994488-218356}}
AdFind V01.26.00cpp Joe Richards ([EMAIL PROTECTED]) January 2005
Transformed Filter:
objectsid=\01\05\00\00\00\00\00\05\15\00\00\00W\29\02L\FAO\0C\2F\F8\9F\B4t\F
4T\03\00
Using server: w2kasdc1.joehome.com
Directory: Windows 2000
Base DN: DC=joehome,DC=com
dn:CN=testgroupdelete\0ADEL:4eafc658-0600-4328-a7e3-a923692f62d9,CN=Deleted
Objects,DC=joehome,DC=com
cn: testgroupdelete\0ADEL:4eafc658-0600-4328-a7e3-a923692f62d9
groupType: -2147483646
instanceType: 4
isDeleted: TRUE
distinguishedName:
CN=testgroupdelete\0ADEL:4eafc658-0600-4328-a7e3-a923692f62d9,CN=Deleted
Objects,DC=joehome,DC=com
objectClass: top
objectClass: group
objectGUID: {4EAFC658-0600-4328-A7E3-A923692F62D9}
objectSid: S-1-5-21-1275210071-789336058-1957994488-218356
name: testgroupdelete\0ADEL:4eafc658-0600-4328-a7e3-a923692f62d9
sAMAccountName: testgroupdelete
uSNChanged: 1285863
uSNCreated: 1285860
whenChanged: 20050127184048.0Z
whenCreated: 20050127184046.0Z
1 Objects returned
The command completed successfully.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of James Payne
Sent: Thursday, January 27, 2005 1:26 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Sid to Group Name
Excuse the ignorance here, but I have a problem that I don't know how to
solve. I know the SID of a group that used to exist but no longer does.
Is there a way I can find out what that group name used to be? Is this
information purged when the group is deleted? Is there a tool that will use
the SID I have and tell me what group it is/was?
Single Windows 2000 Domain in Native Mode
Any help is greatly appreciated.
Thanks
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT: limiting ldap query to single domain
To do a LDAP query for the separate domains, use the form: LDAP//a/dc=a,dc=com LDAP//b/dc=b,dc=com LDAP//c/dc=c,dc=com Where a,b,c are the neBIOS names of the domains -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Benway Sent: Wednesday, January 26, 2005 11:49 AM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] OT: limiting ldap query to single domain It's a webpage ASP, since we are only reading, permissions shouldn't be a problem. jb -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, January 26, 2005 2:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: limiting ldap query to single domain Sure. Is this VBSCRIPT? What about permissions? Do you have to worry about that? Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Benway Sent: Wednesday, January 26, 2005 2:20 PM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] OT: limiting ldap query to single domain We are working on a phonelist using AD. Because we have multiple domains and domain name spaces, I want to be able to filter each search request by the domain. I want to have drop down the list the domains(a.com,b.com,c.com) they are not subdomains it is a flat forest. Right now we can use the GC and pull information from the entire forest, but we cannot get ldap to work for each domain. A quick domain list A.com Server1.a.com (DC) Server2.a.com (GC) B.com Server1.b.com (DC) Server2.b.com (GC) I need to be able to list users from each domain seperately for the phone list. Hope this clears things up a little. jb -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, January 26, 2005 1:50 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: limiting ldap query to single domain It would probably be better if you'd tell us what information you're after and how you're going about getting it in your script. If you can post the logic or the whole script that would be helpful. Keep in mind that the GC has a subset of information in it, so there are times when you may need to go to the individual DC's to get the necessary information. al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Benway Sent: Wednesday, January 26, 2005 1:36 PM To: 'ActiveDir@mail.activedir.org' Subject: [ActiveDir] OT: limiting ldap query to single domain We have a large flat AD forest, with separate name spaces (a.com,b.com,c.com,etc) I have a few script questions. First is there a way to retrieve each domain name, using winnt: doesn't work Second, if I use GC, I can read information on all objects, but how can I limit it so I can query only 1 domain at a time. If I use DC I have to query a different DC for each domain. Thanks,jb List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT:exchange restore
here's the story- my recovery server does not have a scsi card and i have no spare and this is a needed to be done yesterday kinda thing. i have noway to restore the tape backup to the recovery server and i don't want to try some forest trust restore between 2 domains in seperate forests senario. i've racked my head and i can't think of anything going wrong in AD/Exchange Org. the worse that I see happening is that the restore won't work. i can't see this affecting email or AD. can anyone? since its the same admin group, the legacyExchangeDN should be correct and if I use the proper logical names for storage groups/DB's, and have the same sp level, this should work. just long enough to run exmerge and then i'll uninstall exchange(exchange does cleanup AD after itself after an uninstall, doesn't it?) thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, January 27, 2005 1:21 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT:exchange restore When you build an offline recovery server, you'd want to do it offline. Away from the existing exchange infrastructure. That is the way I've done it and seen it done, so I've tended to assume that it is best practice. You do not want to restore into the same environment. The good news is that you could do all of this on one desktop that has enough space to hold the data you are restoring. You make it a DC and Exchange server for this temporary assignment. You use the same domain/org/and server name as your existing infrastructure. I have a .doc file named Build an Offline Exchange 2000 Server in 9 Steps that I borrowed from somewhere. You may want to look at that. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Kern, Tom Sent: Thu 1/27/2005 9:56 AM To: ActiveDir (E-mail) Subject: [ActiveDir] OT:exchange restore Hi, i've asked this question in a diff format before, so i apologize. i know you guys are busy and this is OT, but i need to restore an info store in exchange and i don't have the spare hw to set up a recovery forest. my question is- is there any potential issue in creating a new exchange server in my admin group and redirecting the restore to that server using veritas backup exec just to exmerge the mailboxes i need to a pst? Thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Where does AD store the Dial In settings?
I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike
RE: [ActiveDir] Sites VS domains in a distributed global environm ent.
Hello Frank, You're correct; SQL and Exchange are in the NOT SO EMPTY root domain, I should have been clearer on that. That domain also has the Enterprise Admins group in it. All other domains are separate tree domains, big hassle to support. I think my best option if I'm reading you correctly, is to migrate everyone into the same domain as the exchange and SQL and end up having a single domain. Do you agree? BTW I don't envy my position either but... ;-) Thanks again for the MUCH appreciated help. Mike Newell Information Systems Manager OSI Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, January 26, 2005 1:08 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Sites VS domains in a distributed global environm ent. Mike, Ok - now I think I understand most of the setup ;-) One question - is Exchange/SQL in the empty root 2003 domain that you mentioned in the original message? If this is the case keep reading. If not, that brings up other questions ;-) Either case (child domain or separate tree in the same forest) would put you in a better position than where you are now. IMO, I think that the issue is going to boil down to a DNS namespace issue. If you go the child domain route you have a contiguous DNS namespace while the separate tree route leads to a non-contiguous namespace. I like the contiguous namespace because I am a KISS person and I think that the DNS setup is much simpler (child DCs forward to the root domain, root domain delegates to child). One thing that you need to confirm is that the forest root domain is the existing exchange domain (i.e. it contains the Enterprise Admins universal group). If the Exchange domain is not the forest root domain, you are in a corner because you are at least going to have to keep both the Exc domain and whatever domain is the forest root domain. Back to the question. Going back and re-doing a DNS/AD namespace is a major PITA. In your case I would look for the following: Keep the Exc domain and check to see if it is also the forest root domain (contains the Enterprise Admins group). Hopefully it is. Keep this domain. If the forest root is not the existing Exc domain, find the forest root domain. Keep this domain. -or- If the Exc domain is also the forest root, find the domain that currenly has most of your objects. Keep this domain and migrate the remaining users to this domain. You end up keeping the Exc domain and (ideally) the domain that already has most of your users/servers/etc. The forest ends up being a two tree forest where each tree is a single domain. This is probably as good as you are going to get from a trust tree viewpoint. Hopefully this helps. I don't envy your position... Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Newell Sent: Tuesday, January 25, 2005 5:47 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Sites VS domains in a distributed global environm ent. Not to confuse the issue but what I would end up with is a root domain with Exchange and SQL in it (already set up this way) and a separate domain tree, not a child domain of the root. I don't really have much choice regarding Exchange unless I want to rebuild in a different domain. Its setup this way now, the only difference would be I'd only have one domain and the root, instead of 25 or 30 separate domain trees for each company we own. DNS is AD integrated. Again, I inherited this and I am looking for a better way to build our environment. Would a child domain of the root be a better option? Again, I appreciate the input. Thanks. Mike Newell Information Systems Manager OSI Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, January 25, 2005 2:06 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Sites VS domains in a distributed global environm ent. Deji, The way that I read the original post, he was going to consolidate into a single child domain under a Top Level Domain (i.e. he ends up with a forest that consists of a TLD placeholder domain and a single child domain under that). If that is the secnario, all of the forest locator information is going to end up in the _msdcs zone of the TLD (_msdcs.tld.com). If he ends up in a true single domain forest and on AD integrated DNS then he does not need to worry about moving secondaries around and I mis-read the original post. Given that the assumption is that the site does not have a TLD DNS server on-site: In the perfect world of no network outages it would be acceptable to have the child DCs/DNS servers forward to the TLD DCs/DNS servers and that would be where the client eventually gets their forest locator records from via the forwarding relationship. The downside to this is that if the network link goes down and the DNS server at the child site
RE: [ActiveDir] Where does AD store the Dial In settings?
msNPAllowDialIn ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, Mike Sent: Thursday, January 27, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Where does AD store the Dial In settings? I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Where does AD store the Dial In settings?
http://www.readymaids.com/Portals/1/Find%20Users%20allowed%20to%20use%20VPN.t xt Enjoy - and remember to thank Hunter :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Charlie Kaiser Sent: Thu 1/27/2005 12:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? msNPAllowDialIn ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, Mike Sent: Thursday, January 27, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Where does AD store the Dial In settings? I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Where does AD store the Dial In settings?
:op I see your response and raise it a adfind -default -f (objectcategory=person)(msNPAllowDialin=TRUE) samaccountname joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 27, 2005 3:33 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? http://www.readymaids.com/Portals/1/Find%20Users%20allowed%20to%20use%20VPN. t xt Enjoy - and remember to thank Hunter :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Charlie Kaiser Sent: Thu 1/27/2005 12:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? msNPAllowDialIn ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, Mike Sent: Thursday, January 27, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Where does AD store the Dial In settings? I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT:exchange restore
Instead of can't think of anything going wrong, flip that around and see what you'd do in the worst-case scenario, Exchange and/or AD toasted. Then ask your boss if she/he would rather allocate resources to a scsi card and tape drive, or to recovering from the downtime. Hunter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Thursday, January 27, 2005 12:38 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT:exchange restore here's the story- my recovery server does not have a scsi card and i have no spare and this is a needed to be done yesterday kinda thing. i have noway to restore the tape backup to the recovery server and i don't want to try some forest trust restore between 2 domains in seperate forests senario. i've racked my head and i can't think of anything going wrong in AD/Exchange Org. the worse that I see happening is that the restore won't work. i can't see this affecting email or AD. can anyone? since its the same admin group, the legacyExchangeDN should be correct and if I use the proper logical names for storage groups/DB's, and have the same sp level, this should work. just long enough to run exmerge and then i'll uninstall exchange(exchange does cleanup AD after itself after an uninstall, doesn't it?) thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, January 27, 2005 1:21 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT:exchange restore When you build an offline recovery server, you'd want to do it offline. Away from the existing exchange infrastructure. That is the way I've done it and seen it done, so I've tended to assume that it is best practice. You do not want to restore into the same environment. The good news is that you could do all of this on one desktop that has enough space to hold the data you are restoring. You make it a DC and Exchange server for this temporary assignment. You use the same domain/org/and server name as your existing infrastructure. I have a .doc file named Build an Offline Exchange 2000 Server in 9 Steps that I borrowed from somewhere. You may want to look at that. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Kern, Tom Sent: Thu 1/27/2005 9:56 AM To: ActiveDir (E-mail) Subject: [ActiveDir] OT:exchange restore Hi, i've asked this question in a diff format before, so i apologize. i know you guys are busy and this is OT, but i need to restore an info store in exchange and i don't have the spare hw to set up a recovery forest. my question is- is there any potential issue in creating a new exchange server in my admin group and redirecting the restore to that server using veritas backup exec just to exmerge the mailboxes i need to a pst? Thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] OT:problem
Maybe you could install Virtual PC on the box with the tape drive and do the restore into a virtual environment?? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Wednesday, January 26, 2005 9:04 PM To: ActiveDir (E-mail) Subject: [ActiveDir] OT:problem Say your company had a lawsuit and you needed to restore a few months of exchang2k email. and say you only backed up the entire info store. no brick-level backups. and say your deleted item rentenion was only 30 days. and then say, you only have one tape drive which is being used to backup your network. thus your new AD forest recovery server had no tape drive to recover your veritas backupexec backed up exchange server. what would you do? you don't have time to order another tape drive. the tape drive of your current backup server has the wrong scsi cable for your recovery server. could you install a new exchange server in your domain and redirect the restore to that? without screwing up your forest/org? does backup exec have an option to restore an info store from tape to a file? can ntbackupp read a veritas tape? what would you do? this is a real issue for me now. i have a tape backup and a recovery server in a recovery forest with no tape drive. thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ The information contained in this e-mail transmittal, including any attached document(s) is confidential. The information is intended only for the use of the named recipient. If you are not the named recipient, you are hereby notified that any use, disclosure, copying, or distribution of the contents hereof is strictly prohibited. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Where does AD store the Dial In settings?
::fold:: :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, January 27, 2005 1:51 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? :op I see your response and raise it a adfind -default -f (objectcategory=person)(msNPAllowDialin=TRUE) samaccountname joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 27, 2005 3:33 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? http://www.readymaids.com/Portals/1/Find%20Users%20allowed%20to%20use%20VPN. t xt Enjoy - and remember to thank Hunter :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Charlie Kaiser Sent: Thu 1/27/2005 12:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? msNPAllowDialIn ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, Mike Sent: Thursday, January 27, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Where does AD store the Dial In settings? I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Where does AD store the Dial In settings?
No way, Hunter! C:\Documents and Settings\dejiadfind -default -f (objectcategory=person)(msNPAllowDialin=TRUE) samaccountname 'adfind' is not recognized as an internal or external command, operable program or batch file. ROFL Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Coleman, Hunter Sent: Thu 1/27/2005 1:36 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? ::fold:: :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, January 27, 2005 1:51 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? :op I see your response and raise it a adfind -default -f (objectcategory=person)(msNPAllowDialin=TRUE) samaccountname joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 27, 2005 3:33 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? http://www.readymaids.com/Portals/1/Find%20Users%20allowed%20to%20use%20VPN. t xt Enjoy - and remember to thank Hunter :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Charlie Kaiser Sent: Thu 1/27/2005 12:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? msNPAllowDialIn ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, Mike Sent: Thursday, January 27, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Where does AD store the Dial In settings? I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Where does AD store the Dial In settings?
Title: RE: [ActiveDir] Where does AD store the Dial In settings? You guys rock! Thanks! -Original Message- From: Coleman, Hunter [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 27, 2005 4:36 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? ::fold:: :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of joe Sent: Thursday, January 27, 2005 1:51 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? :op I see your response and raise it a adfind -default -f (objectcategory=person)(msNPAllowDialin=TRUE) samaccountname joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 27, 2005 3:33 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? http://www.readymaids.com/Portals/1/Find%20Users%20allowed%20to%20use%20VPN. t xt Enjoy - and remember to thank Hunter :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Charlie Kaiser Sent: Thu 1/27/2005 12:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? msNPAllowDialIn ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Celone, Mike Sent: Thursday, January 27, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Where does AD store the Dial In settings? I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Where does AD store the Dial In settings?
Looks like that machine may be corrupt and probably needs to be properly rebuilt by a knowledgable admin. :o) joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 27, 2005 5:04 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? No way, Hunter! C:\Documents and Settings\dejiadfind -default -f (objectcategory=person)(msNPAllowDialin=TRUE) samaccountname 'adfind' is not recognized as an internal or external command, operable program or batch file. ROFL Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Coleman, Hunter Sent: Thu 1/27/2005 1:36 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? ::fold:: :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, January 27, 2005 1:51 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? :op I see your response and raise it a adfind -default -f (objectcategory=person)(msNPAllowDialin=TRUE) samaccountname joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 27, 2005 3:33 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? http://www.readymaids.com/Portals/1/Find%20Users%20allowed%20to%20use%20VPN. t xt Enjoy - and remember to thank Hunter :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Charlie Kaiser Sent: Thu 1/27/2005 12:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Where does AD store the Dial In settings? msNPAllowDialIn ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Celone, Mike Sent: Thursday, January 27, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Where does AD store the Dial In settings? I need to get a list of users that have Dial In set to Allow Access but I can't seem to find what attribute AD uses to store this information. Any help? Mike List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] 2003 DC and local policy
Is there a way to see the local policy on a 2003 DC. The default Domain Controller shows certain settings as being not defined but some behavior is indicating that settings could be set. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] 2003 DC and local policy
a gpresult /v on the DC will give you the final policy results. Group Policy Results Wizard in the GPMC displays this data graphically - much more digestable. --Brian Desmond [EMAIL PROTECTED] Payton on the web! www.wpcp.org v - 773.534.0034 x135 f - 773.534.8101 From: [EMAIL PROTECTED] on behalf of Cothern Jeff D. Team EITC Sent: Thu 1/27/2005 8:03 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] 2003 DC and local policy Is there a way to see the local policy on a 2003 DC. The default Domain Controller shows certain settings as being not defined but some behavior is indicating that settings could be set. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat
