[ActiveDir] Exchange 2K3 Private Information Store Disappeared

2004-11-02 Thread Monte Barnett \(Tech\)

  Okay, here's the scenario: Exchange Server 2003 (upgraded in June from
2K w/current SPs) has, over the past two weeks, begun allowing users to
open other users mailboxes. Up until now, it was "secure" in that people
had to assign delegates, but now it's pretty much wide open.
Additionally, the Private Information Store shows *none* of the user
logons or mailboxes. Two user mailboxes won't open ("Cannot be found /
Does not exist" errors opening with Outlook). But .. all other users
can open their mailboxes, send & receive mail, use the global address
book, and do pretty much anything they normally do with e-mail. From
Active Directory Users & Computers, we cannot add email accounts, nor
can we make changes to existing users' Mailbox Rights from the Exchange
Advanced tab within User Properties. Clicking the Mailbox Right button
returns "There is no such object on the server.  Facility: Win32  ID no:
c0072030   Microsoft Active Directory - Exchange Extension. 

  As it stands, we're thinking there's little time left before this
self-destructs. Things came to a halt yesterday afternoon, and after
several hours of getting no answers from Microsoft, our Network Admin
found that the Exchange Connector in AD Sites & Services wasn't working,
deleted & re-created it, then restarted the three Global Catalog
Servers, which got mail back up and limping along. 

  Any ideas?

   
Monte Barnett
Network Specialist
Burlington-Edison School District
491 N. Burlington Blvd
Burlington, WA  98233
(360) 757-3344 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Disable IE via GPO

2002-10-16 Thread Monte Barnett (Tech)


  Rick,

   Please send one my way.

  Thanks,
  Monte

-Original Message-
From: Rick Kingslan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 16, 2002 10:17 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Disable IE via GPO


John,

Interesting that you even mention this.  I have a reg file that sets the
zones on IE via directly modding the registry in just this manner.
We've got about 25k seats of Inbound/Outbound 'Out-sourced marketers'
(yeah, I can even put lipstick on a pig like Telemarketing!) and we have
to lock them down to ONLY what we want them to do.

If anyone wants a copy o it, let me know.  I'll shoot it off to you...

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



[ActiveDir] Moving/Copying Users To A New Domain

2002-04-24 Thread Monte Barnett (Tech)


   Greetings!

 OK, here's the story: Like a few other folks, we've just discovered
that our backups (using BackupExec) did NOT have the Active Directory info
backed up properly. The previous DC is toast, and restoring to either the
old hardware config or a new hardware config has been nothing short of a
lesson in futility. The other server in the domain, even after seizing
control, will not behave as the new "PDC". After numerous errors trying to
reestablish a necessary trust with "Domain A", we successfully removed the
trust from "Domain A", but any attempts to remove it from the problem domain
("Domain B") returns an Active Directory dialog box with the error "The
specified user does not exist". We've been fighting to reconstruct things
for three days now and we've pretty well decided to just move on. We have
the users' data directories & files, and have a new "Domain C" already set
up and trusted with "Domain A".

 So, here's what we'd *like* to do: Since we can still see all of the
old users in "Domain B", we need to know if there is a way to copy the user
accounts to "Domain C". If there *is* some way to do that, it'd certainly be
easier than spending the next several days running batch files & scripts to
create the old users in the new domain, then setting up sharing &
permissions on 1200+ directories on the data drive.

 Is this even possible, or are we simply going to have to roll up our
sleeves and do it "long hand"? 

  Thanks,

  Monte Barnett
  Network Tech
  Burlington-Edison School District
  Burlington, WA 98233
  (360) 757-3344
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/