RE: [ActiveDir] Can you expire a computer account in AD

2005-03-16 Thread David Adner
You can use dsquery computer -inactive (or user -inactive). 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> [EMAIL PROTECTED]
> Sent: Wednesday, March 16, 2005 21:09
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Can you expire a computer account in AD
> 
> I read this somewhere and had to confirm.  Looks like if 
> you're 2003 domain functional - lastLogonTimestamp works for 
> computers as well.
> Unfortunately, it's not exposed in tools like DSGET.  Maybe 
> joe will add this as a switch to oldcmp - as well as user accounts.
> 
> -m
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of P West
> Sent: Tuesday, March 15, 2005 3:24 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Can you expire a computer account in AD
> 
> That's exacctly what i intend to do. Disable those suckers.
> 
> 
> thanks all
> - Original Message -
> From: "Mulnick, Al" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, March 15, 2005 2:44 PM
> Subject: RE: [ActiveDir] Can you expire a computer account in AD
> 
> 
> > Because it derives from the User class, I can't think of a 
> reason why
> you
> > couldn't set that value.  I'm not sure (and have no way to 
> test at the
> > moment) if that value would be valid for what you're doing however.
> >
> > You could just disable the computer accounts vs. expire 
> them.  That's
> > available from the GUI if you want to access it that way else it's
> > scriptable.
> >
> > al
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of P West
> > Sent: Tuesday, March 15, 2005 2:28 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: Re: [ActiveDir] Can you expire a computer account in AD
> >
> > thanks AL
> > thanks Tom
> >
> >
> >
> > Ok i used oldcmp. among others and the pwdlastset (oldcmp 
> works great)
> came
> > back feb 2000 even though the password expiration says 
> march 20 2005.
> >
> > i dont think theres an issue with locating old accounts with
> pwdlastset
> the
> > thing is what's up with a password expiration date of march 
> 20 2005 if
> the
> > pwdlastset is feb 2000. this password for pc account should 
> get reset
> every
> > 30 days.
> >
> > The ping was a great idea, we were planning on doing it.  
> But our dns
> > records are not so clean so u can ping a pc and get a 
> response but its
> a
> > different pc name when you ping -a ip address.  DNS scavenging is
> getting
> > turned on , but i think the issue may still exist.
> >
> > One last point.  Can u or cant you expire a computer 
> account in ad? i
> dont
> > think you can , i tried to google it , next im callin ms to 
> ask ,.but
> wanted
> > to know what u folks opinion on it was.
> > - Original Message -
> > From: "Mulnick, Al" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, March 15, 2005 2:10 PM
> > Subject: RE: [ActiveDir] Can you expire a computer account in AD
> >
> >
> > > He beat me to it ;0)
> > >
> > > You may also want to couple that with a simple ping method to
> validate
> if
> > > the machine actually exists or not.  Might cross reference it with
> > DHCP/DNS
> > > if ping is too much overhead.
> > >
> > > Just some thoughts.
> > >
> > > Al
> > >
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz
> Onyszko
> > > Sent: Tuesday, March 15, 2005 1:55 PM
> > > To: ActiveDir@mail.activedir.org
> > > Subject: Re: [ActiveDir] Can you expire a computer account in AD
> > >
> > > P West wrote:
> > > > We are trying to clean up old AD pc accounts.  Have used every
> tool
> > > > under the sun to come up with the pwdlastset to show 
> old accounts.
> > > >
> > > > example
> > > > One pc says the pwdlast set is feb 2000 when our ad guy looks at
> > > > password expiration the dates are say march 20 2005.  but the
> > > > pwdlastset date is feb 2000.
> > > >
> > > > For some reason the pwdlastset is not updating or at least thats
> what
> > > > im thinking.
> > >
> > > try to use Joe's oldcmp tool:
> > > http://www.joeware.net/win/free/tools/oldcmp.htm
> > >
> > >
> > > --
> > > Tomasz Onyszko [MVP]
> > > [EMAIL PROTECTED]
> > > http://www.w2k.pl
> > > List info   : http://www.activedir.org/List.aspx
> > > List FAQ: http://www.activedir.org/ListFAQ.aspx
> > > List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> > > List info   : http://www.activedir.org/List.aspx
> > > List FAQ: http://www.activedir.org/ListFAQ.aspx
> > > List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> >
> > List info   : http://www.activedir.org/List.aspx
> > List FAQ: http://www.activedir.org/ListFAQ.aspx
> > List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> > List info   : http://www.activedir.org/List.aspx
> > List FAQ: http://www.activedir.org/ListFAQ.aspx
> > List archive:
> http://www.mail-archi

RE: [ActiveDir] Can you expire a computer account in AD

2005-03-16 Thread Marcus.Oh
I read this somewhere and had to confirm.  Looks like if you're 2003
domain functional - lastLogonTimestamp works for computers as well.
Unfortunately, it's not exposed in tools like DSGET.  Maybe joe will add
this as a switch to oldcmp - as well as user accounts.

-m

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of P West
Sent: Tuesday, March 15, 2005 3:24 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Can you expire a computer account in AD

That's exacctly what i intend to do. Disable those suckers.


thanks all
- Original Message - 
From: "Mulnick, Al" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, March 15, 2005 2:44 PM
Subject: RE: [ActiveDir] Can you expire a computer account in AD


> Because it derives from the User class, I can't think of a reason why
you
> couldn't set that value.  I'm not sure (and have no way to test at the
> moment) if that value would be valid for what you're doing however.
>
> You could just disable the computer accounts vs. expire them.  That's
> available from the GUI if you want to access it that way else it's
> scriptable.
>
> al
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of P West
> Sent: Tuesday, March 15, 2005 2:28 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Can you expire a computer account in AD
>
> thanks AL
> thanks Tom
>
>
>
> Ok i used oldcmp. among others and the pwdlastset (oldcmp works great)
came
> back feb 2000 even though the password expiration says march 20 2005.
>
> i dont think theres an issue with locating old accounts with
pwdlastset
the
> thing is what's up with a password expiration date of march 20 2005 if
the
> pwdlastset is feb 2000. this password for pc account should get reset
every
> 30 days.
>
> The ping was a great idea, we were planning on doing it.  But our dns
> records are not so clean so u can ping a pc and get a response but its
a
> different pc name when you ping -a ip address.  DNS scavenging is
getting
> turned on , but i think the issue may still exist.
>
> One last point.  Can u or cant you expire a computer account in ad? i
dont
> think you can , i tried to google it , next im callin ms to ask ,.but
wanted
> to know what u folks opinion on it was.
> - Original Message -
> From: "Mulnick, Al" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, March 15, 2005 2:10 PM
> Subject: RE: [ActiveDir] Can you expire a computer account in AD
>
>
> > He beat me to it ;0)
> >
> > You may also want to couple that with a simple ping method to
validate
if
> > the machine actually exists or not.  Might cross reference it with
> DHCP/DNS
> > if ping is too much overhead.
> >
> > Just some thoughts.
> >
> > Al
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz
Onyszko
> > Sent: Tuesday, March 15, 2005 1:55 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: Re: [ActiveDir] Can you expire a computer account in AD
> >
> > P West wrote:
> > > We are trying to clean up old AD pc accounts.  Have used every
tool
> > > under the sun to come up with the pwdlastset to show old accounts.
> > >
> > > example
> > > One pc says the pwdlast set is feb 2000 when our ad guy looks at
> > > password expiration the dates are say march 20 2005.  but the
> > > pwdlastset date is feb 2000.
> > >
> > > For some reason the pwdlastset is not updating or at least thats
what
> > > im thinking.
> >
> > try to use Joe's oldcmp tool:
> > http://www.joeware.net/win/free/tools/oldcmp.htm
> >
> >
> > --
> > Tomasz Onyszko [MVP]
> > [EMAIL PROTECTED]
> > http://www.w2k.pl
> > List info   : http://www.activedir.org/List.aspx
> > List FAQ: http://www.activedir.org/ListFAQ.aspx
> > List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
> > List info   : http://www.activedir.org/List.aspx
> > List FAQ: http://www.activedir.org/ListFAQ.aspx
> > List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] GPO loopback again...

2005-03-16 Thread Bruyere, Michel
Ok, 
Thanks for the input, I'll try to find out another way to achieve what 
is requested... there must be user policies combination that may get the result 
wanted... 


 

> -Message d'origine-
> De : [EMAIL PROTECTED] [mailto:ActiveDir-
> [EMAIL PROTECTED] De la part de [EMAIL PROTECTED]
> Envoyé : Wednesday, March 16, 2005 2:50 PM
> À : ActiveDir@mail.activedir.org
> Objet : Re: [ActiveDir] GPO loopback again...
> 
> Hi Michel,
> 
> I don't believe there is a loop back equivalent to do what you want.
> 
> I am not exactly sure what you mean by "restrict installation process". If
> you mean to install and deinstall software for a given user, you can do
> that
> via the User part of the policy. If you mean "Change some machine registry
> keys", you could write a script to do it, but remember you are running in
> the user context and so may not have access to change the key.
> 
>  Alan Cuthbertson
> 
> 
>  Policy Management Software:-
> http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
> ADM Template Editor:-
> http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
> Policy Log Reporter(Free)
> http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
> 
> 
> - Original Message -
> From: "Bruyere, Michel" <[EMAIL PROTECTED]>
> To: 
> Sent: Wednesday, March 16, 2005 6:42 AM
> Subject: [ActiveDir] GPO loopback again...
> 
> 
> Hi,
> After testing things out with the loopback i still can't do
> something and i'm wondering if it posible to do it.
> 
> With the loopback it's possible to make a user defined policy on a
> computer basis, but is it possible to make a computer defined policy on
> a user basis?
> 
> What I wanna do is to restrict installation process and things like this
> but on a user basis to avoid having to move the computer account in and
> out of the UO.
> 
> 
> Thanks for your help!
> 
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> 
> 
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

2005-03-16 Thread Mark Orlando
Cool! Thanks Deji, that helps.  I need to do that as well.

Mark :)


On 3/16/05 2:12 PM, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote:

> You can do it remotely, like so:
>  
> http://www.readymaids.com/Portals/1/Enable%20DHCP%20on%20Active%20NIC.txt
>  
>  
> Sincerely,
> 
> Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
> Microsoft MVP - Directory Services
> www.readymaids.com - we know IT
> www.akomolafe.com
> Do you now realize that Today is the Tomorrow you were worried about
> Yesterday?  -anon
> 
> 
> 
> From: [EMAIL PROTECTED] on behalf of Noah Eiger
> Sent: Wed 3/16/2005 10:42 AM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?
> 
> 
> 
> If you also want the client to pull the DNS from DHCP, you need to use a
> second line setting that.
> 
> --nme
> 
> -Original Message-
> From: Tim Foster [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, March 16, 2005 6:08 AM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?
> 
> You can use the netsh command in a batch file and rollout it out to your
> clients through a startup script.
> 
> netsh interface ip set address "Local" dhcp
> 
> where "Local" is the name assigned to the network interface.
> 
> Regards,
> 
> Tim 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of John Singler
> Sent: Wednesday, March 16, 2005 8:52 AM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Set clients to DHCP via GPO, Script or batch
> file?
> 
> this might help:
> 
> http://www.microsoft.com/technet/scriptcenter/scripts/network/client/mod
> ify/nwmovb05.mspx
> 
> Mark Orlando wrote:
>> Hello all Windows Networking Gurus!
>> 
>> I was wondering if there Is an easy way (script, .bat, and/or GPO) to
>> automatically set up all of my clients for DHCP from static IP
> addresses
>> without physically visiting each machine?  Thanks in advance.
>> 
>> Mark :)
>> 
>> 
>> List info   : http://www.activedir.org/List.aspx
>> List FAQ: http://www.activedir.org/ListFAQ.aspx
>> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> 
> 
> 
> 
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> 
> 
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] GPO loopback again...

2005-03-16 Thread support
Hi Michel,

I don't believe there is a loop back equivalent to do what you want.

I am not exactly sure what you mean by "restrict installation process". If
you mean to install and deinstall software for a given user, you can do that
via the User part of the policy. If you mean "Change some machine registry
keys", you could write a script to do it, but remember you are running in
the user context and so may not have access to change the key.

 Alan Cuthbertson


 Policy Management Software:-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor:-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml


- Original Message - 
From: "Bruyere, Michel" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, March 16, 2005 6:42 AM
Subject: [ActiveDir] GPO loopback again...


Hi,
After testing things out with the loopback i still can't do
something and i'm wondering if it posible to do it.

With the loopback it's possible to make a user defined policy on a
computer basis, but is it possible to make a computer defined policy on
a user basis?

What I wanna do is to restrict installation process and things like this
but on a user basis to avoid having to move the computer account in and
out of the UO.


Thanks for your help!

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] GPO not taking effect.

2005-03-16 Thread Za Vue
 I have a similar problem once, and it was permissions on the SYSVOL folder.

-Z.V.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CC/DNA)
Sent: Wednesday, March 16, 2005 2:43 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO not taking effect.

http://redmondmag.com/features/article.asp?EditorialsID=222

Use this article to help you troubleshoot the issue.  I would also make sure
the DC and ping the host, and make sure none of the IP ports are blocked.

Thanks,

Todd

-Original Message-
From: Umer Y. [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 16, 2005 2:22 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] GPO not taking effect.

I installed the 2003 server, installed AD. Created a new OU. Created a new
user under it. Created a GPO for the same OU. Changed a gp setting as a
test.

Went back to the client terminal. Logged on as the user. The GPO didn't take

effect.

Went to client's command line. Typed 'GPRESULT'.

Got "INFO: The policy object does not exist".

Went back to server. Did a RSoP test from the OU. The policy exists with my
changed setting.

What am I doing wrong?

I will appreciate your help.

Thanks!!


... you don't know what you've got 'till it's gone..

- Joni Mitchell


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] GPO not taking effect.

2005-03-16 Thread support
Joni,

I can't think what may be causing it, but I always find the UserEnv.Log is a
good place to start. If you activate Detailed logging, then logon to the
client terminal it provides detailed info in the file in
%windir%\debug\usermode\userenv.log.

Here is a reference to activating the logging:
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/regentry/96328.asp

Unfortunately, the log is a little confusing to the uninitiated, but it
contains all of the steps involved in GPO processing, searching each OU for
GPO's, checking access to each GPO, finding active extensions in each policy
then actually processing them. To assist in this, we have a free utility
that will process the log and display it in a meaningful way. It also
provides a button to turn on and off detailed logging.
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml


 Alan Cuthbertson


 Policy Management Software:-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor:-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml



- Original Message - 
From: "Umer Y." <[EMAIL PROTECTED]>
To: 
Sent: Thursday, March 17, 2005 6:21 AM
Subject: [ActiveDir] GPO not taking effect.


> I installed the 2003 server, installed AD. Created a new OU. Created a new
> user under it. Created a GPO for the same OU. Changed a gp setting as a
> test.
>
> Went back to the client terminal. Logged on as the user. The GPO didn't
take
> effect.
>
> Went to client's command line. Typed 'GPRESULT'.
>
> Got "INFO: The policy object does not exist".
>
> Went back to server. Did a RSoP test from the OU. The policy exists with
my
> changed setting.
>
> What am I doing wrong?
>
> I will appreciate your help.
>
> Thanks!!
>
>
> ... you don't know what you've got 'till it's gone..
>
> - Joni Mitchell
>
>
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] GPO not taking effect.

2005-03-16 Thread Myrick, Todd (NIH/CC/DNA)
http://redmondmag.com/features/article.asp?EditorialsID=222

Use this article to help you troubleshoot the issue.  I would also make sure
the DC and ping the host, and make sure none of the IP ports are blocked.

Thanks,

Todd

-Original Message-
From: Umer Y. [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, March 16, 2005 2:22 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] GPO not taking effect.

I installed the 2003 server, installed AD. Created a new OU. Created a new 
user under it. Created a GPO for the same OU. Changed a gp setting as a 
test.

Went back to the client terminal. Logged on as the user. The GPO didn't take

effect.

Went to client's command line. Typed 'GPRESULT'.

Got "INFO: The policy object does not exist".

Went back to server. Did a RSoP test from the OU. The policy exists with my 
changed setting.

What am I doing wrong?

I will appreciate your help.

Thanks!!


... you don't know what you've got 'till it's gone..

- Joni Mitchell


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Retrieving changes using the uSNChanged property

2005-03-16 Thread joseph.e.kaplan
Just to give you some idea how I do this, I search for the objects that I'm 
looking for using their usnChanged and sort the result by it as well.  Then, I 
go through them in order and persist the highest usnChanged that I processed in 
my processing to a file or something.  

Then, when I start back up the next time, I read that persisted value and use 
that to prime my search.  That way, I start where I left off and don't miss 
anything.  I do a sanity check to ensure that highestCommittedUSN on RootDSE is 
> my persisted value as well.  I call this a sanity check because that should 
always be true.  However, I once had the DC I was using repromoted from media 
on me and all the USNs started at a very small number that was much lower than 
the number I had been using.  As a result, I wasn't seeing changes!  The only 
thing to do if this happens is start back at 0.

Note also that you can't poll for deletions with SDS until .NET 2.0, so if you 
are trying to do a full synch application, you'll need to do something else to 
deal with that part.

HTH,

Joe K.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mikael Håkansson
Sent: Wednesday, March 16, 2005 2:34 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Retrieving changes using the uSNChanged property

Ok, I have got it working now.

The 'value' property was updated on every connection and set to
highestCommittedUSN (i.e. my misstake).

Thanks for the replies, and sorry for the spam! :)

//Mikael


On Tue, 15 Mar 2005 11:32:32 -0600, [EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
> This can definitely be done with SDS as I do it pretty often and have a few 
> production applications that use this every day to great effect.
> 
> The first thing I'd do is try your query in ldp.exe or ADfind and make sure 
> it is behaving the way you want it to.
> 
> Joe K.
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mikael 
> Håkansson
> Sent: Tuesday, March 15, 2005 6:22 AM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Retrieving changes using the uSNChanged property
> 
> Hi
> 
> I´m trying to retrieve only changes from active directory by using the
> uSNChanged property in my query.
> 
> However, even if a manually change an object and verify that the
> uSNChanged is changed, I still don´t get any results back from my
> query.
> 
> Sample query:
> 
> "(&(objectClass=user)(objectCategory=person)(uSNChanged>=value))"
> where value is taken from the highestCommittedUSN property of the
> RootDSE object the first time the application runs.
> 
> Does anyonw know why I´m not getting any results back?
> Maybe this cannot be done using the .NET directoryservices??
> 
> //Mikael
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> 
> This message is for the designated recipient only and may contain privileged, 
> proprietary, or otherwise private information.  If you have received it in 
> error, please notify the sender immediately and delete the original.  Any 
> other use of the email by you is prohibited.
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise private information.  If you have received it in 
error, please notify the sender immediately and delete the original.  Any other 
use of the email by you is prohibited.
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] GPO not taking effect.

2005-03-16 Thread Umer Y.
I installed the 2003 server, installed AD. Created a new OU. Created a new 
user under it. Created a GPO for the same OU. Changed a gp setting as a 
test.

Went back to the client terminal. Logged on as the user. The GPO didn't take 
effect.

Went to client's command line. Typed 'GPRESULT'.
Got "INFO: The policy object does not exist".
Went back to server. Did a RSoP test from the OU. The policy exists with my 
changed setting.

What am I doing wrong?
I will appreciate your help.
Thanks!!
... you don't know what you've got 'till it's gone..
- Joni Mitchell
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

2005-03-16 Thread deji
You can do it remotely, like so:
 
http://www.readymaids.com/Portals/1/Enable%20DHCP%20on%20Active%20NIC.txt
 
 
Sincerely,

Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon



From: [EMAIL PROTECTED] on behalf of Noah Eiger
Sent: Wed 3/16/2005 10:42 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?



If you also want the client to pull the DNS from DHCP, you need to use a
second line setting that.

--nme

-Original Message-
From: Tim Foster [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 16, 2005 6:08 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

You can use the netsh command in a batch file and rollout it out to your
clients through a startup script.

netsh interface ip set address "Local" dhcp

where "Local" is the name assigned to the network interface.

Regards,

Tim 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Singler
Sent: Wednesday, March 16, 2005 8:52 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Set clients to DHCP via GPO, Script or batch
file?

this might help:

http://www.microsoft.com/technet/scriptcenter/scripts/network/client/mod
ify/nwmovb05.mspx

Mark Orlando wrote:
> Hello all Windows Networking Gurus!
>
> I was wondering if there Is an easy way (script, .bat, and/or GPO) to
> automatically set up all of my clients for DHCP from static IP
addresses
> without physically visiting each machine?  Thanks in advance.
>
> Mark :)
>
>
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/




List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

2005-03-16 Thread Noah Eiger
If you also want the client to pull the DNS from DHCP, you need to use a
second line setting that.

--nme

-Original Message-
From: Tim Foster [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, March 16, 2005 6:08 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

You can use the netsh command in a batch file and rollout it out to your
clients through a startup script.

netsh interface ip set address "Local" dhcp

where "Local" is the name assigned to the network interface.

Regards,

Tim  

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Singler
Sent: Wednesday, March 16, 2005 8:52 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Set clients to DHCP via GPO, Script or batch
file?

this might help:

http://www.microsoft.com/technet/scriptcenter/scripts/network/client/mod
ify/nwmovb05.mspx

Mark Orlando wrote:
> Hello all Windows Networking Gurus!
> 
> I was wondering if there Is an easy way (script, .bat, and/or GPO) to
> automatically set up all of my clients for DHCP from static IP
addresses
> without physically visiting each machine?  Thanks in advance.
> 
> Mark :)
> 
> 
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/




List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Machine Account Passwords - How often do they reset

2005-03-16 Thread Justin_Leney








Awesome, thanks you sir! Big help on
verifying that . 

 



 

 











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, March 16, 2005
11:46 AM
To: ActiveDir@mail.activedir.org
Subject: FW: [ActiveDir] Machine
Account Passwords - How often do they reset



 

Whoops.  My badIt was 7 days in an NT domain. 
30 days in 2000 or 2003.  Sorry about that.



 



-DaveC

Reuters CIO Infrastructure

 







From: David
Cliffe 
Sent: Wednesday, March 16, 2005
11:42 AM
To: 'ActiveDir@mail.activedir.org'
Subject: RE: [ActiveDir] Machine
Account Passwords - How often do they reset

By default, I believe it is 30 days in a 2003 domain...and
possibly 7 days in a 2000 domain.  Even if I am wrong about the actual
days or O/S, I can tell you it is NOT static.



 



-DaveC

Reuters CIO Infrastructure









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, March 16, 2005
11:30 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Machine
Account Passwords - How often do they reset



Quick question – Does anyone know how often machine
accounts reset their secure channel passwords, or do the passwords remain
static until manually reset?

 

We’re thinking this happens every 30 days, however
we’re having an issue with SMS.

 

Thanks, 

 

-J 

 


This e-mail, and
any attachment, is intended only for the person or entity to which it is
addressed and may contain confidential and/or privileged material. Any review,
re-transmission, copying, dissemination or other use of this information by
persons or entities other than the intended recipient is prohibited. If you
received this in error, please contact the sender and delete the material from
any computer. The contents of this message may contain personal views which are
not the views of Discovery Communications, Inc. (DCI).


-
Visit our Internet site at http://www.reuters.com

To find out more about Reuters Products and Services visit
http://www.reuters.com/productinfo 

Any views expressed in this message are those of the individual
sender, except where the sender specifically states them to be
the views of Reuters Ltd.





This e-mail, and any attachment, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, re-transmission, copying, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. The contents of this message may contain personal views which are not the views of Discovery Communications, Inc. (DCI).


RE: [ActiveDir] SYSVOL Question

2005-03-16 Thread Free, Bob
Hi Scott-

 In addition to Steve's input, there were a couple of recent
illuminating threads the heavyweights weighed in on that you should be
able to see in the list archives-

"Forcing SYSVOL from authenticating DC" and "AD Sites and SYSVOL"  

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rachui, Scott
Sent: Tuesday, March 15, 2005 12:31 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] SYSVOL Question

I have a question...

When a user is authenticating to AD, what mechanism directs him to a
particular instance of SYSVOL?  And is there some way to actually see
which DC the client will be preferring?

I ask this because Microsoft has recently told me that in certain
circumstances, clients will always choose a different DC for SYSVOL than
the one they choose for authentication.  But I don't know how to
actually see that list so I'll know which ones are being preferred.

Thanks in advance,

Scott
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


FW: [ActiveDir] Machine Account Passwords - How often do they reset

2005-03-16 Thread David Cliffe



Whoops.  My badIt was 7 days in an NT domain.  30 days in 
2000 or 2003.  Sorry about that.
 
-DaveC
Reuters CIO 
Infrastructure


From: David Cliffe Sent: Wednesday, 
March 16, 2005 11:42 AMTo: 
'ActiveDir@mail.activedir.org'Subject: RE: [ActiveDir] Machine Account Passwords - How often do they reset

By default, I believe it is 30 days in a 2003 domain...and possibly 7 
days in a 2000 domain.  Even if I am wrong about the actual days or O/S, I 
can tell you it is NOT static.
 
-DaveC
Reuters CIO 
Infrastructure


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
[EMAIL PROTECTED]Sent: Wednesday, March 16, 2005 11:30 
AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] 
Machine Account Passwords - How often do they reset


Quick question – Does anyone know 
how often machine accounts reset their secure channel passwords, or do the passwords remain static until manually reset?
 
We’re thinking this happens every 30 
days, however we’re having an issue with SMS.
 
Thanks, 
 
-J 
 This e-mail, and any attachment, is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, re-transmission, copying, 
dissemination or other use of this information by persons or entities other than 
the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. The contents of 
this message may contain personal views which are not the views of Discovery 
Communications, Inc. (DCI).

-
Visit our Internet site at http://www.reuters.com

To find out more about Reuters Products and Services visit http://www.reuters.com/productinfo 

Any views expressed in this message are those of  the  individual
sender,  except  where  the sender specifically states them to be
the views of Reuters Ltd.




RE: [ActiveDir] Machine Account Passwords - How often do they reset

2005-03-16 Thread Free, Bob



2000 and above interval is 30 days by default, NT 
default was 7. It can be disabled or the interval changed in GPO or 
registry.  Search for MaximumPasswordAge and 
DisablePasswordChange


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
[EMAIL PROTECTED]Sent: Wednesday, March 16, 2005 8:30 
AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] 
Machine Account Passwords - How often do they reset


Quick question – Does anyone know 
how often machine accounts reset their secure channel passwords, or do the 
passwords remain static until manually reset?
 
We’re thinking this happens every 30 
days, however we’re having an issue with SMS.
 
Thanks, 
 
-J 
 This 
e-mail, and any attachment, is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, re-transmission, copying, dissemination or other use of this information 
by persons or entities other than the intended recipient is prohibited. If you 
received this in error, please contact the sender and delete the material from 
any computer. The contents of this message may contain personal views which are 
not the views of Discovery Communications, Inc. (DCI).


RE: [ActiveDir] Machine Account Passwords - How often do they reset

2005-03-16 Thread David Cliffe



By default, I believe it is 30 days in a 2003 domain...and possibly 7 
days in a 2000 domain.  Even if I am wrong about the actual days or O/S, I 
can tell you it is NOT static.
 
-DaveC
Reuters CIO 
Infrastructure


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
[EMAIL PROTECTED]Sent: Wednesday, March 16, 2005 11:30 
AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] 
Machine Account Passwords - How often do they reset


Quick question – Does anyone know 
how often machine accounts reset their secure channel passwords, or do the passwords remain static until manually reset?
 
We’re thinking this happens every 30 
days, however we’re having an issue with SMS.
 
Thanks, 
 
-J 
 This e-mail, and any attachment, is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, re-transmission, copying, 
dissemination or other use of this information by persons or entities other than 
the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. The contents of 
this message may contain personal views which are not the views of Discovery 
Communications, Inc. (DCI).

-
Visit our Internet site at http://www.reuters.com

To find out more about Reuters Products and Services visit http://www.reuters.com/productinfo 

Any views expressed in this message are those of  the  individual
sender,  except  where  the sender specifically states them to be
the views of Reuters Ltd.




[ActiveDir] Machine Account Passwords - How often do they reset

2005-03-16 Thread Justin_Leney








Quick question – Does anyone know how often machine
accounts reset their secure channel passwords, or do the passwords remain
static until manually reset?

 

We’re thinking this happens every 30 days, however we’re
having an issue with SMS.

 

Thanks, 

 

-J 

 





This e-mail, and any attachment, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, re-transmission, copying, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. The contents of this message may contain personal views which are not the views of Discovery Communications, Inc. (DCI).


RE: [ActiveDir] Double Email Messages

2005-03-16 Thread Jacqui Hurst
You could intially try just deleting your profile and recreating it to check it is not a profile issue.George Arezina <[EMAIL PROTECTED]> wrote:







Fortunately yes. If had been the CEO/COO it would have caused a nightmare. The only other suggestion I have is backing up my messages, uninstalling Outlook 2003 and re-installing it. 
 
 




From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nicolas BlankSent: 16 March, 2005 1:04 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Double Email Messages
 

 

Are you the only person experiencing this problem?
 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of George ArezinaSent: 16 March 2005 11:09 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Double Email Messages
No, no rules were reconfigured. 
 
 




From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jacqui HurstSent: 16 March, 2005 9:47 AMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Double Email Messages
 

Have you recently configured any rules for you mailbox that could be causing the issue?

 

Jacqui

George Arezina <[EMAIL PROTECTED]> wrote:

Hi folks,
I realize this is a totally off-topic question, but seeing as there are many experts, I thought someone may have an idea. As of yesterday, I began receiving double emails from the same person, actually from anyone sending me an email. I receive a lot of emails, and it is a nuisance to have to go through and delete the double emails. If anyone has an idea, thanks in advance.
Cheers
George
Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.The exchange of messages with Stedionica Opportunity International A.D. Novi Sad via e-mail is not binding. Declarations regarding legal transactions must not be
 exchanged via this medium. The information contained in this e-mail message is confidential and intended exclusively for the addressee. Persons receiving this e-mail message who are not the named addressee (or his/her co-workers, or persons authorized to take delivery) must not use, forward or reproduce its contents. If you have received this e-mail message by mistake, please contact us immediately and delete this email message beyond retrieval.
Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.The exchange of messages with Stedionica Opportunity International A.D. Novi Sad via e-mail is not binding. Declarations regarding legal transactions must not be
 exchanged via this medium. The information contained in this e-mail message is confidential and intended exclusively for the addressee. Persons receiving this e-mail message who are not the named addressee (or his/her co-workers, or persons authorized to take delivery) must not use, forward or reproduce its contents. If you have received this e-mail message by mistake, please contact us immediately and delete this email message beyond retrieval.Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, molimo Vas da nas
 odmah obavestite tako sto cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.The exchange of messages with Stedionica Opportunity Internat

RE: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

2005-03-16 Thread Tim Foster
You can use the netsh command in a batch file and rollout it out to your
clients through a startup script.

netsh interface ip set address "Local" dhcp

where "Local" is the name assigned to the network interface.

Regards,

Tim  

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Singler
Sent: Wednesday, March 16, 2005 8:52 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Set clients to DHCP via GPO, Script or batch
file?

this might help:

http://www.microsoft.com/technet/scriptcenter/scripts/network/client/mod
ify/nwmovb05.mspx

Mark Orlando wrote:
> Hello all Windows Networking Gurus!
> 
> I was wondering if there Is an easy way (script, .bat, and/or GPO) to
> automatically set up all of my clients for DHCP from static IP
addresses
> without physically visiting each machine?  Thanks in advance.
> 
> Mark :)
> 
> 
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

2005-03-16 Thread Mark Orlando
Thanks John!  That's fantastic!  I got your email the same time I got my own
post from the mailing list.

Mark


On 3/16/05 8:52 AM, "John Singler" <[EMAIL PROTECTED]> wrote:

> this might help:
> 
> http://www.microsoft.com/technet/scriptcenter/scripts/network/client/modify/nw
> movb05.mspx
> 
> Mark Orlando wrote:
>> Hello all Windows Networking Gurus!
>> 
>> I was wondering if there Is an easy way (script, .bat, and/or GPO) to
>> automatically set up all of my clients for DHCP from static IP addresses
>> without physically visiting each machine?  Thanks in advance.
>> 
>> Mark :)
>> 
>> 
>> List info   : http://www.activedir.org/List.aspx
>> List FAQ: http://www.activedir.org/ListFAQ.aspx
>> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] Set clients to DHCP via GPO, Script or batch file?

2005-03-16 Thread John Singler
this might help:
http://www.microsoft.com/technet/scriptcenter/scripts/network/client/modify/nwmovb05.mspx
Mark Orlando wrote:
Hello all Windows Networking Gurus!
I was wondering if there Is an easy way (script, .bat, and/or GPO) to
automatically set up all of my clients for DHCP from static IP addresses
without physically visiting each machine?  Thanks in advance.
Mark :)
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] Set clients to DHCP via GPO, Script or batch file?

2005-03-16 Thread Mark Orlando
Hello all Windows Networking Gurus!

I was wondering if there Is an easy way (script, .bat, and/or GPO) to
automatically set up all of my clients for DHCP from static IP addresses
without physically visiting each machine?  Thanks in advance.

Mark :)


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Double Email Messages

2005-03-16 Thread Dave Lamberty



You don't mention your environment, but I had this happen to a couple of 
IMAP users after installing the beta of Google desktop search. As I 
recall it also happened with Copernic as well. It did not affect POP users, 
but since we're not an Exchange shop, I don't know whether that's affected or 
not. We haven't seen the issue since installing the release version of 
Google desktop search.
 
--Dave


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of George 
ArezinaSent: Wednesday, March 16, 2005 06:34To: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Double Email 
Messages


Fortunately yes. If had 
been the CEO/COO it would have caused a nightmare. The only other suggestion I 
have is backing up my messages, uninstalling Outlook 2003 and re-installing it. 

 
 




From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of Nicolas 
BlankSent: 16 March, 2005 1:04 
PMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Double Email 
Messages
 

 

Are you the only person 
experiencing this problem?
 



From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of George 
ArezinaSent: 16 March 2005 
11:09 AMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Double Email 
Messages
No, no rules were 
reconfigured. 
 
 




From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of Jacqui 
HurstSent: 16 March, 2005 9:47 
AMTo: 
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Double Email 
Messages
 

Have you recently configured any rules for you mailbox 
that could be causing the issue?

 

Jacqui

George Arezina 
<[EMAIL PROTECTED]> 
wrote:

  Hi 
  folks,
  I realize this is a totally 
  off-topic question, but seeing as there are many experts, I thought someone 
  may have an idea. As of yesterday, I began receiving double emails from the 
  same person, actually from anyone sending me an email. I receive a lot of 
  emails, and it is a nuisance to have to go through and delete the double 
  emails. If anyone has an idea, thanks in advance.
  Cheers
  George
  Informacija sa Stedionica Opportunity 
  International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje 
  pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati 
  poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili 
  greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, 
  distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja 
  strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, 
  molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj email, a 
  zatim ga izbrisite iz vaseg 
  sistema.The 
  exchange of messages with Stedionica Opportunity International A.D. Novi Sad 
  via e-mail is not binding. Declarations regarding legal transactions must not 
  be exchanged via this medium. The information contained in this e-mail message 
  is confidential and intended exclusively for the addressee. Persons receiving 
  this e-mail message who are not the named addressee (or his/her co-workers, or 
  persons authorized to take delivery) must not use, forward or reproduce its 
  contents. If you have received this e-mail message by mistake, please contact 
  us immediately and delete this email message beyond 
  retrieval.
Informacija sa Stedionica Opportunity International 
A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje pravnih poslova 
putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili 
povlascene informacije. Ukoliko ste ovaj e-mail primili greskom, ovim putem vas 
obavestavamo da je svako otkrivanje, kopiranje, distribucija ili preduzimanje 
bilo kakvih aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti 
nezakonito. Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah 
obavestite tako sto cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg 
sistema.The 
exchange of messages with Stedionica Opportunity International A.D. Novi Sad via 
e-mail is not binding. Declarations regarding legal transactions must not be 
exchanged via this medium. The information contained in this e-mail message is 
confidential and intended exclusively for the addressee. Persons receiving this 
e-mail message who are not the named addressee (or his/her co-workers, or 
persons authorized to take delivery) must not use, forward or reproduce its 
contents. If you have received this e-mail message by mistake, please contact us 
immediately and delete this email message beyond 
retrieval.Informacija sa Stedionica 
Opportunity International A.D. Novi Sad putem e-maila je bez garancije. 
Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail 
moze sadrzati poverljive i/il

RE: [ActiveDir] Double Email Messages

2005-03-16 Thread George Arezina








Fortunately yes. If had been the CEO/COO
it would have caused a nightmare. The only other suggestion I have is backing
up my messages, uninstalling Outlook 2003 and re-installing it. 

 

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nicolas Blank
Sent: 16 March, 2005 1:04 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Double
Email Messages



 



 





Are you the only person experiencing this
problem?



 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of George Arezina
Sent: 16 March 2005 11:09 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Double
Email Messages

No, no rules were reconfigured. 

 

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jacqui Hurst
Sent: 16 March, 2005 9:47 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Double
Email Messages



 



Have you recently configured any rules for you mailbox that could be
causing the issue?





 





Jacqui







George Arezina
<[EMAIL PROTECTED]> wrote:





Hi folks,

I realize this is a totally off-topic question, but seeing
as there are many experts, I thought someone may have an idea. As of yesterday,
I began receiving double emails from the same person, actually from anyone
sending me an email. I receive a lot of emails, and it is a nuisance to have to
go through and delete the double emails. If anyone has an idea, thanks in
advance.

Cheers

George


Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila
je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije
dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije.
Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je
svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih
aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito.
Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto
cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.



The exchange of messages with Stedionica Opportunity International A.D. Novi
Sad via e-mail is not binding. Declarations regarding legal transactions must
not be exchanged via this medium. The information contained in this e-mail
message is confidential and intended exclusively for the addressee. Persons
receiving this e-mail message who are not the named addressee (or his/her
co-workers, or persons authorized to take delivery) must not use, forward or
reproduce its contents. If you have received this e-mail message by mistake,
please contact us immediately and delete this email message beyond retrieval.




Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila
je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije
dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije.
Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je
svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih
aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito.
Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto
cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.



The exchange of messages with Stedionica Opportunity International A.D. Novi
Sad via e-mail is not binding. Declarations regarding legal transactions must
not be exchanged via this medium. The information contained in this e-mail
message is confidential and intended exclusively for the addressee. Persons
receiving this e-mail message who are not the named addressee (or his/her co-workers,
or persons authorized to take delivery) must not use, forward or reproduce its
contents. If you have received this e-mail message by mistake, please contact
us immediately and delete this email message beyond retrieval.



Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.



The exchange of messages with Stedionica Opportunity International A.D. Novi Sad via e-mail is not binding. Declarations

RE: [ActiveDir] Double Email Messages

2005-03-16 Thread Nicolas Blank



 
Are 
you the only person experiencing this problem?


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of George 
ArezinaSent: 16 March 2005 11:09 AMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Double Email 
Messages


No, no rules were 
reconfigured. 
 
 




From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of Jacqui 
HurstSent: 16 March, 2005 9:47 
AMTo: 
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Double Email 
Messages
 

Have you recently configured any rules for you mailbox 
that could be causing the issue?

 

Jacqui

George Arezina 
<[EMAIL PROTECTED]> 
wrote:

  Hi 
  folks,
  I realize this is a totally 
  off-topic question, but seeing as there are many experts, I thought someone 
  may have an idea. As of yesterday, I began receiving double emails from the 
  same person, actually from anyone sending me an email. I receive a lot of 
  emails, and it is a nuisance to have to go through and delete the double 
  emails. If anyone has an idea, thanks in advance.
  Cheers
  George
  Informacija sa Stedionica Opportunity 
  International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje 
  pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati 
  poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili 
  greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, 
  distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja 
  strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, 
  molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj email, a 
  zatim ga izbrisite iz vaseg 
  sistema.The 
  exchange of messages with Stedionica Opportunity International A.D. Novi Sad 
  via e-mail is not binding. Declarations regarding legal transactions must not 
  be exchanged via this medium. The information contained in this e-mail message 
  is confidential and intended exclusively for the addressee. Persons receiving 
  this e-mail message who are not the named addressee (or his/her co-workers, or 
  persons authorized to take delivery) must not use, forward or reproduce its 
  contents. If you have received this e-mail message by mistake, please contact 
  us immediately and delete this email message beyond 
  retrieval.Informacija sa 
Stedionica Opportunity International A.D. Novi Sad putem e-maila je bez 
garancije. Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj 
e-mail moze sadrzati poverljive i/ili povlascene informacije. Ukoliko ste ovaj 
e-mail primili greskom, ovim putem vas obavestavamo da je svako otkrivanje, 
kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog 
sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili 
greskom, molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj 
email, a zatim ga izbrisite iz vaseg 
sistema.The 
exchange of messages with Stedionica Opportunity International A.D. Novi Sad via 
e-mail is not binding. Declarations regarding legal transactions must not be 
exchanged via this medium. The information contained in this e-mail message is 
confidential and intended exclusively for the addressee. Persons receiving this 
e-mail message who are not the named addressee (or his/her co-workers, or 
persons authorized to take delivery) must not use, forward or reproduce its 
contents. If you have received this e-mail message by mistake, please contact us 
immediately and delete this email message beyond retrieval.


RE: [ActiveDir] Double Email Messages

2005-03-16 Thread George Arezina








No, no rules were reconfigured. 

 

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jacqui Hurst
Sent: 16 March, 2005 9:47 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Double
Email Messages



 



Have you recently configured any rules for you mailbox that could be
causing the issue?





 





Jacqui







George Arezina
<[EMAIL PROTECTED]> wrote:





Hi folks,

I realize this is a totally off-topic question, but seeing
as there are many experts, I thought someone may have an idea. As of yesterday,
I began receiving double emails from the same person, actually from anyone
sending me an email. I receive a lot of emails, and it is a nuisance to have to
go through and delete the double emails. If anyone has an idea, thanks in
advance.

Cheers

George


Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila
je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije
dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije.
Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je
svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti
u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste
e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto cete
odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.



The exchange of messages with Stedionica Opportunity International A.D. Novi
Sad via e-mail is not binding. Declarations regarding legal transactions must
not be exchanged via this medium. The information contained in this e-mail
message is confidential and intended exclusively for the addressee. Persons
receiving this e-mail message who are not the named addressee (or his/her
co-workers, or persons authorized to take delivery) must not use, forward or
reproduce its contents. If you have received this e-mail message by mistake,
please contact us immediately and delete this email message beyond retrieval.





Informacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.



The exchange of messages with Stedionica Opportunity International A.D. Novi Sad via e-mail is not binding. Declarations regarding legal transactions must not be exchanged via this medium. The information contained in this e-mail message is confidential and intended exclusively for the addressee. Persons receiving this e-mail message who are not the named addressee (or his/her co-workers, or persons authorized to take delivery) must not use, forward or reproduce its contents. If you have received this e-mail message by mistake, please contact us immediately and delete this email message beyond retrieval.





Re: [ActiveDir] Double Email Messages

2005-03-16 Thread Jacqui Hurst
Have you recently configured any rules for you mailbox that could be causing the issue?
 
Jacqui
George Arezina <[EMAIL PROTECTED]> wrote:





Hi folks,
I realize this is a totally off-topic question, but seeing as there are many experts, I thought someone may have an idea. As of yesterday, I began receiving double emails from the same person, actually from anyone sending me an email. I receive a lot of emails, and it is a nuisance to have to go through and delete the double emails. If anyone has an idea, thanks in advance.
Cheers
GeorgeInformacija sa Stedionica Opportunity International A.D. Novi Sad putem e-maila je bez garancije. Zakljucivanje pravnih poslova putem ovog medija nije dozvoljeno. Ovaj e-mail moze sadrzati poverljive i/ili povlascene informacije. Ukoliko ste ovaj e-mail primili greskom, ovim putem vas obavestavamo da je svako otkrivanje, kopiranje, distribucija ili preduzimanje bilo kakvih aktivnosti u vezi njegovog sadrzaja strogo zabranjeno i moze biti nezakonito. Ukoliko ste e-mail primili greskom, molimo Vas da nas odmah obavestite tako sto cete odgovoriti na ovaj email, a zatim ga izbrisite iz vaseg sistema.The exchange of messages with Stedionica Opportunity International A.D. Novi Sad via e-mail is not binding. Declarations
 regarding legal transactions must not be exchanged via this medium. The information contained in this e-mail message is confidential and intended exclusively for the addressee. Persons receiving this e-mail message who are not the named addressee (or his/her co-workers, or persons authorized to take delivery) must not use, forward or reproduce its contents. If you have received this e-mail message by mistake, please contact us immediately and delete this email message beyond retrieval.

Re: [ActiveDir] Retrieving changes using the uSNChanged property

2005-03-16 Thread Mikael Håkansson
Ok, I have got it working now.

The 'value' property was updated on every connection and set to
highestCommittedUSN (i.e. my misstake).

Thanks for the replies, and sorry for the spam! :)

//Mikael


On Tue, 15 Mar 2005 11:32:32 -0600, [EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
> This can definitely be done with SDS as I do it pretty often and have a few 
> production applications that use this every day to great effect.
> 
> The first thing I'd do is try your query in ldp.exe or ADfind and make sure 
> it is behaving the way you want it to.
> 
> Joe K.
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mikael 
> Håkansson
> Sent: Tuesday, March 15, 2005 6:22 AM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Retrieving changes using the uSNChanged property
> 
> Hi
> 
> I´m trying to retrieve only changes from active directory by using the
> uSNChanged property in my query.
> 
> However, even if a manually change an object and verify that the
> uSNChanged is changed, I still don´t get any results back from my
> query.
> 
> Sample query:
> 
> "(&(objectClass=user)(objectCategory=person)(uSNChanged>=value))"
> where value is taken from the highestCommittedUSN property of the
> RootDSE object the first time the application runs.
> 
> Does anyonw know why I´m not getting any results back?
> Maybe this cannot be done using the .NET directoryservices??
> 
> //Mikael
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> 
> This message is for the designated recipient only and may contain privileged, 
> proprietary, or otherwise private information.  If you have received it in 
> error, please notify the sender immediately and delete the original.  Any 
> other use of the email by you is prohibited.
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/