[ActiveDir] joining domain is not easy ?

2005-05-15 Thread cyrus
greetings, 

this always my nightmare, everytime i connect a new computer to network to 
join the domain either i get his message THE NETWORK PATH WAS NOT FOUND or 
CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping on it and 
everything looks fine, when I set the workstation to hookup to our LAN 
internet it responded well, but when I need to join the domain it is very 
Annoying it just can not join the domain. I even configured it as a 
workgroup then configure it as joining a domain, still wont join. BUT if i 
remove the IP address and join to the old server first then put back the IP 
address and do the joining to the new server domain IT WORKS. why and how I 
dont have any idea. If needed for me to detail my problem by phone tell me. 

rgds
cyrus 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] OT:DNS SRV resource Kit

2005-05-15 Thread Al Mulnick
DNS is a pretty flexible service, but it would not be a good idea to do it that 
way if you want reliability in the service that the client receives IMHO. 

An applet or other redirection type of mechanism would be the better way to do 
this. Maybe something at the L7 Firewall or the load balancer would work as 
well?

I'd opt for the applet or other mechanism to redirect myself because I 
typically want the client to know they're being redirected. 
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, May 13, 2005 7:08 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT:DNS SRV resource Kit

Neil,
 
I'm not sure I follow you here. Are you saying people use DNS to do port 
redirection for requested records? As in, I go and create an alias called ww2 
in a domain called xcompany.com and I am able to specify the port and get DNS 
to inspect a request for ww2.xcompany.com:portABC and redirect the client to 
the appropriate A record?
 
Am I just reading you upside-down?
 
 
Sincerely,

Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday? 
 -anon



From: [EMAIL PROTECTED] on behalf of Ruston, Neil
Sent: Fri 5/13/2005 8:44 AM
To: 'ActiveDir@mail.activedir.org'
Subject: RE: [ActiveDir] OT:DNS SRV resource Kit


Why not simply add an alias for www.xcompany.com and include the port number.
 
e.g. host: www.xcompany.com alias: ww2.xcompany.com:456 
http://www.xcompany.com:456 
 
 
This is how some ppl have configured DNS and web servers to work correctly when 
ISPs block port 80.
 
 
neil


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Peter Johnson
Sent: 13 May 2005 09:40
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] OT:DNS SRV resource Kit



Hi All

 

Does anyone know wether IE supports SRV Resource records in DNS. I like 
to create a DNS entry that includes the port number of the Website on one of my 
internap IIS boxes. I know I can do this with host headers within IIS but I was 
wondering wether I could do it so that www.xcompany.com 
http://www.xcompany.com/  would be redirected to http://server/webiste:456 
for example.

 

Thanks in advance

Peter Johnson

=
=
This message is for the sole use of the intended recipient. If you received 
this message in error please delete it and notify us. If this message was 
misdirected, CSFB does not waive any confidentiality or privilege. CSFB retains 
and monitors electronic communications sent through its network.
Instructions transmitted over this system are not binding on CSFB until they 
are confirmed by us. Message transmission is not guaranteed to be secure.
=
=


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Sticky group membership - Solved

2005-05-15 Thread Ole Thomsen
I think I found a solution, at least I cannot provoke the error anymore.

Tests showed that the error was connected to one DC, every time the
false mebership was active it was the latest installed DC that processed
the logon.

Investigation eventlogs on the DC gave sporadic warnings of group
membership cache refresh.

I turned off Universal Group Membership Caching, and now all seems to be
well :-)

What I don't understand is why this setting was influencing a global
group, but maybe someone here can enlighten me?

Thanks,
Ole Thomsen


 -Original Message-
 From: Ole Thomsen 
 Sent: Saturday, May 14, 2005 10:11 PM
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] Sticky group membership
 
 I am well aware of the fact that group membership is only 
 updated during
 a new logon.
 
 But this false membership can stick for several days, and we reboot
 the terminal servers every night. My test user were removed from the
 group two days ago, and still get the GPO applied on some of the
 servers.
 
 As far as I can see the membership is recognized correctly on the
 network and file servers - just not during logon.
 
 Thanks,
 Ole Thomsen
 
 
 
 
  -Original Message-
  From: joe [mailto:[EMAIL PROTECTED] 
  Sent: Saturday, May 14, 2005 8:42 PM
  To: ActiveDir@mail.activedir.org
  Subject: RE: [ActiveDir] Sticky group membership
  
  User security tokens are only updated during authentication. 
  This means that
  if you have a group membership change and then connect to a 
  remote resources
  you can get that new token if you completely break any 
  previous sessions
  with the remote resource, then purge your kerberos tickets, and then
  reconnect to the resource. For interactive logons (i.e. you 
  have a desktop
  associated with the logon) you need to log off and log on.
  
 joe 
  
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Ole Thomsen
  Sent: Saturday, May 14, 2005 1:18 PM
  To: ActiveDir@mail.activedir.org
  Subject: [ActiveDir] Sticky group membership
  
  Environment: Three W2K3 DC's and ten WTS (no SP1), all 
  located on the same
  subnet.
  
  We have GPO's applied based on group membership.
  
  A few policies are only intended to be active for some 
 hours, blocking
  execution of specific applications.
  
  After adding the users to the group, the policy is active 
  almost immediately
  on the terminal servers - but after removing users from the 
  group, the GPO's
  are still applied on some.
  
  GPresult shows that the users are still seen as member of the 
  group, while
  running MemberOf against every DC says they are not?
  
  How can I troubleshoot this further, and where is it 
 possible that the
  membership is cached?
  
  Ole Thomsen
  List info   : http://www.activedir.org/List.aspx
  List FAQ: http://www.activedir.org/ListFAQ.aspx
  List archive: 
  http://www.mail-archive.com/activedir%40mail.activedir.org/
  
  List info   : http://www.activedir.org/List.aspx
  List FAQ: http://www.activedir.org/ListFAQ.aspx
  List archive: 
  http://www.mail-archive.com/activedir%40mail.activedir.org/
  
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: 
 http://www.mail-archive.com/activedir%40mail.activedir.org/
 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread Kern, Tom
I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address.

 i know there's been a spate of German right wing spam lately on a lot of 
mailing lists. I don't know if this has anything to do with it...
thanks


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?



greetings, 

this always my nightmare, everytime i connect a new computer to network to 
join the domain either i get his message THE NETWORK PATH WAS NOT FOUND or 
CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping on it and 
everything looks fine, when I set the workstation to hookup to our LAN 
internet it responded well, but when I need to join the domain it is very 
Annoying it just can not join the domain. I even configured it as a 
workgroup then configure it as joining a domain, still wont join. BUT if i 
remove the IP address and join to the old server first then put back the IP 
address and do the joining to the new server domain IT WORKS. why and how I 
dont have any idea. If needed for me to detail my problem by phone tell me. 

rgds
cyrus 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread David Adner
I didn't quite follow what you were describing below, but...

DNS configuration is the most likely suspect.  One of the first things to
verify would be to ensure the client is configured to only point to a DNS
server(s) that can resolve records in the Domain's DNS zone.  Barring that,
you'll also need to confirm your DC's are also properly configured, their
records exist in DNS, etc.

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of cyrus
 Sent: Sunday, May 15, 2005 03:11
 To: ActiveDir@mail.activedir.org
 Subject: [ActiveDir] joining domain is not easy ?
 
 
 greetings, 
 
 this always my nightmare, everytime i connect a new computer 
 to network to join the domain either i get his message THE 
 NETWORK PATH WAS NOT FOUND or CANNOT JOIN THE DOMAIN. 
 I've check the IP and did a Ping on it and everything looks 
 fine, when I set the workstation to hookup to our LAN 
 internet it responded well, but when I need to join the 
 domain it is very Annoying it just can not join the domain. 
 I even configured it as a workgroup then configure it as 
 joining a domain, still wont join. BUT if i remove the IP 
 address and join to the old server first then put back the IP 
 address and do the joining to the new server domain IT WORKS. 
 why and how I dont have any idea. If needed for me to detail 
 my problem by phone tell me. 
 
 rgds
 cyrus 
 
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: 
 http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Sticky group membership - Solved

2005-05-15 Thread David Adner
That's because Universal Group Membership Caching also caches global groups.
Didn't its name make that obvious? ;  You don't want to enable it in a Site
that has both GC's and non-GC's or you'll run into the behavior you
observed.

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Ole Thomsen
 Sent: Sunday, May 15, 2005 09:00
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] Sticky group membership - Solved
 
 I think I found a solution, at least I cannot provoke the 
 error anymore.
 
 Tests showed that the error was connected to one DC, every 
 time the false mebership was active it was the latest 
 installed DC that processed the logon.
 
 Investigation eventlogs on the DC gave sporadic warnings of 
 group membership cache refresh.
 
 I turned off Universal Group Membership Caching, and now all 
 seems to be well :-)
 
 What I don't understand is why this setting was influencing a 
 global group, but maybe someone here can enlighten me?
 
 Thanks,
 Ole Thomsen
 
 
  -Original Message-
  From: Ole Thomsen
  Sent: Saturday, May 14, 2005 10:11 PM
  To: ActiveDir@mail.activedir.org
  Subject: RE: [ActiveDir] Sticky group membership
  
  I am well aware of the fact that group membership is only updated 
  during a new logon.
  
  But this false membership can stick for several days, and 
 we reboot 
  the terminal servers every night. My test user were removed 
 from the 
  group two days ago, and still get the GPO applied on some of the 
  servers.
  
  As far as I can see the membership is recognized correctly on the 
  network and file servers - just not during logon.
  
  Thanks,
  Ole Thomsen
  
  
  
  
   -Original Message-
   From: joe [mailto:[EMAIL PROTECTED]
   Sent: Saturday, May 14, 2005 8:42 PM
   To: ActiveDir@mail.activedir.org
   Subject: RE: [ActiveDir] Sticky group membership
   
   User security tokens are only updated during authentication. 
   This means that
   if you have a group membership change and then connect to 
 a remote 
   resources you can get that new token if you completely break any 
   previous sessions with the remote resource, then purge 
 your kerberos 
   tickets, and then reconnect to the resource. For 
 interactive logons 
   (i.e. you have a desktop associated with the logon) you 
 need to log 
   off and log on.
   
  joe
   
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of 
 Ole Thomsen
   Sent: Saturday, May 14, 2005 1:18 PM
   To: ActiveDir@mail.activedir.org
   Subject: [ActiveDir] Sticky group membership
   
   Environment: Three W2K3 DC's and ten WTS (no SP1), all located on 
   the same subnet.
   
   We have GPO's applied based on group membership.
   
   A few policies are only intended to be active for some
  hours, blocking
   execution of specific applications.
   
   After adding the users to the group, the policy is active almost 
   immediately on the terminal servers - but after removing 
 users from 
   the group, the GPO's are still applied on some.
   
   GPresult shows that the users are still seen as member of 
 the group, 
   while running MemberOf against every DC says they are not?
   
   How can I troubleshoot this further, and where is it
  possible that the
   membership is cached?
   
   Ole Thomsen
   List info   : http://www.activedir.org/List.aspx
   List FAQ: http://www.activedir.org/ListFAQ.aspx
   List archive: 
   http://www.mail-archive.com/activedir%40mail.activedir.org/
   
   List info   : http://www.activedir.org/List.aspx
   List FAQ: http://www.activedir.org/ListFAQ.aspx
   List archive: 
   http://www.mail-archive.com/activedir%40mail.activedir.org/
   
  List info   : http://www.activedir.org/List.aspx
  List FAQ: http://www.activedir.org/ListFAQ.aspx
  List archive: 
  http://www.mail-archive.com/activedir%40mail.activedir.org/
  
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive: 
 http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] Telnet Service Disappeaars after installing Wwin2k3 SP1

2005-05-15 Thread Oluwaseyi Owoeye
Hello all,

I have a winsk3 box and I need to make use of the telnet service, so
after installing the box I enable the telnet service and make it
automatic because the service is disabled by default.

I then install windows 2003 SP1 and then I notice that the telnet
service disappears from the services window without any trace.

If I try to utilize the service I cant

Does any one have any sorta work around on this issue
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread freddy_hartono
Tom,

Now that pretty strange..the view that I have is as below:

[EMAIL PROTECTED]; on behalf of; [EMAIL PROTECTED]

And that's my corp's smtp relay, a spam indeed?

Thank you and have a splendid day!
 
Kind Regards,
 
Freddy Hartono
Windows Administrator (ADSM/NT Security)
Spherion Technology Group, Singapore
For Agilent Technologies
E-mail: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Monday, May 16, 2005 6:44 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address.

 i know there's been a spate of German right wing spam lately on a lot
of mailing lists. I don't know if this has anything to do with it...
thanks


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?



greetings, 

this always my nightmare, everytime i connect a new computer to network
to 
join the domain either i get his message THE NETWORK PATH WAS NOT
FOUND or 
CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping on it and

everything looks fine, when I set the workstation to hookup to our LAN 
internet it responded well, but when I need to join the domain it is
very 
Annoying it just can not join the domain. I even configured it as a 
workgroup then configure it as joining a domain, still wont join. BUT if
i 
remove the IP address and join to the old server first then put back the
IP 
address and do the joining to the new server domain IT WORKS. why and
how I 
dont have any idea. If needed for me to detail my problem by phone tell
me. 

rgds
cyrus 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] GPO not applied - thinks it is empty

2005-05-15 Thread Eric Fleischman
Just getting back to this thread and having a chance to write up some thoughts. 
It's splintered some, I'll go from here, because it seems to be a good place to 
fork this mail from.

A bunch of points worth commenting on:

 I would like MS to put out guidance on making services with self
 setting passwords as well as any services they have that require
 userids doing the same.

Yes, we know, and we're working on such things. We're also working on how to 
better manage such passwords going forward.

 Additionally there are more forests
 and domains in that company than probably any where else.
 Many of them probably make sense like for the Windows groups working
 on the AD product, but I expect many of them don't make any sense,
 it is just people who want their own and want control over
 their own machines so make them and use them.

Joe, no such forest mayhem exists. All of our production forests exist for the 
purposes of testing scenarios and gaining confidence in alpha/beta grade bits 
before going full production with them. And there are fewer forests here than I 
would actually expect, and then I think you think there are.
There are many untrusted forests, much like you might have a forest running 
on your desktop in virtual machines. But they don't really count, I was 
speaking more to production forests that are trusted by the core production 
environment. The # is not huge in the production boat.
 
But that said, this all seems like a diversion from the original issue?

Getting back to the original issue, on secure resetting passwords of local 
machines more generally

This comment was made:
 I used to store the password in the batch file before I got my brains
 bashed out on this list. So, I went back and store the password in a DB,
 read it on the fly from a vbs and pass it onto bat.

This approach does not make it fundamentally better than sitting naked in a 
.bat file, though it does remove the low hanging fruit, a little. The question 
is, _under what security context_ does this VBS run (which answers the 
question, what context do I need to compromise to get the password?) and where 
is that password shared? If it runs as local system on a workstation, that 
implies that local system can read the password - if I become local system I 
can read the password - if I am admin on the machine I can read the password.
This is just as concerning to me, depending upon the implementation. One 
implementation detail that could make this interesting would be if your db 
handed out a unique password to each workstation, and no workstation security 
context could read the password for any other workstation (record-level 
security could be used). Then you have limited my knowledge to the scope of 
what I already ownI can only read a password I don't care about, because I 
already own that box. If that's how you do it, you've solved part of the 
problem.
Read below for more generic commentary on why this, especially bullet 2.
If you want to test my ability to do this, give me admin on one of your boxes 
one day (and a kernel remote too, just in case I feel like being fancy), and I 
can try and obtain your password. I'd bet you a lunch (to be settled next time 
you're in the Seattle area) that I can get it.

Fundamentally, to me, there are a few issues that need to be overcome in any 
solution I'd personally consider secure end to end:
- You need to securely send the password to the machine, else a network sniff 
will reveal it
- You need to establish trust boundaries within your environment, and not 
overlap password usage across such boundaries (nor ability for a machine in one 
realm to read the password in another realm). That is, if you have MachineA and 
MachineB, and you don't assume that anyone that is admin over MachineA should 
be admin over MachineB, you should not use the same password on both of them. 
Else compromise of one of them compromises both of them.
In reality, this probably is best implemented with every machine having a 
unique local admin password.
Why is this concept of boundaries so impt? Because there's really no trusted 
way of setting the password on a given machine and using it w/o exposing it to 
someone that has compromised that box. So no matter how you store, how you use, 
etc.someone who owns that box will own that password. It might not be true, 
but it could be, so you should assume it. That takes us to the place where, 
unique passwords for trust realms are required.
- You need to securely store the passwords of the machines before, during, and 
after they have been used.
- You need to have a mechanism by which you can check out passwords to people 
that need them such that you know A) who has gotten the password to a given 
machine B) when they got it C) when they are done with it and D) a mechanism to 
reset that password so that the knowledge of the local admin password in 
question is not forever-lasting after a single checkout.
- Of course, the 

RE: [ActiveDir] Sites and Folder Redirection | more

2005-05-15 Thread Noah Eiger








Thank you, Dan. This topic is sort of haunting me. It seems
like something that almost everyone has to deal with. 



So if you use advanced folder redirection, what keeps the
redirection from happening over the WAN? Are you using this in conjunction with
offline files? In this context, I am not sure I see how OUs
would be different than Groups either way the policy is going to be applied
regardless of what Site they sit in.



Finally, you mentioned using DFS. I believe this would allow
a single namespace called company.com\home. Could you elaborate on how you are
using this for redirection.



Thanks again.



-- nme











From: Dan Holme
[mailto:[EMAIL PROTECTED] 
Sent: Sunday, May 15, 2005 4:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Sites and
Folder Redirection | more





I have not seen a reply to this thread so I
thought I might pitch in my thoughts:



In my geographically distributed clients,
we face the same problem. We address it using global groups to represent
the geographic location of users. If a user is transferred
to another site (location) we change their global group
membership. The global group is used either
to filter a GPO redirecting folders to a specific server (or via a site-related
DFS link) or the groups are used in a single GPO to create
advanced folder redirection, whereby you can point groups to
different servers. That way, traveling users, dial-in users, etc. were
accessing their folder-redirected-folders in their home server
 we didnt want to replicate tons of user data in those
environments just for the few



So to make a long story short, we just
didnt use site-linked GPOs for anything to do with user data. Also
made it much easier on the help desk issues, since help desk could change the
membership of these location-related global groups easily.



Dan Holme

Intelliem













From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noah Eiger
Sent: Thursday, May 12, 2005 3:31
PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Sites and
Folder Redirection | more





Hello:



I am working with redirecting My Documents in various
sites. I have some follow up questions to the thread I started a few months
ago.



Some sites have poor connectivity. There is no
replication of data between sites (for home directories). Laptop users use
Offline Files. Single domain, W2k. All redirection is handled via User GPOs.
The root Home directory resides on a file server at each site; users at that
site point there based on the GPO. Security is defined as per MSKB 274443.



Where to apply the GPO? As Aric pointed out, applied
at the Site level will cause users to redirect to the local Home share when
they just drop by with their laptops. What happens to Offline Files in this
case? It seems better to create OUs for uses at each Site and apply the GPO
there. Under this scenario, would Slow Link Detection prevent the redirection
from trying to find Home over the slow WAN link? Would it then just resort to
Offline Files?



Finally, if we use DFS to create a unified namespace,
all user home directories would be created under a single Home directory.
Without folder replication, how would we control the Site and file server where
the folder actually gets created?



Many TIA.



-- nme








RE: [ActiveDir] Sites and Folder Redirection | more

2005-05-15 Thread Dan Holme








I have not seen a reply to this thread so I thought I might
pitch in my thoughts:



In my geographically distributed clients, we face the same
problem. We address it using global groups to represent the geographic
location of users. If a user is transferred to another site
(location) we change their global group membership. The global group is used either to filter a GPO redirecting folders
to a specific server (or via a site-related DFS link) or the groups are used in
a single GPO to create advanced folder redirection, whereby you
can point groups to different servers. That way, traveling users, dial-in
users, etc. were accessing their folder-redirected-folders in their home
server  we didnt want to replicate tons of user data in those
environments just for the few



So to make a long story short, we just didnt use
site-linked GPOs for anything to do with user data. Also made it much easier
on the help desk issues, since help desk could change the membership of these
location-related global groups easily.



Dan Holme

Intelliem













From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Noah Eiger
Sent: Thursday, May 12, 2005 3:31
PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Sites and
Folder Redirection | more





Hello:



I am
working with redirecting My Documents in various sites. I have some follow up
questions to the thread I started a few months ago.



Some
sites have poor connectivity. There is no replication of data between sites
(for home directories). Laptop users use Offline Files. Single domain, W2k. All
redirection is handled via User GPOs. The root Home directory resides on a file
server at each site; users at that site point there based on the GPO. Security
is defined as per MSKB 274443.



Where
to apply the GPO? As Aric pointed out, applied at the Site level will cause
users to redirect to the local Home share when they just drop by with their
laptops. What happens to Offline Files in this case? It seems better to create
OUs for uses at each Site and apply the GPO there. Under this scenario, would
Slow Link Detection prevent the redirection from trying to find Home over the
slow WAN link? Would it then just resort to Offline Files?



Finally,
if we use DFS to create a unified namespace, all user home directories would be
created under a single Home directory. Without folder replication, how would we
control the Site and file server where the folder actually gets created?



Many
TIA.



--
nme








RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread Kern, Tom
this is what i see( i cut out my part of the headers. you'll see [EMAIL 
PROTECTED] I don't rewrite sender addresses incoming so i don't know why it 
would end up like this)-


Received: from mail.activedir.org (ftp.activedir.org [12.168.66.190])
by mta1.charmer.com (Postfix) with ESMTP id F1D7C284077
for [EMAIL PROTECTED]; Sun, 15 May 2005 17:54:41 -0400 (EDT)
Received: from ams007.ftl.affinity.com [216.219.253.155] by mail.activedir.org 
with ESMTP
  (SMTPD32-8.11) id ACD581CB006C; Sun, 15 May 2005 18:27:33 -0400
Received: by ams007.ftl.affinity.com id 359462-28812; Sun, 15 May 2005 
04:10:32 -0400
From: [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?
Date: Sun, 15 May 2005 04:10:31 -0400
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Message-Id: [EMAIL PROTECTED]
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: ActiveDir@mail.activedir.org
X-Virus-Scanned: by amavisd-new at charmer.com
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 May 2005 22:29:13.0104 (UTC) 
FILETIME=[854C6100:01C5599D]



thanks


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 7:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


Tom,

Now that pretty strange..the view that I have is as below:

[EMAIL PROTECTED]; on behalf of; [EMAIL PROTECTED]

And that's my corp's smtp relay, a spam indeed?

Thank you and have a splendid day!
 
Kind Regards,
 
Freddy Hartono
Windows Administrator (ADSM/NT Security)
Spherion Technology Group, Singapore
For Agilent Technologies
E-mail: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Monday, May 16, 2005 6:44 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address.

 i know there's been a spate of German right wing spam lately on a lot
of mailing lists. I don't know if this has anything to do with it...
thanks


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?



greetings, 

this always my nightmare, everytime i connect a new computer to network
to 
join the domain either i get his message THE NETWORK PATH WAS NOT
FOUND or 
CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping on it and

everything looks fine, when I set the workstation to hookup to our LAN 
internet it responded well, but when I need to join the domain it is
very 
Annoying it just can not join the domain. I even configured it as a 
workgroup then configure it as joining a domain, still wont join. BUT if
i 
remove the IP address and join to the old server first then put back the
IP 
address and do the joining to the new server domain IT WORKS. why and
how I 
dont have any idea. If needed for me to detail my problem by phone tell
me. 

rgds
cyrus 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread Michael B. Smith
The address is actually coming in as a local address (i.e., just
cyrus) with no domain-part. He probably has a misconfigured Outlook
Express or Eudora.

Your local MTA or your MUA is adding the domain-part. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Sunday, May 15, 2005 8:00 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

this is what i see( i cut out my part of the headers. you'll see
[EMAIL PROTECTED] I don't rewrite sender addresses incoming so i don't
know why it would end up like this)-


Received: from mail.activedir.org (ftp.activedir.org [12.168.66.190])
by mta1.charmer.com (Postfix) with ESMTP id F1D7C284077
for [EMAIL PROTECTED]; Sun, 15 May 2005 17:54:41 -0400 (EDT)
Received: from ams007.ftl.affinity.com [216.219.253.155] by
mail.activedir.org with ESMTP
  (SMTPD32-8.11) id ACD581CB006C; Sun, 15 May 2005 18:27:33 -0400
Received: by ams007.ftl.affinity.com id 359462-28812; Sun, 15 May 2005
04:10:32 -0400
From: [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?
Date: Sun, 15 May 2005 04:10:31 -0400
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Message-Id:
[EMAIL PROTECTED]
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: ActiveDir@mail.activedir.org
X-Virus-Scanned: by amavisd-new at charmer.com
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 May 2005 22:29:13.0104 (UTC)
FILETIME=[854C6100:01C5599D]



thanks


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 7:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


Tom,

Now that pretty strange..the view that I have is as below:

[EMAIL PROTECTED]; on behalf of; [EMAIL PROTECTED]

And that's my corp's smtp relay, a spam indeed?

Thank you and have a splendid day!
 
Kind Regards,
 
Freddy Hartono
Windows Administrator (ADSM/NT Security) Spherion Technology Group,
Singapore For Agilent Technologies
E-mail: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Monday, May 16, 2005 6:44 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address.

 i know there's been a spate of German right wing spam lately on a lot
of mailing lists. I don't know if this has anything to do with it...
thanks


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?



greetings, 

this always my nightmare, everytime i connect a new computer to network
to join the domain either i get his message THE NETWORK PATH WAS NOT
FOUND or CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping
on it and

everything looks fine, when I set the workstation to hookup to our LAN
internet it responded well, but when I need to join the domain it is
very Annoying it just can not join the domain. I even configured it as
a workgroup then configure it as joining a domain, still wont join. BUT
if i remove the IP address and join to the old server first then put
back the IP address and do the joining to the new server domain IT
WORKS. why and how I dont have any idea. If needed for me to detail my
problem by phone tell me. 

rgds
cyrus 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread Kern, Tom
my MUA is Outlook. I'm pretty sure, Outlook doesn't do that..

Could be my mta. I use Postfix, but as i recall you have to specifically create 
a lookup table for that and i never did. and Exchange 2k never does that AFAIK.
oh, well. i'll take a look.
thanks

-Original Message-
From: Michael B. Smith [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 8:18 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


The address is actually coming in as a local address (i.e., just
cyrus) with no domain-part. He probably has a misconfigured Outlook
Express or Eudora.

Your local MTA or your MUA is adding the domain-part. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Sunday, May 15, 2005 8:00 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

this is what i see( i cut out my part of the headers. you'll see
[EMAIL PROTECTED] I don't rewrite sender addresses incoming so i don't
know why it would end up like this)-


Received: from mail.activedir.org (ftp.activedir.org [12.168.66.190])
by mta1.charmer.com (Postfix) with ESMTP id F1D7C284077
for [EMAIL PROTECTED]; Sun, 15 May 2005 17:54:41 -0400 (EDT)
Received: from ams007.ftl.affinity.com [216.219.253.155] by
mail.activedir.org with ESMTP
  (SMTPD32-8.11) id ACD581CB006C; Sun, 15 May 2005 18:27:33 -0400
Received: by ams007.ftl.affinity.com id 359462-28812; Sun, 15 May 2005
04:10:32 -0400
From: [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?
Date: Sun, 15 May 2005 04:10:31 -0400
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Message-Id:
[EMAIL PROTECTED]
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: ActiveDir@mail.activedir.org
X-Virus-Scanned: by amavisd-new at charmer.com
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 May 2005 22:29:13.0104 (UTC)
FILETIME=[854C6100:01C5599D]



thanks


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 7:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


Tom,

Now that pretty strange..the view that I have is as below:

[EMAIL PROTECTED]; on behalf of; [EMAIL PROTECTED]

And that's my corp's smtp relay, a spam indeed?

Thank you and have a splendid day!
 
Kind Regards,
 
Freddy Hartono
Windows Administrator (ADSM/NT Security) Spherion Technology Group,
Singapore For Agilent Technologies
E-mail: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Monday, May 16, 2005 6:44 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address.

 i know there's been a spate of German right wing spam lately on a lot
of mailing lists. I don't know if this has anything to do with it...
thanks


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?



greetings, 

this always my nightmare, everytime i connect a new computer to network
to join the domain either i get his message THE NETWORK PATH WAS NOT
FOUND or CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping
on it and

everything looks fine, when I set the workstation to hookup to our LAN
internet it responded well, but when I need to join the domain it is
very Annoying it just can not join the domain. I even configured it as
a workgroup then configure it as joining a domain, still wont join. BUT
if i remove the IP address and join to the old server first then put
back the IP address and do the joining to the new server domain IT
WORKS. why and how I dont have any idea. If needed for me to detail my
problem by phone tell me. 

rgds
cyrus 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread Michael B. Smith
Nope, it's a fair bet that neither Outlook 2003 nor Exchange 2003 do
that - because that is what I'm running. His postings just show as
cyrus here. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Sunday, May 15, 2005 8:44 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

my MUA is Outlook. I'm pretty sure, Outlook doesn't do that..

Could be my mta. I use Postfix, but as i recall you have to specifically
create a lookup table for that and i never did. and Exchange 2k never
does that AFAIK.
oh, well. i'll take a look.
thanks

-Original Message-
From: Michael B. Smith [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 8:18 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


The address is actually coming in as a local address (i.e., just
cyrus) with no domain-part. He probably has a misconfigured Outlook
Express or Eudora.

Your local MTA or your MUA is adding the domain-part. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Sunday, May 15, 2005 8:00 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

this is what i see( i cut out my part of the headers. you'll see
[EMAIL PROTECTED] I don't rewrite sender addresses incoming so i don't
know why it would end up like this)-


Received: from mail.activedir.org (ftp.activedir.org [12.168.66.190])
by mta1.charmer.com (Postfix) with ESMTP id F1D7C284077
for [EMAIL PROTECTED]; Sun, 15 May 2005 17:54:41 -0400 (EDT)
Received: from ams007.ftl.affinity.com [216.219.253.155] by
mail.activedir.org with ESMTP
  (SMTPD32-8.11) id ACD581CB006C; Sun, 15 May 2005 18:27:33 -0400
Received: by ams007.ftl.affinity.com id 359462-28812; Sun, 15 May 2005
04:10:32 -0400
From: [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?
Date: Sun, 15 May 2005 04:10:31 -0400
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Message-Id:
[EMAIL PROTECTED]
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: ActiveDir@mail.activedir.org
X-Virus-Scanned: by amavisd-new at charmer.com
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 May 2005 22:29:13.0104 (UTC)
FILETIME=[854C6100:01C5599D]



thanks


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 7:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


Tom,

Now that pretty strange..the view that I have is as below:

[EMAIL PROTECTED]; on behalf of; [EMAIL PROTECTED]

And that's my corp's smtp relay, a spam indeed?

Thank you and have a splendid day!
 
Kind Regards,
 
Freddy Hartono
Windows Administrator (ADSM/NT Security) Spherion Technology Group,
Singapore For Agilent Technologies
E-mail: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Monday, May 16, 2005 6:44 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address.

 i know there's been a spate of German right wing spam lately on a lot
of mailing lists. I don't know if this has anything to do with it...
thanks


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?



greetings, 

this always my nightmare, everytime i connect a new computer to network
to join the domain either i get his message THE NETWORK PATH WAS NOT
FOUND or CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping
on it and

everything looks fine, when I set the workstation to hookup to our LAN
internet it responded well, but when I need to join the domain it is
very Annoying it just can not join the domain. I even configured it as
a workgroup then configure it as joining a domain, still wont join. BUT
if i remove the IP address and join to the old server first then put
back the IP address and do the joining to the new server domain IT
WORKS. why and how I dont have any idea. If needed for me to detail my
problem by phone tell me. 

rgds
cyrus 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: 

RE: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread freddy_hartono
Postfix it is :)

Thank you and have a splendid day!
 
Kind Regards,
 
Freddy Hartono
Windows Administrator (ADSM/NT Security)
Spherion Technology Group, Singapore
For Agilent Technologies
E-mail: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael B.
Smith
Sent: Monday, May 16, 2005 8:54 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

Nope, it's a fair bet that neither Outlook 2003 nor Exchange 2003 do
that - because that is what I'm running. His postings just show as
cyrus here. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Sunday, May 15, 2005 8:44 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

my MUA is Outlook. I'm pretty sure, Outlook doesn't do that..

Could be my mta. I use Postfix, but as i recall you have to specifically
create a lookup table for that and i never did. and Exchange 2k never
does that AFAIK.
oh, well. i'll take a look.
thanks

-Original Message-
From: Michael B. Smith [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 8:18 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


The address is actually coming in as a local address (i.e., just
cyrus) with no domain-part. He probably has a misconfigured Outlook
Express or Eudora.

Your local MTA or your MUA is adding the domain-part. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Sunday, May 15, 2005 8:00 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

this is what i see( i cut out my part of the headers. you'll see
[EMAIL PROTECTED] I don't rewrite sender addresses incoming so i don't
know why it would end up like this)-


Received: from mail.activedir.org (ftp.activedir.org [12.168.66.190])
by mta1.charmer.com (Postfix) with ESMTP id F1D7C284077
for [EMAIL PROTECTED]; Sun, 15 May 2005 17:54:41 -0400 (EDT)
Received: from ams007.ftl.affinity.com [216.219.253.155] by
mail.activedir.org with ESMTP
  (SMTPD32-8.11) id ACD581CB006C; Sun, 15 May 2005 18:27:33 -0400
Received: by ams007.ftl.affinity.com id 359462-28812; Sun, 15 May 2005
04:10:32 -0400
From: [EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?
Date: Sun, 15 May 2005 04:10:31 -0400
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Message-Id:
[EMAIL PROTECTED]
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: ActiveDir@mail.activedir.org
X-Virus-Scanned: by amavisd-new at charmer.com
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 May 2005 22:29:13.0104 (UTC)
FILETIME=[854C6100:01C5599D]



thanks


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 7:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?


Tom,

Now that pretty strange..the view that I have is as below:

[EMAIL PROTECTED]; on behalf of; [EMAIL PROTECTED]

And that's my corp's smtp relay, a spam indeed?

Thank you and have a splendid day!
 
Kind Regards,
 
Freddy Hartono
Windows Administrator (ADSM/NT Security) Spherion Technology Group,
Singapore For Agilent Technologies
E-mail: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Monday, May 16, 2005 6:44 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] joining domain is not easy ?

I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address.

 i know there's been a spate of German right wing spam lately on a lot
of mailing lists. I don't know if this has anything to do with it...
thanks


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ?



greetings, 

this always my nightmare, everytime i connect a new computer to network
to join the domain either i get his message THE NETWORK PATH WAS NOT
FOUND or CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping
on it and

everything looks fine, when I set the workstation to hookup to our LAN
internet it responded well, but when I need to join the domain it is
very Annoying it just can not join the domain. I even configured it as
a workgroup then configure it as joining a domain, still wont join. BUT
if i remove the IP address and join to the old server first then put
back the IP address and do the joining to the new server domain IT
WORKS. why and how I dont have any idea. If needed for me to detail my
problem by phone tell me. 

rgds
cyrus 
List info   : 

RE: [ActiveDir] Audit Collection Services

2005-05-15 Thread Rick Kingslan
Nope - it's still in beta.  Final stages, but still not released.

-rtk

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Friday, May 13, 2005 10:29 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Audit Collection Services

Greetings, 

Does any one know if  Microsoft Audit Collection Services  has been
released yet? I attended a Microsoft TechNet Briefing and the stated that it
would be out some time last year, is any one using it?

Sincerely, 

Jose Medeiros
408-449-6621 Cell







Sincerely, 

Jose Medeiros
408-449-6621 Cell



List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Audit Collection Services

2005-05-15 Thread Rick Kingslan
I thought it was dropped - maybe not, however.  I seem to remember seeing in
- I think - one of Paul T.'s write-ups that the ACS piece in R2 had been
dropped.

For now - at least.

-rtk

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Francis Ouellet
Sent: Friday, May 13, 2005 10:39 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Audit Collection Services

I'm still in the beta and no, no release yet. And no activity as well.

Francis

P.S. I think some of the functionality is built-in R2. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: May 13, 2005 11:29 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Audit Collection Services

Greetings, 

Does any one know if  Microsoft Audit Collection Services  has been
released yet? I attended a Microsoft TechNet Briefing and the stated
that it would be out some time last year, is any one using it?

Sincerely, 

Jose Medeiros
408-449-6621 Cell







Sincerely, 

Jose Medeiros
408-449-6621 Cell



List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Audit Collection Services

2005-05-15 Thread Rick Kingslan
Sadly, the beta for ACS has been closed for a VERY long time.  This close to
what might be a release, I suspect that there will not be any opportunity to
get in on the beta.

However, check with your local MS folks and see if they can get you the
bits.

-rtk

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Friday, May 13, 2005 10:46 AM
To: ActiveDir@mail.activedir.org
Cc: Jose Medeiros-Gmail (E-mail)
Subject: RE: [ActiveDir] Audit Collection Services

Hi Francis, 

Thank you for the reply. We would like to test this in our QA LAB is there
any way I can participate in the Beta program?

Sincerely, 

Jose Medeiros
Former Vice President and Postmaster NTEA
MCP+I, MCSE, NT4 MCT
www.ntea.net
www.tvnug.org
www.sfntug.org


--

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Francis Ouellet
Sent: Friday, May 13, 2005 8:39 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Audit Collection Services


I'm still in the beta and no, no release yet. And no activity as well.

Francis

P.S. I think some of the functionality is built-in R2. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: May 13, 2005 11:29 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Audit Collection Services

Greetings, 

Does any one know if  Microsoft Audit Collection Services  has been
released yet? I attended a Microsoft TechNet Briefing and Microsoft stated
that it would be out some time last year, is any one using it?

Sincerely, 

Jose Medeiros
408-449-6621 Cell







Sincerely, 

Jose Medeiros
408-449-6621 Cell



List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] joining domain is not easy ?

2005-05-15 Thread cyrus
greetings, 

what is going on, why sender name became [EMAIL PROTECTED] how this 
happen, could there a worm in .org waiting to Xplode?
I think it best bet to discontinue with this activeDir...and wait for a 
better improvement (i.e. www.codeguru.com)  any suggest how I can stop it.
thanks
cyrus 

Kern, Tom writes: 

I think this is a good reason to use SPF on mailing lists.
Charmer.com is my corps domain.
i don't know why this indvidual is spoofing his return address. 

 i know there's been a spate of German right wing spam lately on a lot of mailing lists. I don't know if this has anything to do with it...
thanks 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 15, 2005 4:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] joining domain is not easy ? 

 

greetings,  

this always my nightmare, everytime i connect a new computer to network to 
join the domain either i get his message THE NETWORK PATH WAS NOT FOUND or 
CANNOT JOIN THE DOMAIN. I've check the IP and did a Ping on it and 
everything looks fine, when I set the workstation to hookup to our LAN 
internet it responded well, but when I need to join the domain it is very 
Annoying it just can not join the domain. I even configured it as a 
workgroup then configure it as joining a domain, still wont join. BUT if i 
remove the IP address and join to the old server first then put back the IP 
address and do the joining to the new server domain IT WORKS. why and how I 
dont have any idea. If needed for me to detail my problem by phone tell me.  

rgds
cyrus  

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/