Re: [ActiveDir] The remote computer has ended the connection.

2006-10-18 Thread Mark Parris
Does logging off before the shutdown happens still cancel the shutdown?

It used to be a "top-tip" in NT, but I can never reproduce this in 2Kx.



Regards,

Mark Parris

Base IT Ltd
Active Directory Consultancy
Tel +44(0)7801 690596


-Original Message-
From: "Brian Desmond" <[EMAIL PROTECTED]>
Date: Tue, 17 Oct 2006 17:21:07 
To:
Subject: RE: [ActiveDir] The remote computer has ended the connection.

My experience has been that it never actually reboots and I have to issue a 
shutdown –r –f –t 3 –m \\screwedupserver:  remotely. 
 
 
 
 
Thanks,
 
Brian Desmond
 
[EMAIL PROTECTED]
 
 
 
c - 312.731.3132
 
 
 
 
 
 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael A. Barker
 Sent: Tuesday, October 17, 2006 5:48 PM
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
 
Are you really sure the system rebooted the first time? I’ve seen this twice in 
the last two months and all the machines I got to before someone rebooted them 
never actually shut down the first time. Connect and look at the logs or use 
the uptime command to check when the last reboot was. I think you’ll find it 
never really went down. You do however get the very familiar disconnect message 
which leads you to believe the machine is going down. For VIP systems I like to 
“ping –t IPAddress” and see that it goes down and comes back up. With that said 
I’ve never had a problem with patching from RDP (using WSUS) and then signing 
off to later send a reboot command over the wire.
 
 
 
 
 
 
 
 
 

 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Technical Support
 Sent: Tuesday, October 17, 2006 12:01 PM
 To: ActiveDir@mail.activedir.org; ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
 
 
 
Yes it doesnt happened with any other serves but i have rebooted it more than 
twice. but no gud luck.
 
 
 
 
 
what do you guys suggest in this case? did only rebooting second time resolved 
the issue for you?
 
 
 
 
 
It worked for me when i have disjoined from my domain. but i am sure this has 
nothing to do with any GPO. Also 
 
 
same thing happened for me when i joined this to any other domain. other than 
the previous one.
 
 
 
 
 
Thanks!!!
 
 
Ravi
 
 
 
 
 

 
From: [EMAIL PROTECTED] on behalf of Thommes, Michael M.
 Sent: Tue 10/17/2006 8:33 AM
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
I have also seen where a second reboot is necessary for RDP to work.  I have 
not determined the cause of this yet.  It does not happen on all servers.
 
 
 
Mike Thommes
 
 
 
 
 

 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vinnie Cardona
 Sent: Tuesday, October 17, 2006 10:29 AM
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
 
I have noticed that after updating to the latest security patches and rebooting 
that some (not all) of my servers had an issues with RDP.  It cleared after 
rebooting a second time.  Root cause?  Unknown at this time. 
 
 
 
-vC
 
 
 

 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Technical Support
 Sent: Tuesday, October 17, 2006 8:28 AM
 To: activedir@mail.activedir.org
 Subject: [ActiveDir] The remote computer has ended the connection.
 Importance: High
 
 
 
 
Hi,
 
 
 
 
 
I am trying to access one of my servers using Remote Connection. I am using 
mstsc but its not connecting me to the server. error "The remote computer has 
ended the connection". However if i am using mstsc /v:IP Address /console it 
lets me connect to it.
 
 
 
 
 
Problem is in this mode i can use only admin id when connected like this. I 
want my engineers (who dont have administrator priviledges) to access this. its 
not possible in this mode.
 
 
 
 
 
This all happened when i rebooted my server.
 
 
 
 
 
Please suggest what can be done to normalize the things.
 
 
 
 
 
Thanks!!!
 
 
Ravi
 

Re: [ActiveDir] Latency in List

2006-10-18 Thread Paul Williams
Yeah, I sort of bitched about it last month when I had some time to reply. 
I see about 90 - 100 minute delays.



--Paul

- Original Message - 
From: "Vinnie Cardona" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, October 18, 2006 1:00 AM
Subject: RE: [ActiveDir] Latency in List



This message was sent at 6pm (MST)

I have seen latency...

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
Sent: Tuesday, October 17, 2006 3:09 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Latency in List

I initially sent a reply with to this thread (below) at 19:43 BST yet I 
only

receive it back at 21:37 BST nearly two hours later, is anyone else
experiencing latency or is just me?

Let's see what this message does!

Mark

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
Sent: 17 October 2006 19:43
To: ActiveDir.org
Subject: Re: [ActiveDir] The remote computer has ended the connection.




List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx 


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


RE: [ActiveDir] The remote computer has ended the connection.

2006-10-18 Thread Thommes, Michael M.
In W2K days, I would *always* log off an admin TS session and then do a remote 
shutdown/reboot.  Executing a shutdown from within the interactive session was 
problematic, to say the least.  I think part of it was breaking down 
TS-generated printer connections.  I don't see this problem with W2K3.

Mike Thommes

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
Sent: Wednesday, October 18, 2006 2:13 AM
To: ActiveDir.org
Subject: Re: [ActiveDir] The remote computer has ended the connection.

Does logging off before the shutdown happens still cancel the shutdown?

It used to be a "top-tip" in NT, but I can never reproduce this in 2Kx.



Regards,

Mark Parris

Base IT Ltd
Active Directory Consultancy
Tel +44(0)7801 690596


-Original Message-
From: "Brian Desmond" <[EMAIL PROTECTED]>
Date: Tue, 17 Oct 2006 17:21:07 
To:
Subject: RE: [ActiveDir] The remote computer has ended the connection.

My experience has been that it never actually reboots and I have to issue a 
shutdown –r –f –t 3 –m \\screwedupserver:  remotely. 
 
 
 
 
Thanks,
 
Brian Desmond
 
[EMAIL PROTECTED]
 
 
 
c - 312.731.3132
 
 
 
 
 
 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael A. Barker
 Sent: Tuesday, October 17, 2006 5:48 PM
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
 
Are you really sure the system rebooted the first time? I’ve seen this twice in 
the last two months and all the machines I got to before someone rebooted them 
never actually shut down the first time. Connect and look at the logs or use 
the uptime command to check when the last reboot was. I think you’ll find it 
never really went down. You do however get the very familiar disconnect message 
which leads you to believe the machine is going down. For VIP systems I like to 
“ping –t IPAddress” and see that it goes down and comes back up. With that said 
I’ve never had a problem with patching from RDP (using WSUS) and then signing 
off to later send a reboot command over the wire.
 
 
 
 
 
 
 
 
 

 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Technical Support
 Sent: Tuesday, October 17, 2006 12:01 PM
 To: ActiveDir@mail.activedir.org; ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
 
 
 
Yes it doesnt happened with any other serves but i have rebooted it more than 
twice. but no gud luck.
 
 
 
 
 
what do you guys suggest in this case? did only rebooting second time resolved 
the issue for you?
 
 
 
 
 
It worked for me when i have disjoined from my domain. but i am sure this has 
nothing to do with any GPO. Also 
 
 
same thing happened for me when i joined this to any other domain. other than 
the previous one.
 
 
 
 
 
Thanks!!!
 
 
Ravi
 
 
 
 
 

 
From: [EMAIL PROTECTED] on behalf of Thommes, Michael M.
 Sent: Tue 10/17/2006 8:33 AM
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
I have also seen where a second reboot is necessary for RDP to work.  I have 
not determined the cause of this yet.  It does not happen on all servers.
 
 
 
Mike Thommes
 
 
 
 
 

 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vinnie Cardona
 Sent: Tuesday, October 17, 2006 10:29 AM
 To: ActiveDir@mail.activedir.org
 Subject: RE: [ActiveDir] The remote computer has ended the connection.
 
 
 
I have noticed that after updating to the latest security patches and rebooting 
that some (not all) of my servers had an issues with RDP.  It cleared after 
rebooting a second time.  Root cause?  Unknown at this time. 
 
 
 
-vC
 
 
 

 
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Technical Support
 Sent: Tuesday, October 17, 2006 8:28 AM
 To: activedir@mail.activedir.org
 Subject: [ActiveDir] The remote computer has ended the connection.
 Importance: High
 
 
 
 
Hi,
 
 
 
 
 
I am trying to access one of my servers using Remote Connection. I am using 
mstsc but its not connecting me to the server. error "The remote computer has 
ended the connection". However if i am using mstsc /v:IP Address /console it 
lets me connect to it.
 
 
 
 
 
Problem is in this mode i can use only admin id when connected like this. I 
want my engineers (who dont have administrator priviledges) to access this. its 
not possible in this mode.
 
 
 
 
 
This all happened when i rebooted my server.
 
 
 
 
 
Please suggest what can be done to normalize the things.
 
 
 
 
 
Thanks!!!
 
 
Ravi
 .+Šw†ÛÿüÁ§Š÷Šºƒò²Ö§²ÑB§ÿö+v*®ŠË§²Örz§ÿö+v*®—û­æ±«
[EMAIL PROTECTED])

[ActiveDir] OT: Bulk Workstation reboots.....

2006-10-18 Thread Frank Abagnale
I have a startup script which inputs a variable on every XP workstation.  This variable is going to change and I need the workstations to be rebooted to reflect the change.  I have around 900 workstations, I was thinking of using the shutdown.exe tool with the remote name in a batch file.  I was planning on doing through during the night, does anyone see any issues/impact if I set 900 machines to reboot automatically? Does anyone else have a better idea?  Thanks  Frank 
		Get your email and more, right on the  new Yahoo.com 


RE: [ActiveDir] OT: Bulk Workstation reboots.....

2006-10-18 Thread Al Garrett








Scheduled Tasks?

 

-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Abagnale
Sent: Wednesday, October 18, 2006
7:15 AM
To: Active
Subject: [ActiveDir] OT: Bulk
Workstation reboots.

 



I have a startup script which inputs a variable on
every XP workstation.





This variable is going to change and I need the
workstations to be rebooted to reflect the change.





I have around 900 workstations, I was thinking of
using the shutdown.exe tool with the remote name in a batch file.





I was planning on doing through during the night, does
anyone see any issues/impact if I set 900 machines to reboot automatically?
Does anyone else have a better idea?





Thanks





Frank



  







Get your email and more, right on the new
Yahoo.com 








RE: [ActiveDir] OT: Bulk Workstation reboots.....

2006-10-18 Thread joe



I could seen an issue if someone has something running like 
an access DB which could result in corruption / data loss or long running 
script, etc and then they would be pissed. From a purely technical standpoint I 
don't see a problem. 
 
You could also write something to check the uptime of the 
machines and send out an email and ask people to reboot and anyone who doesn't 
reboot in x days gets rebooted. 
 
 

--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 
 
 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Frank 
AbagnaleSent: Wednesday, October 18, 2006 10:15 AMTo: 
ActiveSubject: [ActiveDir] OT: Bulk Workstation 
reboots.

I have a startup script which inputs a variable on every 
XP workstation.
This variable is going to change and I need the workstations to be rebooted 
to reflect the change.
I have around 900 workstations, I was thinking of using the shutdown.exe 
tool with the remote name in a batch file.
I was planning on doing through during the night, does anyone see any 
issues/impact if I set 900 machines to reboot automatically? Does anyone else 
have a better idea?
Thanks
Frank


Get your email and more, right on the new 
Yahoo.com 


Re: [ActiveDir] OT: Bulk Workstation reboots.....

2006-10-18 Thread Paul Williams



Here's a script I've used in the past to 
do what you want:
 -- http://groups.google.com/group/microsoft.public.windows.server.active_directory/msg/3be4867f843df935
 
 
I wouldn't worry about the computer logons 
if you do this out of hours, e.g. run the script via a scheduled task or simply 
initiate at 2000 or whatever.  Those machines are going to be scattered all 
over the place and will use different DCs.
 
 
--Paul

  - Original Message - 
  From: 
  Frank 
  Abagnale 
  To: Active 
  Sent: Wednesday, October 18, 2006 3:14 
  PM
  Subject: [ActiveDir] OT: Bulk Workstation 
  reboots.
  
  I have a startup script which inputs a variable on every 
  XP workstation.
  This variable is going to change and I need the workstations to be 
  rebooted to reflect the change.
  I have around 900 workstations, I was thinking of using the shutdown.exe 
  tool with the remote name in a batch file.
  I was planning on doing through during the night, does anyone see any 
  issues/impact if I set 900 machines to reboot automatically? Does anyone else 
  have a better idea?
  Thanks
  Frank
  
  
  Get your email and more, right on the new 
  Yahoo.com 


[ActiveDir] orgfinder

2006-10-18 Thread Ramon Linan



Hi,
 
I was 
working on a webpart for SharePoint to allow users keep up to date their info in 
AD, I just found out that there is already a free one.
 
www.orgfinder.com
 
They 
have an asp application and a webpart.
 
The 
application is working fine but the webpart is not working. 
The 
app pool identity for the asp application is a user that I have created, as I 
said this is working great.
But 
the SharePoint is using a different app pool with identity network services and 
of course does not have rights to update AD info.
 
What 
would be the best way to fix this? changing the identity in the SharePoint app 
pool requires several step because it will brake connection to the content and 
configuration DB.
 
Is 
there other way? does anyone knows if it is possible to use another app pool for 
just one webpart...I doubt it but I though I would be worthy to 
ask.
 
 
Thanks


[ActiveDir] New Wireless WPA update KB917021

2006-10-18 Thread Scott Klassen



My relevant 
config:  W2k3 SP1 native domain and WinXP SP2 admin 
workstation.
 
I'm a bit 
dissapointed and confused about the release of KB917021 (http://support.microsoft.com/kb/917021/en-us) which 
touts the ability to finally set WPA2 for wireless clients through group policy 
(Computer Config > Windows Settings > Security Settings > Wireless 
Network (IEEE 802.11) Policies).  I read through the KB article and 
deployed to a couple of test laptops and my admin workstation only to find 
that when edited using XPSP2 (have to follow Darren's instructions at http://blogs.dirteam.com/blogs/gpoguy/archive/2005/12/16/289.aspx to 
enable) or W2K3SP1, WPA2 is still not an option.  I found the verbage used 
in the article section titled "WPA2 support in wireless group policy settings" 
to be a little unclear on this.  Per that same section, I have found that 
if I go to my policy using the GPMC from a Vista test system (build 5744), that 
the options for WPA2 are present.  
 
I can't even fathom 
why MS would release this hotfix for public consumption when the only way to use 
the added capability is through beta OSs (Vista or 
Longhorn).
 
Here's a couple of 
questions:
 
1)  Does anyone 
know if an updated .adm for XP and/or 2K3, to add the capability to set WPA2 in 
group policy, is soon to be released?
 
2)  Does anyone 
see potential issues with using the Vista RC2 machine to set this on my GPO 
(other than the fact that without the Vista box I will be unable to re-modify if 
necessary)?
 
Even better if 
someone here has a test network of some size to play with this.  I'm 
curious if I did the action in number 2, what would happen if I then tried to 
edit the same GPO from XPSP2 or W2k3SP1 after the change.
 
Scott 
Klassen


Re: [ActiveDir] orgfinder

2006-10-18 Thread Joe Kaplan
SharePoint is typically set to impersonate the logged on user, so you would 
normally be binding to AD as the browser user, not the network service 
(machine) account.  It is possible that they disable impersonation, but that 
is unlikely.


If you are impersonating and are using IWA auth, you need to get Kerberos 
delegation working.  This may be hard in SharePoint as some versions 
actually disable Kerberos auth in the metabase during install.


If the web part actually uses the trusted subsystem design and relies on the 
identity of the worker process to make the changes, then you would need to 
either change the app pool identity to a privileged user or allow the 
machine account to have those privileges.  However, this scenario seems 
unlikely to me.  You need to find out for sure before you can find out how 
to proceed though.


Joe K.

- Original Message - 
From: Ramon Linan

To: ActiveDir@mail.activedir.org
Sent: Wednesday, October 18, 2006 10:27 AM
Subject: [ActiveDir] orgfinder


Hi,

I was working on a webpart for SharePoint to allow users keep up to date 
their info in AD, I just found out that there is already a free one.


www.orgfinder.com

They have an asp application and a webpart.

The application is working fine but the webpart is not working.
The app pool identity for the asp application is a user that I have created, 
as I said this is working great.
But the SharePoint is using a different app pool with identity network 
services and of course does not have rights to update AD info.


What would be the best way to fix this? changing the identity in the 
SharePoint app pool requires several step because it will brake connection 
to the content and configuration DB.


Is there other way? does anyone knows if it is possible to use another app 
pool for just one webpart...I doubt it but I though I would be worthy to 
ask.



Thanks 


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


RE: [ActiveDir] New Wireless WPA update KB917021

2006-10-18 Thread Akomolafe, Deji



Are you on the W2K3 SP2 Beta program? If you are not, find a way to get in there and get SP2.
 


Sincerely,    _      (, /  |  /)   /) /)       /---| (/_  __   ___// _   //  _  ) /    |_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /)     (/   Microsoft MVP - Directory Serviceswww.akomolafe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon


From: Scott KlassenSent: Wed 10/18/2006 8:57 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] New Wireless WPA update KB917021

My relevant config:  W2k3 SP1 native domain and WinXP SP2 admin workstation.
 
I'm a bit dissapointed and confused about the release of KB917021 (http://support.microsoft.com/kb/917021/en-us) which touts the ability to finally set WPA2 for wireless clients through group policy (Computer Config > Windows Settings > Security Settings > Wireless Network (IEEE 802.11) Policies).  I read through the KB article and deployed to a couple of test laptops and my admin workstation only to find that when edited using XPSP2 (have to follow Darren's instructions at http://blogs.dirteam.com/blogs/gpoguy/archive/2005/12/16/289.aspx to enable) or W2K3SP1, WPA2 is still not an option.  I found the verbage used in the article section titled "WPA2 support in wireless group policy settings" to be a little unclear on this.  Per that same section, I have found that if I go to my policy using the GPMC from a Vista test system (build 5744), that the options for WPA2 are present.  
 
I can't even fathom why MS would release this hotfix for public consumption when the only way to use the added capability is through beta OSs (Vista or Longhorn).
 
Here's a couple of questions:
 
1)  Does anyone know if an updated .adm for XP and/or 2K3, to add the capability to set WPA2 in group policy, is soon to be released?
 
2)  Does anyone see potential issues with using the Vista RC2 machine to set this on my GPO (other than the fact that without the Vista box I will be unable to re-modify if necessary)?
 
Even better if someone here has a test network of some size to play with this.  I'm curious if I did the action in number 2, what would happen if I then tried to edit the same GPO from XPSP2 or W2k3SP1 after the change.
 
Scott Klassen


RE: [ActiveDir] New Wireless WPA update KB917021

2006-10-18 Thread Scott Klassen



Thanks, guess that answers question 1.
 
Scott Klassen


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, 
DejiSent: Wednesday, October 18, 2006 12:33 PMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] New Wireless WPA 
update KB917021


Are you on the W2K3 SP2 Beta 
program? If you are not, find a way to get in there and get SP2.
 


Sincerely,    
_    
  (, /  |  
/)   
/) /)       /---| (/_  
__   ___// _   //  _  ) 
/    |_/(__(_) // 
(_(_)(/_(_(_/(__(/_(_/ 
/)  
   
(/   Microsoft MVP - Directory 
Serviceswww.akomolafe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you 
were worried about Yesterday? 
-anon


From: Scott KlassenSent: Wed 
10/18/2006 8:57 AMTo: ActiveDir@mail.activedir.orgSubject: 
[ActiveDir] New Wireless WPA update KB917021

My relevant 
config:  W2k3 SP1 native domain and WinXP SP2 admin 
workstation.
 
I'm a bit 
dissapointed and confused about the release of KB917021 (http://support.microsoft.com/kb/917021/en-us) which touts 
the ability to finally set WPA2 for wireless clients through group policy 
(Computer Config > Windows Settings > Security Settings > Wireless 
Network (IEEE 802.11) Policies).  I read through the KB article and 
deployed to a couple of test laptops and my admin workstation only to find 
that when edited using XPSP2 (have to follow Darren's instructions at http://blogs.dirteam.com/blogs/gpoguy/archive/2005/12/16/289.aspx to 
enable) or W2K3SP1, WPA2 is still not an option.  I found the verbage used 
in the article section titled "WPA2 support in wireless group policy settings" 
to be a little unclear on this.  Per that same section, I have found that 
if I go to my policy using the GPMC from a Vista test system (build 5744), that 
the options for WPA2 are present.  
 
I can't even fathom 
why MS would release this hotfix for public consumption when the only way to use 
the added capability is through beta OSs (Vista or 
Longhorn).
 
Here's a couple of 
questions:
 
1)  Does anyone 
know if an updated .adm for XP and/or 2K3, to add the capability to set WPA2 in 
group policy, is soon to be released?
 
2)  Does anyone 
see potential issues with using the Vista RC2 machine to set this on my GPO 
(other than the fact that without the Vista box I will be unable to re-modify if 
necessary)?
 
Even better if 
someone here has a test network of some size to play with this.  I'm 
curious if I did the action in number 2, what would happen if I then tried to 
edit the same GPO from XPSP2 or W2k3SP1 after the change.
 
Scott 
Klassen


Re: [ActiveDir] Latency in List

2006-10-18 Thread Tony Murray
I'll look into it.

Tony

-- Original Message --
From: "Paul Williams" <[EMAIL PROTECTED]>
Reply-To: ActiveDir@mail.activedir.org
Date:  Wed, 18 Oct 2006 09:49:09 +0100

Yeah, I sort of bitched about it last month when I had some time to reply. 
I see about 90 - 100 minute delays.


--Paul

- Original Message - 
From: "Vinnie Cardona" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, October 18, 2006 1:00 AM
Subject: RE: [ActiveDir] Latency in List


> This message was sent at 6pm (MST)
>
> I have seen latency...
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
> Sent: Tuesday, October 17, 2006 3:09 PM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Latency in List
>
> I initially sent a reply with to this thread (below) at 19:43 BST yet I 
> only
> receive it back at 21:37 BST nearly two hours later, is anyone else
> experiencing latency or is just me?
>
> Let's see what this message does!
>
> Mark
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
> Sent: 17 October 2006 19:43
> To: ActiveDir.org
> Subject: Re: [ActiveDir] The remote computer has ended the connection.
>
>
>
>
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ml/threads.aspx
>
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ml/threads.aspx 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

 





Sent via the WebMail system at mail.activedir.org


 
   
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


[ActiveDir] Gather member of query based distribution list thru command line

2006-10-18 Thread Irwan Hadi

Is there any command line or a way to pull the member of a query based
distribution list from command line?
I need to make a report (for auditing) about the member of our query
based distribution list.

Thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


RE: [ActiveDir] Gather member of query based distribution list thru command line

2006-10-18 Thread Thommes, Michael M.
dsquery group -name _samaccountname_here_ | dsget group -members

Mike Thommes

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Irwan Hadi
Sent: Wednesday, October 18, 2006 4:14 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Gather member of query based distribution list thru
command line

Is there any command line or a way to pull the member of a query based
distribution list from command line?
I need to make a report (for auditing) about the member of our query
based distribution list.

Thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


RE: [ActiveDir] Gather member of query based distribution list thru command line

2006-10-18 Thread Andrew Cace
You can take the query and pop it into a new Saved Query in Active
Directory Users and Computers.  After the query has run, you can then
right-click the query and choose export list.
 
-Andrew

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Irwan Hadi
Sent: Wednesday, October 18, 2006 4:14 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Gather member of query based distribution list thru
command line

Is there any command line or a way to pull the member of a query based
distribution list from command line?
I need to make a report (for auditing) about the member of our query
based distribution list.

Thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


RE: [ActiveDir] Gather member of query based distribution list thru command line

2006-10-18 Thread joe
You have to follow two steps, first you need to get the details around the
query and then execute the query. I know of nothing that will do that
automatically for you except the ADUC plugin for exchange. This would be
good for a script.

So first you want to get your QB DLs and the relative attributes.

The objects you want are 
msExchDynamicDistributionList

The attributes you want are
msExchDynamicDLBaseDN
msExchDynamicDLFilter

So you do something like

adfind -gc -null -f objectcategory=msExchDynamicDistributionList
msExchDynamicDLBaseDN msExchDynamicDLFilter

If it makes it easier for you, use CSV by adding the -csv switch.

Then parse that and execute each of the queries. 

So if you see

dn:CN=qbgroup,OU=MailUsers,OU=joeware2,OU=Exchange,DC=joe,DC=com
>msExchDynamicDLBaseDN: DC=joe,DC=com
>msExchDynamicDLFilter: (homemdb=*)

Then you will execute something like

adfind -gc -b DC=joe,DC=com -f "(homemdb=*)" -dn

And that will return the DNs of all objects that meet the specified filter.

This should be able to be pulled together into a perl script in rather short
time. If you want something other than the DN for the matching objects,
remove the -dn and add in what attributes you want returned like
mailnickname or whatever. Like so

adfind -gc -b DC=joe,DC=com -f "(homemdb=*)" mailnickname 


   joe


--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm 
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Irwan Hadi
Sent: Wednesday, October 18, 2006 5:14 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Gather member of query based distribution list thru
command line

Is there any command line or a way to pull the member of a query based
distribution list from command line?
I need to make a report (for auditing) about the member of our query
based distribution list.

Thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


[ActiveDir] Vista & WMI

2006-10-18 Thread Harding, Devon








I’m trying to get a script working in Vista with no success.  For some reason the OS caption on
Vista looks corrupted, but when I enter it as it’s
displayed in wmic, my script ignores it.  I even tried to correct it, and still
no success.  Here’s the script:

 

Dim WshShell

strComputer = "."

Set WshShell =
WScript.CreateObject("WScript.Shell")

On Error Resume Next

 

' If Workstation, exit script

Dim objWMIService, colOperatingSystems, objOperatingSystem,
strComputer, objFSO

Set objWMIService = GetObject("winmgmts:" &
"{impersonationLevel=impersonate}!\\" & strComputer &
"\root\cimv2")

Set colOperatingSystems = objWMIService.ExecQuery
("Select * from Win32_OperatingSystem")

For Each objOperatingSystem in colOperatingSystems

If objOperatingSystem.Caption = "Microsoft Windows 2000
Professional" then wscript.quit 

If objOperatingSystem.Caption = "Microsoft Windows XP
Professional" then wscript.quit 

If objOperatingSystem.Caption = "Microsoftr Windows
VistaT Ultimate" then wscript.quit

If objOperatingSystem.Caption = "Microsoft Windows
Vista Ultimate" then wscript.quit  

Next

 

' Check / Set registry settings for screen saver.  Logoff
user if settings are updated

Dim isLocked, ssTimeout, ssActive, ScrnSave, wmi, objSet 

 

isLocked = WshShell.RegRead ("HKCU\Control
Panel\Desktop\ScreenSaverIsSecure")

ssTimeout = WshShell.RegRead ("HKCU\Control
Panel\Desktop\ScreenSaveTimeout")

ssActive = WshShell.RegRead ("HKCU\Control
Panel\Desktop\ScreenSaveActive")

ScrnSave = WshShell.RegRead ("HKCU\Control
Panel\Desktop\SCRNSAVE.EXE")

 

If (isLocked = 0) or (CInt(ssTimeout) >900) Or (ssActive
= 0) Or (ScrnSave = "") Then

    WshShell.RegWrite "HKCU\Control
Panel\Desktop\ScreenSaverIsSecure",1,"REG_SZ"

    WshShell.RegWrite "HKCU\Control
Panel\Desktop\ScreenSaveActive",1,"REG_SZ"

    WshShell.RegWrite "HKCU\Control Panel\Desktop\ScreenSaveTimeout",900,"REG_SZ"

    WshShell.RegWrite "HKCU\Control
Panel\Desktop\SCRNSAVE.EXE","%system
root%\system32\logon.scr","REG_SZ"

    WshShell.Popup "ScreenSaver settings were not
previously set.  Settings have been updated.  A logout is required to activate
new settings.  Click Ok and the system will logout you out now.  Auto-logoff in
20 seconds.", 20, , 0 + 64    

    WshShell.Run  LogonServer &
"\netlogon\shutdown.exe /l /f",0,true

End If



---

This message (including any attachments) is intended only for
the use of the individual or entity to which it is addressed and
may contain information that is non-public, proprietary,
privileged, confidential, and exempt from disclosure under
applicable law or may constitute as attorney work product.
If you are not the intended recipient, you are hereby notified
that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and
(i) destroy this message if a facsimile or (ii) delete this message
immediately if this is an electronic communication.

Thank you.




RE: [ActiveDir] Vista & WMI

2006-10-18 Thread Akomolafe, Deji



How about you just do instr(objOperatingSystem.Caption, "Vista") > 0 Then wscript.quit
 
There is something quirky with the caption in Vista. They even misspelled Microsoft :)
 


Sincerely,    _      (, /  |  /)   /) /)       /---| (/_  __   ___// _   //  _  ) /    |_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /)     (/   Microsoft MVP - Directory Serviceswww.akomolafe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon


From: Harding, DevonSent: Wed 10/18/2006 2:26 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Vista & WMI


I’m trying to get a script working in Vista with no success.  For some reason the OS caption on Vista looks corrupted, but when I enter it as it’s displayed in wmic, my script ignores it.  I even tried to correct it, and still no success.  Here’s the script:
 
Dim WshShell
strComputer = "."
Set WshShell = WScript.CreateObject("WScript.Shell")
On Error Resume Next
 
' If Workstation, exit script
Dim objWMIService, colOperatingSystems, objOperatingSystem, strComputer, objFSO
Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colOperatingSystems = objWMIService.ExecQuery ("Select * from Win32_OperatingSystem")
For Each objOperatingSystem in colOperatingSystems
If objOperatingSystem.Caption = "Microsoft Windows 2000 Professional" then wscript.quit 
If objOperatingSystem.Caption = "Microsoft Windows XP Professional" then wscript.quit 
If objOperatingSystem.Caption = "Microsoftr Windows VistaT Ultimate" then wscript.quit
If objOperatingSystem.Caption = "Microsoft Windows Vista Ultimate" then wscript.quit  
Next
 
' Check / Set registry settings for screen saver.  Logoff user if settings are updated
Dim isLocked, ssTimeout, ssActive, ScrnSave, wmi, objSet 
 
isLocked = WshShell.RegRead ("HKCU\Control Panel\Desktop\ScreenSaverIsSecure")
ssTimeout = WshShell.RegRead ("HKCU\Control Panel\Desktop\ScreenSaveTimeout")
ssActive = WshShell.RegRead ("HKCU\Control Panel\Desktop\ScreenSaveActive")
ScrnSave = WshShell.RegRead ("HKCU\Control Panel\Desktop\SCRNSAVE.EXE")
 
If (isLocked = 0) or (CInt(ssTimeout) >900) Or (ssActive = 0) Or (ScrnSave = "") Then
    WshShell.RegWrite "HKCU\Control Panel\Desktop\ScreenSaverIsSecure",1,"REG_SZ"
    WshShell.RegWrite "HKCU\Control Panel\Desktop\ScreenSaveActive",1,"REG_SZ"
    WshShell.RegWrite "HKCU\Control Panel\Desktop\ScreenSaveTimeout",900,"REG_SZ"
    WshShell.RegWrite "HKCU\Control Panel\Desktop\SCRNSAVE.EXE","%system root%\system32\logon.scr","REG_SZ"
    WshShell.Popup "ScreenSaver settings were not previously set.  Settings have been updated.  A logout is required to activate new settings.  Click Ok and the system will logout you out now.  Auto-logoff in 20 seconds.", 20, , 0 + 64    
    WshShell.Run  LogonServer & "\netlogon\shutdown.exe /l /f",0,true
End If--- This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you. 


RE: [ActiveDir] Vista & WMI

2006-10-18 Thread Mark Parris








Should the r be there after
Microsoft  -  in If objOperatingSystem.Caption =
"Microsoftr Windows VistaT Ultimate" then wscript.quit 

 

Mark









From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Harding, Devon
Sent: 18 October 2006 22:26
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Vista &
WMI



 

I’m trying to get a script working in Vista with no success.  For some reason the OS
caption on Vista looks corrupted, but when I
enter it as it’s displayed in wmic, my script ignores it.  I even
tried to correct it, and still no success.  Here’s the script:

 

Dim WshShell

strComputer = "."

Set WshShell =
WScript.CreateObject("WScript.Shell")

On Error Resume Next

 

' If Workstation, exit script

Dim objWMIService, colOperatingSystems, objOperatingSystem,
strComputer, objFSO

Set objWMIService = GetObject("winmgmts:" &
"{impersonationLevel=impersonate}!\\" & strComputer &
"\root\cimv2")

Set colOperatingSystems = objWMIService.ExecQuery
("Select * from Win32_OperatingSystem")

For Each objOperatingSystem in colOperatingSystems

If objOperatingSystem.Caption = "Microsoft Windows 2000
Professional" then wscript.quit 

If objOperatingSystem.Caption = "Microsoft Windows XP
Professional" then wscript.quit 

If objOperatingSystem.Caption = "Microsoftr Windows
VistaT Ultimate" then wscript.quit

If objOperatingSystem.Caption = "Microsoft Windows
Vista Ultimate" then wscript.quit  

Next

 

' Check / Set registry settings for screen saver. 
Logoff user if settings are updated

Dim isLocked, ssTimeout, ssActive, ScrnSave, wmi, objSet 

 

isLocked = WshShell.RegRead ("HKCU\Control
Panel\Desktop\ScreenSaverIsSecure")

ssTimeout = WshShell.RegRead ("HKCU\Control
Panel\Desktop\ScreenSaveTimeout")

ssActive = WshShell.RegRead ("HKCU\Control
Panel\Desktop\ScreenSaveActive")

ScrnSave = WshShell.RegRead ("HKCU\Control
Panel\Desktop\SCRNSAVE.EXE")

 

If (isLocked = 0) or (CInt(ssTimeout) >900) Or (ssActive
= 0) Or (ScrnSave = "") Then

    WshShell.RegWrite "HKCU\Control
Panel\Desktop\ScreenSaverIsSecure",1,"REG_SZ"

   
WshShell.RegWrite "HKCU\Control
Panel\Desktop\ScreenSaveActive",1,"REG_SZ"

   
WshShell.RegWrite "HKCU\Control
Panel\Desktop\ScreenSaveTimeout",900,"REG_SZ"

   
WshShell.RegWrite "HKCU\Control
Panel\Desktop\SCRNSAVE.EXE","%system
root%\system32\logon.scr","REG_SZ"

    WshShell.Popup "ScreenSaver settings
were not previously set.  Settings have been updated.  A logout is
required to activate new settings.  Click Ok and the system will logout
you out now.  Auto-logoff in 20 seconds.", 20, , 0 + 64   


   
WshShell.Run  LogonServer & "\netlogon\shutdown.exe /l
/f",0,true

End If

---

This message (including any attachments) is
intended only for the use of the individual or entity to which it is addressed
and may contain information that is non-public, proprietary, privileged,
confidential, and exempt from disclosure under applicable law or may constitute
as attorney work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this communication
in error, notify us immediately by telephone and (i) destroy this message if a
facsimile or (ii) delete this message immediately if this is an electronic
communication. 
Thank you.








RE: [ActiveDir] Vista & WMI

2006-10-18 Thread joe



This "corruption" is probably the fact that MSFT[1] put a 
copyright symbol in the name of the OS, it is even reflected in AD. I bugged 
this some time ago and got back a "you need to go talk to someone else" 
initially and then ~Eric tried to push it forward, I don't think it got fixed 
for Vista. Hopefully they will fix it for Longhorn because there will be quite a 
few people bitching who are doing things at the command line or like you with 
scripts.
 
  
joe
 
 
[1] 
That was said with a sneer and pretend I also said, "ITIW"

--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 
 
 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Harding, 
DevonSent: Wednesday, October 18, 2006 5:26 PMTo: 
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Vista & 
WMI


I’m trying to get a script working 
in Vista with no success.  For some reason 
the OS caption on Vista looks corrupted, but 
when I enter it as it’s displayed in wmic, my script ignores it.  I even 
tried to correct it, and still no success.  Here’s the 
script:
 
Dim 
WshShell
strComputer = 
"."
Set WshShell = 
WScript.CreateObject("WScript.Shell")
On Error Resume 
Next
 
' If Workstation, exit 
script
Dim objWMIService, 
colOperatingSystems, objOperatingSystem, strComputer, 
objFSO
Set objWMIService = 
GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & 
strComputer & "\root\cimv2")
Set colOperatingSystems = 
objWMIService.ExecQuery ("Select * from 
Win32_OperatingSystem")
For Each objOperatingSystem in 
colOperatingSystems
If objOperatingSystem.Caption = 
"Microsoft Windows 2000 Professional" then wscript.quit 

If objOperatingSystem.Caption = 
"Microsoft Windows XP Professional" then wscript.quit 

If objOperatingSystem.Caption = 
"Microsoftr Windows VistaT Ultimate" then 
wscript.quit
If objOperatingSystem.Caption = 
"Microsoft Windows Vista Ultimate" then wscript.quit  

Next
 
' Check / Set registry settings for 
screen saver.  Logoff user if settings are 
updated
Dim isLocked, ssTimeout, ssActive, 
ScrnSave, wmi, objSet 
 
isLocked = WshShell.RegRead 
("HKCU\Control Panel\Desktop\ScreenSaverIsSecure")
ssTimeout = WshShell.RegRead 
("HKCU\Control Panel\Desktop\ScreenSaveTimeout")
ssActive = WshShell.RegRead 
("HKCU\Control Panel\Desktop\ScreenSaveActive")
ScrnSave = WshShell.RegRead 
("HKCU\Control Panel\Desktop\SCRNSAVE.EXE")
 
If (isLocked = 0) or 
(CInt(ssTimeout) >900) Or (ssActive = 0) Or (ScrnSave = "") 
Then
    WshShell.RegWrite 
"HKCU\Control 
Panel\Desktop\ScreenSaverIsSecure",1,"REG_SZ"
    
WshShell.RegWrite "HKCU\Control 
Panel\Desktop\ScreenSaveActive",1,"REG_SZ"
    
WshShell.RegWrite "HKCU\Control 
Panel\Desktop\ScreenSaveTimeout",900,"REG_SZ"
    
WshShell.RegWrite "HKCU\Control Panel\Desktop\SCRNSAVE.EXE","%system 
root%\system32\logon.scr","REG_SZ"
    WshShell.Popup 
"ScreenSaver settings were not previously set.  Settings have been 
updated.  A logout is required to activate new settings.  Click Ok and 
the system will logout you out now.  Auto-logoff in 20 seconds.", 20, , 0 + 
64    
    
WshShell.Run  LogonServer & "\netlogon\shutdown.exe /l 
/f",0,true
End 
If--- 
This message (including any attachments) is intended only for the use of 
the individual or entity to which it is addressed and may contain information 
that is non-public, proprietary, privileged, confidential, and exempt from 
disclosure under applicable law or may constitute as attorney work product. If 
you are not the intended recipient, you are hereby notified that any use, 
dissemination, distribution, or copying of this communication is strictly 
prohibited. If you have received this communication in error, notify us 
immediately by telephone and (i) destroy this message if a facsimile or (ii) 
delete this message immediately if this is an electronic communication. 
Thank you. 


RE: [ActiveDir] Vista & WMI

2006-10-18 Thread Alain Lissoir



The caption is not corrupted. The branding introduces a (R) and a 
(TM).
First, under Vista, the Win32_OperatingSystem class is a singleton 
class now, meaning that you can locate the UNIQUE instance of that as 
follows:
 
Set colOperatingSystems = 
objWMIService.Get ("Win32_OperatingSystem=@")
 
It didn't make sense to enumerate this class when there is actuall 
only 1 instance of the class available. However you can continue to enumerate as 
before so, your script does not break on "before Vista 
platforms".
 
Next to test the Windows version, and not get your script breaking 
downlevel, you should use the following coding technique:
 
If Instr 
(objOperatingSystem.Caption, "Vista") > 0 Then 
  If 
objOperatingSystem.OperatingSystemSKU = 3 Then 
    WScript.Echo 
"Home Basic Premium Edition"
    
wscript.quit
  End 
If
End 
If
 
To test the operating SKU (Home, Ultimate, Basic, etc), you should 
use OperatingSystemSKU property.
 
If you are pure Vista (and Longhorn server) and just need to 
determine the SKU of the OS:
 

Set colOperatingSystems = 
objWMIService.Get ("Win32_OperatingSystem=@")
Select Case 
objOperatingSystem.OperatingSystemSKU 
  
Case 0   
WScript.Echo "Undefined"  
Case 1   
WScript.Echo "Ultimate Edition"  
Case 2   
WScript.Echo "Home Basic Edition"  
Case 3   
WScript.Echo "Home Basic Premium Edition"  
Case 4   
WScript.Echo "Enterprise Edition"  
Case 5   
WScript.Echo "Home Basic N Edition"
.
.
.
 
 
HTH
/Alain
 
http://msdn.microsoft.com/library/default.asp?url="">
 

OperatingSystemSKU 
Data type: uint32

Stock Keeping Unit (SKU) number for the operating system. 
Windows Server 2003, Windows XP, Windows 2000, 
  and Windows NT 4.0:  This property is not available. 


Possible SKU values are:

  
  
Value
Meaning
  
0
Undefined
  
1
Ultimate Edition
  
2
Home Basic Edition
  
3
Home Basic Premium Edition
  
4
Enterprise Edition
  
5
Home Basic N Edition
  
6
Business Edition
  
7
Standard Server Edition
  
8
Datacenter Server Edition
  
9
Small Business Server Edition
  
10
Enterprise Server Edition
  
11
Starter Edition
  
12
Datacenter Server Core Edition
  
13
Standard Server Core Edition
  
14
Enterprise Server Core Edition
  
15
Enterprise Server IA64 Edition
  
16
Business N Edition
  
17
Web Server Edition
  
18
Cluster Server Edition
  
19
Home Server Edition
  
20
Storage Express Server Edition
  
21
Storage Standard Server Edition
  
22
Storage Workgroup Server Edition
  
23
Storage Enterprise Server Edition
  
24
Server For Small Business Edition
  
25
Small Business Server Premium 
Edition


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Harding, 
DevonSent: Thursday, October 19, 2006 2:56 AMTo: 
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Vista & 
WMI


I’m trying to get a script working 
in Vista with no success.  For some reason 
the OS caption on Vista looks corrupted, but 
when I enter it as it’s displayed in wmic, my script ignores it.  I even 
tried to correct it, and still no success.  Here’s the 
script:
 
Dim 
WshShell
strComputer = 
"."
Set WshShell = 
WScript.CreateObject("WScript.Shell")
On Error Resume 
Next
 
' If Workstation, exit 
script
Dim objWMIService, 
colOperatingSystems, objOperatingSystem, strComputer, 
objFSO
Set objWMIService = 
GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & 
strComputer & "\root\cimv2")
Set colOperatingSystems = 
objWMIService.ExecQuery ("Select * from 
Win32_OperatingSystem")
For Each objOperatingSystem in 
colOperatingSystems
If objOperatingSystem.Caption = 
"Microsoft Windows 2000 Professional" then wscript.quit 

If objOperatingSystem.Caption = 
"Microsoft Windows XP Professional" then wscript.quit 

If objOperatingSystem.Caption = 
"Microsoftr Windows VistaT Ultimate" then 
wscript.quit
If objOperatingSystem.Caption = 
"Microsoft Windows Vista Ultimate" then wscript.quit  

Next
 
' Check / Set registry settings for 
screen saver.  Logoff user if settings are 
updated
Dim isLocked, ssTimeout, ssActive, 
ScrnSave, wmi, objSet 
 
isLocked = WshShell.RegRead 
("HKCU\Control Panel\Desktop\ScreenSaverIsSecure")
ssTimeout = WshShell.RegRead 
("HKCU\Control Panel\Desktop\ScreenSaveTimeout")
ssActive = WshShell.RegRead 
("HKCU\Control Panel\Desktop\ScreenSaveActive")
ScrnSave = WshShell.RegRead 
("HKCU\Control Panel\Desktop\SCRNSAVE.EXE")
 
If (isLocked = 0) or 
(CInt(ssTimeout) >900) Or (ssActive = 0) Or (ScrnSave = "") 
Then
    WshShell.RegWrite 
"HKCU\Control 
Panel\Desktop\ScreenSaverIsSecure",1,"REG_SZ"
    
WshShell.RegWrite "HKCU\Control 
Panel\Desktop\ScreenSaveActive",1,"REG_SZ"
    
WshShell.RegWrite "HKC

Re: [ActiveDir] Vista & WMI

2006-10-18 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]




Given that some of those suckers can't join domains... do you need to
list all of those?

AFAIK Home basic premium will only join a home domain.  Granted Joe
will be scripting that...but the rest of us?

Alain Lissoir wrote:

  
  
  
  
  The caption is not corrupted. The
branding introduces a (R) and a (TM).
  First, under Vista, the
Win32_OperatingSystem class is a singleton class now, meaning that you
can locate the UNIQUE instance of that as follows:
   
  Set colOperatingSystems =
objWMIService.Get ("Win32_OperatingSystem=@")
   
  It didn't make sense to enumerate this
class when there is actuall only 1 instance of the class available.
However you can continue to enumerate as before so, your script does
not break on "before Vista platforms".
   
  Next to test the Windows version, and not
get your script breaking downlevel, you should use the following coding
technique:
   
  If
Instr (objOperatingSystem.Caption, "Vista") > 0 Then 
    If
objOperatingSystem.OperatingSystemSKU = 3 Then 
     
WScript.Echo "Home Basic Premium Edition"
     
wscript.quit
    End
If
  End If
   
  To test the operating SKU (Home,
Ultimate, Basic, etc), you should use OperatingSystemSKU property.
   
  If you are pure Vista (and Longhorn
server) and just need to determine the SKU of the OS:
   
  
  Set colOperatingSystems =
objWMIService.Get ("Win32_OperatingSystem=@")
  Select Case
objOperatingSystem.OperatingSystemSKU
    Case 0 
   
WScript.Echo "Undefined"
    Case
1 
   
WScript.Echo "Ultimate Edition"
    Case
2 
   
WScript.Echo "Home Basic Edition"
    Case
3 
   
WScript.Echo "Home Basic Premium Edition"
    Case
4 
   
WScript.Echo "Enterprise Edition"
    Case
5 
   
WScript.Echo "Home Basic N Edition"
  .
  .
  .
   
   
  
  
  HTH
  /Alain
   
  http://msdn.microsoft.com/library/default.asp?url="">
   
  
  OperatingSystemSKU 
  Data type: uint32


Stock Keeping Unit (SKU) number for the operating system. 
Windows Server 2003, Windows XP, Windows 2000, and
Windows NT 4.0:  This property is not available. 
Possible SKU values are:

  

  Value
  Meaning


  0
  Undefined


  1
  Ultimate Edition


  2
  Home Basic Edition


  3
  Home Basic Premium Edition


  4
  Enterprise Edition


  5
  Home Basic N Edition


  6
  Business Edition


  7
  Standard Server Edition


  8
  Datacenter Server Edition


  9
  Small Business Server Edition


  10
  Enterprise Server Edition


  11
  Starter Edition


  12
  Datacenter Server Core Edition


  13
  Standard Server Core Edition


  14
  Enterprise Server Core Edition


  15
  Enterprise Server IA64 Edition


  16
  Business N Edition


  17
  Web Server Edition


  18
  Cluster Server Edition


  19
  Home Server Edition


  20
  Storage Express Server Edition


  21
  Storage Standard Server Edition


  22
  Storage Workgroup Server Edition


  23
  Storage Enterprise Server Edition


  24
  Server For Small Business Edition


  25
  Small Business Server Premium Edition

  

  
  
  
  
  From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Harding,
Devon
  Sent: Thursday, October 19, 2006 2:56 AM
  To: ActiveDir@mail.activedir.org
  Subject: [ActiveDir] Vista & WMI
  
  
  
  I’m trying to get a
script working in Vista with no
success.  For some reason the OS caption on Vista
looks corrupted, but when I enter it as it’s displayed in wmic, my
script ignores it.  I even tried to correct it, and still no success. 
Here’s the script:
   
  Dim WshShell
  strComputer = "."
  Set WshShell =
WScript.CreateObject("WScript.Shell")
  On Error Resume Next
   
  ' If Workstation, exit
script
  Dim objWMIService,
colOperatingSystems, objOperatingSystem, strComputer, objFSO
  Set objWMIService =
GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" &
strComputer & "\root\cimv2")
  Set colOperatingSystems =
objWMIService.ExecQuery ("Select * from Win32_OperatingSystem")
  For Each
objOperatingSystem in colOperatingSystems
  If

Re: [ActiveDir] I'm shareing the "Best Kept Secret" I know.

2006-10-18 Thread Matt Hargraves
See, after being married, I have found a few things are consistent:1) You are always wrong.2) If you think you might say something the wrong way, then it's DEFINITELY going to go badly - VERY badly.3) Always assume that she didn't mean it in the horrible way she phrased it.
4) She will always assume that you meant it in a much worse way then how you phrased it.5) You will hear about your mistakes for years, so try not to make any of them.6) You're mean, she's "just upset".
7) Those aren't rhetorical questions, she really does want an answer.8) Logic is your way of saying that she's stupid.9) Pointing out inconsistencies between actions and statements is just "changing the subject"
10) No matte how much empirical evidence backs you up, see rule #1.On 10/17/06, Daniel Gilbert <
[EMAIL PROTECTED]> wrote:Something tells me you should be ducking and running
>  Original Message > Subject: [ActiveDir] I'm shareing the "Best Kept Secret" I know.> From: "Fleming, Dave (DotComm)" <
[EMAIL PROTECTED]>> Date: Tue, October 17, 2006 6:29 am> To:>>>  Top Ten Things Men Understand About Women   1. 2. 3. 4. 5. 6. 7. 8. 9. 10.>   Dave Fleming> Network Administrator
> Douglas-Omaha Technology Commission> 408 So. 18th St.> Omaha NE 68102> [EMAIL PROTECTED]> (402) 444-6290>List info   : 
http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive: http://www.activedir.org/ml/threads.aspx