RE: [ActiveDir] ftp access

2007-01-24 Thread Antonio Aranda
It users IIS 6 on windows 2003 and it has all patches.

 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Wednesday, January 24, 2007 1:16 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

When I say it sounds like a bug, I'm not thinking it's a virus type of bug.
More of a software bug.  That's why I asked what version of IIS it is; it's
possible that there's a known issue and a fix available. 

On 1/24/07, Antonio Aranda <[EMAIL PROTECTED]> wrote:

The server virus app is up to date and I just ran a scan and there are no
infected files.  Other then this issue the server seems to be work great.
Once people change there password there is no issue.

 

Antonio

 

  _  

From: [EMAIL PROTECTED] [mailto:
<mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Tuesday, January 23, 2007 8:21 PM


To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

I do.  

 

That sounds a lot like a bug to me.  What version of IIS? 

 

On 1/23/07, Antonio Aranda <[EMAIL PROTECTED]> wrote: 

If you mean the command-line, yes. 

 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Tuesday, January 23, 2007 2:56 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

do you get same results in Microsoft's client? 

On 1/23/07, Antonio Aranda < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> >
wrote: 

I'm using IIS and I used ie and smartftp to test.  I attached the log that
shows when it was working and when it stopped working and then when it
started working right after the user changed the password.  It seems to stop
working not when their password expires but when they start getting the
warning that their password is going to expire.  It's happened to three
different users and the fix has been the same.  There is no anonymous access
to anything. 

 

Thanks for your help

 

Antonio

  _  

From: [EMAIL PROTECTED] [mailto:
<mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Monday, January 22, 2007 7:40 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

Can you provide some more details?  

What are they using to access their shares? (client?)

What are you using to provide ftp access? (IIS?)

How did you prove that this is the case?  Log files? Trial and error? 

Anything else that's relevant? 

 

Al

 

On 1/22/07, Antonio Aranda < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> >
wrote: 

I've setup ftp access to users' network drives so they have access to them
remotely.  I recently notice some thing very peculiar.  Their ftp access
stops working when they start getting warnings that their password is going
to expire.  I don't know if this just a coincidence but once they change
their password it starts working again.  If any one knows anything about
this, I would appreciate any advice. 

 

Antonio Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 

 

 

 

 



RE: [ActiveDir] ftp access

2007-01-24 Thread Antonio Aranda
The server virus app is up to date and I just ran a scan and there are no
infected files.  Other then this issue the server seems to be work great.
Once people change there password there is no issue.

 

Antonio

 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Tuesday, January 23, 2007 8:21 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

I do.  

 

That sounds a lot like a bug to me.  What version of IIS? 

 

On 1/23/07, Antonio Aranda <[EMAIL PROTECTED]> wrote: 

If you mean the command-line, yes. 

 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Tuesday, January 23, 2007 2:56 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

do you get same results in Microsoft's client? 



On 1/23/07, Antonio Aranda < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> >
wrote: 

I'm using IIS and I used ie and smartftp to test.  I attached the log that
shows when it was working and when it stopped working and then when it
started working right after the user changed the password.  It seems to stop
working not when their password expires but when they start getting the
warning that their password is going to expire.  It's happened to three
different users and the fix has been the same.  There is no anonymous access
to anything. 

 

Thanks for your help

 

Antonio

  _  

From: [EMAIL PROTECTED] [mailto:
<mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Monday, January 22, 2007 7:40 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

Can you provide some more details?  

What are they using to access their shares? (client?)

What are you using to provide ftp access? (IIS?)

How did you prove that this is the case?  Log files? Trial and error? 

Anything else that's relevant? 

 

Al

 

On 1/22/07, Antonio Aranda < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> >
wrote: 

I've setup ftp access to users' network drives so they have access to them
remotely.  I recently notice some thing very peculiar.  Their ftp access
stops working when they start getting warnings that their password is going
to expire.  I don't know if this just a coincidence but once they change
their password it starts working again.  If any one knows anything about
this, I would appreciate any advice. 

 

Antonio Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 

 

 

 



RE: [ActiveDir] ftp access

2007-01-23 Thread Antonio Aranda
If you mean the command-line, yes. 

 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Tuesday, January 23, 2007 2:56 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

do you get same results in Microsoft's client? 




On 1/23/07, Antonio Aranda <[EMAIL PROTECTED]> wrote: 

I'm using IIS and I used ie and smartftp to test.  I attached the log that
shows when it was working and when it stopped working and then when it
started working right after the user changed the password.  It seems to stop
working not when their password expires but when they start getting the
warning that their password is going to expire.  It's happened to three
different users and the fix has been the same.  There is no anonymous access
to anything.

 

Thanks for your help

 

Antonio

  _  

From: [EMAIL PROTECTED] [mailto:
<mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Monday, January 22, 2007 7:40 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

Can you provide some more details?  

What are they using to access their shares? (client?)

What are you using to provide ftp access? (IIS?)

How did you prove that this is the case?  Log files? Trial and error? 

Anything else that's relevant? 

 

Al

 

On 1/22/07, Antonio Aranda <[EMAIL PROTECTED]> wrote: 

I've setup ftp access to users' network drives so they have access to them
remotely.  I recently notice some thing very peculiar.  Their ftp access
stops working when they start getting warnings that their password is going
to expire.  I don't know if this just a coincidence but once they change
their password it starts working again.  If any one knows anything about
this, I would appreciate any advice. 

 

Antonio Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 

 

 



RE: [ActiveDir] ftp access

2007-01-23 Thread Antonio Aranda
I'm using IIS and I used ie and smartftp to test.  I attached the log that
shows when it was working and when it stopped working and then when it
started working right after the user changed the password.  It seems to stop
working not when their password expires but when they start getting the
warning that their password is going to expire.  It's happened to three
different users and the fix has been the same.  There is no anonymous access
to anything.

 

Thanks for your help

 

Antonio

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Monday, January 22, 2007 7:40 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] ftp access

 

Can you provide some more details?  

What are they using to access their shares? (client?)

What are you using to provide ftp access? (IIS?)

How did you prove that this is the case?  Log files? Trial and error? 

Anything else that's relevant? 

 

Al

 

On 1/22/07, Antonio Aranda <[EMAIL PROTECTED]> wrote: 

I've setup ftp access to users' network drives so they have access to them
remotely.  I recently notice some thing very peculiar.  Their ftp access
stops working when they start getting warnings that their password is going
to expire.  I don't know if this just a coincidence but once they change
their password it starts working again.  If any one knows anything about
this, I would appreciate any advice. 

 

Antonio Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 

 



[ActiveDir] ftp access

2007-01-22 Thread Antonio Aranda
I've setup ftp access to users' network drives so they have access to them
remotely.  I recently notice some thing very peculiar.  Their ftp access
stops working when they start getting warnings that their password is going
to expire.  I don't know if this just a coincidence but once they change
their password it starts working again.  If any one knows anything about
this, I would appreciate any advice.

 

Antonio Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 



[ActiveDir] IIS install

2007-01-11 Thread Antonio Aranda
I'm having a hard time installing the IIS.  It said that it can copy files.
Other then bad CD what could be keeping it from installing?  Is there a GP
setting that I'm not aware of that will keep the IIS from installing?  

Antonio 


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx


[ActiveDir] AD with mixed DC

2006-12-06 Thread Antonio Aranda
I have an AD domain with 2 2k domain controllers.  I want to add a thirds
domain controller that has a 2k3 os.  I know there is something that needs
to be enabled or disable before having an AD with mixed DC.  What do I need
to do before adding the third DC?

 

Thanks

 

Antonio Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 



RE: [ActiveDir] quota issues

2006-10-26 Thread Antonio Aranda








There is on pst file in there but I’ve
had that problem before.  What measures did you take to avoid that.

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Albert Duro
Sent: Thursday, October 26, 2006
9:44 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] quota
issues



 



by any chance, is it possible that there's a live PST in there, or an
attempt to place it there?  Users can do that on their own after all,
unless measures are taken against it.







- Original Message - 





From: Antonio Aranda 





To: ActiveDir@mail.activedir.org






Sent: Wednesday, October
25, 2006 9:17 AM





Subject: RE: [ActiveDir]
quota issues





 



I’m sorry but I don’t know
what you mean by “files having streams”.   Can you
explain that attribute to me?

 









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mike Guest
Sent: Wednesday, October 25, 2006
10:06 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 

Just a couple of thoughts

 

Have you tried searching
the disk for other files marked with him as owner – perhaps from a legacy
share which no longer exists?

 

Alternatively, is it
possible that one of the files he’s copying has streams? I understand the
space used by a stream does not get added to the disk space that windows
reports, but perhaps it affects the quota?

 

 



Mike Guest
IT Solutions
HML
Padiham DDI: +44 (0)1282 682550 
Internal Extension: (61) 2550











From: Antonio Aranda [mailto:[EMAIL PROTECTED] 
Sent: 25 October 2006 15:33
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 

There seems to be mostly small files; 5 to
7 K.

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Parag Nagwekar
Sent: Tuesday, October 24, 2006
11:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 

I guess he is probably trying to write or
copy file which is quite big, may be more than 200Mb in size. Please tell him
to write smaller file on the file system where he already using 300MB. 

 

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antonio
 Aranda
Sent: Tuesday, October 24, 2006
12:55 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] quota issues



 

I’m having weird quota issues.  I have a
partition that has the default quota set to a 500 MB.  There are a good
hundred users that wring to that partition but only one is having this issue;
he keeps running out of quota even though he has only written about 300 MB to
his subdirectory.  He can only write to that subdirectory so why is he
running out of space?

 

Antonio
 Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 



*
This email is intended only for the addressee named above. As this email may
contain confidential or privileged information, if you are not the named
addressee or receive this message in error, please notify us immediately,
delete it and do not make use of or copy it.

This message is protected by copyright. HML accepts no responsibility for
viruses found in this message or any file attachment.

Homeloan Management Limited
Registered in England
No. 2214839
1 Providence Place,
Skipton, North Yorkshire BD23 2HL

**










RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda








I’m sorry but I don’t know
what you mean by “files having streams”.   Can you explain
that attribute to me?

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Guest
Sent: Wednesday, October 25, 2006
10:06 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 

Just a couple of thoughts

 

Have you tried searching
the disk for other files marked with him as owner – perhaps from a legacy
share which no longer exists?

 

Alternatively, is it
possible that one of the files he’s copying has streams? I understand the
space used by a stream does not get added to the disk space that windows
reports, but perhaps it affects the quota?

 

 



Mike Guest
IT Solutions
HML
Padiham DDI: +44 (0)1282 682550 
Internal Extension: (61) 2550











From: Antonio Aranda [mailto:[EMAIL PROTECTED] 
Sent: 25 October 2006 15:33
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 

There seems to be mostly small files; 5 to
7 K.

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Parag Nagwekar
Sent: Tuesday, October 24, 2006
11:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 

I guess he is probably trying to write or
copy file which is quite big, may be more than 200Mb in size. Please tell him
to write smaller file on the file system where he already using 300MB. 

 

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antonio
 Aranda
Sent: Tuesday, October 24, 2006
12:55 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] quota issues



 

I’m having weird quota issues.  I have a
partition that has the default quota set to a 500 MB.  There are a good
hundred users that wring to that partition but only one is having this issue;
he keeps running out of quota even though he has only written about 300 MB to
his subdirectory.  He can only write to that subdirectory so why is he
running out of space?

 

Antonio
 Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 



*
This email is intended only for the addressee named above. As this email may
contain confidential or privileged information, if you are not the named
addressee or receive this message in error, please notify us immediately,
delete it and do not make use of or copy it.

This message is protected by copyright. HML accepts no responsibility for
viruses found in this message or any file attachment.

Homeloan Management Limited
Registered in England
No. 2214839
1 Providence Place,
Skipton, North Yorkshire BD23 2HL

**








RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda
No profiles, all users have one subdirectory they have access to and that’s 
all.  Its there personal backup network drive, it gets mapped via their Ad 
account settings "Home folder".  They can not write or even browse any where 
else other then their own subdirectory.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
Sent: Wednesday, October 25, 2006 10:15 AM
To: ActiveDir.org
Subject: Re: [ActiveDir] quota issues

Do you store the users profile in this partition?


Regards,

Mark Parris

Base IT Ltd
Active Directory Consultancy
Tel +44(0)7801 690596


-Original Message-----
From: "Antonio Aranda" <[EMAIL PROTECTED]>
Date: Tue, 24 Oct 2006 14:55:12 
To:
Subject: [ActiveDir] quota issues

I’m having weird quota issues.  I have a partition that has the default quota 
set to a 500 MB.  There are a good hundred users that wring to that partition 
but only one is having this issue; he keeps running out of quota even though he 
has only written about 300 MB to his subdirectory.  He can only write to that 
subdirectory so why is he running out of space?
 
 
 
Antonio Aranda
 
Network Analyst
 
UT-Permian Basin
 
432-552-2413 
 
 
 [EMAIL PROTECTED]  šŠV«r¯yÊ&ý§-Š÷Š¹šŠVœ¶+Þv*è


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda








There seems to be mostly small files; 5 to
7 K.

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Parag Nagwekar
Sent: Tuesday, October 24, 2006
11:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 

I guess he is probably trying to write or
copy file which is quite big, may be more than 200Mb in size. Please tell him
to write smaller file on the file system where he already using 300MB. 

 

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antonio
 Aranda
Sent: Tuesday, October 24, 2006
12:55 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] quota issues



 

I’m having weird quota issues.  I have a
partition that has the default quota set to a 500 MB.  There are a good
hundred users that wring to that partition but only one is having this issue;
he keeps running out of quota even though he has only written about 300 MB to
his subdirectory.  He can only write to that subdirectory so why is he
running out of space?

 

Antonio
 Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 








RE: [ActiveDir] quota issues

2006-10-25 Thread Antonio Aranda








No compressed files that I could find.  It
seems to be mostly images; htm, gif and jpg.  I think there are PowerPoint’s
converted to html pages.

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson
Sent: Wednesday, October 25, 2006
12:14 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] quota
issues



 



Does he have a lot of compressed (not
zipped; compressed via NTFS) files in the directory?





 





Laura





 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antonio
 Aranda
Sent: Tuesday, October 24, 2006
3:55 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] quota issues

I’m having weird quota issues.  I have a
partition that has the default quota set to a 500 MB.  There are a good
hundred users that wring to that partition but only one is having this issue;
he keeps running out of quota even though he has only written about 300 MB to
his subdirectory.  He can only write to that subdirectory so why is he
running out of space?

 

Antonio
 Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 










[ActiveDir] quota issues

2006-10-24 Thread Antonio Aranda








I’m having weird quota issues.  I have a
partition that has the default quota set to a 500 MB.  There are a good
hundred users that wring to that partition but only one is having this issue;
he keeps running out of quota even though he has only written about 300 MB to
his subdirectory.  He can only write to that subdirectory so why is he
running out of space?

 

Antonio
 Aranda

Network Analyst

UT-Permian Basin

432-552-2413 

 








[ActiveDir] machine GP load

2006-08-09 Thread Antonio Aranda








I have a few machines that will not load
the machine GP.  I’m pretty sure that it’s an issue with the
workstations but just to cover butt, is there any thing that on the GP or AD
that would prevent the GP from loading?

 

Antonio





Confidentiality Notice: The information contained in this message may be legally privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error please notify the author immediately by replying to this message and deleting the original message. Thank you.



[ActiveDir] creating directories and editing the security tab.

2006-08-08 Thread Antonio Aranda








I wrote a script that will create user
account, join them to security groups and create them a directory the automatically
map at logon.  It works great but for one thing.  I need to edit the
directory’s security tab so that only the user and the administrator have
access to the directory.  Can any one send me a sample script that will do
this?

 

Antonio Aranda








[ActiveDir] sample vbs script

2006-06-07 Thread Antonio Aranda












Thanks for all your help.  I have
another idea; let me know if it’s a dumb idea.  Is there a way with
scripting to create a copy of a pre-exiting user?  Just create a copy of
the user, change the names but have identical membership to security groups and
OU and all other attributes.  

 

Thanks

 

Antonio





 








RE: [ActiveDir] sample vbs script

2006-06-07 Thread Antonio Aranda
thanks

 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alain Lissoir
Sent: Tuesday, June 06, 2006 7:25 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] sample vbs script

 

Look at  http://www.lissware.net> http://www.lissware.net, White
Papers section, page 73, Sample 22, line 460 and 462.

 

 459:

 460:objUser.Put "homeDirectory", "\\" & strAccountComputer
& _

 461:"\" & strUserID & "$"

 462:objUser.Put "homeDrive", cHomeDrive

 463:

 

February 2000 (Compaq Active Answers):
 
http://users.skynet.be/alain.lissoir/hp/Part%201%20-%20Understandi
ng%20Microsoft%20WSH%20and%20ADSI%20in%20Windows%202000.pdf> Part 1 -
Understanding the Microsoft WSH and the ADSI in Windows 2000
http://users.skynet.be/alain.lissoir/hp/Part%201%20-%20Understandi
ng%20Microsoft%20WSH%20and%20ADSI%20in%20Windows%202000%20(Scripts%20Kit).zi
p> (Script Kit) 
 
http://users.skynet.be/alain.lissoir/hp/Part%202%20-%20The%20power
ful%20combination%20of%20WSH%20and%20ADSI%20under%20Windows%202000.pdf> Part
2 - The powerful combination of WSH and ADSI under Windows 2000
http://users.skynet.be/alain.lissoir/hp/Part%202%20-%20The%20power
ful%20combination%20of%20WSH%20and%20ADSI%20under%20Windows%202000%20(Script
s%20Kit).zip> (Script Kit) 

 

 

 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Antonio Aranda
Sent: Tuesday, June 06, 2006 5:10 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] sample vbs script

Thanks for the help so far 

 

But does any one know how to add the attribute "Home Folder"?  Not the
"Local Path" but the "Connect:" with letter drive using vbs script?

 

Thanks Again

 

Antonio Aranda

<>

[ActiveDir] sample vbs script

2006-06-06 Thread Antonio Aranda
Thanks for the help so far 

 

But does any one know how to add the attribute "Home Folder"?  Not the
"Local Path" but the "Connect:" with letter drive using vbs script?

 

Thanks Again

 

Antonio Aranda

<>

[ActiveDir] sample vbs script

2006-06-06 Thread Antonio Aranda








Could some one send me a sample vbs script
that creates AD user accounts?  

 

Thanks

 

Antonio








RE: [ActiveDir] exporting list of members of a security group

2006-05-02 Thread Antonio Aranda








It worked, except I didn’t need to
specify the domain and I had to rename the security group so it didn’t
have any spaces.

 

Thank you very much

 

Antonio

 









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of mike kline
Sent: Tuesday, May 02, 2006 3:42
PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] exporting
list of members of a security group



 



net group groupname /domain
> members.txt





 





Use Laura's solution for nested members.  
 





On 5/2/06, Antonio
Aranda <[EMAIL PROTECTED]
> wrote: 

Is there a way to export to text file a list of the members of a
security
group?

Thanks

Antonio 


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ 



 








[ActiveDir] exporting list of members of a security group

2006-05-02 Thread Antonio Aranda
Is there a way to export to text file a list of the members of a security
group?

Thanks

Antonio


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] multiple catalog servers

2006-04-03 Thread Antonio Aranda










Is there a way to have multiple catalog servers? 
I have a setup with multiple DC at multiple locations.  Everything works
ok until the connectivity is lost between locations.  I was told that the issue
is the machines can’t find the catalog server.  Since I only have
one, when connectivity is lost, it’s as if the catalog server is down.  So
the fix is to have multiple catalog servers, I think.  Does any one have
any suggestions?

 

Antonio.










[ActiveDir] export a list of AD and NT4 domain accounts

2006-03-16 Thread Antonio Aranda
Does any one know how to export a list of AD and NT4 domain accounts?

Thanks

Antonio


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] The system administrator has set policies to prev ent this installation

2006-02-22 Thread Antonio Aranda








We don’t use Norton, we use MacAfee.
 The only GP in use is the default GP; these workstations that are getting
this message are in an OU that does not have a GP linked to it.  Other then
being joined to the domain they is nothing different from a stand alone
machine.  And like I said, we get this message even when logged on as
local administrator which the AD GP should not apply.

 

Antonio

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Olivarez, Sergio J Mr
ANOSC/FCBS
Sent: Wednesday, February 22, 2006
12:02 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] The
system administrator has set policies to prev ent this installation



 

If you are trying to
install Symantec NAV 2001 check out this link - http://support.microsoft.com/default.aspx?scid=kb;en-us;322963

 

Have you done an RSOP on
the box to make sure that there is no software restriction policy?

 



Thanks... ... ... ...

Sergio J. Olivarez -
Contractor

GD-NS











From: Antonio Aranda
[mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 22, 2006
10:21 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] The system
administrator has set policies to prevent this installation



 

On some workstations I’ve been
getting this message “The system administrator has set policies to
prevent this installation”.  The problem is that I’m the
system administrator and there are no such policies.  I get this message
even when I’m logged on as local administrator.   Does any one
know what is going on here?

 

Antonio








[ActiveDir] The system administrator has set policies to prevent this installation

2006-02-22 Thread Antonio Aranda








On some workstations I’ve been
getting this message “The system administrator has set policies to
prevent this installation”.  The problem is that I’m the system
administrator and there are no such policies.  I get this message even when
I’m logged on as local administrator.   Does any one know what
is going on here?

 

Antonio








[ActiveDir] DNS issue

2005-12-13 Thread Antonio Aranda








I have a bit of a problem and I’m
hoping some can help me.  The forwarding tab is grayed out.  It won’t
allow me to add an IP for forwarding unresolved queries.  It said that forwarding
is not available because this is a root server.  What does this mean and
how can I change it?  

 

Thanks

 

Antonio








[ActiveDir] AD with mix DC

2005-11-28 Thread Antonio Aranda










Can AD have a mix of OS Domain Controllers? 
I have an AD with windows 2000 DC and I wanted to add another DC with windows
2003 OS.  Will there be any issues?  Will the process be different? 


 

Thanks

 

Antonio 

 










RE: [ActiveDir] Microsoft password notification service

2005-10-20 Thread Antonio Aranda
Inclusion Group Name..: MCOM\Domain Users  Exclusion Group 
Name..:  Keep Alive Interval...: 0 seconds  User Name 
Format..: 3  Queue Warning Level...: 0  Queue Warning 
Interval: 30 minutes  Disabled..: 
False
 
    Total targets: 3
 

Thanks
 
Antonio 
Aranda
 

  
  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of TIROA 
  YANNSent: Wednesday, October 19, 2005 10:41 AMTo: 
  ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Microsoft 
  password notification service 
  Hi,
   
  Can you dump to us the details of the whole 
  commands u type the results ?
   
  See in the app logs for more informations.
  Yann 
  
  

  
  De : 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] De la part de Antonio 
  ArandaEnvoyé : mercredi 19 octobre 2005 
  17:29À : 
  ActiveDir@mail.activedir.orgObjet : [ActiveDir] Microsoft 
  password notification service 
  
  
  While using Microsoft password 
  notification service I notice this problem; when using the “list” command 
  it displays three targets with the same name.  I then 
  attempt to modify, disable or delete those targets; I get the response 
  targets not found.  
   
  Antonio 
  Aranda


RE: [ActiveDir] Microsoft password notification service

2005-10-19 Thread Antonio Aranda
Event Type: Error
Event Source: PCNSSVC
Event Category: Error 
Event ID: 6025
Date:  7/10/2005
Time:  1:08:29 PM
User:  N/A
Computer: POLICE
Description:
Password Change Notification Service received an RPC exception attempting to
deliver a notification.  
Thread ID: 1988 
Tracking ID: e6656f05-0f1a-4fb7-b04c-a3f23deb8114 
User GUID: 0146a5d7-774b-47b8-aeb3-72db14d038ac 
User: MCOM\agnew_s237 
Target: personality 
Delivery Attempts: 1097 
Queued Notifications: 3 
0x0005 - Access is denied.
  
 
could you help me with this error message?
 
thanks
 
Antonio
 
 
 
 -Original Message-
From: TIROA YANN [mailto:[EMAIL PROTECTED] On Behalf Of
TIROA YANN
Sent: Wednesday, October 19, 2005 12:58 PM
To: ActiveDir@mail.activedir.org
Subject: RE : [ActiveDir] Microsoft password notification service 



Hi, seems like a collision problem while created 2 objects with same name
and same DN on differents DCs. So the most recently named objects keeps the
original DN attribute, AD renames the remaining duplicates to a name as
"originalRdn#CNF:objectGuid", where CNF is a tag to denote that the object
was renamed due to a name conflict.
 
In order to resolve this issue u may delete 3 of them, logically, those
which have the CNF tags:êrsonnaly, i will delete all of them and recreate
them with pcnscfg.exe
 
So open ADUC, go to "System" container (in advanced feature mode of ADUC),
find the "Password Change Notification Service" container, u will see all
your targets created. Delete all of them and recreate them again. Wait
before for the end of replication to take place *BEFORE* recreatings
targets.
 
Yann

  _  

De: [EMAIL PROTECTED] de la part de Antonio Aranda
Date: mer. 19/10/2005 18:59
À: ActiveDir@mail.activedir.org
Objet : RE: [ActiveDir] Microsoft password notification service 


Here is what I typed and the responds.

 
 
C:\Program Files\Microsoft Password Change Notification>pcnscfg DELETETARGET
/N:miisdemo
Error deleting the target. The target was not found.
 
C:\Program Files\Microsoft Password Change Notification>pcnscfg
DISABLETARGET /N:miisdemo
Error modifying the target. The target was not found.
 
C:\Program Files\Microsoft Password Change Notification>pcnscfg MODIFYTARGET
/N:miisdemo /a:personality /s:PCNSPER2/PERSONALITY /fi:"domain Users" /f:3
Error modifying the target. The target was not found.
 
C:\Program Files\Microsoft Password Change Notification>pcnscfg list
The service configuration is not set. Defaults will be used by the service.
 
Default Service Configuration
  MaxQueueLength: 0
  MaxQueueAge...: 259200 seconds
  MaxNotificationRetries: 0
  RetryInterval.: 60 seconds
 
Targets
  Target Name...: miisdemo
CNF:71ee789f-c80a-44ea-9353-447b0d578559
  Target GUID...: B79C4341-B3ED-413A-A046-7016E557E982
  Server FQDN or Address: personality
  Service Principal Name: PCNSPER2/PERSONALITY
  Authentication Service: Kerberos
  Inclusion Group Name..: MCOM\Domain Users
  Exclusion Group Name..:
  Keep Alive Interval...: 0 seconds
  User Name Format..: 3
  Queue Warning Level...: 0
  Queue Warning Interval: 30 minutes
  Disabled..: False
 
  Target Name...: miisdemo
CNF:f0b31f2e-0d09-4506-a37a-cd56a0d20d5e
  Target GUID...: FA0D13B1-C03F-461C-90A9-2DDD3B77B063
  Server FQDN or Address: personality.mcom.utpb.edu
  Service Principal Name: PCNSPER1/PERSONALITY.MCOM.UTPB.EDU
  Authentication Service: Kerberos
  Inclusion Group Name..: MCOM\Domain Users
  Exclusion Group Name..:
  Keep Alive Interval...: 0 seconds
  User Name Format..: 3
  Queue Warning Level...: 0
  Queue Warning Interval: 30 minutes
  Disabled..: False
 
  Target Name...: miisdemo
CNF:fbbf4c22-7f86-4494-8fb3-ef5f1f43d990
  Target GUID...: B686780E-5DA2-46C6-BF56-F11EB808368B
  Server FQDN or Address: personality
  Service Principal Name: PCNSPER2/PERSONALITY
  Authentication Service: Kerberos
  Inclusion Group Name..: MCOM\Domain Users
  Exclusion Group Name..:
  Keep Alive Interval...: 0 seconds
  User Name Format..: 3
  Queue Warning Level...: 0
  Queue Warning Interval: 30 minutes
  Disabled......: False
 
Total targets: 3
 
Thanks

 

Antonio Aranda

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of TIROA YANN
Sent: Wednesday, October 19, 2005 10:41 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Microsoft password notification service 


Hi,
 
Can you dump to us the details of the whole commands u type the results ?
 
See in the app logs for more informations.

Yann 



  _  




De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] De la part de Antonio Aranda
Envoyé : mercredi 19 octobre 2005 17:29
À : ActiveDir@mail.activedir.org
Objet : [ActiveDir] Microsoft password notification service 



While using Microsoft password notification service I notice this problem;
when using the "list"

RE: [ActiveDir] Microsoft password notification service

2005-10-19 Thread Antonio Aranda
Title: Message




Here is what I typed and the responds.
 
 
C:\Program Files\Microsoft Password Change 
Notification>pcnscfg DELETETARGET /N:miisdemoError deleting the target. 
The target was not found.
 
C:\Program Files\Microsoft Password Change 
Notification>pcnscfg DISABLETARGET /N:miisdemoError modifying the target. 
The target was not found.
 
C:\Program Files\Microsoft Password Change 
Notification>pcnscfg MODIFYTARGET /N:miisdemo /a:personality 
/s:PCNSPER2/PERSONALITY /fi:"domain Users" /f:3Error modifying the target. 
The target was not found.
 
C:\Program Files\Microsoft Password Change 
Notification>pcnscfg listThe service configuration is not set. Defaults 
will be used by the service.
 
Default Service Configuration  
MaxQueueLength: 0  MaxQueueAge...: 259200 
seconds  MaxNotificationRetries: 0  RetryInterval.: 60 
seconds
 
Targets  Target Name...: 
miisdemoCNF:71ee789f-c80a-44ea-9353-447b0d578559  Target 
GUID...: B79C4341-B3ED-413A-A046-7016E557E982  Server FQDN or 
Address: personality  Service Principal Name: 
PCNSPER2/PERSONALITY  Authentication Service: Kerberos  
Inclusion Group Name..: MCOM\Domain Users  Exclusion Group 
Name..:  Keep Alive Interval...: 0 seconds  User Name 
Format..: 3  Queue Warning Level...: 0  Queue Warning 
Interval: 30 minutes  Disabled..: False
 
  
Target Name...: 
miisdemoCNF:f0b31f2e-0d09-4506-a37a-cd56a0d20d5e  Target 
GUID...: FA0D13B1-C03F-461C-90A9-2DDD3B77B063  Server FQDN or 
Address: personality.mcom.utpb.edu  Service Principal Name: 
PCNSPER1/PERSONALITY.MCOM.UTPB.EDU  Authentication Service: 
Kerberos  Inclusion Group Name..: MCOM\Domain Users  Exclusion 
Group Name..:  Keep Alive Interval...: 0 seconds  User Name 
Format..: 3  Queue Warning Level...: 0  Queue Warning 
Interval: 30 minutes  Disabled..: False
 
  
Target Name...: 
miisdemoCNF:fbbf4c22-7f86-4494-8fb3-ef5f1f43d990  Target 
GUID...: B686780E-5DA2-46C6-BF56-F11EB808368B  Server FQDN or 
Address: personality  Service Principal Name: 
PCNSPER2/PERSONALITY  Authentication Service: Kerberos  
Inclusion Group Name..: MCOM\Domain Users  Exclusion Group 
Name..:  Keep Alive Interval...: 0 seconds  User Name 
Format..: 3  Queue Warning Level...: 0  Queue Warning 
Interval: 30 minutes  Disabled..: False
 
Total 
targets: 3
 

Thanks
 
Antonio 
Aranda
 

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of TIROA YANNSent: Wednesday, October 19, 2005 
  10:41 AMTo: ActiveDir@mail.activedir.orgSubject: RE: 
  [ActiveDir] Microsoft password notification service 
  Hi,
   
  Can you dump to us the details of the whole 
  commands u type the results ?
   
  See in the app logs for more informations.
  Yann 
  
  

  
  De : 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  De la part de Antonio ArandaEnvoyé : mercredi 19 
  octobre 2005 17:29À : 
  ActiveDir@mail.activedir.orgObjet : [ActiveDir] Microsoft 
  password notification service 
  
  
  While using Microsoft password notification service I 
  notice this problem; when using the “list” command it displays three targets 
  with the same name.  I then 
  attempt to modify, disable or delete those targets; I get the response targets 
  not found.  
  
   
  Antonio 
  Aranda


[ActiveDir] Microsoft password notification service

2005-10-19 Thread Antonio Aranda
Title: Message




While using Microsoft password notification service I 
notice this problem; when using the “list” command it displays three targets 
with the same name.  I then attempt 
to modify, disable or delete those targets; I get the response targets not 
found.  

 
Antonio 
Aranda


[ActiveDir] third party FTP server

2005-08-16 Thread Antonio Aranda
Does any one know of a good third party FTP server that does not require
local logon access?

Antonio

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] Replicating AD

2005-08-02 Thread Antonio Aranda
Title: Message




I’m 
trying to setup a test AD that's identical to the production AD with the same OU 
structure and user accounts.  I'd like to avoid having to manually creating 
them by hopefully finding a tool that would import all those object.  Does any one know of such a 
tool?
 
Antonio


[ActiveDir] target principal name

2005-07-22 Thread Antonio Aranda








I’ve restored a domain controller to a completely new machine. 
I had some drives problems but all were easy to update.  The only problem
is that the new box is not synchronizing with the other controllers.  It
keeps getting this error when in Active Directory Sites and Services I clink on
the Replicate Now function.

 

“Unable to connect to domain controller because the
target principal name is incorrect”

 

The machine has the right name, the right IP and everything else
seems ok but it will not replicate with other controllers.  I hope some
one has some ideas.

 

Antonio








RE: [ActiveDir] FTP to a member machine

2005-07-20 Thread Antonio Aranda
The ftp site points to the same directory they already have access to.  It's
a network drive when they are logon to a workstation on campus.  I'm trying
set them up with ftp access to their home directory which is their U: drive
when logged on to member workstation.  The problem is not the permissions
but thanks for trying, Jose.

Antonio

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Wednesday, July 20, 2005 4:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FTP to a member machine

Ahh.. Your problem is incorrect NTFS file and or directory permissions.

Jose

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Antonio Aranda
Sent: Wednesday, July 20, 2005 1:55 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FTP to a member machine


I've give all specified domain users local logon access but it still does
not connect.  Via a security group the GP specifies what users have FTP
access by given them local logon access.  I've told all users to use
[EMAIL PROTECTED] or domain\username when connecting.  

Thanks for your help Rob

Antonio

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rob Ryan
Sent: Wednesday, July 20, 2005 2:02 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FTP to a member machine

Make sure the normal user accounts have the logon locally right - IIS in
basic authentication will essentially log a user onto the machine
because windows doesn't recognize basic auth as a valid authentication
mechanism (and rightfully so), and if you don't want them to have to
enter in "domain\username" for logon, you'll need to set the ftp's
default domain from the command line.

Find the adsutil.vbs script and run "adsutil.vbs set
msftpsvc/DefaultLogonDomain "domainname" 

(or set msftpsvc//DefaultLogonDomain if you've got more than
one ftp site on the box..)

-r

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Antonio Aranda
Sent: Wednesday, July 20, 2005 11:53 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] FTP to a member machine

I've setup an FTP site on a member machine which should be accessible by
AD
accounts.  But for some reason it does not work.  Local accounts work
without issues but AD accounts unless they are administrators will not
connect.  I'm at a lost and I hope some one out there will have some
ideas.

Antonio

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] FTP to a member machine

2005-07-20 Thread Antonio Aranda
I've give all specified domain users local logon access but it still does
not connect.  Via a security group the GP specifies what users have FTP
access by given them local logon access.  I've told all users to use
[EMAIL PROTECTED] or domain\username when connecting.  

Thanks for your help Rob

Antonio

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rob Ryan
Sent: Wednesday, July 20, 2005 2:02 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FTP to a member machine

Make sure the normal user accounts have the logon locally right - IIS in
basic authentication will essentially log a user onto the machine
because windows doesn't recognize basic auth as a valid authentication
mechanism (and rightfully so), and if you don't want them to have to
enter in "domain\username" for logon, you'll need to set the ftp's
default domain from the command line.

Find the adsutil.vbs script and run "adsutil.vbs set
msftpsvc/DefaultLogonDomain "domainname" 

(or set msftpsvc//DefaultLogonDomain if you've got more than
one ftp site on the box..)

-r

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Antonio Aranda
Sent: Wednesday, July 20, 2005 11:53 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] FTP to a member machine

I've setup an FTP site on a member machine which should be accessible by
AD
accounts.  But for some reason it does not work.  Local accounts work
without issues but AD accounts unless they are administrators will not
connect.  I'm at a lost and I hope some one out there will have some
ideas.

Antonio

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] FTP to a member machine

2005-07-20 Thread Antonio Aranda
I've setup an FTP site on a member machine which should be accessible by AD
accounts.  But for some reason it does not work.  Local accounts work
without issues but AD accounts unless they are administrators will not
connect.  I'm at a lost and I hope some one out there will have some ideas.

Antonio

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Can a 2003 server be a domain controller in a 2000 domain?

2005-07-08 Thread Antonio Aranda
Thanks James and Chris

Essentially does this mean that I would have upgraded the domain to a 2003
configuration?

Antonio

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] GPO priority?

2005-07-08 Thread Antonio Aranda
Maybe creating a couple of sub-OU's with different GP's in your primary OU
would be a better solution for you problem.  At least that is the way I
handles it.

Antonio

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris
Sent: Thursday, July 07, 2005 1:43 PM
To: ActiveDir.org
Subject: Re: [ActiveDir] GPO priority?

For group policy to apply to an object, that object must have read and apply
permissions to the group policy that you wish for it to inherit.

An example for your scenario would be to remove authenticated users from a
gpo and replace it with a group called "wibble" give it read and apply and
anyone in the wibble group will get the policy.

I hope this explains the concept.

Mark
-Original Message-
From: "Harding, Devon" <[EMAIL PROTECTED]>
Date: Thu, 7 Jul 2005 14:18:04 
To:
Subject: [ActiveDir] GPO priority?

Let's say you create a GPO for an OU called Servers, and you want a few
servers in that OU to use a different GPO, how is that done?

Devon Harding
Windows Systems Engineer
Southern Wine & Spirits - BSG
954-602-2469


-
__
This message and any attachments are solely for the intended recipient
and may contain confidential or privileged information.  If you are not
the intended recipient, any disclosure, copying, use or distribution of
the information included in the message and any attachments is
prohibited.  If you have received this communication in error, please
notify us by reply e-mail and immediately and permanently delete this
message and any attachments.  Thank You.

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Permissions Problem

2005-07-08 Thread Antonio Aranda








There is an alternative group you could
add, CREATOR OWER and set it to have change or modify access.  This would
mean that who ever creates it or owns it will have modify access the object but
no one else.  Every one else will be restricted by the other security
groups.

 

Antonio

 

-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan DeStefano
Sent: Friday, July 08, 2005 8:51
AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Permissions
Problem

 

I am trying to set permissions to a
folder and all subfolders/files that allow a group to read/execute and write
but not delete. I have assigned the permissions appropriately for the group
(read/execute, list folder contents, read, write) to the parent folder and
reset all subfolders/files.

 

The users are supposed to open a
template excel file, edit it and save it as a different file name into a
subfolder in this folder tree. The problem is that when they try to save the
file as, they receive an error stating that the folder is read-only. They can
create a subfolder and save the file in there, but this is not acceptable.

 

Is what I propose possible or does
this group simply need modify permissions to the folder tree?

 

 

Thanks in advance,

 



Daniel DeStefano



 








[ActiveDir] Can a 2003 server be a domain controller in a 2000 domain?

2005-07-08 Thread Antonio Aranda


I have a 2000 domain with a mix of 2000 and 2003 member machines.  There is
an offsite where all the member machines are 2003.  And I wanted to setup an
alternative Domain controller at this site with what is already there.  I am
in the process of planning and testing the upgrade to a 2003 domain but
until then I need a domain controller at this site.  So would 2003 domain
controller work in a 2000 domain at least temporary?

Antonio

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] Event viewer Log files

2005-06-07 Thread Antonio Aranda
I'm missing security logs for the pass year.  Can anyone tell me why the
event viewer would stop creating security log files?

Antonio

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] removing a DC from AD

2005-05-20 Thread Antonio Aranda
Title: "Access denied" connecting to remote Event Logs








Could anyone tell me how to remove a Domain Controller that does
not exit anymore from AD?  I had three controllers and one had a catastrophic
hardware failure.  So now I need to remove a nonexistent DC from the AD.

Antonio






==
This message is for the sole use of the intended recipient. If you received 
this message in error please delete it and notify us. If this message was 
misdirected, Credit Suisse, its subsidiaries and affiliates (CS) do not 
waive any confidentiality or privilege. CS retains and monitors electronic 
communications sent through its network. Instructions transmitted over this
system are not binding on CS until they are confirmed by us. Message 
transmission is not guaranteed to be secure. 
==


RE: [ActiveDir] Computer Configuration GP applying to W2K but not WinXP

2005-05-10 Thread Antonio Aranda
Brenda

 

It might be missing a dll file or the dll file is not registering at boot.
If you look in the even view there might be an event stating that the GP did
not load, if so it will have some suggestions on how to fix it.  To create a
fresh even stating that the GP did not load, type in the run "gpupdate" then
click ok. 

 

Antonio

 

-Original Message-
From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] On Behalf
Of Darren Mar-Elia
Sent: Tuesday, May 10, 2005 11:25 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Computer Configuration GP applying to W2K but not
WinXP

 

Brenda-

Is Fast Logon Optimization enabled (on by default) on the XP machines? Does
the situation change after the 2nd or 3rd reboot (i.e. the computer policy
is finally delivered on XP)?

 

  _  

From: [EMAIL PROTECTED] on behalf of Brenda Casey
Sent: Tue 5/10/2005 9:14 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Computer Configuration GP applying to W2K but not WinXP

I have applied a startup script (to change a local admin password) to the
computer configuration in a GP.  I have also configured  several user
configuration items in this policy.  This policy applies successfully to all
W2K workstations, but only the User Configurations are applied on a WinXP
workstation.  Any thoughts on what I am missing?  Any and all help is
appreciated!

 

Thanks,

Brenda

 

<>

RE: [ActiveDir] Strange redirection issue

2005-05-10 Thread Antonio Aranda
I don't know why those files would appear in the desktop folder but those
files are the profile files.  There should also be an ntuser.ini and
ntuser.pol.  If those two other files are also in there then maybe that
desktop folder is also a profiles folder.  

Antonio

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Cothern Jeff D.
Team EITC
Sent: Monday, May 09, 2005 9:24 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Strange redirection issue

XP sp2 workstations. 

I have created a Folder called Desktop.  Permissions are administrator
and system full control users read only.   The users are set thru GPO to
be redirected to this Folder. That part is working.  The strange part is
that two files are showing up in that Directory.  

NTUSER.DAT
NTUSER.DAT.TXT

The local admin account appears to have ownership of these files. 


Anyone have a clue as to how or why these files are being created there?

Thanks

Jeff




List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/