RE: [ActiveDir] GPO oddity
"Enforced" a. k. a. "No Override" takes precedence over "Block Policy Inheritance", see for example http://www.windowsitpro.com/Article/ArticleID/15420/15420.html So the "Enforced" 120 minute overrides the lower 3 minute setting even with "Block Policy Inheritance" set. This is true in Windows 2000 and Windows 2003. -- Michael C. Bazarewsky -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Tuesday, May 31, 2005 9:26 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] GPO oddity We have a Default Domain level GPO that is set to "Enforced". In this GPO, we set a 120 minute screensaver timeout that locks the screensaver after 120 minutes. In a GPO at a lower OU level, we have an OU that has "Block Policy Inheritence" turned on, and a GPO is linked to that OU that sets the screensaver timeout to 3 minutes. For some reason, the users in that OU are getting the default domain GPO timeout of 120 minutes rather than the 3 minute screensaver timeout. I assume if we turn off "Enforced" on the default domain GPO, anyone that belongs to a Block Policy Inheritence OU will get their lower level GPO applied rather than the default domain GPO? ~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ smime.p7s Description: S/MIME cryptographic signature
RE: [ActiveDir] Doubletake(OT)
I work indirectly for a reseller of Neverfail, which is another similar product, and that said, I would agree that if you have Exchange, AD, and MS-SQL dealt with already in satisfactory ways, then that only leaves potentially file and print, and maybe IIS if you're running that, or custom applications that need to be dealt with. IMHO, in general, all such products are designed to give you a relatively inexpensive alternative to a cluster or manual failover/etc. They really only make sense when you don't have something in place already and don't want or can't afford to do the whole ball of wax. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Wednesday, July 06, 2005 2:07 PM To: ActiveDir (E-mail) Subject: [ActiveDir] Doubletake(OT) Anyone using Doubletake out there? My manager is interested in purchasing it and I was wondering what you guys think of it, yea or nay. In my enviorment it doesn't seem to make sense except as to file servers. DC's have built in redundancy if you have more than 1 and we have an active/passive exchange2k3 cluster plus with RSG and/or dial tone restore, it doesn't seem to apply here as well. For MS SQL we are using a log shipping solution. So i was just wondering if any one out there had experience with this or a simillar product and how they are using it and if its worth it to get. Thanks a lot. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Can you run DHCP on a XP computer??
I also do not know what DECO is, but I do know that one short-term third-party DHCP solution is TFTPD32: http://tftpd32.jounin.net/ The original request did not specify more details on the requirements. The big issue with TFTPD32 is it is meant for short-term use, so it does not save leases in a persistent fashion, so you start over when the program is cycled. This makes it much more useful in a lab/development environment than in a production environment. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Friday, December 01, 2006 2:16 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Can you run DHCP on a XP computer?? What's DECO? (I'm guessing a typo, but want to make sure you're not referring to some third-party DHCP service.) If you are referring to the Microsoft DHCP service, I think whoever told you that is confused, perhaps by having seen the DHCP client service in the services list? Laura -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.430 / Virus Database: 268.15.3/561 - Release Date: 12/1/2006 6:36 AM
RE: [ActiveDir] OT: Windows Server 2003 Clustering
I don't know the official way to do this, but if the scheduled tasks can be called from a batch file (or are a batch file already), could you have a batch file for each job like this: IF NOT EXIST R:\. GOTO EXIT real work here :EXIT This is not spectacular, but is maintainable. Microsoft has an answer to this in the newsgroups: http://groups-beta.google.com/group/microsoft.public.windows.server.clusteri ng/msg/2387e4668509e657?hl=en But it looks kinda icky to me. -- Michael C. Bazarewsky -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hunter, Laura E. Sent: Friday, May 13, 2005 3:13 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Windows Server 2003 Clustering Hello all, Is anyone using 2K3 clustering to create scheduled tasks that can fail over along with their associated cluster node? I've found info on the Volume Shadow Copy Service Task resource (http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ ServerHelp/f6b35982-b355-4b55-8d7f-33127ded5d37.mspx), but it's not quite as fully-functional as I need it to be. I have a number of automated data transfers that happen on one node in the cluster, and I'd obviously be quite happy if I could convince the jobs to fail over to the other node when appropriate. Thanks everyone. ** Laura E. Hunter Microsoft MVP: Windows Server - Networking TSS Support-on-Site Student Financial Services University of Pennsylvania List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ smime.p7s Description: S/MIME cryptographic signature
