RE: [ActiveDir] Import Contacts into AD

[Brown, Bill [contractor]]

Try populating the "targetaddress" as well as the "fwdaddress"

R/Bill

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf Of Saleem, 
Mohamed Yunus
Sent:   Monday, December 20, 2004 6:39 AM
To: ActiveDir@mail.activedir.org
Subject:[ActiveDir] Import Contacts into AD

Hello People

I imported contacts into my AD using excel sheet containing 361 rows and
10 columns (details of all the users sent by admin from another domain)

What happened was after the import the email address of the contacts is
not the same as in the excel sheet sent by the admin, instead it changes
back to my domain email id.

Has anyone come across this situation, please help

If anyone has a script which does this..please forward it to me.

Thanks

saleem


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] W2K SCHEMA EXTEND

[Brown, Bill [contractor]]

Tim,

Thanks for the information - I had read that article several times.  But I am not 
intending to install the server product - all I need is the forestprep part that 
extends the schema, which is why I posed the question to ~`Eric if the DCs in the 
empty root will roll over and die after the evaluation period is over.  And most 
likely, the migration from W2K to W2K3 would not be a direct upgrade of the existing 
machines - but a schema extension and the introduction of new hardware with W2K3 and 
the transfer of whatever roles need to be moved from the W2K devices to the W2K3 
devices.

R/Bill

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf Of Tim Hines
Sent:   Tuesday, August 10, 2004 10:36 AM
To: [EMAIL PROTECTED]
Subject:Re: [ActiveDir] W2K SCHEMA EXTEND

You can use the eval copy but you will need to upgrade to a retail version
of the product before the 180 day trial period expires.  If you don' then
you will begin to experience blue screens. For more details see 818025
Windows 2003 Server evaluation copy expiration behavior
http://support.microsoft.com/?id=818025


- Original Message - 
From: "Brown, Bill [contractor]" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 10, 2004 10:25 AM
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND


Eric,

Being as you are with MS - I will direct this part of the query at you.  We
have a subscription to MSDN and I have the evaluation version of W2K3 from
that subscription.  We have not yet purchased "live copies" of W2K3 - the
purchasing folks are looking into whether the purchase plan for the W2K
products would allow an upgrade issue of W2K3.

Anyway, from a MS standpoint - will I be able to safely do a forestprep of
the empty root [both test bed and production configurations] with the
evaluation copy of W2K3 - or will I have to have the real thing?  In
advance, thanks for your time and trouble...

R/Bill

 -Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]  On Behalf Of Eric Fleischman
Sent: Tuesday, August 10, 2004 9:56 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND

Umm."gpo for windows xp attributes"? What does that mean?
I assume that means that you can use XP settings in a group policy in a 2k
domain. If that is what you mean, that's completely independent of the
schema in AD, whether you have extended it for 2k03 or not. That is just a
function of the ADM files you have imported in to that policy.

~Eric




From: [EMAIL PROTECTED] on behalf of Adams, Kenneth W (Ken)
Sent: Tue 8/10/2004 8:25 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND


You read correctly.  Once the schema is extended, you can apply what ever
needed those attributes (i.e., GPO for Windows XP attributes) with the MMC
snap-ins containing the names of those attributes.
Ken Adams
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brown, Bill
[contractor]
Sent: Tuesday, August 10, 2004 9:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND


Ken,

Thanks for the reply - your answer pretty much fits in with what I had
intended to do.  Once the replication is out to all DCs - then anything that
needed to work with the extended schema could - is that correct?  Or am I
reading between the lines?

R/Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Adams, Kenneth W
(Ken)
Sent: Tuesday, August 10, 2004 8:52 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND

If you read the upgrade documentation for W2K3, you will find that you have
to extend the forest schema before you install the first W2K3 DC.  Extend
the schema on the empty root domain with the forestprep option, then allow
sufficient time for the schema extension to replicate through ALL DCs in
your forest.
Ken Adams
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brown, Bill
[contractor]
Sent: Tuesday, August 10, 2004 8:24 AM
To: ActiveDirList
Subject: [ActiveDir] W2K SCHEMA EXTEND
To All,
I have recently been advised that one of the domains within our forest has a
need to start using some of the W2K3 attributes.  The current setup
throughout the forest is W2K and SP4 with an empty root and then child
domains truncated on downward.  The forest will be migrated to W2K3 at some
point in the not too distant future - but it will not be in time to satisfy
the needs of this one domain.
Is it possible for me to extend the forest schema [presume from the empty
root] by running W2K3 forestprep and staying at the current W2K?
R/Bill
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http:

RE: [ActiveDir] W2K SCHEMA EXTEND

[Brown, Bill [contractor]]

Eric,

Being as you are with MS - I will direct this part of the query at you.  We have a 
subscription to MSDN and I have the evaluation version of W2K3 from that subscription. 
 We have not yet purchased "live copies" of W2K3 - the purchasing folks are looking 
into whether the purchase plan for the W2K products would allow an upgrade issue of 
W2K3.

Anyway, from a MS standpoint - will I be able to safely do a forestprep of the empty 
root [both test bed and production configurations] with the evaluation copy of W2K3 - 
or will I have to have the real thing?  In advance, thanks for your time and trouble...

R/Bill

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf Of Eric Fleischman
Sent:   Tuesday, August 10, 2004 9:56 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject:RE: [ActiveDir] W2K SCHEMA EXTEND

Umm."gpo for windows xp attributes"? What does that mean?
I assume that means that you can use XP settings in a group policy in a 2k domain. If 
that is what you mean, that's completely independent of the schema in AD, whether you 
have extended it for 2k03 or not. That is just a function of the ADM files you have 
imported in to that policy.
 
~Eric
 



From: [EMAIL PROTECTED] on behalf of Adams, Kenneth W (Ken)
Sent: Tue 8/10/2004 8:25 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND


You read correctly.  Once the schema is extended, you can apply what ever needed those 
attributes (i.e., GPO for Windows XP attributes) with the MMC snap-ins containing the 
names of those attributes.
Ken Adams 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brown, Bill [contractor]
Sent: Tuesday, August 10, 2004 9:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND


Ken,
 
Thanks for the reply - your answer pretty much fits in with what I had intended to do. 
 Once the replication is out to all DCs - then anything that needed to work with the 
extended schema could - is that correct?  Or am I reading between the lines?
 
R/Bill
 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Adams, Kenneth W (Ken)
Sent: Tuesday, August 10, 2004 8:52 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K SCHEMA EXTEND
 
If you read the upgrade documentation for W2K3, you will find that you have to extend 
the forest schema before you install the first W2K3 DC.  Extend the schema on the 
empty root domain with the forestprep option, then allow sufficient time for the 
schema extension to replicate through ALL DCs in your forest.
Ken Adams 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brown, Bill [contractor]
Sent: Tuesday, August 10, 2004 8:24 AM
To: ActiveDirList
Subject: [ActiveDir] W2K SCHEMA EXTEND
To All,
I have recently been advised that one of the domains within our forest has a need to 
start using some of the W2K3 attributes.  The current setup throughout the forest is 
W2K and SP4 with an empty root and then child domains truncated on downward.  The 
forest will be migrated to W2K3 at some point in the not too distant future - but it 
will not be in time to satisfy the needs of this one domain.
Is it possible for me to extend the forest schema [presume from the empty root] by 
running W2K3 forestprep and staying at the current W2K?
R/Bill
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] W2K SCHEMA EXTEND

[Brown, Bill [contractor]]

Title: Message









Ken,

 

Thanks for
the reply – your answer pretty much fits in with what I had intended to do.  Once the replication is out to all DCs –
then anything that needed to work with the extended schema could – is that
correct?  Or am I reading between
the lines?

 

R/Bill

 

-Original
Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Adams, Kenneth W (Ken)
Sent: Tuesday, August 10, 2004
8:52 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] W2K
SCHEMA EXTEND

 

If you read the upgrade
documentation for W2K3, you will find that you have to extend the forest schema
before you install the first W2K3 DC.  Extend the schema on the empty root
domain with the forestprep option, then allow sufficient time for the schema
extension to replicate through ALL DCs in your forest.

Ken
Adams 

-Original
Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brown, Bill [contractor]
Sent: Tuesday, August 10, 2004
8:24 AM
To: ActiveDirList
Subject: [ActiveDir] W2K SCHEMA
EXTEND

To
All,

I have recently been
advised that one of the domains within our forest has a need to start using
some of the W2K3 attributes.  The current setup throughout
the forest is W2K and SP4 with an empty root and then child domains truncated
on downward.  The forest will be migrated to W2K3 at some point in the not too
distant future – but it will not be in time to satisfy the needs of this one
domain.

Is it possible for me to
extend the forest schema [presume from the empty root] by running W2K3
forestprep and staying at the current W2K?

R/Bill

[ActiveDir] W2K SCHEMA EXTEND

[Brown, Bill [contractor]]

Title: W2K SCHEMA EXTEND






To All,

I have recently been advised that one of the domains within our forest has a need to start using some of the W2K3 attributes.  The current setup throughout the forest is W2K and SP4 with an empty root and then child domains truncated on downward.  The forest will be migrated to W2K3 at some point in the not too distant future – but it will not be in time to satisfy the needs of this one domain.

Is it possible for me to extend the forest schema [presume from the empty root] by running W2K3 forestprep and staying at the current W2K?

R/Bill

RE: [ActiveDir] adc replication

[Brown, Bill [contractor]]

Graham,

If I remember my E55 correctly - and I think I do - then the ALIAS in E55 has a 
one-to-one relationship with a mailbox.  There can not be duplicate ALIASes in E55.  I 
do believe that the same holds true in AD.  This is easily proved out in the test bed. 
 Assuming that you are going to setup a two-way ADC - you can assign which way you 
want the first replication to go.  From Exchange to AD - or from AD to Exchange.  And 
yes, ALIAS [in E55] does go mailNickname in AD.

I mean the entire process of putting up the ADC would be to insure that AD and E55 are 
working with the same information - until such time as you can remove all of the E55 
components in the Exchange organization and proceed to a native mode of operation.  
Unless you are drastically changing your Exchange system - I can not understand why 
you would not want the E55 ALIAS in AD...

R/Bill

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf Of Graham Turner
Sent:   Monday, August 09, 2004 7:30 AM
To: [EMAIL PROTECTED]
Subject:[ActiveDir] adc replication

dear all, further to earlier item on impact on the AD directory following
ADC synchronization.

have been through the Exchange 5.5 directory and found the attributes that
'map' to the mailbox properties. 

am quite comfortable about disabling the merging of most attribute data
using the Default ADC 

one that i am less comfortable with is the merging of the alias (attribute
UID ?) value into the AD 

from the schema map file this looks to be mapped to the "mailnickname"
attribute in AD 

can anyone confirm whether this is in fact a correct interpretation of the
attribute mapping and if so perhaps a view on the impact of NOT merging
this data into the AD ??

TIA 

GT 
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] AD replication from 5.5 using ADC

[Brown, Bill [contractor]]

Graham,

AD does default to First Name Sur Name on new account creation.  The following KB 
Article explains how to change that:
http://support.microsoft.com/?kbid=250455

R/Bill

 -Original Message-
From:   Graham Turner [mailto:[EMAIL PROTECTED] 
Sent:   Friday, July 30, 2004 10:04 AM
To: [EMAIL PROTECTED]
Subject:[ActiveDir] AD replication from 5.5 using ADC 

hopefully once again i am not charged with going too O/T with this one, but
was looking to get a bit of further information on the potential impact of a
replication from an exchange 5.5 server to a win2k AD

it seems there is potential for the change of attributes already in the AD
if there is different data in the 5.5 directory.

the most obvious of these seems to be the "display name" given its
prevalence in most directories, and likelihood (this is true in this specfic
case) of different convention being used between the directories;

in 5.5 we have surname ^ firstname , whilst on AD we have the other way
round !

i have reviewed the ADC documentation

seems there are two ways we can acheive some sort of control -

i. default adc policy where we can set globally certain attribute data not
to be replicated

ii. 'connection agreement' policy which is manipulated using ADSI edit

the latter seems preferable given scope for different CA configuration

could anyone possibly explain what this actually does - the ADC doc's
reference quotes "Do not overwrite RDN with the Exchange 5.5 Alias
attribute."

don't know if this is a typo but the alias in a 5.5 directory does not look
to relate to the display name as the technote seems to suggest

does this ADC configuraton value relate ONLY to the replication of the
"display name" ??

am i also right to say that this MSEXCHSERVER1FLAGS value controls the
behaviour when replicating to Windows (and by implication from Exchange
5.5 ) ?? and that the  msexchserver2flags value controls the behaviour the
other way round ?

if i am too O/T my apologies -

GT

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Batch Account Creation and Removal

[Brown, Bill [contractor]]

I have a
VB script that I wrote to create contacts – I suppose it could easily be
modified to generate users.  It reads
input from an Excel spreadsheet in CVS format, checks for duplicates, and
generates an error log [if needed] as it goes.  Contact me off-list and I will be glad to share with you…

 

R/Bill

 

-Original
Message-
From: Nathan Henderson
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 27, 2004 12:50
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Batch Account
Creation and Removal

 

Anyone
have any great tips for batch creation and removal of accounts?  We want
to be able to batch create accounts for our students based off either a
database or even text file and create their user account, e-mail (in a separate
message store), and add them to the correct OUs and groups.  

 

Is
there anything native that could accomplish this or is the best option a
third-party app?

 

-Nate

_

 

Nathan
Henderson

Network
Engineer

Northwest University

ph:
425.889.5358

fax:
425.827.2807

RE: [ActiveDir] win2k pro or server?

[Brown, Bill [contractor]]

If you hit the start button - there is a vertical bar that displays this information...

R/Bill

 -Original Message-
From:   Kern, Tom [mailto:[EMAIL PROTECTED] 
Sent:   Tuesday, July 20, 2004 2:14 PM
To: ActiveDir (E-mail)
Subject:[ActiveDir] win2k pro or server?

Sorry if this is really basic and covered before- but whats the quickest way(via 
script or gui admin tool) to tell if a particular pc/server is running win2k pro or 
server?
thanks
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] AD disaster recovery

[Brown, Bill [contractor]]

Tom,

Have you checked out the following:

Backup Exec TechNotes 236240 and 235756 located at the following links:  
http://support.veritas.com/docs/236240 and http://support.veritas.com/docs/235756 

R/Bill

 -Original Message-
From:   Rutherford, Robert [mailto:[EMAIL PROTECTED] 
Sent:   Monday, March 22, 2004 9:57 AM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] AD disaster recovery

I think the way that you are going about it is the best way... Having an
off-site DC replicating the AD is fail-safe you can rely on.

I can't see any issues with it.

-Original Message-
From: Kern, Tom [mailto:[EMAIL PROTECTED] 
Sent: 22 March 2004 14:51
To: ActiveDir (E-mail)
Subject: [ActiveDir] AD disaster recovery


We're doing a DR test run of AD. We go to another location and try to
restore our network from tape backup(Veritas 8.6). Each time we've run
into serious issues when restoring AD to different hardware(this is all
our DR site provides) and have never been able to get up and running. So
this time, I want to put AD on a laptop, give it a few days to replicate
with our network, then take the laptop with me to the DR site, force a
transfer of all the FSMO roles, and restore that way. Also, for the
other DC's, I just want to set up new domain controllers with the same
names and not restore the system state, i,e; AD. Just app specfic stuff
and home directories. Does anyone see a problem with this? Will I run
into issues with GUID's not matching or USN's? We are also planning on
restoring an Exchange 2k server. Any help or advice, war stories,  would
be greatly appreciated. Thanks
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

The information transmitted is intended only for the person or entity
to which it is addressed and may contain confidential and/or
privileged material. Any use (including retransmission or copying)
of this information by persons or entities other than the intended
recipient is prohibited.  If you are not the intended recipient of this
transmission, please contact the sender and delete the material
from any computer. The sender is not responsible for the 
completeness or accuracy of this communication as it has been
transmitted over a public network. Any replies to this email may be
monitored by the MCPS-PRS Alliance for quality control and other 
purposes.
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Slightly OT: command line tips

[Brown, Bill [contractor]]

One thing does come to mind – when in Explorer and you want to see the
entire tree structure [downward from any point] simply hit the * key on the
numeric keypad and it will expand all folders all the way to the bottom of that
branch.  For instance, if you
wanted to look for shares in a structure without going into the registry…

 

R/Bill

 

-Original
Message-
From: Kevin Sullivan
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 16, 2004 9:02
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Slightly
OT: command line tips

 

I absolutely can’t live
without changing the visuals of the command processor. Since you shared here is
one of my favorite command line tips for w2k. Back into NT when typing out long
command lines you could use the * for the auto-complete character so from a
command prompt cd c:\doc*  would change the dir to “docs and
settings” great, but incredibly limited. In UNIX I can use the  key
to really quickly fly through long command lines etc. so to change the NT/W2k
default from the <*> to the  change
HKLM\Software\Microsoft\Command Processor\CompletionChar value from 40 (I think
that is the default) to 9 and restart the command processor. Remember speed
kills, oh yeah and *WARNING: Modifying the
registry incorrectly will cause all small furry creatures to spontaneously
combust and other really, really bad things will happen, so you’ all be careful
out there!*

 

This is the default in
2k3 and XP. 

 

I can’t wait to see some
other tips from people on this list.

 

Kevin

 









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Rich Milburn
Sent: Tuesday, February 24, 2004
11:05 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Slightly OT:
command line tips

 

I was
doing some stuff in a command prompt, and was admiring the dnscmd output, and
it occurred to me one reason some people don’t like doing things at the command
line…  I got in the habit a while back of changing my command prompt
window properties to a nice looking font, navy text on white background, 120
characters across and buffer of .  The 120 characters across really
helps with the word wrap thing.  Command line output ends up being nice to
read, as opposed to defaults which are pretty hard on the eyes J

 

Rich

 

 

 

Rich
Milburn

MCSE, 
Microsoft MVP - Directory Services

Sr
Network Analyst

Applebee's
International, Inc.

913-967-2819

 






---APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE---  PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.

[ActiveDir] [OT] SMS LIST???

[Brown, Bill [contractor]]

Title: [OT] SMS LIST???






To All,

Can anyone recommend a list for SMS that has quality contributors – like this one?

R/Bill

RE: [ActiveDir] Directory Services Client Software

[Brown, Bill [contractor]]

On the W2K
Server CD under the clients\win9x folder is the dsclient…

 

R/Bill

 

-Original
Message-
From: Ellis, Debbie
[mailto:[EMAIL PROTECTED]
Sent: Friday, January 23, 2004
11:01 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Directory
Services Client Software

 

Does
anyone know where I can download the dsclient software for Windows 98
clients?  I found one for NT 4.0
but not 98.  I also did a search on
the Server 2003 CD. Thanks as always for your help.

RE: [ActiveDir] OT? ADDING CONTACTS

[Brown, Bill [contractor]]

Joe,

Appreciate the feedback.  Would this affect replication in an exchange mixed mode 
environment?  Thanks...

R/Bill

 -Original Message-
From:   Joe [mailto:[EMAIL PROTECTED] 
Sent:   Saturday, November 22, 2003 10:56 AM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] OT? ADDING CONTACTS

Exchange modifies ADUC. It doesn't modify the underlying OS so it can't
force you to set attributes in CSVDE, LDIFDE, scripts, or ldap programs or
anything else that Exchange isn't aware of. 

Add a contact to your domain from a workstation that doesn't have the
exchange toolset on it, you will see a different reaction from ADUC. 

  joe 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brown, Bill
[contractor]
Sent: Friday, November 21, 2003 11:39 AM
To: [EMAIL PROTECTED]

Tony,

Appreciate the feedback - however, I do not understand the [your comment]
use of the standard ADU&C vice the Exchange version.  Are you saying that
the adds [manual and CSVDE] would be different if done on a DC that did not
have E2K System Manager loaded?  In this case, both the manual and CSV adds
were done on the same DC and being as this is a test bed scenario - E2K is
also running on the DC.  Is there any way that this would affect replication
in an exchange mixed mode environment?

R/Bill

 -Original Message-
From:   Tony Murray [mailto:[EMAIL PROTECTED] 
Sent:   Friday, November 21, 2003 10:45 AM
To: [EMAIL PROTECTED]
Subject:Re: [ActiveDir] OT? ADDING CONTACTS

Bill

The difference is that your manual method uses the Exchange version of
Active Directory Users and computers.  If you select the option to
mail-enable the contact then it adds a whole bunch of attributes to the
contact object in AD.  Compare the two extracts from LDP below, the first
being a mail-enabled contact and the second not.

>> Dn: CN=Alfred Contact,CN=Users,DC=root,DC=dom
1> cn: Alfred Contact; 
1> displayName: Alfred; 
1> mail: [EMAIL PROTECTED]; 
1> givenName: Alfred; 
1> instanceType: 0x4 = ( IT_WRITE ); 
1> legacyExchangeDN: /o=VMEX2003/ou=First Administrative
Group/cn=Recipients/cn=AlfredContact; 
1> distinguishedName: CN=Alfred Contact,CN=Users,DC=root,DC=dom; 
1> objectCategory:
CN=Person,CN=Schema,CN=Configuration,DC=root,DC=dom; 
4> objectClass: top; person; organizationalPerson; contact; 
1> objectGUID: f84228a6-7a7d-41de-be42-8877591f1467; 
2> proxyAddresses: SMTP:[EMAIL PROTECTED]; X400:c=US;a=
;p=VMEX2003;o=Exchange;s=Contact;g=Alfred;; 
1> name: Alfred Contact; 
2> showInAddressBook: CN=Default Global Address List,CN=All Global
Address Lists,CN=Address Lists Container,CN=VMEX2003,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=root,DC=dom; CN=All Contacts,CN=All
Address Lists,CN=Address Lists Container,CN=VMEX2003,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=root,DC=dom; 
1> sn: Contact; 
1> textEncodedORAddress: c=US;a=
;p=VMEX2003;o=Exchange;s=Contact;g=Alfred;; 
1> uSNChanged: 20782; 
1> uSNCreated: 20780; 
1> whenChanged: 11/21/2003 16:36:17 W. Europe Standard Time W.
Europe Daylight Time; 
1> whenCreated: 11/21/2003 16:35:40 W. Europe Standard Time W.
Europe Daylight Time; 
1> internetEncoding: 1310720; 
1> mailNickname: AlfredContact; 
1> mAPIRecipient: FALSE; 
1> targetAddress: SMTP:[EMAIL PROTECTED]; 
1> msExchALObjectVersion: 21; 
1> msExchPoliciesIncluded:
{ECEFDA4D-8EEE-4CCF-A8DE-E8E00FAEE60B},{26491CFC-9E50-4857-861B-0CB8DF22B5D7
};
---

>> Dn: CN=Bobby Contact,CN=Users,DC=root,DC=dom
1> cn: Bobby Contact; 
1> displayName: Bobby; 
1> givenName: Bobby; 
1> instanceType: 0x4 = ( IT_WRITE ); 
1> distinguishedName: CN=Bobby Contact,CN=Users,DC=root,DC=dom; 
1> objectCategory:
CN=Person,CN=Schema,CN=Configuration,DC=root,DC=dom; 
4> objectClass: top; person; organizationalPerson; contact; 
1> objectGUID: 71b94639-99f6-44bb-a393-50eeec2f2b93; 
1> name: Bobby Contact; 
1> sn: Contact; 
1> uSNChanged: 20786; 
1> uSNCreated: 20786; 
1> whenChanged: 11/21/2003 16:38:57 W. Europe Standard Time W.
Europe Daylight Time; 
1> whenCreated: 11/21/2003 16:38:57 W. Europe Standard Time W.
Europe Daylight Time;
---

If you use the standard version of ADUC (dsa.msc) you won't populate all the
Exchange-related content.

Tony

-- Original Message --
From: "Brown, Bill [contractor]" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date:  Fri, 21 Nov 2003 09:34:24 -0500

Not sure if this question is off-track or not.  I would not thi

RE: [ActiveDir] OT? ADDING CONTACTS

[Brown, Bill [contractor]]

Tony,

Appreciate the feedback - however, I do not understand the [your comment] use of the 
standard ADU&C vice the Exchange version.  Are you saying that the adds [manual and 
CSVDE] would be different if done on a DC that did not have E2K System Manager loaded? 
 In this case, both the manual and CSV adds were done on the same DC and being as this 
is a test bed scenario - E2K is also running on the DC.  Is there any way that this 
would affect replication in an exchange mixed mode environment?

R/Bill

 -Original Message-
From:   Tony Murray [mailto:[EMAIL PROTECTED] 
Sent:   Friday, November 21, 2003 10:45 AM
To: [EMAIL PROTECTED]
Subject:Re: [ActiveDir] OT? ADDING CONTACTS

Bill

The difference is that your manual method uses the Exchange version of Active 
Directory Users and computers.  If you select the option to mail-enable the contact 
then it adds a whole bunch of attributes to the contact object in AD.  Compare the two 
extracts from LDP below, the first being a mail-enabled contact and the second not.

>> Dn: CN=Alfred Contact,CN=Users,DC=root,DC=dom
1> cn: Alfred Contact; 
1> displayName: Alfred; 
1> mail: [EMAIL PROTECTED]; 
1> givenName: Alfred; 
1> instanceType: 0x4 = ( IT_WRITE ); 
1> legacyExchangeDN: /o=VMEX2003/ou=First Administrative 
Group/cn=Recipients/cn=AlfredContact; 
1> distinguishedName: CN=Alfred Contact,CN=Users,DC=root,DC=dom; 
1> objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=root,DC=dom; 
4> objectClass: top; person; organizationalPerson; contact; 
1> objectGUID: f84228a6-7a7d-41de-be42-8877591f1467; 
2> proxyAddresses: SMTP:[EMAIL PROTECTED]; X400:c=US;a= 
;p=VMEX2003;o=Exchange;s=Contact;g=Alfred;; 
1> name: Alfred Contact; 
2> showInAddressBook: CN=Default Global Address List,CN=All Global Address 
Lists,CN=Address Lists Container,CN=VMEX2003,CN=Microsoft 
Exchange,CN=Services,CN=Configuration,DC=root,DC=dom; CN=All Contacts,CN=All Address 
Lists,CN=Address Lists Container,CN=VMEX2003,CN=Microsoft 
Exchange,CN=Services,CN=Configuration,DC=root,DC=dom; 
1> sn: Contact; 
1> textEncodedORAddress: c=US;a= ;p=VMEX2003;o=Exchange;s=Contact;g=Alfred;; 
1> uSNChanged: 20782; 
1> uSNCreated: 20780; 
1> whenChanged: 11/21/2003 16:36:17 W. Europe Standard Time W. Europe Daylight 
Time; 
1> whenCreated: 11/21/2003 16:35:40 W. Europe Standard Time W. Europe Daylight 
Time; 
1> internetEncoding: 1310720; 
1> mailNickname: AlfredContact; 
1> mAPIRecipient: FALSE; 
1> targetAddress: SMTP:[EMAIL PROTECTED]; 
1> msExchALObjectVersion: 21; 
1> msExchPoliciesIncluded: 
{ECEFDA4D-8EEE-4CCF-A8DE-E8E00FAEE60B},{26491CFC-9E50-4857-861B-0CB8DF22B5D7}; 
---

>> Dn: CN=Bobby Contact,CN=Users,DC=root,DC=dom
1> cn: Bobby Contact; 
1> displayName: Bobby; 
1> givenName: Bobby; 
1> instanceType: 0x4 = ( IT_WRITE ); 
1> distinguishedName: CN=Bobby Contact,CN=Users,DC=root,DC=dom; 
1> objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=root,DC=dom; 
4> objectClass: top; person; organizationalPerson; contact; 
1> objectGUID: 71b94639-99f6-44bb-a393-50eeec2f2b93; 
1> name: Bobby Contact; 
1> sn: Contact; 
1> uSNChanged: 20786; 
1> uSNCreated: 20786; 
1> whenChanged: 11/21/2003 16:38:57 W. Europe Standard Time W. Europe Daylight 
Time; 
1> whenCreated: 11/21/2003 16:38:57 W. Europe Standard Time W. Europe Daylight 
Time; 
---

If you use the standard version of ADUC (dsa.msc) you won't populate all the 
Exchange-related content.

Tony

-- Original Message --
From: "Brown, Bill [contractor]" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date:  Fri, 21 Nov 2003 09:34:24 -0500

Not sure if this question is off-track or not.  I would not think so as it deals with 
AD attributes.  But if it is deemed OT - then my apologies to the list!

If you add contacts into AD via CSVDE, you specify certain required attributes and you 
additionally specify certain attributes that you want populated with specific values 
and you additionally specify the OU into which the imported contacts will be placed - 
OK, pretty much straight forward.

If you add a contact manually in a specific OU - AD wants to know the Associated 
Administrative Group that this contact is associated with - OK, again pretty much 
straight forward.

But wait, that was a different step from the CSVDE import!  My question to the list - 
What AD attribute is populated by selecting the Associated Administrative Group in the 
manual method as opposed to the import method?

R/Bill



List info   : http://ww

[ActiveDir] OT? ADDING CONTACTS

[Brown, Bill [contractor]]

Title: OT? ADDING CONTACTS






Not sure if this question is off-track or not.  I would not think so as it deals with AD attributes.  But if it is deemed OT – then my apologies to the list!

If you add contacts into AD via CSVDE, you specify certain required attributes and you additionally specify certain attributes that you want populated with specific values and you additionally specify the OU into which the imported contacts will be placed – OK, pretty much straight forward.

If you add a contact manually in a specific OU – AD wants to know the Associated Administrative Group that this contact is associated with – OK, again pretty much straight forward.

But wait, that was a different step from the CSVDE import!  My question to the list – What AD attribute is populated by selecting the Associated Administrative Group in the manual method as opposed to the import method?

R/Bill

RE: [ActiveDir] [Off-Topic] Moving files across volumes with perms intact

[Brown, Bill [contractor]]

Olly,

 

My immediate
read here would be to use the re-direction restore capability of a backup
program.  This would “move” your
permissions with the files.  I believe
that any share points contained within the moved files would have to created
manually.

 

R/Bill

 

-Original
Message-
From: Oliver Marshall
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 18, 2003
6:15 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] [Off-Topic]
Moving files across volumes with perms intact

 

Is it
possible to move files and folders across volumes so that the permissions
remain the same ? we have a dir tree that contains huge numbers of files and
folders, and i need to move them to a new volume. If the perms are reset (which
is the norm) then it will take forever to set the perms back again.

 

Olly

RE: [ActiveDir] OT: Mailbox Manager for Exchange 200

[Brown, Bill [contractor]]

Joe, back
down to the bottom of this post. 
Highlight Recipient Policy, right click, add new, name accordingly, then
properties, select mailbox manager and away you go.  I do not have an E2K SysManager in front of me – but that
should put you in the ballpark.  If
not mistaken, this was invoked with E2K SP1.  I might be wrong on that one.

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
3:14 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

I don’t have a mailbox
manager settings (policy) tab when I open properties on the recipient policy in
question… am I doing something wrong or do I have to install Service Pack 3
first?  This DC does not appear to have any Exchange Service Packs installed
..

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
11:48 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

I
believe that the Mailbox Manager is “folder aware” and will only clean specific
folders.  I think I tested this – but maybe not.  Anyway, it would be
a worthwhile effort.  Say you had a mailbox folder called 3rd
Party Fax Information and you had a server-side rule to deliver emails matching
some criteria to this folder.  Then [I believe] that Mailbox Manager could
be configured to work with just that one folder.  Throw it up in a test
bed – shouldn’t take more than a few hours to confirm one way or the other…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:46 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

I had
briefly looked into the rules option in outlook and that “cat” didn’t fit the
user’s needs.  I was hoping Mailbox Manager would be a better answer… 

 

No
offense to all the animal activists, but I don’t like cats anyway – the 4
legged kinds anyway. . . . 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
10:39 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

I am just a good ole country boy and can not quite visualize what it is
that you are doing.  Help me here.  Are these “emails” that you
scrape data from always to the same users?  As I understand the process –
Mailbox Manager cleans designated mailboxes based upon rules that the
administrator provides.  The key here being that you have to tell the
product which mailbox you want cleaned.  Possibly, a client-side solution
[such as an Outlook rule] based on a consistent value would work
better…Remember, there are many ways to skin a cat!  Damn!  Now I
will have the animal activists on my case…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Bill,
thanks! 

 

Basically,
I have a third party tool that scrapes some data from emails and faxes that
data out, etc.  Once that process has taken place I want those emails to
be automatically deleted (after 2 days, just in case J)  Do you know if
mailbox manager will do this? 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
10:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

As a follow-up, it does get just a little dicey if you are going to
manage mailboxes for different users in a different manner.  In other
words, maybe for front office folks 90 day deletion policy, sales folks 180 day
deletion policy, and all others 45 day deletion policy.  The only way I
have found to make this

RE: [ActiveDir] OT: Mailbox Manager for Exchange 200

[Brown, Bill [contractor]]

I believe that the Mailbox Manager is “folder aware” and will only clean
specific folders.  I think I tested
this – but maybe not.  Anyway, it
would be a worthwhile effort.  Say you
had a mailbox folder called 3rd Party Fax Information and you had a
server-side rule to deliver emails matching some criteria to this folder.  Then [I believe] that Mailbox Manager
could be configured to work with just that one folder.  Throw it up in a test bed – shouldn’t
take more than a few hours to confirm one way or the other…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:46 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

I had briefly looked into
the rules option in outlook and that “cat” didn’t fit the user’s needs.  I
was hoping Mailbox Manager would be a better answer… 

 

No offense to all the
animal activists, but I don’t like cats anyway – the 4 legged kinds anyway. . .
. 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
10:39 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

I am just a good ole country boy and can not quite visualize what it is
that you are doing.  Help me here.  Are these “emails” that you
scrape data from always to the same users?  As I understand the process –
Mailbox Manager cleans designated mailboxes based upon rules that the
administrator provides.  The key here being that you have to tell the
product which mailbox you want cleaned.  Possibly, a client-side solution
[such as an Outlook rule] based on a consistent value would work better…Remember,
there are many ways to skin a cat!  Damn!  Now I will have the animal
activists on my case…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Bill,
thanks! 

 

Basically,
I have a third party tool that scrapes some data from emails and faxes that
data out, etc.  Once that process has taken place I want those emails to
be automatically deleted (after 2 days, just in case J)  Do you know if
mailbox manager will do this? 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
10:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

As a follow-up, it does get just a little dicey if you are going to
manage mailboxes for different users in a different manner.  In other
words, maybe for front office folks 90 day deletion policy, sales folks 180 day
deletion policy, and all others 45 day deletion policy.  The only way I
have found to make this work is via a custom LDAP query using groups. 
This is the text for that query:

 

(&(mailNickname=*)(memberOf=CN=SPHQ Site Mailbox Cleaning,OU=SPHQ,DC=sphq,DC=ssp,DC=navy,DC=mil))

 

Obviously – change the names top protect the innocent…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Awesome,
thanks! 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
9:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

It
is built into the product.  Use the SysMngr MMC and highlight Recipient
Policies.  Select new policy and mailbox manager and you are on your way…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
8:15 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] OT: Mai

RE: [ActiveDir] OT: Mailbox Manager for Exchange 200

[Brown, Bill [contractor]]

Joe,

 

I am just a good ole country boy and can not quite visualize what it is
that you are doing.  Help me
here.  Are these “emails” that you
scrape data from always to the same users?  As I understand the process – Mailbox Manager cleans designated
mailboxes based upon rules that the administrator provides.  The key here being that you have to
tell the product which mailbox you want cleaned.  Possibly, a client-side solution [such as an Outlook rule]
based on a consistent value would work better…Remember, there are many ways to
skin a cat!  Damn!  Now I will have the animal activists on
my case…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Bill, thanks! 

 

Basically, I have a third
party tool that scrapes some data from emails and faxes that data out,
etc.  Once that process has taken place I want those emails to be
automatically deleted (after 2 days, just in case J)  Do you know if
mailbox manager will do this? 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
10:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

As a follow-up, it does get just a little dicey if you are going to
manage mailboxes for different users in a different manner.  In other words,
maybe for front office folks 90 day deletion policy, sales folks 180 day
deletion policy, and all others 45 day deletion policy.  The only way I
have found to make this work is via a custom LDAP query using groups. 
This is the text for that query:

 

(&(mailNickname=*)(memberOf=CN=SPHQ Site Mailbox Cleaning,OU=SPHQ,DC=sphq,DC=ssp,DC=navy,DC=mil))

 

Obviously – change the names top protect the innocent…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Awesome,
thanks! 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel 734.591.7324 
Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
9:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

It
is built into the product.  Use the SysMngr MMC and highlight Recipient
Policies.  Select new policy and mailbox manager and you are on your way…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
8:15 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] OT: Mailbox
Manager for Exchange 200

 

Sorry for
the off topic request, but I have a feeling someone can easily point me in the
right direction…

 

I am
looking for Mailbox Manager for Exchange 2000.   The MS site makes
reference to it being in the BackOffice resource kit – is that downloadable? 

 

If
anyone can help me out I would really appreciate it! 

 

Thanks!


 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 

RE: [ActiveDir] OT: Mailbox Manager for Exchange 200

[Brown, Bill [contractor]]

Joe,

 

As a follow-up, it does get just a little dicey if you are going to
manage mailboxes for different users in a different manner.  In other words, maybe for front office
folks 90 day deletion policy, sales folks 180 day deletion policy, and all
others 45 day deletion policy.  The
only way I have found to make this work is via a custom LDAP query using
groups.  This is the text for that query:

 

(&(mailNickname=*)(memberOf=CN=SPHQ Site Mailbox
Cleaning,OU=SPHQ,DC=sphq,DC=ssp,DC=navy,DC=mil))

 

Obviously – change the names top protect the innocent…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
10:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Awesome, thanks! 

 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 









From: Brown, Bill
[contractor] [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003
9:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Mailbox Manager for Exchange 200

 

Joe,

 

It
is built into the product.  Use the SysMngr MMC and highlight Recipient
Policies.  Select new policy and mailbox manager and you are on your way…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003 8:15
AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] OT: Mailbox
Manager for Exchange 200

 

Sorry
for the off topic request, but I have a feeling someone can easily point me in
the right direction…

 

I am
looking for Mailbox Manager for Exchange 2000.   The MS site makes
reference to it being in the BackOffice resource kit – is that downloadable? 

 

If
anyone can help me out I would really appreciate it! 

 

Thanks!


 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 

RE: [ActiveDir] OT: Mailbox Manager for Exchange 200

[Brown, Bill [contractor]]

Joe,

 

It is
built into the product.  Use the
SysMngr MMC and highlight Recipient Policies.  Select new policy and mailbox manager and you are on your
way…

 

R/Bill

 

-Original
Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003
8:15 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] OT: Mailbox
Manager for Exchange 200

 

Sorry
for the off topic request, but I have a feeling someone can easily point me in
the right direction…

 

I am
looking for Mailbox Manager for Exchange 2000.   The MS site makes
reference to it being in the BackOffice resource kit – is that downloadable? 

 

If
anyone can help me out I would really appreciate it! 

 

Thanks!


 

Joe Pelle

Systems
Analyst

Information
Technology

Valassis
/ IT

19975 Victor Parkway Livonia,
MI 48152

Tel
734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This
message may have included proprietary or protected information.  This
message and the information contained herein are not to be further communicated
without my express written consent.

 

RE: [ActiveDir] documenting servers

[Brown, Bill [contractor]]

COMPAQ/HP have a utility called Surveyor that runs when installed and then again on a 
weekly basis gathering most of the information that you are seeking.  Does not have to 
be a COMPAQ/HP machine for the software to run.  Downloadable from their support web 
site.

R/Bill

 -Original Message-
From:   Creamer, Mark [mailto:[EMAIL PROTECTED] 
Sent:   Wednesday, October 22, 2003 12:50 PM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] documenting servers

I have multiple goals for my server docs, although DR is definitely the most important 
to me.

The more servers we get, the more I need a way to quickly tell how much disk, how much 
RAM, what patch
levels, what apps are running, IIS or not, what services running under what 
credentials, blah blah
blah

Is others have said, there are many ways to get at the information, but it would be 
nice to kick off a
script and have it return what I want whenever. 

Management seems to think having a binder with server documentation in it as each new 
box gets built
is sufficient. I contend it changes too often and would like something more dynamic. 
Maybe a scheduled
polling event that writes to a database would be best. I've already started, thanks to 
Robbie's
cookbook and Matthew Lavy's WMI Scripting, and would be happy to participate in a more 
global
project...



List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Database move

[Brown, Bill [contractor]]

Don,

 

Never tried
this – but KB article 257420 describes what I believe you are asking.  Good luck…

 

R/Bill

 

-Original
Message-
From: Don Murawski (Lenox)
[mailto:[EMAIL PROTECTED]
Sent: Friday, October 17, 2003
11:24 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Database move

 

Is it
possible to move ntds folder to another drive?

If so,
what tool can be used?

 

 

 

 






Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or proprietary material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this email and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this email. If you have received this email in error, please notify us immediately by replying to the message and delete the email from your computer. This e-mail is and any response to it will be unencrypted and, therefore, potentially unsecure.  Thank you.

RE: [ActiveDir] OT? - LEGACY EXCHANGE DN

[Brown, Bill [contractor]]

em to want to do is modify that behavior so
that if you create a user in a particular OU in Active Directory, the ADC knows
to put in a particular CN in 5.5. Unfortunately, you'll have to get somewhat
complex with CA's (which I don't recommend), else change your process to
accomodate (e.g. create the account on 5.5 in the container you want it in, and
then move it to the appropriate 2000 server).  You could also educate
your users on the finer points of GAL usage to get them to understand how to
find a user, but that may not be an option (I am being totally serious about
that even if email makes it sound sarcastic). You could also use address
book views or even GAL views to mimic this behavior, but I think that's
lipstick on a pig in this situation.

 

If I've misunderstood,
please correct me as I'd hate to think I didn't understand this stuff. 
;-)

 

Al  

-Original Message-
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
2:47 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

Al, test-bed scenario:  empty root w/1 dc/gc, child domain A w/1 dc/gc E2K ADC
installed, child domain B w/1 dc/gc E55 ADC installed.  Created the new user in domain A and
tests showed that the GAL in domain B was not showing the new user in the
proper container.  Found the
legacyExchangeDN to be mis-represented. 
Created new user in domain B and it displayed correctly.

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
2:30 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

When you
created the mailbox, it was on a 5.5 server or a 2000 server?  

-Original Message-
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
1:57 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

Nice reply Al - however I do not believe that the
legacyExchangeDN of the first administrative group has anything to do with the
legacyExchangeDN of a newly created user in AD.  Well, maybe I am missing something here.  I do not intend on "mucking
about" with the attributes for anything other than the users that need
correction.  Additionally, I
question the fact about the ADC being the mechanism involved with the setting.  The reason I state that is because I
created a new user in AD in the domain that handles the E55 server and then a
mailbox for the user.  Guess
what?  ADSI Edit shows the
legacyExchangeDN attribute correctly for that user and that information was
populated via the ADC.  Finally, I
believe that there can be a delivery issue involved when the user
legacyExchangeDN does not match up with what E55 "sees" in the DS
attribute OBJ-DIST-NAME...

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
1:32 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q273863 is the description of how to do this.  However, I should
caution you that mucking about with the legacyExchangeDN attribute is not a
good idea.  Getting your users to live with it now is a better
approach.  They will be living with it going forward since Exchange GAL in
Exchange 200x doesn't care about containers.  You could also create ABV's
to mimic this, but again, I don't recommend spending much time on the legacy
system. 

 

At some point,
you're going to have to work with these users to make the change.  If they
cannot make that change, there might be a reason to use the GAL views in
Exchange 200x and it's best to know that early.  

 

Finally,
keep in mind that the ADC is the mechanism involved in this
setting.  To move them between 5.5 containers is not as simple as changing
the legacyExchangeDN since 5.x didn't understand or allow movement between
containers; it requires the Microsoft shuffle (copy, delete, create) on the 5.5
side + replication times.  In other words, there's a lot of moving parts
to make this scenario work.

 

Luck! :)

 

Al

-Original Message-
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
12:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

Al,

 

The immediate thing that comes to mind is that in our
mixed mode environment [that we will have to live with for a while yet...] is
that in the E55 sites the GAL lists these folks as being in the Recipients
container (ou) where they are really in a different departmental container
(ou).  Believe it or not - we have
users that insist on going to a container listing in the GAL and picking their
send to addresses!  Short of that -
I am sure there are other issues. 
Lastly, if MS put the attribute into AD - I think the attribute should
represen

RE: [ActiveDir] OT? - LEGACY EXCHANGE DN

[Brown, Bill [contractor]]

Title: Message









Al, test-bed scenario: 
empty root w/1 dc/gc, child domain A w/1 dc/gc E2K ADC installed, child
domain B w/1 dc/gc E55 ADC installed. 
Created the new user in domain A and tests showed that the GAL in domain
B was not showing the new user in the proper container.  Found the legacyExchangeDN to be
mis-represented.  Created new user
in domain B and it displayed correctly.

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
2:30 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

When you created the
mailbox, it was on a 5.5 server or a 2000 server?  

-Original Message-----
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
1:57 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

Nice reply Al - however I do not believe that the
legacyExchangeDN of the first administrative group has anything to do with the
legacyExchangeDN of a newly created user in AD.  Well, maybe I am missing something here.  I do not intend on "mucking
about" with the attributes for anything other than the users that need
correction.  Additionally, I
question the fact about the ADC being the mechanism involved with the
setting.  The reason I state that
is because I created a new user in AD in the domain that handles the E55 server
and then a mailbox for the user. 
Guess what?  ADSI Edit shows
the legacyExchangeDN attribute correctly for that user and that information was
populated via the ADC.  Finally, I
believe that there can be a delivery issue involved when the user
legacyExchangeDN does not match up with what E55 "sees" in the DS
attribute OBJ-DIST-NAME...

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
1:32 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q273863 is the description of how to do this.  However, I should
caution you that mucking about with the legacyExchangeDN attribute is not a
good idea.  Getting your users to live with it now is a better
approach.  They will be living with it going forward since Exchange GAL in
Exchange 200x doesn't care about containers.  You could also create ABV's
to mimic this, but again, I don't recommend spending much time on the legacy
system. 

 

At some
point, you're going to have to work with these users to make the change. 
If they cannot make that change, there might be a reason to use the GAL views
in Exchange 200x and it's best to know that early.  

 

Finally,
keep in mind that the ADC is the mechanism involved in this
setting.  To move them between 5.5 containers is not as simple as changing
the legacyExchangeDN since 5.x didn't understand or allow movement between
containers; it requires the Microsoft shuffle (copy, delete, create) on the 5.5
side + replication times.  In other words, there's a lot of moving parts
to make this scenario work.

 

Luck! :)

 

Al

-Original Message-
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
12:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

Al,

 

The immediate thing that comes to mind is that in our
mixed mode environment [that we will have to live with for a while yet...] is
that in the E55 sites the GAL lists these folks as being in the Recipients container
(ou) where they are really in a different departmental container (ou).  Believe it or not - we have users that
insist on going to a container listing in the GAL and picking their send to
addresses!  Short of that - I am
sure there are other issues. 
Lastly, if MS put the attribute into AD - I think the attribute should
represent the user exactly and this is not the case.

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
10:59 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

Plenty,
but I have a question first.  Why are you wanting to change it?  What
benefit is there if you change it?

-Original Message-
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
10:01 AM
To: ActiveDirList
Subject: [ActiveDir] OT? - LEGACY
EXCHANGE DN

To
All,

When I create a user in
AD the legacyExchangeDN attribute is always set to cn=Recipients no matter what
ou the user was created under.  Using ADSI Edit to change the value to
reflect the correct setting fails as the value is immediately
changed back.  Does anyone have any thoughts on this???

R/Bill

RE: [ActiveDir] OT? - LEGACY EXCHANGE DN

[Brown, Bill [contractor]]

Title: Message









Nice reply Al – however I do not believe that the legacyExchangeDN of
the first administrative group has anything to do with the legacyExchangeDN of
a newly created user in AD.  Well,
maybe I am missing something here. 
I do not intend on “mucking about” with the attributes for anything
other than the users that need correction.  Additionally, I question the fact about the ADC being the
mechanism involved with the setting. 
The reason I state that is because I created a new user in AD in the
domain that handles the E55 server and then a mailbox for the user.  Guess what?  ADSI Edit shows the legacyExchangeDN attribute correctly for
that user and that information was populated via the ADC.  Finally, I believe that there can be a
delivery issue involved when the user legacyExchangeDN does not match up with
what E55 “sees” in the DS attribute OBJ-DIST-NAME…

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
1:32 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q273863 is the description of how to do this.  However, I should
caution you that mucking about with the legacyExchangeDN attribute is not a
good idea.  Getting your users to live with it now is a better
approach.  They will be living with it going forward since Exchange GAL in
Exchange 200x doesn't care about containers.  You could also create ABV's
to mimic this, but again, I don't recommend spending much time on the legacy
system. 

 

At some point, you're
going to have to work with these users to make the change.  If they cannot
make that change, there might be a reason to use the GAL views in Exchange 200x
and it's best to know that early.  

 

Finally, keep in mind
that the ADC is the mechanism involved in this setting.  To move
them between 5.5 containers is not as simple as changing the legacyExchangeDN
since 5.x didn't understand or allow movement between containers; it requires
the Microsoft shuffle (copy, delete, create) on the 5.5 side + replication
times.  In other words, there's a lot of moving parts to make
this scenario work.

 

Luck! :)

 

Al

-Original Message-
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
12:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

Al,

 

The immediate thing that comes to mind is that in our
mixed mode environment [that we will have to live with for a while yet...] is
that in the E55 sites the GAL lists these folks as being in the Recipients
container (ou) where they are really in a different departmental container
(ou).  Believe it or not - we have
users that insist on going to a container listing in the GAL and picking their
send to addresses!  Short of that -
I am sure there are other issues. 
Lastly, if MS put the attribute into AD - I think the attribute should
represent the user exactly and this is not the case.

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
10:59 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

Plenty,
but I have a question first.  Why are you wanting to change it?  What
benefit is there if you change it?

-Original Message-
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
10:01 AM
To: ActiveDirList
Subject: [ActiveDir] OT? - LEGACY
EXCHANGE DN

To
All,

When I create a user in
AD the legacyExchangeDN attribute is always set to cn=Recipients no matter what
ou the user was created under.  Using ADSI Edit to change the value to
reflect the correct setting fails as the value is immediately
changed back.  Does anyone have any thoughts on this???

R/Bill

RE: [ActiveDir] OT? - LEGACY EXCHANGE DN

[Brown, Bill [contractor]]

Title: Message









Al,

 

The immediate
thing that comes to mind is that in our mixed mode environment [that we will
have to live with for a while yet…] is that in the E55 sites the GAL lists
these folks as being in the Recipients container (ou) where they are really in
a different departmental container (ou). 
Believe it or not – we have users that insist on going to a container
listing in the GAL and picking their send to addresses!  Short of that – I am sure there are
other issues.  Lastly, if MS put
the attribute into AD – I think the attribute should represent the user exactly
and this is not the case.

 

R/Bill

 

-Original
Message-
From: Mulnick, Al
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003
10:59 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT? -
LEGACY EXCHANGE DN

 

Plenty, but I have a
question first.  Why are you wanting to change it?  What benefit is
there if you change it?

-Original Message-----
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 16, 2003
10:01 AM
To: ActiveDirList
Subject: [ActiveDir] OT? - LEGACY
EXCHANGE DN

To
All,

When I create a user in
AD the legacyExchangeDN attribute is always set to cn=Recipients no matter what
ou the user was created under.  Using ADSI Edit to change the value to
reflect the correct setting fails as the value is immediately
changed back.  Does anyone have any thoughts on this???

R/Bill

[ActiveDir] OT? - LEGACY EXCHANGE DN

[Brown, Bill [contractor]]

Title: OT? - LEGACY EXCHANGE DN






To All,

When I create a user in AD the legacyExchangeDN attribute is always set to cn=Recipients no matter what ou the user was created under.  Using ADSI Edit to change the value to reflect the correct setting fails as the value is immediately changed back.  Does anyone have any thoughts on this???

R/Bill

RE: [ActiveDir] sysvol not replicating

[Brown, Bill [contractor]]

Just a guess here - but can you map to \\servername\netlogon?  If you can - what is 
the value of:
HKEY_LOCAL_MACHINE
System
CurrentControlSet
Services
Netlogon
Parameters
Script

R/Bill

 -Original Message-
From:   Rittenhouse, Cindy [mailto:[EMAIL PROTECTED] 
Sent:   Friday, August 29, 2003 11:26 AM
To: '[EMAIL PROTECTED]'
Subject:RE: [ActiveDir] sysvol not replicating

results from dcdiag


Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: EastCocalicoPD\ECPDC
  Starting test: Connectivity
 . ECPDC passed test Connectivity

Doing primary tests
   
   Testing server: EastCocalicoPD\ECPDC
  Starting test: Replications
 . ECPDC passed test Replications
  Starting test: NCSecDesc
 . ECPDC passed test NCSecDesc
  Starting test: NetLogons
 . ECPDC passed test NetLogons
  Starting test: Advertising
 Warning: DsGetDcName returned information for
\\psdc1.police.lancco.pa.us, when we were trying to reach ECPDC.
 Server is not responding or is not considered suitable.
 . ECPDC failed test Advertising
  Starting test: KnowsOfRoleHolders
 . ECPDC passed test KnowsOfRoleHolders
  Starting test: RidManager
 . ECPDC passed test RidManager
  Starting test: MachineAccount
 . ECPDC passed test MachineAccount
  Starting test: Services
 . ECPDC passed test Services
  Starting test: ObjectsReplicated
 . ECPDC passed test ObjectsReplicated
  Starting test: frssysvol
 Error: No record of File Replication System, SYSVOL started.
 The Active Directory may be prevented from starting.
 There are errors after the SYSVOL has been shared.
 The SYSVOL can prevent the AD from starting.
 . ECPDC passed test frssysvol
  Starting test: kccevent
 . ECPDC passed test kccevent
  Starting test: systemlog
 An Error Event occured.  EventID: 0x041B
Time Generated: 08/29/2003   10:50:20
(Event String could not be retrieved)
 . ECPDC failed test systemlog
   
   Running enterprise tests on : LANCCO.ROOT
  Starting test: Intersite
 . LANCCO.ROOT passed test Intersite
  Starting test: FsmoCheck
 . LANCCO.ROOT passed test FsmoCheck

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, August 29, 2003 10:39
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [ActiveDir] sysvol not replicating



whooah... easy.

Can you do a dcdiag and post the results please.

Robert Rutherford
+44 (0)1305 208232
+44 (0)7970 122362



 

  "Rittenhouse, Cindy"

  <[EMAIL PROTECTED]To:
[EMAIL PROTECTED]

  ster.pa.us> cc:

  Sent by:Subject:  [ActiveDir]
sysvol not replicating
  [EMAIL PROTECTED]

  ivedir.org

 

 

  29/08/2003 15:32

  Please respond to

  ActiveDir

 

 





Two days ago a consulting firm upgraded a BDC at a remote location to
Windows 2000. After the upgrade users had all types of trouble connecting.
It seems the sysvol is not replicating because the
Do_Not_Remove_NtFrs_PreInstall_Directory, Policies directory, and Scripts
directory do not exist on the remote server in either the sysvol\domain or
the sysvol\sysvol directory. The rest of AD seems to be replicating fine.
Can I simply copy those directories from one of my DCs to the DC in the
remote location?
Thanks

Cynthia Rittenhouse  MCSE,CCNA
LAN Administrator
County of Lancaster
Lancaster, PA 17602


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/






**
This E-mail and any files transmitted with it are in 
commercial confidence and intended solely for the use of
the individual or entity to whom they are addressed.
If you have received this E-mail in error please notify the 
Administrator by E-mail ([EMAIL PROTECTED]).
Any views or opinions expressed are solely those of the
author

RE: [ActiveDir] Batch Create Contacts

[Brown, Bill [contractor]]

Gene,

 

If you
have an extra $10K – throw it my way! 
Seriously, while the task is very daunting at the first look, it is not
at all difficult if you are proficient with the concatenate function of Excel
and are blessed with a little common sense.  If you want to contact me off-line [EMAIL PROTECTED],
I can share some cookbook documentation that I put together.  If this is for an E2K/AD solution and
Exchange is still in a mixed mode – it is a real piece of cake!

 

R/Bill

 

-Original
Message-
From: Jerry Welch
[mailto:[EMAIL PROTECTED]
Sent: Monday, July 21, 2003 5:30
PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Batch
Create Contacts

 

Hi Gene,

Please consider
SimpleSync from CPS Systems.  With it you can bring in any ODBC compliant
file, such as a CSV, Excell, Access, or SQL query - and Provision and Update AD
Contacts or User Objects, depending on your needs.  The mapping of your
data to AD attributes is handled by a simple text mapping file.  It
will handle multi-valued, multi-lined attributes.  It also compares
each update cycle to the prior cycle so that after the first sync you only
process changes to AD.  Cost is always a component - in the case you
describe it is under $10K, and you can expect to be live within a day or
two.  

SimpleSync is in use by
over 140 companies worldwide.  One major defense contractor is
Provisioning AD from 2 PeopleSoft HR data bases.  

For more information and
to download an evaluation copy  of SimpleSync, please visit www.cps-systems.com .

If you would prefer to
see SimpleSync 'live', please contact me at [EMAIL PROTECTED] for a web demo
using GoToMyPC or TightVNC.

Thank you for your time,

Jerry Welch

CPS Systems

US/Canada:   
1 888 666 0277

International: +1 703 827
0919 (-5 GMT)

www.cps-systems.com 

 

 

 

-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Walda Gene
Sent: Monday, July 21, 2003 5:19
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Batch Create
Contacts

Our
organization is attempting to setup an automated procedure that will first
create numerous contacts representing external clients and second would be able
to update the contact information. 
The contact information will change as email addresses and phone numbers
change for each external contact. 
Is there a tool that would assist in this process.  We have reviewed CSVDE and LDIFDE as well
as sample VB scripts on the Microsoft site but it is difficult to understand
exactly how to structure the CSV or LDF file to import the fields to our
requirements.  Any advice is
greatly appreciated.

 

Thank you,

 

Gene A.
Walda

Network Administrator

Indiana Farmers Mutual Insurance

10 West 106th Street

Indianapolis, IN 46290-1002

(317) 587-0729

[EMAIL PROTECTED]

 

RE: [ActiveDir] Attributes missing

[Brown, Bill [contractor]]

Title: Message









Don,

 

If you
still have 5.5 components in the system – real simple way to get your data into
AD.  Use your lab data and create a
.CSV file with 3 columns.  Obj-Class,
Alias Name, and Description.  Populate
Obj-Class with the literal Mailbox and copy your lab data into Alias Name and
Description.  Use your Exchange 5.5
Admin program and Import the data selecting Overwrite [obviously select the
appropriate container].  If you do
not have 5.5 components – you could script it using something like a “put”
function.  Just my 2 cents on a
rainy day…

 

R/Bill

 

-Original
Message-
From: Don Murawski (Lenox)
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 01, 2003 9:53
AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Attributes
missing

 

During
a recent Exchange migration using Aelita,  I have notice
that attributes that was there prior to the migration have been striped
out in the  description field. I'm assuming the information in Exchange
was incorrect.

 

Is
there a way to import that information back into AD?

 

I have
a copy from our lab that have all the descriptions for each user object.

 

 

Don L. Murawski

Sr. Network Administrator



WorldTravel BTI

Phone: (404) 923-9468

Fax: (404) 949-6710

Cell: (678) 549-1264

 






<>

RE: [ActiveDir] OT:(maybe) Distribution list problems

[Brown, Bill [contractor]]

Title: RE: [ActiveDir] OT:(maybe) Distribution list problems









Ken,

 

I did not mean to get on your case about this issue – just that it was a
real simple search on the actual error code…

 

Do you run E2K SP3?  Just a
WAG here – but this SP changes a lot of permissions.  You might want to check out the below link – it may/or may
not apply to your issue.

 

READ ACCESS TO THE EVERYONE GROUP IS REMOVED AFTER YOU INSTALL
EXCHANGE 2000

SP3

http://support.microsoft.com/?kbid=816789

 

 

R/Bill

 

-Original
Message-
From: Garello, Kenneth
[mailto:[EMAIL PROTECTED]
Sent: Friday, June 13, 2003 8:29
AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir]
OT:(maybe) Distribution list problems

 

Well…

 

I experimented with the
KB article 323749.

 I bound directly to one of the
distribution lists that I was having problems with and set the security
descriptor as the knowledge base instructed – I was then able to modify the
message restrictions list.  But I
was also able to then modify my other dist lists also.  The way the bind to the object
intimates that it is object specific.

 

I am still also confused
about why an Enterprise Administrator cannot modify without setting that parameter.

If anyone has any insight
I’d appreciate hearing it.

 

Ken

 

-Original
Message-
From: Garello, Kenneth
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 12, 2003 8:45
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:(maybe)
Distribution list problems

 

Bill,

 

Thanks for
the knowledge base number - I would never have posted a question on this
list if I had not felt that I had researched it to the best of my
ability.  I must have filtered the my search poorly.

 

That being
said, I am a not sure that this applies to me as I am attempting to modify the
distribution group as an Enterprise Enterprise admin as well as an exchange
administrator, but I will research this and hopefully it will apply.

 

Ken

-Original Message----- 
From: Brown, Bill [contractor]
[mailto:[EMAIL PROTECTED] 
Sent: Thu 6/12/2003 4:27 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [ActiveDir]
OT:(maybe) Distribution list problems

Ken, 

Took about 30 seconds to find knowledge
base article 323749 on TechNet - did you look? 

R/Bill 

 -Original Message- 
From:   Garello, Kenneth [mailto:[EMAIL PROTECTED]] 
Sent:   Thursday, June 12, 2003 2:32 PM 
To: [EMAIL PROTECTED] 
Subject:    [ActiveDir]
OT:(maybe) Distribution list problems 

I have an active directory forest with 1
parent domain and two childdomains 
which I upgraded from Winnt 4.0. 

The parent and one of the child domains
are running in native mode. 
I have an exchange2000/exchange5.5 mixed mode environment in which
some 5.5 
distribution lists were upgraded into the parent domain (native
AD) as 
universal distribution lists. 

I have had no issues with maintenance of
the distribution lists until 
recently.  If I try to add a name from any of the domains to
the "Accept 
Message Only from" list and click "apply", I
receive a "constraint 
violation" 8007202F. The box is titled "Active Directory
- Exchange 
extension.


Does anyone have any idea how to troubleshoot
this error? 

There are no event messages that give me
any insight. 

Thanks, 

Ken 
List info   : http://www.activedir.org/mail_list.htm 
List FAQ    : http://www.activedir.org/list_faq.htm 
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ 

 

List info   : http://www.activedir.org/mail_list.htm 
List FAQ    : http://www.activedir.org/list_faq.htm 
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ 

RE: [ActiveDir] OT:(maybe) Distribution list problems

[Brown, Bill [contractor]]

Ken,

Took about 30 seconds to find knowledge base article 323749 on TechNet - did you look?

R/Bill

 -Original Message-
From:   Garello, Kenneth [mailto:[EMAIL PROTECTED] 
Sent:   Thursday, June 12, 2003 2:32 PM
To: [EMAIL PROTECTED]
Subject:[ActiveDir] OT:(maybe) Distribution list problems

I have an active directory forest with 1 parent domain and two childdomains
which I upgraded from Winnt 4.0.

The parent and one of the child domains are running in native mode.
I have an exchange2000/exchange5.5 mixed mode environment in which some 5.5
distribution lists were upgraded into the parent domain (native AD) as
universal distribution lists.

I have had no issues with maintenance of the distribution lists until
recently.  If I try to add a name from any of the domains to the "Accept
Message Only from" list and click "apply", I receive a "constraint
violation" 8007202F. The box is titled "Active Directory - Exchange
extension.

Does anyone have any idea how to troubleshoot this error?

There are no event messages that give me any insight.

Thanks,

Ken
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

[Brown, Bill [contractor]]

Steve,

 

Understand
from your comments that you are not running WINS.  However, on the WINS tab there is a check box labeled “Enable
NetBIOS over TCP/IP”.  If this is
unchecked – you may see this problem.

 

R/Bill

 

-Original
Message-
From: Rick Kingslan
[mailto:[EMAIL PROTECTED]
Sent: Sunday, June 08, 2003 2:59
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Trying to
run DCPromo and getting error 5171

 

Steve,

 

On the first DC (I
suspect this where your DNS is), have you checked and determined that the AD
DNS zones have been created?  If you install the support tools from the
Server CD on the first DC, when you run DCDiag and NLTest, is everything (well
nearly so - one or two things will fail..) successful?

 

As to network - are both
of these DCs on the same network or separated onto different subnets? 
And, you state that you can ping by name.  Is this machine name, or
FQDN - and for which machine from where?

 

Using nslookup from the
second DC, can you resolve and lookup, say the
_msdcs. zone?

 

The problem is clearly
DNS related - either it's not resolving correctly or it's not being
reached.  If the zones are not registered on the DNS server, stop then
start the NETLOGON service. for the first DC.

 

Also, how do your event
logs look on the first DC?  DS, DNS, NTFRS?  Everything look
good?  Anything out of the ordinary in the System or App logs?

 

Let us know what you find
out!

 

Rick
Kingslan  MCSE, MCSA, MCT
Microsoft MVP - Active Directory
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
  

 









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of steve
Sent: Sunday, June 08, 2003 1:14
PM
To: [EMAIL PROTECTED]

Environment:
2 new servers

 

Servers
Configuration: Windows 2000 as workgroup. Ran DcPromo on the server1. Verified
that DNS was setup correctly, can ping server by name. Not using WINS.

 

Problem:
Can’t make second Server a DC.

 

Error
message: When running DcPromo on second server, I receive the same error
message. The link below explains my error message.

 

http://www.microsoft.com/windows2000/dns/tshoot/

 

 

Thanks,

Steve

 

 

 

RE: [ActiveDir] Nt4 domain controller upgrade to Windows 2000

[Brown, Bill [contractor]]

Graham,

 

We had
good success with this.  If you
want  to contact me off-line I can
go into some particulars…

 

R/Bill

 

-Original
Message-
From: Graham Turner
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 01, 2003
12:18 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Nt4
domain controller upgrade to Windows 2000

 

Missy, would
love to...

 

but given a
significant lack of documentation on installed apps / shares an upgrade seems
the better part of valour in this instance 

 

GT

 

 

 



-
Original Message - 



From: Missy Koslosky 



To: [EMAIL PROTECTED]


Sent: Tuesday, April 01, 2003
5:16 AM

Subject: Re:
[ActiveDir] Nt4 domain controller upgrade to Windows 2000

 

Sounds
like you're making something fairly simple into something rather
convoluted.  I'd simply rebuild the boxes and join them to the new
domain.  

 

Missy
Koslosky





-
Original Message - 



From: Graham Turner 



To: [EMAIL PROTECTED]


Sent: Friday, March 28, 2003
8:57 AM

Subject:
[ActiveDir] Nt4 domain controller upgrade to Windows 2000

 

Apologies if
this one has been around before but ..

as subject i am looking to acheive the upgrade of a whole load of NT4 backup
domain controllers to Windows 2000.

it is preferable to use an upgrade method (as opposed to new install) -
based on a number of installed applications / services (dhcp, wins, lpr
server).

it is also intended to change the domain membership of these DC's in the
same process. the observed behaviour is that the Windows 2000 setup routine
detects its configuration as a DC and generates a "red" warning in a
system
compatibility report stating that the PDC should be upgraded first.

presumably the setup routine must do some sort of query against the PDC to
determine its OS version ??

the domain from which these DC's are intended to be migrated is in fact a
NT4 domain, and this seems to be critical to the continuance of the setup
routine.

is it correct that there is no option for the existing domain membership to
be modified in this setup routine ??

it seemed to me that the dcpromo routine that initiates at first logon when
Windows 2000 starts would be flexible enough that if the administrator so
decided to remove any exsiting security information from the original NT4
domain and replace it with the information from an administrator specified
domain ??

if this is the case then the available options (given that the upgrade of
the PDC to a production domain is by far the least preferable) need to be
evaluated;

is it a "supported" operation to take the BDC offline from the
network,
promote it to PDC (merely to allow the setup routine to proceed) which
presumably would complete given that the system would not detect any - this
begs the question as to the checks that a BDC promotion goes through to
complete - is it merely the non-detection of an exsiting PDC or is there a
bit more sophistication ??

from here then once the system is running Windows 2000, the dcpromo process
can be stopped, and reinitiated once the computer is joined to the network
once again as a Windows 2000 member server, and joined to a new domain ?

otheriwse it seems to me that the only way of proceeding is to use the
"clean installation" method and reinstall all applications /
services.

on this tack, it seems to me potential issues with the restore of a DHCP
server configuration (backed up by taking a copy of the relevant NT4
registry key) to a Windows 2000 DHCP server - is this a supported operation.

I will be very appreciative of input from the newsgroup on this one

GT

RE: [ActiveDir] dynamic disks

[Brown, Bill [contractor]]

Title: Message









Joe,

 

Take a
look at article 289876.  Works like
a champ!

 

R/Bill

 

-Original
Message-
From: John Weber
[mailto:[EMAIL PROTECTED]
Sent: Monday, March 31, 2003 6:36
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] dynamic
disks

 

Paragon
Hard Disk Manager.

NT4
will want reboots.

2K
and higher will simply resize on the fly and then give you dumb looks.

 

Never
had an issue with it.  Great piece of gear IMHO.

 

 

John Weber

Consultant

Centerlogic, Inc

www.centerlogic.com

503-262-0490 x249

-Original Message-
From: Pelle, Joe
[mailto:[EMAIL PROTECTED] 
Sent: Monday, March 31, 2003 2:50
PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] dynamic disks

Anyone
know of some secret voodoo that will allow me to dynamically change the
partition size of my system partition without rebuilding the server? I need to
make the drive bigger... 

 

Joe
Pelle



Systems Administrator



Information Technology



Valassis / Targeted
Print & Media Solutions



35955 Schoolcraft Rd.   Livonia,
MI  48150



Tel 734.632.3753  Fax
734.632.6240



[EMAIL PROTECTED]



http://www.valassis.com/



 



This message may have included proprietary or protected
information.  This message and the
information contained herein are not to be further communicated without my
express written consent.



 

RE: [ActiveDir] ldap ports

[Brown, Bill [contractor]]

Title: Message









Joe,

 

Netstat –a|more
will give you a result set of the port numbers and their activity.  I set the LDAP protocol to 1005 [wasn’t
being used] on my Exchange 5.5 servers [stopped and started the DS] and then
when I installed the ADCs I set them to 1005 and they work like a champ.  Picked up that tip from a book by Barry
Gerber.  Upgrading the boxes as
time permits.

 

R/Bill

 

-Original
Message-
From: Ken Cornetet
[mailto:[EMAIL PROTECTED]
Sent: Monday, March 10, 2003 1:51
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ldap
ports

 

Exchange 2000
does not have an LDAP server, it relies on AD for it's directory.

 

I think your
problem is unrelated to LDAP ports.

 

What does the
Exchange 2000 log say toward the end?

 

Are all of the
servers in question in the same domain? If not, insure a two-way trust between
all domains involved, and *verify* the trusts are working (access cross-domain
resources from member workstations).

-Original Message-
From: Pelle, Joe [mailto:[EMAIL PROTECTED]

Sent: Monday, March 10, 2003 11:48
AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] ldap ports

Hello!  Can someone please clear something up
for me...?  If Exchange 2000 runs
on LDAP port 379 and Exchange 5.5 runs on LDAP 389 - how do they talk to each
other?  Doesn't the ADC run on port
389 as well?

 

Scenario:

 

Windows
2000 domain controller GC - want to install Exchange 2000 on it...  Already has ADC (from exchange CD)
installed on it and configured a two-way CA fro 5.5 and Active Directory.  I am able to replicate the ADC and get
changes/updates to my Active Directory, however when I try to install Exchange
2000 it hangs at "configuring SRS database and initializing".  I have the install point to the same
site the ADC is replicating with in 5.5. 


 

So my
question is this:  Do I have to
change the port on E5.5 to something OTHER THAN 389?  It seems as though my 5.5 can talk to the Active Directory
database and do updates but my Exchange 2000 can not talk to 5.5 (or vice
versa).  Is that because I am
trying to install Exchange 2000 on a Domain Controller that is also a Global
Catalog?  Or is my problem
completely unrelated to the LDAP ports? 

 

Thanks
in advance for you help and suggestions! 

 

Joe
Pelle



Systems Administrator



Information Technology



Valassis / Targeted
Print & Media Solutions



35955 Schoolcraft Rd.   Livonia,
MI  48150



Tel 734.632.3753  Fax
734.632.6240



[EMAIL PROTECTED]



http://www.valassis.com/



 



This message may have included proprietary or protected
information.  This message and the
information contained herein are not to be further communicated without my
express written consent.



 

RE: [ActiveDir] OT: Identifying laptops on domain

[Brown, Bill [contractor]]

We employ a standardized machine naming convention whereby a laptop is given
the name User-LT and this makes it a very simple process to break them out.

R/Bill

 -Original Message-
From:   Bjelke John A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED] 
Sent:   Friday, March 07, 2003 10:32 AM
To: '[EMAIL PROTECTED]'
Subject:RE: [ActiveDir] OT: Identifying laptops on domain

Existing IP scheme is static, and that's not viable to change at this time. 

-Original Message-
From: PERRIN Martial (EURIWARE) [mailto:[EMAIL PROTECTED] 
Sent: Friday, March 07, 2003 8:16 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] OT: Identifying laptops on domain


You can do this with segmentation on a DHCP network.
 
Martial

-Message d'origine-
De: Bjelke John A Contr AFRL/VSIO [mailto:[EMAIL PROTECTED]
Date: vendredi 7 mars 2003 16:04
À: '[EMAIL PROTECTED]'
Objet: [ActiveDir] OT: Identifying laptops on domain



Perhaps someone here might know: 

Is there any machine attribute or registry value that can be queried
to differentiate workstations and laptops on a domain? We have a
circumstance that requires laptops to be addressed differently from
workstations, and we have been unable to find any consistent variable to
poll for this determination. Any suggestions or assistance is most
appreciated. 

 John A. Bjelke 
 Systems administrator 
  505.853.6774 
 [EMAIL PROTECTED] 
  
The contents of this Email communication are 
confidential to the addressee. 
If you are not the intended recipient you 
may not disclose or distribute this 
communication in any form but should 
immediately contact the Sender. 
The information, images, documents and views 
expressed in this Email are personal to the 
Sender and do not expressly or implicitly 
represent official positions and policies of 
Unisys Federal Systems or it's subsidiaries 
and no authority exists on behalf of Unisys 
to make any agreements, representations or 
other binding commitment by means of Email. 



ATTENTION : Si vous n'êtes pas destinataire de ce message, vous n'êtes pas
autorisé à copier, retransmettre, distribuer, révéler ou conserver le
contenu de ce message. WARNING : If you are not the intended recipient, you
are not authorised to copy, disclose, distribute or retain in this e-mail. 


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

[ActiveDir] FOREST QUESTION

[Brown, Bill [contractor]]

To the List,

This may seem a silly question - but here goes.  If a site is within the
same namespace [i.e., hq.xyz.com and site1.xyz.com] and has not been brought
into AD as yet [site is still at NT4 SP4]  what will happen if an E2K
upgrade process is started for the rest of the forest.  By this I mean,
installing and configuring the ADCs and possibly upgrading some of the
Exchange 55 servers at HQ and other sites.  I think mail would continue to
flow as it relies on DNS resolution [or a direct connection via a stated IP
address] - but how would the replication be handled?  Would the non-AD site
continue to get updates from the bridgehead server via the directory
replication connector?

R/Bill

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Users Exchange Server

[Brown, Bill [contractor]]

Chuck,

If you add the following to your query [and then write it to the screen] you
should get what you are looking for...
mail,legacyExchangeDN

r/Bill
-Original Message-
From:   Chuck [mailto:[EMAIL PROTECTED]]
Sent:   Wednesday, January 22, 2003 8:00 PM
To: [EMAIL PROTECTED]
Subject:[ActiveDir] Users Exchange Server

  Hello,
I'm having a small problem, I've tried everything and can't
figure this
out. I'm using the basic strings and functions to get a
users details
and it works great on my home IIS running Win2K Server. I
took the code
and copied and pasted it and it worked on the business
network for a few
days, now it will show everything except the Exchange server
and the
postal address.
 
The IIS is running on an NT4 server and the network consists
of several
W2k domain controllers, we are on a native mode Active
Directory.
It's not the network, I have used the ADSI SDK and it works
showing
everything fine, I've made a VB application that works fine.
 
I have tried running it on a W2K workstation with IIS and
same thing, no
exchange server.
Has anyone else encontered this, or have any ideas?
 
Here's a small snipet of the code I'm using to query AD, any
help or
ideas would be greatly appreciated.
 
<%
strUCN = "USerID"
oConnection.Provider = "ADSDSOObject"
oConnection.Open "ADProvider", sUser, sPassword
  strADOQuery = ";(&(objectCategory=person)(objectClass=user)(samAccountName=" + & _
strUCN +  "));cn,adspath;subtree"
 
Response.Write(oUser.msExchHomeServerName)
%>
 
Regards,
Chuck
 
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] file jdbgmgr.exe

[Brown, Bill [contractor]]

direct from the properties...
 
Microsoft® Debugger Registrar for Java

-Original Message-
From: Hutchins, Mike [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 08, 2003 11:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] file jdbgmgr.exe


java debug manager?

-Original Message-
From: bobo [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 08, 2003 5:22 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] file jdbgmgr.exe


I see file jdbgmgr.exe on my \\winnt\system32  . I
don't what this is. do somebody knows it. It should be a java file but what
it does. Pls help. Thks

- Original Message - 
From: Van   Donk, Fred 
To: [EMAIL PROTECTED]   
Sent: Tuesday, January 07, 2003 3:24 PM
Subject: RE: [ActiveDir] AD Lab

Agreed
 

-Original Message-
From: Craig Cerino [ mailto:[EMAIL PROTECTED]
 ] 
Sent: Tuesday, January 07, 2003 10:21 AM
To: [EMAIL PROTECTED]  
Subject: RE: [ActiveDir] AD Lab



Right - - but if you have more than one DC I recommend making one of the
ones without FSMO roles the GC

 

-Original Message-
From: Van Donk, Fred [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, January 07, 2003 9:22 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Lab

 

When you have one domain there is not really a need for multiple GC's. Every
DC already has a full copy of the AD. GC's play a more important role when
you have a forest with multiple domains in it.

But there needs to be at least one GC in the forest. Even with one domain.

 

Fred

 

-Original Message-
From: Craig Cerino [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, January 07, 2003 8:35 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Lab

If you only have one DC in each site - -- yer pretty much tied to doing
that. If you have the resources I'd through a second DC in each site - -
make that your GC.

 

Jus my 2 cents

 

-Original Message-
From: Pelle, Joe [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, January 07, 2003 8:17 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Lab

 

If we have one domain - but multiple sites - would it be a best practice to
put a global catalog on the domain controller(s) at each site? 

 

KB:  http://support.microsoft.com/default.aspx?scid=kb;en-us;313994
 

 

 

Thanks! 

 

Joe Pelle 
Systems Administrator 
Information Technology 
Valassis / Targeted Print & Media Solutions 
35955 Schoolcraft Rd.   Livonia, MI  48150 
Tel 734.632.3753  Fax 734.632.6240 
  [EMAIL PROTECTED] 
http://www.valassis.com/   

This message may have included proprietary or protected information.  This
message and the information contained herein are not to be further
communicated without my express written consent.

-Original Message-
From: Rene Chakraborty [mailto:[EMAIL PROTECTED]] 
Sent: Monday, January 06, 2003 8:41 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] AD Lab

 

Got to make that BDC a Global Catalog Server before you more it over. 

 

 

Sites and Services


Rene

 

 

- Original Message - 

From: Don Murawski (Lenox)   

To: [EMAIL PROTECTED]   

Sent: Monday, January 06, 2003 3:08 PM

Subject: [ActiveDir] AD Lab

 

Has anyone setup a AD Lab and had Global Catalog problems?

I installed a BDC on the production network, disconnect it from the
production and connected it to the lab network.

Seize the FSMO roles.

I'm able to join the domain but, I'm receiving "Unable to establish
connection with a GC.

 

Any suggestion would be great.

 

 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Mutilple questions Schema, ou's

[Brown, Bill [contractor]]

Run the adminpak setup from the I386 folder on the W2K CD to re-install all
of the admin tools.  Not sure how to create a hidden OU.  Probably a
registry hack someplace...

R/Bill

-Original Message-
From:   Carlos Magalhaes [mailto:CarlosM@;trencor.net]
Sent:   Friday, November 15, 2002 3:33 AM
To: '[EMAIL PROTECTED]'
Subject:RE: [ActiveDir] Mutilple questions Schema,
ou's

 << File: ATT418632.htm >> First question Schema Management
Snap-In. --> Where can I find that?

 

Second question. AD Users and Computers View >> Advanced
Features.--> that
shows hidden OU's but how do you create hidden OU's?

 

Regards,

Carlos Magalhaes

 

-Original Message-
From: Michael Penland [mailto:mpenland@;marinaone.com] 
Sent: Friday, November 15, 2002 10:17 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Mutilple questions Schema, ou's

 

First question Schema Management Snap-In.

 

Second question. AD Users and Computers View >> Advanced
Features.

 

Hope that helps.

 

MPenland

- Original Message - 

From: Carlos Magalhaes   

To: '[EMAIL PROTECTED]'
  

Sent: Friday, November 15, 2002 2:59 AM

Subject: [ActiveDir] Mutilple questions Schema, ou's

 

Hey all,





Here are a few questions:



Where is the AD schema stored i.e. in a database ?

How can I find and unhide hidden OU's?



Thanks for your help!



Regards,

Carlos Magalhaes




-
This email and any files transmitted are
confidential and intended solely for the
use of the individual or entity to which
they are addressed, whose privacy
should be respected.  Any views or
opinions are solely those of the author
and do not necessarily represent those
of the Trencor Group, or any of its
representatives, unless specifically
stated.

Email transmission cannot be guaranteed
to be secure, error free or without virus
contamination.  The sender therefore
accepts no liability for any errors or
omissions in the contents of this message,
nor for any virus infection that might result
from opening this message.  Trencor is not
responsible in the event of any third party
interception of this email.

If you have received this email in error please notify
[EMAIL PROTECTED]   For more information about
Trencor, visit www.trencor.net 

VIRUS FREE SMTP! 
MarinaOne


  _  


Hey all,

 

 

Here are a few questions:

 

Where is the AD schema stored i.e. in a database ?

How can I find and unhide hidden OU's?

 

Thanks for your help!

 

Regards,

Carlos Magalhaes

 


VIRUS FREE SMTP! 
MarinaOne


VIRUS FREE SMTP! 
MarinaOne





-
This email and any files transmitted are
confidential and intended solely for the
use of the individual or entity to which
they are addressed, whose privacy
should be respected.  Any views or
opinions are solely those of the author
and do not necessarily represent those
of the Trencor Group, or any of its
representatives, unless specifically
stated.  

Email transmission cannot be guaranteed
to be secure, error free or without virus
contamination.  The sender therefore
accepts no liability for any errors or
omissions in the contents of this message,
nor for any virus infection that might result
from opening this message.  Trencor is not
responsible in the event of a

RE: [ActiveDir] Blocking Internet Access

[Brown, Bill [contractor]]

Block them at the firewall 

-Original Message-
From:   Salandra, Justin A. [mailto:jasalandra@;chcsnet.org]
Sent:   Friday, November 01, 2002 2:05 PM
To: ActiveDir (E-mail)
Subject:[ActiveDir] Blocking Internet Access

Is there a way to deny Internet Access in Active Directory
to certain users
without the use of a Proxy server or third party software
like Surf Control?


Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
914.681.8117 office
646.483.3325 cell
[EMAIL PROTECTED]  

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/