RE: [ActiveDir] adsiedit question

[Condra, Jerry W Mr HP]

Por que??

This is not the first time I've had to do it. It's a simple fix. The
problem I ran into and posted for was the error in adsiedit which I was
able to figure out. The thing I need to figure out now is why/how the
SystemMailboxes were homed on the wrong databases. That's a post for
another forum. But I'd be happy and appreciative to take any ideas here
if offered.

Thanks
Jerry

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Tuesday, January 23, 2007 7:40 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] adsiedit question

You shouldn't be doing this.

Thanks,
Brian Desmond
[EMAIL PROTECTED]

c - 312.731.3132


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:ActiveDir- 
> [EMAIL PROTECTED] On Behalf Of Condra, Jerry W Mr HP
> Sent: Tuesday, January 23, 2007 5:59 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] adsiedit question
>
> I needed to move SystemMailboxes which won't move with the wizard.
> Somehow several were homed on one database and it caused event sink 
> problems. This was the easiest method.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, 
> Deji
> Sent: Tuesday, January 23, 2007 4:44 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] adsiedit question
>
> Why are you using adsiedit to rehome a mailbox? Doesn't the move 
> mailbox wizard work for your needs?
>
>
> Sincerely,
>_
>   (, /  |  /)   /) /)
> /---| (/_  __   ___// _   //  _
>  ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
> (_/ /)
>(/
> Microsoft MVP - Directory Services
> www.akomolafe.com http://www.akomolafe.com>  -

> we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow 
> you were worried about Yesterday? -anon
>
> 
>
> From: Condra, Jerry W Mr HP
> Sent: Tue 1/23/2007 1:59 PM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] adsiedit question
>
>
> Hi all
> I didn't OT this even though I'm making modifications to Exchange 
> since the question seems to be adsiedit related and therefore related
to AD.
> I'm trying to modify an attribute for a mailbox using adsiedit.
> Particularly I'm rehoming it's database by modifying the homeMDB 
> attribute.
>
> The problem I'm running into is I'm getting an error stating "The name

> reference is invalid" when I try to apply the change. I've done this a

> few times but this is the first time I've run into this error. Google 
> doesn't give enough info to determine the cause...or maybe it is and I

> just don't know enough about the response to see itthat never 
> happens. ;-)
>
> If anyone can shed some light it would be greatly appreciated.
>
> Many thanks
> Jerry
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx

RE: [ActiveDir] adsiedit question

[Condra, Jerry W Mr HP]

In the post before I indicated the SystemMailboxes were on the wrong
databases. Our servers have 3 storage groups and 5 databases each.
Somehow 13 of the 15 were on one database and causing problems with
event sinks. I've seen this happen on newly built Exchange servers and
the fix was easy enough since there were no users. In this case it's a
fully populated server so deleting databases and recreating is not an
option. In this case the rehome using adsiedit -to me- is much easier
than other methods mentioned. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael B.
Smith
Sent: Tuesday, January 23, 2007 7:13 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] adsiedit question

I'm forced to ask - why do you want to move SystemMailboxes? You
shouldn't ever need to. There is a reason that the move mailbox wizard
doesn't move them. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Condra, Jerry W
Mr HP
Sent: Tuesday, January 23, 2007 5:59 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] adsiedit question

I needed to move SystemMailboxes which won't move with the wizard.
Somehow several were homed on one database and it caused event sink
problems. This was the easiest method.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, Deji
Sent: Tuesday, January 23, 2007 4:44 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] adsiedit question

Why are you using adsiedit to rehome a mailbox? Doesn't the move mailbox
wizard work for your needs?
 

Sincerely, 
   _
  (, /  |  /)   /) /)   
/---| (/_  __   ___// _   //  _ 
 ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)  
   (/   
Microsoft MVP - Directory Services
www.akomolafe.com http://www.akomolafe.com>  -
we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow
you were worried about Yesterday? -anon

________________

From: Condra, Jerry W Mr HP
Sent: Tue 1/23/2007 1:59 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] adsiedit question


Hi all
I didn't OT this even though I'm making modifications to Exchange since
the question seems to be adsiedit related and therefore related to AD.
I'm trying to modify an attribute for a mailbox using adsiedit.
Particularly I'm rehoming it's database by modifying the homeMDB
attribute. 

The problem I'm running into is I'm getting an error stating "The name
reference is invalid" when I try to apply the change. I've done this a
few times but this is the first time I've run into this error. Google
doesn't give enough info to determine the cause...or maybe it is and I
just don't know enough about the response to see itthat never
happens. ;-)

If anyone can shed some light it would be greatly appreciated.

Many thanks
Jerry 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx

RE: [ActiveDir] adsiedit question

[Condra, Jerry W Mr HP]

I needed to move SystemMailboxes which won't move with the wizard.
Somehow several were homed on one database and it caused event sink
problems. This was the easiest method.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, Deji
Sent: Tuesday, January 23, 2007 4:44 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] adsiedit question

Why are you using adsiedit to rehome a mailbox? Doesn't the move mailbox
wizard work for your needs?
 

Sincerely, 
   _
  (, /  |  /)   /) /)   
/---| (/_  __   ___// _   //  _ 
 ) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)  
   (/   
Microsoft MVP - Directory Services
www.akomolafe.com http://www.akomolafe.com>  -
we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow
you were worried about Yesterday? -anon

____

From: Condra, Jerry W Mr HP
Sent: Tue 1/23/2007 1:59 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] adsiedit question


Hi all
I didn't OT this even though I'm making modifications to Exchange since
the question seems to be adsiedit related and therefore related to AD.
I'm trying to modify an attribute for a mailbox using adsiedit.
Particularly I'm rehoming it's database by modifying the homeMDB
attribute. 

The problem I'm running into is I'm getting an error stating "The name
reference is invalid" when I try to apply the change. I've done this a
few times but this is the first time I've run into this error. Google
doesn't give enough info to determine the cause...or maybe it is and I
just don't know enough about the response to see itthat never
happens. ;-)

If anyone can shed some light it would be greatly appreciated.

Many thanks
Jerry 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx

RE: [ActiveDir] adsiedit question

[Condra, Jerry W Mr HP]

Disregard...I figured it out. I missed a character change further down
the value string. Doh! But I now have a better understanding of that
error. :-) 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Condra, Jerry W
Mr HP
Sent: Tuesday, January 23, 2007 4:00 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] adsiedit question

Hi all
I didn't OT this even though I'm making modifications to Exchange since
the question seems to be adsiedit related and therefore related to AD.
I'm trying to modify an attribute for a mailbox using adsiedit.
Particularly I'm rehoming it's database by modifying the homeMDB
attribute. 

The problem I'm running into is I'm getting an error stating "The name
reference is invalid" when I try to apply the change. I've done this a
few times but this is the first time I've run into this error. Google
doesn't give enough info to determine the cause...or maybe it is and I
just don't know enough about the response to see itthat never
happens. ;-)

If anyone can shed some light it would be greatly appreciated.

Many thanks
Jerry 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx

[ActiveDir] adsiedit question

[Condra, Jerry W Mr HP]

Hi all
I didn't OT this even though I'm making modifications to Exchange since
the question seems to be adsiedit related and therefore related to AD.
I'm trying to modify an attribute for a mailbox using adsiedit.
Particularly I'm rehoming it's database by modifying the homeMDB
attribute. 

The problem I'm running into is I'm getting an error stating "The name
reference is invalid" when I try to apply the change. I've done this a
few times but this is the first time I've run into this error. Google
doesn't give enough info to determine the cause...or maybe it is and I
just don't know enough about the response to see itthat never
happens. ;-)

If anyone can shed some light it would be greatly appreciated.

Many thanks 
Jerry 
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx

RE: [ActiveDir] DFS vs Robocopy question

[Condra, Jerry W Mr HP]

Initially the data size to be distributed is about 60G but that's
subject to shrink and grow as needed. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matheesha
Weerasinghe
Sent: Wednesday, December 06, 2006 11:32 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] DFS vs Robocopy question

How much data do you want to keep in sync between the distribution
points? 

Cheers

M@


On 12/6/06, Condra, Jerry W Mr HP < [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> > wrote:

Hi all
I'm looking for feedback on a couple of scenarios for our
environment. We 
have three W2K3 SP1 domains and WAN separated regions in a
couple of them.
When deploying software, hotfixes and such I want to go to the
'distribution
point' for that domain/region so as not to traverse the WAN for
downloads. 
Each distribution point needs to mirror the others. Each region
has an app
server where we maintain these distribution points for
downloads, patches
and such and currently is managed manually as far as keeping
each server 
identical to the other. I'm not familiar with DFS other than
what is and
does and have not configured or used it. Robocopy seems okay but
also has a
lot of configuration to deal with. DFS seems to be the best but
wanted to 
see what the experts thought. My concern is if I create the DFS
hierarchy
I'd still be pointed to one server for the files. In reading the
documentation I see multiple roots can be established which I'm
hoping would 
provide access to each regional distribution point and still
replicate the
latest uploads from one point to all others.

Appreciate any feedback.

Thanks

Jerry





List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

[ActiveDir] DFS vs Robocopy question

[Condra, Jerry W Mr HP]

Hi all
I'm looking for feedback on a couple of scenarios for our environment. We
have three W2K3 SP1 domains and WAN separated regions in a couple of them.
When deploying software, hotfixes and such I want to go to the 'distribution
point' for that domain/region so as not to traverse the WAN for downloads.
Each distribution point needs to mirror the others. Each region has an app
server where we maintain these distribution points for downloads, patches
and such and currently is managed manually as far as keeping each server
identical to the other. I'm not familiar with DFS other than what is and
does and have not configured or used it. Robocopy seems okay but also has a
lot of configuration to deal with. DFS seems to be the best but wanted to
see what the experts thought. My concern is if I create the DFS hierarchy
I'd still be pointed to one server for the files. In reading the
documentation I see multiple roots can be established which I'm hoping would
provide access to each regional distribution point and still replicate the
latest uploads from one point to all others. 

Appreciate any feedback.

Thanks
 
Jerry 


smime.p7s
Description: S/MIME cryptographic signature

RE: [ActiveDir] OT: M$

[Condra, Jerry W Mr HP]

I have a mostly
positive view of M$ and like their products. Heck, I’m certified in their
products. But that doesn’t make them inexpensive and like any other big
company they are out to make $. J

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson
Sent: Thursday, November 09, 2006
12:14 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] OT: M$



 



Just out of curiosity, what makes
people think it's appropriate to refer to Microsoft as "M$" on
an MS-focused mailing list whose participants include Microsoft employees,
Microsoft contractors, Microsoft MVPs and various other people who may have a
relatively positive view of Microsoft?





 





Laura





 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jitendra Kalyankar
Sent: Thursday, November 09, 2006
10:16 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir]
Beginner's Book on Scripting - WSH or _vbscript_?



This is the link to M$ to start with...very good info





 





http://msdn.microsoft.com/library/default.asp?url="">





 






-- 
Sincerely,
J

 





On 11/9/06, Stu
Packett <[EMAIL PROTECTED]>
wrote: 

Hello everyone.  After reading through a lot of the posts on this
mailing list, I realize I could make my job easier if I knew how to
script.  I have no experience in scripting, but would like to know what
books do you recommend as a beginner's book on scripting?  Also, I don't
really know the difference between WSH and _vbscript_, so if anyone could explain
that, I'd appreciate that.  After browsing through Amazon, I saw several
books on WSH and _vbscript_, but don't know where I should focus on.  I'm
also open to computer based training (CBT) videos of any exist.  Thanks in
advance. 

RE: [ActiveDir] Determine disabled computer accounts

[Condra, Jerry W Mr HP]

Thanks
everyone. Three hits same reference. I think I’m seeing a pattern here. Checking
it out.  ;-)

 

Thanks
Jerry

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Monday, October 16, 2006
1:10 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Determine
disabled computer accounts



 


Joe's OldCmp with the -onlydisabled command
line switch. 
http://www.joeware.net/win/free/tools/oldcmp.htm


Thanks,

Andrew
Fidel 




 
  
  "Condra, Jerry W Mr HP"
  <[EMAIL PROTECTED]> 
  Sent
  by: [EMAIL PROTECTED] 
  10/16/2006 01:50 PM 
  
   

Please
respond to
 ActiveDir@mail.activedir.org

   
  
  
  
  
  
   

To





   
   

cc


 

   
   

Subject


[ActiveDir] Determine disabled computer
accounts

   
  
   
  
   

 


 

   
  
  
  
 





Hello
all
I'm trying to determine the number of computer
accounts as well as which
are disabled for our three domains. I've tried
Quest Reporter, ADUC and
Hyena but I'm not able to get the disabled
computers from any of those
tools. I'm assuming at this point it will take a
script but I'm not sure
of the attribute to use. From what I've gathered
from web searches it
looks like I should use the userAccountControl
attribute. But that
doesn't seem to give me the necessary answer
either. Any help is
appreciated.

Thanks

Jerry

List info   :
http://www.activedir.org/List.aspx
List FAQ    :
http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.activedir.org/ml/threads.aspx

[ActiveDir] Determine disabled computer accounts

[Condra, Jerry W Mr HP]

Hello all
I'm trying to determine the number of computer accounts as well as which
are disabled for our three domains. I've tried Quest Reporter, ADUC and
Hyena but I'm not able to get the disabled computers from any of those
tools. I'm assuming at this point it will take a script but I'm not sure
of the attribute to use. From what I've gathered from web searches it
looks like I should use the userAccountControl attribute. But that
doesn't seem to give me the necessary answer either. Any help is
appreciated.

Thanks
 
Jerry

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

RE: [ActiveDir] Computer bootup speeds

[Condra, Jerry W Mr HP]

I’d also
verify what server my machines are authenticating to using “Set L”
from a command prompt and making sure they are hitting the correct ones. Sounds
like the IP range may not be defined in Sites and Services.

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Krenceski, William
Sent: Wednesday, August 09, 2006
2:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Computer
bootup speeds



 

I had this happen once and for the life of
me could not figure it out. It was happening to computers pointed to one router
in particular as they're default gateway. It was one of 3 of our Gateway
routers so I swapped DHCP settings to a different one and they all started
working like they should. 

 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Brunson
Sent: Wednesday, August 09, 2006
2:57 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Computer
bootup speeds

First thing I would check is the DNS
settings on the client.  Are they pointing at a valid DNS server, and is
it responding?

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ
Sent: Wednesday, August 09, 2006
1:44 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Computer
bootup speeds



 

No, just local.

 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, August 09, 2006
1:37 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Computer
bootup speeds


Do you have roaming profiles? 

Andrew
Fidel 


 
  
  "Rimmerman, Russ" <[EMAIL PROTECTED]> 
  Sent
  by: [EMAIL PROTECTED] 
  08/09/2006
  02:29 PM 
  
   

Please respond
to
 ActiveDir@mail.activedir.org

   
  
  
  
  
  
   

To


 

   
   

cc


 

   
   

Subject


[ActiveDir] Computer bootup speeds

   
  
   
  
   

 


 

   
  
  
  
 






Is there any easy way to determine why it's taking
so long for PCs in
our AD to boot up?  It sits at applying
settings for quite awhile, so
I'm thinking it may have something to do with
GPOs, but most computers
only have 2 or 3 GPOs applied to them.  I
wouldn't think the GPOs would
take that long to apply though.  Sometimes it
literally sits at applying
settings for 4 or 5 minutes!  
I guess I could move a computer to an OU with no
GPOs and see, but is
there any other ways?  

Thanks

~~
This e-mail is confidential, may contain
proprietary information
of Cameron and its operating Divisions and may be
confidential
or privileged.

This e-mail should be read, copied, disseminated
and/or used only
by the addressee. If you have received this
message in error please
delete it, together with any attachments, from
your system.
~~
List info   :
http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.activedir.org/ml/threads.aspx


 
  
  ~~
  This e-mail is confidential, may contain proprietary information
  of Cameron and its operating Divisions and may be confidential
  or privileged.
  
  This e-mail should be read, copied, disseminated and/or used only
  by the addressee. If you have received this message in error please
  delete it, together with any attachments, from your system.
  ~~
  
 


 





Confidentiality Notice: The information contained in this message may be legally privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error please notify the author immediately by replying to this message and deleting the original message. Thank you.

[ActiveDir] OT: E2K3 ~ Deleted mailboxes

[Condra, Jerry W Mr HP]

Does anyone know if there's a corresponding event id to a user's mailbox
being purged from an Exchange server after the retention timeframe
expires? I see event id 9535 showing the number of deleted mailboxes
cleaned but I want to know if there's an event showing the actual names
associated with mailboxes purged once past the retention date.

Thanks
 
Jerry 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

[ActiveDir] OT: E2K3 ~ Deleted mailboxes

[Condra, Jerry W Mr HP]

Does anyone know if there's a corresponding event id to a user's mailbox
being purged from an Exchange server after the retention timeframe
expires? I see event id 9535 showing the number of deleted mailboxes
cleaned but I want to know if there's an event showing the actual names
associated with mailboxes purged once past the retention date.

Thanks
 
Jerry 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

RE: [ActiveDir] Profile migration to new domain

[Condra, Jerry W Mr HP]

gt;
>   5.  From the Control Panel,
launch Administrative Tools>Computer 
>  Management.
>
>   6. Select System Tools>Local Users
and Groups.
>
>   7. Select Users.
>
>   8. Right-click in the right-pane and
select New User to add a user 
>  named
"Foo."
>
>   9. Double-click the user object and
select the Profile tab to view
>  the properties
for Foo.
>
> 10. In the Profile path field, point to the exact
profile you copied 
>  to C:\Temp in
Step 4. Click OK.
>
> 11. Close all open applications, shut down the
Windows XP Pro machine,
>  and move it
physically to the new SBS 2003 network. Reboot and
>  relaunch the
SBS Network Configuration Wizard.
>
> 12. Back on the screen to Assign users to this
computer and migrate
>  their profiles,
in the lower section, under the user name (for 
>  example,
NormH), click Current User Settings and select Foo.
>  Complete the
steps for joining the workstation to the SBS 2003
>  domain. The
profile WILL be migrated!
> 
>
> *User Profile Registry*
>
> This method came in from M.J. Shoer ( [EMAIL PROTECTED]
> [EMAIL PROTECTED]
>), who attended
> the SMB Nation Summit in Boston in May. He writes:
>
>This method has worked for
us without fail. We can retain the
>complete profile
customizations for a PC that was logged into one 
>domain and must now be logged
into a new one.
>
>The method works for both
Win2K and WinXP. It has also worked for
>upgrading SBS 2000 to SBS
2003, where it is happening on the same 
>server, meaning that you
have to reformat the SBS 2000 server and
>load "freshie,"
as you would say, with SBS 2003. Here's how it
> works.
>
>Once the SBS 2003 server is
set up and the computers are set up on 
>the server side, log into
the client PC and run the
> connectcomputer
>URL. When that step is
completed, log in as the user. Then
>immediately log off and log
on as the domain administrator. 
>
>Be sure the domain user
account is in the local administrator's
>group. Then open Registry
Editor and navigate to
>
>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList. 
>You will see a listing for
each SID. Within each SID key, you will
>see an entry for
ProfileImagePath with a path to the users profile
>in the form of
%SystemDrive%\Documents and Settings\UserName. 
>
>The trick is to find the
new key that was set up at logon to
> the SBS
>2003 server and edit the
path to refer back to the original
> profile
>path. So, for example, if you
are migrating and changing domains, 
>you want to have a path
like %SystemDrive%\Documents and
>Settings\UserName.OldDomain.
You then have a new SID key with a
> path
>like
%SystemDrive%\Documents and Settings\UserName.NewDomain. You 
>can edit this key and
replace NewDomain with OldDomain to point to
>the old profile.
>
>In the case of a server
migration within the same domain, you
> have a
>path to the effect of
%SystemDrive%\Documents and
>Settings\UserName.Domain
and %SystemDrive%\Documents and
>Settings\UserName.Domain.000.
In this instance, you delete the .000
>to point back to the
original profile. 
>
>
> *The MCSE Way*
>
> Then there are the grizzled MCSEs amongst us who
pointedly highlight
> using the Active Directory Migration Tool (ADMT).
Details at
> http://www.microsoft.com/technet/prodtechnol/windows2000serv/downloads/admtool.mspx
> <http://www.microsoft.com/technet/prodtechnol/windows2000serv/downloads/admtool.mspx
>).
> Enough said!
>
>
>
>
> Al Mulnick wrote:
>
> > Suggestions? More like a shot in the dark. :)
> >
> > Have you seen the transfer your settings
wizard in XP? Have you 
> > checked to see what that can do for
you?  I suspect there will
> be some
> > scripting involved, because there will be no
automated way to
> > determine the source/target profiles
programatically. You could 
> > migrate their settings etc, but there's no
sid/sidhistory to
> > reference. Not much point in getting that
information either.
> There's
> > also the permissions issues etc. 
> >
> > Was it me, I'd suggest taking this
opportunity to re-image the
> > workstations in question. Cleaner, neater,
more secure, and no
> > lingering issues to deal with. 
&

[ActiveDir] Profile migration to new domain

[Condra, Jerry W Mr HP]

Hi all
The environment I'm in has multiple domains and I've been given a task
to move about 40 users from one domain to another. There's no trust
between the source domain and mine and no plans to have one. Too much
red tape. My dilemma is trying to preserve the user's desktop profiles
when they come over to my domain. In the past there's been a trust
between any domain migrations I've performed which provides a host of
avenues but with no trust I'm not sure of a way to do it other than some
manual moves and permission/registry tweaks. However, doing that for 40
users with a manual process is not my idea of fun. Saving their email is
covered so it's not an issue. Any ideas or methods would be welcomed.

Many thanks
 
Jerry 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

[ActiveDir] Exchange mailing lists

[Condra, Jerry W Mr HP]

Anyone know of an Exchange mailing list like this one? I find lots of
blogs but no active mailing lists such as this. I gain lots of valuable
insight for AD and would like to do the same with Exchange 2003.

Thanks
 
Jerry Condra - Technology Consultant
Tier III AD/Exchange Support
HP Consulting & Integration
USAMITC - San Antonio


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] PcAnywhere vs. Terminal servcies

[Condra, Jerry W Mr HP]

Valuable
$.0.02. I was thinking purely from a server standpoint.

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Molkentin, Steve
Sent: Tuesday, January 31, 2006
4:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir]
PcAnywhere vs. Terminal servcies



 

Just to clarify though, if you connect to
the console using RDP, it locks out the user at the other end, so they can't do
anything or even watch... you can then disconnect, but it leaves the machine
locked.

 

Just to add to the mix...

 

We use RDP for our servers and DameWare
for our clients for support. My $0.02 inc GST.

 

themolk.



 







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Tom Kern
Sent: Wednesday, 1 February 2006
6:54 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir]
PcAnywhere vs. Terminal servcies



Thats what I thought.





Thanks everyone!

 





On 1/31/06, Condra,
 Jerry W Mr HP <[EMAIL PROTECTED]>
wrote: 



We use term serve everyday and
disconnect [not logoff] and everything running continues. No switches needed.
It's run from this shortcut: 

 

%SystemRoot%\System32\mstsc.exe

 

Jerry

 









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Richard Waldrop
Sent: Tuesday, January 31, 2006
1:24 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir]
PcAnywhere vs. Terminal servcies



 

I may be incorrect but mstsc.exe /console and the session keeps running

In my company I have many people on the Network
infrastructure team  that insist on using PcAnywhere over Term services
because they feel that when they close out the PcAnywhere window, any
application that they start in their user context continues to run. 
> 
>  
> In Term services this is not the case.
>  
> Is there anyway to make this happen in Term Services Remote
Admin mode.
>  
> Most of these servers are Win2k.
>  
> I'd really prefer that they run Term services instead of
PcAnywhere and I'd like to figure out a way to give them the same
"experience".
>  
>  
> Thank you
>  
>  
> 





 

RE: [ActiveDir] PcAnywhere vs. Terminal servcies

[Condra, Jerry W Mr HP]

We use term
serve everyday and disconnect [not logoff] and everything running continues. No
switches needed. It’s run from this shortcut:

 

%SystemRoot%\System32\mstsc.exe

 

Jerry

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Waldrop
Sent: Tuesday, January 31, 2006
1:24 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] PcAnywhere
vs. Terminal servcies



 

I may be incorrect but mstsc.exe /console and the session keeps running

In my company I have many people on the Network infrastructure team
 that insist on using PcAnywhere over Term services because they feel that
when they close out the PcAnywhere window, any application that they start in
their user context continues to run.
> 
>  
> In Term services this is not the case.
>  
> Is there anyway to make this happen in Term Services Remote Admin mode.
>  
> Most of these servers are Win2k.
>  
> I'd really prefer that they run Term services instead of PcAnywhere and
I'd like to figure out a way to give them the same "experience".
>  
>  
> Thank you
>  
>  
> 

RE: [ActiveDir] Outlook setting via GP

[Condra, Jerry W Mr HP]

I'm looking at a way to do something similar but adding an LDAP address
book. I'm looking at the Custom Installation Wizard (CIW) for Outlook.
It may provide a way.

http://www.outlook-tips.net/howto/prf.htm

Good luck
Jerry

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser
Sent: Friday, January 20, 2006 3:38 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Outlook setting via GP

I'm trying to make this change for our new laptop image. We've rolled it
out to some test users and they all want their contacts folder to show
up as an email address list. (click new message, "to", and select from
contacts). It's not available by default; it requires a few steps
(http://support.microsoft.com/default.aspx?scid=kb;en-us;287563&Product=
ol2003).

I'd like to be able to do this with GP, but I can't find a setting for
it in the OL2003 administrative template anywhere. Anyone know how I can
make that change?

Thanks...

**
Charlie Kaiser
W2K3 MCSA/MCSE/Security, CCNA
Systems Engineer
Essex Credit / Brickwalk
510 595 5083
**
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

[ActiveDir] Home directories issue

[Condra, Jerry W Mr HP]

Title: Home directories issue






Hoping someone has seen this problem before.

Users are mapping home folders using AD profile tab which maps X: to \\servername\home\joe.user.   Occasionally, upon logon, users will map to \\servername\home and not all the way to their own home directory. I’ve seen several blogs and the same problem posted elsewhere but no cause or solution.  


Thanks

Jerry

RE: [ActiveDir] Server Monitoring

[Condra, Jerry W Mr HP]

Not sure if it's been mentioned but we've had good success for "red" or
"green" status with WhatsUp Gold. It can also be configured to send an
alert when something goes down. Has a web based interface that can be
monitored from the desktop if desired.

Jerry

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Monday, October 17, 2005 10:44 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Server Monitoring

In the SBS consultant space we see more of  www.levelplatforms.com and 
hyblue.com than MOM...

Brian Desmond wrote:

>Nagios does the trick (free too) - www.nagios.org. MOM is another one
>(www.microsoft.com). 
>
>Thanks,
>Brian Desmond
>[EMAIL PROTECTED]
> 
>c - 312.731.3132
> 
> 
>
>-Original Message-
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] On Behalf Of John Parker
>Sent: Monday, October 17, 2005 9:34 AM
>To: ActiveDir@mail.activedir.org
>Subject: [ActiveDir] Server Monitoring
>
>Hello all...
>
>We are searching for a tool that will monitor server uptime and send
out an
>alert when a server goes down.
>
>Anyone have a suggestion?  Does not have to be too complicated.
>
>Everything is Win2K AD fully spacked.
>
>Thank you in advance.
>
>John Parker, MCSE 
>IS Admin. 
>Senior Technical Specialist 
>Alpha Display Systems. 
>Alpha Video 
>7711 Computer Ave. 
>Edina, MN. 55435 
>
>952-896-9898 Local 
>800-388-0008 Watts 
>952-896-9899 Fax 
>612-804-8769 Cell 
>952-841-3327 Direct 
>[EMAIL PROTECTED] 
>"Be excellent to each other" 
>---End of Line--- 
>
>
>
>-Original Message-
>From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
>[mailto:[EMAIL PROTECTED]
>Sent: Sunday, October 16, 2005 9:49 PM
>To: ActiveDir@mail.activedir.org
>Subject: Re: [ActiveDir] Knowing when users were deleted.
>
>
>I give carte blanche to folks to wack me upside the head if I get too 
>annoying.   :-)
>
>Rick Kingslan wrote:
>
>  
>
>>Susan,
>>
>>Really - I know you too well.  You're not going to lurk.  Get in the
game.
>>It appears most folks want to hear what you have to say from the Small
>>Business arena.  And, if it broadens the message of managing and
>>
>>
>maintaining
>  
>
>>the systems - it's good for all.
>>
>>Just please - stop convincing yourself you're lurking  You're
aren't!
>>You're too valuable to do so...
>>
>>:o)
>>
>>Rick [msft]
>>--
>>Posting is provided "AS IS", and confers no rights or warranties ...
>>
>>
>>-Original Message-
>>From: [EMAIL PROTECTED]
>>[mailto:[EMAIL PROTECTED] On Behalf Of Susan
Bradley, CPA
>>aka Ebitz - SBS Rocks [MVP]
>>Sent: Sunday, October 16, 2005 9:02 PM
>>To: ActiveDir@mail.activedir.org
>>Subject: Re: [ActiveDir] Knowing when users were deleted.
>>
>>
>>
>>The consultant crowd who can't handle 300 SBS boxes hitting their
inbox 
>>at 6 a.m have asked for a dashboard.   I can handle a daily email 
>>they can't.
>>
>>At a NTuser group meeting I was at ...some of the dashboard tools in
Linux
>>were discussed.  Nagios in particular was one they used for
monitoring.
>>
>>Monitoring -- MRTG: The Multi Router Traffic Grapher:
>>http://mrtg.hdl.com/mrtg.html
>>
>>Graphical console for Snort - Analysis Console for Intrusion Databases
>>(ACID):
>>http://acidlab.sourceforge.net/
>>
>>Intrustion detection -  Snort.org:
>>http://www.snort.org/
>>
>>Monitoring - Nagios: Home:
>>http://www.nagios.org/
>>
>>Traffic probe - ntop - network top:
>>http://www.ntop.org/head.html
>>
>>
>>
>>Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote:
>>
>> 
>>
>>
>>
>>>Yup information overload 'is' a problem.
>>>
>>>And then after the scale its... okay what the heck is the server 
>>>trying to tell me?
>>>
>>>I'm still a fan of www.eventid.net over microsoft.com's click here.
>>>
>>>Rick Kingslan wrote:
>>>
>>>   
>>>
>>>  
>>>
And, as you know that does work well in SBSland.  However, when the 
scale grows, so do the requirements.  IN the Medium to Enterprise 
space, the idea is more along the lines of a system or series of 
systems pumping this type of information into paging and making 
intelligent decisions based on the audit, event, alerts, services, 
etc.

Which, is right where MOM 2005 drops into the picture.  If it _IS_ 
the event aggregator, or if it's pushing up to a bigger overall item

such as HP OpenView - that data is available.  It's just that
instead 
of getting an e-mail per server (most admins would just begin to 
create a rule to send these to DEV/NUL after a while...) MOM 
collects, enforces and reports this same type of information.

Scale makes the problem much tougher, as I'm sure you can
imagine

Rick [msft]
--
Posting is provided "AS IS", and confers no rights or warranties ...


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan 
Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Sent: S

RE: [ActiveDir] OT: exchange max. dist. list size

[Condra, Jerry W Mr HP]

I have
thousands as well. Are you talking server or client. On the client side I’ve
seen it a fair bit. Here’s an article.

 

You receive a
"This distribution list has reached the maximum size for your network
e-mail server" error message when you add a large number of items to a
contact distribution list (DL) in Outlook 2000 or in Outlook 2002 

Article 238569

 









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Brian Desmond
Sent: Wednesday, September 21,
2005 2:44 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT:
exchange max. dist. list size



 

I have thousands of people in DLs…

 



Thanks,
 Brian
 Desmond

[EMAIL PROTECTED]

 

c - 312.731.3132

 

 











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, September 21,
2005 11:24 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] OT: exchange
max. dist. list size



 

Has anyone encountered the max distribution list size in
exchange?

 

Seems like it’s 8KB, or between 100-200 email
addresses?

 

Am I missing something?

 

Thanks,

James

RE: [ActiveDir] Exchange relay(OT)

[Condra, Jerry W Mr HP]

Deji
Would it be possible to get the link to the technical reference you mention?

Thanks
Jerry

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, September 21, 2005 10:04 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Exchange relay(OT)

Tom, a while back, I sent you the link to the Exchange Server Technical
Reference. All this is explained in that document.
 
Go fish, man.
 
 
Sincerely,

Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon



From: [EMAIL PROTECTED] on behalf of Tom Kern
Sent: Wed 9/21/2005 4:31 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Exchange relay(OT)


Thanks!
so it doesn't apply to servers relaying internally to each other across an
org?
correct?
 
alos, why does checking off that box on a connector going to *, make you an
open relay? doesn't that take into account authentication or does that really
mean relay to and from any domain(well i assume just "to", because its only
outbound). 
 
Thanks again

 
On 9/21/05, Peter Johnson <[EMAIL PROTECTED]> wrote: 

Hi Tom

 

In a MAPI client scenario on Exchange no SMTP replaying occurs at
all. The MAPI client submits the mail to the mailstore using the MAPI
protocol and the exchange server's MTA then processes it and hands it off to
the right connector based on target address space or type eg SMTP, Rightfax
etc. In the case of an SMPT address the SMTP virtual server on Exchange
server then performs an normal SMPT transaction to the destination server.
The checkbox on the Connector refers to clients who are using standard
protocols such as IMAP/POP. 

 

Regards

Peter Johnson

 





From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: 21 September 2005 12:52
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Exchange relay(OT)

 

well, technically, most smtp software like sendmail or postfix,
considers your users(pop3/imap) sending email over their MTA to a remote
domain as relaying and its usually specified as such in the config files. 

I know exchange is groupware,a different beast, but it is an smtp
routing server and a pop3/imap server, so i was wondering if it treated mapi
clients the same. 

i know for a fact, the check box on the virtual server to allow
relaying for auth users applies to pop3/imap users, since they are
techinacally relaying but you are allowing them as they are your users. 

I was just wondering if this affected intenal Exchange servers
relaying off each other in your ORG or not.

 

as to the connector, i'm confused as to what the relaying check box
means there-

if you're address space is a specific domain, you say checking or
unchecking has no affect on users sending email out thry that connector. 

yet MS(and everyone else) says if your addy space is * and you allow
relaying, you are an open relay since the connector settings override whats
on the virtual servers on the bridgeheads(assuming your bridgeheads have mx
records and are the one's recieivng incoming mail. if not, then i guess they
are just outgoing internal relays which could be bad if you have some smtp
worm or spam bot on your network). 

 

In all, I don't have much experince with Exchange(about 2 years).
I've mostly worked with Postfix and sendmail so i'm using the traditional rfc
defs of smtp and relays. 

I know thats a bad idea when talking about a commercial product.

 

In reality, a internal mapi client in  your domain local.com
 , sending an email to [EMAIL PROTECTED], is relaying.
its just auth'ed or allowed relaying, the way your isp allows you to relay
from outlook express using their smtp server. 

 

just wondering how exchange fit into all this in re: to the
aforementioned settings- the relay check boxes on the virtual server and
connector. 

 

thanks alot!

 

On 9/20/05, Brian Desmond < [EMAIL PROTECTED]
 > wrote: 

Let me answer what I can authoritatively.

 

MAPI clients are totally different than pop3/imap. There is no
virtual server or none of that. They submit their messages to the server over
MAPI just like all their other traffic, and the then server handles the
routing internally. You cannot disable mapi users from sending mail. They're
not relaying anything off an SMTP server. If you create an acme.com
  connector and uncheck the relay box, users will continue
to be able to email to acme.com