RE: [ActiveDir] 2000 Terminal Services Licensing Server and Windo ws Server 2003 TS

[Damon R. Erickson]

Greetings

 

A windows 2000 license server can’t
hand out 2003 TS Cals but a 2003 license server is able to hand out both 2000
and 2003 cals.

 

If a license server isn’t on a
domain controller the automatic discovery won’t work but you can modify
the registry to specify a license server so you’ll have to install a 2003
license server and manually point all other 2003 servers to that license
server.  

 

See http://download.microsoft.com/download/2/f/2/2f2dc861-d567-4492-ae88-81afafa2d08d/Terminal%20Server%20Licensing.doc
for a summary.

 

In there is also a vbs script to add a preferred
license server to a 2003 terminal server.

 

Thanks

Damon Erickson

Netgain Technology

 

 

 









From: Creamer, Mark
[mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 04, 2004 10:23
AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] 2000
Terminal Services Licensing Server and Windo ws Server 2003 TS



 

Thanks Jack
– the article will be much appreciated…I guess if that’s the
case, my next question would be do they need to be domain controllers also? I
don’t think management is planning on a Win2003 domain structure yet 

 







-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 04, 2004 11:18
AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] 2000
Terminal Services Licensing Server and Windo ws Server 2003 TS

 

Mark,

 

I've read somewhere recently
(although I'm not sure where :-]) that you do require 2003 Licensing
servers for 2003 TS but 2003 Licensing servers can deal with 2000 TS.
I'll try and track down the article if I can...

 

Jack 

 











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Creamer, Mark
Sent: 04 May 2004 15:48
To: [EMAIL PROTECTED]
Subject: [ActiveDir] 2000 Terminal
Services Licensing Server and Windows Server 2003 TS

I haven’t been able to locate a definitive answer for this
yet, so I wanted to make sure I have this right  before I pass on the info
to the project manager.

 

We have no Windows 2003 domain controllers yet, only 2000.
However, we are planning to start deploying some Windows 2003 terminal servers.
My question is, can the 2003 terminal servers use the current Windows 2000 DC
that acts as our TS licensing server to maintain their licenses, or do they
require the licensing server to be 2003?

 

Thanks!

 

Mark Creamer

Systems
Engineer

Cintas
Corporation

Honesty
and Integrity in Everything We Do

 

RE: [ActiveDir] Folder redir policy

[Damon R. Erickson]

Greetings

If my desktop (or my documents or...) is being re-directed to a
different folder I need to be the owner of that folder.  If you log in
as a user and take ownership of the folder the redirection should
function next time that user logs in.  If you let the group policy
create the folders it should set the correct owner.

Thanks
Damon Erickson
Netgain Technology

-Original Message-
From: Bruce Clingaman [mailto:[EMAIL PROTECTED] 
Sent: Thursday, January 15, 2004 8:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Folder redir policy

When I ran the RSoP, it gave this reason for it not being applied:

"this security id may not be assigned as the owner of this object"

What is this?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bruce Clingaman
Sent: Wednesday, January 14, 2004 2:17 PM
To: ActiveDir (E-mail)
Subject: [ActiveDir] Folder redir policy



I have a folder redirection policy in place but it doesn't get applied.
The
path is valid, perms are set (folders are created in advance with a
script).
The user can browse to their directory and save files.
The share is on a DFS volume; I wonder if this is the cause.

Any ideas?

Bruce Clingaman

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Virus Protection

[Damon R. Erickson]

Title: RE: [ActiveDir] Virus Protection









We’re running 7.0.  

 

CA knows about the memory leak and has a
patch.  We installed the patch but it still has issues on a couple of
servers.  

 

Realmon.exe isn’t running in for our
users either.

 

Damon

 

-Original Message-
From: Celone, Mike
[mailto:[EMAIL PROTECTED] 
Sent: Friday, November 07, 2003
1:13 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Virus
Protection

 

Which version of eTrust?  We are using v6 and we
haven't seen any issues with memory leaks on our terminal servers.  We did
however not allow the realmon.exe process to start for each user because it can
eat up quite a bit of memory if you have multiple users on the machine. 
The realmon.exe process is just the icon that shows up in the tasktray. 
As long as the services are started you will still be protected.

Mike 

-Original Message----- 
From: Damon R. Erickson [mailto:[EMAIL PROTECTED]]

Sent: Friday, November 07, 2003
2:06 PM 
To: [EMAIL PROTECTED]

Subject: RE: [ActiveDir] Virus
Protection 

We've had a lot of problems with eTrust memory leaks
on dual processor terminal servers. 

CA has a patch but it doesn't seem to be resolving all
of the issues. 

Damon Erickson 
Netgain Technology 

-Original Message- 
From: Comeau, Steven [mailto:[EMAIL PROTECTED]]

Sent: Friday, November 07, 2003
12:49 PM 
To: [EMAIL PROTECTED]

Subject: RE: [ActiveDir] Virus
Protection 

I like McAfee and Computer Associates eTrust.


Steven "Duuude" Comeau 
Systems Administrator

Main Tape 
1 Capital Drive, Suite 101

Cranbury, NJ  08512

1-800-526-8273 x332 
  
  

-Original Message- 
From: Richard Sumilang [mailto:[EMAIL PROTECTED]]

Sent: Friday, November 07, 2003
1:36 PM 
To: '[EMAIL PROTECTED]'

Subject: [ActiveDir] Virus
Protection 

Anyone recommend any good virus protection software
for windows 2000 server? 

List info   : http://www.activedir.org/mail_list.htm

List FAQ    : http://www.activedir.org/list_faq.htm

List archive: 
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm

List FAQ    : http://www.activedir.org/list_faq.htm

List archive: 
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm

List FAQ    : http://www.activedir.org/list_faq.htm

List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Virus Protection

[Damon R. Erickson]

We've had a lot of problems with eTrust memory leaks on dual processor
terminal servers.

CA has a patch but it doesn't seem to be resolving all of the issues.

Damon Erickson
Netgain Technology

-Original Message-
From: Comeau, Steven [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 07, 2003 12:49 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Virus Protection

I like McAfee and Computer Associates eTrust.

Steven "Duuude" Comeau
Systems Administrator
Main Tape
1 Capital Drive, Suite 101
Cranbury, NJ  08512
1-800-526-8273 x332
 
 

-Original Message-
From: Richard Sumilang [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 07, 2003 1:36 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Virus Protection

Anyone recommend any good virus protection software for windows 2000 
server?

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Background

[Damon R. Erickson]

Internet Explorer has a "set as background" that seems to bypass the
GPO.

The fun part is that they can't unset the background once they set it.
:)

Damon Erickson
Netgain Technology

-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] 
Sent: Thursday, November 06, 2003 10:07 AM
To: ActiveDir (E-mail)
Subject: [ActiveDir] Background

How is it possible that a regular user can change her background if you
disable the Background tab through a GPO to all users?  I checked and
she
doesn't have that tab, the GPO is working correctly.

Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
[EMAIL PROTECTED]  

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Publishing Applications

[Damon R. Erickson]

Are there any errors getting logged? 


 

Are you getting a message saying that
group policies are getting applied successfully?

 

I had some issues getting a 2003 server to
accept group policies from a 2000 DC.  I had to grant some additional domain
permissions.

 

Getting error messages will help
tremendously in troubleshooting.

 

Damon Erickson

 

 

-Original Message-
From: Steve Shaff
[mailto:[EMAIL PROTECTED] 
Sent: Tuesday, October 28, 2003
1:55 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Publishing
Applications

 



Greetings,

 

I am experiencing a
problem with publishing applications through a GPO policy.  We are running
Windows 2003, in a Windows 2000 Native environment.  SMS 2.0 is able to
install the apps from the distribution point, but the Policy does not seem to
be working.  I have created an OU and added the policy to publish an
application to this OU.  I have placed a security group inside the OU for
those who I want to have access.  I have done a gpupdate /Force to refresh
the policy on the DCs, as well as, the clients.  The application still
does not show up in the add new programs inside the add/remove programs
menu.  I have done this before on the assigning computers, but never to a
user account (group).  What am I doing wrong?

 

Thanks,
Steve

[ActiveDir] Win 2003 unable to query for group policy

[Damon R. Erickson]

Title: Message



Greetings one and all
 
We’ve got a domain with 
Win 2000 domain controllers and a bunch of win 2000 terminal servers.  We’ve started adding in a few Server 
2003 servers and now some group policy permissions issues are appearing.  

 
When a user logs onto a 2000 server 
he gets the group policy, but when that same account logs onto a 2003 server the 
group policy doesn’t get applied and it throws the following errors in the event 
log.
 
Event ID 1030
Windows cannot query for 
the list of Group Policy objects. Check the event log for possible messages 
previously logged by the policy engine that describes the reason for 
this.
 
And 
 
Event ID 
1101
Windows cannot access the 
the object OU=Hosting,DC=my-netgain,DC=com in Active Directory. The access to 
the object may be denied. Group Policy processing aborted.
 
Our domain is designed as per the Microsoft white 
paper "Deploying AD in a High Volume Hosting 
environment".
 
Domain
    Hosting 
(OU)
    
Company(OU)
    
User1
    
User2
    Terminal 
Servers (OU)
    
Server1
    
Server2
 
and the group policy is set on 
the Company OU.
 
I found some newsgroup postings 
that talked about XP SP1 problems with the message block signing 
but that doesn't seem to be the problem either (tried turning it off and no 
change in the behavior).   
 
Any help would be 
appreciated
 
thanks
Damon
 

RE: [ActiveDir] Termminal Services Default Session

[Damon R. Erickson]

2 remote connections is the limit for
remote administration mode.  If you want more connections then you need to move
to application mode.

 

 

-Original Message-
From: Daniel Chaveco
[mailto:[EMAIL PROTECTED] 
Sent: Wednesday, April 02, 2003
3:15 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Termminal
Services Default Session

 

I use Terminal Server Client to administer remote
servers.  But I can only have 2 session at a time doing this.  Is
there a way to increase this to 3 or 4 or is 2 the default?

 







Do you Yahoo!?
Yahoo!
Tax Center - File online, calculators, forms, and more

RE: [ActiveDir] Setting up defrag in the Scheduled tasks

[Damon R. Erickson]

Title: Message



I've 
seen scripts that allow you to schedule w2k's defrag but it was pretty much 
scripting the gui, sending clicks to the screen through script.  Very 
unreliable stuff as far as I'm concerned.

  -Original Message-From: Ken Cornetet 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, November 08, 2002 
  11:09 AMTo: '[EMAIL PROTECTED]'Subject: RE: 
  [ActiveDir] Setting up defrag in the Scheduled tasks
  The official 
  answer is you buy the full diskeeper product (win2k's defrag is really 
  diskeeper lite...). I assume crippling defrag in this manner was the deal 
  that Executive software made with MS so that they could include 
  it.
   
  That said, I do 
  seem to remember coming across a web site that showed how to automate 
  defragmenter. Try your favorite search engine.
  

-Original Message-From: Christopher 
Hummert [mailto:[EMAIL PROTECTED]] Sent: Friday, November 08, 
2002 11:21 AMTo: [EMAIL PROTECTED]Subject: 
[ActiveDir] Setting up defrag in the Scheduled tasks
What's the command switch that I need to do to set up defrag to be a 
Scheduled task in windows 
2000?