[ActiveDir] The start type of the Background Intelligent Transfer Service service keep changing.
Hi, I am running windows 2003 SP1. When I see the event logs on Server, there are 7040 events logged every after 3 minute, where start types of BITS service keep changing. Event Type: Information Event Source: Service Control Manager Event Category: None Event ID: 7040 Date: 19-1-2006 Time: 9:40:53 User: NT AUTHORITY\SYSTEM Computer: DC2 Description: The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Information Event Source: Service Control Manager Event Category: None Event ID: 7040 Date: 19-1-2006 Time: 9:38:37 User: NT AUTHORITY\SYSTEM Computer: DC2 Description: The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.
RE: [ActiveDir] Update Server BIOS remotely.
Tyan new BIOS Version has Fix for hyper threading issue that why we need to update it. Can Dell or Compaq utility works for Tyan Motherboard. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Sunday, October 01, 2006 1:09 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Update Server BIOS remotely. I update bios's before service packs.. not sure I'm comfortable doing it remotely though... Brian Desmond wrote: > > *So this is usually something I don't do unless I have a reason to. > I've yet to see a reason to proactively flash firmware on servers. > That said Compaq and Dell both have online flashing utilities that you > can run silently. I hope you have a plan if something doesn't work and > you're locked out even out of ILO/DRAC. * > > * * > > *Thanks,* > > *Brian Desmond* > > [EMAIL PROTECTED] > > * * > > *c - 312.731.3132* > > * * > > *From:* [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] *On Behalf Of *Manjeet Singh > *Sent:* Sunday, October 01, 2006 1:49 PM > *To:* ActiveDir@mail.activedir.org > *Subject:* [ActiveDir] Update Server BIOS remotely. > > Hi, > > We have many servers spread across many location. I want to upgrade > the motherboard BIOS remotely on all Server. I have well tested the > BIOS locally. > > What tools people use for remote BIOS update? > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
[ActiveDir] Update Server BIOS remotely.
Hi, We have many servers spread across many location. I want to upgrade the motherboard BIOS remotely on all Server. I have well tested the BIOS locally. What tools people use for remote BIOS update?
[ActiveDir] Windows Mobile enabled user
Hi, What is the best to query the number of windows mobile messaging enabled user in an exchange 2003 server? I need to run a remote query for this.
RE: [ActiveDir] Windows 2003 R2 Issue
We need to sync the machine password for authentication purpose because the DR machine is not a part of production AD domain. We have to sync the password so that Kerberos authentication work properly (Kerberos is not working when the password do not match). So whenever there is a password changes on Production exchange we sync it immediately. We do not sync the machine SID. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Deji Akomolafe Sent: Wednesday, August 16, 2006 8:48 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Windows 2003 R2 Issue I do not have a solution for your issues. I am just curious. Why do you NEED the password? Why is it important for you to set the same password on your DR box? So, the real exchange server dies, you bring in your DR box and have it impersonate the real one? Is this why? Is this to eliminate the need to have to manually join your box to the domain? Do you also clone the machine SID? Again, just curious. Sincerely, _ (, / | /) /) /) /---| (/_ __ ___// _ // _ ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_ (_/ /) (/ Microsoft MVP - Directory Services www.akomolafe.com - we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Manjeet Singh Sent: Wed 8/16/2006 1:26 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Windows 2003 R2 Issue I am trying to read the machine password from exchange server (Windows 2003 R2 Standard + SP1, Exchange 2003 +SP2). I have tried some other tools also (like lsadump) but they all are failing to read it. We are working on Exchange DR solution- so we need to import the machine password from production exchange server and we set the same password on our DR box. The same function is working on windows 2000 and windows 2003 in same domain. But its failing on Windows 2003 R2. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Sunday, August 13, 2006 1:42 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Windows 2003 R2 Issue I have two questions. 1. Where are you reading the password from? 2. Why? -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: Friday, August 11, 2006 7:52 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Windows 2003 R2 Issue Hi, I have one test setup with Windows 2003 R2 with SP1. Single Domain Topology: AD Server = Windows 2003 R2 + SP1 Exchange Server: - Windows 2003 R2 + Exchange 2003 Ent + SP2 + latest Microsoft security patches. Problem: I am unable to read the machine password of the Exchange Server. It says Error if I try to access the machine password. I need the machine password of exchange server for testing some code. Any idea what could be the reason? I am able to get the password successfully from another exchange server which is running in Windows 2003 OS.
RE: [ActiveDir] Windows 2003 R2 Issue
I am trying to read the machine password from exchange server (Windows 2003 R2 Standard + SP1, Exchange 2003 +SP2). I have tried some other tools also (like lsadump) but they all are failing to read it. We are working on Exchange DR solution- so we need to import the machine password from production exchange server and we set the same password on our DR box. The same function is working on windows 2000 and windows 2003 in same domain. But its failing on Windows 2003 R2. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Sunday, August 13, 2006 1:42 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Windows 2003 R2 Issue I have two questions. 1. Where are you reading the password from? 2. Why? -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: Friday, August 11, 2006 7:52 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Windows 2003 R2 Issue Hi, I have one test setup with Windows 2003 R2 with SP1. Single Domain Topology: AD Server = Windows 2003 R2 + SP1 Exchange Server: - Windows 2003 R2 + Exchange 2003 Ent + SP2 + latest Microsoft security patches. Problem: I am unable to read the machine password of the Exchange Server. It says Error if I try to access the machine password. I need the machine password of exchange server for testing some code. Any idea what could be the reason? I am able to get the password successfully from another exchange server which is running in Windows 2003 OS.
[ActiveDir] Windows 2003 R2 Issue
Hi, I have one test setup with Windows 2003 R2 with SP1. Single Domain Topology: AD Server = Windows 2003 R2 + SP1 Exchange Server: - Windows 2003 R2 + Exchange 2003 Ent + SP2 + latest Microsoft security patches. Problem: I am unable to read the machine password of the Exchange Server. It says Error if I try to access the machine password. I need the machine password of exchange server for testing some code. Any idea what could be the reason? I am able to get the password successfully from another exchange server which is running in Windows 2003 OS.
[ActiveDir] Types of network Card in AD forest like Intel, 3-COM..
Hi, Setup: Windows 2003 + exchange 2003. My AD + Ex setup is running on different hardware. Now what is the best way to find what types of Network (and also how many on one server) cards are installed on my all DCs and Exchange. I need to write a script or a wmi query. Thanks, Manjeet
[ActiveDir] Can we change the TTL from one hour to say 10 minutes.
Hi, I am having Exchange 2003 FE/BE setup. And in my testing I found that FE talk to BE using DNS. Now I am changing my backend server IP and also update it in DNS records. I did flushdns on FE and its successfully talking to BE on new IP. I found the default TTL is one hour. Can I manipulate TTL entry for Exchange record to say 10 minutes? I am doing this some my DR testing. Thanks, Manjeet
[ActiveDir] how to find DNS servers in a forest?
If I have a list of DCs in windows 2003 forest, I just want to verify if they have Microsoft-DNS installed on them? Where this information stored in AD? Or I want to find how many DC’s have DNS Installed. Thanks, Manjeet
[ActiveDir] Can i give Enterprise admin rights to a child domain admin account.
Can I add one of my child domain users in Enterprise admin group? Or in other word how to add users from other domain to EA groups. Thanks, Manjeet
[ActiveDir] Can I upgrade/Install IIS6 on windows 2000 advace server.
One of my application required IIS6 (or windows 2003 server) for its functionality. I am running some windows 2000 Server and I need to run this application on these server. Is there any way to upgrade/Install windows 2000 IIS5 to IIS6? Customer do not want to upgrade to windows 2003 right now. Thanks, Manjeet
[ActiveDir] Getting name from IP address without reverese look up Zone.
I want to get host name or DNS name using IP address from a remote machine. I do not have reverse lookup configured on my DNS. Is there any other way to get this… like from registry or somewhere else?? Thanks, Manjeet
[ActiveDir] Machine account password Change
For testing one of our product, I want to reset machine account password of my exchange member server. How can I do it manually? I set the maximum password age to 1 day. But I can not wait one day to run one test. I need to do it many time manually. Please help -Manjeet List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] time sync..
Title: csv to ldf converter In an windows 2003 AD environment- In terms of time sync, what’s the effect on client when the server having PDC emulator role is down? One of my third party clients (outside the AD environment) is unable to sync the time with the AD ntp server when PDC emulator server was down. What are the actual roles of a PDC emulator in syncing the time? Is this functionally is different in mixed and native mode? Thanks, Manjeet
RE: [ActiveDir] csv to ldf converter
Title: csv to ldf converter In an windows 2003 AD environment- In terms of time sync, what’s the effect on client when the server having PDC emulator role is down? One of my third party clients (outside the AD environment) is unable to sync the time with the AD ntp server when PDC emulator server was down. What are the actual roles of a PDC emulator in syncing the time? Thanks, Manjeet
[ActiveDir] How to restrict .exe file copy on my local exchange server
I want to block the .exe file on my exchange server c:\windows\system32 folder. Can I do these using Software Restriction policies in windows 2003? -Manjeet
RE: [ActiveDir] Is there any way to export a non-exportable certificate
From: Manjeet Singh Sent: Monday, October 03, 2005 5:39 PM To: 'ActiveDir@mail.activedir.org' Subject: Is there any way to export a non-exportable certificate Hi, Is there any tweak to export a non-exportable IIS certificate? Thanks, Manjeet
[ActiveDir] Is there any way to export a non-exportable certificate
Hi, Is there any tweak to export a non-exportable IIS certificate? Thanks, Manjeet
[ActiveDir] Manually data corruption in exchange
All, I am looking for different ways - How to manually corrupt 1. Mailbox Store 2. Public Store 3. A single Mailbox 4. Public Folder 5. A single message in the mailbox We have created an application for Exchange and I want to test my application with by manually corrupting the message/mailbox/mailbox store/public store. Thanks, Manjeet List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Manually data corruption in exchange
All, I am looking for different ways - How to manually corrupt 1. Mailbox Store 2. Public Store 3. A single Mailbox 4. Public Folder 5. A single message in the mailbox We have created an application for Exchange and I want to test my application with by manually corrupting the message/mailbox/mailbox store/public store. Thanks, Manjeet List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] MAC Spoofing
As the entire Address Resolution Protocol [ARP] is based on matching IP addresses with MAC addresses for identification. So what are MAC Spoofing options or workaround ??
[ActiveDir] Can Ms Exchange server send alert to Front end when his own state is unhealthy ?
What can we do about the fact that when MS Exchange Server detects that it is unhealthy it will notify the front-end of same and stop traffic? Thanks, manjeet
[ActiveDir] Deny active directory right to a enterprise admin user
Hi, I have made a user member of Enterprise Group. Now I want, that the user should not be able to perform any active directory related task. Or in other words – How to deny the permission to a enterprise Admin Group user to perform active directory task, He should even able to open the Active Directory User and computer console and not be able to any file related task. Please tell me it can be using ADSI edit. Thanks, Manjeet
[ActiveDir] How to make a user member of Built in Administrator group
Hi, I want to make one user the member of Build in administrator group of all the domain within the forest, with out making the user of Enterprise admin. Or, Say, I have made the user member of Enterprise admin. Then how to deny that user to perform any AD related activities. Actually, my requirement is I want to create a trust from one forest to all the domain controller in the other forest. Without the Enterprise admin credential. Thanks, Manjeet
[ActiveDir] Create Trusted Domain Object permission
Hi, I have two windows 2003 forest and one of my forests is in mixed mode environment. I want to create a trust relationship from one domain controller in one forest to the entire domain controller in other forest. I know that transitive trust will only work in Native when both forests are in native mode. I can not raise the level of my second forest. Now I want to create a user in the second forest with Create Trusted domain object permission so that I can create the trust between two forest using that users. My problem is that that permission are not working in windows 2003. I have tested this permission in windows 2000 some time back, and it was working. Any body has an idea, has Microsoft changed something with this permission??? Or any other way, so that I by giving the minimum rights to a user just for creation of trust…. Thanks, Manjeet
FW: [ActiveDir] Create Trusted Domain Object permission
Hi, I have two windows 2003 forest and one of my forests is in mixed mode environment. I want to create a trust relationship from one domain controller in one forest to the entire domain controller in other forest. I know that transitive trust will only work in Native when both forests are in native mode. I can not raise the level of my second forest. Now I want to create a user in the second forest with Create Trusted domain object permission so that I can create the trust between two forest using that users. My problem is that that permission are not working in windows 2003. I have tested this permission in windows 2000 some time back, and it was working. Any body has an idea, has Microsoft changed something with this permission??? Or any other way, so that I by giving the minimum rights to a user just for creation of trust…. Thanks, Manjeet
[ActiveDir] Create Trusted Domain Object permission
Hi, I have two windows 2003 forest and one of my forests is in mixed mode environment. I want to create a trust relationship from one domain controller in one forest to the entire domain controller in other forest. I know that transitive trust will only work in Native when both forests are in native mode. I can not raise the level of my second forest. Now I want to create a user in the second forest with Create Trusted domain object permission so that I can create the trust between two forest using that users. My problem is that that permission are not working in windows 2003. I have tested this permission in windows 2000 some time back, and it was working. Any body has an idea, has Microsoft changed something with this permission??? Or any other way, so that I by giving the minimum rights to a user just for creation of trust…. Thanks, Manjeet
[ActiveDir] Machine account password age
Hi, I want to set the minimum machine account password age for windows 2003 server. We can set the password age between 0-999 days. What is the meaning of 0 days? I mean after how much time it will change the machine account. Can some one tell me the logic if I set it to 0 days. Thanks, Manjeet
[ActiveDir] Using the Old profile in new domain ?
Hi, I am running 250 users on windows 2000 enterprise Environment. I have purchased new hardware and license for windows 2003 server. Now I need to created windows 2003 environment on the new hardware with new forest and domain name. I have successfully created the new forest. Please suggest the best way of doing below- Want to move all the users from windows 2000 domain to the windows 2003 domain. The users are using local profile, and want to preserve the same profile settings in the new 2003 domain. As my users are running Java and outlook express so the when I join the user’s desktop to the new domain; when the user will log in it will create the new profile. So please tell me how I can use the same old profile. Thanks, Manjeet
[ActiveDir] Adding user in to global security Group
Hi, I want delegate the enterprise admin and schema admin right to the administrator of child domain. As both of these groups are Security Global group so when I am selecting the child domain I am only allowed to add other object and contacts. I am not able to add any groups or users from child domain in to enterprise admin. I want to install Exchange in my child domain. And I want to install it by logging in to child domain. So please tell me how can I do that? (I am running windows 2003 standard edition and want to install Exchange 2003 server.) Thanks, Manjeet
[ActiveDir] Installing Exchange in a child domain
Hi, I have Install a new Root domain controller “test.com” Install a child domain controller in it “child.test.com” Install a member server in child domain “ps.child.test.com” Now I want to install Exchange server in my PS member server. The problem is that when I login on my ps in child domain I am not able to run the forest prep because the enterprise/ schema admin rights are required for that. I tried to make the child administrator member of Enterprise and schema admin, but I am not able to add child administrator say the users not found. As both the Enterprise and schema admin group are global security group so how do I delegate the child domain administrator the permission so that I can run the forest prep and domain prep by logging in to my PS using child administrator account? What is the procedure to give the delegation of Schema and Enterprise admin right to other child domain users so that Exchange can be installed without login in to root domain controller? Thanks,Manjeet
RE: [ActiveDir] Installing DNS in Child Domain
My child domain is already configured and working fine. The only thing I want to have child its own DNS, instead of resolving from the root DC. I have manually install the DNS service on my child domain controller through add/remove programs. Now I am looking for the best way how to configure the DNS on this child domain. Thx, Manjeet -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santhosh Sivarajan Sent: Tuesday, April 19, 2005 8:13 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Installing DNS in Child Domain Are you trying to install and configure DNS on a child Domain Controller? If it is Active Directory Integrated, install DNS service on a Windows 2003 machine and perform DCPROMO. It will automatically populate all the zone information to this new Domain Controller. HTH Santhosh Santhosh Sivarajan MCSE(W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),CCNA,Network+ Houston, TX On 4/19/05, Manjeet Singh <[EMAIL PROTECTED]> wrote: > Hi, > > I am using windows 2003 standard edition. > > This might be the requirement when you have distributed domain model. > Say Root and child domain are in separate remote location. So reduce the > traffic I need to have separate DNS on my child domain controller. > > So do I configure DNS on preinstall Child domain controller ? > > > Manjeet > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells > Sent: Tuesday, April 19, 2005 7:24 PM > To: Send - AD mailing list > Subject: RE: [ActiveDir] Installing DNS in Child Domain > > Windows offers no automated solution for this type of restructuring, the > premise being that any organization with a need for a more distributed > DNS > infrastructure needs 1) the technical staffing sufficient to create it > and > 2) same said staffing to support it. > > Before making any recommendations as to the direction you should take, > can I > ask on what version/flavour of Windows you're building this lab > environment? > > -- > Dean Wells > MSEtechnology > * Email: [EMAIL PROTECTED] > http://msetechnology.com > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh > Sent: Tuesday, April 19, 2005 9:11 AM > To: ActiveDir@mail.activedir.org > Subject: [ActiveDir] Installing DNS in Child Domain > > Hi, > > I have installed a root domain controller "test.com". > Then I have installed a child domain controller: child.test.com" with > primary DNS as test.com. So a zone child.test.com automatically added in > my > test.com DNS. > > I want to install a separate DNS for child domain, and want to set child > as > primary DNS and root as secondary DNS. > > To do that I Installed DNS service on my child domain controller. > > So what is the best way to install the DNS on child domain? > > Do I do a ZONE transfer by delegation or some other easy process? > > Thanks, > manjeet > > List info : http://www.activedir.org/List.aspx > List FAQ: http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ: http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ: http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Installing DNS in Child Domain
Hi, Yes, your summary is absolutely correct. No I did not create any structure manually; all were created automatically during first DC promotion. Now when I see the A host record under child.test.com, there is only one record 'same as parent'. Thanks, Manjeet -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells Sent: Tuesday, April 19, 2005 8:12 PM To: Send - AD mailing list Subject: RE: [ActiveDir] Installing DNS in Child Domain I'm working on the premise that at present all DCs and members resolve against a single DNS server running on the DC in the forest root that was created during the promotion of the very first DC. You've since promoted a new DC and created a child domain named child.test.com. This DC also resolves against the DNS server running on the DC in the root domain. Is that summary accurate? Have you altered the default configuration created by DCpromo in anyway or did you create the current DNS structure manually? Does the A record for the child DC exist, this is a known bug that would cause anything we do from this point (excluding the use of BIND zone files) to fail - - expand the zone on the root DNS server - locate the entry 'child.test'com' - two A (host) records should exist, one named after the DC itself the other, 'same as parent' Once we have this information, the steps to distribute your DNS namespace become relatively simple. -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: Tuesday, April 19, 2005 10:02 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Installing DNS in Child Domain Hi, I am using windows 2003 standard edition. This might be the requirement when you have distributed domain model. Say Root and child domain are in separate remote location. So reduce the traffic I need to have separate DNS on my child domain controller. So do I configure DNS on preinstall Child domain controller ? Manjeet -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells Sent: Tuesday, April 19, 2005 7:24 PM To: Send - AD mailing list Subject: RE: [ActiveDir] Installing DNS in Child Domain Windows offers no automated solution for this type of restructuring, the premise being that any organization with a need for a more distributed DNS infrastructure needs 1) the technical staffing sufficient to create it and 2) same said staffing to support it. Before making any recommendations as to the direction you should take, can I ask on what version/flavour of Windows you're building this lab environment? -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: Tuesday, April 19, 2005 9:11 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Installing DNS in Child Domain Hi, I have installed a root domain controller "test.com". Then I have installed a child domain controller: child.test.com" with primary DNS as test.com. So a zone child.test.com automatically added in my test.com DNS. I want to install a separate DNS for child domain, and want to set child as primary DNS and root as secondary DNS. To do that I Installed DNS service on my child domain controller. So what is the best way to install the DNS on child domain? Do I do a ZONE transfer by delegation or some other easy process? Thanks, manjeet List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Installing DNS in Child Domain
Hi, I am using windows 2003 standard edition. This might be the requirement when you have distributed domain model. Say Root and child domain are in separate remote location. So reduce the traffic I need to have separate DNS on my child domain controller. So do I configure DNS on preinstall Child domain controller ? Manjeet -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells Sent: Tuesday, April 19, 2005 7:24 PM To: Send - AD mailing list Subject: RE: [ActiveDir] Installing DNS in Child Domain Windows offers no automated solution for this type of restructuring, the premise being that any organization with a need for a more distributed DNS infrastructure needs 1) the technical staffing sufficient to create it and 2) same said staffing to support it. Before making any recommendations as to the direction you should take, can I ask on what version/flavour of Windows you're building this lab environment? -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: Tuesday, April 19, 2005 9:11 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Installing DNS in Child Domain Hi, I have installed a root domain controller "test.com". Then I have installed a child domain controller: child.test.com" with primary DNS as test.com. So a zone child.test.com automatically added in my test.com DNS. I want to install a separate DNS for child domain, and want to set child as primary DNS and root as secondary DNS. To do that I Installed DNS service on my child domain controller. So what is the best way to install the DNS on child domain? Do I do a ZONE transfer by delegation or some other easy process? Thanks, manjeet List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Installing DNS in Child Domain
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells Sent: Tuesday, April 19, 2005 7:24 PM To: Send - AD mailing list Subject: RE: [ActiveDir] Installing DNS in Child Domain Windows offers no automated solution for this type of restructuring, the premise being that any organization with a need for a more distributed DNS infrastructure needs 1) the technical staffing sufficient to create it and 2) same said staffing to support it. Before making any recommendations as to the direction you should take, can I ask on what version/flavour of Windows you're building this lab environment? -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: Tuesday, April 19, 2005 9:11 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Installing DNS in Child Domain Hi, I have installed a root domain controller "test.com". Then I have installed a child domain controller: child.test.com" with primary DNS as test.com. So a zone child.test.com automatically added in my test.com DNS. I want to install a separate DNS for child domain, and want to set child as primary DNS and root as secondary DNS. To do that I Installed DNS service on my child domain controller. So what is the best way to install the DNS on child domain? Do I do a ZONE transfer by delegation or some other easy process? Thanks, manjeet List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Remote access
Yes, you can start the services remotely. 1. Login on server or any other XP machine with administrator 2. My computer > right click > manage 3. Right click computer management in manage windows and point to connect to another computer. 4. Give the destination computer XP machine name on which u want to start the services. 4. Now move to services and u can start/stop or disable any service. HTH MAnjeet -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, April 19, 2005 7:13 PM To: ActiveDir (E-mail) Subject: [ActiveDir] Remote access Is there anyway to remotely connect to a winxp pc when it does not have file and print services started? I need to connect to this pc and start the service. thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Installing DNS in Child Domain
Hi, I have installed a root domain controller "test.com". Then I have installed a child domain controller: child.test.com" with primary DNS as test.com. So a zone child.test.com automatically added in my test.com DNS. I want to install a separate DNS for child domain, and want to set child as primary DNS and root as secondary DNS. To do that I Installed DNS service on my child domain controller. So what is the best way to install the DNS on child domain? Do I do a ZONE transfer by delegation or some other easy process? Thanks, manjeet List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] USB port disabled if I log in to domain.
Already checked this setting, it is 3. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Meneses, Arturo Sent: Monday, March 28, 2005 7:24 PM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] USB port disabled if I log in to domain. Make sure the domain does not have any policies applied to the user/machine look in the registry under: HKLM\SYSTEM\CurrentControlSet\Service\USBSTOR and look for the Star key if it has a 4, then USB is disabled, it should have a 3. AM -Original Message----- From: Manjeet Singh [mailto:[EMAIL PROTECTED] Sent: Sunday, March 27, 2005 11:57 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] USB port disabled if I log in to domain. Hi, My USB scanner stops working if I login a windows 2000 machine in to domain. If I log on locally, my USB scanner is working fine. I did not apply any group policy…. Any idea how to enable it.. Thanks, Manjeet -- --- This message has been inspected by DynaComm i:mail 5.0 --- -- -- FutureSoft, Inc. 12012 Wickchester Lane, Suite 600 Houston, TX 77079 If you no longer want to receive commercial e-mail correspondence from FutureSoft, you may remove your address from our records by visiting www.futuresoft.com/emailremoval.asp --
[ActiveDir] USB port disabled if I log in to domain.
Hi, My USB scanner stops working if I login a windows 2000 machine in to domain. If I log on locally, my USB scanner is working fine. I did not apply any group policy…. Any idea how to enable it.. Thanks, Manjeet
RE: [ActiveDir] Remove DNS forwader
Cool, it worked for me. Thanks a lot Manjeet -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, March 24, 2005 8:23 PM To: ActiveDir@mail.activedir.org Cc: ActiveDir@mail.activedir.org; [EMAIL PROTECTED] Subject: RE: [ActiveDir] Remove DNS forwader Hi Manjeet You are looking to remove conditional forwarders correct? W2K3 DNS treats conditional forwarders as zones in their own right. dnscmd /zonedelete xyz.com will remove the conditional forwarder outright (it will prompt - I believe if you use the /f it does not ask if you are sure) dnscmd /zoneadd xyz.com /forwarder 192.168.1.1 will set a conditional forwarder for the zone xyz.com. Regards; James R. Day Active Directory Core Team Office of the Chief Information Officer National Park Service (202) 354-1464 (direct) (202) 371-1549 (fax) [EMAIL PROTECTED] |-+--> | | "Manjeet Singh"| | | <[EMAIL PROTECTED]| | | com> | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org| | | | | | | | | 03/24/2005 05:56 AM PST| | | Please respond to | | | ActiveDir | |-+--> >--| | | | To: | | cc: (bcc: James Day/Contractor/NPS) | | Subject: RE: [ActiveDir] Remove DNS forwader | >--| Hi Neil, Thanks for the reply. But the dnscmd /resetforwarders only remove the IP entries of default DNS domain (All other DNS domains) and I want to remove another domain entries. Suppose to make a trust with external domain, I have created a forwarder from âabc.comâ to âxyz.comâ. Now I want to remove the forwarder entry of xyz.com domain using command line. Thanks, Manjeet From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil Sent: Thursday, March 24, 2005 7:05 PM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] Remove DNS forwader "dnscmd /resetforwarders" i.e. set list of forwarders to blank. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: 24 March 2005 13:29 To: activedir@mail.activedir.org Subject: [ActiveDir] Remove DNS forwader Hi, How to remove the DNS forwarder using command line? I was trying dnscmd but there is not switch to remove the forwarder. Thanks, Manjeet == This message is for the sole use of the intended recipient. If you received this message in error please delete it and notify us. If this message was misdirected, CSFB does not waive any confidentiality or privilege. CSFB retains and monitors electronic communications sent through its network. Instructions transmitted over this system are not binding on CSFB until they are confirmed by us. Message transmission is not guaranteed to be secure. == .+wÖB+v*rzVryiËç
RE: [ActiveDir] Remove DNS forwader
Title: Message Hi Neil, Thanks for the reply. But the dnscmd /resetforwarders only remove the IP entries of default DNS domain (All other DNS domains) and I want to remove another domain entries. Suppose to make a trust with external domain, I have created a forwarder from “abc.com” to “xyz.com”. Now I want to remove the forwarder entry of xyz.com domain using command line. Thanks, Manjeet From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil Sent: Thursday, March 24, 2005 7:05 PM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] Remove DNS forwader "dnscmd /resetforwarders" i.e. set list of forwarders to blank. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh Sent: 24 March 2005 13:29 To: activedir@mail.activedir.org Subject: [ActiveDir] Remove DNS forwader Hi, How to remove the DNS forwarder using command line? I was trying dnscmd but there is not switch to remove the forwarder. Thanks, Manjeet == This message is for the sole use of the intended recipient. If you received this message in error please delete it and notify us. If this message was misdirected, CSFB does not waive any confidentiality or privilege. CSFB retains and monitors electronic communications sent through its network. Instructions transmitted over this system are not binding on CSFB until they are confirmed by us. Message transmission is not guaranteed to be secure. ==
[ActiveDir] IP Relay Restrictions Attribute format
Hi, Exchange SMTP Servers store IP Relay Restrictions in Active Directory Attribute called “msExchSmtpRelayIpList” which is binary string. If anyone has inside knowledge of format of data stored in this attribute, the help is highly appreciated. This attribute need to set for the setting IP Relay settings on the SMTP Servers for testing There is a COM Object called ExpIPSec from MS to do so, but the interface provide by this object is very restrictive and not usable for sync’ing the value This attribute can have following information encoded in binary string: IP Address IP Address with Subnet mask Domain names. Any pointers on that? Thanks, Manjeet
[ActiveDir] Remove DNS forwader
Hi, How to remove the DNS forwarder using command line? I was trying dnscmd but there is not switch to remove the forwarder. Thanks, Manjeet
