[ActiveDir] Exchange 2K3 Private Information Store Disappeared
Okay, here's the scenario: Exchange Server 2003 (upgraded in June from 2K w/current SPs) has, over the past two weeks, begun allowing users to open other users mailboxes. Up until now, it was "secure" in that people had to assign delegates, but now it's pretty much wide open. Additionally, the Private Information Store shows *none* of the user logons or mailboxes. Two user mailboxes won't open ("Cannot be found / Does not exist" errors opening with Outlook). But .. all other users can open their mailboxes, send & receive mail, use the global address book, and do pretty much anything they normally do with e-mail. From Active Directory Users & Computers, we cannot add email accounts, nor can we make changes to existing users' Mailbox Rights from the Exchange Advanced tab within User Properties. Clicking the Mailbox Right button returns "There is no such object on the server. Facility: Win32 ID no: c0072030 Microsoft Active Directory - Exchange Extension. As it stands, we're thinking there's little time left before this self-destructs. Things came to a halt yesterday afternoon, and after several hours of getting no answers from Microsoft, our Network Admin found that the Exchange Connector in AD Sites & Services wasn't working, deleted & re-created it, then restarted the three Global Catalog Servers, which got mail back up and limping along. Any ideas? Monte Barnett Network Specialist Burlington-Edison School District 491 N. Burlington Blvd Burlington, WA 98233 (360) 757-3344 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Disable IE via GPO
Rick, Please send one my way. Thanks, Monte -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 16, 2002 10:17 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Disable IE via GPO John, Interesting that you even mention this. I have a reg file that sets the zones on IE via directly modding the registry in just this manner. We've got about 25k seats of Inbound/Outbound 'Out-sourced marketers' (yeah, I can even put lipstick on a pig like Telemarketing!) and we have to lock them down to ONLY what we want them to do. If anyone wants a copy o it, let me know. I'll shoot it off to you... List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Moving/Copying Users To A New Domain
Greetings! OK, here's the story: Like a few other folks, we've just discovered that our backups (using BackupExec) did NOT have the Active Directory info backed up properly. The previous DC is toast, and restoring to either the old hardware config or a new hardware config has been nothing short of a lesson in futility. The other server in the domain, even after seizing control, will not behave as the new "PDC". After numerous errors trying to reestablish a necessary trust with "Domain A", we successfully removed the trust from "Domain A", but any attempts to remove it from the problem domain ("Domain B") returns an Active Directory dialog box with the error "The specified user does not exist". We've been fighting to reconstruct things for three days now and we've pretty well decided to just move on. We have the users' data directories & files, and have a new "Domain C" already set up and trusted with "Domain A". So, here's what we'd *like* to do: Since we can still see all of the old users in "Domain B", we need to know if there is a way to copy the user accounts to "Domain C". If there *is* some way to do that, it'd certainly be easier than spending the next several days running batch files & scripts to create the old users in the new domain, then setting up sharing & permissions on 1200+ directories on the data drive. Is this even possible, or are we simply going to have to roll up our sleeves and do it "long hand"? Thanks, Monte Barnett Network Tech Burlington-Edison School District Burlington, WA 98233 (360) 757-3344 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/