Re: [ActiveDir] Who is using my file?
Thanks! On Dec 2, 2003, at 1:18 AM, Oliver Marshall wrote: You can also use the Computer Management snap in via MMC to view the Shares and Open Files. Or use PSFILES from http://www.sysinternals.com/ -Original Message- From: Baekelant, Erik [mailto:[EMAIL PROTECTED] Sent: 02 December 2003 08:07 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Who is using my file? If the file is opened through a share, you could use the following command: net file | find /I name of file will return a line with an ID, the filename and the account who is accessing the file. net file ID /delete closes the file. HTH, Erik -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] ] Sent: Tuesday, December 02, 2003 7:55 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Who is using my file? I had a little problem today, my server is running Windows 2000 Server and naturally it's sharing a few files. I tried opening a document on the server but I could only open it in read only mode because someone had it opened before me. Is it possible to tell from the server or my workstation what user is using the file or at least what computer? Thanks Richard S. List info : http://www.activedir.org/mail_list.htm http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Who is using my file?
I had a little problem today, my server is running Windows 2000 Server and naturally it's sharing a few files. I tried opening a document on the server but I could only open it in read only mode because someone had it opened before me. Is it possible to tell from the server or my workstation what user is using the file or at least what computer? Thanks Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Windows 2000 Server Down
Heres my story... One of my users gave me a call because they could not VPN to the server. My first assumption was that there account might have gotten locked out because maybe they tried to log in too many times with a wrong password so I took a look at my Active Directory Users and Computers snap in and there was nothing in there! I mean absolutely nothing! No tree on the left column and no data on the right column. I then took a look at the Remote routing management service and that service was shut down. I tried to start it back up but I got an error. Another thing I noticed was the DHCP service was down. I tried to start that up but also got an error that it will not start up. Lastly I didn't know what to do so I restarted the server but after I typed in the admin user name and password and it got to the point of applying personal settings and it will not go past that part. The blue scrolling thing was still scrolling but did not move past that after 20 minutes. I was able to restart the computer into safe mode but don't know how to resolve this issue. I would appreciate any help and suggestions. Thank You, - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Memory Dump Error!
On my Windows 2k Server for the first time I got a blue screen of death that reported a memory dump error with a countdown. The countdown seemed like it went on forever so I just had to forcefully restart the computer and so far it looks fine however I would like to know what caused that and is there a way to prevent that? Perhaps third part software or something? Thanks, Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Memory Dump Error!
Ok how do I prevent the blue screen :-) ? Also... Where might the dump file be stored? On Nov 21, 2003, at 11:39 AM, Kingslan, Rick T. wrote: I'll make the potentially bad assumption that you don't mean how do I prevent the blue screen, but more the countdown as it dumps the entire contents of memory to a .dmp file. I could make a lot more money for telling you how to prevent the blue screen, given the information that I have in front of me! ;-) As to the countdown - if you have no intent to make use of a dump file, you can reduce what is saved to a kernel dump or a mini dump or eliminate it completely. On Windows 2000, you would go to My Computer - Properties - Advanced then the Startup and Recovery button. Choose which type of memory dump you want, or choose None to eliminate it. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory LAN Administration - Windows 2000 West Corporation [EMAIL PROTECTED] -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Friday, November 21, 2003 1:24 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Memory Dump Error! On my Windows 2k Server for the first time I got a blue screen of death that reported a memory dump error with a countdown. The countdown seemed like it went on forever so I just had to forcefully restart the computer and so far it looks fine however I would like to know what caused that and is there a way to prevent that? Perhaps third part software or something? Thanks, Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Memory Dump Error!
Ok better question... I found the MEMORY.DMP file in my system root but how do I open a 255mb file into a text editor? Which text editor should I use? On Nov 21, 2003, at 11:23 AM, Richard Sumilang wrote: On my Windows 2k Server for the first time I got a blue screen of death that reported a memory dump error with a countdown. The countdown seemed like it went on forever so I just had to forcefully restart the computer and so far it looks fine however I would like to know what caused that and is there a way to prevent that? Perhaps third part software or something? Thanks, Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] User processes
Is there a way to tell which user is taking up the most processes on the server (Win2k Server) or what files they have open on the server? Thanks, Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Slow Active Directory Users and Computers Snap in
I am running Windows 2000 Server with Active Directory and have a network of about 30 users. For some reason each time I try to load the Active Directory Users and Computers Snap in it takes about 3-5 minutes to load. Any reason? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Max Connections?
I'm using a Windows 2000 Server computer as a File Server but sometimes people have trouble connecting to it and they are on the local network. This network is very very small (about 10 users) and yet sometimes some people cannot connect to the file server so I'm wondering if there is a Maximum number of connections preventing people from connecting at times or what else can be the problem that people can't see the server? It seems to be unstable. Any ideas or suggestions are appreciated. Thank You - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Max Connections?
I went there and the radio button is set to Maximize data throughput for file sharing. This problem starter happening before the blaster worm went out. Where would I check is the settings are set to auto negotiate and the set port thing? Thanks - Richard S. On Thursday, August 14, 2003, at 10:33 AM, Myrick, Todd (NIH/CIT) wrote: I would go into the Network Connections and select the network adapter on the server. On the Microsoft File and Print item, select properties. And make sure the settings are optimizes for file and print sharing. Next you could pull up perfmon and see what the network usage is for the box, and number of SMB sessions that are on the box. Also you could be seeing MBLAST related issues. NIC settings on the server could be a problem, if the settings are set to auto negotiate, and the switch port is either not set or set differently. Finally Disk subsystems are very important when you have more than one person connecting to the drive. IDE is optimized for 1 or 2 concurrent users. Toddler -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2003 1:12 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Max Connections? I'm using a Windows 2000 Server computer as a File Server but sometimes people have trouble connecting to it and they are on the local network. This network is very very small (about 10 users) and yet sometimes some people cannot connect to the file server so I'm wondering if there is a Maximum number of connections preventing people from connecting at times or what else can be the problem that people can't see the server? It seems to be unstable. Any ideas or suggestions are appreciated. Thank You - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] System Shutting Down
I keep getting this error message and the system goes down. Give me like 60 seconds to read it... 'The system process C:\WINNT\system32\lsass.exe has terminated unexpectingly with status code - 1073741819. The system will now shut down and restart.' Is there a quick way to fix this without reformatting? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Installing Files
Shouldn't they be able to install files using their AD account rather than having 2 accounts? On Wednesday, July 30, 2003, at 01:52 PM, Free, Bob wrote: The user should only be able to install files on the workstation they are logged in to Put them in the Power users group **on the workstation they are logged in to** -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2003 10:52 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Installing Files The user should only be able to install files on the workstation they are logged in to, not a server. I am using Windows 2000 server with Active Directory Users and Groups and don't see a group called Power Users. Just to clarify a little more, the user is like every other general user on the network, they cant manage users, policies, etc, but they can install programs on their own computer. On Tuesday, July 29, 2003, at 08:16 PM, Rick Kingslan wrote: Richard, Install fileswhere? On a member server or workstation, it's going to be Power Users unless it requires specific Administrational level privileges, then local admin is about your only choice. If it's not a member server, it must be a DC. In that case, Server Operator or Domain Admin is about the only choice - and I'd cut off an arm first. I'm with Roger and Joe on this one, and we've been pretty steadfast and direct. Anyone that has more than just general permissions on a DC that is not a trusted administrator is like a fox in the hen house. It's not a good situation to be in because there is just too great a risk to take on. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Tuesday, July 29, 2003 6:51 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Installing Files What group does a user need to be in in order to install program on their computer in active directory? I don't want the user to be an administrator, it's just Ok if they install files. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Users Logged In
How do I know what users are currently logged in? They are all logging into the domain into active directory but I don't know where to see the users that are currently logged and which ones aren't. Secondly would it show if they are idle? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Users Logged In
Initially just to see them but both sound good :-) On Tuesday, July 29, 2003, at 02:13 AM, Carlos Magalhaes wrote: Do you only want to see the information or do you want to log it as well? Regards, Carlos Magalhaes -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:29 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Users Logged In How do I know what users are currently logged in? They are all logging into the domain into active directory but I don't know where to see the users that are currently logged and which ones aren't. Secondly would it show if they are idle? List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ InterScan_Disclaimer.txt List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Users Logged In
Not to sound like an absolute n00b or anything, but where is Server Manager? On Tuesday, July 29, 2003, at 01:06 AM, Milind Patil wrote: You can use the Server Manager for the same.. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 11:59 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Users Logged In How do I know what users are currently logged in? They are all logging into the domain into active directory but I don't know where to see the users that are currently logged and which ones aren't. Secondly would it show if they are idle? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Windows 2000 VPN
Rick, Thanks for assuring me that what I did is a good way to handle the situation :-] On Monday, July 28, 2003, at 07:30 PM, Rick Kingslan wrote: Richard, I think that you used the proper approach to the solution. Doesn't really matter what IP range you use, as long as you are using a private range. Your office is using one, and you are now using another at home. Beuaty of classless subnets is that you can take the 192.168 and do whatever you want with it. If you still want the 192.168 at home, great. Use 192.168.10.0/24 at home and you're clear of the issues at the office. Elsewise, I'd just keep the 10.0.0.0 net and pare it down to a 24 or 25 bit (27?) bit mask. Whatever works for you - that's what is truly nice about the classless stuff. Good job on figuring it out, too! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Monday, July 28, 2003 12:16 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Windows 2000 VPN Ok here's how I got things working but I don't know if this is the best way to do things. On the office network, they use the ips of 192.168.0.X/24 and at home network I use the same, 192.168.0.X/24. Problem is, when I was logging in the VPN I got two IP addresses, one from my home like 192.168.0.7 and one from the VPN 192.168.0.150. Now, when I was trying to connect to another computer or server I guess my computer gets confused when I say connect to 192.168.0.1 and it try's to connect to my network which I don't want it to. So basically what I had to do was change the IP addresses on my network to use a different range, now my network is 10.0.0.1/8 while the office uses 192.168.0.X/24 so when I connect to the VPN and I tell it to connect to 192.168.0.20 it then knows which network to use. Is there a better way to do this rather than changing my home network configuration? Maybe subnets or something? On Monday, July 28, 2003, at 05:37 AM, Andries Thijssen wrote: Richard, We use an L2TP VPN, so disclaimers apply. But by default after making the connection the VPN tunnel is used as the default route. (This can be disabled in the advanced TCP/IP properties of the VPN connection.) You use only one NIC in the RRAS server? I expect at least two: one connected to the internet and one connected to your internal network. When connected, using the client can you ping hosts on your internal network by name? If you run ipconfig /all on your client, do you have an IP address from your office LAN? If not, on your VPN server, go to routing remote access, right-click the server name - properties, access the tab for IP. Make sure the proper adapter is selected for 'Use the following adapter to obtain DHCP, DNS and WINS addresses for dial-up clients'. Otherwise the server cannot contact the DHCP server and will give out addresses in that 19x.x.x.x range that Windows 2000 and XP default to, which in turn screws up your routing. Andries -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: 26 July 2003 09:43 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Windows 2000 VPN Rick, On Friday, July 25, 2003, at 11:21 PM, Rick Kingslan wrote: Richard, Thinking about this for a few minutes while I was working on something else made me think that there might be something else that is being missed. What is the configuration of the NICs in the RRAS server? You only have one with a default gateway configured, correct? And the other gateway is configured via the 'route' comand, yes? I only have one NIC on my server and only one configuration to the gateway. I don't have another gateway conifgured via the route command. Windows is only capable of handling one default gateway through the GUI. The rest have to be configured through route statements. Could this be a part of the problem? I suspect that you're having an easy time getting TO the RRAS box over the external connection, but nothing is getting out to the internal network because it has no path that it can follow. This could be the whole problem since I didn't know I have to configure any route commands. You're right on the dot when it comes to no external data getting out of the network. Does this make sense? If you have 4 NICs in a RRAS box, only one can have a DG configured - the other three must be set via route command statements. Well I only have 1 NIC? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Friday, July 25, 2003 9:48 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Windows 2000 VPN Ok heres the deal. I set up Microsoft's VPN Service with the wizard provided when going to the Routing
Re: [ActiveDir] Users Logged In
When I go to start, run, svrmgr it says that the program does not exist. How do I install it? On Tuesday, July 29, 2003, at 11:06 AM, Free, Bob wrote: Not to sound like an absolute n00b or anything, Too late :-] start|run|svrmgr -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Users Logged In Not to sound like an absolute n00b or anything, but where is Server Manager? On Tuesday, July 29, 2003, at 01:06 AM, Milind Patil wrote: You can use the Server Manager for the same.. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 11:59 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Users Logged In How do I know what users are currently logged in? They are all logging into the domain into active directory but I don't know where to see the users that are currently logged and which ones aren't. Secondly would it show if they are idle? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Users Logged In
Ok thats a cool little tool, shows me all the computers and their services but for some reason when i click on the user button when looking at a computer's properties, it only shows up my user name. Shouldn't it show the user who is currently logged in on that computer? Thanks btw Mike On Tuesday, July 29, 2003, at 11:16 AM, Celone, Mike wrote: Actually mine was included in the Win2k Resource Kit and it's srvmgr.exe. Mike -Original Message- From: Free, Bob [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 2:06 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Users Logged In Not to sound like an absolute n00b or anything, Too late :-] start|run|svrmgr -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Users Logged In Not to sound like an absolute n00b or anything, but where is Server Manager? On Tuesday, July 29, 2003, at 01:06 AM, Milind Patil wrote: You can use the Server Manager for the same.. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 11:59 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Users Logged In How do I know what users are currently logged in? They are all logging into the domain into active directory but I don't know where to see the users that are currently logged and which ones aren't. Secondly would it show if they are idle? List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Windows 2000 VPN
Ok here's how I got things working but I don't know if this is the best way to do things. On the office network, they use the ips of 192.168.0.X/24 and at home network I use the same, 192.168.0.X/24. Problem is, when I was logging in the VPN I got two IP addresses, one from my home like 192.168.0.7 and one from the VPN 192.168.0.150. Now, when I was trying to connect to another computer or server I guess my computer gets confused when I say connect to 192.168.0.1 and it try's to connect to my network which I don't want it to. So basically what I had to do was change the IP addresses on my network to use a different range, now my network is 10.0.0.1/8 while the office uses 192.168.0.X/24 so when I connect to the VPN and I tell it to connect to 192.168.0.20 it then knows which network to use. Is there a better way to do this rather than changing my home network configuration? Maybe subnets or something? On Monday, July 28, 2003, at 05:37 AM, Andries Thijssen wrote: Richard, We use an L2TP VPN, so disclaimers apply. But by default after making the connection the VPN tunnel is used as the default route. (This can be disabled in the advanced TCP/IP properties of the VPN connection.) You use only one NIC in the RRAS server? I expect at least two: one connected to the internet and one connected to your internal network. When connected, using the client can you ping hosts on your internal network by name? If you run ipconfig /all on your client, do you have an IP address from your office LAN? If not, on your VPN server, go to routing remote access, right-click the server name - properties, access the tab for IP. Make sure the proper adapter is selected for 'Use the following adapter to obtain DHCP, DNS and WINS addresses for dial-up clients'. Otherwise the server cannot contact the DHCP server and will give out addresses in that 19x.x.x.x range that Windows 2000 and XP default to, which in turn screws up your routing. Andries -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: 26 July 2003 09:43 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Windows 2000 VPN Rick, On Friday, July 25, 2003, at 11:21 PM, Rick Kingslan wrote: Richard, Thinking about this for a few minutes while I was working on something else made me think that there might be something else that is being missed. What is the configuration of the NICs in the RRAS server? You only have one with a default gateway configured, correct? And the other gateway is configured via the 'route' comand, yes? I only have one NIC on my server and only one configuration to the gateway. I don't have another gateway conifgured via the route command. Windows is only capable of handling one default gateway through the GUI. The rest have to be configured through route statements. Could this be a part of the problem? I suspect that you're having an easy time getting TO the RRAS box over the external connection, but nothing is getting out to the internal network because it has no path that it can follow. This could be the whole problem since I didn't know I have to configure any route commands. You're right on the dot when it comes to no external data getting out of the network. Does this make sense? If you have 4 NICs in a RRAS box, only one can have a DG configured - the other three must be set via route command statements. Well I only have 1 NIC? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Friday, July 25, 2003 9:48 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Windows 2000 VPN Ok heres the deal. I set up Microsoft's VPN Service with the wizard provided when going to the Routing and Remote Access program. I thought just following that and testing that the client connects fine is all I needed to do. I set the router to forward all data coming from port 1723 to the server also. I just got home, start up my personal computer running Windows 2000 and create a VPN connection to the office and it connected and authenticated my user information fine. Now heres the problem, I thought when I VPN into a network it is like actually physically being their with your computer so thus I should be able to ping and connect to shared files on the network but I cant? I don't see anything?!?!?!?! All I get is this little monitor connection sitting in my system tray saying that I am connected. I also thought it would be interesting to check the IP I am when I go to the internet and it gave the office's IP http://www.whatismyip.com/ and my internet IP when I disconnect so thus I know something is working. Can anyone help me with this problem? I want to be able see all the computers on the network, ping them, and access shares. Thanks - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http
Re: [ActiveDir] Windows 2000 VPN
Rick, On Friday, July 25, 2003, at 11:21 PM, Rick Kingslan wrote: Richard, Thinking about this for a few minutes while I was working on something else made me think that there might be something else that is being missed. What is the configuration of the NICs in the RRAS server? You only have one with a default gateway configured, correct? And the other gateway is configured via the 'route' comand, yes? I only have one NIC on my server and only one configuration to the gateway. I don't have another gateway conifgured via the route command. Windows is only capable of handling one default gateway through the GUI. The rest have to be configured through route statements. Could this be a part of the problem? I suspect that you're having an easy time getting TO the RRAS box over the external connection, but nothing is getting out to the internal network because it has no path that it can follow. This could be the whole problem since I didn't know I have to configure any route commands. You're right on the dot when it comes to no external data getting out of the network. Does this make sense? If you have 4 NICs in a RRAS box, only one can have a DG configured - the other three must be set via route command statements. Well I only have 1 NIC? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Friday, July 25, 2003 9:48 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Windows 2000 VPN Ok heres the deal. I set up Microsoft's VPN Service with the wizard provided when going to the Routing and Remote Access program. I thought just following that and testing that the client connects fine is all I needed to do. I set the router to forward all data coming from port 1723 to the server also. I just got home, start up my personal computer running Windows 2000 and create a VPN connection to the office and it connected and authenticated my user information fine. Now heres the problem, I thought when I VPN into a network it is like actually physically being their with your computer so thus I should be able to ping and connect to shared files on the network but I cant? I don't see anything?!?!?!?! All I get is this little monitor connection sitting in my system tray saying that I am connected. I also thought it would be interesting to check the IP I am when I go to the internet and it gave the office's IP http://www.whatismyip.com/ and my internet IP when I disconnect so thus I know something is working. Can anyone help me with this problem? I want to be able see all the computers on the network, ping them, and access shares. Thanks - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Computer Management Snap in?
Fuller, You are right on the dot :-) I turned on dynamic registration on the dns server by going to DNS Snap-in - Forward Lookup Zones - MyServerName - MyDomainName, right clicked MyDomainName and clicked on properties and selected Yes from the allow dynamic updates drop down menu. I believe on most or everyones network cards here have checked Register this connection's address in DNS under their Advanced TCP/IP Settings if that what you are talking about with the dynamic registration. I added a computer to the DNS manually, ex: Right clicked domain in DNS Snap-and and clicked add host... Added computer2 (which in turn equal computer2.mydomain.com) with ip of 192.168.0.16. I can now ping it from the command prompt and open it in the computer management snap-in BUT I have DHCP running on my network so the IP could probably be different tommorrow? Also, shouldn't there be a automated way of the DNS keeping track of all the computers joining the network so I don't have to manually input each of them? - Richard S. On Tuesday, July 22, 2003, at 10:06 PM, Fuller, Stuart wrote: A... I think I may get it... ;) So what you are doing is loading up the MMC, choosing Computer management, and the choosing connect to a computer. And you fail when you use the FQDN for the computer in the connect box?? And you work when you put in the IP address or just the NetBIOS name?? Remembering your other posts about DNS, then this is a probably a DNS issue. FQDN (e.g. my.pretty.good.network.com) are resolved by DNS. NetBIOS names (e.g. my) are resolved by the WINS server or by local network segment broadcast. If your DNS servers don't allow dynamic registration then your workstations will not be in the DNS and therefore not pingable/reachable by FQDN. Can you ping the workstation from the MMC computer by FQDN? If not, then DNS registration is the issue. You have to have an record in the DNS for the workstation for FQDN name resolution to work. Otherwise you need to fall back to the other (e.g. WINS or network segment broadcast) forms of name resolution to reach the computer. I believe the dynamic DNS issue was the gist of Jonathan Carr's message. Are you running W2K DNS for your AD and your client workstations?? If so, check the allow dynamic registration and your W2K and XP workstation will automagically register and you can use the FQDN instead of the NetBIOS name. Although I am usually much too lazy to type in the FQDN... :p -Stuart Fuller State of Montana -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 6:24 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Computer Management Snap in? This is DHCP, Windows 2000, and I used (my) and not the the FQN. The FQN is what doesn't seem to work :-\ Any suggestions? On Tuesday, July 22, 2003, at 10:06 AM, Carr, Jonathan (OFT) wrote: How can this be.. In # 2 you say you can map a drive using UNC (\\workstation\admin$) but you have a name resolution issue. Don't make sense??? Is this DHCP Is it windows 2000 or above Try using just the name (my) and not the FQN (my.network.com) -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 12:30 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Computer Management Snap in? On Tuesday, July 22, 2003, at 08:29 AM, Fuller, Stuart wrote: Other things to try: 1. Admin rights to workstation?? My account is a duplicate of the Administrator account but I can't seem to access it but the administrator account can? 2. Is \\workstation\Admin$ share on workstation reachable?? - this is a quick check to see if file sharing, name resolution, and security is working. Yes 3. Is my.network.net the actual machine name?? I have my domain pointed to my network and my is a actual computer name (of course the above was just an example). When I have seen this error it has usually been one of the following: 1. Machine off. :P It's on 2. File Print sharing not turned up or corrupted. File and print sharing is on but I don't think it's sharing anything 3. No admin rights or not enough rights to remotely connect/read workstation. Refer to number 1 on first set of questions 4. Name resolution failing (workstation not in DNS/WINS). I don't see the workstation in the DNS and don't know where to check the WINS. There is a DNS server running that points my domain to my network but it's a on my web server. I don't have to add each workstation to that DNS do I? 5. Remote registry service turned off. Don't know? -Stuart -Original Message- From: Carr, Jonathan (OFT) [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 5:58 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Computer Management Snap in? dumb question but can you ping it by name ?? If not, does it resolve to the correct IP ?? -Original Message- From: Thommes, Michael M. [mailto:[EMAIL PROTECTED] Sent
[ActiveDir] Windows 2000 VPN
Ok heres the deal. I set up Microsoft's VPN Service with the wizard provided when going to the Routing and Remote Access program. I thought just following that and testing that the client connects fine is all I needed to do. I set the router to forward all data coming from port 1723 to the server also. I just got home, start up my personal computer running Windows 2000 and create a VPN connection to the office and it connected and authenticated my user information fine. Now heres the problem, I thought when I VPN into a network it is like actually physically being their with your computer so thus I should be able to ping and connect to shared files on the network but I cant? I don't see anything?!?!?!?! All I get is this little monitor connection sitting in my system tray saying that I am connected. I also thought it would be interesting to check the IP I am when I go to the internet and it gave the office's IP http://www.whatismyip.com/ and my internet IP when I disconnect so thus I know something is working. Can anyone help me with this problem? I want to be able see all the computers on the network, ping them, and access shares. Thanks - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Computer Management Snap in?
I simply want to see the hardware specs on another computer on my network but I get the following error... Computer \\MY.NETWORK.NET cannot be managed. The remote network path was not found. Choose 'Connect to another computer' from the Action menu to manage a different computer. All computers are connected through active directory. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Computer Management Snap in?
On Tuesday, July 22, 2003, at 08:29 AM, Fuller, Stuart wrote: Other things to try: 1. Admin rights to workstation?? My account is a duplicate of the Administrator account but I can't seem to access it but the administrator account can? 2. Is \\workstation\Admin$ share on workstation reachable?? - this is a quick check to see if file sharing, name resolution, and security is working. Yes 3. Is my.network.net the actual machine name?? I have my domain pointed to my network and my is a actual computer name (of course the above was just an example). When I have seen this error it has usually been one of the following: 1. Machine off. :P It's on 2. File Print sharing not turned up or corrupted. File and print sharing is on but I don't think it's sharing anything 3. No admin rights or not enough rights to remotely connect/read workstation. Refer to number 1 on first set of questions 4. Name resolution failing (workstation not in DNS/WINS). I don't see the workstation in the DNS and don't know where to check the WINS. There is a DNS server running that points my domain to my network but it's a on my web server. I don't have to add each workstation to that DNS do I? 5. Remote registry service turned off. Don't know? -Stuart -Original Message- From: Carr, Jonathan (OFT) [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 5:58 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Computer Management Snap in? dumb question but can you ping it by name ?? If not, does it resolve to the correct IP ?? -Original Message- From: Thommes, Michael M. [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 7:48 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Computer Management Snap in? Hi Richard, Try using the IP (eg, \\12.12.123.1234). If that works, something might be wrong with your DNS registration. Mike Thommes -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tue 7/22/2003 1:54 AM To: [EMAIL PROTECTED] Cc: Subject: [ActiveDir] Computer Management Snap in? I simply want to see the hardware specs on another computer on my network but I get the following error... --- - Computer \\MY.NETWORK.NET cannot be managed. The remote network path was not found. Choose 'Connect to another computer' from the Action menu to manage a different computer. --- - All computers are connected through active directory. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Computer Management Snap in?
Tried that and it works :-P What do I need to do to fix my DNS? I currently have the ns1/ns2 on the registrar point the name servers to my Linux web server and my linux servers point mydomain.net (for example) to my network. I don't have to set up a host for every workstation in the DNS do I? On Tuesday, July 22, 2003, at 04:48 AM, Thommes, Michael M. wrote: Hi Richard, Try using the IP (eg, \\12.12.123.1234). If that works, something might be wrong with your DNS registration. Mike Thommes -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tue 7/22/2003 1:54 AM To: [EMAIL PROTECTED] Cc: Subject: [ActiveDir] Computer Management Snap in? I simply want to see the hardware specs on another computer on my network but I get the following error... --- - Computer \\MY.NETWORK.NET cannot be managed. The remote network path was not found. Choose 'Connect to another computer' from the Action menu to manage a different computer. --- - All computers are connected through active directory. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Computer Management Snap in?
This is DHCP, Windows 2000, and I used (my) and not the the FQN. The FQN is what doesn't seem to work :-\ Any suggestions? On Tuesday, July 22, 2003, at 10:06 AM, Carr, Jonathan (OFT) wrote: How can this be.. In # 2 you say you can map a drive using UNC (\\workstation\admin$) but you have a name resolution issue. Don't make sense??? Is this DHCP Is it windows 2000 or above Try using just the name (my) and not the FQN (my.network.com) -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 12:30 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Computer Management Snap in? On Tuesday, July 22, 2003, at 08:29 AM, Fuller, Stuart wrote: Other things to try: 1. Admin rights to workstation?? My account is a duplicate of the Administrator account but I can't seem to access it but the administrator account can? 2. Is \\workstation\Admin$ share on workstation reachable?? - this is a quick check to see if file sharing, name resolution, and security is working. Yes 3. Is my.network.net the actual machine name?? I have my domain pointed to my network and my is a actual computer name (of course the above was just an example). When I have seen this error it has usually been one of the following: 1. Machine off. :P It's on 2. File Print sharing not turned up or corrupted. File and print sharing is on but I don't think it's sharing anything 3. No admin rights or not enough rights to remotely connect/read workstation. Refer to number 1 on first set of questions 4. Name resolution failing (workstation not in DNS/WINS). I don't see the workstation in the DNS and don't know where to check the WINS. There is a DNS server running that points my domain to my network but it's a on my web server. I don't have to add each workstation to that DNS do I? 5. Remote registry service turned off. Don't know? -Stuart -Original Message- From: Carr, Jonathan (OFT) [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 5:58 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Computer Management Snap in? dumb question but can you ping it by name ?? If not, does it resolve to the correct IP ?? -Original Message- From: Thommes, Michael M. [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 7:48 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Computer Management Snap in? Hi Richard, Try using the IP (eg, \\12.12.123.1234). If that works, something might be wrong with your DNS registration. Mike Thommes -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tue 7/22/2003 1:54 AM To: [EMAIL PROTECTED] Cc: Subject: [ActiveDir] Computer Management Snap in? I simply want to see the hardware specs on another computer on my network but I get the following error... -- - - Computer \\MY.NETWORK.NET cannot be managed. The remote network path was not found. Choose 'Connect to another computer' from the Action menu to manage a different computer. -- - - All computers are connected through active directory. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Terminal Service Port
I'm using terminal services to remotely manage a workstation on my local network that I use for testing and stuff but I would like to use it remotely also. Does anyone know what port it uses so I can forward data to it? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] RRAS VPN Ports
I set up the VPN server on my Windows 2000 Box and need to be able to connect to it remotely from wherever I am on the internet. What ports do I need to open up on my router that need to be forwarded to the server? I assume when this is working I can then from my home network connect to the network with the VPN server and access network resources such as printer, shared files on other computers on the network and etc just as if I was physically on the network correct? Thanks - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Forcing Group Policies
Still didn't work? I deleted C:\Winnt\System32\GroupPolicy and restarted the computer and it still doesn't receive the group policy on the server. On Friday, July 18, 2003, at 09:48 AM, Richard Sumilang wrote: Ok I'm willing to give that a try and just be clear he did that on the client computers (obviously) and that shouldn't have any system side affects correct? On Friday, July 18, 2003, at 01:01 AM, McCann Danny wrote: Richard One of our guys was working on a similar problem, in that, Group Policy was being received inconsistantly. I asked this morning and this is the solution he told me he came up with: ...the problem seemed to be solved for most by deleting the %systemroot%\system32\grouppolicy folder on the local box, this should then be recreated the next time the system boots and logs in. Hope this helps. Cheers Danny -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: 18 July 2003 08:18 To: [EMAIL PROTECTED] Subject: [ActiveDir] Forcing Group Policies Is there a such thing as forcing group policies to hit a specific computer on the network? For some reason not all computers on the network receive the group policy i created and it's a pretty small network of only about 30 users all running Windows 2000 and 2 Windows 2000 Server machines. Has anyone ever had this awkward problem? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Terminal Services Permissions
How do I block certain users from being able to connect to my terminal server running in Remote Administration mode? I just installed it but all users can log in to the server and manage it which isn't very good :-\ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] RRAS VPN Ports
I'm doing PPTP, sorry :-X On Monday, July 21, 2003, at 04:40 PM, Rick Kingslan wrote: Richard, You don't say if this is a PPTP or IPSec VPN (or, it's also possible that either are acceptable). Anyway, these are the ports you'll be interested in: PPTP PPTP TCP 1723 GRE Protocol ID 47 IPSec IKE UDP 500 AH Protocol ID 51 ESP Protocol ID 50 And, yes - once authenticated to the network through the VPN server, it should be like 'you're there'. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Monday, July 21, 2003 12:45 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] RRAS VPN Ports I set up the VPN server on my Windows 2000 Box and need to be able to connect to it remotely from wherever I am on the internet. What ports do I need to open up on my router that need to be forwarded to the server? I assume when this is working I can then from my home network connect to the network with the VPN server and access network resources such as printer, shared files on other computers on the network and etc just as if I was physically on the network correct? Thanks - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Printer Script
Trust me, I'm taking that approach wisely already :-) On Wednesday, July 16, 2003, at 12:56 AM, [EMAIL PROTECTED] wrote: I like http://www.microsoft.com/technet/scriptcenter/default.asp especially. I highly recommend that you learn all this on a SEPARATE, non-production environment until you get a hang of it. VBscript/ADSI (nay, any scripting) can be VERY much like sky-diving. If you ever have to say ooops!, it is usually too late. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Tue 7/15/2003 9:40 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script Awesome, that worked! Since this is a login script, should I then have a logoff script that removes it when the user signs off or will it automatically be removed when they sign off? I just wan't to avoid any possible errors like it saying when the user logs back in next time that the printer already exists or having it duplicate itself when the user logs back in because it runs the login script again. Maybe I don't have to worry about this? On Tuesday, July 15, 2003, at 04:09 AM, Roger Seielstad wrote: Ahh - simple. Save the .vbs file in the logon scripts directory, and add this line to your existing logon script: Cscript.exe %0/../addprinter.vbs That should do it. (That's a zero not an oh, although I could be wrong there) -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 1:51 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script If I save it as a .vbs how can I have a login script and visual basic script run during login? On Monday, July 14, 2003, at 06:42 PM, Rick Kingslan wrote: Bingo! ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bryan Schlegel Sent: Monday, July 14, 2003 8:21 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Printer Script Save it as .vbs -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2003 9:17 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script I tried that and it didn't work. I took it out of the bat file and tried it manually and I got this error... -- - - - C:\Documents and SettingsSet WshNetwork = CreateObject(WScript.Network) C:\Documents and Settings\WshNetwork.AddWindowsPrinterConnection \\AnotherComputer-27\HPLaserJ 'WshNetwork.AddWindowsPrinterConnection' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\_ -- - - - This is how my bat file looks like -- - - - net use Q: \\Server\Shared Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\ AnotherComputer-27\HPLaserJ WshNetwork.SetDefaultPrinter \\ AnotherComputer-27\HPLaserJ Set WshNetwork = Nothing -- - - - I am running Windows 2000 Server and all clients are Windows 2000 Pro. Thanks - Richard S. On Monday, July 14, 2003, at 04:38 PM, [EMAIL PROTECTED] wrote: This should work: Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\YourPrintServer\PrinterName WshNetwork.SetDefaultPrinter \\YourPrintServer\PrinterName Set WshNetwork = Nothing If you put that in a login script. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Mon 7/14/2003 3:42 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Printer Script Has anyone wrote a script to connect a user to a shared printer on the network when the log in? Is this possible? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir
[ActiveDir] Forcing Group Policies
Is there a such thing as forcing group policies to hit a specific computer on the network? For some reason not all computers on the network receive the group policy i created and it's a pretty small network of only about 30 users all running Windows 2000 and 2 Windows 2000 Server machines. Has anyone ever had this awkward problem? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Forcing Group Policies
Ok I'm willing to give that a try and just be clear he did that on the client computers (obviously) and that shouldn't have any system side affects correct? On Friday, July 18, 2003, at 01:01 AM, McCann Danny wrote: Richard One of our guys was working on a similar problem, in that, Group Policy was being received inconsistantly. I asked this morning and this is the solution he told me he came up with: ...the problem seemed to be solved for most by deleting the %systemroot%\system32\grouppolicy folder on the local box, this should then be recreated the next time the system boots and logs in. Hope this helps. Cheers Danny -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: 18 July 2003 08:18 To: [EMAIL PROTECTED] Subject: [ActiveDir] Forcing Group Policies Is there a such thing as forcing group policies to hit a specific computer on the network? For some reason not all computers on the network receive the group policy i created and it's a pretty small network of only about 30 users all running Windows 2000 and 2 Windows 2000 Server machines. Has anyone ever had this awkward problem? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Printer Script
Awesome, that worked! Since this is a login script, should I then have a logoff script that removes it when the user signs off or will it automatically be removed when they sign off? I just wan't to avoid any possible errors like it saying when the user logs back in next time that the printer already exists or having it duplicate itself when the user logs back in because it runs the login script again. Maybe I don't have to worry about this? On Tuesday, July 15, 2003, at 04:09 AM, Roger Seielstad wrote: Ahh - simple. Save the .vbs file in the logon scripts directory, and add this line to your existing logon script: Cscript.exe %0/../addprinter.vbs That should do it. (That's a zero not an oh, although I could be wrong there) -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 1:51 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script If I save it as a .vbs how can I have a login script and visual basic script run during login? On Monday, July 14, 2003, at 06:42 PM, Rick Kingslan wrote: Bingo! ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bryan Schlegel Sent: Monday, July 14, 2003 8:21 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Printer Script Save it as .vbs -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2003 9:17 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script I tried that and it didn't work. I took it out of the bat file and tried it manually and I got this error... -- - - - C:\Documents and SettingsSet WshNetwork = CreateObject(WScript.Network) C:\Documents and Settings\WshNetwork.AddWindowsPrinterConnection \\AnotherComputer-27\HPLaserJ 'WshNetwork.AddWindowsPrinterConnection' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\_ -- - - - This is how my bat file looks like -- - - - net use Q: \\Server\Shared Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\ AnotherComputer-27\HPLaserJ WshNetwork.SetDefaultPrinter \\ AnotherComputer-27\HPLaserJ Set WshNetwork = Nothing -- - - - I am running Windows 2000 Server and all clients are Windows 2000 Pro. Thanks - Richard S. On Monday, July 14, 2003, at 04:38 PM, [EMAIL PROTECTED] wrote: This should work: Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\YourPrintServer\PrinterName WshNetwork.SetDefaultPrinter \\YourPrintServer\PrinterName Set WshNetwork = Nothing If you put that in a login script. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Mon 7/14/2003 3:42 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Printer Script Has anyone wrote a script to connect a user to a shared printer on the network when the log in? Is this possible? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Printer Script
Do you recommend any online sites or books to use as reference to write these VBScripts? On Tuesday, July 15, 2003, at 10:20 AM, Roger Seielstad wrote: Probably don't need to remove it. I'd suggest maybe adding a line to check to see if it exists already and only map the printer if it doesn't. That's generally a good practice. Your next task should be to rewrite your login script to be 100% VBScript, just to make it all cleaner. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 12:41 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script Awesome, that worked! Since this is a login script, should I then have a logoff script that removes it when the user signs off or will it automatically be removed when they sign off? I just wan't to avoid any possible errors like it saying when the user logs back in next time that the printer already exists or having it duplicate itself when the user logs back in because it runs the login script again. Maybe I don't have to worry about this? On Tuesday, July 15, 2003, at 04:09 AM, Roger Seielstad wrote: Ahh - simple. Save the .vbs file in the logon scripts directory, and add this line to your existing logon script: Cscript.exe %0/../addprinter.vbs That should do it. (That's a zero not an oh, although I could be wrong there) -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 1:51 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script If I save it as a .vbs how can I have a login script and visual basic script run during login? On Monday, July 14, 2003, at 06:42 PM, Rick Kingslan wrote: Bingo! ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bryan Schlegel Sent: Monday, July 14, 2003 8:21 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Printer Script Save it as .vbs -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2003 9:17 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script I tried that and it didn't work. I took it out of the bat file and tried it manually and I got this error... -- - - - C:\Documents and SettingsSet WshNetwork = CreateObject(WScript.Network) C:\Documents and Settings\WshNetwork.AddWindowsPrinterConnection \\AnotherComputer-27\HPLaserJ 'WshNetwork.AddWindowsPrinterConnection' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\_ -- - - - This is how my bat file looks like -- - - - net use Q: \\Server\Shared Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\ AnotherComputer-27\HPLaserJ WshNetwork.SetDefaultPrinter \\ AnotherComputer-27\HPLaserJ Set WshNetwork = Nothing -- - - - I am running Windows 2000 Server and all clients are Windows 2000 Pro. Thanks - Richard S. On Monday, July 14, 2003, at 04:38 PM, [EMAIL PROTECTED] wrote: This should work: Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\YourPrintServer\PrinterName WshNetwork.SetDefaultPrinter \\YourPrintServer\PrinterName Set WshNetwork = Nothing If you put that in a login script. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Mon 7/14/2003 3:42 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Printer Script Has anyone wrote a script to connect a user to a shared printer on the network when the log in? Is this possible? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info
[ActiveDir] Printer Script
Has anyone wrote a script to connect a user to a shared printer on the network when the log in? Is this possible? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Printer Script
I tried that and it didn't work. I took it out of the bat file and tried it manually and I got this error... - C:\Documents and SettingsSet WshNetwork = CreateObject(WScript.Network) C:\Documents and Settings\WshNetwork.AddWindowsPrinterConnection \\AnotherComputer-27\HPLaserJ 'WshNetwork.AddWindowsPrinterConnection' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\_ - This is how my bat file looks like - net use Q: \\Server\Shared Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\ AnotherComputer-27\HPLaserJ WshNetwork.SetDefaultPrinter \\ AnotherComputer-27\HPLaserJ Set WshNetwork = Nothing - I am running Windows 2000 Server and all clients are Windows 2000 Pro. Thanks - Richard S. On Monday, July 14, 2003, at 04:38 PM, [EMAIL PROTECTED] wrote: This should work: Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\YourPrintServer\PrinterName WshNetwork.SetDefaultPrinter \\YourPrintServer\PrinterName Set WshNetwork = Nothing If you put that in a login script. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Mon 7/14/2003 3:42 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Printer Script Has anyone wrote a script to connect a user to a shared printer on the network when the log in? Is this possible? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Printer Script
If I save it as a .vbs how can I have a login script and visual basic script run during login? On Monday, July 14, 2003, at 06:42 PM, Rick Kingslan wrote: Bingo! ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bryan Schlegel Sent: Monday, July 14, 2003 8:21 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Printer Script Save it as .vbs -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Monday, July 14, 2003 9:17 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Printer Script I tried that and it didn't work. I took it out of the bat file and tried it manually and I got this error... --- - - C:\Documents and SettingsSet WshNetwork = CreateObject(WScript.Network) C:\Documents and Settings\WshNetwork.AddWindowsPrinterConnection \\AnotherComputer-27\HPLaserJ 'WshNetwork.AddWindowsPrinterConnection' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\_ --- - - This is how my bat file looks like --- - - net use Q: \\Server\Shared Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\ AnotherComputer-27\HPLaserJ WshNetwork.SetDefaultPrinter \\ AnotherComputer-27\HPLaserJ Set WshNetwork = Nothing --- - - I am running Windows 2000 Server and all clients are Windows 2000 Pro. Thanks - Richard S. On Monday, July 14, 2003, at 04:38 PM, [EMAIL PROTECTED] wrote: This should work: Set WshNetwork = CreateObject(WScript.Network) WshNetwork.AddWindowsPrinterConnection \\YourPrintServer\PrinterName WshNetwork.SetDefaultPrinter \\YourPrintServer\PrinterName Set WshNetwork = Nothing If you put that in a login script. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Mon 7/14/2003 3:42 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Printer Script Has anyone wrote a script to connect a user to a shared printer on the network when the log in? Is this possible? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Proxy Server
I assume that will work for whatever browser they are using correct (doesn't have to be IE)? On Tuesday, July 8, 2003, at 12:05 PM, [EMAIL PROTECTED] wrote: Using GPO: User Configuration Windows Settings -Connection -Proxy Settings You can use IEAK for similar thing, but why do more work, eh? Enjoy. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Tue 7/8/2003 11:47 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Proxy Server I'm running DHCP from my Windows 2000 Server for all my clients on the network and I just recently setup a proxy server on another computer. How can I apply the proxy server's information without having to walk to everyones computer? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Proxy Server
Oh wait, hmmm that's only good for IE. Is there a way to do it regardless of their browser? On Tuesday, July 8, 2003, at 12:05 PM, [EMAIL PROTECTED] wrote: Using GPO: User Configuration Windows Settings -Connection -Proxy Settings You can use IEAK for similar thing, but why do more work, eh? Enjoy. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Tue 7/8/2003 11:47 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Proxy Server I'm running DHCP from my Windows 2000 Server for all my clients on the network and I just recently setup a proxy server on another computer. How can I apply the proxy server's information without having to walk to everyones computer? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Proxy Server
Thats why everyone should use a Mac!!! Hehehe, with my mac I can just specify it in my Network Settings for the system and that should work for all my browsers. Anyways since we are bringing up GPO, I have a finger to pick with that. For some reason my group policies are only getting applied on the server computers and not the workstations? Any ideas? On Tuesday, July 8, 2003, at 12:44 PM, Duncan, Larry wrote: Actually, I don't think so. The GPO path reference below appears to be missing the Internet Explorer Maintenance entry under Windows Settings. This would lead me to believe that it is a Microsoft-centric policy setting. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 2:27 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Proxy Server I assume that will work for whatever browser they are using correct (doesn't have to be IE)? On Tuesday, July 8, 2003, at 12:05 PM, [EMAIL PROTECTED] wrote: Using GPO: User Configuration Windows Settings -Connection -Proxy Settings You can use IEAK for similar thing, but why do more work, eh? Enjoy. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Tue 7/8/2003 11:47 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Proxy Server I'm running DHCP from my Windows 2000 Server for all my clients on the network and I just recently setup a proxy server on another computer. How can I apply the proxy server's information without having to walk to everyones computer? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Proxy Server
How so? 072 World Wide Web Servers? On Tuesday, July 8, 2003, at 01:04 PM, Robinson, Chuck wrote: DHCP Scope Options? -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tue 7/8/2003 3:29 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [ActiveDir] Proxy Server Oh wait, hmmm that's only good for IE. Is there a way to do it regardless of their browser? On Tuesday, July 8, 2003, at 12:05 PM, [EMAIL PROTECTED] wrote: Using GPO: User Configuration Windows Settings -Connection -Proxy Settings You can use IEAK for similar thing, but why do more work, eh? Enjoy. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Tue 7/8/2003 11:47 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Proxy Server I'm running DHCP from my Windows 2000 Server for all my clients on the network and I just recently setup a proxy server on another computer. How can I apply the proxy server's information without having to walk to everyones computer? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Proxy Server
Workstation machine accounts? I don't think so nor recall anything about that? As for Authenticated Users group, yes. On Tuesday, July 8, 2003, at 01:48 PM, Darren Mar-Elia wrote: Richard- Where are the GPOs linked? Have you checked permissions on them to ensure that the workstation machine accounts have Read and Apply Group Policy perms? Authenticated Users will do. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 1:18 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Proxy Server Thats why everyone should use a Mac!!! Hehehe, with my mac I can just specify it in my Network Settings for the system and that should work for all my browsers. Anyways since we are bringing up GPO, I have a finger to pick with that. For some reason my group policies are only getting applied on the server computers and not the workstations? Any ideas? On Tuesday, July 8, 2003, at 12:44 PM, Duncan, Larry wrote: Actually, I don't think so. The GPO path reference below appears to be missing the Internet Explorer Maintenance entry under Windows Settings. This would lead me to believe that it is a Microsoft-centric policy setting. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 2:27 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Proxy Server I assume that will work for whatever browser they are using correct (doesn't have to be IE)? On Tuesday, July 8, 2003, at 12:05 PM, [EMAIL PROTECTED] wrote: Using GPO: User Configuration Windows Settings -Connection -Proxy Settings You can use IEAK for similar thing, but why do more work, eh? Enjoy. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Richard Sumilang Sent: Tue 7/8/2003 11:47 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Proxy Server I'm running DHCP from my Windows 2000 Server for all my clients on the network and I just recently setup a proxy server on another computer. How can I apply the proxy server's information without having to walk to everyones computer? List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Windows 2000 Server as VPN
Can Windows 2000 Server be used as a VPN? I briefly tried looking it up but most things I found where very vague. So basically what I want to do is open up a port on my router to forward to a VPN Server (Windows 2000 computer) that will give the user access to the network. Thanks Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] DC Problem
The DNS problem is as follows, I setup a Windows 2000 Server with Active Directory and the works and now I'm trying to setup another Domain Controller for the network to help load balance the main server. So when I try to setup it up as another Domain Controller using dcpromo, it gets to the part where it try's to copy on over all the Directory information but errors out because it can't find my_company.net??? So do I actually have to purchase a domain and point it to my server or??? I thought that it could just use the NetBIOS name to find the computer but it try's to find it through the DNS name. I didn't set up anything on the DNS information under Administrative tools because I'm not too familiar with it yet and not sure if thats the problem. Any suggestions on this are greatly appreciated. Thanks, Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] DC Problem
How or where would I do that in? On Sunday, April 6, 2003, at 06:58 PM, Kevin Miller wrote: Point all the servers to the same DDNS ad integrated DNS server and all will be well. You can use netdiag or restart to net logon service to make the server refresh it's dns entries. -- Kevinm WLKMMAS, Exchange MVP -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Sunday, April 06, 2003 6:45 PM To: [EMAIL PROTECTED] The DNS problem is as follows, I setup a Windows 2000 Server with Active Directory and the works and now I'm trying to setup another Domain Controller for the network to help load balance the main server. So when I try to setup it up as another Domain Controller using dcpromo, it gets to the part where it try's to copy on over all the Directory information but errors out because it can't find my_company.net??? So do I actually have to purchase a domain and point it to my server or??? I thought that it could just use the NetBIOS name to find the computer but it try's to find it through the DNS name. I didn't set up anything on the DNS information under Administrative tools because I'm not too familiar with it yet and not sure if thats the problem. Any suggestions on this are greatly appreciated. Thanks, Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Connect to printer
I have a Windows 2000 network running and all users log in to the server using Active Directory. I would like to have a bat script automatically connect people to a shared printer and have it set as the default. Please help :-) List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Group Policies Help (Win2k Server)
It's applied and still not taking affect on anyones computers. Any other ideas? On Friday, March 14, 2003, at 03:22 PM, Debbie Ellis wrote: Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob Sent: Friday, March 14, 2003 6:13 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) Select the security tab on the properties sheet -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Friday, March 14, 2003 2:51 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Group Policies Help (Win2k Server) Where is that exactly at? I don't see it in the group policies properties??? On Friday, March 14, 2003, at 08:34 AM, Gandy, Eric wrote: You will also need to select the Apply Group Policy security setting for the target security group that it need to be applied to. Regards, Eric Gandy BHBSS Network Services Team Architecture,Design,Security and Project Group Office 281.209.7513 -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, March 14, 2003 7:12 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) That's not entirely accurate. You can control group policy via groups, by granting Read access to the policy for the groups to whom it should apply. Just remove the Everyone:Read access first. They can only be applied to various containers, but that's not a significant shortcoming. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message- From: Jim Busick [mailto:[EMAIL PROTECTED] Sent: Thursday, March 13, 2003 6:29 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) Despite the name, Group Policy does not apply to groups, only computers, users and OU's. I learned this the hard way, too. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2003 11:53 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Group Policies Help (Win2k Server) I have Active Directory setup and I created group policies on OU(s) to control the desktop settings on a users computer however it does not seem to be propagating through the network. It only works on the local machine (yes of course I used the Active Directory Users and Computers snap in). I need to be able to set the group policy information at the server and have it apply to the Group in that OU that holds a list of users that it must be applied to. When I log in from the workstation, the group policy does not apply what it's supposed to unless I log in on the server with that users account. There was one weird thing about it also was that I set up another computer with Windows 2000 and logged it on to the domain and it got the group policies that I set but it's not working on Workstations??? Can anyone help me fix this odd behavior? Thanks List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ Richard Sumilang IT Manager ExexDirect, LLC 21650 Oxnard St., Suite 2350 Woodland Hills, CA 91367 (877) 591-3252 [EMAIL PROTECTED] www.exexdirect.com List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Group Policies Help (Win2k Server)
Hmmm... Well I got it enabled on the server and I have each client machine that logs on map to the DFS. How do I enable it on the client machines? On Sunday, March 16, 2003, at 08:44 PM, Rick Kingslan wrote: Jeremy, Make no mistake, I don't doubt what you say in any way. And, in addition, I applaud your effort in linking what appears to be a client side problem to a server side solution. Good work - no question. It does, however, interst me as to why I've not seen this problem. Me, I'm chalking it up to just living right! ;-) Thanks for the information! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone image.tiff From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Waldrop Sent: Sunday, March 16, 2003 9:07 PM To: [EMAIL PROTECTED] In my case the DFS service was set to manual on the DC in the site where these XP workstations located and all that I did was start the service and set it to automatic and the policies started working. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Sunday, March 16, 2003 9:07 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) Thanks for a pointer to this Q. Yep - I see the potential for issue here. It should be noted, however, that it's on the client and not the server that the service must be running. IOW, a setting to enable the DFS Client service may be required in some situations. So, it would be interesting to find out if the 1030 and 1058 errors, or in the case of Windows 2000 1000 errors, are present. It might (and I stress MIGHT) indicate that this is contributing factor. However, I can honestly say that I have never seen this problem in (goodness - has it REALLY been this long???) 5+ years of working with Windows 2000. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Waldrop Sent: Sunday, March 16, 2003 7:07 PM To: [EMAIL PROTECTED] Rick, Here is the KB article. http://support.microsoft.com/default.aspx?scid=kb;en-us;314494 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Sunday, March 16, 2003 6:36 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) Jeremy, If you could find and cite that article, I have about 20k workstations that I have to show it to. GP shouldn't be working on them ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Waldrop Sent: Sunday, March 16, 2003 4:00 PM To: [EMAIL PROTECTED] Is the Distributed File System service running on the DC? I had this happen recently with some XP Pro workstations were the policy would not apply, I found a KB doc stating that the DFS service has to be running on the DC for the policy to apply to an XP system. Jeremy Waldrop Systems Engineer 4Front Systems, Inc. http://www.4frontsystems.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Sunday, March 16, 2003 2:22 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) Let's recap just to be sure - you've created the GP at the OU level, there is no DENY settings that would prevent the group from READing or APPLYing the policy? If you are doing Group Filtering, the the GP applied at the OU will apply to the group, and users within the group as long as: 1. The Group has READ and APPLY set on the Security Tab of the GP at the OU level. 2. There are no Denies - either to the group, or to the user. 3. These are USER settings - not COMPUTER settings. If you want to affect computer settings and you're dealing with users in a group - it's not going to work. Put the computers in the group and do same. On ocassion, I have seen this fail to affect some users IF they have been using a roaming profile. Deleting the profile from the machine has solved this in those cases. What does GPRESULT show? Does it show the settings are applied? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Sunday, March 16, 2003 3:23 AM To: [EMAIL PROTECTED] It's applied and still not taking affect on anyones computers. Any other ideas? On Friday, March 14, 2003, at 03:22 PM, Debbie Ellis wrote: Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL
Re: [ActiveDir] Group Policies Help (Win2k Server)
Where is that exactly at? I don't see it in the group policies properties??? On Friday, March 14, 2003, at 08:34 AM, Gandy, Eric wrote: You will also need to select the Apply Group Policy security setting for the target security group that it need to be applied to. Regards, Eric Gandy BHBSS Network Services Team Architecture,Design,Security and Project Group Office 281.209.7513 -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, March 14, 2003 7:12 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) That's not entirely accurate. You can control group policy via groups, by granting Read access to the policy for the groups to whom it should apply. Just remove the Everyone:Read access first. They can only be applied to various containers, but that's not a significant shortcoming. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message- From: Jim Busick [mailto:[EMAIL PROTECTED] Sent: Thursday, March 13, 2003 6:29 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Group Policies Help (Win2k Server) Despite the name, Group Policy does not apply to groups, only computers, users and OU's. I learned this the hard way, too. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2003 11:53 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Group Policies Help (Win2k Server) I have Active Directory setup and I created group policies on OU(s) to control the desktop settings on a users computer however it does not seem to be propagating through the network. It only works on the local machine (yes of course I used the Active Directory Users and Computers snap in). I need to be able to set the group policy information at the server and have it apply to the Group in that OU that holds a list of users that it must be applied to. When I log in from the workstation, the group policy does not apply what it's supposed to unless I log in on the server with that users account. There was one weird thing about it also was that I set up another computer with Windows 2000 and logged it on to the domain and it got the group policies that I set but it's not working on Workstations??? Can anyone help me fix this odd behavior? Thanks List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ Richard Sumilang IT Manager ExexDirect, LLC 21650 Oxnard St., Suite 2350 Woodland Hills, CA 91367 (877) 591-3252 [EMAIL PROTECTED] www.exexdirect.com List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] Group Policies Help (Win2k Server)
I have Active Directory setup and I created group policies on OU(s) to control the desktop settings on a users computer however it does not seem to be propagating through the network. It only works on the local machine (yes of course I used the Active Directory Users and Computers snap in). I need to be able to set the group policy information at the server and have it apply to the Group in that OU that holds a list of users that it must be applied to. When I log in from the workstation, the group policy does not apply what it's supposed to unless I log in on the server with that users account. There was one weird thing about it also was that I set up another computer with Windows 2000 and logged it on to the domain and it got the group policies that I set but it's not working on Workstations??? Can anyone help me fix this odd behavior? Thanks List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Group Policies Help (Win2k Server)
Despite the name, Group Policy does not apply to groups, only computers users and OU's. I learned this the hard way, too. On Thursday, March 13, 2003, at 03:29 PM, Jim Busick wrote: Despite the name, Group Policy does not apply to groups, only computers, users and OU's. I learned this the hard way, too. -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2003 11:53 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Group Policies Help (Win2k Server) I have Active Directory setup and I created group policies on OU(s) to control the desktop settings on a users computer however it does not seem to be propagating through the network. It only works on the local machine (yes of course I used the Active Directory Users and Computers snap in). I need to be able to set the group policy information at the server and have it apply to the Group in that OU that holds a list of users that it must be applied to. When I log in from the workstation, the group policy does not apply what it's supposed to unless I log in on the server with that users account. There was one weird thing about it also was that I set up another computer with Windows 2000 and logged it on to the domain and it got the group policies that I set but it's not working on Workstations??? Can anyone help me fix this odd behavior? Thanks List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ Richard Sumilang IT Manager ExexDirect, LLC 21650 Oxnard St., Suite 2350 Woodland Hills, CA 91367 (877) 591-3252 [EMAIL PROTECTED] www.exexdirect.com List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
