RE : [ActiveDir] AD and DNS
Title: Message Hi, I suggest you change the DNS zone to secondary before you demote AD. Yves Boutemy, Architecte des Réseaux Informatiques 2 avenue des TilleulsLes Floralies69380 DOMMARTINFRANCE Tél : +33 4 78 43 59 08Mobile : +33 6 62 41 59 08Email : [EMAIL PROTECTED]Site Web : http://www.boutemy.com -Message d'origine-De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Mike HogenauerEnvoyé : lundi 1 mars 2004 17:33À : [EMAIL PROTECTED]Objet : [ActiveDir] AD and DNS I needing to demote one of my domain controllers because of out dated hardware, etc. This server runs our Internal DHCP Scope and also has an AD integrated DNS Zone. I know my DHCP services will still be there, what will happened to the the DNS? Will it just become a secondary zone it the Integrated Master or do I need to change this zone before I demote the Server? Thanks in advance for any advice... Mike Mike Hogenauer [EMAIL PROTECTED] Rendition Networks, Inc. 10735 Willows Rd NE, Suite 150 Redmond, WA 98052 425.636.2115 | Fax: 425.497.1149
RE: [ActiveDir] size of a group always returns 1000
There is a limit on the Active Directory server. I found it when I browsed a huge group with a java written utility. Certainly, this limit avoid the server to be blocked by a too long request. Yves Boutemy Email : [EMAIL PROTECTED] Site Web : http://www.boutemy.com -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de Narkinsky, Brian Envoyé : vendredi 15 février 2002 17:36 À : [EMAIL PROTECTED] Objet : [ActiveDir] size of a group always returns 1000 I have the following VBS program DIM adsMembers Set adsGroup= GetObject("LDAP://CN=all-employees,OU=Distribution Lists,DC=test,DC=net") Set adsMembers=adsGroup.Members Wscript.Echo "number of members of all employessp" & adsMembers.count It always returns 1000. I know there are more than 1000 in the group. Any Ideas? Brian List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Web Admin Tools
Title: Message See http://www.iit.edu/~gawojar/ldap/. Very usefull to test and debug LDAP access to a directory. -Message d'origine-De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de Molloy, Gene S.Envoyé : mardi 19 février 2002 21:38À : '[EMAIL PROTECTED]'Objet : [ActiveDir] Web Admin Tools Just curious if anyone has come across any inexpensive Web based tools that can be used to Administer AD? Any comments would be appreciated. Gene Molloy
RE: [ActiveDir] Problems with ldap_modify
Hello, To move a directory tree to another location (or to modify the RDN), you must use "Modify DN" LDAP operation. Do not use "Modify" LDAP operation. See RFC 2251, chapter 4.6 for Modify, chapter 4.9 for Modify DN. With ADSI, use an IADsContainer, the GetObject method to get a pointer on the object you want to move, and the MoveHere method to move a tree or rename an object. Yves Boutemy. -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de David García Envoyé : mercredi 20 février 2002 12:58 À : [EMAIL PROTECTED] Objet : [ActiveDir] Problems with ldap_modify Hi all!! I have a problem. I'm trying to "map" a directory tree in AD. I've created a class "Configuration-test", with "container" as a possSuperior. I created two more classes..."Directory-Test", with "Configuration-Test" as a possSuperior, and "File-Test", with the "Directory-Test" as a possSuperior. In this way, I want to create a visible structure below System entry in AD, so a directory with path "C:\Test\Test2" will have this DN: CN=Test2,CN=Test,CN=C,CN=Configuration-Test,CN=System,DC=MyDC Test2 and Test, and C, the root, will be "Directory-Test" objects, all below "Configuration-Test" object. The problem appears whe I try to modify any of the entries. For example, lets suppose that I want to remap the C unit to D unit, preserving all the directory objects below it...I'm not sure what changes I have to do...I'm sure I've to change the CN property, from "C" to "D"...do I have to change more properties or will this work, and leave the path as CN=Test2,CN=Test,CN=D,CN=Configuration-Test,CN=System,DC=MyDC?. But there is a bigger problem...I've created only the root, "C" object...and I've tried to modify this entry from "C" to "D", with a ldap_modify_s call...this is the code: char * ob_values[] = {"Directory-Test", NULL }; ldapModClass.mod_op = LDAP_MOD_REPLACE; ldapModClass.mod_type = "objectClass"; ldapModClass.mod_values = ob_values; cn = "CN=C,CN=Configuration-Test",CN=System,DC=MyDC"; char * cn_values[] = { "D", NULL }; // New value, to remap C unit on D unit ldapModCN.mod_op = LDAP_MOD_REPLACE; ldapModCN.mod_type = "cn"; ldapModCN.mod_values= cn_values; rgldapMods[0] = &ldapModClass; rgldapMods[1] = &ldapModCN; rgldapMods[2] = NULL; CallValue=ldap_modify_s(pldap, cn,rgldapMods); // pldap is set with a ldap_bind call Even when I don't change the value, and leave the same "C" on the CN, the ldap_modify_s fails with a Constraint Violation Error...I can't change this oven when I use the ADSIViewer utility! It's impossible to change the value os the CN property?...once created...can I change the AD path for an object (is the distinguishedName property?)? Sorry for so a long question, and thanks for all... David List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] NT sp6a does it have ADSI
Hello, The answer is no. Install ADSI after downloading from http://www.microsoft.com/NTWorkstation/downloads/Other/ADSI25.asp Best regards, Yves Boutemy > When you install SP6a on a NT4 machine does that include the ADSI > components? > > > > Regards, > > Carlos Magalhaes > > > > > > - > This email and any files transmitted are > confidential and intended solely for the > use of the individual or entity to which > they are addressed, whose privacy > should be respected. Any views or > opinions are solely those of the author > and do not necessarily represent those > of the Trencor Group, or any of its > representatives, unless specifically > stated. > > Email transmission cannot be guaranteed > to be secure, error free or without virus > contamination. The sender therefore > accepts no liability for any errors or > omissions in the contents of this message, > nor for any virus infection that might result > from opening this message. Trencor is not > responsible in the event of any third party > interception of this email. > > If you have received this email in error please notify > [EMAIL PROTECTED] For more information about > Trencor, visit www.trencor.net <http://www.trencor.net> > Yves Boutemy, Architecte Réseaux Télécommunications 2 avenue des Tilleuls Les Floralies 69380 DOMMARTIN FRANCE Tél : +33 4 78 43 59 08 !!! Attention, nouveau numéro !!! Mobile : +33 6 62 41 59 08 Email : [EMAIL PROTECTED] Site Web : http://www.boutemy.com List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/