[ActiveDir] [OT] Vista Admin Tools Pack

2006-11-18 Thread WATSON, BEN
With the release of Vista to MSDN as well as the Microsoft Licensing site for 
download, I would assume that an Administration Tools Pack should be quickly on 
the way soon for Vista.  Anyone have any information on when a Vista compatible 
Adminpak will be available?

I would've run Vista Beta 2 full time on my work desktop to test it out, but 
with the inability to install the adminpak that severly limited Vista's 
usefulness to me.

Thanks,

~Ben

<>

Re: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-18 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

http://windowsconnected.com/blogs/nick/archive/2006/07/11/3235.aspx
Try installing it like that

WATSON, BEN wrote:

With the release of Vista to MSDN as well as the Microsoft Licensing site for 
download, I would assume that an Administration Tools Pack should be quickly on 
the way soon for Vista.  Anyone have any information on when a Vista compatible 
Adminpak will be available?

I would've run Vista Beta 2 full time on my work desktop to test it out, but 
with the inability to install the adminpak that severly limited Vista's 
usefulness to me.

Thanks,

~Ben

  

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


RE: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-18 Thread WATSON, BEN
Yeah, I found that page when beta 2 came out.  While it did allow the tools to 
install, several critical snap-ins wouldn't function such as ADUC. 

-Original Message-
From: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <[EMAIL PROTECTED]>
To: "ActiveDir@mail.activedir.org" 
Sent: 11/18/06 6:25 PM
Subject: Re: [ActiveDir] [OT] Vista Admin Tools Pack

http://windowsconnected.com/blogs/nick/archive/2006/07/11/3235.aspx
Try installing it like that

WATSON, BEN wrote:
> With the release of Vista to MSDN as well as the Microsoft Licensing site for 
> download, I would assume that an Administration Tools Pack should be quickly 
> on the way soon for Vista.  Anyone have any information on when a Vista 
> compatible Adminpak will be available?
>
> I would've run Vista Beta 2 full time on my work desktop to test it out, but 
> with the inability to install the adminpak that severly limited Vista's 
> usefulness to me.
>
> Thanks,
>
> ~Ben
>
>   
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


Re: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-18 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
The only thing I've heard is that it won't be out until beta 3 of 
Longhorn (or something like that)


http://www.microsoft.com/technet/community/chats/trans/windowsnet/06_0801_tn_wslong.mspx

*MaximOu_MSFT (Expert):*
*Q: *that it suffers, that it is not of the subject but I have a problem 
with the installation of the administrative tools of AD on Vista 
Windows, any aid appreciated much.
*A: *The plans for Longhorn Server "adminpak" are still being finalized. 
Presently, there is no LH Server adminpak that can be installed on 
Windows Vista, although there are some discussions about how to make it 
possible. You might get a more detailed and up-to-date response on the 
Longhorn Server Management web forum: 
http://forums.microsoft.com/TechNet/ShowForum.aspx?ForumID=575&SiteID=17 
<http://forums.microsoft.com/TechNet/ShowForum.aspx?ForumID=575&SiteID=17%20>




WATSON, BEN wrote:
Yeah, I found that page when beta 2 came out.  While it did allow the tools to install, several critical snap-ins wouldn't function such as ADUC. 


-Original Message-
From: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <[EMAIL PROTECTED]>
To: "ActiveDir@mail.activedir.org" 
Sent: 11/18/06 6:25 PM
Subject: Re: [ActiveDir] [OT] Vista Admin Tools Pack

http://windowsconnected.com/blogs/nick/archive/2006/07/11/3235.aspx
Try installing it like that

WATSON, BEN wrote:
  

With the release of Vista to MSDN as well as the Microsoft Licensing site for 
download, I would assume that an Administration Tools Pack should be quickly on 
the way soon for Vista.  Anyone have any information on when a Vista compatible 
Adminpak will be available?

I would've run Vista Beta 2 full time on my work desktop to test it out, but 
with the inability to install the adminpak that severly limited Vista's 
usefulness to me.

Thanks,

~Ben

  


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

  

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


Re: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-18 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=437266&SiteID=17&PageID=1

Try the RTM .. it appears to work

(98% complete on my Vista download so I can't confirm yet)

WATSON, BEN wrote:
Yeah, I found that page when beta 2 came out.  While it did allow the tools to install, several critical snap-ins wouldn't function such as ADUC. 


-Original Message-
From: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <[EMAIL PROTECTED]>
To: "ActiveDir@mail.activedir.org" 
Sent: 11/18/06 6:25 PM
Subject: Re: [ActiveDir] [OT] Vista Admin Tools Pack

http://windowsconnected.com/blogs/nick/archive/2006/07/11/3235.aspx
Try installing it like that

WATSON, BEN wrote:
  

With the release of Vista to MSDN as well as the Microsoft Licensing site for 
download, I would assume that an Administration Tools Pack should be quickly on 
the way soon for Vista.  Anyone have any information on when a Vista compatible 
Adminpak will be available?

I would've run Vista Beta 2 full time on my work desktop to test it out, but 
with the inability to install the adminpak that severly limited Vista's 
usefulness to me.

Thanks,

~Ben

  


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

  

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


RE: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-18 Thread WATSON, BEN
Ah nice!  I'll find out on Monday when I install Vista on my workstation.  
Thanks for the link Susan.

-Ben

-Original Message-
From: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <[EMAIL PROTECTED]>
To: "ActiveDir@mail.activedir.org" 
Sent: 11/18/06 8:01 PM
Subject: Re: [ActiveDir] [OT] Vista Admin Tools Pack

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=437266&SiteID=17&PageID=1

Try the RTM .. it appears to work

(98% complete on my Vista download so I can't confirm yet)

WATSON, BEN wrote:
> Yeah, I found that page when beta 2 came out.  While it did allow the tools 
> to install, several critical snap-ins wouldn't function such as ADUC. 
>
> -Original Message-
> From: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <[EMAIL PROTECTED]>
> To: "ActiveDir@mail.activedir.org" 
> Sent: 11/18/06 6:25 PM
> Subject: Re: [ActiveDir] [OT] Vista Admin Tools Pack
>
> http://windowsconnected.com/blogs/nick/archive/2006/07/11/3235.aspx
> Try installing it like that
>
> WATSON, BEN wrote:
>   
>> With the release of Vista to MSDN as well as the Microsoft Licensing site 
>> for download, I would assume that an Administration Tools Pack should be 
>> quickly on the way soon for Vista.  Anyone have any information on when a 
>> Vista compatible Adminpak will be available?
>>
>> I would've run Vista Beta 2 full time on my work desktop to test it out, but 
>> with the inability to install the adminpak that severly limited Vista's 
>> usefulness to me.
>>
>> Thanks,
>>
>> ~Ben
>>
>>   
>> 
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ: http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
>
>   
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


RE: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-19 Thread Paresh Nhathalal
Dev teams are working hard to get this done but the ETA is not known at
this stage.

 

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN
Sent: 19 November 2006 01:58
To: ActiveDir@mail.activedir.org
Subject: [OT] Vista Admin Tools Pack

 

With the release of Vista to MSDN as well as the Microsoft Licensing
site for download, I would assume that an Administration Tools Pack
should be quickly on the way soon for Vista.  Anyone have any
information on when a Vista compatible Adminpak will be available?

I would've run Vista Beta 2 full time on my work desktop to test it out,
but with the inability to install the adminpak that severly limited
Vista's usefulness to me.

Thanks,

~Ben



RE: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-21 Thread joe
Wow the list is flying today... Took an hour and a half to get the message
back to myself. 
 
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm 
 
 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Tuesday, November 21, 2006 5:50 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack


The Vista source isn't available for perusal yet so this is a complete guess
but I expect it is something like Explorer purposely "dumbs down" the
process token used to launch the new process. 
 
Its just a guess though...
 
 
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm 
 
 

  _  

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido
Sent: Tuesday, November 21, 2006 2:56 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack



Steve - thanks again for sharing this very useful information.  I've tested
this with different scenarios and I am somewhat confused as to some of the
"great new features" of how Vista handles the security of new threads when
launching applications:

 

1.   I can install the AdminPak as non-privileged local user and can fix
the DLL registration in an elevated CMD prompt with your tip below - works
fine.

2.   When I install the AdminPak from an elevated CMD prompt right away,
everything also works fine - no need to manually register the DLLs.

3.   When I start the AdminPak installation from an elevated Windows
Explorer window, it does not successfully register the DLLs and again I have
to register the DLLs manually in an elevated prompt to get them to work

4.   When I right-click the AdminPak installation file in a Windows
Explorer window and choose "Run as administrator" (i.e. running the install
in elevated mode), it's the same as when launched from an elevated command
prompt and again everything work fine without the need for manual
registration of DLLs.

 

So what's different from launching applications from an elevated Windows
Explorer window to launching them from an elevated CMD prompt?

 

Thanks for any insights J

 

/Guido

 

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan
Sent: Tuesday, November 21, 2006 5:46 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack

 

You have to run the batch from a command prompt that is elevated or you will
get access denied.  To run a cmd prompt elevated search for cmd.exe from the
start menu and right click selecting "Run As Administrator".  We have also
found that if you simply launch the MSI from an elevated command prompt it
will register the DLLs as well.

 

Thanks,

 

-Steve

 

 

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN
Sent: Tuesday, November 21, 2006 9:25 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack

 

I found this write up from someone else yesterday, I can't remember where
now.  I tried it immediately and ran into a couple immediate errors when
trying to register these DLLs and the Active Directory snap-ins still
continued to be non-functional.  This is using the Win2003 SP1 admin pack on
Vista Business RTM.  Basically, I threw all those commands into a text file
named register.cmd and let it run.

 

Certtmpl.dll - Your user account does not have necessary access rights to
register the Certificate Templates snap-in.  Log on with a different user
account and try again, or contact your system administrator.  (I am local
admin on this Vista box).

 

Mprsnap.dll - Access is denied.  (80070005)

 

Even those two DLLs don't seem to be related to the Active Directory
snap-ins, I still get the error that the MMC could not create the snap-in.

 

Anyone else run into this?

 

~Ben

 

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan
Sent: Monday, November 20, 2006 10:39 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack

 

KB is in the works, just takes time.  Feel free to blog it or I can if I get
some time this week, it is a bit slow this week but I have a backlog of
content that I was supposed to have blogged.  Good news is that I accepted a
new role at Microsoft where maintaining an official blog is part of my job.
J

 

Thanks,

 

-Steve

 

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA
aka Ebitz - SBS Rocks [MVP]
Sent: Monday, November 20, 2006 11:45 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] [OT] Vista Admin Tools Pack

 

okay if you aren't going to blog or KB that .. may someone on this list?

Steve Linehan wrote: 

You can install the Windows Server 2003 SP1 admin pack on Vista RTM, a shim
was added to support this.  Once it is installed you will need to register
the

Re: [ActiveDir] [OT] Vista Admin Tools Pack

2006-11-22 Thread Paul Williams
If I had to guess, I would say it's because the launched process isn't a child 
of the elevated Window, but is a child of Explorer (the shell) itself.  This 
isn't the case with a CMD prompt, whereby the launched process is an actual 
child process.

Test it with Sysinternals' process explorer.  


--Paul


  - Original Message - 
  From: joe 
  To: ActiveDir@mail.activedir.org 
  Sent: Tuesday, November 21, 2006 10:49 PM
  Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack


  The Vista source isn't available for perusal yet so this is a complete guess 
but I expect it is something like Explorer purposely "dumbs down" the process 
token used to launch the new process. 

  Its just a guess though...


  --
  O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 





--
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, 
Guido
  Sent: Tuesday, November 21, 2006 2:56 PM
  To: ActiveDir@mail.activedir.org
  Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack


  Steve - thanks again for sharing this very useful information.  I've tested 
this with different scenarios and I am somewhat confused as to some of the 
"great new features" of how Vista handles the security of new threads when 
launching applications:

   

  1.   I can install the AdminPak as non-privileged local user and can fix 
the DLL registration in an elevated CMD prompt with your tip below - works fine.

  2.   When I install the AdminPak from an elevated CMD prompt right away, 
everything also works fine - no need to manually register the DLLs.

  3.   When I start the AdminPak installation from an elevated Windows 
Explorer window, it does not successfully register the DLLs and again I have to 
register the DLLs manually in an elevated prompt to get them to work

  4.   When I right-click the AdminPak installation file in a Windows 
Explorer window and choose "Run as administrator" (i.e. running the install in 
elevated mode), it's the same as when launched from an elevated command prompt 
and again everything work fine without the need for manual registration of DLLs.

   

  So what's different from launching applications from an elevated Windows 
Explorer window to launching them from an elevated CMD prompt?

   

  Thanks for any insights J

   

  /Guido

   

  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan
  Sent: Tuesday, November 21, 2006 5:46 PM
  To: ActiveDir@mail.activedir.org
  Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack

   

  You have to run the batch from a command prompt that is elevated or you will 
get access denied.  To run a cmd prompt elevated search for cmd.exe from the 
start menu and right click selecting "Run As Administrator".  We have also 
found that if you simply launch the MSI from an elevated command prompt it will 
register the DLLs as well.

   

  Thanks,

   

  -Steve

   

   

  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN
  Sent: Tuesday, November 21, 2006 9:25 AM
  To: ActiveDir@mail.activedir.org
  Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack

   

  I found this write up from someone else yesterday, I can't remember where 
now.  I tried it immediately and ran into a couple immediate errors when trying 
to register these DLLs and the Active Directory snap-ins still continued to be 
non-functional.  This is using the Win2003 SP1 admin pack on Vista Business 
RTM.  Basically, I threw all those commands into a text file named register.cmd 
and let it run.

   

  Certtmpl.dll - Your user account does not have necessary access rights to 
register the Certificate Templates snap-in.  Log on with a different user 
account and try again, or contact your system administrator.  (I am local admin 
on this Vista box).

   

  Mprsnap.dll - Access is denied.  (80070005)

   

  Even those two DLLs don't seem to be related to the Active Directory 
snap-ins, I still get the error that the MMC could not create the snap-in.

   

  Anyone else run into this?

   

  ~Ben

   

  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan
  Sent: Monday, November 20, 2006 10:39 PM
  To: ActiveDir@mail.activedir.org
  Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack

   

  KB is in the works, just takes time.  Feel free to blog it or I can if I get 
some time this week, it is a bit slow this week but I have a backlog of content 
that I was supposed to have blogged.  Good news is that I accepted a new role 
at Microsoft where maintaining an official blog is part of my job. J

   

  Thanks,

   

  -Steve

   

  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, 
CPA aka Ebitz - SBS Rocks [MVP]
  Sent: Monday, November 20, 2006 11:45 PM
  To: A