Re: [ActiveDir] Policies: ALL ADMINS SHOULD READ THIS...
Blair, James wrote: If any of you have or have had the same problem I wouldn't mind an e-mail as I need as much ammunition as possible for the seemingly large report I am going to have to put together. You will find some description of similiar and other problems with MS05-019 on the NTBugtraq list. http://www.ntbugtraq.com/default.aspx?pid=36sid=1 -- Tomasz Onyszko [MVP] [EMAIL PROTECTED] http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Policies: ALL ADMINS SHOULD READ THIS...
After a night of just about no sleep and spending the day on this problem. I did not let on but it was slightly more complicated in such that our Exchange servers were unable send mail between sites. After placing a call with HP and then getting forwarded to Microsoft Canada we still had no joy. This morning we found that the following patch was applied last Friday, our SUS roll out day: http://support.microsoft.com/kb/893066 This patch caused the following: Exchange servers unable to talk between sites. Workstations only able to access shares on local subnets. Unable to access Corporate intranet..separate subnet. If any of you have or have had the same problem I wouldn't mind an e-mail as I need as much ammunition as possible for the seemingly large report I am going to have to put together. James From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Wednesday, 20 April 2005 11:45 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Policies: Assuming that there is no static(s), ACL, NAT or PAT issues with a firewall or router IOS keeping IP traffic from flowing over what I am guessing to be port 80 traffic. ICMP (ping) means little in the way of connectivity. Just means that a form of traffic can reach the destination host. Have you done a TRACERT to check the timing? Also, what port or mixture of ports seem to be blocked? Understand that ICMP is getting through to the host but if this involves long distances, it may be a propagation issue or a combination of issues. Lets whittle some of these unknowns out one at a time till we find a solution. Brent Eads
RE: [ActiveDir] Policies: ALL ADMINS SHOULD READ THIS...
Did uninstallation worked as a workaround? Thank you and have a splendid day! Kind Regards, Freddy Hartono Windows Administrator (ADSM/NT Security) Spherion Technology Group, Singapore For Agilent Technologies E-mail: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Blair, James Sent: Thursday, April 21, 2005 12:41 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Policies: ALL ADMINS SHOULD READ THIS... Importance: High After a night of just about no sleep and spending the day on this problem. I did not let on but it was slightly more complicated in such that our Exchange servers were unable send mail between sites. After placing a call with HP and then getting forwarded to Microsoft Canada we still had no joy. This morning we found that the following patch was applied last Friday, our SUS roll out day: http://support.microsoft.com/kb/893066 This patch caused the following: Exchange servers unable to talk between sites. Workstations only able to access shares on local subnets. Unable to access Corporate intranet..separate subnet. If any of you have or have had the same problem I wouldn't mind an e-mail as I need as much ammunition as possible for the seemingly large report I am going to have to put together. James From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, 20 April 2005 11:45 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Policies: Assuming that there is no static(s), ACL, NAT or PAT issues with a firewall or router IOS keeping IP traffic from flowing over what I am guessing to be port 80 traffic. ICMP (ping) means little in the way of connectivity. Just means that a form of traffic can reach the destination host. Have you done a TRACERT to check the timing? Also, what port or mixture of ports seem to be blocked? Understand that ICMP is getting through to the host but if this involves long distances, it may be a propagation issue or a combination of issues. Lets whittle some of these unknowns out one at a time till we find a solution. Brent Eads
