RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where?
According to this source http://www.monitorware.com/en/events/details.asp?details_id=1865 Windows 2000's event id is 1573. Todd -Original Message- From: Charlie Kaiser [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 16, 2004 6:34 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? It's the same for 2K3 native... ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: Eric Fleischman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 16, 2004 3:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? Yee of little faith! We will log this. I don't recall the event message on 2k, but 2k03 it would be ID 16408 with text of something like: Domain operation mode has been changed to Native Mode. The change cannot be reversed. I *think* we log this (or something like it) on 2k as well, but I don't recall. Of course this is easy to test in the lab if you'd like. Oh, and I assume we're talking about 2k mixed to 2k native, not 2k03 domain functional level. What I stated above is the switch from 2k mixed to 2k native. ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, June 16, 2004 4:24 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? Interesting question. My expectation was that only the audit logs would show this change. There is no app/ntds log entry that I've ever heard of. If you're looking for a modified time stamp, you could look at the attribute itself and see if it gives the info you're after. http://msdn.microsoft.com/library/default.asp?url=/library/en- us/ad/ad/d etec ting_the_operation_mode_of_a_domain.asp Mixed/Native Mode Setting The attribute is ntMixedDomain on the NC head root of each domain DC=Mydomain, DC=ForestRootDom, DC=tld object. Value of 0=Native level domain Value of 1=Mixed level domain al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, June 16, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] When a domain is Switch to Native Mode... what event Event ID is logged and where? Does anyone have this information handy? I am researching it now... Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where?
Interesting. I tend to get wrapped logs so I never noticed (or had reason to notice specifically). What made you want to look Todd? I'm curious now. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, June 17, 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? According to this source http://www.monitorware.com/en/events/details.asp?details_id=1865 Windows 2000's event id is 1573. Todd -Original Message- From: Charlie Kaiser [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 16, 2004 6:34 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? It's the same for 2K3 native... ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: Eric Fleischman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 16, 2004 3:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? Yee of little faith! We will log this. I don't recall the event message on 2k, but 2k03 it would be ID 16408 with text of something like: Domain operation mode has been changed to Native Mode. The change cannot be reversed. I *think* we log this (or something like it) on 2k as well, but I don't recall. Of course this is easy to test in the lab if you'd like. Oh, and I assume we're talking about 2k mixed to 2k native, not 2k03 domain functional level. What I stated above is the switch from 2k mixed to 2k native. ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, June 16, 2004 4:24 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? Interesting question. My expectation was that only the audit logs would show this change. There is no app/ntds log entry that I've ever heard of. If you're looking for a modified time stamp, you could look at the attribute itself and see if it gives the info you're after. http://msdn.microsoft.com/library/default.asp?url=/library/en- us/ad/ad/d etec ting_the_operation_mode_of_a_domain.asp Mixed/Native Mode Setting The attribute is ntMixedDomain on the NC head root of each domain DC=Mydomain, DC=ForestRootDom, DC=tld object. Value of 0=Native level domain Value of 1=Mixed level domain al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, June 16, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] When a domain is Switch to Native Mode... what event Event ID is logged and where? Does anyone have this information handy? I am researching it now... Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where?
Interesting question. My expectation was that only the audit logs would show this change. There is no app/ntds log entry that I've ever heard of. If you're looking for a modified time stamp, you could look at the attribute itself and see if it gives the info you're after. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/detec ting_the_operation_mode_of_a_domain.asp Mixed/Native Mode Setting The attribute is ntMixedDomain on the NC head root of each domain DC=Mydomain, DC=ForestRootDom, DC=tld object. Value of 0=Native level domain Value of 1=Mixed level domain al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, June 16, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] When a domain is Switch to Native Mode... what event Event ID is logged and where? Does anyone have this information handy? I am researching it now... Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where?
Yee of little faith! We will log this. I don't recall the event message on 2k, but 2k03 it would be ID 16408 with text of something like: Domain operation mode has been changed to Native Mode. The change cannot be reversed. I *think* we log this (or something like it) on 2k as well, but I don't recall. Of course this is easy to test in the lab if you'd like. Oh, and I assume we're talking about 2k mixed to 2k native, not 2k03 domain functional level. What I stated above is the switch from 2k mixed to 2k native. ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, June 16, 2004 4:24 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? Interesting question. My expectation was that only the audit logs would show this change. There is no app/ntds log entry that I've ever heard of. If you're looking for a modified time stamp, you could look at the attribute itself and see if it gives the info you're after. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/d etec ting_the_operation_mode_of_a_domain.asp Mixed/Native Mode Setting The attribute is ntMixedDomain on the NC head root of each domain DC=Mydomain, DC=ForestRootDom, DC=tld object. Value of 0=Native level domain Value of 1=Mixed level domain al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, June 16, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] When a domain is Switch to Native Mode... what event Event ID is logged and where? Does anyone have this information handy? I am researching it now... Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where?
It's the same for 2K3 native... ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** -Original Message- From: Eric Fleischman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 16, 2004 3:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? Yee of little faith! We will log this. I don't recall the event message on 2k, but 2k03 it would be ID 16408 with text of something like: Domain operation mode has been changed to Native Mode. The change cannot be reversed. I *think* we log this (or something like it) on 2k as well, but I don't recall. Of course this is easy to test in the lab if you'd like. Oh, and I assume we're talking about 2k mixed to 2k native, not 2k03 domain functional level. What I stated above is the switch from 2k mixed to 2k native. ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, June 16, 2004 4:24 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where? Interesting question. My expectation was that only the audit logs would show this change. There is no app/ntds log entry that I've ever heard of. If you're looking for a modified time stamp, you could look at the attribute itself and see if it gives the info you're after. http://msdn.microsoft.com/library/default.asp?url=/library/en- us/ad/ad/d etec ting_the_operation_mode_of_a_domain.asp Mixed/Native Mode Setting The attribute is ntMixedDomain on the NC head root of each domain DC=Mydomain, DC=ForestRootDom, DC=tld object. Value of 0=Native level domain Value of 1=Mixed level domain al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, June 16, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] When a domain is Switch to Native Mode... what event Event ID is logged and where? Does anyone have this information handy? I am researching it now... Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
