Re: [ActiveDir] OT: Network bandwidth usage

2002-03-06 Thread Kevin Gent
Title: Message your cisco switch should have a console port that can be enabled and Sniffer Pro can monitor all traffic through that port. - Original Message - From: Jason Benway To: '[EMAIL PROTECTED]' Sent: Tuesday, March 05, 2002 10:53 AM Subject: RE: [Activ

[ActiveDir] W32Time Help!

2002-03-06 Thread Lori Eby
Hello All, I am having a difficult time getting the W32 Time Service to work properly in a clients AD domain. I have tried all of the various ways the MS White Paper says to set everything up to no avail. This is my first stab at AD and the advice is appreciated. How are you folks making it wo

RE: [ActiveDir] AD Users and Computers

2002-03-06 Thread Greg Carey
Title: Message What you are seeing is the "Name" value which is different from the "DisplayName" value.  The default for an upgraded domain is to make the "Name" equal to the username.  But the default for adding New users is to make the "Name" equal to what the DisplayName value.   -Ori

[ActiveDir] AD Users and Computers

2002-03-06 Thread shawn . hayes
Title: Message Anyone seen this.   When I display the Users container in Active Directory Users and Computers I see the "Display Name" of some of the users and the Pre Windows 2000 account name for others.  Display names are filled in for everyone...Why can't I see the display name for all

[ActiveDir] LDAP Query Logging

2002-03-06 Thread Fleenor Todd
Does anyone know if the diagnostics mode in Active Directory will log the contents of LDAP queries against the AD Domain Controller into the event log?   See Active Directory Services Diagnostic Event Logging (Q220940) for more info on Microsoft's web site.   Thanks!

[ActiveDir] Directory server access logs

2002-03-06 Thread Al Lilianstrom
Is there any way to get access logs from the ldap server that AD uses that are similar to what other ldap servers provide? I've been working with the Audit Directory Service Access turned on and that is pretty useless. al -- Al Lilianstrom CD/OSS/CSI [EMAIL PROTECTED] List info : ht

RE: [ActiveDir] XP and RIS

2002-03-06 Thread Morgan, Joshua
I have actually found the Problem Q287546 Now How do I delete the RIS image from the Server? ] Joshua Morgan PH: (864) 250-1350 Ext 133 Fax: (413) 581-4936 [EMAIL PROTECTED] -Original Message- From: Morgan, Joshua [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06, 2002 3:26

RE: [ActiveDir] Rolling SRP1 into a RIS Install:

2002-03-06 Thread Bjelke John A Contr AFRL/VSIO
James, The rough instructions are in Q296723, but the specific outline is something like this: 1. Copy the Windows 2000 CD-ROM onto the HD 2. Slipstream SP2 into it (update -s:path) 3. Extract the SRP1 files somewhere (sp2srp1 -x:path) From this point, what you have to do is remove matchin

[ActiveDir] XP and RIS

2002-03-06 Thread Morgan, Joshua
I have uploaded my Windows XP CD to my RIS server and when I try to load it I get Assertion Failure 146 in file Setup.exe!d:\xpclient\base\pnp\setupapi\fusion.c: success 1. Has anyone had this problem 2. Are there any known issues with windows 2000 AD RIS and Windows XP Joshua Morgan PR

[ActiveDir] Extending the User Interface

2002-03-06 Thread Fleenor Todd
I have been reading the information in the Active Directory Programmer's Guide about "Extending the User Interface for Directory Objects".   All of the examples are in C++. Does anyone know if you can do the same thing using Visual Basic?   Thanks

RE: [ActiveDir] Requirements for a DC

2002-03-06 Thread David Barr
Title: Message No, IIS is not required to install Active Directory. You should be able to use an existing SMTP host on another server to handle the SMTP replication.  Remember that you also need a Certificate Authority configured.   David Barr Professional Services Consultant -Ori

RE: [ActiveDir] Requirements for a DC

2002-03-06 Thread Hutchins, Mike
Title: Message Yes, IIS is needed if SMTP replication is used. -Original Message-From: SALANDRA, JUSTIN [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06, 2002 12:14 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Requirements for a DC No.  Maybe, check TechNet.   -Origi

RE: [ActiveDir] Requirements for a DC

2002-03-06 Thread SALANDRA, JUSTIN
Title: Message No.  Maybe, check TechNet.   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06, 2002 1:39 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Requirements for a DC   IS IIS required on a Windows 2000 Server in order to inst

[ActiveDir] Requirements for a DC

2002-03-06 Thread shawn . hayes
Title: Message IS IIS required on a Windows 2000 Server in order to install Active Directory?  Is the IIS SMTP service used if AD is using SMTP replication?   Thanks,   Shawn Hayes MCSE, MCT Network Engineer Compass Technology Management Sound Business Sense for IT www.compass.net 757.226.

RE: [ActiveDir] Development Domain

2002-03-06 Thread DeGrands, Charles
We have set up the separate forest scenario for our in-house devils about a year ago. The biggest push for this, as everyone has mentioned, was schema extensions. Here are a few things that we did to keep them out of our production arena: 1. Separated all the servers into their own VLAN. They

RE: [ActiveDir] Development Domain

2002-03-06 Thread Fugleberg, David A
Amen to that. However, as far as I can tell, the entire forest will need to be in .NET Native Mode (no Win2K DCs) for such 'advanced features' as schema delete to work. I hope I'm wrong, but that's what I understand. Anybody know for sure ? -Original Message- From: Rachui, Scott [mai

RE: [ActiveDir] Development Domain

2002-03-06 Thread Rachui, Scott
The next version of Active Directory will have a Schema Delete feature. It's about time! -Original Message- From: Steve Thomas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06, 2002 9:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Development Domain ] It sure will be nice when

RE: [ActiveDir] Development Domain

2002-03-06 Thread Steve Thomas
] It sure will be nice when we can actually delete schema elements ] that were defined in error ! No kidding! Never in my years of working with NT have I had to reinstall a server because of a single typo... until a couple of weeks ago. ARGH! Thank goodness it was only a single-box test forest.

RE: [ActiveDir] Development Domain

2002-03-06 Thread Fugleberg, David A
Depends on what they need to do...if they're developing LDAP-enabled apps, they will inevitably want to extend the schema sooner or later. That means they'll need a seperate forest in which to test their extensions (and the scripts, LDIF files, or programs they write to do the extensions). Yo

RE: [ActiveDir] Development Domain

2002-03-06 Thread Rachui, Scott
Linton is right. There are 3 partitions in Active Directory. The Domain Naming Partition, the Configuration Partition and the Schema Partition. The Schema and the Configuration Partitions are forest-wide and the Domain Naming Partition is domain-wide. We work with several developers also testi

RE: [ActiveDir] Development Domain

2002-03-06 Thread Linton Smith (WBTQ)
As developers, they will likely toy with the idea of extending the schema to suit their purposes. The schema is also forest wide, and changes can not be backed out. For this reason, I'd highly recommend a separate forest for use as their sandbox. Linton -Original Message- From: Neil Sm

Re: [ActiveDir] Development Domain

2002-03-06 Thread Neil Smith
Andy, In the situation you describe your 'evil beasts' could only effect and damage the 'Configuration' partition in AD. Remember - this is the only common partition in AD that is spread across a whole forest. Corruption of a child domain would be limited to it's own objects and policies The cha

RE: [ActiveDir] Development Domain

2002-03-06 Thread SALANDRA, JUSTIN
There is one exchange organization per forest!!! Since there is only one schema per forest, you would have to give time their own forest to ensure that they develop in their own organization. -Original Message- From: Andy Grafton [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06

RE: [ActiveDir] Development Domain

2002-03-06 Thread Chris Green
Don't give them Schema Admin or Enterprise Admin rights. They will be unable to muck with anything at the enterprise level. If they corrupt their own Domain partition you can restore it or make them start from scratch. Chris Green -Original Message- From: [EMAIL PROTECTED] [mailto:[EM

[ActiveDir] Development Domain

2002-03-06 Thread Andy Grafton
We have Developers. They are Evil Beasts who like to mangle anything they can. They can kill any system with one line of code, from 50 paces, at the most unfortunate time imagineable. Our corporate domain (say co.int) is a beautiful Active Directory thing with a single root and sites spread across