[ActiveDir] RRAS

2002-12-04 Thread Carlos Magalhaes
Hey all, I know this might be a little off the topic but I cant find any answers anywhere. I have a W2k machine SP3 with RRAS installed with all the hotfixes. This machine is in a Windows NT4 domain and the WINS and DHCP servers are setup and working and specified in the RRAS

RE: [ActiveDir] OT: Migration tools and AD

2002-12-04 Thread Thornley, Dave H
As I understand it SIDHistory entries are added to the access token in the same way that group membership SIDs are, client version isn't an issue. dave -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED]] Sent: 03 December 2002 12:54 To: '[EMAIL PROTECTED]' Subject: RE:

[ActiveDir] Unable to format using RIS

2002-12-04 Thread De Schepper Marc
Hey all, I'm using RIS to installl WIN2000SP2 on our PC's and protables. In most cases the setup will not continue because RIS is unable to format the partition. When I first format the disk then it works (sometimes). Does anyone know how to force a format during a RIS install? Or another

Re: [ActiveDir] OT: Migration tools and AD

2002-12-04 Thread Graham Turner
Dave, thanks for the sanity check ! That was my understanding. Would be VERY interested in knowing how this works - as we know and Roger has alluded to this - NT4 is not directory aware and cant get this attribute of the user account from a query of the directory ?? i would guess one of the

RE: [ActiveDir] AD Site design with Firewalls and other goodies...

2002-12-04 Thread Roger Seielstad
In a word, yuk. But, I think its fixable. If I'm reading it correctly, all your sites share one site connector - that's going to be the biggest issue you have. In effect, that says that any site can replicate with any other site. You'll want to make discrete site connectors between the hub and

[ActiveDir] IE Security Settings

2002-12-04 Thread Don L. Hollingshead
Hey, We added a trusted sitein our Group Policyto alleviate an Access error. It does not appear that these settings are getting replicated to the other AD servers. Does anyone know if these settings should replicate to the other servers? I can only assume that they should be replicating,

RE: [ActiveDir] Unable to format using RIS

2002-12-04 Thread Todd Povilaitis
Make sure you have the following section in your answer file: [RemoteInstall] Repartition = Yes UseWholeDisk = Yes -Original Message- From: De Schepper Marc [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 04, 2002 01:38 To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Unable to

RE: [ActiveDir] which W2K groups does the 5000 limit apply to?

2002-12-04 Thread Stuart Kwan
In Windows 2000, Microsoft recommends that you place no more than 5000 direct members in *any* kind of group in Active Directory (be it universal, global, local, security-enabled, or mail-enabled). This is a recommendation, not an enforced restriction, based on testing of Active Directory on what

Re: [ActiveDir] OT: Migration tools and AD

2002-12-04 Thread Graham Turner
Stuart, thanks for this excellent response. Congratulations it would seem to the developers of NT for their forward thinking. Frustrating as it is I think i am going to have to accept the return of the SIDhistory data as something that happens with a native mode DC - suffice to say a modded

RE: [ActiveDir] which W2K groups does the 5000 limit apply to?

2002-12-04 Thread Rick Kingslan
Stuart, Thanks for the clarification. Much appreciated! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of

[ActiveDir] .NET training recommendations for IT technical product managers

2002-12-04 Thread Isham, Alan A
Title: .NET training recommendations for IT technical product managers Background: I'm a technical product manager overseeing Active Directory at Intel. I work closely with domain infrastructure, AD tools, and Exchange 2000 engineering teams and always find myself behind the 8 ball on .NET

[ActiveDir] win2k client modification as Win2k domain controller is discovered

2002-12-04 Thread Graham Turner
It seems a very critical point in the deployment of AD is the discovery of a W2k domain controller by an exsiting w2k computer (professional or member server). I would guess (without having done the work in capturing data !) that w2k clients in an NT4.0 domain are attempting to discover a DC

RE: [ActiveDir] Separating an Active Directory Forest

2002-12-04 Thread Rick Kingslan
Joe, IMHO and experience, wish them good luck. The reason why there must be a migration for one group or the other is because someone has to own the original forest. You cannot just BOTH seize the Schema and Domain Naming FSMO roles to the respective 'new root', as it can only be held by one or

RE: [ActiveDir] Separating an Active Directory Forest

2002-12-04 Thread Rebecca Paul Morris
Hi, just received this e-mail, you might want to check out the address, as I am not the person who requested the info. -Original Message- From: Rick Kingslan [SMTP:[EMAIL PROTECTED]] Sent: 5 December 2002 1:27 PM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] Separating an

RE: [ActiveDir] Separating an Active Directory Forest

2002-12-04 Thread Rick Kingslan
Right. But, it appears that you've joined a list server for Microsoft Active Directory discussion. If this was in error, and you would like to unsubscribe, please see the following links to remove yourself from the service. Thanks! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active