RE: [ActiveDir] Global Catalog Question

2003-01-09 Thread Jon . Gimpel
What type of workstations are connected? If it is NT 4.0 or Windows98, perhaps shutting off browsing services on all servers...? -Jon -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 1:46 PM To: '[EMAIL PROTECTED]' Subject: RE: [Act

RE: [ActiveDir] AD Disaster Recovery Book

2003-01-09 Thread Free, Bob
Compaq services also has a nice one... ftp://ftp.compaq.com/pub/supportinformation/papers/ps-99-23.pdf -Original Message- From: Tim Hines [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 3:32 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] AD Disaster Recovery Book See the A

Re: [ActiveDir] AD Disaster Recovery Book

2003-01-09 Thread Tim Hines
See the AD disaster recovery whitepaper at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn ol/ad/windows2000/support/adrecov.asp Tim Hines, MCSA, MCSE (2000 & NT4) MVP - Active Directory - Original Message - From: "Joe Baird" <[EMAIL PROTECTED]> To: <[EMAIL

Re: [ActiveDir] Service Pack overwrite files?

2003-01-09 Thread John B
I'm looking at blowing out and starting over on one of my domain controllers. Currently I have two domain controllers in the domain. The domain controller I need to blow out run dns, dhcp and wins. It's a windows 2000 environment. I also run exchange 2000 in this environment. Does anybody know any

[ActiveDir] AD Disaster Recovery Book

2003-01-09 Thread Joe Baird
Anyone know of a good AD disaster recovery book? Only found one dedicated book so far. Thx, Joe List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Service Pack overwrite files?

2003-01-09 Thread Free, Bob
Yes there are numerous instances where that can be problematic, much depends on the source of the HF's or QFE's involved. A couple of examples- http://support.microsoft.com/default.aspx?scid=kb;en-us;281767 http://www.win2000mag.net/Articles/Index.cfm?ArticleID=26166 59 Post-SP3 Hotfixes Conflic

[ActiveDir] Service Pack overwrite files?

2003-01-09 Thread England, Christopher M
Hey all, I am starting (finally) to deploy XP SP1 and 2000 SP3 to our 1500 clients. I am wondering if when they get updates (q-patches, etc) from Windowsupdate, a SUS server, or scripts that I run, if the Service Pack will overwrite any newer files. So say they get a patch that is Pre-SP2 and then

RE: [ActiveDir] Modifying the Active Directory

2003-01-09 Thread Brad Martin
Yeah, I figured it was being totally locked out since you guys found the potential for exploit.  As I don’t really relish using hacking tools on my Active Directory, and Microsoft doesn’t support it directly, I’m going to have to tell my guys here that isn’t not going to be an option.  

[ActiveDir] Can you tie multiple names to one user or email address?

2003-01-09 Thread daviss
We have one system that has limitations to username length. This system supports LDAP. We would like to configure it to authentication against our W2k AD server. The same associates have accounts on the W2k server, however their usernames are not limited in the same way. Is it possible to have AD a

RE: [ActiveDir] Modifying the Active Directory

2003-01-09 Thread Turin, Vladimir
    I think there are some people who can tell you how, but they will have to kill you after that. ;) Here is the reason: http://www.microsoft.com/technet/treeview/default.asp?url="">   For further reading: http://msdn.microsoft.com/library/default.asp?url="">   Vladimir Turin Aelita Softw

RE: [ActiveDir] Global Catalog Question

2003-01-09 Thread Roger Seielstad
I suppose you could permission it such that they can't see it. There are probably downsides to doing that, however, that make it unwise. Maybe teach them to ignore it? -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harb

[ActiveDir] Users view

2003-01-09 Thread Rivet, Natacha
Title: Message Hello all, We have a functional 2-way trust established between an NT 4 domain and a Windows 2000 AD Domain. In the AD, we have many user accounts in many different containers. When we try to assign users from the AD in security principals in the NT 4 domain, we

RE: [ActiveDir] Protocols Required

2003-01-09 Thread jim . katoe
Outlook will send a request from a high port on the local machine to port 135 on the Exchange server.  The Exchange server will listen on Port 135 and respond on some high port. TCP/IP communication Also note it is a new TCP communication, when the server contacts the client

RE: [ActiveDir] Modifying the Active Directory

2003-01-09 Thread Brad Martin
A follow up:  I was screwing up my syntax, which I've now corrected, but now when I try I get an error message: "Error: Modify: Constraint Violation <19>".  I can change other values, just not the sIDHistory one.  This looks like a security feature so people can't modify the sIDHistory and

[ActiveDir] Global Catalog Question

2003-01-09 Thread Chris Flesher
Title: Message This may be unrelated to this newsgroup, but it's a simple idea. I have a forest root and 1 child domain. Is there a way to hide the forest root name from being listed when people browse?   Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477  

[ActiveDir] Modifying the Active Directory

2003-01-09 Thread Brad Martin
Is it possible, using LDP.EXE to change the sIDHistory value of a user in the A.D.?  I'd like to replace the existing sIDHistory with a new one, but when I try a modify I get: "Error: Modify: Unwilling to perform <53>"  Is this just a rights issue with the user I'm binding with, or is A.D.

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Shawn.Hayes
Outlook will send a request from a high port on the local machine to port 135 on the Exchange server. The Exchange server will listen on Port 135 and respond on some high port. TCP/IP communication -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED]] Sent: Thursda

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Roger Seielstad
You don't seem to be listening. The RPC endpoint mapper, which is what runs on port 135, is an initial connection point for ALL RPC traffic. That's the port used to negotiate the actual connections. All MAPI connections are RPC. What do you think the answer is? ---

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Shawn.Hayes
And the two Exchange servers are in the same Windows site and Exchange site? -Original Message- From: Andy David [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 11:31 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Protocols Required So after you moved their mailboxes no

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Andy David
So after you moved their mailboxes no one was able to access their mailboxes w/o recreating their Outlook profile to point to the new server? Im missing something here. -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 10:23 AM To:

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Carey, Greg
It's the same MAPI conversion. Instead of connecting the user to their mailbox, the server will give the client a referral to the new server on which the client's mailbox resides. -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 10

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Roger Seielstad
It needs connectivity to at least the endpoint mapper (port 135) and the directory service. It might also need access to the information store. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlan

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Salandra, Justin A.
I agree, we have a site that has locked down their network too much and I am not sure what ports needs to be open for all function of mapi work, including outlook changing the server it logs into. -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED]] Sent: Thursday, Jan

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Salandra, Justin A.
I know that, I just want to know if that request for the change still occurs over port 135, I had a site that did not have outlook automatically reconfigure after 3 weeks of the old server being up. DNS was right and so was WINS. -Original Message- From: Andy David [mailto:[EMAIL PROTE

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Salandra, Justin A.
Right, so does outlook still communicate over port 135 to change the server -Original Message- From: Carey, Greg [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 9:34 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] Protocols Required With the caveat that the

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Roger Seielstad
Access to the server maybe? I'd strongly suggest not trying to lock stuff down this tightly if you don't understand the entire MAPI session process. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Bjelke John A Contr AFRL/VSIO
Greg is correct... If the mail store that the outlook profile is pointing to no longer exists or is no longer contactable by the client, outlook will never get repointed to the new location. In this case, you would have to manually repoint the outlook profile to the new mail store to resolve the ma

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Andy David
You need to leave the first server up in order for mapi to work its magic. -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 9:28 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Protocols Required When you move a mailbox to anot

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Rick Kingslan
Right - it changes the SERVER. It is not going to change the port that is used for the End Mapper. It will always be 135. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone > -Original Message- > From

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Carey, Greg
With the caveat that the old mail store remains up until the client connects. -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 9:28 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Protocols Required When you move a mailbox to an

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Salandra, Justin A.
When you move a mailbox to another server, Outlook will automatically change the server defined in the local profile. -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 9:25 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] P

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Rick Kingslan
Justin, I'm not sure what you mean by 'reconfiguring the server in the local profile'? The requirement *is* to communicate over port 135. Outlook cannot just arbitrarilly decide to communicate over another port to support this - hence it cannot automatically reconfigure itself. Rick Kingslan M

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Salandra, Justin A.
What would prevent Mapi Outlook clients from automatically reconfiguring the server in the local profile? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 914.681.8117 office 646.483.3325 cell [EMAIL PROTECTED] -Original Message- From: Roger Seielstad [mailt

RE: [ActiveDir] Protocols Required

2003-01-09 Thread Roger Seielstad
No. Something needs to point it to the correct ports. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -Original Message- > From: Salandra, Justin A. [mailto:[EMAIL PROTECTED