Re: [ActiveDir] Child Domains Programming

2003-01-23 Thread Tony Murray
Justin Can you be a little more specific - which part do you need more information on? The object(s) you are interested in are in a different domain to the DC to which you have bound. The information is not available from (or via) this server. It is possible to bind to a server in a

RE: [ActiveDir] OT: SQL 2000

2003-01-23 Thread Roger Seielstad
Oh really? Can you show me any documented proof of that? Its not listed in any of the cluster documentation that I've seen. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA

[ActiveDir] E2K and DC

2003-01-23 Thread Carlos Magalhaes
Hi all , We have a test server we bought, we would like to test Windows 2000 AD and E2K can one install these on the same machine (we a bit low on machines) are there any issues? P.s. are there any articles or links one can got to for motivating moving from nt4 to win2k? Thanks

RE: [ActiveDir] OT: SQL 2000

2003-01-23 Thread Andy David
Maybe he meant peanut clusters. -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 23, 2003 7:41 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT: SQL 2000 Oh really? Can you show me any documented proof of that? Its not listed in any of

RE: [ActiveDir] E2K and DC

2003-01-23 Thread Craig Cerino
Hello Carlos, If you are limited to putting everything on one machine (DC and EXC 2K) there's not much I can offer you other than to say - do not install any unneeded add-ons. There is a LOT going on on a Win2K Domain controller and a LOT going on a Ech2K box as well. If you become

RE: [ActiveDir] E2K and DC

2003-01-23 Thread Craig Cerino
Yes --- but i will tell you. If the desire to find articles on migration is to convince higher-ups of the bnefits and ROI of migration, one of the first things I would be sure they understood is that Microsoft will no longer provide support for Win NT4.0 after Dec 31, 2003. That's HUGE if you

RE: [ActiveDir] Users Exchange Server

2003-01-23 Thread Brown, Bill [contractor]
Chuck, If you add the following to your query [and then write it to the screen] you should get what you are looking for... mail,legacyExchangeDN r/Bill -Original Message- From: Chuck [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January

RE: [ActiveDir] E2K and DC

2003-01-23 Thread Rick Kingslan
All, I've held my tongue on this issue (NT 4.0 retirement as a justification) because I think there is merit to it - but in a very negative and damaging way. There is another way - using the same method, but turning it positive. Executives NEVER like to be backed into a corner. And, to say

RE: [ActiveDir] E2K and DC

2003-01-23 Thread Sullivan, Kevin
Perfect rebut Rick. I totally agree. Execs hate the idle threat and from my experience they usually take it as a challenge. There are so many positives to point to when selling the idea of Win2k/2003 that using the fact the you may lose (perceived) support doesn't carry much weight. I do a lot

RE: [ActiveDir] Child Domains Programming

2003-01-23 Thread Salandra, Justin A.
Sorry , I am relaying the information second hand because my programmer withdrew from the group a while back and hasn't had a chance to sign back up. He wants to lookup and create or modify objects in child domains without having to bind or hop servers. -Original Message- From: Tony

RE: [ActiveDir] VNC and Terminal Services

2003-01-23 Thread Bjelke John A Contr AFRL/VSIO
Title: Message John, FWIW,I have heard froma few "white hats" that VNC is easy to hack because it stores passwords in known encryption algorythms in the regsitry. http://online.securityfocus.com/bid/854/discussion and http://www.kb.cert.org/vuls/id/197477show some more detail on this. I

RE: [ActiveDir] OT: SQL 2000

2003-01-23 Thread stefano tufillaro
Dear about the 3) question I Installed 30 Cluster 2000 Sql Compaq Machine on server that are not in AD (normal NT 4 Domain). Later, for reorganization, I moved them in AD (domain 2000 trusted bidir with the first) without publication without problems also for the users (human and sw) that are

RE: [ActiveDir] Child Domain Programming.

2003-01-23 Thread Stephens, Brendan
Continuing from Justin's Post: Currently our intranet user management system is completely based on LDAP and ADSI. Our organization is now breaking up our initial server into a parent/child domain structure. I will use PDC for the name of the domain controller, DOMAIN for our DNS name and CHILD

[ActiveDir] Replmon Errors

2003-01-23 Thread Devan Pala
Hi All, I have the following errors occcurring between 2 sites (inter-site) between 2 domains (root and child). Errors appear on the root DC (also a GC, and Preferred Bridgehead for Site1). In Site2, a preferred Bridgehead (also a GC) does not show errors. Funny thing is only the

RE: [ActiveDir] Replmon Errors

2003-01-23 Thread Sullivan, Kevin
Go to HKLM/System/CCS/Services/NTDS/Diagnostics and set the Replication Events value to 5. Then force replication. This will log all kinds of replication info into the NTDS log that may help you to trouble shoot. I don't have any references to the specific error off hand but thought this may be

[ActiveDir] Child Domain Programming.

2003-01-23 Thread Stephens, Brendan
Continuing from Justin's Post: Currently our intranet user management system is completely based on LDAP and ADSI. Our organization is now breaking up our initial server into a parent/child domain structure. I will use PDC for the name of the domain controller, DOMAIN for our DNS name and CHILD

RE: [ActiveDir] Child Domain Programming.

2003-01-23 Thread Sullivan, Kevin
Definitely not the whole issue but in you code at the bottom 'Users' is not OU=Users it is CN=Users... Also, when you say PDC, I have to assume you are talking about PDC emulator and not a PDC but if you are looking at an NT DC make sure you test your code with WinNT:// as well as LDAP:// You will

RE: [ActiveDir] Child Domain Programming.

2003-01-23 Thread Salandra, Justin A.
He does mean the PDC Emulator, all domains so far are in native mode. -Original Message- From: Sullivan, Kevin [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 23, 2003 3:23 PM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] Child Domain Programming. Definitely not the

RE: [ActiveDir] ADMT 2.0

2003-01-23 Thread Jason Sherry (Pro Exchange)
Title: Message Warning: ADMT 2.0 from RC2 does not migrate workstation profiles. I just got off a consulting job and tried to use ADMT 2.0 and spent a while trying to figure out why the profiles werent being updated. I then installed ADMT 2.0 from RC1 and it worked fine. Warning #2:

[ActiveDir] Network Drive Question

2003-01-23 Thread Michael Penland
All I know this is not directly ADSI but you have to be 2000 savvy to know ADSI well so here goes. If a LAN user deletes a network folder , how can I tell who deleted it? If a LAN user deletes a network folder is there any retrieval? All help is appreciated! Michael Penland VIRUS

Re: [ActiveDir] Network Drive Question

2003-01-23 Thread Tim Hines
In order to determine who deletes a file you have to enable file and folder access auditing in a policy and then configure the files and folders that need to be audited. Once those requirements have been met then you can determine who deleted the file by reviewing the security log. There

RE: [ActiveDir] Child Domain Programming.

2003-01-23 Thread Stephens, Brendan
As a note, I tried using the WinNT provider. When I used WinNT://CHILD or WinNT://CHILD.DOMAIN.COM It returned a domain object, with only Schema availble as a lief node. IE: WinNT://CHILD.DOMAIN.COM/Schema -Original Message- From: Salandra, Justin A. To: '[EMAIL PROTECTED]' Sent:

Re: [ActiveDir] Network Drive Question

2003-01-23 Thread Michael Penland
So if it is set for everyone then will the security log still reflect the user or machine? MGP - Original Message - From: Tim Hines To: [EMAIL PROTECTED] Sent: Thursday, January 23, 2003 8:20 PM Subject: Re: [ActiveDir] Network Drive Question In order