RE: [ActiveDir] Computers OU

2003-02-17 Thread Craig Cerino
In a poorly pharsed response - I was assuming we (Victor) were aware of the AD Client. I need to make sure I put complete thoughts down when I am responding in these forums - - truly. -Original Message- From: Marc Zukerman [mailto:[EMAIL PROTECTED]] Sent: Friday, February 14, 2003 8:28

[ActiveDir] DNS Inconsistency

2003-02-17 Thread Oluwaseyi Owoeye
Hi Guys, I am having a major problem in my organization over here. I have set up active directory for about 800 users and about 500 workstations. But for some reasons or the other my DNS seems to be misbehaving. When I ping a host I get a reply from a particular IP address, but when I do a ping

[ActiveDir] DNS Inconsistency

2003-02-17 Thread Oluwaseyi Owoeye
Hi Guys, I am having a major problem in my organization over here. I have set up active directory for about 800 users and about 500 workstations. But for some reasons or the other my DNS seems to be misbehaving. When I ping a host I get a reply from a particular IP address, but when I do a ping

RE: [ActiveDir] Computers OU

2003-02-17 Thread VĂ­ctor Hugo Naranjo Borja
In Computers OU I could see only Windows nt/2000/xp computers but not windows 95/98/me. How can I list the windows 95/98/me computers in this OU? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rod Trent Sent: Thursday, February 13, 2003 19:15 To: [EMAIL

RE: [ActiveDir] DNS Inconsistency

2003-02-17 Thread Todd Povilaitis
I had the very same problem. It was affecting my scripts because I wasn't connecting to the machines I thought I was. * You need to enable DNS scavenging. Don't set anything below 48 hours. * If you are using DHCP, add your DHCP servers to the DnsUpdateProxy group. -Todd -Original Messag

RE: [ActiveDir] DNS Inconsistency

2003-02-17 Thread Oluwaseyi Owoeye
Thanks Todd, But why do I need to add my DHCP Server to the DnsUpdateProxy group? -Original Message- From: Todd Povilaitis [mailto:[EMAIL PROTECTED]] Sent: Monday, February 17, 2003 5:57 PM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] DNS Inconsistency I had the very s

RE: [ActiveDir] DNS Inconsistency

2003-02-17 Thread Todd Povilaitis
This is straight out of an excellent book on AD. Inside Active Directory A System Administrators Guide ISBN 0-201-61621-1 [DnsUpdateProxy] "...DHCP servers may dynamically register DNS resource records on behalf of DHCP clients. In this case, the DHCP servers become the owners of those records.

RE: [ActiveDir] Resolving a GUID

2003-02-17 Thread Gil Kirkpatrick
Hi Rick, Apologies for jumping into the middle of this thread, but I wanted to clarify something. Security descriptors use SIDs and GUIDs for two entirely different purposes. The ACEs in an ACL _always_ use SIDs to identify the security principal involved; they never use GUIDs to identify a secu

RE: [ActiveDir] DNS Inconsistency

2003-02-17 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
Warning rgd. the DnsUpdateProxy group: ..."by placing the computer objects of the DHCP servers as members in this group, the servers won't become record owners"... => that's exactly why you don't simply want to add the DHCP server's computer account to this group, if this happens to be a DC. Otherw

RE: [ActiveDir] DNS Inconsistency

2003-02-17 Thread Rick Kingslan
And, absolutely correct this is. A DC in this group is a known security problem. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROT

RE: [ActiveDir] Resolving a GUID

2003-02-17 Thread Gil Kirkpatrick
I need to check, but I believe that eDirectory uses GUIDs to represent trustees (security principals), vs. SIDs in Windows. There are pluses and minuses to both schemes, but none are particularly critical. I see it as more of an implementation detail than anything else. -gil -Original Messag

RE: [ActiveDir] DNS Inconsistency

2003-02-17 Thread Todd Povilaitis
Agreed. In our case we have separate domain member servers who's only task is to provide DHCP services. They are not domain controllers. -Original Message- From: GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED]] Sent: Monday, February 17, 2003 11:17 To: [EMAIL PROTECTED] Su

RE: [ActiveDir] Computers OU

2003-02-17 Thread Todd Povilaitis
We only allow secure updates. No down-level clients here. -Original Message- From: GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED]] Sent: Monday, February 17, 2003 12:03 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Computers OU If you really want to see them in the same

FW: [ActiveDir] Computers OU

2003-02-17 Thread Todd Povilaitis
Whoops, wrong thread, sorry... -Original Message- From: Todd Povilaitis Sent: Monday, February 17, 2003 16:58 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Computers OU We only allow secure updates. No down-level clients here. -Original Message- From: GRILLENMEIER,GUIDO (HP