RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Burns, Clyde
Ran into the same issue when automating account creation where I work. Rather than code cdo/mapi with the users credentials to have it finalize the mailbox creation I use a command line utility call 'blat' to send the new account an email (yes I am a lazy programmer). The reciept of the new emai

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Friese, Casey
Title: Message Damian,   Indeed, the servers are connected directly to the switch.  I'm going to dive in and have a look. -Original Message-From: Scoles, Damian [mailto:[EMAIL PROTECTED]Sent: Tuesday, March 04, 2003 11:30 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] AD De

[ActiveDir] OT: Local Authentication of RAS User

2003-03-04 Thread Linton Smith (WBTQ)
Sorry for the OT post here, but I expect if the answer is known, it will be found here. We have a third party hardware/software solution that runs Windows CE, and has the capability to dial in, authenticate and communicate to a server application via RAS. The security of this CE device is non-exi

RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Carlos Magalhaes
If you check out the following posts it has a full description and code on how to do this http://groups.yahoo.com/group/ADSIANDDirectoryServices/message/5 http://groups.yahoo.com/group/ADSIANDDirectoryServices/message/6 http://groups.yahoo.com/group/ADSIANDDirectoryServices/message/7 ht

RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Salandra, Justin A.
SO it is different from a Exchange 55 world then? -Original Message- From: Craig Cerino [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 3:26 PM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] Creating Mailbox in Ex2000 You're ok John. While you have created the act

RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Craig Cerino
You're ok John. While you have created the actual mailbox and profile. The process is not actually complete until it is accessed for the first time. -Original Message- From: Mirochnik, John [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 12:07 PM To: '[EMAIL PROTECTED]' Subject: [

RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Salandra, Justin A.
The mailbox is created but not fully, however you must wait for replication to take place. I have noticed that when logging into outlook for the first time the Calendar and one or two other items get created. Off the bat there is just a inbox and associated items -Original Message- Fro

RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Connelly, Cliff
The mailbox is not created until you open the mailbox with Outlook Cliff Connelly -Original Message- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 11:13 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Creating Mailbox in Ex2000 What's the error?

RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Mirochnik, John
Error: "Unable to Read Security Information from the Directory. ID no: c1033028 Microsoft Active Directory-Exchange Extension" -Original Message- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 2:13 PM To: '[EMAIL PROTECTED]' Subject: RE: [

RE: [ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Gil Kirkpatrick
What's the error? -Original Message- From: Mirochnik, John [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 12:07 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Creating Mailbox in Ex2000 I'm trying to create a mailbox in Ex2000 by populating the following attributes in AD: hom

[ActiveDir] Creating Mailbox in Ex2000

2003-03-04 Thread Mirochnik, John
I'm trying to create a mailbox in Ex2000 by populating the following attributes in AD: homeMDB homeMTA msExchHomeServerName mailNickname The mailbox gets created but when in Users and Computers I open properties and click on Mailbox Rights button - I get an error instead of the list of permission

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Roger Seielstad
Title: Message Completely agreed. That's why I suggested the traffic shaping approach.   We've done that successfully with some of our core applications, weighting the priority of some over others. In the end though, some pipes are just too small. In other cases, the way the prioritization i

[ActiveDir] User rights on Domain computers and security issues

2003-03-04 Thread Greg Felzer
We are in the process of rolling out an new desktop at MUSC using a W2K AD infrastructure and an XP SP1 managed desktop. We piloted out new desktop for about a month to gauge the user's requirements for the new system. We had made the users domain account a member of the local power users group a

RE: [ActiveDir] totally OT: Exchange 5.5 and 2000 GAL

2003-03-04 Thread Salandra, Justin A.
I would not venture to answer that not having hands on experience with it, perhaps someone else can comment.  I would assume that the 55 machine should be the local and the 2000 should be the remote, but we all know what assume means. J   Justin A. Salandra, MCSE Senior Network Engineer

[ActiveDir] DCPromo Question

2003-03-04 Thread Rakes, Brandon A. NMIMC Contractor
All,   Scenario:   I have a root domain ds.abc.com and child domain us.abc.com located in the main office. The root has two DC's which one DC1.mo.abc.com has PDC emulator, GC, Schema Master, Domain Name and the other dc2.mo.abc.com has RID, and Infrastructure master roles. The sub domai

RE: [ActiveDir] totally OT: Exchange 5.5 and 2000 GAL

2003-03-04 Thread Mike Newell
I believe you need to change the LDAP port on Exchange to something else like 390. The 2K DC will use it's own LDAP on port 389. Do you see errors referencing LDAP in the Application log?   http://support.microsoft.com/default.aspx?scid=kb;en-us;224447   -Original Message-From: Pel

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Friese, Casey
Not sure if any of this sheds light on anything...here's are the fsmo roles of each dc: Office A: ntdsutil: roles fsmo maintenance: Connections server connections: Connect to server pa-file-01 Binding to pa-file-01 ... Connected to pa-file-01 using credentials of locally logged on user. server co

Re: [ActiveDir] totally OT: Exchange 5.5 and 2000 GAL

2003-03-04 Thread Marc Zukerman
Your Connection Agreement with the ADC should be configured to go between your Windows 2000 Domain Controller (Windows Server) and the SRS Server (Exchange Server). The SRS Server is your first installed Exchange 2000 server (can't be on a cluster). Verify that the SRS is running on that box

RE: [ActiveDir] totally OT: Exchange 5.5 and 2000 GAL

2003-03-04 Thread Salandra, Justin A.
Is your CA setup as a one way or a two way agreement?   I believe that Exchange 55 and 2000 need to be setup to replicate the GAL thru the Exchange 55 Replication topology in the Exchange Admin, but not having set this up myself, I may be mistaken   Justin A. Salandra, MCSE Senior Netw

[ActiveDir] totally OT: Exchange 5.5 and 2000 GAL

2003-03-04 Thread Pelle, Joe
Has anyone had the pleasure of installing E2k and the E2K ADC on a DC GC server AND connected to an existing 5.5 site through the ADC?    My problem is this:  I cannot get Exchange 55 to update its GAL with the newly created users in AD with E2K mailboxes and I cannot send mail from 5.5

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Roger Seielstad
Title: Message Nope - no new internet connection. ISA in Office A would then forward requests to ISA in office B - its called chained proxy. The big advantage is that you're avoiding WAN traffic.     -- Roger D. Seielstad - MCSE Sr

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Rick Kingslan
Title: Message Roger,   I do agree that avoiding a domain for 25 people is a good practice.  But, if the replication traffic is the biggest contributor, then it might be an option (though not a top one).  He clearly has sites set out appropriately, and more tuning at the site level and site

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Friese, Casey
Title: Message I've also noticed that the nic's in the two DC's are set to Auto and the routers are set to auto - full duplex I'm guessing I should change these to 100mb full but I'm not sure how my unix access points would act because they only support 10mb...grrr Unix is always getting i

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Friese, Casey
Title: Message Refreshing your minds...   2 sites: Office A = 25 clients - 1DC - subnet: 10.64.0.0/16 Office B = 250 clients - 1DC, 1 E2K, 1 ISA (Internet and E-Mail site for both locations) subnet 10.128.0.0/16   I know for a fact that telnet gets high priority for traffic coming to Office

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Roger Seielstad
Title: Message I would avoid using a subdomain, especially for 25 people.   Refresh our minds on your sites and subnets layout. Are they all in one site or are they two? It sounds like that might be part of the issue.   Another option, and this might make a lot of sense, is to put another ISA

RE: [ActiveDir] DC role

2003-03-04 Thread Tony Murray
For more info on the security issue, see http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q255134 Tony -- Original Message -- From: Roger Seielstad <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Tue, 4 Mar 2003 07:53:22 -0500 There is a fai

Re: RE: [ActiveDir] DC role

2003-03-04 Thread Brahim Bouchaiba
Thanks Greg. [EMAIL PROTECTED] writes: >If you have no other resources you have to do what you have to do >Brahim. > >However, if you do in fact have other resources - it is advisable not to >put DNS, DHCP, WINS on a DC - - not only are you going to be facing >certain security issues - - but you

RE: [ActiveDir] DC role

2003-03-04 Thread Jimmy Andersson
If possible, don't install DHCP on a DC, it's a security issue. Regards, /Jimmy -- Jimmy Andersson, Q Advice AB Microsoft MVP - Active Directory www.qadvice.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brahim Bouchaiba Sent: Tu

Re: RE: [ActiveDir] DC role

2003-03-04 Thread Brahim Bouchaiba
Thanks Roger. [EMAIL PROTECTED] writes: >There is a fairly serious security issue with putting DHCP on a DC. We've >taken to keeping WINS and DHCP separate from DC's under Win2k. > >-- >Roger D. Seielstad - MCSE >Sr. Systems Administrat

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Friese, Casey
Title: Message   -Original Message-From: Rick Kingslan [mailto:[EMAIL PROTECTED]Sent: Monday, March 03, 2003 10:55 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] AD Design Guidance Casey,   It would clearly resolve the replication issue.  But, it's only going to

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Friese, Casey
yeah Roger, I was just giving the others a reminder because it sounded to me like you were on the right page :) -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 7:16 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] AD Design Guidance Th

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Friese, Casey
Title: Message Rick,   There are around 25 clients in Office A where the head server is located.   Ideally I would like to increase the bandwidth on the line but failing that, if we would move the DC that is there now back to our datacenter we would structure so that our datacenter in Office

RE: [ActiveDir] DC role

2003-03-04 Thread Craig Cerino
If you have no other resources you have to do what you have to do Brahim. However, if you do in fact have other resources - it is advisable not to put DNS, DHCP, WINS on a DC - - not only are you going to be facing certain security issues - - but you will also hamper performance -Original Me

RE: [ActiveDir] DC role

2003-03-04 Thread Roger Seielstad
There is a fairly serious security issue with putting DHCP on a DC. We've taken to keeping WINS and DHCP separate from DC's under Win2k. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. > -Original Message- > F

[ActiveDir] DC role

2003-03-04 Thread Brahim Bouchaiba
Hello everyone, Is there in harm to have primary DC in single forrest act also as DHCP and WINS server for the whole site ,beside the other roles ? thanks Brahim Bouchaiba Network administrator Information technology 617-7359720 List info : http://www.activedir.org/mail_list.htm List FAQ:

RE: [ActiveDir] AD Design Guidance

2003-03-04 Thread Roger Seielstad
That's exactly my point - this issue, as was pointed out in the Q article David Fugleberg posted, happens specifically in that case. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. > -Original Message- > From: