RE: [ActiveDir] downlevel client authentication

2003-04-01 Thread Tony Murray
The issue Kevin refers to is described in the article below. It is more for cases where the domain is reverted to an NT4 domain. Once W2K (and above, presumably) clients have authenticated with an AD DC using Kerberos, they can't then revert to using NTLM without rejoining the domain. http://

RE: [ActiveDir] downlevel client authentication

2003-04-01 Thread Sullivan, Kevin
Here is another issue that may come up when you start upgrading clients to be aware of. If a w2k client authenticates to the NT 4 BDCs that will work fine. The w2k client will use NTLM in the absence of AD for authentication. But if the NT4 DC happens to be unavailable and the client contacts a w2k

RE: [ActiveDir] downlevel client authentication

2003-04-01 Thread Rick Kingslan
When dealing with downlevel clients, a Windows 2K DC looks like an NT 4.0 BDC - hence it can authenticate the client. So, in your example of the mixed-mode site, there is no reason for a client to have to authenticate with the PDC-E. And, to further emphasize the point - if you install the DS Cli

RE: [ActiveDir] Removing sites and servers from AD

2003-04-01 Thread Rick Kingslan
Title: RE: [ActiveDir] Removing sites and servers from AD Mike,   What will be noted is that the USNs (update sequence number) of the attributes and objects in the database that is Active Directory will be older than what the other DCs show being last replicated to this DC.  So, any object or

RE: [ActiveDir] Connect to printer

2003-04-01 Thread Mike Celone
You can also use "rundll32 printui.dll,PrintUIEntry" which is part of Windows 2000. Just type rundll32 printui.dll,PrintUIEntry /? For the help file. Mike -Original Message- From: Devan Pala [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 8:51 PM To: [EMAIL PROTECTED] con2prt

Re: [ActiveDir] Connect to printer

2003-04-01 Thread Devan Pala
con2prt on the resource kit works like a charm, HTH... 8-) Original Message Follows From: Richard Sumilang <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [ActiveDir] Connect to printer Date: Tue, 1 Apr 2003 10:26:45 -0800 I have a Windows 2000 network runnin

[ActiveDir] downlevel client authentication

2003-04-01 Thread Mike Baudino
All, Please help me resolve a "discussion" with some strong opinions on both sides of the camp. You see, our reading on the role of the PDC Emulator in regard to a mixed-mode domain with downlevel clients (we're not upgrading the NT4.0 client software) has left us with differing interpretations.

RE: [ActiveDir] Removing sites and servers from AD

2003-04-01 Thread Mike Newell
Title: RE: [ActiveDir] Removing sites and servers from AD Thanks Mr. Woods and Mr. Bjelke for the advice, I was able to run DCPROMO on the server in Tustin and it worked great. One last question, the server that was in San Diego is now in my server room and I would like to turn it back on and

RE: [ActiveDir] Reinstall AD

2003-04-01 Thread Salandra, Justin A.
Title: Reinstall AD no, your GUID will be different.  This is not allowed in W2K AD   Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 primary office 914.681.8117 secondary office 646.483.3325 cell [EMAIL PROTECTED] -Original Message-From:

RE: [ActiveDir] Reinstall AD

2003-04-01 Thread Salandra, Justin A.
Title: Reinstall AD Unless you want to simply rebuild WIndows and then restore just the system state   Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 primary office 914.681.8117 secondary office 646.483.3325 cell [EMAIL PROTECTED] -Original

RE: [ActiveDir] Remote Connection

2003-04-01 Thread Juan Ibarra
Title: Message Thanks to all,  I resolved my issue by going to Admin Tools, Terminal Services Manager.   Juan -Original Message-From: Thommes, Michael M. [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 11:31 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Remote

RE: [ActiveDir] Remote Connection

2003-04-01 Thread van Donk, Fred
Title: Message Install the Admin pack for XP. IT has all the tools you need. You can download it from MS. In that way you can reset them from your desktop. -Original Message-From: Juan Ibarra [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 1:10 PMTo: '[EMAIL PROTECT

RE: [ActiveDir] Remote Connection

2003-04-01 Thread Thommes, Michael M.
Title: Message How about TS'ing to a server you CAN get at, and then using the TS Manager software on that server to kill the connections on your other server?   Mike Thommes Argonne National Laboratory -Original Message-From: Juan Ibarra [mailto:[EMAIL PROTECTED]Sent: Tuesday,

[ActiveDir] Connect to printer

2003-04-01 Thread Richard Sumilang
I have a Windows 2000 network running and all users log in to the server using Active Directory. I would like to have a bat script automatically connect people to a shared printer and have it set as the default. Please help :-) List info : http://www.activedir.org/mail_list.htm List FAQ:

RE: [ActiveDir] Remote Connection

2003-04-01 Thread Jim Busick
Title: Remote Connection Terminal Services Manager will show the users and sessions for your server, you can disconnect from there. -Original Message-From: Juan Ibarra [mailto:[EMAIL PROTECTED]Sent: Tuesday, April 01, 2003 10:03 AMTo: [EMAIL PROTECTED] activedir. org ([EMAIL

RE: [ActiveDir] Remote Connection

2003-04-01 Thread van Donk, Fred
Title: Message Go into Terminal Service Manager and reset the connections. You can do this local on the server or remotely from an other server.   Fred   Fred van Donk Sr Network Administrator LVBrands T: 919 990 3613 [EMAIL PROTECTED] -Original Message-From: Juan Ibarra [m

RE: [ActiveDir] Remote Connection

2003-04-01 Thread Juan Ibarra
Title: Message Fred, I don't have WTS server, I am just using the remote desktop connection from XP to connect to my windows 2000 servers.  It is the default that comes with the OS.  Only allows to connections.   Juan -Original Message-From: van Donk, Fred [mailto:[EMAIL PROT

[ActiveDir] Remote Connection

2003-04-01 Thread Juan Ibarra
Title: Remote Connection Good morning to all, Can anyone tell me if there is a way to resolve this issue without restarting the server. I usually connect via WTS to my win2k servers and always try to log off instead of just closing the window. However,  there is another person that occas

RE: [ActiveDir] Nt4 domain controller upgrade to Windows 2000

2003-04-01 Thread Brown, Bill [contractor]
Graham,   We had good success with this.  If you want  to contact me off-line I can go into some particulars…   R/Bill   -Original Message- From: Graham Turner [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 12:18 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Nt4

Re: [ActiveDir] Nt4 domain controller upgrade to Windows 2000

2003-04-01 Thread Graham Turner
Missy, would love to...   but given a significant lack of documentation on installed apps / shares an upgrade seems the better part of valour in this instance   GT       - Original Message - From: Missy Koslosky To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 5:1

RE: [ActiveDir] Problem updating object attributes in Active Directory -Using Directory SDK

2003-04-01 Thread Gil Kirkpatrick
Joan, Re: the url attribute not being updated... That's a mystery. I would check to make sure that your code is updating it with a new (not the same) value. I can't imagine that there would be a bug of that magnitude in the Directory SDK. Is there any consistency as to when the url attribute is up

RE: [ActiveDir] Problem updating object attributes in Active Directory -Using Directory SDK

2003-04-01 Thread Jonas Almfeldt
On Tue, 1 Apr 2003, Gil Kirkpatrick wrote: Hi Gil, > Hi Jonas, > > I don't have any experience with Java and AD, but I can give some > sugestions. > > 1. Doing an LDAP_MOD on a value to replace it with the same value does not > actually change anything; AD throws the operation out, no timestamp

[ActiveDir] Windows 2003 Network Deployment Guide

2003-04-01 Thread Myrick, Todd (NIH/CIT)
http://www.microsoft.com/downloads/details.aspx?FamilyID=5098c84a-8a9b-4e0f- bb27-254f5bfdaaa1&DisplayLang=en#filelist Pretty good synthesis of how to plan and modify network deployments of Windows 2003 network services. Needs a section on PKI though. Todd Myrick List info : http://www.actived

RE: [ActiveDir] Problem updating object attributes in Active Directory -Using Directory SDK

2003-04-01 Thread Gil Kirkpatrick
Hi Jonas, I don't have any experience with Java and AD, but I can give some sugestions. 1. Doing an LDAP_MOD on a value to replace it with the same value does not actually change anything; AD throws the operation out, no timestamps are updated, and no replication takes place. 2. Do you have more

RE: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread Garello, Kenneth
My apologies - I could have sworn I read otherwise. -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 10:08 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Mixed to Native and Exchange 2000 That's incorrect. Using the move mailbox comman

RE: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread Craig Cerino
Also Kenneth - when you use the Exchange Tasks\Move Mailbox feature - -the SIS is preserved. -Original Message- From: Craig Cerino Sent: Tuesday, April 01, 2003 9:56 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Mixed to Native and Exchange 2000 Well we went about it like this (and

RE: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread Roger Seielstad
That's incorrect. Using the move mailbox command preserves SIS. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. > -Original Message- > From: Garello, Kenneth [mailto:[EMAIL PROTECTED] > Sent: Tuesday, April 0

RE: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread Craig Cerino
Well we went about it like this (and if you have the resources I recommend the same) Program on main 30GB disk LOGS on second disk (18 GB) IS-MBX all that other good (important stuff) on a separate 80GB disk No problems with storage or anything else for that matter. -Original Message- Fro

RE: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread Garello, Kenneth
The only problem is that single instance storage benefits are lost. So you may experience a large increase in disk requirements. -Original Message- From: Craig Cerino [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 7:58 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Mixed to Na

Re: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread Marc Zukerman
I've done the leap-frog twice and had success with it both times. Haven't considered option 2 due to the e-mail domain naming issues it presents. - Original Message - From: "Craig Cerino" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 01, 2003 7:58 AM Subject: RE: [ActiveD

Re: [ActiveDir] dynamic disks

2003-04-01 Thread John Hicks/MIS/HQ/KEMET/US
Partition Magic has worked well for me in the past John Hicks | KEMET Electronics Corporation | Network Engineer Phone: 864-228-4473 | E-mail: [EMAIL PROTECTED] | AOL IM: ipaq1978 [ Mailing: 2835 KEMET Way  Simpsonville, SC 29681 USA ] "Pelle, Joe" <[EMAIL PROTECTED]> Sent by: [EMAIL

[ActiveDir] Reinstall AD

2003-04-01 Thread Lev Zdeněk
Title: Reinstall AD Hello evr. I want to reinstall my W2K environment with two W2K domain controller. It is posible install fresh environment and only restore GP object, security and distribution groups and computer and user accounts. THX Zdenek

RE: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread Craig Cerino
We went along the lines of Option 1 as well - worked like a charm for us. It's also a good way for you to be sure that the new email server is built to specs (yours or industry standards) if the previous machine was built before you were with your organization. This was the case with me and our old

Re: [ActiveDir] Mixed to Native and Exchange 2000

2003-04-01 Thread jacqui . hurst
I agree. Option 1 worked for me. I think they called it leap frogging or something like that :-) > from:Missy Koslosky <[EMAIL PROTECTED]> > date:Tue, 01 Apr 2003 05:13:06 > to: [EMAIL PROTECTED] > subject: Re: [ActiveDir] Mixed to Native and Exchange 2000 > > I'd go with opti

Re: [ActiveDir] Nt4 domain controller upgrade to Windows 2000

2003-04-01 Thread Glenn Corbett
Agreed.  Sounds a waaay to complicated a method to upgrade your servers.   Sounds like your new AD domain is not going to be the same as your NT v4 domain.  If this is the case, best bet is to rebuild your servers from the ground up with Win2k and be done with it.  Recreation of print queues

[ActiveDir] Problem updating object attributes in Active Directory -UsingDirectory SDK

2003-04-01 Thread Jonas Almfeldt
Hi, I use Directory SDK 4.0 for Java to syncronize data from Oracle to an Active Directory directory. My first observation of this problem was that the "whenChanged" attribute of AD objects does not always change when I perform LDAP Modify operations against the AD. The sync program performs a to

RE: [ActiveDir] dynamic disks

2003-04-01 Thread Brown, Bill [contractor]
Title: Message Joe,   Take a look at article 289876.  Works like a champ!   R/Bill   -Original Message- From: John Weber [mailto:[EMAIL PROTECTED] Sent: Monday, March 31, 2003 6:36 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] dynamic disks   Paragon Hard Disk Manager.