RE: [ActiveDir] OT RIS ISSUE:

2003-04-02 Thread Sullivan, Kevin
Title: OT RIS ISSUE: There is a switch in the RISetup answer file that can be set to have a partition created on the first hard drive. I did a quick TechNet search and couldn’t find it. I will continue to look but thought possibly someone may have the reference.   Kevin   -Original

RE: [ActiveDir] Termminal Services Default Session

2003-04-02 Thread Free, Bob
TS in remote administration mode is limited to 2 remote sessions, add the local console and you have 3 total. You could set it up in application mode but I would question having that many people administering remote servers concurrentlyThen you also go down the licensing path. -Origina

RE: [ActiveDir] Termminal Services Default Session

2003-04-02 Thread Gil Kirkpatrick
Title: Message Hi Daniel,   When you use TS for management, you get 2 sessions. AFAIK, if you want more sessions, you have to start buying additional TS licenses.   -gil -Original Message-From: Daniel Chaveco [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 2:15 P

RE: [ActiveDir] Termminal Services Default Session

2003-04-02 Thread Damon R. Erickson
2 remote connections is the limit for remote administration mode.  If you want more connections then you need to move to application mode.     -Original Message- From: Daniel Chaveco [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 3:15 PM To: [EMAIL PROTECTED] Subject:

RE: [ActiveDir] Controlling information shared/viewable by ActiveDirectory

2003-04-02 Thread Bell, Stephen
Perfect! Great answer and I'm going to that spot right now... I've got the book and just missed that part... got to learn how to read!.. Cheers Steve -Original Message- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 12:45 PM To: '[EMAIL PROTECTED]' St

[ActiveDir] Termminal Services Default Session

2003-04-02 Thread Daniel Chaveco
I use Terminal Server Client to administer remote servers.  But I can only have 2 session at a time doing this.  Is there a way to increase this to 3 or 4 or is 2 the default?Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more

RE: [ActiveDir] Controlling information shared/viewable by ActiveDirectory

2003-04-02 Thread Gil Kirkpatrick
Stephen, The answers to almost all your questions lie in the realm of access control lists (ACLs). The security mechanisms in AD are quite flexible; you can control access down to specific attributes, operations, and users. To answer your specific questions... 1. Use ACLs to make the information u

Re: [ActiveDir] Controlling information shared/viewable by Active Directory

2003-04-02 Thread stefano tufillaro
Hi stephen I use AD to centralize several types of informations. COntrol, management, info and other WITHOUT using 3d part SW or utility. It was hard at the beginning but it's possible. MSDN and technet this e-mail list and several sites that you will find with samples and/or utilities. Four exam

[ActiveDir] Controlling information shared/viewable by Active Directory

2003-04-02 Thread Bell, Stephen
Three part question for the group. One of the good things about AD is the ability to use it to centralize information about users and providing an access method for other users. By filling in the fields in the ADUC - first name, last name, phone number, email address etc, you make this information

RE: [ActiveDir] dynamic disks

2003-04-02 Thread stefano tufillaro
Yes. It works INTO Windows 2000 so use the HW native (not as the previous) Bye From: "Weston Rogers" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: <[EMAIL PROTECTED]> Subject: RE: [ActiveDir] dynamic disks Date: Wed, 2 Apr 2003 14:16:24 -0500 NG2003 works on scsi disks? -Original Me

RE: [ActiveDir] Connect to printer

2003-04-02 Thread stefano tufillaro
Or G(roup) P(olicies) From: "Mike Celone" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: <[EMAIL PROTECTED]> Subject: RE: [ActiveDir] Connect to printer Date: Tue, 1 Apr 2003 21:55:25 -0500 You can also use "rundll32 printui.dll,PrintUIEntry" which is part of Windows 2000. Just type run

RE: [ActiveDir] dynamic disks

2003-04-02 Thread Weston Rogers
NG2003 works on scsi disks? -Original Message- From: stefano tufillaro [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 2:08 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] dynamic disks Norton Ghost 2003 It's harder to have not it. It works in WIndows 2000 (NT) and copy the

Re: [ActiveDir] Nt4 domain controller upgrade to Windows 2000

2003-04-02 Thread stefano tufillaro
The most that you asked you will obtain ONLY by a normal (natural ?) way, but it's not possible to tell in an e-mail. All the answers are into help (Windows 2000 Active Directory help) Good work _ MSN 8 with e-mail virus protection s

Re: [ActiveDir] dynamic disks

2003-04-02 Thread stefano tufillaro
Norton Ghost 2003 It's harder to have not it. It works in WIndows 2000 (NT) and copy the first disk DIRECTLY in the second and give you the possibility to repart, remove etc. or 1) I have the other disk in line as 2nd disk 2) I format it in NTFS new = NTFS old (4=4 or 5=5) 3) I use Xcopy (the ne

RE: [ActiveDir] downlevel client authentication

2003-04-02 Thread Roger Seielstad
Absolutely - I never said it was impossible, but the options to do so had their downsides. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. > -Original Message- > From: Patrick R. Sweeney [mailto:[EMAIL PROTECT

RE: [ActiveDir] Problem updating object attributes in Active Directory -Using Directory SDK

2003-04-02 Thread Gil Kirkpatrick
Jonas, It doesn't make sense so far :) Are we still talking about failed updates to the url attribute, or are we talking about updating the members attribute? If you could post the code snippet and the names of some of the groups, that might yield a clue. -gil -Original Message- From:

RE: [ActiveDir] downlevel client authentication

2003-04-02 Thread Mike Baudino
Thanks everyone for your replies. I especially appreciate the "real world" answers... This should help put to rest our "discussion". Mike Baudino "Patrick R. Sweeney" <[EMAIL PROTECTED]>@mail.activedir.org on 04/02/2003 09:52:17 AM Please respond to [EMAIL PROTECTED] Sent by:[EMAIL PRO

RE: [ActiveDir] downlevel client authentication

2003-04-02 Thread Patrick R. Sweeney
SetPrfDc can be used to force the secure channel to certain machines. It doesn't particularly make sense to run on client machines, but it was useful in an NT 4.0 Master Domain environment to keep the secure channels between resource domain Dcs and master Domain DCs site-specific. Forcing local

RE: [ActiveDir] downlevel client authentication

2003-04-02 Thread Patrick R. Sweeney
The choice is governed by the secure channel. This is established on a first-response basis. Given the absence of the DSClient the client behavior should still be as described in Q266729. This seems to be borne out by your experiences. -Original Message- From: [EMAIL PROTECTED] [mailto:

[ActiveDir] move users ou to ou

2003-04-02 Thread Taylor, Eric
Title: OT RIS ISSUE: I am working on some Active Directory OU delegation and have a quick question. Basically, I need to find out what are the minimum permissions that I can grant for OU Administrators to move users from one Organizational Unit to another Organizational Unit. We want to deny

[ActiveDir] OT RIS ISSUE:

2003-04-02 Thread james . blair
Title: OT RIS ISSUE: I am currently trying to RIS servers on a tested and am able to do so however I wish to set partition sizes so that the system partition is 10GB but RIS seems to just format and utilise ALL the available space even when I have FDISK'd and set the primary partition size. M

RE: [ActiveDir] Slightly OT: Deleting Accounts

2003-04-02 Thread Steve Rochford
Title: Message No; it doesn't get deleted. I've used the following sub-routine for the same purpose on our student network. Call it with deletemailbox - you'll need to change the servername to match your exchange server.   What I normally do for our staff network is run a routine which che

RE: [ActiveDir] Connect to printer

2003-04-02 Thread England, Christopher M
Ok, I hope no one addressed this already, but here is what we have been using. Con2prt.exe from the Resource Kit (any version): Con2prt.exe /cd \\server\printshare That is all you need. There are other switches with con2prt that you can check out as well. Again, I hope this helps and is not a re

RE: [ActiveDir] Account Lockouts

2003-04-02 Thread Patrick R. Sweeney
This type of problem is easily solved if you've set the DBFlag for logon events for netlogon. Otherwise it is almost impossible to track in an environment with NT Desktops -- the event ends up in the event logs of the offending desktop, not the DC. In an environment with 9x desktops, this is stil

Re: [ActiveDir] Account Lockouts

2003-04-02 Thread Tony Murray
There are a few things that you can do. 1. Ensure all your W2K DCs have SP3. There are a few improvements/fixes in the way lockouts are communicated between DCs. 2. Have a look at the Account Lockout Status tool (ALS.EXE). This pulls information from each DC in the domain regarding the lo

Re: [ActiveDir] Connect to printer

2003-04-02 Thread Brahim Bouchaiba
Try this vbs script: Set WshNetwork = CreateObject("WScript.Network") WshNetwork.AddWindowsPrinterConnection "\\printserver\printer_mane" WshNetwork.SetDefaultPrinter "\\printserver\printer_name" good luck [EMAIL PROTECTED] writes: >Original Message Follows >From: Richard Sumilang <[

[ActiveDir] Slightly OT: Deleting Accounts

2003-04-02 Thread Barber, Thomas
I am re-writing several scripts to delete accounts.  We are running AD Native Mode, with a single Exchange 2000 Server.  When I programmatically delete a user account (using Windows Scripting Host) does the Exchange email account get deleted as well?  I know a user’s Exchange email account

RE: [ActiveDir] downlevel client authentication

2003-04-02 Thread Roger Seielstad
Well, you're all partially correct. AD (whether mixed mode or not) appears the same as a "straight" NT4 domain to all downlevel (i.e. non-AD aware clients). What that means is that the PDC emulator is the only place passwords can be changed by these clients. It also means that any DC can authentic

[ActiveDir] Account Lockouts

2003-04-02 Thread Mayet, Yusuf Y
Title: Account Lockouts Hi everyone, I was hoping that you someone could help me out with this: We have a mixed environment of W2K DC's and there is a requirement from our Systems Support Centre to track Account Lockouts. As this can take place on any DC I was wondering if someone out there

RE: [ActiveDir] Removing sites and servers from AD

2003-04-02 Thread Roger Seielstad
Title: Message You are correct. It will request a backfill of all changes from all other DCs.   Roger \-- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message-From: Mike Newell [mailto:

RE: [ActiveDir] downlevel client authentication

2003-04-02 Thread Andries Thijssen
Also working from memory. There is an issue when all clients have been upgraded to W2K and all servers remain on NT4. When the first server is upgraded, any clients authenticating to that server will then be unable to authenticate to any of the other servers, leading to various problems as ind

RE: [ActiveDir] Problem updating object attributes in Active Directory -Using Directory SDK

2003-04-02 Thread Jonas Almfeldt
I have noticed a pattern for the "unsuccessful" MODIFY commands.. It appears to be group objects not having any group members that does not get updated. The non-updated groups I have looked at does not have parent groups either. This is only a guess. Does it make sense? / Jonas On Tue, 1 Apr 2