RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread jacqui . hurst
I have completed a rollback with Windows 2000 AD back to NT4 and had no problems with the W2K clients authenticating back to NT4. Maybe this was just look and something to do with the reasonings behind the rollback but thought it was worth a mention. J from:Ken Cornetet [EMAIL

Re: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread rick reynolds
You need to run in mixed mode until the last nt4 server or client leaves the network, also, if you run mixed mode, you can still roll-back, - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, June 19, 2003 4:21 AM Subject: RE: [ActiveDir] A number of NT4.0

RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread Sullivan, Kevin
Correct about servers but clients are really irrelevant with regards to Native vs. Mixed mode. -Original Message- From: rick reynolds [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 9:29 AM To: [EMAIL PROTECTED] You need to run in mixed mode until the last nt4 server or client

RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread W2K List
You can have NT 4 servers and still switch to Native mode. However, the servers cannot be Domain Controllers. Denny -Original Message- From: Sullivan, Kevin [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 9:45 AM To: [EMAIL PROTECTED] Correct about servers but clients

RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread Joe
This is incorrect, you can switch from mixed mode to native mode as soon as you don't have NT4 BDC's. NT4/Win9x clients/servers will work with a Native Mode AD Domain just fine. The roll back is correct with mixed mode though once you get very far into the migration a rollback becomes more and

RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread Mike Baudino
In that case I would expect NT4.0 member servers and workstations to be irrelevant and the only real concern, which by now we should all know about, is NT4.0 BDC's. But you're right. Because of our shoestring budget, basically $0.00 (but we can add a lot of 0's to the left of the decimal to

Re: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread Rick Reynolds
I have had trouble with win98 and nt4 ws when I went to Native, and did not have an NT4 domain controller. What did I do wrong. - FIGHT BACK AGAINST SPAM! Download Spam Inspector, the Award Winning Anti-Spam Filter

RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread Roger Seielstad
Answers are inline below. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. Since we lack sufficient budget to perform a proper migration we'll need to do in-place upgrades to our domains and then

RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread Roger Seielstad
You only need to be in mixed mode until all NT4 domain controllers are gone in the domain. Mixed mode/Native Mode has no impact on what clients can be served. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc.

[ActiveDir] Monitoring AD

2003-06-19 Thread Hutchins, Mike
Can anyone give me a pointer on something that is surefire to get mgmt to realize that someone sitting in a room monitoring 103 W2K dc's in 90 physical locations across the US with event viewer isn't a Good Thingtm? Help? List info : http://www.activedir.org/mail_list.htm List FAQ:

[ActiveDir] Windows 2000 Server as VPN

2003-06-19 Thread Richard Sumilang
Can Windows 2000 Server be used as a VPN? I briefly tried looking it up but most things I found where very vague. So basically what I want to do is open up a port on my router to forward to a VPN Server (Windows 2000 computer) that will give the user access to the network. Thanks Richard S.

RE: [ActiveDir] Monitoring AD

2003-06-19 Thread Craig Cerino
EVENT VIEWER? OMG! Just briefly how about mentioning if they spent the money on a quality SNMP tool - - you would not only save hundred/thousands in man power time while activily monitoring all your devices - - but you would also be able to do trending and analysis and more than likely be

RE: [ActiveDir] Monitoring AD

2003-06-19 Thread Mayet, Yusuf Y
Title: RE: [ActiveDir] Monitoring AD My thoughts would be 1. DNS zone transfers stop taking place...well if DNS Stops then Active Directory stops. 2. Latency between DC's - Updates not received as prescribed by sites and services 3. Group Policies not being applied or corrupt - Security is

RE: [ActiveDir] Windows 2000 Server as VPN

2003-06-19 Thread Michael B. Smith
Yes. See Routing and Remote Access Server (RRAS). -Original Message- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 12:47 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Windows 2000 Server as VPN Can Windows 2000 Server be used as a VPN? I briefly tried

[ActiveDir] fismos

2003-06-19 Thread rmcdonald
I have 3 dc's I would like to break the fismos off on to. Is there some servers that should be faster then others or does it not matter what I put where? Also what is the best tool to use to do this with? Thanks again for the help Ryan McDonald Systems Administrator

RE: [ActiveDir] fismos

2003-06-19 Thread Jimmy Andersson
Q223346 - FSMO Placement and Optimization on Windows 2000 Domains: http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q223346 Q223787 - Flexible Single Master Operation Transfer and Seizure Process: http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q223787 Regards,

[ActiveDir] DNS Replication

2003-06-19 Thread Victor Hugo Naranjo
Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, VĂ­ctor Naranjo MCSE, MCSA

RE: [ActiveDir] DNS Replication

2003-06-19 Thread Sullivan, Kevin
In Windows 2000 the Integrated zones are in the domain naming context so this is correct. But in Windows server 2003 it is in an application partition and you can choose replication partners explicitly. From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June

RE: [ActiveDir] DNS Replication

2003-06-19 Thread Robbie Allen
Title: Message You have these options with AD-integrated zones in Windows Server 2003: - To all DCs that are DNS serversin the forest (predefined app partition) - To all DCs that are DNS servers in a domain (predefined app partition) - To all DCs in a domain (only option with W2K) - To

RE: [ActiveDir] DNS Replication

2003-06-19 Thread Roger Seielstad
Title: Message It is correct that they will not replicate as part of AD replication, but there is no reason you can't do normal DNS zone transfers to accomplish a similar end point. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP

[ActiveDir] suggestions for OU delegation information sources

2003-06-19 Thread Thommes, Michael M.
Hi All! As we continue to flesh out our AD structure, we are trying to give delegation authority for various objects in OUs to the appropriate groups. Being a control freak, I don't want to give these groups full control over all of the objects in the OU since this is also where our user

RE: [ActiveDir] A number of NT4.0 to AD upgrade questions

2003-06-19 Thread Joe
Define your troubles. My guess would would be name res issues because people start to forget about WINS once they move to AD and W2K Machines. I have tens of thousands of Win9x and NT4 clients and hundreds of NT4 Servers that are functioning well in a Native mode domain environments and have

RE: [ActiveDir] suggestions for OU delegation information sources

2003-06-19 Thread Joe
Bob: I agree on the book recommendation. Chapter 4 is a virtual mountain of good info. For the more involved/intense AD Admin I would also point out and recommend Managing Enterprise Active Directory Services (Robbie Allen/Richard Puckett Addison Wesley Publishing). That book will probably fly

RE: [ActiveDir] suggestions for OU delegation information sources

2003-06-19 Thread Rick Kingslan
If they only could have had a few chapters on Exchange 2K integration and how to make it less painful... :oP Oh, you are NOT EVEN gonna get this started again! Huh-uh! ;-D Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone -

RE: [ActiveDir] suggestions for OU delegation information sources

2003-06-19 Thread Free, Bob
Bob is right - this is a must have on your shelf (along with Robbie's book(s), of course!) I thought Robbie's stuff went with out saying :-] These are the books that never make it to my bookshelfs, they stay either _on_ my desk or in the car, that's as high of a tribute as I can pay to any