RE: [ActiveDir] OT: Server Monitoring

2003-08-08 Thread Coleman, Hunter
If SA can execute a batch file when it detects your Exchange server is unavailable, you can use Blat (http://www.interlog.com/~tcharron/blat.html) or Postie (http://www.infradig.com/index.html) and point it to your ISP's mail server to deliver the notification. Fr

Re: [ActiveDir] Seeking some feedback ... use of 2003 Admin. tool s against a non-forest prep'd 2000 only directory ...

2003-08-08 Thread Glenn Corbett
Title: Message Dean,  I've certainly used the uplevel admin tools, but basically work within the confines of the functionality they give me without making the schema mods.   You could take the view with MS that 'hey, I've forest prepped my environment for 2k3...but wont be implenenting it for

[ActiveDir] System Shutting Down

2003-08-08 Thread Richard Sumilang
I keep getting this error message and the system goes down. Give me like 60 seconds to read it... 'The system process "C:\WINNT\system32\lsass.exe" has terminated unexpectingly with status code - 1073741819. The system will now shut down and restart.' Is there a quick way to fix this without r

RE: [ActiveDir] Groups and OU's

2003-08-08 Thread Ellis, Debbie
I will have a single forest, single domain . Less than 1,000 users. I want it simple. If I don't create an OU for the groups will I have to include groups into another ou? I will have one person administer groups. -Original Message- From: Jimmy Andersson [mailto:[EMAIL PROTECTED] Sen

[ActiveDir] NTDS Database Error

2003-08-08 Thread Najem Oulad Ali
Hi, Can somebody tell me if this message's to be concerned ? This message's appeared on one of the 4 DC's we have, and it's the on who a have upgrated with SP4. The message's appears after one of the Frontoffice employees opens the AD. Event Type: Error Event Source: NTDS Database Event

RE: [ActiveDir] Groups and OU's

2003-08-08 Thread Myrick, Todd (NIH/CIT)
Title: Message Per delegation I do the following   AD <---Root Identifier     +Delegation   Give FC to the Directory Administrators, Enterprise Admins, and System; Read to the Data Administrators & Authenticated Users.     +OU or CN = Users   Give R/C/M to Full Data Admins, Jr D

RE: [ActiveDir] LDAP & LastLogin for Computers

2003-08-08 Thread Steve Rochford
Title: Message If knowing when the machine was last switched on is enough then you can check the password age for the machine account - I think Windows 2000 changes it every 7 days; NT 4 is longer - so if you find a password age of greater than (say) 30 days you know the machine isn't being

RE: [ActiveDir] Seeking some feedback ... use of 2003 Admin. tools against a non-forest prep'd 2000 only directory ...

2003-08-08 Thread Dean Wells
Title: Message Agreed ... the solution I am presently testing is a full import of SCH14.LDF and SCH15.LDF ... thus bumping the schema revision to 15 and actually incorporating all revision 15 content. Oddly enough though, this is beginning to progress toward a near forest prep solution. The

RE: [ActiveDir] Turn off account lockout feature on a account.

2003-08-08 Thread Myrick, Todd (NIH/CIT)
Title: Message Exchange 5.5 uses a standard NT user account with rights assigned to it as a system account.  So it is susceptible to account lockout policies, unless you use administrator.   Exchange 2000 changed to using the local system.   Todd Myrick   -Original Message-

RE: [ActiveDir] Anonymous Logon

2003-08-08 Thread Rittenhouse, Cindy
Thanks to all for the references and responses. I think I'm on the right path, I've ordered the MonitorWare. -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Friday, August 08, 2003 00:22 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Anonymous Logon Nope - MonitorW

RE: [ActiveDir] Seeking some feedback ... use of 2003 Admin. tools against a non-forest prep'd 2000 only directory ...

2003-08-08 Thread Myrick, Todd (NIH/CIT)
Title: Message How about this,   We use third-party tools for Basic Network Identity Management, Data Integrity, Consistent Access Management Policies, and Consistent Provisioning of Resources.  Our customers / data administrators demand a lot from our environment because many are giving u

Re: [ActiveDir] Home Labs Interconnected

2003-08-08 Thread Glenn Corbett
>Your question goes back to trust, Is someone going to make > changes on there own with no concern for the other participants? Possibly not Mark, but as there are a number of aspects in AD that can affect the whole environment, organising and scheduling the testing of various components to ensure

Re: [ActiveDir] Cached credentials on Win2003 domain controllers

2003-08-08 Thread jim . katoe
I believe they are still cached, and controlled via GPO. Turning the cacheing off can increase security but at a cost. -- Sent from my BlackBerry Wireless Handheld - Original Message - From: ActiveDir-owner Sent: 08/07/2003 01:20 PM To: [EMAIL PROTECTED] Subjec

RE: [ActiveDir] Password change issue

2003-08-08 Thread Joe
Get Q812499 or SP4. joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carr, Jonathan (OFT) Sent: Thursday, August 07, 2003 7:06 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Password change issue OK here it is... PDC emulator at a central site. D

Re: [ActiveDir] Group Policy and Kiosk Mode

2003-08-08 Thread [EMAIL PROTECTED]
Sounds good -- if you have the option of picking your browser, then things get much easier. :-) On Thu, 7 Aug 2003, EN wrote: > Idan, > Thanks for the tip. It is pretty difficult. I think I found my solution > though, by mixing both GP and > Opera. Opera has a great Kiosk Mode, the only thin

RE: [ActiveDir] OT: Server Monitoring

2003-08-08 Thread Thommes, Michael M.
We use ServersAlive also. It is arguably the best value on the market for this type of tool. Mike Thommes Argonne National Laboratory -Original Message- From: Van Noy, Glen R on behalf of Van Noy, Glen R Sent: Wed 8/6/2003 5:32 PM To: [EMAIL PROTECTED

RE: [ActiveDir] Turn off account lockout feature on a account.

2003-08-08 Thread Roger Seielstad
Title: Message Exchange 5.5 has to run as a named user account - system doesn't work.     -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: rick reynolds [mailto:[

RE: [ActiveDir] Password change issue

2003-08-08 Thread Adams, Kenneth W (Ken)
IIRC, password changes are part of the normal AD replication. That replication can take a few minutes unless forced. During the logon process, the logically closest DC will attempt to validate the logon. If the client is a down-level client (i.e., Win9X, NT 4.0), the logon process goes to the

RE: [ActiveDir] WOT Unreadable code (was Connection String)

2003-08-08 Thread Myrick, Todd (NIH/CIT)
Well we are currently redesigning our Site Topology due to several organizations setting up firewalls and thinking they are guarding against Neo and the Matrix Gang. One thing we are working with Microsoft on is optimized Hub and Spoke topology by creating sites for networks that are behind firewa

RE: [ActiveDir] changing home drive problem

2003-08-08 Thread Roger Seielstad
Try making this change: usr.HomeDirectory = strpath To usr.HomeDirectory = trim(strpath) Not sure if that will do it, but I wonder if there isn't a trailing character being stuck in there. Also, move your objFSO = create... Outside the For...Next loop - that object only needs to be

RE: [ActiveDir] Todd hijacked

2003-08-08 Thread Shawn.Hayes
Site to Site VPN connection between Firewalls and leave the firewall port configuration alone... Shawn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 05, 2003 6:15 PM To: ActiveDir Subject: Re: [ActiveDir] Todd hijacked Gil wrote an articl

RE: [ActiveDir] Connection String

2003-08-08 Thread Roger Seielstad
I don't know - I think anyone with more than a passing understanding of the VB* languages can decypher another's code. That being said, there's a reason I decided to learn a bit of perl - I'm a believer in using the right tool for a job, and with some of the scripts I needed to write, it was the be

[ActiveDir] Home Labs Interconnected

2003-08-08 Thread James_Day
Return Receipt Your [ActiveDir] Home Labs Interconnected document :

RE: [ActiveDir] WOT Unreadable code (was Connection String)

2003-08-08 Thread Bjelke John A Contr AFRL/VSIO
Gil, I'm not THAT old! Man, next you'll be implying that I built the DARPAnet! (and we all know it was Al Gore who's responsible for that!) *grin* Nah, I just have a fondness for old, dead languages and remembered seeing that one before. I actually had a book mark to a "history of computi

RE: [ActiveDir] Password expiation Script

2003-08-08 Thread Robbie Allen
Here is a Perl script to find users who set their password some number of days ago: http://rallenhome.com/books/adcookbook/source/06/6.24-passwd_about_to_expire .pls.txt BTW, you can retrieve similar results to the Perl script with the "dsquery user -stalepwd" command. Let me know if you have an

RE: [ActiveDir] Seeking some feedback ... use of 2003 Admin. tool s against a non-forest prep'd 2000 only directory ...

2003-08-08 Thread Joe
Title: Message OT but   > So the question is, are you that good!   Dean is really really really really good. Not a fortune teller, but if it is all based on technology, he is the man.     joe -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Be

Re: [ActiveDir] Connection String

2003-08-08 Thread Glenn Corbett
true Todd, they do however, in my experience coming into a number of client sites and viewing their management code...more often than not the Perl code isn't documented sufficiently, and the attitude of the Perl coders is 'if you cant understand it, you shouldnt be in there'...which I sort of agre

RE: [ActiveDir] Connection String

2003-08-08 Thread Roger Seielstad
Because perl makes my head hurt? Seriously, I do VBScript, a bit of perl, and some VB.net code as necessary. But most things I manage to pull off in VBScript. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc.