The Microsoft 'rule of thumb' is to allow 400Mb for each 1000 users (as per
the w2003 deployment kit).
E.g.
- Allow 800Mb for 2,000 users
- Allow 2Gb for 5,000 users
- Allow 4Gb for 10,000 users
- Allow 20Gb for 50,000 users
- Allow 40Gb for 100,000 users
I guess what I'm trying to illustrate is
Title: Message
Please
can anyone recommend a good utility (not xcacls) that will help me add
additional security permissons to a directory structure on one of our W2K
servers. I want the existing ACL info to remain but want to append another
set.
Many
thanks,
Mark
Title: Message
xcacls and subinacl, both from the reskit, would be where I start. Is it
just a question of syntax or is it not capable of doing what you need
done?
If
those two wouldn't fit the bill, I'd probably write a script to handle it.
Something like Hyena might also do the trick, to
Title: Message
well
looking at the minimal help file that comes with Xcacls I am not 100% certain if
it does or does not do what I want. Subinacl certainly does not appear to do
it.
Let me
elaborate
We
have users homeshares in the following structure
x:\users\
\USER1
Title: XP SP1, GPMC and KB823980
I'm having an interesting and fairly annoying issue since the 823980 (MS03-026) patch came out, and I wanted to see if any of you are seeing similar issues. The machine is current on all published patches.
I've got an MSC (configured MMC console) set up for m
I have exactly the same setup (including runas for separate admin account), but have
no problems with the GPMC snap-in.
Is it anything specific you are doing in GPMC that sets of the problem?
Tony
-- Original Message --
From: Roger Seielstad <[EMAIL PROTEC
We have replaced many also. Just have to make sure it is clean before
reusing the name.
-Original Message-
From: Joe [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 16, 2003 6:01 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Dcpromo Failed On Windows 2003.Urgent!!!
We do this on
Not that I can tell, but it seems to happen either when I'm in the edit
process or the Settings tab of a specific GPO.
--
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
> -Original Message-
> From: To
It absolutely will do what you want done.
xcacls x:\users /T /E /G domain\quotauser:F /Y
^ ^ ^ ^ ^^ ^
| | | | || L replace without verify (i.e.
don't asK)
| | | | |L full control (C = Change, R =
R
As do we - - and the same goes for us - we make sure the name/SID or any
remnants are completely gone before the re-join
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hutchins, Mike
Sent: Wednesday, September 17, 2003 8:50 AM
To: [EMAIL PROTECTED]
Subjec
Also check ntdsutil and be sure that the DC name is not anywhere in the
database.
-Original Message-
From: Craig Cerino [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 9:00 AM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] Dcpromo Failed On Windows 2003.Urgen
As i do...But in this situation i cant...
1-)The server object in sites and services
2-)The computer object in domain controllers organizational unit
3-)Dns entries about server
any other place i must delete?
From: "Craig Cerino" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: <[EMAIL PROTECTE
I used this syntax and the process began. It began changing ACL on both
files AND directories !!! Is it possible to only change directories ?
However, it abruptly stopped with the message,
"The data area passed to a system call is too small."
I have searched for this error but can find nothing a
Ahh.
Change
/G domain\quotauser:F
To
/G domain\quotauser:;F
And try it again. The permissions are user:File;Folder so you need to set
just the folder (also called spec in xcacls) perms
I'd wager the error is caused by a bad directory (ie invalid characters,
etc) within the tree. It should be
We've reused machines names here as well. Even with a Dcpromo failure,
you can still use tools to get rid of DC names and properties and bring
it back up. I don't recommend the second way, but in a pinch, you can do
it.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Ntdsutil and be sure it is not listed
-Original Message-
From: osman filiz [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 9:14 AM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] Dcpromo Failed On Windows 2003.Urgent!!!
As i do...But in this situation i cant.
It doesn't like the syntax ":;"
Seems you HAVE to put some value for files !?
Oh well, the search goes on.
Many thanks
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 17. September 2003 15:58
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Editing di
Title: Message
If you want a GUI, I recommend "Security Explorer" from Small
Wonders. I've found it to be very useful at times
Diane
http://www.smallwonders.com/SecurityExplorer.htm
-Original Message-From: Abbiss, Mark
[mailto:[EMAIL PROTECTED]Sent: Wednesday, September 17, 2
I ran into a bit of a problem after upgrading six nearly
identical servers to SP4. All six servers are Compaq DL380 G2’s running
Windows 2000 Server and are nearly identical when it comes to the hardware
configuration. Minor differences in the total RAM and total hard drive capacity
that is
Title: Message
I'm getting a 1645 error on
a remote DC.
SPN is not registered on
the target server, does anyone know a fix for this?
Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain
308111 - A Missing Service Principal Name May Prevent Domain Controllers from
Replicating
http://support.microsoft.com/default.aspx?scid=kb;[LN];308111
-Original Message-
From: Don Murawski (Lenox) [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 12:21 PM
To: '[EMAIL PROTECTE
Hi Jim,
I've got the same problem with a Compaq 1850R and a Compaq 3000R. Only my failure
to be able to reboot without manual intervention occurred sometime after SP3 with a
patch. The computers seem to start the reboot process but then just end up with a
blinking cursor in the upper left
Hi Jim and Mike
We actually had the same problem on a DELL server after a hotfix post SP3
(about the same time as the first RPC patch, or maybe slightly before it).
Dell suggested reinstalling the OS. We demoted the domain controller and
that worked for a couple of reboots but then it started to
Roger,
Sadly, I can't confirm your observation. I've had the same environment
running here at home and at work with no issues on any of the systems.
Rick Kingslan MCSE, MCSA, MCT
Microsoft MVP - Active Directory
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
-Orig
Yep - Security Explorer is a great tool - not cheap, but it does some things
that literally nothing else does.
Unless, however, someone else has come across something that will. Let's
take the same example that Mark tossed out here..
x:\users\
\USER1
\USER2
\USER3
\USER
I have seen this occasionally on Dell 2400's. It doesn't happen every time,
just when it is most annoying. It has done it since W2K RTM for me though.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003
Jim,
I could not agree with you more. Most
techie support guys fall back on the same answer, “rebuild your server”.
I would really like to see them rebuild a server if they did not have extra
hardware to fall back on. I ran in the same trouble with Dell servers. We have
Dell 1400, 2400, 25
27 matches
Mail list logo
