[ActiveDir] openLDAP for Windows 2003 active directory

Hi, Can someone pls tell me how can I use openLDAP on Linux to query the Windows 2003 active directory data? I was able to use my old openLDAP script to run against Windows 2000 before, but after I upgrade my Windows 2000 to Windows 2003, the script does not work any more. Can someone pls tell me

RE: [ActiveDir] Add trusted sites to IE via Policy

Hello Steve. This can be found under the Default Domain Policy, User Configuration/Windows Settings/Internet Explorer Maintenance/Security... then on the right side, Security Zones and Content Ratings. From there you can set the sites in any manner that you need. HTH. Charles -Original

RE: [ActiveDir] SUS does SPs now

I have a somewhat silly question on SUS... Would anyone recommend against installing it on a DC? And if so, I curious as to why (other that the obvious things, like it's a DC :) ) Thanks, Raymond McClinnis -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] SUS does SPs now

Raymond, Good question - I hope that I can provide a good answer. I would NOT suggest or recommend deploying SUS to a DC for one simple reason: It requires IIS, and for security purposes, I will not deploy IIS onto a domain controller - which clearly dismisses a DC from hosting SUS IMHO. Rick

RE: [ActiveDir] Add computers to domain permissions

Yeah Robbie's book is pretty good. I wish I got commission as I am pushing it to a lot of people, the cookbook layout is a good thing for that stuff. 2nd Edition should be started now and could look like Grey's Anatomy. I have been thinking for a long while about setting up something like that on

RE: [ActiveDir] SUS does SPs now

Yeah, no IIS on a DC. Also no magic updates on DC's. Do them slow and purposely and methodically. Last thing needed is to walk in one morning and find out your automatic patch system just loaded something that blue screens DC's to your entire domain and not being able to log on anywhere to do

RE: [ActiveDir] Add computers to domain permissions

I was actually asked, we know you helped review it, but do you think it is worth buying. I haven't seen what the O'Reilly's editors have done to it since I last looked, but from what I saw, yes buy it. Even though my perspective might be tainted because of my ork on the book - I would still

RE: [ActiveDir] Add computers to domain permissions

I have been starting to wonder if we need to write an MVP book. Working Title: Everything I needed to know I learned in the newsgroups... Chapter 1 - Firewalls, what do you mean you aren't running one? Chapter 2 - So you say AD is slow... How's your DNS? Chapter 3 - Why Exhange should be

RE: [ActiveDir] Add computers to domain permissions

You misread, the Robbie and Richard Enterprise Services book was the one I called deep. The Cat book is a good overall welcome to the world of AD, now that you are here let me point out where the restrooms and the kitchen are so you can be on your way. Yep - right you are. I guess I need to pick

RE: [ActiveDir] SUS does SPs now

I agree with that premise of no SUS on a DC, though I have no fear of IIS on a DC. Domain controllers are special and should not get auto-anything in terms of updates or other changes. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent:

RE: [ActiveDir] SUS does SPs now

William, Let me clarify myself: I don't FEAR IIS on a DC. Just from a security perspective, I don't think it's smart. I don't see any reason to put a known problem on my domain's authentication source, among other things. Now, I might change my mind if we're talking about IIS 6.0, but likely

RE: [ActiveDir] Add computers to domain permissions

Thanks for the kind words guys. The Active Directory Cookbook (the tuna book :) is due to ship on Tuesday - Sept 23rd. It is intended to answer many of the How do I ...? questions you might have about AD (at least as many that would fit in 600 pages). Here is the TOC: