Consider using the ADUC provided with W2003. A new Active Directory Users
and Computers property page called Additional Account Info and the
lockoutstatus.exe utility are great troubleshooting tools for diagnosing
lockout problems. They've proven to be very helpfull over and over ...
Cheers!
John
I agree with the fact that it won't buy you anything in terms of
performance. However, splitting up into D/E/F does reduce the chance that
journal wraps might occur. Journal wrap errors occur if a sufficient number of changes
take place while FRS is turned off or busy such that the last USN c
they are very probably XP clients. They very likely have "fast user switch" option enabled on the XP. and Raymond has probably set his lockout threshold somewhere < = 5. I wager that this is the problem, barring the obvious multiple wrong password of course.
I know there is a Q article regardi
How low is your policy set? If it is 10 or less reconsider. Think about what
the lockout policy is in place to avoid and what a good logical number is to
use to accomplish that goal.
Are your machines all W2K+ or what are they?
Do you have logging enabled on your DC's and have you chased the ev
Irwan-
I don't think that particular setting is currently exposed in policy. At
least, I didn't see it. A quick glance with Regmon seems to indicate
that this setting is controlled using the following registry value:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Cach
Hello All,
We recently implemented the Require Strong Passwords on out WIN2K and it
seems that some users get locked out after entering an incorrect password
only one time. (I assure you that I allow more than one mistake; I too am
human) This was happening before the change, but I am seeing it m
Hi,
I'm just curious whether I can control the size of user's Internet
Explorer cache via group policy? I know that I can set the user to use
the proxy by using group policy, but I couldn't find any option to
control the user's IE cache size. If I can't control it, does anyone
know how to do that?
That
should be plenty but it depends a lot on what AD Apps you will be using and what
kind of data they will be jamming into the directory. For instance if you start
shoving a bunch of binary blobs (like pictures) in you could eat space pretty
quickly. For a basic authorization and Exchange
Which, is exactly why I'm back in the 'talk' mode with NetPro, despite the
fact that I can't get management to even look at the product. MOM is good
enough in their opinion, but MOM hasn't helped us solve one Replication
issue, or an e-mail issue (well, OK - does a great job of telling me when a
s
Breaking the DB, logs and SysVol into
separate logical partitions on the same physical spindles doesn't buy
you much. Your still sharing the same spindles, head and I/O amongst
the three logical partitions. I'd just create a D: volume and be done with
it but that's just my opinion.
Diane
Title: Message
Microsoft has a tool called ADSIZER which will give you a DIT size
estimate. See http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/adsizer.asp.
-gil
Gil KirkpatrickCTO, NetPro
-Original Message-From: George Arezina
[mailto:[EMAIL PROTECTED]
> Just not comfortable with how DNS is still setup, so have a
> few questions:
>
> 1. Presently, the DHCP scopes point clients to the parent.com DNS
> servers. Since all users and computers are in the
> child.parent.com domain,
> wouldn't the best practice be to point all DHCP clients to t
Title: [ActiveDir] Renaming a User
Vince-
I took a look at http://support.microsoft.com/default.aspx?scid=kb;EN-US;250455 and
also http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q285/1/36.asp&NoWebContent=1 and
in my test environment I was
For
1500 Users, George, saying you have AMPLE space would be an understatement
-Original
Message-
From: George Arezina
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 14, 2003 5:00 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] NTDIS Size
Hi
people,
Can
someone please confirm
Roseta,
You
will then have to check the permissions on the security tab of
ad.
You
have to change the view of the ad console by clicking on to view and choosing
advanced.
On the
users container right-click, properties, security and include your user account
giving read and write perm
If you have a large AD deployment, with multiple AD Domains, you will
probably want to add NETPRO Directory Analyzer and DNS Analyzer to your
monitoring solution.
Personally when it comes to my strategy with regard to Monitoring and Backup
I have successfully been encouraging my AD Operations to h
I have
1100 users and 4 domains and only use 60 MB
-Original
Message-
From: George Arezina
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 14, 2003
5:00 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] NTDIS Size
Hi
people,
Can
someone please confirm that I have given enough
And boy do I did flattery!
--
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
> -Original Message-
> From: Rick Kingslan [mailto:[EMAIL PROTECTED]
> Sent: Monday, October 13, 2003 5:23 PM
> To: [EMAIL
I am also the domain administrator of that other domain(
domain B) but I want to that when I am behind the first domain controller
(domain A). I use Active directory user and computer console and connect to
other domain and when I do that I am not able to create a user. But if I am
behi
You
need to be a domain administrator of that other domain or an Enterprise
administrator for the Forest.
Colin
M
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of
rosetaSent: 14 October 2003 13:36To:
[EMAIL PROTECTED]Subject: [ActiveDir]
Hi
all,
I
want to be able to change the user properties of the user account in another domain.
But I am not able to do that for example enable or disable a user in another
domain or even create a user in another domain when I connect to another domain
through my active directory interfa
Plenty... I have 750 user objects and mine's 750MB.
Use the ADSizer tool from the MS site to double check but you have enough
space.
BR
Robert Rutherford
+44 (0)1305 208232
+44 (0)7970 122362
Hi people,
Can someone please confirm that I have given enough GB for
1500 users in my AD database? I plan to install two mirrored drives on my
server. One Mirror will be the system partition (18GB) and the second mirror
will be 72GB where my ndts.dit database will be located.
Thanks
Title: Message
Darren,
Thanks for the confirmation.
Regards,
George
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Tuesday, October 14, 2003 0:54 AM
To: [EMAIL PROTECTED]
George-
Yes, if you set
policy in both the Default Dom
24 matches
Mail list logo
