RE: [ActiveDir] Latest FRS info from MS

2003-11-06 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
it's actually not that instable from a replication perspective - you just need to know a hell of a lot of little things to understand how it works (and not to break it accidentally). using the freebee Sonar and Ultrasound tools from MS have definitely helped to improve FRS replication (especially

RE: [ActiveDir] Univ group best practice

2003-11-06 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
yes, it should be clear, that a UG is a "normal" group object just like a global and local group and as such is stored in the Domain Naming Context.  Ofcourse it's member attribute is replicated to the Partial Attribute Set of the GCs, which is not the case for Global and Local groups.    Ho

RE: [ActiveDir] native mode

2003-11-06 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
yeap - that's what I meant with the "point of no-return"...  Any roll-back procedure for this scenario would likely only be useful for a very short time. From: deji Agba [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 6. November 2003 17:13To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] native

RE: [ActiveDir] OUs by server function?

2003-11-06 Thread Joe
Title: Message I'm shooting for it too... Put it on my calendar as well as the DEC in DC so I can beat a chicken out of Gil. :op      joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick KingslanSent: Thursday, November 06, 2003 9:26 PMTo: [EMAIL PROTECTED] Looking

RE: [ActiveDir] Server Reboot problem after SP4 installation

2003-11-06 Thread Jim Patton
I finally found the resolution to this problem. It came down to obtaining an updated version of the Veritas driver, VSP.SYS.   Jim -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Jim PattonSent: Friday, September 19, 2003 2:32 PMTo: [EMAI

RE: [ActiveDir] ADUC MMC

2003-11-06 Thread Joe
Title: Message You don't need a setinfo after a setpassword, it will set the password immediately upon the call being executed.     joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger SeielstadSent: Thursday, November 06, 2003 2:48 PMTo: '[EMAIL PROTECTED]' You ne

RE: [ActiveDir] Forcing Replication from a Source DC

2003-11-06 Thread Joe
Well as soon as you get a change replicated to another DC, it is going to start its replication process assuming it is within the same site with other DC's or is set up cross site for change notification. Are you saying possibly that replmon queues up replication changes on the direct pulls and the

RE: [ActiveDir] OUs by server function?

2003-11-06 Thread Rick Kingslan
Title: Message Looking forward to it.much!   -rtk From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger SeielstadSent: Thursday, November 06, 2003 2:06 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] OUs by server function? If everything falls into place you can judg

RE: [ActiveDir] Background

2003-11-06 Thread Todd Povilaitis
Title: RE: [ActiveDir] Background In many cases, GPOs merely hide the user controls. The APIs are still open to run processes in the user's security context if they are called by other means.   Your user may have an application (such as an image editor) that allows them to set a picture as

RE: [ActiveDir] Background

2003-11-06 Thread marcus
Title: RE: [ActiveDir] Background The whole idea of forcing a background seems like overkill to me.  You’d think the same color cubicle walls would be depressing enough :-D.   At any rate, the background is just a value in the registry, as is the ability to view the background tab.  If yo

RE: [ActiveDir] Weird GPO question

2003-11-06 Thread Fuller, Stuart
Brian,   Look at Group Policy loopback - See http://support.microsoft.com/default.aspx?scid=kb;en-us;231287   -Stuart From: Narkinsky, Brian [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 2:26 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Weird GPO question We are trying to dev

[ActiveDir] Weird GPO question

2003-11-06 Thread Narkinsky, Brian
We are trying to develop a GPO to enforce a screensaver/workstation locking.  We have it working fine as long as we apply it to the Users OU.  However here is the problem.   We want to enforce this policy by machine.  We have lots of laboratory equipment that people watch the screen “hand

RE: [ActiveDir] OUs by server function?

2003-11-06 Thread Roger Seielstad
Title: Message If everything falls into place you can judge that for yourself in April..     -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Rick Kingslan [mail

RE: [ActiveDir] GP and TS lockdown

2003-11-06 Thread Roger Seielstad
Title: Message Hey Charlie.. Sounds like a fun one.   You could distribute an RDP client connection object which specifies the application to launch on connection, which solves the run the app directly problem.   Roger -- Roger D.

RE: [ActiveDir] Question on Drive Mapping by Group

2003-11-06 Thread Roger Seielstad
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcen ter/default.asp The TechNet Script Center from "The Scripting Guys" at Microsoft. Spent a lot of time talking with Bob Wells this week about this stuff. -- Roge

RE: [ActiveDir] ADUC MMC

2003-11-06 Thread Roger Seielstad
Title: Message You need to call o.setinfo at the end of that... (i.e. after you call o.setpassword "blah")     -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Joe

RE: [ActiveDir] DNS Lookup Problem - Windows 2003

2003-11-06 Thread Roger Seielstad
Title: Message I'd still recommend it, however, as it eliminates the PIX from being a potential issue in the mix.     -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-Fro

RE: [ActiveDir] Background

2003-11-06 Thread John McGlinchey
Title: RE: [ActiveDir] Background In my login script, I copy  the standard .bmp file from a network share onto the local workstation.  This keeps them from replacing it for very long.  I've seen some places that point directly to a shared folder for the .bmp instead of locally but I prefer to

RE: [ActiveDir] Background

2003-11-06 Thread Salandra, Justin A.
Title: RE: [ActiveDir] Background I have done that already   -Original Message- From: Raymond McClinnis [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 12:33 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Background   I believe a good way to eliminating is to disa

RE: [ActiveDir] Background

2003-11-06 Thread Raymond McClinnis
Title: RE: [ActiveDir] Background I believe a good way to eliminating is to disable active desktop and only allow .BMP wall paper.  I’ve done this and a majority of my users have stopped trying J.  It’s worth a shot…   Thanks,   Raymond McClinnis   From: [EMAIL PROTECTED]

RE: [ActiveDir] Background

2003-11-06 Thread Salandra, Justin A.
As an Administrator you can if you go to the control panel and RUN AS Admin -Original Message- From: Damon R. Erickson [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 11:21 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] Background Internet Explorer has a "s

RE: [ActiveDir] Background

2003-11-06 Thread Salandra, Justin A.
Title: RE: [ActiveDir] Background Can you disable that through a GPO   -Original Message- From: Celone, Mike [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 11:20 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Background   In Internet Explorer right click an im

RE: [ActiveDir] Background

2003-11-06 Thread Blondieau, Frederic (LU - Luxembourg)
Some Windows features or applications allow you to select a picture and set it as desktop background... I guess that preventing the tab to show up just blocks *that* way to change the background... Frederic Blondieau Deloitte Luxembourg -Original Message- From: Salandra, Justin A. [mailt

RE: [ActiveDir] Background

2003-11-06 Thread Salandra, Justin A.
But I don't have any background by default. -Original Message- From: Weeks, Travis (COX-Atlanta) [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 11:17 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] Background Some places use a company logo'd bmp (or some ot

RE: [ActiveDir] Background

2003-11-06 Thread Damon R. Erickson
Internet Explorer has a "set as background" that seems to bypass the GPO. The fun part is that they can't unset the background once they set it. :) Damon Erickson Netgain Technology -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003

RE: [ActiveDir] Background

2003-11-06 Thread Celone, Mike
Title: RE: [ActiveDir] Background In Internet Explorer right click an image on a webpage and choose "Set as Background".  Maybe that's how she's doing it? -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 06, 2003 11:07 AM To: ActiveDir

RE: [ActiveDir] Background

2003-11-06 Thread Weeks, Travis (COX-Atlanta)
Some places use a company logo'd bmp (or some other background) so she could replace that file with one of her choosing as long as it has the same name and she has the rights to that folder. -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06

RE: [ActiveDir] native mode

2003-11-06 Thread deji Agba
Guido, John.   I (personally) don't think the biggest consideration in this "roll-back" plan is whether or not it can be done, or which methodology is more "supported" than the other. In my selfish opinion, the consideration should be what it will break. What it will break depends greatly on the

[ActiveDir] Background

2003-11-06 Thread Salandra, Justin A.
How is it possible that a regular user can change her background if you disable the Background tab through a GPO to all users? I checked and she doesn't have that tab, the GPO is working correctly. Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 9

RE: [ActiveDir] VPN

2003-11-06 Thread Salandra, Justin A.
I think we figured it out. I had another person on the outside try to VPN in and they stayed connected. They too run XP Pro. The difference was that I had a program running that used my Internet connection prior to connecting to my VPN server. Be cause of this, when that product tried to reconne

RE: [ActiveDir] VPN

2003-11-06 Thread Michael B. Smith
In other words, is the switch port the server is connected to configured in any way to care if your server has more than one IP address? There are a number of ways in which this could be true. -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Thursday, Novembe

RE: [ActiveDir] VPN

2003-11-06 Thread Salandra, Justin A.
Meaning? I am not big on Cisco, IP address sensitive? -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 9:31 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] VPN I have never seen this, but to me it sounds a bit like

RE: [ActiveDir] Database move

2003-11-06 Thread Santhosh.Sivarajan
NTDSUTIL -Original Message- From: Sivarajan, Santhosh Sent: Thu 11/6/2003 8:36 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: Subject: RE: [ActiveDir] Database move Utility? Nsdsutil. Check out the following l

RE: [ActiveDir] Database move

2003-11-06 Thread Steve Brashear
Start the server in Directory Services Restore mode.  Use NTDSutil to move. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Don Murawski (Lenox)Sent: Thursday, November 06, 2003 7:28 AMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] Database

RE: [ActiveDir] Database move

2003-11-06 Thread Creamer, Mark
Ntdsutil   See KB article 315131   -Original Message- From: Don Murawski (Lenox) [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 9:28 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Database move     Is there a utility that will move the AD database

RE: [ActiveDir] Database move

2003-11-06 Thread Coleman, Hunter
ntdsutil is what you need   http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B816120   Hunter From: Don Murawski (Lenox) [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 7:28 AMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] Database move   Is there a utility that will mo

RE: [ActiveDir] Database move

2003-11-06 Thread Santhosh.Sivarajan
Utility? Nsdsutil.  Check out the following link     -Original Message- From: Don Murawski (Lenox) [mailto:[EMAIL PROTECTED] Sent: Thu 11/6/2003 8:28 AM To: '[EMAIL PROTECTED]' Cc: Subject: [ActiveDir] Database move   Is there

RE: [ActiveDir] VPN

2003-11-06 Thread Michael B. Smith
I have never seen this, but to me it sounds a bit like a spanning tree issue. Are your switches IP address sensitive? -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Thursday, November 06, 2003 9:25 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] VPN I lo

[ActiveDir] Database move

2003-11-06 Thread Don Murawski (Lenox)
  Is there a utility that will move the AD database to another drive on the same server?         Note: The information contained in this email and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or proprietary material. An

RE: [ActiveDir] VPN

2003-11-06 Thread Salandra, Justin A.
I lose the connection after only 1 minute from the Internet through my firewall to my VPN Windows 2000 Server that only has one network card. Internally I stay connected. Have any of you experienced this? -Original Message- From: Salandra, Justin A. Sent: Wednesday, November 05, 20

RE: [ActiveDir] native mode

2003-11-06 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
John - I've also had various discussions about this is likely not the case where "one solution fits all". While I agree it should be technically feasable to take a *healthy* backup of EVERY DC of a domain at roughly the *same* time (at least prior to switching the domain modes), you are gett

RE: [ActiveDir] native mode

2003-11-06 Thread John Reijnders
Interesting discussion ... you're telling that "any other option would be too risky". I've had this discussion with MS before and they (initially) said the exact same thing (you're scaring me Guido ;-) ... However, I'm convinced that restoring every single DC of a domain that was taken at a *