RE: [ActiveDir] Password filters for AD 2003 (v2)

2003-12-03 Thread [EMAIL PROTECTED]
Hi guys, Joe - thanks for the P-Synch plug. :-) There are good reasons for our password filter DLL to connect into a central server, or cluster of servers: * It makes it possible to enforce infinite password history (which we do). * It makes it easy for an administrator to control policy c

RE: [ActiveDir] ADMap 1.6.2

2003-12-03 Thread Joe Pochedley
I got version 1.7.5 from the site referenced below, but every time I try to have Admap diagram my sites, I get a drawing with all the servers strewn about the page and boxes created in the lower left corner for each of the sites... Unfortunately things never get put in order and Admap closes with

RE: [ActiveDir] Delegation of control for WINS

2003-12-03 Thread W2K List
To manage a WINS server, the user has to be a local administrator on the WINS box. As long as your WINS servers are not domain controllers, this is not a problem. If your domain controllers are performing double duty as WINS servers well You might consider standing up one member server as a

RE: [ActiveDir] ADMap 1.6.2

2003-12-03 Thread Free, Bob
>Actually I just used the ADmap 1.6.2 utility last night. Came across that also a couple of months ago too, the one I have is versioned 1.7.5. It's an interesting solution. http://www.windows-servers.info/Tools/AdMap.msi He also hosts a similar Exchange/Visio mapping solution http://www.windows-

[ActiveDir] ADMap 1.6.2

2003-12-03 Thread Jef Kazimer
Actually I just used the ADmap 1.6.2 utility last night. I believe it came out of MS consulting services from Germany. (it says so in the about) It reads your Sites structure and builds it into a rather unwieldly VISIO map. You will need a Plotter to print it out, and it's not perfect. Not b

RE: [ActiveDir] AD attributes

2003-12-03 Thread Chianese, David P.
I cannot recall ever seeing it remove the object in Sites & Services after a dcpromo down to a member server. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Simpsen, Paul A. (HSC)Sent: Wednesday, December 03, 2003 3:31 PMTo: [EMAIL PROTEC

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Mark Caldwell
Official word on this subject from MS site- Microsoft Office Visio(r) 2003 One question we hear often about Visio 2003 is "what happened to the Autodiscovery feature?" The short answer is that it is no longer available. Visio 2003 cannot import directory services information, such as an exist

RE: [ActiveDir] AD attributes

2003-12-03 Thread Simpsen, Paul A. (HSC)
Maybe it should but I’ve always had to manually remove it.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pelle, Joe Sent: Wednesday, December 03, 2003 2:15 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD attributes   Shouldn’t that disappear out of AD o

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Creamer, Mark
This article may also be of interest... http://techrepublic.com.com/5100-6265-1052000.html -Original Message- From: Creamer, Mark Sent: Wednesday, December 03, 2003 3:08 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD Diagraming Ahhh...that explains why I didn't know that. We ha

RE: [ActiveDir] AD attributes

2003-12-03 Thread Pelle, Joe
Shouldn’t that disappear out of AD on its own though?   Joe Pelle Systems Analyst Information Technology Valassis / IT 19975 Victor Parkway Livonia, MI 48152 Tel 734.591.7324  Fax 734.632.6151 [EMAIL PROTECTED] http://www.valassis.com/   This message may have included proprie

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Mulnick, Al
Understood. For discovery, that's why I recommended something like Ecora. Usually during discovery, you have a lot more information that's required other than topology and OU structure. Not everyone has that requirement I suppose... al -Original Message- From: Rich Milburn [mailto:[EM

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Creamer, Mark
Ahhh...that explains why I didn't know that. We had a Select Agreement at the time so the media I used was from that. Didn't know it wasn't in the retail version. Not even the "Professional" version?? -Original Message- From: Steck, Herb [mailto:[EMAIL PROTECTED] Sent: Wednesday, Dece

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Rich Milburn
I see what you mean Al, but like where I used to work, sometimes you don't have the budget to buy yet another 3rd party add-on tool when you just need basic functionality. I imagine MS has to be more careful to leave room for 3rd party development in light of the fact everyone wants to sue them it

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Mulnick, Al
You're sure about that? I have a copy here in pretty packaging and everything. Right next to my keyboard as a matter of fact. Requires visio 2002 and this CD to operate (and a license of course). Al -Original Message- From: Steck, Herb [mailto:[EMAIL PROTECTED] Sent: Wednesday, Decemb

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Steck, Herb
Only way you could get it was through licensing...wasn't a retail package. I had it installed, but the 2003 install removed it. If I could buy it I would spend whatever they wanted. -Original Message- From: Creamer, Mark [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 1:26

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Mulnick, Al
Now that's a pretty broad statement, don't you think? They didn't break anything by removing further development of the visio enterprise network tools (that's what it's called). As was said in the thread, it does a fine job of diagramming the OU structure, but doesn't really look at the larger pi

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Creamer, Mark
What about just buying a copy of the appropriate Visio release on eBay? Which version had it, 2002? There are many of those listed out there right now... -Original Message- From: Steck, Herb [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 2:06 PM To: [EMAIL PROTECTED] Subje

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Myrick, Todd (NIH/CIT)
Admapper allows you to map the physical constructs of AD. The OU stuff is what Viso is good at, and I bet you can get a copy of the AD networking constructs for visio some place. Todd -Original Message- From: Steck, Herb [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 2:06

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Steck, Herb
At this point I will take something 3rd party, and it doesnt' even have to do visio format. I need something I can have on my laptop, go to the next company to be acquired, diagram their network, ad, etc and then bring back to have printed on the plotter. -Original Message- From: Rich

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Rich Milburn
Does MS expect you to buy MOM for network mapping, or is there something built into SMS? I can see if they figured you'd use Visio but if they pulled that feature then ?? I know there are 3rd party tools that do this, but it's nice to have something integrated too... Rich -Original Message--

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Steck, Herb
Typical MS. Break something that works, but don't fix what is broke. -Original Message- From: Mulnick, Al [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 11:50 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] AD Diagraming That does suck, doesn't it? Some tools that I'v

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Mulnick, Al
That does suck, doesn't it? Some tools that I've seen that work well (but aren't free) come with this product http://www.ecora.com/ecora/products/reporter.asp Gathers a lot of useful information for you. -Original Message- From: Steck, Herb [mailto:[EMAIL PROTECTED] Sent: Wednesday, De

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Mark Caldwell
HrmphI was just curious as I have come across issues with this function in the past. I will check around and see if there is another option for ya. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steck, Herb Sent: Wednesday, December 03, 2003 9:2

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Steck, Herb
No error, it's just not available anymore. If you didn't buy it after May 2002(i believe) you didn't get the network admin tools. They have took it out of 2003 and have no plans on bringing it back. Have used this before to discover network layouts, SNMP, AD, LDAP and it worked great. Now Vi

RE: [ActiveDir] AD Diagraming

2003-12-03 Thread Mark Caldwell
Hey Stan- Quick question...what version of Visio and are you getting an error when you try to use the AD&L function? Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steck, Herb Sent: Wednesday, December 03, 2003 8:58 AM To: Active Directory (E-mail)

[ActiveDir] AD Diagraming

2003-12-03 Thread Steck, Herb
Now that MS has taken the autodiscovery tools out of Visio, does anyone know of any tools that will pull the AD and diagram it? They had a great tool, but it's not available anymore. Thanks "The information transmitted is intended only for the person or entity to which it is addressed and may

Re: [ActiveDir] AD attributes

2003-12-03 Thread Rick Reynolds
To remove the domain controller object In the Active Directory Sites and Services, double-click the Sites container to expand it, and then double-click the appropriate site object (the site in which the server resides) to expand the site object. Double-click the Server container, rig

RE: [ActiveDir] 2003 to 2000 - is it possible?

2003-12-03 Thread DiBias, Chip
This is of course is the burning question.  If I get a chance to speak to this customer I will ask; if it is something noteworthy I will post it to the list.     Chip From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 11:21 AM To: [EMAIL PROTE

RE: [ActiveDir] 2003 to 2000 - is it possible?

2003-12-03 Thread DiBias, Chip
Thank you Tony! -Original Message- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 11:16 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] 2003 to 2000 - is it possible? Hi Chip I haven't tried this, but I think your suggestion should work. If the msDS-Be

RE: [ActiveDir] 2003 to 2000 - is it possible?

2003-12-03 Thread Christopher Hummert
My first question would be why? I know you say you don't know the reason, but is this client really going to be happier with Win2K then they are with Win2K3?   -Chris Hummert From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DiBias, ChipSent: Wednesday, December 03, 2003 7:59

[ActiveDir] AD attributes

2003-12-03 Thread Pelle, Joe
Hello all!   Can someone tell me – when a DC is DCPROMO’d down and taken offline it is still showing up in Active Directory Sites and Services?  Is there another step?   Joe Pelle Systems Analyst Information Technology Valassis / IT 19975 Victor Parkway Livonia, MI 48152 Tel 734.

Re: [ActiveDir] 2003 to 2000 - is it possible?

2003-12-03 Thread Tony Murray
Hi Chip I haven't tried this, but I think your suggestion should work. If the msDS-Behavior-Version for both the domain and forest funtional levels are set to "0" then they should be ok. Anything else, i.e. values of "1" (interim) or "2" (Windows Server 2003) and they would not be able to go

[ActiveDir] 2003 to 2000 - is it possible?

2003-12-03 Thread DiBias, Chip
Hello all,   I received a request from a co-worker in the UK who has a client who wants to move from Win2003 BACK to Win2000.  I do not know the reasons.  My question is this – if the Win2003 Domain and Forest functional levels have not been upgraded and remain at a “Mixed-mode” level can

RE: [ActiveDir] Changing Hardware for DC

2003-12-03 Thread Ken Cornetet
This should work just fine. A couple of things to watch for, though: 1. Wait a while after the demotion of each DC before you rename it. Make sure your AD has replicated fully. 2. Back in the early days of AD, I did a lot of this sort of thing in the lab and found that demoting a DC to a member s

[ActiveDir] Delegation of control for WINS

2003-12-03 Thread Gregoire Maux
Dennis and members, - I saw in ActiveDir archives that you asked (see below mail) if it is possible to have account dedicated to do WINS administration. At that time, you did not receive any clear answer on that. - Could you please tell what you did in fact? What access rights did you give to peop

RE: [ActiveDir] Next step moving FSMO, DHCP

2003-12-03 Thread Tony Murray
Another thing to check is GC availability. If the old server was configured as a GC, you will need to make sure another one is available in the same AD site when you shut it down. And when the new DC comes up you should configure it as a GC. Tony -- Original Message -

RE: [ActiveDir] Scripting a DNS Host Record Update

2003-12-03 Thread Holland Matthew BC GB
Title: Message Would also be interested in seeing a sample script…   Thanks Matty   From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: 02 December 2003 20:02 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Scripting a DNS Host Record Update   More or less yes. Care t