RE: [ActiveDir] Bug in GPO?

2003-12-30 Thread Darren Mar-Elia
Mark- This worked for me on XP as expected--I chose to hide the C: drive using this policy and it was hidden in both My Computer and Explorer. One thing I did note was that, if I enabled this policy while I had Explorer up and running, the C: drive would only get "partially" hidden. That is,

RE: [ActiveDir] User Display Question

2003-12-30 Thread Daniel Gilbert
OK, I followed KB250455. Opened ADUC, created new users and display in ADUC MMC (main window) was correct, i.e. lastname, firstname. Users created before KB250455 unchanged, i.e. firstname lastname. Ran the script in KB277717 on the OU that contained users created before KB250455 was run. Outpu

RE: [ActiveDir] Software Deployment to Computers using GPO

2003-12-30 Thread Darren Mar-Elia
You did the right thing. I've never understood why MS enabled fast logon optimization by default on XP. It causes no end of problems with Folder Redirection and Software Installation. It won't have a huge effect for your users unless you get paid based on how long it takes for them to get a

RE: [ActiveDir] Software Deployment to Computers using GPO

2003-12-30 Thread Darren Mar-Elia
Russ- How are you trying to trigger the install? If its a machine-based assignment, the install will only happen on machine reboot, rather than by using secedit or gpupdate. The message displayed below is simply saying that software installation can't happen in the background (i.e. asynchrono

RE: [ActiveDir] Software Deployment to Computers using GPO

2003-12-30 Thread Rimmerman, Russ
Ok, I figured out the permission problems.  Apparently you can't publish software  for a software install GPO on a clustered server.   Now I'm getting a new error: (cam-tst-computers is the GPO name). The assignment of application PatchLink Update Agent for Windows from policy CAM-TST-Com

RE: [ActiveDir] Software Deployment to Computers using GPO

2003-12-30 Thread Rimmerman, Russ
P.S. I found an article that outlines my problem exactly: http://support.microsoft.com/default.aspx?scid=kb;EN-US;278472 But when I give all kinds of computer account permissions to the share, its still asking for a username and password when the system account of the machine tries to access

RE: [ActiveDir] User Display Question

2003-12-30 Thread Jorge de Almeida Pinto
Hi, Q250455 only applies for user accounts created after the change. User accounts already created before the change remain as is. To change the display name of those users (already created) also see Q277717 Regards, Jorge -Original Message- From: Gilbert, Daniel L Mr ANOSC/FCBS To: [EM

RE: [ActiveDir] kerberos srv records not created

2003-12-30 Thread Jorge de Almeida Pinto
set the internal authoritative DNS server as preferred (primary) DNS server and then run NETDIAG /FIX. (Support Tools) Why is the external ISP DNS configured as DNS server for the DC at all? Regards, Jorge -Original Message- From: Rittenhouse, Cindy To: [EMAIL PROTECTED] Sent: 12/30/2003

[ActiveDir] Software Deployment to Computers using GPO

2003-12-30 Thread Rimmerman, Russ
I've created a Computer Configuration GPO software installation package, and pointed it to a share I created and put the MSI file in.  I pointed the package to the .MSI.  When the computer in the affected OU tries to launch the package, it can't get to the share.  I set the share permissions

RE: [ActiveDir] GPO Loopback problem

2003-12-30 Thread Jorge de Almeida Pinto
QUOTE FROM TECHNET Using Loopback Processing to Configure User SettingsThe User Group Policy loopback processing mode policy setting is an advanced option that is intended to keep the configuration of the computer the same regardless of who logs on. This option is appropriate in certain closely ma

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Dolphin, Jeff
Got it! Thank you everyone for your help. I'll try the batch file/script solution first. We just finished our migration to AD and we have tons of projects going on. I want to leave DNS alone for now until there's time to really sit down and plan something out. The HOSTS file entry adding would

[ActiveDir] User Display Question

2003-12-30 Thread Gilbert, Daniel L Mr ANOSC/FCBS
To All:   If this issue has been covered before please point me in the right direction.   I am attempting to change the default display of users in ADUC.   I did some research and found Q250455, which is titled "How to Change Display Names in Active Directory".  Followed this Q articl

[ActiveDir] kerberos srv records not created

2003-12-30 Thread Rittenhouse, Cindy
A consultant at a remote site attempted to DCPROMO a W2K server with the authoritative domain DNS server listed as secondary and an external ISP DNS server as primary. I am amazed that Active Directory actually installed, even in the correct site, but now he can't logon to the server. In examining

[ActiveDir] Bug in GPO?

2003-12-30 Thread Creamer, Mark
In GPO\User Configuration\Administrative Templates\Windows Components\Windows Explorer, there is a policy “Hide these Specified Drives in My Computer.”   According to the Explain tab for that policy, it “Removes the icons representing selected hard drives from My Computer, Windows Explor

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Roger Seielstad
Title: Message We run something like 8-10 split zones, so missing something isn't uncommon...     -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Rich Milburn [

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Rittenhouse, Cindy
Jeff, If you are sure you don't want to go the DNS route (which would be my first choice), we have done this by creating the host file, placing it in the sysvol\domain\scripts folder, creating a .bat file in the scripts folder to "copy \\dcxx\sysvol\yourdomain\scripts\hosts c:\winnt\system32\driver

RE: [ActiveDir] GPO Loopback problem

2003-12-30 Thread Salandra, Justin A.
Loopback is have never fully understood, but from what I can comprehend, if you enable loopback, no matter what settings you make for the user under the user config, they are ignored and the computer settings are true for the user.   GPO are not applied to admins if the apply is not check

[ActiveDir] GPO Loopback problem

2003-12-30 Thread Creamer, Mark
We’re setting up a group policy being applied to an OU which contains 2 computer objects, which are terminal servers. Then we want to set user configuration policies disabling certain start menu options, etc.   As expected, the policy affecting the users only goes into effect upon selecti

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Rich Milburn
Title: Message Nice save, I’ve been caught out by that… went to an internal DNS name, split DNS, and missed adding an alias that was in use in some Intranet apps and it broke the whole Intranet site… once you go to split DNS the server doesn’t forward to the external DNS for mycompany.org

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Roger Seielstad
Title: Message Actually. let me amend that. You need to add the appropriate records into the internal copy of the zone to allow for any internal access. In other words, you probably also need to account for MX records for mail delivery, as well as any other published resources that are used f

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Roger Seielstad
Title: Message You really need to set up split DNS for mycompany.org   Just add a zone (AD integrated is fine) for mycompany.org on your internal DNS servers, and add A records for www and intranet pointing to the appropriate IP's.   You don't want to go down the hosts file road - that make

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Roger Seielstad
There isn't a way to do that per se, but I don't think that's a bad thing. What's the reason for adding a hosts file entry rather than fixing DNS? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -Ori

RE: [ActiveDir] group policy processing of IE settings

2003-12-30 Thread Darren Mar-Elia
Graham- Generally speaking, when you need to change CSE processing behavior, its typically done where the CSE is registered, which is under hklm/software/microsoft/windows nt/current version/winlogon/gp extensions/. I don't have the 1st reg key you listed on my machines, so I'm not sure where that

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Dolphin, Jeff
Title: Message Sure...We have a in-house domain (inside.local) and we also own a registered domain (mycompany.org) .  People needing the company website go to www.mycompany.org .  This is hosted by our ISP.  Recently we developed and began hosting a company intranet in-house (using 1 to 1 NA

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread deji Agba
What would be the purpose? Maybe letting us in on your line of thoughts would make it easier for someone to help you with this or recommend an alternative.     Sincerely,Dèjì Akómöláfé, MCSE MCSA MCP+Iwww.akomolafe.comwww.iyaburo.comDo you now realize that Today is the Tomorrow you were worrie

RE: [ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Joe
Only thing I could think of would be to have a startup script that added the entry. Unless you have a single corporate hosts file you would need to come up with some tool that would properly insert the entry you want and clear any old entry by the same name. joe -Original Message- F

[ActiveDir] Policy to distribute domain wide HOSTS file

2003-12-30 Thread Dolphin, Jeff
Either I've been hit with the stupid stick or I'm looking in the wrong place! Can anyone assist me in creating a policy to add an entry to the HOSTS file on our domain computers? Thank you for any help... List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/

[ActiveDir] group policy processing of IE settings

2003-12-30 Thread Graham Turner
not sure if this list accepts issues relating to the configuration of Internet explorer using Group policy - if not apolgoies but would nonetheless be v glad for assistances on the apparently inconsistent behaviour w.r.t the setting of the auto-configuration script value. definites i can confirm;