RE: [ActiveDir] How to track object deletion?

2004-01-19 Thread Jef Kazimer
I've been looking at ways for tracking static DNS record changes. So far I've been focusing on the "dnsTombestone" property which has 3 values of NULL, TRUE, and FALSE. Perhaps you can see if that object has a similar property? I'm not at an AD terminal now, so I can't check, but it might be so

RE: [ActiveDir] forcing a logoff

2004-01-19 Thread Byron Fackenthall
If you have WMI installed on your pre 2k machines you can write a script to check for the latest files and if not there use WMI Win32OperatingSytem to shut them down. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scrip tcenter/scrguide/sas_cpm_jleo.asp Watch word wrap and s

[ActiveDir] group membership script question

2004-01-19 Thread Rich Milburn
You know how sometimes you see these requests (or your help desk does) for: “Please give Jim Bob and Curly Sue access to \\server1\accounting, \\server3\cashcount, and \\server5\dontlookhere” and you think, “hmmm, now what group gives rights to those 3 servers because I’m not going to add

RE: [ActiveDir] Help, file locked

2004-01-19 Thread Free, Bob
handle usually always comes through for me- http://www.sysinternals.com/ntw2k/freeware/handle.shtml or the GUI relative- http://www.sysinternals.com/ntw2k/freeware/procexp.shtml -Original Message- From: Rimmerman, Russ [mailto:[EMAIL PROTECTED] Sent: Monday, January 19, 2004 1:33 PM To:

RE: [ActiveDir] Help, file locked

2004-01-19 Thread Rimmerman, Russ
Ok, now any way to find out why even though the user is logged off, the INI is still left locked open? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Monday, January 19, 2004 3:44 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir

[ActiveDir] forcing a logoff

2004-01-19 Thread Creamer, Mark
Hi all, can you give me some ideas on how to handle this...we use ScriptLogic to manage our desktop environments, which works very well. I have been asked to find a way to force people who have not updated or are not running the latest AV (specific approved product) to logoff. Environment: Win2

RE: [ActiveDir] Help, file locked

2004-01-19 Thread Thommes, Michael M.
Russ, On the computer that has the open files, open the Computer Management MMC, go to System Tools\Shared Folders\Open Files . That will show you who's got what open. hth, Mike Thommes -Original Message- From: Rimmerman, Russ [mailto:[EMAIL PROTECTED] Sent: Monday, January 19, 2004

RE: [ActiveDir] How to track object deletion?

2004-01-19 Thread Darren Mar-Elia
Check the lastKnownParent attribute on the deleted object. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, January 19, 2004 7:37 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] How to track object deletion? Hello, AD gurus.

RE: [ActiveDir] AD and GPO registry question

2004-01-19 Thread Darren Mar-Elia
Title: Message I know this may seem obvious, but are you refreshing the view in regedit when you're focused on HKCU? I tested this to confirm and I can see the changes appearing simultaneously in both places (well as simultaneously as I can switch from one key to the other). From: [EMAIL PR

RE: [ActiveDir] How to track object deletion?

2004-01-19 Thread Jorge de Almeida Pinto
The event viewer (when auditing is enabled) shows the following event ids for actions mentioned Object Event ID "created" Event ID "modified/changed" Event ID "deleted" UserID 624 ID 642 ID 630 ComputerID 645

RE: [ActiveDir] AD and GPO registry question

2004-01-19 Thread Neil Lehouillier
Title: Message That's the problem though.  I'm only seeing it in the HKEY_USERS and not in the HKEY_CURRENT_USER.  Any thoughts? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-EliaSent: Monday, January 19, 2004 12:00 PMTo:

RE: [ActiveDir] AD and GPO registry question

2004-01-19 Thread Darren Mar-Elia
Title: AD and GPO registry question Neil- HKCU is simply an alias to the key under HKEY_USERS that you're seeing the changes appear in below. In reality, you should see it in both places since they should be one in the same.   Darren From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Be

[ActiveDir] AD and GPO registry question

2004-01-19 Thread Neil Lehouillier
Title: AD and GPO registry question Hi all, I have a quick little question that I'm sure someone has encountered before.  I'm designing a GPO that contains the following (outreghack.adm): CLASS USER     CATEGORY "Outlook Security Hack"     POLICY !!CheckAdminSettings   

[ActiveDir] How to track object deletion?

2004-01-19 Thread silenty
Hello, AD gurus. I' ve been developing a DirSync program that tracks for object changes in AD. Everything is fine except for object deletion. When AD object is deleted, as everybody knows here, it is tombstoned. As I figured out that means that the object is moved to the hidden container called '

RE: [ActiveDir] MNS user flag - fixed

2004-01-19 Thread Jef Kazimer
Rich, I have to say the latest MS rep we had was absolutely excellent. :) I won't say his name, but he's out of the Dallas offices, and we all would request him again in the future. He really tried to sit there and troubleshoot, and when he couldn't he got all the right resources together to so

RE: [ActiveDir] Folder redir policy

2004-01-19 Thread Steve Rochford
Use subinacl (resource kit tool). Assuming that your folders are named with the username (ie user 1234 has a home folder 1234) then you can do: for /d %i in (*) do subinacl /subdirectories %i\*.* /setowner=\%i replace with your domain. This will take quite a while to run... Steve -Original

RE: [ActiveDir] MNS user flag - fixed

2004-01-19 Thread Rich Milburn
Nice to hear that they did look at the source code though when they felt they needed to - I've seen other companies pass around a call for weeks trying to figure out something like command line parameters of their own product, and a simple query to the developers would have resolved the issue. -

RE: [ActiveDir] NTDS KCC error

2004-01-19 Thread Mike Baudino
Return Receipt Your RE: [ActiveDir] NTDS KCC error document :

RE: [ActiveDir] LDIFDE and Perl...

2004-01-19 Thread Steve Rochford
It may be easier to just use a batch file created with Excel. eg: cell A1 contains: ="net user user"&ROW()&" " &CHAR(RAND()*26+65)&CHAR(RAND()*26+65)&CHAR(RAND()*26+65) &" /add /profilepath:\\server1\profiles\user"&ROW()& " /domain" and you then fill that down for 1500 rows. Copy to notepad and s