I've been looking at ways for tracking static DNS record changes. So far
I've been focusing on the "dnsTombestone" property which has 3 values of
NULL, TRUE, and FALSE.
Perhaps you can see if that object has a similar property? I'm not at an AD
terminal now, so I can't check, but it might be so
If you have WMI installed on your pre 2k machines you can write a script
to check for the latest files and if not there use WMI
Win32OperatingSytem to shut them down.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scrip
tcenter/scrguide/sas_cpm_jleo.asp
Watch word wrap and s
You know how sometimes you see these requests (or your help
desk does) for:
“Please give Jim Bob and Curly Sue access to \\server1\accounting, \\server3\cashcount, and \\server5\dontlookhere” and you
think, “hmmm, now what group gives rights to those 3 servers because I’m
not going to add
handle usually always comes through for me-
http://www.sysinternals.com/ntw2k/freeware/handle.shtml
or the GUI relative-
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
-Original Message-
From: Rimmerman, Russ [mailto:[EMAIL PROTECTED]
Sent: Monday, January 19, 2004 1:33 PM
To:
Ok, now any way to find out why even though the user is logged off, the INI
is still left locked open?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Monday, January 19, 2004 3:44 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir
Hi all, can you give me some ideas on how to handle this...we use ScriptLogic to
manage our desktop
environments, which works very well. I have been asked to find a way to force people
who have not
updated or are not running the latest AV (specific approved product) to logoff.
Environment: Win2
Russ,
On the computer that has the open files, open the Computer Management MMC, go to
System Tools\Shared Folders\Open Files . That will show you who's got what open.
hth,
Mike Thommes
-Original Message-
From: Rimmerman, Russ [mailto:[EMAIL PROTECTED]
Sent: Monday, January 19, 2004
Check the lastKnownParent attribute on the deleted object.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, January 19, 2004 7:37 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] How to track object deletion?
Hello, AD gurus.
Title: Message
I know this may seem obvious, but are you refreshing the
view in regedit when you're focused on HKCU? I tested this to confirm and I can
see the changes appearing simultaneously in both places (well as simultaneously
as I can switch from one key to the other).
From: [EMAIL PR
The event viewer (when auditing is enabled) shows the following event ids
for actions mentioned
Object Event ID "created" Event ID "modified/changed"
Event ID "deleted"
UserID 624 ID 642 ID
630
ComputerID 645
Title: Message
That's
the problem though. I'm only seeing it in the HKEY_USERS and not in the
HKEY_CURRENT_USER. Any thoughts?
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Darren Mar-EliaSent: Monday, January 19, 2004
12:00 PMTo:
Title: AD and GPO registry question
Neil-
HKCU is simply an alias to the key under
HKEY_USERS that you're seeing the changes appear in below. In reality, you
should see it in both places since they should be one in the same.
Darren
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Be
Title: AD and GPO registry question
Hi all,
I have a quick little question that I'm sure someone has encountered before. I'm designing a GPO that contains the following (outreghack.adm):
CLASS USER
CATEGORY "Outlook Security Hack"
POLICY !!CheckAdminSettings
Hello, AD gurus.
I' ve been developing a DirSync program that tracks for object changes in AD.
Everything is fine except for object deletion.
When AD object is deleted, as everybody knows here, it is tombstoned. As I figured out
that means that the object is moved to the
hidden container called '
Rich,
I have to say the latest MS rep we had was absolutely excellent. :) I
won't say his name, but he's out of the Dallas offices, and we all would
request him again in the future.
He really tried to sit there and troubleshoot, and when he couldn't he got
all the right resources together to so
Use subinacl (resource kit tool). Assuming that your folders are named
with the username (ie user 1234 has a home folder 1234) then you can do:
for /d %i in (*) do subinacl /subdirectories %i\*.*
/setowner=\%i
replace with your domain. This will take quite a while to
run...
Steve
-Original
Nice to hear that they did look at the source code though when they felt
they needed to - I've seen other companies pass around a call for weeks
trying to figure out something like command line parameters of their own
product, and a simple query to the developers would have resolved the issue.
-
Return Receipt
Your RE: [ActiveDir] NTDS KCC error
document
:
It may be easier to just use a batch file created with Excel. eg:
cell A1 contains:
="net user user"&ROW()&" "
&CHAR(RAND()*26+65)&CHAR(RAND()*26+65)&CHAR(RAND()*26+65) &" /add
/profilepath:\\server1\profiles\user"&ROW()& " /domain"
and you then fill that down for 1500 rows. Copy to notepad and s
19 matches
Mail list logo