RE: [ActiveDir] Program Data container

2004-03-09 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
it's not too long ago that Stuart Kwan mentioned something along the ling if he could go back in time, Exchange wouldn't store it's data in the config container... I'm sure he whished they'd have had application partitions and maybe this Program Data container before ;-) -Original

RE: [ActiveDir] Program Data container

2004-03-09 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
really depends on the app and how it is related to security in the enterprise -similar to whatEric said rgd. ADAM"But if you don't need them (independent Schmema/DSA), don't go with it. Let's not over-engineer the solution." I wouldn't want app specific data, which is very much related to

RE: [ActiveDir] DC Replication Bandwidth Issue

2004-03-09 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
only glanced over this thread - tough to read it all in a minute ;-) however, I don't think it mentions, that Win2k3 has actually reduced the compression ratio over the benefit of less CPU usage on DCs. I.e. the compression is now not as good as it was in 2000 (can be changed back to the 2000

[ActiveDir] Active Directory Replication - Removing NCs

2004-03-09 Thread Jorge de Almeida Pinto
Hi Everyone, While continuing with my evil tests ;-)) I'm trying to figure something out. To summarize: Site links connect sites for replication Connection objects connect DCs for replication Replication links connect naming contexts for replication The first two are stored in the

RE: [ActiveDir] OT: Exchange 2003 Hardening Guide

2004-03-09 Thread Nicolas Blank
Then there's the little gripe of. Publishing an Exchange attribute in MSDN and then UN-publishing it in oops style, after you find out you really really WANT to address this multi value attribute in a script, and not a one line GUI... *SIGH* -Original Message- From: [EMAIL

[ActiveDir] Custom ADM

2004-03-09 Thread Parker, Edward
All, I am creating a custom ADM file for GPOs to delete a registry Key. I have found docs to change values, add, or rename via custom ADM files, but I have not found a way to DELETE a registry KEY. Does any have a link or a suggestion? List info : http://www.activedir.org/mail_list.htm List

RE: [ActiveDir] Program Data container

2004-03-09 Thread joe
That specific example I think does make sense as it is directly related to authentication. Also putting it in the main partition gets around my other issue. GID/UID/NIS info for Unix integration also works there as it is authentication/authorization etc. Lots of stuff like that.

RE: [ActiveDir] Active Directory Replication - Removing NCs

2004-03-09 Thread Dean Wells
Replication links are maintained under the repsFrom attribute on the NC head. The attribute contains the InvocationID and replication CNAME for each partner plus additional replication metadata such as USNs, last replication success/result, schedule and control data. The attribute value is

[ActiveDir] Password Expiry Notification

2004-03-09 Thread it admin
Hello, I have a number of users on our system who do not receive notification that their password will expire in x number of days. Some do get the message, I have not changed anything so am unsure why some do and some don't. Any help/advice will be greatly appreciated. Regards Nick

Re: [ActiveDir] Password Expiry Notification

2004-03-09 Thread Tony Murray
Nick There's a suggestion on what this might be here: http://www.experts-exchange.com/Security/Win_Security/Q_20869936.html Tony -- Original Message -- From: it admin [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 9 Mar 2004 14:18:58 -

[ActiveDir] Roaming Profile Synchronization

2004-03-09 Thread Edwin
I recently setup Active Directory for the first time and decided to use roaming profiles. I have two Domain Controllers setup at the present = moment using Windows 2003 Enterprise Edition. All client machines are using Windows 2000 Professional. What I am noticing is that at random times,

[ActiveDir] Active Directory Replication - Removing NCs

2004-03-09 Thread rmcdonald
Return Receipt Your [ActiveDir] Active Directory Replication - Removing NCs document :

RE: [ActiveDir] Custom ADM

2004-03-09 Thread J0mb
Rather than implementing the key deletion in an ADM, you might want to use a Group policy to trigger a startup script that would delete the key. Here you can find a sample: http://www.microsoft.com/technet/community/scriptcenter/registry/scrreg06.ms px Hope this helps J0mb -Original

RE: [ActiveDir] Custom ADM

2004-03-09 Thread Darren Mar-Elia
Edward- I've never seen a way to delete a value using ADM files. In fact, I've never seen a way to rename a value, so I'd like to see how you do that if you could share it. Thanks Darren -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Parker, Edward

RE: [ActiveDir] Custom ADM

2004-03-09 Thread Parker, Edward
This is exactly the way I have done it. (Scripted) Wanted to see how to delete via ADM...doesn't look promising. Thanks for the help -Original Message- From: J0mb [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 09, 2004 9:18 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Custom ADM

RE: [ActiveDir] Roaming Profile Synchronization

2004-03-09 Thread Bruce Clingaman
I had a similar problem. I think it's caching files then syncing later. I my users' My Docs to never go offline. With the sync on they would see files then they would not, log off took forever, funny messages, etc. I found this key:

RE: [ActiveDir] Password Expiry Notification

2004-03-09 Thread Seyboldt, Volker
Hi, We had this last year. Maybe you check this: MS KB313194 - No Password Expiration Notice Is Presented During the Logon Process Regards Volker -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Tuesday, March 09, 2004 3:55 PM To:

RE: [ActiveDir] Local Admin to Domain Admin escalation

2004-03-09 Thread Guy Teverovsky
Joe Guido, thanks for clearing this up. I was helping out someone and came up with the solution described below and when it worked I was totally sure I was missing something. I know that the topic is rather controversial and I am sorry for blowing the whistle, but I just had to know it for

Re: [ActiveDir] Password Expiry Notification

2004-03-09 Thread [EMAIL PROTECTED]
Nick, Not sure what's up in your environment, but here's one possible reason: Mobile users frequently don't get this, because they are not actually performing a domain authentication (i.e., they make RAS or VPN connections, check their mail, etc., but don't actually sign their workstation into