RE: [ActiveDir] RIS and software install by GPO replacement

2004-03-12 Thread Seyboldt, Volker
HI, By using riprep you can also produce an Image on a RIS Server. And if you use a win2003 RIS Server you should be able to install servers as well. Otherwise I can recommend the Altiris Suite (or in fact the RDP of HP which is the same with special templates for HP Servers). But be aware that

RE: [ActiveDir] Can someone describe teh cross-forest login proce ss?

2004-03-12 Thread Michael_Parent
Right we opened up a hole between the two DCs (GCs actually) and nothing besides web traffic to the resource server. Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 joe [EMAIL PROTECTED] Sent by: [EMAIL

[ActiveDir] Best practice for default domain controller policy

2004-03-12 Thread Wilkinson, Stephen
Title: Best practice for default domain controller policy Hi All, When we were designing our Win 2003 AD about this time last year, we were advised by our MCS consultant to copy the default domain and default domain controller policies, and then customise, rather than customising the

Re: [ActiveDir] RIS and software install by GPO replacement

2004-03-12 Thread Robbie Foust
Seyboldt, Volker wrote: But be aware that you cannot use Altiris and RIS in the same network... Sure you can -- Just configure both pxe servers to respond only to known hosts - although this also depends on the configuration of your DHCP server. If ya have multiple pxe servers with Altiris,

Re: [ActiveDir] Best practice for default domain controller policy

2004-03-12 Thread Robbie Foust
From everything I've read, configuring seperate policies is the right thing to do - but don't disable your default domain policies. I think there are some settings that must be defined in the default policies, such as renaming the administrator account. (I think thats accurate - somebody

[ActiveDir] Networks are great when they work

2004-03-12 Thread Moore, Gregg
All, What is the "best" free utility for sniffing a network to locate FAILED devices (i.e. NIC, cable, router, switch, hub, etc.)? Regards, Gregg == Gregg S. Moore Bechtel Power Corporation Information Systems and Technology- Project IT

[ActiveDir] Networks are great when they work

2004-03-12 Thread James_Day
Return Receipt Your [ActiveDir] Networks are great when they work document :

RE: [ActiveDir] Networks are great when they work

2004-03-12 Thread kevingent
Ethereal should do nicely. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Moore, GreggSent: Friday, March 12, 2004 11:25 AMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] Networks are great when they work All, What is the "best"

RE: [ActiveDir] Networks are great when they work

2004-03-12 Thread Craig Cerino
I agree - -if youre looking for a freebie Ethereal is a good way to go From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, March 12, 2004 1:08 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Networks are great when they work

[ActiveDir] Networks are great when they work

2004-03-12 Thread Justin_Leney
Return Receipt Your [ActiveDir] Networks are great when they work document :

RE: [ActiveDir] Finding users who must change pw

2004-03-12 Thread Creamer, Mark
Tony, what's the 1.1 at the end of the command line? I figured it was just something extraneous, but wasn't sure... mc -Original Message- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: Thursday, March 11, 2004 10:59 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Finding users who

RE: [ActiveDir] Networks are great when they work

2004-03-12 Thread Thommes, Michael M.
Seems to me if the device is "failed", the best you're gonna do is a "tracert" command where the failed device is in the path. From another viewpoint, you may want to make use of a tool like ServersAlive (http://www.woodstone.nu/salive/) to check on whatever devices you're interested in.

RE: [ActiveDir] Account lockouts

2004-03-12 Thread Free, Bob
Robbie Foust mused on Thursday, March 11, 2004 7:28 PM: Hi, Actually, this brings up a question I've wanted to ask for some time. Why does Event ID 1083 get logged when an account is locked out? I'm trying to understand what exactly is causing the directory is busy message. If it's just

RE: [ActiveDir] Finding users who must change pw

2004-03-12 Thread joe
Hey Mark, ancient chinese secret... We could tell you but would have to beat you with a bamboo rod... When you list 1.1 (aka LDAP_NO_ATTRS) as the attribute list it tells AD not to send back any attributes at all, just return DNs. Speeds things up. You get this with adfind by specifying -c or

RE: [ActiveDir] VB Script

2004-03-12 Thread joe
Too late! :o) To do the API call from vbscript you will have to look at something like DynaCall or have someone wrap the API call up for you like iadstools does for some of the calls. You can look at the dynacall info here - http://www.borncity.com/WSHBazaar/WSHDynaCall.htm If you want to