[ActiveDir] DNS errors

2004-04-12 Thread Peeter Ulst
Return Receipt Your [ActiveDir] DNS errors document :

[ActiveDir] Adding Photo to AD User Object - Example

2004-04-12 Thread Peeter Ulst
Return Receipt Your [ActiveDir] Adding Photo to AD User Object - Example document :

RE: [ActiveDir] LDAP question

2004-04-12 Thread Roger Seielstad
That should simply be domain name, in big endian format - dc=com,dc=domain Its been a while since I did that however, so you might need to play with it.. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis

RE: [ActiveDir] Assigned software deployment via GPO

2004-04-12 Thread Roger Seielstad
IIRC, assigning to a user doesn't actually install it until the application is launched for the first time. I'd have to check that for sure, though. It should create any shortcuts at the outset however. -- Roger D. Seielstad -

RE: [ActiveDir] Adobe Acrobat Reader Weirdness

2004-04-12 Thread Roger Seielstad
Yup - you need to get in the habit of specifying UNC paths rather than mapped drives for all GPO deployed software. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Craig

RE: [ActiveDir] OT: Server-side address list Public folder

2004-04-12 Thread Roger Seielstad
Nope. The contents of public folders are not exposed via LDAP (which makes sense when you think about it). You can. however, use something like CDONTS or some of the other MAPI programatic interfaces to enumerate the contents of the PF.

RE: [ActiveDir] OT: Server-side address list Public folder

2004-04-12 Thread Roger Seielstad
http://www.cdolive.comis the best place to start.. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. From: Michael Wassell [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 07, 2004 1:22

RE: [ActiveDir] using dsacls.exe

2004-04-12 Thread Roger Seielstad
So what you're telling me is I was hanging out in the wrong bar all week? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. From: joe [mailto:[EMAIL PROTECTED] Sent: Saturday, April 10,

RE: [ActiveDir] Assigned software deployment via GPO

2004-04-12 Thread Michael Wassell
Hmm.. that's interesting Roger. It does seem to work perfectly as I had mentioned in a test environment, withexactly the same settings. The only differences between environmentsare obvious ones, server names, usernames, security groups, production workstations are mixed 2000/XP machines.

RE: [ActiveDir] using dsacls.exe

2004-04-12 Thread Roger Seielstad
The GC per DC question came up in one of the sessions I attended (with the Whidby team) and it strikes me that there is a common misconception even within Redmond that "All GC's are Created Equally" - which I think we've seen is NOT the case. Not sure they got the point, however. They were

RE: [ActiveDir] OT: Server-side address list Public folder

2004-04-12 Thread Michael Wassell
Yeah I kinda figured that :-) I figured the best way to do a bulk import from fields exported from Outlook was to format the fields using CSVDE syntax and import from that. That worked perfectly, now all I have to figure out is what the best way to exclude those contacts from the GAL (when

RE: [ActiveDir] OT: using dsacls.exe

2004-04-12 Thread Hunter, Laura E.
And speaking of bars: Roger or Tony - did you guys happen to scoop up my camera from our table at the W on Wednesday night? It's a crummy throw-away $10 jobbie, but it had some really cool pictures on it and I'm sad that I forgot it. :-( From: Roger Seielstad [mailto:[EMAIL

RE: [ActiveDir] Assigned software deployment via GPO

2004-04-12 Thread Roger Seielstad
Have you tried assigning it to machines instead of users? Does that change the behavior at all? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. From: Michael Wassell [mailto:[EMAIL

RE: [ActiveDir] OT: using dsacls.exe

2004-04-12 Thread Roger Seielstad
I sure didn't. Might want to talk with the leads to see if they grabbed it, or if it was returned to them. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. From: Hunter, Laura E.

RE: [ActiveDir] ADFIND Update - Version 1.14.0 RTW

2004-04-12 Thread Michael B. Smith
Cool beans! As always, thanks Joe! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Saturday, April 10, 2004 8:14 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] ADFIND Update - Version 1.14.0 RTW Since several folks from this list have asked for certain updates to

RE: [ActiveDir] Verifying DNS records of many DC's

2004-04-12 Thread Bernard, Aric
FWIW - If your environment has HP OpenView Operations for Windows with the AD SPI, it will check all of these records for you assuming you are monitoring each DC. In addition, it will also determine if that each site is being covered by a GC and notify you if it is not the case. -Aric

RE: [ActiveDir] using dsacls.exe

2004-04-12 Thread joseph . e . kaplan
I agree that I dont think they totally understood the problem. Lets type something up on this and send it to them or post it in the MVP newsgroup. I think the time is now if there is to be any chance of getting this dealt with for Whidbey. I think if they understood the problem, they might

[ActiveDir] Active Directory GC Locator Services and why Exchange would STILL be broke if the AD team fixed it - WAS: using dsacls.exe

2004-04-12 Thread joe
Hey I wanted to chime in on this one quickly. Note I am not ignoring other posts or the emails I am getting, just trying to dig myself out. In fact I had so many emails about a certain problem with people's understanding of things I made some code changes in CPAU so I can cut down my email

RE: [ActiveDir] Active Directory GC Locator Services and why Exchange would STILL be broke if the AD team fixed it - WAS: using dsacls.exe

2004-04-12 Thread Roger Seielstad
You missed the session that we attended with regards to s.ds.activedirectory - and that was the team that didn't get it. They're writing from scratch a new interface within the .Net Framework that will include easy to use methods for retrieving DC/GC info. It struck a number of us that adding the

RE: [ActiveDir] Active Directory GC Locator Services and why Exchange would STILL be broke if the AD team fixed it - WAS: using dsacls.exe

2004-04-12 Thread joe
Yeah understood. However they shouldn't fix it there, it should just be exposed there. It should be fixed in the underlying code. Not everyone is going to use .NET to get at this stuff and everyone shouldn't be coming up with different methods of doing resource location otherwise it defeats the

RE: [ActiveDir] Unable to see users group membership in trusted domain

2004-04-12 Thread Ole Thomsen
The operators managing the users are not people that i would ask to use adsiedit. Yes please, I would like to know more about the tool. Ole Thomsen -Original Message- From: Grillenmeier, Guido [mailto:[EMAIL PROTECTED] Sent: Saturday, April 10, 2004 3:05 PM To: [EMAIL PROTECTED]

RE: [ActiveDir] DFS use question

2004-04-12 Thread Cary, Mark
Are you backing up the same data on all 12 servers? -Original Message- From: E Brown [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 2:51 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DFS use question This is not out of the realm of FRS. I work with some folks that sync

RE: [ActiveDir] Active Directory GC Locator Services and why Exchange would STILL be broke if the AD team fixed it - WAS: using dsacls.exe

2004-04-12 Thread joseph . e . kaplan
Dont worry. They are just using .NET P/Invoke to call the underlying DS* APIs (according to their architecture diagram), so hopefully fixes at the API level would flow into the managed code that consumes it. Based on Joes detailed post, it is clear to me that the fix really needs to be

[ActiveDir] logon scripts

2004-04-12 Thread Nathan Casey
What is a recommended logon script solution that will work with win9x, win2k/xp clients for drive mapping, etc that works similar to Novell logon scripts? Example: IF MEMBER OF "GROUP" THEN BEGIN MAP H:=SERVER1\VOL1: END

RE: [ActiveDir] Unable to see users group membership in trusted domain

2004-04-12 Thread joe
If you aren't adverse to command line tools, check out memberof on the free win32 tools page of www.joeware.net. It will rip through and find all group memberships within a domain and should also get Universal group memberships through out the domain as well. Output looks something like: [Mon

RE: [ActiveDir] using dsacls.exe

2004-04-12 Thread joe
You were hanging out with all the Exchange folks at the "Exchange Hotel". After meeting them I do understand why you would want to, a generally interesting cast of characters. The Ren bar just "staged" us for each night's activities. You seemed well "staged" every time I saw you so I think

RE: [ActiveDir] OT: Server-side address list Public folder

2004-04-12 Thread joe
Note that the Preview Pane in ESM does not do things the same way as the RUS does when building the ALs. You can (and I have done and others I know have done) have an LDAP query that works PERFECTLY in the preview and does anything from completely fail to fail partially or actually work when

RE: [ActiveDir] OT: Server-side address list Public folder

2004-04-12 Thread joe
Off the top of my head, set up some attribute (or create another attribute) that you mark these special objects with and exclude them from your other AL and include them in the "special" AL. Alternatively if there is something else other than container that is different you can focus in on

RE: [ActiveDir] Photos in Active Directory

2004-04-12 Thread joe
Guido's response is the first thing I thought of as well. I don't think AD is a proper place for that info for a couple of reasons 1. Do you really need this replicated to every DC? 2. If someone dumps your AD, they get all of the photos too, how many people would like to have their entire

RE: [ActiveDir] DFS use question

2004-04-12 Thread Rick Kingslan
With all due respect to those that absolutely think that FRS v1 is hot, I'm quite pleased that there has been this level of success with it. However, even Microsoft admits that FRS iswell, broken. It gets better with each QFE, Service Pack and HotFix, but the basics are just flat broken.

RE: [ActiveDir] Wlan AD Security

2004-04-12 Thread Rick Kingslan
Chris, We sometimes become off-topic city. No worries there This is an interesting topic, and one that I will fall clearly on one side of it because of my experiences at my company. Treat your access points like untrusted computers in the public DMZ. There is really no

RE: [ActiveDir] logon scripts

2004-04-12 Thread deji Agba
I don't have a Win9X to test this on, but Win2K/2K3/XP is fair game for this: Set wshNetwork = WScript.CreateObject("WScript.Network")Set wshShell = WScript.CreateObject("WScript.Shell") str_Group1_Share = "file://myserver/myShare1"str_Exec_Share = "file://myserver/myShare2"str_BS_Share =

RE: [ActiveDir] logon scripts

2004-04-12 Thread Rick Kingslan
Our solution (up to this point) has been Kix. Pretty much usable across multiple versions of Windows, and it's working quite well with a pretty rich set of tools and support. Look at the ScrptLogic site for some advice and freebie's as well as www.kixtart.org. KixTart was developedand is

RE: [ActiveDir] logon scripts

2004-04-12 Thread Rick Kingslan
Smart guy. :op -rtk From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of deji AgbaSent: Monday, April 12, 2004 11:13 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] logon scripts I don't have a Win9X to test this on, but Win2K/2K3/XP is fair game for this: Set

RE: [ActiveDir] logon scripts

2004-04-12 Thread deji Agba
I don't remember telling you my middle name :p Sincerely,Dèjì Akómöláfé, MCSE MCSA MCP+I Microsoft MVP - Active Directorywww.akomolafe.comwww.iyaburo.comDo you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: Rick KingslanSent: Mon 4/12/2004 9:19 PMTo:

RE: [ActiveDir] logon scripts

2004-04-12 Thread Rick Kingslan
LOL! -rtk From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of deji AgbaSent: Monday, April 12, 2004 11:28 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] logon scripts I don't remember telling you my middle name :p Sincerely,Dèjì Akómöláfé, MCSE MCSA MCP+I Microsoft