RE: [ActiveDir] Extending ADUC

2004-04-23 Thread Nicolas Blank
If you want to have something show up on the users property pages, then you need to register a handler to do so, see the MSDN link. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/e xtending_the_user_interface_for_directory_objects.asp for another view on this, see this

RE: [ActiveDir] Clustering

2004-04-23 Thread simon.geary
If the object here is to save money by not having an external array then Majority Node Set quorums will not really help as they require at least three nodes to be redundant so the money you save is spent on an extra server. MNS is pitched more at geographically separated nodes rather than a

RE: [ActiveDir] Login script problems

2004-04-23 Thread Mulnick, Al
Ryan, just a thought in the future. .bat files can be more difficult to troubleshoot than a script. You may want to consider something scriptable on the .net platform for the future and get familiar with the IDE's etc that can make your troubleshooting much easier. -al From: [EMAIL

[ActiveDir] Login Script problems round 2

2004-04-23 Thread rmcdonald
Okay I got the script working 100% right, now I have 1 strange problem. When I reboot the computer and login I do not get the login scripts, If I log off the computer and log back in I get the scripts fine. I have no idea now and any help would be great! Ryan smime.p7s Description: S/MIME

FW: [ActiveDir] OT: Exchange 2003 April rollup

2004-04-23 Thread Salandra, Justin A.
Has anyone applied this to a test or production environment yet? If so what feedback do you have on it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Wassell Sent: Tuesday, April 20, 2004 2:16 PM To: [EMAIL PROTECTED] Subject:

RE: [ActiveDir] DNS Server Using its own IP as a Primary DNS

2004-04-23 Thread Fugleberg, David A
IIRC, the 'island problem' in W2K happened when a DC that pointed to itself for DNS registered its GUID CNAME record in its own AD-integrated copy of the _msdcs zone, but since nobody else knew about it they could never replicate it from there to the rest of the domain. Can you elaborate on

RE: [ActiveDir] Active Directory and Bastion Hosts

2004-04-23 Thread Mulnick, Al
I agree with Roger on that. Active Directory *can* be used, hardened etc. (see the nsa docs for hardening guides as well as the Microsoft stuff on the subject). But why? Why do you need the overhead of Active Directory as a bastion host? Answer that question and you can decide if it fits.

RE: [ActiveDir] Active Directory and Bastion Hosts

2004-04-23 Thread Edwin
Well, the problem is that our network may be integrated with another network. The other network has Active Directory and we do not. We have other methods in place of managing the servers as needed. They use Active Directory for whatever reasons that they do previous to our relationship

RE: [ActiveDir] Active Directory and Bastion Hosts

2004-04-23 Thread Roger Seielstad
Ahh yes. The wonderful MAD (merger/acquisition/divestiture) scenario... To think, that little bundle of joy got me nicknamed Iron Chef - Migration by a former boss. So, as I understand it, they have bastion hosts that are part of their internal forest. I'd call that risky at best. If they

RE: [ActiveDir] Active Directory and Bastion Hosts

2004-04-23 Thread Mulnick, Al
Would a domain compromise be any more risk in your opinion, than the compromise of some other IAA (Identification, Authentication, Authorization) mechanism that was used? Or is the main problem that it'sMicrosoft and theirsecurity reputation (real or perceived)? If security is about

[ActiveDir] DR doc

2004-04-23 Thread Creamer, Mark
Does anyone know if the AD DR document located at http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/support/adrecov.mspx is available as a Word document somewhere? I had thought it was maybe that was a previous version? Mark Creamer Systems

[ActiveDir] Ldap - linux slowdown in searching

2004-04-23 Thread Jennifer Fountain
Title: Ldap - linux slowdown in searching I am running into an issue with my linux boxes and ldap lookups on my DCs. About 4:30 each Friday (and usually last all weekend), my ldap searches go from 1 sec to 8 secs. I have been checking for increase in network activity (such has backups, etc)