RE: [ActiveDir] User properties in ADUC

2004-04-30 Thread Coleman, Hunter
Download and install the Account Lockout Status tools. They will add in an Additional Account Information tab on the user properties that displays a bunch of useful information, including the last login timestamp. http://www.microsoft.com/downloads/details.aspx?FamilyID=d1a5ed1d-cd55-4829- a189-9

[ActiveDir] User properties in ADUC

2004-04-30 Thread Nathan Casey
Is it possible to display user last login information in user properties in Active Directory Users and Computers? Thanks Nathan

AW: [ActiveDir] help querying for groups

2004-04-30 Thread Ulf B. Simon-Weidner
Hi Mark,   first thing which comes to my eyes is that the base it not started and ended with "<" and ">", but the whole query including base, filter and scope is.   So what I'd try is modifying the line beginning with strBase with strBase = "LDAP://dc=my,dc=domain,dc=com;"   and the line star

RE: [ActiveDir] help querying for groups

2004-04-30 Thread rpuckett
Mark,   This works to return all domain global groups beginning with r*, however I'll say that if you're working with large directory spaces, it can take some time for a return.   Hope this helps, Richard   ---BEGIN CODE--- option expliciton error resume next   dim RootDSE, DomainNC, DNPath

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Passo, Larry
Here is a link to a VBscript that will do this:   http://www.microsoft.com/technet/community/scriptcenter/compmgmt/scrcm31.mspx   As mentioned, it only works with Windows XP or Windows Server 2003 boxes.   From: rpuckett [mailto:[EMAIL PROTECTED] Sent: Friday, April 30, 2004

RE: [ActiveDir] help querying for groups

2004-04-30 Thread Mikael Svennungsson
Maybe this could be some help? Probably not the most efficient code, but. it will echo all groups starting with Do* set oConnection = CreateObject("ADODB.Connection") set oCommand = CreateObject("ADODB.Command") set RS = CreateObject("ADODB.Recordset") Set oRootDSE = GetObject("LDAP://Root

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread rpuckett
Mark,   If you boxes are working with Windows XP, there are a few scripting options available to you that can help with this.  WMI's Win32_ComputerSystem class supports a method called JoinDomainOrWorkgroup, that will allow you to programmatically join systems to a target domain.  You could

[ActiveDir] help querying for groups

2004-04-30 Thread Creamer, Mark
Hi, can someone help me troubleshoot this script? I’m trying to return all of the global groups in the domain whose name starts with RPT. All I’m getting is the error: “Provider: Unspecified error”   strBase = ";" strFilter = "(&(objectCategory=group)(name=RPT*));" strScope = "Subtree"

[ActiveDir] Win2k SP4

2004-04-30 Thread Rimmerman, Russ
OK I finally broke down and upgraded the rest of our Win2k DC's to SP4.  Is there any important post SP4 hotfixes I should be aware of that apply to AD? ~~This e-mail is confidential, may contain proprietary informationof the Cooper Cameron Cor

Re: [ActiveDir] Storage of AD passwords???

2004-04-30 Thread Brent Westmoreland
The AD attribute for a user object password is a unicodePwd. If you use the inetOrgPerson object (which Joe strongly disagrees with) that is available in windows server 2003; the password will be concurrently stored in the userPassword and unicodePwd attribute. The values of these attributes

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Creamer, Mark
We are doing what you guys are suggesting to a point. Currently the vendor prepares the PC to the point where it’s ready to plug into the network at the remote location. When the end user receives it, if he follows the instruction sheet, he plugs it in to the jack and powers up. The PC get

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Rich Milburn
That depends on how well you automate the sysprep, I’ve had it so all the user had to do is turn the computer on, wait for it to reboot (about 3 minutes) and log on J Rich   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Friday, April 30, 200

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Roger Seielstad
Problem with Sysprep is that its not ready for the user to use. That would work well, however...   -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc.   From: Rich Milburn [mailto:[EMAIL PROTECT

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Rich Milburn
If you have them use sysprep with a script (sysprep.inf) and give them an account and password delegated to join the domain, then it would do what Roger suggested.  It works very nicely, and it can ask the user for their name when they boot it up if you want, etc – or it can be totally auto

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Roger Seielstad
It might make more sense to do something akin to a script of an application that they add to the runonce at startup - so when the machine gets booted for the first time, it joins the domain and is rebooted, then its ready to roll.     --

RE: [ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Mike Hogenauer
Mark,   I personally wouldn’t consider doing this but I can see why you might want to. AD can make your firewalls look like swish cheese. You could create an account for your vendor and delegate that account to join workstations to the Domain.   http://www.microsoft.com/technet/prodte

[ActiveDir] Joining Workstations to our domain

2004-04-30 Thread Creamer, Mark
Good morning, I’d like to see what the group thinks about this. We have a vendor who prepares PCs for us with our image, and then ships them out to our field locations pre-configured. They’d like to take that a step further, and actually pre-join the PC to the domain before it leaves their

RE: [ActiveDir] Replication issues

2004-04-30 Thread Grillenmeier, Guido
as Joe already wrote, there is a difference between "out of band" and "urgent" replication. any DC that you use to set a PW for a user also apply this change "out of band" to the PDCE of the domain => this is NOT urgent replication. It is referred to as immediate replication, al

RE: [ActiveDir] Replication issues

2004-04-30 Thread Rimmerman, Russ
Actually I went ahead and threw together a tool in Winbatch that resets the password on the local DC at the user's site, and our helpdesk is using now. So far so good. Thanks all. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Thurs

AW: [ActiveDir] Replication issues

2004-04-30 Thread Ulf B. Simon-Weidner
Hi Russ,   there's a additional tool which would be able to help you here. If you register the AcctInfo.dll on the Computers running Active Directory Users and Computers it extends the property pages of a useraccount by a Tab "Additional Account Information". On this tab you can see some more