Title: RE: [ActiveDir] win98
Hello,
I have a query here. I would like
to track the permission on a specified folder for users ( Modify,Full
Control, etc etc...) that can display on the intranet page or any other ways. Is
that any Tools that can do this ? Would be great too if there is any
Title: RE: [ActiveDir] win98
Lots of third party tools to do this –
I did exactly this for a client the other day using Quest Reporter –
published to HTML, excel, whatever automatically & collected into a DB for
auditing – was an auditing requirement for a health provider.
File/folder mod
Title: RE: [ActiveDir] win98
Have a look at NetIQ FSA. It can do this and
a lot more than this.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kenny Lee
Sent: 27 May 2004 10:23
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Users file
permission display on intranet p
Check out this MS KB article. 832539
Thank You,
Kurt Canzoneri, MCSE
Infrastructure Architect
EIG
Valassis / Operations
47585 Galleon Drive
Plymouth, MI. 48170
Tel 734-354-2496
Fax 734-354-2694
[EMAIL PROTECTED]
www.valassis.com
This message may have included proprietary or protected informati
Does everyone use terminal services for remote administration of all their
DCs, Fileservers, Exchange Servers, or is there something else you like
better?
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.
Title: Sysvol Damaged
Guido/Al, thanks for the help. I think I got what I need now.
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of Grillenmeier,
GuidoSent: Monday, May 24, 2004 10:53 AMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Passwor
It's convenient to use. There are things you can't do while you have a
session open. Overall, it's adequate for us, all things considered.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Douglas M. Long
> Sent: Thursday, May 27, 2004 8:37 AM
> To
Tend to use TS on an everyday level... and also Dameware for
emergencies.
-Original Message-
From: Douglas M. Long [mailto:[EMAIL PROTECTED]
Sent: 27 May 2004 14:37
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Terminal Services for administration
Does everyone use terminal services fo
I use TS for a lot of admin work, but we also use dameware, since it allows
for a console session on W2K machines (which we have a lot of, as well as a
few remaining NT 4 boxes). It's got some bugs, but it's easy to use and the
dameware utilities allow a lot of centralized remote management. We use
Hello,
Does everyone use any software to audit pages printed ?. Another
solution ?
Thanks.AVISO LEGAL:Esta informacion es privada y confidencial y esta dirigida unicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha inform
I prefer to use remote tools from workstations. When you log directly into
servers there is a higher probability of doing something bad by accident.
There are some things you can't do remotely but they should be things you
don't have to very often at all, like for instance recovery mode on a DC.
I use TS all the time.
There is a console switch in Windows Server 2003, and supports the
Remote Desktop Protocol (RDP) 5.1 feature set It also has the ability to
remote the actual console session of the server.
Joe brought up an interesting point, certain things should not be from a
rdp session
Pcounter here
http://www.andtechnologies.com.
IT can pull the users from AD and do just about everything you need. The price
was right as well
Rick Gasper
Manager Network
Services
King's College
Wilkes-Barre PA
18711
[EMAIL PROTECTED]
PH:
570-208-5845
Fax: 570-208-6072
Stay native as much as possible here... TS unless TS is crapped out...
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long
Sent: Thursday, May 27, 2004 9:37 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Terminal Services for administration
Return Receipt
Your RE: [ActiveDir] Terminal Services for administration
document
:
I’m trying to use the OLEDB provider to link
AD to SQL server to run some add hoc queries. It’s returning an error:
Server: Msg 7321, Level 16, State 2, Procedure vw_AD_USER_INFO,
Line 4
An error occurred while preparing a query for
execution against OLE DB provider 'ADSDSOObject'.
OLE
Good morning,
Some days ago i had to manually remove a dead Win2000 DC from our network,
according to Q216498 and
http://www.winnetmag.com/Article/ArticleID/13414/13414.html.
Removal semeed ok. Today i got the following event in my log. I believe it's
an expected warning, however i'd just want to
Title: Sysvol Damaged
Below is a quick and dirty perl script to do it to
give the perl viewpoint for anyone wondering, hey how do I do this in perl.
:o)
You will feed it the following command line
args
input file name. This is a file which one id per line like
joe\joeuser
output file nam
Are these different forests?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Wednesday, May 26, 2004 4:44 PM
To: ActiveDir (E-mail)
Subject: [ActiveDir] user script
would this script let me add users from domain A to universal group in
Sorry on the delay on this...
I just wanted to say that RUS is responsible for
pulling things into and out of the GAL and updating A.L.'s , etc. If
the user objects are in the GAL at all, the RUS has done its job. The
client should be calling out to get the rest of the info. Depending on t
Go in sites and services and delete any server objects relating to the
deleted server.
BR
Rob
-Original Message-
From: J0mb [mailto:[EMAIL PROTECTED]
Sent: 27 May 2004 15:53
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Manual DC removal & EventID
Good morning,
Some days ago i had to ma
I agree with Deji. These slow your server down considerably every time it is
hit. Personally I think the issue is a stupid one but MS stands behind it.
They assume that if the userid is disabled and the user object has mail
information the only possible reason is that the mailbox is supposed to be
Exactly
you can
SYSPREP is driven by a file of configuration.
From: "Chris Blair" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: <[EMAIL PROTECTED]>
Subject: [ActiveDir] Imaged Computers
Date: Wed, 26 May 2004 09:56:07 -0500
MIME-Version: 1.0
Received: from mail.activedir.org ([64.245.160.7])
Mark,
I tried your SQL-statement with a linked server and it works perfectly.
What account are you running the linked server as?
Our experience is that if you change the account information used for the linked server, you should delete it, create a new and set the account info before you h
Hi List
I have been lurking for about a year and have pulled a lot of knowledge and
information from the list - thank you all. I do have a specific issue I
wanted some opinions on regarding DNS.
Our current configuration is a 10 domain AD 2003 functional forest, with 1
empty root and 9 child
I believe i already did it, i followed the article step-by-step. That's why
i was worried i might have forgotten something.
i'll have another check tomorrow, now i am out of office.
Thank you.
> Go in sites and services and delete any server objects
> relating to the deleted server.
>
> BR
>
Mikael, I
wonder if I can get a little clarification. When you say what account am I
running the linked server as – maybe I made an assumption about how it
should work. What I did was log in to a test SQL server using the Query
Analyzer on my own system. I used Windows Authentication to gai
I
began receiving calls yesterday about a strange looking error that users were getting
at logon. Here is the message:
Cannot
find the file ‘/idlist,:0:1140,\\DOMAINCONTROLLER\NETLOGON’ (or one
of its components).
I
originally thought that it may be an issue with a script I was pus
no. same forest, 2 diff. domains. child to root.
i read in robbie allen's book(ad cookbook) that the "member of" attribute will only
list the user's domain not other domains. is this the issue?
do i need access to a gc to do this? do i need to use "member"?
how does one manipulate info on a gc? do
no. same forest, 2 diff. domains. child to root.
i read in robbie allen's book(ad cookbook) that the "member of" attribute will only
list the user's domain not other domains. is this the issue?
do i need access to a gc to do this? do i need to use "member"?
how does one manipulate info on a gc? do
Has anyone installed SP1 for Exchange
2003? Did you have any problems, quirkiness or issues on your exchange server,
domain or the Active Directory? I am just looking for some input.
Thanks,
S
We have some DCs in locations that probably no longer justify a local DC. I'm trying
to do some quantitative analysis to see just how busy the DC is in those locations.
I'd like to dcpromo some of them down if possible so the boxes can be used as member
servers. The business want to install I
OK, the reason I thought that was the way the DNs were specified below.
Memberof is a funny attribute, first off it is a link to the group attribute
member. Depending on what port and machine you query in a multidomain
environment, you could get different responses as it is based on what group
me
no. same forest, 2 diff. domains. child to root.
i read in robbie allen's book(ad cookbook) that the "member of" attribute will only
list the user's domain not other domains. is this the issue?
do i need access to a gc to do this? do i need to use "member"?
how does one manipulate info on a gc? do
Mark,
Delete the linked server.
Create a new linked server using the Enterprise Manager.
Name it and choose datasource.
I tab Security, try "Be made using this security context" and enter domain\username and password.
Run your script in Query Analyzer.
Regards,
/MS
From: Creamer, MarkS
Great question! And your approach is solid.
I'd probably encourage you to take a slightly different direction in
terms of coming to the answer. The answer isn't as much "how busy is
this DC" so much as it probably is "what is the user impact if we remove
this dc." That is, we want to know user imp
Mikael,
that worked perfectly. What a huge help this is going to be. Thanks for your advice!!
-Original Message-
From: Mikael Svennungsson
[mailto:[EMAIL PROTECTED]
Sent: Thursday, May 27, 2004 2:10
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] linked
server error in
Anytime ;-)
Glad that I could help you
/MS
From: Creamer, MarkSent: Thu 2004-05-27 20:28To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] linked server error in SQL/AD query
Mikael, that worked perfectly. What a huge help this is going to be. Thanks for your advice!!
-Original Messag
I knew ~Eric would be all over this thread...
The thing I would add would be is the DC also a DNS and/or WINS Server. If
so, take those things into account for WAN traffic.
What you may want to do is force coverage of the site from the site you
think will pick up the requests once this DC goes a
I have never seen an error like that so once you nail down
what is running that is throwing the error up, then we can go from
there.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Raymond
McClinnisSent: Thursday, May 27, 2004 12:41 PMTo:
[EMAIL PROTECTED]Subject:
I would say the DC is simply telling you it is cleaning up its topology, as
long as you went through and did the proper cleanup procedures I wouldn't be
worried.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of J0mb
Sent: Thursday, May 27, 2004 1
Seems like if you have a log scraping monitoring system you
could just configure it to pick up the print events. I could be wrong though as
I haven't done anything in that area in years and years.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]Sent:
Blush! First, I belong to another list for Mac admins. On that one you are
supposed to post summaries after questions. I obviously posted to the wrong
list.
That said, thank you for further responses.
As for Danny's point about the home directory issue in the demo: during the
web cast on AD i
Title: Message
This may be obvious but I would still be wary of the disk
on that machine... Get the vendors low level test tools and run it against the
disk to see if it should be replaced.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin
A.Sent: Mon
Just a guess.
Check the registry on the workstation. That file
error throws some hits on the net referring to shell
startup.
This maybe the key. You can search the registry and
find a reference to the idlist portion of your error. I wouldn't rule out
GPO just yet either as it could be s
Oh yeah, one other thing that is *possible*
http://www.jsiinc.com/SUBP/tip7500/rh7557.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Thursday, May 27, 2004 3:20 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] strange error on
logon
I have never seen an err
Thanks for the comments. You're absolutely correct that we're looking for the user
impact - knowing the "busyness" of the DC is just part of the equation. I'm also
looking at the number/type of workstations, usage patterns, etc.
I intend to track the metrics I mentioned on all DCs (not just th
Have you seen:
824204 You receive an "Error at logon:
Cannot find the file..." error message
http://support.microsoft.com/?id=824204
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mulnick, Al
Sent: Thursday, May 27, 2004 2:51 PM
To: '[EMAIL PROTECTED]'
Has anyone managed
to find complete documentation of all of the changes made with Exchange 2003
SP1? The release notes fall short of mentioning exactly what
updates/changes were made although I have looked briefly and there seems to be
more control available to the user through OWA (Option
AL,
Thank
you, Thank you, Thank you!!!
We’re
in the process of removing a dead SMS 2.0 server and a number of users had
smsls.bat as their logon script. I used Hyena to remove the logon, bu I
must have typed a space into the field instead. I spear though I looked
for just “/idlist” a
Or if 2k03, you could probably do stub zones. I've only done stub zones
out in the field as ad-integrated stub zones, but I would assume that
they can be done as standalone too.
It always comes down to cost benefitlarge enough user base in a site
justifies the DC.
As you start to get data fee
It's my understanding that this information will be
released ASAP. I know that it was definitely in the works last
night.
Missy Koslosky
Exchange MVP
- Original Message -
From:
Michael Wassell
To: [EMAIL PROTECTED]
Sent: Thursday, May 27, 2004 4:14
PM
Subject:
For you? No problem ;)
Glad it worked out (never know when a shot in the dark
might be helpful).
Al
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Raymond
McClinnisSent: Thursday, May 27, 2004 4:23 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] strange error on
logon
That support search engine must have missed it
:)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Eric
FleischmanSent: Thursday, May 27, 2004 4:04 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] strange error on
logon
Have you seen:
824204 You receive an "Error at logon
Searching KB is an art, so you can call me
Picasso. ;)
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Thursday, May 27, 2004 4:01
PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] strange
error on logon
That support search engine must
As I read through this whole thread there was a couple of other things I
noticed if you don't mind if I ramble for a bit...
Objectcategory=user doesn't exist, that will be converted to
objectcategory=person, see below on what that will do for you.
ObjectClass=user is even worse. What happens wit
Yep, too bad so many Windows folks are pushed to the
limit with Spirographs Picasso :o)
Just buy google already... Petty cash, whip it out. Let
people beat on MS for a while for using linux machines to find content at MS
while it gets assimilated.
joe
From: [EMAIL PROTECTED]
I didn't see any responses on re-acling so I would say take a look at subinacl.
joe
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Tuesday, May 25, 2004 11:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Ad forest migration
any
If you cannot have universal security groups in a mixed mode AD forest, how is the
Enterprise Admins a universal security group and what functionality does it lose in
mixed mode as opposed to native mode?
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org
Title: Message
Hmmm theoretically , the permissions are probably
stored in the registry The most likely place would be someplace say
like
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal
Server\WinStations\RDP-Tcp
possibly in the Security value.
Now theoretically if yo
Title: Message
This article might help!
http://briandesmond.com/blog/archive/2003/11/25/251.aspx
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, Robert
Sent: Wednesday, May 26, 2004 6:30
AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Test Lab
Nothing free. :oP
However Vintela and other companies are working on making this A LOT easier
for a price. I expect in another year or so *nix machines will hardly be any
more hassle to manage in an Enterprise than Windows machines.
I doubt anyone will do something in this arena for free. It isn
I doubt the GPO is it, could be wrong, but doubt it. However what did you
change in the GPO?
What does repadmin /showreps say on the DC trying to pull?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy Teverovsky
Sent: Wednesday, May 26, 2004 11:40 A
That is the WMI Provider Subsystem Host according to my registry.
Looking on a DC it is set for an identify of "The launching user". Are you
saying yours is hard configured to a specific userid?
That configuration I mention above is on xp client, my k3 test dc, and my k3
test member I currently h
I love how Tony can kill a thread by contributing.
:o)
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony
MurraySent: Sunday, May 23, 2004 10:21 AMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Discontinue Mail
Membership
In general, yes. Although we do gener
Nope but it doesn't matter. If they can install a service (or replace a file
a service uses) they have too much power, let alone schedule a task. Heck
when you get down to it, physical access to the box is all that is needed
but we try to forget that one or else no one would ever put a DC anywhere
Hiding the user from the ADUC and other LDAP based tools would be fairly
trivial, you just have to throw the users into an OU with locked down perms
(like only let the admin groups and system have access) and then strip the
perms on the user objects themselves of everything but administrators.
How
Yeah, I love/hate that guy
> From: joe <[EMAIL PROTECTED]>
> Reply-To: <[EMAIL PROTECTED]>
> Date: Thu, 27 May 2004 19:22:10 -0400
> To: <[EMAIL PROTECTED]>
> Subject: RE: [ActiveDir] Domain Controller Security...
>
> Nope but it doesn't matter. If they can install a service (or replace a fi
Yeah deploy this in production and depend on it, then roll
out a hotfix or SP that overwrites the gina bins and bam, you've lost your
functionality.
bginfo is very cool. I've seen something similar that I
thought was from MS running on Exchange Servers before too... Possibly part of
some
Yep, good thing to publish. Another cool thing, something I actually was
involved in a lot of the testing over the last year or so is
http://www.microsoft.com/downloads/details.aspx?FamilyId=3D0884E6-C603-491D-
BF57-ACF03E046BFE&displaylang=en
This is the autoaccept agent for conference rooms. Y
It is a global group until the root domain goes to native mode. Ditto for
the schema admins group.
Functionality lost would be that you couldn't place users from any domain
other than the root into the group until you go native.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:
Title: task pads
Yeah first thing I thought was script the move and have it
done via a web page... You have full tracking and don't have to delegate
anything - just let the web site have the perms.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gasper,
RickSent:
Title: Re: [ActiveDir] SUMMARY: Mixed network PC and Mac -> AD or XServe
Hi Noah,
FYI
I just finished up my 10.3.4 testing for the ADPlugin and it appears to resolve all of my previous issues with obtaining a TGT at login. I would say that the ADPlug is now ready for prime time.
Entourage 2004
Title: Re: [ActiveDir] hitting users
Alternatively, you could just delete all the users. It would have about the same effect as removing localsytem access, but I find it to be a cleaner solution. This would also solve the problem of those nasty little legacy API calls. ; )
But maybe what you
i have a user(blackberry service account) who has full exchange admin rights on our
admin group, now suddenly(i know there is no "now suddenly", but nothing changed,
honest), blackberry service wont start and when i open exchange manager, i can't see
any admin group logged in as the blackberry
Title: Re: [ActiveDir] hitting users
Hmmm. I hadn't thought of that method. Very easy to
implement. I like it. Should cut down on password issues as well. "I can't log
on..." " Of course you can't." :o)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brent
WestmorelandSent
Title: Re: [ActiveDir] SUMMARY: Mixed network PC and Mac -> AD or XServe
That is good news. I see that 10.3.4 is
available via Software Update.
So, with the volumes, were the Macs using
SMB just for testing (since AFP worked fine)? Or is SMB standard regardless of
the server OS and you
Title: RE: [ActiveDir] win98
Thanks Nicholas. I will try that out.
- Original Message -
From:
Nicolas Blank
To: [EMAIL PROTECTED]
Sent: Thursday, May 27, 2004 4:55
PM
Subject: RE: [ActiveDir] Users file
permission display on intranet page or to file
Lots o
Install adminpak.msi available in the C:\windows\system directory of any server, also it is available on the server cd.
On May 27, 2004, at 9:12 PM, Caple, Andrew wrote:
I'm sure this is an easy one I'm currently setting up some Support Desk PC's and need to give them access to Users and
Title: Message
Install Adminpak.msi (you'll find it in the i386 folder on the
Windows200x Server CD). It will install of the admin snapins
Make
sure that you use the 2003 version for XP clients
-Original Message-From: Caple, Andrew
[mailto:[EMAIL PROTECTED]Sent: Thursday, May 27,
Right, the salient point here is that it is not the forest that has
mixed/native mode associated with it, it is the domain that has a
functionality level tied in.
Until 2k03 there is no concept of forest functional level, and then in
2k03 we don't called it mixed vs. native, it is either 0 (nt4, 2
81 matches
Mail list logo
