RE: [ActiveDir] Identify STATIC records in AD DNS

2004-06-08 Thread Grillenmeier, Guido
usually static records also have different ACLs - i.e. records that were registered by machineX have an ACL which grant machineX write privs to the respective DNS AD object. note that by default in Win2000 a static record added to DNS by an administrator was granting Authenticated Users

RE: [ActiveDir] AD Design on a Highspeed Network considerations

2004-06-08 Thread Depp, Dennis M.
Murray, I like to follow the KISS principle. I would go with one AD site. At my core site, I would place two DCs and make them both GCs. I would pick at least one additional site where I would place a DC/GC. This machine will server as the disaster recover for my core site. If I have any

RE: [ActiveDir] Setting Desktop Settings via Group Policy

2004-06-08 Thread Roger Seielstad
I remember discussing an alternate option with some people at the Windows and Exchange Connections conference in Orlando last year. You could use something like WinInstall LE to build an MSI, which really just applies various registry settings and places files (like background images) in the

[ActiveDir] OT: Compaq Servers

2004-06-08 Thread Rutherford, Robert
Title: OT: Compaq Servers I'm sorry this is off topic but just thought I'd throw it out to see if I get a bite. It must be that time of year again a large number of new servers coming in.I don't want to, or have anyone else build numerours DL360's/380's .. All with more or less the same

RE: [ActiveDir] AD Design on a Highspeed Network considerations

2004-06-08 Thread Roger Seielstad
1) Do you centralize into 1 centralized site and back haul all network logon and exchange traffic to 1 site? I'd suggest different sites - the number of which is really dependent on how your physical topology is laid out. For instance, we've got 7 offices, connected by some fairly fat WAN

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Roger Seielstad
Title: OT: Compaq Servers Have you considered something like the Automated Deployment System? Its part of the Dynamic Systems Initiative and its geared towards this kind of deployment. Its also more or less free.

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Rutherford, Robert
Title: Message Thanks Roger, ADS does look sxy.problem is that we are still mainly W2K :O( -Original Message-From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: 08 June 2004 14:16To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] OT: Compaq Servers Have you

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread simon.geary
Title: Message Never used the scripting toolkit but I have deployed many a Compaq server with their Rapid Deployment Pack which can build a new server in a few minutes with a couple of mouse clicks. http://h18004.www1.hp.com/products/servers/management/rdp.html -Original

RE: [ActiveDir] OT: Exchange 2000 upgrade woes

2004-06-08 Thread Hunter, Laura E.
Let's reset: If I understand correctly, when you set the app to send email, you get the following ONLY in the log: 2004-06-07 18:12:32 %IP-ADDRESS-OF-WEB-SERVER% localhost.localdomain SMTPSVC1 HELO 250 2004-06-07 18:12:32 %IP-ADDRESS-OF-WEB-SERVER% localhost.localdomain SMTPSVC1 QUIT 240

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Frost . David
Title: Message I used Ghost to distribute Sysprep'd images either by Multicast or IP connections on DL380's. After the first build, each server was up and ready to run DCPromo within 10-15 minutes including the time to load the image over 100BaseT. You can save a lot of time with the

RE: [ActiveDir] Very OT

2004-06-08 Thread Kern, Tom
I get unterminated string constant at the end of the first line of your script. I'm a perl guy, not vbs, so I don't quite know where I'm supposed to terminate(quote) the line. Thanks, sorry to be a pest. -Original Message- From: Steve Patrick [mailto:[EMAIL PROTECTED] Sent: Friday,

RE: [ActiveDir] Very OT

2004-06-08 Thread Lou Vega
This part: ' set events = getobject(winmgmts:\\.).ExecNotificationQuery(select * from __instancedeletionevent within 2 where targetinstance isa 'win32_process' and targetinstance.name = 'notepad.exe') Should all be on one line - no carriage

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread volker . seyboldt
You can use also our tool RemoteDeploymentPackage (http://h18013.www1.hp.com/products/servers/management/rdp.html). RDP offers templates to deploy,image and re-deploy servers-images and also additional software. RDP is based on Altiris solution I used Ghost to distribute Sysprep'd images

RE: [ActiveDir] Very OT

2004-06-08 Thread Marcus.Oh
It's the word wrap Ken... that first line should be all one line or each line terminated with an underscore. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, June 08, 2004 9:56 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Very

RE: [ActiveDir] Very OT

2004-06-08 Thread Roger Seielstad
Its quoted correctly, but you need to combine the first three lines into one - the CRLFs added by the mail systems are tanking it. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Rutherford, Robert
I've spied the RDP tool before and it does look like a quality system, but can't really warrant the £££. If I remember it was expensive. **drifts off to dreamland** Oh how I wish HP would provide me with a simple and free tool... Or a good old gui based front end to produce a script. **wakes

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Kitchens Arthur E
Title: RE: [ActiveDir] OT: Compaq Servers I believe RDP is free. The smartstart cd *is* free and you could build a master image with that then distribute/implement with any of the methods/tools previously mentioned in this thread. You can also get a 30 day eval license for the altiris

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Ken Cornetet
How about building your gold system, run sysprep, mirror the drive, then break the mirror (you are talking about systems with integrated RAID, right?) Then, use this gold disk as a master for each new system - insert master disk and blank disk, power up to raid config, rebuild mirror, remove

[ActiveDir] DNS Question

2004-06-08 Thread John Parker
Hey all. I am running win2k fully spacked on a win2k active directory domain. I have one machine... (Mine) that has the following issue When I go to save a document and I click the Drop down to select a location, My system takes up to 30 seconds to display the tree. And when using my browser, it

RE: [ActiveDir] DNS Question

2004-06-08 Thread Rutherford, Robert
Have you got an old invalid share mapped? This will cause both issues you mention. -Original Message- From: John Parker [mailto:[EMAIL PROTECTED] Sent: 08 June 2004 15:51 To: [EMAIL PROTECTED] Subject: [ActiveDir] DNS Question Hey all. I am running win2k fully spacked on a win2k

Re: [ActiveDir] DNS Question

2004-06-08 Thread James Payne
I had the same problem with 3 workstations in a similar environment. It was because we still had a mapped drive that did not exist anymore. Not saying that is your resolution but just throwing in my experiences.

RE: [ActiveDir] DNS Question

2004-06-08 Thread John Parker
That was it. Thanks guys... John Parker, MCSE IS Admin. Senior Technical Specialist Alpha Display Systems. Alpha Video 7711 Computer Ave. Edina, MN. 55435 952-896-9898 Local 800-388-0008 Watts 952-896-9899 Fax 612-804-8769 Cell 952-841-3327 Direct [EMAIL PROTECTED] Be excellent to

RE: [ActiveDir] Exchange and Server 2003 Management

2004-06-08 Thread Salandra, Justin A.
To install the exchange tools on a server other then the exchange server, you need to install IIS first. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long Sent: Friday, June 04, 2004 4:25 PM To: [EMAIL PROTECTED] Subject:

RE: [ActiveDir] OT: Exchange 2000 upgrade woes

2004-06-08 Thread Mulnick, Al
Then that sounds like your app is doing something it shouldn't. Can you get logging on the app else a netmon cap of the conversation? Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hunter, Laura E. Sent: Tuesday, June 08, 2004 9:43 AM To: [EMAIL

Re: [ActiveDir] Very OT

2004-06-08 Thread support
Hi, I presume you actually want to know that it is still operational, rather than whether it still exists as a task. The standard way I do this is to put a heartbeat in the program to write status info to the registry every (say) minute including the current time. You then monitor the registry

RE: [ActiveDir] Very OT

2004-06-08 Thread Kern, Tom
I would actually want to monitor 3 programs and be emailed(cdo) rather than msgboxed if one or all dissapeared from the task manager process list. I can't change the program to write to the registry as i didn't write it and i would be stepping on some toes. more importantly, my knowldge of VB

RE: [ActiveDir] Very OT

2004-06-08 Thread Lou Vega
If you want Tom - e-mail me off list and I'll do what I can to help you customize this script. r/ Lou -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Tuesday, June 08, 2004 3:42 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Very OT

[ActiveDir] OT again

2004-06-08 Thread Kern, Tom
Anyone know of a really good book on using perl for Win32 admining. Stuff that covers adsi,wmi,wsh,etc? Stuff thats up to date. I've used Dave Roth's Win32 Perl scripting:the administrators handbook, but found it alittle out of date and lacking in alot of repects. I've also downloaded robbie

[ActiveDir] Root Hints

2004-06-08 Thread Rimmerman, Russ
We keep wiping out our root hints from our Win2k DNS servers, and they keep repopulating. Is this something that replicates between DNS servers, or will it just not allow our root hints to be blank? Our firewall is a DNSD server and so we forward everything to the firewall for external DNS

RE: [ActiveDir] Root Hints

2004-06-08 Thread Dean Wells
Check the Do not use recursion box on the Forwarders tab to prevent the further use of recursion. The root hints are being repopulated by the DNS servers, you can get rid of them if you're prepared for a fight but they're there for a good reason. The check box I mentioned achieves a more

[ActiveDir] Preventing a DC from authenticating users

2004-06-08 Thread Fugleberg, David A
I want to stop a specific DC from authenticating users as part of a test. The server also provides DNS for the clients, so I don't want to shut down the box during the test - I just want it to be 'invisible' to clients looking for a DC for the duration of the test (a couple of days max). Is

[ActiveDir] Checklist for changing IP Address on DC

2004-06-08 Thread Devan Pala
Hi all, I have2 DC's in a site that need IP's to be updated to reflect network changes. Both DC's are DNS servers (ADI), DHCP servers (with manual redundant scopes, which are not changing). Each point to themselves for DNS and the other for secondary, with forwarding enabled to the forest root

RE: [ActiveDir] AD Design on a Highspeed Network considerations

2004-06-08 Thread Mulnick, Al
Design Questions 1) Do you centralize into 1 centralized site and back haul all network logon and exchange traffic to 1 site? I don't think that's a requirement. I like Roger's thinking on this, but I'd be concerned with available bandwidth and not just the amount of

[ActiveDir] Root Hints question

2004-06-08 Thread Rimmerman, Russ
When you modify root hints on one domain controller, does it replicate to other domain controllers? It seems like whenever someone changes root hints on one of our DCs, the other DCs get the same root hints. Is that possible? ~~ This e-mail is

RE: [ActiveDir] Preventing a DC from authenticating users

2004-06-08 Thread deji
net stop netlogon should do it for you. Of course, your other DCs and KCC will be screaming at you, but you already know there's an intentional outtage. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now

RE: [ActiveDir] Setting Desktop Settings via Group Policy

2004-06-08 Thread Rick Kingslan
Yep - that, too, is a good solution. The only bad thing is that most folks don't have the skills (No offense, Raymond, as I don't know you) to build MSI packs. Microsoft, nor most of the third party vendors have made this overly easy. That said, yes - the MSI pack and setting all of the

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Rick Kingslan
Title: OT: Compaq Servers Rob, Being completely hardware agnostic, look at the Automated Deployment tools (ADS). Look at it as like a RIS for servers - on steroids. Rick Kingslan MCSE, MCSA, MCT, CISSPMicrosoft MVP:Windows Server / Directory ServicesWindows Server / Rights

RE: [ActiveDir] OT: Compaq Servers

2004-06-08 Thread Rick Kingslan
Title: RE: [ActiveDir] OT: Compaq Servers Sadly, HP/Compaq flat pissed me off with orphaning all of my '2nd gen' systems to Windows 2000, unless I don't want to use SmartStart for anything other than coasters. So, I really have no need for the 6.0 stuff that they keep sending me that DOES

RE: [ActiveDir] Checklist for changing IP Address on DC

2004-06-08 Thread Rick Kingslan
Devan, Looking over your plan - it all looks fine. You should be quite successful with getting the IP update done. However, I would like to submit and suggest that instead of DC1 DNS being set as: Primary: DC1 Secondary: DC2 Set it like this: Primary: DC2 Secondary DC1 If you have more

RE: [ActiveDir] Checklist for changing IP Address on DC

2004-06-08 Thread Devan Pala
Hi Rick, Ah yes, the 'Island' issue...fortunately these are the child domain controllers (NOT authoritative for the _msdcs.ForestDNSName zone) the root domain controllers at our hub site are setup as you suggested 8-)). That is why I have this particular zone setup as secondaries on all child

RE: [ActiveDir] Root Hints question

2004-06-08 Thread Bernard, Aric
If I remember correctly, the root hints entries are stored in AD if DNS is installed on a DC. - Aric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Tuesday, June 08, 2004 3:47 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Root

AW: [ActiveDir] Setting Desktop Settings via Group Policy

2004-06-08 Thread Ulf B. Simon-Weidner
Hi Raymond, one thing that didn't get mentioned: If your users don’t have a profile right now, you can change the default profile as well instead of assigning a mandatory (where the changes a user make will be lost after every session). The default profile is being used if a profile of the users

AW: [ActiveDir] Root Hints

2004-06-08 Thread Ulf B. Simon-Weidner
Hello Russ, they just get repopulated if you delete all of them (keep one and it doesn't get repopulated). There are multiple instances where you need to change to keep them from repopulating. One instance to change that is the checkbox Dean pointed out, but what I also like is just putting in