Title: Message
MS and
HP working hand in hand to shaft the customer base well they alsodo it
with loads of other vendors also, i.e. Veritas.
Rob
-Original Message-From: Rick Kingslan
[mailto:[EMAIL PROTECTED] Sent: 09 June 2004 02:02To:
[EMAIL PROTECTED]Subject: RE:
RDP isn't free and you have to buy a license for every server under its management.
-Original Message-
From: [EMAIL PROTECTED] on behalf of Kitchens Arthur E
Sent: Tue 08/06/2004 15:38
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [ActiveDir]
Title: RE: [ActiveDir] OT: Compaq Servers
Rick,
Im not quite sure what you mean by
this. Sure, SmartStart version 6.x is only *really*
useful for G3 based computers, but there isnt anything stopping you from
using SmartStart 5.5x on older and newer hardware.
We have a unified build
Ken,
I know the Compaq RAID array isn't as flexible/forgiving as the old HP
NETRaid, but I think as long as there are no other drives installed, this
*might* work.
Heh, you obviously havent played too much with the Compaq/HP SmartArray
controllers too much. We use them exclusively at my
Hi,
We have a network of some 8,000 workstations running Windows 2000.
Approximately 5 are still reporting an old Group Policy Object being applied
for the user component of Internet Explorer.
When I check the UserEnv.log they all have these entries
USERENV(a8.3a4) 15:35:17:534 ProcessGPOs:
Aric is dead on. I had the same problem as Russ with my AD Integrated
Zones. Russ, if you open ADUC and do View-- Advanced Features, under
the System Folder, there should be a folder called MicrosoftDNS. You
will find the Root Hints in there, once you delete them from there they
won't come
I am
having trouble making sense of IE proxy GPO settings. Any Thoughts much
appreciated.
I have
defined the IE proxies in the Default Domain Policy for all Domain Users.
Everything (IE and other apps that use IE proxy config) works fine for normal
logins. The Weird things start happening
Title: RE: [ActiveDir] OT again
Try this;
www.activestate.com
I found it to be quite helpful as I am needing to do the same as you.
Daniel E. Rodriguez
Information Technology
Emerson Process Management
Fisher Controls Division
Sherman, Texas
(903)868-3357
[EMAIL PROTECTED]
Hi all,
It's my first post here. I've been referred here and
been told that you guys were the real gurus of AD. I have a strange
thing happening and I would like to have your thoughts about it.
Here is the situation, I created a group called technicians and I gave
the
user right
Hello,
I'm going to start
evaluating software packagers to create software installations for distribution
using Active Directory. Can I get some recommendations on some? Like
Winnstall, Installshield, etc. How easy are they to get up and
running? Any gottcha's with making packages?
Thanks
Just clarifying It appears that you are saying ... when you first
designate the rights that members of the technician group can add wks to
the domain and the next day they cannot?
Are the rights still set on the next day as you defined them on the
first day? Or are the reverting back?
Title: Message
Depends on how many packages you are going to package and how regularly?
I found the Wininstall LE (free with W2K) does the job most of the time
needs tweaking every now and again but no real pain.
Many
people specialise in this area and will be able to be more helpful
Do you have a GPO that is specifying that specific user right? You can
check with GPRESULT.EXE
-Original Message-
From: Rutherford, Robert
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 09, 2004 7:55 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] strange thing...
Just clarifying
Hi Roger,
This is interesting. When I was going through the design process a couple of
years ago that was pretty much the best practice according to Microsoft
(primarily the Branch Office guides) where the 'island' problem was laid
out. We also had this validated by an external source.
Our
Question;
when you run gpresult and in the section 'The user is a memebof the
following security groups:' it lists the groups. But what does it mean when
it lists the group twice? I am getting identical listings in this list.
Daniel E. Rodriguez
Information Technology
Emerson Process Management
None taken...:-) I've built my share of MSI packs with good results. I've
been using Installer2GO, it's doesn't have that much of a learning curve
either. I'll probably just end up scripting this out to tattoo the registry
and copy the files I need.
Thanks to everyone for all the input.
Hi Daniel
Can you post the gpresult output?
Tony
-- Original Message --
From: Rodriguez, Daniel [EPM/SRM] [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Wed, 9 Jun 2004 10:36:04 -0500
Question;
when you run gpresult and in the section 'The user is
Hi David...
I've seen behavior like this myself. I've defined a software restriction
policy at the domain level, for when we get a worm in house and i can get
my hands on code. This is processed before the default domain policy, and
we also have a modified domain policy at that level.
At
We have a standalone
Win2k domain of a company we purchased and we have our own standalone single AD
domain. We have an empty forest root domain and our child domain.
They have the same. We want to consolidate the two domains, so we set up a
two-way trust. We have Quest Fastlane Migrator
Title: RE: [ActiveDir] question on gpresult.exe
Here you go;
--
C:\WINNTgpresult
Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999
Created on
Hi Daniel..
I'm wondering if you have some groups double-nested one is a member of
the other, and the reverse also?
We use group nesting a lot here, running a gpresult enumerates all groups,
but i had no duplicates.
John
|-+--
| |
I do a fair amount of this sort of thing, and I just use the stuff out
on MSDN. It is in VBScript, of course, but once you learn the general
steps of calling objects from perl, the translation from vbs to perl
just sort of becomes transparent. The newer stuff like WMI is pretty
simple to work with
Hi,
In fact what happen is that it create 2 distinct items under the advanced
button. It's like the perms being cut into 2 categories.
I have the first object (the technician group) which has
List contents
Read all properties
Read permissions
And a second one lower at the bottom of
Why not create a dummy site, and move the DC into it?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fugleberg,
David A
Sent: Tuesday, June 08, 2004 4:06 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Preventing a DC from authenticating users
I want to
Hi,
This user right has been set into the Default Domain Controller policy. I
simply added the group technician in there. There was already administrators and
domain admins in there.
Michel Bruyere
Network/systems administrator
CompTIA A+, Network+
The quickest way to find something
I've played with the SmartArray controllers a lot, and they are not as flexible for
doing off-the-wall stuff as the old NETraids were, at least with the standard tools
(HP keeps promising me a boot floppy with some powerfull RAID magic, but nothing has
materialized thus far...)
Am I missing
Go to one of your DCs, then run:
Start...Programs...Administrative Tools...Local Security Policies
Then under:
Local Policies...User Rights Assigments
What is the value for the Add workstations to domain user right?
If the technician group is missing, then another GPO is overriding that setting.
I've seen it happen in a production network. Its not pretty at all.
There's actually more to it than just the _msdcs zone being replicated
around - I run full secondaries of the forest root zone to my DC's.
Let me reverse the question - what's the harm in pointing the boxes at
each other? Any
Is there a document that shows every attribute in the Active Directory
2003 schema. I'm looking to use two custom attributes to hold specific
data. These are called custom attribute 1 and custom attribute 2 and I
don't see them anywhere in ADSIEDIT.
Steve Schofield
[EMAIL PROTECTED]
List
I believe you're wanting to use ExtensionAttribute1 and ExtensionAttribute2.
The schema documentation should be available in MSDN, though for some reason
I can't seem to pull that site up right now.
Hunter
-Original Message-
From: Steve Schofield [mailto:[EMAIL PROTECTED]
Sent:
Also, in ADSIedit, the custom attributes are called
extensionattribute. In ADUC, the same values are called custom
attribute
-Original Message-
From: Passo, Larry
Sent: Wednesday, June 09, 2004 3:02 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Complete Schema attribute guide
The
Thanks Larry and company,
Your write there are called extensionAttribute1 thru 15 i think I looked at
an existing user in ADSIEDIT and seen the attributes. Thanks for the links
though.
Steve
- Original Message -
From: Passo, Larry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent:
Minus the schema extensions for exchange this is exactly what i was looking
for.
Steve
- Original Message -
From: Steve Patrick [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, June 06, 2004 1:19 AM
Subject: Re: [ActiveDir] Complete Schema attribute guide
I dont fully
For compaq - RDP the database setup is free but its the client license that
costs per machine, $100 per machine. Say for example you bought 5 licenses,
you could stage 5 machines get them working, delete them from the database
and stage more. But have no more than 5 machines at a time in
Title: RE: [ActiveDir] question on gpresult.exe
How would I go about and find out? By checking all groups? Hmm.. I will let you know. Anything else that you can think of or suggest would be very helpful.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent:
Title: RE: [ActiveDir] OT: Compaq Servers
Huh. Well, clearly I'm doing something wrong, or
don't have the build that you do, Glenn. There is no option to choose
Win2k3, so the right drivers can't get installed. Is there something
specific that you're doing, like installing as a Win2k and
True - would work. But, why not just shut off netlogon? Seems to be about
the easiest way to be sure that it's not going to answer requests for authN.
Rick Kingslan MCSE, MCSA, MCT, CISSP
Microsoft MVP:
Windows Server / Directory Services
Windows Server / Rights Management
Windows Security
Ugh...Why do I get blinded by complexity?!
I didn't even think to use the /Detail switch! This is perfect, as I can parse the
output and identify them
J
Original Message:
From: Deji Akomolafe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Identify STATIC records in AD DNS
38 matches
Mail list logo