RE: [ActiveDir] OT: Compaq Servers

2004-06-09 Thread Rutherford, Robert
Title: Message MS and HP working hand in hand to shaft the customer base well they alsodo it with loads of other vendors also, i.e. Veritas. Rob -Original Message-From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: 09 June 2004 02:02To: [EMAIL PROTECTED]Subject: RE:

RE: [ActiveDir] OT: Compaq Servers

2004-06-09 Thread simon.geary
RDP isn't free and you have to buy a license for every server under its management. -Original Message- From: [EMAIL PROTECTED] on behalf of Kitchens Arthur E Sent: Tue 08/06/2004 15:38 To: [EMAIL PROTECTED] Cc: Subject: RE: [ActiveDir]

RE: [ActiveDir] OT: Compaq Servers

2004-06-09 Thread Glenn Corbett
Title: RE: [ActiveDir] OT: Compaq Servers Rick, Im not quite sure what you mean by this.  Sure, SmartStart version 6.x is only *really* useful for G3 based computers, but there isnt anything stopping you from using SmartStart 5.5x on older and newer hardware. We have a unified build

RE: [ActiveDir] OT: Compaq Servers

2004-06-09 Thread Glenn Corbett
Ken, I know the Compaq RAID array isn't as flexible/forgiving as the old HP NETRaid, but I think as long as there are no other drives installed, this *might* work. Heh, you obviously haven’t played too much with the Compaq/HP SmartArray controllers too much. We use them exclusively at my

[ActiveDir] IE Group Policies not applying

2004-06-09 Thread support
Hi, We have a network of some 8,000 workstations running Windows 2000. Approximately 5 are still reporting an old Group Policy Object being applied for the user component of Internet Explorer. When I check the UserEnv.log they all have these entries USERENV(a8.3a4) 15:35:17:534 ProcessGPOs:

RE: [ActiveDir] Root Hints question

2004-06-09 Thread Wright, T. MR NSSB
Aric is dead on. I had the same problem as Russ with my AD Integrated Zones. Russ, if you open ADUC and do View-- Advanced Features, under the System Folder, there should be a folder called MicrosoftDNS. You will find the Root Hints in there, once you delete them from there they won't come

[ActiveDir] Wierdness with IE Proxy GPO settings

2004-06-09 Thread Frost . David
I am having trouble making sense of IE proxy GPO settings. Any Thoughts much appreciated. I have defined the IE proxies in the Default Domain Policy for all Domain Users. Everything (IE and other apps that use IE proxy config) works fine for normal logins. The Weird things start happening

RE: [ActiveDir] OT again

2004-06-09 Thread Rodriguez, Daniel [EPM/SRM]
Title: RE: [ActiveDir] OT again Try this; www.activestate.com I found it to be quite helpful as I am needing to do the same as you. Daniel E. Rodriguez Information Technology Emerson Process Management Fisher Controls Division Sherman, Texas (903)868-3357 [EMAIL PROTECTED]

[ActiveDir] strange thing...

2004-06-09 Thread Bruyere, Michel
Hi all, It's my first post here. I've been referred here and been told that you guys were the real gurus of AD. I have a strange thing happening and I would like to have your thoughts about it. Here is the situation, I created a group called technicians and I gave the user right

[ActiveDir] Software packagers

2004-06-09 Thread Christine Easton
Hello, I'm going to start evaluating software packagers to create software installations for distribution using Active Directory. Can I get some recommendations on some? Like Winnstall, Installshield, etc. How easy are they to get up and running? Any gottcha's with making packages? Thanks

RE: [ActiveDir] strange thing...

2004-06-09 Thread Rutherford, Robert
Just clarifying It appears that you are saying ... when you first designate the rights that members of the technician group can add wks to the domain and the next day they cannot? Are the rights still set on the next day as you defined them on the first day? Or are the reverting back?

RE: [ActiveDir] Software packagers

2004-06-09 Thread Rutherford, Robert
Title: Message Depends on how many packages you are going to package and how regularly? I found the Wininstall LE (free with W2K) does the job most of the time needs tweaking every now and again but no real pain. Many people specialise in this area and will be able to be more helpful

RE: [ActiveDir] strange thing...

2004-06-09 Thread Passo, Larry
Do you have a GPO that is specifying that specific user right? You can check with GPRESULT.EXE -Original Message- From: Rutherford, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 09, 2004 7:55 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] strange thing... Just clarifying

RE: [ActiveDir] Checklist for changing IP Address on DC

2004-06-09 Thread Devan Pala
Hi Roger, This is interesting. When I was going through the design process a couple of years ago that was pretty much the best practice according to Microsoft (primarily the Branch Office guides) where the 'island' problem was laid out. We also had this validated by an external source. Our

[ActiveDir] question on gpresult.exe

2004-06-09 Thread Rodriguez, Daniel [EPM/SRM]
Question; when you run gpresult and in the section 'The user is a memebof the following security groups:' it lists the groups. But what does it mean when it lists the group twice? I am getting identical listings in this list. Daniel E. Rodriguez Information Technology Emerson Process Management

RE: [ActiveDir] Setting Desktop Settings via Group Policy

2004-06-09 Thread Raymond McClinnis
None taken...:-) I've built my share of MSI packs with good results. I've been using Installer2GO, it's doesn't have that much of a learning curve either. I'll probably just end up scripting this out to tattoo the registry and copy the files I need. Thanks to everyone for all the input.

Re: [ActiveDir] question on gpresult.exe

2004-06-09 Thread Tony Murray
Hi Daniel Can you post the gpresult output? Tony -- Original Message -- From: Rodriguez, Daniel [EPM/SRM] [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 9 Jun 2004 10:36:04 -0500 Question; when you run gpresult and in the section 'The user is

Re: [ActiveDir] Wierdness with IE Proxy GPO settings

2004-06-09 Thread jpsalemi
Hi David... I've seen behavior like this myself. I've defined a software restriction policy at the domain level, for when we get a worm in house and i can get my hands on code. This is processed before the default domain policy, and we also have a modified domain policy at that level. At

[ActiveDir] Migrating 2k to 2k domains

2004-06-09 Thread Rimmerman, Russ
We have a standalone Win2k domain of a company we purchased and we have our own standalone single AD domain. We have an empty forest root domain and our child domain. They have the same. We want to consolidate the two domains, so we set up a two-way trust. We have Quest Fastlane Migrator

RE: [ActiveDir] question on gpresult.exe

2004-06-09 Thread Rodriguez, Daniel [EPM/SRM]
Title: RE: [ActiveDir] question on gpresult.exe Here you go; -- C:\WINNTgpresult Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool Copyright (C) Microsoft Corp. 1981-1999 Created on

RE: [ActiveDir] question on gpresult.exe

2004-06-09 Thread jpsalemi
Hi Daniel.. I'm wondering if you have some groups double-nested one is a member of the other, and the reverse also? We use group nesting a lot here, running a gpresult enumerates all groups, but i had no duplicates. John |-+-- | |

RE: [ActiveDir] OT again

2004-06-09 Thread Ken Cornetet
I do a fair amount of this sort of thing, and I just use the stuff out on MSDN. It is in VBScript, of course, but once you learn the general steps of calling objects from perl, the translation from vbs to perl just sort of becomes transparent. The newer stuff like WMI is pretty simple to work with

RE: [ActiveDir] strange thing...

2004-06-09 Thread Bruyere, Michel
Hi, In fact what happen is that it create 2 distinct items under the advanced button. It's like the perms being cut into 2 categories. I have the first object (the technician group) which has List contents Read all properties Read permissions And a second one lower at the bottom of

RE: [ActiveDir] Preventing a DC from authenticating users

2004-06-09 Thread Ken Cornetet
Why not create a dummy site, and move the DC into it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fugleberg, David A Sent: Tuesday, June 08, 2004 4:06 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Preventing a DC from authenticating users I want to

RE: [ActiveDir] strange thing...

2004-06-09 Thread Bruyere, Michel
Hi, This user right has been set into the Default Domain Controller policy. I simply added the group technician in there. There was already administrators and domain admins in there. Michel Bruyere Network/systems administrator CompTIA A+, Network+ The quickest way to find something

RE: [ActiveDir] OT: Compaq Servers

2004-06-09 Thread Ken Cornetet
I've played with the SmartArray controllers a lot, and they are not as flexible for doing off-the-wall stuff as the old NETraids were, at least with the standard tools (HP keeps promising me a boot floppy with some powerfull RAID magic, but nothing has materialized thus far...) Am I missing

RE: [ActiveDir] strange thing...

2004-06-09 Thread Passo, Larry
Go to one of your DCs, then run: Start...Programs...Administrative Tools...Local Security Policies Then under: Local Policies...User Rights Assigments What is the value for the Add workstations to domain user right? If the technician group is missing, then another GPO is overriding that setting.

RE: [ActiveDir] Checklist for changing IP Address on DC

2004-06-09 Thread Roger Seielstad
I've seen it happen in a production network. Its not pretty at all. There's actually more to it than just the _msdcs zone being replicated around - I run full secondaries of the forest root zone to my DC's. Let me reverse the question - what's the harm in pointing the boxes at each other? Any

[ActiveDir] Complete Schema attribute guide

2004-06-09 Thread Steve Schofield
Is there a document that shows every attribute in the Active Directory 2003 schema. I'm looking to use two custom attributes to hold specific data. These are called custom attribute 1 and custom attribute 2 and I don't see them anywhere in ADSIEDIT. Steve Schofield [EMAIL PROTECTED] List

RE: [ActiveDir] Complete Schema attribute guide

2004-06-09 Thread Coleman, Hunter
I believe you're wanting to use ExtensionAttribute1 and ExtensionAttribute2. The schema documentation should be available in MSDN, though for some reason I can't seem to pull that site up right now. Hunter -Original Message- From: Steve Schofield [mailto:[EMAIL PROTECTED] Sent:

RE: [ActiveDir] Complete Schema attribute guide

2004-06-09 Thread Passo, Larry
Also, in ADSIedit, the custom attributes are called extensionattribute. In ADUC, the same values are called custom attribute -Original Message- From: Passo, Larry Sent: Wednesday, June 09, 2004 3:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Complete Schema attribute guide The

Re: [ActiveDir] Complete Schema attribute guide

2004-06-09 Thread Steve Schofield
Thanks Larry and company, Your write there are called extensionAttribute1 thru 15 i think I looked at an existing user in ADSIEDIT and seen the attributes. Thanks for the links though. Steve - Original Message - From: Passo, Larry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

Re: [ActiveDir] Complete Schema attribute guide

2004-06-09 Thread Steve Schofield
Minus the schema extensions for exchange this is exactly what i was looking for. Steve - Original Message - From: Steve Patrick [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, June 06, 2004 1:19 AM Subject: Re: [ActiveDir] Complete Schema attribute guide I dont fully

Re: [ActiveDir] OT: Compaq Servers

2004-06-09 Thread Steve Schofield
For compaq - RDP the database setup is free but its the client license that costs per machine, $100 per machine. Say for example you bought 5 licenses, you could stage 5 machines get them working, delete them from the database and stage more. But have no more than 5 machines at a time in

RE: [ActiveDir] question on gpresult.exe

2004-06-09 Thread Rodriguez, Daniel [EPM/SRM]
Title: RE: [ActiveDir] question on gpresult.exe How would I go about and find out? By checking all groups? Hmm.. I will let you know. Anything else that you can think of or suggest would be very helpful. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent:

RE: [ActiveDir] OT: Compaq Servers

2004-06-09 Thread Rick Kingslan
Title: RE: [ActiveDir] OT: Compaq Servers Huh. Well, clearly I'm doing something wrong, or don't have the build that you do, Glenn. There is no option to choose Win2k3, so the right drivers can't get installed. Is there something specific that you're doing, like installing as a Win2k and

RE: [ActiveDir] Preventing a DC from authenticating users

2004-06-09 Thread Rick Kingslan
True - would work. But, why not just shut off netlogon? Seems to be about the easiest way to be sure that it's not going to answer requests for authN. Rick Kingslan MCSE, MCSA, MCT, CISSP Microsoft MVP: Windows Server / Directory Services Windows Server / Rights Management Windows Security

RE: [ActiveDir] Identify STATIC records in AD DNS

2004-06-09 Thread Jef Kazimer
Ugh...Why do I get blinded by complexity?! I didn't even think to use the /Detail switch! This is perfect, as I can parse the output and identify them J Original Message: From: Deji Akomolafe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Identify STATIC records in AD DNS