Thanks again Joe and Darren
I did a R&D of how the GPO’s are getting stored. I will
share info with you.
First I took the backup of a GPO then observed that GptTmpl.inf
stores few information other than Administrative Template settings.
Then reset the information in the GptTmpl.inf
This is telling you that your 192.168 subnet does not have a reverse zone. The 192.168/16 block belongs to IANA (it's essentially "reserved", along with other blocks). If your DNS server tries to reverse resolve anything in that range, and you don't have an authoritative zone, then it goes out a
In terms of out-of-the-box solutions, there really aren't any. The best
you might be able to do is use GPMC to export the settings report for
two GPOs to HTML or XML and then use Windiff to visually compare the
differences. Its fairly ugly but that's what I know of for free. There
are several 3rd p
All,
Is there an easy way, via GPMC or other, to compare the settings of two
GPO's from separate domains side by side and determine whether the settings
are identical?
Thanks,
Mike
*** PLEASE NOTE ***
This E-Mail/telefax message and any documents accompanyi
Is there any settings known for Group policies or the firewall that
would keep the sms client from loading upon joining the domain and a
user account logging in for the first time. If I login to that machine
with and admin account the sms client loads correctly. But if I log in
with a standard do
Thanks all!
I guess I was too stuck thinking that the Exchange objects would have to
be re-ACL'ed and I didn't even think about SID history.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Monday, September 20, 2004 2:29 PM
To: [EMAIL PR
Hi Noah,
I posted the solution to this eventid back about 2 weeks ago to this newsgroup.
If you can't find it, email me offline and I'll send it to you.
Mike Thommes.
-Original Message-
From: [EMAIL PROTECTED] on behalf of Noah Eiger
Sent: Mon 9/20/2004 3
Hi -
I have a single-DC domain that keeps getting the following error in the
Event Log. Web searches are somewhat inconclusive about what this means. The
DC runs DNS, which is AD Integrated and forwards to a public, non-NT DNS
server.
Event Type: Warning
Event Source:LSASRV
Even
I wasn't thinking of the ADSI SDK but rather the Active Directory SDK.
What you seem to be after is the datatypes of the attributes you want to
push to the Oracle tables. Although you can look them up individually via
ADSIEDIT and see the datatypes, you can also find them documented in the
Acti
ADMT 2.0 would be a good bet.
Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ken Cornetet
Sent: Montag, 20. September 2004 21:07
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Move group across domains
I need to move several groups from one domain to
the preferred way to do this is with ADMT (the free migration tool from
MS).
alternatively, you can use the movetree command.
realize, you may have to change group-scopes to limit the impact during
the move => usually best to convert any group to universal, prior to
moving it to a differnt domain.
Movetree (part of the support tools, OS version specific) and/or ADMT v2
(which works on everything currently available, I do believe).
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ken Cornetet
Sent: Monday, September 20, 2004 3:07 PM
To: [EMAIL PROTECT
I need to move several groups from one domain to another inside a forest
(2000 level now, soon to be 2003). These groups are used as security
principals for Exchange 2000 mailboxes. Are there any tools available to
do this?
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://w
We've looked at ADSI, but are not sure which (of the many) descriptions has the
information we need. How do we get SDK for ADSI? If it from MS, our sys admin can get
it because he has a MS account to download it.
-Original Message-
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: Mon
http://wm.quest.com/products/reporter/
I haven't had a chance to look at this product per se, but their other
products are pretty good.
Dave
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bruyere, Michel
Sent: Monday, September 20, 2004 9:03 AM
To: [E
Title: Message
Thanks all for your replies. My concern isn't so much
with the Event 1000s, or with the folks that this has already happened to as
much as it is preventing this, possibly by using "uphclean.exe", or
understanding why all of a sudden folks are having this happen. Anyone
have
Looks easy. Have you had a look at the SDK for the value data type?
Or for that matter, with such few attributes, have you looked at ADSIEDIT ?
-Al
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chin, Jonathan W
Sent: Monday, September 20, 2004 12:15
http://tinyurl.com/an6z maybe?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Monday, September 20, 2004 12:18 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] program to crate reports...
Something like what Ecora does? www.ecora.c
Something like what Ecora does? www.ecora.com
I don't recall them being inexpensive, but is that the functionality?
Check the archives as well as I believe somebody else posted a good
reporting tool a few months back. Just can't recall the name.
-Original Message-
From: [EMAIL PROTE
Here's the mapping, I need to complete the attributes/data type column. Frequency is
nightly, environment is Sun Solaris 2.8, Oracle 9i.
Thanks.
-Original Message-
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: Monday, September 20, 2004 8:47 AM
To: '[EMAIL PROTECTED]'
Subject: RE:
Hi,
I'M actually searching for a program that could create reports
based on the structure of our AD. There are some nested groups and I
would like to get the global view of my AD using some kind of reports.
The preferred output would be to have something like arborescence, where
I could se
Was it me, I'd start with the requirements. What needs to be populated?
What's the frequency? What is the development environment. For information
on what's available, I'd use the Active Directory Schema reference in the
Active Directory SDK. For a hands on look, I'd probably have a look at the
Return Receipt
Your [ActiveDir] Interface
document
:
> I need to develop an interface that will feed data from AD to an Oracle table. How
> do I find the properties, data types, attributes for the AD data, to map correctly
> to the Oracle table?
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.h
Return Receipt
Your RE: [ActiveDir] Active Directory Programming
document
:
Joe's right (surprise!)--there is definitely no interface
today for programmatically changing settings within a GPO. If
you look at the methods on IGroupPolicyObject, none of them refer to being able
to get inside the GPO--they simply provide a way to do the things that you can
already do in
You guys are right, it wasn't password complexity. I just switched
complex passwords back on to see if I could reproduce. No dice,
passwords still copy over fine when migrating an account. I'm
positive that is the only thing I changed. I'm scratching my head
here.
List info : http://www.activ
I haven't personally seen a method that could do it and
when I queried BJ (PM for GPMC) back at the Windows Server 2003 RDP
conference about it he indicated that that functionality still wasn't available
in the soon to be released (at the time) GPMC though they were thinking about it
for an
Return Receipt
Your RE: [ActiveDir] Active Directory Programming
document
:
Thanks Joe and Darren
So Is it confirmed that I will not be able
to set Programmatically the GPO settings like “Maximum Password Age”
of /Computer Configuration/Windows Settings/Security
settings/Account Policies/Password Policy
But This link says that “The
IGroupPolicyObject inter
To add onto what Joe said, check out the GPMC,
which provides a set of COM/.Net interfaces for doing a few more tasks against
Group Policy, including being able to manipulate gpLinks, set permissions on a
GPO and ability to create/backup GPOs.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECT
You can't edit the specific GPO settings that are applied
to users and computers through any of the interfaces currently. You can only
manipulate things like GPO displayname, enabled/disable the user or
computer pieces of a gpo, etc.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTE
Hello all
While testing Application of new SP2 group policy features to some XP SP2
test machines i noticed a strange behaviour.
I set "windows firewall: protect all network connections" to -Disabled- to
both domain and standard profile. On the test machine, however, the windows
firewall could sti
I need to edit the Group Policy settings via API. In MSDN
site it mentions that using IGroupPolicyObject we can achive it.
If any one has already worked on those please help me out. Or even
suggestions would be helpful.
Thanks Again
Naren
DISCLAIMER
Yusuf,
here is a good document that should answer all
your questions.
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/operate/wintime.mspx
Carlos Magalhaes .
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Yusuf Mayet -
BCX - Microsoft CompetencySe
Can you guys share some light on the following?
I would like to know what the
difference between using the “W32tm” and “net
time” command is.
I am getting conflicting answers
from the servers when I run the two commands.\
When I use the w32tm command to
set the
36 matches
Mail list logo
