I need a script that I can run from a server to change the DNS settings on
my workstations. I have been given a new subnet. My dns servers will need to
be changed.
Thank you,
Z.V.
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List
Hi,
Would like to know that, in NT4.0 PDC when we apply user policy for password change, does it get apply on service accounts also ? If NO, why ?
Can anyone throw some light on this.
Regards,
Sudhir Kaushal
Systems Engineer (GIS)
Computer Sciences Corporation.
India - + 91 120 2582323 Ext.
You can do this I'm sure... one of the script wizard will no doubt come
back with a solution.
I am just curious why you are using static IPs on your workstations? Is
DHCP not a possibility?
BR
Rob
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
A service account is just a standard
account and the policy should also affect it.
Are you having issues with it? Can you be
more specific?
Rob
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sudhir Kaushal
Sent: 26 October 2004 13:13
To: [EMAIL PROTECTED]
The university's main DNS servers are Linux. My active directory is running
its own DNS servers on its own subnet, but the workstations on getting IPs
from the university's DHCP servers.
Thanks,
Z.V
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert
Yes, DHCP should be pretty easy.
~Athif
On Tue, 26 Oct 2004 13:19:23 +0100, Robert Rutherford
[EMAIL PROTECTED] wrote:
You can do this I'm sure... one of the script wizard will no doubt come
back with a solution.
I am just curious why you are using static IPs on your workstations? Is
DHCP
Return Receipt
Your RE: [ActiveDir] Extranet's
document
:
If you set the attribute PASSWORD NEVER EXPIRES on Service Account,
then the policy will not apply to this account, else it applies to
all.
HTH,
Athif
On Tue, 26 Oct 2004 17:43:07 +0530, Sudhir Kaushal [EMAIL PROTECTED] wrote:
Hi,
Would like to know that, in NT4.0 PDC when we apply user
Is this just a test AD domain? How many workstations are we talking
about?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
Sent: 26 October 2004 13:36
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] IP setting Script
The university's main DNS
IP address:
netsh int ip set address name=Local Area Connection source=static
1.2.3.4 255.255.255.0 1.2.3.1 1
DNS addresses:
netsh int ip set dns name=Local Area Connection source=static 1.2.3.2
netsh int ip add dns name=Local Area Connection 1.2.3.3
WINS address:
netsh int ip set wins
You set machines to automatically obtain
DNS settings from the DHCP server
MohammedAthif Khaleel [EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
10/26/2004 12:40 PM
Please respond to
[EMAIL PROTECTED]
To
[EMAIL PROTECTED]
cc
Subject
Re: [ActiveDir] IP setting
Script
Yes,
NetSH makes it easy...
http://www.ultratech-llc.com/KB/?File=NetShell.TXT
- ASB
Cheap, Fast, Secure -- Pick Any TWO.
http://www.ultratech-llc.com/KB/
On Tue, 26 Oct 2004 08:13:10 -0400, Za Vue [EMAIL PROTECTED] wrote:
I need a script that I can run from a server to change the DNS
Hi Mahammed
You could use the netsh command - either in a startup script or login
script, or run it remotely using psexecute.
netsh interface ip set dns local area connection static 10.10.10.10
netsh interface ip add dns local area connection static 10.10.10.11
We have used those commands in a
I have about 200 computers and 6 servers. Our campus is not a centralize
campus. Every department has its own IT support and we choose what we want
to run and what is best for us. There little AD forests all over campus.
(This is the mess I inherited not long ago):
I am consolidating a Novell
That's fine for a single PC, but how would you change a range of
machines? How could you pull in from a list?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael B.
Smith
Sent: 26 October 2004 13:51
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] IP
Using set replaces. Using add, well, adds.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
Sent: Tuesday, October 26, 2004 9:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] IP setting Script
Does using Netsh clear the current static DNS
We are currently pursuing a company called
AmeriVault to store our data in their eVault. They have a wonderful product
that will enable 9 different organizations to operate in a centralized manner
and enable us to develop the required specifications for HIPAA Compliance. Their
product
You wanna give us a complete problem description then?
I can't help you renamed your connections. :-P
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
Sent: Tuesday, October 26, 2004 9:27 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] IP
Hi,
Would like to know that, in NT4.0 PDC when we apply user policy for password change, does it get apply on service accounts also ? If NO, why ?
Can anyone throw some light on this.
Regards,
Sudhir Kaushal
Systems Engineer (GIS)
Computer Sciences Corporation.
India - + 91 120 2582323 Ext.
Are you prohibited from setting up your own DHCP server for your segment?
- ASB
Cheap, Fast, Secure -- Pick Any TWO.
http://www.ultratech-llc.com/KB/
On Tue, 26 Oct 2004 09:08:09 -0400, Za Vue [EMAIL PROTECTED] wrote:
I have about 200 computers and 6 servers. Our campus is not a
Not prohibited, just don't want an extra service to manage. Also there are
always politic involved. I may just have to come in this weekend and touch
all machines.
Thank you,
Z.V
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of ASB
Sent: Tuesday, October
There is no difference between user
accounts and service accounts. They are both accounts subject to
the domain password policy.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sudhir Kaushal
Sent: Tuesday, October 26, 2004
7:12 AM
To: [EMAIL PROTECTED]
Subject:
That's going to be tough. That's not indexed nor in the GC by default which
may make it a little tougher/slower.
However, because you need to know that the users with that attribute equal
to S are in fact properly in a particular group, I don't think you meet
your criteria if you instead use the
I'll agree with Al that you want to make sure that your group membership
cross checks.
Regarding your point #1. If you have a large number of users involved,
you will get better performance with a dictionary instead of an array.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
Title: Revoked GPO Still Applying
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
One of my admins accidentally moved a critical workstation account into my jail OU, which completely locks down the account in question. Of course, to add more joy to the situation, he absolutely cannot
Return Receipt
Your [ActiveDir] Revoked GPO Still Applying
document
:
Title: Revoked GPO Still Applying
James-
Which GP settings are still being applied, or do you know?
Can you run gpresult or rsop.mscon that box to determine this? I'm not
sure what you mean by, All of the files in the "Policies"
folder reflected the old GPO, and were successfully replaced
For some reason, someone in our org. upgraded an NT4 domain
to a Windows 2000 child domain and used Capital Letters in the fully qualified domain
name. All our other domain names are lower case. How can I change this domain
to lower case to match the others?
-Devon
Title: Message
The
files in the "Policies" folder did have all the "jailed" GPO attributes listed,
but when I removed them and rebooted, the files were replaced with the correct
GPO settings. The security policy in these files appears to be correct
now, but the old policy still appears to
Title: Message
Just for future reference, the files in that Policies
folder don't need to be removed manually. Those are temporary files that the
Security CSE creates when it downloads the GPO-based security policy. They will
be updated automatically if security policy processing is
We've delegate the permission to add computer accounts to our AD environment
to some admins. They can go into ADUC and add the computer account without
problem. However, when they go to the PC to change it's domain membership,
on some PC's they get an error about not enough storage space.
We have many labs that many students use and in this one particular
lab we do not have any desktop controls (DeepFreeze, Fortress or even strict
GPOs) set for a number of reasons. Most of the students do not
have a home folder to redirect roaming profiles to and we would rather not set
I
have a W2K DC that is giving me an error in the Security Log every minute, this
error is a failure Audit on the Domain Admin account, I have no idea
wherethis is coming from!
This
is a domain controller isrunning all the service packs and patches, it
also has Exchange server 5.5 with
Hi Mike,
Try the following:
DSACLS DN of OU /G NetBios DOMAIN name\samaccountname of security
principal:ca;Generate Resultant Set of Policy (Planning)
e.g.
DSACLS OU=ORG,DC=INFRA,DC=LOCAL /G INFRA\GLOBALGROUP:ca;Generate Resultant
Set of Policy (Planning)
DSACLS DN of OU /G NetBios DOMAIN
Hi,
Try the following link for more info:
http://www.eventid.net/display.asp?eventid=675eventno=62source=Securityph
ase=1
Regards,
Jorge
-Original Message-
From: [EMAIL PROTECTED]
To: '[EMAIL PROTECTED]'
Sent: 26-10-2004 23:35
Subject: [ActiveDir] Event ID:675
I have a W2K DC that is
Brian-
There is already a policy for this. Check out Computer
Configuration|Administrative Templates|System|user Profiles|Delete cached copies
of roaming profiles.
Darren
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stockbrugger,
Brian L.Sent: Tuesday, October 26, 2004
Darren,
You can create a logoff/login script using
delprof version 5.2 in the XP resource kit using the /Q switch, alternatively
it could be a scheduled task at login/logoff
James
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent:
37 matches
Mail list logo
