[ActiveDir] Sequence LDAP query

2004-12-14 Thread Scott Forsyth
Hi all, I've subscribed to this list for this question so forgive me if this is something recently covered. I'm trying to do an LDAP query that appears to be uncommon. LDAP is new to me in the last few days so I'm starting from the ground up. Basically I need a filter something like this: (if

Re: [ActiveDir] Domain Name and DNS Problems

2004-12-14 Thread ASB
~ I would like for our internal AD DNS to only host records for our internal systems and forward any other unresolved requests. ~ Won't happen when you are using the same name both internally and externally. Your existing solution (

RE: [ActiveDir] GPO Question

2004-12-14 Thread Cothern Jeff D. Team EITC
That is under the user configuration so therefore it applies to the user logging in not the machine. So the machine should be able to still get and install updates deployed thru SUS. Course only positive way is to use a test OU with a test machine. On Tue, 14 Dec 2004 13:31:42 -0500, Salandr

RE: [ActiveDir] OT: pagefile

2004-12-14 Thread Cothern Jeff D. Team EITC
>From what I can determine You CANNOT Delete or add any files if the image is of a NTFS partition. Unfortunately ours is NTFS. So the easiest thing I can think of is to create the image under fat32. But I need the final to be NTFS. So Is there a way I can have the system convert to NTFS automat

RE: [ActiveDir] OT: pagefile

2004-12-14 Thread Tim Sutton
Ghost explorer allows you to remove files from a NTFS partition that's been imaged. Regards Tim Sutton IT Systems Manager Troup Bywaters & Anders Eastgate House 10 Eastgate LEEDS LS2 7JL Tel: 01132432241 Fax: 01132424024 E-mail: [EMAIL PROTECTED] Privilege and Confidentiality Notice Th

RE: [ActiveDir] OT: pagefile

2004-12-14 Thread Tim Sutton
I agree with you on this one, Jorge. I'm sure it drops it out off all the images I've taken so far. Worth checking though. Regards Tim Sutton IT Systems Manager Troup Bywaters & Anders Eastgate House 10 Eastgate LEEDS LS2 7JL Tel: 01132432241 Fax: 01132424024 E-mail: [EMAIL PROTECTED] Pr

RE: [ActiveDir] Expired Accounts

2004-12-14 Thread Tim Sutton
We have it done through a Watchguard firewall so the vpn is established but if your password has expired you'll be prompted to enter a new one and than that's cached locally I believe, but I'll check. I'm sure exchange will ask for a new one though if yours has expired. Regards Tim Sutton IT

RE: [ActiveDir] OT: Inventory Software

2004-12-14 Thread Salandra, Justin A.
Plus, even though I am the Enterprise Admin, I am getting access denied when trying to access some systems, but I have no problems connecting to them or doing anything else on them -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: T

RE: [ActiveDir] OT: Inventory Software

2004-12-14 Thread Salandra, Justin A.
I have however I have multiple domains and am having a hard time getting it to consolidate to one report. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Tuesday, December 14, 2004 4:35 PM To: [EMAIL PROTECTED] Subject: RE: [Activ

RE: [ActiveDir] Domain Name and DNS Problems

2004-12-14 Thread deji
>>I would like for our internal AD DNS to only host records for our internal systems and forward any other unresolved requests When a DNS server is told that it is authoritative for a zone, it takes that responsibility seriously. This means that it considers ANYTHING that is not in that zone non-

Re: [ActiveDir] OT: Inventory Software

2004-12-14 Thread ASB
Lots of options: http://www.ultratech-llc.com/KB/?File=Inventory.TXT -ASB FAST, CHEAP, SECURE: Pick Any TWO http://www.ultratech-llc.com/KB/ On Tue, 14 Dec 2004 15:21:01 -0500, Salandra, Justin A. <[EMAIL PROTECTED]> wrote: > Does any one know of a good Product that I can use to scan my netw

RE: [ActiveDir] OT: Inventory Software

2004-12-14 Thread Thommes, Michael M.
Justin, Have you seen Microsoft's Software Inventory Analyzer (http://www.microsoft.com/resources/sam/msia.mspx)? Mike Thommes -Original Message- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 14, 2004 2:21 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] OT

RE: [ActiveDir] GPO Question

2004-12-14 Thread Bernard, Aric
Your clients should continue to receive updates through SUS. However the will not be able to access Windows Update and install patches through the browser. Regards, Aric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday,

RE: [ActiveDir] OT: Inventory Software

2004-12-14 Thread Blair, James
Justin, http://www.ezaudit.com/ does the job and is cheap...relatively speaking... James -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Blair Sent: Wednesday, 15 December 2004 6:23 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Inventory S

RE: [ActiveDir] GPO Question

2004-12-14 Thread Salandra, Justin A.
I am more concerned about my clients not being able to automatically download from the SUS Server if I configure that setting. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dennis Depp Sent: Tuesday, December 14, 2004 4:00 PM To: [EMAIL PROTECTED] Subjec

[ActiveDir] OT: Inventory Software

2004-12-14 Thread Salandra, Justin A.
Does any one know of a good Product that I can use to scan my networked PCs and conduct a software inventory? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info : http://www.activedir.org/mail_list.h

Re: [ActiveDir] GPO Question

2004-12-14 Thread Dennis Depp
I'm not sure about the SUS stuff. I have this set on my terminal servers. While I can access the site, I get a message telling me access is denied. You might want to set your SUS computer in a special OU, or setup the ACL for thr GPO to deny apply GPO settings for the SUS computer. Dennis On T

RE: [ActiveDir] OT: intrusion prevention

2004-12-14 Thread Kern, Tom
snort has a add on program called hogwash that is an IDP. you can run snort in inline mode. however, i'm looking for an IDP that runs internally and can stop irc bots from executing on client pc's and creating outbound connections, flooding my network. i'm not sure if hogwash is a good solution

RE: [ActiveDir] OT: Inventory Software

2004-12-14 Thread Chris Blair
Got this off of another list. Looks very promising: http:/.sydi.sourceforge.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, December 14, 2004 2:21 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] OT: Inventory Software

RE: [ActiveDir] Domain Name and DNS Problems

2004-12-14 Thread Salandra, Justin A.
Won’t happen since both are the same DNS name   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Tuesday, December 14, 2004 1:01 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Domain Name and DNS Problems   That is why I mentioned

RE: [ActiveDir] User Photos in AD

2004-12-14 Thread Grillenmeier, Guido
that's likely the photo or the thumbnailPhoto attribute (both octet strings) - best way to kill your AD. There are a couple of tools out there that allow uploading a user's photo to this attribute... The downside: every user has the right to do so on his own account (via the SELF security principa

RE: [ActiveDir] List object mode

2004-12-14 Thread Eric Fleischman
Your assuming in your second paragraph. For “every day admin” perhaps, but for searching a subtree that you don’t have list_contents to (which is of course the point J) it could in theory be large. Recall that admin is usually a small % of your load. Users/apps tend to be most of it.   ~E

RE: [ActiveDir] OT: intrusion prevention

2004-12-14 Thread Renouf, Phil
Unless Snort has added some features it is just an Intrusion Detection System and does not offer Intrusion Prevention. Phil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sean Johnson Sent: Tuesday, December 14, 2004 1:30 PM To: [EMAIL PROTECTED] Subje

RE: [ActiveDir] making another domain forest root

2004-12-14 Thread Grillenmeier, Guido
nope. you'd need to migrated - even with domain rename (which also allows you to change parent/child relationships of domains) you can't change which domain is the root of your forest.   /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Calders StijnSent: Tuesday, Decem

RE: [ActiveDir] Domain Name and DNS Problems

2004-12-14 Thread Edwin
That is why I mentioned the Perl script that is used.  That is exactly what it does.  But this is not what I would like to see.  I would like for our internal AD DNS to only host records for our internal systems and forward any other unresolved requests. On Tue, 2004-12-14 at 09:29 -0500, Sal

RE: [ActiveDir] Domain Name and DNS Problems

2004-12-14 Thread Bernard, Aric
Edwin,   You could theoretically upgrade your Exchange server to E2K3 followed by an upgrade of the OS to W2K3.  At this point, even with the W2K Pro systems, you could perform a domain rename assuming your forest has a functional level of (2) Windows Server 2003 as a fix now exists for E

[ActiveDir] User Photos in AD

2004-12-14 Thread Jason Benway
Using Hyena, I can add a photo to a user object. I cannot find what the attribute name is for the photo. It looks like the photo itself is added to the database not just the path. Are there any not used default attributes so I could use a path, instead of embedding photos into AD? Thanks,jb List

[ActiveDir] GPO Question

2004-12-14 Thread Salandra, Justin A.
If I set the policy "Remove access to all Windows Update Features" will that prevent the Windows Update from updating from the SUS server I have configured using GPO as well? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAI

Re: [ActiveDir] OT: intrusion prevention

2004-12-14 Thread Sean Johnson
Snort ( http://www.snort.org ) won't cost you anything other than the time to learn it, and really no matter what kind of IDS solution you use, there is a decent learning curve to overcome. On Mon, 13 Dec 2004 18:05:50 -0500, Kern, Tom <[EMAIL PROTECTED]> wrote: > my company is looking at getting

RE: [ActiveDir] making another domain forest root

2004-12-14 Thread Lucia Washaya
Return Receipt Your RE: [ActiveDir] making another domain forest root document :

RE: [ActiveDir] making another domain forest root

2004-12-14 Thread Ricardo . Konno
Return Receipt Your RE: [ActiveDir] making another domain forest root document :

RE: [ActiveDir] making another domain forest root

2004-12-14 Thread Jorge de Almeida Pinto
In W2K3 AD in DFL and FFL W2K3 you have the possibility to rename and/or reposition AD domains within an AD forest. You can however rename a forest root domain but you can not reposition it. A domain rename/reposition is also only possible when certain systems accept it (e.g. E2K3 with SP1)

RE: [ActiveDir] Need AD DNS Help ASAP

2004-12-14 Thread Mulnick, Al
You didn't say what the BIND domain is or how many actual domains you have (AD Domains). That said, have you seen dnscmd.exe and what it can do for you? http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deploy guide/en-us/Default.asp?url=/resources/documentation/WindowsServ/200

RE: [ActiveDir] List object mode

2004-12-14 Thread Grillenmeier, Guido
yep, makes sense - with list object mode turned on and the list content right removed on the parent, you're forced to check if an object itself is to be displayed or not, which is a permission set on the object.  When the mode is turned off (default), you just either add all children to the