RE: [ActiveDir] help troubleshoot ntds general 1049 error

2004-12-30 Thread Pete Procenko
Thanks for reply! Ok, I will,but it would be in Russian. Тип события(Event Type):Ошибка (Translation - Error) Источник события(Event Source): NTDS General Категория события(Event Category): (9) Код события(Event id): 1049 Дата: 29.12.2004 Время: 8:47:13 Пользовате

RE: [ActiveDir] Windows 2003 logon console issue.

2004-12-30 Thread Tashildar, Dinesh \(Cognizant\)
I don't see any event in Event viewer. This has start happening from last 2-3 weeks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ASB Sent: Friday, December 31, 2004 11:09 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Windows 2003 logon

Re: [ActiveDir] Windows 2003 logon console issue.

2004-12-30 Thread ASB
Check the EventLogs on that server... Also, when did this start happening? -ASB FAST, CHEAP, SECURE: Pick Any TWO http://www.ultratech-llc.com/KB/ On Fri, 31 Dec 2004 10:42:25 +0530, Tashildar, Dinesh (Cognizant) <[EMAIL PROTECTED]> wrote: > > > If we try to logon to the Windows 2003 serv

RE: [ActiveDir] GPO Processing

2004-12-30 Thread Crawford, Scott
We used to have systems that had many different NIC drivers loaded so that the same image could be used on several different hardware platforms and I'd get these messages sporadically. Turns out the fix was changing auto-negotiate to 100Full on the NIC and the switch. We've recreated our imag

[ActiveDir] Windows 2003 logon console issue.

2004-12-30 Thread Tashildar, Dinesh \(Cognizant\)
Title: Windows 2003 logon console issue. If we try to logon to the Windows 2003 server at the console and found user name and password is grayed out.  The server/domain name is white box, which is normal. The only solution to come out of it is hard boot. I have tried to find solution on inte

RE: [ActiveDir] Issue with setting "Account lockout threshold"

2004-12-30 Thread Eric Fleischman
First, I'd point out that 5 is a pretty low number. Considering that some applications will try more than once for a single password provided by the end user, you might want to consider going up to a value that is at least 15. From a security perspective, consider that going to something that is

[ActiveDir] Issue with setting "Account lockout threshold"

2004-12-30 Thread Olegario, Alan
We tried setting the “Account lockout threshold” to 5 attempts in our Default Domain policy.  Once it propagated across to various servers, we found that some of the local accounts (i.e. Administrator, IUSR, SMS, etc) accounts were getting locked out.  We’ve been on the phon

RE: [ActiveDir] domain controller name

2004-12-30 Thread Jorge de Almeida Pinto
Hi, try: NETDOM QUERY DC (all DCs in a domain) NLTEST /DCLIST: (all DCs in a domain) With NSLOOKUP (default OS command line) you can do name resolution from DNS->IP With NBLOOKUP (additional dload from MS) you can do name resolution from NetBIOS->IP NETDOM QUERY FSMO will retrieve the FSMO role

Re: [ActiveDir] GPO Processing

2004-12-30 Thread George Arezina
Hi there, Is this a Dell box? If so update the NIC driver. Is the card 1000mbps? If so, try lowing it back to 100mbps. I had the same problem on Dell boxes that were 1000mbps. Once I updated the driver and lowered the speed to 100mbps all 1054 errors went away. Cheers, George   -Original M

Re: [ActiveDir] GPO Processing

2004-12-30 Thread Ertug Gurhan
Try, enabling the Wait For Network, GPO, by default XP does a Fast Boot, which does not wait for GPO settings, by default, this can be seen on switched networks, if you hook the PC up to a HUB you probably wont get this error, it is not processing the GPO because it hasnt "officially" logged

RE: [ActiveDir] GPO Processing

2004-12-30 Thread Nathan Casey
Does the PC have a Gig NIC card? http://support.microsoft.com/default.aspx?scid=kb;en-us;326152 >>> [EMAIL PROTECTED] 12/30/2004 10:26:49 AM >>> I had this problem on a PC and I fixed it by simply updating the NIC driver. Have you tried this? _ From: [EMAIL PROTECTED] [mailto:

RE: [ActiveDir] Software Deployment From MSCS Share

2004-12-30 Thread Dan DeStefano
Duh, can't believe I didn't realize that. It works now, thank you. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield Sent: Wednesday, December 29, 2004 6:48 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Software Deploymen

RE: [ActiveDir] GPO Processing

2004-12-30 Thread Dan DeStefano
I had this problem on a PC and I fixed it by simply updating the NIC driver. Have you tried this? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.Sent: Thursday, December 30, 2004 11:31 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] GP

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Steve Shaff
Title: Message I would check the DNS suffix and see if that may be the issue.  Also, check the Register this connection and use this connections DNS suffix in DNS registration.  (just a thought) Thanks, S   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Ma

[ActiveDir] Event 14000 AD Topology Discovery

2004-12-30 Thread Steve Shaff
Group,   Does anyone have any information about this event?  It appears to be a warning, from the AD Topology Discovery source, with an event of 24000.   The only thing that I have seen is that it has failed to get the PDC Master for the domain “forestDNSZones.domain.com”.  This will caus

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Darren Mar-Elia
Title: Message If its just one system, then you might try just re-joining the machine to the domain. Perhaps its machine account got fudged up. You might check its system event log for Netlogon errors that give some clue to this.     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beh

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread Eric Fleischman
They are one in the same. MSDN seems to be giving it a pretty name. I don’t know why, I never noticed that before.   MSDN appears to be documenting the default in AD, not the net result after applying the Exchange schema extensions. That’s why it says false, when Exchange flips it to true

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Salandra, Justin A.
Title: Message I have also done a nslookup and can retrieve srv records and name records easily.   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Thursday, December 30, 2004 11:50 AM To: ActiveDir@mail.activedir.org Subject

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Salandra, Justin A.
Title: Message I did a set logonserver and got a response of my domain controller so I am logged into the domain.  But I am still getting this error.   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rogers, James Sent: Thursday, December 30, 200

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread joe
See I just knew it would make it to your blog, that is why I helped out. :o)   Someone around here will probably throw it into a cookbook too.       joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. SmithSent: Thursday, December 30, 2004 11:15 AMTo: ActiveDir@

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Salandra, Justin A.
Title: Message My DNS is working since ALL other workstations have no problems, just this one.   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Thursday, December 30, 2004 11:50 AM To: ActiveDir@mail.activedir.org Subject:

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread Coleman, Hunter
Apparently I do not RC :-). Thanks for the info...does that imply that isMemberOfpartialAttributeSet is not the same as "In Global Catalog" referenced in http://msdn.microsoft.com/library/default.asp?url="">? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric FleischmanSen

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Rogers, James
Title: Message You're absolutely right, my apologies.   -James -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-EliaSent: Thursday, December 30, 2004 11:50 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [FNB Spam Filter][Activ

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread joe
And for completeness (schema5.ldf)   dn: CN=Proxy-Addresses,changetype: modifyreplace: searchFlagssearchFlags: 13- I have submitted a request to MSDN to put some kind of info in the schema page for that attribute that it is updated by Exchange.   From: [EMAIL PROTECTED] [mailto:[EMAIL PR

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Darren Mar-Elia
Title: Message James- I think you mean LMHosts right? I'm not aware that etc/hosts allows NetBIOS records like that. In any case, I don't think that will help because GP processing is strictly LDAP based--there is no use of NetBIOS protocols to find or process GPOs. That is why, in an environ

RE: [ActiveDir] GPO Processing

2004-12-30 Thread Salandra, Justin A.
All are working   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Thursday, December 30, 2004 11:36 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] GPO Processing   DNS name resolution? IP connectivity to DC?

RE: [ActiveDir] GPO Processing

2004-12-30 Thread Darren Mar-Elia
Justin- This error can happen for any number of reasons. Inability to resolve LDAP srv records via DNS can be one issue. I would double-check that the DNS references on this client are correct. Assuming that is not the problem, I found this very useful and fairly recent KB article that descri

RE: [FNB Spam Filter][ActiveDir] GPO Processing

2004-12-30 Thread Rogers, James
Title: Message As a trouble-shooting method, try creating a #DOM record in your HOST file that points at the domain controller.  If this works, you most likely have a DNS problem.   -James R. Rogers -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Be

RE: [ActiveDir] GPO Processing

2004-12-30 Thread Gil Kirkpatrick
DNS name resolution? IP connectivity to DC?   -gil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.Sent: Thursday, December 30, 2004 9:31 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] GPO Processing I keep getting these errors on my Windows XP

[ActiveDir] GPO Processing

2004-12-30 Thread Salandra, Justin A.
I keep getting these errors on my Windows XP SP 1 Computer.  I have rebuilt the machine twice and have put on XP SP2 and XP SP1a and the results are always the same, I have replaced the NIC and the Cable it uses to connect to the network and can’t seem to figure out what is going on.  Any h

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread Eric Fleischman
From Exchange forest prep (schema0.ldf): dn: CN=Proxy-Addresses, changetype: modify replace: isMemberOfPartialAttributeSet isMemberOfPartialAttributeSet: TRUE -       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 30, 2004 10:0

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread Michael B. Smith
Heck, I've got more than 1,000 myself, just not in my test environment. Here it is, fixed for paging and for only looking at the proxyaddresses attribute. I didn't do your performance optimization. :-) I did clean it up a tiny bit too, so I'd feel ok putting it on my blog.   Oh, and as alway

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread joe
When I read this I was like huh?   I admit to not even knowing that proxyAddresses was in the default schema, been too long since I have seen an untainted schema. I thought Exchange put it there. Exchange must simply add proxyAddresses to the PAS and tell it to be preserved through tombstonin

RE: [ActiveDir] Delegation of Control Wizard

2004-12-30 Thread joe
Excellent, thanks Vladimir. I had heard of the issue but not that a solution other then removing the objectclass index had been put forth. I am a great fan of indexing objectclass and it is one of the first things I tell people to do so of course I didn't like the removing the objectclass in

RE: [ActiveDir] SUS

2004-12-30 Thread Salandra, Justin A.
yes   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ellis, Debbie Sent: Thursday, December 30, 2004 10:14 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] SUS   We are going to deploy SUS sometimes soon. Can patches be deployed to mach

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread Coleman, Hunter
IIRC, proxyAddresses isn't in the default GC attribute set, so in a multi-domain forest you may be missing dupes. In that case, you could either include proxyAddresses in the partial attribute set or loop through a list of the domains and query each domain.   Hunter From: [EMAIL PROTECTED]

RE: [ActiveDir] SUS

2004-12-30 Thread Michael B. Smith
Yep.   The SUS Deployment guide is pretty good. I do recommend reading it prior to deploying. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ellis, DebbieSent: Thursday, December 30, 2004 10:14 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] SUS We are going to de

[ActiveDir] SUS

2004-12-30 Thread Ellis, Debbie
We are going to deploy SUS sometimes soon. Can patches be deployed to machines while the user is logged off but the machine is turned on?

RE: [ActiveDir] help troubleshoot ntds general 1049 error

2004-12-30 Thread Eric Fleischman
Can you please paste the entire event message in to an email and reply-all with it? Please use the event viewer copy button so we get it as-is with no typo's nor language changes. Thanks! ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete Procenk

RE: [ActiveDir] Delegation of Control Wizard

2004-12-30 Thread Vladimir Turin
    Well, I felt like providing some response     Here is the story. EDM web interface allows you to sort by a particular attribute if you click on column caption. Column captions are “clickable” only for the attributes which are indexed in active directory. One our customer (and Joe pro

RE: [ActiveDir] How to find duplicate proxy address in Active Directory

2004-12-30 Thread joe
:o)   Good job Michael. Honestly I am sure quite a few people are happy and thinking, god I hate that perl crap[1] You have offered an alternative. ;o)   As for your filter your filter is fine if the audit is only against users. If you also want to check the addresses of groups and c