Douglas,
The key is
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
DisablePasswordChange =1.
Further Information is available from
http://support.microsoft.com/?id=154501
Alan Cuthbertson
- Original Message -
From: "SysPro Support" <[EMAIL PROTECTED]>
T
Good day to you all.
How can the Users and Computers snap-in be modified to display
additional properties?
For example I might wish to see the employeeID property of a user in
the Organization tab.
Regards
Peter Jessop
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.ac
The object
"cn=user-display,cn=409,cn=displayspecifiers,cn=configuration,dc=xxx,dc=yyy",
attribute "adminpropertypages" may be altered. [409 refers to the English
language, others may be in use in your org.]
Additional entries may be provided - one per additional attribute to be exposed
in the
There is no good reason for this that I know of when it comes to SMS. I
suspect maybe they're doing software inventory rules and do not know to
specifying the env var of %windir%.
:m:dsm:cci:mvp
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: M
I have come to find that our Engineers are actually the ones pushing for the
WINNT directory so the legacy apps will continue to function, at least the
ones that don't call a variable. The SMS/Tivoli folks are intersted in
moving forward with the WINDOWS directory. It looks like across the board
Title: Exchange and disabling accounts
Hi Everyone,
After users (with mailboxes) leave the organization their user accounts are disabled for an amount of time and after that they are deleted.
When a account is disabled the attribute msExchUserAccountControl is set to 2. This tells exchange
My suspicion is that Microsoft will not likely abandon the use of the key
variables any time soon[1]. Many of their own applications and other server
products rely on these variables, and they have communicated that the use of
these variables is safe and protected.
Rick
[1] However, Microsoft h
Honestly, not really. I know how to DCpromo the bad machine out of the
domain, but I haven't been able to figure out which DC that is. I have 4 of
them.
Thanks,
--
Matt Brown
[ SELECT * FROM IT WHERE EyeContact=True ]
Information Technology System Specialist
Eastern Washington University
___
Dan, are you using a ghost boot partition in your images?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan Holme
Sent: Monday, June 06, 2005 11:46 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: Cloned machine domain membership
If you
Anybody have any recommended training on Active Directory? already taken
the "Microsoft Windows 2003 Configuring Active Directory Services" from
Global Knowledge, but am looking for the next step I guess.
Thanks,
--
Matt Brown
[ SELECT * FROM IT WHERE EyeContact=True ]
Information Technology Sys
If you have any good contacts with Microsoft, see if you can get a seat in
one of their "Troubleshooting Windows Server 2003 Directory Services"
classes. Great class for someone who already knows the book theory and is
looking for instruction on how to fix some of the problems that you will
encoun
Repadmin /replsum * /bysrc /bydest
This should give you an idea of which partners are out of sync (look at
time lapse). Run repadmin /showrepl dcname against the members that
show up out of sync. This should help you get closer to the problematic
DCs.
:m:dsm:cci:mvp
-Original Message-
Good morning everybody. I need to remove some buttons from IE's toolbar
on certain accounts. It seems like this should be done in the GPO under
User Config/ windows settings/ ie maint/ browser user intrface/ browser
toolbar customizations/ by checking the box to delete existing buttons...
This
There were already a lot of replies about monitoring software so I'll
point out something else. There is a great product from Quest called
Spotlight on AD that is pretty good for giving you a heads up view of
your AD environment. It will not replace a real monitoring/reporting
product like Openview
Hi Fred...
Try User Configuration/Administrative Templates/Windows
Components/Internet Explorer/Toolbars/Configure toolbar buttons.
You can choose what you wish to show there...I believe
John
"Freddie
Microsoft Update was released too, about time there was one place to
get updates.
http://www.microsoft.com/technet/prodtechnol/microsoftupdate/default.mspx
Phil
On 6/6/05, Mark Parris <[EMAIL PROTECTED]> wrote:
> With SP2 and a feature pack you also get push email to windows mobile phones.
>
>
At first I thought cool. Now I am thinking this needs looked into more.
I just ran it on my XP machine (which I do manage my exchange servers
from) and it shows:
"MS05-021: Vulnerability in Exchange Server 2003 and in Exchange 2000
Server can allow remote code execution"
as an available patch. S
Exmerge?
Brian Narkinsky
System's Analyst
Florida Department of Environmental Protection
Tallahassee, FL
32399
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Tuesday, June 07, 2005 12:06
AM
To: ActiveDir@mail.activedir.org
Subject:
Doug,
Did you try to install the patch? It is possible and even probable
you would need to apply the patch on your management statuion as well
as the servers.
Dennis
On 6/7/05, Douglas M. Long <[EMAIL PROTECTED]> wrote:
> At first I thought cool. Now I am thinking this needs looked into more.
>
I guess it depends where the vunerability is, if it is in the management tools
then I guess it will affect any machine it is installed on.
Mark
-Original Message-
From: "Douglas M. Long" <[EMAIL PROTECTED]>
Date: Tue, 7 Jun 2005 13:44:08
To:
Subject: RE: [ActiveDir] FYI---WSUS released,
As far as I know, you should patch the mgmt wkst as it replaces DLL's
etc that can affect how the mgmt app communicates and interacts with the
server if it's patched.
jlc
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dennis Depp
Sent: Tuesday, June 07,
I was just saying that we ran into the 16GB store limit on Exchange
Standard edition so we upgraded to Enterprise for the sole purpose of
getting larger stores. But now, less than a month after the check
cleared, we find out that Exchange Standard with support up to 75GB.
-Original Message---
I thought that the 75GB was in reference to the limit on mailboxes, not the
entire Information Store.
- Original Message -
From: "Crawford, Scott" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, June 07, 2005 11:08 AM
Subject: RE: [ActiveDir] FYI---WSUS released, Exchange 2003 SP2 coming
I w
It must be the entire store. It'd be rather unusual to add support for
75GB mailboxes on a server that can only support a single 16GB store.
I, too, just upgraded to Enterprise edition solely for the increased
mailstore size. Oh well.
-James
-Original Message-
From: [EMAIL PROTECTED]
Hmmm, yea that is a bit strange. Either way, in standard 2003sp1 and
previous the limit for the entire store is 16GB. If sp2 allows 75GB
into a mailbox, the store must be allowed to be at least that big.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ja
Do you know if the Storage Group limit is based on the edb file or both the edb
file and the stm file?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Crawford, Scott
Sent: Tuesday, June 07, 2005 2:08 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [Act
Based on the sum of the two.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mischler
Timothy J Contractor NASIC/SCNA
Sent: Tuesday, June 07, 2005 1:43 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FYI---WSUS released, Exchange 2003 SP2 comi
Your message
To: Bradley Schutter/Hill Holliday Advertising Inc./[EMAIL PROTECTED]
Subject: RE: [ActiveDir] FYI---WSUS released, Exchange 2003 SP2 coming
was read on Tue, 7 Jun 2005 14:55:02 -0400
binvTurFPXxbM.bin
Description: message/disposition-notification
So exchange 2003 can support up to 75 GB??? Has anyone experienced
this?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Crawford, Scott
Sent: Tuesday, June 07, 2005 2:08 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FYI---WSUS released, Ex
It's in sp2.
http://www.microsoft.com/exchange/downloads/2003/sp2/overview.mspx
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Salandra,
Justin A.
Sent: Tuesday, June 07, 2005 3:01 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FYI---WSUS
I am not aware of this change.. However I did notice that standard now supports
16gb for Private and 16gb for the public stores, not both combined.
Jose
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Salandra, Justin
A.
Sent: Tuesday, June 07, 2005 12:01 P
On 6/7/05, Salandra, Justin A. <[EMAIL PROTECTED]> wrote:
> So exchange 2003 can support up to 75 GB??? Has anyone experienced
> this?
He was talking about after applying Exchange SP2, not out of the box.
Phil
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.or
The limit raises to 75 GB in SP2
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Tuesday, June 07, 2005 3:07 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] FYI---WSUS released, Exchange 2003 SP2 coming
I am not aware of
Yeah, really busy with work.
I apologize, I didn't read your post as closely as I should
have, you are absolutely correct that you can't combine those admod queries.
Different objects being impacted.
If you would, offline so we don't bother the others, a dump
of the object that it won't
I am running a Windows Server 2003 domain with Service for Unix 3.0.
Does anyone know of a way (or of a script) to automate the activation of
the Unix Attributes for each user of the domain so that I don't have to
manually go though 200 user accounts?
Thanks
List info : http://www.activedir.org
Neil
Thanks for that.
Regards
Peter
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
I think his issue is that it won't do home directory management.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Peter Jessop
Sent: Tuesday, June 07, 2005 2:40 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] User account and home directory
Err for what in particular?
If you mean the little process below that watched the changes to the
directory and dumped them to the screen. That version of the tool I can't
share, I actually wrote that specific version on the corporate dime. It is a
a nicely cleaned up version of something else I wr
I'm missing security logs for the pass year. Can anyone tell me why the
event viewer would stop creating security log files?
Antonio
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.act
Wow.. your right.. " Increase in mailbox storage size limits to 75 gigabyte
(GB) for Exchange Server 2003 Standard Edition in response to customer feedback
and evolving mailbox storage needs."
http://www.microsoft.com/exchange/downloads/2003/sp2/overview.mspx
Jose
-Original Message-
Fr
Title: Exchange and disabling accounts
Oh this is a fun one.
Straight up, as someone else mentioned, you can use nomas
to do this cleanup. However it isn't the most efficient tool if you have a lot
of them to clean up. I have sent MS docs on things I think need to be corrected
for it. I do
Sorry I wasn't more clear, joe. Yep, I meant the tool. I knew what you
were changing - that wasn't a real mystery. But the tool that showed the
cause and effect is really quite cool.
Nice little bit of a 'before and after'.
Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAI
My first guess is that all auditing is shut off. Something has to be turned
on to audit - otherwise nothing will be posted to the Sec Log.
If this is on the DCs, check the Default Domain Controller Policy. If this
is Member Servers, look Default Domain Policy, OU GPO where Member exists,
or the
Title: Exchange and disabling accounts
I wrote a batch file used during
terminations that included granting the SELF account the associate external account
permission. I used a tool called admodcmd. I believe this is the
site: http://blogs.technet.com/exchange/archive/2004/08/20/208045.as
We provide Directory Services training to Microsoft's worldwide internal
support staff, the curriculum we deliver requires a high degree of existing
knowledge and is designed to provide detailed architectural and
product-support information.
Please feel free to contact me at the email address belo
Yep, I like it myself. Starting writing the first version of it about 2
weeks after I loaded my first domain controller back in like 1999/2000. I
got sick of doing windiff of two manual dumps right quick.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
For a taste of Dean's training [1] go to HP World in San Fran in August, he
is putting on one of the few full day seminars and it is about AD Internals
and DR. The content is just a snippet from one of his regular classes.
Here is a link about the seminar
http://www.hpworld.com/conference/hpworl
Hi Dean,
Are your course's online or are they instructor led in the class room? I was
always under the impression that Quickstart Technologies www.quickstart.com was
the CTEC of choice for Microsoft employees, however if class's instruction is
only in the class room then it may just be a good
It looks like they've changed things since I used it
last, but there was a tool from ADMWin (http://www.admwin.com/default.htm)
that would do exactly what you're looking for. I believe the one that will
do what you want is now called SetupBatcher. It's pretty straight
forward, you enter th
So The real question is when are you going to have the
functionality available as a joeware tool?
Remember - I've offered money before for your utils - offer still stands
[1]. But, I'm not quite equipped to be the sole benefactor of your first
7-digit accumulation, old buddy. ;o)
Rick
LOL.
I'll work on tools you can pay for. :o)
At the moment I am working on a tool to dump all registered event log IDs
and messages of a given machine. Trying to decide if it should be a freebie
or a for pay. As you may guess I have been working on some monitoring type
apps and when I decided I w
I was very very close to adding that (CSV of event log) to repadmin ...
after /csv for /showrepl we were pretty much sold ...
It's funny, when I read CSV, I think excel?
Cheers,
Brett Shirley
posting "AS IS" ...
On Tue, 7 Jun 2005, joe wrote:
> LOL.
>
> I'll work on tools you can pay for. :o
csv from event logs. What's the drawback of logparser?
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
No... straight GHOST image.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long
Sent: Tuesday, June 07, 2005 7:29 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: Cloned machine domain membership
Dan, are you using a ghost boot
I have a page that has a script to make this process significantly
easier... you can hook ANY script, web page, etc., into a new context
menu command in AD U&C.
http://intelliem.editme.com/admindispspec
BTW, the article referenced below does a similar thing --just more
'manually' -- your question
Hmm, I am not doing CSV of event log, I am doing dump (default is tab
delimited but it is configurable) of all registered event messages on a
given machine (remote or local).
So for instance, when your monitoring person comes to you and says, what
events do you want to be alerted on on machine X a
Thanks for all your input on this - I will check these
out. I must say I'm surprised they are not easy to come by, or that MS
have not implemented something like it themselves - as for many institutions it
must be a basic requirement.
Dan.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECT
57 matches
Mail list logo
