Re: [ActiveDir] GPMC Error

2005-07-10 Thread Matt Holland
Hi Mike, This article should help you out. http://support.microsoft.com/kb/321476/EN-US/ Cheers, Matty On 09/07/05, mike kline [EMAIL PROTECTED] wrote: I would like to delegate GPO creation to a handful of people. I open GPMC and then go to group policy objects. I select the delegation tab

RE: [ActiveDir] GPMC Error

2005-07-10 Thread Darren Mar-Elia
That's part of it. That doesn't control whether Domain Admins can create GPOs in the first place. It just controls the ACLs a new GPO object gets when its created. You have to also modify the permissions on the System\Policies container in the domain and the permissions on the Policies folder in

Confidential Attributes (was RE: [ActiveDir] Who was asking for a list of SP1 changes? I think it was this DL......)

2005-07-10 Thread Sakari Kouti
About confidential attributes in SP1: When you set an attribute to be confidential, mere read permission is no longer enough for you to see the attribute value. HOW TO ENABLE - Select the attribute to be set as confidential. Category 1 attributes are not possible to select, which rules most

Re: Confidential Attributes (was RE: [ActiveDir] Who was asking for a list of SP1 changes? I think it was this DL......)

2005-07-10 Thread Brett Shirley
First off I don't really know security, so I'm like 43% confident in the accuracy of what I'm about to say ... Two things: A) Small note, 0xF is 15 decimal and is equivalent to 4 bits set (0b), you either meant 0x10 (16 decimal) or 0x8 (8 decimal) probably. Really you should understand

RE: Confidential Attributes (was RE: [ActiveDir] Who was asking for a list of SP1 changes? I think it was this DL......)

2005-07-10 Thread Eric Fleischman
Sadly, a misstep on the part of our friendly garage door operator. use the ldp.exe from the %windir%\ADAM directory The LDP required for this is the LDP in R2's ADAM, not in the currently shipping one. Sorry. We can send this to you if you need it now, or just fetch it out of the R2 beta

[ActiveDir] OT: DHCP Capacity Planning

2005-07-10 Thread Brian Desmond
Has anyone got some insight/links about a scenario like this? Three DHCP servers (could offload to separate machines). ~650 sites, 2 subnets a pop, ~70K dhcp clients (maybe another 10K, no idea what the mac population is). What kind of hardware requirement would I have to support