[ActiveDir] OT: Exchange Email Deletion Policy

2005-07-18 Thread Burkes, Jeremy [Contractor]
Everyone,     We are setting up an email deletion policy at my organization.  I have tested and understand how the recipient policy works and the entire email deletion process works.  One thing that is a little confusing is the fact that the email deletion policy works off a hidden

RE: [ActiveDir] OT: Exchange Email Deletion Policy

2005-07-18 Thread Jeremy Waldrop
This calculation is determined by the following three MAPI properties on a message. If any one of these properties is less than the limit set by the Mailbox Manager rules, then we will skip that message.   - PR_MESSAGE_DELIVERY_TIME- PR_CLIENT_SUBMIT_TIME- PR_LAST_MODIFICATION_TIME   For th

RE: [ActiveDir] OT: Exchange Email Deletion Policy

2005-07-18 Thread Burkes, Jeremy [Contractor]
Jeremy,     Nice name.  I appreciate your response and find this information valuable.  However, this is not exactly what I was looking for in the sense that we are fine with the way Exchange 2000 determines what should be deleted or not deleted to include the modified date.  I am

RE: [ActiveDir] RILOE AD Integration

2005-07-18 Thread Ruston, Neil
Title: Message Does this mean 'no additional schema mods (above and beyond previous versions)' or ' no schema mods at all, even if you have yet to deploy any previous ILO schema mods' ?   The latter would certainly be of interest.   neil -Original Message-From: [EMAIL PROTE

[ActiveDir] Does a domain require a GC?

2005-07-18 Thread Ken Cornetet
We have two domains in our forest. The "empty" root domain, and a resource domain where everything else lives. The root domain has two DCs - one each in two different sites.   Our main domain has several DCs, and most of those are GCs as well. The sites containing the root DCs each also hav

[ActiveDir] User with LDAP userPassword permissions

2005-07-18 Thread Matt Brown
Hi,   I'm trying to give an account permission to update the userPassword field via LDAP protocol in PHP.  I have it working perfect using my Admin account.  But since that has to be stored in the PHP file I would really like to have an account with much tighter security able to make the mod

RE: [ActiveDir] GC availability issue?

2005-07-18 Thread Tony Murray
Hi Jeremy   The problem with machines contacting DCs in other sites could be related to your subnet definitions in AD.  Check to see that all subnets are registered in AD and are associated with the appropriate site.   Also check your DNS settings, especially on the machines displaying th

RE: [ActiveDir] GC availability issue?

2005-07-18 Thread Bernard, Aric
Under normal (what ever that means) circumstances 2 GCs should certainly be able to handle 500 users.     Have you defined subnets for each of your 9 sites?  Are you certain that the clients in question belong to one of the defined subnets? Are your DCs registering all appropriate site

RE: [ActiveDir] GC availability issue?

2005-07-18 Thread Sakari Kouti
Hi Jeremy,   If you have 5 DCs and 9 sites, do you have non-DC-related reasons to have sites? If not, you could remove all sites that don't have a DC, and link their subnet objects to some remaining sites.   For example, if your DCs are on two AD sites, and then you have seven DC-less locatio

RE: [ActiveDir] Delegation of privilege

2005-07-18 Thread Sakari Kouti
Hi Yann,   You could grant your user those privileges that are listed as User Rights, by applying a corresponding Group Policy Object to only one DC. However, this is probably not enough for you. For example, you cannot grant a privilege to format hard drives or share folders this way.   Your

RE: [ActiveDir] Does a domain require a GC?

2005-07-18 Thread Sakari Kouti
Hi Ken,   There is (at least) one requirement for a GC in every domain. If you don't have a GC in a domain, you cannot convert universal groups in that domain to local groups. However, this is probably not a big concern for your empty root domain...   Also a couple of suggestions:   - Why not

RE: [ActiveDir] Delegation of privilege

2005-07-18 Thread Dan Holme
This may be a “rotten” answer or a perfect answer…  Check out TWEAKUI for Windows XP.  It’s ACCESS CONTROL section gives you “UI” ability to change very specific activities’ permissions, e.g. creating a share, etc.  You might try it (in a lab, first of course) as far as how it works on 2003