RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread neil.ruston
Why would you want to have them several years earlier available? - a period of time would be required for testing and deployment. I don't see this feature (although major) anything different then the 'native mode' switch you have in AD and Exchange. - I disagree. Joe suggested that a newer

RE: [ActiveDir] Interesting Scripting Task.....

2005-10-11 Thread Smith, Brad
Thanks all for the replies Darren- I wil linvestigate the scripts you mention and see how I get on. Al/Ed- I need to run this on the same network as the production domain (W2K) and hence need to use a different domain name Kamlesh- The original post of that tool is what got me started

Re: [ActiveDir] exchange confusion(OT)

2005-10-11 Thread Tom Kern
[EMAIL PROTECTED]. thats the one and only address.. On 10/10/05, Ed Crowley [MVP] [EMAIL PROTECTED] wrote: What are the entries under E-Mail Addresses for the contact? Which SMTP address is bolded? Ed Crowley MCSE+Internet MVPFreelance E-Mail PhilosopherProtecting the world from PSTs and Bricked

RE: [ActiveDir] GPO Permissions with .vbs

2005-10-11 Thread Steve Rochford
If the logon script is a batch file then: start wscript script.vbs should make the script just carry on; if it's a _vbscript_ logon scrip then something like: oshell.run "wscript.exe script.vbs" will launch the process and not wait for it to complete. I'll leave you to give the perl

RE: [ActiveDir] LDAP Query Fails

2005-10-11 Thread Sudhir Kaushal
Hi Al, I did the following configurations in the OE directory services.. like 1. LDAP server name - I tried by giving both domain name and the server name ( ldap://ldap.server name) 2. I changed the search base also. Like ou=abc,dc=def,dc=com 3. kept the port to 389 for ldap search. After

RE: [ActiveDir] exchange confusion(OT)

2005-10-11 Thread Derek Harris
The Exchange discussion list here has some people who can probably tell you for sure: http://e-newsletters.internet.com/discussionlists.html Are the servers all in the same Exchange Org? Where does the contact send the mail? Your mailboxes contacts shouldn't have their home server name

RE: [ActiveDir] Adding custom fields to AD

2005-10-11 Thread Brett Shirley
Yes, I think Sept 20th, 2005, but as anything I or msft produces, there is a caveat that it would release when it is ready.

RE: [ActiveDir] Results of survey - Most common cause of Active Directory failures?

2005-10-11 Thread Jensen, Ken
Joes blog quotes Heinlein its gotta be a good site for it J Ken Jensen Capistrano Unified School District San Juan Capistrano, California I tell ya, if that did it for me, I'd be the happiest man on earth... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] October MVP Awards

2005-10-11 Thread WILLIAMS, J.D.
Title: RE: [MVP-Directory Services] October MVP Awards Seems like a good place to wade in with a 'thanks y'all!'. I don't know how some of the folks on here find time to provide such detailed answers to our questions and do their day jobs. Right behind all the good info, my favorite part

RE: [ActiveDir] LDAP Query Fails

2005-10-11 Thread Al Mulnick
Title: Message I suspect that you have some issues with the security settings. To be sure, you'll want to drop a network trace like ~Eric suggested. I think that will be the fastest way to solve the issue. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [ActiveDir] Interesting Scripting Task.....

2005-10-11 Thread Al Mulnick
Yep, if you need to have it on the same network and accessible via the same network for multiple machines (can't just remote to it) then you'll certainly want the scripting route. LDAP/ADSI (as Ed also mentioned) is pretty easy as long as you get the order correct, while the GPO's might take a

Re: [ActiveDir] exchange confusion(OT)

2005-10-11 Thread Tom Kern
ok. i think you guys are overcomplicating things- i have one contact which like most contacts, is for an address external to my ORG. this contact has 1 address which is also its primary address. the address is external to my ORG. In other words, its a contact :) the smtp address on the contact is

RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread Al Mulnick
Each VM has it's own support and patching problem, true. But I see that as the price for the flexibility. It's not MS software that relies on old API's? How do you explain WINS requirements?? ;) Like I said Joe, I see some benefit. I also see a lot of things that have been moved from the old

RE: [ActiveDir] report on permissions of files and folder

2005-10-11 Thread WILLIAMS, J.D.
We use setacl (setacl.sourceforge.net). Can dump ACLs in a couple of different formats. Thanks, JD From: Senthil Kumar [mailto:[EMAIL PROTECTED] Sent: Monday, October 10, 2005 5:24 AM To: Active directory group Subject: [ActiveDir] report on permissions of files and

RE: [ActiveDir] Interesting Scripting Task.....

2005-10-11 Thread Jensen, Ken
There must be a scriptable way of automating the import of .ldf files as well. We have had good success re-creating our production environment using server imaging and exports of our OU, groups and user fields. We did have a bit of trouble with users and groups but found it was the order in which

RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread Al Mulnick
You know what would really be great? If Microsoft were to make it so that the architecture didn't allow those quirky little things that occur in the products when they are deployed together on the same machines. Like Exchange not using any other DC if it's deployed on a DC type of quirk. Some

RE: [ActiveDir] AD Migration Question

2005-10-11 Thread Alborzfard, Alex
Everyone thanks for all your responses, they were all very useful. --Alex From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar Sent: Monday, October 10, 2005 12:56 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Migration Question

RE: [ActiveDir] Schema Updates

2005-10-11 Thread Marcus.Oh
Title: Schema Updates Exactly. My beef too. Let me tell you there support is less than stellar. I think Id rather talk miis to some dude in India before engaging a Cisco support rep again. :m:dsm:cci:mvp marcusoh.blogspot.com From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread Rocky Habeeb
joe, You know this is not possible. No one has your knowledge base! I mean no one. You're in a class by yourself. You define the class, it's a little bit like God. No one can touch you! Okay enough adulation. Anyways, I would hope it would come in between $100 and $500 USD but who knows

Re: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
IMHO, that's legacy app viewpoint where folks are still deploying Windows 2000 because of legacy apps. I'm full borg here. Why couldn't you 'opt in' if you wanted to when you had full borg. There are settings now... auth methods, smb signing, etc like that now that kills off backwards

RE: [ActiveDir] October MVP Awards

2005-10-11 Thread Marcus.Oh
Title: RE: [MVP-Directory Services] October MVP Awards Congrats guys J :m:dsm:cci:mvp marcusoh.blogspot.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Deuby, Sean P Sent: Monday, October 10, 2005 10:23 PM To: ActiveDir@mail.activedir.org Subject:

RE: [ActiveDir] Schema Updates

2005-10-11 Thread Tim Vander Kooi
Title: Schema Updates I agree completely that the strength, or weakness, of your implementation depends 100% on the abilities of the partner doing your install and your admins on staff. I've been working with Unity since it was the voicemail system for NEC PBXs back in the 90's so it's never

Re: [ActiveDir] October MVP Awards

2005-10-11 Thread Kamlesh Parmar
I agree wholeheartedly !! I have just started working on AD seriously, so these people surely, keep me in check as in what I have to know, to be certain, that I know enough. :) On 10/11/05, WILLIAMS, J.D. [EMAIL PROTECTED] wrote: Seems like a good place to wade in with a

Re: [ActiveDir] Fwd: password policy not getting reflected on Domain object

2005-10-11 Thread Kamlesh Parmar
I think, I have solved the issue, As we know, Domain Controllers take the account policies from DDGPO only, and from no other GPO. So problem was, we had enabled Block Policy Inheritance on Domain Controllers OU, and DDGPO was not enforced. We had thought that since account policy values are

RE: [ActiveDir] ADFIND mods

2005-10-11 Thread Al Mulnick
Yay!!! Uh, one thing though. While you're mod'ing the CSV output, can you make it so that we can pick the separator character? I know the purists out there wouldn't like to call something a csv if it's not, well comma separated, but it's sometimes useful to utilize other separator characters.

RE: [ActiveDir] report on permissions of files and folder

2005-10-11 Thread TIROA YANN
hi, Yes there is a built in tool in windows 2000 named cacls Open a command prompt and type cacls Cheers, Yann De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de WILLIAMS, J.D.Envoyé: mardi 11 octobre 2005 16:36À: ActiveDir@mail.activedir.orgObjet: RE: [ActiveDir] report on

RE: [ActiveDir] Active Directory wish list

2005-10-11 Thread Al Mulnick
Expand? Even better in my opinion would be a DC that could auth someone from any domain, basically a caching DC, once someone auth's there, their credentials come down and sit there until some TTL and then they are purged. How's that better than having a live, writeable version handy? The

RE: [ActiveDir] single login size in bytes?

2005-10-11 Thread Al Mulnick
Having been in that situation you are correct that it's likely very little over the wire at initial logon. It's if they have to access anything back across the wire or if they let Outlook run in cached mode that you'll see differences. Outlook and other apps are variables that are hard to

RE: [ActiveDir] Interesting Scripting Task.....

2005-10-11 Thread Al Mulnick
To automate the import of the .ldf files you need to shell to a command prompt and run the ldif import commands appropriate for what you want to do. A batch file would work as well. If you wanted to automate it all, you could use the batch/.cmd file completely to do this. Al -Original

Re: [ActiveDir] exchange confusion(OT)

2005-10-11 Thread Tom Kern
when i run ethereal on the bridgehead server, i see many tcp retransmissions to the journal server. what could this signify? is this an issue on my Exchange server's side? thier exchange server? my bandwidth? their connection? thanks again On 10/11/05, Tom Kern [EMAIL PROTECTED] wrote: ok. i

RE: [ActiveDir] single login size in bytes?

2005-10-11 Thread Fuller, Stuart
We went through this exercise during our design and plan phase of our AD deployment four years ago - including using the same whitepaper that Bob mentioned. We have multiple sites across Montana with 56K frame relay lines that authenticate back to DCs in a centralized location. We thought that

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread Al Mulnick
interrupts the regularly scheduled program You know joe is in a class by himself because he wasn't allowed to play with the other kids, right? G /interrupts the regularly scheduled program FWIW, I think that tool already exists in several agent-based forms. For example HIDS systems have those

[ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread John Strongosky
Title: RE: [MVP-Directory Services] October MVP Awards Hey everyone, long time reading hereI'm confused as I'm new to AD and doing my research for our conversion..so here is my question we are gong to have an MT root domain and a sub ( if that the correct term) domain where we are

[ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread ZAD Forum for Active Directory
Title: RE: [MVP-Directory Services] October MVP Awards Hey everyone, long time reading hereI'm confused as I'm new to AD and doing my research for our conversion..so here is my question we are gong to have an MT root domain and a sub ( if that the correct term) domain where we are

RE: [ActiveDir] October MVP Awards

2005-10-11 Thread Rich Milburn
Title: RE: [MVP-Directory Services] October MVP Awards I concur and if some of you didnt know, some of the contribution is on the newsgroups and elsewhere so this is not all these guys post!! I lost track because I just did not have the time to keep up with stuff here, but I know that

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread Rich Milburn
Rocky, you should make the time to become familiar with a few of them, because if you do, you'll see how useful they can be - they can save you multiples of the time you invested into them, if you admin AD at all (more than just adding a user and resetting a password here and there :)

RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread Brett Shirley
re: some virtualization and isolation of processes and threads ... A CS teacher once told me that in general in computers whenever you hear the word virtual, you can replace with slow ... - virtual memory (yeah, yeah I'm really thinking of paging, not VM, but I used a

RE: [ActiveDir] Schema Updates

2005-10-11 Thread deji
I think I'd rather talk miis to some dude in India before engaging a Cisco support rep again Marcus, I can't resist the urge to turn off my lurking mode and ask you to please explain the relevance of the statement above to the scope of this conversation, especially in this public forum. I am

RE: [ActiveDir] single login size in bytes?

2005-10-11 Thread Rich Milburn
Thanks Al - The factor at issue here is simply the addition of the workgroup computers to the domain. They currently do everything over that link, but they're not domain members. People think that authentication traffic would break the connectivity! :)

RE: [ActiveDir] exchange confusion(OT)

2005-10-11 Thread Al Mulnick
Title: Message One thing Exchange 2000x doesn't do well is deal with hosting a FQDN that indicates itself. It causes weird results. So if their internal server primary dns suffix is journaldomain.com and they have a recip policy of servername.journaldomain.com then they'll have some strange

[ActiveDir] .msp GPOs

2005-10-11 Thread Harding, Devon
How can I deploy a Symantec patch file (SAV_Corporate_Edition_10.0.1.1007_AllWin_EN.msp) that was originally deployed via GPO through an .msi file? Devon Harding Windows Systems Engineer Southern Wine Spirits - BSG 954-602-2469

Re: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread Phil Renouf
You can run the forest prep from anywhere as long as you have the appropriate rights. That said this should be done on the Schema Master. Once forestprep is done and replicated properly you can run domainprep in each child domain. Phil On 10/11/05, John Strongosky [EMAIL PROTECTED] wrote: Hey

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread Coleman, Hunter
Title: RE: [MVP-Directory Services] October MVP Awards John- Some more details please... What do you have in place now, in terms of Active Directory and Exchange (versions, layout, etc)? Or is this a brand new install of everything? Are you talking about Exchange forestprep/domainprep, or

Re: [ActiveDir] ADFIND mods

2005-10-11 Thread Laura E. Hunter
You know that's just crazy talk, right Al? ;-) - L On 10/11/05, Al Mulnick [EMAIL PROTECTED] wrote: Yay!!! Uh, one thing though. While you're mod'ing the CSV output, can you make it so that we can pick the separator character? I know the purists out there wouldn't like to call something a

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread Rocky Habeeb
Rich, That's my plan someday, but me and my partner (only) administer: [1] 200 Users in 4 states over a WAN, (Four forests, each with a single domain). [2] Forty Servers including 11 DCs. [3] Eighty other devices (High speed printers, plotters, scanners, etc.). [4] 700 apps including everything

RE: [ActiveDir] Schema Updates

2005-10-11 Thread Marcus.Oh
No slight on intelligence, technical prowess, or anything of that like, Deji. I only meant that I'd rather work through a language barrier discussing technology with people in India or China than to discuss Cisco software products w/ Cisco support reps. It'd be a far more positive

Re: [ActiveDir] ADFIND mods

2005-10-11 Thread Kamlesh Parmar
If my vote counts, I would also want that. On 10/11/05, Al Mulnick [EMAIL PROTECTED] wrote: Yay!!!Uh, one thing though. While you're mod'ing the CSV output, can you make itso that we can pick the separator character?I know the purists out therewouldn't like to call something a csv if it's not,

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread Ed Crowley [MVP]
Title: RE: [MVP-Directory Services] October MVP Awards It doesn't matter in which domain you run ForestPrep, so you might as well run it in the domain in which you're installing the Exchange servers. You must run DomainPrep in any domain in which Exchange servers or recipients will reside,

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread Rich Milburn
Al wrote: Oh, and email isn't what I would call a reliable method of notification in that type of situation... soap box mode It's nice to hear someone say that... email is a good notification sometimes but when I used to work EM [1] for CNEHQ [2] that's all anyone ever wanted - red and

RE: [ActiveDir] .msp GPOs

2005-10-11 Thread Rich Milburn
Are you asking how to deploy the patch with a GPO, if you originally deployed the SAV msi using a GPO? Or are you saying you want to send the msp file as an msi? --- Rich Milburn MCSE, Microsoft MVP - Directory

Re: [ActiveDir] Adding local admin rights to non english native o s?

2005-10-11 Thread Kamlesh Parmar
Just thought, if you wanted to remove the dependancy on sid2user.exe... I have created the _vbscript_ which uses WMI to get the local admin group name from SID... On Error Resume Next strComputer = . strMember2Add = Domain\OuAdmins Set objWMIService = GetObject(winmgmts:\\ strComputer

RE: [ActiveDir] .msp GPOs

2005-10-11 Thread Darren Mar-Elia
The standard routine is to apply the .msp patch file to the MSI package share that you used to deploy the app via GP. Hopefully you created an admin install to do the initial install. Then you can use msiexec to apply the patch file and then issue a Re-deploy on the package in the GPO.

Re: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread Phil Renouf
Ethereal, it's free:) http://www.ethereal.com/ Phil On 10/11/05, Rocky Habeeb [EMAIL PROTECTED] wrote: [1]Did I mention I don't even have a protocol analyzer or a Flukedevice?_ -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]

RE: [ActiveDir] ADFIND mods

2005-10-11 Thread Al Mulnick
It must be the company I keep when I travel (-% -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura E. Hunter Sent: Tuesday, October 11, 2005 1:43 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ADFIND mods You know that's just crazy

RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread Al Mulnick
If I recall correctly, we were talking about the scenarios that this would play in. We can deduce that we have the hardware to run at least 4 virtual instances of an OS on the same hardware in current software (R2). We can also deduce that one or several scenarios indicate that this would be

RE: [ActiveDir] Schema Updates

2005-10-11 Thread Ed Crowley [MVP]
I don't think you've dug yourself out of the hole yet. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!™ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday,

RE: [ActiveDir] single login size in bytes?

2005-10-11 Thread Al Mulnick
Ah. I see where you're coming from then. Layer 8 issues can be tough to solve. I like to add l1 to l7 and see if I can match. I wouldn't expect auth traffic to tip the scales, but I really think the should be asked to investigate QoS (if network is a separate group of people; otherwise

Re: [ActiveDir] exchange confusion(OT)

2005-10-11 Thread Tom Kern
Both servers are exchange 2k The conversation goes something like this- ehlo mail from: rcpt to: on my mailserver's side. all these get 250 smtp response codes from the journal server. then, my mail server tries to send a xexch50 which gets a need to auth first response from their server. now i

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread Al Mulnick
I was actually thinking of any type of notification that is not reliant on the systems being monitored, but I didn't consider the additional logging. Good point. Joe? How long till you're done? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich

RE: [ActiveDir] .msp GPOs

2005-10-11 Thread Tim Vander Kooi
Reinstall the msi using the new msp. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, DevonSent: Tuesday, October 11, 2005 11:56 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] .msp GPOs How can I deploy a Symantec patch file

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread Tony Murray
Title: RE: [MVP-Directory Services] October MVP Awards And you should always DomainPrep the forest root, irrespective of whether it contains Exchange servers or recipients Tony From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP]Sent: Wednesday, 12 October

RE: [ActiveDir] .msp GPOs

2005-10-11 Thread Harding, Devon
Thats exactly what I just did, and it worked. Thanks! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, October 11, 2005 2:13 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] .msp GPOs The standard routine is to apply

RE: [ActiveDir] Schema Updates

2005-10-11 Thread deji
No sweat, Marcus. You know what they say about ASSumption. That's why I thought I should ask before I make one of myself :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the

RE: [ActiveDir] Adding local admin rights to non english native o s?

2005-10-11 Thread deji
Kamlesh, this is not a direct response to your script, or anything like that. I have not been paying much attention to this thread lately, so apologies to the OP if I am missing something here. I just think that we are getting silly here re-inventing wheels when there is already a mechanism in

RE: [ActiveDir] Modifying Domain Admins Administrators Group

2005-10-11 Thread joe
I am going to hurt myself when I fall off that pedestal you are trying to stick me on. If you knew the people I knew the way I knew them you would think the way I do, I know quite a bit and have a lot of opinions but there are others with far more knowledge and even better opinions. I just happen

RE: [ActiveDir] single login size in bytes?

2005-10-11 Thread Rich Milburn
Al speaking of QoS (and feel free to mail me offline [whoever] if it's too off-topic)... I have never really bothered with QoS on XP because most users (IMHO) do not use anything that takes advantage of it. In order to use it for our credit card processing traffic, would it be true that all

RE: [ActiveDir] exchange confusion(OT)

2005-10-11 Thread Al Mulnick
Title: Message This was what I was thinking of http://support.microsoft.com/default.aspx?scid=kb;EN-US;288175 But it's possible you have another issue going on. Can you capture the trace via netmon? Do you have it available? Ethereal is fine as well, but... Whichever you use, filter the

RE: [ActiveDir] Adding local admin rights to non english native o s?

2005-10-11 Thread joe
Going back to not paying attention mode now :) Promises promises... ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, October 11, 2005 3:38 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Adding local

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread joe
Title: RE: [MVP-Directory Services] October MVP Awards Why? I have read this before and couldn't pick up a reason for it other than "just do it...". joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony MurraySent: Tuesday, October 11, 2005 3:33 PMTo:

RE: [ActiveDir] Schema Updates

2005-10-11 Thread joe
Oh no, please don't let this list become a politically correct patrolled zone. I will just walk right away. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, October 11, 2005 12:23 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] Active Directory wish list

2005-10-11 Thread joe
How's that better than having a live, writeable version handy? The limitations of a RODC seem to be unwieldy and otherwise clumsy on it's own. In most every branch DC I have seen, there was no serious need to be able to handle full LDAP searchs or allow local writes. The local DC is an auth

RE: [ActiveDir] LDAP Query Fails

2005-10-11 Thread joe
Three words Net Work Trace :) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sudhir KaushalSent: Tuesday, October 11, 2005 7:29 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] LDAP Query Fails Hi Al, I did the following configurations in the OE directory

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread Tony Murray
Title: RE: [MVP-Directory Services] October MVP Awards It's so that the GCs in the root domain are available to DSAccess. http://blogs.technet.com/exchange/archive/2004/02/27/81133.aspx Tony From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Wednesday, 12 October

[ActiveDir] WOL

2005-10-11 Thread DeStefano, Dan
Is there any utility built into any version of Windows that can be used to send a WOL magic packet? If not, can someone direct me to a small utility that would enable waking a machine by pinging it? Thanks, Dan DeStefano NOTICE: The information contained in this

RE: [ActiveDir] Schema Updates

2005-10-11 Thread deji
It helps to know the make-up of your audience in any forum. That helps ensure a modicum of professionalism. The OP already clarifies his position, and it helps to clear things up in my mind. Nothing politically correct about that. Not that I have any problem with asking for political

RE: [ActiveDir] WOL

2005-10-11 Thread Thommes, Michael M.
Does this help? http://www.depicus.com/wake-on-lan/wake-on-lan-gui.aspx Mike Thommes -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DeStefano, Dan Sent: Tuesday, October 11, 2005 4:49 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir]

[ActiveDir] Different Versions of Internet Explorer

2005-10-11 Thread Anthony Crawford
We have a web based application that is behaving slightly different depending on the users version/patches of Internet Explorer. I was wondering if someone would shed some light as to what the numbers mean under Version. I understand it is Version 6.0 but what do the subsequent numbers mean? I

RE: [ActiveDir] .msp GPOs

2005-10-11 Thread Brian Desmond
Why would he do that? The MSI is on the share for the GPO either directly or as the result of an administrative install. The correct procedure is to apply the patch to the distribution point with msiexec and I believe the /p switch and then Use the redeploy option by right clicking the app

RE: [ActiveDir] WOL

2005-10-11 Thread Brian Desmond
No to the first question. Solarwinds will have something in their toolkit, Ive seen several examples on codeproject.com recently that you might checkout as well. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL

[ActiveDir] Different Versions of Internet Explorer

2005-10-11 Thread Aaron Sixtus
Return Receipt Your [ActiveDir] Different Versions of Internet Explorer document:

RE: [ActiveDir] WOL

2005-10-11 Thread Crawford, Scott
Heres one of many links from googling for magic packet wol http://ahh.sourceforge.net/wol/wol.html From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DeStefano, Dan Sent: Tuesday, October 11, 2005 4:49 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] WOL

[ActiveDir] Changing netbootGUID

2005-10-11 Thread Erick Thompson
Title: Changing netbootGUID We are now using Shuttle nVidia based systems as a standard system. They work great, except that the badly done nVidia boot agent always reports the same GUID when doing an RIS installation. So when you image a system, you get a duplicate ID error when it tried to

RE: [ActiveDir] ADFIND mods

2005-10-11 Thread joe
Hey Al, have you actually used any of my tools? eg I added the CSVDelim and CSVMVDelim switches before I added the CSV switch. ValidOptions.push_back(csvdelim); // CSV Delimiter ValidOptions.push_back(csvmvdelim); // CSV Multivalue Delimiter

RE: [ActiveDir] ADFIND mods

2005-10-11 Thread joe
Nope it doesn't count. The csv option never would have been there without the ability to set the delimiter and multivalue delimiter. ;o) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh ParmarSent: Tuesday, October 11, 2005 1:55 PMTo:

RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread joe
It's not MS software that relies on old API's? How do you explain WINS requirements?? ;) Exchange does as Exchange does... They have no excuse for having a dependency on WINS or more accurately NetBIOS name resolution other than it still works so they didn't fix it. To be quite honest, I am not

RE: [ActiveDir] GPO Permissions with .vbs

2005-10-11 Thread joe
joeware.netfine now - I'd guess it was just one of those things that make life such fun! Like DNS. ;o) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve RochfordSent: Tuesday, October 11, 2005 5:54 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO

RE: [ActiveDir] Schema Updates

2005-10-11 Thread joe
Title: Schema Updates Oh I think it is a rarity that someone actually talks to the AD people prior to buying and planning implementation of something that needs AD. When I ran ops I ran into that on a regular basis. The state of being purchased though didn't sway me much when they said it

RE: [ActiveDir] Different Versions of Internet Explorer

2005-10-11 Thread Free, Bob
Tony- The numbers are in the form: major version.minor version.build number.sub-build number This is what the versions are for various versions of XP 6.00.2600. Internet Explorer 6 (Windows XP) 6.00.2800.1106 Internet Explorer 6 Service Pack 1 (Windows XP SP1) 6.00.2900.2180

RE: [ActiveDir] Schema Updates

2005-10-11 Thread joe
Too much professionalism and political correctness can so water down the content of the message or the crux of the problem that any conversation simply becomes a waste of time as it becomes an experiment in how to not hurt or, even worse in this context, how to elevate the feelings of others.

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread joe
Title: RE: [MVP-Directory Services] October MVP Awards Ah thanks. So the recommendation should be, run domainprep in any domain that has GCs that may possibly be used by Exchange. That makes sense to me as that is a real requirement. joe From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [ActiveDir] Different Versions of Internet Explorer

2005-10-11 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
BTW you might want to put Security bulletin 05-051 on a fast track for Win2k or Win XP RTM/SP1. Microsoft Security Bulletin MS05-051: Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution (902400): http://www.microsoft.com/technet/security/Bulletin/MS05-051.mspx *Could the

RE: [ActiveDir] TS GPO and Citrix Settings

2005-10-11 Thread Derek Harris
It won't change the settings back unless they are set under the policy -- the settings you want to change aren't actually controlled by policy, are they? If so, the best option would be a separate policy to reverse the settings, as Alan suggested. From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread Ed Crowley [MVP]
Title: RE: [MVP-Directory Services] October MVP Awards Better, run DomainPrep in all domains! Ed Crowley MCSE+Internet MVPFreelance E-Mail PhilosopherProtecting the world from PSTs and Bricked Backups! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Tuesday,

RE: [ActiveDir] Schema Updates

2005-10-11 Thread deji
Joe, I had a mind to ignore you - because I'm SERIOUSLY trying to stay in my not paying attention mode due to some pressing commitments right now. Also, like I said before, I had an issue with the statement, the OP clarified it and now I know how to relate to that OP henceforth. Are you trying

[ActiveDir] AD/DNS BPA?

2005-10-11 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
lurk mode off Stupid question... okay we have Exchange Best practices analyzer right? http://www.microsoft.com/exchange/downloads/2003/exbpa/default.mspx I know you guys don't like GUI...but besides DNSlint, dnsdiag, Sysinternals, Joeware stuff and such things... is there currently enough

RE: [ActiveDir] WOL

2005-10-11 Thread Derek Harris
I've cleaned the scriptsa bit, and attached them as txt - rename vbs edit domain-specific details to use. You need to use either GetIPList.vbs or GetIPListXP.vbs, depending on client type you want to query for MACs. (2k or XP/2k3) Put those in the same dir on the machine that will gather

RE: [ActiveDir] AD/DNS BPA?

2005-10-11 Thread Al Mulnick
The tools are there, but the interpretation is sometimes lacking G I've been told that several companies are currently offering health checks, but I haven't tested any of them. As for Microsoft tools, I'm a fan of using dcdiag and netdiag right after scanning the event logs. That'll give me

RE: [ActiveDir] ADFIND mods

2005-10-11 Thread Al Mulnick
I was waiting for the t-shirt before using it. If it's already there, that would be great. Now if only I could read... dg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Tuesday, October 11, 2005 5:10 PM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] BlackComb Super Forest Functional Mode

2005-10-11 Thread Al Mulnick
It is an interesting point to ponder joe. Fast and flexible vs. slow and archaic. Hmm... Ok, I can buy some of that. But to bring a finer point to the conversation, you're saying that to provide a competitive advantage, major changes need to be in place? Push the envelope from a technology

RE: [ActiveDir] Forest prep/domain prep in a MT root Domain

2005-10-11 Thread Tony Murray
Title: RE: [MVP-Directory Services] October MVP Awards Yes. How I stumbled upon this was trying to figure out why topology discovery on an Exchange server in a child domain wouldn't include the DCs and GCs from the root domain. I think it was Al who pointed me to the blog link that showed

  1   2   >