RE: [ActiveDir] OT: Legato Replistor

2005-11-09 Thread Jensz, Travis
Don't get me wrong, by all means get in there and test it out (I'm doing exactly that right now), but I think it'd be a little foolish to bank on product which hasn't even had its first release yet when there are others out there which have already had a few years to mature. -Original

[ActiveDir] Automating NoMas

2005-11-09 Thread Harding, Devon
How can I prevent the Event ID error 9548(MSExchangeIS) from happening?  I normally use NoMas to fix em, but I want to prevent them from happening. Would it be possible to create a script that runs like every morning and perform exactly what NoMas does for every child domain I have? Devon

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread joe
Correct your deprovisioning process. Those issues are due to incorrectly setting values on mailbox enabled users. Basically bad data is going in the directory and then you are manually swinging back and correcting it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [ActiveDir] Improving your AD's fault tolerance with old hardware?

2005-11-09 Thread joe
Even outside of Exchange I think it depends on how fast the box actually is and how hard you hit AD. For a box in the closet to offer a get out of jail because everything else fails... Ok. But I would be concerned that other machines you don't think of normally as much as you think of Exchange

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread joe
Let me restate this just a little. The issue are due to Exchange Dev having an incomplete understanding of how people do things in the enterprise and assuming that the only time a disabled account could have a mailbox is because it is a resource mailbox so instead of having an attribute for it

RE: [ActiveDir] Directory Experts Conference 2006 call for presentations

2005-11-09 Thread Gil Kirkpatrick
Title: Directory Experts Conference 2006 call for presentations The URL I provided is messed up... its www.dec2006.com/callforpapers.cfm. I somehow managed to get a file:// inserted in the original link. -g From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil

RE: [ActiveDir] Improving your AD's fault tolerance with old hardware?

2005-11-09 Thread deji
Don't mean to call you out, Joe, but .. Didn't you use to run the PDC for that Widget factory on a very small (no, itsy-bitsy) hardware? And didn't you explain at that time that there was no sense in putting it on one of the beefy Dells we were purchasing around that time? And didn't run

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread Harding, Devon
Ok with that said, what would be the correct way or tools to disable a mail enabled account in Active Directory? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Wednesday, November 09, 2005 11:49 AM To: ActiveDir@mail.activedir.org Subject: RE:

RE: [ActiveDir] Improving your AD's fault tolerance with old hardware?

2005-11-09 Thread Ed Crowley [MVP]
Of course, my lack of concern with his proposal was contingent upon the validity of his assumption that performance wouldn't be an issue. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL

RE: [ActiveDir] Improving your AD's fault tolerance with old hardware?

2005-11-09 Thread joe
Under NT4 we had crappy hardware for the two NA domains (actually 2 DCs for each domain split across the NA datacenters). But I went into a morning management meeting and said that we were ready to die any day and needed more hardware and went to the systems integration people and said we needed

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread joe
See http://support.microsoft.com/?id=278966 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Wednesday, November 09, 2005 12:25 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Automating NoMas Ok with that said, what

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread Al Mulnick
Something like this might be of interest. http://www.microsoft.com/technet/prodtechnol/exchange/guides/DROpsGuide/a209faf9-91a1-46d7-8a6d-538ce3fba85d.mspx The best way would be to disassociate the mailbox from the account and maintain the mailbox for as long as the account retention

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread Ed Crowley [MVP]
Hmmm... Maybe there ought to a mailbox store just for terminated users. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!™ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent:

[ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Tom Kern
I'm having a problem trying to figure out how to script or batch file something. I want to move N number of files from a series of sudirectories to another dir and then wait to make sure a different process that is running will remove the files i just moved from the other dir, before moving more

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread joe
I recommended this to a company once, actually it was a large company with a lot of users who should have been deleted and I recommended a whole server. Move all mailboxes of users who were going away to it and then disconnect/delete the mailbox. It gets away from the 9548 issue as well as the

RE: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Coleman, Hunter
Yes, this is scriptable. Perl vs VBS? Either will work, so I'd go with whatever you are most comfortable with. How quickly are your source directories going to refill, and how quickly are is your destination directory going to get cleaned up by the different process? From: [EMAIL

Re: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Tom Kern
the source dirs take awhile to refill as they are being filled by xcopy. it copies about 4gig a batch. The destination dir empties in about 10-15secs. also the destinantion dir can only handle 1000 files at a time before being emptied. thanks On 11/9/05, Coleman, Hunter [EMAIL PROTECTED] wrote:

RE: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Rich Milburn
Tom, Suggest you use FSO.MoveFile or Folder.MoveHere in _vbscript_ to do the moving rather than xcopy. You could enumerate files, have a for each loop with a counter, and move files until the counter is divisible by 1000 (or = 1000 and reset), sleep for 15-20 seconds, and continue. After

Re: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Tom Kern
thanks i think i might need a little more assistance here. i'm a little out of my depth On 11/9/05, Rich Milburn [EMAIL PROTECTED] wrote: Tom, Suggest you use FSO.MoveFile or Folder.MoveHere in _vbscript_ to do the moving rather than xcopy. You could enumerate files, have a for each loop

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread Joe Pochedley
OK, let me start by saying I'm no programming or scripting expert, but I dabble... :) I copied and pasted the text off the TechNet site.. When I run it, unmodified, the script only runs against my child domain. We have one parent domain, and one child; the machine I'm running from is my

RE: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Coleman, Hunter
Rich has outlined what you'll need to do. I'd probably include an initial check of the destination folder to make sure it's empty before starting any of the copies/moves. http://www.microsoft.com/technet/scriptcenter/scripts/storage/files/default.mspxhas links to snippets that will show you

[ActiveDir] OT: In Servers how much tweaking are you doing?

2005-11-09 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Steve Riley's WebLog : When security breaks things: http://blogs.technet.com/steriley/archive/2005/11/08/414002.aspx I know that Joe and Exchange still don't see eye to eye...but on your DCs are you doing much tweaking these days? -- Letting your vendors set your risk analysis these days?

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread Harding, Devon
This script may be the answerif it fixes accounts across the whole forest, I can set an At job to run once a week. I do get this erro on some accounts though: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Wednesday, November 09,

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread Harding, Devon
Failed to get MailboxRights, error 0x8007203A : The server is not operational. -Original Message- From: Harding, Devon Sent: Wednesday, November 09, 2005 4:39 PM To: 'ActiveDir@mail.activedir.org' Subject: RE: [ActiveDir] Automating NoMas This script may be the answerif it fixes

RE: [ActiveDir] Directory Experts Conference 2006 call for presentations

2005-11-09 Thread Hutchins, Mike
Title: Directory Experts Conference 2006 call for presentations lmao From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian DesmondSent: Tuesday, November 08, 2005 5:16 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Directory Experts Conference 2006 call for

RE: [ActiveDir] OT: In Servers how much tweaking are you doing?

2005-11-09 Thread Brian Desmond
I have about half a page worth of special steps that the out of the box config doesn't do for DCs... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks

[ActiveDir] some users do not have allow inheritable permissions set

2005-11-09 Thread Ben D. Kusa
some users do not have allow inheritable permissions set. The only way I have found to reset that setting is to open each user and check that option off. I have tried running dsacls OU=ou,DC=dc,DC=dc /I:T and it seems to go through ok but does not reset that option. Should that work? Or

Re: [ActiveDir] OT: In Servers how much tweaking are you doing?

2005-11-09 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Given that his annual cleaning includes bit bucket cleaning. [that nearly had me going for a split second] . does the Master care to share to the Padewan and anyone else that is reading this? Brian Desmond wrote: I have about half a page worth of special steps that the out of the box

RE: [ActiveDir] OT: In Servers how much tweaking are you doing?

2005-11-09 Thread Brian Desmond
We polish the platters and relamp the scsi trays too. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Wednesday, November 09, 2005 8:20

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread deji
Me? I don't. I just change the password to a randomly-generated complex one, make domain users its primary group, remove it from all groups except domain users, hide it from GAL and move it to a Terminated OU. That's where it stays until my monthly cleanup script runs, detects its modified date,

[ActiveDir] Distribute file to all desktop

2005-11-09 Thread Tashildar, Dinesh \(Cognizant\)
Title: Distribute file to all desktop Hi, Our company is company with one survey which in the exe format. We wanted to push this exe to desktops which are connected to our corporate network. Anyone aware of way to do this in Windows environment? Any freeware tools? Regards, Dinesh

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Blair, James
Title: Distribute file to all desktop Dinesh, You could do it through AD and roll out a login script.If it were me I wouldrather get the *.exe put on a network share, have it initialise and advise when the user "took" the survey...Batch file could look somethinglike this: CLS@echo

RE: [ActiveDir] some users do not have allow inheritable permissions set

2005-11-09 Thread Steve Linehan
Just out of curiosity when you go back an hour later is the box unchecked? This really sounds like the work of AdminSDHolder and the users in question are likely members of protected groups. If you have not looked at the following Knowledge Base article youmay wantto see if this is what you

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Tashildar, Dinesh \(Cognizant\)
Title: Distribute file to all desktop James, Thanks for inputs I didnt get you, what do you mean by have it initialize and advise when the user took the survey ? I am thinking to push this survey in two ways 1. Push it through SMS Only problem I can think, if sms client is not

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Alain Lissoir
Title: Distribute file to all desktop Is this a large app or a simple .exe? Pushing via GPO? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tashildar, Dinesh (Cognizant)Sent: Wednesday, November 09, 2005 10:46 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Tashildar, Dinesh \(Cognizant\)
Title: Distribute file to all desktop Its a simple exe. Regards, Dinesh Tashildar Ext:182 | Vnet 21182 Change in number From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alain Lissoir Sent: Thursday, November 10, 2005 12:23 PM To:

RE: [ActiveDir] some users do not have allow inheritable permissions set

2005-11-09 Thread Almeida Pinto, Jorge de
Every hour, the domain controller that has the primary domain controller (PDC) emulator operations master role verifies the ACLs on members of the protected groups and compares them to the ACL on the AdminSDHolder object. If the ACL that is on the AdminSDHolder object is different, the ACLs on

RE: [ActiveDir] Automating NoMas

2005-11-09 Thread Almeida Pinto, Jorge de
With ADMODCMD you can query AD, disable users and add SELF to the ACL. This is something I posted a while ago... What to do with user accounts that are or not mailbox enabled when the corresponding user(s) leave(s) the company. For that and without buying a full blown solution you can create

Re: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Forgive me if I'm reading this wrong? Are you asking to deploy an executible file to all so that they can run the file? Do they then need local admin rights and have to trust the source of this survey? Isn't that a bit contrary to teaching anti-social engineering practices? In my office all

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Alain Lissoir
Title: Distribute file to all desktop Have a look at http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKit/58846816-8fda-4083-9345-922c362b6ba6.mspx However, I don't remember for sure if it is possible to start the app once it is installed. One here will certainly

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Tashildar, Dinesh \(Cognizant\)
Susan, This survey in written in VB and converted into exe format. Once I push this exe on all desktop it will display few questions which objective answers. Regards, Dinesh Tashildar Ext:182 | Vnet 21182 Change in number -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Blair, James
Title: Distribute file to all desktop Dinesh, Dinesh: Thanks for inputs I didnt get you, what do you mean by have it initialize and advise when the user took the survey ? James: If you take a look at the batch file once the *.exe is initiated itputs thedate, time and username to a file and

Re: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
...yeah...but... that's how viruses deploy too right? Put yourself in the role of the stupid end user. How does this look and act to an end user? How easily can it be duplicated and used for social engineering purposes? A recent FBI bulletin indicated that there are two increases of

RE: [ActiveDir] Distribute file to all desktop

2005-11-09 Thread Blair, James
Dinesh, Sheepishly I have to agree with Susan here, I only used the login script for new users in a PowerPoint presentation. To get to middle ground what about making it a web survey and rolling out the URL through group policy as a favourite or default home page. At the end of the survey get