>>> 1. Push it through SMS - Only problem I can think, if sms client is not
installed on client desktop then he/she will get survey. I don't want to add
SMS client dependency on it.
This is the obvious method, since you already invested in SMS. IF SMS client
is not installed on all your clients,
If tweaking means changing or adding settings via GPO, then "yes".
Some tweaks are performance related and some are simply environmental or
filling gaps in GPO with custom crafted adm files.
hth,
neil
___
Neil Ruston
Global Technology Infrastructure
Nomura Internati
I'm looking specifically for Security templates and such.
What does Windows 2003 not do that you are adjusting for?
[EMAIL PROTECTED] wrote:
If tweaking means changing or adding settings via GPO, then "yes".
Some tweaks are performance related and some are simply environmental or
filling gaps
Examples:
NTDS port
NTDS diags
DNS scavenging
DS/FRS/DNS event logs
Memory optimisation
Beyond that, I also configure several 3rd party apps via ADM files (e.g.
AV scanner) in the hope that one day, these vendors will provide their
own ADM files (hint, hint)
neil
-Original Message-
Fro
There are any number of additional "tweaks" that may be implemented depending
on the environment.
This may involve revoking rights from specific groups or users. Setting
startup parameters for services etc. Sometimes one of the pre-existing MS
templates fits the bill. Other times you need a custom
Just as an update.
We have decided on an additional and new separate Forest/Domain
infastructure to host external user accounts...
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ulf B.
Simon-Weidner
Sent: 08 November 2005 22:24
To: ActiveDir@mail.acti
Thanks all for all inputs.. we have decided to go for SMS option.
Deji: For login script option, here people don't logoff from system everyday;
they just lock their workstation and go home. That is why I had raised concern
for pushing file through login script.
Regards,
Dinesh Tashildar
Ext:18
Just wondering if anyone has seen this? We occasionally see errors in the event
log on our DC's under File Replication Service Event id 13559. The error states
the following:
The File Replication Service has detected that the replica root path has
changed from "c:\winnt\sysvol\domain" to "c:\wi
These may be useful:
http://www.adminlife.com/247reference/msgs/16/83529.aspx
http://support.microsoft.com/default.aspx?kbid=819268
hth and good luck,
neil
___
Neil Ruston
Global Technology Infrastructure
Nomura International plc
-Original Message-
From:
W2K or W2K3 and SP level?
-Original Message-
From: "Whaley, Greg" <[EMAIL PROTECTED]>
Date: Thu, 10 Nov 2005 09:00:17
To:
Subject: RE: [ActiveDir] File Replication issues
Just wondering if anyone has seen this? We occasionally see errors in the event
log on our DC's under File Replicatio
W2k SP4 and over a 2gig of space on the volume holding the sysvol.
Greg Whaley
Consulting LAN Engineer
St. John Health
586-753-1594
-Original Message-
From: Mark Parris [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 10, 2005 9:24 AM
To: ActiveDir.org
Subject: Re: [ActiveDir] File Repl
Yes Exchange is a resource hog. If I run Exchange (virtualized) on it
own set of hardware? This should provide sufficient resources (assuming
you have high quality hardware) and also give you the benefits of
virtualization. Or consider running multiple Exchange servers on a
32-way machine. Each
Has anyone in the group seen a tool or script to dump the
information in DHCP to a file? My DHCP admins want to see what MAC addresses
are assigned to what IP address. It’s too large to do by hand because
there are a couple of hundred scopes and 10s of thousands of addresses. Thanks!
T
Windows 2000 domain/servers:
I have a server that was set to use dhcp for its net
address. I turned that off and gave it a static IP
address. Ever since then, the dns record for that
server keeps disappearing. I am using windows dns
server. Can anyone give me any clues?
thanks
Sorry away from my main computer at the
moment but we have dumped DHCP data in the past using NETSH and from memory the
dump command. Hope it helps.
Scotty
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark
Sent: 10 November 2005 14:52
To: activedir
Thanks for all your feedback guys. I am off to do some promoting,
member server promoting that is.
...D
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Is the server configured to register its A record in DNS?
neil
___
Neil Ruston
Global Technology Infrastructure
Nomura International plc
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of sdgesa gaeharth
Sent: 10 November 200
The old w2k res kit has a tool that can import and export
the database too:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/dhcpexim-o.asp
neil
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of McLeod,
ScottySent: 10 November 2005 15:00To:
ActiveDir@mail.activ
DHCPCMD from the reskit should give you what you're looking
for.
Joe
Pochedley A computer terminal is not some clunky old television
with a typewriter in
front of it. It is an interface where the mind and body can connect with the
universe and move bits of it about. -Douglas Adams
From
I would love to see this script.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, November 09, 2005 9:03 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Automating NoMas
Me? I don't. I just change the passwor
Someone dumped 2 GB of data on a file server since two days ago. This is
unlikely and not normal in my environment. What is the best way to find
out other than comparing folders by folders?
-Z.V.
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/List
yes. "register this connection's address in dns" is
checked.
--- [EMAIL PROTECTED] wrote:
> Is the server configured to register its A record in
> DNS?
>
> neil
>
>
>
> ___
> Neil Ruston
> Global Technology Infrastructure
> Nomura International plc
>
>
>
> -
Thanks guys…I’m sure one of
these two tools will do it. Much appreciated as always
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Pochedley
Sent: Thursday, November 10, 2005
10:13 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Pulling
DHCP data
I keep getting these errors on my root domain controller and
any new DC’s added are not being issued certificates.
Event Type: Warning
Event Source: CertSvc
Event Category: None
Event ID: 77
Date: 11/10/2005
Time:
Is your CA on Windows Server 2003 in a
Windows 2000 domain?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding,
DevonSent: Thursday, November 10, 2005 11:44 AMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] CertSvc
Error
I keep getting these errors on my
roo
Hi Ben,
Putting aside AdminSDHolder for a
momentmaybe you were looking for the /P:N option instead?
Of course this may increase the number of ACEs on the object more than what
you'd like, but I saw the /I:T thing and thought that's more
applicable to the parent object, rather
It was a Windows 2000 upgraded to Windows
2003
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Michael B. Smith
Sent: Thursday, November 10, 2005
12:02 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc
Error
Is your CA
on Windows Server 20
The “DomainController(v0.0):
V1 Certificate Template” is not
supported under Windows Server 2003. You may be specifying that your DCs
autoenroll for this certificate via GPO. Check out your DDC GPO. The new
policy they should be autoenrolling for is “Domain Controller
Authentication”.
Hi every body
I
am new in this group, and I have a problema,
I
have a domain with 18 subdomains. (may be that´s crazy)
one
of my domains admins deleted a user in one of those subdomains, created
it, but there a trash in the AD Global catalog.
It
is
Intrust for Active Directory by quest software
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rascher,
Raymond
Sent: Tuesday, November 08, 2005 8:52 AM
To: 'ActiveDir@mail.activedir.org'
Subject: [ActiveDir] Change Auditor tools
Hello, I am looking for a
You can delete the CNF- one
and then look at:
http://support.microsoft.com/?kbid=840001#6
Sincerely,Dèjì Akómöláfé,
MCSE+M MCSA+M MCT
Microsoft MVP
- Directory Services
www.readymaids.com - we know
ITwww.akomolafe.comDo you now realize that Today is
the Tomorrow you were worried abou
In my lab I had a computer account that would not completely migrate. It
was in AD but the ADMT did not change its domain affiliation and thus when I
logged on it created a whole new profile. This has me worried as I can just
see us do this to the head honcho here and all his programs go missing..
Where exactly is this setting in the DDC
policy? All I have enabled is this:
Policy
Setting
Microsoft network server: Digitally sign communications (if
client agrees)
Enabled
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
I have both InTrust by Quest and Active Administrator by ScriptLogic on
my network now. I can tell you from real world side by side comparisons
that Active Administrator is MUCH easier to set up and get running out
of the box. It is also much easier to configure with regards to emailing
alerts and
Also, under ‘Default Domain Policy’
I also have these settings…
Public Key Policies/Encrypting
File Systemhide
Propertieshide
Policy
Setting
Allow users to encrypt files using
Encrypting File System (EFS)
Enabl
And this….
Public Key Policies/Autoenrollment
Settingshide
Policy
Setting
Enroll certificates automatically
Enabled
Renew expired certificates, update
pending certificates, and remove revoked certificates
D
Return Receipt
Your [ActiveDir] trash in active directory
document
:
Did you disable the DHCP Client service on the server? That service is
responsible for dynamic registration of a computer's A and PTR record.
Also, did you manually delete the DNS record and allow the server to
re-create it via dynamic registration? If not, then it's possible the DHCP
server sti
In the default domain controllers policy
(or an alternate policy if you have left this one intact), look at the
following:
Public Key Policies/Autoenrollment Settings
Public Key Policies/Automatic Certificate Request
Settings
Keep in mind that this could be set in any
policy that affe
If I remember correctly you will want to
enable both the renew and update features (below) to help resolve your issue.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Thursday, November 10, 2005
10:51 AM
To: ActiveDir@mail.activedir.org
Subjec
Just delete the CNF one
-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, November 10, 2005
1:01 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] trash in
active directory
Hi every body
I am
One quick and free way - use Windows Search to show all files
created/modified during the last 2 days.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
Sent: Thursday, November 10, 2005 10:20 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir]
Hmm…I’ve enabled those
settings and rebooted the CertSvc and am still getting these errors:
Event Type: Warning
Event Source: CertSvc
Event Category: None
Event ID: 53
Date: 11/10/2005
Time: 3:10:06 PM
User: N/A
Comp
You’ll also have to refresh the
policy on the affected DCs (i.e. gpupdate.exe /force). Are all of the DCs
W2K3?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Thursday, November 10, 2005
12:19 PM
To: ActiveDir@mail.activedir.org
Subject: RE:
Title: Changing Authenticode settings from GPO
Good afternoon,
I am attempting to set up my AD 2003 network to support code signing for .NET and InfoPath. All certificates are based on a domain CA. When a user attempts to run an application that is signed, the user is asked if they want to
TreeSize @ http://www.jam-software.com
Might help in finding where the data is if it is all in a directory.
Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
Sent: Thursday, November 10, 2005 9:20 AM
To: ActiveDir@mail.activedir.org
Subject: [A
Hopefully the lease expiration on DHCP is timed accordingly to the DNS
scavenging process - in which case, DHCP would have released the IP
already... I'd bet on a disabled DHCP client at this point unless the
lease/scavenging periods are way out of sync.
:m:dsm:cci:mvp marcusoh.blogspot.com
-
47 matches
Mail list logo