RE: [ActiveDir] Distribute file to all desktop

>>> 1. Push it through SMS - Only problem I can think, if sms client is not installed on client desktop then he/she will get survey. I don't want to add SMS client dependency on it. This is the obvious method, since you already invested in SMS. IF SMS client is not installed on all your clients,

RE: [ActiveDir] OT: In Servers how much tweaking are you doing?

If tweaking means changing or adding settings via GPO, then "yes". Some tweaks are performance related and some are simply environmental or filling gaps in GPO with custom crafted adm files. hth, neil ___ Neil Ruston Global Technology Infrastructure Nomura Internati

Re: [ActiveDir] OT: In Servers how much tweaking are you doing?

I'm looking specifically for Security templates and such. What does Windows 2003 not do that you are adjusting for? [EMAIL PROTECTED] wrote: If tweaking means changing or adding settings via GPO, then "yes". Some tweaks are performance related and some are simply environmental or filling gaps

RE: [ActiveDir] OT: In Servers how much tweaking are you doing?

Examples: NTDS port NTDS diags DNS scavenging DS/FRS/DNS event logs Memory optimisation Beyond that, I also configure several 3rd party apps via ADM files (e.g. AV scanner) in the hope that one day, these vendors will provide their own ADM files (hint, hint) neil -Original Message- Fro

RE: [ActiveDir] OT: In Servers how much tweaking are you doing?

There are any number of additional "tweaks" that may be implemented depending on the environment. This may involve revoking rights from specific groups or users. Setting startup parameters for services etc. Sometimes one of the pre-existing MS templates fits the bill. Other times you need a custom

RE: [ActiveDir] Incorporating external users.......

Just as an update. We have decided on an additional and new separate Forest/Domain infastructure to host external user accounts... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner Sent: 08 November 2005 22:24 To: ActiveDir@mail.acti

RE: [ActiveDir] Distribute file to all desktop

Thanks all for all inputs.. we have decided to go for SMS option. Deji: For login script option, here people don't logoff from system everyday; they just lock their workstation and go home. That is why I had raised concern for pushing file through login script. Regards, Dinesh Tashildar Ext:18

RE: [ActiveDir] File Replication issues

Just wondering if anyone has seen this? We occasionally see errors in the event log on our DC's under File Replication Service Event id 13559. The error states the following: The File Replication Service has detected that the replica root path has changed from "c:\winnt\sysvol\domain" to "c:\wi

RE: [ActiveDir] File Replication issues

These may be useful: http://www.adminlife.com/247reference/msgs/16/83529.aspx http://support.microsoft.com/default.aspx?kbid=819268 hth and good luck, neil ___ Neil Ruston Global Technology Infrastructure Nomura International plc -Original Message- From:

Re: [ActiveDir] File Replication issues

W2K or W2K3 and SP level? -Original Message- From: "Whaley, Greg" <[EMAIL PROTECTED]> Date: Thu, 10 Nov 2005 09:00:17 To: Subject: RE: [ActiveDir] File Replication issues Just wondering if anyone has seen this? We occasionally see errors in the event log on our DC's under File Replicatio

RE: [ActiveDir] File Replication issues

W2k SP4 and over a 2gig of space on the volume holding the sysvol. Greg Whaley Consulting LAN Engineer St. John Health 586-753-1594 -Original Message- From: Mark Parris [mailto:[EMAIL PROTECTED] Sent: Thursday, November 10, 2005 9:24 AM To: ActiveDir.org Subject: Re: [ActiveDir] File Repl

RE: [ActiveDir] Exchange now supported on virtual hardware

Yes Exchange is a resource hog. If I run Exchange (virtualized) on it own set of hardware? This should provide sufficient resources (assuming you have high quality hardware) and also give you the benefits of virtualization. Or consider running multiple Exchange servers on a 32-way machine. Each

[ActiveDir] Pulling DHCP data

Has anyone in the group seen a tool or script to dump the information in DHCP to a file? My DHCP admins want to see what MAC addresses are assigned to what IP address. It’s too large to do by hand because there are a couple of hundred scopes and 10s of thousands of addresses. Thanks! T

[ActiveDir] dns a record disappearing

Windows 2000 domain/servers: I have a server that was set to use dhcp for its net address. I turned that off and gave it a static IP address. Ever since then, the dns record for that server keeps disappearing. I am using windows dns server. Can anyone give me any clues? thanks

RE: [ActiveDir] Pulling DHCP data

Sorry away from my main computer at the moment but we have dumped DHCP data in the past using NETSH and from memory the dump command. Hope it helps.   Scotty   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: 10 November 2005 14:52 To: activedir

Re: [ActiveDir] Improving your AD's fault tolerance with old hardware?

Thanks for all your feedback guys. I am off to do some promoting, member server promoting that is. ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] dns a record disappearing

Is the server configured to register its A record in DNS? neil ___ Neil Ruston Global Technology Infrastructure Nomura International plc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of sdgesa gaeharth Sent: 10 November 200

RE: [ActiveDir] Pulling DHCP data

The old w2k res kit has a tool that can import and export the database too: http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/dhcpexim-o.asp   neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of McLeod, ScottySent: 10 November 2005 15:00To: ActiveDir@mail.activ

RE: [ActiveDir] Pulling DHCP data

DHCPCMD from the reskit should give you what you're looking for. Joe Pochedley A computer terminal is not some clunky old television with a typewriter in front of it. It is an interface where the mind and body can connect with the universe and move bits of it about. -Douglas Adams   From

RE: [ActiveDir] Automating NoMas

I would love to see this script. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, November 09, 2005 9:03 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Automating NoMas Me? I don't. I just change the passwor

[ActiveDir] Track User & Disk Space

Someone dumped 2 GB of data on a file server since two days ago. This is unlikely and not normal in my environment. What is the best way to find out other than comparing folders by folders? -Z.V. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/List

RE: [ActiveDir] dns a record disappearing

yes. "register this connection's address in dns" is checked. --- [EMAIL PROTECTED] wrote: > Is the server configured to register its A record in > DNS? > > neil > > > > ___ > Neil Ruston > Global Technology Infrastructure > Nomura International plc > > > > -

RE: [ActiveDir] Pulling DHCP data

Thanks guys…I’m sure one of these two tools will do it. Much appreciated as always   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Pochedley Sent: Thursday, November 10, 2005 10:13 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Pulling DHCP data

[ActiveDir] CertSvc Error

I keep getting these errors on my root domain controller and any new DC’s added are not being issued certificates.   Event Type:   Warning Event Source:    CertSvc Event Category: None Event ID:   77 Date:    11/10/2005 Time:

RE: [ActiveDir] CertSvc Error

Is your CA on Windows Server 2003 in a Windows 2000 domain? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, DevonSent: Thursday, November 10, 2005 11:44 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] CertSvc Error I keep getting these errors on my roo

RE: [ActiveDir] some users do not have allow "inheritable permissions" set

Hi Ben,       Putting aside AdminSDHolder for a momentmaybe you were looking for the  /P:N  option instead?  Of course this may increase the number of ACEs on the object more than what you'd like, but I saw the  /I:T  thing and thought that's more applicable to the parent object, rather

RE: [ActiveDir] CertSvc Error

It was a Windows 2000 upgraded to Windows 2003   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Thursday, November 10, 2005 12:02 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   Is your CA on Windows Server 20

RE: [ActiveDir] CertSvc Error

The “DomainController(v0.0): V1 Certificate Template” is not supported under Windows Server 2003.  You may be specifying that your DCs autoenroll for this certificate via GPO.  Check out your DDC GPO.  The new policy they should be autoenrolling for is “Domain Controller Authentication”.  

[ActiveDir] trash in active directory

Hi every body         I am new in this group, and I have a problema,         I have a domain with 18 subdomains. (may be that´s crazy)         one of my domains admins deleted a user in one of those subdomains, created it, but there a trash in the AD Global catalog.                 It is

RE: [ActiveDir] Change Auditor tools

Intrust for Active Directory by quest software -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rascher, Raymond Sent: Tuesday, November 08, 2005 8:52 AM To: 'ActiveDir@mail.activedir.org' Subject: [ActiveDir] Change Auditor tools Hello, I am looking for a

RE: [ActiveDir] trash in active directory

You can delete the CNF- one and then look at: http://support.microsoft.com/?kbid=840001#6     Sincerely,Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know ITwww.akomolafe.comDo you now realize that Today is the Tomorrow you were worried abou

[ActiveDir] Failed Computer account migration

In my lab I had a computer account that would not completely migrate. It was in AD but the ADMT did not change its domain affiliation and thus when I logged on it created a whole new profile. This has me worried as I can just see us do this to the head honcho here and all his programs go missing..

RE: [ActiveDir] CertSvc Error

Where exactly is this setting in the DDC policy?  All I have enabled is this:   Policy Setting Microsoft network server: Digitally sign communications (if client agrees) Enabled     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [ActiveDir] Change Auditor tools

I have both InTrust by Quest and Active Administrator by ScriptLogic on my network now. I can tell you from real world side by side comparisons that Active Administrator is MUCH easier to set up and get running out of the box. It is also much easier to configure with regards to emailing alerts and

RE: [ActiveDir] CertSvc Error

Also, under ‘Default Domain Policy’ I also have these settings…   Public Key Policies/Encrypting File Systemhide Propertieshide Policy Setting Allow users to encrypt files using Encrypting File System (EFS) Enabl

RE: [ActiveDir] CertSvc Error

And this….   Public Key Policies/Autoenrollment Settingshide Policy Setting Enroll certificates automatically Enabled Renew expired certificates, update pending certificates, and remove revoked certificates D

[ActiveDir] trash in active directory

Return Receipt Your [ActiveDir] trash in active directory document :

RE: [ActiveDir] dns a record disappearing

Did you disable the DHCP Client service on the server? That service is responsible for dynamic registration of a computer's A and PTR record. Also, did you manually delete the DNS record and allow the server to re-create it via dynamic registration? If not, then it's possible the DHCP server sti

RE: [ActiveDir] CertSvc Error

In the default domain controllers policy (or an alternate policy if you have left this one intact), look at the following: Public Key Policies/Autoenrollment Settings Public Key Policies/Automatic Certificate Request Settings   Keep in mind that this could be set in any policy that affe

RE: [ActiveDir] CertSvc Error

If I remember correctly you will want to enable both the renew and update features (below) to help resolve your issue.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 10:51 AM To: ActiveDir@mail.activedir.org Subjec

RE: [ActiveDir] trash in active directory

Just delete the CNF one   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, November 10, 2005 1:01 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] trash in active directory   Hi every body         I am

RE: [ActiveDir] Track User & Disk Space

One quick and free way - use Windows Search to show all files created/modified during the last 2 days. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue Sent: Thursday, November 10, 2005 10:20 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir]

RE: [ActiveDir] CertSvc Error

Hmm…I’ve enabled those settings and rebooted the CertSvc and am still getting these errors:   Event Type:   Warning Event Source:    CertSvc Event Category: None Event ID:   53 Date:    11/10/2005 Time:    3:10:06 PM User:    N/A Comp

RE: [ActiveDir] CertSvc Error

You’ll also have to refresh the policy on the affected DCs (i.e. gpupdate.exe /force).  Are all of the DCs W2K3?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 12:19 PM To: ActiveDir@mail.activedir.org Subject: RE:

[ActiveDir] Changing Authenticode settings from GPO

Title: Changing Authenticode settings from GPO Good afternoon, I am attempting to set up my AD 2003 network to support code signing for .NET and InfoPath. All certificates are based on a domain CA. When a user attempts to run an application that is signed, the user is asked if they want to

RE: [ActiveDir] Track User & Disk Space

TreeSize @ http://www.jam-software.com Might help in finding where the data is if it is all in a directory. Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue Sent: Thursday, November 10, 2005 9:20 AM To: ActiveDir@mail.activedir.org Subject: [A

RE: [ActiveDir] dns a record disappearing

Hopefully the lease expiration on DHCP is timed accordingly to the DNS scavenging process - in which case, DHCP would have released the IP already... I'd bet on a disabled DHCP client at this point unless the lease/scavenging periods are way out of sync. :m:dsm:cci:mvp marcusoh.blogspot.com -