[ActiveDir] [list owner] "no-mail" functionality

2005-11-18 Thread Tony Murray
Hi all If you're reading this it means that I've successfully enabled the "no-mail" feature of the list software I use for ActiveDir. This functionality has long been a feature of other list software, but was not available in the earlier versions of Imail (the list software my ISP provides). Bas

[ActiveDir] OldCmp

2005-11-18 Thread joe
Ok, so now that you have had time to play with oldcmp and you have decided you like it or maybe just simply deal with it or it really upsets you, what would you change about it?   If it were your app and you were like, I need to make this better, what things would you do to it to make it b

RE: [ActiveDir] Internet Explorer Home Page Question

2005-11-18 Thread Micheal S. Mand
I have a question:   What if, instead of using a logon script, you used a logoff script? Would that affect anything?   Also, does anyone know the correct syntax to remove a user from an AD group in a logon/logoff script? I’m not really a programming junkie unless it comes to the web.  

RE: [ActiveDir] AD sites and services

2005-11-18 Thread joe
I don't know about the MSMQ stuff but for example, the ADC service for migrating 5.5 to E2K(3) will register server objects in the sites containers and needs to be there. I definitely wouldn't start deleting unless you know for sure what will be impacted. I would recommend reviewing the machines

RE: [ActiveDir] Internet Explorer Home Page Question

2005-11-18 Thread Micheal S. Mand
Thanks all. I’ll try these then send you the results. One of them is bound to work.   Micheal -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar Sent: Friday, November 18, 2005 11:11 AM To: ActiveDir@mail.activedir.org Subjec

RE: [ActiveDir] Legal Notice Caption Text

2005-11-18 Thread Free, Bob
http://www.microsoft.com/technet/scriptcenter/resources/qanda/jan05/hey0 117.mspx any help? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Friday, November 18, 2005 12:13 PM To: ActiveDir@mail.activedir.org Subject: [ActiveD

[ActiveDir] Legal Notice Caption Text

2005-11-18 Thread Rimmerman, Russ
In Windows 2000 I was able to create a legal notice caption with carriage returns in it by editing the binary of the registry key and adding a 0D00 value (carriage return hex).  This doesn't appear to work for me in Windows 2003 - it just shows a square box instead of doing the carriage retu

Re: [ActiveDir] Internet Explorer Home Page Question

2005-11-18 Thread Kamlesh Parmar
Building on what James said, You can make it automatic, create a group New-Users and assign the intranet homepage GPO to this group. and importantly, Allow members to remove themselves from group. When you create a new user, just make her member of this group. Make a login script, in the same GP

RE: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread Medeiros, Jose
Is Robbie Allen still going to MIT for his Masters or is he back at Cisco? Sincerely, Jose Medeiros ADP | National Account Services ProBusiness Division | Information Services 925.737.7967 | 408-449-6621 CELL -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf

RE: [ActiveDir] Unreadable Netlogon.dns file

2005-11-18 Thread Wyatt, David
If you delete the netlogon.dns and netlogon.dnb file, restart the DC, it will recreate the files on startup. If it can't recreate the files, someones been playing with NTFS permissions. -Original Message- From: Al Mulnick [mailto:[EMAIL PROTECTED] Sent: 18 Nov 2005 15:26 To: ActiveDir

RE: [ActiveDir] IP addresses on Name Server tab

2005-11-18 Thread deji
>>> I thought what controlled this was the checkbox in DNS settings that says "Register this Connection's addresses in DNS". It's much more than that, especially on a DC. Short fix: if you are not using the other NIC, disable it. Long fix: read http://support.microsoft.com/default.aspx?scid=kb

[ActiveDir] replmon on XP SP2

2005-11-18 Thread Nathan Casey
Has anyone used replmon on a XP SP2 PC? When I use replmon as domain admin on an xp workstation I can synchronize everything but domaindmszones and forestdnszones. The error I get is: "The synchronization request failed. This may be because you have insufficient credentials." I do not have the

RE: [ActiveDir] AD sites and services

2005-11-18 Thread Whaley, Greg
In the AD Sites and Services I see servers in some sites that are not domain controllers. These servers do not have NTDS Settings object but the do have an MSMQ Settings. Are these servers supposed to show up in Sites and Services or should I do some clean up to get rid of them? Greg Whaley Con

RE: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread Almeida Pinto, Jorge de
Now THAT would be fun! ;-)) Cheers, The guy that is NOT "puffing the pipe" (where the heck did you get this one?) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Friday, November 18, 2005 16:08 To: ActiveDir@mail.activedir.org Subjec

RE: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread joe
LOL. Umm no. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Friday, November 18, 2005 10:08 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory 3rd Book Who wants to hear Joe do a Cornet solo at DEC???!!!

[ActiveDir] IP addresses on Name Server tab

2005-11-18 Thread Creamer, Mark
Title: IP addresses on Name Server tab I have one server that has two NICs (there are others configured the same way). On this particular server, I have a persistent problem. The IP addresses for both NICs keep showing back up on the name server tab for the zone that this server manages. On t

RE: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread joe
I have never been big on pictures, the whole prefering to blend into the background thing. I will see if I can dig something up. If I can find my drivers licenses from 16 to about 19 or 20 or so that would be perfect. I chopped all my hair off when I was at Michigan State. It was too difficult to m

RE: [ActiveDir] Unreadable Netlogon.dns file

2005-11-18 Thread Al Mulnick
Did we ever get a final resolution to this one? Scott? ~Eric? -ajm From: "Eric Fleischman" <[EMAIL PROTECTED]> Reply-To: ActiveDir@mail.activedir.org To: Subject: RE: [ActiveDir] Unreadable Netlogon.dns file Date: Mon, 7 Nov 2005 14:41:18 -0800 Since you are saying the file is there but net

RE: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread Creamer, Mark
Who wants to hear Joe do a Cornet solo at DEC???!!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, November 18, 2005 9:54 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory 3rd Book You will probably find me,

RE: [ActiveDir] Disable inactive accounts

2005-11-18 Thread joe
How can you not have a good day after reading something like that. :o) Glad you find oldcmp useful. joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ravi Dogra Sent: Friday, November 18, 2005 9:50 AM To: ActiveDir@mail.activedir.org Subject: Re:

Re: [ActiveDir] Disable inactive accounts

2005-11-18 Thread Ravi Dogra
yes sure. sem you can mail this to me. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] LDAP search string.

2005-11-18 Thread joe
I think when Al said Otherwise, you might search user objects to evaluate which ones have the member attribute set to cn=bugz101 etc. He meant Otherwise, you might search user objects to evaluate which ones have the memberof attribute set to cn=bugz101,blah,blah,blah,dc=com etc. Also, on this

Re: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Do we have photos of this? I gotta see this. :-) joe wrote: Anyone I run into at conferences and the like that happens to have a copy of the book I will happily sign. I will be utterly confused as writing in books reduces the resale value, but I will sign. :o) Unfortunately I won't be sending

RE: [ActiveDir] Disable inactive accounts

2005-11-18 Thread Lou Vega
A few years back I wrote a program called "Purge Walker" which did that. It ran as a Windows service and let you specify how "old" an account was before it was disabled. It determined this by using the last password set date and if the password was expired by more than xx days, the account was move

RE: [ActiveDir] IAS, Radius & AD

2005-11-18 Thread Harding, Devon
Well, first, we get this error stating that IAS could not find any DC for the specified domain:   Event Type:   Error Event Source:    IAS Event Category: None Event ID:   5052 Date:    11/18/2005 Time:    9:44:29 AM User:    N/A Comp

RE: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread joe
You will probably find me, if you can find me there, in the penny slots or on one of those darn Wheel of Fortune slot machines. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Wednesday, November 16, 2005 6:49 PM To: ActiveDir

Re: [ActiveDir] Disable inactive accounts

2005-11-18 Thread Ravi Dogra
Joe tool is the best one. Thanks to tomasz and all. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Active Directory 3rd Book

2005-11-18 Thread joe
Anyone I run into at conferences and the like that happens to have a copy of the book I will happily sign. I will be utterly confused as writing in books reduces the resale value, but I will sign. :o) Unfortunately I won't be sending out complimentary copies to everyone. It seems according to some

RE: [ActiveDir] Offline Files and folders

2005-11-18 Thread Rich Milburn
If you can't find the link for it or a copy of the Win2K resource kit, here is a page with a link to the file for download: http://computerperformance.co.uk/Litmus/tools_ezine.htm#CacheMov Rich -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn

Re: [ActiveDir] Disable inactive accounts

2005-11-18 Thread Sem 3
I don't mind helping you,  yes I have done exactly that!  I think I already told you all that LOL.   Anyway,  I have a script that was written by a guy in Microsoft that I used as my starting point. It evaluates the inactive accounts and then DELETES them if you want.  You could mod it to set the d

RE: [ActiveDir] Renaming AD accounts en masse

2005-11-18 Thread Rimmerman, Russ
I wish we could.  We're acquiring a company that uses first.last and migrating them into our AD.  Unfortunately the Quest migration software won't do a rename during the migration so you have to manually fix them afterwards :(. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] Disable inactive accounts

2005-11-18 Thread neil.ruston
I have found the following article provides useful info on this subject: http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx   neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: 18 November 2005 1

Re: [ActiveDir] Disable inactive accounts

2005-11-18 Thread Ravi Dogra
I have Win2k3 servers with latest updates. i have no worry about that. Yes offcourse i will exclude service accounts and my external users from such list. i have some such clients too. But the thing is that how can i do this? Is there anyone who has succesfully automated the process of disabling

RE: [ActiveDir] Renaming AD accounts en masse

2005-11-18 Thread joe
Who knew Guido could do stand-up comedy. ;o) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, GuidoSent: Friday, November 18, 2005 1:12 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Renaming AD accounts en masse glad you got it working Russ, but n

RE: [ActiveDir] Disable inactive accounts

2005-11-18 Thread joe
lastLogon isn't replicated.   lastLogonTimeStamp is replicated but requires OEM W2K3 and requires your domain to be in the right mode so that it knows all DCs are at 2003.   SP1 fixes one or more holes in what updates lastLogonTimeStamp such as simple binds, etc.   Keep in mind that by defaul

RE: [ActiveDir] Offline Files and folders

2005-11-18 Thread Rich Milburn
http://www.jsifaq.com/SUBI/tip4200/rh4230.htm cachemov.exe seems to be the way to do it... --- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc. 455

Re: [ActiveDir] Strange Error

2005-11-18 Thread Tomasz Onyszko
Salandra, Justin A. wrote: I am trying to add a User from my root domain to a Universal Group in a Child Domain. Both the Universal Group and the User have existed in the Forest for months if not years. When I try to add him in, when I click OK I get the following message. The specified

RE: [ActiveDir] IAS, Radius & AD

2005-11-18 Thread Guy Teverovsky
Sorry, that should be: netsh ras set tracing * ENABLED Also take a look at the authentication flow over here: http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=""> (it's W2K specific, but from my experience is not different from W2K3) It w

Re: [ActiveDir] Disable inactive accounts

2005-11-18 Thread Sem 3
Also don't forget that the lastlogon flag is not replicated in pre SP1 domain controllers.   I had the same task and wrote a bit of _vbscript_ to query all dc's in each domain for the "real" last logon date then I looked up the exchange last logon date and the ad creation date compared the lot and

Re: [ActiveDir] Disable inactive accounts

2005-11-18 Thread Tomasz Onyszko
Ravi Dogra wrote: Hi All, Kindly suggest a way out to disable incative user accounts in my domain. I have been given a task to automate disabling of domain user accouts not used past 4 weeks. Check joe's oldcmp tool which can be used also to search for user accounts: http://joeware.net/win/fr

[ActiveDir] Offline Files and folders

2005-11-18 Thread Shane De Jager
Hi, Does anyone know how to set the drive where files and folders are copied to when making files and folders available offline. -- Shane De Jager Technical Developer INTERGAGE High-performance, updateable Web sites Switchboard +44 (0)845 456 1022 == www.intergage.co.uk [EMAIL PROTECTED]

RE: [ActiveDir] Disable inactive accounts

2005-11-18 Thread neil.ruston
I would always suggest that before going any further, you clarify (internally) what you mean by 'not used' and 'inactive'. Think carefully about what that term might mean and whether it can be applied to all users in the org in the same way (e.g. remote workers) neil -Original Message-

[ActiveDir] Disable inactive accounts

2005-11-18 Thread Ravi Dogra
Hi All, Kindly suggest a way out to disable incative user accounts in my domain. I have been given a task to automate disabling of domain user accouts not used past 4 weeks. Thanks RD List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive

RE: [ActiveDir] Internet Explorer Home Page Question

2005-11-18 Thread Steve Rochford
A similar kind of approach is to have a registry key in both HKLM and HKCU for "your" software - eg all our machines have HKLM\software\CNWL and HKCU\software\CNWL   Under these you can have a variety of values to do whatever you want. In this case, I'd have the logon script check the value o