[ActiveDir] Active Directory Health Scripts?

2005-12-22 Thread Matt Brown
Hi,   wondering if anybody has written any scripts using the free tools to monitor the health of Active Directory?   I was thinking about writing a python script to run DCDiag and check the output for any failures and when found shoot me an email to let me know... maybe something with repad

RE: [ActiveDir] FYI: Failing to create a trust

2005-12-22 Thread joe
Sounds like you need to build your base image with a script and a runonce registry entry so that the next time it is started (i.e. from differencing) it fires off newsid or asks you if you want to. I would not expect VMWARE to handle this automatically either. This isn't a virtualization issue, i

[ActiveDir] OT: Happy holidays!

2005-12-22 Thread Almeida Pinto, Jorge de
I just wanted to wish everyone happy holidays and the best for the new year! A merry christmas to you all and that you all have a good start for the new year! Be careful with the fireworks! ;-) Cheers, Jorge This e-mail and any attachment is for authorised use by the intended recipient(s

RE: [ActiveDir] Termservers and users desktops

2005-12-22 Thread Craig Gauss
I have thought about that.  Not sure what I would set that at yet.   I would love to be able to train the users on this, but the problem is the majority have enough problem understanding how to log on let alone start throwing profiles and things at them. From: [EMAIL PROTECTED] [mailto:[EM

RE: [ActiveDir] Termservers and users desktops

2005-12-22 Thread Blair, James
Craig,   Have you looked at setting up roaming user profiles with disk space quotas? I find training staff in Terminal Server, Citrix etc. usage to be imperative and understated as it is hard for some people to get their head around the fact that the Desktop they are using is not actually on

RE: [ActiveDir] Termservers and users desktops

2005-12-22 Thread Craig Gauss
Sure.   We are running Tarantella's secure global desktop to run applications off of the termserver.  When the user is using one of the apps from their client computer they still have access to save files to their profiles desktop.  I want to disable that.  Not really sure of the easiest way

Re: [ActiveDir] Termservers and users desktops

2005-12-22 Thread Al Mulnick
Can you expand that with an example? On 12/22/05, Craig Gauss <[EMAIL PROTECTED]> wrote: Windows Server 2003Does anyone know of a policy or anything that I could use to limit usersfrom being able to write to the desktop when they are using an application from a Termserver?List info   : http://www.a

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Michael B. Smith
You should be able to run it on any Exchange 2003 Server that hosts a PF store. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al MulnickSent: Thursday, December 22, 2005 2:28 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] AD or is this Exchange task? Good cat

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread joe
Yeah, quite a bit of the cool Exchange WMI stuff was new for E2K3 and gone for E12. ;o)       This is direction is good, let's go that way. We will be able to do all sorts of cool things and it is standard! Ouch, this is picky and I keep getting thorns in my butt... That other direction looks

Re: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Al Mulnick
Good catch.  No, it's new for 2003   http://msdn.microsoft.com/library/default.asp?url=""   Wonder if you can run it against the hierarchy though by running it on the 2003 server vs. the 2000?   If not, you'll have to drop back to cdoexm most likely.   On 12/22/05, Creamer, Mark <[EMAIL PROTECTED]

RE : [ActiveDir] ::OT:: xexch50

2005-12-22 Thread TIROA YANN
Hi, follw the different steps described in this KB: http://support.microsoft.com/default.aspx?scid=kb;en-us;843106&sd=ee Let us know how it works for you. Yann De: [EMAIL PROTECTED] de la part de Quatro Info Date: jeu. 22/12/2005 20:13 À: ActiveDir@mail.a

Re: [ActiveDir] ::OT:: xexch50

2005-12-22 Thread Al Mulnick
http://support.microsoft.com/kb/843106   Very likely the more information section is of interest to you in this regard.   Al  On 12/22/05, Quatro Info <[EMAIL PROTECTED]> wrote: kinda figured that out myselfbut how to fix it?   walked through whole config but cant find anything out of the ordi

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Creamer, Mark
No, actually 2000, at least on the Exchange server hosting the public folders. There are a couple of them which are 2003. Earlier posters only mentioned this not working with 5.5, which I do not have. Will this not work with 2000?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] ::OT:: xexch50

2005-12-22 Thread Quatro Info
kinda figured that out myselfbut how to fix it?   walked through whole config but cant find anything out of the ordinary     Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Al MulnickVerzonden: donderdag 22 december 2005 19:49Aan: ActiveDir@mail.activedir.orgOnderwerp: Re: [Ac

Re: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Al Mulnick
I don't have one handy to test with, but I believe it has more to it for the namespace.  check out http://msdn.microsoft.com/library/default.asp?url=""   Or have a look at the WMI explorer http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6430F853-1120-48DB-8CC5-F2ABDC3ED314

Re: [ActiveDir] ::OT:: xexch50

2005-12-22 Thread Al Mulnick
The problem is that they also have an exchange server trying to communicate with you.  When that happens, it's told to try and authenticate and because it's not a member will likely fail.  If this is an internet facing mail handler, you should not expect other hosts to have to authenticate in order

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Michael B. Smith
You are Exchange Server 2003, right? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Thursday, December 22, 2005 1:39 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD or is this Exchange task? I think I’m pretty close on this, but am unabl

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Creamer, Mark
I think I’m pretty close on this, but am unable to get past an error. When I run the script (which initially I configured to only tell me whether or not the various folders are mail-enabled), I get an error 0x80041010. My research suggests this is either because something is misspelled in t

[ActiveDir] xexch50

2005-12-22 Thread Quatro Info
Hi all, Installed a new SBS 2k3 box and get following messages in eventviewer: ID 7010 This is an SMTP protocol log for virtual server ID 1, connection #278. The client at "193.173.22.154" sent a "xexch50" command, and the SMTP server responded with "504 Need to authenticate first ". The f

[ActiveDir] OT: Exchange 2003 sp2 - Enabling updates to IMF

2005-12-22 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
To get updates to the IMF you have to go to the registry How to update the Intelligent Message Filter version 2 in Exchange Server 2003 SP2: http://support.microsoft.com/default.aspx?scid=kb;en-us;907747 You Had Me At EHLO... : Intelligent Message Filter Updates: http://blogs.technet.com/excha

RE: [ActiveDir] FYI: Failing to create a trust

2005-12-22 Thread deji
>>>One of my major uses of differencing disks is to configure a SINGLE server in multiple ways to see how the different configurations affect the same server so I can test apps under those different configs. Maybe one version of the differencing is applying a bunch of specific QFEs, another is load

RE: [ActiveDir] DNS Issue

2005-12-22 Thread deji
Which is why we always preach that you bring your TTL down prior to moving resources. If your TTL was fro, say, 2 days, and you plan to move resources, bring it down to, say, 1 hour, at least 2 days before the actual move. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory

RE: [ActiveDir] password changer

2005-12-22 Thread Rich Milburn
As an intermediate vbscripter, I fully agree with this. I can write some WMI and ADSI vbscript code off the top of my head, but I tend to copy lots of snippets from other scripts (like Set oFSO = CreateObject("Scripting.FileSystemObject") And I rely on Visual Studio or VbsEdit or FrontPage (for H

Re: [ActiveDir] DNS Issue

2005-12-22 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
When we moved www.msmvps.com it took anywhere from 1 to 3 days for some cache sites to update even after we messed with the TTL value. If you go to www.dnsstuff.com you can see how long some of them take. Shane De Jager wrote: Hi, I am running a DNS server on my Windows Server. Our hosting

RE: [ActiveDir] Mac/AD/useraccountcontrol?

2005-12-22 Thread Thommes, Michael M.
After some time, I see an "Access Denied" message on my DCs for these computers (but maybe not all of them!). Version: 10.4.3 (Build 8F46). Mike Thommes -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Singler Sent: Thursday, December 22, 2005 8:49 A

RE: [ActiveDir] password changer

2005-12-22 Thread joe
I won't take credit, I am sure others came up with a similar idea, I just happened to have met Iain and he told me to email him (he wanted a link to my website) and I did and that is one of the other things I mentioned. If you don't know of Iain you should. He is a great guy, very cool, and quite i

RE: [ActiveDir] Mac/AD/useraccountcontrol?

2005-12-22 Thread joe
The "password not required" setting is a bug I reported to MS like 5 years ago now. This only happens when you use ADUC due to the process they followed to create the account. It definitely isn't needed. What do you mean when you say they don't "stick"? I expect it is more a function of how Apple

RE: [ActiveDir] FYI: Failing to create a trust

2005-12-22 Thread joe
> Don't you have 2 different SIDs in place right now (the base image and the differencing machine)? Not necessarily. One of my major uses of differencing disks is to configure a SINGLE server in multiple ways to see how the different configurations affect the same server so I can test apps under t

Re: [ActiveDir] Mac/AD/useraccountcontrol?

2005-12-22 Thread John Singler
Mike, I see the same useraccountcontrol values that you describe. What do you mean by "don't seem to stick" ? also, what version(s) of OS X ? john Thommes, Michael M. wrote: Hi, In our continuing quest to join Macintoshes to Active Directory, I see that the Macintoshes have a useraccou

[ActiveDir] Termservers and users desktops

2005-12-22 Thread Craig Gauss
Windows Server 2003 Does anyone know of a policy or anything that I could use to limit users from being able to write to the desktop when they are using an application from a Termserver? List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List arch

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Depp, Dennis M.
Why can't you do this through ESM? Navigate to public Folders, Select the HR Mangers PF, disable mail support and then click on propagate settings. Denny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Thursday, December 22, 2005 8:2

[ActiveDir] Mac/AD/useraccountcontrol?

2005-12-22 Thread Thommes, Michael M.
Hi, In our continuing quest to join Macintoshes to Active Directory, I see that the Macintoshes have a useraccountcontrol value of 69632 (65536: "don't expire password" + 4096: "workstation trust account") while my Windows workstations and servers in AD have a useraccountcontrol value of 4128 (4

Re: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Al Mulnick
Depends on what you want to do.  Why not create a new thread (be sure to label it OT for this list) and provide some details?   Really, you should consider getting off of 5.5 rather than putting energy into administering it.  I think the wake has already been had for 5.5.   Al  On 12/22/05, Atila

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Atila Firmino
Hi,   Can I admin exchange 5.5 by script?   Thank´s   Atila FirminoAnalista Segurança da InformaçãoOperações e ControlesBanco Santander BanespaTel.: (11) 5635-8736Fax: (11) 5635-8488[EMAIL PROTECTED]   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al MulnickSent: quinta-

Re: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Al Mulnick
IIRC, it's   Public Folders/All Public Folders/HR Managers/HR001   Al   On 12/22/05, Creamer, Mark <[EMAIL PROTECTED]> wrote: Thanks Tony. One question if someone knows…   Below is an excerpt from the script. What should the syntax for the be?   ' This code toggles the mail-enabled status of th

RE: [ActiveDir] AD or is this Exchange task?

2005-12-22 Thread Creamer, Mark
Title: AD or is this Exchange task? Thanks Tony. One question if someone knows…   Below is an excerpt from the script. What should the syntax for the be?   ' This code toggles the mail-enabled status of the selected folder. ' -- SCRIPT CONFIGURATION -- strComputerName = ""

Re: [ActiveDir] DNS Issue

2005-12-22 Thread Tomasz Onyszko
On Thu, 22 Dec 2005 12:43:15 +, Shane De Jager wrote > Hi, > > I am running a DNS server on my Windows Server. Our hosting company > has moved our website to new server. The problem is that when i try > to access our website it resolves to the incorrect server. It is > still refering to the

[ActiveDir] DNS Issue

2005-12-22 Thread Shane De Jager
Hi, I am running a DNS server on my Windows Server. Our hosting company has moved our website to new server. The problem is that when i try to access our website it resolves to the incorrect server. It is still refering to the IP address of the old server and not the new. Is there a way to rese