RE: [ActiveDir] MVP mini summit at DEC 2006

2006-02-23 Thread neil.ruston
Daft question maybe, but is this open to MVPs only? neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: 23 February 2006 00:09 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] MVP mini summit at DEC 2006 Alym has scheduled

Re: [ActiveDir] MVP mini summit at DEC 2006

2006-02-23 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
I believe Vegas comes standard with Drugs, booze and loose women. [EMAIL PROTECTED] wrote: Daft question maybe, but is this open to MVPs only? neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: 23 February 2006 00:09 To:

Re: [ActiveDir] MVP mini summit at DEC 2006

2006-02-23 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Forgot the ;-) Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: I believe Vegas comes standard with Drugs, booze and loose women. [EMAIL PROTECTED] wrote: Daft question maybe, but is this open to MVPs only? neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

[ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread Lev Zdenek
Hello Does anybody has experience with IIS 6.0 and auth. by LDAP query to LDAP database ? THX Zdenek Lev ANECT a.s. Email: [EMAIL PROTECTED] List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

[ActiveDir] Re Service Pack Level

2006-02-23 Thread Mark Parris
I would use saved queries in users and computers. This way you can dynamically watch as they drop from one query to another. If you have W2K change the 5.2 to 5.0 DC's With SP1 ((objectCategory=computer)(operatingSystemVersion=5.2*)(primaryGroupID=516) (operatingSystemServicePack=Service Pack

[ActiveDir] OWA with Active Directory

2006-02-23 Thread marwahashem
Dear All, 1- we have Firewall ( HW ) Cisco-PIX firewall, and it has this Real IP Address 213.255.2.62 2- we dicede to host our exchange server On-line and the MX record for our mail server will be the external IP-address of Firewall which is ( 213.255.2.62 ). 3- We will use NAT inside the

[ActiveDir] Windows 2000 profile migration

2006-02-23 Thread adriaoramos
Hi every body I need your help again. We’re joining many windows 2000 workstations to our domain. In Windows Xp, we can copy profiles from and user to another (many users log on the same machine). How can we migrate windows 2000 ser profiles, and make them work

RE: [ActiveDir] OWA with Active Directory

2006-02-23 Thread Michael B. Smith
A. No. B. Yes (unless they are downloaded into the personal store and removed). While there can certainly be exceptions, generally speaking, the right place for e-mail is the Exchange store. Having the delivery location as a personal store removes a large number of benefits - including access to

Re: [ActiveDir] MVP mini summit at DEC 2006

2006-02-23 Thread Laura E. Hunter
I think the statement works either with it or without it. :-) (And remember, it's in -Henderson-, not Las Vegas! No gambling, no showgirls, just a quiet little geek conference in the middle of the desert. Nothing to see here, move along. ;-)) On 2/23/06, Susan Bradley, CPA aka Ebitz - SBS

RE: [ActiveDir] MVP mini summit at DEC 2006

2006-02-23 Thread Creamer, Mark
Cool - that's the little town where a dead body shows up week after week on CSI mc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura E. Hunter Sent: Thursday, February 23, 2006 9:10 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] MVP mini

RE: [ActiveDir] MVP mini summit at DEC 2006

2006-02-23 Thread Gil Kirkpatrick
I dunno for sure... I sort of suspect it is, but Alym will clarify it when he gets his head above water. But I don't see any reason why you couldn't join in the DBLW/M (tm) after the MVP session. -g -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL

RE: [ActiveDir] Stupid Group Policy CSE behavior

2006-02-23 Thread Darren Mar-Elia
Well, it won't be the first time I've heard something about GP called "stupid" :). I suspect it depends upon how you think about this.Certain CSEs are more resilient than others. I honestly haven't come across your scenario but in a lot of cases, if a CSE fails to do something,

Re: [ActiveDir] repadmin info oddity

2006-02-23 Thread Laura E. Hunter
(or a scotch if you'd prefer ;o) ... Double shot of Glen Livett, a nice spritz of Sprite, inch and a half of water and a couple of ice cubes, in a highball glass. And the fact that I still remember this begs two questions: [1] What do we order if the bar doesn't have Glen Livett? and [2]

RE: [ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread deji
What exactly does that mean? Are you looking for info on FTP auth using AD? Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon

RE: [ActiveDir] Windows 2000 profile migration

2006-02-23 Thread deji
It's called User State Migration Tool (USMT) http://www.microsoft.com/downloads/details.aspx?FamilyID=4af2d2c9-f16c-4c52-a 203-8daf944dd555DisplayLang=en Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you

RE: [ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread Lev Zdenek
I would like to auth. users access to web site on IIS 6.0 against external LDAP user database -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, February 23, 2006 5:02 PM To: ActiveDir@mail.activedir.org Subject: RE:

Re: [ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread steve patrick
Take a look here: http://www.inflectioncorp.com/downloads.html spat - Original Message - From: Lev Zdenek [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent: Thursday, February 23, 2006 8:10 AM Subject: RE: [ActiveDir] IIS 6.0 LDAP Auth I would like to auth. users access to

RE: [ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread deji
Ah! That was over my head, sorry. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From:

[ActiveDir] MAC Address

2006-02-23 Thread Todd Hofert
I have a client PC that does not list the MAC Address for it's wireless NIC anywhere in the OS. Is there a way to query that info from the card via command prompt or some other method? Thanks Todd This e-mail and any attachments may contain confidential and privileged information. If

RE: [ActiveDir] MAC Address

2006-02-23 Thread Aaron Visser
Run command prompt Type ipconfig /all Aaron From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Hofert Sent: Thursday, February 23, 2006 8:40 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] MAC Address I have a client PC that does not list

Re: [ActiveDir] MAC Address

2006-02-23 Thread Tom Kern
Getmac On 2/23/06, Todd Hofert [EMAIL PROTECTED] wrote: I have a client PC that does not list the MAC Address for it's wireless NIC anywhere in the OS. Is there a way to query that info from the card via command prompt or some other method? Thanks Todd This e-mail and any attachments may

RE: [ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread Ben D. Kusa
I have used this before with nds as the ldap source http://www.novell.com/coolsolutions/tip/5980.html -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, February 23, 2006 11:34 AM To: ActiveDir@mail.activedir.org Subject:

Re: [ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread Matt Baldwin
of course, the isapi filter solution becomes void when IIS 7 is released... with IIS 7 you'll be able to write your own httphandlers that get loaded with IIS versus having to use an ISAPI.. but this doesn't help you right now.. :) my only concern with the isapi would be the impact it has on

RE: [ActiveDir] MAC Address

2006-02-23 Thread deji
Something like this: wmic NICCONFIG get MACAddress Or a vbscript like this: strComputer = . Set objWMIService = GetObject(winmgmts: !\\ strComputer \root\cimv2) If Err.number 0 Then Else Set colAdapters = objWMIService.ExecQuery _ (Select * from Win32_NetworkAdapterConfiguration Where

RE: [ActiveDir] MAC Address

2006-02-23 Thread Todd Hofert
Gee, what an idiot. I already did that and completely over looked the MAC. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron VisserSent: Thursday, February 23, 2006 11:42 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] MAC Address Run command prompt Type

Re: [ActiveDir] MAC Address

2006-02-23 Thread Za Vue
Look at the wireless card itself. Ping it and ARP it. GetMac, ipconfig/all, etc. etc. -Z.V. Todd Hofert wrote: I have a client PC that does not list the MAC Address for it's wireless NIC anywhere in the OS. Is there a way to query that info from the card via command prompt or some

Re: [ActiveDir] MAC Address

2006-02-23 Thread Za Vue
For remote machines I use Hyena. Right click on the machine, properties, and choose network and there it is. Todd Hofert wrote: I have a client PC that does not list the MAC Address for it's wireless NIC anywhere in the OS. Is there a way to query that info from the card via command

RE: [ActiveDir] IIS 6.0 LDAP Auth

2006-02-23 Thread Lev Zdenek
Did you test it on IIS 6.0 ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ben D. Kusa Sent: Thursday, February 23, 2006 5:59 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] IIS 6.0 LDAP Auth I have used this before with nds as the ldap

[ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Joe Lagreca
I am trying to implement GPO Security Filtering to groups without any luck. When I run gpresult on the workstation, I get Filtering: Denied (Security). However I have delegation, I have given the group both read and apply policy permissions. When I try GPO Security Filtering for either a single

RE: [ActiveDir] MAC Address

2006-02-23 Thread Comeau, Steven
You can also go to your DHCP server if you know the Machine name. Steven Comeau Manager, Corporate IT Systems Main Tape 1 Capital Drive, Suite 101 Cranbury, NJ 08512 800-718-8273 x332 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, February 23, 2006

Re: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Mark Parris
Have you removed Authenticated users from the GPO? -Original Message- From: Joe Lagreca [EMAIL PROTECTED] Date: Thu, 23 Feb 2006 10:08:10 To:ActiveDir@mail.activedir.org Subject: [ActiveDir] GPO Security Filtering to a group not working I am trying to implement GPO Security Filtering to

RE: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Darren Mar-Elia
Joe- Are you removing the Authenticated Users ACE before you add the discretionary group? You don't have any Deny ACEs on that GPO, do you? Darren -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Lagreca Sent: Thursday, February 23, 2006 10:08 AM To:

[ActiveDir] ADAM: Possible to only enforce local account policies when in a domain?

2006-02-23 Thread Mr Oteece
ADAM seems to have an all or nothing approach to account policies if you are in a domain. Either you get the domain policies or you get no policies (by setting ADAMDisablePasswordPolicies=1). If you are in a workgroup, you get the local policies. But is there any way to get only the local policies

[ActiveDir] MAC Address ( Spoofing )

2006-02-23 Thread Medeiros, Jose
Since you brought up the topic on MAC address, take a look at this: http://www.klcconsulting.net/smac/ SMAC is a MAC Address Modifying Utility (for spoofing MAC address) for Windows 2000, XP, and Server 2003 systems, regardless of whether the manufactures allow this option or not. Of

RE: [ActiveDir] Re Service Pack Level

2006-02-23 Thread Harding, Devon
I like this idea, but how is it run for all DC's in the forest? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Thursday, February 23, 2006 4:03 AM To: ActiveDir.org Subject: [ActiveDir] Re Service Pack Level I would use saved queries

[ActiveDir] OT: NTFS Permissions

2006-02-23 Thread Pohlschneider, Chris
Title: OT: NTFS Permissions I have a dilemma where operators in our shop need to be able to download data files off of a Windows 2000 SP4 file server. The operators need to be able to copy files off of the server and also be able to create a file as well. However we do not want them to

RE: [ActiveDir] MAC Address

2006-02-23 Thread Pohlschneider, Chris
ipconfig /all from the command prompt should show you the MAC address for the wireless nic. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Todd HofertSent: Thursday, February 23, 2006 11:40 AMTo: ActiveDir@mail.activedir.orgSubject:

[ActiveDir] Big problem with member of attribute

2006-02-23 Thread adriaoramos
Hallo, This is strange and difficult to explain. But I will try We have many domains, in these domain, many domain controllers. In on of these domain we have some universal groups to join users from other sub-domains The problem is this I can not see other

Re: [ActiveDir] Big problem with member of attribute

2006-02-23 Thread Phil Renouf
Have you looked at this KB article? You cannot view a user's Universal Group membership in Windows Server 2003 Active Directory Users and Computers when Universal Groups do not reside in the local domain http://support.microsoft.com/?kbid=833883 Phil On 2/23/06, [EMAIL PROTECTED] [EMAIL

[ActiveDir] Active Directory Operations

2006-02-23 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Download details: Active Directory Operations: http://www.microsoft.com/downloads/details.aspx?familyid=6a238df8-115c-4e1a-89f1-ee9bc9486c0fdisplaylang=en The administering portion of this guide provides Active Directory service administrators with rationale and step-by-step instructions for

Re: [ActiveDir] Re Service Pack Level

2006-02-23 Thread Mark Parris
You can refocus the domain? How many domains do you have? I am sorry but I can't test anything now as I am in training for DEC 2006. Mark -Original Message- From: Harding, Devon [EMAIL PROTECTED] Date: Thu, 23 Feb 2006 14:07:02 To:ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Re

Re: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Joe Lagreca
Yes, I did remove Authenticated users, or else the GPO would apply to everyone in the domain, rather than just the group I am trying to apply it to. On 2/23/06, Mark Parris [EMAIL PROTECTED] wrote: Have you removed Authenticated users from the GPO? -Original Message- From: Joe Lagreca

Re: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Joe Lagreca
Authenticated users was removed from the GPO. I have deny apply group policy only for all the admin groups, so I don't accidentally appy the GPO to any of them. The group I am trying to apply the GPO to, is not part of any other group. Joe On 2/23/06, Darren Mar-Elia [EMAIL PROTECTED] wrote:

RE: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Darren Mar-Elia
Ok. So I am assuming from your description that you are trying to filter user policy by user group. The question here is, are you logging into the workstation with a user account that is a member of the admin groups that have deny access? If so, then the deny will override any grant. Darren

Re: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Mark Parris
Not unless you applied it at the root. Only members of the OU. -Original Message- From: Joe Lagreca [EMAIL PROTECTED] Date: Thu, 23 Feb 2006 12:54:44 To:ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] GPO Security Filtering to a group not working Yes, I did remove Authenticated

Re: [ActiveDir] OT: NTFS Permissions

2006-02-23 Thread Kevin Gent
Title: OT: NTFS Permissions Have you tried using Read and Change permissions ONLY on the share ? - Original Message - From: Pohlschneider, Chris To: ActiveDir@mail.activedir.org Sent: Thursday, February 23, 2006 1:35 PM Subject: [ActiveDir] OT: NTFS

RE: [ActiveDir] OT: NTFS Permissions

2006-02-23 Thread Pohlschneider, Chris
Title: OT: NTFS Permissions I have not tried that because doesn't that just set the permission as far as the user being able to read the permissions on a certain directory or change them if they had the access to? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [ActiveDir] Stupid Group Policy CSE behavior

2006-02-23 Thread Kamlesh Parmar
My point was just that particular CSE stops processing further GPs related to it, and not entire GP processing.This gives very inconsistent application of policy. One fine day, you find that all policies are working fine, and when next day you introduce new policy, which has settings no way

Re: [ActiveDir] OT: NTFS Permissions

2006-02-23 Thread Kevin Gent
Title: OT: NTFS Permissions I believe that sets the stage for what can, and cannot be inherited, further down the line in directory and file permissions. Someone will correct us soon enough. - Original Message - From: Pohlschneider, Chris To: ActiveDir@mail.activedir.org

RE: [ActiveDir] Stupid Group Policy CSE behavior

2006-02-23 Thread Darren Mar-Elia
Ok. I will test that but it would be good to understand the scenario a little better. You do realize that by setting a Deny ACE for Auth. Users on the device/service, you are effectively preventing any access to that service, which would seem problematic in and of itself. The second point

RE: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Mark Parris
I would now utilise the gpo modelling aspect of the gpmc to see where my issues lay. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: 23 February 2006 21:34 To: ActiveDir.org Subject: Re: [ActiveDir] GPO Security Filtering to a

Re: [ActiveDir] GPO Security Filtering to a group not working

2006-02-23 Thread Joe Lagreca
I am working in a test lab. I have 2 users, test1 and test2. I also have group1 and group2. None of the users or group are in any of the admin groups. On 2/23/06, Darren Mar-Elia [EMAIL PROTECTED] wrote: Ok. So I am assuming from your description that you are trying to filter user policy by

[ActiveDir] GC Provider

2006-02-23 Thread Brian Desmond
OK, what do I need to do in my code to simply query the global catalog for the entire forest? I have New DirectoryEntry(GC://) That seems not to work. If I inspect it ?searchroot {System.DirectoryServices.DirectoryEntry} AuthenticationType: Secure {1} Children: