RE: [ActiveDir] Name Server records

although those DCs are not yours, but they are in the same domain (I first thought they belonged to another domain) and these also host DNS services, then yes those DC/DNS servers will host the same zones and will thus register the NS records for the zones they host jorge

RE: [ActiveDir] Bulk Import

If you mention google after MSN Search you have to turn off the shamless plug. ;-) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al MulnickSent: Thursday, March 09, 2006 3:26 AMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Bulk Import If not

Re: [ActiveDir] Bulk Import

If not, ldifde will let you create passwords if you want to go that route but mailboxes would be harder to deal with it.  ADMOD will not mailbox enable the objects. For that you'd want to pipe it to exchmbx.    I'd tell everyone what the input is and ask Deji to look through his couches (couches?

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

Come on Brett, I know you have at some point purchased some soda or sugary substance that you consumed while at work. IT runs on that stuff, if Mountain Dew, Coca-Cola, Snickers, M&Ms, and Twizzlers ceased to exist IT would crumble away as most of the folks fell over asleep. -- O'Reilly Active Di

Re: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

...suddenly I get this image of a patent/trademark/business license, etc being filed for H. Bunnies LLC. Ed Crowley [MVP] wrote: They didn't say *what* company. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!™ -Original Me

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

Scans would be a "Good Thing"tm... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP] Sent: Wednesday, March 08, 2006 4:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw" The

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

They didn't say *what* company. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!™ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Wednesday, March 08, 2006 3:22 PM To: Active

RE: [ActiveDir] Name Server records

This makes more sense. Those other domains could be 2000 where you don't have the ability to do conditional or domain specific forwarding. I will look into that. Jorge would also be correct in that someone probably manually added them, probably a while back and I just noticed it. Thank you

RE: [ActiveDir] Name Server records

Title: [ActiveDir] Name Server records One guess is you're using zone transfers with the option "Allow only servers on name servers tab" (or whatever it's called) and the person who set this up added the DNS server in question. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On B

RE: [ActiveDir] Name Server records

Are there secondary DNS zones for your domain set up in the other domains that have the trust? Someone may have set it up so they could resolve names in your domain from the trusted domain... ** Charlie Kaiser W2K3 MCSA/MCSE/Security, CCNA Systems Engineer Essex Credit / Brickw

RE: [ActiveDir] Name Server records

Title: [ActiveDir] Name Server records It is a DC/DNS and it replicates to the forest which is actually just one domain.   That's just it, I don't see how or why anybody would go in there and add them. There are only a few people that have the access to do that and adding those records just

RE: [ActiveDir] Name Server records

what is the replication scope of the zone? if it is: DC within domain OR DC/DNS servers within domain then someone must have added them manually. Before removing them try finding out who added them and more important WHY? jorge From: [EMAIL PROTECTED] on beh

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

I'm definately not responsible for purchasing of IT products at my company, oh well guess I'm not influential enough to justify a free subscription of the magazine. Sigh. -B On Wed, 8 Mar 2006, Grillenmeier, Guido wrote: > wow, what a hurdle ;-) > > > > From:

[ActiveDir] Name Server records

I have an AD 2003 domain and an AD integrated DNS zone. If I look a the properties of that DNS zone and go to the "Name Servers" tab, I see a few servers that are not our domain controllers/DNS servers. Those servers look like DNS servers in other domains that we have a trust with. I guess I am c

RE: [ActiveDir] ADMT v3 implementation questions

For #1, you are apparently not migrating with SIDHistory. If you have a problem with SIDHistory and don't want to use it, then you will have to wait until you have migrated everything and repermissioned the resources before you can access resources. For #2, try http://www.akomolafe.com/TechStuff

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

wow, what a hurdle ;-) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Mittwoch, 8. März 2006 17:53To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw" As an addition, the only way that it's fr

Re: [ActiveDir] SBS 2003 Domain/Forest Rename

Awww... that's nice to hear :-) Psssttt.You guys realize you don't have to butter me up to answer SBS questions.I've said before that I'm a terrible lurker and if there's an SBS box in trouble I'm pouncing and seeing if I can help. Gil Kirkpatrick wrote: One that looks nice.

RE: [ActiveDir] SBS 2003 Domain/Forest Rename

Then, when you have found the shrubbery, you must cut down the mightiest tree in the forest... Wiithh A HERRING! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: 08 March 2006 22:24 To: ActiveDir@mail.activedir.org Subject: RE: [A

RE: [ActiveDir] SBS 2003 Domain/Forest Rename

With two SBS servers you get the two-level effect with a little path running down the middle. Easier than cutting down the mightiest tree in the forest with A HERRING! Wook -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Wedne

[ActiveDir] ADMT v3 implementation questions

I got ADMT running in a test environment, but now have a few problems. Problem #1 When I use the wizard to migrate a computer from the source domain to the target, I then have the same machine account in both domains. Making it impossible for the target domain to access the shares of the worksta

RE: [ActiveDir] SBS 2003 Domain/Forest Rename

"It is a good shrubbery. I like the laurels particularly, but there is one small problem." "Ekky ekky ekky ekky-z' Bang, zoom Boing, z'nourrrwringmm" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lee, Wook Sent: 08 March 2006 22:05 To: ActiveDir@mail.act

RE: [ActiveDir] SBS 2003 Domain/Forest Rename

And not too expensive. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lee, Wook Sent: Wednesday, March 08, 2006 3:05 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] SBS 2003 Domain/Forest Rename Importance: Low Dare I suggest a shrubbery? ;

RE: [ActiveDir] SBS 2003 Domain/Forest Rename

One that looks nice. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lee, Wook Sent: Wednesday, March 08, 2006 3:05 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] SBS 2003 Domain/Forest Rename Importance: Low Dare I suggest a shrubbery? ;-)

RE: [ActiveDir] SBS 2003 Domain/Forest Rename

Ni! Ni! Ni! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lee, Wook Sent: Wednesday, March 08, 2006 3:05 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] SBS 2003 Domain/Forest Rename Importance: Low Dare I suggest a shrubbery? ;-) -Or

RE: [ActiveDir] SBS 2003 Domain/Forest Rename

Dare I suggest a shrubbery? ;-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley Sent: Wednesday, March 01, 2006 7:50 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] SBS 2003 Domain/Forest Rename And remember we are a single DC/F

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

:)  Due to the large amount of requests, I've uploaded this to web space.  :)  This link should take you to the image.   http://home.wmis.net/~nkline/adjig.html   Nathan     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan KlineSent: Wednesday, March 08, 2006 1:30 PM

RE: [ActiveDir] Bulk Import

What is your input? Where are you getting the input from, and what format is it in? Al mentioned some script laying around. I may have one stuck in one of my couches here :) Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCT Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akom

Re: [ActiveDir] AD Lag Sites

Wyatt, David wrote: What MS paper? http://www.microsoft.com/downloads/details.aspx?FamilyID=64DB845D-F7A3-4209-8ED2-E261A117FC6B&displaylang=en At the end of this document You will find information how to do this. As Jorge pointed today on our chat on IM this document is not addressing poten

RE: [ActiveDir] Bulk Import

I was going to user csvde, but read that it did not support password creation.  Is this supported under ADMod?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Wednesday, March 08, 2006 4:22 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveD

Re: [ActiveDir] Bulk Import

I suppose it really depends on your input data.  What have you got to work with and what is the decision criteria for the OU differences?   Creating the objects in a particular OU and mailbox enabling them would not be terribly difficult depending on the information you have and want to put in the

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

Please send a copy my way….   Thanks,   Todd   From: Nathan Kline [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 1:30 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"   I received the same foldout

RE: [ActiveDir] Bulk Import

Ok, I skipped a step, sounds like you need these 200 to go to separate OU's. Mass create them in one OU, mass right click them and create the mailbox then mass send them an email.   The script the move if that is faster/easier than a manual drag and drop. So your spreadsheet of users is:   fi

RE: [ActiveDir] Bulk Import

Delegate it to HR.   Short of that get HR or someone to give you a list of the names and script it, provide a default password of their SS number perhaps...must be changed on first log on.   After they are created, in the same OU...mass select them in ADUC and right click them and send them a

[ActiveDir] Bulk Import

What’s the fast way for me to create 200 user accounts in specific OU’s and create Exchange mailboxes?   Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469   __ This message and

RE: [ActiveDir] Vista GPO article

More detail information from Microsoft: Managing Group Policy ADMX Files Step by Step Guide.doc

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

I received the same foldout and have already made a scan into JPG format of it.  Contact me off list if you are interested. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CC/DNA) [E]Sent: Wednesday, March 08, 2006 11:19 AMTo: ActiveDir@mail.activedir.orgS

[ActiveDir] Vista GPO article

http://www.windowsdevcenter.com/pub/a/windows/2006/03/07/group-policy-in -windows-vista.html Pretty good article, Todd Myrick List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.o

RE: [ActiveDir] AD Lag Sites

What MS paper? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 08 Mar 2006 13:46 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites The MS paper illustrates a way to achieve this without the USN issue. neil

RE: [ActiveDir] Cleaning Up AD

> What resources (utils, whitepapers etc) have people been using to clean up an AD infrastructure? It depends. If I am in a hurry, I just put it in my trunk and go to the nearest drive-through car wash. If I have time on my hand, I drive it to the friendly neighborhood Laundromat. Either way, it co

RE: [ActiveDir] Automatically generated replication links

Russ, you are making a big deal out of nothing. Stop worrying yourself sick. IF KCC built a CO for this DC, KCC thinks that's the most optimal CO possible at that point. It is not mandatory that the CO should be reciprocal. If you are not please with what KCC did, then delete its work and create

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

As an addition, the only way that it's free is if you answer the questions stating that you are responsible for the purchasing of IT products in your company.   Bonnie From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-WeidnerSent: Wednesday, March 08, 2006 11:15 A

RE: [ActiveDir] Cleaning Up AD

"16 Steps to a Healthier and Happier Active Directory" is archived here: http://event.on24.com/eventRegistration/EventLobbyServlet?target=lobby.j sp&eventid=17740&sessionid=1&partnerref=swsc_sitepost_02_14_06&key=F2F27 A63A35B4F457FECDA9201B08DBA&eventuserid=5675189 And the slides are at http://w

RE: [ActiveDir] AD Lag Sites

Title: Message Hi Paul, do you use the disk snapshots to provide the ability to restore an object or the whole DC (and therefore the whole Active Directory database), or both?       -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of PAUL MAYESSent:

RE: [ActiveDir] Automatically generated replication links

It's odd, the replicate FROM is different than the replicate TO on these two DCs.  Every other DC we've deployed to date is the same DC for both from and two (always the same DC for all) and these two decided to pick something different. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [ActiveDir] Cleaning Up AD

The link on our page is screwed up, and so is the TechTarget search engine. I'll post a working link as soon as I find it. -gil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Singler Sent: Wednesday, March 08, 2006 7:58 AM To: ActiveDir@mail.active

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: 08 March 2006 16:10 > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] Technet Magazine "Active Directory > Component Jigsaw" > > "Subscriptions are free" - to

RE: [ActiveDir] Automatically generated replication links

You might try establishing a “Preferred Bridgehead” server at the hub and spoke sites (Probably 2 is good), that should allow you to control who is chosen for replication CO’s.  Also you might also consider DNS record weights if you would like to lower the priority of the DC’s running DDNS

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

I am working on the Editors to post the graphic.  At least you can access the articles via the web.   Todd   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 11:10 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Technet Magazine "Ac

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

Hi Todd,   this would rock if you are able to scan it (or somebody has contacts to the team to request a printable-file)?   Subscriptions are only free for US Residents (shipping costs), and the web-version does not include the picture.   Gruesse - Sincerely, Ulf B. Simon-Weidner   MVP-Book

RE: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

"Subscriptions are free" - to those in the U.S. only :( From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CC/DNA) [E]Sent: 08 March 2006 16:00To: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Technet Magazine "Active Directory Component Jigsaw"  http:

RE: [ActiveDir] Automatically generated replication links

You might want to look into using Active Directory Load Balancing tool (adlb.exe); I’ve never used the tool but it might help you control replication and the connection objects.  Personally, I would trust the KCC and let it do its jobJ    Thanks... ... ... ... Sergio J. Olivarez - Con

[ActiveDir] Technet Magazine "Active Directory Component Jigsaw"

 http://www.microsoft.com/technet/technetmag/   Someone in my office just gave me a copy of this free magazine, and it came with the really neat insert called the “Active Directory Component Jigsaw”.  It is a wall hanging that outlines all the AD process graphically.  I will try to scan

RE: [ActiveDir] Automatically generated replication links

Russ,   Perhaps you should consider disabling the KCC within one or more sites, or forest-wide if this is a big issue.   Otherwise, I'd treat all DCs as equals and let the KCC 'do its thing' :)   neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, RussSent: 08 Ma

RE: [ActiveDir] Automatically generated replication links

repadmin /showreps for that DC says last replication @ (never).  So this DC isn't replicating for some reason.  Not sure why yet, the subnet is defined properly and everything else looks good. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge deSent: Wedn

Re: [ActiveDir] OT : Query DNS using wildcards?

I thought you said it was AD-integrated?     On 3/7/06, Bart Van den Wyngaert <[EMAIL PROTECTED]> wrote: Hi Dèjì,   This is such moment when a person says to himself (or herself ofcourse) "Why didn't I think about that?!".   Yes that is a solution! Hope they only are willing to accept it...   Ma

RE: [ActiveDir] Automatically generated replication links

yes... on the DC that needs the CO to replicate from. remember when looking on another DC, that object (including the old deleted CO) still needs to replicate to the other DCs From: [EMAIL PROTECTED] on behalf of Rimmerman, Russ Sent: Wed 2006-03-08 16:22 To: Ac

RE: [ActiveDir] Automatically generated replication links

I see the problem, this remote DC has a "replicate from" correctly but the replicate to was a different DC.  I deleted the replication link to that DC and now there's nothing in the "Replicate to" blank for that DC.  So it will repopulate within 15 minutes? From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] Automatically generated replication links

All our remote sites automatically pick the same DC at DHQ, but this site picked a DC that is our primary DNS server at DHQ for some reason.  We've never had that DC be selected by the KCC before, and I'm not sure why it picked that one instead. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTE

Re: [ActiveDir] Automatically generated replication links

The links will regenerate, if DNS is working properly. -Z.V. Rimmerman, Russ wrote: If you promote a new domain controller and it doesn't automatically generate the right replication links, is it safe or recommended to delete the link it generated and manually create the replication

RE: [ActiveDir] Automatically generated replication links

Hi Russ, The KCC runs 5 mins after the DC boots and after that each 15 min.. The KCC creates CO as it sees fit (and that depends on the site and replication topology, partitions to replicate and replicas hosting partitions). If you remove the CO manually, it will recreate them during the next

Re: [ActiveDir] Cleaning Up AD

A couple of weeks ago i 'attended' a webinar from NetPro called: "16 Steps to a Healthier and Happier Active Directory" http://www.netpro.com/company/events.cfm It is a very good overview of the tasks involved in getting AD to smile. It seems like the link from NetPro's website sends you to ht

[ActiveDir] Automatically generated replication links

If you promote a new domain controller and it doesn't automatically generate the right replication links, is it safe or recommended to delete the link it generated and manually create the replication link?  Or if you delete it will it try to automatically generate it again?

RE: [ActiveDir] Cleaning Up AD

that is too generic cleanup AD infrastructure... what do you want to clean: * unused user accounts, groups, computer * metadata of DCs * everything else I cannot remember right now jorge From: [EMAIL PROTECTED] on behalf of [EMAIL PROTECTED] Sent: Wed 2006

[ActiveDir] Cleaning Up AD

AD Gurus, Before I embarked on a Google search, I thought I might get some opinions from this list. What resources (utils, whitepapers etc) have people been using to clean up an AD infrastructure? I can go into more detail if anyone is interested...basically all of our DC's have tons of warn

RE: [ActiveDir] AD Lag Sites

Whoa, yep perhaps I didn't ramble enough!   Simply, whoops I've lost something out of the directory. I need to get that stuff back.   Where can i get the stuff back from:    - tape  - another DC  - perhaps deleted object restoration by some other 3rd party or another custom written proces

RE: [ActiveDir] (OT) How to find a computer on same segment but different ip subnet

Yeah that was a concern initially but we did install it. Actually I believe the issue is that (from docs I have found) WMI uses RPC which doesn't run over NetBEUI, it uses NetBIOS over TCP/IP. I did manage to use psexec, and it seems to work most of the time. I got the detection part, and p

Re: [ActiveDir] AD Lag Sites

[EMAIL PROTECTED] wrote: The MS paper illustrates a way to achieve this without the USN issue. Yes, I'm aware of this. Sorry - I'm a bit overloaded and I've read this post only with "one eye" before replying. It wasn't my brightest post :( - and there is no re-call option :) -- Tomasz Onys

Re: [ActiveDir] AD Lag Sites

Tomasz Onyszko wrote: Sorry - I've messed up two different things :( please forget about this post. -- Tomasz Onyszko http://www.w2k.pl/blog/ - (PL) http://blogs.dirteam.com/blogs/tomek/ - (EN) List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx L

RE: [ActiveDir] AD Lag Sites

The MS paper illustrates a way to achieve this without the USN issue. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko Sent: 08 March 2006 13:30 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Lag Sites PAUL MAYES wrote:

RE: [ActiveDir] AD Lag Sites

Title: Message Hi Paul, do you use the disk snapshots to provide the ability to restore an object or the whole DC (and therefore the whole Active Directory database), or both?   -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of PAUL MAYES

Re: [ActiveDir] AD Lag Sites

PAUL MAYES wrote: (...) No need for a lag site, just pick the hour on the timeline and restore from that DC. Ok so it means that you might need bigger disk and you can only snapshot down to 30mins. But if you're a bit creative with a few DC's then you can get much better coverage than lag s

RE: [ActiveDir] AD Lag Sites

As I stated earlier, we need to differentiate between object restores (via lag sites) and true DR (which the MS paper deals with). Restoring a user differs to the restoration of a DC, which differs again to the restoration of a domain and/or forest.   Objects can be restored using 3rd party t

RE: [ActiveDir] AD Lag Sites

  Hi All,   Forgive me a second whilst I ramble on 'cos this IS going to be a ramble, then shoot me down in flames at the end!   The problem with DR is getting the data from somewhere. Typically we go back to tape, which depending on when the last successful backup took place gives you a bit