RE: [ActiveDir] ou delegation - change password at next logon

2006-03-28 Thread Dan Holme
If you're an IT Pro mag subscriber, check this out: http://www.windowsitpro.com/Article/ArticleID/41105/41105.html If not, here's a QUICK summary... 1) At the BOTTOM of this message, copy and everything. ON THE MACHINE *FROM* WHICH YOU DO YOUR DELEGATION (i.e. your machine) 2) BACK UP %windir

RE: [ActiveDir] View Delegated Tasks?

2006-03-28 Thread Dan Holme
  For anyone who’s going to Windows Connections in Orlando, come to my Advanced Delegation session.  I’ll show you an option that is so simple and powerful for delegating and then being able to pull reports on your delegation that it will blow your mind.  Believe me… I’m not tooting my o

RE: [ActiveDir] Folder redirection exceptions?

2006-03-28 Thread Dan Holme
I don’t know why my reply was invisible, but I *am* going to tackle this.  I am being tasked with a similar task for a client so I’m guessing I’ll be doing it within the next 1-2 weeks.  Sorry for the delay.   Dan     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

[ActiveDir] Point and Print Restrictions-GPO

2006-03-28 Thread Mark Orlando
Title: Point and Print Restrictions-GPO Hello all, I am trying to set up internet printing and hit a snag.  I am looking for GPO setting for Point and Print Restrictions in the Windows 2000 Server W/SP4 group policy snap-in.  I thought there was supposed to be something under User Configuration

[ActiveDir] Can't remove Directories in Windows 2003

2006-03-28 Thread Ibarra, Juan
I am doing a data migration from three old servers to a new one and I have two issues:   Since we are consolidating data onto the same directory in the new server when a job from server 1 runs, it removes the data that was already copy from server2. This is the syntax I a

RE: [ActiveDir] OT: MOM + GCs

2006-03-28 Thread Marcus.Oh
Gene, sign up for [EMAIL PROTECTED].  You have to go to listleague.com to sign up for it.   :m:dsm:cci:mvp | marcusoh.blogspot.com   From: [E

RE: [ActiveDir] ou delegation - change password at next logon

2006-03-28 Thread Marcus.Oh
Graham, According to the Best Practices for Delegating Active Directory, this is what you need to do: 1. write properties on user object to modify User-Password attribute 2. write properties on user object to modify User-Force-Change-Password extended right Or 1. write properties on user obje

RE: [ActiveDir] Script not working thru GPO

2006-03-28 Thread Darren Mar-Elia
Good catch Kamlesh. Jeff, check out:   http://msdn.microsoft.com/library/default.asp?url="">    for an example of this. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh ParmarSent: Tuesday, March 28, 2006 8:59 AMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir]

Re: [ActiveDir] Script not working thru GPO

2006-03-28 Thread Kamlesh Parmar
If this is the exact script then Where have you defined value of "ForAppending" ??   As error  message contains "invalid argument"   -- Kamlesh  On 3/28/06, Cothern, Jeffrey D Mr CTR USSOCOM HQ <[EMAIL PROTECTED]> wrote: I have a script i created in vbs.  This script works when run on the machine

Re: [ActiveDir] Surf control web filter and DC's

2006-03-28 Thread Tom Kern
Thanks!!     Just curious, how does this work in a Citrix enviorment? Don't all the users "look" like they are coming from the same ip(the Citrix box)?   Thanks again.  On 3/28/06, Craig Cerino <[EMAIL PROTECTED]> wrote: Randy is spot on - -been using Surf Control (SMTP and Web) for almost 4 yea

RE: [ActiveDir] Script not working thru GPO

2006-03-28 Thread Darren Mar-Elia
Jeff- One thing you could try is to just set up success and failure auditing on that file and see if the computer is even trying to get to it. Once you know that, then you have a better chance of knowing the next step. You might also, just for the fun of it, grant that specific computer acco

RE: [ActiveDir] Surf control web filter and DC's

2006-03-28 Thread Craig Cerino
Randy is spot on - -been using Surf Control (SMTP and Web) for almost 4 years now.       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Walton, Randy Sent: Tuesday, March 28, 2006 8:56 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Surf control web

[ActiveDir] ou delegation - change password at next logon

2006-03-28 Thread Graham Turner
Dear all, was wondering if someone could give us a view on the delegation of the 'user must change password at next logon' it seems that having applied the delegation (using Windows 2000 delegation wizard on a Windows 2000 domain) that allows 'reset password on user objects' , the delegate can c

Re: [ActiveDir] Script not working thru GPO

2006-03-28 Thread matheesha weerasinghe
If its not on the network at the time, it will log messages saying something like the \\domain\sysvol\domain\scripts\** file is inaccessible. Have you made the Gp changes "Always wait for the network at computer startup and logon" under admin templates/system/logon ?   M@  On 28/03/06, Cot

RE: [ActiveDir] Surf control web filter and DC's

2006-03-28 Thread Walton, Randy
Yes, there is a EUM User Agent (not the whole EUM itself) that can be installed on domain controllers.  It is not a required component, but security groups really like it.    Instead of Surf Control doing reverse DNS/WINS queries to determine the hostname of web requests passing through

RE: [ActiveDir] Empty hostname for a Win 2003 server belonging to an AD domain

2006-03-28 Thread Freddy HARTONO
Since you mention it's a vm clone - is the computersid duplicated? Thank you and have a splendid day! Kind Regards, Freddy Hartono Group Support Engineer InternationalSOS Pte Ltd mail: [EMAIL PROTECTED] phone: (+65) 6330-9785 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAI

RE: [ActiveDir] Script not working thru GPO

2006-03-28 Thread Cothern, Jeffrey D Mr CTR USSOCOM HQ
Ok I set the group Domain Computers with modify permissions on the folder and filename.  Also verified that everyone has full permissions on the share permissions.  Tested and that didnt work. I then put in local service and network service without any luck.   Am I correct that by time it ge

RE: [ActiveDir] Surf control web filter and DC's

2006-03-28 Thread Todd Hofert
I am running Surf Control 5.0 with EUM. I did not install anything on my DC's. Do you know the name of the dll? I can search my DC's for it if you know what it is. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom KernSent: Monday, March 27, 2006 8:43 PMTo: ActiveDir@mail

[ActiveDir] Empty hostname for a Win 2003 server belonging to an AD domain

2006-03-28 Thread Rodrigo Blanco
Hello list, I am currently having a problem with a Windows 2003 server inside a Windows 2003 server-based Active Directory domain. The problem is that when I run the "hostname" command, it is empty: C:\>hostname C:\> I suspect this happened after doing a clone of the VM machine and, by error, s

RE: [ActiveDir] Script not working thru GPO

2006-03-28 Thread Steve Rochford
Check permissions on that file/folder - if you're running this as a machine startup script then the group "domain computers" will need to be able to write to it (and almost certainly won't have those rights unless you've added them before)   Steve From: [EMAIL PROTECTED] [mailto:[EMAIL PRO

[ActiveDir] OT: MOM + GCs

2006-03-28 Thread Gene Sibbs
  Hi All  I having a two node clustered exch, and MOM is in place to monitor the ups and downs. Recently MOM has been pushing the following error msgs:     Description:  The value for the Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\HeapDecommitFreeBlockThres