You need to page the result using "Page Size" property and specify how much
you want your query to return at a time. The MaxPageSize can be increased
also, but the more efficient option is to just use the paging method.
Here's a link that talks about this briefly -
http://msdn.microsoft.com/libra
Hi,
In my application I
need to fetch all groups using a ldap_search function.The number
of
groups meeting the
criteria is more than the currently set value of
MaxPageSize.
Though I am quite
convinced that I cannot get more than MaxPageSize groups using
ldap_search.
But still i am
trying
Do you need to trust the computer account
for delegation?
:m:dsm:cci:mvp |
marcusoh.blogspot.com
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of T C
Sent: Monday, April 03, 2006 5:19
PM
To: Active Directory Discussions
Subject: [ActiveDir] Creating a
service
Those who can, ATTEND DEC! Those who can't... uh... DON'T.
-g
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Monday, April 03, 2006 8:55 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Where's Deji.. (was Quiet? DEC?
Without naming names, and without pointing fingers, let me say in my defense
that, contrary to popular opinions, I sometimes DO have to work. And to the
fine gentleman (again, not naming names) who misconstrued "work" as excuse,
well I got a bumper sticker on my car that says something along th
Did you configure a userPrincipalName of NetPointBind for
the userid? If not, you need to use the DN of the user
object.
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark
BakunasSen
You can also query the setting using w32tm.exe /tz
Thanks,
-Steve
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Monday, April 03, 2006 8:57 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDi
The following series of articles on passwords vs. pass phrases by Jesper
also discusses this:
http://www.microsoft.com/technet/community/columns/secmgmt/sm1104.mspx
Thanks,
-Steve
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Eb
Sorry one more thing.. in a Center for Internet Security project to set
Baseline Operational Security Standards for protecting sensititive data
(both PII and business confidential)... they are actually leaning
strongly towards recommending two factor authentication and not just
passwords and a
Yeah in hindsight I think I can achieve bon bon status but just putting
the stupid key in group policy.
Dean Wells wrote:
I don't query the existing setting, I simply set it ... via site linked
policies or script or whatever's your preference -->
Control.exe TIMEDATE.CPL,,/Z (GMT-08:00) Pa
Sounds like a good registry setting to apply via GPO (as you indicate
further down in your original email). One option would be go link the
policy at the site level, as long as these correspond to the correct
time zones you need.
Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:
The Magical Number Seven:
http://www.well.com/user/smalin/miller.html
Protecting your Windows Network, Dr. Jesper Johansson and Steve Riley
site that study regarding the ability of humans to process information.
(Good book btw..entertaining security book)
Amazon.com: Protect Your Windows
I don't query the existing setting, I simply set it ... via site linked
policies or script or whatever's your preference -->
Control.exe TIMEDATE.CPL,,/Z (GMT-08:00) Pacific Time (US & Canada); Tijuana
alternatively:
RUNDLL32.EXE SHELL32.DLL,Control_RunDLL TIMEDATE.CPL,,/Z (GMT-08:00) Pacific
Ti
Go to sites and services - expand the sites, expand the dc,
right click on ntds - and check the global catalog.
Thank you and have a splendid
day!
Kind Regards,
Freddy Hartono
Group Support
Engineer
InternationalSOS Pte Ltd
mail:
[EMAIL PROTECTED]
phone: (+65)
6330-9785
From: [
I'd be very interested to see the technical data that backs that up (not you Neil, but the folks from Microsoft that make that claim.)
Is it related to people being able to remember a limited number of numbers perhaps?(http://www.youramazingbrain.org.uk/yourmemory/digitspan.htm
) Or is there some
Without walking around to every stupid new desktop every year and
getting mad at Dell that they aren't picking up the right timezones
I want to set at my desktop eating bon bons and scan them and see if
they've screwed up and the Secretaries will be booking appointments in
the wrong time zo
It's late so that could well be it ... but I'm afraid I'm uncertain as to
what it is you've not already ascertained for yourself?
--
Dean Wells
MSEtechnology
* Email: [EMAIL PROTECTED]
http://msetechnology.com
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
It's a best practice to have more than one global catalog server enabled in your domain. If you have more than one domain in your forest, you want to read up about putting the GC on a role holder.
al
On 4/3/06, Antonio Aranda <[EMAIL PROTECTED]> wrote:
Is there a way to have multiple cata
Just a heads up for everyone.. remember next year Daylight savings will
be in March so we'll all be patching and moving that daylight savings
impact.
I think the Treo's probably did the same OEM oops.:
SANS - Internet Storm Center - Cooperative Cyber Threat Monitor And
Alert System:
http://w
Susan,
Not sure if this will help, but this KB
(http://support.microsoft.com/kb/909915) was posted as a part of
Microsoft's response to the DST extension in Australia for the
Commonwealth games. The package contains an EXE that can be scripted
that allows you to change (if not determine) what Time
(someone go pick Joe up off the floor after I post this.. I'm actually
asking about scripting)
Is there a script that can be run to determine what a computers time
zone status is? Some WMI status in AD or something? It seems like
everytime I get new computers in the office...the OEM image t
Is there a way to have multiple catalog servers?
I have a setup with multiple DC at multiple locations. Everything works
ok until the connectivity is lost between locations. I was told that the issue
is the machines can’t find the catalog server. Since I only have
one, when connectivi
I've brought up an ADAM instance on a member server. I imported
the MS-User.LDF and created a user in the configuration partition. When I
attempt to bind to the application partition using LDP from the ADAM server, I
get:
res = ldap_simple_bind_s(ld, 'NetPointBind',
); // v.3
Error <
>> Are lingering objects the
same as phantom objects?
The
definition of the term "lingering objects" is somewhat open to question these
days following an activedir.org thread earlier this year I believe. My
definition is fairly simple; lingering objects are objects that do not exist
Hi,
I am working on bringing a Unix service under AD. To do this I need to map a service
principal name (SPN) to an AD account. The MS document specifies using a user
account for this, and I have tested with this and it works. However, I am also
trying to use a computer account for this. Every
Why not
(&(objectCategory=computer)(|(operatingSystem=Windows 2000
Server)(operatingSystem=Windows Server 20003)))
This is at least limited to computer objects and should be slightly better.
Gruesse - Sincerely,
Ulf B. Simon-Weidner
MVP-Book "Windows XP - Die Expertentipps": http://tinyur
I think that was always on the cards after VMWare made their entry-level
server product free.
http://www.vmware.com/products/server/
Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Tuesday, 4 Apri
I usually use:
(&(objectCategory=computer)(operatingSystem=*Server*))
But this is a lot more efficient:
(|(operatingSystem=Windows 2000 Server)(operatingSystem=Windows Server
20003))
Although it' still not great as there's no indexed attribute.
- Original Message -
From: "AD" <[
Sticking it to the man!!!
But, you ARE the man...
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
ASBSent: Monday, April 03, 2006 1:11 PMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] OT: Microsoft
Announces New Price, and Availability of Linux Support, for Virtu
I concur, It was a great conference!
Ray
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick
Sent: Wednesday, March 29, 2006 6:07 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Quiet? DEC? Related?
Just wrapped up Day 3. 530 p
If you're running 2003 then I don't believe you
need to run /DOMAINPREP. That's only to do what it does for 2k
domains.
So it's just /FORESTPREP.
- Original Message -
From:
Brian
Desmond
To: ActiveDir@mail.activedir.org
Sent: Monday, April 03, 2006 4:01
PM
Ok ladies and gentlemen,
Once again I need your help. What would be the best query to list all servers
in Active Directory knowing that no additional indexes have been added from the
default install?
1. (&(|(operatingSystem=Windows 2000 Server)(operatingSystem=Windows Server
20003))
2. (&(
Nope lingering objects and phantoms are very different.
Phantoms are expected and purposeful (but probably not something you will
generally see), lingering objects are accidental and unexpected (unless you did
something bad then you may expect them) and stick right out in the directory
when
Sweet!!
-ASB
On 4/3/06, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] <[EMAIL PROTECTED]> wrote:
Microsoft Virtual Server 2005 Market Bulletin: Microsoft Announces NewPrice, and Availability of Linux Support, for Virtual Server 2005 R2:
http://www.microsoft.com/windowsserversystem/virtualserver
Hi joe,
Two questions:
-
Are “lingering
objects” the same as “phantom objects”?
-
The help for repadmin on
my 2003/SP1 DCs doesn’t indicate a “/removelingeringobjects”
option. What version do you have that lets you do this?
Thanks!
Mike Thommes
Ps.
Microsoft Virtual Server 2005 Market Bulletin: Microsoft Announces New
Price, and Availability of Linux Support, for Virtual Server 2005 R2:
http://www.microsoft.com/windowsserversystem/virtualserver/evaluation/news/bulletins/vs05pricing.mspx
(uh..like free)
http://www.microsoft.com/downloads
I found him. :)
> Original Message
> Subject: RE: [ActiveDir] Where's Deji.. (was Quiet? DEC? Related?)
> From: "Mark Parris" <[EMAIL PROTECTED]>
> Date: Mon, April 03, 2006 12:41 am
> To:
>
> Sorry Could not resist.
>
> -Original Message-
> From: [EMAIL PROTECTED]
>
Well, if it's going to be in Asia, then joe and Dean should set up an AD
Dojo or Xaolin temple so they can teach the young grasshoppers how to
walk on rice paper without leaving a trace. Or they can continue to
strain their relationship with George Lucas :) and set up a real AD Jedi
Knight training
You only need to run forestprep once – on your schema master for
the forest. Domainprep once per domain.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c -
312.731.3132
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of James Carter
Sent: Monday, April 03,
Yes, although the one caveat when linking a single GPO to
multiple containers is that the security filter is stored on the GPO, not the
link. This means that it can get complex if you're using security groups to
filter GP application and you have machines/users that are members of groups
tha
Hi, I have a root domain with 4 child domains. I only want to upgrade the child domain to Windows 2003 R2. I assume all I need to do is run adprep /forestprep and then adprep /domainprep for each child domain I want upgraded to R2 or does it matter? thanks J
New Yahoo! Messenge
The issue is caused with the remote session option . When used it allows a remote session on the server as local system! I have full admin rights over the IBM director implementation. Which includes servers from the parent domain. Need I say more?
M@
On 02/04/06, Matheesha Weerasinghe <[EM
Sorry; I know I shouldn't criticise spelling but having
just struggled to try and understand the Perl that Joe wrote (and worked out
that I could probably do it in _vbscript_ which I do understand), I really don't
want to have to try and learn Forth as well :-)
Steve
From: [EMAIL PROTECTE
(or DataCentres if you prefer)
Yes, we do ;-)
We don't allow laptops, mobile phones, etc. in our datacentres. I've yet to
be beaten with a stick. But who knows. That might be because I'm (a
little) quicker than our "guards".
In fact, our datacentre security is bordering on ridiculous.
I mean sure, say you are in the datacenter and you want a little chicken
and broccoli with brown sauce or a bit of tandoori chicken or some
vindaloo dish, no one is going to fault you for pulling up a browser and
ordering from Wok To Yu or Shingara Goochi Kitchen but other than that,
are there
45 matches
Mail list logo
