[ActiveDir] Domain gets Blacklisted

2006-06-13 Thread Ajay Kumar
Hi all,   Can u help me on this prob. Problem is that my exchange 2003 which installed on win 2003 dc agets blacklisted (Means my static ip is blacklisted). I searched how to stop this and on net i found solutions pointing towards open relay and spam protection. They r saying that ur exchange is sp

[ActiveDir] Active Directory Cookbook 2e

2006-06-13 Thread Tony Murray
…is now out.    http://www.oreilly.com/catalog/activedckbk2/   Tony This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this com

[ActiveDir] How to block a sender in Exchange.

2006-06-13 Thread Ajay Kumar
Hi there,    I m having a exchange 2003 running in my org. with 500 clients using that. few weeks i m monitoring that a Particular Id is sending a virius mails i wanna block this sender how i will do that ,. And also we are not able to send and recveive mails from a particular domain. Everytime whe

[ActiveDir] OT: New Zealand

2006-06-13 Thread Derek Harris
Cheers Tony - I was down in your area in March & April, touring the South Island with Active New Zealand: awesome people, beautiful country, fantastic trip!  I highly recommend it to everyone!   Derek From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony MurraySent: Tuesday,

RE: [ActiveDir] UserName & Psswd Script

2006-06-13 Thread Molkentin, Steve
What a shame, Tony... his posts were so insightful...   ;)   themolk.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony MurraySent: Wednesday, 14 June 2006 7:02 AMTo: ActiveDir@mail.activedir.orgCc: [EMAIL PROTECTED]Subject: RE: [ActiveDir] UserName & P

RE: [ActiveDir] FRS/DFS woes

2006-06-13 Thread Molkentin, Steve
Russ, Possibly - what are the permissions of the 3 folders you are trying to replicate around? Are they identical? Check the share permissions as well as the folder permissions. Can each machine resolve the FQDN of each of the other two machines from it? I'm making the assumption that all 3 machin

RE: [ActiveDir] UserName & Psswd Script

2006-06-13 Thread Tony Murray
I have manually unsubscribed the address.   Tony   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Phil Renouf Sent: Wednesday, 14 June 2006 8:12 a.m. To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] UserName & Psswd Script   Hi Pete,   Have you

RE: [ActiveDir] DNS - How to tell the static DNS IP-addresses per server

2006-06-13 Thread Victor W.
Thank you all, great input. I will be trying this and will let you know the outcome.   Victor From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard KlineSent: dinsdag 13 juni 2006 6:18To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] DNS - How to tell the static DN

Re: [ActiveDir] DNS reverse lookup problem

2006-06-13 Thread Al Mulnick
1) I wouldn't expect it to change the behavior you're specifically seeing. Why? Because the system doesn't just arbitrarily decide to register some host.  That setting is more to do with security and legacy clients than it is spontaneous creation and registration of host records.   2) Best way to

Re: [ActiveDir] UserName & Psswd Script

2006-06-13 Thread Phil Renouf
Hi Pete,   Have you tried going to the site listed at the bottom of every message?   If you go to http://www.activedir.org/List.aspx you will find instructions on how to unsubscribe from the list.   Take care! Phil  On 6/13/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: PLEASE TAKE ME OFF YOUR

RE: [ActiveDir] UserName & Psswd Script

2006-06-13 Thread walls
PLEASE TAKE ME OFF YOUR LIST I AM GETTING HUNDREDS OF UNSOLICITED EMAILS, THX PETE   -- Original message -- From: <[EMAIL PROTECTED]> > Why a script? > > Why not: > "Net use * \\server\share /u:server\user *" > > i.e. connect using an account defined locally on the machine

RE: [ActiveDir] Group membership question

2006-06-13 Thread walls
PLEASE TAKE ME OFF YOUR LIST = I AM GETTING HUNDREDS OF UNSOLICITED MESSAGES, THX PETE   -- Original message -- From: "joe" <[EMAIL PROTECTED]> No it is a value in an attribute. A child object would be an object that has a group as its parent...   I.E.  cn=group,ou=someo

RE: [ActiveDir] OT: Cisco Unity AD schema extensions

2006-06-13 Thread Jason Benway
Title: Message Thank you for your feedback. I greatly respect the knowledge of this group.   jb -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al MulnickSent: Tuesday, June 13, 2006 12:49 PMTo: ActiveDir@mail.activedir.orgSubject: Re:

[ActiveDir] DNS reverse lookup problem

2006-06-13 Thread James Carter
  Hi,   Windows 2003, FFL Single Domain, Active Integrated DNS on two DC's   I have an issue with DNS and the reverse zone. Some computers have multiple PTR records e.g:   Computer1   192.168.6.5 Computer1   192.168.6.66   I don't know why this is happening, I noticed that the DHCP Proper

Re: [ActiveDir] Time Server for Forest Root PDC

2006-06-13 Thread chuckgaff
You do want to choose a reliable source, whatever it is.  An external atomic clock is most likely to be reliable so long as you can communicate with it successfully and consistently.  It is important to keep internal system clocks in synch.   Chuck -Original Message-From: Rob MOIR <[EMAIL

RE: [ActiveDir] OT: Cisco Unity AD schema extensions

2006-06-13 Thread Rimmerman, Russ
We're using this product and extended out schema. No problems to-date. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Benway Sent: Tuesday, June 13, 2006 9:06 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: Cisco Unity AD schema exten

Re: [ActiveDir] OT: Cisco Unity AD schema extensions

2006-06-13 Thread Al Mulnick
I haven't worked with Cisco's Unity products, but a quick look a the document link you sent doesn't indicate anything out of the ordinary.  It appears to add cisco-specific attributes to the user, group and contact objects and adds a new class specific to unity.    From a managing the Active Dire

RE: [ActiveDir] FRS/DFS woes

2006-06-13 Thread Rimmerman, Russ
Sonar says the "CreateFailedCount" is 16 on my replication test. Maybe it's some sort of permission issue. ?? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of McCann, Danny Sent: Tuesday, June 13, 2006 10:44 AM To: ActiveDir@mail.activedir.org Subject: RE

RE: [ActiveDir] FRS/DFS woes

2006-06-13 Thread Rimmerman, Russ
The root of the DFS is located on our PDC emulator, which is also a DNS server itself. If I go into the dfs root on the PDC emulator I see the file I copied to the \\domain.com\dfs\software directory, it's just not replicating to any of the other links. -Original Message- From: [EMAIL PR

RE: [ActiveDir] Group membership question

2006-06-13 Thread joe
Title: Group membership question No it is a value in an attribute. A child object would be an object that has a group as its parent...   I.E.  cn=group,ou=someou,dc=dom,dc=com and the child object of cn=somethingelse,cn=group,ou=someou,dc=com,dc=com   In the default schema, the only objectcla

RE: [ActiveDir] UserName & Psswd Script

2006-06-13 Thread neil.ruston
Why a script? Why not: "Net use * \\server\share /u:server\user *" i.e. connect using an account defined locally on the machine named 'server'. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue Sent: 13 June 2006 16:19 To: ActiveDir@mail.act

RE: [ActiveDir] FRS/DFS woes

2006-06-13 Thread McCann, Danny
Where is the root of the DFS located? I seem to remember having problems with DFS replication before, because one of the servers hosting the root had it's DNS incorrectly configured. Ultrasound would report any errors sure enough. After decoding what it all means you'll need a dark room to lie down

[ActiveDir] Group membership question

2006-06-13 Thread McCann, Danny
Title: Group membership question Sorry if this is a daft question, but I can't find an answer anywhere: Is a User considered a Child object of a Group to which it is a member? Cheers Danny

Re: [ActiveDir] UserName & Psswd Script

2006-06-13 Thread Za Vue
Solved my own problem.. Thank you.. Za Vue wrote: I need to map to a windows standalone server from a domain machine with a different username and password other than the domain account. Anyone care to share a script? Thank you, Z.V. List info : http://www.activedir.org/List.aspx List F

RE: [ActiveDir] Time Server for Forest Root PDC

2006-06-13 Thread Freddy HARTONO
Time lag can be a painful thing in certain applications, had an incident before where the payroll system which is linked to the accesscard system was getting out of sync, some factory production workers are getting "free" overtime pay due to a few mins out of sync with the realworld's time... Tha

[ActiveDir] UserName & Psswd Script

2006-06-13 Thread Za Vue
I need to map to a windows standalone server from a domain machine with a different username and password other than the domain account. Anyone care to share a script? Thank you, Z.V. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List arch

RE: [ActiveDir] corrupt vmware DC

2006-06-13 Thread Eric Fleischman
Taking offline.     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, June 13, 2006 7:20 AM To: activedir@mail.activedir.org Subject: [ActiveDir] corrupt vmware DC   Booted up VMware with DC (2003, SP1) on it yesterday and got an

[ActiveDir] FRS/DFS woes

2006-06-13 Thread Rimmerman, Russ
I'm trying to set up a DFS share and having all sorts of issues getting it to work. I've installed Ultrasound and i'm either not sure where to look in it for the answer or it's not giving me the answer. I set up a link with 3 targets in a ring replication topology. 2 of the 3 servers are Win2k3

[ActiveDir] corrupt vmware DC

2006-06-13 Thread Darren Mar-Elia
Booted up VMware with DC (2003, SP1) on it yesterday and got an "internal error" on AD at start, forcing a reboot. Went into DSRM and ran semantic checker in ntdsutil. Checker returned error:   Records scanned:   1200Error fetching security descriptor [ Jet Error -1017]   which, upon

[ActiveDir] OT: Cisco Unity AD schema extensions

2006-06-13 Thread Jason Benway
Has anyone worked with/been involved with the Cisco unity AD schema extensions? One of our divisions is planning to go with the integrated solution and wants to run the schema update. I have the link on Cisco's site about what they add. http://www.cisco.com/en/US/products/sw/voicesw/ps2237/prod

RE: [ActiveDir] OT: RUS

2006-06-13 Thread Clay, Justin \(ITS\)
Thanks Al!   That’s so easy I’m a bit embarrassed J     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, June 13, 2006 8:28 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: RUS   http://support.microsoft.com/?kbid=24

Re: [ActiveDir] OT: RUS

2006-06-13 Thread Al Mulnick
http://support.microsoft.com/?kbid=243629     Al  On 6/13/06, Clay, Justin (ITS) <[EMAIL PROTECTED]> wrote: Al,   I think that's great advice. I wish we really had a provisioning system, like MIIS or something similar. We have 22,000 users and they're all maintained by hand, which is horrible.

RE: [ActiveDir] OT: RUS

2006-06-13 Thread Clay, Justin \(ITS\)
Al,   I think that’s great advice. I wish we really had a provisioning system, like MIIS or something similar. We have 22,000 users and they’re all maintained by hand, which is horrible.   We have considered using a custom attribute to tag employees as well. We’re definitely going to be

Re: [ActiveDir] OT: RUS

2006-06-13 Thread Al Mulnick
I think it's a really good idea to clean up the UPN's.  However, I think it worth noting that you may want to have a look at the process that provisions the users and creates those upn's.  Just to make sure you don't end up doing the work over and over again.   I realize upn alone will work, but

Re: Re: Was: RE: [ActiveDir] Virtual DCs - Now: Question on tuning Virtual Server

2006-06-13 Thread Al Mulnick
"When deploying virtual disks, the same rules apply as they would for the same process on physical disks. For example, do not allow a database store to use the same disk spindles as its transaction logs."     Something to note is that virtualization sometimes has a higher cost for the disk subsyst

RE: [ActiveDir] OT: RUS

2006-06-13 Thread Clay, Justin \(ITS\)
We have 1 AD forest with 5 total domains. They are “sister” domains and they don’t share a namespace. For instance we have one domain for our Police Department, one for the Sheriff Department, one for the Public Schools, etc.   As for Steven’s suggestion for UPN, we were hoping to use tha

Re: [ActiveDir] bitwise filters

2006-06-13 Thread Matheesha Weerasinghe
Thanks for replying Tony. Unfortunately gmail couldnt read your reply so I resorted to the archive. In my example for searching universal groups, I wasnt distinguishing between security and distribution groups. Therefore the 2nd filter is correct too isnt it? As for the 3rd question, I am sure y

RE: [ActiveDir] Time Server for Forest Root PDC

2006-06-13 Thread Rob MOIR
> -Original Message- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of Teo De Las Heras > Sent: 12 June 2006 18:23 > To: ActiveDir@mail.activedir.org > Subject: [ActiveDir] Time Server for Forest Root PDC > > How have people on this list configured their Forest

RE: [ActiveDir] AD integration

2006-06-13 Thread Rob MOIR
Just want to quickly say thanks to both of you, Joe and Al, you've helped me form some thoughts around this area that I can work with. This short discussion has been very useful. If I ever see either of you at a MVP gathering I owe you a beverage of your choice, or two. -- Robert Moir Microsoft M

RE: Re: Was: RE: [ActiveDir] Virtual DCs - Now: Question on tuning Virtual Server

2006-06-13 Thread Rob MOIR
I have a few notes on general best practices for building Virtual Servers on my website if that is any help: http://robertmoir.com/blogs/someone_else/archive/2006/03/12/2155.aspx -- Robert Moir Microsoft MVP for Windows Servers & Security Senior IT Systems Engineer Luton Sixth Form College Right

RE: Re: Was: RE: [ActiveDir] Virtual DCs - Now: Question on tuning Virtual Server

2006-06-13 Thread Rob MOIR
Virtual Machine Additions are a set of drivers and applets to extend and improve integration of a guest OS into the Virtual Server / PC application. As for Where do you get it / Why wouldn't they just include it in the default install, you get it as part of the default install because it *is* in

[ActiveDir] OT: Global Catalog languages & Exchange 2003

2006-06-13 Thread Freddy HARTONO
Title: OT: Global Catalog languages & Exchange 2003 Hi Apart from installing the language options in regional settings, do I still need to input the registry keys in the gc to reflect the languages? HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Ntds/Language Cant find the document for exchange 20

RE: [ActiveDir] Time Server for Forest Root PDC

2006-06-13 Thread neil.ruston
I would suggest you sync with whatever time source(s) the organisation considers to be 'authoritative'.   This may be an internal time server or some external clock. The important point is that you trust this source to be correct and thus authoritative.   Many larger orgs have internal clocks