RE: [ActiveDir] Vendor Domain

2006-07-23 Thread Ulf B. Simon-Weidner
Just a few thoughts to add since so many others already have given you great answers:   -  I’ve heard that any changes to an network which has production status in a clinic, pharma-manufacturer or supplier will endanger FDA-approval -  I know that many clinical “devices”

RE: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Brian Desmond
Oh usually folks stumble all over and give me some bs about how they’re a committed team player. I’ve had that exchange three or four times interviewing people for this one project.   Metadata cleanup is a midlevel question.   Senior level questions … I like quizzing people a bit more i

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread mike kline
Brian,   That was a good story, very funny.  So what did the guy do? Did he just get up and leave?  I know from reading your posts you are usually straight and to the point. I would be sweating if I had to interview with you.   Going off course a bit.  What are some types of AD questions that you

RE: [ActiveDir] Have you built an R2 Forest?

2006-07-23 Thread Grillenmeier, Guido
hehe, yep I've seen that (the difference of the Schema.ini files; i.e. missing entry for the tombstonelifetime property) but didn't think too much of it because for now I've only had to handle upgrading from Win2000 or 2003 to R2 where the Schema.ini doesn't play a role. It is "only" used to

RE: [ActiveDir] Raid 1 tangent -- Vendor Domain

2006-07-23 Thread Eric Fleischman
> The exception to this is the edge case of Eric's big DIT[1] in which > he dumped 2TB of data into AD in a month at which point he did > something that few people see, pushed the IOPS on the log drive > through the roof. Actually, log IOs were quite low, considering. I bet a single spindle pair w

Re: [ActiveDir] Domain Trusts.

2006-07-23 Thread Matt Hargraves
Thanks, that's exactly what I was looking for.  Oddly enough, it's somewhere on MS's site, though my 5-8 queries never came up with it (the wonderful joys of searching on microsoft.com).  Now I can give them 2 options separate forest with a 1-way trust or a subdomain (since there really isn't a

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Matt Hargraves
So basically it sounds like you need a technically savvy person who has very good understanding of AD, but is going to come back to you with any concerns about a design direction that you've come up with instead of going through and revamping it completely... 'basic user' or 'admins'... ROFLMAO

Re: [ActiveDir] back up strategies

2006-07-23 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Why tapes? (Just wondering as we've found tapes haven't kept up with drive sizes and need for speed during a backup window) NAS, SAN, rotation of harddrives... etc...etc.. Matt Hargraves wrote: What is your plan? Do you want speed in restoration or backup? Do you have a 24-hour facility o

Re: [ActiveDir] back up strategies

2006-07-23 Thread Matt Hargraves
What is your plan?  Do you want speed in restoration or backup?  Do you have a 24-hour facility or is it an 8-hour facility?  Do you have a tape changer or a single tape unit (changing tapes daily)?If you have an 8-hour facility and the server is close to you, then weekend fulls and differentials i

RE: [ActiveDir] Domain Trusts.

2006-07-23 Thread Steve Linehan
I believe that the documentation that you are looking for that describes these transitive trusts and the inability to alter them is contained here: From: http://technet2.microsoft.com/WindowsServer/en/library/f5c70774-25cd-4481-8b7a-3d65c86e69b11033.mspx Automatic Trusts By default, two-way

[ActiveDir] Incomplete Initial Replication?

2006-07-23 Thread Noah Eiger
Hello: Last week, I promoted a virtual server (Host: W2k3 SP1 Std running W2k5 VS R2; Guest: W2k3 R2 ENT) to a DC. It was the second DC at that site. Prior to the promotion, I pointed its DNS to the site's first DC, joined the domain, and the promo'd. I confirmed that the new DC was place

Re: [ActiveDir] Domain Trusts.

2006-07-23 Thread Matt Hargraves
I was just curious if I could avoid the 2-way transitive trust.  Current resources in domains for those resources are being moved into AD.  Many have 1-way trusts and we'd like to keep that status if possible.  I was hoping I could do it in the same forest, but since that's not possible we just hav

RE: [ActiveDir] DNS Issue

2006-07-23 Thread Steve Linehan
David, A few more questions. When you state you cleared the cache I want to insure this meant clearing the Cache on the DNS Server not the client resolver cache. Also if you open the DNS snap-in in advanced mode and look in the cache do you see a record for nyc.test.com and if so can you pro

[ActiveDir] Have you built an R2 Forest?

2006-07-23 Thread joe
If so... you may want to peek at   http://blog.joeware.net/2006/07/23/484/   entitled "R2 tombstoneLifetime boo boo"       -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm   

RE: [ActiveDir] Domain Trusts.

2006-07-23 Thread Grillenmeier, Guido
Matt, I'm quite aware of the token limitations in AD (and the lovely attack vectors around this "feature") - however, creating a separate domain for this reason would fall under administrative isolation, which is not how you've phrased your previous reply. So I'm a little but puzzled as to wh

RE: [ActiveDir] 64bit Windows

2006-07-23 Thread Grillenmeier, Guido
thanks Susan - yep, I've felt the pain with VPN support myself - mine is not related to ISA 2004 though. As mentioned in my other reply, can you be a bit more specific on the beancounter (financial?) apps. /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beh

[ActiveDir] back up strategies

2006-07-23 Thread Quatro Info
Hi all, I am interested in your stories about back up strategies / procedures with all advantages and disadvantages involved. For example: Set up -Weekends full backups 2 tapes -Working days incremental5 tapes -monthly full backups...12 tapes...1 each month. Which strategy is most

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Matheesha Weerasinghe
LOL. Yeah. Never a good idea to have customised "BIG AL" number plates. ;-) On 7/23/06, joe <[EMAIL PROTECTED]> wrote: Yeah Al interviewed me once and I didn't get the job because I started crying. I found his car in the parking lot and punched holes in the tires. :) -- O'Reilly Active

RE: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Mudha Godasa
--- joe <[EMAIL PROTECTED]> wrote: > A lead tech better be pretty darn technical with > strong troubleshooting > skills. It is tough to interview someone for the > latter as asking questions > like "this and this are occurring, what do you do or > what is wrong" are > usually not productive.

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Mudha Godasa
Thanks Al. Thats very useful. I value those comments more than $0.04 ;0). Especially the comments in the last paragraph. The last thing I want is someone who is going to prevent any of my suggestions getting through because he doesnt understand and has influence over the final design. I had one g

RE: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Brian Desmond
I've got no second thoughts about being an asshole during a tech interview. I ask the question, you either answer it or tell me you don't know. If you choose not to tell me you don't know and demonstrate that you don't know through what you tell me instead, I'm already pretty much through. If you'r

RE: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread joe
Yeah Al interviewed me once and I didn't get the job because I started crying.   I found his car in the parking lot and punched holes in the tires. :)     -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm      From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread joe
Interesting, I have a pretty different view on tech lead. The things you mention (handing out tasks, interfacing with upper management, discipline, etc...) are out and out managerial tasks from my viewpoint and if I had a manager and a tech lead, I wouldn't take any of that from the tech lead

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Mudha Godasa
He is a technical lead but with some responisbilities of a manager. He would be mostly doing managerial duties as you have identified. But he will need to get his hands dirty "when the going gets tough". Most importantly, he will need to identify customer requirements and ensure the design we prod

RE: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread joe
A lead tech better be pretty darn technical with strong troubleshooting skills. It is tough to interview someone for the latter as asking questions like "this and this are occurring, what do you do or what is wrong" are usually not productive. One thing to keep in mind is that just about anyone

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Al Mulnick
LOL.  If it's for a technical position, then I have no qualms of trying to make the interviewed candidate cry. May as well see what they do with pressure.    I can usually tell in the first few minutes how a person thinks and how well they know the subject matter.  But I like to see how they react

Re: [ActiveDir] OT: Interview Techniques

2006-07-23 Thread Matt Hargraves
Is he a manager or a technical lead?  There's a world of difference between the two.Technical leads have many of the responsibilities of a manager (handing out tasks, interfacing with upper management, discipline, etc...) but also have to be able to 'get their hands dirty', in other words, they bas

Re: [ActiveDir] Domain Trusts.

2006-07-23 Thread Matt Hargraves
Go to google, type in "Token limitation" and click on the first item...On 7/23/06, Grillenmeier, Guido < [EMAIL PROTECTED]> wrote: > because the objects that need to go in that domain really do need to get out of our current user environment.   Matt, this doesn't yet sound to me like administ

Re: [ActiveDir] 64bit Windows

2006-07-23 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
You haven't met beancounter apps have you? Many of them will not function. Yes, it's a big deal. When even Microsoft's own ISA 2004 doesn't have a released 64 bit client released for a 64 bit Windows and you have to set them up as securenat clients. adoption by vendors has not occurred.

[ActiveDir] OT: Interview Techniques

2006-07-23 Thread Matheesha Weerasinghe
All I am currently in the process of interviewing job candidates who if successful will become my boss ;-) Basically the manager who will be his boss has asked me to do the technical side of the interview and check if the candidates are OK. I've had the "pleasure" of interviewing 2 so far and they

RE: [ActiveDir] Domain Trusts.

2006-07-23 Thread Grillenmeier, Guido
> because the objects that need to go in that domain really do need to get out of our current user environment.   Matt, this doesn't yet sound to me like administrative isolation. Really depends on what you mean with "user environment".   If these objects should not be administered by the s

RE: [ActiveDir] 64bit Windows

2006-07-23 Thread Grillenmeier, Guido
Renaming the thead due to change of focus topic   I've been doing quite a bit with my own 64bit notebook (using WinXP x64) in the past few weeks and I do have to say that there are plenty of little surprises. Many of which don't play a role for servers, which are used with a much lesser rang

RE: [ActiveDir] Raid 1 tangent -- Vendor Domain

2006-07-23 Thread Grillenmeier, Guido
> I don't have a lot of experience yet with x64 DCs but my gut says that > assuming you have enough RAM to cache the entire DIT and you aren't > constantly rebooting the DC or doing things that force the cache to be > trimmed, the disk subsystem is really only going to be important for writes > (wh

Re: [ActiveDir] Raid 1 tangent -- Vendor Domain

2006-07-23 Thread Matt Hargraves
It's not that big of a deal for client software (last message)On 7/23/06, Matt Hargraves <[EMAIL PROTECTED] > wrote:That being said wait on 64-bits for the client side until you know, unequivocably, that all of the software that your clients need is supported and stable on a 64-bit OS.  The

Re: [ActiveDir] Raid 1 tangent -- Vendor Domain

2006-07-23 Thread Matt Hargraves
That being said wait on 64-bits for the client side until you know, unequivocably, that all of the software that your clients need is supported and stable on a 64-bit OS.  The performance boost isn't that big of a deal, just to be honest. On 7/23/06, Matt Hargraves <[EMAIL PROTECTED]> wrote: Ju

Re: [ActiveDir] Raid 1 tangent -- Vendor Domain

2006-07-23 Thread Matt Hargraves
Just as an FYI: I've seen 64-bit DCs run and I have one thing that I can recommend to everyone:Go 64-bits as soon as possible.  There are hundreds of benefits on the server side when going 64-bits, whether it's Exchange (yay for 2007) or your DCs, the performance level is just staggering compared t

Re: [ActiveDir] Domain Trusts.

2006-07-23 Thread Matt Hargraves
Basically we're looking at creating a resource domain because the objects that need to go in that domain really do need to get out of our current user environment.But if you can't move items into a forest without having an automatic 2-way transitive trust, then we might need to just go with a separ