Now granted my "picture is worth a thousand words" may not be accurate
since I also have the Kitchen sink service running...
fwiw that's what mine looks like... http://www.sbslinks.com/aduc.htm
[EMAIL PROTECTED] wrote:
Then correct it so people can learn rather than simply point out that its
w
I already did. But since you missed this, how about
http://www.akomolafe.com/Portals/1/EDC.jpeg?
Sincerely,
_
(, / | /) /) /)
/---| (/_ __ ___// _ // _
) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/
Then correct it so people can learn rather than simply point out that its
wrong which really gets no one anywhere...
Matt Duguid
Systems Engineer for Identity Services
Department of Internal Affairs
Phone: +64 4 4748028 (wellington)
Mobile: +64 21 1713290
Fax: +64 4 4748894
Address: Level 4, 47 B
>>> Its not viewable/searchable under ADUC even with advanced features turned
>>> on
That is an incorrect statement.
Sincerely,
_
(, / | /) /) /)
/---| (/_ __ ___// _ // _
) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_
Hi there,
I finally found out where this group was...it is available from Windows
2000 AD forwards and is found at CN=Enterprise Domain
Controllers,CN=WellKnown Security
Principals,CN=Configuration,DC=x,DC=x,DC=x. Its not viewable/searchable
under ADUC even with advanced features turned on but you
Hi ,
I am just beginning to program ADSI.
I have been following your emails and they are always
very informative and in detailed.
I had a quick question.
I work in a financial and we have Microsoft Active
Directory and users are authenticated against this.
Using an ADSI brower I am able to
Well then, someone fat-fingered it. Run forestprep again, and if that doesn't
work, it's time to talk to the likes of Steve in private :)
Sincerely,
_
(, / | /) /) /)
/---| (/_ __ ___// _ // _
) /|_/(__(_) // (_
Awesome thanks will check it out... ;-)
Matt Duguid
Systems Engineer for Identity Services
Department of Internal Affairs
Phone: +64 4 4748028 (wellington)
Mobile: +64 21 1713290
Fax: +64 4 4748894
Address: Level 4, 47 Boulcott Street, Wellington CBD
E-mail: [EMAIL PROTECTED]
Web: http://www.dia
well, the company i currently work for sets the mailNickName of all
users to "firstname.lastname".
I didnt know there was any issue with changing the format of that attribute.
we have around 110,000 users mixed between Exchange and Lotus Domino
and this is the format they have been using(why, i'm
;-)yip sure did..sorry I should have elaborated further
Matt Duguid
Systems Engineer for Identity Services
Department of Internal Affairs
Phone: +64 4 4748028 (wellington)
Mobile: +64 21 1713290
Fax: +64 4 4748894
Address: Level 4, 47 Boulcott Street, Wellington CBD
E-mail: [EMAIL PROTECTED]
Sorry read and responded to this to fast you should have an Enterprise Domain
Controllers group however it becomes a member of "Windows Authorization Access
group" after the PDC upgrade. You will be missing some of the other Groups and
Security Principals listed in that section until the PDC is
>>>I can confirm we do not have an "Enterprise Domain Controllers" group in any
>>>of the domains.
Really? How did you confirm that? In ADUC (with "Advanced Features" enabled in
View) and doing a custom search for "enterprise", simply looking in the
"Foreign Security Principals" containers?
S
Hi there,
I read that in another article as well...
http://groups.google.co.nz/group/microsoft.public.windows.server.active_directory/browse_thread/thread/37eb3a91907d3f4e/4173fe072f7269b9?lnk=st&q=The+Enterprise+Domain+Controllers+group+does+not+have+read+access+to+this+GPO&rnum=2&hl=en#4173fe07
You have to upgrade or install one of the servers in each domain to Windows
Server 2003 and then transfer the PDC Emulator role to the upgraded or added
Windows Server 2003 box. When a Windows Server 2003 box takes over the PDC
Emulator FSMO role it will create these new security principals. T
View Advanced Features
Look in Foreign Security Principles that I recall?
[EMAIL PROTECTED] wrote:
- We recently upgraded the schema in one forest from Windows 2000 to
Windows 2003.
- We now receive the following error when trying to access group policies,
"The Enterprise Domain Controllers gro
- We recently upgraded the schema in one forest from Windows 2000 to
Windows 2003.
- We now receive the following error when trying to access group policies,
"The Enterprise Domain Controllers group does not have read access to this
GPO. The Enterprise Domain Controllers group must have read acce
Wow the list is flying today... Took an hour and a half to get the message
back to myself.
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Tuesday, November 21, 2006 5:50 PM
There is a fix for this. I'm pretty sure it's public at this point.
Don't ask me the KB/patchid. It's too late on the east coast after I've
already started having a few
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Tuesday, November 21, 2
18 matches
Mail list logo
