[ActiveDir] OT: Quickbooks really and truly will run without Admin rights

http://www.quickbooks.com/Helpcenter/DoSearch.aspx?docType=DT_APPROVEDCONTENT&q=QuickBooks+2007+will+not+run+if+the+Windows+user+is+a+Restricted+-+Standard+User&p=SG_QuickBooksPremier2007 KnowledgeBase Support Title: QuickBooks 2007 will not run if the Windows user is a Restricted - Standa

Re: [ActiveDir] Windows 2000 Admin Password

http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=GGLG,GGLG:2005-36,GGLG:en&q=reset+administrator+password Start with Google. Law 3 of computer security.. if you have physical access... it's YOURS to own. Haritwal, Dhiraj wrote: I forgot the password of one of my windows 2000 ser

[ActiveDir] Windows 2000 Admin Password

I forgot the password of one of my windows 2000 server. Is there any way to reset/remove the administrator password? Dhiraj Haritwal --- This email is confidential and intended only for the use of the individual or entity na

Re: [ActiveDir] Updating cached credentials

Hi Ken, P-Synch includes an Active-X component that automates, from the web password change session, what the good folks on this list describe. Basically, since Microsoft does not expose an API to update the local password cache, the way to force it to update is to do an authentication with the

Re: [ActiveDir] mailNickName(OT)

I think I see the reason that it hasn't been as big a problem as it could be. The id is not yet everywhere. You will run into those collisions. Statistically (note, I'm not a statistician, but I sometimes play one on the internet) your numbers are just too large not to. When you hook in MIIS, yo

RE: [ActiveDir] Updating cached credentials

Using "runas /user: something" after establishing a VPN session should do the trick. Guy From: [EMAIL PROTECTED] On Behalf Of Ken Cornetet Sent: Wednesday, November 22, 2006 9:56 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Updating cached creden

RE: [ActiveDir] OT-Help with PFINFO fro Exchange 5.5

http://msexchangeteam.com/archive/2004/11/05/252979.aspx Try this works for me and I downloaded it. Mark Parris Base IT Ltd Active Directory Consultancy +44 (0)7801 690596 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Strongosky Sent: 22 November 2006

[ActiveDir] OT-Help with PFINFO fro Exchange 5.5

Hi, Could someone please, please, please help me find the PFINFO.exe tool for Exchange 5.5. I've found the ftp link for it on the Google group's message board but when I try it, it says I don't have permissions. I also don't have access to the Resource Kit for Win2k. Reasons that so

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

I believe the amount of L2 cache is 4mb on a Dual Core and 2x4mb on a Quad Core. Thanks for pointing me to the benchmark from Dell, I will indeed talk to our TAM about it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wells, James Arthur Sent: woensdag

RE: [ActiveDir] mailNickName(OT)

While I firmly agree that guidance should never be blindly followed, regardless of the source, I'd add that customers who say "Microsoft reviewed this" or something like that should not necessarily be taken to mean the design was in any way developed by or recommended by MS (I can't speak for the O

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

You mean that it is in fact overkill. I have thought about this and I know that it probably is. 2 Dual Cores will be probably overkill as well. Both options probably being overkill, with one quad, we at least have the option to add another one later in case this may be necessary and one quad will b

RE: cpSPAM [ActiveDir] OT - DEC 2007

Apparently "Grillenmeier of HP" will be there! Sounds regal :-) http://www.dec2007.com/workshop.cfm Mark Parris Base IT Ltd Active Directory Consultancy _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Evans Sent: 22 November 2006 16:11 To: ActiveDir@m

[ActiveDir] ActiveDir.Org Web Site Update [List Admin]

Hi All, I just want to update you on some recent changes to the ActiveDir.Org site. As you may know, the last attempt at publishing the Mail List's archives on ActiveDir.Org was a complete disaster. The software we were using (Mhonarc) just couldn't keep up wit

RE: [ActiveDir] mailNickName(OT)

I have to admit some surprise that you have that large of an org and haven't hit issues in collisions on the name space when using firstname.lastname. Actually I find it more than surprising, I expect you have some exceptions or some folks got a display name that isn't something they totally prefer

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

Was thinking along that line as well. The system will probably be fast enough with one quad but we also have the option to add another quad later. I read somewhere however that dual cores are able to access more/make better use of system RAM. When I read those kind of things I get the feeling

RE: [ActiveDir] going further OT: Are governments insane? (WA time change in 11 days)

Neil, All, It doesn't benefit us, that's for sure! ;) Daylight saving is great, it's just that we here in Queensland aren't allowed to have it yet (that makes it hard dealing with the other east coast states, let me tell you, and turns a 2 hour difference between us and NZ into 3 hours, meaning

RE: [ActiveDir] Updating cached credentials

Windows XP SP2 introduces a new, background cached password sync process that does not require the workstation to be locked, only that it be able to talk back to a DC...it's tied to Fast Logon Optimization threads... http://support.microsoft.com/?id=824302 That KB article doesn't really descr

RE: [ActiveDir] Updating cached credentials

Thanks Al. We typically change passwords via a web app (Psynch) rather than at the workstation. One of our desktop techs thought that changing your password via the three-finger salute would cause the credentials to be updated, but in this case it didn't seem to work. We'll try the workstation lock

RE: [ActiveDir] Enterprise Domain Controllers group missing...

If querying objectsid in K3 or ADAM you don't need -binenc, even for non-well knowns. :) Any other SID field though will require it that I am aware of. The quickest way to find a SID in objectsid or sidhistory with adfind is through the adsid shortcut like so adfind -sc adsid:s-1-5-9

RE: [ActiveDir] [ActiveDIR] OT: Windows 2003 Forest Functional Level 2 while running Exchange 2000

There is a hot fix available. See KB873059. -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mischler, Timothy J CTR USAF NASIC/SCNA Sent: Wednesday, November 22, 2006 12:27 PM To: act

Re: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

It's a test environment? Knowing that you won't be testing performance related issues in this configuration, I'd opt for the expandability. My $0.04 worth anyway. On 11/22/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I posted this on the VMWARE forum as well but I am very interested in t

RE: [ActiveDir] mailNickName(OT)

me too Good post. -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Wednesday, November 22, 2006 11:41 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ma

[ActiveDir] OT: Security checklists - [Fwd: IASE Postings (UNCLASSIFIED)]

Original Message Subject:IASE Postings (UNCLASSIFIED) Date: Wed, 22 Nov 2006 13:47:18 -0500 From: IASE <[EMAIL PROTECTED]> Classification: UNCLASSIFIED Caveats: NONE DISA FSO has released the following updated Security Checklists, Security Readiness Review

Re: [ActiveDir] mailNickName(OT)

The place I'm currently at is a large 110,000 + user bank. They use the hr employee id# for sAMAccountName and upn and in turn the dn. They use firstname.lastname for smtp and mailNickName and consquently legacyExchangeDN. Why, I have no idea. They had a lot of input from MS in setting up thei

RE: [ActiveDir] [ActiveDIR] OT: Windows 2003 Forest Functional Level 2 while running Exchange 2000

Tim- There is a hotfix for this, I think for Exchange. The issue is that the Exchange 2000 RUS doesn't sense changes when Linked Value Replication is happening. The easiest solution is to introduce an Exchange 2003 server to run your RUS. Thanks, Brian Desmond [EMAIL PROTECTED] c

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

A pair of quad cores is a lot of horsepower for testing. I suspect you will run out of disk i/o perf and memory long before you encounter the need for a second quad core chip given the scenarios you've described. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message-

Re: [ActiveDir] [ActiveDIR] OT: Windows 2003 Forest Functional Level 2 while running Exchange 2000

I *thought* the behavior of that was modified by a patch/or service pack, but it's been a long time. RUS is notoriously picky and fragile, but I don't recall this being a stopping point. Exchange 2000 was certainly even more fragile. Upgrading would be in your best interest regardless. Have a lo

Re: [ActiveDir] Updating cached credentials

As I understand it, The nortel vpn client is a shim that works at layer 3 and does not take effect until after the user session has begun. This prevents much of the normal node processing you'd like to see happen such as control of the windows firewall, caching of group membership and so on. Sin

RE: [ActiveDir] DNS Scavenging - new issue

Yes, enable it on the server. Only records with old timestamps will be deleted. So the only real possible negative is you somehow have "valid" records with old timestamps that have not been refreshing their timestamps for some reason. How could that happen? Perhaps you had devices previously pe

[ActiveDir] [ActiveDIR] OT: Windows 2003 Forest Functional Level 2 while running Exchange 2000

> Hello, > > I was wondering if anyone had any experience with changing their > Windows 2003 Forest Functional Level to 2 (Windows Server forest > level) while running Exchange 2000 (post SP3)? I've found some > documentation stating the Exchange 2000 recipient update service does > not replicate

Re: [ActiveDir] OT: Are governments insane? (WA time change in 11 days)

That's for the future one for USA..not the one for Western Australia though. Chong Ai Chung wrote: http://www.microsoft.com/windows/timezone/dst2007.mspx Download link for the update is provided in following KB article but it's a broken link for now: http://support.microsoft.com/kb/928388/

Re: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

I did pick this up somewhere From what I understand on native INTEL E2K7 systems that utilise >8GB of RAM the servers suffer performance issues and the AMD chipset is the prefered choice for a lot of early adopters due to this issue - at VMWorld I could not get an answer on whether VMWare m

RE: [ActiveDir] DNS Scavenging - new issue

Since someone has already taken the time to address this, I will simply refer you to http://searchwincomputing.techtarget.com/tip/0,289483,sid68_gci1040355,00.html If you still have questions after that, then ask away. Sincerely, _ (, / | /)

Re: [ActiveDir] computer policy processing -retry behaviour

Man if it were me I'd try to get up to XP sp2. Vista is a bit bleeding edge and many of my LOB stuff isn't ready yet...but 2000... most of the zero day stuff works very nicely on that platform. Graham Turner wrote: Darren, thanks as ever 4 post reply this confirms my thoughts / fears !! vis

[ActiveDir] [ActiveDIR] OT: Windows 2003 Forest Functional Level 2 while running Exchange 2000

> Hello, > > I was wondering if anyone had any experience with changing their > Windows 2003 Forest Functional Level to 2 (Windows Server forest > level) while running Exchange 2000 (post SP3)? I've found some > documentation stating the Exchange 2000 recipient update service does > not replicate

Re: [ActiveDir] OT: Are governments insane? (WA time change in 11 days)

http://www.microsoft.com/windows/timezone/dst2007.mspx Download link for the update is provided in following KB article but it's a broken link for now: http://support.microsoft.com/kb/928388/ On 11/22/06, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] < [EMAIL PROTECTED]> wrote: The AU's hav

[ActiveDir] Updating cached credentials

Is there a way to force updating of cached credentials on an XP workstation? We have several users that seldom (if ever) connect to the corporate network directly. Instead, they log in (XP sp2) using cached credentials and connect via a Nortel VPN. We have several group policies that are filtered

[ActiveDir] DNS Scavenging - new issue

The recent thread on DNS scavenging was interesting and informative. It has lead me to investigate my own DNS scavenging issue and I'd appreciate some assistance with figuring out how to resolve it. I manage a single domain with a mixture of 2 - Win2K & 3 - Win2K3 servers. My 2 DC's are on Win2K b

Re: [ActiveDir] mailNickName(OT)

Other than being used for access by other protocols such as pop, imap, and owa, last I checked it's also the value used for the x.400 like address which is used for mail delivery internally by Exchange. You wouldn't want that to be non-unique else you might have to call somebody like joe to come

RE: [ActiveDir] computer policy processing -retry behaviour

Darren, thanks as ever 4 post reply this confirms my thoughts / fears !! vista, looks interesting - stuck with Windows 2000 for now i guess we will need to stuff enough of the settings that we need to get the computers to some sort of functional state into local group policy. the big one for me

[ActiveDir] Public Folder Appointment Owner

I would like to know how to find out who created a meeting using a calendar in a public folder. Right now, if I open an appointment that someone else created and go into the "Scheduling" tab, it shows me as the owner. If I then open the appointment logged on as another user, it shows that user is t

RE: cpSPAM [ActiveDir] OT - DEC 2007

I'll be there. It would be really helpful if the Gambling lessons were taken off the home page. Sends the wrong impression to the suits ;-) Steve Evans _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, November 22, 2006 6:57 AM To

RE: [ActiveDir] going further OT: Are governments insane? (WA time change in 11 days)

Not the first and no doubt, not the last either. (It's a Western Australia change BTW - never heard the term "AUs" before :) ). It's about time we scrapped the whole daft idea of daylight saving, IMO. We save an hour in the morning but lose it in the afternoon!! Who does that benefit? [Please don'

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

We're struggling with the same questions right now - one difference is the large amount of L2 cache on the Dual-core option for the 2900. At any rate...there was an internal benchmark regarding dual vs. quad cores with ESX 3 recently made available by Dell, but I'm not sure on its availability

[ActiveDir] Outlook Rules Lockdown

Is there a way to place restrictions on which rules users can create in Outlook, like disallowing users to create an auto-forward rule? I would like to control these settings by group membership. Thanks in advance for any help, Dan DeStefano Info-lution Corporation [EMAIL PROTECTED] htt

RE: [ActiveDir] mailNickName(OT)

The mailnickname isn't populated in a similar way to display name. The common ways for mailnickname generation and its population are through the RUS, by CDOEXM, or by the special ADUC extension (and no ADUC doesn't use CDOEXM). This is unlike displayname which has ADUC as its common way to be popu

[ActiveDir] OT: Are governments insane? (WA time change in 11 days)

The AU's have passed a daylight savings change http://www.news.com.au/perthnow/story/0,21598,20795690-5007222,00.html Word is that MS will release a patch http://blogs.technet.com/mkleef/archive/2006/11/22/wa-daylight-savings-update-its-approved.aspx But here's another way to do this: http://w

[ActiveDir] OT - DEC 2007

Has anyone firmed up on attending or speaking at DEC 2007 yet? I'll be there and wondered if anyone had suggested topics for discussion yet. I know the speaker submissions are closed and wondered who will be speaking, and what they plan to 'present'. Will we see a "dean and joe" part 2, for exam

[ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

I posted this on the VMWARE forum as well but I am very interested in the opinion of the people who post to this list and there must be some people with hands on experience with ESX and DC's and Exchange 2007 running on VM's on top of ESX 3.0.1. I am interested in the following: We will be bu

RE: [ActiveDir] Enterprise Domain Controllers group missing...

Just for future reference the easiest way to identify where an object is if you have a SID is to use adfind with the -binenc option: adfind -binenc -b dc=FOO,dc=BAR -f objectSID=S-1-5-9 You'll find the full path to the object under >objectCategory: While the binenc option isn't strictly needed f

RE: [ActiveDir] computer policy processing -retry behaviour

Hey, since when is GP not related to AD? GP is the reason AD is so popular... Anyone shoots you down for it, they'll have to answer to the gpoguy :-) In Win2K, XP, and 2003, if there is no connectivity to a DC when computer *foreground* processing occurs (this is the processing that occurs at comp

RE: [ActiveDir] OT: DL is this to be expected?

n/p of course. :) -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Wednesday, November 22, 2006 3:55 AM To: ActiveDir.org Subject: Re: [ActiveDir] OT: D

[ActiveDir] RE: [ActiveDir] GP question - port exceptions using IP address ranges

I was indeed able to use the appropriate mask for some of the ranges I needed to add, but some of them just didn't fit a mask properly. My example was one that I had used a mask on and wasn't truly representative of one of the "problem child" ranges. Thanks again. ** Charlie

RE: [ActiveDir] Enterprise Domain Controllers group missing...

Pub time already. Phew this day went by fast! Let's go! -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, November 22, 2006 6:34 AM To: ActiveDir@mail.

RE: [ActiveDir] Enterprise Domain Controllers group missing...

>> Its not viewable/searchable under ADUC even with advanced features turned on >>> That is an incorrect statement. Maybe... maybe not... Unless you have actually looked at that directory instance you cannot possibly know for sure. You can expect it should follow a certain pattern you

RE: [ActiveDir] OT: DL is this to be expected?

Excellent news. I debated the fact that that was what happened with someone from PSS (I was holding a network trace absolutely showing it and the PSS person was going off of what "he knew") for some time before they finally admitted it wasn't optimal behavior and potentially quite dangerous especia

RE: [ActiveDir] Question regarding active directory and restricting information

> Is this an information security risk to our company > especially related to employees information? Only you and your company can answer that question. Is it maybe just a subset of the total info - either some info for all users? All info for some users? What is bad for others to have and what is

[ActiveDir] computer policy processing -retry behaviour

this is query re processing of computer group policies. i note that not strictly AD related so i hope not to get 'shot down' ! i wanted to get a view on the 'retry' behaviour of the WIndows 2000 group policy engine, in a scenario of a user-initiated VPN, in which domain controller connectivity is

RE: [ActiveDir] Enterprise Domain Controllers group missing...

Thanks, I'll get my coat ... :) _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, Deji Sent: 22 November 2006 09:51 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Enterprise Domain Controllers group missing... Neil, You responded to the thread wh

Re: [ActiveDir] Enterprise Domain Controllers group missing...

Mistyped the Inherited/ inherit ACE flags there, but you get my point -kind of makes sense in English. I'm guessing, as I'm not in a position to test, that perhaps GPPREP adds the necessary ACE(s) to the aforementioned container, resulting in an ACE set with the INHERIT flag, which means that

Re: [ActiveDir] Enterprise Domain Controllers group missing...

I imagine you used the version of ADPREP that ships with Windows Server 2003 SP1? I believe you need to run ADPREP /DOMAINPREP /GPPREP. This will add the inheritable ACEs to CN=Policies,CN=System,DC=... Allow: NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS Read is an inherited ACE. Re. EDCs. EN

Re: [ActiveDir] [OT] Vista Admin Tools Pack

If I had to guess, I would say it's because the launched process isn't a child of the elevated Window, but is a child of Explorer (the shell) itself. This isn't the case with a CMD prompt, whereby the launched process is an actual child process. Test it with Sysinternals' process explorer.

RE: [ActiveDir] Enterprise Domain Controllers group missing...

Neil, You responded to the thread where Steve already corrected himself. Read the doc you cited again. Only the EDC membership changes during the process you described. EDC itself is NOT created at this point. It is merely made a member of the newly-created "Windows Authorization Access" group.

RE: [ActiveDir] Enterprise Domain Controllers group missing...

I believe SteveL may have already suggested that this group is only available post w2k, and only after the PDC in the domain has been upgraded. Further info here: http://technet2.microsoft.com/WindowsServer/en/library/08eb226b-0192-4c0 5-b919-c9311bafae351033.mspx?mfr=true neil -Original Mes

Re: [ActiveDir] OT: DL is this to be expected?

Thanks Joe. Regards, Mark Parris Base IT Ltd Active Directory Consultancy Tel +44(0)7801 690596 -Original Message- From: "joe" <[EMAIL PROTECTED]> Date: Tue, 21 Nov 2006 18:02:51 To: Subject: RE: [ActiveDir] OT: DL is this to be expected? Yes actually it is if you are talking about