RE: [ActiveDir] Cross-Forest Kerberos Delegation

2007-01-01 Thread Ken Schaefer
Hi Steve, Are you sure about this? I have the ISA Server, IIS Server and App Server in Forest1 If I logon to the client machine using a user from Forest1, then everything works fine (I can see all the Kerberos stuff happening in Ethereal captures) If I logon to the client machine using a user f

RE: [ActiveDir] OT: Sorta... AD and the 3/07 Time Change

2007-01-01 Thread Sakari Kouti
How about using the TimeZone.exe command in the Resource Kit tools, and launching it in a startup script for the Windows 2000 workstations? I'm from Europe and I have no idea what are the new correct values (from April to March, perhaps), but the command sample is the following: TIMEZONE /s 0

Re: [ActiveDir] Built in Security groups

2007-01-01 Thread Matt Hargraves
From what you're saying here, it doesn't sound like you need to basically... well... completely f*ck up your environment, you just need to remove the nesting of the Administrators group from the other groups. Auditors saying that you need to delete a built-in group really need to get a clue, jus

Re: [ActiveDir] Cross-Forest Kerberos Delegation

2007-01-01 Thread steve patrick
I'm sure.. If you want to ping me off list I can work with you on this Let me know what time is good for you this week ( maybe a phone call \ live meeting and I can also setup something similar to what you have beforehand ) steve - Original Message - From: "Ken Schaefer" <[EMA