RE: [ActiveDir] Query out all user members in nested groups

2005-11-27 Thread Aaron Seet
Thanks, i will see if those articles bring me closer to the task. Meanwhile for those who have touch with .NET, I was taking a cue from recommendation of the DirectoryEntry class, and decided to run a little experiment with that class instead; see what it is capable of. The tutorial logic made it

RE: [ActiveDir] Query out all user members in nested groups

2005-11-26 Thread Aaron Seet
I apologize for leaving out crucial information. I am trying to enchance (less-than-optimal) .NET code, so this involves the use of DirectorySearcher and SearchResult classes in the System.DirectoryServices namespace. The current implementation takes the top-level group name and searches for it,

[ActiveDir] Query out all user members in nested groups

2005-11-25 Thread Aaron Seet
I am trying to find a way to list all user accounts that are members of a given group, _including_ those in nested groups. I didn't find anything useful in my cache of historical LDAP emails, and it seems from the internet people are more interested in finding what groups a user has membership in

RE: [ActiveDir] Failing to VPN to child tree site as forest enterprise admin

2005-04-11 Thread Aaron Seet
authentication mechanisms/logic. Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Seet Sent: Friday, 18 March 2005 18:16 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Failing to VPN to child tree site as forest enterprise admin I have a rather

RE: [ActiveDir] Install only Active Directory Users and Computers snap-in

2004-10-14 Thread Aaron Seet
to the removal of the Directory browser from WE. hmmm... Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Seet Sent: Thursday, 14 October 2004 02:14 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Install only Active Directory Users and Computers snap

RE: [ActiveDir] Install only Active Directory Users and Computers snap-in

2004-10-13 Thread Aaron Seet
But would this be the standard practice for stricter organisations? Of course it ain't a big problem for me in reality since the customer's environment is a small one, but I'd like know how corporate domain/forest admins handle this. thanks, Aaron -Original Message- From: [EMAIL

RE: [ActiveDir] Install only Active Directory Users and Computers snap-in

2004-10-13 Thread Aaron Seet
There appears to be no Taskpad feature for AD Users and Computers snap-in Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Wednesday, 13 October 2004 15:28 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Install only Active

RE: [ActiveDir] Permissions to run Exchange tasks

2004-10-13 Thread Aaron Seet
Read/Write permissions but that's apparently not good enough. What else needs to be given to the user? Exchange Admin role?? *yikes* Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Seet Sent: Thursday, 14 October 2004 01:41 To: [EMAIL

RE: [ActiveDir] Install only Active Directory Users and Computers snap-in

2004-10-13 Thread Aaron Seet
Fantastic. This is it - by using a blank MMC instead of the static one, i can adjust and configure Taskpad views. Now all that stands in my way are the Exchange errors (as reported in my other post). If i can get the user account the right set of permissions to work this out then everything

RE: [ActiveDir] Permissions to run Exchange tasks

2004-10-13 Thread Aaron Seet
Oh wait, indeed one must delegate control of View-only Exchange Administrator to the user/group and that solves the permission problem. Woot Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Seet Sent: Thursday, 14 October 2004 01:58

[ActiveDir] Install only Active Directory Users and Computers snap-in

2004-10-12 Thread Aaron Seet
The articles i find just talk about installing the entire Administrative package into Win 2000/XP professional if I need to get it to connect and make changes in AD. But, what if I only want to install Active Directory Users and Computers for a non-admin staff to create users, contacts? She

RE: [ActiveDir] win XP shows no AD node in MNP

2004-02-27 Thread Aaron Seet
Mein gott, it works but I wonder why the Windows Xp team wanted to leave that out! Thanks Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wright, T. MR NSSB Sent: Saturday, 28 February 2004 12:21 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] win

RE: [ActiveDir] KCC complain for sites with 2 different domains

2004-02-26 Thread Aaron Seet
Right from the past few days of observation I gather the 2 DCs just needed to figure the connectivity was via the VPN setup. repadmin reports success now. Thank you for all the advice Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Seet

RE: [ActiveDir] KCC complain for sites with 2 different domains

2004-02-24 Thread Aaron Seet
Sure thank you. The errors go -- Event Type: Warning Event Source: NTDS KCC Event Category: Knowledge Consistency Checker Event ID: 1566 Date: 2/24/2004 Time: 5:42:15 PM User: N/A Computer: NARU

RE: [ActiveDir] KCC complain for sites with 2 different domains

2004-02-24 Thread Aaron Seet
I have followed your steps below, with detailed logging I see the event log filling up with Information entries after I instructed a Check Replication Topology - some 26 of them, no errors hinted. If you'd like me to post all of them to you, please lemme know. Second last entry:

RE: [ActiveDir] DNS Registration issue

2004-02-23 Thread Aaron Seet
This talks about RRAS but may apply to the same thing http://support.microsoft.com/?kbid=289735 Aaron From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark I have a ISA server, which is also a DC for its subdomain, isa.mycompany.com. It

RE: [ActiveDir] KCC complain for sites with 2 different domains

2004-02-23 Thread Aaron Seet
It's been awhile since I last addressed this problem, due to a long spell of disconnection between the 2 locations. Now the broadband connection is permanently up, and site link persisted via RRAS VPN. Here are the output as requested:

Re: [ActiveDir] win XP shows no AD node in MNP

2004-02-17 Thread Aaron Seet
- Original Message - From: Rich Milburn [EMAIL PROTECTED] Hi Aaron - Click Search Active Directory, use the Browse button to narrow your focus to the container you want to look in, change the Find drop-down to match what you are looking for, and then click Find Now. It will list the

[ActiveDir] win XP shows no AD node in MNP

2004-02-15 Thread Aaron Seet
My Network Places simply doesn't expose the browsable Directory node like you'd see in Windows 2000. What gives? I've been searching around how to activate it, adjusting GP and HKCU\Software\Policies\Microsoft\Windows\Directory UI\HideDirectoryFolder to no avail. Why the disappearance? I've

Re: [ActiveDir] KCC complain for sites with 2 different domains

2004-01-05 Thread Aaron Seet
The TCP/IP DNS properties are setup like dc1.corporate.company1.com: 1. itself (192.168.252.4) 2. dc1.corporate.company2.com (192.168.1.12) dc1.corporate.company2.com: 1. itself (192.168.1.12) 2. dc1.corporate.company1.com (192.168.252.4) Zone corporate.company1.com is in AD with

Re: [ActiveDir] KCC complain for sites with 2 different domains

2004-01-03 Thread Aaron Seet
The second DC belongs to company2 (in the other tree). The event logs posted are from the DC of company1. company2 DC doesn't have these complaints. They are connected via persistent router-router VPN - demand-dial interface in RRAS. My question is, the cause is the fact there is no DC for

[ActiveDir] KCC complain for sites with 2 different domains

2004-01-01 Thread Aaron Seet
I have an environment that goes: Site1: home to domain corporate.company1.com; forest root; 1 DC. Site2: home to domain corporate.company2.com; separate tree of same forest; 1 DC. They are connected via router-router VPN of RRAS. I suspect the lack of a second DC for corporate.company1.com in