RE: [ActiveDir] Updating pwdLastSet

2003-06-16 Thread Adam Wood
It is indeed read-only in Windows 2000. You could always script changes in date and time. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rex Wheeler Sent: 16 June 2003 18:05 To: [EMAIL PROTECTED] We are doing some integration work allowing other platfo

RE: [ActiveDir] Removing sites and servers from AD

2003-03-31 Thread Adam Wood
> Do I just delete the servers, then the sites or is there a > specific way I need to delete these sites? Assuming you no longer need the servers as domain controllers: The best thing to do make the final IT act at the site to demote the server (transfer all FSMO roles off first if you prefer, bu

RE: [ActiveDir] AD installation - permissions

2002-12-11 Thread Adam Wood
> I'm upgrading an NT4 PDC and the installation wizard is > asking me to select default permissions, permissions > compatible with pre-Windows 2000 servers and permissions > compatible only with Windows 2000 servers. We don't use RAS > and this is going to be native-mode. Is there any other >

RE: [ActiveDir] Remote Administration

2001-09-06 Thread Adam Wood
> Is there a possibility to administrate the AD remote from a > W2K workstation? [This must be FAQ of the century -- I'm not blaming people who ask this very reasoanble question, I'm blaming Microsoft for not documenting it well enough.] Install adminpak.msi from Windows 2000 Server. It's on

RE: [ActiveDir] Group Policy question

2001-09-06 Thread Adam Wood
> Can someone please let me know if I am missing something > obvious or whether my logic is just messed up... The key point that you are missing is that password policies (length, history, etc.) can only be applied at the domain level in Windows 2000 Active Directory. The settings in the GP

RE: [ActiveDir] General wondering......

2001-07-30 Thread Adam Wood
Title: Message   Others have mentioned jsiinc.com (I'm not a great fan, but for reasons other than the qualitty of the content) but I prefer using the Registry Reference that is part of the Windows 2000 Server Resource Kit (available online at reskit.com) and the MSDN Library.   -- Adam

RE: [ActiveDir] Domain naming - Private or Public?

2001-07-23 Thread Adam Wood
and then you try to make a cross forest trust... (Of course, there's no need to actually use the top level "mydomain.edu" -- you could always use something like "really.secret.domain.name.mydomain.edu") -- Adam Wood http://www.adamwood.com List info: http://www.activedir.org/mail_list.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Global Catalog/AD access

2001-07-12 Thread Adam Wood
> I have information that I want in the global catalog about employees. I > only want the info (home add and phone) viewed by authorized people. How > can restrict who has access to search the Active Directory and limit what > they can view? You need to look at the Access Control structure avai

RE: [ActiveDir] DNS

2001-06-25 Thread Adam Wood
> I have a DNS server on campus that does not support DDNS. This is the > primary DNS server and it is out of my control to make change to this > server. Any good suggestions on how to design my AD site to support this > DNS server. Assusming your university domain is uni.edu and the primary

RE: [ActiveDir] Mapping network drivers via GPO

2001-06-16 Thread Adam Wood
Title: [ActiveDir] Mapping network drivers via GPO Of course, the login script to do the mapping can be run via the GPO. -Original Message-From: Darren Sykes [mailto:[EMAIL PROTECTED]]On Behalf Of Darren SykesSent: 16 June 2001 12:56To: [EMAIL PROTECTED]Subject: RE: [Active