Re: [ActiveDir] Using Active Directory between a firewall

2003-01-24 Thread Andy Grafton
There's some handy info in here, too. Relates to Replication, but there you go. Lots of useful port numbers. Non-obvious is that under certain circumstances, (if the client computers are not members of the domain and want to connect/authenticate with DCs for some reason), you *might* need

Re: [ActiveDir] OT: Exchange 2000

2003-01-21 Thread Andy Grafton
Could be that the Exchange services are starting before the machine's DC/GC services are up and running? As mentioned, Exchange won't start if it can't find a GC server. Is there another DC/GC on the network? Is DNS working ok? Can you start the services manually after boot? If you can then

Re: [ActiveDir] OT: Exchange 2000

2003-01-21 Thread Andy Grafton
MessageBryan Schlegel writes: I thought Exchange 2k had to be a installed on a domain controller? Nope. All the best, A -Original Message- From: Travis Riddle [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 12:27 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Exchange

Re: [ActiveDir] ADC and Exch 5.5

2002-11-19 Thread Andy Grafton
Rick the question is also... why wouldn't you? If you step back and look... There's a nice object called Users which you kinda need and has Users in it anyhow. Why not use it to house OUs to help you organise other users? Its not enabled by default, so would one go to the trouble of making a

[ActiveDir] Granular permissions : user objects

2002-11-12 Thread Andy Grafton
MessageHi, all. Active Directory, Windows 2000, SP3, no exchange prep. Please restrain yourselves from asking *why* do you want to do this?. If you'd like to know, give me a shout offlist. I need to grant permissions for SELF to change the First Name and Last Name (givenName, sn in LDAP

Re: [ActiveDir] Granular permissions : user objects

2002-11-12 Thread Andy Grafton
;q294952 Tony -- Original Message -- From: Andy Grafton [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 12 Nov 2002 10:27:17 +0100 MessageHi, all. Active Directory, Windows 2000, SP3, no exchange prep. Please restrain yourselves from asking

Re: [ActiveDir] IIS Question on DC

2002-11-07 Thread Andy Grafton
Title: Message Its pretty much a requirement if you want to use MS's Webadmin 1.0 [or components thereof]which afaik has to reside on a DC. Apart from that and other services which depend on its presence... nope. All the best, Andy - Original Message - From: Don Murawski

[ActiveDir] AD user sync to flat file

2002-10-31 Thread Andy Grafton
This is one of those does anyone know a product which can do this...? questions. Apologies. Have an Active Directory (single domain) with about 65,000 users. Have a personnel system which produces a flat file consisting of [only] usernames. Once a week, our customer wants to run a utility

Re: [ActiveDir] AD for Reference data

2002-10-09 Thread Andy Grafton
Malcolm we are trying something a little bit similar for a customer. One of the things you should check out is whether the attributes which can be assigned to structural elements (e.g. containers/OUs) will satisfy your needs using any out-of-the-box AD features you want to use. You can extend

Re: [ActiveDir] an AD/DNS question

2002-10-01 Thread Andy Grafton
How about making a standard secondary domain for corp.company.com on the DNS server for domain.root? That's how we do it with our different domains and it works fine, but they are separate forests. All the best, Andy - Original Message - From: Byrne, Steve To: [EMAIL PROTECTED] Sent:

Re: [ActiveDir] Sort of OT: other Protocols

2002-07-18 Thread Andy Grafton
The quote from our CIO was that if caught any developer using IP addresses in their code he would fire them on the spot. And using NetBEUI as a backup protocol on a production system is better? Andy List info : http://www.activedir.org/mail_list.htm List FAQ:

Re: [ActiveDir] browse AD with XP client

2002-07-16 Thread Andy Grafton
Volker I don't know if there is the browse equivalent, but the XP search has the option to look specifically in AD. If you find out the answer to this let me know. All the best, Andy - Original Message - From: SEYBOLDT,VOLKER (HP-Germany,ex1) [EMAIL PROTECTED] To: [EMAIL PROTECTED]

Re: [ActiveDir] Scripting using VBS

2002-07-15 Thread Andy Grafton
It's not VBS but why not use Exchange System Manager? Create a Recipient Policy (Recipients-Recipient Policies) restricted to the effected OU(s) and you can then specify their SMTP mail address. If your users have had don't update based on recipient policy ticked then you'd out of luck with

PS Re: [ActiveDir] Scripting using VBS

2002-07-15 Thread Andy Grafton
Found that other Q article. http://support.microsoft.com/default.aspx?scid=kb;EN-US;q285355 A List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Re: [ActiveDir] Win2000 Planning and installation

2002-07-09 Thread Andy Grafton
Marc I can't help with the documentation c., because ours is so specific to our particular setup, but I'm curious... You want to replace one W2K/AD domain with another? How bad is the old one? Surely, even if there is no documentation, the setup can't be that hard to work out and document?

Re: [ActiveDir] Printing issues with XP More info

2002-07-08 Thread Andy Grafton
If anyone has a permanent fix for this, I'm sure we'd appreciate it. As you can tell I'm no printing expert. Nick the 4050n has a PostScript interpreter AFAIK. Try the PostScript drivers? That has worked for me before. All the best, Andy List info : http://www.activedir.org/mail_list.htm

Re: [ActiveDir] OT :: Exchange

2002-06-25 Thread Andy Grafton
More info. Mind the wrap. http://groups.google.com/groups?selm=lYyc8f4S%24GA.1420%40CPMSBNEWSW01.betan ews.comoe=UTF8output=gplain All the best, Andy - Original Message - From: Morgan, Joshua [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 25, 2002 7:23 PM Subject:

Re: [ActiveDir] VPNs

2002-06-05 Thread Andy Grafton
Elizabeth writes: The MS way http://www.microsoft.com/serviceproviders/whitepapers/configuring %20a%20vpn%20solution.doc Creating a VPN Connectoid. 13 Building A Connectoid. 14 Post Configuration Settings. 29 Connectoid?!! I'm scared. What if they breed?

Re: [ActiveDir] DC placement in AD

2002-06-04 Thread Andy Grafton
Ken asks: Or are you just saying go with a name totally unrealted and stick with it as you grow? That's right (well : what I was advocating as an option, anyhow). The advantage is that you'd be able to have a 2 DC/GC environment using the 2 nice servers you have approval for, and not have to

Re: [ActiveDir] DC placement in AD

2002-06-01 Thread Andy Grafton
Tony writes: If you can't afford the luxury of 4 DCs (which for 20 users looks like overkill) I would stay with just one domain. If the company changes name in the future it will not kill you to migrate 20 users. ... or use the option of calling the domain something unrelated to the

Re: [ActiveDir] Replication over VPN

2002-04-17 Thread Andy Grafton
Jim asks; Has anyone set up an active directory using vpn's (nokia/checkpoint) exclusively for branch connection instead of standard point to point ? I am concerned that the vpn latency will cause RPC timeout... We have an organisation linked exclusively by VPN via Internet (mixture of

Re: [ActiveDir] Backups - including system state

2002-04-15 Thread Andy Grafton
For the Backup Exec users - have you seen problems with v8.6x not backing up system state reliably? Identical problems here. Occurs seemingly at random on our production and development domains. Have been wondering about it myself. Here's a transcript of a typical log. If you run the job

Re: [ActiveDir] Blocking direct telnet access

2002-03-05 Thread Andy Grafton
Oluwaseyi writes; How can I block direct telnet access into my exchange 2000 server. Please any help will be highly appreciated Seyi AFAIK you can't make a telnet connection to port 23 of a vanilla 2K/exchange 2K server. You'd get connect failed or similar. I have no idea of the actual

Re: [ActiveDir] Blocking direct telnet access

2002-03-05 Thread Andy Grafton
It is a bit hopeless to try and block port 25 on a server that expects to see mail from external hosts. As the others say it is very difficult (I hesitate to say impossible, if you have enough monkeys and typewriters) to detect whether an SMTP connection comes from a telnet application or

Re: [ActiveDir] DNS question

2002-02-25 Thread Andy Grafton
Dean writes; It has been reported (though I've not personally experienced it) that the DNS client tends to preference either the public servers or the alternate server ... this being the case, resolution against the zone(s) representing Active Directory will eventually fail. I've

Re: [ActiveDir] DNS question

2002-02-25 Thread Andy Grafton
The only problem was that I couldn't configure the DNS to use forwarders unless I would DELETE THE . DOMAIN :-) Aaa That'll help. All the best, Andy List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive:

Re: [ActiveDir] Single logon on Windows 2000

2002-02-11 Thread Andy Grafton
Oluwaseyi give this a read; http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=14454 I'm not sure how authoritative it is, but its one answer. There is a workaround suggestion at the bottom. All the best, Andy List info : http://www.activedir.org/mail_list.htm List FAQ:

Re: [ActiveDir] Default Printer

2002-02-10 Thread Andy Grafton
I saw the postings about con2prt but I was wondering if anyone new how to install printers using a Vbscript and then automatically set a printer to be default Josh con2prt can also set the default printer, and delete all previous mappings. I messed around with VBScript and printui.dll for

Re: [ActiveDir] Partitioning Opinion

2002-01-21 Thread Andy Grafton
Jon just checking : is this array shared between the 3 servers? All the best, Andy - Original Message - From: Jon B. Lewis [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 21, 2002 4:26 PM Subject: [ActiveDir] Partitioning Opinion I'm looking for some opinions on this

Re: [ActiveDir] Partitioning Opinion

2002-01-21 Thread Andy Grafton
... and I was wondering if this is an office-specific domain or part of a larger infrastructure? You might want to make extra partitions if one of the two non-DC machines is going to be a DC as well as its primary role. All the best, Andy List info : http://www.activedir.org/mail_list.htm

Re: [ActiveDir] Removing a DC Account from the Domain

2001-11-23 Thread Andy Grafton
basically it was a legacy NT3.51 BDC. When I go into Users and Computers and try to delete the server object I get the following message:- 'The DSA Object Cannot be Deleted' er... You might want to try running ntdsutil.exe from one of your DCs. ? gives the command list. Metadata cleanup

Re: [ActiveDir] Problems with admining domain

2001-11-20 Thread Andy Grafton
Tony wrote; to do with the fact that once a Windows 2000 client has been a member of an AD domain, it cannot be authenticated by a Windows NT 4.0 domain controller. Tony didn't that get fixed by SP2 on the client side? I use my personal machine (W2K) to log into separate NT4 and AD domains,