[ActiveDir] Best practice GPO's

2006-05-24 Thread Cariglia, Daniel
Hello, What is the best practice for applying policy in AD? Currently we create a GPO for every separate policy we want to apply (WSUS, DNS search order, LCS and so on) and we place all these policies in a created OU called GPOs and link that to different OUs as needed. My question is

[ActiveDir] Disabled Accounts/Mail accepted

2006-03-03 Thread Cariglia, Daniel
Hello, A few years back we had changed the way we disabled AD user accounts from disabling the account to restricting logon hours (restricted 24x7) and hiding from GAL. We did this because mail sent to disabled accounts was getting rejected and the sender was getting a NDR. Also,

RE: [ActiveDir] DC authentication

2005-08-31 Thread Cariglia, Daniel
Set l will return your logon server. Dan Cariglia Systems Analyst Concerto Software, Inc. 6 Technology Park Drive Westford, MA 01886 (978)952-0618 Ext. 20618 email: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Allen

RE: [ActiveDir] Problem with SUS Group Policy

2005-02-11 Thread Cariglia, Daniel
Try turning the time up from 1 minute to at least 5 minutes, not sure if this is your problem but I have read of this being an issue with regard to scheduling the installs. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jennifer Fountain Sent:

[ActiveDir] Problem with DL owners not able to modify lists

2004-12-31 Thread Cariglia, Daniel
Hello, Having a rather odd problem with distribution lists, some owners can modify the lists while others cannot. It does not seem dependent upon which GC their Outlook client uses. Nothing has changed in the domain or forest recently and everything was working fine until about a week

[ActiveDir] group structure -universal groups

2004-07-26 Thread Cariglia, Daniel
Hello, I have a question regarding group structure and administration of such. We run a multi-domain AD environment with basically an empty root domain and 2 child domains where the users live. The problem is if we structure groups the way it is recommended (accounts into Global groups

[ActiveDir] Microsoft Patch

2004-03-15 Thread Cariglia, Daniel
I am in the process of looking at alternatives to distribute/manage Microsoft patches. We have SUS running in a lab setup and it seems alright. My question is are there superior products out there that someone has used and can recommend that work well with AD? Running AD with an empty root

[ActiveDir] DNS replication question

2003-03-10 Thread Cariglia, Daniel
Hello, I have been lurking on this list for about 6 months now and have a question regarding DNS and replication. I have just got my AD up and running with one child domain. The problem is when a PC registers with DNS on the root it never replicates down to the child DNS. It picks

RE: [ActiveDir] DNS replication question

2003-03-10 Thread Cariglia, Daniel
of the transfer. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] .org] On Behalf Of Cariglia, Daniel Sent: Monday, March 10, 2003 3:30 PM