[ActiveDir] OT: SpecOps GPUPDATE tool

2006-12-07 Thread McCann, Danny
up packet across the subnets - to keep our active network team happy. They had a recent incident with a Ghost server and they're a bit edgy. :) Cheers Danny

RE: [ActiveDir] OT: SpecOps GPUPDATE tool

2006-12-07 Thread McCann, Danny
Including bugs! :) Maybe should have been 2 emails - One here for any problems encountered and one to SpecOps for technical detail. Any users encountered any problems with this tool? :))) Kind regards Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] OT: SpecOps GPUPDATE tool

2006-12-07 Thread McCann, Danny
Hi Neil You were right, they did. It's no good for us as the tool won't work with non-windows DHCP, which I guess is used to retrieve the MAC addresses. Sould have though of this in the first instance, but to quote the parrot sketch, I have a cold. :) All the best Danny

Re: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-08 Thread Danny
-29.57.777(Mobile : +31-(0)6-26.26.62.80 *E-mail : see sender addressFrom: [EMAIL PROTECTED] on behalf of Danny Sent: Tue 2006-11-07 18:24To: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers nextThanks to advice from

[ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Danny
Thanks to advice from the ActiveDir community (this mailing list) and Microsoft's ADMT and ExMerge, we have successfully completed an interforest migration - of users, computers, and mailboxes. Next up: the servers, 12 of them. Two DC's, the rest are made up of file, print, Exchange, MS SQL

Re: [ActiveDir] Active Directory Health Check tool - where can it run from?

2006-10-31 Thread Danny
On 10/31/06, Washington, Booker [EMAIL PROTECTED] wrote: Does that tool need to be run from a Domain Controller, or can it be run from any member server in the Domain, or workstation.Just curious.ThanksWhich tool are you specifically referring to? dcdiag? If so, I would check the documentation:

[ActiveDir] ADMT v3 Profile cleanup options

2006-10-27 Thread Danny
Computer and user migration with ADMT v3 scenario:Users have local profiles (non-roaming). It appears as though when you migrate user and computer into new forest, the new user in the target forest logs into the same computer (now part of target domain) and a new profile is created; they are not

Re: [ActiveDir] How to grant administrator from trusted forest local PC Admin rights

2006-10-27 Thread Danny
Excellent - I will try it out. ThanksDOn 10/26/06, Chong Ai Chung [EMAIL PROTECTED] wrote: You can use restricted group feature in GPO for this. Please refer to following link for more detail: http://www.msresource.net/content/view/45/46/ On 10/27/06, Danny [EMAIL PROTECTED] wrote: Looking

Re: [ActiveDir] ADMT v3 Profile cleanup options

2006-10-27 Thread Danny
On 10/27/06, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote: * within the same forest -- no need to translate profiles (although different SID, GUID takes care of this)* between different forests -- profile translation is needed (different GUID and SID) Different forests.you can use ADMT or any

[ActiveDir] New server to replace DC and FP role - options for keeping the same name

2006-10-26 Thread Danny
Quick question; an existing remote office DC/file/print server will be replaced with a brand new server. What options do I have if they wish to keep the same name?Thanks,...D

Re: [ActiveDir] New server to replace DC and FP role - options for keeping the same name

2006-10-26 Thread Danny
Thanks, Susan - I'll have a go at it.On 10/26/06, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] [EMAIL PROTECTED] wrote:www.sbsmigration.com In the SBS world this is what we do all the time when we are replacingour SBS box and we don't want to have to touch the workstations.Original server is

[ActiveDir] How to grant administrator from trusted forest local PC Admin rights

2006-10-26 Thread Danny
Looking for ideas on how to provide a domain administrator in a separate forest local administrator rights on all domain computers to assist with ADMT v3 computer migration.Thanks,...D

Re: [ActiveDir] Seperate forest migration notes

2006-09-08 Thread Danny
I found some more information, however, in the Before using ADMT v3 help document included with ADMT, is states that the account that I am running ADMT, must be a member of the administrators group on all computers that I want to migrate. How would I accomplish this? Thanks,...DOn 9/5/06, Danny

Re: [ActiveDir] Seperate forest migration notes

2006-09-08 Thread Danny
://support.microsoft.com/Default.aspx?kbid=279301 On 9/9/06, Danny [EMAIL PROTECTED] wrote: I found some more information, however, in the Before using ADMT v3 help document included with ADMT, is states that the account that I am running ADMT, must be a member of the administrators group on all

[ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Danny
Environment: Windows Server 2003 R2 and 2000 mixed AD forest with Exchange Server 2003 SP2 and one BES (Blackberry Enterprise Server) server.Scenario: Existing AD account with full Exchange mailbox and provisioned BES user. Out of the blue the user is unable to send from their BlackBerry.

Re: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Danny
: • Administrator • Krbtgt The above was taken from: http://support.microsoft.com/kb/817433/ Robert Williams From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Danny Sent: Thursday, September 07, 2006 10:49 AM To: ActiveDir@mail.activedir.org Subject

Re: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Danny
- 312.731.3132 From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Danny Sent: Thursday, September 07, 2006 11:49 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD object (User accounts) Permissions dissappearing Environment: Windows Server 2003 R2 and 2000 mixed AD

[ActiveDir] Unable to unpublish old ILS server and replace with new

2006-09-06 Thread Danny
Netmeeting is utilizing ILS for directory lookup, however, the original ILS server died, so I am trying to unpublish the old and publish the new one. However, I am receive error messages that our beloved search engines and help documentation are not helping much. When I restart all related (IIS

RE: OT - RE: [ActiveDir] W. in hell

2006-09-05 Thread McCann, Danny
a few months ago and re-launched a mini-debate. I'd reversed the chronological order while looking for a particular email,forgot tochange it back, spotted a subject I'd only just been reading about.I only noticed the date a wee while later! :))) Danny

Re: [ActiveDir] Seperate forest migration notes

2006-09-05 Thread Danny
this once or twice. :) On 8/29/06, Danny [EMAIL PROTECTED] wrote: A company was acquired. Seperate 2000/2003 forest, now a two-way trust exists, but we are looking at migrating their users, mailboxes, computers, and servers into our forest.Working on a plan to test moving a user, mailbox, computer

[ActiveDir] Seperate forest migration notes

2006-08-29 Thread Danny
A company was acquired. Seperate 2000/2003 forest, now a two-way trust exists, but we are looking at migrating their users, mailboxes, computers, and servers into our forest.Working on a plan to test moving a user, mailbox, computer, and server into our forest. Plan: Select test users and

Re: [ActiveDir] Site down for 36 hours so far - anything proactive to do?

2006-08-29 Thread Danny
We should be good, then. Thanks, JoeDOn 8/29/06, joe [EMAIL PROTECTED] wrote: Nope youshould be good unless you have some special dependence on that DC. Normally youneed to worry once you start to approach the TSL which is usually 60 days for most places or if you don't know why the DC

RE: [ActiveDir] Weak AD passwords

2006-08-09 Thread McCann, Danny
Title: Message Hi Haven't used it, but one of my colleagues swears it's too good. :)Try Rainbow Tables. Cheers Danny -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, RussSent: 20 March 2006 21:38To: ActiveDir

Re: [ActiveDir] Adding the first Win2003 R2 DC

2006-07-27 Thread Danny
On 7/27/06, Lucas, Bryan [EMAIL PROTECTED] wrote: I have 4 DC's that are Win2003 SP1 and 1 DC that is still Win2000 SP4. I'd like to add a new DC that is Win2003 R2. Is there anything special I need to do (i.e. forestprep/domainprep) or can I join it just like another Win2003 SP1 DC? Yes,

Re: [ActiveDir] Acqusition of 2003 Forest - options experiences

2006-07-13 Thread Danny
ess likely to miss something then if you try to do it manually =) Andrew Fidel Danny [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 07/12/2006 01:18 PM Please respond to ActiveDir@mail.act

[ActiveDir] Acqusition of 2003 Forest - options experiences

2006-07-12 Thread Danny
A company with an independent 2003 Forest has been acquired. They have Exchange 2003 and a Citrix server. We have a similar configuration minus Citrix. The goal is obviously to migrate key AD objects, mailboxes, and servers into our 2003 forest. I understand that ADMT is often the right tool

RE: [ActiveDir] OT: Higher Education web access

2006-06-21 Thread McCann, Danny
Title: Message We use it here (Glasgow Caledonian) to an extent, without issue. And I believe it's used very successfully and extensively at Strathclyde (much bigger uni than we are). Cheers Danny -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] FRS/DFS woes

2006-06-15 Thread McCann, Danny
Is the DNS configuration of this server pointing to itself for DNS resolution? Are the other server resolving against the same DNS? Cheers Danny The root of the DFS is located on our PDC emulator, which is also a DNS server itself. If I go into the dfs root on the PDC emulator I see the file

RE: [ActiveDir] FRS/DFS woes

2006-06-15 Thread McCann, Danny
Hi Russ Try pointing the server to itself for DNS resolution. This is the problem I had with one replica in a similar situation and it resolved the problem for me. BTW, It only affected DFS replication, SYSVOL was fine. Cheers Danny No, PDC emulator (which is also the root target

RE: [ActiveDir] Group membership question

2006-06-14 Thread McCann, Danny
Title: Message Thank you. Danny -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: 13 June 2006 17:01To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group membership question No it is a value in an attribute. A child

[ActiveDir] Group membership question

2006-06-13 Thread McCann, Danny
Title: Group membership question Sorry if this is a daft question, but I can't find an answer anywhere: Is a User considered a Child object of a Group to which it is a member? Cheers Danny

RE: [ActiveDir] FRS/DFS woes

2006-06-13 Thread McCann, Danny
down in for a few hours. :) Cheers Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: 13 June 2006 15:31 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] FRS/DFS woes I'm trying to set up a DFS share and having all sorts

RE: [ActiveDir] sample vbs script

2006-06-06 Thread McCann, Danny
the building blocks. http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/manage/usmgvb05.mspx Cheers Danny -Original Message- From: [EMAIL PROTECTED] on behalf of Antonio Aranda Sent: Tue 06/06/2006 20:28 To: ActiveDir@mail.activedir.org

Re: [ActiveDir] Forcing Kerberos to use TCP instead of UDP

2006-05-02 Thread Danny
On 4/26/06, Olivarez, Sergio J Mr CTNOSC/GD-NS [EMAIL PROTECTED] wrote: Many times! What is your concern? Turns out the firewall admins had to explicitly allow TCP 135 on their Checkpoint firewall, and the AD trust between the IPSec sites is working. Thank you to all of your for your

Re: [ActiveDir] DNS addition - event error 4010: unable to create RR for AD zone

2006-05-02 Thread Danny
On 4/25/06, Douglas M. Long [EMAIL PROTECTED] wrote: Some suggestions: Look into the differences between 2000 and 2003 AD integrated DNS. I believe in 2000 they are stored in the domain partition and in 2003 they are stored in the application directory partition.

[ActiveDir] OT: Network routing/Cisco mailing list

2006-04-28 Thread Danny
Happy Friday to you all. Sorry for the OT - I am looking for a Cisco network routing or just general network routing mailing list. Any suggestions? I did search as well. Thanks, ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List

[ActiveDir] Forcing Kerberos to use TCP instead of UDP

2006-04-26 Thread Danny
Has anyone? http://support.microsoft.com/?id=244474 RE: http://www.mail-archive.com/activedir@mail.activedir.org/msg41616.html I am concerned about the impact on this environment. Thanks, ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx

Re: [ActiveDir] Forcing Kerberos to use TCP instead of UDP

2006-04-26 Thread Danny
On 4/26/06, Olivarez, Sergio J Mr CTNOSC/GD-NS [EMAIL PROTECTED] wrote: Many times! What is your concern? 1) Does this change need to be made to all DC's? 2) What changes need to be made to clients and/or GPO's? 3) Will this have a short (or long) term negative impact to operations? 4) Has

Re: [ActiveDir] DNS addition - event error 4010: unable to create RR for AD zone

2006-04-25 Thread Danny
On 4/25/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: To directly answer your question:, I'd suggest: Convert the zone to Standard primary on the problematic server. Configure the server to now use another DNS server for lookup. Then delete the newly-converted zone on this server Remove DNS

[ActiveDir] AD trust between seperate forest - inconsistant RPC communication

2006-04-24 Thread Danny
Hello, Company A acquired Company B: A: Windows 2000 SP4 DC's and one Server 2003 SP1 DC B: Windows Server 2003 DC's A site to site IPSec VPN connection between the two sites was up and running months ago. Ping by name (and IP address) results are good. Today, we added a two-way external

Re: [ActiveDir] DNS addition - event error 4010: unable to create RR for AD zone

2006-04-18 Thread Danny
On 4/17/06, Al Mulnick [EMAIL PROTECTED] wrote: When you talk about deleting and such are you thinking about the newsgroups posts like this one: http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.dns/2005-05/msg00245.html ??? Yes, along those lines. But, the zone

[ActiveDir] DNS addition - event error 4010: unable to create RR for AD zone

2006-04-17 Thread Danny
New 2003 DC promoted into 2000 forest about 2 months ago. Server was stable so I added DNS services this morning. The zones from the other DC's showed up OK, but the following event was logged: Event Type: Error Event Source: DNS Event Category: None Event ID: 4010 Date: 17/04/2006 Time:

[ActiveDir] Mass AD Full Name Display Name Changes - Last name, first name

2006-03-01 Thread Danny
My goal is to automate a process to change Full Name and Display Name from John Doe to Doe, John. I am not yet familiar with VB et al scripting, so assistance would be greatly appreciated if you propose a scripting solution. Thank you! ...D List info : http://www.activedir.org/List.aspx List

Re: [ActiveDir] OT: Roaming Profiles

2006-02-04 Thread Danny
PROTECTED] On Behalf Of Danny Sent: Friday, February 03, 2006 3:43 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: Roaming Profiles I agree... but what about OST files - Outlook cached mode. Is anyone excluding the OST from the roaming profile? If so, a new OST will need

Re: [ActiveDir] OT: Roaming Profiles

2006-02-03 Thread Danny
I agree... but what about OST files - Outlook cached mode. Is anyone excluding the OST from the roaming profile? If so, a new OST will need to be downloaded at each computer the user logs into. Most are 100-300MB. Which is the lesser evil. :) ...D On 2/3/06, Thommes, Michael M. [EMAIL

Re: [ActiveDir] Automagically move AD computers into new/appropriate OU

2006-01-10 Thread Danny
On 1/10/06, Kamlesh Parmar [EMAIL PROTECTED] wrote: If you know the admin password of all new computers, you can use netdom.exe to join machine remotely, and at the same time put it in exact ou where you want to put it. NETDOM JOIN comp1 /DOMAIN:WINDOM /UO:LocalAdmin /PO:LocalAdminPassword

[ActiveDir] GPO - Windows classic view without losing Quick Launch bar in Win2000

2006-01-10 Thread Danny
Through GPO, is there a way to enforce Windows Classic View in the Folder View (WinXP SP2) - without losing the Quick Launch bar on the Windows 2000 computers. Thanks, ...D -- CPDE - Certified Petroleum Distribution Engineer CCBC - Certified Canadian Beer Consumer List info :

[ActiveDir] Automagically move AD computers into new/appropriate OU

2006-01-09 Thread Danny
Is there a way to automagically place new AD computers into the correct OU, as opposed to the built-in Computer container? Thanks, ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

Re: [ActiveDir] Automagically move AD computers into new/appropriate OU

2006-01-09 Thread Danny
This is all fantastic information; especially since there are different ways of getting the same end result. Thanks, everyone! One more related question, if you have a dozen new PC's, what options are available for joining/adding computers to the domain -- besides logging into the PC and

[ActiveDir] Promote 2003 member server in prep'd 2000 domain?

2005-12-09 Thread Danny
If I run forest and domain prep for 2003 on the 2000 schema master/FSMO god, can I then dcpromo a new 2003 member server without upgarding the Windows 2000 DC to Windows Server 2003? We are talking about an all 2000 domain with two DC's, Netware 5.x, and MSDSS for directory sync. Thanks, ...D

Re: [ActiveDir] Promote 2003 member server in prep'd 2000 domain?

2005-12-09 Thread Danny
On 12/9/05, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote: Yes you can... Thought so, I just wanted to make sure I was reading between the lines in the MSKB's. [...] snip articles I have. Forestprep on the schema master Domainprep on the infrastructure master This DC is both, so it is

[ActiveDir] Netware 5, 2000 AD, and Exchange 5.5 to 2003

2005-12-07 Thread Danny
Netware 5 with 2000 AD and Exchange 5.5 will all be migrated to 2003. Anyone have experience with this - any tips/suggestions? Thank you, ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

Re: [ActiveDir] Netware 5, 2000 AD, and Exchange 5.5 to 2003

2005-12-07 Thread Danny
On 12/7/05, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote: More than half a year ago I did a migration from Netware 5, NT4 and Exchange 5.5 to Windows/Exchange 2003. I remember posting information about it. I will dust off the archives, then. Thanks. [...] Another source you could use is

Re: [ActiveDir] Broken 2000 AD? Trying to upgrade to 2003 Exchange 2003

2005-12-03 Thread Danny
Well, after rebooting the remote DC, fixing the DNS root hints (were pointing to itself) and rebooting the server, the Exchange 2003 forest and domain prep and upgrade were successful. I am now about to prepare the forest for Windows Server 2003. In the meantime, if you see anything obvious in

Re: [ActiveDir] Broken 2000 AD? Trying to upgrade to 2003 Exchange 2003

2005-12-03 Thread Danny
On 12/3/05, Danny [EMAIL PROTECTED] wrote: Well, after rebooting the remote DC, fixing the DNS root hints (were pointing to itself) and rebooting the server, the Exchange 2003 forest and domain prep and upgrade were successful. I am now about to prepare the forest for Windows Server 2003

[ActiveDir] Failed to transfer the schema FSMO role - 2000 to 2003 upgrade

2005-12-03 Thread Danny
adprep /forestprep is failing. User is built-in administrator with full rights. Adprep created the log file ADPrep.log under C:\WINNT\system32\debug\adprep\logs\20051203132518 directory. Adprep copied file D:\Win2003SRV\I386\schema.ini from installation point to local machine under directory

[ActiveDir] AD Wish list

2005-12-01 Thread McCann, Danny
the best Danny

RE: re[2]: [ActiveDir] Getting computer name from a username

2005-12-01 Thread McCann, Danny
Hi Shane Have a look at PsLoggedOn from Sysinternals. It may be what your looking for. Cheers Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shane De Jager Sent: 01 December 2005 11:08 To: ActiveDir@mail.activedir.org Subject: re[2]: [ActiveDir

RE: [ActiveDir] VBSCRIPT ADSI IADs Get Method

2005-12-01 Thread McCann, Danny
Title: Message Hi Steve From Jorge's code, once you have sObjDN you can bind to it with "LDAP://" sObjDN, then do what youneed toeach account from there.Seems efficient enough. :) Cheers Danny -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] FSMO role transfer

2005-12-01 Thread McCann, Danny
! :) ). Cheers Danny joe, I can't believe you said this. Rarely are admins ever really doing hard admin type thinking/troubleshooting work constantly except for the folks who take on escalations from lower level admins. I stopped reading after this. Sorry. But I've got to cool down first. I've

Re: [ActiveDir] OT: Licensing compliance SBS

2005-11-30 Thread Danny
On 11/30/05, Creamer, Mark [EMAIL PROTECTED] wrote: [...] Also, since I don't have any experience with SBS other than a very old version, does a client purchase one CAL that applies to all products utilized on the SBS server, or are there individual CALS for server, Exchange, etc? An SBS CAL

Re: [ActiveDir] 2003 upgrade failure - domain prep was not run, but it was!

2005-11-22 Thread Danny
On 11/22/05, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote: From your post I see the following: * RPCLOCATOR service on RADAR is disabled. Set it to STARTUP=MANUAL * OutBound REPLICATION is disabled on RADAR. ENABLED it. To enable both inbound and outbound REPADMIN /OPTIONS DC -

[ActiveDir] 2003 upgrade failure - domain prep was not run, but it was!

2005-11-21 Thread Danny
Windows 2000 (SP4, all DC's) Server to 2003 upgrade. Forest and domain prep were both run on the root DC. Insert Windows Server 2003 CD and setup cannot continue because domain prep was not run. So, we run domain prep again. Here is a dcdiag and the adprep logs: DC Diagnosis Performing initial

Re: [ActiveDir] 2003 upgrade failure - domain prep was not run, but it was!

2005-11-21 Thread Danny
On 11/21/05, Medeiros, Jose [EMAIL PROTECTED] wrote: Are you also running Exchange 2000? One upgraded from Exchange 2000 (in July) to Exchange Server 2003; same server (not my choice; business decision). ...D List info : http://www.activedir.org/List.aspx List FAQ:

Re: [ActiveDir] Improving your AD's fault tolerance with old hardware?

2005-11-10 Thread Danny
Thanks for all your feedback guys. I am off to do some promoting, member server promoting that is. ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

[ActiveDir] Methods to verify GC promotion

2005-11-08 Thread Danny
Could you please let me know all the ways to verify a DC has been successfully promoted to a GC? For example, will a dcdiag 100% verify this? Thanks, ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

[ActiveDir] Improving your AD's fault tolerance with old hardware?

2005-11-08 Thread Danny
Correct me if I am wrong, but assuming the more DC's you have in your forest, the more fault tolerant your Active Directory will become, is it therefore worth it to use retired, possibly out of (hardware) warranty servers or workstations for this purpose if you are budget-less (to purchase new

Re: [ActiveDir] OT: Exchange alternate email address

2005-10-04 Thread Danny
On 10/4/05, joe [EMAIL PROTECTED] wrote: One small thing, if the account is disabled, set the associated external account, if the account isn't disabled, don't set it. Also if it is disabled and you set the associated external account, verify that msExchMasterAccountSid gets populated with

Re: [ActiveDir] OT: Additional DHCP server same LAN

2005-09-27 Thread Danny
Your assumptions were correct. Conclusion: wait for physical LAN to seperate. Thanks for everyone's assistance! ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

[ActiveDir] OT: Additional DHCP server same LAN

2005-09-26 Thread Danny
Two companies sharing the same physical LAN, IP configuration, Windows 2000 servers, two seperate forests, and one DHCP server. In the the not so distant future they will seperate. In the meantime, is there a way to point the XP pro clients from CompanyB to a new DHCP server on the same physical

[ActiveDir] csvde Import in AD

2005-09-09 Thread Danny
I am attempting to import Notes contacts into Exchange. Without involving the complexity and maintenance of a Notes connector for this one time import, it appears as though Microsoft believes csvde is the best bet. So, based on the limited csvde help (from csvde /?) I am left with several crtical

Re: [ActiveDir] Companies splitting - where to start with Active Directory, DNS, DHCP, etc.

2005-09-01 Thread Danny
On 8/31/05, joe [EMAIL PROTECTED] wrote: Yes. Someone followed the MS book examples pretty explicitly. :o) Can I simply break the AD trust and hope it does melt down? :) Thanks, ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List

Re: [ActiveDir] Companies splitting - where to start with Active Directory, DNS, DHCP, etc.

2005-08-31 Thread Danny
On 8/30/05, Al Mulnick [EMAIL PROTECTED] wrote: What is it you need to accomplish then? If they're already separate, what's to separate other than name resolution and DHCP/network services? From an Active Directory point of view, the AD trust will need to be broken, but I would like to know

Re: [ActiveDir] Companies splitting - where to start with Active Directory, DNS, DHCP, etc.

2005-08-31 Thread Danny
On 8/31/05, Al Mulnick [EMAIL PROTECTED] wrote: Finding the root. I believe it was Dean who posted this a little while back. ... another thought, to determine your forest root in order to validate the dn you're supplying, the following single-line command line syntax will help - portqry -n

[ActiveDir] Companies splitting - where to start with Active Directory, DNS, DHCP, etc.

2005-08-30 Thread Danny
Good day to you all, Two companies that share the same IT staff, NOC, WAN connections (to remote offices), DHCP services, LAN distribution, some DNS, firewall, and an AD trust -- are very shortly separating in more ways than one. I would appreciate any tips or suggestions on where to start

Re: [ActiveDir] Companies splitting - where to start with Active Directory, DNS, DHCP, etc.

2005-08-30 Thread Danny
On 8/30/05, Phil Renouf [EMAIL PROTECTED] wrote: Hmm, interesting my gmail now looks like a word edited message. Funny... Click Plan Text... instead of Rich Formatting. I thinks. Can you describe your AD environment a little more? I am a couple of days into this environment, so don't laugh,

RE: [ActiveDir] Latency in Group membership

2005-07-14 Thread McCann, Danny
Title: Message Hi We only have one siteand a mesh topology. Replication is hourly, but even when we update group membership then force replication the latency still exsists. All the DC's are on Gig links! Cheers Danny -Original Message-From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] Latency in Group membership

2005-07-14 Thread McCann, Danny
Title: Message Hi We do have the odd user whois member of a large number of groups (~20). How many is too many? Looks like a lot of investigative work required then. Oh well, coffee on and sleeves rolled up! Cheers Danny -Original Message-From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] Latency in Group membership

2005-07-14 Thread McCann, Danny
Hi That's a highly likely explanation. Some re-organisation of the groups/membership required then. We're due a spring clean anyway. :) Is an offline Metadata cleanup worthwhile performing? Thanks to all for the advice. Much appreciated! Cheers Danny -Original Message- From: [EMAIL

RE: [ActiveDir] DFS Client for Mac and UNIX

2005-07-14 Thread McCann, Danny
at the moment though :). Cheers Danny -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CC/DNA) Sent: 14 July 2005 11:51 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] DFS Client for Mac and UNIX Hey All, Been a while... Got

[ActiveDir] Latency in Group membership

2005-07-13 Thread McCann, Danny
on any of the DC's. I'd be grateful if anyone could help me out with some guidance on where to look next. Thanks Danny

RE: [ActiveDir] Latency in Group membership

2005-07-13 Thread McCann, Danny
y pass all the DCDiag tests. Cheers Danny -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al MulnickSent: 13 July 2005 13:18To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Latency in Group membership What apps are running on the DC's

Re: [ActiveDir] Attemping to remove DC - NTDS Replication 2022 Er ror

2005-06-21 Thread Danny
On 6/20/05, Tony Murray [EMAIL PROTECTED] wrote: No. In that case it looks like the two DCs might have conflicting information about how the FSMO roles are distributed. Not sure how that happened. What happens when you run the command against both servers? For example, netdom query fsmo

[ActiveDir] Attemping to remove DC - NTDS Replication 2022 Error

2005-06-20 Thread Danny
Greetings, I am trying to remove the second domain conroller from a 2003 domain, however, when I attempt to remove the DC via dcpromo, I receive the following errors in the event log: Event Type: Error Event Source: NTDS Replication Event Category: Replication Event ID: 2022 Date:

Re: [ActiveDir] Attemping to remove DC - NTDS Replication 2022 Er ror

2005-06-20 Thread Danny
On 6/20/05, Tony Murray [EMAIL PROTECTED] wrote: Hi Danny Have you tried the suggested workaround, i.e. to transfer the FSMO role(s) to your other DC and then try DCPROMO again? To find out how the roles are distributed you can run the command; netdom query fsmo Yes, all the roles have

[ActiveDir] AD DR - replication lag site

2005-05-18 Thread Danny
I am interested in your thoughts regarding this suggestion for DR: http://searchwin2000.techtarget.com/tip/1,289483,sid1_gci1086805,00.html (You may need to register) Basically it states that you should create another AD site and set the replication for 168 hours. Thank you, ...D List info :

Re: [ActiveDir] All (Now the definition of a CV)

2005-05-09 Thread Danny
On 5/9/05, Francis Ouellet [EMAIL PROTECTED] wrote: Curriculum Vitae, also known as resume ;-) 1) http://www.google.ca/search?q=define%3ACurriculum+Vitae 2) A CV in North America is much different than a CV in Europe; a CV in North America is not the same as a resume. ...D List info :

Re: [ActiveDir] Odd exchange error

2005-05-06 Thread Danny
On 5/6/05, John Parker [EMAIL PROTECTED] wrote: Hey all I have an issue with Microsoft Exchange Server 2000 Enterprise running on a Win2K AD box. In the event viewer I keep getting this error message: Error 0x7da occurred while rendering message 0001-76cb for download for user

[ActiveDir] Windows Server 2003 R2 Public Beta now Available

2005-05-06 Thread Danny
http://blogs.technet.com/windowsserver/archive/2005/05/06/404591.aspx List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Re: [ActiveDir] [exchangelist] RE: Password protecting OST

2005-05-02 Thread Danny
On 5/2/05, Al Mulnick [EMAIL PROTECTED] wrote: Agreed that there is little benefit to locking an OST (mirror of your mailbox and is protected by domain credentials inherently). Yes, there is little benefit if one relies on a password protected PST (or OST) as the one and only layer of defence.

Re: [ActiveDir] How to verify successful installation of additional DC

2005-04-25 Thread Danny
On 4/24/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: KB http://support.microsoft.com/default.aspx?scid=kb;en-us;298143 Excellent! Thank you all! Good morning to you. ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

[ActiveDir] How to verify successful installation of additional DC

2005-04-23 Thread Danny
How can I verify successful installation of additional domain controller in a 2003 domain? (Used to be one DC, now there are two, but I want to make sure the installation of the second DC was 100% successful) Thank you, ...D List info : http://www.activedir.org/List.aspx List FAQ:

Re: [ActiveDir] How to verify successful installation of additional DC

2005-04-23 Thread Danny
On 4/23/05, Gil Kirkpatrick [EMAIL PROTECTED] wrote: Running DCDIAG on both DCs would be a good start. That would be a good start. :) So I did at dcdiag /f:output.txt On the original DC: Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial

Re: [ActiveDir] Export and import essential AD objects for new forest

2005-04-22 Thread Danny
Thank you all for your most helpful responses! You guys are fantastic. Specifically: Jose Medeiros, Ken Jensen, and Ken Cornentet. Due to time constraints, I think I am going to go with the swing method, so here is my proposed plan of attack: Temp Server/ Server B: 1) Install Windows Server

Re: [ActiveDir] Export and import essential AD objects for new forest

2005-04-22 Thread Danny
One follow-up to my last post: Should I be transferring or seizing the FSMO roles during this migration? Thank you, ...D List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

[ActiveDir] Export and import essential AD objects for new forest

2005-04-21 Thread Danny
Temporary small biz config: 1 Forest, DC, domain, and Exchange on one physical server - all version 2003. Core problem: I have to downgrade from Enterprise Edition to Standard Edition (demo turned into production). My goal: To export all of the essential Active Directory data from the Windows

[ActiveDir] 2003 SP1 DC Disaster Recovery Testing - Reboots after selecting install from Recovery Consonle

2005-04-07 Thread Danny
Testing backups. Fresh install of 2003 SP1 and Exchange 2003. Backed up System State and Exchange IS. Purposely Destroyed AD, Exchange DB's and deleted System State boot files. Rebooted server, of course NTLDR missing. So, I boot from Windows Server 2003 CD, hit R for Repair/Recovery. Select

[ActiveDir] Trouble with ldifde - trying to export list of SMTP addresses

2005-04-06 Thread Danny
=Microsoft Exchange System Objects,DC=testing,DC=local changetype: add dn: CN=OWAScratchPad{5A6F9B24-8CAA-41CC-94DC-2646461C95ED},CN=Microsoft Exchange System Objects,DC=testing,DC=local changetype: add dn: OU=Local Users,DC=testing,DC=local changetype: add dn: CN=Danny smith,OU=Local Users,DC=testing

Re: [ActiveDir] Trouble with ldifde - trying to export list of SMTP addresses

2005-04-06 Thread Danny
On Apr 6, 2005 11:06 AM, Burkes, Jeremy [Contractor] [EMAIL PROTECTED] wrote: Try this: ldifde -f smtpaddress.ldf -s myserver -r (objectClass=user) -l ProxyAddresses=SMTP:* Pretty much the same results from what I can tell; no SMTP addresses listed. I will run a windiff to compare

Re: [ActiveDir] Trouble with ldifde - trying to export list of SMTP addresses (SOLVED)

2005-04-06 Thread Danny
On Apr 6, 2005 11:23 AM, joe [EMAIL PROTECTED] wrote: Danny, are you sure that is the output from that command? Did you cut and paste that command? Fresh install of Windows Server 2003 SP1. One AD user account for testing. I am 99.9% sure it's the correct output. I copied and pasted from RDP

  1   2   >