RE: [ActiveDir] RDP

2004-11-15 Thread DeGrands, Charles
We had some issues with the way we had delegated our help desk authority for some computer and user work.  Take a look at this article and see if it applies:   http://support.microsoft.com/default.aspx?scid=kb;en-us;818080      From: Ellis, Debbie [mailto:[EMAIL PROTECTED] Sent

RE: [ActiveDir] AD through a firewall

2004-10-19 Thread DeGrands, Charles
ight be worth it to use ISA to terminate the IPSec tunnel and then audit from there. Just a thought. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DeGrands, Charles Sent: Tuesday, October 19, 2004 2:04 PM To: [EMAIL PROTECTED] Subject: [ActiveDir

[ActiveDir] AD through a firewall

2004-10-19 Thread DeGrands, Charles
Hello all, Environment - Mixed mode Windows 2000 and 2003 domain controllers. One empty root and 8 child domains. Most domains have 3-5 DCs for redundancy and DR. One domain has 25 DCs for their branch offices, but they are not behind any firewalls. Two of the domains are behind separate inte

RE: [ActiveDir] Windows XP time sync

2004-02-19 Thread DeGrands, Charles
After reading this thread, I checked my recently purchased HP Evo and it too had the time pointed to Microsoft.  So it’s not hardware specific.      From: Rich Milburn [mailto:[EMAIL PROTECTED] Sent: Thursday, February 19, 2004 12:29 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveD

RE: [ActiveDir] Windows 2003 domain in Windows 2000

2003-10-30 Thread DeGrands, Charles
We’ve got the root 2000\ child 2003 forest running in our environment.  No issues so far.  One division was on the early adopters program, but we couldn’t get the other divisions to agree to upgrade the root.     You can upgrade the Schema with the Forestprep and Domainprep utilities tha

RE: [ActiveDir] Windows 2003 domain in Windows 2000

2003-10-30 Thread DeGrands, Charles
We’ve got the root 2000\ child 2003 forest running in our environment.  No issues so far.  One division was on the early adopters program, but we could get the other divisions to agree to upgrade the root.      You can upgrade the Schema with the Forestprep and Domainprep utilities that a

RE: [ActiveDir] Replication Problems...

2003-06-05 Thread DeGrands, Charles
Title: Message We have done this in our environment and it has solved multiple issues.   -Original Message- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 4:00 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Replication Problems...   Yeah,

RE: [ActiveDir] Windows 2003 and application support

2003-01-14 Thread DeGrands, Charles
We are running NAI \ Mcafee VirusScan 7.0 Beta 2  on W2K3 RC2 in our test lab.  No issues so far.      -Original Message- From: Amit Zinman [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 14, 2003 6:07 AM To: ActiveDir Mailing List Subject: [ActiveDir] Windows 2003 and applicat

[ActiveDir] lastLogin attribute

2002-10-14 Thread DeGrands, Charles
Hello, Does anyone know if the "lastLogin" attribute is replicated between DCs in a 2000 native domain? Thank you. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Util/software to Log into Multiple AD domains forAdministration

2002-09-18 Thread DeGrands, Charles
Our different domains aren't locked down as tight as yours, so this still might not work, but what about the "run as" method to start the MMCs?  Does that fail as well? -Original Message-From: Steve Williams [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 17, 2002 7:27 PMT

RE: [ActiveDir] setting up DNS

2002-03-28 Thread DeGrands, Charles
You need to enable that and then add your ISP's DNS servers to the field. -Original Message- From: Rittenhouse, Cindy [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 28, 2002 1:37 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] setting up DNS Enable Forwarders is not checked. --

[ActiveDir] DNS control

2002-03-13 Thread DeGrands, Charles
Hello all, I need some advice on DNS, please. Who controls DNS in your organization? We currently use Y2K DNS for our internal and external zones. The security team has brought up the possibility of taking over the DNS structure. We, on the AD team, feel it would be a bad deal for internal reso

RE: [ActiveDir] Merging 2 NTFS partions on a RAID volume

2002-03-08 Thread DeGrands, Charles
Just an FYI to everyone; be careful with dynamic disks. We lost 190gigs of user data after our 2nd extension. It is a known Microsoft issue for multiple extensions. I haven't seen it posted in TechNet, so I hope I'm not liable, but I know our hardware guys discovered this. It was a bear trying

RE: [ActiveDir] Development Domain

2002-03-06 Thread DeGrands, Charles
We have set up the separate forest scenario for our in-house devils about a year ago. The biggest push for this, as everyone has mentioned, was schema extensions. Here are a few things that we did to keep them out of our production arena: 1. Separated all the servers into their own VLAN. They

RE: [ActiveDir] Group Policy Utility?

2002-01-15 Thread DeGrands, Charles
Title: Group Policy Utility? www.fullarmor.com -Original Message-From: Strittmatter, Paul [mailto:[EMAIL PROTECTED]]Sent: Tuesday, January 15, 2002 9:09 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Group Policy Utility? Does anyone know of a utility that will compare a ex

[ActiveDir] User account lockouts

2002-01-11 Thread DeGrands, Charles
Hello All, We are having arbitrary account lockouts on both domain admin and user accounts. We have a W2K native domain, running exchange 5.5 and W2K pro workstations . There are 5 domain controllers and multiple exchange servers. The person, who was researching this problem, initially repor

RE: [ActiveDir] removing NT 'BDC' from users and computers

2002-01-03 Thread DeGrands, Charles
Jason, I had this problem as well. After all the TechNet articles didn't help, I had to resort to the ADSIedit tool. From there you can drill down your AD tree and delete the entries manually. Good luck. -Original Message- From: Jason Benway [mailto:[EMAIL PROTECTED]] Sent: Thursday,

[ActiveDir] DNS & FQDN

2001-10-29 Thread DeGrands, Charles
Hello all, Should DNS return the FQDN across domains? Here is the scenario: Root domain called company.net with 5 child domains like my.company.net, your.company.net, etc. From one child domain to the next, or even to and from the root, I get mixed results when I use the ping command and nslo

RE: [ActiveDir] Account Lockouts in mixed mode

2001-10-17 Thread DeGrands, Charles
We have 5 domains in our environment, but only one has a three lock out scenario like yours. We are in Native mode and I have witnessed this. A first I blamed it on user error, since the help desk for that area is not up to par. Then one day it happened to me. I hadn't logged in to the domain

RE: [ActiveDir] Adding Users:

2001-07-23 Thread DeGrands, Charles
There is the adduser utility from the 2000 resource kit that allows you to do this.  It's command line and very easy to use if you already have the formatted user list.  If you are talking thousands of users, try to break them up into chunks to help you verify the additions.  We were moving

RE: [ActiveDir] Does this make sense ?

2001-04-17 Thread DeGrands, Charles
We have a Microsoft consultant onsite and we just completed one of our many domains that fits your situation. You are on the right track with the following changes. 1. The new BDC, after synchronization, should be promoted to PDC. 2. Upgrade the new PDC to 2000. 3. Rebuild your old PDC with

RE: [ActiveDir] SMS 2.0 and Active Directories

2001-04-12 Thread DeGrands, Charles
We have had SMS installed in our 2000 environment for about 6 months now. Even though we have it installed on about 3,000 desktops, it is mostly used for remote control. After a solid backup, I upgraded the SMS NT4.0 server to Win2K without any issues. Good luck. -Original Message- Fr