RE: [ActiveDir] How Secure is a Domain Controller?

2006-03-05 Thread Edwin
Thanks everyone. I have read some of that documentation but others are new to me. I will review them and see what else I can find. Thanks, Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner Sent: Sunday, March 05, 2006 3:35 AM

[ActiveDir] How Secure is a Domain Controller?

2006-03-04 Thread Edwin
, NTLMv2 refuse NTLM and LM. Is it common practice to add additional GPOs to the DC OU? Or is DC protected enough to where all that is needed to worry about are the member machines? If adding additional GPOs to the DC OU, is there anything that should definitely be avoided? Edwin

[ActiveDir] LDAP Server Request

2006-02-28 Thread Edwin
of addressing all of the concerns outlined above. What do you think? Is this solution possible? Is there an easier solution? One that is preferable to this? Thank you in advance for your responses, Edwin

RE: [ActiveDir] LDAP Server Request

2006-02-28 Thread Edwin
by Microsoft is just about as close to the real life situation I am facing as you can get. Thank you all for your replies, Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, February 28, 2006 5:05 PM To: ActiveDir@mail.activedir.org Subject: Re

[ActiveDir] Recycle Bin and Roaming Profiles

2006-02-08 Thread Edwin
I have roaming profiles set up on users and it works like it is supposed to except for one thing. When I delete a file it deletes it permanently. How can I get files to go into the Recycle Bin? Thanks, Edwin

RE: [ActiveDir] Getting better control over DHCP

2006-02-04 Thread Edwin
question could be more easily answered. Thank you again everyone. Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Garrett Sent: Saturday, February 04, 2006 9:55 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Getting better control over DHCP

[ActiveDir] Getting better control over DHCP

2006-02-03 Thread Edwin
of the domain, it does not get any network connectivity from the DHCP server. Thanks, Edwin

RE: [ActiveDir] Getting better control over DHCP

2006-02-03 Thread Edwin
, but not be able to see anybody, only downside to that would be that the network savvy user could look under network settings and see what the IP of the DHCP server is and then assign a static IP within that range. HTH - Marc From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent

[ActiveDir] User Password Expiration

2006-01-05 Thread Edwin
reset the password and still authenticate to many other servers as long as I am within the 2 minute expiration rule. How can I have force a password to expire upon first use? Is this possible? Thank you for your replies, Edwin

RE: [ActiveDir] User Password Expiration

2006-01-05 Thread Edwin
? Thanks, Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, January 05, 2006 10:17 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] User Password Expiration If the whole goal is to disallow access to other machines and it has

[ActiveDir] Active Directory Naming Question

2005-12-29 Thread Edwin
that Bus2 creates. Will any of the above answers change now that a forest is being created? Thank you all for your replies, Edwin

RE: [ActiveDir] Active Directory Naming Question

2005-12-29 Thread Edwin
. Thanks again, Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 29, 2005 11:37 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Active Directory Naming Question 1. The domain name can be disjoint from the Exchange

[ActiveDir] Hardware Suggestions

2005-11-07 Thread Edwin
this information in the future. Are there guidelines on recommended hardware for DCs in a domain? MS Exchange seems to be well documented on this but I have not found much on DCs. Thanks, Edwin

RE: [ActiveDir] Hardware Suggestions

2005-11-07 Thread Edwin
I found a MSFT site for planning domain controller capacity. If anyone is interested, you can find it via the URL http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKi t/4af3271a-4407-4ca5-9cd5-e05b79046d08.mspx Edwin -Original Message- From: [EMAIL PROTECTED

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-04 Thread Edwin
cents, Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Aragon Sent: Thursday, November 03, 2005 8:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Limiting User Logon to Specific Machines Joe, I agree, it would be impossible to block all

[ActiveDir] DNS Forwarding

2005-10-27 Thread Edwin
. This article brings me to my question about preventing external DNS forwards. Thanks, Edwin

[ActiveDir] Geographic Domain Setup

2005-10-24 Thread Edwin
replies, Edwin

RE: [ActiveDir] OT: Server With Hyperthreading/Multicore Licensing

2005-10-24 Thread Edwin
not have this luxury.  SQL Server counts each logical processor as an individual processor.  But you do not need to obtain a separate license to be in compliance when using HTT. http://www.microsoft.com/sql/howtobuy/SQLonHTT.doc Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

[ActiveDir] OT Maybe: Import GPO without Domain

2005-04-15 Thread Edwin
and User Configuration sections? Thanks, Edwin

[ActiveDir] DHCP Conflicts

2005-04-11 Thread Edwin
this before? How can I resolve this problem? Thanks, Edwin

RE: [ActiveDir] DHCP Conflicts

2005-04-11 Thread Edwin
There is only 1 DHCP server which also acts as a DC. The reserved IP Address is NOT excluded from the scope. That will hopefully correct that problem once I update the settings. How about the other occasional conflicts with other IP's? What could be a cause for those IP's? Thanks, Edwin

[ActiveDir] Push GPO's to become Local Policies

2005-01-19 Thread Edwin
become local policies on each workstation without visiting each machine? Thank you all for your replies. Edwin

[ActiveDir] How do I push Domain Policies as Local Policies?

2005-01-18 Thread Edwin
make those settings become local policies on each workstation without visiting each machine? Thank you all for your replies. Edwin

RE: [ActiveDir] Domain Name and DNS Problems

2004-12-16 Thread Edwin
will be invested in the upgrade. One lesson definately learned is NEVER to use your already in use domain again for Active Directory. I guess next time management should have sent me to training instead of me having to come up with a solution on my own. Thank you all for your assistance. Edwin On Thu, 2004

RE: [ActiveDir] Domain Name and DNS Problems

2004-12-14 Thread Edwin
Of Edwin Sent: Tuesday, December 14, 2004 9:04 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Domain Name and DNS Problems Hello Everyone. I have an ongoing problem and would like to get some assistance please. The domain that I am currently responsible

[ActiveDir] Domain Name and DNS Problems

2004-12-13 Thread Edwin
Hello Everyone. I have an ongoing problem and would like to get some assistance please. The domain that I am currently responsible for is the first domain that I have ever configured. As a result there was a lot of trial and error and most things were resolved but there remains this one

[ActiveDir] Recycle Bin not being used.

2004-12-02 Thread Edwin
Is it possible to have the Recycle Bin used when roaming profiles are used? I am assuming that files are being deleted just as they would when you delete a file across the network via a UNC which is basically what a roaming profile path is. How can I get use of the Recycle Bin?

[ActiveDir] Roaming Profiles and DFS

2004-11-24 Thread Edwin
it? Below is what I previously wrote. Thank you. Edwin Currently I am working in a test environment with 2 Win2K3 DCs and 1 Win2K3 member server (all standard Edition). The member server is intended to be a File server where a users roaming profiles are stored. On our production

RE: [ActiveDir] Roaming Profiles and DFS

2004-11-24 Thread Edwin
can add is putting our roaming profiles on DFS was a nightmare and I have gone back to not having it on DFS. I now use %variables% instead. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Wednesday, November 24, 2004 7:04 AM To: [EMAIL PROTECTED] Subject: [ActiveDir

RE: [ActiveDir] Roaming Profiles and DFS

2004-11-24 Thread Edwin
to the intended recipient(s), you are hereby notified that any dissemination, disclosure or copying of this communication is strictly prohibited. --- From: Edwin [mailto:[EMAIL PROTECTED] Sent

RE: [ActiveDir] Netlogon won't start

2004-11-16 Thread Edwin
I had a similar problem in the past. Have you tried logging into the local administrator account? Then you could set the Net Logon service to Automatic within the Services Snap-In and then attempt to log into the domain after a server reboot. I did this in the past and everything was good

RE: [ActiveDir] Netlogon won't start

2004-11-16 Thread Edwin
Desmond [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Payton on the web! www.wpcp.org http://www.wpcp.org v - 773.534.0034 x135 f - 773.534.8101 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Tuesday, November 16

[ActiveDir] DFS and Existing FileShare

2004-11-10 Thread Edwin
In our domain we have users with roaming profiles. I would like to use DFS for redundancy and performance. I know that when DFS is initially configured, it creates a share pointing to the DFS root. Does anyone see any problem with configuring a DFS root to an existing share? The

[ActiveDir] Prohibiting Java Applets

2004-10-11 Thread Edwin
Is it possible to block all Java Applets from running on a domain except for those applets that are approved? If so, how? Thank you for your replies, Edwin

[ActiveDir] Unauthorized Java Applets

2004-10-05 Thread Edwin
based version of AOL instant messenger. Of course management shouldnt have to tell them this but as we all know, some people learn things the hard way. Thank you for your replies, Edwin

RE: [ActiveDir] Exchange Authentication and WinXP Workstations

2004-09-22 Thread Edwin
] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Tuesday, September 21, 2004 3:04 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Exchange Authentication and WinXP Workstations Why would this only affect XP clients? I do not have the same problem when using Win2K Pro clients from the outside

RE: [ActiveDir] Exchange Authentication and WinXP Workstations

2004-09-21 Thread Edwin
and steps so far taken. Add software in use to find out what's different about those 2K workstations that have a problem. Al From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Thursday, September 09, 2004 11:15 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir

RE: [ActiveDir] Exchange Authentication and WinXP Workstations

2004-09-21 Thread Edwin
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Tuesday, September 21, 2004 2:14 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Exchange Authentication and WinXP Workstations I created this thread a while ago but something came up that took priority over this question. I would

[ActiveDir] Unauthorized DHCP Requests

2004-09-09 Thread Edwin
, is there also a way to make an exception to the rule should a non-standard naming convention machine require authorized access to the network? Thank you all for your replies. Edwin

RE: [ActiveDir] Exchange Authentication and WinXP Workstations

2004-09-09 Thread Edwin
trace? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Thursday, September 09, 2004 8:57 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Exchange Authentication and WinXP Workstations Recently I was informed that users attempting to connect to our Exchange server

RE: [ActiveDir] IIS and Scripting Question

2004-09-02 Thread Edwin
. If there is a person, I would like to request that they start another thread with this topic. I am sure that I am not the only one with this as a question when it comes to bastion hosts and a domain. Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman

RE: [ActiveDir] IIS and Scripting Question

2004-09-01 Thread Edwin
if such a document exists, but if there is an official statement from Microsoft about it, I would love to begin an argument with my co-workers about it. Thank you, Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Wednesday, September 01, 2004 2:03 PM

[ActiveDir] Joining Computers to a Domain

2004-08-24 Thread Edwin
. Edwin

[ActiveDir] Remote Installation Headaches

2004-08-24 Thread Edwin
I am attempting to use RIS and am getting problem after problem. I posted a question about PXE and the NIC being used and was informed that I would have to download and use RIS specific drivers for the network card I am using.

[ActiveDir] RIS Headaches

2004-08-22 Thread Edwin
the Microsoft Windows Catalog from within Windows Update. I am at a loss here. Can anyone please help? Thank you in advance, Edwin

RE: [ActiveDir] RIS Headaches

2004-08-22 Thread Edwin
Headaches You need to add the drivers, then download the updated inf on the same page, then purge all the oem?.inf/pnf files, then restart the services jlc From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Sunday, August 22, 2004 11:32 AM To: [EMAIL PROTECTED

[ActiveDir] GPO's, RIS and Software Deployment

2004-08-18 Thread Edwin
/tools/ folder of the Win2K3 CD. Thank you all for your replies. Edwin

[ActiveDir] Fileserver and Self-Executing Programs

2004-08-04 Thread Edwin
. Any thoughts? Thanks everyone for your replies, Edwin

RE: [ActiveDir] Fileserver and Self-Executing Programs

2004-08-04 Thread Edwin
there will be more From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Wednesday, August 04, 2004 8:06 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Fileserver and Self-Executing Programs Within our domain, roaming profiles are used. The roaming profiles are limited to 10MB

[ActiveDir] Domain Controller Backups

2004-07-29 Thread Edwin
I have a nightly backup performed on the domain controllers during the overnight hours. This backup only consists of the System State which is run on both DCs and is copied to a different server. Is the System State enough to consider backing up? Will this be enough information to

[ActiveDir] Renaming the Administrator account

2004-07-21 Thread Edwin
information I have about renaming the account is above. Thank you all for your responses. Edwin

RE: [ActiveDir] Renaming the Administrator account

2004-07-21 Thread Edwin
rocks! Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Wednesday, July 21, 2004 7:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Renaming the Administrator account there's no issue renaming it - in 2003 you can actually disable

RE: [ActiveDir] home directory modifications

2004-07-21 Thread Edwin
found that not to be so easy. But if you need a quick solution, then the above might work for you. Edwin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, July 21, 2004 5:48 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir

[ActiveDir] Install MS Outlook Express

2004-07-20 Thread Edwin
on every client machine without visiting each one individually? If there is documentation on the steps necessary to do this, I would greatly appreciate that information. Is there another, maybe better alternative? Thanks for your replies, Edwin List info : http://www.activedir.org/mail_list.htm

RE: [ActiveDir] Install MS Outlook Express

2004-07-20 Thread Edwin
when I get to work. Thank you. Edwin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Perdue David J Contr InDyne/Enterprise IT Sent: Tuesday, July 20, 2004 10:55 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Install MS Outlook Express Edwin, You

[ActiveDir] OT: Active Directory Browser History Files

2004-07-15 Thread Edwin
of reviewing the Firewall logs but I was hoping that there would be an easier way since all the machines are connected to the domain. Thank you all for your replies. Edwin

RE: [ActiveDir] OT: Active Directory Browser History Files

2004-07-15 Thread Edwin
Title: Message Well, it looks like SurfControl is the application that I am going to start looking into. I appreciate all of your responses. Thank you. Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Passo, Larry Sent: Thursday, July 15, 2004 2:20

[ActiveDir] Disk Defragmenting

2004-07-08 Thread Edwin
Would someone please be able to verify if defragmenting a disk is safe on a domain controller? I want to install and use Diskkeeper but would like to get some assurance of its use before its implementation. Thank you in advance for your replies. Edwin

RE: [ActiveDir] Disk Defragmenting

2004-07-08 Thread Edwin
, Robert Sent: Thursday, July 08, 2004 8:59 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Disk Defragmenting It's safe.. I'd just recommend doing it in a quiet period. BR Rob -Original Message- From: Edwin [mailto:[EMAIL PROTECTED] Sent: 08 July 2004 13:51

RE: [ActiveDir] GPO question concerning LOCAL GPO

2004-07-02 Thread Edwin
I just wanted to say that this is an awesome reply! Thank you Darren. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Thursday, July 01, 2004 7:38 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPO question concerning LOCAL GPO A

[ActiveDir] Folder Redirection Errors

2004-07-01 Thread Edwin
or Forwarded folders so I am not sure why the error is being generated. I would appreciate any suggestions as to how to correct these errors. Thank you in advance for your replies. Edwin

RE: [ActiveDir] Folder Redirection Errors

2004-07-01 Thread Edwin
client and not on the DC itself. Thank you for your reply. Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Seyboldt, Volker Sent: Thursday, July 01, 2004 10:58 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Folder Redirection Errors Hi Edwin, we had

RE: [ActiveDir] Folder Redirection Errors

2004-07-01 Thread Edwin
Of Edwin Sent: Thursday, July 01, 2004 10:47 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Folder Redirection Errors Option #1 I will hold off on trying because as you mentioned, it is not an acceptable solution. Unfortunately, KB #274443 was of no use in this case since the errors did

RE: [ActiveDir] Application Log Event Errors

2004-06-25 Thread Edwin
/purgemapcache but I was confused by it because I did not see the switch as an available option when running dfsutil /?. I tried to run it anyways and received an error: Unrecognized option purgemapcache System error 87 has occurred. The parameter is incorrect. Edwin. From

[ActiveDir] Application Log Event Errors

2004-06-24 Thread Edwin
I am getting numerous errors in the Application Event logs that are provided below. Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this. For more information, see

[ActiveDir] Roaming Profiles and Exchange

2004-06-23 Thread Edwin
when logging off or when moving to another computer. At one point, I had the GPO set to delete locally cached copies of profiles but because of the above mentioned had to disable this option. Thank in advance for your responses, Edwin

RE: [ActiveDir] Roaming Profiles and Exchange

2004-06-23 Thread Edwin
but it beats the heck out of having to groom my info store every week or month, and I have a wonderful history of my life in email that I can refer to at any time :-). In any case Edwin, to answer your question--yes you should try avoiding PSTs altogether. Failing that, try to avoid having to roam them--its

RE: [ActiveDir] Quick Launch Bar

2004-06-18 Thread Edwin
Edwin... If you don't roam it, it will still use the local one, not go away. From the way i understand it. This is from the GPO... Lets you add to the list of folders excluded from the user's roaming profile. This setting lets you exclude folders that are normally included in the user's profile

[ActiveDir] Software Restriction Policy

2004-06-18 Thread Edwin
, is there no other alternative? Thank you. Edwin List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Quick Launch Bar

2004-06-17 Thread Edwin
Edwin... Without looking at it, and i can't really test here...I have to assume it's the path somehow. Would be odd for them to lose the file association, but not impossible...heheheheh Perhaps it's looking to the server for the program, which doesn't exist there? John

[ActiveDir] Quick Launch Bar

2004-06-16 Thread Edwin
to trying to download an executable via a web site when you get a warning about its potential contents. What can I do to get rid of this? Thank you in advance for your replies. Edwin

[ActiveDir] Remove Exchange Store

2004-06-16 Thread Edwin
. My question is, how can I remove the temporary Exchange Server within the new domain that is no longer in existence without affecting any of our current settings? Thank you all in advance for your replies. Edwin List info : http://www.activedir.org/mail_list.htm List FAQ: http

[ActiveDir] Roaming Profile Permissions

2004-06-11 Thread Edwin
if this is wise to where it may affect the user. I am sure that there have been required investigations in the past by an Administrator. What is the recommended solution for this without affecting the user? Thank you all for your responses in advance. Edwin

RE: [ActiveDir] MS Exchange Tools on Domain Controller

2004-05-21 Thread Edwin
Controller Yes, just install the ESM on the DC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Friday, May 21, 2004 1:54 PM To: Active Directory List Subject: [ActiveDir] MS Exchange Tools on Domain Controller I have an Exchange server

RE: [ActiveDir] Active Directory and Bastion Hosts

2004-04-23 Thread Edwin
. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. From: Edwin [mailto:[EMAIL PROTECTED] Sent: Friday, April 23, 2004 11:17 AM To: Active Directory List Subject: [ActiveDir] Active Directory and Bastion Hosts Active Directory is a great tool for managing systems

[ActiveDir] Authoritative Domain Problem

2004-03-10 Thread Edwin
I have my DC setup as a DHCP Server as well as a DNS Server. I work for a company that has public DNS records (mycompany.net) that are used to reference servers that are accessed daily. I setup the DC to use mycompany.net as the domain name and now I am having troubles resolving DNS for

RE: [ActiveDir] Authoritative Domain Problem

2004-03-10 Thread Edwin
?scid=kb;en-us;255134. Not sure if this has changed for Win2k3, but definitely worth following up. From: Edwin [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 7:00 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Authoritative Domain Problem I have my DC setup as a DHCP Server as well

RE: [ActiveDir] Authoritative Domain Problem

2004-03-10 Thread Edwin
, vbscript or perl to modify the dumped DNS information if necessary, and a batch file with dnscmd.exe (Windows Support Tools) to add the records in your Win2k3 DNS Hunter From: Edwin [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 9:21 AM To: [EMAIL PROTECTED] Subject: RE

[ActiveDir] Roaming Profile Synchronization

2004-03-09 Thread Edwin
I recently setup Active Directory for the first time and decided to use roaming profiles. I have two Domain Controllers setup at the present = moment using Windows 2003 Enterprise Edition. All client machines are using Windows 2000 Professional. What I am noticing is that at random times,