[ActiveDir] Odd Logon Delay with 2byte transfers

2004-11-05 Thread Eric_Jones
Hi everyone, I have a truly intriguing one for you. We have recently begun to experience an inconsistent problem where by interactive network logon onto a Windows 2000 or Windows 2003 server may take upwards of 40 mins to complete. The authenticating domain controller is on a gigabit link to the

Re: [ActiveDir] GPO's not always applied.

2004-10-04 Thread Eric_Jones
I've had a similar problem. In digging through the problem, I found some of the following, usually by tracing through the eventlog on the respective machine. Computer account had a problem in the domain - just needed to be removed and put back in GPO policy processing - changed respective

[ActiveDir] Admin Share access for Non-Admins

2004-09-07 Thread Eric_Jones
Security Guru question... I read somewhere...don't know where, that it is possible to grant a power-user or otherwise non-admin the ability to access administrative shares such as admin$, c$,...etc. I believe that this is possible as of Windows 2003 and possibly Windows 2000. I'm in a situation

[ActiveDir] W2k3 DNS Scalability

2004-07-22 Thread Eric_Jones
Potentially interesting oddity occurred today... Our primary and secondary Windows 2003 / AD integrated DNS server services abended at almost the exact same time. I have custom WMI monitoring set to auto-restart them, send email, call the president, and of course...raise the national threat

[ActiveDir] W2k3 DNS Scalability - More NFO

2004-07-22 Thread Eric_Jones
Potentially interesting oddity occurred today... Our primary and secondary Windows 2003 / AD integrated DNS server services abended at almost the exact same time with the following error message in the eventlog: Reporting queued error: faulting application dns.exe, version 5.2.3790.0, faulting

[ActiveDir] Tivoli Gateway on Windows 2003 DC - BAD?

2004-06-01 Thread Eric_Jones
Looking for some guidance / help... Our Enterprise Systems Management Group is in the process or rolling out Tivoli to all locations. It doesn't seem logical or best practice, to me, to put such an application on a Windows 2003 DC. When testing TMF 4.1 components on a test Windows 2003 DC,

RE: [ActiveDir] Tivoli Gateway on Windows 2003 DC - BAD?

2004-06-01 Thread Eric_Jones
I completely agree. I just wanted to ensure that I wasn't amiss with disagreeing with putting Tivoli Managed Node components on a W2k3 DC. We're aiming for MOM and its corresponding integration. I've looked at the AD Option provided by Tivoli and am not excited at all. I'm having to write a

Re: [ActiveDir] HELP URGENT how to recover exch2000 admin account d eleted

2004-06-01 Thread Eric_Jones
Quite Ingenious... Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com clister [EMAIL PROTECTED]

[ActiveDir] Active Directory and Other LDAP Integration

2004-04-28 Thread Eric_Jones
All, we are in search of the elusive single sign-on... We are designing/testing pieces of what may become a multi-platform authentication strategy. We've begun with the authentication integration with IBM's Websphere. While we've been successful in its integration (having Websphere on a

RE: [ActiveDir] Active Directory and Other LDAP Integration

2004-04-28 Thread Eric_Jones
Thanks all for the feedback. We are a very centralized shop as well (and seem to be on a company buying spree...). The Enterprise Security team really wants to make AD the strategic direction for authentication strategy as well part of a staged user provisioning and automation mechanism.

RE: [ActiveDir] Active Directory and Other LDAP Integration

2004-04-28 Thread Eric_Jones
No, MIIS is not being used. I don't believe that the Security Group reviewed the product. They are about to pilot/implement CA Enterprise Admin. Like MIIS, it has hooks into some of the major LDAPs and is supposed to be very scriptable. In fact, although they have an AD integration piece,

RE: [ActiveDir] W2k3 AD DC DR - Need Immediate Help/Advice

2004-04-16 Thread Eric_Jones
Thanks for the quick response. That's the route that I wanted to take. Happy to see a second on the opinion. Thanks again...executing plan now. Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com

Re: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Eric_Jones
Link appears not to work [for me]. And I haven't been able to find the updated doc on Microsoft's website. Can anyone else get to this link. (anxiously waiting...for almost a year now...) Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com David Adner

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide - Update

2004-04-01 Thread Eric_Jones
Thanks, but that's the one for Windows2000. I just saw a post on Microsoft's AD newsgroup. Microsoft (Jason Robarts) states that they are having a problem with the download site and are working to fix it. Jason Robarts is the MSFT person that originally posted the link on MSFT's AD related

RE: [ActiveDir] Released! Windows Server 2003 Active Directory Branch Office Guide

2004-04-01 Thread Eric_Jones
Yeah! Huston...we have documentation... Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com Eric Fleischman

Re: [ActiveDir] Domain clients hangs before logon, multiple issues

2004-04-01 Thread Eric_Jones
The problem may not necessarily be configuration related. Are there any startup scripts? More specifically, are there any settings that require/force the respective machines to connect to any specific network hosts. I'm wondering if the problem may relate to the inconsistently consistent

[ActiveDir] Revising Site Design

2004-02-03 Thread Eric_Jones
Hello All, I'm revising our global site design, to further reduce DCs and get more efficient use of bandwidth. I'm finding that we have a number of physical sites that do not necessarily have enough users to constitute a DC and who also have high-speed connections to multiple other locations

RE: [ActiveDir] Revising Site Design

2004-02-03 Thread Eric_Jones
Perfect! That is exactly what I needed to confirm. I truly appreciate the help. Eric Jones, Senior SE Intel Server Group (W) 336.424.3084 (M) 336.457.2591 www.vfc.com |-+-- | | Roger Seielstad| | |

Re: [ActiveDir] Event Log monitoring tools

2003-12-18 Thread Eric_Jones
Using WMI to write scripts to monitor servers, specifically event logs works extremely well. I did just that with WMI at our company. I went as far as to script out the permanent monitoring of processes, processor, memory, disk, various eventlog combinations, and various filesystem details. Your

[ActiveDir] Unorthodox NT4 - W2k3 Migration Plan???

2003-10-16 Thread Eric_Jones
Hello everyone, I'm looking for some peer feedback on part of a migration plan. We are currently an NT4 environment. We've decided to go with W2k3 AD for our migration. We're doing a parallel migration into a W2k3 Native functional level forest. This was specifically to give us easier

RE: [ActiveDir] Pagefile sizes... Its that time of year again.

2003-08-15 Thread Eric_Jones
Maximum pagefile size is not 4GB. The limit for a manually configured pagefile is 4GB. When set to System Managed, the page file(s) will be whatever the server needs. You 'must' use the setting of system managed to accommodate servers with more that this amount of memory. Otherwise the

Re: [ActiveDir] OT: Tivoli

2003-07-14 Thread Eric_Jones
Here ya' go. You will probably enjoy managing with Tivoli's current products. I'm monitoring our entire W2k3/AD lab environment with Tivoli. I think they've gotten it right this time (with customization). http://publib-b.boulder.ibm.com/Redbooks.nsf/Portals/TivoliTME10MailingList Eric

RE: [ActiveDir] OT: Tivoli

2003-07-14 Thread Eric_Jones
Tivoli today is not nearly as horrible on the Windows Server Platform as it may have been before. Reference the following article...starting at about paragraph 7: http://www.informationweek.com/story/showArticle.jhtml?articleID=6502661 IBM's IBM Tivoli Monitoring products are nearly