I have a need to
automate the creation accounts in organizational units. I have attempted
to get this script to work but was not successful. Does anyone out there
have any working examples where I could plug my variable into. I am sure
it is a syntax issue.
thanks,
Joe
=
My understanding is only all the PDC's and BDC's (domain controllers)
themselves must be W2K. Workstations and member servers do not have to be
W2K.
Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Abbiss, Mark
Sent: Monday, June
Is this a resource tool or third party.
Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, June 19, 2001 8:34 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Extending User interface
ADSI edit
-Original
these issues would please share them. I would like to
know how you handle the security. Your approach may work for us with the
proper security in place.
Thanks,
Joe
Sargent
==Office
(423) 585-6836 Fax (423) 585-2630 Pager
(877
Not for sure, but my guess is you need to have them setup to do DNS to your
domain controller and enter WINS addresses if you have a wins server.
Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of somchai
indharasophang
Sent: Tuesday, July 10
I have information that I want in the global catalog about employees. I
only want the info (home add and phone) viewed by authorized people. How
can restrict who has access to search the Active Directory and limit what
they can view?
Thanks,
Joe Sargent
List info: http://www.activedir.org
The service is still running to allow for other clients to validate. I
forget the service name but it will allow connections even in native is my
understanding. We currently have DOS boot disk we use boot machines and do
diskless installs. Works fine for us. I use a Win98 boot disk with the
T
rs to see
the Windows 2000 display name and never actual account names. Can this be
done?
Thanks in advance.
Joe Sargent
==
Office (423) 585-6836 Fax (423) 585-2630Pager (888) 724-9041
Office - mailto:[EMAIL PROTECTED]
Joe Sa
und right.
Sal Khan
-Original Message-----
From: Joe Sargent [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 24, 2001 8:14 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Hiding Account Names
We have adopted a policy to use Social Security Numbers as account logins in
our not native mode Windows 200
;d seriously consider leaving that school if I were
a student and learned that was the plan.
-Original Message-
From: Joe Sargent [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 24, 2001 2:38 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Hiding Account Names
I broke down and spent
Look on your Windows 2000 Server CD for ADMINPAK.MSI. This is the MS
installer package for the domain control console. It is under one of the
directories, not I386.
-Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mike Tonazzi
Sent
("ACCTNAME") gPassword =
RS("Password")
Set fadsdomainobj = GetObject("WinNT://" & gDomain & "/"
& gaccname & ",user")
fadsdomainobj.GetInfo fadsdomainobj.SetPassword
gPassword fadsdomainobj.Put "PasswordExpired",
CLn
C.CC.TN.US
Does anyone have anything to offer? Is it worth
it to move to the non-Internet name? It would resolve the manual DNS
entries (at least lower them anyway). Has anyone else done this? Has
anyone looked at this same subject and decided not to
change?
Thanks in advance,
J
Below
are some snips of the code I use. What I have below needs to be dressed up
but you can see how I set the root or child domain when adding accounts and the
OU to add them too. I have vbs script setup to use command line switched
and all this is set when it is run.
HTH
Joe
Sargent
Title: dNSHostName
I done
research and decided to keep things as they are but change the DNS servers some
and get better security. I will check into this tool. It could
be very useful.
Thanks,
Joe
Sargent
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL
communicate with
the NT 4.0 PDC and then errors out.
Is there not a way to upgrade an old NT4 BDC and bring it back on-line to
join another domain as a member server?
Thanks,
Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED
upgrade to W2k. Dcpromo the server back
to member server. Join the server to the domain.
-Original Message-
From: Joe Sargent [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 9:18 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Upgrade BDC
I have an NT 4.0 BDC that I want to
join as a member
server.
-Original Message-
From: Joe Sargent [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 9:28 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Upgrade BDC
I have already upgraded to w2k. Can I go back?
-JS
-Original Message-
From: [EMAIL PROT
One note that may not be clear. I did connect it back to the network and I
can ping other devices.
-JS
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Joe Sargent
Sent: Wednesday, November 14, 2001 9:18 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir
actually set in the account will be set
for the end of December 21, 2001. This is because the value you are enter
is the date it expires. So if you want to use the account on Jan. 1, then
set the expire to Jan. 2.
HTH
-Joe
Sargent
-Original
Message-From: [EMAIL PROTECTED]
Opps I
misread what you wanted. I was reading account expires not password.
Sorry. My response was no help.
-JS
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Matthew
SaundersSent: Wednesday, December 05, 2001 6:10 AMTo:
[EMAIL PROT
When I used DCDIAG during an EXCHANGE installation I found it to be flaky.
I discovered that it was reporting errors that existed in the event logs.
Once I cleared the logs and rebooted it reported no errors. Has anyone else
had this same issue?
Thanks,
Joe Sargent
-Original Message
You can use a VBS script to add the account, set the password, and enable
it. You can even add it to the OU of your choice. You can also set things
like when account expires, address, tile, phone, etc. of the user you are
adding.
Here is some sample code that I pulled from my script. This won'
printer to be created
timeout 6
::make the created shared printer the default printer
rundll32 printui.dll,PrintUIEntry /y /q /n \\Sevier-pdc\HP4050-S200-Out
HTH
Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Benjamin
I meant to say show how to CONNECT to a shared printer.
-Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Joe Sargent
Sent: Friday, February 08, 2002 1:05 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Default Printer
Here is my 2
ified VPN client. I have the vpn clients authenticated
via a Radius server and all the network info, DNS, WINS, etc is passed to the
machine and the client handles the routing and DNS issues. So far my users
are happy!
HTH
Joe
Sargent
-Original Message-From:
[EMAIL PROT
.
HTH
Joe
Sargent
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Rittenhouse,
CindySent: Friday, February 15, 2002 10:20 AMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] VPN W2K
Cannot See Other Computers Except the Ser ver
I am unable to find this utility at the site. There is DUMPACL that shows
up in a search either.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of David Lloyd
Sent: Friday, February 15, 2002 11:51 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] accountEx
a
repair and a boot to a bootable floppy but I get the same error. I can
actually see the partition and the files while in repair. My guess is the
boot sector got screwed up. Any ideas??? I really do not want to do
a reinstall.
Thanks,
Joe
Sargent
I can find that
value?
Thanks,
Joe
Sargent
:[EMAIL PROTECTED]]On Behalf Of Chris
McEvoySent: Monday, February 18, 2002 9:36 AMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] More Info...
Inaccessible_boot_device - not AD but I need help !
Have
you tried an in-place upgrade?
-Original Message-From: Joe Sargent
Best practice is two DNS servers. One for your AD and one for the world.
With the correct commands on an AD DNS server a hacker can get some very
useful info.
I attended a 2 day MS sponsored Active Directory University. The instructor
stressed the importance of not having your AD DNS where it c
You may want to consider a few things
How many users really travel from computer to computer
How big the profiles can get and server space taken
How long it will take to download the profiles each time the users logs on
Are any users going to be across slow networks or wan links
We initially
Can anyone point me to a good exchange list. Time for another new project.
Thanks
Joe Sargent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Hutchins, Mike
Sent: Thursday, March 07, 2002 9:58 AM
To: '[EMAIL PROTECTED]'
Subject: Recall: [Act
D DNS.
There is too much info an AD DNS could give up about your organization. Hack
that and the bad guy is half way home. You know the machine names, and ip. All
you need then is a few free hack tools to start banging away at the
administrator accounts on the PDCs.
HTH
Joe Sargent
-Original Me
Anyway you could report which server has the FSMO roles also or if the
target server has any of the roles if it is one machine at a time?
I would also like a copy
Thanks,
Joe Sargent
-Original Message-
From: Ellis, Debbie [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 02, 2002 2:10
Title: Message
I have
not tried this with tracking logins, but I am sure it will work. I have
done it when applying reg hacks etc. via batch. Just create a script that
runs at logon and logoff that writes to a txt file on a server somewhere.
You can even put in the time and date etc. Wor
Title: Message
Nope. Once in native mode the whole forest must be native.
Only other forest can be mixed and connected via trust.
-Original Message-From: Brian Pietrewicz
[mailto:[EMAIL PROTECTED]] Sent: Thursday, April 04, 2002 9:27
AMTo: [EMAIL PROTECTED]Subject: [Active
Title: Message
OK,
maybe I am confused. But I thought the whole forest had to be native not
indv. child domains. Maybe I spoke too soon?
-Original Message-From: David M Ha
[mailto:[EMAIL PROTECTED]] Sent: Thursday, April 04, 2002 9:44
AMTo: '[EMAIL PROTECTED]'Subject: RE:
in, and have had to go back and manually change to mode to native
mode. So I think I'm right in saying that the mode (native vs. mixed)
is specific to the domain versus the entire forest.
-Original Message-From: Joe Sargent
[mailto:[EMAIL PROTECTED]]Sent: Thur
have a sample
script you could post?
Thanks,
-Henrique
- Original Message -
From:
Joe
Sargent
To: [EMAIL PROTECTED]
Sent: Wednesday, April 03, 2002 8:06
PM
Subject: RE: [ActiveDir] tracking users
logon to AD
I
have
Title: Message
I would like to pull the last
date logged from AD. If a user has not logged on in a while then I
would like disable the account. I can disable the account with no
problems. I would prefer to pull this info using a vbscript. Is this
possible.
Also, when I disable the
acc
I want to block Domain Users (or another group) in a child domain from
searching AD and getting user info from the root domain. I tried the
security tap on the Root Domain and applied DENY to read for the Domain
Users from the child domain. I changed the property to apply to This
Object and All
I have had a lot of problems to get mailboxes created for Exchange 2000.
My guess is your problem is the same. Mine was account password
policies. You need to set the "userAccountControl" property to allow
the user to be created with no password. That is done with this
code
' enable passwo
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 24, 2002 12:42 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADC Programming
But I am not using Exchange 2000, I am using Exchange 5.5. Thank you
for the info though. I am sure it will be useful.
-Original Message-
From: J
45 matches
Mail list logo
