RE: [ActiveDir] OU and Policies

2004-11-12 Thread Michael_Parent
Since the computer (not the user) is in OU2 with inheritance blocked, you are only preventing the user from getting the computer policy, Based on what you have set up, the user will get the user policy no matter what OU his computer is in. The results you are getting are consistent with what you

RE: [ActiveDir] Can someone describe teh cross-forest login proce ss?

2004-03-12 Thread Michael_Parent
Right we opened up a hole between the two DCs (GCs actually) and nothing besides web traffic to the resource server. Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 joe [EMAIL PROTECTED] Sent by: [EMAIL

RE: [ActiveDir] Can someone describe teh cross-forest login proce ss?

2004-03-08 Thread Michael_Parent
Would you believe we did not have to open the firewall between the resource server and the domain controller in the opposite forest? Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 GRILLENMEIER,GUIDO

[ActiveDir] Can someone describe teh cross-forest login process?

2004-03-01 Thread Michael_Parent
I am looking for a brief synposis of the Windows 2000 cross-forest login process. User in Forest A, accesses Resource in Forest B (one-way trust where Forest B trusts Forest A). How does the user get authenticated? Specifically, when a resource is trying to authenticate a user from a trusted

RE: [ActiveDir] OUs by server function?

2003-11-03 Thread Michael_Parent
I hope I can make the next one :-) Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Gil Kirkpatrick [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 10/31/2003 04:23 PM Please respond to ActiveDir To:

RE: [ActiveDir] OUs by server function?

2003-10-31 Thread Michael_Parent
Understood. Is there a practical limit to the number of filtered GPOs on an OU ? Why do you feel it is bad to create OUs for GPO only? Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Myrick, Todd (NIH/CIT)

RE: [ActiveDir] OUs by server function?

2003-10-31 Thread Michael_Parent
I think I am being slowly converted :-) Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Tony Murray [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 10/31/2003 06:02 AM Please respond to ActiveDir To:

RE: [ActiveDir] OUs by server function?

2003-10-31 Thread Michael_Parent
You might be thinking of WMI filtering which is new in 2003. Here we are referring to *security-group* filtering. Welcome to the list - I am relatively new here myself... :-) Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902)

RE: [ActiveDir] OUs by server function?

2003-10-31 Thread Michael_Parent
What does one have to do to become an MVP? Does it involve parting bodies of water or turning them into wine? :-) Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Rich Milburn [EMAIL PROTECTED] Sent by:

[ActiveDir] OUs by server function?

2003-10-30 Thread Michael_Parent
I am currently erdesigning our OU structure and was wondering: Has anyone done an OU structure that accounts for server function i.e. file and print, web, database? Was it useful? What other computer structures have you use successfully? Michael Parent MCSE MCT Analyst I - Web Services ITOS -

RE: [ActiveDir] OUs by server function?

2003-10-30 Thread Michael_Parent
Heh, yeah I understand those are the 2 primary criteria for creating OUs. Let me try again :-) Here's the thing, I am not sure delegation of computer objects buys you much for servers, so that leaves us with GPO. On the surface there seems to be a case to dividing them up for this purpose, but

Re: [ActiveDir] Active Directory Cookbook

2003-10-24 Thread Michael_Parent
Agreed - I got mine yesterday from Amazon and I must say that this should be on the shelf of every AD administrator. Period. Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Lou Vega [EMAIL PROTECTED] Sent by:

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Michael_Parent
It's old school windows nt stuff :-) Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Bridges, Samantha [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 10/09/2003 09:54 AM Please respond to ActiveDir

RE: [ActiveDir] OT: DS Conference

2003-10-03 Thread Michael_Parent
I also vote that the Fall DEC be in the Virgin Islands or some tropical destination. Having just been brutalized up here (Halifax NS) by hurricane Juan and given that fall is hurricane season in the Caribbean, I would think that might not be the best choice :-/ Michael Parent MCSE MCT Analyst I

RE: [ActiveDir] OT: DS Conference

2003-10-02 Thread Michael_Parent
I was there and must say it was very worthwhile! Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Roger Seielstad [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 10/02/2003 01:32 PM Please respond to ActiveDir