RE: [ActiveDir] Event Log consolidation tool from MSFT

2005-01-11 Thread Myrick, Todd (NIH/CIT)
=EventLog.TXT -ASB FAST, CHEAP, SECURE: Pick Any TWO http://www.ultratech-llc.com/KB/ On Tue, 11 Jan 2005 12:19:29 -0500, Myrick, Todd (NIH/CIT) <[EMAIL PROTECTED]> wrote: > Quick question, > > Some time ago, MSFT was beta testing a tool to collect server event logs and > du

[ActiveDir] Event Log consolidation tool from MSFT

2005-01-11 Thread Myrick, Todd (NIH/CIT)
Quick question, Some time ago, MSFT was beta testing a tool to collect server event logs and dump them into a SQL database. Is there any updated information? Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http:

RE: [ActiveDir] Windows Server 2003 Clustering.

2005-01-04 Thread Myrick, Todd (NIH/CIT)
http://labmice.techtarget.com/windows2000/Clustering/admin.htm Has several articles on clustering. http://labmice.techtarget.com/windows2000/Clustering/troubleshoot.htm This section covers troubleshooting. Also the Cluster.exe is a good place to look as well. Toddler (Newbee to clustering!) --

[ActiveDir] Question about NTFS Security Object Picker Filter

2004-12-29 Thread Myrick, Todd (NIH/CIT)
In AD Users and Computers, under View Filter, you have the option to filter the number of responses by the object picker in both AD tools. In windows 2000 does the NTFS security have that same ability? If so where do you set it? Thanks, Todd List info : http://www.activedir.org/mail_list.htm

RE: Exchange in VM (was RE: [ActiveDir] Running DCs in Virtual Se rver 2005 - whitepaper)

2004-12-29 Thread Myrick, Todd (NIH/CIT)
e virtual disks from within the virtual machine? And, does anyone know if the 3rd part tools are supported in the virtual environment? -- nme -Original Message- From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Monday, December 20, 2004 3:34 AM To: ActiveDir@mail.activedir.or

[ActiveDir] A tool for those who answer frequent questions on the list...

2004-12-29 Thread Myrick, Todd (NIH/CIT)
http://www.answertool.com/ ; > Toddler List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] AD and ISP deployment

2004-12-29 Thread Myrick, Todd (NIH/CIT)
ent planning an AD for an ISP world vs a corporate environment. Thanks again. steve ----- Original Message - From: "Myrick, Todd (NIH/CIT)" <[EMAIL PROTECTED]> To: Sent: Monday, December 27, 2004 7:15 AM Subject: RE: [ActiveDir] AD and ISP deployment > MCIS was MS&#

RE: [ActiveDir] Event viewer warning

2004-12-27 Thread Myrick, Todd (NIH/CIT)
Have you tried performance monitor and alerts? You can create a script that runs when your threshold is met to email you, etc. You might want a CLI tool to actually send the email. Todd -Original Message- From: rubix cube [mailto:[EMAIL PROTECTED] Sent: Monday, December 27, 2004 11:3

RE: [ActiveDir] Account Expiration Failure

2004-12-27 Thread Myrick, Todd (NIH/CIT)
How many day's are they off. There is a known issue with accounts migrated from Windows NT to Windows 2000. NT 4 didn't handle the Daylight savings time the same as 2K and 2K3. Todd -Original Message- From: Rogers, James [mailto:[EMAIL PROTECTED] Sent: Monday, December 27, 2004 11:04 A

RE: [ActiveDir] AD and ISP deployment

2004-12-27 Thread Myrick, Todd (NIH/CIT)
MCIS was MS's platform for hosting Exchange and Web, but they have since retired that initiative. I would start here in your search. I would also look at the AD planning site. http://www.microsoft.com/serviceproviders/ What objectives are you trying to accomplish? Todd Myrick -Original

RE: [ActiveDir] JRNL_WRAP_ERROR with Single DC

2004-12-27 Thread Myrick, Todd (NIH/CIT)
I would just follow the instructions listed in the KBs.  You might have gotten the error when the domain controller was serviced packed.   Todd Myrick   From: Noah Eiger [mailto:[EMAIL PROTECTED] Sent: Monday, December 27, 2004 1:55 AM To: ActiveDir@mail.activedir.org Subject:

RE: [ActiveDir] domain controller name

2004-12-27 Thread Myrick, Todd (NIH/CIT)
Nltest from the support tools is also good at listing the DC's. Nltest /dclist: You can also do a NSLOOKUP on the domains A record to get IP's. Todd -Original Message- From: Dan Boghici [mailto:[EMAIL PROTECTED] Sent: Sunday, December 26, 2004 9:20 AM To: ActiveDir@mail.activedir.org S

RE: [ActiveDir] Citrix and AD migrations

2004-12-21 Thread Myrick, Todd (NIH/CIT)
One other point to be made, a lot of the third-party tools for migration have this issue solved and automated. Not that this would help you now, but you might review their websites and review how they approach migrations to get an idea of what you might run into in the future. I am familiar with

RE: [ActiveDir] Citrix and AD migrations

2004-12-21 Thread Myrick, Todd (NIH/CIT)
Not sure if you are aware of it or not but there is a list dedicated to CITRIX and Windows TS Issues. http://www.thin.net It is pretty active, and I am sure there has to be someone who has had your pain. Here are a few KB's to be aware of that point to Well Known KBs about TS http://support.micr

RE: [ActiveDir] Change Control Systems

2004-12-20 Thread Myrick, Todd (NIH/CIT)
While we are at it, I will audit your changes personally for $200,000.00 a year.. personally. No software to buy or upgrade. I just need two bathroom breaks a day, 1 30 minute lunch, and 8 hours of sleep (6 if you really are pushing.) ;> Happy Holiday's Toddler -Original Message-

RE: Exchange in VM (was RE: [ActiveDir] Running DCs in Virtual Se rver 2005 - whitepaper)

2004-12-20 Thread Myrick, Todd (NIH/CIT)
Man this sucks, I didn't know this White Paper existed. I have been working on documenting AD on VM's for both VS2005 and VMware ESX. You might be experiencing the fragmentation due to using the feature that dynamically expands the volume as it uses disk space. You might try just mapping raw dis

RE: [ActiveDir] Got an honorable Mention...

2004-12-07 Thread Myrick, Todd (NIH/CIT)
MAIL PROTECTED] Sent: 12/7/2004 8:09 PM Subject: Re: [ActiveDir] Got an honorable Mention... Myrick, Todd (NIH/CIT) wrote: http://www.windowsitpro.com/ITProlympics/index.cfm?code=msfthtmlinvite <http://www.windowsitpro.com/ITProlympics/index.cfm?code=msfthtmlinvite> I would have won a

RE: [ActiveDir] OT: Service Recovery

2004-12-02 Thread Myrick, Todd (NIH/CIT)
Without knowing what service you are trying to fail, I think the best thing to do is kill the process, or try setting the password on the account to something incorrect. Here is a good source I found that identified many different ways to simulate failures. http://students.depaul.edu/~jabsher/the

RE: [ActiveDir] Got an honorable Mention...

2004-12-02 Thread Myrick, Todd (NIH/CIT)
Sorry All,   I was sending this message to a friend on the list, and I used my inbox to send, so it went out to the list instead.   My apologizes.   Todd     From: Myrick, Todd (NIH/CIT) Sent: Thursday, December 02, 2004 9:14 AM To: [EMAIL PROTECTED] Subject: [ActiveDir

[ActiveDir] Got an honorable Mention...

2004-12-02 Thread Myrick, Todd (NIH/CIT)
http://www.windowsitpro.com/ITProlympics/index.cfm?code=msfthtmlinvite   I would have won at least an IPOD if I could have figured out Lab 2.  I think that Lab was bugged though.    Todd  

RE: [ActiveDir] Monitoring Replication

2004-12-01 Thread Myrick, Todd (NIH/CIT)
Depends on the size of your forest and how many domains; I am partial to Directory Analyzer for monitoring and alerting for forest with multiple domains. They have a stand alone monitor that is web enabled, or they can integrate with MOM and HP Openview. HP Openview has a set of AD tools. You mi

RE: [ActiveDir] IT PrOlympics Challenge on WindowsITPro

2004-12-01 Thread Myrick, Todd (NIH/CIT)
against the Canadians since the next DEC is scheduled for Vancouver B.C. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Tuesday, November 30, 2004 4:33 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] IT PrOlympics

RE: [ActiveDir] IT PrOlympics Challenge on WindowsITPro

2004-11-30 Thread Myrick, Todd (NIH/CIT)
Well maybe at the Next DEC Gil will have another AD Set of AD challenges for the Americans verses the Europeans. What do you think Gil? Toddler -Original Message- From: Ulf B. Simon-Weidner [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 30, 2004 5:05 AM To: [EMAIL PROTECTED] Subjec

RE: [ActiveDir] IT PrOlympics Challenge on WindowsITPro

2004-11-30 Thread Myrick, Todd (NIH/CIT)
didn't qualify if I won so I didn't bother figuring it was just a bunch of multiple choice questions. Too bad - the labs would've been fun.   --Brian Desmond [EMAIL PROTECTED] Payton on the web! www.wpcp.org   v - 773.534.0034 x135 f - 773.534.8101   From: My

[ActiveDir] IT PrOlympics Challenge on WindowsITPro

2004-11-29 Thread Myrick, Todd (NIH/CIT)
Greetings, So who here took the Windows IT Pro challenge? What did you all think? The challenge ended yesterday. So I figure it is a safe topic to talk about now. My impressions are as follows. Overall I had a good time taking the challenge. I think the overall concept is very good, and I ch

RE: [ActiveDir] What can you *do* with AD??

2004-11-29 Thread Myrick, Todd (NIH/CIT)
How about this take. 1. Network service used for identifying, provisioning, securing, and presenting network resources. (Users, Groups, Computers, Printers, Shares, Contacts, Physical Networks, and Subnets) 2. Platform for implementing policy based management of Microsoft Windows 2000 or greate

RE: [ActiveDir] GPO and Sysvol size

2004-11-28 Thread Myrick, Todd (NIH/CIT)
Darren, Great info: I have grown concerned about our environment as well. We have over 27 different organizations within our AD, and possibly 50 different delegations. We normally allow 4 GPO's per delegation, so we could be seeing this issue in the future as well. Thanks, Todd -Origina

RE: [ActiveDir] Roaming Profiles and DFS

2004-11-24 Thread Myrick, Todd (NIH/CIT)
You want to use Robocopy to copy the profiles to a DFS Share, or between the two DC and the file server?   Todd   From: Edwin [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 24, 2004 8:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Roaming Profiles and DFS   Than

RE: [ActiveDir] Roaming Profiles and DFS

2004-11-24 Thread Myrick, Todd (NIH/CIT)
Edwin,   It is not recommended to store user profiles on DFS volumes.  The reason is because there could be a replication issue that could corrupt the volume.  Here are two good articles that cover profiles.  The last one has a best practice guide.   http://www.lsa.umich.edu/lsait/Train

RE: [ActiveDir] Replication Problem in Active Directory

2004-11-24 Thread Myrick, Todd (NIH/CIT)
1265 Errors can happen for a variety of reasons. How about sending the results of a DCDIAG, NETDIAG, REPADMIN /SHOWREPS from each machine. You might also look at trying some of the newer tools made available this month. NETPRO's Directory Troubleshooter is really slick, and also Quest's new AD T

RE: [ActiveDir] How to Enable a Warning Message During Windows Lo gon Welcome

2004-11-08 Thread Myrick, Todd (NIH/CIT)
We had a similar situation in my organization where we when the user presses Control+Alt+Del They get the GPO that sets the Legal Notice, but we also needed the notice to pop up after the user logged in. Our solution was to use the GPO, plus a small C program that created a window with the text af

RE: [ActiveDir] Excel plugin for directory access

2004-11-02 Thread Myrick, Todd (NIH/CIT)
I got the tool,   Pretty slick, takes some getting used to, and I haven’t done any live modifications yet, but could be quite useful for bulk updates, etc.   Todd   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 02, 2004 2:02 PM To: [EMAIL PROTECTED

RE: [ActiveDir] Application Partition Replication

2004-10-28 Thread Myrick, Todd (NIH/CIT)
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, October 28, 2004 4:33 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Application Partition Replication We started seeing strange problems with our Directory replication recently when bringing up

[ActiveDir] Application Partition Replication

2004-10-28 Thread Myrick, Todd (NIH/CIT)
Title: [ActiveDir] Remote DSL link We started seeing strange problems with our Directory replication recently when bringing up new Windows 2003 DC in our Hub and Spoke Site design.  Our network has a lot of firewalls, domains, and business units, and we have managed to coordinate most of

RE: [ActiveDir] What attribute determines the Schema Master Role?

2004-10-27 Thread Myrick, Todd (NIH/CIT)
You forgot, comes with rubber chicken to beat Admins who change FSMO roles without telling AD Admin... Hehe Todd -Original Message- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 27, 2004 2:27 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] What attribute det

RE: [ActiveDir] Replication and the compression algorithm

2004-10-27 Thread Myrick, Todd (NIH/CIT)
Nothing like getting publicly called out... hehe Todd -Original Message- From: joe [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 27, 2004 8:08 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Replication and the compression algorithm That would seem to be unusual. Possibly there

RE: [ActiveDir] Problems Adding Computers to AD

2004-10-27 Thread Myrick, Todd (NIH/CIT)
Check these two sources and see if they answer your questions. http://www.chicagotech.net/neterrors.htm http://hidev.com/Technical/neterrors.asp Todd Myrick -Original Message- From: Jacob Walker [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 26, 2004 4:34 PM To: [EMAIL PROTECTED] Su

RE: [ActiveDir] Exchange OT:

2004-10-25 Thread Myrick, Todd (NIH/CIT)
Title: Re: Exchange OT: I agree with Joe on this one.  I attended a meeting with Microsoft in regards to Exchange and AD Disaster recovery.  They had EMC, and a Business continuity planning company that specialized in developing plans for crisis.  This ½ day meeting educated me a lot on the

RE: [ActiveDir] Extranet's

2004-10-25 Thread Myrick, Todd (NIH/CIT)
Title: [ActiveDir] Trusting Domain SIDs Here are some sources to reference in your design process.   http://www.microsoft.com/technet/security/topics/identity/idmanage/P1Plat_4.mspx   Couple of points to Raise,   To support this infrastructure you will require DNS and Additiona

RE: [ActiveDir] Group ID Code Attribute

2004-09-30 Thread Myrick, Todd (NIH/CIT)
perty Page Extension to hook into the existing admin tools, or write an addin that extended the right-click menus etc. In either case it's a fair bit of work. Glenn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursda

RE: [ActiveDir] Group ID Code Attribute

2004-09-29 Thread Myrick, Todd (NIH/CIT)
lto:[EMAIL PROTECTED] Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, September 29, 2004 11:16 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Group ID Code Attribute     Greetings,   We have a requirement for encoding an entry on our AD groups with an ID code in an attribute.  I have been ask

[ActiveDir] Group ID Code Attribute

2004-09-29 Thread Myrick, Todd (NIH/CIT)
Greetings, We have a requirement for encoding an entry on our AD groups with an ID code in an attribute. I have been asked to look into ways to best accomplish the requirement. I have reviewed the AD schema, and there doesn't appear to be an attribute dedicated to this function already. (We are

RE: [ActiveDir] Stopping a GC from doing Authentications

2004-09-09 Thread Myrick, Todd (NIH/CIT)
he Chief Information Officer National Park Service (202) 354-1464 (direct) (202) 371-1549 (fax) [EMAIL PROTECTED] |-+------> | | "Myrick, Todd | | | (NIH/CIT)" | |

RE: [ActiveDir] Stopping a GC from doing Authentications

2004-09-09 Thread Myrick, Todd (NIH/CIT)
ED] http://msetechnology.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, September 09, 2004 2:46 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Stopping a GC from doing Authentications T

RE: [ActiveDir] Stopping a GC from doing Authentications

2004-09-09 Thread Myrick, Todd (NIH/CIT)
02) 371-1549 (fax) [EMAIL PROTECTED] |-+------> | | "Myrick, Todd | | | (NIH/CIT)" | | | <[EMAIL PROTECTED]> | | | Sent by:

[ActiveDir] Stopping a GC from doing Authentications

2004-09-09 Thread Myrick, Todd (NIH/CIT)
Is it possible to configure a GC to perform GC functions, but to disable the ability to process authentication request?  I was asked this question and figured this would be an interesting topic here.  I know it is possible to mess with the SRV records to lower the priority of the server, et

RE: [ActiveDir] Universal Group user population

2004-08-23 Thread Myrick, Todd (NIH/CIT)
when the non-local domain resides in the same forest and you are connected to a global catalog server in the local domain." A hotfix is available. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Monday, August 23, 200

[ActiveDir] Universal Group user population

2004-08-23 Thread Myrick, Todd (NIH/CIT)
I have a Question about adding people to a Universal Group. I have some Admins that own a Universal Security Group, and have added users from a child domain to the group. When they look at the Universal Group members, they see the user is a member of the group. But when they look at the users pr

[ActiveDir] Today us SAAD

2004-07-30 Thread Myrick, Todd (NIH/CIT)
http://www.sysadminday.com/ Just a FYI. Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] DeForestation

2004-07-14 Thread Myrick, Todd (NIH/CIT)
Title: RE: [ActiveDir] DeForestation You might check with Quest.  They have an Exchange Migration tool that is supposed to be able to sync free/busy info.  You have to go ORG to ORG I think though.   Todd   From: Kern, Tom [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 13, 2004

RE: [ActiveDir] Another new joeware tool - GCChk

2004-07-13 Thread Myrick, Todd (NIH/CIT)
Where is STEWART KWAN when you need him to chime in… about this.  Trying to see if the key word notification system works.   Joe, I am running one more scan, I will send you the results and we can discuss it more.  I will share with the rest once I am complete my analysis.   Thanks,  

RE: [ActiveDir] Another new joeware tool - GCChk

2004-07-12 Thread Myrick, Todd (NIH/CIT)
Joe,   Thanks a Bunch!   Todd   From: joe [mailto:[EMAIL PROTECTED] Sent: Sunday, July 11, 2004 5:14 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Another new joeware tool - GCChk   Ok, those of you who have been following Todd's recent adventures may have come to the

RE: [ActiveDir] 2003 DC Promo Question....

2004-07-09 Thread Myrick, Todd (NIH/CIT)
... joe -Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, June 24, 2004 9:58 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] 2003 DC Promo Question Greetings, I have a Windows 2000 forest that has been Forest

RE: [ActiveDir] 2003 DC Promo Question....

2004-07-09 Thread Myrick, Todd (NIH/CIT)
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, June 24, 2004 9:58 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] 2003 DC Promo Question Greetings, I have a Windows 2000 forest that has been Forest Prepped and had the root domain of the forest domain

RE: [ActiveDir] 2003 DC Promo Question....

2004-07-09 Thread Myrick, Todd (NIH/CIT)
o... joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, June 24, 2004 9:58 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] 2003 DC Promo Question Greetings, I have a Windows 2000 forest that has been Forest Pre

RE: [ActiveDir] 2003 DC Promo Question....

2004-07-09 Thread Myrick, Todd (NIH/CIT)
ng ~Eric will chime in or someone else will say something though I am surprised I see no responses to this post and it was sent a couple of weeks ago... joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, June 24,

[ActiveDir] Question about KDC error 11.

2004-07-07 Thread Myrick, Todd (NIH/CIT)
Greetings everyone, Happy 4th. Got a question for you all. I got an Event ID 11 saying that I had a duplicate SPN in the AD for a record. So I followed the instructions on Eventid.net to identify the source. Using LDP, I discovered that several GC's in domains seemed to have the dorked up SPN r

RE: [ActiveDir] DNS Records and GC's

2004-06-28 Thread Myrick, Todd (NIH/CIT)
Man after reading my response, I am starting to thing I regressed in my ability to communicate clearly. I apologize for all the bad grammar. Todd -Original Message- From: Myrick, Todd (NIH/CIT) Sent: Monday, June 28, 2004 2:28 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DNS

RE: [ActiveDir] DNS Records and GC's

2004-06-28 Thread Myrick, Todd (NIH/CIT)
Thanks for the second set of eyes. I have an Exchange guy that is trying to argue against the inclusion of AD Integrated DNS zones, because in his POV the number of changes to DNS records would incur would cause the GC's replicate like crazy. I haven't heard anyone really complain to loudly a

[ActiveDir] DNS Records and GC's

2004-06-28 Thread Myrick, Todd (NIH/CIT)
I have a quick question. In Windows 2000. If AD-Integrated storage is used for DNS zone data. Is the data indexed in GC's or is it just the zone info? I used LDP to connect to a GC, and I was able to browse the NC of a domain that had AD-Integrated DNS. When it came to looking at the data with

[ActiveDir] DDNS record registration behavior

2004-06-24 Thread Myrick, Todd (NIH/CIT)
Title: DNS Issues - ipconfig /flushdns  I just want to verify a behavior of DDNS registration.   AD integrated, and Primary Zones will register dynamic registrations directly when requested, with AD integrated DDNS offering the ability to require that the registration be secured.   Seco

[ActiveDir] 2003 DC Promo Question....

2004-06-24 Thread Myrick, Todd (NIH/CIT)
Greetings, I have a Windows 2000 forest that has been Forest Prepped and had the root domain of the forest domain prepped as well as another domain tree root domain prepped. I plan to follow the recommendations outlined in the article below in order to upgrade to 2003. My plan is to transfer FS

RE: [ActiveDir] When a domain is Switch to Native Mode... what ev ent Event ID is logged and where?

2004-06-17 Thread Myrick, Todd (NIH/CIT)
n > DC=Mydomain, DC=ForestRootDom, DC=tld object. > Value of 0=Native level domain > Value of 1=Mixed level domain > > al > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd > (NIH/CIT) > Sent: Wednesday,

[ActiveDir] When a domain is Switch to Native Mode... what event Event ID is logged and where?

2004-06-16 Thread Myrick, Todd (NIH/CIT)
Does anyone have this information handy? I am researching it now... Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

[ActiveDir] SRV Record registration by Non-DC's

2004-06-03 Thread Myrick, Todd (NIH/CIT)
We have seen a number of SRV record registrations for hosts for LDAP that aren’t DC’s.  Has anyone experienced this before?   Thanks,   Todd

RE: [ActiveDir] Indexing attributes in GC's

2004-06-02 Thread Myrick, Todd (NIH/CIT)
in2k3 GC will not do a full sync in either case.) --Doug -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, June 02, 2004 10:40 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Indexing attributes in GC's Thank

RE: [ActiveDir] Indexing attributes in GC's

2004-06-02 Thread Myrick, Todd (NIH/CIT)
ies http://support.microsoft.com/default.aspx?scid=kb;EN-US;232517 --Doug -Original Message- Wrom: YOQKEDOTWFAOBUZXUWLSZLKBRNVWWCUFPE [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, June 02, 2004 9:35 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Indexing attri

RE: [ActiveDir] replicate attributes in GC's

2004-06-02 Thread Myrick, Todd (NIH/CIT)
Sorry, I meant to say replicated to the GC... not Indexing -Original Message- From: Myrick, Todd (NIH/CIT) Sent: Wednesday, June 02, 2004 12:35 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Indexing attributes in GC's Greetings all, I have a quick question about indexing attribut

[ActiveDir] Indexing attributes in GC's

2004-06-02 Thread Myrick, Todd (NIH/CIT)
Greetings all, I have a quick question about indexing attributes in GC's. If you select an attribute to be indexed in a GC. Then decide later to not want the attribute indexed any longer, so you deselect the attribute for indexing in a GC. Will the GC's automatically remove the attribute, or do

[ActiveDir] LDAPS to DCs

2004-05-20 Thread Myrick, Todd (NIH/CIT)
I think this thread has been on here before, but I just wanted to verify it once more. In order to use LDAPS on DC's Microsoft Documentation says a CA needs to be installed on the DC. Does anyone have any information on other methods to do LDAPS without the CA requirement? Thanks, Todd List info

RE: [ActiveDir] Aelita enterprise manager

2004-05-19 Thread Myrick, Todd (NIH/CIT)
I think most people know my position on Aelita/Quest (Man it is funny to say that in the same sentence). We are currently using EMM and I believe it has done everything promised without issue. I highly recommend getting On-site support if your migration is large. Also ARM (ERD) for AD and Exch

RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-17 Thread Myrick, Todd (NIH/CIT)
rt.   Wook   From: Myrick, Todd (NIH/CIT) Sent: Mon 5/17/2004 10:52 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Orphaned GC Entry... How do I clean it up? I finally had Success in removing "Read Only" Lingering Object after using the script outlined

RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-17 Thread Myrick, Todd (NIH/CIT)
ng context in the forest.     Todd From: Myrick, Todd (NIH/CIT) Sent: Thursday, May 13, 2004 1:22 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?   Okay, I will double check…   Todd   From: joe [mailto:[EMAIL PROTECTED] Sent

[ActiveDir] Verifying Site and Subnet Behavor one more time.

2004-05-13 Thread Myrick, Todd (NIH/CIT)
Lets say I my organization has a Class B network. 129.169.0.0/16 So I create a subnet object for 129.169.0.0/16 and associate it site A. Then my organization starts to subnet the 129.169 network, and I now have a network that needs its own site. So I create a subnet object 129.169.1.0/24 and as

RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-13 Thread Myrick, Todd (NIH/CIT)
ng (I believe) the displayName. You can easily have an object with the displayname of "Myrick, Todd (NIH/CIT)" yet have the username be something like TODDISCOOL.   I just wanted to be really sure before sending you down the lingering objects direction because that means other bad thin

RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-13 Thread Myrick, Todd (NIH/CIT)
ould do something like     alldc domain.com "adfind -h -default -f name=idname -dn"     If you need to put quotes in the command you want to run against every server then do it something like   alldc domain.com "adfind -h -default -f \"name=idname\" -dn"    

RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-12 Thread Myrick, Todd (NIH/CIT)
hread back in January or so; this is the tail end http://www.mail-archive.com/[EMAIL PROTECTED]/msg13088.html and you can do alternate searches to get the full discussion. Good luck...   Hunter   From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 12,

RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-12 Thread Myrick, Todd (NIH/CIT)
7097  Maybe somebody else has a better way of removing that object that should be gone anyway.   Al    From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 12, 2004 4:12 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Orphaned GC Entry... How do I clean it up? There

RE: [ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-12 Thread Myrick, Todd (NIH/CIT)
like you have a GC that wasn't supposed to be there, but I'm not sure I follow completely.       From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 12, 2004 3:09 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Orphaned GC Entry... How do I c

[ActiveDir] Orphaned GC Entry... How do I clean it up?

2004-05-12 Thread Myrick, Todd (NIH/CIT)
Greetings all, we are seeing an entry appear in our GC’s that is not in the original location.  It appears after it was deleted, it did not replicate out the deleted item, and now us causing ADC issues.   http://support.microsoft.com/default.aspx?scid=kb;en-us;293474   The recommended M

RE: [ActiveDir] Need to confirm a behavior in AD Sites as it per tains to authenti cation.

2004-05-10 Thread Myrick, Todd (NIH/CIT)
ne hop away, the process here is random. So if the DC locator process did use site link costs it would rationalise the process a bit and take some of the randomness away. Here is the kb article that explains all. http://support.microsoft.com/?id=247811 -----Original Message-

RE: LIKELY ADV: RE: [ActiveDir] Need to confirm a behavior in AD Sites as it pertains to authenti cation.

2004-05-07 Thread Myrick, Todd (NIH/CIT)
that explains all. http://support.microsoft.com/?id=247811 -Original Message- From: [EMAIL PROTECTED] on behalf of Myrick, Todd (NIH/CIT) Sent: Fri 07/05/2004 14:50 To: [EMAIL PROTECTED] Cc: Subject: [ActiveDir] Need to confirm a behavior in AD Sites as it p

[ActiveDir] GPO's

2004-05-07 Thread Myrick, Todd (NIH/CIT)
Does anyone have a ADM script or know how to set the From Event Logs from allowing Guest access? "Directory Service Event Log" "File Replication Event Log" "DNS Event Logs" Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm L

RE: [ActiveDir] Need to confirm a behavior in AD Sites as it pert ains to authenti cation.

2004-05-07 Thread Myrick, Todd (NIH/CIT)
wrote a great article about the DC discovery process on Windows & .Net magazine here: http://www.winnetmag.com/Article/ArticleID/37935/37935.html   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Friday, May 07, 2004 6:51 AM To: [EMAIL PROTEC

[ActiveDir] Need to confirm a behavior in AD Sites as it pertains to authenti cation.

2004-05-07 Thread Myrick, Todd (NIH/CIT)
I am searching for an article that identifies the behavior that of how authentication DC’s are selected based on AD sites.   Here is why.   Our default site cost for all our sites in the hub and spoke architecture is 10.     We had a situation where we have a BDC “Domain H that is in

RE: [ActiveDir] Joining computer to a domain... And Kpassword po rt 446.

2004-04-08 Thread Myrick, Todd (NIH/CIT)
es this to determine whether a client computer is gaining access to a domain controller over a slow link to apply Group Policy or to download a roaming user profile. Todd Myrick ____ From: Myrick, Todd (NIH/CIT) Sent: Tuesday, April 06, 2004 9:42 AM To: [EMAIL PROTECTE

RE: [ActiveDir] Joining computer to a domain... And Kpassword po rt 446.

2004-04-06 Thread Myrick, Todd (NIH/CIT)
.   This might help   http://support.microsoft.com/default.aspx?scid=kb;en-us;832017   Santhosh   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Monday, April 05, 2004 9:26 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Joining computer to a

RE: [ActiveDir] Joining computer to a domain... And Kpassword po rt 446.

2004-04-06 Thread Myrick, Todd (NIH/CIT)
service guys which ports we require, they decided what to open up and didn't provide feedback).   Ulf B. Simon-Weidner   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Montag, 5. April 2004 07:26 To: [EMAIL PROTECTED] Subject: [ActiveDir] Jo

RE: [ActiveDir] AD Consultants

2004-04-06 Thread Myrick, Todd (NIH/CIT)
I highly recommend Dean as well..   Todd   From: joe [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 06, 2004 2:26 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD Consultants   http://www.msetechnology.com/   This is where Dean Wells works, they are out of Florida but

[ActiveDir] Joining computer to a domain... And Kpassword port 446.

2004-04-05 Thread Myrick, Todd (NIH/CIT)
Title: Message Greetings all...   I just had someone stop by my office asking what ports need to be open to allow a machine to join a domain.  It appears these security “experts” feel that they need to limit the communication both inbound… and outbound.  (Don’t get me started on the outbo

RE: [ActiveDir] Kerberos event ID's 677

2004-04-05 Thread Myrick, Todd (NIH/CIT)
http://www.microsoft.com/downloads/details.aspx?FamilyID=7dfeb015-6043-47db-8238-dc7af89c93f1&DisplayLang=en   Microsoft just published a Kerberos Troubleshooting White Paper…  It is pretty good.   Todd   From: Eric Fleischman [mailto:[EMAIL PROTECTED] Sent: Saturday, April 0

[ActiveDir] Wirelesss / VPN DDNS updates

2004-03-17 Thread Myrick, Todd (NIH/CIT)
Title: OT: Exchange 5.5 SMTP Log Parser Hey gang,   I am doing some quick research about the effects of allowing Windows 200x and clients that support dynamic updates effect on wireless networks, and VPNs.   What seems to be happening now is that we have host that are enabled for wirele

RE: [ActiveDir] Microsoft Patch

2004-03-17 Thread Myrick, Todd (NIH/CIT)
Title: Message You mean like MIIS…   Marchitecture…..  Strikes again.   Todd   From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 12:03 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Microsoft Patch   Ahhh geez.  Deal with it, Smart Ass.  T

RE: [ActiveDir] ADPREP problems

2004-03-10 Thread Myrick, Todd (NIH/CIT)
:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADPREP problems   Isn’t it SETUP.EXE /forestprep SETUP.EXE /domainprep SETUP.EXE /adprep   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, March 10, 2004 1

RE: [ActiveDir] ADPREP problems

2004-03-10 Thread Myrick, Todd (NIH/CIT)
Good point Lynden,   Must run the ADPREP /Forestprep first,   Then run the ADPREP /Domainprep on each Domain.   Todd   From: Philadelphia, Lynden - Revios Toronto [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 1:40 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveD

RE: [ActiveDir] ADPREP problems

2004-03-10 Thread Myrick, Todd (NIH/CIT)
Some of the articles I have seen related to your issue point to possible Virus corruption.  Have you checked that?   Todd   From: Brad Martin [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 11:50 AM To: Active Directory Mailing List Subject: [ActiveDir] ADPREP problem

RE: [ActiveDir] [Lessons Learned]: Schema Mismatch promoting firs t K3 DC to GC in production forest... Several new experiences.

2004-03-08 Thread Myrick, Todd (NIH/CIT)
--Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Monday, March 08, 2004 9:21 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] [Lessons Learned]: Schema Mismatch promoting firs t K3 DC to GC in production forest... Several new experience

RE: [ActiveDir] [Lessons Learned]: Schema Mismatch promoting firs t K3 DC to GC in production forest... Several new experiences.

2004-03-08 Thread Myrick, Todd (NIH/CIT)
Thanks Joe, Below are the pre SP1 AD hotfixes we are testing with our deployment. These are only the ones for DC's... we also apply about 15 pre SP1 hotfixes that deal with security issues as well. E2K3 and 2K GC's Upgraded to 2K3GC's http://support.microsoft.com/default.aspx?scid=kb;EN-US;832

RE: [ActiveDir] recommendation for bridgehead server?

2004-03-08 Thread Myrick, Todd (NIH/CIT)
If you have firewalls protecting networks, I recommend isolating them as sites, and setting up preferred bridgehead servers and site link bridges. Todd -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Saturday, March 06, 2004 4:03 PM To: [EMAIL PROTECTED] Subject:

RE: [ActiveDir] Delegating Access to the AD Deleted Items contain er...

2004-02-14 Thread Myrick, Todd (NIH/CIT)
t without doing something worse in my opinion.     joe     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, February 12, 2004 2:57 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Delegating Access to the AD Deleted Items container

  1   2   3   4   >