RE: [ActiveDir] DesktopStandard

2006-12-18 Thread Nathan Casey
IL PROTECTED] 12/18/2006 9:43:15 AM >>> Yes as far as I can tell... Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 > -Original Message- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of Nathan Casey > Sent: Monday, De

RE: [ActiveDir] DesktopStandard

2006-12-18 Thread Nathan Casey
its. The remaining technologies (Microsoft Diagnostic and Recovery Toolset, Microsoft Advanced Group Policy Management, and Microsoft Asset Inventory Service) will be available by the end of Q2 CY 2007. HTH, Laura > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED

[ActiveDir] DesktopStandard

2006-12-15 Thread Nathan Casey
Does anyone have any new info on when MS will update the Desktopstandard product to work with Windows Vista? Thanks Nathan List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

[ActiveDir] MS / Desktopstandard

2006-11-28 Thread Nathan Casey
prevent us from deploying a single Vista PC for 18 months.. Nathan Casey Network Analyst WGS-ISD County of Sonoma [EMAIL PROTECTED] (707) 565-3519 List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com

RE: [ActiveDir] OT: Exchange 2007 and W2K3 R2 DC's on ESX - Optimal lab system

2006-11-27 Thread Nathan Casey
I agree with this..our production ESX infrastructure is based on 3 quad core systems..we haven't even come close to maxing the CPU's or memory but disk i/o is getting high.. Nathan Casey Network Analyst WGS-ISD County of Sonoma [EMAIL PROTECTED] (707) 565-3519 >>> [EMAIL PROTE

RE: [ActiveDir] Can GPO be used to enable File and Printer sharin g?

2006-04-11 Thread Nathan Casey
here is the startup script using snetcfg.exe that I used successfully: SetLocale "en-us" ' do not remove If GetOsVersionNumber = 5.0 Then sSnetcfgPath = "\\sharepath\snetcfgw2k\snetcfg.exe" Elseif GetOsVersionNumber = 5.1 Then sSnetcfgPath = "\\sharepath\snetcfgwxp\snetcfg.exe" Else ' u

RE: [ActiveDir] OT: WSUS

2006-01-11 Thread Nathan Casey
I believe the computer only checks with the WSUS server for updates every 22 hours by default. If you want the computer to check the WSUS for approved updates sooner run "wuauclt /detectnow" You can also edit the local group policy "Automatic Updates detection frequency" to increase how often th

[ActiveDir] replmon on XP SP2

2005-11-18 Thread Nathan Casey
Has anyone used replmon on a XP SP2 PC? When I use replmon as domain admin on an xp workstation I can synchronize everything but domaindmszones and forestdnszones. The error I get is: "The synchronization request failed. This may be because you have insufficient credentials." I do not have the

Re: [ActiveDir] Root Domain on W2K3 SP1 and Child not

2005-11-04 Thread Nathan Casey
vers to fail: http://support.microsoft.com/?kbid=898060 Are you sure you don't mean that hotfix? This required before applying Exchange 2003 sp2 btw. Nathan Casey wrote: > you mentioned that W2K3 SP1 includes the original version of MS05-019 and > that if MS05-019 related issues were being

RE: [ActiveDir] Root Domain on W2K3 SP1 and Child not

2005-11-04 Thread Nathan Casey
you mentioned that W2K3 SP1 includes the original version of MS05-019 and that if MS05-019 related issues were being experienced that the updated version should be applied. I am testing the SP1 upgrade on DC's in the lab and was looking for the updated version here: http://www.microsoft.com/tech

[ActiveDir] OT: HP vs Dell servers

2005-08-12 Thread Nathan Casey
Sorry for the off topic question. We are currently an all HP shop. The accountants in management now want us to justify why we don't switch to Dell servers. I have looked around the web including Gartner but can't find any good Dell vs HP comparison/benchmark testing. Does anyone have any good m

RE: [ActiveDir] Biggest AD Gripes

2005-08-02 Thread Nathan Casey
I would like to second this one: o I dislike the fact that I cannot delegate a "move object" without also delegating the ability to DELETE that object. >>> [EMAIL PROTECTED] 08/02/05 10:47 AM >>> o I dislike the fact that I cannot delegate a "move object" without also delegating the ability to

[ActiveDir] DFS and Access Based Enumeration

2005-06-10 Thread Nathan Casey
Does anyone have and experience yet enabling ABE on a DFS root share? If I enable ABE on the DFS root share, DFS links from the root to other shares only show up when accessed by an admin. ABE is not enabled on the linked shares. Any ideas? Thanks Nathan List info : http://www.activedir.org/

[ActiveDir] Site creation and DNZ zones

2005-03-24 Thread Nathan Casey
I'm not sure of the default behavior here so I have to ask: When I create a new site should a zone for the site be created in the forest wide "_msdcs.domain.com" zone. When I create sites, the site zone gets created in the "domain.com" zone under _sites and forestdnszones but not in the forest

Re: [ActiveDir] [Active Dir] Handling Duplicate Accounts During d omain Migration

2005-03-23 Thread Nathan Casey
Quest's Domain Migration Wizard has options to handle duplicate accounts. >>> [EMAIL PROTECTED] 3/23/2005 11:44:44 AM >>> That's not correct for an intraforest migration. Intraforest migrations are definitely a move and not a copy. Have you copied a user account from a domain in ForestA to anothe

[ActiveDir] Novell client Removal

2005-03-17 Thread Nathan Casey
We are in the process of migrating from Netware 5.1 to AD. Does anyone have any experience with automating the Novell client removal process? The desktops are win2k and above with Novell client 4.82 and above. Thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.active

RE: [ActiveDir] Access Based Enumeration

2005-02-18 Thread Nathan Casey
t;>> That is correct. However, if I get the time to get this fixed this weekend, I'll be happy to share it with you for all your experimental fun. Regards, Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan Casey Sent: Friday, Februa

RE: [ActiveDir] Access Based Enumeration

2005-02-18 Thread Nathan Casey
TECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan Casey Sent: vrijdag 18 februari 2005 18:01 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Access Based Enumeration Does anyone have a good doc on enabling the new 2003 SP1 Access Based Enumeration feature? List info : http://www.active

[ActiveDir] Access Based Enumeration

2005-02-18 Thread Nathan Casey
Does anyone have a good doc on enabling the new 2003 SP1 Access Based Enumeration feature? List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

[ActiveDir] AD PowerPoint presentation

2005-02-08 Thread Nathan Casey
Anyone out there know where I can find a good PowerPoint presentation on AD migration. (why, how, best practice, cost savings, delegation, Novell, etc). Management wants to know why migrate from Netware 5.1. Thanks Nathan List info : http://www.activedir.org/List.aspx List FAQ: http://www.ac

Re: [ActiveDir] Cloning and SIDs

2005-02-03 Thread Nathan Casey
It is necessary to run sysprep or any SID changing utility that you can purchase with imaging software, such as Ghost Walker >>> [EMAIL PROTECTED] 2/3/2005 8:12:26 AM >>> Does a machine's SID change when it is added to a domain, or is the domain SID just appended to the current machine's SID? I a

Re: [ActiveDir] Remote Desktop functionality on Windows 2003

2005-01-25 Thread Nathan Casey
computer configuration, Administrative templates, Windows Components, terminal services. Enable "allow users to connect remotely using terminal services" Nathan Casey Network Analyst WGS-ISD County of Sonoma [EMAIL PROTECTED] (707) 565-3519 >>> [EMAIL PROTECTED] 01/25/05 10:46

RE: [ActiveDir] GPO Processing

2004-12-30 Thread Nathan Casey
Does the PC have a Gig NIC card? http://support.microsoft.com/default.aspx?scid=kb;en-us;326152 >>> [EMAIL PROTECTED] 12/30/2004 10:26:49 AM >>> I had this problem on a PC and I fixed it by simply updating the NIC driver. Have you tried this? _ From: [EMAIL PROTECTED] [mailto:

RE: [ActiveDir] GPO SYSVOL permissions

2004-11-02 Thread Nathan Casey
PROTECTED] On Behalf Of Nathan Casey Sent: Monday, November 01, 2004 2:20 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] GPO SYSVOL permissions Today for the first time I am receiving the following GPMC message when I click either Default Domain Policy or Default Domain Controllers Policy: The perm

RE: [ActiveDir] GPO SYSVOL permissions

2004-11-01 Thread Nathan Casey
IL PROTECTED] On Behalf Of Nathan Casey Sent: Monday, November 01, 2004 2:20 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] GPO SYSVOL permissions Today for the first time I am receiving the following GPMC message when I click either Default Domain Policy or Default Domain Controllers Policy: T

[ActiveDir] GPO SYSVOL permissions

2004-11-01 Thread Nathan Casey
Today for the first time I am receiving the following GPMC message when I click either Default Domain Policy or Default Domain Controllers Policy: The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory. It is recommended that these permissions be consist

[ActiveDir] Centralized vs. decentralized administration

2004-10-20 Thread Nathan Casey
Anyone have a good argument against decentralized administration in a single domain, multi site AD environment. Currently all user, computer, group, etc admin is handled by the IT dept. Now, we need to justify why we should NOT let users at the sites admin their own users, computer, groups, etc. Fo

Re: [ActiveDir] HOSTS file modification via GP?

2004-10-12 Thread Nathan Casey
How about creating a host entry on your internal AD DNS server that points to your company web site, or any other site: your Forward lookup zone = yourcompany.com host record www 1.1.1.1 (ip address of your web site) This should work since your internal DNS server is authorative for yourcompany.co

RE: [ActiveDir] Directory Service event

2004-10-05 Thread Nathan Casey
her DC's don't show the same events even though your backup program says they are being backed up? Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan Casey Sent: Monday, October 04, 2004 5:14 PM To: [EMAIL PROTECTED] Subject: RE: [Acti

RE: [ActiveDir] Directory Service event

2004-10-04 Thread Nathan Casey
occur at the same time every day as if it's a scheduled event? Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan Casey Sent: Monday, October 04, 2004 4:54 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Directory Service event On one of my dom

[ActiveDir] Directory Service event

2004-10-04 Thread Nathan Casey
On one of my domain controllers I am getting the following events once a day in the Directory Service event log: (in order listed) Category: Logging/Recovery Event ID: 210 Description: NTDS (796) NTDSA: A full backup is starting. Category: Logging/Recovery Event ID: 220 Description: NTDS (796) NT

[ActiveDir] GPO loopback

2004-09-22 Thread Nathan Casey
We use a GPO with loopback to lock down our kiosk PC's. The kiosks are in a kiosk OU. The loopback works well to ensure that the kiosks remain locked down no matter who logs on. The problem is, we have an internal trusted NT domain(2 way trust). The users from the NT domain probably won't migrate t

[ActiveDir] user object security

2004-09-02 Thread Nathan Casey
In ADUC, on the security tab of any user, why is the everyone group selected to allow change password?

[ActiveDir] ScriptLogic

2004-06-25 Thread Nathan Casey
We are migrating from Netware 5.1 to AD and are looking at Scriptlogic to replace our Novell logon scripts. Any opinions about Scriptlogic would be appreciated. Thanks Nathan

[ActiveDir] Replication Monitor error

2004-06-03 Thread Nathan Casey
I am getting an error when trying to add a "monitored Server" to Active Directory Replication Monitor.AD config:Empty ROOT with 2 Dc'sProduction domain with 3 DC'scurrently all DC’s are in same site.I installed a new DC in a new site in the production domain. I can monitorthe new server fro

[ActiveDir] disk configuration

2004-05-11 Thread Nathan Casey
I have a question about the best way to separate the AD DB and AD log files.My standard server build is a Compaq DL380 with six 36GB drives and one Compaq Smart Array 5i Controller.Normally I mirror the first two HD's for OS and apps use the other fourdisks for RAID5 with hot spare.For Activ

[ActiveDir] disk configuration

2004-05-11 Thread Nathan Casey
I have a question about the best way to separate the AD DB and AD log files.My standard server build is a Compaq DL380 with six 36GB drives and one Compaq Smart Array 5i Controller.Normally I mirror the first two HD's for OS and apps use the other fourdisks for RAID5 with hot spare.For Activ

[ActiveDir] User properties in ADUC

2004-04-30 Thread Nathan Casey
Is it possible to display user last login information in user properties in Active Directory Users and Computers? Thanks Nathan

[ActiveDir] AD Management and monitoring

2004-04-21 Thread Nathan Casey
I have been asked to evaluate a monitoring solution for AD. The only product I have tested so far is NetPro's suite, Diagnostics for Active Directory (DAD), which I like. Does anyone have experience using the other solutions available such as MOM, NetiQ’s APP Manager for AD, or Quests Managem

[ActiveDir] logon scripts

2004-04-12 Thread Nathan Casey
What is a recommended logon script solution that will work with win9x, win2k/xp clients for drive mapping, etc that works similar to Novell logon scripts?   Example: IF MEMBER OF "GROUP" THEN BEGIN     MAP H:=SERVER1\VOL1: END

RE: [ActiveDir] _Msdcs.domain.com Zone Creation

2004-03-27 Thread Nathan Casey
Thanks for the reply..your answer I was I was thinking was best method. Nathan   Nathan CaseyNetwork AnalystWGS-ISD County of Sonoma[EMAIL PROTECTED](707) 565-3519>>> [EMAIL PROTECTED] 03/26/04 07:09PM >>> Simple answer: It is by design.  In windows 2003, if you have a DNS zone, the DCP

[ActiveDir] _Msdcs.domain.com Zone Creation

2004-03-25 Thread Nathan Casey
I am setting a lab to test AD migration and have a question about _Msdcs.domain.com Zone Creation.dcpromo with DNS configured first:installed DNS and forward lookup zone (domain.gov). Server points to itself as primary DNS server and registered itself in the domain.gov zone.I then ran dcprom