RE: [ActiveDir] Read-Only Domain Controller and Server Core

2006-07-31 Thread Nathan Muggli
if RO-PAS happens it will be a “negative” PAS in that the marking in the schema would mean that the attr is NOT replicated. That way new vanilla attributes are replicated to a RODC which would minimize app compat.   -Nathan Muggli RODC Program Manager   From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] Imaging NT5+ DCs == Bad (was: best practice?)

2005-05-08 Thread Nathan Muggli
As the writer and owner of the VS-DC doc, I can attest to the fact Brett was present on the review email threads last year :-) Furthermore, the doc is correct. If you follow the recommendations and practices in the "Running DCs in a Virtual Server 2005" then Microsoft will support the configuratio

RE: [ActiveDir] How much of the DIT is cached in RAM ?

2005-04-14 Thread Nathan Muggli
Checking the working set size of LSASS is not reliable. There's process overhead for things like lsa session handles and other stuff related to the security sub system. The most accurate method is to enable the ESE Database performance counters and look at "Cache Size". To enable the DB counters,

RE: [ActiveDir] 2003 SP1 RTM

2005-03-31 Thread Nathan Muggli
We'll be releasing documentation soon. For now, here's a quick list of new features (note this is a not a comprehensive list for AD). 1) Support for DCs in Virtual Servers. Replication is halted and the system stops advertising if an improper restoration has occurred (USN rollback). 2) Replicati

RE: [ActiveDir] Anyone use Server Performance Analyzer?

2005-02-24 Thread Nathan Muggli
the trace APIs a lot, but I haven't used SPA much at all. It looks like it does a nice job of summarizing statistics and identifying key resource users, but I haven't explored it much.   Is there interest in a session at DEC on SPA?   -g   From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] Anyone use Server Performance Analyzer?

2005-02-23 Thread Nathan Muggli
much.   Is there interest in a session at DEC on SPA?   -g   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan Muggli Sent: Wednesday, February 23, 2005 12:30 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Anyone use Server Performance Analyzer? When I was

RE: [ActiveDir] Anyone use Server Performance Analyzer?

2005-02-23 Thread Nathan Muggli
Title: Disabling Inactive Users When I was still in IT I used SPA (and its predecessor ADPERF) all the time to troubleshoot performance issues. Personally it’s my favorite AD operations tool (beating out LDP).   You can definitely get performance data for specific LDAP queries (filter, s

RE: [ActiveDir] W32Time and *nix

2005-02-17 Thread Nathan Muggli
I'm still here :) Regarding: " If you are running Windows Server 2003, it *may* not allow non-domain members to sync with it out of the box. " NTP is not a secure protocol. You can sync non-domain joined severs with a DC. SNTP and NTP are exactly the same network packet. The only differe

RE: [ActiveDir] time server

2005-01-10 Thread Nathan Muggli
P client using a SNTP source.       joe     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nathan Muggli Sent: Monday, January 10, 2005 3:02 PM To: ActiveDir@mail.activedir.org; Send - AD mailing list Subject: RE: [ActiveDir] time server I own the

RE: [ActiveDir] time server

2005-01-10 Thread Nathan Muggli
Title: time server I own the time service for Windows, so I can field the OS question. The NTP server in Windows 2003 is NTP V3 RFC compliant and third party NTP clients can (well *should*) be able to sync with it. When you say “doesn’t seem to recognize”, is there an error message? How doe