Sorry to send this to the list, but I cant find the address to unsubscribe. Can
anyone help me out?
As much as I love you all, my recent affair with Apple OS X has left me
realising that our love is just a sham and that other delights await me.
Big up'.
Olly
www.g2support.com/backups
Hi,
Im having a problem with the ResetPassword permission. I have a script
that changes a users password, which the IT bods use here. The script
requires that the IT bods have the Reset Password permission on all the
OUs that they manage.
The problem we have is that the Reset Password permission
://www.joeware.net/win/ad3e.htm
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver Marshall
Sent: Tuesday, May 02, 2006 5:12 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] ResetPassword perm and groups
Hi,
Im having a problem with the ResetPassword
Heres the dump of the acl for one of the OUs im looking at. I have
changed the usernames to protect the innocent, but the group in question
is called Password Managers;
Effective Permissions on this object are:
Allow NT AUTHORITY\Authenticated UsersSPECIAL ACCESS
I have a logon script which changes the description of the current user
when they logon, or rather it should do. Whenever I pop that script in
to a logon script it fails with a general access denied error.
The line it fails on it the last of these two;
objUser.Description = strMessage
?) tighten the security on this...granting Self allow on
Write Description should be sufficient.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver Marshall
Sent: Wednesday, April 19, 2006 4:41 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir
/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
Profile:
http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214
C811
D
|-Original Message-
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of
|Oliver Marshall
|Sent: Wednesday, April 12, 2006 1:56
PROTECTED] on behalf of Oliver Marshall
Sent: Wed 4/12/2006 12:45 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Changing a users password
Net user command only works if you have full admin rights. I've google'd
till 2am this morning, haven't found any free script that doesn't use
password
Google is a wonderful thing :)
http://www.dotnetjunkies.com/Tutorial/1A07BA3D-72EC-41E8-9713-557B9189F8
20.dcik
neil
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver Marshall
Sent: 12 April 2006 09:53
To: ActiveDir@mail.activedir.org
Does anyone know of any sources of information that can show me how to
create Query Definition files to be used with the Query manager in ADUC
2003 ?
Olly
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
I have two forests. One at Office A (officeA.co.uk) and one at Office B
(officeB.co.uk). I want to create a two way trust so that both forests
trust each other.
In the Domains Trusts, I create a new entry and enter the domain name
to trust and a password. When I click ok it warns me that the
were worried about
Yesterday? -anon
From: Oliver Marshall
Sent: Thu 1/15/2004 7:16 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
Thanks for the interesting comments
From: Oliver Marshall
Sent: Thu 1/15/2004 7:16 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
Thanks
Can anyone recommend a good quality, lots of uber-nerds, mailing list
for MS Office (ideally 2000 through to 2003) ??
Olly
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
From: Oliver Marshall
Sent: Tue 1/13/2004 12:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO
Does anyone know how I can use a GPO to hide a menu item? You might have
been listening to the Outlook thread going on on this list. I'm told
that it can be done, but I cant find any mention of it anywhere.
Ta
olly
List info : http://www.activedir.org/mail_list.htm
List FAQ:
!
-Original Message-
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 3:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
Because while the Recover Deleted Items addin allows you...err...recover
deleted items a user can also
Yesterday? -anon
From: Oliver Marshall
Sent: Tue 1/13/2004 12:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
Because while the Recover Deleted Items addin allows you...err...recover deleted items
a user can also delete things
Does anyone know a GPO setting that will allow me to prevent users from
accessing the Recover Deleted Items addin in Outlook ? Someone on an
exchange mailing list said that there is a GP setting to prevent this
addin being loaded.
Olly
List info : http://www.activedir.org/mail_list.htm
List FAQ
Anyone know if there
is a GPO setting in w2k server for w2k machines, that will allow me to put a
shortcut or two on everyones desktop? The management have decided that clicking
on Start/Programs etc is too time consuming, so they want shortcuts to all the
commons apps on the users
Can anyone recommend
a decent Windows 2000/XP list ? I'm after something to help with general windows
problems, and networking issues outside of AD.
Any ideas
?
Does anyone
havea script or something to hand that will allow me to create thousands
of users in my AD structure? I need to create a massive AD database so that I
can do a few tests, but to add them by hand will take ages.
Olly
Thanks for all the info. In the end I got the following script working
which reads in names from a list of names in a text file. Its dog slow
though, but still quicker than creating them myself.
' -- SCRIPT CONFIGURATION --
'intNumUsers = 1000 ' Number of users to create
Does anyone know if the OU of a user can be retrieved via a
script ?
I am using the following to TRY and set the description of the
user to its OU (dont ask). but I cant find an OU parameter or similar that i can
query.
For Each objUser in objDomain
objUser.description=objuser.ou
]
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver Marshall
Sent: Friday, December 05, 2003 10:49 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] [Slightly OT] OU of a user in AD
Does anyone know if the OU of a user can be retrieved via a
script
PROTECTED] On Behalf Of Oliver Marshall
Sent: Friday, December 05, 2003 10:49 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] [Slightly OT] OU of a user in AD
Does anyone know if the OU of a user can be retrieved via a
script ?
I am
As i'm sat here
playing on a win2k3 test server, im reading the usual 'Whats new' pages from the
MS site. In one of them it refers to the marvelous benefit I can get from the
Health Monitoring features of AD2003, but i cant find anything on the server
relating to those features, and i've
Add his own user account to the Domain Admins account on the network.
Then get him to log on to each workstation in turn as himself. He will
be able to install anything he likes :)
-Original Message-
From: Jerry Johnson [mailto:[EMAIL PROTECTED]
Sent: 04 December 2003 14:46
To: [EMAIL
No Joke. Its not the best, but then I am taking some assumptions;
1) If he is installing software on each machine individually then it
isnt a big setup by any means
2) Adding one user to each machines admin groups could take a while and
is a pain, even in small setups.
3) He has a backup admin
You can also use the Computer Management snap in via MMC to view the
Shares and Open Files.
Or use PSFILES from http://www.sysinternals.com/
-Original Message-
From: Baekelant, Erik [mailto:[EMAIL PROTECTED]
Sent: 02 December 2003 08:07
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir]
I'm trying to play
with the new abilities of AD2003 to burn a copy of the database to a tape or cd
so that you can restore it on to a new server at another location to save
bandwidth in replication. Thing is, the instructions i have (translated so a bit
tricky to read) say that i need to
not writing an article based on some screenshots...
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 26. November 2003 18:49
To: [EMAIL PROTECTED]
Subject: [ActiveDir] [OT] Novells directory server
Anyone know what the name of the directory server in Novell
Service - AD Core Team
(202) 354-1464
Fax (202) 371-1549
[EMAIL PROTECTED]
|-+--
| | Oliver Marshall |
| | [EMAIL PROTECTED] |
| | Sent by: |
| | [EMAIL PROTECTED
Anyone had any
experience creating password complexity filters for use with the Password
Policies in AD 2003 ? I'm thinking of creating one here that is more complex
than "more than 6 characters" but not so complex as "Must have either A) B) c)
or D)" as users keep phoning me up and cant be
completely blow your
machines up.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver Marshall
Sent: Tuesday, November 25, 2003 7:50 AM
To: [EMAIL PROTECTED]
Anyone had any experience creating password complexity filters for use
Hi all,
Im trying to finish this %^$£ article off, and I was wondering if I could ask you all
for your opinions on which parts of Active Directory 2003 (v2) do you really
appreciate, and which things do you think are missing from AD 2003 (v2)?
I look forward to hearing from you all.
Ta
Olly
PROTECTED]
Sent: 24 November 2003 18:28
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Quick poll for an article
Article? Where's the article you have so far?
-Original Message-
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Monday, November 24, 2003 10:30 AM
To: [EMAIL PROTECTED
Is it possible to
move files and folders across volumes so that the permissions remain the same ?
we have a dir tree that contains huge numbers of files and folders, and i need
to move them to a new volume. If the perms are reset (which is the norm) then it
will take forever to set the
Sorry for the really
off topic posting, but is anyone on the list in, or around, the area of
Salzburg, Austria ? I need to get hold of something from a certain shop there,
and I need someone to see if they can get the phone number for
me.
Thanks
Olly
Perhaps one for Joe and Co here. Is there a tool that can be used to
calculate the amount of traffic that will be generated by AD replication
? Ideally something that would let me do what if scenarios (I love
what if scenarios) where I can chuck in additional users or sites etc.
Olly
List info
Don't know about anyone else, but I cant even get ADMapper to get past
the username/password/domain box. Tried about 10 accounts, even created
a new one with full enterprise rights, and still it wont log on :(
-Original Message-
From: Ellis, Debbie [mailto:[EMAIL PROTECTED]
Sent: 30
is empty forest root with
child domain DC's on which dhcp server runs
HTH
GT
- Original Message -
From: Oliver Marshall [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 28, 2003 2:34 PM
Subject: [ActiveDir] [OT]'ish DHCP authorization error and ADSIEdit
I have the exact
I'm trying to fix an error with the pony DHCP server in windows, but in
the section of the detailed instructions from the MS site, im getting
an odd alert.
I am trying to force replication from one branch office to another. The
schedule is once every two hours, and I cant be arsed to wait. The
times. In that case the queued request would sit in the queue until it
could be completed.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver Marshall
Sent: Tuesday, October 28, 2003 6:10 AM
To: [EMAIL PROTECTED]
I'm trying to fix an error
I have the exact issue detailed in this KB article;
http://support.microsoft.com/default.aspx?scid=kb;en-us;306925
I have done exactly what it says there, allowing loads of time for
replication and rebooting etc etc and I still get exactly the same
error. Using ADSIEdit removes the entries from
OK! Thanks SOOO much for the response. I have had loads of emails these
last few days, and im in a bit of a shock about the number of people
contacting me. Thanks again.
Rather than me add you to the project, could you visit;
www.sourceforge.net/projects/wsdp
Here you can add yourselves to the
Just to let you know the Sourceforge site for the Windows Server
Documentation Project has been approved. Mail me off list and I will set
everyone up on it.
Look forward to hearing from ya :)
-Original Message-
From: Oliver Marshall
Sent: 23 October 2003 09:09
To: [EMAIL PROTECTED
Do you have the ISBN number? Sounds perfect.
Olly
-Original Message-
From: Lou Vega [mailto:[EMAIL PROTECTED]
Sent: 24 October 2003 14:38
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Active Directory Cookbook
Received my very own copy of Mr. Robbie Allen's Tuna book last night
from
(that's an old english saying, might be somewhat stronger in other
languages!!) :)
I have to write an article on AD 2.0 under Windows 2003 server. Thing
is, its been given to me at very short notice, and I
needesome inspiration and some information.
Does anyone know of a site (other
find some inspiration on the O'Reilly site. There's some cool
stuff there.
Cheers!
John
-Original Message-
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: vrijdag 24 oktober 2003 16:55
To: [EMAIL PROTECTED]
Subject: [ActiveDir] AD2.0 info sources
(that's an old english saying, might
Almost an identical situation here. I would also like to know that, as I
am the only one of me here, I could have some documentation that would
help contractors get up to speed on the network. Some day I want a
holiday, with my mobile phone, or my net connection, and then we need to
get a
For us poor peeps at the bottom end of the scale, is there any way of
achieving a similar result using scripts etc ? Sort of like a
roll-your-own server documenting kit ?
I did hear tell of a public (kinda opensource) project to create a wedge
of scripts and various tools that could be used
Administration - Windows 2000
West Corporation
[EMAIL PROTECTED]
-Original Message-
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 22, 2003 4:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] documenting servers
For us poor peeps at the bottom end of the scale
Corporation
[EMAIL PROTECTED]
-Original Message-
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 22, 2003 4:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] documenting servers
For us poor peeps at the bottom end of the scale, is there any way of
achieving a similar
distribution media?
Or is the purpose something else entirely?
-gil
-Original Message-
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 22, 2003 8:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] documenting servers
This is the thing. Im not sure. I was hoping
We have an head office running an AD based network. We have several
smaller satellite offices running workgroup based networks.
We now need to integrate all the offices into one AD so that users can
move able with the same logons, and that all the AD management and
maintainance can be done from
- Windows 2000
West Corporation
[EMAIL PROTECTED]
-Original Message-
From: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Monday, October 20, 2003 3:45 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Remote network AD setup
We have an head office running an AD based network. We have several
: Oliver Marshall [mailto:[EMAIL PROTECTED]
Sent: Monday, October 20, 2003 7:20 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Remote network AD setup
I think,reading between the lines, that OU's would be good. The main
issue is to be able to have all the users, in all the offices existing
under one
Hi,
Does anyone know of any documents relating to configuring Mac OS's (as
many types as possible) so that they authenticate with AD ?
There was one on the Apple site for ages, but its gone and I am trying
to create a good source of Mac info for my site.
Ta
Olly
Very cool, though on my box, .tif is associated with MSPaper.Document,
which is about as helpful as a chocolate teapot really.
Nice command to flex those IT Monkey muscles with.
Olly
ADSSupport.net
http://www.adssupport.net
Dedicated free Active
Hi,
After a forum chat with some visitors, i was wondering if its possible to get hold of
a definitive list of OU permissions for AD Users and Computers. Basically, several
people where trying to allow certain users to be able to do small changes to user
accounts such as unlock an account, or
If you mean in the Members tab of ADUC, i thought that was a limit of the listbox
display control on that page.
If you find a solution I would be interested in knowing
Olly Marshall
ADSSupport.net
www.adssupport.net
-Original Message-
From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL
62 matches
Mail list logo
