RE: [ActiveDir] Installation Priviledges only on a DC

2003-07-19 Thread Rick Kingslan
up... It's possible) the deny should override other permissions. (Now, Joe - what am I missing...?? ;0) ) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] Last Logon Script

2003-07-18 Thread Rick Kingslan
Yes - the best way is to programatically collect the name of all of the DCs, and then loop through them, collecting the specific information for the users. Then, parse back through the user information to find the REALLY last logged on time. Hope this helps Rick Kingslan MCSE, MCSA, MCT

RE: [ActiveDir] Last Logon Script

2003-07-17 Thread Rick Kingslan
ser you are looking for has not authenticated against the DC that is queried then the user (for all you know) has never logged on.  :-/   Good luck!   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone        F

RE: [ActiveDir] Locking Down User Information Fields in AD

2003-07-16 Thread Rick Kingslan
lly in the next 3 - 4 years, we can get some traction on that one..  Yeah, right.  :-/   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf O

RE: [ActiveDir] Locking Down User Information Fields in AD

2003-07-16 Thread Rick Kingslan
Maybe someone can indicate how to restrict the field to numeric only (it's not already???  Huh - never tried, I guess.), I suspect it's a schema mod -  but I thought that I answered the rest of the question, did I not?   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MV

RE: [ActiveDir] what to do with DMZ servers

2003-07-16 Thread Rick Kingslan
, and feel free to re-direct.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John McGlincheySent: Wednesday, July 16, 2003 9:20 PMTo: [

RE: [ActiveDir] AD DNS/DHCP issue/question

2003-07-16 Thread Rick Kingslan
Title: Message It has to have a kerberos ticket in Secured Updates, IIRC.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin

RE: [ActiveDir] Locking Down User Information Fields in AD

2003-07-16 Thread Rick Kingslan
.  SELF is great for this, unless you REALLY want to assign this explicitly to each and every user.  Denys, as always are very nasty and a misplaced one can be very hard to track down.  Apply this on to an OU for your users, leaving the Administrative accounts unscathed.   Rick Kingslan  MCSE

RE: [ActiveDir] Adding machines to OU directly

2003-07-16 Thread Rick Kingslan
s is a property of the object.   Take your time as you go through this.  If you get a grasp of what happens in this delegation, then the rest of your permissions tasks will be much easier.   Good luck!   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - w

RE: [ActiveDir] Service pack 4 and DCs

2003-07-15 Thread Rick Kingslan
Title: Service pack 4 and DCs In our test environment and my lab here at home, I have a mixture of DCs and a mixture of SP levels.  No problems noted with SPs fighting each other - at least from SP 2 up.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert

RE: [ActiveDir] Printer Script

2003-07-14 Thread Rick Kingslan
Bingo! ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bryan Schlegel Sent: Monday, July 14, 2003 8:21 PM To

RE: [ActiveDir] Quick AD integrated DNS question :)

2003-07-14 Thread Rick Kingslan
27;hit the wrong nerve'. And, he was asking ME to Woa, so if anyone should be offended, it should be me (and, I wasn't). Personally, I think that this is about enough of this thread. Not constructive. Let's move on. 'Nuff said. Rick Kingslan MCSE, MCSA, MCT Microsoft MV

RE: [ActiveDir] Quick AD integrated DNS question :)

2003-07-14 Thread Rick Kingslan
partitions can handle DNS - and do.  The DomainDNS and ForestDNS are just that, for all intents and purposes.  They are AD Application parts handling DNS for just DNS servers - and no DNS data need be on the DCs, unless it too, is a DNS server once the full DNS app partition is configured.

RE: [ActiveDir] Quick AD integrated DNS question :)

2003-07-14 Thread Rick Kingslan
.02.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger SeielstadSent: Monday, July 14, 2003 10:28 AMTo: '[EMAIL PROTECTED]&#x

RE: [ActiveDir] what to do with DMZ servers

2003-07-14 Thread Rick Kingslan
Title: Message No - we have a completely separate forest for the Extranet.  Pardon for any confusion.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [ActiveDir] what to do with DMZ servers

2003-07-11 Thread Rick Kingslan
plementing a not perfectly 'optimal' implementation (but very workable and viable) is better than waiting until you have the best solution, only to find that the window was missed or confidence is in question. Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssocia

RE: [ActiveDir] admt 2.0 - nt4 computer migration

2003-07-11 Thread Rick Kingslan
e box. Had to do this numerous times as workstations took too long and we needed to determine the real status of the process. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [

RE: [ActiveDir] admt 2.0 - nt4 computer migration

2003-07-11 Thread Rick Kingslan
Agent. Then, it really doesn't matter under what context it runs - it's not there. I would try and map to the admin$ share, copy an executable to the directory, then execute the program. Just so that you can prove that map, copy and execute. Rick Kingslan MCSE, MCSA, MCT Microsoft MV

RE: [ActiveDir] what to do with DMZ servers

2003-07-11 Thread Rick Kingslan
Title: Message LOL!   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger SeielstadSent: Friday, July 11, 2003 9:45 AMTo: '[

RE: [ActiveDir] what to do with DMZ servers

2003-07-11 Thread Rick Kingslan
AD and MS communication nuances FUN?!?!  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger SeielstadSent: Friday, July 11, 2003

RE: [ActiveDir] what to do with DMZ servers

2003-07-11 Thread Rick Kingslan
t the moment if this is pay or free (suspect pay - it usually is when you really need it...) but I just can't imagine what would posses someone to believe that what they are proposing is even remotely acceptable in any environment in today's computing world.   Rick Kingslan  MCSE, MCS

RE: [ActiveDir] admt 2.0 - nt4 computer migration

2003-07-11 Thread Rick Kingslan
truly enforce WHO can run WHAT - then this could be an issue. With that being said - this agent (ADMT), in my experience, runs at the LocalSystem context, and therefore should not be subject to the rules of a ruleset applied by system policy, AFAIK. Rick Kingslan MCSE, MCSA, MCT Microsoft MV

RE: [ActiveDir] what to do with DMZ servers

2003-07-10 Thread Rick Kingslan
and difficult (OK - without turning your firewall into a cheese grater) the rules will be to deal with replication, etc to accommodate a domain in a DMZ?   Say your prayers now   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com

RE: [ActiveDir] Identity Management using AD

2003-07-10 Thread Rick Kingslan
e Identity Management, given the discussions that we had.  Obviously, this has been in the works for some time for MMS to morph.   I can't say that I remember - were you there for that meeting (about 12 Server MVP's and about 10 MS folks packed into a conference room)? Rick Kingslan  MCSE

RE: [ActiveDir] OT: A utility to read SID's

2003-07-10 Thread Rick Kingslan
Used them just today, as a matter of fact. Still viable. Think I got them from the SystemTools web site some months ago (years??) as the original author no longer supports them, IIRC. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone

RE: [ActiveDir] what to do with DMZ servers

2003-07-10 Thread Rick Kingslan
Honestly, no.  The risk, IMHO, is just too great.  Extranets with a separate forest with some (read: controlled) synched or replicated data between the forests (internal, DMZ) - or as someone mentioned already, ADAM strikes me as a much better and safer option.   Rick Kingslan  MCSE, MCSA

RE: [ActiveDir] Identity Management using AD

2003-07-09 Thread Rick Kingslan
s intended for.  Hence, AD-lite, not Security-lite.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Wednesday, July 09,

RE: [ActiveDir] Finding things in the AD Users/Computers

2003-07-09 Thread Rick Kingslan
Title: Message Dave,   Thanks for the catch - I completely forgot the Advanced Features.  It's become ubiquitous on my systems.... Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [

RE: [ActiveDir] admt 2.0 - nt4 computer migration

2003-07-09 Thread Rick Kingslan
n it - but what IS the Agent?).... Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner Sent: Wednesday, July

RE: [ActiveDir] Identity Management using AD

2003-07-09 Thread Rick Kingslan
f red tape.   Silly, quite actually.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT)Sent: Wednesday, July 09, 2003

RE: [ActiveDir] Finding things in the AD Users/Computers

2003-07-09 Thread Rick Kingslan
Title: Message Mark,   If you go to the properties of the object and then use the 'Object' tab, it will display the path to the object.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  Fr

RE: [ActiveDir] Identity Management using AD

2003-07-09 Thread Rick Kingslan
with every bell and whistle.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger SeielstadSent: Wednesday, July 09, 2003 9:48 AMTo: '

RE: [ActiveDir] Identity Management using AD

2003-07-09 Thread Rick Kingslan
messaed around with ADAM, right?  Can be on WinXP, Server 2003 - create multiple instances of an AD structure, but more like an AD-lite?   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL P

RE: [ActiveDir] Identity Management using AD

2003-07-08 Thread Rick Kingslan
es.  In the case of the KCC issue, it's fixed in Server 2003, but only once you get to 2003 Forest Functional mode.  That's a big move. i) Because it's there.....  Oh, wait!  That's for mountains.  never mind.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active

RE: [ActiveDir] SP4

2003-07-07 Thread Rick Kingslan
Title: Message Lab testing at present is proceeding slowly, but no issues as of yet.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don

RE: [ActiveDir] AD DOS vulnerability

2003-07-07 Thread Rick Kingslan
Darren, Thanks for providing the clarity. No intent to be 'stealthy' about the vulnerability, but - frankly, I couldn't think of the proper words at the moment. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windo

RE: [ActiveDir] Taking DC Offline

2003-07-06 Thread Rick Kingslan
, this is.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Simpsen, Paul A. (HSC)Sent: Sunday, July 06, 2003 8:25 PMTo: [EMAIL PROTECTED]S

RE: [ActiveDir] DFS errors 13544 / 13552

2003-07-06 Thread Rick Kingslan
't going to be created. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner Sent: Sunday, July 06, 2003

RE: [ActiveDir] Taking DC Offline

2003-07-04 Thread Rick Kingslan
this type should be nulled out.  Even if they do - those that are not theirs should be erased as well.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone    From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On B

RE: [ActiveDir] AD DOS vulnerability

2003-07-04 Thread Rick Kingslan
Joe, Unfortunately, one of the biggest issues with AD can't be addressed with an upgrade, and that's the Security vulnerability from cross-domain admins. Looking to NetPro's monitoring tool to aid in this as a 'burglar alarm'. Rick Kingslan MCSE, MCSA, MCT Microso

RE: [ActiveDir] Domain Rename

2003-07-04 Thread Rick Kingslan
igh the minimal reward. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GRILLENMEIER,GUIDO (HP-Germany,ex1) Sent: Friday, Jul

RE: [ActiveDir] Missing Sysvol and Netlogon

2003-07-03 Thread Rick Kingslan
as referenced by "may not be enough" in #2, that simply copying will restore these two properly.  An Authoritative restore in DS Restore mode would be a better route.  These two are not easily 'copied'   Sorry I don't have more time   Rick Kingslan  MCSE, MCSA, MCT

RE: [ActiveDir] Domain Rename

2003-07-01 Thread Rick Kingslan
You're quite correct. If you have an E2K/E2k3 ORG, you still have a bit of a problem. You can rename the domain, the ORG however - another issue altogether. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/exper

RE: [ActiveDir] Domain Rename

2003-07-01 Thread Rick Kingslan
Jan, Key point is that you must be in Windows Server 2003 Forest Functional Mode - only W2k3 DCs in the forest. It's not anywhere near as bad as it looks. Not anywhere as daunting as the road to Windows 2000 Native.... Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Asso

RE: [ActiveDir] MMS 2003 and ADAM 2003

2003-06-28 Thread Rick Kingslan
x27;m suffering from right now - management with no backbone, which puts me into the position of being the bitch of each and every idiot client want and desire, however completely unrealistic, undesireable and undeliverable it might be.  But hey!  I'm not bitter!  ;-)   Rick Kingslan  MCS

RE: [ActiveDir] MMS 2003 and ADAM 2003

2003-06-28 Thread Rick Kingslan
Title: Message H. and that's what I though VMWare was for!    BTW, I agree wholeheartedly about your use of ADAM.  As I said, this is a very cool product.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/wind

RE: [ActiveDir] MMS 2003 and ADAM 2003

2003-06-27 Thread Rick Kingslan
go to the time expense and trouble of integrating AD or directory sevices (e.g. LDAP) into the app natively, ADAM could be your answer.   Other solutions abound - from simple services to security uses.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert

RE: [ActiveDir] OT: Todd Myrick - SearchWin2000.com's 2003 Innovator Award winner

2003-06-26 Thread Rick Kingslan
Title: Message Doug,   Thanks for bringing this to our attention.  Todd, congratulations.  Well deserved!   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4

2003-06-26 Thread Rick Kingslan
Title: Message Shawn,   Thank you for originally posting the link.  It is appreciated by all when others want to share thier findings.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL

RE: [ActiveDir] AD Upgrade with "bad" NetBIOS name

2003-06-26 Thread Rick Kingslan
grade.  It will be fine.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. SmithSent: Thursday, June 26, 2003 3:26 PMTo: [EMAIL PROTEC

RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4

2003-06-26 Thread Rick Kingslan
Title: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 Martin,   Thanks for the link to the final bits, and closing out this thread appropriately.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4

2003-06-25 Thread Rick Kingslan
5 minutes ago.  The mail distro is slow at MS, too, on these types of things.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Ki

RE: [ActiveDir] RIS and Windows Server 2003 Upgrades

2003-06-25 Thread Rick Kingslan
.   Hope this helps   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Duncan, LarrySent: Wednesday, June 25, 2003 2:43 PMTo: '[EMAIL PROT

RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4

2003-06-25 Thread Rick Kingslan
y have the beta), so what? Me, I'm mystified by the attitude. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [E

RE: [ActiveDir] RIS and Windows Server 2003 Upgrades

2003-06-25 Thread Rick Kingslan
cted.   If I can read where you're reading this, I might be able to clear up what it's REALLY saying, if you know what I mean.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTEC

RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4

2003-06-25 Thread Rick Kingslan
Title: RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4 True - it is listed there.  But, we've seen things released by BetaNews that has then ended up being an interim or escrow build - that they have listed as gold.  So, until MS says it's done - it ain't done. Rick

RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4

2003-06-25 Thread Rick Kingslan
Rick, The RC1 that we got the other day had NO warnings - standard EULA. So, I wouldn't base the reality of release or beta on 'big warnings'. That's not always the case. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.mic

RE: [ActiveDir] OT: Link to Windows 2000 Service Pack 4

2003-06-25 Thread Rick Kingslan
nch from the distribution points.  Once everything is in place, the switch gets thrown and the announcement is made to co-incide with what (should be at least) is the availabilty of the SP.   Is it really released?  Next 24 hrs. will tell.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Acti

RE: [ActiveDir] suggestions for OU delegation information sources

2003-06-19 Thread Rick Kingslan
> If they only could have had a few chapters on Exchange 2K integration and how to make it less painful... :oP Oh, you are NOT EVEN gonna get this started again! Huh-uh! ;-D Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.

RE: [ActiveDir] suggestions for OU delegation information sources

2003-06-19 Thread Rick Kingslan
But, these two Finns did a GREAT job with a book that is absolutely phenominal on what it covers. And, it covers it very well. Bob is right - this is a must have on your shelf (along with Robbie's book(s), of course!) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associ

RE: [ActiveDir] Aelita Enterprise Migration Manager - comments?

2003-06-13 Thread Rick Kingslan
t, look at Microsoft's Group Policy Management Console to copy (migrate, what have you) from one forest to another. GPMC is the single best tool to come out of Microsoft since AD. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsof

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-13 Thread Rick Kingslan
d he blew it off and told me that I had more important things to work on. I have to admit, though, it pissed me off a bit. But - I'm primarily Security now and backup on AD architecture. So, if something goes horribly bad - not my problem. ;-) Rick Kingslan MCSE, MCSA, MCT Microso

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-13 Thread Rick Kingslan
Title: Message Well, now that's cool.  That's the first time that I remember them doing that.  Thanks for the pointer.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED

RE: [ActiveDir] [OT] Installing Windows 2003 servers to Windows 2 000 Domain

2003-06-12 Thread Rick Kingslan
been in therapy for years for that, but, well... Damn. Nevermind. ;P Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beha

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-12 Thread Rick Kingslan
know.  All I see here is the Global Mobility.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jan WilsonSent: Friday, June 13, 2003 12:09

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-12 Thread Rick Kingslan
Title: Message Todd,   Are you aware that NetPro has now introduced what I would call a Management Pack for AD for MOM?  I haven't had time to look at it in depth yet, but am looking forward to it possibly this weekend.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - A

RE: [ActiveDir] Active Directory Tools on XP Clients

2003-06-12 Thread Rick Kingslan
Title: Message Cool - no worries.   Have you upgraded to Hyena 5.0?  That's working like a charm for me....   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[

RE: [ActiveDir] Possibly OT - DFS vs 3rd party DR

2003-06-12 Thread Rick Kingslan
of that for me.  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey DubynSent: Thursday, June 12, 2003 5:27 AMTo: [EMAIL PROTECTED]Cc:

RE: [ActiveDir] [OT] Installing Windows 2003 servers to Windows 2000 Domain

2003-06-11 Thread Rick Kingslan
:28 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Installing Windows 2003 servers to Windows 2000 Domain Mr. Richards.  welcome to the party.  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert

RE: [ActiveDir] Possibly OT - DFS vs 3rd party DR

2003-06-11 Thread Rick Kingslan
d 3 years later, it's much clearer as to why it's not really a good idea to try.   Regardless, Dfs is not as bad as it was.  And with the improvements in FRS, it's only going to get better.  Maybe.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExp

RE: [ActiveDir] [OT] Installing Windows 2003 servers to Windows 2000 Domain

2003-06-11 Thread Rick Kingslan
rds.  welcome to the party.  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of JoeSent: Wedn

RE: [ActiveDir] [OT] Installing Windows 2003 servers to Windows 2000 Domain

2003-06-11 Thread Rick Kingslan
hards.  welcome to the party.  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of JoeSent: Wednesday, June 11, 2003 8:54

RE: [ActiveDir] Installing Windows 2003 servers to Windows 2000 Domain

2003-06-11 Thread Rick Kingslan
Title: Message Mr. Richards.  welcome to the party.  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of JoeSent: Wednesday, June 11

RE: [ActiveDir] Possibly OT - DFS vs 3rd party DR

2003-06-11 Thread Rick Kingslan
move with Windows Server 2003 might justify itself with Volume Shadow Services.  I've been working closely with VSS and primarily, Volume Shadow Copy, and IMHO, it Rocks!   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/wind

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-11 Thread Rick Kingslan
Title: Message You're right - we've never met....  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrara, Sandra SYN

RE: [ActiveDir] Active Directory Tools on XP Clients

2003-06-11 Thread Rick Kingslan
m with the tools in a pure Windows 2000 environment, or my mixed 2k / 2k3 environment at home.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] Active Directory Monitoring with MOM

2003-06-11 Thread Rick Kingslan
Title: Message Add to that, if you would - NetPro (Gil Kirkpatrick and DEC fame..) also makes a Management pack for MOM.   Hopefully, I can tell you more on it shortly..   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-10 Thread Rick Kingslan
feedback.   Some folks You just can't help - no matter how much you want to.   Regardless - I'm back to reviewing Robbie Allen's new book.  Just a few days left on the review cycle and then it's copy edit time.  :-D   Take care! Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP -

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-10 Thread Rick Kingslan
few days left on the review cycle and then it's copy edit time.  :-D   Take care! Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone      From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of D

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-10 Thread Rick Kingslan
- we'll be waiting to here what you have found.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone        From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Diane AyersSent: Tuesday, June 1

RE: [ActiveDir] OU and GPO Design Comments

2003-06-09 Thread Rick Kingslan
iltered by group. You will find that this can be very successful, and to manage it I would recommend grabbing a copy of the Group Policy Management Console - it will make things MUCH easier! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.mic

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-08 Thread Rick Kingslan
See comments inline below. Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of steveSent: Sunday, June 08, 2003 6:21 PMTo: [EMAIL

RE: [ActiveDir] Trying to run DCPromo and getting error 5171

2003-06-08 Thread Rick Kingslan
?  DS, DNS, NTFRS?  Everything look good?  Anything out of the ordinary in the System or App logs?   Let us know what you find out!   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED

RE: [ActiveDir] Mirror Sets

2003-06-07 Thread Rick Kingslan
of the PRIMARY DRIVE, the boot.ini would need to be pointed to disk 1. I suspect that this is what was being referenced - but I haven't set up a software mirror in years. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/wind

RE: [ActiveDir] sidhistory of well known groups

2003-06-06 Thread Rick Kingslan
Correct - and I support what is being said by MS - that it will only migrate to the exact SID on the receiving end. However, maybe someone else can shed some light - I'm not sure what the setting is to allow it in ADMT at the moment. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - A

RE: [ActiveDir] sidhistory of well known groups

2003-06-06 Thread Rick Kingslan
desktops, 25k users. Lots of groups. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner Sent: Friday, June 06

RE: [ActiveDir] WinPE and RIS

2003-06-06 Thread Rick Kingslan
Title: Message The one that I have from my MCS folks is CLI only - no GUI.  FWIW.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] Single sign-on

2003-06-05 Thread Rick Kingslan
ADAM is intended AFAIK, to be free. MMS 3.0 Standard is free, too - but it will only synch MS data. E.g Forest GAL to Forest GAL. If you want to bring other directories into the mix (iPlanet, NDS, etc) you will need MS 3.0 Enterprise. That one is gonna cost ya. ;-) Rick Kingslan MCSE, MCSA

RE: [ActiveDir] Replication Problems...

2003-06-05 Thread Rick Kingslan
> I do think you should have your network engineer fired, then shot, hung, and sent to the Russian Front! ROTFLMAO! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EM

RE: [ActiveDir] Adding new objects to AD

2003-06-04 Thread Rick Kingslan
Marcus, Right you are. The employeeid field does exist - it's just not tied to a class that would allow it to be effectivley used. Here's an article that will shed some light, and show how it can be used: http://www.ntfaq.com/Articles/Index.cfm?ArticleID=21588 Good catch! Rick King

RE: [ActiveDir] w2k / nt4 trust -possible fix

2003-06-02 Thread Rick Kingslan
ssume that there are things that are too strong and too weak for your environment - then adjust accordingly. Ain't security fun? ;-) Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message

RE: [ActiveDir] WinPE and RIS

2003-06-02 Thread Rick Kingslan
is is your avenue.   IOW - if you can get your hands on WinPE - do so.  It's hot, flexible, and the real wave of what will be the next step in deployments.   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone 

RE: [ActiveDir] w2k / nt4 trust -possible fix

2003-05-30 Thread Rick Kingslan
Good catch, Stephen. -rtk -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wilkinson, Stephen (DrKW) Sent: Thursday, May 29, 2003 11:28 AM To: '[EMAIL PROTECTED]' We have fixed this now.. We had the policy "Require strong (Windows 2000 or later) sess

RE: [ActiveDir] delegation of root domain admin

2003-05-30 Thread Rick Kingslan
t's REALLY broken - like, tomorrow? >:-> Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent:

RE: [ActiveDir] delegation of root domain admin

2003-05-29 Thread Rick Kingslan
But, challenge HIPAA or Graham-Leach-Bliley, now we're talking risks I won't assume. Make your own decision, Graham. But, Roger does have a point. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] how can i add the value of the SchemIDGUID when I create a schemd object?

2003-05-28 Thread Rick Kingslan
ed to be there.   Anyone else know schema manipulation with C++?  ;-)   Rick Kingslan  MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of zhaohuSent: Wednesday, May 28

RE: [ActiveDir] AD Backup - death of the off-topic spinoff

2003-05-28 Thread Rick Kingslan
in an off-topic header - which I should not have replied at all) so if he replies, let's let this one die. I'll take it off line if such things dictate. Thanks! Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/exp

Re: [ActiveDir] OT:other vendor's stuff

2003-05-28 Thread Rick Kingslan
uy doing a great service. But, they aren't the authority on other people's products. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] AD Backup

2003-05-27 Thread Rick Kingslan
But, David - why not : http://www.smallwonders.com/activedirsolutions.htm Or, as suggested here in the past, do you get kickbacks from Sunbelt?? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone

RE: [ActiveDir] DC Problem

2003-04-06 Thread Rick Kingslan
ome experience with DNS. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang Sent: Sunday, April 06, 2003

<    3   4   5   6   7   8   9   10   11   12   >