RE: [ActiveDir] Kerberos Question

2007-01-25 Thread Ryan A. Conrad
If you suspect it's the KerbTray tool, you may wish to use KList (part of the Reskit) to verify that both are showing the same output. Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hogenauer Sent: Thursday, January 25, 2007 1:34 PM To: ActiveDir@mail.activedir.org Subj

Re: [ActiveDir] AD - What to monitor?

2006-03-06 Thread Ryan A. Conrad
You may want to start by looking at some commercial products and see what functions they perform and what they monitor.  NetPro's Change Auditor is great, and the MOM AD MP (entire Technical Guide is available) would be two nice starting points. If I remember correctly, NetPro also has an AD Health

Re: [ActiveDir] "NTLM Authentication" Security Principal

2006-03-03 Thread Ryan A. Conrad
In the NTDS performance object there are two counters: NTLM Authentcations and Kerberos Authentications. They wouldn't be able to tell you "who" is authencating using those methods, but they would be able to provide a better idea.  Both counters are in number of requests per second.   Ryan  On 3/3

Re: [ActiveDir] Null values in adfind results

2006-02-17 Thread Ryan A. Conrad
adfind -default -f "&(objectcategory=organizationalperson)(!attributename=*)" -csv  should do the trick.    Ryan  On 2/17/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I'm looking for null values in several attributes of user objects but the result only returns the attributes where a value i

Re: [ActiveDir] W2K3 Std. vs. Ent. for DCs

2006-02-14 Thread Ryan A. Conrad
   From: [EMAIL PROTECTED] on behalf of Ryan A. Conrad   Sent: Tue 2006-02-14 16:37   To: ActiveDir@mail.activedir.org   Subject: [ActiveDir] W2K3 Std. vs. Ent. for DCs   Dean posted this comment in a recent post:      I have no concer

Re: [ActiveDir] W2K3 Std. vs. Ent. for DCs

2006-02-14 Thread Ryan A. Conrad
Jorge,   Are you suggesting that some DCs an be Ent. Ed. and some Std.?  I noticed in the matrix that MIIS integration/support was limited to Ent. Ed., as well as pieces of ADFS.  We presently have an empty root (ignoring why we have it, as I don't want to spark any heated conversations), with seve

[ActiveDir] W2K3 Std. vs. Ent. for DCs

2006-02-14 Thread Ryan A. Conrad
Dean posted this comment in a recent post:   I have no concerns using Standard edition for DCs, I don't see it too often since the majority of my customers are licensed up the wazoo and use whatever ISO they stumble across first :o)   As ir

RE: [ActiveDir] OT: Web Servers

2005-11-04 Thread Ryan A. Conrad
Use host headers in IIS for WSUS as an DNS alias, then you can also advertise it on any port you wish.    Servername.domain.com:8159 Alias: wsus.domain.com   You should be able to put both in your GPO.   -Ryan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] TS GPO and Citrix Settings

2005-10-10 Thread Ryan A. Conrad
EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ryan A. Conrad Sent: Monday, October 10, 2005 11:17 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] TS GPO and Citrix Settings We are experiencing what appears to be a strange problem (although it’s probably expected for all I know

[ActiveDir] TS GPO and Citrix Settings

2005-10-10 Thread Ryan A. Conrad
We are experiencing what appears to be a strange problem (although it’s probably expected for all I know) with Terminal Service settings on W2K3 boxes.  A GPO at our application server container sets various settings (timeout values, encryption, etc…) for all systems (regardless of Admin/Ap

RE: [ActiveDir] DC authentication

2005-08-31 Thread Ryan A. Conrad
echo %logonserver% -Ryan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Allen Sent: Wednesday, August 31, 2005 4:58 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] DC authentication Sorry, I'm have a brain hiccup. Does anyone know th

RE: [ActiveDir] All

2005-05-09 Thread Ryan A. Conrad
CV in the UK is like Resume in the US. -Ryan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, May 09, 2005 1:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] All Accenture? Compucom? CSC? I don't think MS would ran

RE: [ActiveDir] script to convert userID to first and lastname of users

2005-02-18 Thread Ryan A. Conrad
This should work: strUserName = *INSERT NAME HERE* Set objConnection = CreateObject("ADODB.Connection") objConnection.Open "Provider=ADsDSOObject;" Set objCommand = CreateObject("ADODB.Command") objCommand.ActiveConnection = objConnection objCommand.CommandText = _ "

RE: [ActiveDir] HELP!!! Undelete required

2005-02-17 Thread Ryan A. Conrad
I agree with Neil. I've seen good results with ERDisk from Aelita, which is now called Recovery Manager for AD from Quest. -Ryan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil Sent: Thursday, February 17, 2005 10:17 AM To: 'ActiveDir@mail.ac

[ActiveDir] DRA Pending Synchronizations

2003-12-09 Thread Ryan A. Conrad
find out what is in the queue, or what could be potentially blocking the queue.   Thanks!   Ryan Ryan A. Conrad   Windows 2000 MCSE Windows Server 2003 MCSA MCSE CCNA Network+ IMSS Platform Engineering Wintel Analyst Bristol-Myers Squibb Company