session after x minutes. That can
be configured in the TS configuration mmc.
Tim Hines
- Original Message -
From:
Frank
Abagnale
To: Active
Sent: Monday, February 06, 2006 1:32
PM
Subject: [ActiveDir] OT: disconnecting
remote TS session on DC
I have an
indowshttp://support.microsoft.com/default.aspx?scid=kb;EN-US;221833
Tim Hines
- Original Message -
From:
Creamer,
Mark
To: ActiveDir@mail.activedir.org
Sent: Monday, February 06, 2006 10:48
AM
Subject: [ActiveDir] Wireless and logon
script
Can someone explain the
me
Title: Windows 2000 Whitepaper DNS & Clients
There is a section in the distributed systems guide
on this. Here is the link
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url="">
- Original Message -
From:
Burkes, Jeremy [Contracto
What happens when the client attempts to access paths outside of the
network? I'm assuming there is an error of some sort. Have you tried a
network trace of the client trying to access the path?
- Original Message -
From: "Burkes, Jeremy [Contractor]" <[EMAIL PROTECTED]>
To:
Sent: Wedne
It will only affect the local password policy of
the workstations that are in that OU. It has not affect on the domain
password settings. It will only change the local password
requirements. There is only one password policy per domain.
- Original Message -
From:
Christi
tiveDir] Sign On Message
512 characters?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines
Sent: Monday, April 18, 2005 5:05 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Sign On Message
512
- Original Message -
From: &qu
512
- Original Message -
From: "Salandra, Justin A." <[EMAIL PROTECTED]>
To:
Sent: Monday, April 18, 2005 3:29 PM
Subject: [ActiveDir] Sign On Message
On Windows 2000, the sign on message that people can get when they login
has a limit of 250 Characters or 250 words?
Justin A. Salandr
What do you mean by "GPO's aren't applied properly on the workstations"?
Are you using slow WAN link detection settings for GPO's? That would cause
the clients to not process all GPO settings . Even in that scenario the
majority of GP Settings apply except for those that are bandwidth intensive.
Title: DC location queries
Joe has summed it up well but if you want to do
some reading on it you should check out this chapter from the Distributed
Systems Guide.
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/distrib/dsbc_nar_jevl.asp
Tim
- O
Make sure that "Simple File Sharing" was not turned on. The option is under
folder options on the view menu. If it is enabled it removes the security
and sharing option.
Tim
- Original Message -
From: "Phil Renouf" <[EMAIL PROTECTED]>
To:
Sent: Thursday, April 14, 2005 10:59 AM
Subjec
Title: Message
I believe that the domain needs to be in Windows
server 2003 mode for this command to work.
- Original Message -
From:
Steve
Shaff
To: ActiveDir@mail.activedir.org
Sent: Wednesday, January 26, 2005 3:26
PM
Subject: RE: [ActiveDir] Computer Accou
Setprefdc does not work for Windows 2000. You can control which DC a server
authenticates against by configuring sites. The clients will authenticate
against a DC within it's own site if the sites are correctly configured.
That should resolve the problem of the server using a remote server for
au
ADMT can migrate profiles, for more info see http://www.microsoft.com/technet/prodtechnol/windows2000serv/downloads/w2kadmt.mspx
- Original Message -
From:
Mike Hogenauer
To: ActiveDir@mail.activedir.org
Sent: Friday, January 21, 2005 11:55
AM
Subject: [ActiveDir]
Title: Finding User account if know SID
There is a utility that Joe created for this at http://www.joeware.net/win/free/tools/sidtoname.htm
- Original Message -
From:
Chris
Flesher
To: ActiveDir@mail.activedir.org
Sent: Friday, January 21, 2005 11:31
AM
Subjec
Did you verify that the DCs are registering site specific records in DNS?
Make sure that the records are consistent on all DNS servers. You should
also makes sure that the sites and subnets are configured correctly and that
servers are showing up in the correct sites. Take a trace if everything el
There is a tool from Microsoft that is still in
Beta called LimitLogon. Here is a link that mentions it and a FAQ about
it
http://www.msfn.org/comments.php?shownews=7601
- Original Message -
From:
Brian Desmond
To: ActiveDir@mail.activedir.org
Sent: Wednesday, Januar
An AD integrated DNS zone can only be hosted on a domain controller because
it is part of the AD database. Is your DNS server a DC? If you have an AD
integrated zone you should see it in AD users and computers under
"domainname\system\microsoftdns" . You will need to enable the advanced
feature
You will find tons of GP resources at http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx
or http://www.microsoft.com/windows2000/technologies/management/default.asp#section10
- Original Message -
From:
Mohammed
Tantawi
To: Active
I believe that he is referring to Microsft Audit Collection Services. Here
is an article on it
http://www.mcpmag.com/columns/article.asp?EditorialsID=772 . As far as I
know it has not been released yet but I am not sure.
- Original Message -
From: "Myrick, Todd (NIH/CIT)" <[EMAIL PROTEC
Title: Message
Joe's utility works for Windows 2000. I'm
reading about it now. I don't think there is a MS utility to do this
for windows 2000 but you could wrtie a script to query for pwdLastSet . I may have a copy of one but you
probably be better off using Joe's tool.
- Origina
In windows 2003 you can use "dsquery computer
-inactive or -stalepwd". Here is a link to the syntax.
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url="">
- Original Message -
From:
Liz
Vaibar
To: Active Director
;
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines
> Sent: Monday, January 10, 2005 12:27 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] DNS timeouts
>
> Have you tried doing a network trace to see the
Have you tried doing a network trace to see the DNS queries and responses?
That should help you determine where the delay is.
- Original Message -
From: "Rimmerman, Russ" <[EMAIL PROTECTED]>
To:
Sent: Monday, January 10, 2005 12:41 PM
Subject: [ActiveDir] DNS timeouts
>
> When we do an
You can use the eval copy but you will need to upgrade to a retail version
of the product before the 180 day trial period expires. If you don' then
you will begin to experience blue screens. For more details see 818025
Windows 2003 Server evaluation copy expiration behavior
http://support.microsof
Title: default containers
The default location can't be changed in Windows
2000. You can join the computer to a specific OU by using "netdom
join" with the /ou switch. Aric has mentioned the solution for
Windows 2003. It is documented at
http://support.microsoft.com/?id=324949 .
---
Take a look at this article code on msdn
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/retrieving_deleted_objects.asp
- Original Message -
From: "Tony Murray" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 02, 2004 11:04 AM
Subject: [ActiveDir]
to
know if there is a problem on my domain controllers. It is available at
http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en
.
Tim Hines, MCSE
- Original Message -
From: "Svetlana Kouznetsova" <[EMAIL PROTEC
Did you try connecting to the share by UNC path fom theDC and from your
workstation? Was that test successful?
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services
=
When responding to posts, please "Reply to Group" via
your
ss has been denied. ). Group Policy processing
aborted.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines
Sent: Tuesday, March 30, 2004 2:08 PM
To: [
What error do you receive? My guess is that there may be some
inconsistencies in the gpo template folder permissions between the DCS. Do
you get the same behavior if you connect the MMC to different DCs in the
child domain?
- Original Message -
From: "Steve Shaff" <[EMAIL PROTECTED]>
T
If you are looking for a listing and desription of the user attributes you
can find it on the MSDN site at
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adschema/ad/win2k_c_user.asp
Tim
- Original Message -
From: "Rosales, Mario" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECT
What error does he get when trying to connect using
a terminal session?
- Original Message -
From:
Gilbert, Daniel L Mr
ANOSC/FCBS
To: ActiveDir
([EMAIL PROTECTED])
Sent: Thursday, March 25, 2004 1:58
PM
Subject: [ActiveDir] Remote Desktop
Issue
To
://www.microsoft.com/windows2000/windowsupdate/sus/
--
Tim Hines, MCSE, MCSA
- Original Message -
From: "John Parker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 10, 2003 8:17 AM
Subject: [ActiveDir] What is SUS?
Hey all..
No flames ok?
I'm
I've seen that type of logon behavior when the system drive letter has
changed. Take a look at
http://support.microsoft.com/default.aspx?scid=kb;en-us;249321
--
Tim Hines, MCSE, MCSA
- Original Message -
From: "Salandra, Justin A." <[EMAIL PROTECTED]>
T
ays? Do you experience a delay getting to the logon screen or
is it after you enter credentials?
Tim Hines, MCSE, MCSA
- Original Message -
From:
jalen richard
To: [EMAIL PROTECTED]
Sent: Monday, August 18, 2003 10:40
PM
Subject: [ActiveDir] how can you trace a
nning/management/veritas.asp
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Salandra, Justin A." <[EMAIL PROTECTED]>
To: "ActiveDir (E-mail)" <[EMAIL PROTECTED]>
Sent: Monday, July 14, 2003 4:23 PM
Subject: [ActiveDir]
There is one on the Microsoft site at
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/printing/ScrPrn01.asp
.
You can configure this to run from a group policy.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
which site to change the password in. It is available
at http://microsoft.com/downloads/details.aspx?familyid=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
Tim Hines, MCSA, MCSE (2000 & NT4)MVP -
Active Directory
- Original Message -
From:
Ellis,
Debbie
To:
u are able to pinpoint the cause. I've
seen norton antiv corp edition 7.6 cause the processor to run at 100% after
opening the dsa.msc, so if you are running it you may want to start
troubleshooting by removing it. Look for common apps that exist on all the
DCs.
Tim Hines, MCSA, MCSE (2000
Open the default DC policy, and view the right for "access this computer
from the network". Verify that authenticated users has this right. If
authenticated users does not have that right, you will experience that
error.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
&
there are many computer policies that have to be applied. A high number
of GP links on an OU will also make your environment more difficult to
manage. You may want to take a look at design considerations in the GP
whitepaper.
http://www.microsoft.com/windows2000/docs/grouppolwp.doc
Tim H
Bjelke,
Its explained in
http://support.microsoft.com/default.aspx?scid=kb;en-us;246261
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
"If you catch a man a fish, he eats for a day. If you teach a man to fish
he eats for a lifetime"
- Original Message -
From
I think that you are you referring to SIDs, you can use sid2name from
joeware http://home.earthlink.net/~joewarenet/win32/zips/SidToName.zip
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
"If you catch a man a fish, he eats for a day. If you teach a man to fish
he eats for a
the RAID setup
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
"If you catch a man a fish, he eats for a day. If you teach a man to fish
he eats for a lifetime"
- Original Message -
From: "John Balos" <[EMAIL PROTECTED]>
To: <[EMAIL PROTE
t why the
variable is not resolved if it was added with a script or ldifde
file.
Tim Hines, MCSA, MCSE (2000 & NT4)MVP -
Active Directory
"If you catch a man a fish, he eats for a
day. If you teach a man to fish he eats for a lifetime"
operation.
The failure occurred at 2003-01-30 15:51.28.
The last success occurred at 2003-01-27 08:49.33.
86 failures have occurred since the last success.
Check load and resouce usage on SERVER1.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Direc
You may want to use adsizer.exe to determine this.
Take a look at http://www.microsoft.com/windows2000/downloads/tools/sizer/default.asp
Tim Hines, MCSA, MCSE (2000 & NT4)MVP - Active Directory
"If you catch a man a fish, he eats for a day. If you teach a man to
fish he e
I believe that it means that you have filled the
scope and there are not any other addresses to give.
Tim Hines, MCSA, MCSE (2000 & NT4)MVP - Active Directory
"If you catch a man a fish, he eats for a day. If you teach a man to
fish he eats for a lifetime"
- Or
are products that will allow you to recover
deleted files and folders but from my understanding it only works if the space
that the file once occupied on disk has not been written to. Search the
web for undelete and you should find a few apps.
Tim Hines, MCSA, MCSE (2000 & NT4)MVP - Ac
you what app has an open handle and it will show the registry key that it
has open.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Thommes, Michael M." <[EMAIL PROTECTED]>
To: "Active Directory mailing list (E-mail)&
What error does the user receive when logging on? Can that user logon to
another DC? Server? workstation?
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Hutchins, Mike" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent:
domain.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Brady" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 13, 2003 8:31 PM
Subject: [ActiveDir] Windows 98 clients
What are the steps necessary to g
See the AD disaster recovery whitepaper at
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/ad/windows2000/support/adrecov.asp
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Joe Baird" <[EMA
The $repl share doesnt exist anymore. The scripts are stored in the
netlogon share which maps to C:\WINNT\SYSVOL\sysvol\nupe9.com\SCRIPTS.
LMrepl was replaced by a new file replication system. Windows 2000 uses the
NTFRS (NT File Replication System) to replicate the sysvol share to each DC.
Tim
quot;no
access without explicit anonymous permissions". This will kill downlevel
trusts and keep downlevel clients from logging on.
Tim Hines, MCSA, MCSE (2000 & NT4)MVP - Active Directory
- Original Message -
From:
Larry A. Duncan
To: [EMAIL PROTECTED]
S
Make sure that you test any security
recommendations in a lab before deploying them on your network. I have
seen some of the templates from the NSA cause problems.
Tim Hines, MCSA, MCSE (2000 & NT4)MVP - Active Directory
- Original Message -
From:
Lar
ecurity process
logging and review the winlogon file to determine what account is causing
this error. Once you find the account you can remove it from the policy.
See http://support.microsoft.com/default.aspx?scid=kb;en-us;245422 for the
steps to enable logging.
Tim Hines, MCSA, MCSE (2000 &
Yes it can. It is sometimes possible to repair it with ntdsutil or
esentutl.
see http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q315131 and
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q305500
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Orig
Title: Message
You can configure a logon script in a group
policy. There is a sample script at http://www.microsoft.com/technet/treeview/default.asp?url="/technet/scriptcenter/printing/default.asp
Tim Hines, MCSA, MCSE (2000 & NT4)MVP - Active Directory
- Origina
d also run linkd on the folder that sysvol
was copied to to determine if there is a link.
Use linkd to delete bad links and create the correct ones.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Adrian Brinton" <[EMAIL PROTECTED]>
Yes that is part of the process. The guy that posted said that he has
already checked this and configured this. Since he has configured sites and
subnets the next thing to do would be to check the sites in DNS.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Mes
site.
If the records are not where they should be then the client may be receiving
a referral to a DC that is not within its site.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tue
It's been a long time since Ive touched a 98 workstation. Have you verified
that file and printer sharing is enabled under the network properties? What
happens when you try to share folders?
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
users account on a DC within the clients
so that you don't have to worry about the replication delay between sites.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Tony Murray" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED
What happens if you try to take
ownership? Can you access the security tab? If not in AD users and
computers can you access the security properties of the object in
ADSIEDIT?
Tim Hines, MCSA, MCSE (2000 & NT4)MVP - Active Directory
- Original Message -
What is the exact error that the user receives when he attempts to move a
user?
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "David Adner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 17
The account operators group will need the "create user object" permission on
the OU that they are moving the user to. When you move a user it is
creating the user in the OU that you are moving it to.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Mess
the
ntfrs event log for errors. Report any errors in your reply to this list.
You should also check the ntfrs_x.log in winnt\debug. Report those
errors as well.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
- Original Message -
From: "Jason Benway" <[EMA
take a look at
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q255248&; and it will
show you how.
Tim Hines, MCSA, MCSE (2000 & NT4)
- Original Message -
From: "Salandra, Justin A." <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, October
ified domain name of the domain controller.
If a "Request timed out" error is returned, continue to look for connectivity
issues. After the ping command works, replication should work properly
Tim Hines, MCSA, MCSE (2000 &
NT4)
- Original Message -
From:
Byrne, Steve
half Of Noah Eiger
> > > Sent: Friday, September 27, 2002 4:33 PM
> > > To: Active Directory List
> > > Subject: [ActiveDir] KCC Error
> > >
> > >
> > > Hello:
> > >
> > > I have three sites that are (supposed to be) in a hub an
on" is checked. The right to
"access this computer from the network can also cause this problem" if it is
too restrictive.
Tim Hines, MCSA, MCSE (2000 & NT4)
- Original Message -
From: "Abbiss, Mark" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent:
Title: Message
This question is on the FAQ at
activedirectory.org? You can find it at
http://www.activedir.org/FAQ.htm#ADUC%20shows%20only%202000%20objects.
Tim Hines, MCSA, MCSE (2000 & NT4)
- Original Message -
From:
Craig
Cerino
To: [EMAIL PROTECTED]
have you seen the following article?
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q316790
Tim Hines, MCSA, MCSE (2000 & NT4)
- Original Message -
From: "De Schepper Marc" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 23, 2002 3
You can get them at
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/ad/windows2000/deploy/adguide/DEFAULT.asp
Tim Hines, MCSA, MCSE (2000 & NT4)
- Original Message -
From: "Devan Pala" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
75 matches
Mail list logo
