Not to hijack this thread but, I hope lurking remains free.
Dan
> Original Message
> Subject: RE: [ActiveDir] salary(OT)
> From: "joe" <[EMAIL PROTECTED]>
> Date: Thu, October 13, 2005 2:50 pm
> To:
>
>
> I have found that shooting for your contract salary is as good a t
Yann,
There are some utilities you can purchase that will alert you when an
object is deleted, added, modified...
Dan
> Original Message
> Subject: [ActiveDir] Knowing when users were deleted.
> From: Yann <[EMAIL PROTECTED]>
> Date: Thu, October 13, 2005 11:56 pm
> To: ActiveD
Have you cleared (archived) the logs since
the new settings???
Dan
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, October 18, 2005
6:54 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Security Log
file size not reachi
Check out a product called Change Auditor for Active Directory (CAAD)
from NetPro (www.netpro.com).
*Not plugging the product just answering the e-mail*
Dan
> Original Message
> Subject: [ActiveDir] Change Auditor tools
> From: "Rascher, Raymond" <[EMAIL PROTECTED]>
> D
We created OU's and removed all users except for Domain Admins (of
course we left the SYSTEM access). The OU never shows up for
non-Domain Admins.
Domain Admins have full access to the OU and can add as many objects as
they want.
Dan
> Original Message
> Subject: [ActiveDir] H
Susan,
Can you suggest a good "ID 10 T's guide to SBS 2003" book? I assume
from your e-mail address you know more than the average SA about SBS.
Shameless request for information. And being the SBS NOOB that I am
looking for any information I can get my hands on to provide my
customer with the
To All:
I have run into an issue here that has me stumped. I am attempting to
remove an application from a Windows Server 2003 Standard Edition with
SP1 installed.
During the removal process I get the following error: Error 1720: There
is a problem with this Windows Installed package. A script
Found it:
http://support.microsoft.com/default.aspx?scid=kb;en-us;290301
Thanks to everyone.
Dan
> Original Message
> Subject: [ActiveDir] Windows Installer failure
> From: Daniel Gilbert <[EMAIL PROTECTED]>
> Date: Fri, January 20, 2006 8:31
Does anyone if their is a forum dedicated to Live Communications Server
(LCS)??
I am trying to establish a working LCS structure in a lab environment
and it appears I am successful in all parts except for gwtting the
clients to successfully connect to the LCS server.
I built the lab following:
"L
Sorry my spelling was alittle off, "gwtting" should be "getting"
Dan
> Original Message
> Subject: [ActiveDir] Live Communications Server errors
> From: Daniel Gilbert <[EMAIL PROTECTED]>
> Date: Thu, March 16, 2006 12:38 pm
> To: Acti
-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Gilbert
> Sent: Thursday, March 16, 2006 2:39 PM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Live Communications Server errors
>
> Does anyone if their is a forum dedicated to Live Commun
cks [MVP] wrote:
>
> > I had to set up a DNS record. Let me see if I remember what I did.
> >
> > Daniel Gilbert wrote:
> >
> >> I thought so at first but, according to the LCS documentation if I
> >> manually configure the cli
gs/bradley/archive/2004/12/04/22348.aspx
>
> Ah yes, my issue was with the XP firewalls...
>
> Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote:
>
> > I had to set up a DNS record. Let me see if I remember what I did.
> >
> > Daniel Gilbert wrote:
> >
> &g
to the LCS infrastructure with your smtp address as an
> ID, you will need to add that namespace to the list of namespaces that
> the LCS server is authorative for.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Gilbert
>
I found him. :)
> Original Message
> Subject: RE: [ActiveDir] Where's Deji.. (was Quiet? DEC? Related?)
> From: "Mark Parris" <[EMAIL PROTECTED]>
> Date: Mon, April 03, 2006 12:41 am
> To:
>
> Sorry Could not resist.
>
> -Original Message-
> From: [EMAIL PROTECTED]
>
Yeah Sergio,
You could even use that that information to say...allow OU Admins the
ability to view the logs of the domain controllers local to them.
Dan
> Original Message
> Subject: RE: [ActiveDir] Server 2003 "DNS Admins" group permissions
> From: "Olivarez, Sergio J Mr CTNOSC
ROTECTED]>
> Date: Thu, April 06, 2006 2:46 pm
> To: "'ActiveDir@mail.activedir.org'"
>
> Dan,
>
> You guys doing that now?
>
> Lee
>
>
>
> -Original Message-
> From: Daniel Gilbert [mailto:[EMAIL PROTECTED]
> Sent: Thur
OK here is a question that will show my lack of AD knowledge:
If you promote a new domain controller and no subnet association exists,
doesnt that domain controller default to the default-first-site?
I know it makes sense to create a new site, assign a subnet to that site
but
..
If that sit
Hide the cheap stuff too!
> Original Message
> Subject: Re: [ActiveDir] I'm Baaack!
> From: "Laura E. Hunter" <[EMAIL PROTECTED]>
> Date: Thu, September 21, 2006 1:25 pm
> To: ActiveDir@mail.activedir.org
>
> Quick! Hide the good silverware!
>
> On 9/21/06, Akomolafe, Deji
Don't you have to do some DNS delegations to ensure clients in one
forest can find clients in the other forest?
I would think that having domain.com as the tier two for both forests
will cause some unique DNS headaches.
Dan
> Original Message
> Subject: RE: [ActiveDir] Forest t
Off Track?
> Original Message
> Subject: RE: [ActiveDir] what is the meaning of OT in front of the
> subject
> From: "Ramon Linan" <[EMAIL PROTECTED]>
> Date: Thu, October 05, 2006 6:39 am
> To:
>
> Some of the subjects have that OT preceding the subject, what's that?
>
> Than
Something tells me you should be ducking and running
> Original Message
> Subject: [ActiveDir] I'm shareing the "Best Kept Secret" I know.
> From: "Fleming, Dave (DotComm)" <[EMAIL PROTECTED]>
> Date: Tue, October 17, 2006 6:29 am
> To:
>
>
> Top Ten Things Men Understan
Before I flood this list with inane LCS questions, I was wondering if
anyone out here has any experience with attempting to use granular
permissioning with LCS?
I know the application is written to be used domain-wide but due to
business requirements I must attempt to limit use to a single OU.
I
;
> The install requires that all the ACL's from the /domainprep are present
> for the install to work. But after the fact we removed the LCS ACL's and
> let our in-house provisioning system handle it.
>
> -Brandon
>
> ________
>
> Fro
down the road of writing up a tool, I can shoot you a list
> of which ones are pretty generic and which ones require some thought
> for provisioning.
>
> -Brandon
>
>
>
>
> From: [EMAIL PROTECTED] on behalf of Daniel Gilbert
>
to have to wait unitl the "no-refresh"
and "refresh" intervals expire.
Daniel Gilbert
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
eck the Scavenge stale
resource records-->OK
Hope this will help.please chime in.
-vC
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Daniel Gilbert
Sent: Thursday, December 07, 2006 11:42 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir]
Hey, Santa brought me coupon for a new home computer, redeemed the
coupon and built the system. Doesn't that count as work??
Dan
> Original Message
> Subject: RE: [ActiveDir] OT: Hello?
> From: "Crawford, Scott" <[EMAIL PROTECTED]>
> Date: Thu, January 04, 2007 3:35 pm
> To: Ac
about
> Yesterday? -anon
> From: Gil Kirkpatrick
> Sent: Thu 1/4/2007 3:09 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] OT: Hello?
>
> Only if you had to install Linux.
>
> -gil
>
> -Original Message-
> From: [EMAIL
> Only if you had to install Linux.
>
> -gil
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Gilbert
> Sent: Thursday, January 04, 2007 4:04 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] OT:
I might go so far as to create a new account for the consultant. Inform
the consultant to only use the new account when they need to perform the
work on the two servers. A new account will allow you to audit their
work and also watch for "creep". Also, do not give the elevated
account e-mail or
Any indication of the failure in the Event Logs??
Dan
-Original Message-
From: Frustrated Admin [mailto:[EMAIL PROTECTED]
Sent: Monday, September 29, 2003 1:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Software Install to DC's via GPO
Yeah, I did that as well as rebooted severa
Title: Message
No
fair :-( The rest of us haven't had a chance to read Robbie's
book.
Dan
-Original Message-From: Myrick, Todd
(NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Thursday, October 02,
2003 4:25 AMTo: '[EMAIL PROTECTED]'Subject:
RE: [ActiveDir] Logon Takes too Lo
Title: Message
I was
there too! Learned a lot.
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 02, 2003 9:42 AMTo:
[EMAIL PROTECTED]Cc: '[EMAIL PROTECTED]';
[EMAIL PROTECTED]Subject: RE: [ActiveDir] OT: DS
ConferenceI was
Title: Message
The
Final Chicken hopes to make a cameo appearance at the next DEC.
;-)
-Original Message-From: Sullivan, Kevin
[mailto:[EMAIL PROTECTED] Sent: Thursday, October 02, 2003
10:56 AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] OT: DS Conference
Second t
Can you set the expiration date out far enough to allow you to have an
expiration date.
Then run a script that will expire a portion of the users in say two weeks.
Re-run the script with a different set of users with expiration set to 4
weeks aways and so on??
Dan
-Original Message-
From:
Title: Message
one
word - Haiku
-Original Message-From: Gil Kirkpatrick
[mailto:[EMAIL PROTECTED] Sent: Thursday, October 02, 2003 12:36
PMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] OT: DS Conference
Thanks for the compliments!
I
think this was our best Di
Does the -1 setting tell the system it "never expires"?
-Original Message-
From: Joe [mailto:[EMAIL PROTECTED]
Sent: Friday, October 03, 2003 4:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Password Policy - Challenge
See I knew the word challenge in the subject would bring y
Title: Message
"I
want a chicken damnit." I am afraid the last NetPro chicken already has a home
;-)
(It is
proudly displayed with prior DEC nametags and books)
-Original Message-From: Joe
[mailto:[EMAIL PROTECTED] Sent: Thursday, October 02, 2003 6:38
PMTo: [EMAIL PROTE
Title: Message
Hang
on to it. I will see if I can rise to the "challenge" and get on via low
speed delivery as apposed to ducking :-)
-Original Message-From: Myrick, Todd
(NIH/CIT) [mailto:[EMAIL PROTECTED] Sent: Friday, October 03,
2003 7:40 AMTo: '[EMAIL PROTECTED]'Subje
Title: Message
To All:
I am looking for some answers to questions I have about the REPADMIN
command. I am running the Windows
2003 Support Tools version of the command with the following switches: /replsum
/bysrc /bydest /sort:delta
I get a display like the following:
Replication Summ
I am glad you asked the smart guys. Me, being the not too bright sometimes, would
have answered like this: demote 1 DC, rebuild it, stand up a new domain and then
migrate from old domain to new one. Then, demote the old DCs when no longer needed,
join them to new domain.
As I said I some tim
Yusuf,
If you get the chance you should attend a DEC (Directory Experts Conference) hosted by
NetPro (www.netpro.com). Most of the folks you mentioned will be there. In fact some
of those you mentioned will probably be putting on a presentation.
I believe the next DEC is scheduled for the Spr
So, you are saying he gets a Puck?
> Original Message
> Subject: RE: [ActiveDir] OT? - You guys rock
> From: "Myrick, Todd (NIH/CIT)" <[EMAIL PROTECTED]>
> Date: Thu, October 23, 2003 11:07 am
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
>
> Check is in the mail Yusuf. :P
>
- You guys rock
> From: "Creamer, Mark" <[EMAIL PROTECTED]>
> Date: Thu, October 23, 2003 11:42 am
> To: [EMAIL PROTECTED]
>
> Wow...from Scottsdale to Washington?? Yuck ;-)
>
>
>
> -Original Message-
> From: Daniel Gilbert [mailto:[EMAIL PR
Robbie,
I haven't gotten my copy of your book yet, I know :-(, I waited until just recently to
order it. I looked at the table of contents but did not see any thing about
Certificate Services, is it there and I just missed it??
If it is not in your book, as the "Master of Cookbooks" can you su
s the Tomorrow you were worried about
> Yesterday? -anon
>
> ________
>
> From: [EMAIL PROTECTED] on behalf of Daniel Gilbert
> Sent: Fri 10/24/2003 11:34 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] Active Directory Cookbook
>
>
>
> Robbie,
>
> I ha
Todd,
You are s badd
Dan
> Original Message
> Subject: RE: [ActiveDir] Active Directory Cookbook
> From: "Myrick, Todd (NIH/CIT)" <[EMAIL PROTECTED]>
> Date: Fri, October 24, 2003 9:54 pm
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
>
> Hey Rob,
>
>
>
> W
Title: Message
Hey,
You must be up late too.
Dan
-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robbie Allen
Sent: Friday, October 24, 2003
10:40 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Active
Directory Cookbook
And w
UPS finally delivered my copy of the Active Directory
Cookbook.
After a hundred pages, I must agree, Robbie Allen has a best
seller here. I would love to find a way to put this book in binder and
stick in at my desk. Sort of camouflage it so it looks like a regular
notes bonder. I kn
Tha back at'cha Todd.
Some turkey to hold me over during the Black Hawk Down Fest.
Dan
> Original Message
> Subject: [ActiveDir] Happy Thanksgiving...
> From: "Myrick, Todd (NIH/CIT)" <[EMAIL PROTECTED]>
> Date: Wed, November 26, 2003 12:02 pm
> To: "'[EMAIL PROTECTED]'" <[EMAIL
how about these?
Best Practices for Delegating Active Directory Administration (2.7 MB)
http://www.microsoft.com/downloads/details.aspx?FamilyID=631747a3-79e1-48fa-9730-dae7c0a1d6d3&DisplayLang=en
Best Practices for Delegating Active Directory Administration Appendices (4.2 MB)
http://www.micr
Thanks
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GRILLENMEIER,GUIDO
(HP-Germany,ex1)
Sent: Tuesday, December 09, 2003
12:54 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Port
Requirements for the Microsoft Windows Server System (Q83201 7)
I'm
sure this
OK, I followed KB250455. Opened ADUC, created new users and display in ADUC
MMC (main window) was correct, i.e. lastname, firstname. Users created
before KB250455 unchanged, i.e. firstname lastname.
Ran the script in KB277717 on the OU that contained users created before
KB250455 was run. Outpu
Nothing appeared in the event logs. I
was able to clear up the problem. Do know why this worked but here is
what I did:
Added the new Enterprise Admin to the
Remote Desktop tab in SYSTEM properties. Let him log in successfully, had
him log off, removed him from Remote Desktop tab, ha
Cats treat humans like slaves, now a Dog, it knows how to greet you at the
door after a rough day in the forest. Ever come home after a rough day and
have the Cat greet you with anything other than distain?
Dan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behal
I think the next DEC should include a roundtable on the Pro's and Con's of
Cats and Dogs in AD. :-O
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Sunday, May 16, 2004 7:55 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] [OT] Cats & dogs (was
Title: Message
Try dcpromo /forceremoval. This will
remove AD from the server and turn it back into a standalone.
Dan
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Malachi Burke
Sent: Monday, June 14, 2004 5:17
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir]
He's new give him time :)
> Original Message
> Subject: RE: [ActiveDir] What's a directory partition head?
> From: "Kevin Sullivan" <[EMAIL PROTECTED]>
> Date: Wed, June 30, 2004 12:41 pm
> To: [EMAIL PROTECTED]
>
> Hehe
>
> Sorry but that is funny...
>
> -Original Message-
Is there a way to speed up the process for Global Catalog removal?
I know the proper Microsoft steps, but I was hoping there was a script
out there to speed up the process.
Dan
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
it at the moment, check the archives.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Daniel Gilbert
Sent: Friday, July 16, 2004 4:00 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] GC removal
Is there a way to speed up the process for Global Catalog remova
To All:
(Sorry for the long post)
I was wondering what everyone uses to facilitate user moves in a large
environment?
Scenario: Root domain with six (6) child domains. Each child domain has
between thirty (30) to sixty (60) OUs. These OUs are geographic
locations spread around a region. Each
attributes you intend to keep, etc) and move it where it
> belongs.
>
> Some of this would depend on the current provisioning processes you keep as
> to how you integrate it.
>
> These are the fun types of problems to solve :)
>
>
> My $0.04 anyway,
>
>
I believe I am the proud owner of the last DEC chicken. Gil gave it to
me at DEC in Ontario.
Sure wish I could have made it to DEC this year.
Dan
> Original Message
> Subject: RE: [ActiveDir] Have fun at DEC
> From: "joe" <[EMAIL PROTECTED]>
> Date: Fri, March 11, 2005 5:16 pm
I believe the command is adprep /forestprep and then adprep /domainprep
to add a Windows 2003 domain controller into a Windows 2000 domain.
Dan
> Original Message
> Subject: [ActiveDir] A forestprep question
> From: "Shadow Roldan" <[EMAIL PROTECTED]>
> Date: Tue, March 15, 2005
n to
> user! Hahaha. That wasn't also bad because that admin also knew all the
> passwords. As soon as we knew the password of the administrator account we
> tried again to screw it up. After a while everything was closed down to
> maximum security (at least I think it was as we we
To All:
Is there a way to script the setting of the "Delete this record when it
becomes stale" checkbox?
I am attempting to setup a test forest with multiple domains to do some
testing/learning about DNS scavenging. I have found a script that creates
resource records (thank you Robbie Alle
Title: Message
Chris,
I am sure you raised this issue to the "higher
ups" you mentioned, but, wouldn't be easier to develop an OU
architecture that broke the >20,000 users up into separate OUs for
management. That way those 40-50 OU
Admins would be further broken up to their respectiv
Title: Message
Pagefile???
-Original Message-From: Juan Ibarra
[mailto:[EMAIL PROTECTED] Sent: Thursday, July 24, 2003 3:40
PMTo: [EMAIL PROTECTED]Subject: [ActiveDir]
Space on computer
Hello, to all, sorry for the off topic question but
this I can't find an answer to
Gil,
I believe I will take you up on that :-)
Dan
-Original Message-
From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED]
Sent: Sunday, August 03, 2003 9:26 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Special DEC offer (was ADAM Doc)
Getting' kinda loose and happy with *my* tab aren't
Hey, I've seen movies of his toys. He can afford a beer or two.
Off we go, into the wild blue yonder...
Dan
-Original Message-
From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED]
Sent: Monday, August 04, 2003 10:27 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Special DEC offer (was
One thing to do is use NTDSUTIL to sieze the RID master role. Remove all
references to the failed DC in AD (ADSI edit, Sites and Services, DNS,)
Let replication update all DC's.
You should then be able to bring the server back using it's original name.
HTH
-Original Message-
From:
Or maybe DirectoryInsight :-)
-Original Message-
From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 07, 2003 2:15 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Home Labs Interconnected
This sounds like a job for Directory Lockdown!
Toddler
-Origina
We do. It is our way to display the GPO's in human readable format.
Dan
-Original Message-
From: Ellis, Debbie [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 05, 2003 10:32 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Group Policy
Does anyone have a Group Policy Spreadsheet ?
List
People hear it and still stay out on break :-)
-Original Message-
From: Sullivan, Kevin [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 19, 2003 11:51 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] WOT Unreadable code (was Connection String)
Very, very jealous... It is a horrible sou
Title: Message
And a
hard question might be???
-Original Message-From: Gil Kirkpatrick
[mailto:[EMAIL PROTECTED] Sent: Tuesday, September 02, 2003 1:39
PMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] LDAP query on ObjectSID attribute
We're giving a couple of them
Title: Message
Steve,
Creating a password policy and linking it
to an OU will affect local accounts only. So, if I understood your post
correctly, a domain user can have a zero length password, but if they wanted to
create or reset a local account say, on a workstation, they will need
I assume you created the proper named forward zone, this happened to me
once. Make sure the zone allows dynamic updates.
Once the new server is pointing to itself for DNS run net stop netlogon and
net start netlogon from the command prompt. This should re-register the
proper SRV records.
You mi
Can this list suggest a good Exchange 2000/2003 list?
I am now being tasked with providing Exchange 2003 support and hope to
find an Exchange list that can provide the same high quality support,
suggestions, and advise as this list.
Daniel
List info : http://www.activedir.org/mail_list.htm
Lis
Might need to be the Americans against the Canadians since the next DEC is
scheduled for Vancouver B.C.
Dan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CIT)
Sent: Tuesday, November 30, 2004 4:33 AM
To: [EMAIL PROTECTED]
Subject: RE:
80 matches
Mail list logo
