RE: [ActiveDir] AD lag sites and replication

2006-05-31 Thread neil.ruston
projects within the firm [no pressure then!] Thanks to all for the great feedback. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: 30 May 2006 16:17 To: ActiveDir.org Subject: Re: [ActiveDir] AD lag sites and replication Neil

RE: [ActiveDir] AD lag sites and replication

2006-05-31 Thread Justin_Leney
Return Receipt Your RE: [ActiveDir] AD lag sites and replication document: wasJustin Leney/US/DCI received by: at:05/31/2006 09:37:26 AM NEW! COSMEO, THE ONLINE HOMEWORK HELP TOOL BROUGHT TO YOU BY DISCOVERY CHANNEL. FREE TRIAL AT HTTP

RE: [ActiveDir] AD lag sites and replication

2006-05-31 Thread joe
:59 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD lag sites and replication Joe, I thought" (and its a long time since I looked) that you needed to be an enterprise admin to force replication in AD Sites and Services... You can force replication in the domain context in re

RE: [ActiveDir] AD lag sites and replication

2006-05-31 Thread Ulf B. Simon-Weidner
BSimonWeidner Website: http://www.windowsserverfaq.org From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Wade Sent: Tuesday, May 30, 2006 12:59 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD lag sites and replication Neil, 1) If you start setting f

[ActiveDir] AD lag sites and replication

2006-05-30 Thread neil.ruston
Title: AD lag sites and replication I'm looking to implement one or more lag sites, with staggered replication schedules. (i.e. NYC lag replicates tues and thurs, 2-4 am; LON lag replicates mon, wed and fri 2-4 am). We're concerned that admins can still force replication outside of these

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Ulf B. Simon-Weidner
=""> Weblog: http://msmvps.org/UlfBSimonWeidner Website: http://www.windowsserverfaq.org From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, May 30, 2006 9:49 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] AD lag sites an

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread neil.ruston
and policies than use scripts to disable NICs (or connection objects) at scheduled times :) neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-WeidnerSent: 30 May 2006 09:01To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD lag sites and replication You

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Ulf B. Simon-Weidner
IL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, May 30, 2006 10:33 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD lag sites and replication Thanks Ulf. I was hoping to avoid NIC disabling and such like. I was looking for a solution which would

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Dave Wade
ying about getting things to replicate when they are supposed to rather than things replicating when they shouldn't Dave From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-WeidnerSent: 30 May 2006 11:32To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD

Re: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Al Mulnick
Of Ulf B. Simon-Weidner Sent: 30 May 2006 11:32 To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD lag sites and replication Hi Neil, I'd still go for a firewall with scheduled rules. IMHO there's no such thing as locked down replication schedules - as soon as someone is hitting a switch

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Dave Wade
2006 13:53To: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] AD lag sites and replication I think that's point, isn't it? To be able to have a site that lags the rest of them for replication changes? :) FWIW, there is no way that I'm aware of to prevent an admin from triggering

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Coleman, Hunter
t;off-hours", nothing (and nobody)will be able to force replication without setting the epoch back first. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, May 30, 2006 2:33 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD

Re: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Mark Parris
Neil, You could always hack the replication epoch values - but then again.. M -Original Message- From: Dave Wade [EMAIL PROTECTED] Date: Tue, 30 May 2006 14:36:34 To:ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD lag sites and replication Al,   Sorry, I mis-read it. I

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Molkentin, Steve
Neil asked... I'm looking to implement one or more lag sites, with staggered replication schedules. (i.e. NYC lag replicates tues and thurs, 2-4 am; LON lag replicates mon, wed and fri 2-4 am). We're concerned that admins can still force replication outside of these hours using

Re: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Mark Parris
it anyway. Another Guinness please.. -Original Message- From: Molkentin, Steve [EMAIL PROTECTED] Date: Wed, 31 May 2006 02:52:28 To:ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD lag sites and replication Neil asked... I'm looking to implement one or more lag sites

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Ulf B. Simon-Weidner
Website: http://www.windowsserverfaq.org -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Tuesday, May 30, 2006 7:26 PM To: ActiveDir.org Subject: Re: [ActiveDir] AD lag sites and replication Imagine a glass ceiling with a girl in a skirt

Re: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Al Mulnick
ehalf Of Mark ParrisSent: Tuesday, May 30, 2006 7:26 PMTo: ActiveDir.orgSubject: Re: [ActiveDir] AD lag sites and replicationImagine a glass ceiling with a girl in a skirt standing on it\man in a kilt standing on it and you're standing under theceiling someone tells you not to look up. Do you no

Re: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Mark Parris
Al, Could you please translate the English into English? Mark -Original Message- From: Al Mulnick [EMAIL PROTECTED] Date: Tue, 30 May 2006 18:05:06 To:ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD lag sites and replication While I agree that it could happen by accident, I

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread Mark Parris
Title: RE: [ActiveDir] AD lag sites and replication In a company that potentially has more users than some small countries - work it out applying the same logic - let's grant the permission to reset any password to any user. Seriously, if something is being put in place for a reason

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread joe
] [mailto:[EMAIL PROTECTED] On Behalf Of Molkentin, Steve Sent: Tuesday, May 30, 2006 12:52 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD lag sites and replication Neil asked... I'm looking to implement one or more lag sites, with staggered replication schedules. (i.e. NYC lag

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread joe
@mail.activedir.orgSubject: RE: [ActiveDir] AD lag sites and replication Neil, 1) If you start setting firewall rules then I am pretty sure you will break things as you will block urgent replication. What happens if some one changes their password and then goes to the home site? What about group

RE: [ActiveDir] AD lag sites and replication

2006-05-30 Thread joe
for the lag site. joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, May 30, 2006 3:49 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] AD lag sites and replication I'm looking to implement one or more lag sites, with staggered replication

RE: [ActiveDir] AD Lag Sites

2006-03-27 Thread Shawn Hayes
] [mailto:[EMAIL PROTECTED] On Behalf Of Wyatt, David Sent: Thursday, March 09, 2006 7:43 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites Cheers Tomasz. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko Sent: 08 Mar

RE: [ActiveDir] AD Lag Sites

2006-03-09 Thread Wyatt, David
Cheers Tomasz. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko Sent: 08 Mar 2006 21:39 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Lag Sites Wyatt, David wrote: What MS paper? http://www.microsoft.com/downloads

RE: [ActiveDir] AD Lag Sites

2006-03-08 Thread PAUL MAYES
/lurkerHi All,Forgive me a second whilst I ramble on 'cos thisIS going to be a ramble, then shoot me down in flames at the end!The problem with DR is getting the data from somewhere. Typically we go back to tape, which depending on when the last successful backup took place gives you a

RE: [ActiveDir] AD Lag Sites

2006-03-08 Thread neil.ruston
trying to achieve? neilPS I tried to curb my habit of waffling :) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of PAUL MAYESSent: 08 March 2006 13:13To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites /lurker Hi All, Forgive me a second whilst I ramble

Re: [ActiveDir] AD Lag Sites

2006-03-08 Thread Tomasz Onyszko
PAUL MAYES wrote: (...) No need for a lag site, just pick the hour on the timeline and restore from that DC. Ok so it means that you might need bigger disk and you can only snapshot down to 30mins. But if you're a bit creative with a few DC's then you can get much better coverage than lag

RE: [ActiveDir] AD Lag Sites

2006-03-08 Thread Wyatt, David
MAYESSent: 08 Mar 2006 13:13To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites /lurker Hi All, Forgive me a second whilst I ramble on 'cos thisIS going to be a ramble, then shoot me down in flames at the end! The problem with DR is getting the data from

RE: [ActiveDir] AD Lag Sites

2006-03-08 Thread neil.ruston
The MS paper illustrates a way to achieve this without the USN issue. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko Sent: 08 March 2006 13:30 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Lag Sites PAUL MAYES wrote

Re: [ActiveDir] AD Lag Sites

2006-03-08 Thread Tomasz Onyszko
Tomasz Onyszko wrote: Sorry - I've messed up two different things :( please forget about this post. -- Tomasz Onyszko http://www.w2k.pl/blog/ - (PL) http://blogs.dirteam.com/blogs/tomek/ - (EN) List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx

Re: [ActiveDir] AD Lag Sites

2006-03-08 Thread Tomasz Onyszko
[EMAIL PROTECTED] wrote: The MS paper illustrates a way to achieve this without the USN issue. Yes, I'm aware of this. Sorry - I'm a bit overloaded and I've read this post only with one eye before replying. It wasn't my brightest post :( - and there is no re-call option :) -- Tomasz

RE: [ActiveDir] AD Lag Sites

2006-03-08 Thread PAUL MAYES
Whoa, yep perhaps I didn't ramble enough!Simply, whoops I've lost something out of the directory. I need to get that stuff back. Where can i get the stuff back from:- tape - another DC - perhaps deleted object restoration by some other 3rd party or another custom written process,

RE: [ActiveDir] AD Lag Sites

2006-03-08 Thread Wyatt, David
Mar 2006 13:13To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites /lurker Hi All, Forgive me a second whilst I ramble on 'cos thisIS going to be a ramble, then shoot me down in flames at the end! The problem with DR is getting the data from somewhere

RE: [ActiveDir] AD Lag Sites

2006-03-08 Thread Wyatt, David
What MS paper? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 08 Mar 2006 13:46 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites The MS paper illustrates a way to achieve this without the USN issue

Re: [ActiveDir] AD Lag Sites

2006-03-08 Thread Tomasz Onyszko
Wyatt, David wrote: What MS paper? http://www.microsoft.com/downloads/details.aspx?FamilyID=64DB845D-F7A3-4209-8ED2-E261A117FC6Bdisplaylang=en At the end of this document You will find information how to do this. As Jorge pointed today on our chat on IM this document is not addressing

RE: [ActiveDir] AD Lag Sites

2006-03-06 Thread Myrick, Todd \(NIH/CC/DNA\) [E]
the potential to be more effective with less skill. Todd Myrick From: Frank Abagnale [mailto:[EMAIL PROTECTED] Sent: Saturday, March 04, 2006 5:47 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites Todd, You mentioned 'potentially has the ability

RE: [ActiveDir] AD Lag Sites

2006-03-06 Thread deji
is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Myrick, Todd (NIH/CC/DNA) [E] Sent: Mon 3/6/2006 10:36 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites I don't really look at problems from the Trying

RE: [ActiveDir] AD Lag Sites

2006-03-06 Thread Myrick, Todd \(NIH/CC/DNA\) [E]
] Sent: Mon 3/6/2006 2:09 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites He does NOT have to save the company money, he says. That's MY money you are talking about there, bucko! :) Seriously, Todd, you do have to understand that a vast majority of IT shops don't have

RE: [ActiveDir] AD Lag Sites

2006-03-04 Thread Frank Abagnale
to design for full DR or just recovery of objects via a lag site (or both)?neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank AbagnaleSent: 03 March 2006 15:29To: ActiveSubject: [ActiveDir] AD Lag SitesSingle Forest, Single Domain, W2K3 FFL I am thinking

RE: [ActiveDir] AD Lag Sites

2006-03-04 Thread Frank Abagnale
odd MyrickFrom: Almeida Pinto, Jorge de [mailto:[EMAIL PROTECTED] Sent: Friday, March 03, 2006 11:17 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites7 lag sites? holy sh*t! would it be much cheaper to use a solution that can undelete the deleted objects a

RE: [ActiveDir] AD Lag Sites

2006-03-04 Thread Frank Abagnale
very-Part-I.pdf From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David AdnerSent: Freitag, 3. März 2006 20:47To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag SitesI think you're trying to compare apples and oranges. Yes, both solutions can help reduce the

RE: [ActiveDir] AD Lag Sites

2006-03-04 Thread Grillenmeier, Guido
] [mailto:[EMAIL PROTECTED] On Behalf Of Frank AbagnaleSent: Samstag, 4. März 2006 12:00To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites Guido, this is really useful information. I have a single domain forest so I feel comfortable with the Lag Site idea.With multi domain

Re: [ActiveDir] AD Lag Sites

2006-03-04 Thread Irwan Hadi
On 3/3/06, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote: When talking about a software solution to restore deleted objects I know about: Netpro's RestoreADmin Quest's Recovery Manage for AD I don't know the price of both products (I guess per managed object or something like that) but

Re: [ActiveDir] AD Lag Sites

2006-03-04 Thread Irwan Hadi
I meant the number of users in the AD. Sorry for the confusion. On 3/4/06, Irwan Hadi [EMAIL PROTECTED] wrote: On 3/3/06, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote: When talking about a software solution to restore deleted objects I know about: Netpro's RestoreADmin Quest's

[ActiveDir] AD Lag Sites

2006-03-03 Thread Frank Abagnale
Single Forest, Single Domain, W2K3 FFL I am thinking about setting up a lag site for DR purposes. Just for clarification purposes, would I need a separate IP subnet i.eIP subnetthat isn't assigned to any other site in ADto create this?All my existing IP Subnets are assigned to existing

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Almeida Pinto, Jorge de
nt: Friday, March 03, 2006 16:29To: ActiveSubject: [ActiveDir] AD Lag Sites Single Forest, Single Domain, W2K3 FFL I am thinking about setting up a lag site for DR purposes. Just for clarification purposes, would I need a separate IP subnet i.eIP subnetthat isn't a

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread John Roberts
, 2006 10:29 AMTo: ActiveSubject: [ActiveDir] AD Lag Sites Single Forest, Single Domain, W2K3 FFL I am thinking about setting up a lag site for DR purposes. Just for clarification purposes, would I need a separate IP subnet i.eIP subnetthat isn't assigned to any other site in ADto create

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Ulf B. Simon-Weidner
MTo: ActiveSubject: [ActiveDir] AD Lag Sites Single Forest, Single Domain, W2K3 FFL I am thinking about setting up a lag site for DR purposes. Just for clarification purposes, would I need a separate IP subnet i.eIP subnetthat isn't assigned to any other site in ADto

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread neil.ruston
is not catered for IMO). Are you trying to design for full DR or just recovery of objects via a lag site (or both)? neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank AbagnaleSent: 03 March 2006 15:29To: ActiveSubject: [ActiveDir] AD Lag Sites Single Forest, Single Domain, W2K3

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Almeida Pinto, Jorge de
: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites As Jorge mentioned you do not have to follow your physical subnets for Lag-Sites. Usually you would use that as a guideline, but for lag-sites you can do a sub-subnetting. AD replication does not care about the physical

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Brian Desmond
: Friday, March 03, 2006 11:17 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites 7 lag sites? holy sh*t! would it be much cheaper to use a solution that can undelete the deleted objects and restore (push back) the attributes? jorge From: [EMAIL PROTECTED] [mailto

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Brian Desmond
. Simon-Weidner Sent: Friday, March 03, 2006 10:59 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites As Jorge mentioned you do not have to follow your physical subnets for Lag-Sites. Usually you would use that as a guideline, but for lag-sites you can do a sub-subnetting. AD

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Tony Murray
: [ActiveDir] AD Lag Sites 7 lag sites? holy sh*t! would it be much cheaper to use a solution that can undelete the deleted objects and restore (push back) the attributes?jorge From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-WeidnerSent: Friday, March 03

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Almeida Pinto, Jorge de
start by pinging Rick... ping rick.kingslan.microsoft ;-) jorge From: [EMAIL PROTECTED] on behalf of Tony Murray Sent: Fri 2006-03-03 19:59 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites I think Rick Kingslan did something like

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread David Adner
:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Friday, March 03, 2006 1:20 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites When talking about a software solution to restore deleted objects I know about: Netpro's RestoreADmin Quest's Recovery Manage for AD I

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Ulf B. Simon-Weidner
rosoft.com/profile=""> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge deSent: Friday, March 03, 2006 5:17 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites 7 lag sites? holy sh*t! would it be much ch

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Myrick, Todd \(NIH/CC/DNA\) [E]
, March 03, 2006 11:17 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Lag Sites 7 lag sites? holy sh*t! would it be much cheaper to use a solution that can undelete the deleted objects and restore (push back) the attributes? jorge From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] AD Lag Sites

2006-03-03 Thread Grillenmeier, Guido
AIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David AdnerSent: Freitag, 3. März 2006 20:47To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Lag Sites I think you're trying to compare apples and oranges. Yes, both solutions can help reduce the time it takes to perform a rest