object type and alert you to
delta's there.
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, January 25, 2007 5:21 PM
To: ActiveDir@ma
ActiveDir@mail.activedir.org
To
cc
Subject
[ActiveDir] AD Security Auditing
We are embarking on a project to clean up our OUs structure and reassign
permissions that have grown unmanageable over time. To accomplish this it
would be nice to be able to dump permissions on all OU objects
Dir@mail.activedir.org
Subject: [ActiveDir] AD Security Auditing
We are embarking on a project to clean up our OUs structure and reassign
permissions that have grown unmanageable over time. To accomplish this it
would be nice to be able to dump permissions on all OU objects and individual
obj
@mail.activedir.org
Subject: [ActiveDir] AD Security Auditing
We are embarking on a project to clean up our OUs structure and reassign
permissions that have grown unmanageable over time. To accomplish this it
would be nice to be able to dump permissions on all OU objects and individual
object types
We are embarking on a project to clean up our OUs structure and reassign
permissions that have grown unmanageable over time. To accomplish this
it would be nice to be able to dump permissions on all OU objects and
individual object types (users, computers, etc) so that we can determine
who has rig
PROTECTED]
W:
www.quostar.com
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Ramon Linan
Sent: 13 November 2006 14:39
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir]AD
SECURITY."Run As" command used - to impersonate Administrators
Hi,
So I
Hi,
So I
decided to try out GFI event monitor, I am loving it so far, but I am not a
security expert so I am easy to impress.
Anyway,
I got a bunch of emails like the one below. Have you guys seen something similar
in your logs? Is this someone trying to hack or a service trying to run
chael
M.Sent: Tuesday, October 31, 2006 7:17 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Security
Group Information
adfind
-default -f "&(objectclass=group)(groupType=-2147483646)" -tdc
whenChanged
hth,
Mike
Thommes
From:
[EMAIL PROTECTED] [mailto:[EMAIL PRO
ct: [ActiveDir] AD Security
Group Information
I'm having a clear up of my domain and there are approx 8000 security
groups.
Some of these are no longer required, how is the best way to determine
whether the groups are still in use? Is there any way to query the groups to
identify
PROTECTED] On Behalf Of Frank
AbagnaleSent: Tuesday, October 31, 2006 09:51To:
activedir@mail.activedir.orgSubject: [ActiveDir] AD Security Group
Information
I'm having a clear up of my domain and there are approx 8000 security
groups.
Some of these are no longer required, how i
edir@mail.activedir.orgSubject: [ActiveDir] AD Security Group
Information
I'm having a clear up of my domain and there are approx 8000 security
groups.
Some of these are no longer required, how is the best way to determine
whether the groups are still in use? Is there any way to query the
I'm having a clear up of my domain and there are approx 8000 security groups. Some of these are no longer required, how is the best way to determine whether the groups are still in use? Is there any way to query the groups to identify when they were last modified? thanks Frank Single Domain, Wi
Dir@mail.activedir.orgSubject:
RE: [ActiveDir] AD Security permission continues to be
"auto-removed"
Okay, now that is a script I would like to see :)
Todd
From: joe [mailto:[EMAIL PROTECTED]
Sent: Fri 6/23/2006 5:46 PM
To: ActiveDir@mail.activedir.org
Sub
-3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: Myrick, Todd (NIH/CC/DCRI) [E]Sent: Fri 6/23/2006 3:07 PMTo: ActiveDir@mail.activedir.org; ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Security permission continues to be "auto-removed&
Okay, now that is a script I would like to see :)
Todd
From: joe [mailto:[EMAIL PROTECTED]
Sent: Fri 6/23/2006 5:46 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Security permission continues to be "auto-removed"
Hi D
we know ITwww.akomolafe.com -5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: joeSent: Fri 6/23/2006 11:15 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Security permission continues to be "auto-removed"
I read t
CTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CC/DCRI) [E]
Sent: Friday, June 23, 2006 12:59 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Security permission continues to be
"auto-removed"
Not a big fan of "Security" people. :)
Todd
-
Done that
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of joe
Sent: Friday, June 23, 2006 11:13 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Security permission continues to
ttp://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CC/DCRI) [E]Sent: Friday, June 23, 2006 12:57 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Security
permission continues to be "auto-removed"
I gues
day, June 23, 2006 2:01 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Security permission continues to be
"auto-removed"
Why? Do they make you change how you want to do admin work. ;o)
LOL couldn't resist.
--
O'Reilly Active Directory Third Edition -
http:/
C/DCRI) [E]
Sent: Friday, June 23, 2006 12:59 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Security permission continues to be
"auto-removed"
Not a big fan of "Security" people. :)
Todd
-Original Message-
From: Al Lilianstrom [mailto:[EMAIL PROTECTED]
Not a big fan of "Security" people. :)
Todd
-Original Message-
From: Al Lilianstrom [mailto:[EMAIL PROTECTED]
Sent: Friday, June 23, 2006 12:35 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Security permission continues to be
"auto-removed"
Myric
[mailto:[EMAIL PROTECTED]
Sent: Friday, June 23, 2006 12:13
PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD
Security permission continues to be "auto-removed"
Yeah, like rename Domain Admins to
"Unimportant People" and create a new group called Domain Admin
--- Original Message -
From:
joe
To: ActiveDir@mail.activedir.org
Sent: Friday, June 23, 2006 9:12 AM
Subject: RE: [ActiveDir] AD Security
permission continues to be "auto-removed"
Yeah, like rename Domain Admins to "Unimportant People"
and create
:* RE: [ActiveDir] AD Security permission continues to be
"auto-removed"
There is no debate on admins having multiple creds, one for admin work
and one for normal work. Just do it. :)
We took that one step farther.
- Regular user account for 'normal' work
- An admi
to:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CC/DCRI) [E]Sent: Friday, June 23, 2006 11:01 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Security
permission continues to be "auto-removed"
Only Sith deal in
absolutes… :P
When you have a CIO
that likes to be i
Behalf Of Myrick, Todd (NIH/CC/DCRI) [E]
Sent: Friday, June 23, 2006 11:01 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Security permission continues to be
"auto-removed"
Only Sith deal in absolutes… :P
When you have a CIO that likes to be in the Domain Ad
: [ActiveDir] AD
Security permission continues to be "auto-removed"
There is no debate on admins having
multiple creds, one for admin work and one for normal work. Just do it. :)
To put it nicely, if a company doesn't do
this, they are just being silly[1].
I am trying to figure
Thanks for the info!
- Original Message -
From:
[EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Thursday, June 22, 2006 6:33
PM
Subject: RE: [ActiveDir] AD Security
permission continues to be "auto-removed"
I have a 2-part discussi
D] On Behalf Of Myrick, Todd
(NIH/CC/DCRI) [E]Sent: Friday, June 23, 2006 6:50 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Security
permission continues to be "auto-removed"
One more thing to add
to this from my experience.
I think we had
situations arise wh
iveDir@mail.activedir.org
Subject: [ActiveDir] AD Security
permission continues to be "auto-removed"
We have some users that have mobile devices that connect to
Exchange. The 3rd party application uses a dedicated account to
send mail from the devices. This account needs to have "Sen
olafe.comDo you
now realize that Today is the Tomorrow you were worried about Yesterday?
-anon
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of J
BSent: Thursday, June 22, 2006 5:08 PMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] AD Security
permission continues to be &qu
, June 22, 2006 8:08 PMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] AD Security
permission continues to be "auto-removed"
We have some users that have mobile devices that
connect to Exchange. The 3rd party application uses a dedicated
account to send mail from the devices.
We have some users that have mobile devices that
connect to Exchange. The 3rd party application uses a dedicated
account to send mail from the devices. This account needs to have "Send
As..." permissions on each of the user accounts' security settings. We
have set it in all users (about
Myke wrote:
all,
How can I lock down my AD? (docs, papers, best practices...)
Check this documents from microsoft:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKit/c283b699-6124-4c3a-87ef-865443d7ea4b.mspx
http://www.microsoft.com/windowsserver2003/techinfo/overvie
all,
How can I lock down my AD? (docs, papers, best practices...)
tkx
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
I am in the process of testing rights
for our remote LAN Admins and have a couple questions. I have created an
OU for the MFG plant, created a local security group in the OU and created
a user that is a member of that group in the OU. I added all but full control
on the OU for the group I created.
37 matches
Mail list logo
