veDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
It should be that hard to delegate those - you should be
able to create a stub zone for them pointing back to your AD
servers.
Roger SeielstadE-mail Geek
From: [EMAIL PROTECTED]
[mailto:[
,
JosephSent: Wednesday, March 30, 2005 8:20 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
Just the service records. I don't care about the A
records, our process for getting those statically created is pretty
painless. It's the ACLs for dynam
f Of Roger
SeielstadSent: Wednesday, March 30, 2005 8:17 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
What are you trying to delegate - PTR creation or the A
record creation?
Roger SeielstadE-mail Geek & MS-MVP
From: [EMAIL PROTECTED]
PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
This is a bit off the topic of the thread, but since we
are talking about using BIND DNS with AD I'll go ahead and ask. Has
anyone figured out a good way of delegating the update DNS right to your
DC
, March 30, 2005 7:27 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
True,
I've had the same experience with SQL and Kerberos.
On the bright side the issues forced all of our server admins to understand
Kerberos and engage my team to make sure th
TECTED] On Behalf Of
joeSent: Wednesday, March 30, 2005 6:32 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
SQL Server has all sorts of dorked up issues with SPNs, you
have to always check them anyway. Someone was on crack that worked out that
functionality for
veDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
Not only is being able to register it important, but also
that DNS resolves to the correct SPN. Let's say you have a SQL server that
is a member of the us.widget.net domain; however, in DNS it is registered as
sql1.sea.widget.net. If you
pany, we us QIP with regionalized domains)
then make sure your SPNs match up.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Tuesday, March 29, 2005 9:18 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
The permission mod you need to mak
They make perfect sense, Joe.
Cheers,
-ajm
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Wednesday, March 30, 2005 12:09 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Compelling arguments?
Ah not really for hire. Well
http://support.microsoft.com/default.aspx?scid=kb;en-us;258503
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve
Sent: Tuesday, March 29, 2005 7:36 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Compelling arguments?
Joe.
What
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Isenhour,
JosephSent: Tuesday, March 29, 2005 3:43 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Compelling
arguments?
If you're also talking about servers don't forget that by
default computers register their
] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, March 29, 2005 1:01 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Compelling arguments?
Our existing setup involves exactly as described by joe, BIND servers at the
root that feed down to further bind servers at each location with the
ex
L PROTECTED] On Behalf Of Mulnick, Al
Sent: Tuesday, March 29, 2005 1:02 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Compelling arguments?
Phil, you know he's for hire right? He has a "p*mp" and everything last I
heard. :)
That said, it is interesting to see a regio
2:29 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Compelling arguments?
Agreed. I'd love to get more info on your view on that though; get some more
details of how you would set it up in that type of environment given the
chance ;) The issue of geographic DNS isn't something I
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sergio Fonseca
Sent: Tuesday, March 29, 2005 10:56 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Compelling arguments?
Hi,
Interesting perspective Joe.
One thing that I notice every day is that not all
Joe.
What additional permissions are required for disjointed names spaces?
You mention more permissions are required on the computer object?
Care to expand? OR point to where they are documented?
Cheers
On Tue, 29 Mar 2005 12:43:10 -0800, Isenhour, Joseph
<[EMAIL PROTECTED]> wrote:
> If yo
Title: Compelling arguments?
If you're also talking about servers don't forget that by
default computers register their SPN using the AD domain name. So if
you have a server that registers HOST/someserver.myadname.net and the server
actually resolves to someserver.mydnszone.net Kerberos will
hahaha, yeah I didn't know for sure, but I was getting the idea that
he was "for hire" ;)
I just wanted some more details on his thought process though...not a
full out design ;)
Phil
On Tue, 29 Mar 2005 13:01:51 -0500, Mulnick, Al <[EMAIL PROTECTED]> wrote:
> Phil, you know he's for hire right?
, 2005 12:29 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Compelling arguments?
Agreed. I'd love to get more info on your view on that though; get some
more details of how you would set it up in that type of environment
given the chance ;) The issue of geographic DNS isn't
company goals whether or not that
would make sense.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Phil Renouf
Sent: Tuesday, March 29, 2005 12:29 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Compelling arguments?
Agreed. I'd love
Agreed. I'd love to get more info on your view on that though; get
some more details of how you would set it up in that type of
environment given the chance ;) The issue of geographic DNS isn't
something I'd thought of unless it was also attached to a multi domain
geographic type forest (NA, Asia,
Title: Re: [ActiveDir] Compelling arguments?
As always, thanks for the thorough reply, mate...
From: joe <[EMAIL PROTECTED]>
Reply-To:
Date: Tue, 29 Mar 2005 10:29:11 -0500
To:
Subject: RE: [ActiveDir] Compelling arguments?
Ah you mean DNS disjoint namespace. I know of a couple of
Hi,
Interesting perspective Joe.
One thing that I notice every day is that not all code are prepared to
the new features, for example the Domain Controllers location process
is followed by many processes but not all. For example when you set
permissions on a file to a user of other domain the info
Title: Compelling arguments?
Ah you mean DNS disjoint namespace. I know of a couple of
large orgs that do this either because Bind Based DNS is full deployed to a very
large base and they don't want to change it and/or they feel a machine
in California shouldn't have the same DNS Suffix as a
24 matches
Mail list logo
