Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Al Mulnick
now. Okay, kidding. My point is, if you > really want to "test" this change, you need to build out a lab that is > reflective of your production environment and test there, because testing > your change on a single production DC is no change at all. > > Make sense? > > Pro

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Almeida Pinto, Jorge de
-26.26.62.80 * E-mail : From: [EMAIL PROTECTED] on behalf of Andy Wang Sent: Sat 2006-11-18 00:42 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] How to completely isolate a DC? The change is domain function level upgrade. So I guess the question is what

Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Andy Wang
Laura -------------- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Almeida Pinto, Jorge de *Sent:* Friday, November 17, 2006 2:03 PM *To:* ActiveDir@mail.activedir.org *Subject:* RE: [ActiveDir] How to completely isolate a DC? did you raise it on the &qu

Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Andy Wang
t; contacts the PDC FSMO raising the FFL --> contacts the schema master FSMO jorge -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Andy Wang *Sent:* Friday, November 17, 2006 17:38 *To:* ActiveDir@mail.activedir.org *Subject:* Re: [Active

Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Andy Wang
The change is domain function level upgrade. So I guess the question is what replication mechanism does it use in terms of DFL change? Through FRS? From the test lab, the change replicated to other DCs immediately. Is this some kind of Urgent Replication? Andy On 11/17/06, Almeida Pinto, J

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Laura A. Robinson
Probably not; I'm very babbly today. Not to be confused with being boobier. Deji is the boob; I'm the babbler. Laura _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Friday, November 17, 2006 2:03 PM To: ActiveDir@mail.activedir.or

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Almeida Pinto, Jorge de
alf Of Andy Wang Sent: Friday, November 17, 2006 17:38 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] How to completely isolate a DC? The change is to raise domain functional from Windows 2000 native to Windows 2003 mode. As I un

Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Al Mulnick
; Your points are valid - I simply thought I'd express another way of > attacking the same 'issue'. > > neil > > -- > *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > *On Behalf Of *Grillenmeier, Guido > *Sent:* 17 November 2006 11:33 >

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Grillenmeier, Guido
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Boaz Galil Sent: Friday, November 17, 2006 4:24 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] How to completely isolate a DC? Guido, 1."Friendly administrator" - if you don't trust someone don't make him admi

Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Andy Wang
The change is to raise domain functional from Windows 2000 native to Windows 2003 mode. As I understand, once I raised domain function level, the ntMixedDomain attribute will be changed along with other functions (like domain controller rename,user password support on the InetOrgPerson objectClas

Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Al Mulnick
*From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Grillenmeier, Guido *Sent:* 17 November 2006 11:33 *To:* ActiveDir@mail.activedir.org *Subject:* RE: [ActiveDir] How to completely isolate a DC? This is a common procedure, but realize that it will still not complete

Re: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Boaz Galil
express another way of attacking the same 'issue'. neil -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Grillenmeier, Guido *Sent:* 17 November 2006 11:33 *To:* ActiveDir@mail.activedir.org *Subject:* RE: [ActiveDir] How to completely isolate a DC? This is a commo

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread joe
What exactly did you change and how did you change it? -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Wang Sent: Thursday, November 16, 2006 3:20 PM To: ActiveDir@mail.activedir.

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread neil.ruston
ilto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: 17 November 2006 11:33 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] How to completely isolate a DC? This is a common procedure, but realize that it will still not completely isolate replication - forced replication will still go thr

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Grillenmeier, Guido
] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 17, 2006 10:20 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] How to completely isolate a DC? In the example of a schema mod, I tend to: 1. Move the schema master FSMO role holder DC to a 'schema mod' site 2. Change the

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread Almeida Pinto, Jorge de
can you describe the type of change? DCs have two types of replication mechanisms...AD replication and FRS replication. For example disabling outbound AD replication does NOT disable FRS replication Met vriendelijke groeten / Kind regards, Ing. Jorge de Almeida Pinto Senior Infrastructure

RE: [ActiveDir] How to completely isolate a DC?

2006-11-17 Thread neil.ruston
In the example of a schema mod, I tend to: 1. Move the schema master FSMO role holder DC to a 'schema mod' site 2. Change the replication schedule for all site links where this site participates, so that replication is stopped in and out of the schema mod site 3. Make the schema change on the DC