RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-02 Thread Michael B. Smith
nt: Friday, December 02, 2005 9:23 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer I was about to mention that we missed that - I think we were looking at the roll-ups and chocolate fountains and I had no clue what it was :) So since I

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-02 Thread Rich Milburn
ell of red herrings in the morning" - anonymous -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 01, 2005 8:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer I missed

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-02 Thread Michael B. Smith
riginal Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 01, 2005 9:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer I missed the whole MONAD (WHOA for short) presentation this year. I

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread Thommes, Michael M.
repeating!) Mike Thommes From: [EMAIL PROTECTED] on behalf of Michael B. Smith Sent: Thu 12/1/2005 7:36 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer I gotta tell ya -- I just started vbscript

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread joe
s going to make Exch Dev listen. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Thursday, December 01, 2005 8:36 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer I gotta te

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread Michael B. Smith
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Thursday, December 01, 2005 8:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer I concur. "Whoa" is a good description. If you are a programmer or mondo scri

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread Ayers, Diane
of a "scripting for dummies.." :-) Diane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Thursday, December 01, 2005 5:14 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Scripting/WMI/

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread Darren Mar-Elia
-- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Thursday, December 01, 2005 5:14 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer ... so in the demo I saw the guy was calculatin

Re: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Bernard, Aric *Sent:* Thursday, December 01, 2005 1:08 PM *To:* ActiveDir@mail.activedir.org *Subject:* RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer Speaking from my own personal discoveries In a nutshel

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread David Cliffe
rk* and look at its offerings. I never digged enough to realize this was one of them, so thanks for that! -DaveC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 01, 2005 9:15 AM To: ActiveDir@mail.activedir.org Subject: RE: [Acti

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread Creamer, Mark
rg Subject: RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer You know that the scriptomatic 2 HTA will create Perl script that does WMI right I am not a huge fan of WMI but there are times in the scripting world if you want to stick to pure script it is in the only way to do what yo

RE: [ActiveDir] Scripting/WMI/MONAD - was FSMO role transfer

2005-12-01 Thread joe
You know that the scriptomatic 2 HTA will create Perl script that does WMI right I am not a huge fan of WMI but there are times in the scripting world if you want to stick to pure script it is in the only way to do what you want and I will use it if I don't have time (or ability as in the case

RE: [ActiveDir] scripting file move issue(OT)

2005-11-11 Thread Brian Desmond
e here End Sub   Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Friday, November 11, 2005 5:23 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] scripting file move is

Re: [ActiveDir] scripting file move issue(OT)

2005-11-11 Thread Tom Kern
sday, November 09, 2005 1:00 PM To: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] scripting file move issue(OT)  thanks   i think i might need a little more assistance here. i'm a little out of my depth  On 11/9/05, Rich Milburn <[EMAIL PROTECTED] > wrote: Tom, Suggest

RE: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Coleman, Hunter
that will show you how to list all files in a folder (and thus get a count), as well as how to move or copy files.   Hunter From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom KernSent: Wednesday, November 09, 2005 1:00 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir]

Re: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Tom Kern
rnSent: Wednesday, November 09, 2005 12:58 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] scripting file move issue(OT)   the source dirs take awhile to refill as they are being filled by xcopy. it copies about 4gig a batch. The destination dir empties in about 10-15secs. also the d

RE: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Rich Milburn
not do, in order that I may learn how to do it." - Pablo Picasso From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, November 09, 2005 12:58 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] scripting file move issue(OT)   the s

Re: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Tom Kern
the source dirs take awhile to refill as they are being filled by xcopy. it copies about 4gig a batch. The destination dir empties in about 10-15secs. also the destinantion dir can only handle 1000 files at a time before being emptied.   thanks   On 11/9/05, Coleman, Hunter <[EMAIL PROTECTED]> wrot

RE: [ActiveDir] scripting file move issue(OT)

2005-11-09 Thread Coleman, Hunter
Yes, this is scriptable. Perl vs VBS? Either will work, so I'd go with whatever you are most comfortable with.   How quickly are your source directories going to refill, and how quickly are is your destination directory going to get cleaned up by the different process? From: [EMAIL PROTECTE

RE: [ActiveDir] Scripting Delegation Question

2005-05-21 Thread joe
ay, May 21, 2005 2:41 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting Delegation Question Deleting an ACE is obviously supported. Supporting removal of ACE is a granular way requires an extensive regression testing, which way more complex than removing all ACE using the sa

RE: [ActiveDir] Scripting Delegation Question

2005-05-21 Thread Sakari Kouti
Hi Dan,   You don't have to remove any ACEs to achieve what you want. Full Control corresponds to 13 bits with a value of 1 in AccessMask. You need to use an AccessMask that excludes Delete and Delete Subtree (you didn't mention Delete All Child Objects, but I would exclude that too).   So yo

RE: [ActiveDir] Scripting Delegation Question

2005-05-21 Thread Dan Holme
Thanks!  I’ll definitely look at your tools & book, Alain! Dan   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alain Lissoir Sent: Friday, May 20, 2005 11:41 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting Delegation Ques

RE: [ActiveDir] Scripting Delegation Question

2005-05-20 Thread Alain Lissoir
he case sensitivity for more examples there.       joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alain LissoirSent: Friday, May 20, 2005 7:10 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting Delegation Question Check out the script at http://users.skynet.

RE: [ActiveDir] Scripting Delegation Question

2005-05-20 Thread joe
    joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alain LissoirSent: Friday, May 20, 2005 7:10 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting Delegation Question Check out the script at http://users.skynet.be/alain.lissoir/conferences/WMIManageSD.z

RE: [ActiveDir] Scripting Delegation Question

2005-05-20 Thread Alain Lissoir
Check out the script at http://users.skynet.be/alain.lissoir/conferences/WMIManageSD.zip I wrote for my books. This script is fully documented in my WMI books at http://www.lissware.net (Vol 2). It supports the management of security descriptors for files, folders, file shares, registry, WMI

RE: [ActiveDir] scripting sacls

2005-05-06 Thread PAUL MAYES
PROTECTED]>Subject: RE: [ActiveDir] scripting saclsDate: Thu, 5 May 2005 15:24:31 -0700Reply-To: ActiveDir@mail.activedir.orgThis is a multi-part message in MIME format.--=_NextPart_000_011A_01C55186.892AACB0Content-Type: text/plain; charset="us-ascii"Content-Transfer-Encoding: 7bitPaul,

RE: [ActiveDir] scripting sacls

2005-05-05 Thread Alain Lissoir
May 05, 2005 12:47 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] scripting sacls Do you currently have permissions to view the SACL through LDAP?   Try this   adfind -b object_DN ntSecurityDescriptor -sddc   If you see a DN but no SDDL representation of the ACL then you may not have

RE: [ActiveDir] scripting sacls

2005-05-05 Thread joe
Do you currently have permissions to view the SACL through LDAP?   Try this   adfind -b object_DN ntSecurityDescriptor -sddc   If you see a DN but no SDDL representation of the ACL then you may not have permissions.   Also I believe I caught the case if one of the components of the ACL doe

RE: [ActiveDir] Scripting DC cleanup?

2005-05-02 Thread Ken Cornetet
wanted to keep. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Saturday, April 30, 2005 3:40 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting DC cleanup? Thoughts on metadata cleanup, from many points on

RE: [ActiveDir] Scripting DC cleanup?

2005-04-30 Thread Brett Shirley
--Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley > Sent: Saturday, April 30, 2005 4:40 PM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] Scripting DC cleanup? > > > > from Dean Wells: > > > ...

RE: [ActiveDir] Scripting DC cleanup?

2005-04-30 Thread Dean Wells
4:40 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting DC cleanup? from Dean Wells: > ... and yet no new (even very small) features will be added within a > Service Pack :) Please stop talking. (see MG again, it's when they goto Regina's house) Cheers, Br

RE: [ActiveDir] Scripting DC cleanup?

2005-04-30 Thread Brett Shirley
Please stop talking. > (see MG again, it's when they goto Regina's house) > > > > Cheers, > BrettSh [msft] > > Posting "as is", confers no rights. > > > On Sat, 30 Apr 2005 [EMAIL PROTECTED] wrote: > > > Hmm... 2003 dsa seems to remove the metadata when you delete the >

RE: [ActiveDir] Scripting DC cleanup?

2005-04-30 Thread Brett Shirley
D] wrote: > Hmm... 2003 dsa seems to remove the metadata when you delete the > domain controller reference from the domain controller container. > Anyone else notice this? > > > > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTEC

RE: [ActiveDir] Scripting DC cleanup?

2005-04-30 Thread Marcus.Oh
, 2005 5:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Scripting DC cleanup?   yeah right ;-)  however, I'm quite happy about the additions in SP1 - even though this should have been called R2 and the planned R2 would then be R3... ;-)   From: [EMAIL PROTECTED] [m

RE: [ActiveDir] Scripting DC cleanup?

2005-04-27 Thread Grillenmeier, Guido
Send - AD mailing listSubject: RE: [ActiveDir] Scripting DC cleanup? ... and yet no new (even very small) features will be added within a Service Pack :) --Dean WellsMSEtechnology* Email: dwells@msetechnology.comhttp://msetechnology.com   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTE

RE: [ActiveDir] Scripting DC cleanup?

2005-03-22 Thread joe
ldn't the setting of "windows" simply be an alias for "mac"?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken CornetetSent: Tuesday, March 22, 2005 12:57 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting DC cleanup? Have you

RE: [ActiveDir] Scripting DC cleanup?

2005-03-22 Thread Ken Cornetet
ed.   if ADMIN_BACKGROUND is set to "mainframe" all windows switch to green-on-black text. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Monday, March 21, 2005 8:44 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDi

RE: [ActiveDir] Scripting DC cleanup?

2005-03-21 Thread Siddharth Sawkar
mailing list Subject: RE: [ActiveDir] Scripting DC cleanup?   2003 RTM - ntdsutil: me cl metadata cleanup: ?    ? - Show this help information  Connections   - Connect to a specific domain controller  Help  - Show

RE: [ActiveDir] Scripting DC cleanup?

2005-03-21 Thread Dean Wells
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Siddharth SawkarSent: Monday, March 21, 2005 9:01 PMTo: ActiveDir@mail.activedir.org; Send - AD mailing listSubject: RE: [ActiveDir] Scripting DC cleanup? Does anyone have a test W2K3 machine they can test this on- if I remember

RE: [ActiveDir] Scripting DC cleanup?

2005-03-21 Thread Siddharth Sawkar
list Subject: RE: [ActiveDir] Scripting DC cleanup?   ... and yet no new (even very small) features will be added within a Service Pack :) -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [ActiveDir] Scripting DC cleanup?

2005-03-21 Thread Dean Wells
21, 2005 7:46 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting DC cleanup? If you're taling about W2K3 then after installing SP1 you don't need to select the site, domain, etc. Just select the server and kill it! QUOTE The Ntdsutil.exe command-line tool for ma

RE: [ActiveDir] Scripting DC cleanup?

2005-03-21 Thread joe
PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting DC cleanup? If you're taling about W2K3 then after installing SP1 you don't need to select the site, domain, etc. Just select the server and kill it! QUOTE The Ntdsutil.exe command-line tool for managing the A

RE: [ActiveDir] Scripting DC cleanup?

2005-03-21 Thread Jorge de Almeida Pinto
On Behalf Of joeSent: Friday, March 18, 2005 18:00To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting DC cleanup? I would recommend watching your AD to see exactly what NTDSUTIL is doing, you can actually just get away from using it and deleting the appropriate objects directly

RE: [ActiveDir] Scripting DC cleanup?

2005-03-18 Thread joe
pecifically and very purposely avoids DCs.     joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken CornetetSent: Friday, March 18, 2005 10:32 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting DC cleanup? I guess I should have elaborated. NTDSUtil ref

RE: [ActiveDir] Scripting DC cleanup?

2005-03-18 Thread Ken Cornetet
ay, March 18, 2005 9:40 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Scripting DC cleanup? You can make ntdsutil work in a script. Just make a batch file. The syntax is to put a sapce between each command and put them in quotes:   ntdsutil "connect to dom

RE: [ActiveDir] Scripting DC cleanup?

2005-03-18 Thread Brian Desmond
You can make ntdsutil work in a script. Just make a batch file. The syntax is to put a sapce between each command and put them in quotes: ntdsutil "connect to domain 1" "do something cool" "build an arc" ntdsutil "connect to domain 2" "do something cool" "build an arc" etc etc --Brian Desmon

RE: [ActiveDir] Scripting DC cleanup?

2005-03-18 Thread Mulnick, Al
Can't imagine why that wouldn't be possible. NTDSUTIL is similar to NETSH in that you can run the commands from a single call. i.e. ntdsutil command command command command. Etc http://www.jsifaq.com/SUBJ/tip4600/rh4675.htm And http://www.microsoft.com/resources/documentation/WindowsServ/2003/s

RE: [ActiveDir] Scripting question - Net Send command

2004-11-04 Thread Charlie Kaiser
ay, November 03, 2004 1:22 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Scripting question - Net Send command > > Create a virtual directory for the web page, and configure it > to run as the local or domain user of your choice. > > -Original Message- >

Re: [ActiveDir] Scripting help

2004-11-03 Thread Steve Schofield
list Sent: Wednesday, November 03, 2004 9:46 AM Subject: RE: [ActiveDir] Scripting help No, had I read your question more thoroughly I'd have known that was useful to you ;)  It currently differentiates the group types by querying on the bit used by AD to maintain the

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent: Wednesday, November 03, 2004 2:16 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting question - Net Send command That was my thought; I'd prefer not to have IUSR running that type of executable. An

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread joe
Those popups are simply mailslot messages. You might be able to find a bit of perl or (doubtfully) vbscript to do that directly. The one thing I really wanted to say is that those messages aren't guaranteed, you might push in that direction to your management. If it is important for the people to

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread Ken Cornetet
004 12:25 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Scripting question - Net Send command > > It's an ugly hole. My option would be to have the tool run in > the context of > another account (like a service account). > > > Sincerely, > > Dèjì Akóm

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread Charlie Kaiser
NA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Wednesday, November 03, 2004 12:25 PM > To: [EMAIL PROTECTED] > Subject: RE:

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread deji
s the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Charlie Kaiser Sent: Wed 11/3/2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting question - Net Send command Yeah; that's kinda what I ran into.

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread Charlie Kaiser
> From: Dale, Rick > Sent: Wednesday, November 03, 2004 1:41 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [ActiveDir] Scripting question - Net Send command > > Try this: > > dim oWSH, msg > Set oWSH = CreateObject("WScript.Shell") >

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread Justin_Leney
Return Receipt Your RE: [ActiveDir] Scripting question - Net Send command document

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread Charlie Kaiser
lk 510 595 5083 ** > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Ken Cornetet > Sent: Wednesday, November 03, 2004 11:12 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Scripting question - Net Send command >

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread Dale, Rick
Try this: dim oWSH, msg Set oWSH = CreateObject("WScript.Shell") msg = "%comspec% /c net send " & sendto & " " " & description oWSH.Run msg Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent:

RE: [ActiveDir] Scripting question - Net Send command

2004-11-03 Thread Ken Cornetet
As a security feature on w2k3, the IUSR_ user id has no permissions to any files (including net.exe). Either give the IUSR_ account permissions to net.exe, or configure the web site to run under a user id that has permission. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTE

RE: [ActiveDir] Scripting help

2004-11-03 Thread Peter Johnson
Thanks Al. I'm learning one hell of lot but the learning curve is almost an overhang :) :) Regards Peter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: 03 November 2004 16:52 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scri

RE: [ActiveDir] Scripting help

2004-11-03 Thread Peter Johnson
:47 To: Send - AD mailing list Subject: RE: [ActiveDir] Scripting help   No, had I read your question more thoroughly I'd have known that was useful to you ;)  It currently differentiates the group types by querying on the bit used by AD to maintain the difference.  Proxy address doesn&#

RE: [ActiveDir] Scripting help

2004-11-03 Thread Mulnick, Al
ohnson Sent: Wednesday, November 03, 2004 9:13 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting help Thanks Dean. Would that return the Security groups that are also being used as DL by virtue of having the proxy address field set? Sorry if it's

RE: [ActiveDir] Scripting help

2004-11-03 Thread Dean Wells
, November 03, 2004 9:13 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting help Thanks Dean. Would that return the Security groups that are also being used as DL by virtue of having the proxy address field set?   Sorry if it’s an obvious question but I new to this side of AD  

RE: [ActiveDir] Scripting help

2004-11-03 Thread Peter Johnson
: 03 November 2004 16:11 To: Send - AD mailing list Subject: RE: [ActiveDir] Scripting help   Here's but two possible ways that sprung to mind.   Returns security groups only -   dsquery * domainroot -filter "(&(objectcategory=group)(!sAMAccountType:1.2.840.113

RE: [ActiveDir] Scripting help

2004-11-03 Thread Dean Wells
Here's but two possible ways that sprung to mind.   Returns security groups only -   dsquery * domainroot -filter "(&(objectcategory=group)(!sAMAccountType:1.2.840.113556.1.4.803:=1))"   Return DLs only -   dsquery * domainroot -filter "(&(objectcategory=group)(sAMAccountType:1.2.840.113556.

RE: [ActiveDir] Scripting GP woes

2004-08-27 Thread Kevin Sullivan
] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Friday, August 27, 2004 1:31 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting GP woes   Kevin- The issue is that the GPMC scripting interface doesn't support Deny ACEs. It only provides a set of pre-determined Allow permi

RE: [ActiveDir] Scripting GP woes

2004-08-27 Thread Darren Mar-Elia
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin SullivanSent: Friday, August 27, 2004 10:16 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting GP woes I am sure I will butcher this explanation but I’ll give it a shot. For a reference, Bill Boswell wrote Chapter 7 (Scri

RE: [ActiveDir] Scripting GP woes

2004-08-27 Thread Coleman, Hunter
absence of the Allow ACE on Read would be sufficient, but Paul said that he needed to set an explicit Deny. From: Kevin Sullivan [mailto:[EMAIL PROTECTED] Sent: Friday, August 27, 2004 11:16 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting GP woes I am sure I will butcher this exp

RE: [ActiveDir] Scripting GP woes

2004-08-27 Thread Kevin Sullivan
…   Kevin   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter Sent: Friday, August 27, 2004 10:06 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Scripting GP woes   Paul-   I think that you're going to have to get the GUID of the GPO, and

RE: [ActiveDir] Scripting GP woes

2004-08-27 Thread Coleman, Hunter
Paul-   I think that you're going to have to get the GUID of the GPO, and then set a Deny Read ACE on the NTFS permissions under Winnt\SYSVOL\sysvol\domain\policies\{GUID}. You could use a script or command line utility like Xcacls to do that.   Hunter From: PAUL MAYES [mailto:[EMAIL PROTE

RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators

2004-07-20 Thread Fugleberg, David A
vid A Sent: Monday, July 12, 2004 10:42 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators I'm running this directly on a lab DC, so that particular guess shouldn't apply...I'm not about to start mucking around in c++ for this (

RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators

2004-07-12 Thread Fugleberg, David A
gle posting... Anyhow, thanks for (once again) putting me on the right track. Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, July 09, 2004 7:21 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting new ACE into DACL fails

RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators

2004-07-09 Thread joe
om: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fugleberg, David A Sent: Friday, July 09, 2004 5:52 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators I suspect that being a Built-in group has something to do with it...I'm just lo

RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators

2004-07-09 Thread Fugleberg, David A
ther folks do when they remove someone from one of the 'protected' groups to return them to a 'normal' user status ? Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Friday, July 09, 2004 4:13 PM To: '[EMAIL

RE: [ActiveDir] Scripting new ACE into DACL fails with Account Op erators

2004-07-09 Thread Mulnick, Al
Not completely sure how to work around it, but they are different group types. Account Operators are built-in domain local accounts whereas your test group is not. Curious why you want to apply this to each account vs. each OU if inheritably permissions is in effect? There may be something help

RE: [ActiveDir] scripting admin

2004-05-02 Thread joe
Excellent, let me know if you want me to review it. :o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robbie Allen (rallen) Sent: Saturday, April 17, 2004 12:24 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] scripting admin But of course

RE: [ActiveDir] scripting admin

2004-04-17 Thread Robbie Allen \(rallen\)
But of course :-) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of joe > Sent: Friday, April 16, 2004 4:44 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] scripting admin > > And you are writi

RE: [ActiveDir] scripting admin

2004-04-16 Thread joe
, 2004 8:23 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] scripting admin On a related note, I'm working on a VBScript to Perl code converter. Input some VBScript code and output the (roughly) equivalent Perl code. I just started a couple of weeks ago, but should have something in a month

RE: [ActiveDir] scripting admin

2004-04-15 Thread JACQUI HURST
Sent: Wednesday, April 14, 2004 2:38 PM> To: [EMAIL PROTECTED]> Subject: RE: [ActiveDir] scripting admin> > I'll second this. I've only run into one thing where I > couldn't get Perl to work (deep, dark, ugly MAPI stuff...)> > Other than that, it's almo

RE: [ActiveDir] scripting admin

2004-04-15 Thread Ken Cornetet
Way Cool! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robbie Allen (rallen) Sent: Thursday, April 15, 2004 7:23 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] scripting admin On a related note, I'm working on a VBScript to Perl code conv

Re: [ActiveDir] scripting admin

2004-04-15 Thread Al Lilianstrom
to:[EMAIL PROTECTED] On Behalf Of joe Sent: Tuesday, April 13, 2004 11:17 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] scripting admin I say Perl... The activestate dist is great. I am not aware of anything off the top of my head you can do in vbscript that you can't do in perl. You m

RE: [ActiveDir] scripting admin

2004-04-15 Thread Robbie Allen \(rallen\)
e.com/ > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Ken Cornetet > Sent: Wednesday, April 14, 2004 2:38 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] scripting admin > > I'll second this. I've only run into one thi

RE: [ActiveDir] scripting admin

2004-04-14 Thread Ken Cornetet
n Behalf Of joe Sent: Tuesday, April 13, 2004 11:17 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] scripting admin I say Perl... The activestate dist is great. I am not aware of anything off the top of my head you can do in vbscript that you can't do in perl. You may want to learn e

RE: [ActiveDir] scripting admin

2004-04-13 Thread joe
I say Perl... The activestate dist is great. I am not aware of anything off the top of my head you can do in vbscript that you can't do in perl. You may want to learn enough vbscript to convert vbscripts others have written to perl. Overall for really simple things vbscript may be easier at fir

RE: [ActiveDir] Scripting terminology question

2004-02-12 Thread joe
EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting terminology question The i, j business in Fortran is because those variables default to being integers (as, I think, do k,l,m,n) - loops need integer variables so you always used the first available integer variables for your loop counters.   Steve

RE: [ActiveDir] Scripting terminology question

2004-02-11 Thread Steve Rochford
February 2004 15:54To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting terminology question i is used for a variety of reasons that go back even before hungarian. It can stand for index for instance which is one of the reasons you see it as common useage in loops. FORTRAN made big use of i/j

RE: [ActiveDir] Scripting terminology question

2004-02-09 Thread joe
you shouldn't use it because MS is destroying the world and Bill is the antichrist.      joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich MilburnSent: Monday, February 09, 2004 9:07 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting terminology questio

RE: [ActiveDir] Scripting terminology question

2004-02-09 Thread Rich Milburn
: joe [mailto:[EMAIL PROTECTED] Sent: Sunday, February 08, 2004 12:50 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Scripting terminology question   I shouldn't even guess - it has come out of the land that produced Squeaky Lobster   However here would be my swing at it... It

RE: [ActiveDir] Scripting terminology question

2004-02-07 Thread joe
: Saturday, February 07, 2004 10:27 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Scripting terminology question And I'm sure there's some obscure but important reason that they use uppercase for "IAD" and lowercase for 's"... :-)     ***

RE: [ActiveDir] Scripting terminology question

2004-02-07 Thread deji Agba
e been using it since it came out of Redmond.   Sincerely,Dèjì Akómöláfé, MCSE MCSA MCP+Iwww.akomolafe.comwww.iyaburo.comDo you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon From: joeSent: Sat 2/7/2004 6:35 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripti

RE: [ActiveDir] Scripting terminology question

2004-02-07 Thread Charlie Kaiser
* -Original Message-From: joe [mailto:[EMAIL PROTECTED] Sent: Saturday, February 07, 2004 6:35 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting terminology question Meaning: 42 Origin: A moon around Saturn that blew apart and is now a ring. IADs: Interface

RE: [ActiveDir] Scripting terminology question

2004-02-07 Thread joe
at I am aware of but helps them stick out.     joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of deji AgbaSent: Thursday, February 05, 2004 10:28 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Scripting terminology question H...I think this belogs in the class of

RE: [ActiveDir] Scripting terminology question

2004-02-05 Thread deji Agba
H...I think this belogs in the class of the "what is the meaning/origin of life?" questions :). I never bothered to ask.     Sincerely,Dèjì Akómöláfé, MCSE MCSA MCP+Iwww.akomolafe.comwww.iyaburo.comDo you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon

RE: [ActiveDir] Scripting terminology question

2004-02-05 Thread Carlos Magalhaes
Title: RE: [ActiveDir] Scripting terminology question Here is a wonderful place to start: http://www.microsoft.com/technet/treeview/default.asp?url=""> It should give you a good foundation to use brilliant tools like Robbie's book. Which by the way I have posted

Re: [ActiveDir] Scripting terminology question

2004-02-05 Thread Tony Murray
At a guess I would say it stands for: Interface to Active Directory services. Tony -- Original Message -- From: Charlie Kaiser <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 4 Feb 2004 19:05:24 -0800 OK, scripting gurus. I'm trying to wrap m

RE: [ActiveDir] Scripting Help

2003-12-08 Thread Chianese, David P.
] Subject: RE: [ActiveDir] Scripting Help David, try recipe 6.2 from Robbie Allen's AD Cookbook. If you don't have the book, I highly recommend it, but you can also find what you need at www.rallenhome.com There are also some create user scripts at Clarence Washington'

RE: [ActiveDir] Scripting Help

2003-12-08 Thread Creamer, Mark
David, try recipe 6.2 from Robbie Allen's AD Cookbook. If you don't have the book, I highly recommend it, but you can also find what you need at www.rallenhome.com There are also some create user scripts at Clarence Washington's site at http://cwashington.netreach.net -Original Message

RE: [ActiveDir] Scripting a DNS Host Record Update

2003-12-03 Thread Holland Matthew BC GB
Title: Message Would also be interested in seeing a sample script…   Thanks Matty   From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: 02 December 2003 20:02 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Scripting a DNS Host Record Update   More or less

RE: [ActiveDir] Scripting a DNS Host Record Update

2003-12-02 Thread Roger Seielstad
: Tuesday, December 02, 2003 12:28 PMTo: AD mailing list (Send)Subject: RE: [ActiveDir] Scripting a DNS Host Record Update If, by references, you mean formal documentation, no, I'm afraid not.  This is a technique I theorized some time ago, I developed a couple of adhoc scripts back

RE: [ActiveDir] Scripting a DNS Host Record Update

2003-12-02 Thread Dean Wells
y.com http://msetechnology.com -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Roger SeielstadSent: Tuesday, December 02, 2003 12:14 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Scripting a DNS Host Record Update Do

  1   2   >