XML queries for AD objects

2012-09-19 Thread John Matteson
I know this is an Exchange list, but I'm sure many people on this list could answer this question. I'm trying to build an XML query that I can run thorugh ADUC that will show computer object that have not been logged into in XX days. I'm exercising my Google-Fu, but seem to be whiffing. Anyone

RE: XML queries for AD objects

2012-09-19 Thread Campbell, Rob
I'm not sure how you'd do that. AD will have a last logon for the computer objects, but that will be the last time the computer account logged on, not the last time someone logged into the computer. -Original Message- From: John Matteson [mailto:john.matte...@gmail.com] Sent:

SLIGHTLY OFF TOPIC: IP list allowed to relay on IIS 2k3

2012-09-19 Thread Russ Patterson
I have a client who has an Exchange 2003 org behind two IIS servers that act as the SMTP front-end outbound - in other words, the Exchange org, and various other servers in their AD, relay across the two IIS servers - which are Windows server 2003. It's a fairly large company, and they have a few

Re: XML queries for AD objects

2012-09-19 Thread Steve Kradel
Agreed -- AD does not store the last time a user logged on interactively to a particular computer (and even if it did, XML would not have any place in extracting that information). System Center or the like could help aggregate these data, it is probably available from the on-machine Event Logs,

RE: XML queries for AD objects

2012-09-19 Thread Campbell, Rob
Might be easier to check the lastwritetime of the Profile directories -Original Message- From: Steve Kradel [mailto:skra...@zetetic.net] Sent: Wednesday, September 19, 2012 12:53 PM To: MS-Exchange Admin Issues Subject: Re: XML queries for AD objects Agreed -- AD does not store

Re: XML queries for AD objects

2012-09-19 Thread Peter Johnson
You might be able to pull it using powershell against all your dc's convert to xml Sent on the run! On 19 Sep 2012, at 19:57, Steve Kradel skra...@zetetic.net wrote: Agreed -- AD does not store the last time a user logged on interactively to a particular computer (and even if it did, XML

Re: XML queries for AD objects

2012-09-19 Thread John Matteson
Rob Not sure either. While out in SWA, one of the admins genned a query we could use in ADUC that would show the computers that had been not used in x amount of days. It was a custom query that used the DC/GC as the source, AFAIK. We loaded it into ADUC under stored queries and manipulated

Re: XML queries for AD objects

2012-09-19 Thread Steve Kradel
You could simply use OldCmp for what you describe -- but it tells you if the computers themselves are logging in to the network, not if users are logging in on those computers. http://www.joeware.net/freetools/tools/oldcmp/ --Steve On Wed, Sep 19, 2012 at 3:14 PM, John Matteson

RE: Outlook 2010 and Logon Prompt

2012-09-19 Thread Michael B. Smith
You shouldn't get a login prompt if you have NTLM or Negotiate turned on for the OA vDir or if you have stored the necessary credential into the Windows Credential Cache. From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Wednesday, September 19, 2012 2:21 PM To: MS-Exchange Admin Issues

RE: SLIGHTLY OFF TOPIC: IP list allowed to relay on IIS 2k3

2012-09-19 Thread Michael B. Smith
I _think_ this worked on IIS SMTP. But that was a long long time ago now... http://support.microsoft.com/kb/935635 If that doesn't work, using the metabase explorer is going to be the way to do it... -Original Message- From: Russ Patterson [mailto:rus...@gmail.com] Sent: Wednesday,

RE: Outlook 2010 and Logon Prompt

2012-09-19 Thread Tanya Pinetti
Bill, I've seen issues similar to this where there is a WAN acceleration device between the Outlook client and the Exchange server. The WAN acceleration device was causing the Outlook client to not use MAPI, so it would revert to HTTPS. Do you have a WAN acceleration device in your

RE: Role required for database backups in Exchange 2010?

2012-09-19 Thread Tanya Pinetti
I too had to use the Organization Management role for backup purposes. From: mike.cel...@rfsworld.com To: exchangelist@lyris.sunbelt-software.com Subject: RE: Role required for database backups in Exchange 2010? Date: Tue, 18 Sep 2012 15:50:43 + Thanks Joe. I had noticed the same