Re: in-depth AD

2012-06-12 Thread Steve Kradel
Agreed, the very old backups are of almost no use whatsoever. The environment is now very likely full of issued SIDs and changed passwords that the old backup will have no knowledge of, and one would be hacking at the roots of this problem for years and years. If some kind of restore / new DC IFM

RE: in-depth AD

2012-06-12 Thread Carl Houseman
You've misunderstood the suggestion. You've been advised to restore a recent backup (one made since the problem began) to an isolated lab DC, as an experiment. The theory is, since recent backups complete successfully, perhaps the backup does not contain the corruption, or the corruption

RE: Friday (kinda) Funny

2012-06-12 Thread James Hill
That was the first thing I did. About a minute earlier I cut the power to a generator that was feeding the UPS. The generator was also happily chugging along in that same water. "Diesel power!" is the term I believe. From: Steven Peck [mailto:sep...@gmail.com] Sent: Wednesday, 13 June 2

Re: Friday (kinda) Funny

2012-06-12 Thread Steven Peck
Out of curiousity... did anyone suggest you reach down and turn it off? :) On Tue, Jun 12, 2012 at 4:09 PM, James Hill wrote: > I'm not the biggest fan of APC units but I have seen one continue to power > equipment whilst it was standing in 2-3 foot of water. It was beeping as > if > someth

RE: Friday (kinda) Funny

2012-06-12 Thread James Hill
I'm not the biggest fan of APC units but I have seen one continue to power equipment whilst it was standing in 2-3 foot of water. It was beeping as if something was wrong though. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Sunday, 10 June 2012 5:54 AM To: NT Sy

RE: in-depth AD

2012-06-12 Thread Coleman, Hunter
It sounds like the reality for the customer is a new Active Directory environment. Even if you managed to delete the corrupt entry from the .dit, it would be reasonable to expect that deletion to create other problems within the database. The cut-your-losses approach may be to spin up a new for

Re: ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Rankin, James R
There are loads of those in-the-dark-about-their-own-infrastructure clients out there...think I will stick that in the armoury along with Web's XenApp scripts and some other, more app-specific stuff I use ---Blackberried -Original Message- From: "Free, Bob" Date: Tue, 12 Jun 2012 21:35

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
*shrug* Alrighty then... I may actually be able to get my grubby little hands on a backup that predates the first 447 event (that is, before 1/6/12). Rather concerned though; that is well past the default tombstone age of 60 days (and what is currently set). From what I read in Technet the res

RE: in-depth AD

2012-06-12 Thread Andrew S. Baker
What Steven said. You only have one functional DC, and no useful historical backups. You might want to know if the one you have can be restored, and, if perchance the restore avoids the problem. -ASB: http://XeeMe.com/AndrewBaker Sent from my Motorola Droid RAZR On Jun 12, 2012 5:17 PM, "Daniel

RE: ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Free, Bob
That is so you consultant-dudes can use it on clients who don't know what they have...lol -Original Message- From: Webster [mailto:webs...@carlwebster.com] Sent: Tuesday, June 12, 2012 2:21 PM To: NT System Admin Issues Subject: RE: ADREPLSTATUS - AD Replication Status tool I like this:

Re: in-depth AD

2012-06-12 Thread Steven Peck
At the very least you will know if you can restore it. Since you are into voodoo territory anyway you might get lucky. You will have an environment to play weird make up stuff if you hack the db without mucking up prod further. On Tue, Jun 12, 2012 at 2:13 PM, Daniel Chenault < dchena...@lgnetwo

RE: ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Webster
I like this: Supported operating systems: Undefined I hope "Undefined" is supposed to be Server 2012 as that is in the list of supported OS versions. Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com > -Original Message- > From: Free, Bob [mailto:r.

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
Uh... what's the point? The problem I'm having predates that backup by MONTHS. Daniel Chenault dchena...@lgnetworksinc.com [Description: Description: cid:image001.jpg@01CCF24C.F9B05160] From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Tuesday, June 12, 2012 3:53 PM To: NT System Admin Issue

Re: in-depth AD

2012-06-12 Thread Andrew S. Baker
Try restoring that somewhere offline and see if the problem remains * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Tue, Jun 12, 2012 at 3:56 PM, Daniel Chenault < dchena...@lgnetworksinc.com> wrote: > Did a backup last night befor

Re: IE7 on Win7x64

2012-06-12 Thread Andrew S. Baker
And he costs more over time... * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Tue, Jun 12, 2012 at 3:17 PM, Michael B. Smith wrote: > XP-Mode or MED-V (the corporate version of XP-Mode). > > I'd recommend you update the application.

Re: IE7 on Win7x64

2012-06-12 Thread Steven Peck
Sometimes I really don't like the piper. He's always getting my money. On Tue, Jun 12, 2012 at 12:17 PM, Michael B. Smith wrote: > XP-Mode or MED-V (the corporate version of XP-Mode). > > I'd recommend you update the application. Pay the piper now, or pay the > piper later - you'll still have to

Re: Hugs PST Repair?

2012-06-12 Thread John Cook
Import it into it's own DB on exchange and repair from there? John W. Cook Network Operations Manager Partnership for Strong Families From: Roger Wright [mailto:rhw...@gmail.com] Sent: Tuesday, June 12, 2012 04:04 PM To: NT System Admin Issues Subject: Hugs PST Repair? Our CEO has a 16+GB PST fi

Re: ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Andrew S. Baker
Thanks, Bob... * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Tue, Jun 12, 2012 at 1:46 PM, Free, Bob wrote: > Just looked at this briefly and it should prove useful, especially if you > aren't used to regularly using/interpreting

RE: ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Webster
Definitely will. I will probably add into my slide notes for my presentation on Thursday. Will also consider adding it to my BriForum presentation next month. Thanks Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com > -Original Message- > From: M

RE: Open position in PA or NY

2012-06-12 Thread Benjamin Zachary
Ill be up in Bethlehem on Thursday - Saturday.. no man's land though right now which is nice coming from Miami. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Tuesday, June 12, 2012 11:44 AM To: NT System Admin Issues Subject: OT: Open position in PA or NY Though

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
Did a backup last night before booting into DSRM and it completed without error for whatever that is worth. 2008 R2 SP1, English, 64-bit Daniel Chenault dchena...@lgnetworksinc.com [Description: Description: cid:image001.jpg@01CCF24C.F9B05160] From: Damien Solodow [mailto:damien.solo...@harriso

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
I can’t even log into the other two boxes. Had someone onsite plug in KVM and still no joy even though I’m positive the account is good since it’s the one I’m using elsewhere in the domain. So, no, I would say those two are not doing anything but using up electricity. Daniel Chenault dchena...@

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
I was looking at auth restore and saw that a single object can be restored. Okay... but the object to be restored is referenced with LDAP. So this brings me back to my original question, slightly modified: how do I find out the LDAP reference of this single object (error posted in a message in t

RE: IE7 on Win7x64

2012-06-12 Thread Michael B. Smith
XP-Mode or MED-V (the corporate version of XP-Mode). I'd recommend you update the application. Pay the piper now, or pay the piper later - you'll still have to pay the piper. -Original Message- From: Juned Shaikh [mailto:jsha...@gmail.com] Sent: Tuesday, June 12, 2012 2:26 PM To: NT Sys

RE: in-depth AD

2012-06-12 Thread Michael B. Smith
That would be a core index, probably in the schema. From: Daniel Chenault [mailto:dchena...@lgnetworksinc.com] Sent: Tuesday, June 12, 2012 2:38 PM To: NT System Admin Issues Subject: RE: in-depth AD It's an object of type... uh... I dunno... you tell me... NTDS (1836) A bad page link (error -32

RE: in-depth AD

2012-06-12 Thread Damien Solodow
Ah... I was thinking something different based on what you were saying earlier. Are able to get a successful system state backup from that DC? Also, what Windows version is the DC in question? DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Daniel

RE: IE7 on Win7x64

2012-06-12 Thread Daniel Chenault
Even with compatibility mode in the browser turned on? Sounds like some software that is in serious need of updating. Daniel Chenault dchena...@lgnetworksinc.com -Original Message- From: Juned Shaikh [mailto:jsha...@gmail.com] Sent: Tuesday, June 12, 2012 1:26 PM To: NT System Admin I

Re: IE7 on Win7x64

2012-06-12 Thread Rankin, James R
Try App-V or some other packaging system. Or maybe Browsium may be able to help. --Original Message-- From: Juned Shaikh To: NT System Admin Issues ReplyTo: NT System Admin Issues Subject: IE7 on Win7x64 Sent: 12 Jun 2012 19:25 Hello: Need help to dodge, yet another curve ball during Win

RE: in-depth AD

2012-06-12 Thread Christopher Bodnar
So only one of the domain controllers has this issue? And you are saying that the others never replicated successfully with it once they came online? But they are still successfully authenticating users? If that's the case, couldn't you just remove the offending DC and seize any FSMO roles it h

Re: IE7 on Win7x64

2012-06-12 Thread Richard Stovall
XP Mode? http://www.microsoft.com/windows/virtual-pc/download.aspx On Tue, Jun 12, 2012 at 2:25 PM, Juned Shaikh wrote: > Hello: > > Need help to dodge, yet another curve ball during Win7 migrations! > > Some of the applications that we have (critical ones) only works with IE7. > We tried all p

RE: IE7 on Win7x64

2012-06-12 Thread Kennedy, Jim
App-V http://www.youtube.com/watch?v=3cccFGXORmE -Original Message- From: Juned Shaikh [mailto:jsha...@gmail.com] Sent: Tuesday, June 12, 2012 2:50 PM To: NT System Admin Issues Subject: IE7 on Win7x64 Hello: Need help to dodge, yet another curve ball during Win7 migrations! Some of

RE: Open position in PA or NY

2012-06-12 Thread Rod Trent
Just for kicks.you might send that to myITforum to be added to their jobs system. From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Tuesday, June 12, 2012 11:44 AM To: NT System Admin Issues Subject: OT: Open position in PA or NY Thought I'd re-post this, haven't been get

RE: in-depth AD

2012-06-12 Thread David Lum
I happen to have Microsoft here as part of a Premier support function, they're here doing Active Directory Risk Assessment and Diagnosis, so we have the right guys here. He agrees that unless you have a backup, you're effectively screwed. If it helps you feel better, what you're seeing is prett

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
It's an object of type... uh... I dunno... you tell me... NTDS (1836) A bad page link (error -327) has been detected in a B+ Tree (ObjectID: 163, PgnoRoot: 952) of database c:\windows\ntds\ntds.dit (2596 => 3372, 3369) Daniel Chenault dchena...@lgnetworksinc.com [Description: Description: cid:

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
Sounds great.. one problem. There is only one DC to serve as a reference and that is the one with the problem. When I ran the command it said “invalid naming context” which I take to mean “you can’t compare it to itself you dummy” Daniel Chenault dchena...@lgnetworksinc.com [Description: Descrip

Re: ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Kurt Buff
On Tue, Jun 12, 2012 at 10:46 AM, Free, Bob wrote: > Just looked at this briefly and it should prove useful, especially if you > aren't used to regularly using/interpreting some of the lower level tools > like repadmin. It has what looks like a great monitoring facility plus an > educational el

RE: in-depth AD

2012-06-12 Thread Michael B. Smith
Is there just one DC? From: Daniel Chenault [mailto:dchena...@lgnetworksinc.com] Sent: Tuesday, June 12, 2012 2:19 PM To: NT System Admin Issues Subject: RE: in-depth AD Failed with an error (1206 I believe) stating the database is corrupt. Let me clarify: I, and Microsoft, have run every possib

RE: in-depth AD

2012-06-12 Thread Damien Solodow
Couple questions: 1) I assume there are multiple domain controllers? Do they all report this same error or is it just one DC? 2) What object is an error being reported on? Depending on the object type you may have different options for dealing with it DAMIEN SOLODOW Systems Engineer

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
3 DCs; the other two have NEVER experienced a successful replication because of this corruption. For all intents and purposes there is one DC. Daniel Chenault dchena...@lgnetworksinc.com [Description: Description: cid:image001.jpg@01CCF24C.F9B05160] From: Coleman, Hunter [mailto:hcole...@mt.gov]

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
Failed with an error (1206 I believe) stating the database is corrupt. Let me clarify: I, and Microsoft, have run every possible switch or command available via ntdsutil and esentutl. Each one failed with an error stating corruption. Wanting to try and edit the file manually is not a whim or a w

RE: ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Michael B. Smith
Web - you should take a look at this, especially for Barcelona. -Original Message- From: Free, Bob [mailto:r...@pge.com] Sent: Tuesday, June 12, 2012 1:46 PM To: NT System Admin Issues Subject: ADREPLSTATUS - AD Replication Status tool Just looked at this briefly and it should prove usef

ADREPLSTATUS - AD Replication Status tool

2012-06-12 Thread Free, Bob
Just looked at this briefly and it should prove useful, especially if you aren't used to regularly using/interpreting some of the lower level tools like repadmin. It has what looks like a great monitoring facility plus an educational element. Besides automagically discovering and monitoring it

Re: in-depth AD

2012-06-12 Thread Christopher Bodnar
Any chance this might really be a USN Rollback issue? http://blogs.technet.com/b/glennl/archive/2007/07/26/clean-that-active-directory-forest-of-lingering-objects.aspx Doing something like this on each of the domain controllers? Repadmin /removelingeringobjects ACMEDC1 2ba99ac3-8a25-4711-8d84-

RE: in-depth AD

2012-06-12 Thread Coleman, Hunter
Are you only seeing the 447 event ID on one DC? Is replication only blocked to/from that one DC? From: Daniel Chenault [dchena...@lgnetworksinc.com] Sent: Tuesday, June 12, 2012 10:22 AM To: NT System Admin Issues Subject: RE: in-depth AD Oh yes, it’s up and ru

RE: in-depth AD

2012-06-12 Thread Michael B. Smith
Have you done a defrag of the ntds.dit? From: Daniel Chenault [mailto:dchena...@lgnetworksinc.com] Sent: Tuesday, June 12, 2012 12:23 PM To: NT System Admin Issues Subject: RE: in-depth AD Oh yes, it's up and running. Basic AD functionality is there; I can create users, assign permissions and ot

RE: Reality check

2012-06-12 Thread Free, Bob
To Hunter's point, and the gist of several of these conversations, if you minimize administrative authority through delegation, in this case, who can edit GPOs, that is poor-man's change control. You can actually wrap plenty of process around it even in the absence of AGPM or a 3rd party produ

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
Oh yes, it's up and running. Basic AD functionality is there; I can create users, assign permissions and other simple stuff. No replication is happening and it's to the point that I cannot open the EMC. Daniel Chenault dchena...@lgnetworksinc.com [Description: Description: cid:image001.jpg@01CCF

RE: in-depth AD

2012-06-12 Thread Daniel Chenault
I fully understand. At this point I am looking at from the binary level; it's a database with corruption in a specific place that needs to be rooted out. The only advice I'm looking for is how to FIND the object. No one's attaching any liability to anyone who answers my thread. Daniel Chenault

RE: in-depth AD

2012-06-12 Thread Michael B. Smith
Without knowing a lot more, I'd hesitate to offer any advice on such a crucial piece of infrastructure. I hesitate to do this, because it'll seem somewhat self-serving, but I'd suggest you retain someone to take an in-depth look at it: Brian Desmond ASB

in-depth AD

2012-06-12 Thread Daniel Chenault
It's a long story, aren't they all, but the root of my issue is this: I am getting Event ID 447 for Database Corruption on ntds.dit. Microsoft is telling me to do an authoritative restore. Problem is this problem goes back to January; it is highly doubtful I can locate a backup pre-dating that t

OT: Open position in PA or NY

2012-06-12 Thread Christopher Bodnar
Thought I'd re-post this, haven't been getting much response with our local recruiter. Also this has opened up to our New York office as well. So the candidate could be homed to either our Bethlehem PA office or our NY city office if that helps. == If anyone is loo