RE: [ActiveDir] Outlook 2003 attachment blocking

2004-06-28 Thread Caple, Andrew
Title: Message



What sort of extension is the file that the user is trying to 
receive?



-Original Message-From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of ManjeetSent: Monday, June 28, 2004 3:58 
PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] 
Outlook 2003 attachment blocking

James,

Actually my problem is my company main businness is data conetenting. So we 
have to send the file with attachment .$$$ to the various customer on dialy 
basis. 

Yes we are following the file extension solution as you 
said, but due this our non technical user and the end customer is 
not haapy with this. because they are facing problems in renamin and sending and 
again renaming. 

and the second thing the cutomer do not want to rename the files which he 
recieved because the no of file attachment are hundred in no. on daily 
basis.


So i am looking for a permanent solution


Regrads
Manjeet


ginenergy.com.au wrote:

  
  

  

  
  Manjeet,
  
  Purely from a 
  security perspective I would advise that you leave the default Outlook Level 1 
  security enabled and train your users to zip (or alternate compression format) 
  or rename the file extensions to an "allowed" format e.g. *.123, you could 
  even remove the file extension temporarily. 
  
  James
  
  
  
  
  
  From: Caple, 
  Andrew [mailto:[EMAIL PROTECTED] Sent: Monday, 28 June 2004 3:21 
  PMTo: 
  [EMAIL PROTECTED]Subject: RE: [ActiveDir] Outlook 2003 
  attachment blocking
  
  
  Have you 
  tried the registry hack? (Please see: http://support.microsoft.com/default.aspx?scid=kb;en-us;829982Product=out2003)
  
  
  
  Regards, 
  Andrew
  
  
  
  
  -Original 
  Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of ManjeetSent: Monday, June 28, 2004 2:59 
  PMTo: 
  [EMAIL PROTECTED]Subject: [ActiveDir] Outlook 2003 
  attachment blocking
  
  
  Hi,
  
  
  
  I have this probem.
  
  
  
  Recently we have upgraded Microsoft Outlook 2000 
  client to Outlook 2003.
  
  
  
  Our production need to send the file attachment with 
  the name $$$. But due to outlook local security policy, the recipeitn is not 
  able to opne the sent attachment.
  
  
  
  I have already tried to to disable the Leve1 1 and 
  Level 2 option recommended by microsoft knowledge base but no successfull 
  results.
  
  
  
  
  
  If you any idea how to disable these file attachment 
  security in outlook 2003 then please hep 
me.
  
  
  
  
  
  Thanks in advance.
  
  
  
  Manjeet
  
  System admins
  
  Innodata India Pvt 
  Ltd.
  
  
  
  
  
  
  
  
  
  
  
  Do you Yahoo!?New 
  and Improved Yahoo! Mail - Send 10MB 
  messages!


Do you Yahoo!?New 
and Improved Yahoo! Mail - Send 10MB messages!


RE: [ActiveDir] Outlook 2003 attachment blocking

2004-06-28 Thread james . blair








Manjeet,



Is the problem definitely at the Outlook
level? The below registry entry would allow exe's and mdb's through.
Are you running a content control tool or similar on your Exchange box? Are the
customers "E-Mail Solutions" deleting the attachment?



Windows Registry Editor Version 5.00



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Security]

Level1Remove=.mdb;.exe



James











From: Manjeet
[mailto:[EMAIL PROTECTED] 
Sent: Monday, 28 June 2004 3:58 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Outlook
2003 attachment blocking









James,











Actually my problem is my company main businness is data conetenting.
So we have to send the file with attachment .$$$ to the various customer on
dialy basis. 











Yes we are following the file extension solution as you
said, but due this our non technical user and the end customer is
not haapy with this. because they are facing problems in renamin and sending
and again renaming. 











and the second thing the cutomer do not want to rename the files which
he recieved because the no of file attachment are hundred in no. on daily
basis.

















So i am looking for a permanent solution

















Regrads





Manjeet


















ginenergy.com.au
wrote:





Manjeet,



Purely from a security perspective I would
advise that you leave the default Outlook Level 1 security enabled and train
your users to zip (or alternate compression format) or rename the file
extensions to an allowed format e.g. *.123, you could even remove
the file extension temporarily. 



James











From: Caple, Andrew
[mailto:[EMAIL PROTECTED] 
Sent: Monday, 28 June 2004 3:21 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Outlook
2003 attachment blocking







Have you tried
the registry hack? (Please see: http://support.microsoft.com/default.aspx?scid=kb;en-us;829982Product=out2003)











Regards, Andrew















-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Manjeet
Sent: Monday, June 28, 2004 2:59
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Outlook 2003
attachment blocking





Hi,











I have this probem.











Recently we have upgraded Microsoft Outlook 2000 client to Outlook
2003.











Our production need to send the file attachment with the name $$$. But
due to outlook local security policy, the recipeitn is not able to opne the
sent attachment.











I have already tried to to disable the Leve1 1 and Level 2 option
recommended by microsoft knowledge base but no successfull results.

















If you any idea how to disable these file attachment security in
outlook 2003 then please hep me.

















Thanks in advance.











Manjeet





System admins





Innodata India Pvt Ltd.



































Do you Yahoo!?
New
and Improved Yahoo! Mail - Send 10MB messages!











Do you Yahoo!?
New
and Improved Yahoo! Mail - Send 10MB messages!








RE: [ActiveDir] Outlook 2003 attachment blocking

2004-06-28 Thread Manjeet
We want to alow file name with extension $$$"Caple, Andrew" [EMAIL PROTECTED] wrote:


What sort of extension is the file that the user is trying to receive?



-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ManjeetSent: Monday, June 28, 2004 3:58 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Outlook 2003 attachment blocking

James,

Actually my problem is my company main businness is data conetenting. So we have to send the file with attachment .$$$ to the various customer on dialy basis. 

Yes we are following the file extension solution as you said, but due this our non technical user and the end customer is not haapy with this. because they are facing problems in renamin and sending and again renaming. 

and the second thing the cutomer do not want to rename the files which he recieved because the no of file attachment are hundred in no. on daily basis.


So i am looking for a permanent solution


Regrads
Manjeet


ginenergy.com.au wrote:







Manjeet,

Purely from a security perspective I would advise that you leave the default Outlook Level 1 security enabled and train your users to zip (or alternate compression format) or rename the file extensions to an "allowed" format e.g. *.123, you could even remove the file extension temporarily. 

James





From: Caple, Andrew [mailto:[EMAIL PROTECTED] Sent: Monday, 28 June 2004 3:21 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Outlook 2003 attachment blocking


Have you tried the registry hack? (Please see: http://support.microsoft.com/default.aspx?scid=kb;en-us;829982Product=out2003)



Regards, Andrew




-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ManjeetSent: Monday, June 28, 2004 2:59 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Outlook 2003 attachment blocking


Hi,



I have this probem.



Recently we have upgraded Microsoft Outlook 2000 client to Outlook 2003.



Our production need to send the file attachment with the name $$$. But due to outlook local security policy, the recipeitn is not able to opne the sent attachment.



I have already tried to to disable the Leve1 1 and Level 2 option recommended by microsoft knowledge base but no successfull results.





If you any idea how to disable these file attachment security in outlook 2003 then please hep me.





Thanks in advance.



Manjeet

System admins

Innodata India Pvt Ltd.











Do you Yahoo!?New and Improved Yahoo! Mail - Send 10MB messages!


Do you Yahoo!?New and Improved Yahoo! Mail - Send 10MB messages! 
		Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!

RE: [ActiveDir] Outlook 2003 attachment blocking

2004-06-28 Thread Manjeet

Hi James,

Yes the problem is with outlook level, Because the user having outlook 2000 are able to send the files without any problem. The problem starts coming only after upgradation of some outlook clients from 2000 to outlook 2003.

Please not that I want to allow only file with $$$ extension. 

I have put the $$$ entry in

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Security]
"Level1Remove"=".$$$"


but it did not work.

Regrads
Manjeet
[EMAIL PROTECTED] wrote:







Manjeet,

Is the problem definitely at the Outlook level? The below registry entry would allow exe's and mdb's through. Are you running a content control tool or similar on your Exchange box? Are the customers "E-Mail Solutions" deleting the attachment?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Security]
"Level1Remove"=".mdb;.exe"

James





From: Manjeet [mailto:[EMAIL PROTECTED] Sent: Monday, 28 June 2004 3:58 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Outlook 2003 attachment blocking



James,



Actually my problem is my company main businness is data conetenting. So we have to send the file with attachment .$$$ to the various customer on dialy basis. 



Yes we are following the file extension solution as you said, but due this our non technical user and the end customer is not haapy with this. because they are facing problems in renamin and sending and again renaming. 



and the second thing the cutomer do not want to rename the files which he recieved because the no of file attachment are hundred in no. on daily basis.





So i am looking for a permanent solution





Regrads

Manjeet





ginenergy.com.au wrote:

Manjeet,

Purely from a security perspective I would advise that you leave the default Outlook Level 1 security enabled and train your users to zip (or alternate compression format) or rename the file extensions to an "allowed" format e.g. *.123, you could even remove the file extension temporarily. 

James





From: Caple, Andrew [mailto:[EMAIL PROTECTED] Sent: Monday, 28 June 2004 3:21 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Outlook 2003 attachment blocking


Have you tried the registry hack? (Please see: http://support.microsoft.com/default.aspx?scid=kb;en-us;829982Product=out2003)



Regards, Andrew




-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ManjeetSent: Monday, June 28, 2004 2:59 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Outlook 2003 attachment blocking


Hi,



I have this probem.



Recently we have upgraded Microsoft Outlook 2000 client to Outlook 2003.



Our production need to send the file attachment with the name $$$. But due to outlook local security policy, the recipeitn is not able to opne the sent attachment.



I have already tried to to disable the Leve1 1 and Level 2 option recommended by microsoft knowledge base but no successfull results.





If you any idea how to disable these file attachment security in outlook 2003 then please hep me.





Thanks in advance.



Manjeet

System admins

Innodata India Pvt Ltd.











Do you Yahoo!?New and Improved Yahoo! Mail - Send 10MB messages!



Do you Yahoo!?New and Improved Yahoo! Mail - Send 10MB messages!
		Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!

RE: [ActiveDir] Outlook 2003 attachment blocking

2004-06-28 Thread Grillenmeier, Guido



you might appreciate this little Outlook Attachment Options 
tool:
http://www.pcworld.co.nz/PCWorld/fileworld.nsf/0/1FEB65E47ADDAF37CC256DFE0078B067?OpenDocument

/Guido


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
ManjeetSent: Montag, 28. Juni 2004 06:59To: 
[EMAIL PROTECTED]Subject: [ActiveDir] Outlook 2003 
attachment blocking


Hi,

I have this probem.

Recently we have upgraded Microsoft Outlook 2000 client to Outlook 
2003.

Our production need to send the file attachment with the name $$$. But due 
to outlook local security policy, the recipeitn is not able to opne the sent 
attachment.

I have already tried to to disable the Leve1 1 and Level 2 option 
recommended by microsoft knowledge base but no successfull results.


If you any idea how to disable these file attachment security in outlook 
2003 then please hep me.


Thanks in advance.

Manjeet
System admins
Innodata India Pvt Ltd.






Do you Yahoo!?New 
and Improved Yahoo! Mail - Send 10MB messages!


RE: [ActiveDir] ScriptLogic

2004-06-28 Thread Creamer, Mark








We have
about a years experience with SL, managing about 6000 users in one
domain, and 1000 in another. I find it to be an extremely useful product. The
point of SL isnt that it does anything you cant easily do with
other scripting languages (e.g. vbscript or Perl) if you know what youre
doing. The point is the ease with which you can do it. Most changes you make to
the desktop environment are done by selecting the option in the management
console (GUI driven). You can also develop custom scripts (such as to roll out
a Microsoft patch). Custom scripts are typically written in KiXtart, although
others can be used.

What I find
to be the most valuable part of the way SL works is the validation logic. If I
only want something to apply to Windows 2000 Pro and XP, I only select those in
the GUI. If I only want to roll out a change to a specific subnet, I set that.
To date, I have never seen this validation logic fail.

Forums at
both scriptlogic.com and kixtart.org have been among the best community-run support
Ive seen anywhere.

If I have
any complaint, it would be that I have to maintain separate consoles for each
of the 2 domains. It would be nice to have a console that starts at the
enterprise level, where certain settings could be maintained, and then below
that, domain specific settings. I am told that this functionality is in the
early planning stages for a future release.





mc











From: Nathan
Casey [mailto:[EMAIL PROTECTED] 
Sent: Friday, June 25, 2004 7:48
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] ScriptLogic





We are migrating
from Netware 5.1 to AD and are looking at Scriptlogic to replace our Novell
logon scripts. Any opinions about Scriptlogic would be appreciated.

Thanks

Nathan








RE: [ActiveDir] Outlook 2003 attachment blocking

2004-06-28 Thread Cotter, Paul M.



I will assume you are using exchange. Have you
installed the Outlook Security Form in the Exchange Public folder tree and set
the CheckAdminSettings reg key
(HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Security\CheckAdminSettings:0x1)?

If this is the case, then you need to allow the $$$ file
extension in that form. You then need to completely close Outlook
(file--Exit, not just X the window) and re-open.

See the following link for info on the security settings
form:

http://www.microsoft.com/office/ork/2003/three/ch12/OutG03.htm

Paul



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
ManjeetSent: Monday, June 28, 2004 12:37 AMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Outlook 2003
attachment blocking


Hi Andrew,

Thx for your prompt response. Yes I have already tried this registery hack
but it did not work at all.I have applied both Level 1 and Level2 settings
suggested by microsoft in this link.


Regrads
Manjeet"Caple, Andrew"
[EMAIL PROTECTED] wrote:

  
  Have you tried the registry hack? (Please see: http://support.microsoft.com/default.aspx?scid=kb;en-us;829982Product=out2003)
  
  Regards, Andrew
  
  
  
  -Original Message-From:
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
  On Behalf Of ManjeetSent: Monday, June 28, 2004 2:59
  PMTo: [EMAIL PROTECTED]Subject: [ActiveDir]
  Outlook 2003 attachment blocking
  
  Hi,
  
  I have this probem.
  
  Recently we have upgraded Microsoft Outlook 2000 client to Outlook
  2003.
  
  Our production need to send the file attachment with the name $$$. But
  due to outlook local security policy, the recipeitn is not able to opne the
  sent attachment.
  
  I have already tried to to disable the Leve1 1 and Level 2 option
  recommended by microsoft knowledge base but no successfull results.
  
  
  If you any idea how to disable these file attachment security in outlook
  2003 then please hep me.
  
  
  Thanks in advance.
  
  Manjeet
  System admins
  Innodata India Pvt Ltd.
  
  
  
  
  
  
  Do you Yahoo!?New
  and Improved Yahoo! Mail - Send 10MB messages! 


Do you Yahoo!?Yahoo!
Mail - 50x more storage than other providers!



===

Important:
This electronic mail message and any attached files contain information
intended for the exclusive use of the individual or entity to whom it is
addressed and may contain information that is proprietary, privileged,
confidential and/or exempt from disclosure under applicable law.  If you
are not the intended recipient, you are hereby notified that any viewing,
copying, disclosure or distribution of this information may be subject to
legal restriction or sanction.  Please notify the sender, by electronic
mail or telephone, of any unintended recipients and delete the original
message without making any copies.

===


RE: [ActiveDir] Active directory Error

2004-06-28 Thread Roseta Radfar
hello,
 
I do not think that has any problem because it will give me an IP which is an invalid 
one the correct gateway and DNS.
 
IP Address. . . . . . . . . . . . : 192.148.0.11
 Subnet Mask . . . . . . . . . . . : 255.255.255.0
 Default Gateway . . . . . . . . . : 192.148.0.9
 DNS Servers . . . . . . . . . . . : 192.148.0.9
 
every thing seems to be correct. and one interesting thing is that if i connect to 
that computer with Terminal service every thing is right and works correctly. the 
active directory is shown and you can work with it.
but with on it's own console it says the RPC server can not be found.
 
any help is appriciated.
roseta

-Original Message- 
From: Deji Akomolafe [mailto:[EMAIL PROTECTED] 
Sent: Sun 6/27/2004 12:55 AM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [ActiveDir] Active directory Error


Could you post the output of your IPconfig /all from this server? 
 
Sincerely,

Dj Akmlf, MCSE MCSA MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about 
Yesterday?  -anon

  _  

From: Roseta Radfar
Sent: Sat 6/26/2004 8:58 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Active directory Error


I removed the AD and then installed it again with no error. but the menue to 
users and computers does not open! i tried to install DNS on this DC but it failed. it 
seems that RPC service can not be stopped. maybe it has incountered an error! can it 
be a virus. because i remember that once there was a virus that worked with RPC 
service long ago!
 
thanks for any idea.
roseta.

-Original Message- 
From: Bruce Clingaman [mailto:[EMAIL PROTECTED] 
Sent:  2004/06/24 05:34 . 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [ActiveDir] Active directory Error




Is DNS integrated in AD?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL 
PROTECTED]
Sent: Thursday, June 24, 2004 8:35 AM
To: [EMAIL PROTECTED]
Cc: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Active directory Error

This sounds that ad is not installed (correctly) on the server as you 
should at least get the local server. Did you get any errors during dcpromo? Verify 
DNS settings!

 Have you looked at DNS?  Can you ping the other domain controllers
 from this dc?

 -Original Message-
 From: Roseta Radfar [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 24, 2004 9:19 AM
 To: [EMAIL PROTECTED]
 Subject: [ActiveDir] Active directory Error

 hi,

 I have active directory installed on my DC. but when i click on it .
 This gives error:

 The list of domain controllers for domain is unavailable because the
 RPC server is unavailable.

 what is this error and how can i correct it?

 any help is appriciated.
 roseta
 
.+-wi0g-+YbmPi0-+bf.+-j!
 0j!oryIV+v*
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/[EMAIL PROTECTED]/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/[EMAIL PROTECTED]/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/[EMAIL PROTECTED]/


List info : http://www.activedir.org/mail_list.htm List FAQ : 
http://www.activedir.org/list_faq.htm List archive: 
http://www.mail-archive.com/activedir%40mail.activedir.org/
winmail.dat

RE: [ActiveDir] Active directory Error

2004-06-28 Thread Roseta Radfar
just wanted to add that I have installed DNS which is on AD on this DC and it works 
perferctly!!!
 
hello,

 
I do not think that has any problem because it will give me an IP which is an 
invalid one the correct gateway and DNS.
 
IP Address. . . . . . . . . . . . : 192.148.0.11
 Subnet Mask . . . . . . . . . . . : 255.255.255.0
 Default Gateway . . . . . . . . . : 192.148.0.9
 DNS Servers . . . . . . . . . . . : 192.148.0.9
 
every thing seems to be correct. and one interesting thing is that if i 
connect to that computer with Terminal service every thing is right and works 
correctly. the active directory is shown and you can work with it.
but with on it's own console it says the RPC server can not be found.
 
any help is appriciated.
roseta

-Original Message- 
From: Deji Akomolafe [mailto:[EMAIL PROTECTED] 
Sent: Sun 6/27/2004 12:55 AM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [ActiveDir] Active directory Error


Could you post the output of your IPconfig /all from this server? 
 
Sincerely,

Dj Akmlf, MCSE MCSA MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about 
Yesterday?  -anon

  _  

From: Roseta Radfar
Sent: Sat 6/26/2004 8:58 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Active directory Error


I removed the AD and then installed it again with no error. but the 
menue to users and computers does not open! i tried to install DNS on this DC but it 
failed. it seems that RPC service can not be stopped. maybe it has incountered an 
error! can it be a virus. because i remember that once there was a virus that worked 
with RPC service long ago!
 
thanks for any idea.
roseta.

-Original Message- 
From: Bruce Clingaman [mailto:[EMAIL PROTECTED] 
Sent:  2004/06/24 05:34 . 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [ActiveDir] Active directory Error




Is DNS integrated in AD?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
[EMAIL PROTECTED]
Sent: Thursday, June 24, 2004 8:35 AM
To: [EMAIL PROTECTED]
Cc: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Active directory Error

This sounds that ad is not installed (correctly) on the server 
as you should at least get the local server. Did you get any errors during dcpromo? 
Verify DNS settings!

 Have you looked at DNS?  Can you ping the other domain 
controllers
 from this dc?

 -Original Message-
 From: Roseta Radfar [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 24, 2004 9:19 AM
 To: [EMAIL PROTECTED]
 Subject: [ActiveDir] Active directory Error

 hi,

 I have active directory installed on my DC. but when i click 
on it .
 This gives error:

 The list of domain controllers for domain is unavailable 
because the
 RPC server is unavailable.

 what is this error and how can i correct it?

 any help is appriciated.
 roseta
 
.+-wi0g-+YbmPi0-+bf.+-j!
 0j!oryIV+v*
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/[EMAIL PROTECTED]/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List 

RE: [ActiveDir] Active directory Error

2004-06-28 Thread volker . seyboldt
check the eventlogs. Normally you should get many failures of RPC in such
a case. What does the eventlog show?
Is the RPC service up and running on your machine?

 just wanted to add that I have installed DNS which is on AD on this DC and
 it works perferctly!!!

 hello,


 I do not think that has any problem because it will give me an IP which is
 an invalid one the correct gateway and DNS.

 IP Address. . . . . . . . . . . . : 192.148.0.11
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 192.148.0.9
  DNS Servers . . . . . . . . . . . : 192.148.0.9

 every thing seems to be correct. and one interesting thing is that if i
 connect to that computer with Terminal service every thing is right and
 works correctly. the active directory is shown and you can work with it.
 but with on it's own console it says the RPC server can not be found.

 any help is appriciated.
 roseta

 -Original Message-
 From: Deji Akomolafe [mailto:[EMAIL PROTECTED]
 Sent: Sun 6/27/2004 12:55 AM
 To: [EMAIL PROTECTED]
 Cc:
 Subject: RE: [ActiveDir] Active directory Error


 Could you post the output of your IPconfig /all from this server?

 Sincerely,

 Dèjì Akómöláfé, MCSE MCSA MCP+I
 Microsoft MVP - Directory Services
 www.readymaids.com - we know IT
 www.akomolafe.com
 Do you now realize that Today is the Tomorrow you were worried about
 Yesterday?  -anon

   _

 From: Roseta Radfar
 Sent: Sat 6/26/2004 8:58 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [ActiveDir] Active directory Error


 I removed the AD and then installed it again with no error. but the menue
 to users and computers does not open! i tried to install DNS on this DC
 but it failed. it seems that RPC service can not be stopped. maybe it has
 incountered an error! can it be a virus. because i remember that once
 there was a virus that worked with RPC service long ago!

 thanks for any idea.
 roseta.

 -Original Message-
 From: Bruce Clingaman [mailto:[EMAIL PROTECTED]
 Sent: پنجشنبه 2004/06/24 05:34 ب.ظ
 To: [EMAIL PROTECTED]
 Cc:
 Subject: RE: [ActiveDir] Active directory Error




 Is DNS integrated in AD?

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 [EMAIL PROTECTED]
 Sent: Thursday, June 24, 2004 8:35 AM
 To: [EMAIL PROTECTED]
 Cc: '[EMAIL PROTECTED]'
 Subject: RE: [ActiveDir] Active directory Error

 This sounds that ad is not installed (correctly) on the server as you
 should at least get the local server. Did you get any errors during
 dcpromo? Verify DNS settings!

 Have you looked at DNS?  Can you ping the other domain controllers
 from this dc?

 -Original Message-
 From: Roseta Radfar [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 24, 2004 9:19 AM
 To: [EMAIL PROTECTED]
 Subject: [ActiveDir] Active directory Error

 hi,

 I have active directory installed on my DC. but when i click on it .
 This gives error:

 The list of domain controllers for domain is unavailable because the
 RPC server is unavailable.

 what is this error and how can i correct it?

 any help is appriciated.
 roseta
 .+-wȆi0g-튺+Yb鯲mPi捁0景-튺+b娲ڪf.+-j!硶
 0j!岊or਍yثI䚊V+v*
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive:
 http://www.mail-archive.com/[EMAIL PROTECTED]/


 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/[EMAIL PROTECTED]/

 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/[EMAIL PROTECTED]/


 List info : http://www.activedir.org/mail_list.htm List FAQ :
 http://www.activedir.org/list_faq.htm List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] DNS Records and GC's

2004-06-28 Thread Myrick, Todd (NIH/CIT)
I have a quick question.  In Windows 2000.  If AD-Integrated storage is used
for DNS zone data.  Is the data indexed in GC's or is it just the zone info?

I used LDP to connect to a GC, and I was able to browse the NC of a domain
that had AD-Integrated DNS.  When it came to looking at the data within the
DNS zone it took a while to get that info, leading me to think it might have
required a referral to get the extended information.

Thanks,
Todd
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] Effects on Exchange on the move from Mixed to Native

2004-06-28 Thread Rutherford, Robert
Title: Effects on Exchange on the move from Mixed to Native






Hi All,


Coming from a domino background.


I'm about to move a domain here to native mode. I've performed it before a few time but not with Exchange2000 in the equation. Is their any effect?

BR


Rob


This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains.It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes.The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.


RE: [ActiveDir] Effects on Exchange on the move from Mixed to Native

2004-06-28 Thread Rutherford, Robert
Title: Message



there 
even.

  
  -Original Message-From: Rutherford, 
  Robert Sent: 28 June 2004 15:55To: 
  [EMAIL PROTECTED]Subject: [ActiveDir] Effects on
  Exchange on the move from Mixed to Native
  Hi All, 
  Coming from a domino background. 
  I'm about to move a domain here to native mode. 
  I've performed it before a few time but not with Exchange2000 in the equation. 
  Is their any effect?
  BR 
  Rob This e-mail and the information 
  it contains are confidential and may be privileged. If you have received this 
  e-mail in error please notify the sender immediately and delete the material 
  from any computer. Unless you are the intended recipient, you should not copy 
  this e-mail for any purpose, or disclose its contents to any other person. 
  The MCPS-PRS Alliance is not responsible for the completeness or accuracy 
  of this communication as it has been transmitted over a public network. Whilst 
  the MCPS-PRS Alliance monitors all communications for potential viruses, we 
  accept no responsibility for any loss or damage caused by this e-mail and the 
  information it contains.It is the recipient's responsibility to scan this 
  e-mail and any attachments for viruses. Any e-mails sent to and from the 
  MCPS-PRS Alliance servers may be monitored for quality control and other
  purposes.The MCPS-PRS Alliance Limited is a limited company registered 
  in England under company number 03444246 whose registered office is at c/o 
  29-33 Berners Street, London, W1T 3AB.This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains.It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes.The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.


RE: [ActiveDir] Effects on Exchange on the move from Mixed to Nat ive

2004-06-28 Thread Mulnick, Al
Title: Effects on Exchange on the move from Mixed to Native



On Exchange? Exchange likes native mode. In fact, if 
you'd been following the recommendations, you'd have put Exchange in a native 
mode domain already to allow for USG's. Doesn't seem to affect you, but 
it's one comforting factor :)


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, 
RobertSent: Monday, June 28, 2004 10:55 AMTo: 
[EMAIL PROTECTED]Subject: [ActiveDir] Effects on Exchange 
on the move from Mixed to Native

Hi All, 
Coming from a domino background 
I'm about to move a domain here to native mode. I've 
performed it before a few time but not with Exchange2000 in the equation. Is 
their any effect?
BR 
Rob This e-mail and the information it 
contains are confidential and may be privileged. If you have received this 
e-mail in error please notify the sender immediately and delete the material 
from any computer. Unless you are the intended recipient, you should not copy 
this e-mail for any purpose, or disclose its contents to any other person. 
The MCPS-PRS Alliance is not responsible for the completeness or accuracy of 
this communication as it has been transmitted over a public network. Whilst the 
MCPS-PRS Alliance monitors all communications for potential viruses, we accept 
no responsibility for any loss or damage caused by this e-mail and the 
information it contains.It is the recipient's responsibility to scan this 
e-mail and any attachments for viruses. Any e-mails sent to and from the 
MCPS-PRS Alliance servers may be monitored for quality control and other 
purposes.The MCPS-PRS Alliance Limited is a limited company registered 
in England under company number 03444246 whose registered office is at c/o 29-33 
Berners Street, London, W1T 3AB.


RE: [ActiveDir] Effects on Exchange on the move from Mixed to Nat ive

2004-06-28 Thread Rutherford, Robert
Title: Message



Ahh 
very...

Cheers

  
  -Original Message-From: Mulnick, Al 
  [mailto:[EMAIL PROTECTED] Sent: 28 June 2004 
  16:05To: '[EMAIL PROTECTED]'Subject: RE: 
  [ActiveDir] Effects on Exchange on the move from Mixed to Nat 
  ive
  On Exchange? Exchange likes native mode. In fact, 
  if you'd been following the recommendations, you'd have put Exchange in a 
  native mode domain already to allow for USG's. Doesn't seem to affect 
  you, but it's one comforting factor :)
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Rutherford, 
  RobertSent: Monday, June 28, 2004 10:55 AMTo: 
  [EMAIL PROTECTED]Subject: [ActiveDir] Effects on
  Exchange on the move from Mixed to Native
  
  Hi All, 
  Coming from a domino background 
  I'm about to move a domain here to native mode. 
  I've performed it before a few time but not with Exchange2000 in the equation. 
  Is their any effect?
  BR 
  Rob This e-mail and the information 
  it contains are confidential and may be privileged. If you have received this 
  e-mail in error please notify the sender immediately and delete the material 
  from any computer. Unless you are the intended recipient, you should not copy 
  this e-mail for any purpose, or disclose its contents to any other person. 
  The MCPS-PRS Alliance is not responsible for the completeness or accuracy 
  of this communication as it has been transmitted over a public network. Whilst 
  the MCPS-PRS Alliance monitors all communications for potential viruses, we 
  accept no responsibility for any loss or damage caused by this e-mail and the 
  information it contains.It is the recipient's responsibility to scan this 
  e-mail and any attachments for viruses. Any e-mails sent to and from the 
  MCPS-PRS Alliance servers may be monitored for quality control and other
  purposes.The MCPS-PRS Alliance Limited is a limited company registered 
  in England under company number 03444246 whose registered office is at c/o 
  29-33 Berners Street, London, W1T 3AB.This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains.It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes.The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.


RE: [ActiveDir] 3rd Party AD Management

2004-06-28 Thread Peter Johnson








Well I have used NetIQ Security
Administration Suite. Im not sure of the pricing but I can recommend the
product. It works really well in an AD environment covering all sorts of functionality
such as distributed, delegated administration, enforcement of corporate
standards etc. Offers a granular admin model with a far easier implementation
than native AD tools



Regards

Peter Johnson













From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of George Arezina
Sent: 27 June 2004 23:27
To: [EMAIL PROTECTED]
Subject: [ActiveDir] 3rd Party AD
Management





Hi folks,

Does anyone know or can anyone recommend any third
party active directory management tools, please try to include a price range. 

Cheers,

George












[ActiveDir] Inter-Site Transports

2004-06-28 Thread Salandra, Justin A.
It has been a while so I am asking for a little refresh.

What is the different between an IP Inter-Site Transports and a SMTP
Inter-Site Transports?  When would you use the SMTP one?

Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
[EMAIL PROTECTED]


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] AD diagnostic tools

2004-06-28 Thread Elton Gouvêa Pimentel
Dear friends,

 Does anyone knows any tools to diagnose problems on AD ? 

Thanks,

Elton Pimentel.
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Inter-Site Transports

2004-06-28 Thread Passo, Larry
The IP transports use RPC.

The SMTP transport can only be used if the two DCs that use it are in
different domains AND different sites.

See:

http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologie
s/activedirectory/deploy/confeat/ntopt11.mspx



-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 28, 2004 8:47 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Inter-Site Transports 

It has been a while so I am asking for a little refresh.

What is the different between an IP Inter-Site Transports and a SMTP
Inter-Site Transports?  When would you use the SMTP one?

Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
[EMAIL PROTECTED]


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] DNS Records and GC's

2004-06-28 Thread Tony Murray
Todd

I don't think the delay would be an LDAP referral (although I've been known to be 
wrong before!).  The GC contains all the DNS zone objects and DNS node objects in the 
forest. 

The GC doesn't show the more interesting attributes.  Neither dnsProperty (for dnsZone 
objects) nor dnsRecord (for dnsNode objects) are part of the Partial Attribute Set.

It appears that the basic info is indeed in the GC, but it's not really that helpful.

Tony

-- Original Message --
Wrom: XISHJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYL
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 28 Jun 2004 10:47:26 -0400

I have a quick question.  In Windows 2000.  If AD-Integrated storage is used
for DNS zone data.  Is the data indexed in GC's or is it just the zone info?

I used LDP to connect to a GC, and I was able to browse the NC of a domain
that had AD-Integrated DNS.  When it came to looking at the data within the
DNS zone it took a while to get that info, leading me to think it might have
required a referral to get the extended information.

Thanks,
Todd
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

 





Sent via the WebMail system at mail.activedir.org


 
   
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Chianese, David P.
There are many but the main tools I use are.  There are also many 3rd party support 
tools available on the internet.


Replmon.exe (Res Kit)
Dcdiag.exe  (Support Tools)
netdiag.exe (Support Tools)


Regards,

Dave





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Elton Gouvêa
Pimentel
Sent: Monday, June 28, 2004 1:25 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] AD diagnostic tools


Dear friends,

 Does anyone knows any tools to diagnose problems on AD ? 

Thanks,

Elton Pimentel.
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

This e-mail and any accompanying attachments are confidential.  The information is 
intended solely for the use of the individual to whom it is addressed.  Any review, 
disclosure, copying, distribution, or use of this e-mail communication by others is 
strictly prohibited.  If you are not the intended recipient, please notify us 
immediately by returning this message to the sender and delete all copies.  Thank you 
for your cooperation. 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Inter-Site Transports

2004-06-28 Thread Chianese, David P.
You would use SMTP if you had an unreliable connection or a slow connection where RPC 
traffic would drop.  Also, if replication wasn't required to be timely.  

RPC traffic is highly effected by latency.  SMTP replication would work better on 
slower or unstable link since SMTP doesn't care about latency, if it fails it will 
just retry.

This is a very basic description on why you would use one over the other.


Regards, 

Dave

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Salandra, Justin
A.
Sent: Monday, June 28, 2004 11:47 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Inter-Site Transports 


It has been a while so I am asking for a little refresh.

What is the different between an IP Inter-Site Transports and a SMTP
Inter-Site Transports?  When would you use the SMTP one?

Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
[EMAIL PROTECTED]


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

This e-mail and any accompanying attachments are confidential.  The information is 
intended solely for the use of the individual to whom it is addressed.  Any review, 
disclosure, copying, distribution, or use of this e-mail communication by others is 
strictly prohibited.  If you are not the intended recipient, please notify us 
immediately by returning this message to the sender and delete all copies.  Thank you 
for your cooperation. 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Ellis, Debbie








AD
Tools



-Original Message-
From: Elton Gouvêa Pimentel [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 28, 2004 1:25 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] AD diagnostic tools



Dear friends,



 Does anyone knows any tools to diagnose problems on AD ? 



Thanks,



Elton Pimentel.

List info   : http://www.activedir.org/mail_list.htm

List FAQ    : http://www.activedir.org/list_faq.htm

List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/








RES: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Elton Gouvêa Pimentel
Ok. I know the ones you have listed. However what I really want is a tool that will 
analyse my entire AD and will point out any errors. I am having problems to promote 
Windows 2003 servers on my Windows 2000 farm. I have already looked at the adprep logs 
and they have no error messages. As a matter of fact the Windows 2003 is promoted, but 
it does not work fine. It gets unstable and some services stop to initialize after a 
second boot.

Thanks,

Elton Pimentel.

-Mensagem original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Chianese, David P.
Enviada em: Monday, June 28, 2004 2:35 PM
Para: [EMAIL PROTECTED]
Assunto: RE: [ActiveDir] AD diagnostic tools


There are many but the main tools I use are.  There are also many 3rd party support 
tools available on the internet.


Replmon.exe (Res Kit)
Dcdiag.exe  (Support Tools)
netdiag.exe (Support Tools)


Regards,

Dave





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Elton Gouvêa Pimentel
Sent: Monday, June 28, 2004 1:25 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] AD diagnostic tools


Dear friends,

 Does anyone knows any tools to diagnose problems on AD ? 

Thanks,

Elton Pimentel.
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

This e-mail and any accompanying attachments are confidential.  The information is 
intended solely for the use of the individual to whom it is addressed.  Any review, 
disclosure, copying, distribution, or use of this e-mail communication by others is 
strictly prohibited.  If you are not the intended recipient, please notify us 
immediately by returning this message to the sender and delete all copies.  Thank you 
for your cooperation. 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RES: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Elton Gouvêa Pimentel
Title: Mensagem



I have 
already tried this one. It does not run on my Windows 2003 DC. It keeps 
reporting erros on the .vbs file. 

Thanks 
anyway.

Elton 
Pimentel.

  
  -Mensagem original-De: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  Em nome de Ellis, DebbieEnviada em: Monday, June 28, 2004 
  2:45 PMPara: '[EMAIL PROTECTED]'Assunto: RE: 
  [ActiveDir] AD diagnostic tools
  
  AD 
  Tools
  
  -Original Message-From: Elton Gouvêa 
  Pimentel [mailto:[EMAIL PROTECTED] Sent: Monday, June 28, 2004 1:25 
  PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] AD diagnostic 
  tools
  
  Dear friends,
  
  Does anyone knows any tools to diagnose problems 
  on AD ? 
  
  Thanks,
  
  Elton Pimentel.
  List info : 
  http://www.activedir.org/mail_list.htm
  List FAQ : 
  http://www.activedir.org/list_faq.htm
  List archive: 
  http://www.mail-archive.com/activedir%40mail.activedir.org/


RES: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Justin_Leney

Return Receipt
   
Your  RES: [ActiveDir] AD diagnostic tools 
document   
:  
   
was   Justin Leney/US/DCI  
received   
by:
   
at:   06/28/2004 02:08:36 PM   
   




List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Rachui, Scott
I think you're looking for Microsoft Consulting Services.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Elton Gouvêa
Pimentel
Sent: Monday, June 28, 2004 1:03 PM
To: [EMAIL PROTECTED]
Subject: RES: [ActiveDir] AD diagnostic tools


Ok. I know the ones you have listed. However what I really want is a tool that will 
analyse my entire AD and will point out any errors. I am having problems to promote 
Windows 2003 servers on my Windows 2000 farm. I have already looked at the adprep logs 
and they have no error messages. As a matter of fact the Windows 2003 is promoted, but 
it does not work fine. It gets unstable and some services stop to initialize after a 
second boot.

Thanks,

Elton Pimentel.

-Mensagem original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Chianese, David P.
Enviada em: Monday, June 28, 2004 2:35 PM
Para: [EMAIL PROTECTED]
Assunto: RE: [ActiveDir] AD diagnostic tools


There are many but the main tools I use are.  There are also many 3rd party support 
tools available on the internet.


Replmon.exe (Res Kit)
Dcdiag.exe  (Support Tools)
netdiag.exe (Support Tools)


Regards,

Dave





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Elton Gouvêa Pimentel
Sent: Monday, June 28, 2004 1:25 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] AD diagnostic tools


Dear friends,

 Does anyone knows any tools to diagnose problems on AD ? 

Thanks,

Elton Pimentel.
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

This e-mail and any accompanying attachments are confidential.  The information is 
intended solely for the use of the individual to whom it is addressed.  Any review, 
disclosure, copying, distribution, or use of this e-mail communication by others is 
strictly prohibited.  If you are not the intended recipient, please notify us 
immediately by returning this message to the sender and delete all copies.  Thank you 
for your cooperation. 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Rachui, Scott
There is also:

repadmin.exe (Resource Kit)
adsiedit.exe (Support Tools)
nltest.exe (Resource Kit)
ldp.exe (Support Tools)
gpresult.exe (Resource Kit)
ntdsutil.exe (an absolute must if you're going to work with the NTDS.DIT file)

Another recommendation is Full Armor's 'GPO Repository'.  This is one of the most 
indispensable tools I've ever used.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Chianese, David
P.
Sent: Monday, June 28, 2004 12:35 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD diagnostic tools


There are many but the main tools I use are.  There are also many 3rd party support 
tools available on the internet.


Replmon.exe (Res Kit)
Dcdiag.exe  (Support Tools)
netdiag.exe (Support Tools)


Regards,

Dave





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Elton Gouvêa
Pimentel
Sent: Monday, June 28, 2004 1:25 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] AD diagnostic tools


Dear friends,

 Does anyone knows any tools to diagnose problems on AD ? 

Thanks,

Elton Pimentel.
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

This e-mail and any accompanying attachments are confidential.  The information is 
intended solely for the use of the individual to whom it is addressed.  Any review, 
disclosure, copying, distribution, or use of this e-mail communication by others is 
strictly prohibited.  If you are not the intended recipient, please notify us 
immediately by returning this message to the sender and delete all copies.  Thank you 
for your cooperation. 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] DNS Records and GC's

2004-06-28 Thread Myrick, Todd (NIH/CIT)
Thanks for the second set of eyes.  

I have an Exchange guy that is trying to argue against the inclusion of AD
Integrated DNS zones, because in his POV the number of changes to DNS
records would incur would cause the GC's replicate like crazy.  

I haven't heard anyone really complain to loudly about AD Integrated DNS
cause huge problems, and actually the benefit of AD Integrated DNS is the
ability to ride on top of AD replication, instead of having a dozen
different replication architectures. 

If you call can't tell as of late, I am catering to a couple of Chicken
Little in the office, with all my request for additional information.

Todd


-Original Message-
From: Tony Murray [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 28, 2004 1:29 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] DNS Records and GC's

Todd

I don't think the delay would be an LDAP referral (although I've been known
to be wrong before!).  The GC contains all the DNS zone objects and DNS node
objects in the forest. 

The GC doesn't show the more interesting attributes.  Neither dnsProperty
(for dnsZone objects) nor dnsRecord (for dnsNode objects) are part of the
Partial Attribute Set.

It appears that the basic info is indeed in the GC, but it's not really that
helpful.

Tony

-- Original Message --
Wrom: XISHJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYL
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 28 Jun 2004 10:47:26 -0400

I have a quick question.  In Windows 2000.  If AD-Integrated storage is used
for DNS zone data.  Is the data indexed in GC's or is it just the zone info?

I used LDP to connect to a GC, and I was able to browse the NC of a domain
that had AD-Integrated DNS.  When it came to looking at the data within the
DNS zone it took a while to get that info, leading me to think it might have
required a referral to get the extended information.

Thanks,
Todd
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

 





Sent via the WebMail system at mail.activedir.org


 
   
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] DNS Records and GC's

2004-06-28 Thread Myrick, Todd (NIH/CIT)
Man after reading my response, I am starting to thing I regressed in my
ability to communicate clearly.

I apologize for all the bad grammar.

Todd

-Original Message-
From: Myrick, Todd (NIH/CIT) 
Sent: Monday, June 28, 2004 2:28 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS Records and GC's

Thanks for the second set of eyes.  

I have an Exchange guy that is trying to argue against the inclusion of AD
Integrated DNS zones, because in his POV the number of changes to DNS
records would incur would cause the GC's replicate like crazy.  

I haven't heard anyone really complain to loudly about AD Integrated DNS
cause huge problems, and actually the benefit of AD Integrated DNS is the
ability to ride on top of AD replication, instead of having a dozen
different replication architectures. 

If you call can't tell as of late, I am catering to a couple of Chicken
Little in the office, with all my request for additional information.

Todd


-Original Message-
From: Tony Murray [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 28, 2004 1:29 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] DNS Records and GC's

Todd

I don't think the delay would be an LDAP referral (although I've been known
to be wrong before!).  The GC contains all the DNS zone objects and DNS node
objects in the forest. 

The GC doesn't show the more interesting attributes.  Neither dnsProperty
(for dnsZone objects) nor dnsRecord (for dnsNode objects) are part of the
Partial Attribute Set.

It appears that the basic info is indeed in the GC, but it's not really that
helpful.

Tony

-- Original Message --
Wrom: XISHJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYL
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 28 Jun 2004 10:47:26 -0400

I have a quick question.  In Windows 2000.  If AD-Integrated storage is used
for DNS zone data.  Is the data indexed in GC's or is it just the zone info?

I used LDP to connect to a GC, and I was able to browse the NC of a domain
that had AD-Integrated DNS.  When it came to looking at the data within the
DNS zone it took a while to get that info, leading me to think it might have
required a referral to get the extended information.

Thanks,
Todd
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

 





Sent via the WebMail system at mail.activedir.org


 
   
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Inter-Site Transports

2004-06-28 Thread Salandra, Justin A.
You don't need to have the SMTP protocol installed through IIS on those
domain controllers replicating data on these links do you?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chianese, David
P.
Sent: Monday, June 28, 2004 1:40 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Inter-Site Transports 

You would use SMTP if you had an unreliable connection or a slow
connection where RPC traffic would drop.  Also, if replication wasn't
required to be timely.  

RPC traffic is highly effected by latency.  SMTP replication would work
better on slower or unstable link since SMTP doesn't care about latency,
if it fails it will just retry.

This is a very basic description on why you would use one over the
other.


Regards, 

Dave

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Salandra, Justin
A.
Sent: Monday, June 28, 2004 11:47 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Inter-Site Transports 


It has been a while so I am asking for a little refresh.

What is the different between an IP Inter-Site Transports and a SMTP
Inter-Site Transports?  When would you use the SMTP one?

Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
[EMAIL PROTECTED]


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

This e-mail and any accompanying attachments are confidential.  The
information is intended solely for the use of the individual to whom it
is addressed.  Any review, disclosure, copying, distribution, or use of
this e-mail communication by others is strictly prohibited.  If you are
not the intended recipient, please notify us immediately by returning
this message to the sender and delete all copies.  Thank you for your
cooperation. 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] FRS EventID 13568

2004-06-28 Thread JCARROS



Hy,
 Any have 
idea or it happened ? resolveNTFS USN journal truncated ? The Server is Windows 2000 SP4.
Thanks.

Event Type:ErrorEvent 
Source:NtFrsEvent 
Category:NoneUser:N/AComputer:SERVERNAMEDescription:The File 
Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME 
(SYSVOL SHARE)" is in JRNL_WRAP_ERROR. Replica set name 
is : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" Replica 
root path is : "c:\winnt\sysvol\domain" Replica root 
volume is : "\\.\C:" A Replica set hits 
JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN 
journal is not found. This can occur because of one of the following 
reasons. [1] Volume "\\.\C:" has been formatted. 
[2] The NTFS USN journal on volume "\\.\C:" has been deleted. [3] The NTFS USN journal on volume 
"\\.\C:" has been truncated. Chkdsk can truncate the journal if it 
finds corrupt entries at the end of the journal. [4] File Replication 
Service was not running on this computer for a long time. [5] File 
Replication Service could not keep up with the rate of Disk IO activity on 
"\\.\C:". Setting the "Enable Journal Wrap Automatic 
Restore" registry parameter to 1 will cause the following recovery steps to be 
taken to automatically recover from this error state. [1] At the first 
poll, which will occur in 5 minutes, this computer will be deleted from the 
replica set. If you do not want to wait 5 minutes, then run "net stop ntfrs" 
followed by "net start ntfrs" to restart the File Replication Service. 
[2] At the poll following the deletion this computer will be re-added 
to the replica set. The re-addition will trigger a full tree sync for the 
replica set.AVISO LEGAL:Esta informacion es privada y confidencial y esta dirigida unicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha informacion por favor elimine el mensaje. La distribucion o copia de este mensaje esta estrictamente prohibida. Esta comunicacion es solo para propositos de informacion y no debe ser considerada como propuesta, aceptacion ni como una declaracion de voluntad oficial de REPSOL YPF S.A. y/o subsidiarias y/o afiliadas. La transmision de e-mails no garantiza que el correo electronico sea seguro o libre de error. Por consiguiente, no manifestamos que esta informacion sea completa o precisa. Toda informacion esta sujeta a alterarse sin previo aviso. 

This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, disseminastribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from REPSOL YPF S.A. and/or subsidiaries and/or affiliates. Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.


RE: [ActiveDir] FRS EventID 13568

2004-06-28 Thread Rachui, Scott



FRS 
determines what it needs to replicate based on the NTFS journal. If FRS is 
offline for a period of time, it's possible that the NTFS journal has wrapped 
(been overwritten by newer stuff). If the journal has overwritten itself 
while FRS is offline, it won't know of any changes in the files that it might 
need to replicate. Because of this, an error is recorded showing that 
Journal Wrap occurred.

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of 
  [EMAIL PROTECTED]Sent: Monday, June 28, 2004 2:18 
  PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] 
  FRS EventID 13568Sensitivity: Private
  Hy,
   Any have 
  idea or it happened ? resolveNTFS USN journal truncated ? The Server is Windows 2000 SP4.
  Thanks.
  
  Event Type:ErrorEvent 
  Source:NtFrsEvent 
  Category:NoneUser:N/AComputer:SERVERNAMEDescription:The File 
  Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME 
  (SYSVOL SHARE)" is in JRNL_WRAP_ERROR. Replica set name 
  is : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" Replica 
  root path is : "c:\winnt\sysvol\domain" Replica root 
  volume is : "\\.\C:" A Replica set hits 
  JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN 
  journal is not found. This can occur because of one of the following 
  reasons. [1] Volume "\\.\C:" has been 
  formatted. [2] The NTFS USN journal on volume "\\.\C:" has been deleted. [3] The NTFS USN journal on volume 
  "\\.\C:" has been truncated. Chkdsk can truncate the journal if it 
  finds corrupt entries at the end of the journal. [4] File 
  Replication Service was not running on this computer for a long time. 
  [5] File Replication Service could not keep up with the rate of Disk 
  IO activity on "\\.\C:". Setting the 
  "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the 
  following recovery steps to be taken to automatically recover from this error 
  state. [1] At the first poll, which will occur in 5 minutes, this 
  computer will be deleted from the replica set. If you do not want to wait 5 
  minutes, then run "net stop ntfrs" followed by "net start ntfrs" to restart 
  the File Replication Service. [2] At the poll following the deletion 
  this computer will be re-added to the replica set. The re-addition will 
  trigger a full tree sync for the replica set.
  
  AVISO LEGAL:Esta informacion es privada y confidencial y 
  esta dirigida unicamente a su destinatario. Si usted no es el destinatario 
  original de este mensaje y por este medio pudo acceder a dicha informacion por 
  favor elimine el mensaje. La distribucion o copia de este mensaje esta 
  estrictamente prohibida. Esta comunicacion es solo para propositos de 
  informacion y no debe ser considerada como propuesta, aceptacion ni como una 
  declaracion de voluntad oficial de REPSOL YPF S.A. y/o subsidiarias y/o 
  afiliadas. La transmision de e-mails no garantiza que el correo electronico 
  sea seguro o libre de error. Por consiguiente, no manifestamos que esta 
  informacion sea completa o precisa. Toda informacion esta sujeta a alterarse 
  sin previo aviso.This information is private and confidential and 
  intended for the recipient only. If you are not the intended recipient of this 
  message you are hereby notified that any review, disseminastribution or 
  copying of this message is strictly prohibited. This communication is for 
  information purposes only and shall not be regarded neither as a proposal, 
  acceptance nor as a statement of will or official statement from REPSOL YPF 
  S.A. and/or subsidiaries and/or affiliates. Email transmission cannot be 
  guaranteed to be secure or error-free. Therefore, we do not represent that 
  this information is complete or accurate and it should not be relied upon as 
  such. All information is subject to change without notice. 



Re: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Brent Westmoreland
You should look at netpro's directory troubleshooter.  I am surprised Gil
hasn't already been on this thread ; )


 From: Elton Gouvêa Pimentel [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 Date: Mon, 28 Jun 2004 14:24:48 -0300
 To: [EMAIL PROTECTED]
 Subject: [ActiveDir] AD diagnostic tools
 
 Dear friends,
 
  Does anyone knows any tools to diagnose problems on AD ?
 
 Thanks,
 
 Elton Pimentel.
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] DNS Records and GC's

2004-06-28 Thread deji
Easy to fix this. Tell your Exchange guy to show you the Matrix he's looking
at to draw his replicate like crazy conclusion. Then tell him that AD-intg
can easily be reversed IF crazy things start happening.
 
From where I'm standing, AD-intg does not induce crazy behaviors. Oftentime,
when you get crazy behaviors, it will be caused by something else. There
are attributes that are not indexed by design, and there are occassion for
referrals and Exchange (or more accurately, Outlook) will sometimes complain
during referral chasing. But, these have nothing to do with your DNS.
 
 
Sincerely,

Dèjì Akómöláfé, MCSE MCSA MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon



From: [EMAIL PROTECTED] on behalf of Myrick, Todd (NIH/CIT)
Sent: Mon 6/28/2004 11:28 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DNS Records and GC's



Thanks for the second set of eyes. 

I have an Exchange guy that is trying to argue against the inclusion of AD
Integrated DNS zones, because in his POV the number of changes to DNS
records would incur would cause the GC's replicate like crazy. 

I haven't heard anyone really complain to loudly about AD Integrated DNS
cause huge problems, and actually the benefit of AD Integrated DNS is the
ability to ride on top of AD replication, instead of having a dozen
different replication architectures.

If you call can't tell as of late, I am catering to a couple of Chicken
Little in the office, with all my request for additional information.

Todd


-Original Message-
From: Tony Murray [mailto:[EMAIL PROTECTED]
Sent: Monday, June 28, 2004 1:29 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] DNS Records and GC's

Todd

I don't think the delay would be an LDAP referral (although I've been known
to be wrong before!).  The GC contains all the DNS zone objects and DNS node
objects in the forest.

The GC doesn't show the more interesting attributes.  Neither dnsProperty
(for dnsZone objects) nor dnsRecord (for dnsNode objects) are part of the
Partial Attribute Set.

It appears that the basic info is indeed in the GC, but it's not really that
helpful.

Tony

-- Original Message --
Wrom: XISHJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYL
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 28 Jun 2004 10:47:26 -0400

I have a quick question.  In Windows 2000.  If AD-Integrated storage is used
for DNS zone data.  Is the data indexed in GC's or is it just the zone info?

I used LDP to connect to a GC, and I was able to browse the NC of a domain
that had AD-Integrated DNS.  When it came to looking at the data within the
DNS zone it took a while to get that info, leading me to think it might have
required a referral to get the extended information.

Thanks,
Todd
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/







Sent via the WebMail system at mail.activedir.org



  
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] FRS EventID 13568

2004-06-28 Thread David Adner
You most likely want to perform a non-authoritative restore of FRS on the DC
that's in journal wrap.  This shouldn't be confused with a non-authoritative
restore of DS.

Basically, you set the Burflags value to D2 on the DC in journal wrap.  The
DC will then pull in (from a replication partner) the contents of SYSVOL.
Check out the article below for details.

Also, I would not use the Enable Journal Wrap Automatic Restore Registry
value mentioned in the Event Log entry.  I think it would perform an
automatic D2, which may not always be what you want, or at least you may
want to have more control of when it occurs.

How to Rebuild SYSVOL and Its Content in a Domain
http://support.microsoft.com/default.aspx?scid=kb;en-us;315457 

Troubleshooting journal_wrap errors on Sysvol and DFS replica sets
http://support.microsoft.com/default.aspx?scid=kb;en-us;292438


 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 [EMAIL PROTECTED]
 Sent: Monday, June 28, 2004 14:18
 To: [EMAIL PROTECTED]
 Subject: [ActiveDir] FRS EventID 13568
 Sensitivity: Private
 
 Hy,
 Any have idea or it happened ?  resolve NTFS USN 
 journal truncated ? The Server is Windows 2000 SP4.
 Thanks.
  
 Event Type: Error
 Event Source: NtFrs
 Event Category: None
 User:  N/A
 Computer: SERVERNAME
 Description:
 The File Replication Service has detected that the replica 
 set DOMAIN SYSTEM VOLUME (SYSVOL SHARE) is in JRNL_WRAP_ERROR. 
  
  Replica set name is: DOMAIN SYSTEM VOLUME (SYSVOL SHARE) 
  Replica root path is   : c:\winnt\sysvol\domain 
  Replica root volume is : \\.\C file://\\.\C : 
  A Replica set hits JRNL_WRAP_ERROR when the record that it 
 is trying to read from the NTFS USN journal is not found.  
 This can occur because of one of the following reasons. 
  
  [1] Volume \\.\C file://\\.\C : has been formatted. 
  [2] The NTFS USN journal on volume \\.\C file://\\.\C : 
 has been deleted. 
  [3] The NTFS USN journal on volume \\.\C file://\\.\C : 
 has been truncated. Chkdsk can truncate the journal if it 
 finds corrupt entries at the end of the journal. 
  [4] File Replication Service was not running on this 
 computer for a long time. 
  [5] File Replication Service could not keep up with the rate 
 of Disk IO activity on \\.\C file://\\.\C :. 
  Setting the Enable Journal Wrap Automatic Restore registry 
 parameter to 1 will cause the following recovery steps to be 
 taken to automatically recover from this error state. 
  [1] At the first poll, which will occur in 5 minutes, this 
 computer will be deleted from the replica set. If you do not 
 want to wait 5 minutes, then run net stop ntfrs followed by 
 net start ntfrs to restart the File Replication Service. 
  [2] At the poll following the deletion this computer will be 
 re-added to the replica set. The re-addition will trigger a 
 full tree sync for the replica set. 
  

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] How to change the computer name of a Domain contr oller

2004-06-28 Thread Tieman, Harold A Mr ANOSC/FCBS
Title: Message









I did this recently in a lab environment.
DNS is left dirty after the process. Sort of a good/bad thing. Both names can
be resolved to the same IP (old/new). Some cleanup will be in order
eventually. Definitely suggest testing in a lab first.



-Al 



-Original Message-
From: Michael Wassell
[mailto:[EMAIL PROTECTED] 
Sent: Monday, June
 28, 2004 5:35 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] How to
change the computer name of a Domain contr oller



Just thought I'd chime
in.



I have accomplished doing
this only by first demoting the DC, forcing a domain sync, renaming (I chose to
rebuild, as opposed to rename), and promoting afterwards with the new name.



From what I read MS
doesn't support renaming a DC, only renaming the domain.



Not sure if this would
apply, but, I think MS released a tool that modifies all of the registry/schema
entries for Exchange after a server has been renamed, if it were me I wouldn't
mess with it, but pick your poison. I renamed an Exchange server as well
and I just ended up rebuilding/patching the server and the IS mounted fine
afterwards.









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Manbinder Pal Singh
Sent: Monday, June 28, 2004 8:15
AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] How to
change the computer name of a Domain contr oller

I have to still try what
others told me on this alias.

BTW its rename of host
and not the rename of domain. Both are different.



Thank You

Manbinder







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Kemokai, Saffa
Sent: Monday, June 28, 2004 5:21
PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] How to
change the computer name of a Domain contr oller



Yes but on W2K3 server as
far as I know. Google for domainrename tool. If you can't find it,
I can send it to you!











/Saffa/





-Original
Message-
From: Manbinder Pal Singh
[mailto:[EMAIL PROTECTED] 
Sent: Sunday, June 27, 2004 2:12
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] How to change
the computer name of a Domain controller

How to change
the computer name of a Domain controller? Is it possible to change? If yes then
is there any tool or step by step guide to do that? Is the process different if
DC is on w2k or w2k3?

Thank You 
Manbinder 












RE: [ActiveDir] AD diagnostic tools

2004-06-28 Thread Darren Mar-Elia
And at the risk of shameless self-promotion, there's Quest's Spotlight on Active 
Directory...

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brent Westmoreland
Sent: Monday, June 28, 2004 12:55 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] AD diagnostic tools

You should look at netpro's directory troubleshooter.  I am surprised Gil hasn't 
already been on this thread ; )


 From: Elton Gouvêa Pimentel [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 Date: Mon, 28 Jun 2004 14:24:48 -0300
 To: [EMAIL PROTECTED]
 Subject: [ActiveDir] AD diagnostic tools
 
 Dear friends,
 
  Does anyone knows any tools to diagnose problems on AD ?
 
 Thanks,
 
 Elton Pimentel.
 List info   : http://www.activedir.org/mail_list.htm
 List FAQ: http://www.activedir.org/list_faq.htm
 List archive: 
 http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/