[ActiveDir] MAC and DNS

2005-11-27 Thread shereen naser
Hi list,
I have a MAC lab in a windows 2000 network eniroment, the MACs take an automatic IP and work fine but they can't resolve names, the MAC users can only reach resources by suppliying the IP address of the resource (on the windows 2000) even if I put the DNS server IP static on the MAC it still can't resolve the windows names, how can I solve this?



Re: [ActiveDir] MAC and DNS

2005-11-27 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

Lessons Learned: Connecting a Macintosh to SBS 2003 Server via SMB:
http://simultaneouspancakes.com/Lessons/archives/2004/12/connecting_a_ma.shtml


What version of Macs?

shereen naser wrote:


Hi list,
I have a MAC lab in a windows 2000 network eniroment, the MACs take an 
automatic IP and work fine but they can't resolve names, the MAC users 
can only reach resources by suppliying the IP address of the resource 
(on the windows 2000) even if I put the DNS server IP static on the 
MAC it still can't resolve the windows names, how can I solve this?


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Query out all user members in nested groups

2005-11-27 Thread Aaron Seet
Thanks, i will see if those articles bring me closer to the task.

Meanwhile for those who have touch with .NET, I was taking a cue from
recommendation of the DirectoryEntry class, and decided to run a little
experiment with that class instead; see what it is capable of. The tutorial
logic made it look _simple_enough_, just instantiate it 

this.directoryNode = new
DirectoryEntry(LDAP://cn=Engineers,ou=Home,dc=riotangel,dc=local);

and then loop through its children

foreach(DirectoryEntry child in directoryNode.Children) 
{
TreeNode newNode = new TreeNode(child.Name);
switch (child.SchemaClassName) 
{
case User :
// something
break;
case Group :
// something
break;
}
}

but in reality, the Children collection is _empty_. I am wondering how I
could get it to load its children tree, even if large? There is nothing
within that class to specific any special form of loading.


Regards,
Aaron

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Saturday, 26 November 2005 22:58


I don't use .NET, but it looks like there is some chatter on this, see 


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] msi package

2005-11-27 Thread shereen naser
Dear all, how can I create an msi file from installation files? any tools recommended?
thank you 


Re: [ActiveDir] msi package

2005-11-27 Thread Mathieu CHATEAU





Sunday, November 27, 2005, 2:20:26 PM, you wrote:







Dear all, how can I create an msi file from installation files? any tools recommended?
thank you






you can use adminstudio from installshield, it's the best i have used (but a $$$ one).

Winstall LE is free but limited to capture an install to make a msi.

NEVER MAKE A MSI FROM A MSI !

cheers,
Mathieu CHATEAU




List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] windows installation question

2005-11-27 Thread Rick Kingslan



You will need to have two things - One: A separate 
partition in which to install XP into. Two: a DOS-bootable network enabled 
floppy to map to a share (in whichan administrative 'dump' of XP has been 
done)or shared CD drive on another machine.

After mapping to one of these two, you could then install 
across the network, selecting the partition for XP - but NOT the same one that 
2000 resides in.

Rick

--Posting is provided "AS IS", and confers no rights or 
warranties ... 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Roseta 
radfarSent: Sunday, November 27, 2005 12:29 AMTo: 
ActiveDir@mail.activedir.orgSubject: [ActiveDir] windows installation 
question


Hello,

I have a computer 
which has a w2k on it. It is on a network and does not have a CD drive. now I 
want to have a XP on it with out removing w2k. Is there any way that I can 
install XP through network without damaging my w2k?

Thanks in 
advance.
Roseta



Re: [ActiveDir] msi package

2005-11-27 Thread shereen naser
Thank you Mathieu, nothing in/from windows?
On 11/27/05, Mathieu CHATEAU [EMAIL PROTECTED] wrote:


Sunday, November 27, 2005, 2:20:26 PM, you wrote:









Dear all, how can I create an msi file from installation files? any tools recommended?
thank you


you can use adminstudio from installshield, it's the best i have used (but a $$$ one).

Winstall LE is free but limited to capture an install to make a msi.

NEVER MAKE A MSI FROM A MSI !

cheers,
Mathieu CHATEAU
List info : http://www.activedir.org/List.aspx List FAQ : 
http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
 


Re: [ActiveDir] msi package

2005-11-27 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

Making .msi Files:
http://www.windowsitpro.com/Windows/Article/ArticleID/21190/21190.html

when setup isn't just xcopy : ClickThrough - simple MSI creation plus 
auto-update over RSS.:

http://blogs.msdn.com/robmen/archive/2005/11/08/490448.aspx

Building an Installer Package (.msi) File (Visual Studio Installer 
Documentation):

http://msdn.microsoft.com/library/en-us/vsinstal/html/vehowbuildinginstallerpackagefile.asp?frame=true


shereen naser wrote:


Thank you Mathieu, nothing in/from windows?

On 11/27/05, *Mathieu CHATEAU* [EMAIL PROTECTED] 
mailto:[EMAIL PROTECTED] wrote:



Sunday, November 27, 2005, 2:20:26 PM, you wrote:








Dear all, how can I create an msi file from installation files?
any tools recommended?

thank you 




you can use adminstudio from installshield, it's the best i have
used (but a $$$ one).


Winstall LE is free but limited to capture an install to make a msi.


NEVER MAKE A MSI FROM A MSI !


cheers,

Mathieu CHATEAU


List info : http://www.activedir.org/List.aspx List FAQ :
http://www.activedir.org/ListFAQ.aspx List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
http://www.mail-archive.com/activedir%40mail.activedir.org/ 




List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] How to restrict .exe file copy on my local exchange server

2005-11-27 Thread Ulf B. Simon-Weidner








Hello Manjeet,



using Software restriction policies you can only block the
execution of files, however I understand that you want to avoid copying of new
exe-files in the system32 directory.



You could do this with Windows Server 2003 R2 by using File
Screening, but if you apply it to the system folder Id be very careful
and test it prior to implementation. Also be aware that you need to disable the
file screening policy every time you are deploying an update or servicepack or
when you are installing new components.





Gruesse - Sincerely, 

Ulf B. Simon-Weidner 

 MVP-Book
Windows XP - Die Expertentipps: http://tinyurl.com/44zcz
 Weblog: http://msmvps.org/UlfBSimonWeidner
 Website: http://www.windowsserverfaq.org
 Profile:http://mvp.support.microsoft.com/profile="">













From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh
Sent: Thursday, November 17, 2005 10:12 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] How to restrict .exe file copy on my local exchange
server





I
want to block the .exe file on my exchange server c:\windows\system32 folder.



Can
I do these using Software Restriction policies in windows 2003?







-Manjeet










[ActiveDir] Tombstone value

2005-11-27 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

Stupid question from the SBS AD crowd.

Default tombstone value is 60 days on Win2k3
Default tombstone for new forests on 2k3 sp1 is 180

Translation for us SBS boxes... unless we change it it's 60 days if we 
were an RTM SBS box or 180 if we were a SP1 installed box.


For our space down here is there any disadvantage to increasing that 
value to something even longer?  Is there a max value?


We only have one PDC and possibly an additional domain controller.  If 
we have a pretty static-y network is there a disadvantage to 
increasing this value to aid in disaster recovery of the system state 
backup?

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Tombstone value

2005-11-27 Thread Ulf B. Simon-Weidner
Hi Susan,

I've seen issues with tombstones sitting around, such as bad written
software who still sees them. The main other reason for finally getting rid
of the tombstones is to free Active Directory space, but that shouldn't be
an issue in a SBS-Domain.
On the other hand I do not see the need in a small environment to even
increase the tombstone lifetime further than 60 days. Increasing it may help
in certain scenarios, such as DCs which are regulary offline for a while
(e.g. those who get to travel the ocean on ships) and in huge enterprises
with a lot of slow unreliable lines in countries where you can't make sure
that a broken line is replaced quickly.

I don't see the requirement to restore objects from backup which are more
than 60 days old. Users wouldn't remember their password anyways, computers
also. Groups may have been changed as well, ...
And the tombstone only helps you when performing a semi-authoritative
restore, such as the recovery manager from quest does. However I do not
believe many companies running SBS are running recovery manager. If you want
to manually restore tombstones you need to fill most of the attributes
manually as well, so it's quite a pain.

Wouldn't it be easier to just create a new account and use the sidwalk
migration suite / subinacl on those few boxes in your SBS domain after the
60 days have expired?

Just my 0,02?

Ulf

|-Original Message-
|From: [EMAIL PROTECTED] [mailto:ActiveDir-
|[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS
|Rocks [MVP]
|Sent: Monday, November 28, 2005 3:42 AM
|To: ActiveDir@mail.activedir.org
|Subject: [ActiveDir] Tombstone value
|
|Stupid question from the SBS AD crowd.
|
|Default tombstone value is 60 days on Win2k3 Default tombstone for new
forests
|on 2k3 sp1 is 180
|
|Translation for us SBS boxes... unless we change it it's 60 days if we were
an
|RTM SBS box or 180 if we were a SP1 installed box.
|
|For our space down here is there any disadvantage to increasing that
value
|to something even longer?  Is there a max value?
|
|We only have one PDC and possibly an additional domain controller.  If we
have
|a pretty static-y network is there a disadvantage to increasing this
value
|to aid in disaster recovery of the system state backup?
|List info   : http://www.activedir.org/List.aspx
|List FAQ: http://www.activedir.org/ListFAQ.aspx
|List archive: http://www.mail-
|archive.com/activedir%40mail.activedir.org/ivedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/