RE: [ActiveDir] Security Templates

2002-09-25 Thread marija efnuseva
Yes that is what i was trying to do. Have I done anything wrong? I added folder paths in a new security template called folders, amd I set the permissions I wanted. And then I imported it in the Group poliy object that takes care of some of my users, and computers. But it seems not to be

RE: [ActiveDir] DR of a DC

2002-09-25 Thread Toibudeen . Oduniyi
Marc It is by design, I came across this issue when testing Disaster Recovery procedures for our AD implementation. See the following article on how to resolve it. http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q316790; -Original Message- From: De Schepper Marc [mailto:[EMAIL

[ActiveDir] Two questions

2002-09-25 Thread Myrick, Todd (NIH/CIT)
Title: Message Is there a way to query the AD and find out what domain the account is in. In AD users and computers there is a field next to the samAccountname field that tells you what domain the account is in. It is grayed out so you can't change it. Is that field query able? Second We

RE: [ActiveDir] Two questions

2002-09-25 Thread Rick Kingslan
Title: Message Todd, If I read this correctly, you are interested in finding out what NetBIOS domain name the user account is in, correct? The up-level domain name is NOT grayed out, so this must be it (process of elimination and assuming same privilege in AD UC). Yes, it is. I believe

RE: [ActiveDir] Two questions

2002-09-25 Thread Myrick, Todd (NIH/CIT)
Title: Message Rick, You are the best. Todd -Original Message-From: Rick Kingslan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 25, 2002 9:53 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Two questions Todd, If I read this correctly, you are

RE: [ActiveDir] XP GPOs vs Win2k GPOs

2002-09-25 Thread Leney, Justin
Title: Message First thing to download is the .net betaadminpak.msi: http://www.microsoft.com/downloads/release.asp?ReleaseID=34032area=searchordinal=1 Then, you can look at the new group policies and explanations that will only affect XP. In fact, each GP will have a statement "At least

RE: [ActiveDir] Selecting specific OU for computer

2002-09-25 Thread Jochen Andries
Hello, Good morning ?? It's almost evening overhere :-) I get a lot of info @ http://www.microsoft.com/windows2000/technologies/directory/ad/default.a sp It's still a big search for there but after a while you get to know your way. Greetings, Jochen Andries -Original Message-

[ActiveDir] Migrating users

2002-09-25 Thread daviss
We are attempting to rebuild our DC due to problems with the server. Prior to rebuilding this system, we are making an image of the system, and have created a new DC. We are doing this with hopes to test the possibility of moving the usersnames and passwords in our current installation of AD. The

Re: [ActiveDir] Migrating users

2002-09-25 Thread Tony Murray
Have a look at ADMT 2.0, which you can find on the Windows .NET Server RC1 CD under the I386 directory. It offers a number of improvements over the first version of the tool. It now has better scripting support, as well as the ability to migrate passwords. Of course, there are 3rd party

Re: [ActiveDir] Selecting specific OU for computer

2002-09-25 Thread Tony Murray
The method I like is to first create the Computer objects directly in the OU of choice. The computer can then be joined to the domain at a later date. The Computer objects can be (pre-)created in this way either via script or with ADUC. The advantage of this approach is that (through

Re: [ActiveDir] Migrating users

2002-09-25 Thread daviss
What are some 3rd party tools available? We don't have .NET server. Thank you, Stacey Davis Tony Murray

Re: [ActiveDir] Migrating users

2002-09-25 Thread Tony Murray
You don't have to be running AD in a .NET environment to use ADMT 2.0. I have run it successfully in a wholly Windows 2000 environment. The Beta version was around for a long time and the product is now stable. If you really want to go with a 3rd party tool have a look under the Third Party

Re: [ActiveDir] Migrating users

2002-09-25 Thread daviss
I was able to find ADMT 2.0 but it requires you to run in native mode, which we don't want to do. Do you have any suggestions to work around that? Thanks for the link.

RE: [ActiveDir] Migrating users

2002-09-25 Thread daviss
You have to be running in native mode for that to work and we are not. Thanks for the links for 3rd party software. * Sincerely, Stacey Davis

[ActiveDir] .Net Server KCC intersite replication

2002-09-25 Thread Mike Baudino
Hello, Anybody out there who's an early adopter of .Net with more than 100 sites? We've got more than 100 sites and are moving towards an AD migration next year. We've decided, at Microsoft's recommendation, to go straight to .Net and it's version of AD. I've read that the KCC can handle the

[ActiveDir] AD U C OU Permissions

2002-09-25 Thread Oliver Marshall
Hi, After a forum chat with some visitors, i was wondering if its possible to get hold of a definitive list of OU permissions for AD Users and Computers. Basically, several people where trying to allow certain users to be able to do small changes to user accounts such as unlock an account, or

RE: [ActiveDir] XP GPOs vs Win2k GPOs

2002-09-25 Thread Greg Felzer
Title: Message Yes they work. We are in the middle of developing our revised XP GPOs. The problem we have run into is that most of our XP pro SP1 machines will not show all of the available GPO settings under: user config/windows settings. On all but one XP machine the only thing listed

RE: [ActiveDir] List members in a group

2002-09-25 Thread Oliver Marshall
If you mean in the Members tab of ADUC, i thought that was a limit of the listbox display control on that page. If you find a solution I would be interested in knowing Olly Marshall ADSSupport.net www.adssupport.net -Original Message- From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL

RE: [ActiveDir] DHCP Lease Question

2002-09-25 Thread Burns, Clyde
If time isn't an issue just making the dns change and letting it propagate would be the easiest thing as far as dhcp is concerned. Clyde Burns * I was going on 24rs no sleep :) I get that tired and I start thinking Im a comedian. -Original Message- From: Noah Eiger [mailto:[EMAIL

RE: [ActiveDir] XP GPOs vs Win2k GPOs

2002-09-25 Thread Leney, Justin
Title: Message No doubt, RSoP is a nice tool. More in depth than doing a Security Config/Analysis. I am actually havinga similar issue as you, sometimes you can see the entire GPO (with the extended-XP only policies) and sometimes not. Strange. When MS helps you can, can you post it up

RE: [ActiveDir] Two questions

2002-09-25 Thread Rick Kingslan
Title: Message blush Thanks! Rick Kingslan - Microsoft Certified Trainer MCSE+I on Windows NT 4.0 MCSE on Windows 2000 MVP [Windows NT/2000 Server]"Any sufficiently advanced technologyis indistinguishable from magic." --- Arthur C. Clarke -Original Message-From: [EMAIL

RE: [ActiveDir] .Net Server KCC intersite replication

2002-09-25 Thread Rick Kingslan
Mike, I wish that I could go into detail on this (NDA issues), but suffice it to say that an intimate conversation (15 people with Stuart Kwan and Andreas Luther) at the Microsoft Campus convinced me that they got it right in .Net. The issue is a mathematical one, and (believe it or not) MS

RE: [ActiveDir] Active Directory Client talking to DC's over Port 445/TCP (SMB)

2002-09-25 Thread Rick Kingslan
Justin, You'll find that clients keep an open channel, if you will, to DCs for SYSVOl, etc. This is done over Port 445. HTH! Rick Kingslan - Microsoft MVP [Windows NT/2000] Microsoft Certified Trainer MCSA, MCSE+I - Windows NT / 2000 Any sufficiently advanced technology is

[ActiveDir] Active Desktop Configuration via a Group Policy Object

2002-09-25 Thread Lynch, John
Hello, We are using a GPO to enable Active Desktop and add a Web Item (.aspx web page) to the Windows XP desktop. This item will act as the Workstation's Wallpaper. Is it possible to enable Cover Desktop and disable Make this page available offline from the GPO? I have had a look and I can't see