Re: [ActiveDir] security templates

2003-02-23 Thread Graham Turner
Dear All, have rather belatedly got to this. Thanks for the posted replies on this. this looks an excellent reference. it would seem that these are later versions of the templates made avialable through the security operations guide. could anyone point us to URL where these are available for

RE: [ActiveDir] security templates

2003-02-23 Thread Rick Kingslan
Graham, If there are versions of the templates that have been made available since those initial ones, I'm unaware of them. As to the SIDs, as I recall, you're correct - they are well-known principals, users and groups both. I've seen these documented numerous places, but I can't think of one

Re: [ActiveDir] security templates

2003-02-23 Thread Graham Turner
Rick, Q243330 - thats' great - exactly what i look for. i have to admit that the issue of security templates is a little frustrating. i guess it is indicative of the ongoing development of w2k but nonetheless a little time consuming to be having to mod security templates, reload into GPOs each

RE: [ActiveDir] security templates

2003-02-23 Thread Thommes, Michael M.
Hi Rick, The URL you posted is available to MVP accounts only. However, an open reference can be found at http://support.microsoft.com/default.aspx?scid=kb;en-us;243330 Mike Thommes Argonne National Laboratory -Original Message- From: Rick Kingslan To: [EMAIL PROTECTED] Sent:

Re: [ActiveDir] security templates

2003-02-23 Thread Graham Turner
yeh, a blatant bit of oneupmanship to us mere mortals - Original Message - From: Thommes, Michael M. [EMAIL PROTECTED] To: 'Rick Kingslan ' [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Sunday, February 23, 2003 5:42 PM Subject: RE: [ActiveDir] security templates Hi Rick, The

[ActiveDir] 128 bit high encrpytion pack

2003-02-23 Thread Graham Turner
seems a prerequisite for migration of NT4 source to a Windows 2000 target domain is the installation of 128 bit encryption on PES server (on source DC) and ADMT2 host (on target PDC emulator). quick question - how does one tell if this is the case on an NT4 domain controller ?? ditto - win2k -