RE: [ActiveDir] SMS Server 2003: AD schema extensions

2003-10-09 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
Tony, I don't have an LDIF file, but here are some details on the schema extensions as reported from the SMS2003 'Extadsch.exe' utility: Defined attribute cn=MS-SMS-Site-Code. Defined attribute cn=mS-SMS-Assignment-Site-Code. Defined attribute cn=MS-SMS-Site-Boundaries. Defined attribute

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Jimmy Andersson
You can use wmic.exe to find most info about your services. Regards, /Jimmy - Jimmy Andersson, Q Advice AB CEO Principal AdvisorMicrosoft MVP - Active Directory-- www.qadvice.com -- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Mahaveer Saraswat
test msg - Original Message - From: Humberd Greg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 08, 2003 2:06 PM Subject: RE: [ActiveDir] account lockout troubleshooting Also if the client is 2k or XP check for stored network passwords. -Original Message-

RE: [ActiveDir] SMS Server 2003: AD schema extensions

2003-10-09 Thread Tony Murray
Thanks Guido. This is good info. I like the idea of having the LDIF files available for testing schema updates outside the application itself. As Robbie Allen has pointed out in various books, articles and forums, LDIF files provide a useful self-documenting method of keeping track of your

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Bridges, Samantha
What is an AT job??? -Original Message- From: Free, Bob [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2003 3:56 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] account lockout troubleshooting Checked for an AT job running under the old creds? Seen that often.

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Creamer, Mark
Command line version of scheduled tasks mc -Original Message- From: Bridges, Samantha [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 8:34 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] account lockout troubleshooting What is an AT job??? -Original Message-

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Comeau, Steven
AT service is for scheduling. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodt echnol/windowsserver2003/proddocs/datacenter/at_service_account.asp Steven Duuude Comeau Systems Administrator Main Tape 1 Capital Drive, Suite 101 Cranbury, NJ 08512 1-800-526-8273 x332

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Bridges, Samantha
Thanks. Still learning the lingo I know a lot of lingo...that one was new to me. Thanks again. Samantha -Original Message- From: Creamer, Mark [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 8:36 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] account lockout

RE: [ActiveDir] SMS Server 2003: AD schema extensions

2003-10-09 Thread Robbie Allen
The MS SFU 3.0 team also refused to provide LDIF files for their schema extensions. Microsoft really needs to set the example here. Most people are worried enough about extending the schema and when you can't even get the LDIF files it only exacerbates the situation. Robbie Allen

[ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Chris Flesher
Title: Message We're looking at NetIQ for monitoring our Windows/SQL stuff, as well as what it can do on Unix (Solaris, AIX). However, with Microsoft going head on into monitoring, should I be worried about the affect this will have on NetIQ in the short/long term? Which is a better product

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Abhishek Sharma
Title: Message Hi Chris, NetIQ is an amazing company and has a very good product line as far as monitoring tools are concerned. Do not be worried about the companies future. regards, Abhishek. www.netdecisions.com -Original Message-From: Chris Flesher [mailto:[EMAIL

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Abbiss, Mark
Title: Message Forget MOM..Net IQ costs and arm and a leg and needs hours of extra consulting to get your out-of-the-box installation doing what you want it to do. We evaluated both MOM and Net IQ as well as RoboMon (www.itheon.co.uk) and went for the latter. EXCELLENT support, second to

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Abbiss, Mark
Title: Message ps. Itheon have another prodcut eQ wehich will monitor multi platform set ups. -Original Message-From: Chris Flesher [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 9. Oktober 2003 16:13To: [EMAIL PROTECTED]Subject: [ActiveDir] OT: NetIQ or MOM We're

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Roger Seielstad
Title: Message Weird. THat's a Heroix product (http://www.heroix.com/products/detail_robomon.htm) The GUI seems different, at least from the demo's I've done.. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Abbiss, Mark
Title: Message Itheon bought out Heroix and took all development over to the UKthey are currently rebranding so its called Itheon and not Heroix. -Original Message-From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 9. Oktober 2003 16:29To: '[EMAIL

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Chris Flesher
Title: Message Well, we're going to be coming from Tivoli, so cost isn't so much a factor. Anything is easier to manage and costs less than Tivoli. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Abbiss, MarkSent: Thursday, October 09,

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Baekelant, Erik
Title: Message Anything is easier to manage and costs less than Tivoli. Or you must have a BMC Patrol experience (expensive, hard to setup and absolutely inflexible) We've chosen to implement BigBrother (Quest) which works fine in our mixed env. BTW, Hello to everyone, I am new on the

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Michael_Parent
It's old school windows nt stuff :-) Michael Parent MCSE MCT Analyst I - Web Services ITOS - Systems Enablement Maritime Life Assurance Company (902) 453-7300 x3456 Bridges, Samantha [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 10/09/2003 09:54 AM Please respond to ActiveDir

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Roger Seielstad
Title: Message Ahh... Didn't see that news. Cool. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Abbiss, Mark [mailto:[EMAIL PROTECTED] Sent: Thursday, October

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Mulnick, Al
Title: Message Chris, I can say from experience that either would probably do well for you. Some pros and cons: Pros for MOM: New products (past NT4/Exchange 5.5) come with the agents; this means you get the monitoring parameters and thresholds the vendor considers important out of the

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Abbiss, Mark
Title: Message I really couldnt say. The support team in the US will be different. I have just had nothing but incredible support from the UK team. Patience of saints :-) -Original Message-From: Chris Flesher [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 9. Oktober 2003

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread rmcdonald
We have NetIQ now and I was looking at going with MOM, We have about 260 people in 6 states and it's a all Microsoft shop. We also have about 60 servers to monitor and it's only 2 people that monitor the NT stuff so I do not have all day to mess with it. Anything good out of the box that will

RE: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Rod Trent
Title: Message Amen. BTW: MOM 2004 beta is right around the corner, and the product looks awesome. MS will be making some serious headway with MOM in the next 2-3 years, before combining their systems management products. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] account lockout troubleshooting

2003-10-09 Thread Free, Bob
It's old school windows nt stuff Just because I check the status of scheduled jobs by calling at.exe from cron.pl does not make me 'old school'. :^) ##during the transmission of this email 'old school' conversion to plain-text possibly occurred LOL From:

[ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Steve Shaff
Okay, I know that people are going to be like Windows 98, come on. Please join us in the Twentieth Century!!! But, we need to do testing on Windows98 for our product compatibility. We just upgraded to Windows 2003 (2000 native) and now it appears that individuals that are running

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Thommes, Michael M.
I believe you're going to have to install the AD Client Extensions on those PCs. You can find the software on the Windows 2000CD. Mike Thommes -Original Message-From: Steve Shaff [mailto:[EMAIL PROTECTED]Sent: Thursday, October 09, 2003 11:19 AMTo: [EMAIL

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Steve Shaff
I will give this a try. Thanks for all of your help, group. * Steve Shaff Active Directory / Exchange Administrator Corillian Corporation (W) 503.629.3538 (C) 503.807.4797 (F) 503.629.3674 From: [EMAIL PROTECTED]

[ActiveDir] Group Policy Software Installs

2003-10-09 Thread Rick Reynolds
I have a job to install ie6, it installs as part of a group policy, but after it installs and forces a reboot, it tells the user upon login that there was an install that was not completed, and they have to login with an account that has admin rights to the machine to complete the setup

Re: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Rick Reynolds
Title: Message Keep one nt4 domain controller on staff until the last nt4 server is gone. - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 09, 2003 10:23 AM Subject: RE: [ActiveDir] Windows 2003 and Windows 98 clients

Re: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Rick Reynolds
Do you have at least one nt4 domain controller still around, That is how i get by with it, We have 2000 machines that are not powerful enough for 2000, so we are still on 98. One nt4 domain controller at each location, running on p3-500 with 265mb, - Original Message -

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Steve Shaff
Title: Message Read??? You want me to read? Yes, I did not think that we would be involved with test systems or home systems. Generally, Our policy is not to support test systems or home systems but You know.. Managers J Steve From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread John Reijnders
I can confirm this statement from MS. I've seen the lockout issues being solved by the new version of the DS Client. The most recent version is not available on the web site of Microsoft. You need to contact MS for this. Cheers! John From: Creamer, Mark [mailto:[EMAIL PROTECTED]

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Roger Seielstad
Title: Message DS Cleint isn't required for basic log in functionality. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Creamer, Mark [mailto:[EMAIL

RE: [ActiveDir] OT Received Packets

2003-10-09 Thread stefano tufillaro
Ok look at Kilobytes sent 10 Kilobytes received 14 you received but also trasmitted I will try in this way: 1) shut down the machine to reset the statistics 2) make a snapshot by net stats server (every 5 minutes or shorter) 3) when you have a lot of traffic run

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Michael B. Smith
Title: Message I found that it is -- for Windows 95 on a Windows Server 2003 domain. From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 2:07 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Windows 2003 and Windows 98 clients DS Cleint isn't required for

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Roger Seielstad
Title: Message Hmmm... Didn't know that about 2003. Then again, I don't have that domain set up yet here, either.. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread Michael B. Smith
Title: Message http://support.microsoft.com/default.aspx?scid=kb;en-us;811497Product=winsvr2003 According to this KB -either disabling the policy or installing the DSclient will work. My experiential evidence is that both are required (at least the dsclient from the w2k CD -- the new

RE: [ActiveDir] Windows 2003 and Windows 98 clients

2003-10-09 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
Title: Message during the upgrade to 2003, TWO policies are enforced, which were not enforced 2000 (SMB signing and secure channel encryption) - this is a security improvement over pure 2000 AD environments. Not sure why the KB only mentions one of the policies you have to disable - if you

Re: [ActiveDir] OT: NetIQ or MOM

2003-10-09 Thread Glenn Corbett
Chris, I've deployed both of these products in reasonably large environments. - Both NetIQ and MOM require a fair bit of setup to get the right level of monitoring going - Both require constant attention to be effective monitoring / reporting platforms (they are not set-and-forget products)