I agree with the fact that it won't buy you anything in terms of
performance. However, splitting up into D/E/F does reduce the chance that
journal wraps might occur. Journal wrap errors occur if a sufficient number of changes
take place while FRS is turned off or busysuch that the last USN
Consider using the ADUC provided with W2003. A new Active Directory Users
and Computers property page called Additional Account Info and the
lockoutstatus.exe utility are great troubleshooting tools for diagnosing
lockout problems. They've proven to be very helpfull over and over ...
Cheers!
John
Hi Colin
What you said solved the problem of creating user
but does not let me enable/disable a user. I do not know why because I checked
the edit property too. But because
these domains were in the same forest just putting this administrator in Enterprise admin group solved my
One of these days Ill learn how to
proof read for coherency J I just read what I sent, doesnt make much sense.
Windows 2K Domain, Majority of Clients is
Windows 2K.
Attempts is set =5,(for obvious
reasons I dont want to say the exact #)
Joe: I thought best practices were to have
it
Hi people,
Can anyone tell me if there is a way to expand the number of characters I
can use to create a username in W2K AD. Most people over in Serbia have long
first names and last names. I ran into a problem when creating a username
that was longer than 20 characters long. My example is as
How about ateodosijevic?
If the A is a common enough name/initial that there are two in the company (or 3 or 4)
I would then move toaMIDDLENAME INITIAL teodosijevic. If by chance they have the same
first AND middle name I would go with aMIDDLEINITIAL teodosijevic1 then aMIDDLEINITIAL
Yes,
Company rule does state that it must be first name followed by last name!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Craig Cerino
Sent: Wednesday, October 15, 2003 14:21 PM
To: [EMAIL PROTECTED]
How about ateodosijevic?
If the A is a common
Curious - - is it for email purposes?
The reason I ask is if they company doesn't want ateodosijevic coming up in email -
that's a simple change of the DISPLAY NAME in Exchange.
Just trying to come up with alternatives as I am not aware of any 3rd party tool to
breakdown the 20 character
Hi Folks,
I have 2 w2k servers in my network that are responsible for
all the FSMO roles,DNS,DHCP,etc. Have just promoted a server3k member server to
DC status and would
Like to temporarily give the 3k server all of the above
responsibility while I decommission the 2k servers one at a
Title: Message
Can't
think of any reason why you couldn't pull this off. I can think of a
thousand different things that could go wrong.
As a
suggestion, have you considered modifying the users DNS server usage? Say
with a script? DHCP settings?
Not
sure that it really must be done that
Jerry,
here's what I'd suggest - I've never done it.so it's a
fairly simplistic overview- butit'sbased on everything
I've read here and in other lists. (oh -don't forget totest it
first!!)
Setup DNS on Win2K3 server and ensure that information is
replicating / zones transfers etc
Title: Message
Doyour clients use DHCP to get their addresses or are
they static?
If they're DHCP - then a script shouldn't be needed just
amend the scope options and let the changes filter through if they're static
- then it might be time to start looking at DHCP to make your life
You mention the fact that all clients point to these 2 DNS/DC servers.
If this
means that all clients are configures with 2 DNS servers, than you can migrate
the 2 DCs one at the time (after having transferred the FSMOs to the 3K box).
Hope this works out for you!
Cheers!
John
Title: Message
Can
anyone tell me where i might find a good maillist for SUS
problems.
I want
to know how to install it on a DC. My problem is that the built in acounts found
on non DC servers "IUSR" and "IWAM" are not available on a DC (not having local
users and groups)
So how
do I
John is quite right. Also, if you have a single domain forest (which you don't) it
doesn't matter if you make the DC hosting the IM a GC.
The IM is responsible for maintaining references from objects its own domain to
objects in other domains. This allows, for example, a DC to display the
Title: Message
http://www.susserver.com/
-Original Message-From: Abbiss, Mark
[mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2003
11:01 AMTo: '[EMAIL PROTECTED]'Subject:
[ActiveDir] OT: SUS on a W2K DC
Can
anyone tell me where i might find a good maillist
Title: Message
thanks..
i
realise my problem is more with IIS (which uses the IUSR and IWAM accounts). MS
recommends not to install IIS on a DC but I assume if you have to you can...but
how do you get around the IUSR and IWAM accounts not existing locally problem
?
I
apologise for being
Title: Message
Shawn,
You
can do it temporarily. Some updates might not be made to references about
objects in other domains such. It's not a good thing to do for a long
period of time, but it's not a horrific issue, either.
Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active
Title: Message
Rick,
Thanks
for the input...I appreciate it.
Shawn
-Original Message-From: Kingslan, Rick
T. [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2003
11:27 AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] Infrastructure and GC
Shawn,
You
can
That does appear to be another option and
it crossed my mind, maybe Im just trying to make this a bigger problem
than it really is.
Thanks for the suggestion
Jerry
Scicom Data Services
Minnetonka,Mn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Title: Message
Mark,
Maybe
I'm being obtuse, but what leads you to believe that they don't exist
locally? Simply because there is no local SAM to create the account
in? The domain has an Administrator account, which resides in Active
Directory. Where would the IUSR and IWAM accounts reside
"Best Practice" is not a constant, you know. Reality and feedbacks from the trenches sometimes conspire to alter "best practices" every now and then. Some auditors forget this salient truth. 5 is not practical, for various reasons, one of which is the "fast user switch" bug of WinXP.
Anyways,
I figured it would help to include this link:
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9Edisplaylang=en
HTH
Sincerely,Dèjì Akómöláfé, MCSE MCSA MCP+Iwww.akomolafe.comwww.iyaburo.comDo you now realize that Today is the Tomorrow you were
I am running Windows 2000 Server with Active Directory and have a
network of about 30 users. For some reason each time I try to load the
Active Directory Users and Computers Snap in it takes about 3-5 minutes
to load. Any reason?
List info : http://www.activedir.org/mail_list.htm
List FAQ
Thank you Dèjì, My comment was meant more tongue and
cheek than anything else, an I was afraid it would come off wrong since I wrote
it at 3AM
Im going to start working with
those tools now. Again thanks for the pointer in the right direction
Thanks,
Raymond
From:
What's the machine look like Richard?
Processor - RAM - PentIII or IV ? Disk Space etc
This is the first place I would start ( at the very beginning
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard
Sumilang
Sent: Wednesday, October 15, 2003 2:00
http://groups.google.com/groups?hl=enlr=ie=UTF-8oe=UTF-8threadm=eZaT
ZiOhCHA.2460%40tkmsftngp09rnum=2prev=/groups%3Fq%3Dmmc%2Baduc%2Bslow%2
6hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26selm%3DeZaTZiOhCHA.2460%254
0tkmsftngp09%26rnum%3D2
Has some advice that might be worthwhile to look at.
Probably move from that if it checks out well to name resolution. While on
the desktop, have a look in the event logs for anything wrong there as well
as the DC logs to see what's being recorded if anything.
Al
-Original Message-
From: Craig Cerino [mailto:[EMAIL PROTECTED]
Sent:
Has anyone seen a way to dump or report on the issued
licenses that are displayed in the Terminal Services Licensing MMC? Maybe a
script or a TechNet tool Im not aware of?
Thanks,
Mark Creamer
Systems Engineer
Cintas Corporation
http://www.cintas.com
Honesty
and Integrity in
C:\Program
Files\Windows Resource Kits\Toolslsreport /?
Write information
about licenses granted by Terminal Server License Servers.
lsreport [/F
filename] [/D start [end]] [/T] [/W] [/?] [serverlist]
/F
filename Directs output to be
written to a file named
filename.
(filename
Sheesh, not sure how I missed that one.
Thanks Michael!
mc
-Original Message-
From: Michael B. Smith
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 15, 2003
2:42 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] OT:
Reporting on TS Cals
C:\Program Files\Windows
FTP: Resp. to Port 3607, '426 Connection closed; Transfer Aborted.'
My Web designer keeps having a hard time uploading files to my FTP server
with the above message, any ideas?
Justin A. Salandra, MCSE
Senior Network Engineer
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
Check your DNS configuration. Make sure you are not pointing DNS to anything
but your internal DNS servers.
HTH
Sincerely,
Dèjì Akómöláfé, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
Using what kind of ftp client?
mc
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 15, 2003 2:52 PM
To: ActiveDir (E-mail)
Subject: [ActiveDir] OT: FTP Problem
FTP: Resp. to Port 3607, '426 Connection closed; Transfer Aborted.'
My Web
Tried toggling between active and passive modes to see if one works? Might also have
to do with your
connection equipment (i.e. dsl router or whatever) see this
http://www.pctechforums.com/modules.php?name=FTP
mc
-Original Message-
From: Salandra, Justin A. [mailto:[EMAIL PROTECTED]
any firewalls in between??
are you allowing access to this server if behind the firewall, either
one-one-nat, or otherwise.
- Original Message -
From: Salandra, Justin A. [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 15, 2003 12:39 PM
Subject: RE: [ActiveDir] OT: FTP
Can anyone tell me where i might find a good maillist for SUS problems
Not a mail list but microsoft.public.softwareupdatesvcs has lots of
expertise and MS-SUS folks actively participating
From: Abbiss, Mark [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October
As most of you know, the default intrasite replication
schedule in Windows 2000 is 5 minutes yet 15 seconds
in Windows Server 2003. Has anyone changed the
setting in a Windows 2000 domain (Q214678) to match
the settings that are now the default in Windows
Server 2003?
The five minute replication
38 matches
Mail list logo
