The reason for the unexpected result from your first search filter is because the
object class computer is a sub class of the user object class. So when you search
using the objectClass=user filter the search will include any sub-classes of user.
If you look at the attributes of a computer
That begs the inevitable question of Why?
I'm guessing it is to support the concept of a computer account, but I'd
still love to know the official reason.
--
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
I think this is a basic question but I am really new to scripting...
I'm adding users from a csv file and using an array to read the csv split
into lines, then spitting each line into another array (split for commas)
from the first array. Do I need to do something to the array#2 before I
Title: OT? ADDING CONTACTS
Not sure if this question is off-track or not. I would not think so as it deals with AD attributes. But if it is deemed OT then my apologies to the list!
If you add contacts into AD via CSVDE, you specify certain required attributes and you additionally specify
Rich, I think there are some easier ways to do this, including a script from MS that
reads the data
from an Excel file. You could create the Excel file from the csv you already have and
go from there.
See Clarence Washington's Win32Scripting site at http://cwashington.netreach.net for a
number
Hi Rich
This is an example script that reads in CSV File Contents and splits each
line into an array.
Hope it helps
Cheers, Matty
Example Inputfile.txt content:
--
Old,New
Old1,New1
Old2,New2
Old3,New3
Old4,New4
Old5,New5
Old6,New6
Script:
'--
I'm not sure about your specific problem, but you could simplify things a
bit by dropping the second array.
Do Until objFile.AtEndOfStream
strNextLine = objTextFile.Readline
Array1 = Split(strNextLine, ,)
'Call populate users sub
Loop
-Original Message-
From: Rich Milburn
Title: Message
Maybe Im missing something here but how did you simulate
the LocalSystem context accessing the Null Share path
to ensure that part was working? If you
decide to look at this again, I would suggest looking into that part of it
just drop a few lines to create a text file, with
That's what I was doing at first but I kept getting errors like the
subscript out of range. I found that error on MSDN and maybe it's related
to the fact I have about 8 properties in the sheet but some of them are
blank for some records?? I'm trying a couple of things to fix it (like Dim
Title: Message
I did that exact thing to simulate
LocalSystem context. I created a batch file that would just create a text
file on the remote null share and it works. Also the batch file was able
to copy the files from the null share to the machine in the startup
script. Thanks for the
Looks like the long awaited delegation paper is out.
Best Practices for Delegating Active Directory Administration:
http://www.microsoft.com/downloads/details.aspx?familyid=631747a3-79e1-48fa-
9730-dae7c0a1d6d3displaylang=en
And the appendices:
Yes, that's been my experience. However, if you're getting the Subscript
out of range error, that's the first thing I would check.
-Original Message-
From: Rich Milburn [mailto:[EMAIL PROTECTED]
Sent: Friday, November 21, 2003 8:45 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
Tony,
Appreciate the feedback - however, I do not understand the [your comment] use of the
standard ADUC vice the Exchange version. Are you saying that the adds [manual and
CSVDE] would be different if done on a DC that did not have E2K System Manager loaded?
In this case, both the manual
Hunter,
Thanks for the heads-up. I guarantee this paper is going to spur more
discussion than anything that has come out in recent months. This is
GREAT stuff!
Enjoy, all!
Rick Kingslan MCSE, MCSA, MCT
Microsoft MVP - Active Directory
LAN Administration - Windows 2000
West Corporation
[EMAIL
Thanks, Hunter. I just got them. Be aware that the Best Practices whitepaper is 206
pages and the Appendix (with all the task/permissions tables) is 223 pages. (Printer
is still smokin'.) Guess I know what I will be doing this weekend!
Mike Thommes
-Original Message-
From: Coleman,
Finally - the AD
Delegation Whitepaper is available on the web! There are two parts to it - the
main whitepaper explaining how delegation really works. And second the really
important appendices, which go into the details of which permissions need to be
set to which object/attribute to
As John already said: it's not really wise to
try to delegate everything, as otherwise you're giving away the keys to the
kingdom afterall... And if this is your only reason for creating that
extra empty root domain, then you might as well stick to a clean
single-domain-forest model: as
Finally - the AD Delegation Whitepaper is available on
the web! There are two parts to it - the main whitepaper
explaining how delegation really works. And second the really important
appendices, which go into the details of which permissions need to be set to
which object/attribute to
Help. We have a DFS share that includes a replica pointing to a share on
our domain controller. Unfortunately, this share is filling up the C: drive
of our domain controller. How do I move this share to another fileserver so
I can get it off of the DC? It's all our roaming profile
I have my domain level GP set to unlock a locked user account 10 minutes
after it has been locked out, but it is not unlocking the account. Any
ideas
List info : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive:
It won't uncheck the account locked out box, but if you try to logon with
the correct password after the 10 minutes is up, it'll let you login, and
the box will then be unchecked. I was confused by that as well.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
thought you might be interested in this
-Original Message-From: GRILLENMEIER,GUIDO
(HP-Germany,ex1) [mailto:[EMAIL PROTECTED]Sent: Thursday,
November 20, 2003 2:06 PMTo: [EMAIL PROTECTED]; 'Ravdal,
Stig 'Subject: RE: [ActiveDir] Managing Sites in Forest with Empty
Root
On my Windows 2k Server for the first time I got a blue screen of death
that reported a memory dump error with a countdown. The countdown
seemed like it went on forever so I just had to forcefully restart the
computer and so far it looks fine however I would like to know what
caused that and
Look for the dump file, that would be a good start. Also look through the
event logs.
-Original Message-
From: Richard Sumilang [mailto:[EMAIL PROTECTED]
Sent: Friday, November 21, 2003 2:24 PM
To: [EMAIL PROTECTED]
Subject:[ActiveDir] Memory Dump Error!
On my Windows
I'll make the potentially bad assumption that you don't mean how do I
prevent the blue screen, but more the countdown as it dumps the entire
contents of memory to a .dmp file. I could make a lot more money for
telling you how to prevent the blue screen, given the information that I
have in front
Ok how do I prevent the blue screen :-) ?
Also... Where might the dump file be stored?
On Nov 21, 2003, at 11:39 AM, Kingslan, Rick T. wrote:
I'll make the potentially bad assumption that you don't mean how do I
prevent the blue screen, but more the countdown as it dumps the entire
contents
Ok better question... I found the MEMORY.DMP file in my system root but
how do I open a 255mb file into a text editor? Which text editor should
I use?
On Nov 21, 2003, at 11:23 AM, Richard Sumilang wrote:
On my Windows 2k Server for the first time I got a blue screen of
death that reported a
Hi
Guido,
Thanks
for the info. I am aware of the security hole so this may really boil down
to perception. The client has a requirement that two of their business
units operate with greater autonomy - to the point of being able to be spun off
entirely should that be the best for business.
While someone is answering that question below ('cause I don't know how
either) can someone say what you look for in a dump file Is there a
reference out there?
-Original Message-
From: Richard Sumilang [mailto:[EMAIL PROTECTED]
Sent: Friday, November 21, 2003 2:04 PM
To: [EMAIL
Hi all,
I have an urgent need to mirror our production OU structure to our Test Platform. Is
anyone aware of a script or tool where I can export and import the structure?
If sowould they share? :)
I think I can write something, but if anyone has a pointer in the right direction to
an
On Windows 2000, you would go to My Computer - Properties - Advanced
* then the Startup and Recovery button.
This should show you.
-Original Message-
From: Richard Sumilang [mailto:[EMAIL PROTECTED]
Sent: Friday, November 21, 2003 3:02 PM
To: [EMAIL PROTECTED]
Subject:
I believe there is a Q article that can walk you though it.
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:
80/support/kb/articles/q192/4/63.aspNoWebContent=1
This will let you find out what type of exception code occurred and then you
can do a search on that code
http://support.microsoft.com/?kbid=237677 has an example of how to do this
with LDIFDE. Very easy and fast
Hunter
-Original Message-
From: Jef Kazimer [mailto:[EMAIL PROTECTED]
Sent: Friday, November 21, 2003 1:32 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: [ActiveDir]
Search the KB for dumpchk there are some good articles on how to extract
the basic info you need from the dmp file (without needing access to
the symbol files to do really indepth debugging)
There was a really good webcast on it a couple years ago by one of the
Premier guys, called Basic STOP
Hunter,
Awesome! I was just looking at the syntax for LDIFDE too, but this was easy! :)
Jef
Original Message:
From: Coleman, Hunter [EMAIL PROTECTED]
To: '[EMAIL PROTECTED]' [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Mirror OU structure to Test
Date: Fri, 21 Nov 2003 14:00:43 -0700
Thank you Russ. I can't believe I didnt even think to try logging on, even
though the check was still there. Anyways...thanks again
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Douglas M. Long
Sent: Friday, November 21, 2003 1:39 PM
To: [EMAIL
Thanks for the explanation, makes sense now.
Well... It makes sense why I was getting the computer accounts in the
export anyway.
Thanks again,
Mike.
-Original Message-
From: Tony Murray [mailto:[EMAIL PROTECTED]
Sent: Friday, November 21, 2003 12:14 AM
To: [EMAIL PROTECTED]
Subject:
Check out unlock from www.joeware.net on the free win32 tools page, it will
always show you the proper info for accounts as to whether they are locked
or not.
The issue is that it isn't a simple thing in W2K AD to determine the locked
status of an account using LDAP.
joe
-Original
38 matches
Mail list logo
