RE: [ActiveDir] By design or configurable ?

2004-08-24 Thread Ulf B. Simon-Weidner
Hi Guy, took me a while to find the Article again, here it is: 312571 The Event Log Stops Logging Events Before Reaching the Maximum Log Size http://support.microsoft.com/?ln=enid=312571 It describes how you are able to configure a feature to automatically dump the eventlog into a file if it

[ActiveDir] admt2.0 permissioning

2004-08-24 Thread gturner
dear all, know this is real old hat' by now but just wanted to confirm issue of permissioning for an ADMT migration of a small NT 4.0 account domain to a Windows 2000 domain. a quoted requirement is that 'sourcedomain/domain admins' is added to 'targetdomain/administrators and vice-versa.

RE: [ActiveDir] RID master problem or...?

2004-08-24 Thread Esteban Sonofthesun
Hello, I solved the problem by adding another DC on the network. And replicate with the master... Thanks... EstebanRobert Rutherford [EMAIL PROTECTED] wrote: Dcdiag even :O) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert RutherfordSent: 23 August 2004

RE: [ActiveDir] Justice for Victims of Agent Orange

2004-08-24 Thread Craig Cerino
You are cordially invited to kiss my arse for using this forum as a political soundboard. Duma-Nhieu From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MAI ANH TUAN Sent: Monday, August 23, 2004 8:35 PM To: '[EMAIL PROTECTED]' Subject:

RE: [ActiveDir] Justice for Victims of Agent Orange

2004-08-24 Thread George Arezina
I SECOND THAT!!! KEEP POLITICAL ISSUES OUT OF THE FORUM. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Cerino Sent: Tuesday, August 24, 2004 13:19 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Justice for Victims of Agent Orange You are

[ActiveDir] File Replication Services

2004-08-24 Thread Filipe Joel de Almeida
Hi all, I'm trying to set up a Domain DFS root working between 2 Windows 2000 servers (Both Domain Controllers). I proceeded as I usually do, but there is no way for this to replicate! The event viewer is full of errors, such as this ones: __ The File Replication

RE: [ActiveDir] [LIST-OWNER] Justice.....

2004-08-24 Thread Tony Murray
Ok, thanks guys. I had already unsubbed the offending email address shortly after his post. Please can we close this thread now. -- Original Message -- From: George Arezina [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 24 Aug 2004 13:38:45

Re: [ActiveDir] AD Restore

2004-08-24 Thread Tony Murray
Christine Most of the issues are covered in this KB: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q263532 Tony -- Original Message -- From: Christine Easton [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 24 Aug 2004 07:37:28 -0400

[ActiveDir] Joining Computers to a Domain

2004-08-24 Thread Edwin
I believe that I have read something like this before but now that I need it, I cant find the answer. I would like to be able to have a non-admin user with permissions of nothing more than being able to add a computer to a domain. Is this possible? Thank you for your responses.

RE: [ActiveDir] [LIST-OWNER] Justice.....

2004-08-24 Thread Craig Cerino
My bad -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Tuesday, August 24, 2004 7:54 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] [LIST-OWNER] Justice. Ok, thanks guys. I had already unsubbed the offending email address

RE: [ActiveDir] Joining Computers to a Domain

2004-08-24 Thread Adams, Kenneth W \(Ken\)
Title: Message Yes, you can set permissions on individual accounts to permit only adding computers to the domain. The way I've done it is to set the permissions on the OU that will contain the computers. Open that OU's properties, go to the Security tab, add the user's ID, then set the

RE: [ActiveDir] Joining Computers to a Domain

2004-08-24 Thread Marcus.Oh
Yep they need to have create object rights for computer objects on whatever OU you want the machines placed. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Tuesday, August 24, 2004 8:01 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Joining Computers

[ActiveDir] Service Pack 2

2004-08-24 Thread Philadelphia, Lynden - Revios Toronto
Is there a reason one shouldn't install service pack 2? I hear it messes up wireless network. Any truth to this? This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from

RE: [ActiveDir] Service Pack 2

2004-08-24 Thread Adams, Kenneth W \(Ken\)
Title: Message Installing or not installing Windows XP Service Pack 2 is a matter of personal choice at this time. Set up a test machine that you don't care about formatting if needed, install Windows XP with SP2, and test your applications, including wireless connectivity. You need to

RE: [ActiveDir] Service Pack 2

2004-08-24 Thread Robert Rutherford
Title: Message It plays havoc with a number of main stream applications so Id tread carefully: - http://www.desktoppipeline.com/29116549 It depends how big your user base is I guess If you only have 20 or so users and a few apps then check them out in a lab and then run with it if you

[ActiveDir] Service Pack 2 And AD

2004-08-24 Thread Philadelphia, Lynden - Revios Toronto
Does anyone know where I can get the adm to configure the XP clients in active Directory? This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under

[ActiveDir] Remote Installation Headaches

2004-08-24 Thread Edwin
I am attempting to use RIS and am getting problem after problem. I posted a question about PXE and the NIC being used and was informed that I would have to download and use RIS specific drivers for the network card I am using.

RE: [ActiveDir] Remote Installation Headaches

2004-08-24 Thread Rich Milburn
Edwin, there are two different things you have to do: 1) you have to get the drivers for the PXE boot, which you did, and 2) you have to add the drivers to the OS source. I see you have tried to do this, but sounds like its still not finding them. It can be tricky getting them in the

RE: [ActiveDir] Remote Installation Headaches

2004-08-24 Thread Rich Milburn
http://support.microsoft.com/default.aspx?scid=kb;en-us;314479 heres a good article, it might fill in what youre missing it discusses the $OEM$ path. Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International,

[ActiveDir] Replication Problems

2004-08-24 Thread Raymond Jette
I am getting the following error in Active Directory Replication Monitor: Failure Code 8452Failure ReasonThe naming context is in the process of being removed or is not replicated from the specified server. Has anyone seen this. Thanks for the help, Raymond Jette Network

[ActiveDir] site link costs and AD replication

2004-08-24 Thread Jorge de Almeida Pinto
Title: site link costs and AD replication Hi, I'm bit curious about the following: what happens is a SUBSITE has a site link with HUBSITE1 and the same SUBSITE has also a site link with HUBSITE2. Both site links have the same schedules/interval/cost Is the replication load "equally" devided

Re: [ActiveDir] site link costs and AD replication

2004-08-24 Thread James_Day
Jorge We have seen the KCC on my DC in the Subsite will choose the best link at that time, and will continue to use that site until the KCC runs again. All traffic will replicate with the available DC in the Hubsite - whether the server chooses hubsite1 or hubsite2. In our case we are doing

RE: [ActiveDir] Replication Problems

2004-08-24 Thread Ken Cornetet
Title: Message I've seen that once before. In my case it was a DNS problem. Our child domain DCs are DNS secondaries for our root domain. One child DC's DNS was not pulling the parent zone. Look for event log errors saying that a certain DC was not resolvable in DNS. -Original

RE: [ActiveDir] Joining Computers to a Domain

2004-08-24 Thread Grillenmeier, Guido
Hey Kevin - good to "read you" ;-) just want to add, that you, Edwin, need to differentiate where you want your non-admin user to place the computer account. The method given by Kevin is only applicable to add computers to the default computers container in the domain. Unless you're running

RE: [ActiveDir] File Replication Services

2004-08-24 Thread Grillenmeier, Guido
The File Replication Service cannot replicate f:\users because it overlaps the replicating directory f:\users. are you trying to use a LOCAL drive as a link target in DFS and then replicate data from this to a local drive on some other server (via FRS)? you should always use UNC path's for

RE: [ActiveDir] admt2.0 permissioning

2004-08-24 Thread Grillenmeier, Guido
actually, it all depends on how you run ADMT. Often you'd want to split the requirements between user/group migration and computer migration. The rules for migrating users and groups are: 1. for the PES (Password export server) to work, the account used to migrate the users must be a member of

RE: [ActiveDir] By design or configurable ?

2004-08-24 Thread Guy Teverovsky
Thanks ! This is exactly what I needed. And if anyone is interested, here is an ADM I wrote to deploy the settings (works the same on W2K3): (might wrap) ### Cut here #if version = 3 CLASS MACHINE CATEGORY !!System CATEGORY !!EventViewer #if version = 4

[ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Salandra, Justin A.
I just have a quick licensing question for SQL, SQL's per seat licensing is for concurrent connection right? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info :

RE: [ActiveDir] File Replication Services

2004-08-24 Thread Filipe Joel de Almeida
Hi, In te DFS admin tool, I entered both UNC paths \\server1\users and \\server2\users, wich are the shares of the 2 directories I want to replicate, so I don't understand why that error... Yours, Filipe Joel de Almeida -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Jeff Salisbury
Just the opposite is true! Per-Server licensing would be where you tie a certain number of CALs to the server and that many users/devices can connect to just that server at any given time. These CALs cannot be assigned to any other SQL server while they are tied to the original SQL server. In

RE: [ActiveDir] By design or configurable ?

2004-08-24 Thread Guy Teverovsky
I know... should be renewed after 10 hours if I remember correctly. It is a remote site I'll be visiting next week and will give a good look at the logs when it happens. When I actually think of it, logging in with cached creds does not use Kerberos provider, so the user should not have any

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Salandra, Justin A.
So if I had a SQL Server, just one, and had 50 USER Cals with 200 users but no more then 25 or 30 of the 200 users would be accessing the server at any given time, then this would okay? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Salisbury Sent:

RE: [ActiveDir] admt2.0 permissioning

2004-08-24 Thread Willem Kasdorp
for SID-History to work, the account used to migrate must be a member of the domain admins group on the TARGET domain Addition: on W2003 you have the extended right Migrate-Sid-History which you can use to delegate the SidHistory permissions to a lower level Admin. I've done this with limited

[ActiveDir] Moving a remote site

2004-08-24 Thread Jerry Fessenden
Hello all, We are gearing up for a move of one of our remote sites. This site contains one DC and one GC, and will be down for around two days. What is the "Best Practice" procedure to handle replication issues for a scheduled outage of 1-2 days? Thanks in advance, Jerry Fessenden

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Michael B. Smith
NO. SQL does not support concurrent use licensing. It is per-seat licensing or per-processor licensing. You should read the link that Jeff provided. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, August 24, 2004 1:52

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Salandra, Justin A.
I looked over that link already. If I buy 50 PER USER Cals for 200 users to use then only a max of 50 at any given time can connect to SQL. When they disconnect from SQL, they don't hold onto the license do they? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Jeff Salisbury
That would allow up to 50 users to connect at any given time assuming that: - You assign those 50 user CALs to the server - You selected the per-Server license mode during the installation and specified 50 connections If you get a second server, you would need to purchase more CALs or remove

[ActiveDir] read mS-DS-ReplicatesNCReason with Perl?

2004-08-24 Thread Willem Kasdorp
Hi, I know that there are some Perl gurus on this list, one of whos name starts with a j and ends in oe so I thought Id ask a tricky question. Im writing a Perl script to monitor my replication topology. One of the things I need to accomplish is to read the attribute

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Michael B. Smith
Yes, they do. Any user that might ever access the SQL server needs a CAL (unless you have a per-processor license). If you have 200 users, you need 200 CALs. A per-processor license would be cheaper. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Michael B. Smith
I think that per-server licensing mode is gone. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Salisbury Sent: Tuesday, August 24, 2004 2:14 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] OT: SQL Licensing question That would allow up to 50

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Salandra, Justin A.
Not really. I had someone get a quote of SQL 2000 at a per processor and it was $20K. A server license and 200 CALS would be cheaper. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Tuesday, August 24, 2004 2:17 PM To: [EMAIL

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Salandra, Justin A.
Last time I installed SQL 2000 there was only an option for per seat or per server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Tuesday, August 24, 2004 2:20 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: SQL Licensing

RE: [ActiveDir] admt2.0 permissioning

2004-08-24 Thread Grillenmeier, Guido
good point - but realize that it's somewhat of a risky business to grant lower level admins the permissions to migrate-sid-history. Although I agree with 2003 you at least have this option. /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Willem

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Michael B. Smith
That's enterprise edition. :-) Standard edition is $5,000. According to http://www.microsoft.com/sql/howtobuy/faq.asp The cutover point for enterprise edition is 80 CALs, for standard edition it is 24 CALs. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Michael B. Smith
Take a look at http://www.microsoft.com/sql/howtobuy/sqlserverlicensing.asp, as well as http://www.microsoft.com/sql/howtobuy/faq.asp Per server is gone. It's per processor or per seat (user or device). I'm not talking about the installation options (they may not have been updated since SQL

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Jeff Salisbury
My bad. Michael is correct. From the SQL Server 2000 Licensing FAQ (http://www.microsoft.com/sql/howtobuy/faq.asp): Q. Do you still offer per-server (concurrency) CALs? A. No. SQL Server 2000 is only available by means of a Server plus device CAL, Server plus user CAL, or a Processor license.

RE: [ActiveDir] admt2.0 permissioning

2004-08-24 Thread Willem Kasdorp
True. Case in point: a large migration that is partially granted to an external party. With this delegation we do not have to give them DA permissions. -- Regards, Willem -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent:

RE: [ActiveDir] read mS-DS-ReplicatesNCReason with Perl?

2004-08-24 Thread Ken Cornetet
use strict; use Win32::OLE; use Data::Dumper; my $strDcRDN = cn=nts0; my $strSiteRDN = cn=Jasper-North; my $objRootDSE = Win32::OLE-GetObject(LDAP://RootDSE;); my $strConfigurationNC = $objRootDSE-Get(configurationNamingContext); my $strNtdsSettingsPath = LDAP://cn=NTDS Settings, $strDcRDN,

RE: [ActiveDir] File Replication Services

2004-08-24 Thread Filipe Joel de Almeida
No the drive F:\users is the local drive of that server that is shared as \\server1\users. If on the admin tool appears \\server1\users, how can I check and correct the metadata? I already tried to delete and re-create the DFS a dozen times, but didn't work... Filipe Joel de Almeida Network

RE: [ActiveDir] File Replication Services

2004-08-24 Thread Justin_Leney
Return Receipt Your RE: [ActiveDir] File Replication Services document :

RE: [ActiveDir] File Replication Services

2004-08-24 Thread Gayoso, Ray
Are they both using the same share name? -Original Message- From: Grillenmeier, Guido [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 24, 2004 1:36 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] File Replication Services did you previously mount that share as network drive F: ?

RE: [ActiveDir] read mS-DS-ReplicatesNCReason with Perl?

2004-08-24 Thread Willem Kasdorp
Brilliant! Obvious in hindsight. Thanks a lot. -- Regards, Willem -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Cornetet Sent: Tuesday, August 24, 2004 9:20 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] read mS-DS-ReplicatesNCReason with

RE: [ActiveDir] File Replication Services

2004-08-24 Thread Filipe Joel de Almeida
On the server1 the directory f:\users is shared as users, and in the server2, the directory c:\users is shared as users... The server where the error appears about f:\users, is the server that has that directory Filipe Joel de Almeida -Original Message- From: [EMAIL PROTECTED]

[ActiveDir] Book Recommendations

2004-08-24 Thread Kevin Bachelder
Hi all, I am new to the list. We have a small company with less than 50 PCs and about 5 servers. We currently have an NT 4.0 domain and will be rolling out several new Windows 2003 servers and plan to migrate to an Active Directory setup. I am looking for recommendations on the best books

RE: [ActiveDir] Book Recommendations

2004-08-24 Thread Tony Murray
Robbie Allen's Cookbook is a great starter. Some of the options are listed here: http://www.activedir.org/books.htm Tony -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bachelder Sent: Dienstag, 24. August 2004 22:04 To: [EMAIL PROTECTED]

RE: [ActiveDir] Book Recommendations

2004-08-24 Thread Robert Mezzone
I'm in a similiar environment. I used chapter 9 and 10 of the domain migration cookbook. My Windows Server 2003 boxes were new hardware so I was able to do everything during business hours. Mark Minasi's book is also a pretty good resource.

RE: [ActiveDir] Book Recommendations

2004-08-24 Thread Kevin Bachelder
Hey Tony, Thanks very much. I looked at Robbie Allen's Cookbook at the book store and it looked a bit deep or advanced for what I was looking for as a first AD book. It was more of a specific steps rather than an overview or an implementation guide. Any other ones you might recommend first?

RE: [ActiveDir] Book Recommendations

2004-08-24 Thread Kevin Bachelder
Hi Robert, Thanks for the recommendation. A lot of the info I found was for in place upgrades and like you we are migrating to new machines so this looks like an excellent resource. Thank you again, Kevin At 04:17 PM 8/24/2004, you wrote: I'm in a similiar environment. I used chapter 9 and 10 of

RE: [ActiveDir] Book Recommendations

2004-08-24 Thread Kevin Bachelder
Robert, When I was looking at one of the chapters there was an ad in the margin for a whole series of upcoming AD webcasts from Microsoft! Perfect timing! Thanks again. http://www.microsoft.com/seminar/events/series/adaug.mspx Kevin At 04:45 PM 8/24/2004, you wrote: Hi Robert, Thanks for the

RE: [ActiveDir] Justice for Victims of Agent Orange

2004-08-24 Thread stefano tufillaro
Thanks From: MAI ANH TUAN [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Subject: [ActiveDir] Justice for Victims of Agent Orange Date: Tue, 24 Aug 2004 07:34:34 +0700 MIME-Version: 1.0 Received: from mail.activedir.org ([64.245.160.7]) by

Re: [ActiveDir] Book Recommendations

2004-08-24 Thread Robert Mezzone
This goes without saying, but do this procedure in a test environment a couple of times to figure out all the little quirks. Hopefully you will also be able to migrate all your users without working any ot. Robert -Original Message- From: [EMAIL PROTECTED] [EMAIL PROTECTED] To: [EMAIL

RE: [ActiveDir] Moving a remote site

2004-08-24 Thread Brian Desmond
Do nothing. Unless you've been farking around with the domain tombstone lifetime, you should start worrying in a couple months if you haven't reconnected by then. --Brian -Original Message- From: Jerry Fessenden [mailto:[EMAIL PROTECTED] Sent: Tue 8/24/2004

RE: [ActiveDir] OT: SQL Licensing question

2004-08-24 Thread Brian Desmond
Yes they do. Every user who connects to SQL must have a CAL, regardless of whether or not they're connected: You have five users: Bill Bob Mary Jane Sue You own three user cals and one sequel box: Your five users connect in this order: Mary Sue Bob Jane Bill The first three are

RE: [ActiveDir] Book Recommendations

2004-08-24 Thread Brian Desmond
Might want to look at SBS for this, though with multiple servers it may or maynot be appropriate. --Brian -Original Message- From: Kevin Bachelder [mailto:[EMAIL PROTECTED] Sent: Tue 8/24/2004 3:03 PM To: [EMAIL PROTECTED] Cc:

Re: [ActiveDir] GPO's, RIS and Software Deployment

2004-08-24 Thread Roger Seielstad
On Wed, Aug 18, 2004 at 05:22:51PM -0400, Edwin wrote: Can anyone provide me with good documentation on RIS and software deployment through GPO? We currently use MS ADS and I don't like it and I believe it to be the cause of problems. Aside from that, I think that I can benefit more

Re: [ActiveDir] Remote Installation Headaches

2004-08-24 Thread Roger Seielstad
Just noticed that you've got conflicting lines in your config. you have OEMPreinstall = no near the beginning and then OEMPreinstall = yes near the end. That might be part of the driver issue. Roger On Tue, Aug 24, 2004 at 10:36:05AM -0400, Edwin wrote: I am attempting to use RIS and am