RE: [ActiveDir] OT Assign Icon in script

2005-06-02 Thread Dan Holme
Title: OT Assign Icon in script Ive done that sort of thing simply by creating the shortcut then _copying_ it via a script. Dan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Visser Sent: Wednesday, June 01, 2005 2:39 PM To: ActiveDir@mail.activedir.org

Re: [ActiveDir] OT Assign Icon in script

2005-06-02 Thread Peter Jessop
Aaron scut.IconLocation = \\server\folder\customicon.ico should work Regards Peter List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] _msdcs question

2005-06-02 Thread Myrick, Todd (NIH/CC/DNA)
Okay time to weigh in here. You don't need WINS to establish the trust in my experience. You do need connectivity though, if your trust is going through a firewall you might encounter UDP fragmentation, port blocking, etc ... so you will want to force the use of TCP protocol on your DC's for

RE: [ActiveDir] _msdcs question

2005-06-02 Thread Rimmerman, Russ
---BeginMessage--- Well, I was actually able to finally get the trust verified successfully by setting up WINS replication. Not sure how else we'd know which boxes are the DCs in their domain since the _msdcs is outside the zone (win2k3 design). WINS replication took care of it for me.

RE: [ActiveDir] lastlogontimestamp-

2005-06-02 Thread Steve Rochford
Is it possible to approach this from another way? Do you have any access to enrolled student data? If so, then it might be easier to delete students who are no longer enrolled rather than try and work out those who haven't logged on. I have a script that runs at regular intervals and pulls a

RE: [ActiveDir] lastlogontimestamp-

2005-06-02 Thread Garello, Kenneth
Steve, Thanks for the alternate view. Unfortunately, our business policy is not that simple. We basically allow for lifetime email as long as the account is active. Do you simply delete the account when a student becomes inactive? What determines enrollment at your school? (This is a

RE: [ActiveDir] Error in PDC Operations Master

2005-06-02 Thread Jorge de Almeida Pinto
Hi Dean, As I mentioned earlier I did not know (never seen it before) about the automatic increase of the ridavailablepool value with 1 million after the rid seizure. I got curious and I built a small environment. I did not see the ridpool got increased with 1 million after the seizure. I also

[ActiveDir] VB.NET AD object picker?

2005-06-02 Thread AD
Does anyone have vb.net code they would like to share? I am looking for an Active Directory object picker written in vb.net. I can find allot of C++ examples but I am more comfortable with visual basic. Thanks Yves List info : http://www.activedir.org/List.aspx List FAQ:

RE: [ActiveDir] Security settings not Inheriting

2005-06-02 Thread chris . ryan
That was exactly right. Thanks for the help! Chris Ryan The Kroger Company [EMAIL PROTECTED] Office (513) 698-1935 Cell (513) 623-5362 Tony Murray

RE: [ActiveDir] VB.NET AD object picker?

2005-06-02 Thread Lou Vega
Robbie Allen's Active Directory Cookbook is full of great examples in VB. Check out the link to the code here: http://www.rallenhome.com/books/adcookbook/code.html I fully recommend purchasing it as well. This book as seen a lot of use while sitting on my desk! (Be sure to write your name on it

RE: [ActiveDir] Error in PDC Operations Master

2005-06-02 Thread Dean Wells
Tested this myself and reached the same conclusion you did. I've since done some digging and found a number of references to the 1 million increase, all of which were in documents relating to Windows NT5. I assume my memory has yet again failed me :) since I can't even find any private

Re: [ActiveDir] OT Assign Icon in script

2005-06-02 Thread Aaron Visser
Thanks that worked On 6/2/05 1:18 AM, Peter Jessop [EMAIL PROTECTED] wrote: Aaron scut.IconLocation = \\server\folder\customicon.ico should work Regards Peter List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

[ActiveDir] LDAP error

2005-06-02 Thread TIROA YANN
Hello everybody :-)) I don't know if it's the right place, but i think i could have good resolution for my pb in this discussion :-) We use MIIS 2003 (Microsoft Identity Integration Server 2003 ) in order to synchronize Active directory 2003 with openLdap. I install Password Change Notification

RE: [ActiveDir] Error in PDC Operations Master

2005-06-02 Thread Jorge de Almeida Pinto
Appologies accepted! No hard feelings! I also used the same environment to test the ADMOD -undel option to undelete objects and it did not work (already mailed Joe about it). However I must mentioned both the RID thing and the ADMOD thing were tested on W2K3-R2! Keeping my earlier statement in

Re: [ActiveDir] LDAP error

2005-06-02 Thread Mark Parris
Are you running the hotfixes as described in 842531 ? Mark -Original Message- From: TIROA YANN [EMAIL PROTECTED] Date: Thu, 2 Jun 2005 16:52:27 To:ActiveDir@mail.activedir.org Subject: [ActiveDir] LDAP error Hello everybody :-)) I don't know if it's the right place, but i think i could

RE: [ActiveDir] ExchMbx Secondary SMTP

2005-06-02 Thread Noah Eiger
Thanks. That should do it. -- nme -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 01, 2005 8:13 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] ExchMbx Secondary SMTP Admod, eh? That's where you are hiding it? Who woulda thunk :o.

[ActiveDir] ADPrep /Forestprep and /DomainPrep

2005-06-02 Thread Za Vue
Do ADPrep /forestprep and /domainprep require rebooting of the domain controllers? Thanks, Z.V.

RE: [ActiveDir] VB.NET AD object picker?

2005-06-02 Thread AD
Already own it. Great book. Good idea about writing your name on it. Unfortunately the book does not show any gui examples or/and how to use the treeview object in vb.net. From: [EMAIL PROTECTED] on behalf of Lou Vega Sent: Thu 02/06/2005 10:12 AM To:

RE: [ActiveDir] ADPrep /Forestprep and /DomainPrep

2005-06-02 Thread Ruston, Neil
Title: Message No. That would be pretty painful in an env with hundreds of DCs :) The below commands simply extend the schema and make other minor changes in the config and domain NCs. neil -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] ADPrep /Forestprep and /DomainPrep

2005-06-02 Thread Jorge de Almeida Pinto
NOPE! only if you really want to ;-) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za VueSent: donderdag 2 juni 2005 17:56To: ActiveDir@mail.activedir.orgSubject: [ActiveDir] ADPrep /Forestprep and /DomainPrep Do ADPrep /forestprep and /domainprep require rebooting

RE: [ActiveDir] lastlogontimestamp-

2005-06-02 Thread Steve Rochford
As I understand it, remote NTLM authentication is when someone doesn't log on by doing CTRL ALT DEL and putting in a username/password but accesses some resource which either prompts for username/password (perhaps a web page or email program) or uses the stored token. This doesn't update the

RE: [ActiveDir] LDAP error

2005-06-02 Thread TIROA YANN
Yes, thank you for your output. I will install the fix now. I will let U know if it's successfull. Cheers, Yann -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Mark Parris Envoyé : jeudi 2 juin 2005 17:09 À : ActiveDir@mail.activedir.org Objet :

RE: [ActiveDir] Error in PDC Operations Master

2005-06-02 Thread deji
Something that confuses me in this (and in RID allocation generally) is: Isn't the RIDavailablePool held by the RID master? Is the value replicated among DCs? If it's not, does a DC have to check with the RID master BEFORE it increments this value? (I assume that it would, but I am not sure,

RE: [ActiveDir] lastlogontimestamp-

2005-06-02 Thread Garello, Kenneth
Steve, I have just verified that OWA is updating the lastlogontimestamp (Win2003 AD, exchange2003 sp1) which is what I was most concerned with. The other issues (stored token) should be few and far between so the six month lag should be good enough to catch it. I think we are going to remove

RE: [ActiveDir] lastlogontimestamp-

2005-06-02 Thread Marcus.Oh
That's great info... and timely. I need to implement something like this here too. :m:dsm:cci:mvp -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Garello, Kenneth Sent: Thursday, June 02, 2005 3:29 PM To: ActiveDir@mail.activedir.org Subject: RE:

RE: [ActiveDir] Error in PDC Operations Master

2005-06-02 Thread Jorge de Almeida Pinto
Hi, The max. available RIDs in each AD domain is 1.073.741.823. This is the upper value of the attribute rIDAvailablePool of the object CN=RID Manager$,CN=System,DC=PARENT,DC=LAN. This attribute manages the blocks of RIDS that have NOT been assigned to DCs to create security principals. The owner

RE: [ActiveDir] DC's not communicating with each other

2005-06-02 Thread Mark Parris
This was a post I read at the beginning of the month - anything look familiar - it's by Brett, so I guess he knows It's all on the ActiveDir Org Archive - /SNIP/ Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley Sent: Tuesday, May

RE: [ActiveDir] Stop a DC from authenticating?

2005-06-02 Thread Jorge de Almeida Pinto
And if you need to do it permanently you can designated through the registry or through a GPO setting DC Locator DNS records not registered by the DCs (preferred!) And if you want to offload it you can configure the DNS weight and DNS priority of the records registered by the particular DC(s).

RE: [ActiveDir] DC's not communicating with each other

2005-06-02 Thread Jorge de Almeida Pinto
Oh yes they do.. See for more info http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/833842ca-6a61-4e62-8c25-e3edfa266701.mspx Select Active Directory Operations Guide , select Troubleshooting Active Directory, select Troubleshooting Active Directory Replication

RE: [ActiveDir] DC's not communicating with each other

2005-06-02 Thread Thommes, Michael M.
H...I have recently experienced the same issue but it did not involve a ghosted/cloned DC. What did happen was a child domain controller (spock) in a separate site from its other child DCs was demoted. A new DC was brought up with the same name a few hours later. I am afraid that the

[ActiveDir] Server Died... Question about readding it...

2005-06-02 Thread Jennifer Fountain
Hi all: One of my DCs died (hardware failure) so we replaced it and reinstalled 2000. Since we have enough DCs, we were able to just resync the data. My question is - we named the new DC the same as the dead one and didn't remove the old dc from sites and services. By doing this, will this cause

RE: [ActiveDir] Server Died... Question about readding it...

2005-06-02 Thread Jorge de Almeida Pinto
Hi, If one of your DCs died and it is OK reinstall it instead of restoring it you should: (1) Perform a metadata cleanup to remove the directory info of the DC that died. see http://support.microsoft.com/default.aspx?scid=kb;en-us;216498 and/or http://www.petri.co.il/fix_unsuccessful_demotion.htm

RE: [ActiveDir] Error in PDC Operations Master

2005-06-02 Thread joe
Deji F:\DEV\cpp\ShrFlgsadfind -schema -f ldapdisplayname=ridavailablepool systemflags AdFind V01.26.00cpp Joe Richards ([EMAIL PROTECTED]) February 2005 Using server: 2k3dc01.joe.com Directory: Windows Server 2003 Base DN: CN=Schema,CN=Configuration,DC=joe,DC=com

RE: [ActiveDir] lastlogontimestamp-

2005-06-02 Thread joe
A remote NTLM Auth would be a remote authentication of a user for a resource that uses NTLM authentication because kerberos for some reason or another can't be used. For instance... If you connect to a resource via IP, kerberos will not be used, instead passthrough NTLM will be used. In this case

RE: [ActiveDir] Error in PDC Operations Master

2005-06-02 Thread joe
Huh? I didn't get that email Jorge... Lucky I was scanning through the posts, I barely caught this post. I haven't seen admod not work for an undel, definitely get data to me, use the -exterr option to capture the DSID info too. joe -Original Message- From: [EMAIL PROTECTED]

RE: [ActiveDir] Stop a DC from authenticating?

2005-06-02 Thread freddy_hartono
Hi Matt Creating a site without any subnets, will not prevent users from logging on to there - (those machines without a subnet defined in AD) will find its fastest responding DC, which could mean that DC. Stopping netlogon like Jose mentioned (or unplugging :) Or remove dns srv records, DC