RE: [ActiveDir] turn off replication to a DC in same site

2005-07-31 Thread Grillenmeier, Guido
Steve, you actually don't have to be a Cisco expert for this one - this is rather unrelated to the underlying network technology used: AD supports super-netting for the configuration of subnets to define site-boundaries. Say you have a class C network that holds the majority of your clients and

RE: [ActiveDir] turn off replication to a DC in same site

2005-07-31 Thread Grillenmeier, Guido
Warning 1: YOU MUST MUST MUST still let DCs replicate, _in both directions_, _on a regular basis_. The regularity of the basis is based on the fact that AD replication must always happen end-to-end in the forest within a tombstone lifetime or you end up with lingering objects. It can be very

RE: [ActiveDir] Intra-forest migration

2005-07-31 Thread Rob Ryan
It is a move, thats the key difference.. Regardless of which tool you look at though, all three that have been mentioned so far (well, 2 and a half :D) will require you to: 1) move/copy the users from domain a to domain b 2) deploy agents to the workstations/servers to perform post

REĀ : [ActiveDir] Intra-forest migration

2005-07-31 Thread TIROA YANN
A good link about admt v2 capabilities from HP expert., including migrating users profiles, and a comparison between admvt v2 with other third-party tools. http://redmondmag.com/features/article.asp?EditorialsID=357 Cheers, Yann De: [EMAIL PROTECTED] de la

RE: [ActiveDir] OT: MIIS, ADAM, AD

2005-07-31 Thread Robert Bobel
Nice side benefit is that the license to use MIIS with the Feature Integration pack to sync AD to ADAM is free. http://www.microsoft.com/downloads/details.aspx?familyid=D9143610-C04D-41C4-B7EA-6F56819769D5displaylang=en Bob From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-31 Thread Rick Kingslan
Joe said: WHY??? What do you feel the benefit is? In my experience, its been not what *I* think the benefit is its more about what management WANTED for reason A, or reason B, or whatever whacked business justification that they had. Im not much into creating trees for the heck

RE: [ActiveDir] turn off replication to a DC in same site

2005-07-31 Thread Rick Kingslan
Steve - David is not talking about a Cisco (or network layer) related network trick. This is at the site, or more appropriately, subnet object level. And, this should not prevent you from doing this on the public scope. Consider that one of your public IP's is 12.30.10.0/24, for example. If

RE: [ActiveDir] OT: MIIS, ADAM, AD

2005-07-31 Thread Al Mulnick
I'll be a lot more interested in MIIS when "free" doesn't mean I have to "buy" SQL licenses to run it. I can understand the server license for Windows, but it should run on any version of the latest Windows server (enterprise, standard, etc) or a desktop OS. Not sure why that is not

RE: [ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-31 Thread Grillenmeier, Guido
I'd actually have to say that this is a battle worth fighting because people would try to see something in AD which they shouldn't = a separate tree should certainly not be used simply to put an organisational structure in place which is negative to the business in the longrun.Neither

Re: [ActiveDir] turn off replication to a DC in same site

2005-07-31 Thread Steve Schofield
Thanks Rick for putting clarifying that, networking stuff clutters my mind some times if I don't work with it very often. I didn't mean to give the impression I was totally clueless to networking aka Cisco, rather I don't control the Cisco setup and will have to get with the network guys *who

RE: [ActiveDir] turn off replication to a DC in same site

2005-07-31 Thread Rick Kingslan
And, that's what I *LOVE* about the way that Microsoft implemented site / subnet objects - you're no where near as dependent on your network engineers (who, IMHO tend to be a PITA and complicate things much more than necessary - apologies to our NE friends on the list...) as the sites and subnet

RE: [ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-31 Thread Myrick, Todd (NIH/CC/DNA)
Speaking from Experience. I agree with Guido and Joe The AD Architecture at my organization does use the place holder domain, and also has multiple trees. The justification back in 2000 was that several of the organizations wanted the Enterprise roles separated and hidden as best as possible

RE: [ActiveDir] Multiple Domain Trees in a Single Forest

2005-07-31 Thread joe
:o) It is our job as technical experts or subject matter experts or technology specialists or whatever it is you want to call us to explain the ramifications of bad decisions to management and convince them to follow a more prudent course. Anytime a manager refuses to listen to me on a

[ActiveDir] Partial Attribute Set - 2000 DCs and 2003 DCs

2005-07-31 Thread Almeida Pinto, Jorge de
Hi Everyone, I was looking something up concerning the partial attribute and its behavior with DCs. Now... * If all DCs = w2k3 and PAS is changed, then only the changes to the PAS will be replicated * If all DCs = w2k and PAS is changed, then a full resync will be done for all objects and

RE: [ActiveDir] Partial Attribute Set - 2000 DCs and 2003 DCs

2005-07-31 Thread Dean Wells
I'm not entirely sure that I'm completely grasping your question, so I'll answer what I hope it is you're asking - If the GC is running 2003, it will full sync. only the foreign-domain NCs sourced from a downlevel DC, a partial sync. occurs for the remaining foreign-domain NCs sourced from

[ActiveDir] Documentation with video

2005-07-31 Thread Crawford, Scott
There was at least one thread lately about documenting the environment. I've just found that Windows Media Encoder (free download) is superb for this. http://www.microsoft.com/windows/windowsmedia/9series/encoder/default.as px It gives you the option on startup to capture video from the screen.

[ActiveDir]

2005-07-31 Thread Siscar, Emerson E.
Hi to all: May I seek for your advice regarding the attached log? Thanks a lot! FRSDiag v1.7 on 7/29/2005 2:04:17 PM .\Server21 on 2005-07-29 at 2.04.17 PM

RE: [ActiveDir] Partial Attribute Set - 2000 DCs and 2003 DCs

2005-07-31 Thread Almeida Pinto, Jorge de
Hi, I realize know the text layout did not come through. * Full synchronization: When one global catalog server is running Windows 2000 Server and the other is running Windows Server 2003 and a global catalog server running Windows Server 2003 replicates the change to a global