getExtensionName()
requires you to pass it a filespec (a filename, or path to a file)
If
FSO.getExtensionName(c:\windows\clock.avi) = avi Then
do foo
Else
do bar
End
If
Cheers
Ken
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Thursday,
Maybe I should flip the question around a little...
What are the changes made in exch2k3 sp1 (involving ECC corrections) and
why were they deemed necessary, given what I have read from
joe/Brett/Eric et al)??
The changes appear to be superfluous. We do not appear to need such a
(further) check
I thought it was Windows 2003 sp1 that had additional database
correction stuff?
[EMAIL PROTECTED] wrote:
Maybe I should flip the question around a little...
What are the changes made in exch2k3 sp1 (involving ECC corrections) and
why were they deemed necessary, given what I have read from
I was referring to this KB:
http://support.microsoft.com/?kbid=867626
neil
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: 08 December 2005 09:28
To: ActiveDir@mail.activedir.org
Subject: Re:
The existing mechanism place in Exchange 2003 prior to sp1 was able to
detect problems, and ensure that they didn't cause problems in the
Exchange environment -- however that could mean that a store was shut
down when a -1018 was detected. And that's a real problem to the user
environment!
isn't there a way to do it without passing the full path?
i thought in my statement its implied that whatever file should be, it should look for an .eml ext.
thanks
On 12/8/05, Ken Schaefer [EMAIL PROTECTED] wrote:
getExtensionName() requires you to pass it a filespec (a filename, or path to a
Title: RE: [ActiveDir] Help with VB script to map printers
If you are using that exact script. Line eight asks for UNCpath3
Line 3 4 specify UNCpath2 change UNCpath2 on line 4 to UNCpath3
hth
Rick
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Noah Eiger
Sent:
Thanks I'll take a look at that.
-Original Message-
From: [EMAIL PROTECTED] [mailto:ActiveDir-
[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko
Sent: Wednesday, December 07, 2005 7:23 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Bit OT: ports needed to authenticate
Below is an example in my environment:
If IsMember("GROUPNAME") Then
MapDrive "G:", "\\SERVER\SHARE$" (I hide all my user shares)
MapDrive "P:", "\\SERVER\SHARE-2$"
gDrive ="G:\"
pDrive ="P:\"
BAHHH! now works for me too! Must have been
a Hotfix MS released recently hehe
---
Rich Milburn
MCSE, Microsoft MVP -
Directory Services
Sr Network Analyst, Field Platform Development
Applebee's International, Inc.
That is a bit complex to follow :)
Can you elaborate what you mean by this part I don't understand why
resolving names is different to adding a user, it seems to me the same
authentication path is followed.
Are you saying that you figure because you can logon to the server with
internal
Yep, any time you can correct for an error versus just fail out on detection
(or even worse not detect) it is a good thing. I expect someone was sitting
around one day saying, hey you know how we detect these problems and you
know how it is often a single bit... I bet we could find a way to detect
Right. Different purposes for the technology dictate different answers.
A one-bit flip can happen from all sorts of things. We don't tend to notice
it very much with newer hardware because a lot of it gets checked, scrubbed
and then checked and scrubbed some more as it passes between
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication
I haven't perused the OS source code for this but from my
experience this is how it works...
In order for the member server to resolve a name to a SID,
it needs to be able to connect to a domain
Is there any way to change the case of a child domain in AD
from all upper-case to all lower-case? Example, when I look in Active
Directory Domains Trust, I have this:
- domain.com
+ child1.domain.com
+ child2.domain.com
+ CHILD3.DOMAIN.COM
+
Tom,
if lcase(fso.getextensionname(file)) = eml then file.move
target
---
Rich Milburn
MCSE, Microsoft MVP -
Directory Services
Sr Network Analyst, Field Platform Development
Applebee's International, Inc.
4551 W.
That makes more sense - AD is resilient by its distributed design
whereas Exch is not (or less so) due to its non-distributed design.
A database 'corruption' in AD simply means we re-build the affected DC
(since the corruption will not be replicated (we hope)) whereas in Exch,
the same
I suspect a domain rename is your only option and I would
doubt that the benefit outweighs the pain in this scenario.
What is the (perceived) issue with the
case?
neil
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding,
DevonSent: 08 December 2005 14:08To:
I have never tested that specific scenario but you should be able to add an
internal domain secprin to the DMZ member server without working from the
DC. It would require a tool that knows how to specify the server to use for
the name to sid resolution. Let me think if such a tool exists oh
Hi Johnny,
You can delegate security of the DNS Zone to allow read-only access.
See
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S
erverHelp/73b2314f-6acf-422a-85bc-c1d04d1d8e00.mspx
The user can run the DNS management snap-in on their local system and
connect to the
Mainly asthetics. I really would like all
domains to look uniform. Can this be modified in AD? Admod or adsiedit?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, December 08, 2005
9:24 AM
To: ActiveDir@mail.activedir.org
Subject:
Thanks alot!!
I still can't get the rename to work.
the script copies a bunch of eml files from a bunch of source sub folders. in those sub folders the files have duplicate names but because they are in sub folders, it doesn't matter until they are being copied to the single target folder.
Well... sometimes not exactly.
The Dell OEM image was built and it flips the preWin2k AD name to lower
case from the normal upper case.
WSUS doesn't like that during their install.
Sometimes case does matter.
Harding, Devon wrote:
Mainly asthetics. I really would like all domains to look
I'd agree with that... but I know from doing small scripts that when I
put them in someone else's hands, and I start adding in detection for
this, and that, and error handling, eventually what was a 20 line script
has grown into 1000+ lines and loads of subs and functions without
actually adding
I think you're referring to computer names and not domain names(?)
The OP related to domain names.
neil
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: 08 December 2005 15:32
To:
IMHO, a domain rename would be needed if the NetBIOS and/or DNS domain name
needed to change. (different structure)
Just for changing the case in ADDT a domain rename is not needed. Just did it
in my test environment by changing the case of the value of the attribute
dnsRoot of the object
This is a tough one. I followed your link William,
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S
erverHelp/73b2314f-6acf-422a-85bc-c1d04d1d8e00.mspx
Gave a test user Read access to a specific AD integrated zone. To be
able to connect the DNS MMC, I still had to give
Exactly, you would run lg from the member and use -r dmzDC and it tells LG
to query the dmzDC for the SID and dumps that into the group. Again I
haven't tested it in that scenerio it should work. Certainly it works when
there is NO trust channel at all as it has been used on tens if not hundreds
I think there are differences between functional levels.
What OS / mode are you running at?
I can say for certain, on my test rig (2k in Native mode) I have set
read-only access to specific zones.
I have not had much luck yet in assigning further permissions such as
adding records.
William
I went through this decision tree a long time ago, when I
was upgrading a company from NT to 2K and went to Europe I let the European
admin enter the name of the domain, I didn't catch the upper case on the domain
name EU1 until afterward... It bothered the heck out of me, I worked out how
Replace your last sub:
sub filelist(grp)
for each file in grp.files
if targ.files.count=999 then
full=true:exit for
if
lcase(fso.getextensionname(file)) = eml then
set objFile =
fso.getfile(file)
arrFileName = Split(objfile.Name,.)
oldname
= arrFileName(0)
ext
=
This
script enumerates all the Windows profiles on a computer and then lists all the
MAPI profiles for each user too.
If
a computer is turned on and no firewall is getting in the way and the Remote
Registry service is running, you can access any key/value on the computer
remotely.
I worked out how to change it but never had the courage to actually do it.
same here. and that's why I say: I DO NOT RECOMMEND IT! (as I do not know what
the consequences are of doing it!)
it may be as simple as it looks... just changing the case of the value of the
attribute...but the
Damn! Whats the worse that could
happen if I change the case?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de
Sent: Thursday, December 08, 2005
10:52 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Domain
case
IMHO, a
Error detection and correction seems to be about 60-90% of any program that
does it well, in other words most of the code is to validate you are working
with what you should be working with.
For user facing apps that usually means a ton of code around
detecting/correcting data entry issues. For
No, it's lowercase preWin2k Active directory naming.
You cannot install Windows Server Update Services 2.0 on a computer that
is running an original equipment manufacturer version of Windows Small
Business Server 2003:
http://support.microsoft.com/default.aspx?scid=kb;en-us;906798
WSUS does
If you know a users profile name,
so you can calculate the value of c:\documents and settings\username\, you can use reg load to
load the ntuser.dat, make edits to the key, and unload. Unloading is
important, or it will create a new profile for said user because their profile
will be in
Thanks alot!!
Unfortuantely it only seems to work when i ran it the first time.
if i kill it and run it again and it encounters a duplicate file in the source dir it throws an error-file already exisits.
will it only work in one shot?
thanks
On 12/8/05, Rich Milburn [EMAIL PROTECTED] wrote:
So you know exactly how I feel Joe. I
really, really, really would like to fix this. Joe can you dig up the doc on
how to do this?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Thursday, December 08, 2005
11:34 AM
To: ActiveDir@mail.activedir.org
Love to see that script
John
Hann
MOM MVP
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn
Sent: Thursday, December 08, 2005
11:23 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] logon
scripts
If you know a users profile name,
so
Oh now that is completely silly.
Especially for an OS that is traditionally case insensitive.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA
aka Ebitz - SBS Rocks [MVP]
Sent: Thursday, December 08, 2005 12:02 PM
To:
And the funny thing it is one of the very first tools I published for public
use
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Thursday, December 08, 2005 12:39 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] DMZ
This is the only thing I would be willing to point
at
http://www.microsoft.com/technet/downloads/winsrvr/domainrename.mspx
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding,
DevonSent: Thursday, December 08, 2005 1:09 PMTo:
ActiveDir@mail.activedir.orgSubject: RE:
I meant to add that people complain about Windows being big and bulky
but I bet a huge portion is the 60-90% you mention. And I imagine they
(like me) get frustrated when they try to add just a little less of it
in, and then the day after it's released, out comes Hotfix KB91 :)
The
Net share joesdevfolder
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Thursday, December 08, 2005 11:58 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Ntds.dit file corruption
Error detection and correction seems to be about
Of course, that's comparing apples to oranges. Exchange 5.5's *directory*
WAS distributed by design.
Ed Crowley MCSE+Internet MVP
Freelance E-Mail Philosopher
Protecting the world from PSTs and Bricked Backups!T
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Only problem is not all our domains are
Windows 2003, which is a requirement for domren
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Thursday, December 08, 2005
1:30 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Domain
case
This is
fileexists is a method for FSO object
and you are attaching it to a folder object.
Try fso.fileexistsOn 12/8/05, Tom Kern [EMAIL PROTECTED] wrote:
Thanks alot!!
I still can't get the rename to work.
the script copies a bunch of eml files from a bunch of source sub
folders. in those sub
The
worst thing that could happen?
The
domain name is stored in many instances, and if any domain or forest related
process hicks up because of binary different names you might loose your domain
or forest.
Thats
the worst case, but could it get any worse?
Issue
here is that nobody
Hello Noah,
besides from the
other answers:
Are you planning
on implementing any single Windows Server 2003 R2 in the close future? If yes
then you can use the print-managementconsole which will allow you to publish
printers by group policy to either users or computers and you only
I have a logon script via a user gpo that sets enviorment variables. However those variables are never set.
Gpresult claims the gpo was processed and i have nothing in my event logs.
The script was set to run synchronously. Is that the issue.
are the variables not there to set yet?
thanks
instead of creating random, what I had done was
create a for loop, say 1..1 (fairly high number to get the unique name)
and append that number if file exists in target,
if not exists go ahead and append that number to filename for destination and exit the loop
otherwise continue to next
you could still investigate what I said in a test environment and see what
happens if you really want to do what you want.
Jorge
From: [EMAIL PROTECTED] on behalf of Harding, Devon
Sent: Thu 12/8/2005 8:51 PM
To: ActiveDir@mail.activedir.org
Subject: RE:
Guys
There was talk a few weeks ago about a Hotfix that resolved a DNS issue with
root domains that were W2K3SP1, can anyone please forward me the KB Number.
Regards
Mark
This e-mail and any attachment is for authorised use by the intended
recipient(s) only. It may contain proprietary
Hehe. Thanks, I needed that. It was a rough
day.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom
KernSent: Thursday, December 08, 2005 4:27 PMTo:
activedirectorySubject: [ActiveDir] envoirment
variables
I have a logon script via a user gpo that sets enviorment
Yeah but the information store wasn't. :)
I think the comparisons going on are between the store and the AD DIT.
Totally different uses of the same database engine - ESE.
joe
==
My ESE Engine can beat up your SQL Server.
-Bratt Shirley
I am running the script a command linefrom my workstation (I am using an account which does not have domain administrator permissions)ESM is installed on my WorkstationI will try running the script with the /e2kstore+ when I back on site.I don't recall seeing that error code being
Tom,
You might want to run your messages through the spell checker in the
future I had to read this a few times to process it.
Im not sure how this would log anything in the event log.
Well since you tried it synchronously, why dont you try it
asynchronously? Have you tried
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication
Hi joe,
Thanks for the response, I thought you'd be able to shed
some light on the situation. I guess I was looking for clarification of
the "handled differently" part, since the AD admins here
Call
Randomize() to initialize the random number generation algorithm somewhere in
your script, prior to the first call to Rnd()
Could
I suggest you get the Windows Script Host 5.6 documentation:
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication
You would need to have the access rights of someone who can
talk to the DMZ DC. The local admin doesn't have rights and the lg tool will NOT
fall back to anonymous access like the GUI will do.
You
Tom-
I gave you bum advice the first time. By running the script
synchronously, you essentially are running it before the user environment loads
and hence probably don't have access to the per-user environment variables when
the script is running. Run asynchronously doesn't guarantee getting
Correct. Devon, as much pain as there is in the
process, AS I UNDERSTAND IT (I do not speak for PSS) the Domain Rename process
is the only supported method of doing what you want to do.
Jorge's lab experiment does indicate that you might be able
to do it alonghis describedway,but you need
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication
I haven't perused the OS source
code
Right. Rub it in,
bud.
;o)
Rick
--Posting is provided "AS IS", and confers no rights or
warranties ...
From: [EMAIL PROTECTED]
[mailto:[EMAIL
How do you
set the variable? By changing the registry content? By using the COM interfaces
of WSH?
Did you try
to open an other CMD.EXE (process) after setting the variable? This could be the
issue.
Try with
Sample 2.26 to 2.30 - WMIEnv.wsf,vol 2, at http://www.lissware.net.
This one sets
65 matches
Mail list logo