RE: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Ken Schaefer
getExtensionName() requires you to pass it a filespec (a filename, or path to a file) If FSO.getExtensionName(c:\windows\clock.avi) = avi Then do foo Else do bar End If Cheers Ken From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Thursday,

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread neil.ruston
Maybe I should flip the question around a little... What are the changes made in exch2k3 sp1 (involving ECC corrections) and why were they deemed necessary, given what I have read from joe/Brett/Eric et al)?? The changes appear to be superfluous. We do not appear to need such a (further) check

Re: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
I thought it was Windows 2003 sp1 that had additional database correction stuff? [EMAIL PROTECTED] wrote: Maybe I should flip the question around a little... What are the changes made in exch2k3 sp1 (involving ECC corrections) and why were they deemed necessary, given what I have read from

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread neil.ruston
I was referring to this KB: http://support.microsoft.com/?kbid=867626 neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: 08 December 2005 09:28 To: ActiveDir@mail.activedir.org Subject: Re:

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread Michael B. Smith
The existing mechanism place in Exchange 2003 prior to sp1 was able to detect problems, and ensure that they didn't cause problems in the Exchange environment -- however that could mean that a store was shut down when a -1018 was detected. And that's a real problem to the user environment!

Re: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Tom Kern
isn't there a way to do it without passing the full path? i thought in my statement its implied that whatever file should be, it should look for an .eml ext. thanks On 12/8/05, Ken Schaefer [EMAIL PROTECTED] wrote: getExtensionName() requires you to pass it a filespec (a filename, or path to a

RE: [ActiveDir] Help with VB script to map printers

2005-12-08 Thread Active Directory
Title: RE: [ActiveDir] Help with VB script to map printers If you are using that exact script. Line eight asks for UNCpath3 Line 3 4 specify UNCpath2 change UNCpath2 on line 4 to UNCpath3 hth Rick From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Noah Eiger Sent:

RE: [ActiveDir] Bit OT: ports needed to authenticate

2005-12-08 Thread Bruyere, Michel
Thanks I'll take a look at that. -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Tomasz Onyszko Sent: Wednesday, December 07, 2005 7:23 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Bit OT: ports needed to authenticate

Re: [ActiveDir] Help with VB script to map printers

2005-12-08 Thread Za Vue
Below is an example in my environment: If IsMember("GROUPNAME") Then MapDrive "G:", "\\SERVER\SHARE$" (I hide all my user shares) MapDrive "P:", "\\SERVER\SHARE-2$" gDrive ="G:\" pDrive ="P:\"

RE: [ActiveDir] Help with VB script to map printers

2005-12-08 Thread Rich Milburn
BAHHH! now works for me too! Must have been a Hotfix MS released recently hehe --- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc.

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread Al Mulnick
That is a bit complex to follow :) Can you elaborate what you mean by this part I don't understand why resolving names is different to adding a user, it seems to me the same authentication path is followed. Are you saying that you figure because you can logon to the server with internal

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread joe
Yep, any time you can correct for an error versus just fail out on detection (or even worse not detect) it is a good thing. I expect someone was sitting around one day saying, hey you know how we detect these problems and you know how it is often a single bit... I bet we could find a way to detect

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread Al Mulnick
Right. Different purposes for the technology dictate different answers. A one-bit flip can happen from all sorts of things. We don't tend to notice it very much with newer hardware because a lot of it gets checked, scrubbed and then checked and scrubbed some more as it passes between

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread joe
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication I haven't perused the OS source code for this but from my experience this is how it works... In order for the member server to resolve a name to a SID, it needs to be able to connect to a domain

[ActiveDir] Domain case

2005-12-08 Thread Harding, Devon
Is there any way to change the case of a child domain in AD from all upper-case to all lower-case? Example, when I look in Active Directory Domains Trust, I have this: - domain.com + child1.domain.com + child2.domain.com + CHILD3.DOMAIN.COM +

RE: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Rich Milburn
Tom, if lcase(fso.getextensionname(file)) = eml then file.move target --- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc. 4551 W.

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread neil.ruston
That makes more sense - AD is resilient by its distributed design whereas Exch is not (or less so) due to its non-distributed design. A database 'corruption' in AD simply means we re-build the affected DC (since the corruption will not be replicated (we hope)) whereas in Exch, the same

RE: [ActiveDir] Domain case

2005-12-08 Thread neil.ruston
I suspect a domain rename is your only option and I would doubt that the benefit outweighs the pain in this scenario. What is the (perceived) issue with the case? neil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, DevonSent: 08 December 2005 14:08To:

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread Al Mulnick
I have never tested that specific scenario but you should be able to add an internal domain secprin to the DMZ member server without working from the DC. It would require a tool that knows how to specify the server to use for the name to sid resolution. Let me think if such a tool exists oh

RE: [ActiveDir] DNS Question

2005-12-08 Thread King, William
Hi Johnny, You can delegate security of the DNS Zone to allow read-only access. See http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S erverHelp/73b2314f-6acf-422a-85bc-c1d04d1d8e00.mspx The user can run the DNS management snap-in on their local system and connect to the

RE: [ActiveDir] Domain case

2005-12-08 Thread Harding, Devon
Mainly asthetics. I really would like all domains to look uniform. Can this be modified in AD? Admod or adsiedit? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, December 08, 2005 9:24 AM To: ActiveDir@mail.activedir.org Subject:

Re: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Tom Kern
Thanks alot!! I still can't get the rename to work. the script copies a bunch of eml files from a bunch of source sub folders. in those sub folders the files have duplicate names but because they are in sub folders, it doesn't matter until they are being copied to the single target folder.

Re: [ActiveDir] Domain case

2005-12-08 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Well... sometimes not exactly. The Dell OEM image was built and it flips the preWin2k AD name to lower case from the normal upper case. WSUS doesn't like that during their install. Sometimes case does matter. Harding, Devon wrote: Mainly asthetics. I really would like all domains to look

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread Rich Milburn
I'd agree with that... but I know from doing small scripts that when I put them in someone else's hands, and I start adding in detection for this, and that, and error handling, eventually what was a 20 line script has grown into 1000+ lines and loads of subs and functions without actually adding

RE: [ActiveDir] Domain case

2005-12-08 Thread neil.ruston
I think you're referring to computer names and not domain names(?) The OP related to domain names. neil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: 08 December 2005 15:32 To:

RE: [ActiveDir] Domain case

2005-12-08 Thread Almeida Pinto, Jorge de
IMHO, a domain rename would be needed if the NetBIOS and/or DNS domain name needed to change. (different structure) Just for changing the case in ADDT a domain rename is not needed. Just did it in my test environment by changing the case of the value of the attribute dnsRoot of the object

RE: [ActiveDir] DNS Question

2005-12-08 Thread Figueroa, Johnny
This is a tough one. I followed your link William, http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S erverHelp/73b2314f-6acf-422a-85bc-c1d04d1d8e00.mspx Gave a test user Read access to a specific AD integrated zone. To be able to connect the DNS MMC, I still had to give

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread joe
Exactly, you would run lg from the member and use -r dmzDC and it tells LG to query the dmzDC for the SID and dumps that into the group. Again I haven't tested it in that scenerio it should work. Certainly it works when there is NO trust channel at all as it has been used on tens if not hundreds

RE: [ActiveDir] DNS Question

2005-12-08 Thread King, William
I think there are differences between functional levels. What OS / mode are you running at? I can say for certain, on my test rig (2k in Native mode) I have set read-only access to specific zones. I have not had much luck yet in assigning further permissions such as adding records. William

RE: [ActiveDir] Domain case

2005-12-08 Thread joe
I went through this decision tree a long time ago, when I was upgrading a company from NT to 2K and went to Europe I let the European admin enter the name of the domain, I didn't catch the upper case on the domain name EU1 until afterward... It bothered the heck out of me, I worked out how

RE: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Rich Milburn
Replace your last sub: sub filelist(grp) for each file in grp.files if targ.files.count=999 then full=true:exit for if lcase(fso.getextensionname(file)) = eml then set objFile = fso.getfile(file) arrFileName = Split(objfile.Name,.) oldname = arrFileName(0) ext =

RE: [ActiveDir] logon scripts

2005-12-08 Thread Michael B. Smith
This script enumerates all the Windows profiles on a computer and then lists all the MAPI profiles for each user too. If a computer is turned on and no firewall is getting in the way and the Remote Registry service is running, you can access any key/value on the computer remotely.

RE: [ActiveDir] Domain case

2005-12-08 Thread Almeida Pinto, Jorge de
I worked out how to change it but never had the courage to actually do it. same here. and that's why I say: I DO NOT RECOMMEND IT! (as I do not know what the consequences are of doing it!) it may be as simple as it looks... just changing the case of the value of the attribute...but the

RE: [ActiveDir] Domain case

2005-12-08 Thread Harding, Devon
Damn! Whats the worse that could happen if I change the case? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Thursday, December 08, 2005 10:52 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Domain case IMHO, a

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread joe
Error detection and correction seems to be about 60-90% of any program that does it well, in other words most of the code is to validate you are working with what you should be working with. For user facing apps that usually means a ton of code around detecting/correcting data entry issues. For

Re: [ActiveDir] Domain case

2005-12-08 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
No, it's lowercase preWin2k Active directory naming. You cannot install Windows Server Update Services 2.0 on a computer that is running an original equipment manufacturer version of Windows Small Business Server 2003: http://support.microsoft.com/default.aspx?scid=kb;en-us;906798 WSUS does

RE: [ActiveDir] logon scripts

2005-12-08 Thread Rich Milburn
If you know a users profile name, so you can calculate the value of c:\documents and settings\username\, you can use reg load to load the ntuser.dat, make edits to the key, and unload. Unloading is important, or it will create a new profile for said user because their profile will be in

Re: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Tom Kern
Thanks alot!! Unfortuantely it only seems to work when i ran it the first time. if i kill it and run it again and it encounters a duplicate file in the source dir it throws an error-file already exisits. will it only work in one shot? thanks On 12/8/05, Rich Milburn [EMAIL PROTECTED] wrote:

RE: [ActiveDir] Domain case

2005-12-08 Thread Harding, Devon
So you know exactly how I feel Joe. I really, really, really would like to fix this. Joe can you dig up the doc on how to do this? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 08, 2005 11:34 AM To: ActiveDir@mail.activedir.org

RE: [ActiveDir] logon scripts

2005-12-08 Thread Hann, John F.
Love to see that script John Hann MOM MVP From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn Sent: Thursday, December 08, 2005 11:23 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] logon scripts If you know a users profile name, so

RE: [ActiveDir] Domain case

2005-12-08 Thread joe
Oh now that is completely silly. Especially for an OS that is traditionally case insensitive. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Thursday, December 08, 2005 12:02 PM To:

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread joe
And the funny thing it is one of the very first tools I published for public use -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Thursday, December 08, 2005 12:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] DMZ

RE: [ActiveDir] Domain case

2005-12-08 Thread joe
This is the only thing I would be willing to point at http://www.microsoft.com/technet/downloads/winsrvr/domainrename.mspx From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, DevonSent: Thursday, December 08, 2005 1:09 PMTo: ActiveDir@mail.activedir.orgSubject: RE:

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread Rich Milburn
I meant to add that people complain about Windows being big and bulky but I bet a huge portion is the 60-90% you mention. And I imagine they (like me) get frustrated when they try to add just a little less of it in, and then the day after it's released, out comes Hotfix KB91 :) The

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread Creamer, Mark
Net share joesdevfolder -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 08, 2005 11:58 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Ntds.dit file corruption Error detection and correction seems to be about

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread Ed Crowley [MVP]
Of course, that's comparing apples to oranges. Exchange 5.5's *directory* WAS distributed by design. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [ActiveDir] Domain case

2005-12-08 Thread Harding, Devon
Only problem is not all our domains are Windows 2003, which is a requirement for domren From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, December 08, 2005 1:30 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Domain case This is

Re: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Kamlesh Parmar
fileexists is a method for FSO object and you are attaching it to a folder object. Try fso.fileexistsOn 12/8/05, Tom Kern [EMAIL PROTECTED] wrote: Thanks alot!! I still can't get the rename to work. the script copies a bunch of eml files from a bunch of source sub folders. in those sub

RE: [ActiveDir] Domain case

2005-12-08 Thread Ulf B. Simon-Weidner
The worst thing that could happen? The domain name is stored in many instances, and if any domain or forest related process hicks up because of binary different names you might loose your domain or forest. Thats the worst case, but could it get any worse? Issue here is that nobody

RE: [ActiveDir] Help with VB script to map printers

2005-12-08 Thread Ulf B. Simon-Weidner
Hello Noah, besides from the other answers: Are you planning on implementing any single Windows Server 2003 R2 in the close future? If yes then you can use the print-managementconsole which will allow you to publish printers by group policy to either users or computers and you only

[ActiveDir] envoirment variables

2005-12-08 Thread Tom Kern
I have a logon script via a user gpo that sets enviorment variables. However those variables are never set. Gpresult claims the gpo was processed and i have nothing in my event logs. The script was set to run synchronously. Is that the issue. are the variables not there to set yet? thanks

Re: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Kamlesh Parmar
instead of creating random, what I had done was create a for loop, say 1..1 (fairly high number to get the unique name) and append that number if file exists in target, if not exists go ahead and append that number to filename for destination and exit the loop otherwise continue to next

RE: [ActiveDir] Domain case

2005-12-08 Thread Almeida Pinto, Jorge de
you could still investigate what I said in a test environment and see what happens if you really want to do what you want. Jorge From: [EMAIL PROTECTED] on behalf of Harding, Devon Sent: Thu 12/8/2005 8:51 PM To: ActiveDir@mail.activedir.org Subject: RE:

[ActiveDir] Windows Server 2003 Post SP1 DNS Issue

2005-12-08 Thread Mark Parris
Guys There was talk a few weeks ago about a Hotfix that resolved a DNS issue with root domains that were W2K3SP1, can anyone please forward me the KB Number. Regards Mark This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary

RE: [ActiveDir] envoirment variables

2005-12-08 Thread joe
Hehe. Thanks, I needed that. It was a rough day. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom KernSent: Thursday, December 08, 2005 4:27 PMTo: activedirectorySubject: [ActiveDir] envoirment variables I have a logon script via a user gpo that sets enviorment

RE: [ActiveDir] Ntds.dit file corruption

2005-12-08 Thread joe
Yeah but the information store wasn't. :) I think the comparisons going on are between the store and the AD DIT. Totally different uses of the same database engine - ESE. joe == My ESE Engine can beat up your SQL Server. -Bratt Shirley

RE: [ActiveDir] Exporting Mailbox rights

2005-12-08 Thread Amy Hunter
I am running the script a command linefrom my workstation (I am using an account which does not have domain administrator permissions)ESM is installed on my WorkstationI will try running the script with the /e2kstore+ when I back on site.I don't recall seeing that error code being

RE: [ActiveDir] envoirment variables

2005-12-08 Thread Brian Desmond
Tom, You might want to run your messages through the spell checker in the future I had to read this a few times to process it. Im not sure how this would log anything in the event log. Well since you tried it synchronously, why dont you try it asynchronously? Have you tried

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread Chakravarty, Sakti
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication Hi joe, Thanks for the response, I thought you'd be able to shed some light on the situation. I guess I was looking for clarification of the "handled differently" part, since the AD admins here

RE: [ActiveDir] VBScript help(OT)

2005-12-08 Thread Ken Schaefer
Call Randomize() to initialize the random number generation algorithm somewhere in your script, prior to the first call to Rnd() Could I suggest you get the Windows Script Host 5.6 documentation:

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread joe
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication You would need to have the access rights of someone who can talk to the DMZ DC. The local admin doesn't have rights and the lg tool will NOT fall back to anonymous access like the GUI will do. You

RE: [ActiveDir] envoirment variables

2005-12-08 Thread Darren Mar-Elia
Tom- I gave you bum advice the first time. By running the script synchronously, you essentially are running it before the user environment loads and hence probably don't have access to the per-user environment variables when the script is running. Run asynchronously doesn't guarantee getting

RE: [ActiveDir] Domain case

2005-12-08 Thread Rick Kingslan
Correct. Devon, as much pain as there is in the process, AS I UNDERSTAND IT (I do not speak for PSS) the Domain Rename process is the only supported method of doing what you want to do. Jorge's lab experiment does indicate that you might be able to do it alonghis describedway,but you need

RE: [ActiveDir] DMZ domains and IPSec - looking for explanation re resource access and authentication

2005-12-08 Thread Rick Kingslan
Title: DMZ domains and IPSec - looking for explanation re resource access and authentication I haven't perused the OS source code Right. Rub it in, bud. ;o) Rick --Posting is provided "AS IS", and confers no rights or warranties ... From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] envoirment variables

2005-12-08 Thread Alain Lissoir
How do you set the variable? By changing the registry content? By using the COM interfaces of WSH? Did you try to open an other CMD.EXE (process) after setting the variable? This could be the issue. Try with Sample 2.26 to 2.30 - WMIEnv.wsf,vol 2, at http://www.lissware.net. This one sets