RE: [ActiveDir] AD Test Environment

2006-01-17 Thread Smith, Brad
If you do that method then the DC that you have in the test environment will have a different name to the ones in Production which may mean that when testing solutions (is that why you are doing this?) you will have a different names and stuff to worry about. We achieve what you are after

RE: [ActiveDir] ADUC updates - Was Expired Accounts

2006-01-17 Thread Douglas M. Long
This may be more of an Exchange management add-in, but it sure would be nice to be able to go into Exchange Tasks from ADUC and do an export of a mailboxor is there some exmerge plug-in to do this

[ActiveDir] OT: Folder password protection

2006-01-17 Thread Mike Williams
Management wants to have certain folders on the serverpassword protected. I have access limited to the folders already, but they want an extra level of comfort. Does anyone do this in their system already, and if so what are suggested solutions. Windows 2003 server SP2 in a Win2000 AD

RE: [ActiveDir] OT: Folder password protection

2006-01-17 Thread Rich Milburn
Well one way to do it is set up secondary accounts, put them in a group, give that group (and that group only) access to the folders, and assign the secondary accounts to the people who need the access. OR Try to ascertain what the manager is trying to accomplish, and see if there

[ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread Justin_Leney
Does anyone know how to stop the Manage Your Server applet from popping up for new users who login to a Windows Server 2003 system? I am digging thru the registry and not having much luck identifying which key may control that setting. Thanks! JBL This e-mail, and any attachment, is

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread Kelli Driesenga
there should be a checkbox in the lower left hand corner that will allow you to turn it off at startup From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, January 17, 2006 10:43 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Manage Your

[ActiveDir] Unresolved SIDs in ACL

2006-01-17 Thread neil.ruston
Title: Unresolved SIDs in ACL I have a script, which creates a pre-defined OU structure, creates groups and permissions the OUs with these groups. The script performs these steps in the order given. I have 2 test environments and have executed the script in each. In one environment (all

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread Brian Desmond
Theres a GP for it Admin Templates/Windows Components somewhere probably. Check the GP master spreadsheet Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday,

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread Justin_Leney
Kelli, thanks for the feedback. Clicking the checkbox will only affect the currently logged in user. Basically, I am looking around for something system-wide, so that everyone who logs in does not recieve the Manage Your Server applet. Kelli Driesenga [EMAIL PROTECTED] Sent by:

[ActiveDir] FYI: W2K3 SP1 VMWARE issue

2006-01-17 Thread Almeida Pinto, Jorge de
Title: FYI: W2K3 SP1 VMWARE issue Hi Everyone, As you all may know a few months ago I posted two issues with Vmware and W2K3SP1 DCs. The issues described are: * Adding additional W2K3SP1 DCs to the forest * Creating trusts from a W2K3SP1 forest to another forest (does not matter which

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread Kelli Driesenga
why are you having multiple people log into your server? We only allow Admin access and there are only two people with that kind of access. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, January 17, 2006 11:06 AMTo:

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread Darren Mar-Elia
Interestingly, this particular option is not in Group Policy. However, a quick check with Regmon points out the registry value in question and so I whipped up a quick custom ADM that should handle this: CLASS USER CATEGORY "My Custom Settings" POLICY "Show Manage Your Server

SV: [ActiveDir] configure port exceptions in windows xp firewall via gpo

2006-01-17 Thread Peter Jakobsson
Ok, thanks i guess =) Is there another way of achieving this goal, without buying certain hardware or expensive licenses? Or is ipsec policies the best/only way to go? -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Darren Mar-Elia Skickat: den 16

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread neil.ruston
Imagine an environment where servers are built on a daily basis - there is a need to stop the 'manage your server' page from appearing on all servers. It can be done as follows: Computer config / admin templates / system / "do not display manage your server at logon" neil From: [EMAIL

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread Darren Mar-Elia
Ha. Thanks Neil. And I wasted a perfectly good 5 minutes creating a custom ADM because I didn't bother to look under Computer Config From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, January 17, 2006 8:45 AMTo:

RE: [ActiveDir] Manage Your Server - Removing from Default User

2006-01-17 Thread neil.ruston
The padawan teaches the teacher :) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-EliaSent: 17 January 2006 17:01To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Manage Your Server - Removing from Default User Ha. Thanks Neil. And I wasted a perfectly

RE: [ActiveDir] FYI: W2K3 SP1 VMWARE issue

2006-01-17 Thread Tony Murray
Title: FYI: W2K3 SP1 & VMWARE issue scratches head That was unexpected. Good result though. Thanks for posting the info Jorge. Tony From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge deSent: Wednesday, 18 January 2006 5:16 a.m.To:

[ActiveDir] Migrate domain to separate forest

2006-01-17 Thread Larry Wahlers
Hello, colleagues, One of our organizations is in their own domain, a child domain of our root. They want to be in their own forest. Are there tools to migrate them to their own separate forest, or will I need to build the forest first, presumably with 2 new DC's, and then make all their servers

RE: [ActiveDir] OT: Folder password protection

2006-01-17 Thread Steve Rochford
This might be the problem that people can see a folder exists and don't understand that the permissions will stop "bad guys" getting into it. With 2003 you can set things so that if they don't have rights to read the folder then they don't see the folder - this list has discussed "access

RE: [ActiveDir] Migrate domain to separate forest

2006-01-17 Thread Almeida Pinto, Jorge de
If they need their own forest you need to create it first. But even before you create it, design it. First setup what the requirement should be and then design it to meet the requirements. Migration high level steps are: * Make sure the AD has been configured (sites, subnets, replication, OUs,

RE: [ActiveDir] Migrate domain to separate forest

2006-01-17 Thread Larry Wahlers
Title: [ActiveDir] Migrate domain to separate forest Many thanks, Jorge. And I hear congratulations on your MVP status are in order. Congrats! --Larry WahlersConcordia TechnologiesThe Lutheran Church - Missouri Synodmailto:[EMAIL PROTECTED]direct office line: (314) 996-1876 From:

RE: [ActiveDir] OT: Folder password protection

2006-01-17 Thread Rich Milburn
Ah every time that comes up I recall the bank I worked for a while back, and the new server they named CASHVAULT Nothing to see here people, move along, nothing to see here --- Rich Milburn MCSE, Microsoft MVP -

RE: [ActiveDir] Outlook Exchange

2006-01-17 Thread Active Directory
Title: Outlook Exchange Just to add... You need to set the client Mail Account to DELIVER TO PST. TOOLS | EMAIL ACCOUNTS | View Existing Notice near the bottom of the window where it is titled: "Deliver new e-mail to the following location: You can create a PST here and then point the

[ActiveDir] ADPrep Version Questions

2006-01-17 Thread Noah Eiger
Hi- I am preparing to upgrade a W2k domain to W2k3. I want to use the latest version of ADPrep. I have found the following info and am confused: For ADPrep on the following - From Windows Server 2003 CD: 5.2.3790.0 July 22, 2004, 9:07:08 AM from

RE: [ActiveDir] ADPrep Version Questions

2006-01-17 Thread joe
Are you asking if 1830 196 ? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noah EigerSent: Tuesday, January 17, 2006 6:44 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] ADPrep Version Questions Hi- I am preparing to upgrade a W2k domain to W2k3. I want to

RE: [ActiveDir] Unresolved SIDs in ACL

2006-01-17 Thread joe
Title: Unresolved SIDs in ACL Do the SIDs at least have the Domain portion of the SID correct? How far off are they from the real SID of the groups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, January 17, 2006 10:55 AMTo:

RE: [ActiveDir] Migrate domain to separate forest

2006-01-17 Thread Gil Kirkpatrick
Just out of curiosity, why do they think they want their own forest? In any case, there's no way that I'm aware of to carve off a domain and make it a new forest root... I think you'll have to create the forest and migrate the users and resources. ADMT would seem to be a reasonable way to go. Or

RE: [ActiveDir] LDAPS SRV Records?

2006-01-17 Thread joe
On the DNS server option, a couple of interesting things when I relooked at the API (on a lunch break this time Deji ;oP ) It doesn't let you specify the server to make the change on, only the server to send the FAZ (Find Auth Zone) request. I would have to play with that to see how that

RE: [ActiveDir] ADPrep Version Questions

2006-01-17 Thread Noah Eiger
yes From: joe [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 17, 2006 3:48 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] ADPrep Version Questions Are you asking if 1830 196 ? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noah

RE: [ActiveDir] ADPrep Version Questions

2006-01-17 Thread joe
one thousand eight hundred and thirty is greater than one hundred ninety six. The SP1 version is the most recent and highest version of adprep. 0 1 2 3 4 5 6 ... 194 195 196 197 198 199 200 ... 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 ... joe From: [EMAIL PROTECTED]

RE: [ActiveDir] ADPrep Version Questions

2006-01-17 Thread Noah Eiger
Oh (blush) Dont mind me. Im just over here re-learning that whole tens, hundreds, thousands, etc thing. Ugh! (eyes roll skyward, head shakes) ;-) Sorry for the wasted bandwidth. From: joe [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 17, 2006 5:27 PM To: