RE: [ActiveDir] Mailing problem exchange 2003 server

2006-05-25 Thread Blair, James
Ajay, Need to put OT in the topic for this one...with the limited information I am going to presume that the other domain is running Exchange as well...You need to create an SMTP connector between parent root server and their Exchange server. Exchange System Manager - Administrative

RE: [ActiveDir] OT: Mailing problem exchange 2003 server

2006-05-25 Thread Tony Murray
As James correctly points out - we do need a little more information to go on. However, as this is the same Exchange Organization (single forest) we're talking aboutthere may be no need for an SMTP connector. It depends on how the routing groups are configured. Perhaps Ajay could provide a

Re: [ActiveDir] OT: Mailing problem exchange 2003 server

2006-05-25 Thread Ajay Kumar
Dear Tony, My exchange server installed on parent root server ( win2k3 ) and there is no exchange server on child domain. I have already mentioned that I have only one exchange server in whole forest with two domain. Regards, Ajay On 5/25/06, Tony Murray tony@activedir.org wrote: As James

Re: [ActiveDir] NET TIME command

2006-05-25 Thread ChuckGaff
Be sure you have setup net time on the PDC Emulator server role as a starting point. Ideally you should point to the IP addresses of the US Naval Observatory time servers off the Internet. Regards, Chuck

[ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Mark Parris
All Can anybody recommend a good IAM product, which is Windows based - supports workflow approval, self service and Meta Directory services. Looking for an out of the box that is customisable but not an MIIS and an MSDN subscription solution. I have looked at BMC's suite but looking for

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Carlos Magalhaes
Can you explain to us why not MIIS, what does it not do that you need? Thanks Carlos MAgalhaes Mark Parris wrote: All Can anybody recommend a good IAM product, which is Windows based - supports workflow approval, self service and Meta Directory services. Looking for an out of the box that

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Tomasz Onyszko
On Thu, 25 May 2006 11:19:26 +0200, Carlos Magalhaes wrote Can you explain to us why not MIIS, what does it not do that you need? I think that desired product should require minimal customization connected with writing code etc. MIIS also doesn't implement workflow. -- Tomasz Onyszko

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Carlos Magalhaes
Not yet no but we both know thats in the pipe line for SP2. I still would like to know why MIIS was not an option.C Carlos Tomasz Onyszko wrote: On Thu, 25 May 2006 11:19:26 +0200, Carlos Magalhaes wrote Can you explain to us why not MIIS, what does it not do that you need? I think

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Tomasz Onyszko
On Thu, 25 May 2006 11:53:43 +0200, Carlos Magalhaes wrote Not yet no but we both know thats in the pipe line for SP2. I still would like to know why MIIS was not an option.C Workflow is not included in SP2, some solution is planned in Gemini time frame -- Tomasz Onyszko http://www.w2k.pl/

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Carlos Magalhaes
They changed it again (Just checked and you 100% right :)) C Tomasz Onyszko wrote: On Thu, 25 May 2006 11:53:43 +0200, Carlos Magalhaes wrote Not yet no but we both know thats in the pipe line for SP2. I still would like to know why MIIS was not an option.C Workflow is not included

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Mark Parris
MIIS does not have the code in it out of the box for workflow, the BMC suite does and all you need to do is configure - very little coding needed where as MIIS is too much of a Vanilla solution and development experience is needed. So without digressing too far off the original question - I am

RE: [ActiveDir] NET TIME command

2006-05-25 Thread Wyatt, David
Title: Message OK, so are we saying that WINS (yes, we have a WINS infrastructure)is returning the SPOKEDC (maybe alphabetically too???) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Free, BobSent: 24 May 2006 18:17To:

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Al Mulnick
You two need a room ? :) Mark, can you give more information? I know Quest has something that might be of interest, but more detail might be needed to better understand. In the meantime, check out their ActiveRoles product. There are several others, but that's one that jumps to mind based on the

[ActiveDir] AD, LDAP, and VB Script

2006-05-25 Thread Navroz Shariff
Dear group, Can anyone recommend books or references regarding querying AD via LDAP using _vbscript_? I am a native C++ and JAVA programmer and am very interested in learning how one goes about doing that. Joe, your set of tools from joeware-very handy set of tools thank you-were they

RE: [ActiveDir] AD, LDAP, and VB Script

2006-05-25 Thread Bernier, Brandon \(.\)
Here is a good link to get you started. http://www.microsoft.com/technet/scriptcenter/scripts/ad/default.mspx Also if you don't have any prior _vbscript_ experience, the Windows 2000 Scripting Guide is pretty good book(one of my many desktop companions). -Brandon From: [EMAIL PROTECTED]

RE: [ActiveDir] AD, LDAP, and VB Script

2006-05-25 Thread Alain Lissoir
There are tons of books on this matter. I'm sure one in this DL will give you good references. You can always start with the White Papers I wrote awhile ago about WSH, ADSI and AD/Exchange at http://www.lissware.net. HTH /Alain From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

[ActiveDir] Slow Boot Up

2006-05-25 Thread Za Vue
Morning everyone, Recently all my wkstns are taking up to 5 minutes to log in after a restart. Stuck at Applying Computer Settings and Applying Security Settings. Only change to GPO is offline files options are all disabled. While from the desktop it takes up to 30 seconds to load and open

RE: [ActiveDir] Slow Boot Up

2006-05-25 Thread Freddy HARTONO
How long is the processing? 5mins? - try gptime Thank you and have a splendid day! Kind Regards, Freddy Hartono Group Support Engineer InternationalSOS Pte Ltd mail: [EMAIL PROTECTED] phone: (+65) 6330-9785 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Mark Parris
The requirement is Workflow provisioning - HR create users- then users are authorised by departmental heads for access. Rules for email, account creation etc. The various systems all tie in to a metadirectory, which is then authorative for the company - the data is mastered in various

RE: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Blodgett, Candace
I have a fair amount of experience with Active Roles. Although it helpsour companywith our AD delegation and permissions, we are looking at a separate product for identity management and workflow provisioning. For these purposes you are looking for "supports workflow approval, self service

RE: [ActiveDir] Slow Boot Up

2006-05-25 Thread Bernier, Brandon \(.\)
I would use ethereal to grab a trace of opening up ADUC and take a peek at what its trying to do. Maybe it's a DNS issue. Also, are your clients logging event ID 1030's in the app log? -Brandon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue

RE: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread chris . ryan
While Calendra Directory Manager does support the Workflow of provisioning it is a bear to install and setup correctly. We attempted a POC with three BMC people on-site and in four days we could not get the product installed correctly. After that we decided to develop our own internal tool which

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Al Mulnick
lol. Take another look and see if it does what you want. You may want to also have a look at http://www.abridean.com/to see if they can play in your scenario. That's a fairly common feature set anymore. I don't think you're asking for a tremendous amount of things based on that, and since you

RE: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Jackson Shaw
Yes, I work for Quest J ARS is well integrated with MIIS if that is a concern. Also, there is a new module for ARS called QuickConnect which enables basic (i.e., simple easy to use J - not a metadirectory) type synchronization. From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Slow Boot Up

2006-05-25 Thread Robert Rutherford
Sounds like DNS... check your srv records are correct in DNS. Anything showing in the client event logs? Robert Rutherford QuoStar Solutions Limited The Enterprise Pavilion Fern Barrow Wallisdown Poole Dorset BH12 5HH T: +44 (0) 8456 440 331 F: +44 (0) 8456 440 332

RE: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Bernard, Aric
Another option is HP Select Identity. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Thursday, May 25, 2006 7:42 AM To: ActiveDir.org Subject: Re: [ActiveDir] [OT]Identity Access Mangement The requirement is Workflow provisioning

Re: [ActiveDir] view only rights on ADI DNS Zone

2006-05-25 Thread Kamlesh Parmar
well.. need to verify information like... Record time stamp and Delete this record when it becomes stale check boxnslookup doesn't give me this information.Also, users are weary of using command line... :-( On 5/24/06, Al Mulnick [EMAIL PROTECTED] wrote: You'll need a description of the rights

[ActiveDir] Reanimate or Authoritatively Restore objects

2006-05-25 Thread Teo De Las Heras
In reference to the following KB article: http://support.microsoft.com/kb/840001/ In a Domain and Forest that is at a 2003 functional level, is it better to reanimate objects from the deleted items container or authoritatively restore them?

Re: [ActiveDir] view only rights on ADI DNS Zone

2006-05-25 Thread Al Mulnick
That's a first for me: a user that needs that information. Admins I can understand and I can see forcing an admin to use a command line or to look for employment elsewhere. Unfortunately, much of that particular information used for reporting is stored as a blob, IIRC. Curious though, if they

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Mark Parris
I will take a look - the last time I saw the product it was used for delegating roles using the inbuilt mechanisms of AD (or similar marketing mumbo) guess this is what happens when you badge all your wares with the same product name. I certainly was not aware of this added functionality

RE: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Darren Mar-Elia
Well, there is ActiveRoles Direct, which is probably the product you're referring to below. Al is probably referring to ActiveRoles Server, which is the old Aelita EDM product and has become much more of a provisioning-oriented offering than simple delegation. -Original Message- From:

RE: [ActiveDir] OT help with VBS/WMI Script

2006-05-25 Thread Hutchins, Mike
If I use this, everything gets Server1++ nothing ever gets anywhere. :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Timo Ed Sent: Wednesday, May 24, 2006 4:22 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT help with VBS/WMI Script

RE: [ActiveDir] OT help with VBS/WMI Script

2006-05-25 Thread Bernier, Brandon \(.\)
If your concerned about the server being up, incorporate this into your script. It will ping the box and execute your logic if its up. This is just an example, it wouldn't actually work if you cut and paste it. Set objShell = CreateObject(WScript.Shell) For Each strServerName in colServerList

RE: [ActiveDir] OT help with VBS/WMI Script

2006-05-25 Thread Hutchins, Mike
Wow, this one has all kinds of errors. Can you send it to me in a text file? I think outlook mashed it. I can't even get it to run. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Derek Harris Sent: Wednesday, May 24, 2006 5:05 PM To:

RE: [ActiveDir] OT help with VBS/WMI Script

2006-05-25 Thread Hutchins, Mike
Cool! That's even better. I will hack all this in and see what happens. I shall reoprt back when it works. :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernier, Brandon (.) Sent: Thursday, May 25, 2006 9:59 AM To: ActiveDir@mail.activedir.org

Re: [ActiveDir] [OT]Identity Access Mangement

2006-05-25 Thread Mark Parris
Darren thanks, ActiveRoles Server Edition - I shall check out Quests ARSE product when I get home tonight and see how big Quests ARSE is. Thanks Mark ;-) -Original Message- From: Darren Mar-Elia [EMAIL PROTECTED] Date: Thu, 25 May 2006 09:44:08 To:ActiveDir@mail.activedir.org

RE: [ActiveDir] AD, LDAP, and VB Script

2006-05-25 Thread Navroz Shariff
Alain, Brandon, et al...thank you for pointing me in the right direction. I will definitely look into the references you all provided. Warmest regards, -Shariff From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alain LissoirSent: Thursday, May 25, 2006 10:16 AMTo:

[ActiveDir] Active dir question

2006-05-25 Thread John Parker
Hello all... I am curious if there is an app out there that will look at my windows 2000 active directory, and show me a list of all my users and also in that list show me what groups they belong to. I know I can write something in VB that would do it, but I am kind of hoping that someone has

RE: [ActiveDir] OT help with VBS/WMI Script

2006-05-25 Thread Derek Harris
Yeah - if you notice, oFileName = CompOSList.csv ended up on the previous line. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hutchins, Mike Sent: Thursday, May 25, 2006 11:03 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT help with

RE: [ActiveDir] AD DNS along with Bind

2006-05-25 Thread Thommes, Michael M.
(From my DNS admin) If I did that, then I would have to open DNS conduits through our firewalls for the DC, as anyone who was requesting information from any AD zone would be querying the DNS Server on the DC. We try to limit contact to the DC from the Internet.

RE: [ActiveDir] AD DNS along with Bind

2006-05-25 Thread Bernard, Aric
You are surely not exposing your internal namespace to the Internet Or are you? Let me get out the old Hacking 101 books... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Thursday, May 25, 2006 12:30 PM To:

Re: [ActiveDir] Active dir question

2006-05-25 Thread Mark Parris
Check out www.microsoft.com/scripting and look for the script repository. Mark -Original Message- From: John Parker [EMAIL PROTECTED] Date: Thu, 25 May 2006 12:41:55 To:ActiveDir@mail.activedir.org Subject: [ActiveDir] Active dir question Hello all... I am curious if there is an app

[ActiveDir] OT: stuck processing policy

2006-05-25 Thread Thommes, Michael M.
Title: OT: stuck processing policy I have a user on a computer that takes forever to log in. She can go to any other computer and log in quickly. Anyone else can go to the computer in question and log in quickly. It is only THIS user on the THIS computer. We have renamed her local profile to

RE: [ActiveDir] Active dir question

2006-05-25 Thread joe
adfind -default -f samaccounttype=805306368 memberof It won't show nested memberships, foreign domain memberships, nor primary group memberships. If you want those items, it is a lot more work but you can use another one of my tools to get the info for each user one by one, that tool is called

RE: [ActiveDir] OT: stuck processing policy

2006-05-25 Thread Darren Mar-Elia
Title: OT: stuck processing policy Hi Mike. Can you post the lines of userenv right around that GetUserNameEx error? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.Sent: Thursday, May 25, 2006 1:44 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir]

RE: [ActiveDir] OT: stuck processing policy

2006-05-25 Thread Thommes, Michael M.
Title: OT: stuck processing policy Hi Darren! Here you go. Thanks! Mike Thommes == USERENV(2bc.774) 11:20:27:665 ProcessGPOs: USERENV(2bc.774) 11:20:27:665 EnterCriticalPolicySectionEx: Entering with timeout 60 and flags 0x0

RE: [ActiveDir] OT: stuck processing policy

2006-05-25 Thread Darren Mar-Elia
Title: OT: stuck processing policy Ok. The purpose of MyGetUserName (and GetUserNameEx) is so that GP can impersonate the user for the purposes of applying user policy. GetUserNameEx returns the user name of the current thread. MyGetUserName basically calls GetUserNameEx and asks for the

Re: [ActiveDir] OT help with VBS/WMI Script

2006-05-25 Thread Timo Ed
I suspect line2: Set colSettings = , just turn off 'error resume' and you'll see whats breaking. On 5/26/06, Hutchins, Mike [EMAIL PROTECTED] wrote: If I use this, everything gets Server1++ nothing ever gets anywhere. :-) '= For Each strComputer In

[ActiveDir] OT:Server Core Blog

2006-05-25 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Server Core: http://blogs.technet.com/server_core/ SBSers need not even be concerned ;-) -- Letting your vendors set your risk analysis these days? http://www.threatcode.com The SBS product team wants to hear from you: http://msmvps.com/blogs/bradley/archive/2006/05/18/95865.aspx List

[ActiveDir] How To Determine What GC a Server is Using?

2006-05-25 Thread Stu Packett
Title: How To Determine What GC a Server is Using? We have a strange situation here where one of our Exchange servers keeps getting 8026 and 2102 errors. This causes our users on that Exchange server to temporarily lose connection to the Exchange server. Also, my Unity server just failed

RE: [ActiveDir] How To Determine What GC a Server is Using?

2006-05-25 Thread Blair, James
Title: How To Determine What GC a Server is Using? Stu, Download and configure BGINFO and check to "Login Server" attribute... http://www.sysinternals.com/Utilities/BgInfo.html James Blair From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu PackettSent: Friday, 26 May

RE: [ActiveDir] How To Determine What GC a Server is Using?

2006-05-25 Thread Stu Packett
Title: How To Determine What GC a Server is Using? Isn't the 'Login Server' the same as the Domain Controller? If I doa 'set.exe' from a command prompt, I get the same info as "LOGONSERVER". What I need specifically, is the Global Catalog server (unless I'm going about this incorrectly).

RE: [ActiveDir] OT help with VBS/WMI Script

2006-05-25 Thread Hutchins, Mike
Yeah, I already did that. If I take out On Err... it just stops at the first one that isn't pingable. No worries, I got it worked out a different way. Thanks! From: [EMAIL PROTECTED] on behalf of Timo Ed Sent: Thu 5/25/2006 4:23 PM To:

RE: [ActiveDir] Active dir question

2006-05-25 Thread Katrin Wilhelm
We are using Dameware - very good admin program. You'll find some more information on the site www.dameware.com Cheers, Katrin Wilhelm IT Officer CVGT Employment Training Specialists PO Box 473 Bendigo, 3552 www.cvgt.com.au E-mail: [EMAIL PROTECTED] Tel: 03 5449 2079 Fax: 03 5441 1212 Mobile:

RE: [ActiveDir] How To Determine What GC a Server is Using?

2006-05-25 Thread Tony Murray
Title: How To Determine What GC a Server is Using? How about netstat b ? Look for mad.exe connecting to port 3268 (or 3269 for SSL). Tony From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett Sent: Friday, 26 May 2006 1:13 p.m. To:

RE: [ActiveDir] How To Determine What GC a Server is Using?

2006-05-25 Thread Stu Packett
Title: How To Determine What GC a Server is Using? I got 'mad.exe' results, but not those specific port numbers. Would the port number be different for all servers? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony MurraySent: Thursday, May 25, 2006 7:25 PMTo:

[ActiveDir] UNITY SERVERS

2006-05-25 Thread hitender saxena
Hi All, Can any one tell me what is a unity server.I want to every detail of that. Thanks Hitender Saxena -- ___Play 100s of games for FREE! http://games.mail.com/

RE: [ActiveDir] UNITY SERVERS

2006-05-25 Thread Jef Kazimer
I'm not sure how you mean "Unity Server"? Can you give more details in what context? I did a quick Live Search on Unity Server and Active Directory and I thought it could possibly be a Cisco product? http://www.live.com/?q=Unity+Server#q=Unity%20Server%20Active%20Directoryoffset=1 There

RE: [ActiveDir] How To Determine What GC a Server is Using?

2006-05-25 Thread Steve Linehan
Title: How To Determine What GC a Server is Using? The following method will show you what GCs Exchange has discovered and believes are viable servers: http://support.microsoft.com/kb/316300/en-us . While this will not tell you the exact GC Exchange is using, it could be using multiple

RE: [ActiveDir] UNITY SERVERS

2006-05-25 Thread Stu Packett
If you're asking based on my recent post, a Unity server is a Cisco unified messaging server. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hitender saxenaSent: Thursday, May 25, 2006 8:14 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] UNITY SERVERS Hi All, Can

[ActiveDir] Primary or Integrated DNS Zone

2006-05-25 Thread Milton Sancho
I am going to install a Win2003 it will be a domain controller. I am going to install DNS Server Service and DHCP Server Service but this scenario will be for:Provide DNS for 5 Win servers ansd several Xp clients. (Dns dynamic Updates) At the same timne the DHCP server should provide ip addresses

RE: [ActiveDir] Primary or Integrated DNS Zone

2006-05-25 Thread Steve Linehan
Take a look at the following Knowledge Base article and online help that covers all of the scenarios below: http://support.microsoft.com/kb/816592 http://technet2.microsoft.com/WindowsServer/en/Library/d0e19b57-c368-46c2-b017-caf25ae150ec1033.mspx?mfr=true . Your Linux clients can be