Re: [ActiveDir] Security-enable all your distribution lists?

2006-11-07 Thread Matt Hargraves
I don't usually think of these as security-enabled distribution lists, but as mail-enabled security groups that users can manage in the same manner as they do distribution lists. When you think of them that way, it's not quite so painfully stupid. Don't get me wrong, turning all your DLs into

[ActiveDir] OT: Exchange/Outlook Address Attributes

2006-11-07 Thread Frank Abagnale
Hello, I would like to modify some of the fields which Outlook currently uses. I.e If I look at the properties of a user object via Outlook, I would like to change the Department field to displayCountry Unit. Any Ideas how to do this? Does anyone have a spreadsheet of Exchange Attributes and

RE: [ActiveDir] Event ID 108

2006-11-07 Thread Darren Mar-Elia
Dan- I would resolve the problem before upgrading. Itsounds like you have at least two things going on. First off, the sw. deployment error sounds like something deeply wrong with AD. The software installation data object referred to below is probably something called a packageRegistration

[ActiveDir] [OT] Perc 5i and WinPE

2006-11-07 Thread neil.ruston
Title: [OT] Perc 5i and WinPE Has anyone managed to locate drivers for the perc 5i (used by Dell PE servers) which can be used with WinPE? The build guys here are struggling to get WinPE working with this controller. Many thanks, neil PLEASE READ: The information contained in this

RE: [ActiveDir] OT: Exchange Question

2006-11-07 Thread Navroz Shariff
Apologies if this has already been answered; cleaning out my mailbox ;-) Larry, you can use the ADUC and Exchange tools where you will find the Exchange General tab. From there, you can fine tune the account for delivery restrictions. -Shariff From: [EMAIL PROTECTED]

[ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Danny
Thanks to advice from the ActiveDir community (this mailing list) and Microsoft's ADMT and ExMerge, we have successfully completed an interforest migration - of users, computers, and mailboxes. Next up: the servers, 12 of them. Two DC's, the rest are made up of file, print, Exchange, MS SQL

Re: [ActiveDir] Security-enable all your distribution lists?

2006-11-07 Thread Al Mulnick
You do make a strong argument, but I'm not sold. The part I can't get past is that the users have the control over adding a sec-prin to be able to pull the data. Vs. pushing the protected data via email. The subtlety is important in my opinion. The only issue I have with the convenience of adding

RE: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Brian Desmond
Id use ADMT at a minimum youll want to run the security translation wizard if you dont use the move computer wizard. MSSQL will require some manual work. I have no idea about Citrix. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED]

RE: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Almeida Pinto, Jorge de
if you just want to migrate the servers from one domain to the other, you can use ADMT. However... if you also need to translate data, that is another story. File based data - ADMT Print services - SUBINACL Services - SUBINACL Shares - SUBINACL Registry - SUBINACL IIS - third party SQL - third

RE: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Kevin Brunson
Citrix should be able to move between domains without much problem. You might have to recreate the farm connection if you are using an SQL database, chfarm should do the trick. It might carry over fine though. Most of the Citrix apps run with local credentials unless you change them, so

RE: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Brian Desmond
ADMT3 can replace subinacl Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Tuesday, November 07, 2006 1:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir]

[ActiveDir] lastlogontimestamp

2006-11-07 Thread Ramon Linan
Hi, Some of my user only access our network via IMAP or webmailto check their email. When they do that, are they modifying the LastlogontimeStamp? The functional level is windows 2003. Thanks

RE: [ActiveDir] Exchange --NDR--

2006-11-07 Thread Technical Support
When I query the other domain for MX record it shows me correct information. Sometimes I feel problem with my SMTP but not very confident on this. But on the other hand I think problem is at other end or probably my domain is in bad list (How I can verify if so?). From: [EMAIL

RE: [ActiveDir] Exchange --NDR--

2006-11-07 Thread Technical Support
Please let me know how I can contact you Deji From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Akomolafe, Deji Sent: Monday, November 06, 2006 10:19 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Exchange --NDR-- 4.4.7 is usually the other

Re: [ActiveDir] Security-enable all your distribution lists?

2006-11-07 Thread Matt Hargraves
I can understand your arguments, but the larger the organization, the more likelihood that the groups are controlled by users (in one way or another) anyway. When you've got 100k groups, you have someone listed as a group owner or someone authorized to approve new members of the group and the only

[ActiveDir] Support services from Microsoft

2006-11-07 Thread Lucas, Bryan
We have always just handled support by purchasing the 5-packs and paid our $250. Generally this has been very good, but more and more I am finding the first level team isnt getting the job done. I am considering the Premier Plus, granted it is expensive, and would like to know if any of

[ActiveDir] Decommissioning a DC

2006-11-07 Thread Lucas, Bryan
We have several DCs in our environment all of which are 2003 SP1 servers except for one. I am preparing to demote this one through DCPromo this weekend. All of our DCs are also GCs, including this last remaining 2000 server. It does not own any FSMO roles. The Exchange RUS services are not

Re: [ActiveDir] Decommissioning a DC

2006-11-07 Thread Tomasz Onyszko
Lucas, Bryan wrote: We have several DC’s in our environment all of which are 2003 SP1 servers except for one. I am preparing to demote this one through DCPromo this weekend. All of our DC’s are also GC’s, including this last remaining 2000 server. It does not own any FSMO roles. The

RE: [ActiveDir] Decommissioning a DC

2006-11-07 Thread Brian Desmond
Well if you have some crappy app that is hardcoded to it by name or ip it will break, but thats fine you need to fix those problems anyway. Otherwise do it and forget about it. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED]

RE: [ActiveDir] Decommissioning a DC

2006-11-07 Thread Robert Rutherford
No worries. Demote her, remember the good times, shed a tear, crack on. Rob Robert Rutherford QuoStar Solutions Limited T: +44 (0) 8456 440 331 F: +44 (0) 8456 440 332 M: +44 (0) 7974 249 494 E: [EMAIL PROTECTED] W: www.quostar.com From: [EMAIL PROTECTED]

[ActiveDir] [Semi-OT] AD Integrated DNS entries

2006-11-07 Thread WATSON, BEN
Hey guys, Simple question I hope. I was looking for a way to determine a couple things about DNS (A PTR records) entries in an Active Directory Integrated DNS environment 1) Is there a way to determine whether the entry has been manually defined (and thus is never scavenged) or

RE: [ActiveDir] Exchange --NDR--

2006-11-07 Thread Victor W.
can you post the relevant portion of the smtp protocol log here? can you successfully send mail via a telnet session when you connect to each of the mx records for the domain in question? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Technical SupportSent: dinsdag 7

RE: [ActiveDir] Users, Computers, and Mailboxes migrated - Servers next

2006-11-07 Thread Almeida Pinto, Jorge de
although SUBINACL does have the ability to what I mentioned, ADMTv3 is a better option... my apologies for the quick information lets try this again ;-) File based data ACLs - ADMTv3 Print services ACLs- ADMTv3 Services ACLs- SUBINACL (only needed when ACEs set manually or through a GPO)

Re: [ActiveDir] Decommissioning a DC

2006-11-07 Thread Mark Parris
As it's an old box, make sure it's not your DFS root - if you use DFS that is. Regards, Mark Parris Base IT Ltd Active Directory Consultancy Tel +44(0)7801 690596 -Original Message- From: Robert Rutherford [EMAIL PROTECTED] Date: Tue, 7 Nov 2006 21:53:06

[ActiveDir] OT for those in California

2006-11-07 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
http://blogs.technet.com/windowsserver/archive/2006/11/07/LA-Traffic-_2D00_-1_2C00_500-Shirts-in-150-minutes.aspx The show floor proved to be really busy this morning. One piece of evidence: we distributed 1,500 shirts in 2.5 hours. The orange shirts say Virtualize World Peace and the crowd

Re: [ActiveDir] OT for those in California

2006-11-07 Thread Mark Parris
I am at VMWorld - anyone else here? The MS T-Shirts are great - And are the best of the show. They only come in two sizes Large and bearded, sandaled Unix Administator. Beer must be drunk from a glass in case we spill the bottles - I mean surely a tappered neck causes less damage than a pint

RE: [ActiveDir] OT for those in California

2006-11-07 Thread Laura A. Robinson
Susan, two questions- 1. Why are you now going by Patrick? 2. Do you plan to identify the event of which you write below for those who may not know? :-) Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS

RE: [ActiveDir] OT - USB HD no boot

2006-11-07 Thread Laura A. Robinson
As a follow-up that I forgot to mention- In regards to Albert's question about how to make a bootable USB drive/device/whatever- the link to HP's site that was provided earlier also has a downloadable utility to do just that. Laura -Original Message- From: [EMAIL PROTECTED]

Re: [ActiveDir] OT for those in California

2006-11-07 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Blog post cut and paste http://blogs.technet.com/windowsserver/ I wasn't there.. Mark was at VMworld as well as Patrick If I had been there I would have blogged about the lack of line for the women's restroom, whether or not Mountain Dew was readily available and what not... ;-) Now I

RE: [ActiveDir] OT for those in California

2006-11-07 Thread Laura A. Robinson
What's funny is that the blog entry doesn't say where Patrick is, either. That's why I commented. ;-) Laura -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Wednesday, November 08, 2006 12:37 AM

Re: [ActiveDir] OT: Exchange Question

2006-11-07 Thread Matt Hargraves
Can't remember offhand if you can do this on a per-site basis or not, but you might be able to stick them in a site and have that site set to a max of 1MB e-mail, then the only way that they'll receive any e-mail is if they delete everything. On 11/7/06, Navroz Shariff [EMAIL PROTECTED] wrote:

RE: [ActiveDir] OT for those in California

2006-11-07 Thread Laura A. Robinson
Okay, maybe my sense of humor is a little skewed. :-P -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Wednesday, November 08, 2006 12:48 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT for those in

Re: [ActiveDir] problem in changing the default password setting

2006-11-07 Thread Matt Hargraves
Password policies only work from the domain level and are ignored at all other OU levels.If you want this to be in effect, add that setting into the domain-level GPO, if you don't want it set for everyone in the organization, accept that you're going to have to do it manually (or with a script) on

RE: [ActiveDir] Exchange --NDR--

2006-11-07 Thread Akomolafe, Deji
You should be able to see my email from the response. Sincerely, _ (, / | /) /) /) /---| (/_ __ ___// _ // _ ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com- we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you