Hi Kamlesh,
first of all, iwould enable the logging of the Netlogon Service.
I ve found an article in the WindowsITPro
The Netlogon service is one of the key Local Security Authority (LSA)
processes that run on every Windows domain controller. When you troubleshoot
authentication
Hi Laura,
(Brian's answer came in after I sent my email out.) The problem
with using adfind (in my experience) is that the creator (Caller User
Name) is not part of the AD object's attributes, only the owner, which
will be Domain Admins for accounts created by members of Domain Admins
(as
Hi all,
Recently I had a case where we experiences high CPU utilization after deploying
SMS client to DCs.
By now we have identified that the issue was caused by an extension of
sms_def.mof file containing the definitions of information that should be
collected from the agent.
The
Hey, I thought you loved it when people got all geeky :)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Laura A.
Robinson
Sent: Thursday, November 30, 2006 6:39 PM
To: ActiveDir@mail.activedir.org
Subject: OT: RE: RE: [ActiveDir] Split pagefile
I was
http://www.myitforum.com/articles/8/view.asp?id=9048
http://www.myitforum.com/articles/8/view.asp?id=9284
Rod's been tracking that on myitforum and the Patch management listserve
for a while now.
Guy Teverovsky wrote:
Hi all,
Recently I had a case where we experiences high CPU utilization
Laura,
Thanks ever so much for all your help. I will be trying some of these
things soon, but for now, I'm one of the over 400,000 people in St.
Louis without power. My workplace is closed, too, so I might end up
waiting it out
One question, if you don't mind and have a minute: How do I reboot
Sorry, AFAIK there is no workaround, and even worse, I remember seeing this
class contacting every trusted domain and enumerating the accounts there too,
so this WMI class is one to normally stay away from, so Not Optimized is the
understatement of the year :)
Thorbjörn Sjövold
Special
Hi all!
I am going out on a limb and hoping that this is the proper forum to
ask this... After all, the question *has* to do w/ AD in some way ;)
I've set up a WebDav FreeBSD server using mod_dav to allow document
sharing and versioning (and to try to set up some way of Calendar
Sharing that
Thanks Susan, but I think this case is different - we are talking about
different WMI class and in my case the query hangs and never returns results.
The ITMU issue is probably a result of intensive load on the CPU when
performing the query you pointed to, but in my case if I let it run for
If you can get to Computer Management, you could start the Telnet
service. At that point, telnet to the server and do a shutdown /r. And
I mean a standard telnet connection, not telnet to some fancy port.
I suspect you are having the dreaded rdp doesn't work for some reason
problem, which
Yesterday we had several people complain that their cursor was moving around on
its own, but not erratically or quickly as one would suspect might be the case
of a mouse issue. I used SMS remote tools to watch one person's screen, and she
noted that the way the cursor moved while I was in there
I'd direct you to Rod and the gang at Myitforum as they are where the
SMS gang hangs out and have the plug into the folks that can give you
more info (IMHO)
Guy Teverovsky wrote:
Thanks Susan, but I think this case is different - we are talking
about different WMI class and in my case the
Yep, you're right...I didn't distinguish the difference the first time
around. Good info as always.
Thanks!
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Laura A.
Robinson
Sent: Friday, December 01, 2006 12:02 AM
To:
on PDCe I am looking at sessions and open files in fsmgmt.msc, which
lists down the client machines with IP, then I am verifying the site
of each connecting IP using ATSN.exe from joeware.
Also, our network team had complained that network link is getting
choked, and as a proof gave list of
How about a remote shutdown like shutdown /m \\computername /r /f
Mike Thommes
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Brunson
Sent: Friday, December 01, 2006 9:51 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Split pagefile
I checked the file version of dfssvc.exe and dfs.sys on my site DCs, they
are higher than the one mentioned in the KB article. So point in looking at
that fix.
--
Kamlesh
On 12/1/06, David Cliffe [EMAIL PROTECTED] wrote:
Hi Kamlesh,
I'm not necessarily recommending this as a fix, but
Something installed on your XP machine is confusing setup/upgrade.
Get a hold of the logs, you can do this after reboot, or perhaps even
during setup (IIRC Shift-F10 still works). Look for setupact.log and
perhaps something called migration log. There are a couple of folders
setup creates in the
Hi all
Someone told me you can run DECO on a computer running Windows XP. I
was totally unaware of this. Does any one have any information about
this?
Larry,
You can reboot the server the same way you can change the pagefile size-
connect to it in Computer Management, right-click the server, choose
Properties, Advanced. At the bottom of the property sheet, there will be a
button labeled shut down, but when you click it, it will give you other
Actually, I'm thinking that extracting the information from the event log is
the best approach to take, so you're thinking along the same lines as I am.
The information is there, it's organized, it's filterable, it's exportable,
and that's why it's there. :-)
Laura
_
From: [EMAIL
Appreciate the efforts taken.
AFAIK, this would be more of a DFS issue then authentication, as clients are
pulling policies and files from PDCe.
When I look into details of DFS link targets for sysvol or netlogon, PDCe is
listed as distance 9th in the list of servers which clients should
Does anyone know why the _msdcs records are not returned in an AXFR DNS
query? This means that slave zones will not have those records and that
software querying for a domain controller may not find one.
Mike
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info :
Well, yeah, but not when there's nummy food to be eaten, naps to be taken
and games to watch!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Brunson
Sent: Friday, December 01, 2006 10:03 AM
To: ActiveDir@mail.activedir.org
Subject: RE: RE:
Was the cursor moving in what appeared to be a directed fashion (as if
somebody invisible was moving the mouse), or was it moving around
unpredictably?
Laura
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline
Sent: Friday, December 01, 2006 11:07 AM
To:
Usually I see this from interference using wireless mice. Usually it's
caused by people with other wireless devices close by and they are both
operating on the same channel. RF can operate through walls, so
interference doesn't have to be line of sight and can come through walls,
from above or
Too bad I didn't actually put a verb in that second sentence. :-)
That SHOULD have read, When a user who is a member of the Domain Admins
group CREATES AN OBJECT, by default, the DA group is the *owner* of the
object.
No wonder you have a hard time following my posts. ;-)
Laura
_
Well I did find something interesting in the setupact.log file. Tell me
what you think:
2006-11-30 21:17:20, Info [0x090099] PANTHR Loading Subscription:
Module(OnlineProgress), EventType(Cleanup,3276802) Callback(5)
2006-11-30 21:17:20, Info [0x090099] PANTHR Loading Subscription:
Just to update... I was finally able to catch this in action. It stopped as
soon as I unplugged the wireless keyboard/mouse device from the PC. It appears
that one particular person's wireless mouse is crossing signal with select
others, but none of the nearby mice are the culprit. It still
PSS is up to speed on Vista. :-)
Laura
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Dmitri Gavrilov
Sent: Friday, December 01, 2006 12:31 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: Vista Stuck on Completing Upgrade
What's DECO? (I'm guessing a typo, but want to make sure you're not
referring to some third-party DHCP service.) If you are referring to the
Microsoft DHCP service, I think whoever told you that is confused, perhaps
by having seen the DHCP client service in the services list?
Laura
_
Seen this? http://support.microsoft.com/kb/817470
Sincerely,
_
(, / | /) /) /)
/---| (/_ __ ___// _ // _
) /|_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
It was moving in a directed fashion. The places that they clicked and pointed
didn't really make sense on the screens where I witnessed this, but it was very
much what I would call normal mouse activity.
--
Brian Cline
From: [EMAIL PROTECTED]
I haven't gotten the nap thing down, but games and food are definitely
multi-threaded apps.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Laura A.
Robinson
Sent: Friday, December 01, 2006 11:39 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir]
Hi,
What is the meaning of this event, Does it means that MSGINA was trying
to login into that machine where the event was found?
I was connected to an XP pro using remote desktop and all the sudden it
kicked me out saying someone else connected to it, how do I find out
who was it?
Thanks
A
Since this morning, we've ruled out the possibility of the USB mice being
affected as well. Apparently those folks with USB mice who complained were not
having the same kind of cursor movement -- it was just the seldom jumpy cursor
(where it spasms between 2-3 pixels while idle) usually seen
Yep, that was it. The one guy sitting between them all replaced his batteries a
few days ago, which is when the problems began. I almost took a sledgehammer to
that thing :-)
--
Brian Cline
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Understood :-) But what about the feature that can be used with the
more recent versions? It's described at the bottom of the article
(you'd have to modify the registry on each applicable DC). I wonder if
that would help in your case?
-DaveC
From:
I'm glad you said that and not me! So much great content here - one of
the last things I'd want to do is pick on grammar, as it would seem rude
and unappreciative. Especially since never confident 100% in my own am
I. : - )
From: [EMAIL PROTECTED]
Easy enough: stop using wireless devices. If that's not an option, bring in
some equipment to measure the rfi and see what you can do to reduce it.
I've seen mobile phones and microwaves interfere with such devices as well.
Not always resulting in the same symptoms you saw, but...
On
How are your clients connected? Site definitions?
On 12/1/06, Kamlesh Parmar [EMAIL PROTECTED] wrote:
Appreciate the efforts taken.
AFAIK, this would be more of a DFS issue then authentication, as clients
are pulling policies and files from PDCe.
When I look into details of DFS link targets
When I go near wireless mice/keyboards, they stop working. (I can provide
witnesses to this.) Want me to visit your office? ;-)
Laura
P.S. How densely clustered are these users? Does one user's interference
stop if you turn off the other user's mouse? Seems like it'd be a quick way
to verify
The mouse, or the guy?
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline
Sent: Friday, December 01, 2006 4:38 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] OT: Possessed PCs
Yep, that was it. The one guy sitting between them all replaced his
MSGINA is the Logon Process that was loaded.(GINA= Graphical
Identification and Authentication)
KSecDD,RASMAN,Secondary Logon Service,LAN Manager Workstation
Service,CHAP,DCOMSCM,Winlogon,Winlogon\MSGina are all standard logon
processes you could see in the logs according to what mechanism is
I'm not sure I understand. In DNS admin I see two zones. One
for _msdcs.example.com with all the usual _msdcs records and
one for example.com which incedentally has an NS record for
_msdcs.example.com. The little folder thingy for this _msdcs is grey
which I guess signifies that it's some kind of
bluetooth devices can be a pain as well..
- Original Message -
From: Al Mulnick
To: ActiveDir@mail.activedir.org
Sent: Friday, December 01, 2006 5:01 PM
Subject: Re: [ActiveDir] OT: Possessed PCs
Easy enough: stop using wireless devices. If that's not an option, bring
Happens with my father and watches as well. The man cannot wear a watch
without it dying within weeks. But thats another story. If you can isolate
the symptoms to time of day or even the remote chance its a bad ballast
(flouresent lighting used to cause occasional problems with old CRTs),
etc.
46 matches
Mail list logo
