RE: [ActiveDir] Unable to logon after DCPromo - oddness

2007-01-18 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
You can run dcdiag on the enterprise which will gather data from every server. Try doing that and collecting data on the issue. Also, do the objects exist in Sites and Services for the server to replicate among its peers? Try checking out some of that stuff, Nate -Original Message-

RE: [ActiveDir] big problem with dns and AD

2006-12-12 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
What type of zone was it? Was it just a Standard Primary or AD Integrated? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, December 12, 2006 10:41 AM To: ActiveDir@mail.activedir.org Cc: ActiveDir.org; [EMAIL

RE: [ActiveDir] Strange DC behaviour and error

2006-11-15 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Did you use an image to create the Citrix server? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hboogzSent: Wednesday, November 15, 2006 12:43 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Strange DC behaviour and error Hey Guys, I receive this error on my DC

RE: [ActiveDir] OT: M$

2006-11-14 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Laura, I apologize if I offended you by using M$. I was not the originator of the terms usage, nor did I condone it to be used offensively. I was simply trying to show you that there are plenty of reasons people say things that are not intended to be offensive, but are just poking fun.

RE: [ActiveDir] Help with topology

2006-11-14 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Why dont you make the domain controller at the branch office with the Exchange Server a Global Catalog? Also why not set the cost on the links if you have not already? You can also set the logging level higher in exchange so you can see whats taking so long to come online. From: [EMAIL

RE: [ActiveDir] OT: M$

2006-11-13 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
You have to be able to laugh at yourself. M$ is a tounge in cheek _expression_ and certainly a corporation like Microsoft can laugh at itself when M$ is used as slang in its reference. Thats why wenickname really big guys tiny. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] OT: M$

2006-11-13 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Useless Air Farce would not be found funny because its just that, not funny. Funnier is US Chair Force. Thats funny, and people here laugh at it all the time. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert RutherfordSent: Monday, November 13, 2006 7:32 AMTo:

RE: [ActiveDir] OT: M$

2006-11-13 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Exactly, is exactly right. You cant impose your own humor preferences on someone because you consider it unfunny. You just dont laugh. You can't stop bad jokes, because someone, somewhere is laughing at them. Just not you. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] Domain Controller Bare Metal restore

2006-10-06 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
imaging process and enable it when complete? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNA Sent: Thursday, October 05, 2006 12:23 PM

[ActiveDir] Domain Controller Bare Metal restore

2006-10-05 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
List, I have been looking at several options to restore a failed DC from the ground up. ADS seems to look promising, but its hard to get one SYSPREP image for all of my DCs even though they are all flavors of Dell PowerEdge, it has proven difficult. Does anyone know of a good solution to

RE: [ActiveDir] Domain Controller Bare Metal restore

2006-10-05 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNA Sent: Thursday, October 05, 2006 8:11 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Domain Controller Bare Metal restore List, I have been looking at several options

RE: [ActiveDir] Domain Controller Bare Metal restore

2006-10-05 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
to a captured image to cater for different devices. Cheers Ken : -Original Message- : From: [EMAIL PROTECTED] [mailto:ActiveDir- : [EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF : NASIC/SCNA : Sent: Thursday, 5 October 2006 10:11 PM : To: ActiveDir@mail.activedir.org : Subject

RE: [ActiveDir] Domain Controller Bare Metal restore

2006-10-05 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
: [ActiveDir] Domain Controller Bare Metal restore PXE Boot into an unattended install? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNA

RE: [ActiveDir] Domain Controller Bare Metal restore

2006-10-05 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Active Directory Consultancy Tel +44(0)7801 690596 -Original Message- From: Bahta, Nathaniel V CTR USAF NASIC/SCNA [EMAIL PROTECTED] Date: Thu, 5 Oct 2006 08:35:57 To:ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Domain Controller Bare Metal restore That’s what I have been trying

RE: [ActiveDir] Domain Controller Bare Metal restore

2006-10-05 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
restore Look on the Altiris website for Hardware idependent installs v2 - you can disect all the info out of this document. Mark Parris Base IT Ltd Active Directory Consultancy Tel +44(0)7801 690596 -Original Message- From: Bahta, Nathaniel V CTR USAF NASIC/SCNA [EMAIL PROTECTED

[ActiveDir] Seized the roles of a failed DC

2006-09-11 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Hey all, I have a little question here, just a sanity check for the most part. We had a DC that got its registry ripped to shreds by some hardware folks, the end result was the OS no longer recognized TCP/IP interfaces, even after a system state restore of the registry component. This

RE: [ActiveDir] Seized the roles of a failed DC

2006-09-11 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Yeah that was done, everything is clean. Just used a different name when I rebuilt the server to be on the safe side and to keep things clean. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian DesmondSent: Monday, September 11, 2006 9:33 AMTo:

RE: [ActiveDir] Seperate Administrator password policy

2006-09-01 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Yeah thats what me and my coworkers have been debating, what method to use to check password length. We are looking through perl modules to see if there are any that can actually do what we are talking about. So far no luck with it, but the search continues. Do you know of any module that

RE: [ActiveDir] Seperate Administrator password policy

2006-09-01 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
What does that have to do with reading how many characters someones password is? I know how to find out the minimum password lengths value, but that is not what we are concerned with. We are concerned with how long the actual password is. Be it 15 or 20 or 8 characters, that is what we are

[ActiveDir] Seperate Administrator password policy

2006-08-31 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Just wanted to field this to see if it makes any sense to any of you guys. We are going to implement a mandatory 15 character password policy for all of our administrator accounts. The only way that makes sense is a subdomain with a separate password policy, since there is only one per

RE: [ActiveDir] Seperate Administrator password policy

2006-08-31 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
I thought about that, but that does not prohibit you from setting a password less than 15 characters. I thought about setting it up to run on a changenotify event and then if the length was less than 15, disable the account, but I think that is a bit harsh. I dont know of a way of stopping

RE: [ActiveDir] Seperate Administrator password policy

2006-08-31 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
passwords? Mark -Original Message- From: Bahta, Nathaniel V CTR USAF NASIC/SCNA [EMAIL PROTECTED] Date: Thu, 31 Aug 2006 08:15:13 To:ActiveDir@mail.activedir.org Subject: [ActiveDir] Seperate Administrator password policy Just wanted to field this to see if it makes any sense to any of you guys

RE: [ActiveDir] Process on DC stuck on stopping

2006-08-22 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Of Bahta, Nathaniel V CTR USAF NASIC/SCNA Sent: Wednesday, August 16, 2006 10:15 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Process on DC stuck on stopping Hey all, I have used pskill.exe, procexp.exe, to try to get a the antivirus service on my dc to stop so I can restart

[ActiveDir] Process on DC stuck on stopping

2006-08-16 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Hey all, I have used pskill.exe, procexp.exe, to try to get a the antivirus service on my dc to stop so I can restart it, but it is hung in the stopping state. Does anybody know a good way that I can kill this process and start it again without causing a stack failure in the kernel? (already

RE: [ActiveDir] LDAP Ping

2006-08-07 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
can also cause this - resolved the issue. If I can find my old Black and Red for that period, I will let you know the KB. Mark -Original Message- From: Bahta, Nathaniel V CTR USAF NASIC/SCNA [EMAIL PROTECTED] Date: Fri, 4 Aug 2006 15:47:50 To:ActiveDir@mail.activedir.org Subject: RE

[ActiveDir] LDAP Ping

2006-08-04 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Hey all, Does anyone know of a command line utility that allows you to test ldap connections? We have a dc that hangs, but remains pingable and I would like to do ldap pings to it to as well as rpc pings. I know about the rpc ping utility, but I wanted to test for ldap connectivity as

RE: [ActiveDir] LDAP Ping

2006-08-04 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Its not for troubleshooting, its so we can tell when the DC is hung, you cant tell when its hung because our monitoring software only pings by ip and it responds. If it replies, I know it can serve ldap queries, and then i can rpc ping it and make sure that authentication requests will be

RE: [ActiveDir] LDAP Ping

2006-08-04 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Title: Message No, nothing, the rdp client does not respond. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wyatt, DavidSent: Friday, August 04, 2006 10:32 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] LDAP Ping Are you able to RDP to the DC when it

RE: [ActiveDir] LDAP Ping

2006-08-04 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Title: Message No we cant rdp into the box when it hangs. We have tools that do everything from NetIQ Application manager to HP Openview to Ethereal, but if I get here in the morning, and I want to do a quick functions check of the system, I will need a compilation of tools that can test

RE: [ActiveDir] LDAP Ping

2006-08-04 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
- totally pingable but doing nothing else? -Original Message- From: Bahta, Nathaniel V CTR USAF NASIC/SCNA [EMAIL PROTECTED] Date: Fri, 4 Aug 2006 12:47:15 To:ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP Ping No we cant rdp into the box when it hangs.  We have tools that do

RE: [ActiveDir] W2K3 Upgrade Domain Controller or Exchange Servers?

2006-08-01 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Ben, thanks for the article, I dont think I had seen that before. Guido, thanks for the info, I will incorporate that into our testing. Thank you all! Nate From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BENSent: Monday, July 31, 2006 12:59 PMTo:

[ActiveDir] W2K3 Upgrade Domain Controller or Exchange Servers?

2006-07-31 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
All, We are rounding home base in our upgrade path to 2K3 and have our Exchange Server Cluster runningW2K and EXCH2K and our Domain Controllers to upgrade lastly. Which of them would you think would be the best to upgrade first? We thought to upgrade the DC's first because it takes care of

RE: [ActiveDir] Home directories issue

2006-07-18 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Andrew, do you know of any documents that address this or support your resolution? Where do you get your information from? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Tuesday, July 18, 2006 1:32 PMTo: ActiveDir@mail.activedir.orgSubject: Re:

RE: [ActiveDir] Home directories issue

2006-07-17 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
I have the same issue, it is intermittent as well, so the issue only comes up every now and then, but it is still an oddity. From time to time our users will get the top level share \\servername\home\ instead of \\servername\home\%username% I do not know why this happens either, I have

[ActiveDir] Clean install VS Upgrade of Windows 2003

2006-07-16 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Hey all, Does anyone have any comments/articles, etc on the benefits or concerns of a clean install of Windows 2003 Server VS an Upgrade? My opinion is that doing a clean install keeps system root clean. It also pristinely adopts the security best practices of 2003 Server. Disk

[ActiveDir] OT:Windows 2000 Print Cluster Migration

2006-06-30 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Has anyone experienced any problems when migrating a Windows 2000 print cluster to Windows 2003? I'm running a 2 node active/passive cluster (windows 2000 Adv Server SP4) and using print migrator 3.1. When I restore the cab file to my new Windows 2003 virtual print server all printer

[ActiveDir] OT: DHCP Cluster

2006-06-22 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Anybody know any good knowledgebase articles or resources for migrating a 2000 DHCP cluster to a 2003 DHCP cluster? I would appreciate the information/links. Thanks, Nate List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive:

RE: [ActiveDir] OT: DHCP Cluster

2006-06-22 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
the other node. I've done this with SQL many times, but I forgot what changed from W2K to W2k3 for DHCP..I don't remember anything mind blowing, but I'd look into anyways. -Brandon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF

RE: [ActiveDir] AD Snapshot Tool (ADST) - how useful is it?

2006-05-08 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Title: AD Snapshot Tool (ADST) - how useful is it? Is that tool available only to organizations undergoing an ADRAP? Do you know if it is available by any other means? It sounds interesting enough. Nate From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent:

RE: [ActiveDir] R2 Upgrade or install?

2006-05-01 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
or is fresh. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:ActiveDir- [EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNA Sent: Friday, April 28, 2006 1:18 PM To: ActiveDir@mail.activedir.org

[ActiveDir] R2 Upgrade or install?

2006-04-28 Thread Bahta, Nathaniel V CTR USAF NASIC/SCNA
Hey all, I am having a debate and wondering if the following is true: 1)You must upgrade your 2003 servers to SP1 before going to R2. 2)You can upgrade a existing 2003 server to SP1 and then load the components from R2 onto it from R2 disk 2. Or 3)Must you load the R2 disk 1 2003 Operating